Function at 0x4ded60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4e0f00
sub esp, 0x64
movzx eax, word [esp + 0x70]
test ax, ax
je 0x4e0ed9
lea eax, [0x638760]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
movzx ecx, word [eax]
mov word [esp], cx
call fcn.00409480
lea eax, [0x638760]
mov dword [esp], eax
call fcn.004bf680
mov eax, dword [esp + 8]
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4e0e84
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x14], ebp
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4deebd
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4dee60
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x67cfca]
mov dword [esp], eax
mov dword [esp + 4], 0x29
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c8b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x38]
movzx ecx, word [eax]
cmp cx, 0x10b
je 0x4dfeb6
cmp cx, 0x20b
jne 0x4dfe33
lea eax, [0x664d60]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x3c], eax
lea ecx, [0x664d60]
mov dword [esp], ecx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x664d60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004bf680
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
lea ecx, [0x633a00]
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
lea ebx, [edx + 0x70]
mov dword [esp + 0x34], ebx
mov dword [esp + 4], ebx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x633a00]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004bf680
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 8]
mov dword [esp + 0x24], eax
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4dfd85
mov eax, dword [esp + 0x38]
movzx eax, word [eax]
mov ecx, dword [esp + 0x3c]
mov word [ecx], ax
lea eax, [0x640a60]
mov dword [esp], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 2]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4defe9
mov edx, 1
jmp 0x4df055
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb60]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 3]
mov dword [esp + 0x14], ebp
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df063
mov edx, 1
jmp 0x4df141
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 4]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df0d5
mov edx, 1
jmp 0x4df141
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 8]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df14f
mov edx, 1
jmp 0x4df22d
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0xc]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df1c1
mov edx, 1
jmp 0x4df22d
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x10]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df23b
mov edx, 1
jmp 0x4df319
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x14]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df2ad
mov edx, 1
jmp 0x4df319
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb20]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x18]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df327
mov edx, 1
jmp 0x4df405
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x20]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df399
mov edx, 1
jmp 0x4df405
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x24]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df413
mov edx, 1
jmp 0x4df4f1
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x28]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df485
mov edx, 1
jmp 0x4df4f1
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2a]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df4ff
mov edx, 1
jmp 0x4df5dd
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2c]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df571
mov edx, 1
jmp 0x4df5dd
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2e]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df5eb
mov edx, 1
jmp 0x4df6c9
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x30]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df65d
mov edx, 1
jmp 0x4df6c9
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x32]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df6d7
mov edx, 1
jmp 0x4df7b5
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x34]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df749
mov edx, 1
jmp 0x4df7b5
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x38]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df7c3
mov edx, 1
jmp 0x4df8a1
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x3c]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df835
mov edx, 1
jmp 0x4df8a1
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x40]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df8af
mov edx, 1
jmp 0x4df98d
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x44]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4df921
mov edx, 1
jmp 0x4df98d
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 0x46]
mov dword [esp + 0x14], ebp
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4df99b
mov edx, 1
jmp 0x4dfa79
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb20]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x48]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4dfa0d
mov edx, 1
jmp 0x4dfa79
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb20]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x50]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4dfa87
mov edx, 1
jmp 0x4dfb65
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb20]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x58]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4dfaf9
mov edx, 1
jmp 0x4dfb65
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb20]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 0x60]
mov dword [esp + 0x14], ebp
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4dfb73
mov edx, 1
jmp 0x4dfc51
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x68]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4dfbe5
mov edx, 1
jmp 0x4dfc51
lea eax, [0x640a60]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea ecx, [0x8939c0]
mov dword [esp + 0xc], ecx
lea ecx, [0x62cae0]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + 0x6c]
mov dword [esp + 0x14], edx
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4dfcd1
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4dfc74
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x67cfa1]
mov dword [esp], eax
mov dword [esp + 4], 0x29
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c8b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
movzx edx, word [esp + 0x70]
mov ebx, dword [esp + 0x24]
sub edx, ebx
mov word [esp + 8], dx
mov dword [esp + 0xc], ecx
call fcn.004e0f10
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4dfd66
cmp ebp, 0x10
jl 0x4dfd22
mov ebp, 0x10
mov eax, dword [esp + 0x34]
cmp ebx, eax
je 0x4dfd3d
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ebp, 3
mov dword [esp + 8], ebp
call fcn.00464010
lea eax, [0x6273e0]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
add esp, 0x64
ret
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov word [esp], cx
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x638760]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.004094f0
mov eax, dword [esp + 4]
lea ecx, [0x637ee0]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x681c91]
mov dword [esp], eax
mov dword [esp + 4], 0x4c
lea eax, [esp + 0x54]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c8b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
movzx eax, word [eax]
mov word [esp], ax
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x638760]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
lea eax, [0x67dd38]
mov dword [esp], eax
mov dword [esp + 4], 0x2c
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c8b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
lea eax, [0x6652a0]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x40], eax
lea ecx, [0x6652a0]
mov dword [esp], ecx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x6652a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004bf680
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
lea ecx, [0x633a00]
mov dword [esp], ecx
mov edx, dword [esp + 0x40]
lea ebx, [edx + 0x60]
mov dword [esp + 0x30], ebx
mov dword [esp + 4], ebx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x633a00]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004bf680
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 8]
mov dword [esp + 0x28], eax
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4e0dd6
mov eax, dword [esp + 0x38]
movzx eax, word [eax]
mov ecx, dword [esp + 0x40]
mov word [ecx], ax
lea eax, [0x640a60]
mov dword [esp], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb60]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 2]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4dffc8
mov edx, 1
jmp 0x4e00a6
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cb60]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
lea ebp, [ebx + 3]
mov dword [esp + 0x14], ebp
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e003a
mov edx, 1
jmp 0x4e00a6
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 4]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e00b4
mov edx, 1
jmp 0x4e0192
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 8]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e0126
mov edx, 1
jmp 0x4e0192
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0xc]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e01a0
mov edx, 1
jmp 0x4e027e
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x10]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e0212
mov edx, 1
jmp 0x4e027e
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x14]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e028c
mov edx, 1
jmp 0x4e036a
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x18]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e02fe
mov edx, 1
jmp 0x4e036a
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x1c]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0378
mov edx, 1
jmp 0x4e0456
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x20]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e03ea
mov edx, 1
jmp 0x4e0456
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x24]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0464
mov edx, 1
jmp 0x4e0542
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x28]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e04d6
mov edx, 1
jmp 0x4e0542
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2a]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0550
mov edx, 1
jmp 0x4e062e
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2c]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e05c2
mov edx, 1
jmp 0x4e062e
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2e]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e063c
mov edx, 1
jmp 0x4e071a
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x30]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e06ae
mov edx, 1
jmp 0x4e071a
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x32]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0728
mov edx, 1
jmp 0x4e0806
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x34]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e079a
mov edx, 1
jmp 0x4e0806
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x38]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0814
mov edx, 1
jmp 0x4e08f2
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x3c]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e0886
mov edx, 1
jmp 0x4e08f2
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x40]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0900
mov edx, 1
jmp 0x4e09de
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x44]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e0972
mov edx, 1
jmp 0x4e09de
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62caa0]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
lea ebp, [ebx + 0x46]
mov dword [esp + 0x14], ebp
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e09ec
mov edx, 1
jmp 0x4e0aca
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x48]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e0a5e
mov edx, 1
jmp 0x4e0aca
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x4c]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0ad8
mov edx, 1
jmp 0x4e0bb6
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x50]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e0b4a
mov edx, 1
jmp 0x4e0bb6
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x54]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0bc4
mov edx, 1
jmp 0x4e0ca2
lea eax, [0x640a60]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea edx, [0x8939c0]
mov dword [esp + 0xc], edx
lea ebx, [0x62cae0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x58]
mov dword [esp + 0x14], esi
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4e0c36
mov edx, 1
jmp 0x4e0ca2
lea eax, [0x640a60]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x6d05e8]
mov dword [esp + 8], ecx
lea ecx, [0x8939c0]
mov dword [esp + 0xc], ecx
lea ecx, [0x62cae0]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x40]
lea edx, [ecx + 0x5c]
mov dword [esp + 0x14], edx
call fcn.004be310
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4e0d22
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4e0cc5
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x67cac0]
mov dword [esp], eax
mov dword [esp + 4], 0x28
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c8b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x5c]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
movzx edx, word [esp + 0x70]
mov ebx, dword [esp + 0x28]
sub edx, ebx
mov word [esp + 8], dx
mov dword [esp + 0xc], ecx
call fcn.004e0f10
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4e0db7
cmp ebp, 0x10
jl 0x4e0d73
mov ebp, 0x10
mov eax, dword [esp + 0x30]
cmp ebx, eax
je 0x4e0d8e
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ebp, 3
mov dword [esp + 8], ebp
call fcn.00464010
lea eax, [0x6273a0]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
add esp, 0x64
ret
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov word [esp], cx
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x638760]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.004094f0
mov eax, dword [esp + 4]
lea ecx, [0x637ee0]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x681b66]
mov dword [esp], eax
mov dword [esp + 4], 0x4a
lea eax, [esp + 0x54]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c8b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
lea eax, [0x680c29]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004c8b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
call fcn.00462270
jmp fcn.004ded60