Function at 0x4e99e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98cddc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x208]
cmp eax, dword [ecx + 8]
jbe 0x4ed73f
sub esp, 0x288
mov ebx, dword [esp + 0x28c]
mov ebp, dword [ebx + 4]
cmp ebp, 1
ja 0x4e9ba1
test ebp, ebp
jne 0x4e9a58
mov eax, dword [ebx + 0x50]
test eax, eax
jne 0x4e9a2c
mov eax, dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x28]
xor edx, edx
jmp 0x4ed624
mov eax, dword [0x98d0b8]
test eax, eax
je 0x4e9a40
mov eax, dword [ebx + 0x58]
call fcn.00471ab0
mov dword [edi], eax
lea eax, [0x74d2d4]
mov dword [ebx + 0x58], eax
mov byte [esp + 0x290], 0
add esp, 0x288
ret
mov eax, dword [ebx + 0x2c]
test eax, eax
je 0x4e9a68
mov ecx, dword [ebx + 0x28]
mov eax, dword [ecx + eax*4 - 4]
jmp 0x4e9a6a
xor eax, eax
mov ecx, dword [eax + 0x18]
mov edx, dword [ebx + 0x10]
mov ebp, dword [ebx + 0xc]
cmp ecx, 0x47003
je 0x4e9a83
cmp ecx, 0x4a907
jne 0x4e9ab8
mov eax, dword [eax + 4]
test eax, eax
jne 0x4e9ab8
test edx, edx
je 0x4e9aa1
cmp byte [ebp], 0xd
jne 0x4e9aa1
dec edx
mov eax, edx
neg eax
sar eax, 0x1f
and eax, 1
add ebp, eax
test edx, edx
je 0x4e9ab8
cmp byte [ebp], 0xa
jne 0x4e9ab8
dec edx
mov eax, edx
neg eax
sar eax, 0x1f
and eax, 1
add ebp, eax
mov dword [esp], ebp
mov dword [esp + 4], edx
lea eax, [0x7a3640]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xffffffff
call fcn.004e2120
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4e9b92
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10c], eax
mov ecx, dword [esp + 0x28c]
mov dword [esp], ecx
call fcn.004e7a00
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
call fcn.004e73d0
mov eax, dword [esp + 0x28c]
movzx ecx, byte [eax + 0x49]
test cl, cl
je 0x4ebbf6
mov eax, dword [esp + 0x10c]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
lea eax, [0x729ddb]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
call fcn.004e1d20
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4ebbf6
mov eax, dword [esp + 0x28c]
mov byte [eax + 0x49], 0
jmp 0x4ebbf6
mov byte [esp + 0x290], 1
add esp, 0x288
ret
cmp ebp, 2
jne 0x4eb3e0
mov ebp, dword [ebx + 8]
cmp ebp, 0x1ab03
ja 0x4ea488
cmp ebp, 0x8908
ja 0x4e9e35
cmp ebp, 0x3206
ja 0x4e9cb7
cmp ebp, 0xc01
ja 0x4e9c3a
cmp ebp, 0x202
ja 0x4e9c11
cmp ebp, 1
jne 0x4e9bf4
mov ecx, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
lea ebp, [ecx - 1]
jmp 0x4ed3a6
cmp ebp, 0x101
je 0x4eacc1
cmp ebp, 0x202
je 0x4eb0bf
jmp 0x4eb361
cmp ebp, 0x601
je 0x4eacc1
cmp ebp, 0xb01
je 0x4eacc1
cmp ebp, 0xc01
je 0x4eb296
jmp 0x4eb361
cmp ebp, 0x1303
jbe 0x4e9c8e
cmp ebp, 0x2705
jbe 0x4e9c71
cmp ebp, 0x2804
jne 0x4e9c60
nop
mov ecx, dword [ebx + 0x28]
mov edx, dword [ebx + 0x2c]
xor eax, eax
jmp 0x4ed079
cmp ebp, 0x3206
je 0x4eb0bf
jmp 0x4eb361
cmp ebp, 0x2501
je 0x4eacc1
cmp ebp, 0x2705
je 0x4ebbf6
jmp 0x4eb361
cmp ebp, 0xc05
je 0x4eade6
cmp ebp, 0x1004
je 0x4eb296
cmp ebp, 0x1303
je 0x4eb296
jmp 0x4eb361
cmp ebp, 0x5604
ja 0x4e9dba
cmp ebp, 0x3b04
jbe 0x4e9cfd
cmp ebp, 0x3b08
je 0x4eb26f
cmp ebp, 0x3f04
je 0x4eacc1
cmp ebp, 0x5604
jne 0x4eb361
nop
mov edx, dword [ebx + 0x2c]
mov ebp, dword [ebx + 0x28]
xor eax, eax
jmp 0x4ecd5f
cmp ebp, 0x3704
je 0x4e9d22
cmp ebp, 0x3a02
je 0x4ea21d
cmp ebp, 0x3b04
je 0x4eb26f
jmp 0x4eb361
mov dword [esp], ebx
call fcn.004e7a00
mov dword [esp + 0x9c], 0x3704
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
mov dword [esp + 4], 0
lea ecx, [esp + 0x9c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
cmp dword [esp + 0x14], 0xffffffff
je 0x4e9da6
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
mov dword [esp + 4], 0x3704
lea ecx, [0x728535]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
call fcn.004ed750
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
call fcn.004e7a00
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
call fcn.004e7590
jmp 0x4ebbf6
cmp ebp, 0x6c07
jbe 0x4e9e04
cmp ebp, 0x6e05
ja 0x4e9de7
cmp ebp, 0x6e02
je 0x4eacc1
cmp ebp, 0x6e05
je 0x4eb0bf
jmp 0x4eb361
cmp ebp, 0x7207
je 0x4eb296
cmp ebp, 0x8908
je 0x4eb26f
jmp 0x4eb361
cmp ebp, 0x5f08
je 0x4eace9
cmp ebp, 0x6802
je 0x4eacc1
cmp ebp, 0x6c07
jne 0x4eb361
mov dword [esp], ebx
call fcn.004e6e10
jmp 0x4ebbf6
cmp ebp, 0x11005
ja 0x4ea0f0
cmp ebp, 0xb202
ja 0x4ea07d
cmp ebp, 0x9202
jbe 0x4e9e86
cmp ebp, 0x9303
je 0x4eb296
cmp ebp, 0xa702
je 0x4eb296
cmp ebp, 0xb202
jne 0x4eb361
mov byte [ebx + 0x49], 0
mov edx, dword [ebx + 0x2c]
dec edx
jmp 0x4eca90
cmp ebp, 0x8b05
je 0x4ebbf6
cmp ebp, 0x8b08
jne 0x4ea06c
movzx eax, byte [ebx + 0x49]
test al, al
je 0x4ea05d
cmp dword [ebx + 0x2c], 2
jl 0x4ea05d
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 4]
cmp dword [eax + 0x18], 0x2804
jne 0x4ea05d
mov ebp, dword [eax]
test ebp, ebp
je 0x4e9f9d
nop
cmp dword [ebp + 4], eax
jne 0x4e9ef8
mov esi, dword [0x98d0b8]
mov edi, dword [eax + 0x10]
test esi, esi
je 0x4e9ef5
mov ecx, edi
call fcn.00471ac0
mov dword [edi], ecx
mov esi, dword [ebp + 4]
mov dword [edi + 4], esi
mov edi, ecx
mov dword [ebp + 4], edi
mov esi, dword [eax + 0x10]
test esi, esi
je 0x4e9f1c
mov edi, dword [0x98d0b8]
mov ecx, dword [eax + 0xc]
test edi, edi
je 0x4e9f19
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [esi + 0xc]
mov dword [edi + 4], edx
mov dword [esi + 0xc], ecx
cmp dword [ebp + 8], eax
jne 0x4e9f42
mov esi, dword [0x98d0b8]
mov edi, dword [eax + 0xc]
test esi, esi
je 0x4e9f3f
mov ecx, edi
call fcn.00471ac0
mov dword [edi], ecx
mov esi, dword [ebp + 8]
mov dword [edi + 4], esi
mov edi, ecx
mov dword [ebp + 8], edi
mov ebp, dword [eax + 0xc]
test ebp, ebp
je 0x4e9f6a
mov esi, dword [0x98d0b8]
mov edi, dword [eax + 0x10]
test esi, esi
je 0x4e9f67
mov ecx, edi
call fcn.00471ac0
mov dword [edi], ecx
mov esi, dword [ebp + 0x10]
mov dword [edi + 4], esi
mov edi, ecx
mov dword [ebp + 0x10], edi
mov ebp, dword [0x98d0b8]
test ebp, ebp
je 0x4e9f89
mov ebp, dword [eax]
call fcn.00471ad0
mov dword [edi], ebp
mov ebp, dword [eax + 0xc]
mov dword [edi + 4], ebp
mov ebp, dword [eax + 0x10]
mov dword [edi + 8], ebp
mov dword [eax], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
cmp dword [ebx + 0x30], 1
jb 0x4eca83
mov dword [ebx + 0x2c], 1
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4e9fef
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea012
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x4ea034
mov eax, dword [esp + 0x28c]
jmp 0x4ea045
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x58]
call fcn.00471ab0
mov dword [edi], ecx
lea ecx, [0x74d2b0]
mov dword [eax + 0x58], ecx
mov byte [esp + 0x290], 1
add esp, 0x288
ret
mov byte [esp + 0x290], 1
add esp, 0x288
ret
cmp ebp, 0x9202
je 0x4ebbf6
jmp 0x4eb361
cmp ebp, 0xd206
ja 0x4ea0ae
cmp ebp, 0xbb06
je 0x4eb296
cmp ebp, 0xcc02
je 0x4ebbf6
cmp ebp, 0xd206
je 0x4eacc1
jmp 0x4eb361
cmp ebp, 0xf606
ja 0x4ea0d3
cmp ebp, 0xf505
je 0x4ebbf6
cmp ebp, 0xf606
je 0x4eb296
jmp 0x4eb361
cmp ebp, 0x10705
je 0x4eb296
cmp ebp, 0x11005
je 0x4eb26f
jmp 0x4eb361
cmp ebp, 0x16b03
jbe 0x4ea2aa
cmp ebp, 0x1870a
jbe 0x4ea281
cmp ebp, 0x19a02
ja 0x4ea215
cmp ebp, 0x19106
je 0x4ea12d
cmp ebp, 0x19a02
je 0x4ea60b
jmp 0x4eb361
mov dword [esp + 0xa0], 0x19106
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0xa0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ea183
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4eca7e
mov dword [eax + 0x2c], ecx
jmp 0x4ea18a
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
call fcn.004e7a00
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea1d3
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea1f6
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov byte [eax + 0x49], 0
jmp 0x4ebbf6
cmp ebp, 0x19a03
jne 0x4ea270
mov dword [esp + 0x8c], 0xfb04
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x8c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
cmp dword [esp + 0x14], 0xffffffff
je 0x4ec958
mov ebx, dword [esp + 0x28c]
mov ecx, dword [ebx + 0x2c]
lea ebp, [ecx - 1]
jmp 0x4ec9d0
cmp ebp, 0x1ab03
je 0x4ebbf6
jmp 0x4eb361
cmp ebp, 0x17003
je 0x4eacc1
cmp ebp, 0x17404
je 0x4eb26f
cmp ebp, 0x1870a
je 0x4eb296
jmp 0x4eb361
cmp ebp, 0x15602
ja 0x4ea358
cmp ebp, 0x12f03
je 0x4ea2db
cmp ebp, 0x13702
je 0x4eb296
cmp ebp, 0x15602
je 0x4ebbf6
jmp 0x4eb361
mov dword [esp + 0x90], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0x90]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ea331
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec953
mov dword [eax + 0x2c], ecx
jmp 0x4ea338
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
call fcn.004e7a00
mov eax, dword [esp + 0x28c]
mov byte [eax + 0x49], 0
mov dword [esp], eax
call fcn.004e6e10
jmp 0x4ebbf6
cmp ebp, 0x15c02
ja 0x4ea46b
cmp ebp, 0x15702
je 0x4ea37d
cmp ebp, 0x15c02
je 0x4eaf56
jmp 0x4eb361
mov dword [esp + 0x94], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0x94]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ea3d1
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec94e
mov dword [eax + 0x2c], ecx
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea412
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea435
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x2c]
lea edx, [ecx - 1]
nop
cmp ecx, edx
jbe 0x4ec947
mov dword [eax + 0x2c], edx
nop
mov byte [eax + 0x20], 0
mov byte [eax + 0x49], 0
jmp 0x4ebbf6
cmp ebp, 0x15e07
je 0x4eb26f
cmp ebp, 0x16b03
je 0x4eb296
jmp 0x4eb361
cmp ebp, 0x33104
ja 0x4ea9b9
cmp ebp, 0x26806
jbe 0x4ea5cf
cmp ebp, 0x30205
ja 0x4ea55c
cmp ebp, 0x2d702
ja 0x4ea4f1
cmp ebp, 0x26e04
jne 0x4ea4d4
mov eax, dword [ebx + 0x44]
test eax, eax
je 0x4ec7ee
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
xor edx, edx
jmp 0x4ec91c
cmp ebp, 0x2ca06
je 0x4eb296
cmp ebp, 0x2d702
je 0x4ea9ed
jmp 0x4eb361
cmp ebp, 0x2de02
je 0x4eaf56
cmp ebp, 0x2fc06
je 0x4ea54b
cmp ebp, 0x30205
jne 0x4eb361
mov dword [ebx + 8], 0x30703
mov dword [ebx + 0x10], 3
mov eax, dword [0x98d0b8]
test eax, eax
je 0x4ea533
mov eax, dword [ebx + 0xc]
call fcn.00471ab0
mov dword [edi], eax
lea eax, [0x747fd3]
mov dword [ebx + 0xc], eax
mov byte [esp + 0x290], 0
add esp, 0x288
ret
mov byte [ebx + 0x49], 0
mov dword [esp], ebx
call fcn.004e6e10
jmp 0x4ebbf6
cmp ebp, 0x31906
ja 0x4ea58d
cmp ebp, 0x30703
je 0x4eb0bf
cmp ebp, 0x30d02
je 0x4eaf56
cmp ebp, 0x31906
je 0x4ea68c
jmp 0x4eb361
cmp ebp, 0x32e04
ja 0x4ea5b2
cmp ebp, 0x32707
je 0x4ea68c
cmp ebp, 0x32e04
je 0x4eac29
jmp 0x4eb361
cmp ebp, 0x33005
je 0x4ebbf6
cmp ebp, 0x33104
je 0x4ebbf6
jmp 0x4eb361
cmp ebp, 0x21806
jbe 0x4ea7c6
cmp ebp, 0x22e0a
jbe 0x4ea79d
cmp ebp, 0x23c02
ja 0x4ea674
cmp ebp, 0x23107
je 0x4ebbf6
cmp ebp, 0x23c02
jne 0x4eb361
mov dword [esp + 0x88], 0xfb04
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x88]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
cmp dword [esp + 0x14], 0xffffffff
je 0x4ec661
mov dword [esp + 0x134], 3
lea ebx, [0x727f4e]
mov dword [esp + 0x130], ebx
mov ebx, dword [esp + 0x28c]
mov ebp, dword [ebx + 0x2c]
dec ebp
jmp 0x4ec6d9
cmp ebp, 0x24806
je 0x4eb296
cmp ebp, 0x26806
jne 0x4eb361
mov dword [esp], ebx
call fcn.004e7a00
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea6d5
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea6f8
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x3c]
mov edx, dword [eax + 0x38]
inc edx
mov ebx, dword [eax + 0x34]
cmp ecx, edx
jae 0x4ea772
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x703880]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x28c]
mov dword [ebx + 0x3c], eax
mov eax, dword [0x98d0b8]
test eax, eax
je 0x4ea76b
call fcn.00471ac0
mov dword [edi], ecx
mov eax, dword [ebx + 0x34]
mov dword [edi + 4], eax
mov dword [ebx + 0x34], ecx
mov eax, ebx
mov ebx, ecx
mov dword [eax + 0x38], edx
mov ecx, dword [0x98d0b8]
test ecx, ecx
je 0x4ea78a
mov ecx, dword [ebx + edx*4 - 4]
call fcn.00471ab0
mov dword [edi], ecx
lea ecx, [0x969ca0]
mov dword [ebx + edx*4 - 4], ecx
mov byte [eax + 0x49], 0
jmp 0x4ebbf6
cmp ebp, 0x22006
je 0x4eb296
cmp ebp, 0x22608
je 0x4eb296
cmp ebp, 0x22e0a
je 0x4eb296
jmp 0x4eb361
cmp ebp, 0x1ba05
ja 0x4ea8c2
cmp ebp, 0x1ab08
je 0x4ebbf6
cmp ebp, 0x1b209
je 0x4ea7f7
cmp ebp, 0x1ba05
je 0x4eade6
jmp 0x4eb361
mov dword [esp + 0xa4], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0xa4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ea84b
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec65c
mov dword [eax + 0x2c], ecx
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea88b
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea8ae
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
cmp ebp, 0x20605
je 0x4eacc1
cmp ebp, 0x21608
jne 0x4ea9a8
movzx eax, byte [ebx + 0x48]
test al, al
jne 0x4ea991
mov dword [esp], ebx
call fcn.004e7a00
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea92f
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ea952
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov eax, dword [eax]
mov dword [eax + 0x60], 0
mov ecx, dword [0x98d0b8]
test ecx, ecx
je 0x4ea985
mov ecx, dword [eax + 0x5c]
call fcn.00471ab0
mov dword [edi], ecx
mov dword [eax + 0x5c], 0
jmp 0x4ebbf6
mov dword [esp], ebx
call fcn.004e6e10
mov byte [esp + 0x290], 1
add esp, 0x288
ret
cmp ebp, 0x21806
je 0x4eb26f
jmp 0x4eb361
cmp ebp, 0x56807
jbe 0x4eadaa
cmp ebp, 0x64d02
ja 0x4eac0d
cmp ebp, 0x5c504
jbe 0x4eaad5
cmp ebp, 0x63c06
jbe 0x4eaa0b
cmp ebp, 0x64b02
jne 0x4ea9fa
mov byte [ebx + 0x49], 0
mov edx, dword [ebx + 0x2c]
dec edx
jmp 0x4ec381
cmp ebp, 0x64d02
je 0x4eaf56
jmp 0x4eb361
cmp ebp, 0x5e602
je 0x4eb296
cmp ebp, 0x63c06
jne 0x4eb361
mov dword [esp], ebx
call fcn.004e7a00
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eaa6c
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eaa8f
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov byte [eax + 0x49], 0
mov ecx, dword [0x98d0b8]
test ecx, ecx
je 0x4eaabd
mov ecx, dword [eax + 0x58]
call fcn.00471ab0
mov dword [edi], ecx
lea ecx, [0x74d2c4]
mov dword [eax + 0x58], ecx
mov byte [esp + 0x290], 1
add esp, 0x288
ret
cmp ebp, 0x57c03
je 0x4eb0bf
cmp ebp, 0x59505
jne 0x4eabfc
movzx eax, byte [ebx + 0x61]
test al, al
jne 0x4eab52
mov dword [esp + 0x98], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0x98]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4eab4b
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec37b
mov dword [eax + 0x2c], ecx
jmp 0x4eab52
mov eax, dword [esp + 0x28c]
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eab93
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eabb6
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov byte [eax + 0x49], 0
mov ecx, dword [0x98d0b8]
test ecx, ecx
je 0x4eabe4
mov ecx, dword [eax + 0x58]
call fcn.00471ab0
mov dword [edi], ecx
lea ecx, [0x74d2d0]
mov dword [eax + 0x58], ecx
mov byte [esp + 0x290], 1
add esp, 0x288
ret
cmp ebp, 0x5c504
je 0x4eacc1
jmp 0x4eb361
cmp ebp, 0x6f307
jbe 0x4eacb9
cmp ebp, 0x70407
jbe 0x4eac9c
cmp ebp, 0x70e03
jne 0x4eac8b
mov dword [esp], ebx
call fcn.004e7a00
mov eax, dword [esp + 0x28c]
cmp dword [eax + 8], 0x32e04
jne 0x4eac66
mov ecx, dword [0x96c9e0]
mov dword [esp + 0x100], ecx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x118], edx
mov ebx, dword [eax + 0x18]
mov dword [esp + 0x40], ebx
xor ebp, ebp
jmp 0x4ec2de
mov ecx, dword [0x96c9e4]
mov dword [esp + 0xfc], ecx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x114], edx
mov ebx, dword [eax + 0x18]
mov dword [esp + 0x3c], ebx
xor ebp, ebp
jmp 0x4ec126
cmp ebp, 0x71408
je 0x4eb26f
jmp 0x4eb361
cmp ebp, 0x6ff05
je 0x4eb26f
cmp ebp, 0x70407
je 0x4eb296
jmp 0x4eb361
cmp ebp, 0x6dd06
jne 0x4eacdd
mov dword [esp], ebx
call fcn.004e7a00
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
call fcn.004e7590
jmp 0x4ebbf6
cmp ebp, 0x6e306
jne 0x4ead99
mov ecx, dword [ebx + 0x2c]
test ecx, ecx
je 0x4eacf9
mov edx, dword [ebx + 0x28]
mov edx, dword [edx + ecx*4 - 4]
jmp 0x4eacfb
xor edx, edx
test edx, edx
jne 0x4ead02
mov edx, dword [ebx + 0x24]
cmp dword [edx + 0x18], 0x6e306
jne 0x4ead1a
lea eax, [ecx - 1]
nop
cmp ecx, eax
jbe 0x4ec106
mov dword [ebx + 0x2c], eax
mov dword [esp], ebx
call fcn.004e7a00
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ead62
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ead85
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
cmp ebp, 0x6f307
je 0x4eb296
jmp 0x4eb361
cmp ebp, 0x37806
ja 0x4eb08f
cmp ebp, 0x34f02
jbe 0x4eaf36
cmp ebp, 0x35208
je 0x4eae7b
cmp ebp, 0x35604
je 0x4eb0bf
cmp ebp, 0x37806
jne 0x4eb361
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eae27
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eae4a
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x2c]
lea edx, [ecx - 1]
nop
cmp ecx, edx
jbe 0x4ec0ff
mov dword [eax + 0x2c], edx
mov byte [eax + 0x20], 0
jmp 0x4ebbf6
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eaebc
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eaedf
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x5c]
nop
test ecx, ecx
jne 0x4ec0e7
mov ecx, dword [0x98d0b8]
mov edx, dword [eax + 0x58]
test ecx, ecx
je 0x4eaf21
call fcn.00471ad0
mov dword [edi], edx
mov ecx, dword [eax + 0x5c]
mov dword [edi + 4], ecx
mov ecx, dword [eax + 0x58]
mov dword [edi + 8], ecx
mov dword [eax + 0x5c], edx
mov byte [eax + 0x49], 0
lea ecx, [0x74d2dc]
mov dword [eax + 0x58], ecx
jmp 0x4ebbf6
cmp ebp, 0x33106
je 0x4eb296
cmp ebp, 0x34502
je 0x4eaf56
cmp ebp, 0x34f02
jne 0x4eb361
mov dword [esp + 0xb8], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0xb8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4eafac
mov ebx, dword [esp + 0x28c]
mov edx, dword [ebx + 0x30]
cmp edx, ecx
jb 0x4ec0e2
mov dword [ebx + 0x2c], ecx
jmp 0x4eafb3
mov ebx, dword [esp + 0x28c]
mov ecx, dword [ebx + 0x2c]
test ecx, ecx
je 0x4eafc3
mov edx, dword [ebx + 0x28]
mov edx, dword [edx + ecx*4 - 4]
jmp 0x4eafc5
xor edx, edx
test edx, edx
jne 0x4eafcc
mov edx, dword [ebx + 0x24]
mov edx, dword [edx + 0x18]
cmp edx, 0x30d02
ja 0x4eaff1
cmp edx, 0x15c02
je 0x4eb009
cmp edx, 0x2de02
je 0x4eb009
cmp edx, 0x30d02
je 0x4eb009
jmp 0x4eb018
cmp edx, 0x34502
je 0x4eb009
cmp edx, 0x34f02
je 0x4eb009
cmp edx, 0x64d02
jne 0x4eb018
lea eax, [ecx - 1]
nop
cmp ecx, eax
jbe 0x4ec0dd
mov dword [ebx + 0x2c], eax
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb058
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb07b
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
cmp ebp, 0x44b05
ja 0x4eb170
cmp ebp, 0x38704
je 0x4eb296
cmp ebp, 0x3fc07
je 0x4eb296
cmp ebp, 0x44b05
jne 0x4eb361
mov dword [esp], ebx
call fcn.004e7a00
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb108
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb12b
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x2c]
lea edx, [ecx - 1]
nop
cmp ecx, edx
jbe 0x4ec0d6
mov dword [eax + 0x2c], edx
nop
mov byte [eax + 0x20], 0
cmp dword [eax + 8], 0x44b05
jne 0x4ec038
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
jmp 0x4ec04c
cmp ebp, 0x4a907
ja 0x4eb267
cmp ebp, 0x47003
je 0x4eb190
cmp ebp, 0x4a907
jne 0x4eb361
mov dword [esp + 0xb4], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0xb4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4eb1e4
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec033
mov dword [eax + 0x2c], ecx
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb225
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb248
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov byte [eax + 0x49], 0
jmp 0x4ebbf6
cmp ebp, 0x4b804
jne 0x4eb28a
mov dword [esp], ebx
call fcn.004e88d0
movzx eax, byte [esp + 4]
mov byte [esp + 0x290], al
add esp, 0x288
ret
cmp ebp, 0x56807
jne 0x4eb361
mov dword [esp + 0xbc], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0xbc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4eb2ea
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec02e
mov dword [eax + 0x2c], ecx
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb32a
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb34d
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
mov dword [esp], ebx
call fcn.004e7a00
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb3a9
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4eb3cc
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
cmp ebp, 3
jne 0x4ebba8
mov eax, dword [ebx + 8]
cmp eax, 0x19106
jbe 0x4eb6b5
cmp eax, 0x33106
ja 0x4eb54f
cmp eax, 0x26e04
ja 0x4eb47c
cmp eax, 0x22608
jbe 0x4eb456
cmp eax, 0x24806
jbe 0x4eb43b
cmp eax, 0x26806
je 0x4eb4ac
cmp eax, 0x26e04
jne 0x4ebb8c
nop
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
xor edx, edx
jmp 0x4ebc4a
cmp eax, 0x22e0a
je 0x4ebb39
cmp eax, 0x24806
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x20605
je 0x4ebb0c
cmp eax, 0x22006
je 0x4ebb39
cmp eax, 0x22608
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x2de02
jbe 0x4eb529
cmp eax, 0x31906
ja 0x4eb4a5
cmp eax, 0x30d02
je 0x4eba74
cmp eax, 0x31906
je 0x4eb4ac
jmp 0x4ebb8c
cmp eax, 0x32707
jne 0x4eb519
mov dword [esp + 0x4c], 0
mov eax, dword [ebx + 8]
mov dword [esp + 0x4c], eax
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4eb506
mov ebx, dword [esp + 0x28c]
mov edx, dword [ebx + 0x30]
cmp edx, ecx
jb 0x4ebc44
mov dword [ebx + 0x2c], ecx
cmp ecx, 0xffffffff
jmp 0x4eb50d
mov ebx, dword [esp + 0x28c]
je 0x4ebbf6
nop
jmp 0x4ebc1e
cmp eax, 0x33106
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x2ca06
je 0x4ebb39
cmp eax, 0x2d702
je 0x4eb5f4
cmp eax, 0x2de02
je 0x4eba74
jmp 0x4ebb8c
cmp eax, 0x56807
ja 0x4eb5c0
cmp eax, 0x38704
ja 0x4eb583
cmp eax, 0x34502
je 0x4eba74
cmp eax, 0x34f02
je 0x4eba74
cmp eax, 0x38704
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x47003
ja 0x4eb5a5
cmp eax, 0x3fc07
je 0x4ebb39
cmp eax, 0x47003
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x4a907
je 0x4ebb39
cmp eax, 0x56807
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x64d02
ja 0x4eb662
cmp eax, 0x5e602
ja 0x4eb5ed
cmp eax, 0x5c504
je 0x4ebb0c
cmp eax, 0x5e602
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x64b02
jne 0x4eb652
mov dword [esp + 0x68], 0
mov eax, dword [ebx + 8]
mov dword [esp + 0x68], eax
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x68]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ebbf6
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ebc19
mov dword [eax + 0x2c], ecx
jmp 0x4ebbf6
cmp eax, 0x64d02
je 0x4eba74
jmp 0x4ebb8c
cmp eax, 0x6f307
ja 0x4eb684
cmp eax, 0x6dd06
je 0x4ebb0c
cmp eax, 0x6f307
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x70407
je 0x4ebb39
cmp eax, 0x71408
jne 0x4ebb8c
mov dword [esp], ebx
call fcn.004e88d0
movzx eax, byte [esp + 4]
mov byte [esp + 0x290], al
add esp, 0x288
ret
cmp eax, 0x6802
ja 0x4eb96a
cmp eax, 0x1004
ja 0x4eb806
cmp eax, 0x202
ja 0x4eb707
cmp eax, 1
je 0x4ebb0c
cmp eax, 0x101
je 0x4ebb0c
cmp eax, 0x202
jne 0x4ebb8c
mov dword [ebx + 4], 2
mov byte [esp + 0x290], 0
add esp, 0x288
ret
cmp eax, 0xb01
ja 0x4eb729
cmp eax, 0x601
je 0x4ebb0c
cmp eax, 0xb01
je 0x4ebb0c
jmp 0x4ebb8c
cmp eax, 0xc01
je 0x4eb740
cmp eax, 0x1004
je 0x4ebb39
jmp 0x4ebb8c
mov dword [esp + 0x74], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
cmp dword [esp + 0x14], 0xffffffff
jne 0x4eb7a8
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 0xc01
lea ecx, [0x747cd8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
call fcn.004f3450
mov dword [esp + 0x70], 0xc01
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
mov dword [esp + 4], 2
lea ecx, [esp + 0x70]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ebbf6
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ebc14
mov dword [eax + 0x2c], ecx
jmp 0x4ebbf6
cmp eax, 0x2804
ja 0x4eb8a5
cmp eax, 0x1303
je 0x4ebb39
cmp eax, 0x2501
je 0x4ebb0c
cmp eax, 0x2804
jne 0x4ebb8c
mov dword [esp + 0x84], 0x2804
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x84]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
cmp dword [esp + 0x14], 0xffffffff
je 0x4ebbf6
mov eax, dword [0x98d0b8]
test eax, eax
jne 0x4eb886
mov eax, dword [esp + 0x28c]
jmp 0x4eb897
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x58]
call fcn.00471ab0
mov dword [edi], ecx
lea ecx, [0x74d284]
mov dword [eax + 0x58], ecx
jmp 0x4ebbf6
cmp eax, 0x3f04
ja 0x4eb8c7
cmp eax, 0x3704
je 0x4ebb0c
cmp eax, 0x3f04
je 0x4ebb0c
jmp 0x4ebb8c
cmp eax, 0x5604
je 0x4eb8de
cmp eax, 0x6802
je 0x4ebb0c
jmp 0x4ebb8c
mov dword [esp + 0x80], 0x2804
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x80]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
cmp dword [esp + 0x14], 0xffffffff
je 0x4eb95b
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0x2804
lea eax, [0x747cf4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.004f3450
mov byte [esp + 0x290], 0
add esp, 0x288
ret
mov byte [esp + 0x290], 1
add esp, 0x288
ret
cmp eax, 0xd206
ja 0x4eba31
cmp eax, 0x9303
ja 0x4eb9a2
cmp eax, 0x6e02
je 0x4ebb0c
cmp eax, 0x7207
je 0x4ebb39
cmp eax, 0x9303
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0xb202
ja 0x4eba16
cmp eax, 0xa702
je 0x4ebb39
cmp eax, 0xb202
jne 0x4ebb8c
mov dword [esp + 0x6c], 0xb202
mov dword [esp], ebx
mov dword [esp + 4], 1
lea eax, [esp + 0x6c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ebbf6
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ebc0f
mov dword [eax + 0x2c], ecx
jmp 0x4ebbf6
cmp eax, 0xbb06
je 0x4ebb39
cmp eax, 0xd206
je 0x4ebb0c
jmp 0x4ebb8c
cmp eax, 0x15c02
ja 0x4ebaf3
cmp eax, 0x10705
ja 0x4eba5e
cmp eax, 0xf606
je 0x4ebb39
cmp eax, 0x10705
je 0x4ebb39
jmp 0x4ebb8c
cmp eax, 0x13702
je 0x4ebb39
cmp eax, 0x15c02
jne 0x4ebb8c
mov dword [esp + 0x50], 0x15c02
mov dword [esp + 0x54], 0x2de02
mov dword [esp + 0x58], 0x30d02
mov dword [esp + 0x5c], 0x34502
mov dword [esp + 0x60], 0x34f02
mov dword [esp + 0x64], 0x64d02
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 6
mov dword [esp + 0x10], 6
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ebbf6
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ebc0a
mov dword [eax + 0x2c], ecx
jmp 0x4ebbf6
cmp eax, 0x17003
ja 0x4ebb2b
cmp eax, 0x16b03
je 0x4ebb39
cmp eax, 0x17003
jne 0x4ebb8c
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.004ed750
jmp 0x4ebbf6
cmp eax, 0x1870a
je 0x4ebb39
cmp eax, 0x19106
jne 0x4ebb8c
mov dword [esp + 0x7c], 0
mov eax, dword [ebx + 8]
mov dword [esp + 0x7c], eax
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ebbf6
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ebc05
mov dword [eax + 0x2c], ecx
jmp 0x4ebbf6
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.004eee70
jmp 0x4ebbf6
cmp ebp, 5
jne 0x4ebbf6
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 4
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ebbe7
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov byte [esp + 0x290], 1
add esp, 0x288
ret
call fcn.00471b70
call fcn.00471b70
call fcn.00471b70
call fcn.00471b70
call fcn.00471b70
mov ecx, dword [ebx + 0x38]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4ebc3f
mov edx, dword [ebx + 0x34]
mov edx, dword [edx + ecx*4 - 4]
mov dword [ebx + 0x38], eax
cmp ecx, 1
je 0x4ebbf6
cmp dword [edx + 0x14], 7
jne 0x4ebc1e
jmp 0x4ebbf6
call fcn.00471b30
call fcn.00471b70
inc edx
cmp edx, ecx
jge 0x4ebcc2
mov ebp, dword [eax + edx*4]
cmp dword [ebp + 0x18], 0x71408
jne 0x4ebc49
mov ebp, dword [ebp + 0x28]
test ebp, ebp
jne 0x4ebc49
mov dword [esp + 0xc0], 0x26e04
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x4ebcb3
mov ebx, dword [esp + 0x28c]
mov ecx, dword [ebx + 0x2c]
nop
lea ebp, [ecx - 1]
jmp 0x4ebf02
mov byte [esp + 0x290], 1
add esp, 0x288
ret
mov eax, dword [0x98d0b8]
mov ecx, dword [ebx + 0x44]
mov dword [esp + 0xf8], ecx
test eax, eax
je 0x4ebce0
mov eax, dword [ebx + 0x44]
call fcn.00471ab0
mov dword [edi], eax
mov dword [ebx + 0x44], 0
mov dword [esp + 0xc0], 0x26e04
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov eax, dword [esp + 0xf8]
test eax, eax
je 0x4ebd53
mov ebx, dword [esp + 0x14]
cmp ebx, 0xffffffff
je 0x4ebd53
mov ebp, dword [esp + 0x28c]
mov ecx, dword [ebp + 0x2c]
cmp ecx, ebx
jbe 0x4ebefa
mov esi, dword [ebp + 0x28]
lea ebx, [esi + ebx*4]
cmp dword [ebx], eax
jne 0x4ebd53
nop
lea ebx, [ecx - 1]
jmp 0x4ebd63
mov byte [esp + 0x290], 1
add esp, 0x288
ret
dec ebx
test ebx, ebx
jl 0x4ebdec
cmp ebx, ecx
jae 0x4ebef3
mov edi, dword [esi + ebx*4]
cmp dword [edi + 0x14], 3
jne 0x4ebdec
mov edi, dword [edi + 0x18]
cmp edi, 0xb202
ja 0x4ebdb3
cmp edi, 0x3a02
ja 0x4ebda1
cmp edi, 0xc01
je 0x4ebd62
cmp edi, 0x3a02
je 0x4ebd62
jmp 0x4ebdec
cmp edi, 0x5f08
je 0x4ebd62
cmp edi, 0xb202
je 0x4ebd62
jmp 0x4ebdec
cmp edi, 0x23c02
ja 0x4ebdd0
lea edx, [edi - 0x19a02]
cmp edx, 1
jbe 0x4ebd62
cmp edi, 0x23c02
je 0x4ebd62
jmp 0x4ebdec
cmp edi, 0x2d702
je 0x4ebd62
cmp edi, 0x64b02
je 0x4ebd62
cmp edi, 0x6e306
je 0x4ebd62
mov edx, dword [ebp + 0x30]
lea ecx, [ebx + 1]
cmp edx, ecx
jb 0x4ebeee
mov dword [ebp + 0x2c], ecx
nop
mov edx, dword [ebp + 0x28]
mov esi, ebx
jmp 0x4ebe06
dec ebx
test ebx, ebx
jl 0x4ebe1b
cmp ebx, ecx
jae 0x4ebee7
lea edi, [edx + ebx*4]
cmp dword [edi], eax
jne 0x4ebe05
jmp 0x4ebe20
mov ebx, 0xffffffff
cmp ebx, 0xffffffff
je 0x4ebbf6
cmp ebx, ecx
ja 0x4ebee0
mov edi, ebx
shl ebx, 2
lea eax, [edi + 1]
mov ebp, dword [ebp + 0x30]
sub ebp, edi
mov dword [esp + 0x48], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebx, ebp
sub esi, edi
add ebx, edx
cmp eax, ecx
ja 0x4ebedb
lea ecx, [0x703880]
mov dword [esp], ecx
mov dword [esp + 4], ebx
lea ecx, [esi + 1]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x48]
dec ecx
neg ecx
shl eax, 2
sar ecx, 0x1f
and eax, ecx
add eax, edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
call fcn.00469900
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x2c]
lea edx, [ecx - 1]
cmp ecx, edx
jbe 0x4ebed4
mov ebx, dword [0x98d0b8]
mov ebp, dword [eax + 0x28]
test ebx, ebx
je 0x4ebeb4
mov ebx, dword [ebp + ecx*4 - 4]
call fcn.00471ab0
mov dword [edi], ebx
mov dword [ebp + ecx*4 - 4], 0
mov ebx, dword [eax + 0x30]
cmp ebx, edx
jb 0x4ebecb
mov dword [eax + 0x2c], edx
jmp 0x4ebbf6
mov ecx, edx
mov edx, ebx
call fcn.00471b70
mov eax, edx
call fcn.00471b30
call fcn.00471b90
mov eax, ebx
call fcn.00471b90
mov eax, ebx
call fcn.00471b30
call fcn.00471b70
mov eax, ebx
call fcn.00471b30
mov eax, ebx
call fcn.00471b30
dec ebp
test ebp, ebp
jl 0x4ebf92
cmp ebp, ecx
jae 0x4ec027
mov esi, dword [ebx + 0x28]
mov esi, dword [esi + ebp*4]
cmp dword [esi + 0x14], 3
jne 0x4ebf92
mov esi, dword [esi + 0x18]
cmp esi, 0xb202
ja 0x4ebf55
cmp esi, 0x3a02
ja 0x4ebf43
cmp esi, 0xc01
je 0x4ebf01
cmp esi, 0x3a02
je 0x4ebf01
jmp 0x4ebf92
cmp esi, 0x5f08
je 0x4ebf01
cmp esi, 0xb202
je 0x4ebf01
jmp 0x4ebf92
cmp esi, 0x23c02
ja 0x4ebf72
lea edi, [esi - 0x19a02]
cmp edi, 1
jbe 0x4ebf01
cmp esi, 0x23c02
je 0x4ebf01
jmp 0x4ebf92
cmp esi, 0x2d702
je 0x4ebf01
cmp esi, 0x64b02
je 0x4ebf01
cmp esi, 0x6e306
je 0x4ebf01
mov edx, dword [ebx + 0x30]
lea ecx, [ebp + 1]
cmp edx, ecx
jb 0x4ec022
mov dword [ebx + 0x2c], ecx
cmp eax, ecx
jae 0x4ec01d
mov ecx, dword [ebx + 0x28]
mov eax, dword [ecx + eax*4]
cmp dword [eax + 0x18], 0x26e04
jne 0x4ec009
mov dword [esp + 0x78], 0x26e04
mov dword [esp], ebx
mov dword [esp + 4], 0
lea eax, [esp + 0x78]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ebbf6
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec018
mov dword [eax + 0x2c], ecx
jmp 0x4ebbf6
mov byte [esp + 0x290], 1
add esp, 0x288
ret
call fcn.00471b70
call fcn.00471b30
call fcn.00471b70
mov eax, ebp
call fcn.00471b30
call fcn.00471b70
call fcn.00471b70
mov byte [eax + 0x49], 0
jmp 0x4ebbf6
mov ebx, dword [esp + 0x12c]
lea ecx, [ebx + 0x18]
dec edx
test edx, edx
jle 0x4ec038
mov dword [esp + 0x12c], ecx
lea edi, [esp + 0xdc]
mov esi, ecx
call fcn.00472224
cmp dword [esp + 0xe8], 4
jne 0x4ec041
mov ecx, dword [esp + 0xe4]
cmp dword [ecx], 0x65707974
jne 0x4ec041
mov dword [esp + 0x48], edx
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e14a0
cmp dword [esp + 0xc], 6
jne 0x4ec0b7
mov eax, dword [esp + 8]
cmp dword [eax], 0x64646968
jne 0x4ec0b7
cmp word [eax + 4], 0x6e65
je 0x4ec0c7
mov eax, dword [esp + 0x28c]
mov edx, dword [esp + 0x48]
jmp 0x4ec041
mov byte [esp + 0x290], 1
add esp, 0x288
ret
mov eax, edx
call fcn.00471b30
call fcn.00471b30
call fcn.00471b70
lea eax, [0x6e0660]
mov dword [esp], eax
lea eax, [0x7a3cc0]
mov dword [esp + 4], eax
call fcn.0046ae10
mov eax, edx
call fcn.00471b30
call fcn.00471b30
mov esi, dword [esp + 0x24]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x28c]
mov ecx, dword [esp + 0xfc]
mov edx, ebx
mov ebx, dword [esp + 0x3c]
cmp ebp, ebx
jge 0x4ec1c3
mov dword [esp + 0x24], ebp
lea eax, [ebp + ebp*2]
mov dword [esp + 0x48], eax
lea ebx, [edx + eax*8]
lea esi, [edx + eax*8 + 8]
mov dword [esp + 0x128], esi
mov edi, dword [esi]
mov ebx, dword [ebx + 0xc]
lea esi, [0x6e2f20]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
call fcn.00469120
movzx eax, byte [esp + 0x14]
test al, al
je 0x4ec1b7
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x114]
lea edx, [ebx + edx*8 + 0xc]
mov eax, dword [eax]
mov dword [edx], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ec19d
mov ecx, dword [esp + 0x128]
jmp 0x4ec1b0
call fcn.00471ac0
mov dword [edi], eax
mov ecx, dword [esp + 0x128]
mov edx, dword [ecx]
mov dword [edi + 4], edx
mov dword [ecx], eax
jmp 0x4ec10b
mov ebx, dword [esp + 0x114]
jmp 0x4ec10b
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
mov ebx, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004e6330
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec21d
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec240
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x4ec266
mov edx, dword [eax + 0x28]
mov edx, dword [edx + ecx*4 - 4]
jmp 0x4ec268
xor edx, edx
test edx, edx
jne 0x4ec26f
mov edx, dword [eax + 0x24]
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0xc]
mov dword [edx + 0x28], ebx
mov ebx, dword [0x98d0b8]
test ebx, ebx
je 0x4ec28f
call fcn.00471ac0
mov dword [edi], ebp
mov ebx, dword [edx + 0x24]
mov dword [edi + 4], ebx
mov dword [edx + 0x24], ebp
movzx edx, byte [eax + 0x20]
test dl, dl
je 0x4ec2ad
mov ecx, dword [eax + 0x2c]
lea edx, [ecx - 1]
nop
cmp ecx, edx
jbe 0x4ec2bc
mov dword [eax + 0x2c], edx
nop
mov byte [eax + 0x20], 0
mov byte [esp + 0x290], 1
add esp, 0x288
ret
mov eax, edx
call fcn.00471b30
mov esi, dword [esp + 0x28]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x28c]
mov ecx, dword [esp + 0x100]
mov edx, ebx
mov ebx, dword [esp + 0x40]
cmp ebp, ebx
jge 0x4ec1c3
mov dword [esp + 0x28], ebp
lea eax, [ebp + ebp*2]
mov dword [esp + 0x48], eax
lea ebx, [edx + eax*8]
lea esi, [edx + eax*8 + 8]
mov dword [esp + 0x128], esi
mov edi, dword [esi]
mov ebx, dword [ebx + 0xc]
lea esi, [0x6e2f20]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
call fcn.00469120
movzx eax, byte [esp + 0x14]
test al, al
je 0x4ec36f
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x118]
lea edx, [ebx + edx*8 + 0xc]
mov eax, dword [eax]
mov dword [edx], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ec355
mov ecx, dword [esp + 0x128]
jmp 0x4ec368
call fcn.00471ac0
mov dword [edi], eax
mov ecx, dword [esp + 0x128]
mov edx, dword [ecx]
mov dword [edi + 4], edx
mov dword [ecx], eax
jmp 0x4ec2c3
mov ebx, dword [esp + 0x118]
jmp 0x4ec2c3
call fcn.00471b70
dec edx
test edx, edx
jl 0x4ec589
mov ecx, dword [ebx + 0x2c]
cmp edx, ecx
jae 0x4ec655
mov ebp, dword [ebx + 0x28]
mov ebp, dword [ebp + edx*4]
mov esi, dword [ebp + 0x18]
cmp esi, 0x16b03
ja 0x4ec3b8
cmp esi, 0xc01
je 0x4ec380
cmp esi, 0x16b03
je 0x4ec380
jmp 0x4ec3d8
cmp esi, 0x2d702
je 0x4ec586
cmp esi, 0x64b02
je 0x4ec586
cmp esi, 0x6f307
je 0x4ec380
mov dword [esp + 0x30], edx
mov esi, dword [ebp + 0x28]
test esi, esi
je 0x4ec544
mov edi, dword [ebp + 0x24]
cmp esi, 3
jne 0x4ec48f
cmp word [edi], 0x7673
jne 0x4ec540
cmp byte [edi + 2], 0x67
jne 0x4ec540
mov esi, dword [ebp + 0x20]
mov ebp, dword [ebp + 0x1c]
cmp esi, 4
jne 0x4ec421
cmp dword [ebp], 0x63736564
je 0x4ec475
jmp 0x4ec540
cmp esi, 5
jne 0x4ec43e
cmp dword [ebp], 0x6c746974
jne 0x4ec540
cmp byte [ebp + 4], 0x65
je 0x4ec475
jmp 0x4ec540
cmp esi, 0xd
jne 0x4ec540
mov dword [esp], ebp
lea eax, [0x72e626]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xd
call fcn.00402e10
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ec47f
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x28c]
mov eax, 1
jmp 0x4ec57c
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x28c]
jmp 0x4ec540
cmp esi, 4
jne 0x4ec540
cmp dword [edi], 0x6c6d7468
je 0x4ec544
cmp dword [edi], 0x6874616d
jne 0x4ec540
mov esi, dword [ebp + 0x20]
mov ebp, dword [ebp + 0x1c]
cmp esi, 2
jne 0x4ec4e5
cmp byte [ebp + 1], 0x6e
jg 0x4ec4d3
cmp word [ebp], 0x696d
je 0x4ec52e
cmp word [ebp], 0x6e6d
je 0x4ec52e
jmp 0x4ec540
cmp word [ebp], 0x6f6d
je 0x4ec52e
cmp word [ebp], 0x736d
je 0x4ec52e
jmp 0x4ec540
cmp esi, 5
jne 0x4ec4fb
cmp dword [ebp], 0x7865746d
jne 0x4ec540
cmp byte [ebp + 4], 0x74
je 0x4ec52e
jmp 0x4ec540
cmp esi, 0xe
jne 0x4ec540
mov dword [esp], ebp
lea eax, [0x72f19f]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xe
call fcn.00402e10
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ec535
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x28c]
mov eax, 1
jmp 0x4ec57c
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x28c]
xor eax, eax
jmp 0x4ec57c
mov eax, dword [0x96c9cc]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
lea ebx, [0x6e3420]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0040e1c0
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x28c]
test al, al
je 0x4ec380
jmp 0x4ec589
mov dword [ebx + 0x2c], edx
mov dword [esp + 0xa8], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ec5d9
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec650
mov dword [eax + 0x2c], ecx
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec619
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec63c
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
call fcn.00471b70
mov eax, edx
call fcn.00471b30
call fcn.00471b70
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec6a1
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec6c4
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
dec ebp
test ebp, ebp
jl 0x4ec773
mov ecx, dword [ebx + 0x2c]
cmp ebp, ecx
jae 0x4ec7e7
mov esi, dword [ebx + 0x28]
mov esi, dword [esi + ebp*4]
cmp dword [esi + 0x14], 3
jne 0x4ec773
mov edi, dword [esi + 0x18]
cmp edi, 0xb202
ja 0x4ec72f
cmp edi, 0x3a02
ja 0x4ec71d
cmp edi, 0xc01
je 0x4ec764
cmp edi, 0x3a02
je 0x4ec764
jmp 0x4ec773
cmp edi, 0x5f08
je 0x4ec764
cmp edi, 0xb202
je 0x4ec764
jmp 0x4ec773
cmp edi, 0x23c02
ja 0x4ec74c
lea eax, [edi - 0x19a02]
cmp eax, 1
jbe 0x4ec764
cmp edi, 0x23c02
je 0x4ec764
jmp 0x4ec773
cmp edi, 0x2d702
je 0x4ec764
cmp edi, 0x64b02
je 0x4ec764
cmp edi, 0x6e306
jne 0x4ec773
mov dword [esp + 0x104], esi
mov dword [esp + 0x2c], ebp
xor eax, eax
jmp 0x4ec78f
mov edx, dword [ebx + 0x30]
lea ecx, [ebp + 1]
cmp edx, ecx
jb 0x4ec785
mov dword [ebx + 0x2c], ecx
jmp 0x4ec661
call fcn.00471b70
mov eax, 1
test eax, eax
jg 0x4ec6d8
mov edi, dword [esi + 0x20]
cmp dword [esp + 0x134], edi
jne 0x4ec78a
mov eax, dword [esp + 0x130]
mov ecx, dword [esi + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edi
call fcn.00402e10
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4ec7da
mov ebx, dword [esp + 0x28c]
mov ebp, dword [esp + 0x2c]
mov esi, dword [esp + 0x104]
jmp 0x4ec78a
mov ebx, dword [esp + 0x28c]
mov ebp, dword [esp + 0x2c]
jmp 0x4ec773
mov eax, ebp
call fcn.00471b30
mov dword [esp + 0xb0], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4ec842
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ec916
mov dword [eax + 0x2c], ecx
nop
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec883
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec8a6
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
nop
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [eax + 0x28]
xor ebx, ebx
jmp 0x4ec8c8
inc ebx
cmp ebx, ecx
jge 0x4ec8e4
mov ebp, dword [edx + ebx*4]
cmp dword [ebp + 0x18], 0x71408
jne 0x4ec8c7
mov ebp, dword [ebp + 0x28]
test ebp, ebp
jne 0x4ec8c7
jmp 0x4ebbf6
test ecx, ecx
je 0x4ec8ee
mov ecx, dword [edx + ecx*4 - 4]
jmp 0x4ec8f0
xor ecx, ecx
test ecx, ecx
jne 0x4ec8f7
mov ecx, dword [eax + 0x24]
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec90e
call fcn.00471ac0
mov dword [edi], ecx
mov edx, dword [eax + 0x44]
mov dword [edi + 4], edx
mov dword [eax + 0x44], ecx
jmp 0x4ebbf6
call fcn.00471b70
inc edx
cmp edx, ecx
jge 0x4ec938
mov ebp, dword [eax + edx*4]
cmp dword [ebp + 0x18], 0x71408
jne 0x4ec91b
mov ebp, dword [ebp + 0x28]
test ebp, ebp
jne 0x4ec91b
jmp 0x4ec7ee
mov byte [esp + 0x290], 1
add esp, 0x288
ret
mov eax, edx
call fcn.00471b30
call fcn.00471b70
call fcn.00471b70
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec998
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ec9bb
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
dec ebp
test ebp, ebp
jl 0x4eca60
cmp ebp, ecx
jae 0x4eca77
mov esi, dword [ebx + 0x28]
mov esi, dword [esi + ebp*4]
cmp dword [esi + 0x14], 3
jne 0x4eca60
mov esi, dword [esi + 0x18]
cmp esi, 0xb202
ja 0x4eca23
cmp esi, 0x3a02
ja 0x4eca11
cmp esi, 0xc01
je 0x4ec9cf
cmp esi, 0x3a02
je 0x4ec9cf
jmp 0x4eca60
cmp esi, 0x5f08
je 0x4ec9cf
cmp esi, 0xb202
je 0x4ec9cf
jmp 0x4eca60
cmp esi, 0x23c02
ja 0x4eca40
lea edi, [esi - 0x19a02]
cmp edi, 1
jbe 0x4ec9cf
cmp esi, 0x23c02
je 0x4ec9cf
jmp 0x4eca60
cmp esi, 0x2d702
je 0x4ec9cf
cmp esi, 0x64b02
je 0x4ec9cf
cmp esi, 0x6e306
je 0x4ec9cf
mov edx, dword [ebx + 0x30]
lea ecx, [ebp + 1]
cmp edx, ecx
jb 0x4eca72
mov dword [ebx + 0x2c], ecx
jmp 0x4ec958
call fcn.00471b70
mov eax, ebp
call fcn.00471b30
call fcn.00471b70
mov ecx, 1
xor edx, edx
call fcn.00471b70
dec edx
test edx, edx
jl 0x4ecc8b
mov ecx, dword [ebx + 0x2c]
cmp edx, ecx
jae 0x4ecd57
mov ebp, dword [ebx + 0x28]
mov ebp, dword [ebp + edx*4]
mov esi, dword [ebp + 0x18]
cmp esi, 0xb202
ja 0x4ecaca
cmp esi, 0xc01
je 0x4eca8f
cmp esi, 0xb202
jne 0x4ecada
jmp 0x4ecc88
cmp esi, 0x16b03
je 0x4eca8f
cmp esi, 0x6f307
je 0x4eca8f
mov dword [esp + 0x34], edx
mov esi, dword [ebp + 0x28]
test esi, esi
je 0x4ecc46
mov edi, dword [ebp + 0x24]
cmp esi, 3
jne 0x4ecb91
cmp word [edi], 0x7673
jne 0x4ecc42
cmp byte [edi + 2], 0x67
jne 0x4ecc42
mov esi, dword [ebp + 0x20]
mov ebp, dword [ebp + 0x1c]
cmp esi, 4
jne 0x4ecb23
cmp dword [ebp], 0x63736564
je 0x4ecb77
jmp 0x4ecc42
cmp esi, 5
jne 0x4ecb40
cmp dword [ebp], 0x6c746974
jne 0x4ecc42
cmp byte [ebp + 4], 0x65
je 0x4ecb77
jmp 0x4ecc42
cmp esi, 0xd
jne 0x4ecc42
mov dword [esp], ebp
lea eax, [0x72e626]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xd
call fcn.00402e10
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ecb81
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x28c]
mov eax, 1
jmp 0x4ecc7e
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x28c]
jmp 0x4ecc42
cmp esi, 4
jne 0x4ecc42
cmp dword [edi], 0x6c6d7468
je 0x4ecc46
cmp dword [edi], 0x6874616d
jne 0x4ecc42
mov esi, dword [ebp + 0x20]
mov ebp, dword [ebp + 0x1c]
cmp esi, 2
jne 0x4ecbe7
cmp byte [ebp + 1], 0x6e
jg 0x4ecbd5
cmp word [ebp], 0x696d
je 0x4ecc30
cmp word [ebp], 0x6e6d
je 0x4ecc30
jmp 0x4ecc42
cmp word [ebp], 0x6f6d
je 0x4ecc30
cmp word [ebp], 0x736d
je 0x4ecc30
jmp 0x4ecc42
cmp esi, 5
jne 0x4ecbfd
cmp dword [ebp], 0x7865746d
jne 0x4ecc42
cmp byte [ebp + 4], 0x74
je 0x4ecc30
jmp 0x4ecc42
cmp esi, 0xe
jne 0x4ecc42
mov dword [esp], ebp
lea eax, [0x72f19f]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xe
call fcn.00402e10
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ecc37
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x28c]
mov eax, 1
jmp 0x4ecc7e
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x28c]
xor eax, eax
jmp 0x4ecc7e
mov eax, dword [0x96c9cc]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
lea ebx, [0x6e3420]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0040e1c0
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x28c]
test al, al
je 0x4eca8f
jmp 0x4ecc8b
mov dword [ebx + 0x2c], edx
mov dword [esp + 0xac], 0xc01
mov dword [esp], ebx
mov dword [esp + 4], 2
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004e6b30
mov ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4eccdb
mov eax, dword [esp + 0x28c]
mov edx, dword [eax + 0x30]
cmp edx, ecx
jb 0x4ecd52
mov dword [eax + 0x2c], ecx
lea eax, [0x7117e0]
mov dword [esp], eax
call fcn.0040bc10
mov eax, dword [esp + 4]
mov dword [eax + 0x14], 3
mov ecx, dword [esp + 0x28c]
mov edx, dword [ecx + 8]
mov dword [eax + 0x18], edx
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0xc]
mov dword [eax + 0x20], edx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ecd1b
call fcn.00471ab0
mov dword [edi], ebx
mov dword [eax + 0x1c], ebx
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x14]
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], ebx
mov edx, dword [0x98d0b8]
test edx, edx
je 0x4ecd3e
call fcn.00471ab0
mov dword [edi], ebp
mov dword [eax + 0x2c], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004e6ee0
jmp 0x4ebbf6
call fcn.00471b70
mov eax, edx
call fcn.00471b30
inc eax
cmp eax, edx
jge 0x4ecd86
mov ecx, dword [ebp + eax*4]
cmp dword [ecx + 0x18], 0x71408
jne 0x4ecd5e
mov ecx, dword [ecx + 0x28]
test ecx, ecx
jne 0x4ecd5e
mov byte [esp + 0x290], 1
add esp, 0x288
ret
test edx, edx
jbe 0x4ed06f
lea esi, [ebx + 4]
mov ecx, dword [ebp]
mov dword [esp + 0x108], ecx
lea edi, [esp + 0xdc]
call fcn.0047221a
mov ecx, dword [esp + 0xf0]
test ecx, ecx
je 0x4ebbf6
lea edi, [esp + 0x26c]
xor eax, eax
call fcn.00471d49
lea edi, [esp + 0x1e0]
call fcn.00471d2d
lea ecx, [esp + 0x1e0]
mov dword [esp + 0x278], ecx
call fcn.004484b0
mov ecx, dword [esp]
mov dword [esp + 0x274], ecx
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [ecx + 0x30]
jmp 0x4ece16
mov dword [eax], ecx
mov eax, dword [esp + 0x12c]
lea edx, [eax + 0x18]
mov eax, dword [esp + 0x48]
lea ebx, [eax - 1]
mov ecx, dword [esp + 0x108]
test ebx, ebx
jle 0x4eceb8
mov dword [esp + 0x48], ebx
mov dword [esp + 0x12c], edx
lea edi, [esp + 0xc4]
mov esi, edx
call fcn.00472224
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0xd4]
mov dword [esp + 0x124], ebp
lea edx, [0x6e2f20]
mov dword [esp], edx
lea edx, [esp + 0x26c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00469480
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ecea0
mov ecx, dword [esp + 0x124]
jmp 0x4ecdfc
call fcn.00471ac0
mov ecx, dword [esp + 0x124]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
jmp 0x4ecdfc
mov eax, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
jmp 0x4ecee0
mov ebx, dword [esp + 0x12c]
lea eax, [ebx + 0x18]
mov ebx, dword [esp + 0x48]
lea edx, [ebx - 1]
mov ecx, dword [esp + 0x108]
test edx, edx
jle 0x4ebbf6
mov dword [esp + 0x48], edx
mov dword [esp + 0x12c], eax
lea edi, [esp + 0xdc]
mov esi, eax
call fcn.00472224
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0xe8]
lea ebx, [0x6e2f20]
mov dword [esp], ebx
lea ebp, [esp + 0x26c]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.00469120
movzx eax, byte [esp + 0x14]
test al, al
jne 0x4ecec8
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
inc edx
mov ebx, dword [eax + 0x2c]
cmp ecx, edx
jae 0x4ecfa4
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6fbde0]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x108]
mov dword [ebx + 0x34], eax
mov eax, dword [0x98d0b8]
test eax, eax
je 0x4ecf9d
call fcn.00471ac0
mov dword [edi], ecx
mov eax, dword [ebx + 0x2c]
mov dword [edi + 4], eax
mov dword [ebx + 0x2c], ecx
mov eax, ebx
mov ebx, ecx
mov dword [eax + 0x30], edx
mov ecx, dword [0x98d0b8]
lea edx, [edx + edx*2]
lea edi, [ebx + edx*8 - 0x18]
test ecx, ecx
je 0x4ecfe3
mov dword [esp + 0x120], edi
lea eax, [0x6fbde0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
call fcn.0040eba0
mov edi, dword [esp + 0x120]
lea esi, [esp + 0xdc]
call fcn.00472224
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0xec]
mov dword [esp + 0x124], ebx
lea ebp, [0x6e2f20]
mov dword [esp], ebp
lea ebp, [esp + 0x26c]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00469480
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ed055
mov ecx, dword [esp + 0x124]
jmp 0x4ed068
call fcn.00471ac0
mov ecx, dword [esp + 0x124]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [eax], ecx
jmp 0x4ecec8
xor eax, eax
mov ecx, eax
call fcn.00471b30
inc eax
cmp eax, edx
jge 0x4ed09f
mov ebp, dword [ecx + eax*4]
cmp dword [ebp + 0x18], 0x71408
jne 0x4ed078
mov ebp, dword [ebp + 0x28]
test ebp, ebp
jne 0x4ed078
mov byte [esp + 0x290], 1
add esp, 0x288
ret
cmp dword [ebx + 0x2c], 2
jl 0x4ebbf6
mov ecx, dword [ecx + 4]
cmp dword [ecx + 0x14], 3
jne 0x4ebbf6
cmp dword [ecx + 0x18], 0x2804
jne 0x4ebbf6
mov dword [esp + 0x110], ecx
mov byte [ebx + 0x49], 0
lea esi, [ebx + 4]
lea edi, [esp + 0xdc]
call fcn.0047221a
mov ecx, dword [esp + 0xf0]
test ecx, ecx
je 0x4ebbf6
lea edi, [esp + 0x1c4]
xor eax, eax
call fcn.00471d49
lea edi, [esp + 0x138]
call fcn.00471d2d
lea ecx, [esp + 0x138]
mov dword [esp + 0x1d0], ecx
call fcn.004484b0
mov ecx, dword [esp]
mov dword [esp + 0x1cc], ecx
mov ecx, dword [esp + 0x110]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [ecx + 0x30]
jmp 0x4ed14c
mov dword [eax], ecx
mov eax, dword [esp + 0x12c]
lea edx, [eax + 0x18]
mov eax, dword [esp + 0x48]
lea ebx, [eax - 1]
mov ecx, dword [esp + 0x110]
test ebx, ebx
jle 0x4ed1ee
mov dword [esp + 0x48], ebx
mov dword [esp + 0x12c], edx
lea edi, [esp + 0xc4]
mov esi, edx
call fcn.00472224
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0xd4]
mov dword [esp + 0x124], ebp
lea edx, [0x6e2f20]
mov dword [esp], edx
lea edx, [esp + 0x1c4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00469480
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ed1d6
mov ecx, dword [esp + 0x124]
jmp 0x4ed132
call fcn.00471ac0
mov ecx, dword [esp + 0x124]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
jmp 0x4ed132
mov eax, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
jmp 0x4ed216
mov ebx, dword [esp + 0x12c]
lea eax, [ebx + 0x18]
mov ebx, dword [esp + 0x48]
lea edx, [ebx - 1]
mov ecx, dword [esp + 0x110]
test edx, edx
jle 0x4ebbf6
mov dword [esp + 0x48], edx
mov dword [esp + 0x12c], eax
lea edi, [esp + 0xdc]
mov esi, eax
call fcn.00472224
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0xe8]
lea ebx, [0x6e2f20]
mov dword [esp], ebx
lea ebp, [esp + 0x1c4]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.00469120
movzx eax, byte [esp + 0x14]
test al, al
jne 0x4ed1fe
mov eax, dword [esp + 0x110]
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
inc edx
mov ebx, dword [eax + 0x2c]
cmp ecx, edx
jae 0x4ed2da
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6fbde0]
mov dword [esp + 0x10], eax
call fcn.0046cad0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x110]
mov dword [ebx + 0x34], eax
mov eax, dword [0x98d0b8]
test eax, eax
je 0x4ed2d3
call fcn.00471ac0
mov dword [edi], ecx
mov eax, dword [ebx + 0x2c]
mov dword [edi + 4], eax
mov dword [ebx + 0x2c], ecx
mov eax, ebx
mov ebx, ecx
mov dword [eax + 0x30], edx
mov ecx, dword [0x98d0b8]
lea edx, [edx + edx*2]
lea edi, [ebx + edx*8 - 0x18]
test ecx, ecx
je 0x4ed319
mov dword [esp + 0x120], edi
lea eax, [0x6fbde0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
call fcn.0040eba0
mov edi, dword [esp + 0x120]
lea esi, [esp + 0xdc]
call fcn.00472224
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0xec]
mov dword [esp + 0x124], ebx
lea ebp, [0x6e2f20]
mov dword [esp], ebp
lea ebp, [esp + 0x1c4]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00469480
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [0x98d0b8]
test ecx, ecx
jne 0x4ed38b
mov ecx, dword [esp + 0x124]
jmp 0x4ed39e
call fcn.00471ac0
mov ecx, dword [esp + 0x124]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [eax], ecx
jmp 0x4ed1fe
dec ebp
test ebp, ebp
jl 0x4ed40c
cmp ebp, ecx
jae 0x4ed61c
mov esi, dword [edx + ebp*4]
mov edi, dword [esi + 0x14]
cmp edi, 7
je 0x4ed40c
cmp edi, 3
jne 0x4ed3a5
cmp dword [esi + 0x18], 1
jne 0x4ed3a5
mov dword [esp + 0x11c], esi
mov dword [esp], ebx
mov dword [esp + 4], 1
lea eax, [0x7a1f94]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004ed750
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x2c]
nop
nop
mov edx, dword [eax + 0x28]
lea ebx, [ecx - 1]
mov ebp, dword [esp + 0x11c]
jmp 0x4ed429
mov dword [esp], ebx
call fcn.004e7a00
mov eax, dword [esp + 0x28c]
mov dword [esp], eax
call fcn.004e7590
jmp 0x4ebbf6
dec ebx
test ebx, ebx
jl 0x4ed43e
cmp ebx, ecx
jae 0x4ed615
lea esi, [edx + ebx*4]
cmp dword [esi], ebp
jne 0x4ed428
jmp 0x4ed443
mov ebx, 0xffffffff
cmp ebx, 0xffffffff
je 0x4ed4fa
cmp ebx, ecx
ja 0x4ed60e
mov esi, ebx
shl ebx, 2
lea edi, [esi + 1]
mov ebp, dword [eax + 0x30]
sub ebp, esi
mov dword [esp + 0x48], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebx, ebp
mov ebp, ecx
sub ebp, esi
add ebx, edx
cmp ecx, edi
jb 0x4ed607
lea eax, [0x703880]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
lea ecx, [ebp - 1]
mov ebx, dword [esp + 0x48]
dec ebx
neg ebx
shl edi, 2
sar ebx, 0x1f
and edi, ebx
add edx, edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00469900
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x2c]
lea edx, [ecx - 1]
cmp ecx, edx
jbe 0x4ed600
mov ebx, dword [0x98d0b8]
mov ebp, dword [eax + 0x28]
test ebx, ebx
je 0x4ed4dd
mov ebx, dword [ebp + ecx*4 - 4]
call fcn.00471ab0
mov dword [edi], ebx
mov dword [ebp + ecx*4 - 4], 0
mov ebx, dword [eax + 0x30]
cmp ebx, edx
jb 0x4ed5f7
mov dword [eax + 0x2c], edx
mov ebp, dword [esp + 0x11c]
mov ecx, dword [eax + 0x38]
nop
nop
mov edx, dword [eax + 0x34]
lea ebx, [ecx - 1]
jmp 0x4ed508
dec ebx
test ebx, ebx
jl 0x4ed51d
cmp ebx, ecx
jae 0x4ed5f0
lea esi, [edx + ebx*4]
cmp dword [esi], ebp
jne 0x4ed507
jmp 0x4ed522
mov ebx, 0xffffffff
cmp ebx, 0xffffffff
je 0x4ed5cb
cmp ebx, ecx
ja 0x4ed5e9
mov ebp, ebx
shl ebx, 2
lea esi, [ebp + 1]
mov edi, dword [eax + 0x3c]
sub edi, ebp
mov dword [esp + 0x48], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and ebx, edi
mov edi, ecx
sub edi, ebp
add ebx, edx
cmp ecx, esi
jb 0x4ed5e2
lea eax, [0x703880]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
lea eax, [edi - 1]
mov ecx, dword [esp + 0x48]
dec ecx
neg ecx
shl esi, 2
sar ecx, 0x1f
and esi, ecx
lea ecx, [edx + esi]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00469900
mov eax, dword [esp + 0x28c]
mov ecx, dword [eax + 0x38]
lea edx, [ecx - 1]
cmp ecx, edx
jbe 0x4ed5db
mov ebx, dword [0x98d0b8]
mov ebp, dword [eax + 0x34]
test ebx, ebx
je 0x4ed5b9
mov ebx, dword [ebp + ecx*4 - 4]
call fcn.00471ab0
mov dword [edi], ebx
mov dword [ebp + ecx*4 - 4], 0
mov ebx, dword [eax + 0x3c]
cmp ebx, edx
jb 0x4ed5d2
mov dword [eax + 0x38], edx
mov ebx, eax
jmp 0x4ed40c
mov ecx, edx
mov edx, ebx
call fcn.00471b70
mov eax, edx
call fcn.00471b30
mov eax, esi
call fcn.00471b90
mov eax, ebx
call fcn.00471b90
mov eax, ebx
call fcn.00471b30
mov ecx, edx
mov edx, ebx
call fcn.00471b70
mov eax, edx
call fcn.00471b30
mov eax, edi
call fcn.00471b90
mov eax, ebx
call fcn.00471b90
mov eax, ebx
call fcn.00471b30
mov eax, ebp
call fcn.00471b30
inc edx
cmp edx, eax
jge 0x4ebbf6
mov ebx, dword [ecx + edx*4]
mov ebx, dword [ebx + 0x18]
cmp ebx, 0xb202
ja 0x4ed6a6
cmp ebx, 0x3a02
ja 0x4ed674
cmp ebx, 0x2705
ja 0x4ed65f
cmp ebx, 0xc01
je 0x4ed623
cmp ebx, 0x2705
je 0x4ed623
jmp 0x4ed730
cmp ebx, 0x2804
je 0x4ed623
cmp ebx, 0x3a02
je 0x4ed623
jmp 0x4ed730
cmp ebx, 0x5f08
ja 0x4ed691
cmp ebx, 0x5604
je 0x4ed623
cmp ebx, 0x5f08
je 0x4ed623
jmp 0x4ed730
cmp ebx, 0x9202
je 0x4ed623
cmp ebx, 0xb202
je 0x4ed623
jmp 0x4ed730
cmp ebx, 0x19a03
ja 0x4ed6ea
cmp ebx, 0xf505
ja 0x4ed6d0
cmp ebx, 0xcc02
je 0x4ed623
cmp ebx, 0xf505
je 0x4ed623
jmp 0x4ed730
cmp ebx, 0x15602
je 0x4ed623
cmp ebx, 0x19a02
jae 0x4ed623
jmp 0x4ed730
cmp ebx, 0x2d702
ja 0x4ed70c
cmp ebx, 0x23c02
je 0x4ed623
cmp ebx, 0x2d702
je 0x4ed623
jmp 0x4ed730
cmp ebx, 0x33005
je 0x4ed623
cmp ebx, 0x64b02
je 0x4ed623
cmp ebx, 0x6e306
je 0x4ed623
mov byte [esp + 0x290], 1
add esp, 0x288
ret
call fcn.004706b0
jmp fcn.004e99e0