Function at 0x4e2260
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98d270]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x494]
cmp eax, dword [ecx + 8]
jbe 0x4e37b8
sub esp, 0x514
lea edi, [esp + 0x520]
xor eax, eax
call fcn.00468c2b
lea edi, [esp + 0x3f4]
call fcn.00468c1f
mov ecx, dword [esp + 0x518]
mov dword [esp + 0x428], ecx
mov ecx, dword [esp + 0x51c]
mov dword [esp + 0x42c], ecx
lea edi, [esp + 0x160]
call fcn.00468c29
lea edi, [esp + 0x4c0]
call fcn.00468c1b
lea ecx, [esp + 0x4c0]
mov dword [esp + 0x16c], ecx
call fcn.00452ef0
mov ecx, dword [esp]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
mov dword [esp + 0x15c], 0
mov eax, 1
lea ecx, [esp + 0x3f4]
mov edx, 1
xor ebx, ebx
lea ebp, [esp + 0x3c]
xor esi, esi
xor edi, edi
xor eax, eax
mov dword [esp + 0x100], eax
mov eax, 1
jmp 0x4e2363
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xfc]
mov edx, edi
mov ebx, dword [esp + 0xa4]
mov edi, ebp
mov dword [esp + 0x100], esi
mov ebp, dword [esp + 0x140]
mov esi, dword [esp + 0xf8]
test eax, eax
je 0x4e23e2
mov dword [esp + 0x80], ebx
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x5c], edi
mov dword [esp + 0xa4], edx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x140], ecx
mov dword [esp + 0x120], esi
call fcn.0040cf50
mov eax, dword [esp]
mov dword [esp + 0xf8], eax
mov ecx, dword [esp + 0x140]
mov edx, ecx
xor ebx, ebx
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0x80]
xor ebp, ebp
mov dword [esp + 0x54], ebp
mov esi, dword [esp + 0x11c]
mov dword [esp + 0xfc], esi
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x100]
jmp 0x4e2ce1
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x158]
mov edx, dword [esp + 0x15c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409db0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0
lea ecx, [0x4e37d0]
mov dword [esp + 0x14c], ecx
lea ecx, [esp + 0x154]
mov dword [esp + 0x150], ecx
lea ecx, [0x6b2f20]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x14c]
mov dword [esp + 8], eax
call fcn.00491c00
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x15c]
xor edx, edx
xor ebx, ebx
jmp 0x4e247a
mov ecx, ebx
mov eax, edx
mov ebx, ebp
mov edx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x158]
cmp edx, ebp
jge 0x4e2778
jae 0x4e2ca6
mov dword [esp + 0x48], ebx
mov dword [esp + 0xf0], eax
mov dword [esp + 0x74], edx
mov dword [esp + 0x4c], ecx
mov ebp, dword [esp + 0x154]
mov esi, edx
shl edx, 6
lea edx, [edx + esi*4]
mov dword [esp + 0xa4], edx
add ebp, edx
lea edi, [esp + 0x328]
mov esi, ebp
call fcn.00469096
mov ecx, dword [esp + 0x328]
mov dword [esp + 0x104], ecx
mov ebp, dword [esp + 0x32c]
mov dword [esp + 0x60], ebp
mov esi, dword [esp + 0x74]
mov edi, 1
jmp 0x4e2bfb
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xa0]
mov eax, ebx
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x74]
mov edi, edx
cmp edi, 1
jne 0x4e25e7
lea ecx, [ebx + 1]
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jb 0x4e2526
mov edx, dword [esp + 0xf0]
jmp 0x4e2566
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6f1640]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x48], ecx
mov ebp, dword [0x98d4e0]
mov esi, ecx
shl ecx, 6
lea ecx, [ecx + esi*4]
lea edi, [edx + ecx - 0x44]
test ebp, ebp
je 0x4e25d2
mov dword [esp + 0x138], edx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x140], edi
lea eax, [0x6f1640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x328]
mov dword [esp + 8], eax
call fcn.00411600
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x138]
mov ebx, dword [esp + 0x98]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x140]
lea esi, [esp + 0x328]
call fcn.00469096
mov ebp, dword [esp + 0x48]
jmp 0x4e246d
mov edx, dword [esp + 0x15c]
cmp edx, eax
jb 0x4e2c98
cmp esi, eax
ja 0x4e2c8f
sub edx, esi
neg edx
sar edx, 0x1f
mov ecx, dword [esp + 0xa4]
and ecx, edx
mov dword [esp + 0xa4], ecx
mov ebp, dword [esp + 0x154]
mov edx, edi
lea edi, [esp + 0x218]
mov esi, eax
xor eax, eax
call fcn.00468c1f
mov ecx, dword [esp + 0xa4]
lea edi, [ecx + ebp]
cmp edx, 1
jle 0x4e2658
mov eax, dword [ecx + ebp + 0x2c]
cmp dword [edi + 0x70], eax
jne 0x4e2658
movzx eax, byte [ebp + ecx + 0x24]
lea ebp, [ebp + ecx + 0x68]
cmp byte [ebp], al
jne 0x4e2658
xor eax, eax
jmp 0x4e267c
test edx, edx
jbe 0x4e2c86
mov eax, edi
lea edi, [esp + 0x218]
mov esi, eax
call fcn.00469096
mov esi, dword [esp + 0xa0]
mov eax, 1
lea edi, [esp + 0x3b0]
lea esi, [esp + 0x218]
call fcn.00469096
test al, al
je 0x4e275b
lea ecx, [ebx + 1]
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jb 0x4e26ad
mov eax, dword [esp + 0xf0]
mov edx, ebx
jmp 0x4e26e2
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6f1640]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [0x98d4e0]
mov ebp, ecx
shl ecx, 6
lea ecx, [ecx + ebp*4]
lea edi, [eax + ecx - 0x44]
test ebx, ebx
je 0x4e274d
mov dword [esp + 0x134], eax
mov dword [esp + 0xa4], ebp
mov dword [esp + 0x94], edx
mov dword [esp + 0x140], edi
lea eax, [0x6f1640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x3b0]
mov dword [esp + 8], eax
call fcn.00411600
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0x94]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x140]
lea esi, [esp + 0x3b0]
call fcn.00469096
jmp 0x4e2768
mov edx, dword [esp + 0x4c]
mov ebp, ebx
mov eax, dword [esp + 0xf0]
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0xa0]
jmp 0x4e246d
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ebx
mov dword [esp + 0x15c], ecx
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00409db0
mov eax, dword [esp + 0xc]
lea ecx, [0x775274]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00491d60
mov eax, dword [esp + 0x158]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0x51c]
mov edx, dword [esp + 0x518]
xor ebx, ebx
jmp 0x4e27f3
mov dword [ebx + edx + 0x40], ecx
mov ebp, dword [esp + 0x70]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x51c]
mov edx, dword [esp + 0x518]
cmp ebx, eax
jge 0x4e28a5
mov ebp, dword [esp + 0x158]
cmp ebx, ebp
jae 0x4e2bce
mov dword [esp + 0x70], ebx
mov eax, ebx
shl ebx, 6
lea ebx, [ebx + eax*4]
mov dword [esp + 0xa0], ebx
mov ebp, dword [esp + 0x154]
mov dword [esp + 0x140], ebp
mov esi, dword [ebp + ebx + 0x28]
mov edi, dword [ebx + ebp + 0x2c]
mov eax, dword [ebp + ebx + 0x30]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.004e1cf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004dd7d0
mov eax, dword [0x98d4e0]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4e2884
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x140]
jmp 0x4e27d3
call fcn.004689a0
mov dword [edi], ecx
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x140]
mov ebp, dword [ebx + edx + 0x40]
mov dword [edi + 4], ebp
jmp 0x4e27d3
mov eax, dword [esp + 0x158]
lea ecx, [0x6c1820]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040cfd0
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x118], ecx
lea edx, [0x6c1820]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040cfd0
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x114], ecx
mov edx, dword [esp + 0x158]
mov dword [esp + 0xa4], edx
mov ebx, dword [esp + 0x118]
xor ebp, ebp
jmp 0x4e2943
mov eax, dword [esp + 0x13c]
add eax, 0x44
mov ecx, dword [esp + 0x6c]
lea ebp, [ecx + 1]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
cmp ebp, edx
jge 0x4e2b6e
lea edi, [esp + 0x2a0]
mov esi, eax
call fcn.00469096
mov ecx, dword [esp + 0x158]
cmp ebp, ecx
jae 0x4e2bc7
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x2a0]
mov ecx, dword [esp + 0x2a4]
mov edx, ebp
shl ebp, 6
lea ebp, [ebp + edx*4]
mov dword [esp + 0xa0], ebp
mov esi, dword [esp + 0x154]
mov dword [esp + 0x140], esi
lea edi, [0x6c1820]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00410b10
mov eax, dword [esp + 0x10]
test byte [eax], al
mov ecx, dword [0x98d4e0]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x140]
add ebx, edx
test ecx, ecx
je 0x4e29e5
call fcn.004689a0
mov dword [edi], ebx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov dword [eax], ebx
mov ecx, dword [esp + 0x2a8]
mov dword [esp + 0x110], ecx
mov edx, dword [esp + 0x2ac]
mov ebx, dword [esp + 0x2b0]
lea edi, [esp + 0xc8]
xor eax, eax
call fcn.00468c28
lea ecx, [esp + 0xc8]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
mov ecx, dword [esp + 0x110]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004e3aa0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
lea ebx, [0x6c1820]
mov dword [esp], ebx
mov ebp, dword [esp + 0x114]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.004107b0
movzx ecx, byte [esp + 0x14]
test cl, cl
jne 0x4e291d
mov ecx, dword [esp + 0x2a8]
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x2ac]
mov ebx, dword [esp + 0x2b0]
lea edi, [esp + 0xa8]
xor eax, eax
call fcn.00468c28
lea ecx, [esp + 0xa8]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004e3aa0
mov ecx, dword [esp + 0x158]
mov eax, dword [esp + 0x6c]
cmp eax, ecx
jae 0x4e2bc2
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x154]
mov dword [esp + 0x140], edx
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451eb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea edx, [0x6c1820]
mov dword [esp], edx
mov ebx, dword [esp + 0x114]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00410b10
mov eax, dword [esp + 0x10]
test byte [eax], al
mov ecx, dword [0x98d4e0]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x140]
add edx, ebx
test ecx, ecx
je 0x4e2b67
call fcn.004689a0
mov dword [edi], edx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov dword [eax], edx
jmp 0x4e291d
lea edi, [esp + 0x520]
xor eax, eax
call fcn.00468c2b
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x158]
mov ebp, dword [esp + 0x15c]
mov dword [esp + 0x520], ecx
mov dword [esp + 0x524], edx
mov dword [esp + 0x528], ebp
mov dword [esp + 0x52c], ebx
mov ecx, dword [esp + 0x114]
mov dword [esp + 0x530], ecx
add esp, 0x514
ret
call fcn.00468a00
mov eax, ebp
call fcn.00468a00
mov eax, ebx
mov ecx, ebp
call fcn.00468a00
mov eax, dword [esp + 0x9c]
lea edi, [eax + 1]
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0x104]
mov esi, dword [esp + 0x74]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x48]
lea eax, [edi + esi]
mov dword [esp + 0xa0], eax
mov edx, dword [esp + 0x158]
cmp edx, eax
jle 0x4e2509
jbe 0x4e2c9f
mov edx, dword [esp + 0x154]
shl eax, 6
mov ebx, dword [esp + 0xa0]
lea eax, [eax + ebx*4]
add eax, edx
mov edx, edi
lea edi, [esp + 0x25c]
mov esi, eax
call fcn.00469096
mov ecx, dword [esp + 0x260]
cmp ecx, ebp
jne 0x4e24fd
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403500
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4e2bd7
jmp 0x4e24ef
xor eax, eax
mov ecx, eax
call fcn.00468a00
mov ecx, eax
mov eax, esi
call fcn.00468a60
mov ecx, eax
call fcn.00468a40
mov ecx, edx
call fcn.00468a00
mov eax, edx
mov ecx, ebp
call fcn.00468a00
mov esi, eax
mov eax, dword [esp + 0x13c]
add eax, 0x44
mov edi, eax
mov eax, dword [esp + 0xa0]
inc eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0xfc], ebp
mov ebx, eax
mov ebp, esi
mov esi, ecx
mov ecx, edi
mov edi, edx
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x7c]
cmp ebx, eax
jge 0x4e2338
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x58], edi
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x130], esi
mov dword [esp + 0x13c], ecx
lea edi, [esp + 0x36c]
mov esi, ecx
call fcn.00469096
lea eax, [0x6c1860]
mov dword [esp], eax
lea ecx, [esp + 0x160]
mov dword [esp + 4], ecx
lea edx, [esp + 0x3a0]
mov dword [esp + 8], edx
call fcn.0040d340
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4e2d6c
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xfc]
jmp 0x4e2caf
lea eax, [0x6c1860]
mov dword [esp], eax
lea ecx, [esp + 0x160]
mov dword [esp + 4], ecx
lea edx, [esp + 0x3a0]
mov dword [esp + 8], edx
call fcn.0040d890
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x130]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x54]
jmp 0x4e2de7
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xfc]
jmp 0x4e2caf
mov edi, dword [esp + 0x78]
inc edi
mov esi, edx
mov edx, ecx
mov ecx, eax
mov eax, edi
mov dword [esp + 0x78], eax
mov dword [esp + 0xfc], ebp
mov dword [esp + 0x100], edx
mov dword [esp + 0x54], esi
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x90], ebx
mov edi, dword [esp + 0x3a0]
mov ecx, dword [esp + 0x3a4]
mov edi, dword [edi + 0x64]
mov dword [esp], ecx
call edi
mov eax, dword [esp + 0x78]
cmp dword [esp + 4], eax
jle 0x4e2db8
mov ecx, dword [esp + 0x3a0]
mov edx, dword [esp + 0x3a4]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x17c]
lea esi, [esp + 8]
call fcn.004690be
movzx eax, byte [esp + 0x1ac]
test al, al
jne 0x4e2ea2
lea edi, [esp + 0x1b0]
lea esi, [esp + 0x17c]
call fcn.004690be
mov eax, dword [esp + 0x1bc]
test eax, eax
je 0x4e2f58
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xfc]
jmp 0x4e2dda
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x190]
mov dword [esp + 0xec], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x16
je 0x4e2ed7
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xec]
jmp 0x4e2ef2
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xec], ecx
lea edi, [esp + 0x1e4]
lea esi, [esp + 0x17c]
call fcn.004690be
mov ecx, dword [esp + 0x1f0]
test ecx, ecx
jne 0x4e2f1b
xor eax, eax
jmp 0x4e2f32
mov eax, dword [eax + 0x50]
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
test al, al
je 0x4e2f58
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xfc]
jmp 0x4e2dda
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x70ac8d]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.004a6060
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp eax, 1
jne 0x4e2fb8
cmp byte [ecx], 0x2d
jne 0x4e2fb8
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xfc]
jmp 0x4e2dda
nop
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x771e68]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004d5c90
mov eax, dword [esp + 0x10]
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0xf4], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x50], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e1bb0
movzx eax, byte [esp + 8]
test al, al
je 0x4e301f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xe8]
jmp 0x4e3023
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0x398]
lea ebx, [0x6bd2e0]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x68], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0044e050
mov eax, dword [esp + 0x398]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jl 0x4e3061
mov eax, ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x12c], edx
mov ebx, dword [esp + 0x394]
cmp ebx, edx
je 0x4e3095
mov dword [esp], edx
mov dword [esp + 4], ebx
shl eax, 2
mov dword [esp + 8], eax
call fcn.00469320
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x12c]
mov eax, dword [esp + 0x398]
cmp eax, ecx
jae 0x4e37b2
mov ecx, dword [esp + 0x78]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x18c]
mov ebx, dword [esp + 0x190]
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ebx
mov eax, dword [eax + 0x60]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
test eax, eax
jne 0x4e3120
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x16
jne 0x4e3120
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
lea edx, [0x70b298]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
call fcn.004e7d40
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4e3156
xor eax, eax
jmp 0x4e3187
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
test eax, eax
je 0x4e3185
cmp eax, 0xe
jbe 0x4e317e
cmp eax, 0x18
jne 0x4e3185
mov eax, 1
jmp 0x4e3187
xor eax, eax
mov byte [esp + 0x3e], al
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x4e319a
mov edx, 1
jmp 0x4e31d6
movzx edx, byte [esp + 0x1ac]
test dl, dl
jne 0x4e31ad
mov edx, 1
jmp 0x4e31d6
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
mov ecx, dword [esp + 0x64]
mov edx, eax
movzx eax, byte [esp + 0x3e]
test dl, dl
je 0x4e35d2
test ecx, ecx
jne 0x4e31f2
mov edx, dword [esp + 0x17c]
mov ebx, dword [esp + 0x180]
jmp 0x4e31fb
mov ebx, ecx
mov edx, dword [esp + 0x108]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x108], edx
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
lea eax, [0x70c26c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 9
call fcn.004e7d40
mov eax, dword [esp + 0x64]
test eax, eax
setne al
movzx ecx, byte [esp + 0x10]
mov byte [esp + 0x3f], cl
lea edi, [esp + 0x2e4]
mov edx, eax
xor eax, eax
call fcn.00468c1f
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x2e4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x2e8], ecx
mov byte [esp + 0x308], dl
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x30c], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x310], ecx
mov dword [esp + 0x314], ecx
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
mov dword [esp + 0x318], ecx
mov dword [esp + 0x31c], edx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x320], cl
movzx ecx, byte [esp + 0x3e]
mov byte [esp + 0x321], cl
mov ecx, dword [esp + 0x2e4]
mov edx, dword [esp + 0x2e8]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00452050
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2ec], eax
mov dword [esp + 0x2f0], ecx
mov dword [esp + 0x2f4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp], ebx
mov dword [esp + 4], 0
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004e3c70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x100], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x5c], edx
mov dword [esp], 0
lea ebx, [0x771d6c]
mov dword [esp + 4], ebx
mov dword [esp + 8], 1
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
lea eax, [0x70a5c4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.00451cb0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x300], eax
mov dword [esp + 0x304], ecx
mov eax, dword [esp + 0x2e4]
mov ecx, dword [esp + 0x2e8]
mov dword [esp], 0
lea edx, [0x771d6c]
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x70a5c4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.00451cb0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x2f8], eax
mov dword [esp + 0x2fc], ecx
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
inc ecx
mov edx, dword [esp + 0x154]
cmp eax, ecx
jae 0x4e3450
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6f1640]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x154], edx
mov dword [esp + 0x158], ecx
mov eax, dword [0x98d4e0]
mov ebx, ecx
shl ecx, 6
lea ecx, [ecx + ebx*4]
lea edi, [edx + ecx - 0x44]
test eax, eax
je 0x4e3498
mov dword [esp + 0x128], edi
lea eax, [0x6f1640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esp + 0x2e4]
mov dword [esp + 8], ecx
call fcn.00411600
mov edi, dword [esp + 0x128]
lea esi, [esp + 0x2e4]
call fcn.00469096
lea eax, [0x6c18a0]
mov dword [esp], eax
mov ecx, dword [esp + 0x120]
mov dword [esp + 4], ecx
lea edx, [esp + 0x3a0]
mov dword [esp + 8], edx
call fcn.0040d340
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x4e35b0
mov ecx, dword [esp + 0x158]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4e37ad
mov eax, dword [esp + 0x154]
mov edx, ecx
shl ecx, 6
lea ecx, [ecx + edx*4]
lea esi, [ecx + eax - 0x44]
lea edi, [esp + 0x47c]
call fcn.00469096
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
inc ecx
mov edx, dword [esp + 0x154]
cmp eax, ecx
jae 0x4e355c
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6f1640]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x154], edx
mov dword [esp + 0x158], ecx
mov eax, dword [0x98d4e0]
mov ebx, ecx
shl ecx, 6
lea ecx, [ecx + ebx*4]
lea edi, [edx + ecx - 0x44]
test eax, eax
je 0x4e35a4
mov dword [esp + 0x128], edi
lea eax, [0x6f1640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x47c]
mov dword [esp + 8], eax
call fcn.00411600
mov edi, dword [esp + 0x128]
lea esi, [esp + 0x47c]
call fcn.00469096
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xfc]
jmp 0x4e2dda
lea eax, [0x6c18a0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 4], ecx
lea edx, [esp + 0x144]
mov dword [esp + 8], edx
call fcn.0040d890
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x6c18a0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 4], ecx
lea edx, [esp + 0x144]
mov dword [esp + 8], edx
call fcn.0040d340
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x4e3640
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xfc]
jmp 0x4e379d
mov eax, dword [esp + 0x54]
inc eax
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
mov ecx, dword [ecx + 0x60]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x88], ecx
lea edi, [esp + 0x438]
mov edx, eax
xor eax, eax
call fcn.00468c1f
mov dword [esp + 0x438], edx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x43c], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x460], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x464], ecx
mov dword [esp + 0x468], ecx
mov ecx, dword [esp + 0x148]
mov edx, dword [esp + 0x144]
mov dword [esp + 0x46c], edx
mov dword [esp + 0x470], ecx
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x8c]
cmp ecx, edx
jb 0x4e36f1
mov eax, edx
mov ebp, dword [esp + 0xfc]
mov ebx, ecx
jmp 0x4e3726
mov eax, dword [esp + 0xfc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6f1640]
mov dword [esp + 0x10], eax
call fcn.0044e1d0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [0x98d4e0]
mov edx, eax
shl eax, 6
lea eax, [eax + edx*4]
lea edi, [ebp + eax - 0x44]
test ecx, ecx
je 0x4e3791
mov dword [esp + 0x124], ebp
mov dword [esp + 0x90], edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x128], edi
lea eax, [0x6f1640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x438]
mov dword [esp + 8], eax
call fcn.00411600
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x124]
mov edi, dword [esp + 0x128]
lea esi, [esp + 0x438]
call fcn.00469096
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
jmp 0x4e2dda
call fcn.00468a00
call fcn.00468a00
nop
call fcn.00467590
jmp fcn.004e2260