Function at 0x488b5d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
mov eax, dword [0x4010c0]
xor eax, esp
mov dword [esp + 0xa0], eax
push ebx
push esi
push edi
mov edi, ecx
mov ebx, edx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], edi
mov edx, dword [edi + 8]
mov dword [esp + 0x10], edx
xor edx, edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x40], edx
mov dword [esp + 0x18], edx
test ebx, ebx
je case.0x488bed.112
cmp dword [edi + 0x48], edx
je 0x488bc8
test dword [ebx + 4], 0x800000
jne 0x488bc8
push dword [ebp + 8]
mov edx, ebx
mov ecx, edi
call fcn.00488a5c
pop ecx
test eax, eax
jns 0x4896d0
xor edx, edx
movzx esi, byte [ebx]
cmp esi, 0x6d
jbe 0x489550
lea eax, [esi - 0x6e]
mov ecx, esi
mov dword [esp + 0x14], ecx
cmp eax, 0x47
ja case.0x488bed.112
movzx eax, byte [eax + 0x489ab9]
jmp dword [eax*4 + 0x489a59]
test dword [ebx + 4], 0x200
je 0x488c06
mov ebx, dword [ebx + 0xc]
mov dword [esp + 0x30], ebx
jmp 0x488b9b
mov esi, dword [ebp + 8]
mov ecx, edi
mov edx, dword [ebx + 0xc]
push esi
call fcn.00489c9f
pop ecx
push 0
push 0
push esi
mov edx, 0xb3
mov ecx, dword [esp + 0x1c]
call fcn.004746eb
mov eax, esi
jmp 0x4896cd
mov ecx, dword [ebx + 0x28]
movsx edx, word [ebx + 0x22]
cmp edx, dword [ecx + 0x18]
jl 0x488c57
mov esi, dword [ebp + 8]
push 0
push esi
push 0
push 0x4b
pop edx
mov ecx, dword [esp + 0x1c]
call fcn.004746eb
add esp, 0xc
jmp 0x489a23
mov eax, edx
shl eax, 4
add eax, dword [ecx + 0x14]
cmp byte [ecx], 0
mov dword [esp + 0x20], eax
jne 0x488c72
mov eax, dword [ecx + 0xc]
add eax, edx
jmp 0x4896d0
cmp byte [ecx + 1], 0
je 0x488cda
mov edi, dword [eax]
mov ebx, dword [ebp + 8]
movsx eax, word [eax + 0xe]
mov esi, dword [esp + 0x10]
push ebx
push eax
push dword [ecx + 8]
mov ecx, esi
push 0x5e
pop edx
call fcn.004746eb
add esp, 0xc
test edi, edi
je 0x488eaa
mov eax, dword [esp + 0x20]
movzx eax, word [eax + 0xc]
test ax, ax
js 0x488eaa
movsx ecx, ax
mov eax, dword [edi + 4]
add ecx, ecx
cmp byte [eax + ecx*8 + 8], 0x45
jne 0x488eaa
push 0
push 0
push ebx
push 0x57
pop edx
mov ecx, esi
call fcn.004746eb
add esp, 0xc
jmp 0x488eaa
cmp dword [ebx + 0x2c], 0
jne case.0x488bed.167
mov esi, dword [ebp + 8]
movsx eax, word [ebx + 0x20]
push esi
push eax
push dword [ebx + 0x1c]
push 0x5e
pop edx
jmp 0x488c1f
test byte [ebx + 4], 0x20
mov ecx, dword [ebx + 0x1c]
je 0x488d53
push dword [ebp + 8]
mov edx, dword [ebx + 0xc]
mov ecx, edi
call fcn.00488b5d
movsx edx, word [ebx + 0x20]
mov esi, eax
pop ecx
mov ecx, dword [ebx + 0x2c]
call fcn.00485055
movsx edi, al
cmp edi, 0x41
jle 0x488d4c
mov ecx, dword [esp + 0x10]
push 0
push 1
push esi
push 0x60
pop edx
call fcn.004746eb
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov edx, eax
lea eax, [edi*2 + 0x4244f4]
push 0xffffffffffffffff
push eax
call fcn.00474eab
pop ecx
pop ecx
mov eax, esi
jmp 0x4896d0
test ecx, ecx
jns 0x488e10
mov eax, dword [edi + 0x34]
test eax, eax
jns 0x488e0d
movzx edx, word [ebx + 0x20]
mov ebx, dword [ebx + 0x2c]
movsx esi, dx
test esi, esi
jns 0x488d7b
not eax
jmp 0x4896d0
shl esi, 4
mov ecx, ebx
add esi, dword [ebx + 4]
call fcn.00490d7b
movsx ecx, ax
sub ecx, dword [edi + 0x34]
movzx eax, word [esi + 0xe]
mov dword [esp + 0x20], ecx
test al, 0x60
je 0x488de5
mov edx, pe_nt_image_headers32
test edx, eax
je 0x488dba
push dword [esi]
push 0x42eff8
push edi
call fcn.0045c6d7
add esp, 0xc
xor eax, eax
jmp 0x4896d0
or eax, edx
mov word [esi + 0xe], ax
test al, al
jns 0x488dd5
push ecx
push esi
mov edx, ebx
mov ecx, edi
call fcn.0048862b
pop ecx
pop ecx
mov ecx, dword [esp + 0x20]
mov eax, 0xfe7f
and word [esi + 0xe], ax
mov eax, ecx
jmp 0x4896d0
cmp byte [esi + 8], 0x45
jne 0x488dde
mov ebx, dword [ebp + 8]
push 0
push ebx
push ecx
mov ecx, dword [esp + 0x1c]
push 0x51
pop edx
call fcn.004746eb
add esp, 0xc
push 0
push 0
push ebx
push 0x57
jmp 0x4896c1
lea ecx, [eax - 1]
mov al, byte [ebx + 2]
push dword [ebp + 8]
mov edx, dword [ebx + 0x2c]
mov byte [esp + 0x2b], al
movsx eax, word [ebx + 0x20]
push eax
push ecx
mov ecx, dword [edi + 8]
call fcn.004886d1
mov bl, byte [esp + 0x33]
add esp, 0xc
test bl, bl
je 0x488eaa
mov ecx, dword [edi + 8]
mov edx, dword [ecx + 0x6c]
dec edx
call fcn.00474f68
mov ecx, eax
cmp byte [ecx], 0x5e
jne 0x488eaa
movzx eax, bl
mov word [ecx + 2], ax
jmp 0x488eaa
mov esi, dword [ebp + 8]
mov ecx, edi
push esi
push edx
mov edx, ebx
call fcn.004884e7
jmp 0x488d4a
mov ecx, ebx
call fcn.00485271
mov ebx, dword [ebp + 8]
xor ecx, ecx
push edx
push ebx
mov eax, dword [eax + 8]
cmp byte [eax + 4], cl
sete cl
push ecx
push 0x47
jmp 0x4896c1
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x10]
push esi
push edx
mov edx, dword [ebx + 8]
call fcn.00488476
jmp 0x488d4a
push dword [ebx + 8]
mov edx, dword [ebp + 8]
mov ecx, dword [esp + 0x14]
call fcn.00474755
pop ecx
mov eax, dword [ebp + 8]
jmp 0x4896d0
mov esi, dword [ebx + 8]
lea ecx, [esi + 2]
call fcn.0045c53b
lea edx, [esi + 2]
mov esi, dword [esp + 0x10]
lea edi, [eax - 1]
mov ecx, dword [esi]
push edi
call fcn.0045d654
mov ebx, dword [ebp + 8]
pop ecx
push 0xfffffffffffffffa
push eax
mov eax, edi
mov ecx, esi
cdq
push 0
sub eax, edx
push ebx
sar eax, 1
push eax
push 0x4d
pop edx
call fcn.00474815
add esp, 0x14
mov eax, ebx
jmp 0x4896d0
movsx eax, word [ebx + 0x20]
mov esi, dword [esp + 0x10]
mov ecx, esi
push edx
push dword [ebp + 8]
push eax
push 0x4e
pop edx
call fcn.004746eb
mov eax, dword [ebx + 8]
add esp, 0xc
cmp byte [eax + 1], 0
je 0x488eaa
movsx edx, word [ebx + 0x20]
mov ecx, dword [edi + 0xe8]
call fcn.0045dbbb
and dword [ecx], 0
mov edx, eax
push 0xffffffffffffffff
mov ecx, esi
call fcn.00474f1c
jmp 0x488ea9
mov eax, dword [ebx + 0x1c]
jmp 0x4896d0
mov edx, dword [ebx + 0xc]
mov al, byte [edx]
cmp al, 0x9b
jne 0x488f5c
mov ebx, dword [ebp + 8]
mov ecx, edi
push ebx
push 1
call fcn.004884e7
pop ecx
pop ecx
jmp 0x488eee
cmp al, 0x99
jne 0x488f74
mov ebx, dword [ebp + 8]
mov edx, dword [edx + 8]
mov ecx, dword [esp + 0x10]
push ebx
push 1
call fcn.00488476
jmp 0x488f58
and dword [esp + 0x80], 0
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x7c]
mov byte [esp + 0x7c], 0x9b
mov ecx, edi
mov dword [esp + 0x80], 0x10800
call fcn.00489c23
mov edx, dword [ebx + 0xc]
mov esi, eax
pop ecx
lea eax, [esp + 0x40]
mov ecx, edi
push eax
call fcn.00489c23
pop ecx
push dword [ebp + 8]
push esi
push eax
push 0x6b
pop edx
jmp 0x489a14
mov edx, dword [ebx + 0xc]
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call fcn.00489c23
pop ecx
mov ecx, dword [ebx + 0x10]
mov esi, eax
call fcn.00485271
xor ecx, ecx
cmp byte [ebx + 2], 0x2d
sete cl
mov eax, dword [eax + 8]
mov dl, byte [eax + 4]
xor eax, eax
test dl, dl
sete al
xor ecx, eax
xor eax, eax
push ecx
mov ecx, dword [esp + 0x14]
test dl, dl
setne al
push eax
push dword [ebp + 8]
push esi
push 0x5b
pop edx
call fcn.00474a00
add esp, 0x10
jmp 0x489a20
mov ecx, dword [ebx + 0x28]
test ecx, ecx
je 0x489032
movzx eax, word [ebx + 0x22]
test ax, ax
js 0x489032
movsx edx, ax
cmp edx, dword [ecx + 0x24]
jge 0x489032
mov eax, dword [ecx + 0x18]
add eax, dword [ecx + 0xc]
jmp 0x488c6b
push ebx
push 0x42f040
push edi
call fcn.0045c6d7
jmp 0x489a1d
test dword [ebx + 4], 0x1000000
mov ecx, dword [edi]
mov dword [esp + 0x38], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x34], edx
mov al, byte [ecx + 0x54]
mov byte [esp + 0x20], al
je 0x48906c
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x38]
jmp 0x4896d0
cmp byte [edi + 0x17], 0
je 0x489099
push edx
push 2
pop edx
mov ecx, ebx
call fcn.00486edc
pop ecx
test eax, eax
je 0x489093
push 0xffffffffffffffff
mov edx, ebx
mov ecx, edi
call fcn.00489b01
pop ecx
jmp 0x4896d0
mov ecx, dword [esp + 0x2c]
xor edx, edx
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x14], eax
test eax, eax
je 0x4890ac
mov eax, dword [eax]
mov dword [esp + 0x18], eax
jmp 0x4890b2
mov eax, edx
mov dword [esp + 0x18], edx
push edx
push dword [esp + 0x24]
mov edx, dword [ebx + 8]
push eax
call fcn.00495fd5
mov esi, eax
add esp, 0xc
mov dword [esp + 0x28], esi
test esi, esi
je 0x4892c0
cmp dword [esi + 0x14], 0
jne 0x4892c0
test dword [esi + 4], 0x400000
je 0x4890f8
push dword [ebp + 8]
mov edx, dword [esp + 0x18]
mov ecx, edi
push dword [esi + 8]
call fcn.00488882
pop ecx
jmp 0x48908d
test dword [esi + 4], 0x280000
je 0x48910c
push esi
mov edx, ebx
mov ecx, edi
call fcn.00485e7a
pop ecx
mov ecx, dword [esp + 0x18]
xor edx, edx
mov dword [esp + 0x1c], edx
test ecx, ecx
jle 0x48917c
mov ebx, dword [esp + 0x14]
add ebx, 8
cmp edx, 0x20
jae 0x48914a
mov ecx, dword [ebx]
xor edx, edx
push 0
inc edx
call fcn.00486edc
mov edx, dword [esp + 0x20]
pop ecx
mov ecx, dword [esp + 0x18]
test eax, eax
je 0x48914a
mov eax, dword [esp + 0x38]
bts eax, edx
mov dword [esp + 0x38], eax
test byte [esi + 4], 0x20
je 0x48916c
cmp dword [esp + 0x34], 0
jne 0x48916c
mov edx, dword [ebx]
mov ecx, edi
call fcn.004852ac
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x34], eax
inc edx
add ebx, 0x14
mov dword [esp + 0x1c], edx
cmp edx, ecx
jl 0x489121
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4891ee
cmp dword [esp + 0x38], 0
je 0x4891a4
mov eax, dword [edi + 0x2c]
lea ebx, [eax + 1]
add eax, ecx
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x1c]
mov dword [edi + 0x2c], eax
jmp 0x4891b7
mov edx, ecx
mov ecx, edi
call fcn.0048b563
mov edx, dword [esp + 0x14]
mov ecx, eax
mov dword [esp + 0x1c], ecx
test byte [esi + 4], 0xc0
je 0x4891d9
mov eax, dword [edx + 8]
mov al, byte [eax]
cmp al, 0xa7
je 0x4891ca
cmp al, 0xa9
jne 0x4891d9
mov ebx, dword [edx + 8]
mov al, byte [esi + 4]
and al, 0xc0
mov byte [ebx + 2], al
mov ebx, dword [esp + 0x30]
push 3
push 0
push ecx
mov ecx, edi
call fcn.00489d7c
mov edx, dword [esp + 0x20]
add esp, 0xc
jmp 0x4891f3
and dword [esp + 0x1c], 0
mov eax, dword [esp + 0x18]
cmp eax, 2
jl 0x48921c
test dword [ebx + 4], 0x100
je 0x489220
push dword [edx + 0x1c]
mov ecx, dword [esp + 0x30]
mov edx, esi
push eax
call fcn.004b0f61
mov esi, eax
mov dword [esp + 0x30], esi
jmp 0x489235
test eax, eax
jle 0x489237
push dword [edx + 8]
mov ecx, dword [esp + 0x30]
mov edx, esi
push eax
call fcn.004b0f61
mov esi, eax
mov dword [esp + 0x30], eax
pop ecx
pop ecx
test byte [esi + 4], 0x20
je 0x48927a
cmp dword [esp + 0x34], 0
jne 0x48924f
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 8]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x10]
xor eax, eax
push eax
push eax
push eax
push 0x55
pop edx
call fcn.004746eb
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov edx, eax
push 0xfffffffffffffffe
push dword [esp + 0x38]
call fcn.00474eab
mov esi, dword [esp + 0x30]
pop ecx
pop ecx
movzx eax, byte [ebx + 2]
mov ecx, edi
mov ebx, dword [esp + 0x1c]
mov edx, dword [esp + 0x38]
push eax
push esi
mov esi, dword [esp + 0x20]
push esi
push dword [ebp + 8]
push ebx
call fcn.00474844
add esp, 0x14
test esi, esi
je 0x488eaa
cmp dword [esp + 0x38], 0
jne 0x488eaa
push esi
mov edx, ebx
mov ecx, edi
call fcn.0048b599
add esp, 4
jmp 0x488eaa
push ebx
push 0x42f05c
jmp 0x489038
mov esi, dword [ebx + 0xc]
cmp dword [esi + 0x1c], edx
je 0x4892db
mov al, byte [edi + 0x1a]
cmp al, byte [esi + 2]
jbe 0x4892ed
mov edx, esi
mov ecx, edi
call fcn.00487cc3
mov dword [esi + 0x1c], eax
mov al, byte [edi + 0x1a]
mov byte [esi + 2], al
mov ecx, esi
call fcn.00485543
cmp dword [ebx + 0x1c], eax
je 0x48930b
push eax
push dword [ebx + 0x1c]
push 0x42eeac
push edi
call fcn.0045c6d7
add esp, 0x10
movsx eax, word [ebx + 0x20]
add eax, dword [esi + 0x1c]
jmp 0x4896d0
push 0x42ea24
push edi
call fcn.0045c6d7
pop ecx
pop ecx
jmp 0x489a20
mov al, byte [edi + 0x17]
mov edx, dword [ebx + 0x28]
mov byte [esp + 0x27], al
test edx, edx
je 0x48936b
cmp byte [edx], 0
jne 0x489348
movsx esi, word [ebx + 0x22]
add esi, dword [edx + 0xc]
jmp 0x489a23
cmp byte [edx + 1], 0
je 0x48936b
movsx ecx, word [ebx + 0x22]
mov eax, dword [edx + 0x14]
add ecx, ecx
mov esi, dword [ebp + 8]
push esi
movsx eax, word [eax + ecx*8 + 0xe]
push eax
push dword [edx + 8]
push 0x5e
jmp 0x488c45
push dword [ebp + 8]
mov ecx, dword [esp + 0x14]
push 0
push dword [ebx + 0x1c]
push 0x14
pop edx
call fcn.004746eb
add esp, 0xc
mov byte [edi + 0x17], 0
mov edx, dword [ebx + 0xc]
mov ecx, edi
mov esi, eax
push dword [ebp + 8]
call fcn.00489c9f
mov al, byte [esp + 0x2b]
mov edx, esi
pop ecx
mov ecx, dword [esp + 0x10]
mov byte [edi + 0x17], al
call fcn.00474f68
mov ecx, dword [ecx + 0x6c]
mov dword [eax + 8], ecx
jmp 0x489a20
mov eax, dword [ebx + 0x14]
mov ecx, dword [edi]
mov dword [esp + 0x28], edx
mov dword [esp + 0x18], edx
lea edx, [eax + 8]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x2c], edx
mov edx, dword [eax]
mov eax, dword [edi + 0x38]
dec eax
mov dword [esp + 0x14], ecx
mov dword [edi + 0x38], eax
mov esi, dword [ebx + 0xc]
mov dword [esp + 0x30], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], esi
test esi, esi
je 0x489462
xor ebx, ebx
mov edx, esi
push ebx
push ebx
call fcn.004861de
mov esi, eax
mov eax, dword [esp + 0x1c]
pop ecx
pop ecx
mov dword [esp + 0x18], esi
cmp byte [eax + 0x57], bl
je 0x48941d
test esi, esi
je 0x489a20
mov edx, esi
mov ecx, eax
call fcn.0048602a
jmp 0x489a20
lea eax, [esp + 0x1c]
mov edx, esi
push eax
mov ecx, edi
call fcn.004887fc
pop ecx
mov edx, eax
mov ecx, esi
call fcn.004887e0
push 0x34
lea eax, [esp + 0x48]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x50]
mov dword [esp + 0x5c], esi
add esp, 0xc
mov esi, dword [esp + 0x34]
mov byte [esp + 0x44], 0x35
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x10]
lea eax, [edx - 1]
test eax, eax
jle 0x4894e5
dec eax
shr eax, 1
inc eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
test esi, esi
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x28]
cmovne eax, ecx
cmove edx, ecx
mov dword [esp + 0x54], eax
dec dword [edi + 0x38]
mov esi, dword [edi + 0x38]
push 0x10
push esi
push edx
push edi
mov dword [esp + 0x38], edx
call fcn.0048a31b
mov edx, dword [esp + 0x3c]
mov ecx, edi
push dword [ebp + 8]
mov edx, dword [edx + 0x14]
call fcn.00489c9f
mov edx, dword [esp + 0x34]
add esp, 0x14
mov ecx, ebx
call fcn.00474744
mov edx, esi
mov ecx, ebx
call fcn.00474ac0
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x34]
add eax, 0x28
sub dword [esp + 0x38], 1
mov dword [esp + 0x2c], eax
jne 0x489479
mov edx, dword [esp + 0x30]
mov esi, dword [ebp + 8]
test dl, 1
je 0x489503
mov eax, dword [esp + 0x3c]
mov ecx, edi
imul edx, edx, 0x14
push esi
mov edx, dword [edx + eax - 0xc]
call fcn.00489c9f
pop ecx
jmp 0x489515
push 0
push esi
push 0
push 0x4b
pop edx
mov ecx, ebx
call fcn.004746eb
add esp, 0xc
mov eax, dword [esp + 0x18]
test eax, eax
je 0x489528
mov ecx, dword [esp + 0x14]
mov edx, eax
call fcn.0048602a
mov edx, dword [ebx + 0x6c]
mov ecx, ebx
dec edx
call fcn.00474f68
cmp byte [eax], 0x50
jne 0x489540
xor edx, edx
inc edx
call fcn.00474c95
mov edx, dword [esp + 0x20]
mov ecx, ebx
call fcn.00474ac0
jmp 0x489a23
mov dword [esp + 0x14], esi
je case.0x488bed.110
cmp esi, 0x36
ja 0x4897bc
mov edx, esi
mov dword [esp + 0x14], edx
je 0x489903
cmp esi, 0x30
ja 0x489686
je 0x489670
mov dword [esp + 0x14], esi
mov ecx, esi
mov dword [esp + 0x14], ecx
sub esi, 0x13
je case.0x488bed.114
sub esi, 1
je case.0x488bed.138
sub esi, 0x10
je 0x4895d3
sub esi, 7
je case.0x488bed.110
sub esi, 1
je case.0x488bed.110
sub esi, 1
jne case.0x488bed.112
xor eax, eax
mov esi, 0x80
cmp ecx, 0x2d
mov dword [esp + 0x18], esi
sete al
lea edx, [eax + 0x34]
mov dword [esp + 0x14], edx
jmp 0x489907
mov esi, dword [ebp + 8]
mov ecx, edi
mov edx, dword [ebx + 0xc]
push esi
call fcn.00489c9f
pop ecx
mov ecx, dword [ebx + 8]
xor edx, edx
call fcn.00491698
push 0
movsx eax, al
push eax
push esi
push 0x58
jmp 0x488cee
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
jne 0x488db3
cmp ecx, 0x8a
jne 0x489642
test dword [ebx + 4], 0x1000
je 0x489642
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + 0x1c]
mov ecx, dword [eax]
xor eax, eax
inc eax
cmp ecx, eax
je 0x489642
cmp dword [edi + 0x24], 0
jne 0x489a20
push eax
push ecx
push 0x42ef48
push edi
call fcn.0045c6d7
jmp 0x489007
mov edx, ebx
mov ecx, edi
call fcn.00487cc3
jmp 0x4896d0
mov edx, dword [ebx + 0xc]
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call fcn.00489c23
mov esi, dword [ebp + 8]
mov edx, dword [esp + 0x18]
pop ecx
push 0
push esi
push eax
jmp 0x488c46
mov esi, dword [ebp + 8]
mov edx, ebx
push 0
push 0
push esi
mov ecx, edi
call fcn.00489ec5
jmp 0x488c28
mov eax, esi
mov dword [esp + 0x14], esi
mov edx, esi
mov dword [esp + 0x14], edx
sub eax, 0x31
je 0x489747
sub eax, 1
je 0x4896e5
sub eax, 1
je 0x4896e5
sub eax, 1
je 0x489903
sub eax, 1
je 0x489903
mov ebx, dword [ebp + 8]
push 0
push ebx
push 0
push 0x4b
mov ecx, dword [esp + 0x20]
pop edx
call fcn.004746eb
mov eax, ebx
add esp, 0xc
mov ecx, dword [esp + 0xac]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004caec8
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x10]
push 0
push dword [ebp + 8]
push 1
push 0x47
pop edx
call fcn.004746eb
mov edx, dword [ebx + 0xc]
lea eax, [esp + 0x28]
add esp, 0xc
mov ecx, edi
push eax
call fcn.00489c23
mov ebx, dword [esp + 0x14]
mov edx, esi
pop ecx
push 0
push 0
push eax
mov ecx, ebx
call fcn.004746eb
add esp, 0xc
mov ecx, ebx
mov esi, eax
push 0
push dword [ebp + 8]
push 0
push 0x47
pop edx
call fcn.004746eb
add esp, 0xc
mov edx, esi
mov ecx, ebx
call fcn.00474f68
mov ecx, dword [ebx + 0x6c]
jmp 0x4893ab
mov esi, dword [edi + 0x38]
mov eax, dword [esp + 0x20]
dec esi
mov ecx, dword [esp + 0x10]
push 0
push dword [ebp + 8]
lea edi, [esi - 1]
push 0
push 0x4b
pop edx
mov dword [eax + 0x38], edi
call fcn.004746eb
mov ecx, dword [esp + 0x2c]
add esp, 0xc
mov edx, ebx
push edi
push esi
call fcn.00487f6b
mov ebx, dword [ebp + 8]
mov ecx, dword [esp + 0x18]
push 0
push ebx
push 1
push 0x47
pop edx
call fcn.004746eb
add esp, 0x14
mov edx, esi
mov esi, dword [esp + 0x10]
mov ecx, esi
call fcn.00474ac0
push 0
push 0
push ebx
push 0x56
pop edx
mov ecx, esi
call fcn.004746eb
add esp, 0xc
mov edx, edi
mov ecx, esi
call fcn.00474ac0
jmp 0x488eee
mov dword [esp + 0x14], esi
cmp esi, 0x67
ja 0x4899c8
je case.0x488bed.110
mov dword [esp + 0x14], esi
mov edx, esi
mov dword [esp + 0x14], edx
sub esi, 0x37
je 0x489903
sub esi, 1
je 0x489903
sub esi, 1
je 0x489903
sub esi, 0xe
je 0x489881
sub esi, 6
je 0x489810
sub esi, 0x19
je case.0x488bed.110
jmp case.0x488bed.112
movzx edx, word [ebx + 0x20]
mov esi, dword [ebx + 0x2c]
mov ecx, esi
movsx eax, dx
mov dword [esp + 0x20], esi
mov dword [esp + 0x3c], eax
call fcn.00490d7b
movsx ecx, ax
mov edx, 0x9d
movsx eax, word [esi + 0x22]
inc ecx
mov esi, dword [ebp + 8]
inc eax
imul eax, dword [ebx + 0x1c]
mov ebx, dword [esp + 0x10]
push 0
push esi
add eax, ecx
mov ecx, ebx
push eax
call fcn.004746eb
mov ecx, dword [esp + 0x48]
add esp, 0xc
test ecx, ecx
js 0x489a23
mov eax, dword [esp + 0x20]
add ecx, ecx
mov eax, dword [eax + 4]
cmp byte [eax + ecx*8 + 8], 0x45
jne 0x489a23
push 0
push 0
push esi
push 0x57
pop edx
mov ecx, ebx
jmp 0x488c4a
xor edx, edx
cmp dword [edi + 0x7c], edx
jne 0x48989f
cmp byte [edi + 0x12], dl
jne 0x48989f
push 0x42f074
push edi
call fcn.0045c6d7
pop ecx
pop ecx
jmp 0x488db3
xor ecx, ecx
inc ecx
cmp byte [ebx + 1], 2
jne 0x4898b4
cmp dword [edi + 0x78], edx
mov eax, edi
cmovne eax, dword [edi + 0x78]
mov byte [eax + 0x15], cl
mov al, byte [ebx + 1]
mov esi, dword [ebx + 8]
push edx
cmp al, 4
jne 0x4898e4
mov ecx, dword [esp + 0x14]
push 4
push edx
push 0x46
pop edx
call fcn.004746eb
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov edx, eax
push 0
push esi
call fcn.00474eab
jmp 0x489322
cmp dword [edi + 0x7c], edx
push edx
movsx eax, al
push esi
push eax
mov eax, 0x713
cmovne ecx, eax
mov edx, ecx
mov ecx, edi
call fcn.004955e1
jmp 0x489007
mov esi, dword [esp + 0x18]
mov ecx, dword [ebx + 0xc]
mov dword [esp + 0x3c], ecx
call fcn.00485543
cmp eax, 1
jle 0x48992c
push esi
mov esi, dword [ebp + 8]
mov ecx, edi
push edx
push esi
mov edx, ebx
call fcn.00485675
jmp 0x488c4f
lea eax, [esp + 0x1c]
mov edx, ecx
push eax
mov ecx, edi
call fcn.00489c23
mov edx, dword [ebx + 0x10]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x44]
pop ecx
push eax
mov ecx, edi
call fcn.00489c23
mov esi, dword [ebp + 8]
pop ecx
mov ecx, dword [esp + 0x10]
push 0
push esi
push 1
push 0x47
pop edx
mov dword [esp + 0x2c], eax
call fcn.004746eb
mov eax, dword [ebx + 4]
add esp, 0xc
mov edx, dword [esp + 0x3c]
mov ecx, edi
shr eax, 0xa
and eax, 1
push eax
mov eax, dword [esp + 0x14]
push dword [esp + 0x1c]
mov eax, dword [eax + 0x6c]
add eax, 2
push eax
push dword [esp + 0x2c]
push dword [esp + 0x38]
push dword [esp + 0x28]
push dword [ebx + 0x10]
call fcn.004854d1
mov ecx, dword [esp + 0x2c]
add esp, 0x1c
cmp dword [esp + 0x18], 0x80
jne 0x4899b7
push 0
push esi
push 0
push 0x47
jmp 0x4899c2
push dword [esp + 0x20]
push esi
push dword [esp + 0x30]
push 0x5c
pop edx
jmp 0x488c4a
mov dword [esp + 0x14], esi
sub esi, 0x68
je case.0x488bed.110
sub esi, 1
je case.0x488bed.110
sub esi, 1
je case.0x488bed.110
sub esi, 1
je case.0x488bed.110
sub esi, 1
jne case.0x488bed.112
mov edx, dword [ebx + 0xc]
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call fcn.00489c23
mov edx, dword [ebx + 0x10]
mov esi, eax
pop ecx
lea eax, [esp + 0x40]
mov ecx, edi
push eax
call fcn.00489c23
mov edx, dword [esp + 0x18]
pop ecx
push dword [ebp + 8]
push esi
push eax
mov ecx, dword [esp + 0x1c]
call fcn.004746eb
add esp, 0xc
mov esi, dword [ebp + 8]
mov edx, dword [esp + 0x1c]
mov ecx, edi
call fcn.0048b54a
mov edx, dword [esp + 0x40]
test edx, edx
je 0x488d4c
mov cl, byte [edi + 0x13]
cmp cl, 8
jae 0x488d4c
movzx ecx, cl
mov dword [edi + ecx*4 + 0xa0], edx
inc byte [edi + 0x13]
jmp 0x488d4c