Function at 0x4f64d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4f8670
sub esp, 0x64
movzx eax, word [esp + 0x70]
test ax, ax
je 0x4f8649
lea eax, [0x758e00]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
movzx ecx, word [eax]
mov word [esp], cx
call fcn.00409480
lea eax, [0x758e00]
mov dword [esp], eax
call fcn.004ca510
mov eax, dword [esp + 8]
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4f85f4
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x14], ebp
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f662d
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4f65d0
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x7cfe10]
mov dword [esp], eax
mov dword [esp + 4], 0x29
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x38]
movzx ecx, word [eax]
cmp cx, 0x10b
je 0x4f7626
cmp cx, 0x20b
jne 0x4f75a3
lea eax, [0x7a9ae0]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x3c], eax
lea ecx, [0x7a9ae0]
mov dword [esp], ecx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x7a9ae0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004ca510
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
lea ecx, [0x74fbc0]
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
lea ebx, [edx + 0x70]
mov dword [esp + 0x34], ebx
mov dword [esp + 4], ebx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x74fbc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004ca510
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 8]
mov dword [esp + 0x24], eax
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4f74f5
mov eax, dword [esp + 0x38]
movzx eax, word [eax]
mov ecx, dword [esp + 0x3c]
mov word [ecx], ax
lea eax, [0x767960]
mov dword [esp], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744360]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 2]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6759
mov edx, 1
jmp 0x4f67c5
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744360]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 3]
mov dword [esp + 0x14], ebp
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f67d3
mov edx, 1
jmp 0x4f68b1
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 4]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6845
mov edx, 1
jmp 0x4f68b1
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 8]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f68bf
mov edx, 1
jmp 0x4f699d
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0xc]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6931
mov edx, 1
jmp 0x4f699d
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x10]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f69ab
mov edx, 1
jmp 0x4f6a89
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x14]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6a1d
mov edx, 1
jmp 0x4f6a89
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744320]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x18]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f6a97
mov edx, 1
jmp 0x4f6b75
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x20]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6b09
mov edx, 1
jmp 0x4f6b75
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x24]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f6b83
mov edx, 1
jmp 0x4f6c61
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x28]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6bf5
mov edx, 1
jmp 0x4f6c61
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2a]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f6c6f
mov edx, 1
jmp 0x4f6d4d
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2c]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6ce1
mov edx, 1
jmp 0x4f6d4d
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2e]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f6d5b
mov edx, 1
jmp 0x4f6e39
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x30]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6dcd
mov edx, 1
jmp 0x4f6e39
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x32]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f6e47
mov edx, 1
jmp 0x4f6f25
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x34]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6eb9
mov edx, 1
jmp 0x4f6f25
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x38]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f6f33
mov edx, 1
jmp 0x4f7011
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x3c]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f6fa5
mov edx, 1
jmp 0x4f7011
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x40]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f701f
mov edx, 1
jmp 0x4f70fd
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x44]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7091
mov edx, 1
jmp 0x4f70fd
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 0x46]
mov dword [esp + 0x14], ebp
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f710b
mov edx, 1
jmp 0x4f71e9
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744320]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x48]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f717d
mov edx, 1
jmp 0x4f71e9
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744320]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x50]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f71f7
mov edx, 1
jmp 0x4f72d5
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744320]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x58]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7269
mov edx, 1
jmp 0x4f72d5
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744320]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 0x60]
mov dword [esp + 0x14], ebp
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f72e3
mov edx, 1
jmp 0x4f73c1
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x68]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7355
mov edx, 1
jmp 0x4f73c1
lea eax, [0x767960]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea ecx, [0xaaacd4]
mov dword [esp + 0xc], ecx
lea ecx, [0x7442e0]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + 0x6c]
mov dword [esp + 0x14], edx
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7441
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4f73e4
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x7cfde7]
mov dword [esp], eax
mov dword [esp + 4], 0x29
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
movzx edx, word [esp + 0x70]
mov ebx, dword [esp + 0x24]
sub edx, ebx
mov word [esp + 8], dx
mov dword [esp + 0xc], ecx
call fcn.004f8680
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4f74d6
cmp ebp, 0x10
jl 0x4f7492
mov ebp, 0x10
mov eax, dword [esp + 0x34]
cmp ebx, eax
je 0x4f74ad
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ebp, 3
mov dword [esp + 8], ebp
call fcn.00464d50
lea eax, [0x73b420]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
add esp, 0x64
ret
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov word [esp], cx
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x758e00]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.004094f0
mov eax, dword [esp + 4]
lea ecx, [0x7583c0]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x7d8397]
mov dword [esp], eax
mov dword [esp + 4], 0x4c
lea eax, [esp + 0x54]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
movzx eax, word [eax]
mov word [esp], ax
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x758e00]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
lea eax, [0x7d1623]
mov dword [esp], eax
mov dword [esp + 4], 0x2c
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
lea eax, [0x7aa020]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x40], eax
lea ecx, [0x7aa020]
mov dword [esp], ecx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x7aa020]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004ca510
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
lea ecx, [0x74fbc0]
mov dword [esp], ecx
mov edx, dword [esp + 0x40]
lea ebx, [edx + 0x60]
mov dword [esp + 0x30], ebx
mov dword [esp + 4], ebx
call fcn.00409410
mov eax, dword [esp + 8]
lea ecx, [0x74fbc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004ca510
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 8]
mov dword [esp + 0x28], eax
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4f8546
mov eax, dword [esp + 0x38]
movzx eax, word [eax]
mov ecx, dword [esp + 0x40]
mov word [ecx], ax
lea eax, [0x767960]
mov dword [esp], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744360]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 2]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7738
mov edx, 1
jmp 0x4f7816
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x744360]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
lea ebp, [ebx + 3]
mov dword [esp + 0x14], ebp
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f77aa
mov edx, 1
jmp 0x4f7816
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 4]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7824
mov edx, 1
jmp 0x4f7902
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 8]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7896
mov edx, 1
jmp 0x4f7902
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0xc]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7910
mov edx, 1
jmp 0x4f79ee
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x10]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7982
mov edx, 1
jmp 0x4f79ee
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x14]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f79fc
mov edx, 1
jmp 0x4f7ada
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x18]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7a6e
mov edx, 1
jmp 0x4f7ada
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x1c]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7ae8
mov edx, 1
jmp 0x4f7bc6
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x20]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7b5a
mov edx, 1
jmp 0x4f7bc6
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x24]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7bd4
mov edx, 1
jmp 0x4f7cb2
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x28]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7c46
mov edx, 1
jmp 0x4f7cb2
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2a]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7cc0
mov edx, 1
jmp 0x4f7d9e
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2c]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7d32
mov edx, 1
jmp 0x4f7d9e
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2e]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7dac
mov edx, 1
jmp 0x4f7e8a
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x30]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7e1e
mov edx, 1
jmp 0x4f7e8a
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x32]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7e98
mov edx, 1
jmp 0x4f7f76
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x34]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7f0a
mov edx, 1
jmp 0x4f7f76
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x38]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f7f84
mov edx, 1
jmp 0x4f8062
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x3c]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f7ff6
mov edx, 1
jmp 0x4f8062
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x40]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f8070
mov edx, 1
jmp 0x4f814e
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x44]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f80e2
mov edx, 1
jmp 0x4f814e
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442a0]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
lea ebp, [ebx + 0x46]
mov dword [esp + 0x14], ebp
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f815c
mov edx, 1
jmp 0x4f823a
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x48]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f81ce
mov edx, 1
jmp 0x4f823a
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x4c]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f8248
mov edx, 1
jmp 0x4f8326
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x50]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f82ba
mov edx, 1
jmp 0x4f8326
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x54]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f8334
mov edx, 1
jmp 0x4f8412
lea eax, [0x767960]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea edx, [0xaaacd4]
mov dword [esp + 0xc], edx
lea ebx, [0x7442e0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x58]
mov dword [esp + 0x14], esi
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4f83a6
mov edx, 1
jmp 0x4f8412
lea eax, [0x767960]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00409700
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x846244]
mov dword [esp + 8], ecx
lea ecx, [0xaaacd4]
mov dword [esp + 0xc], ecx
lea ecx, [0x7442e0]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x40]
lea edx, [ecx + 0x5c]
mov dword [esp + 0x14], edx
call fcn.004c91a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4f8492
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4f8435
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x7cf747]
mov dword [esp], eax
mov dword [esp + 4], 0x28
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x5c]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
movzx edx, word [esp + 0x70]
mov ebx, dword [esp + 0x28]
sub edx, ebx
mov word [esp + 8], dx
mov dword [esp + 0xc], ecx
call fcn.004f8680
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4f8527
cmp ebp, 0x10
jl 0x4f84e3
mov ebp, 0x10
mov eax, dword [esp + 0x30]
cmp ebx, eax
je 0x4f84fe
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ebp, 3
mov dword [esp + 8], ebp
call fcn.00464d50
lea eax, [0x73b3e0]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
add esp, 0x64
ret
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov word [esp], cx
call fcn.00409480
mov eax, dword [esp + 4]
lea ecx, [0x758e00]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.004094f0
mov eax, dword [esp + 4]
lea ecx, [0x7583c0]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x7d818c]
mov dword [esp], eax
mov dword [esp + 4], 0x4a
lea eax, [esp + 0x54]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
lea eax, [0x7d630e]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.004d7070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
call fcn.00462fa0
jmp fcn.004f64d0