Function at 0x4c1de0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6b21fc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov eax, esp
sub eax, 0x1730
jb 0x4c36b9
cmp eax, dword [ecx + 8]
jbe 0x4c36b9
sub esp, 0x17b0
mov edx, dword [esp + 0x17bc]
test edx, edx
jne 0x4c1e16
xor eax, eax
jmp 0x4c1e3c
lea edi, [esp + 0x190]
mov ecx, 0x566
xor eax, eax
rep stosd dword es:[edi], eax
lea edx, [esp + 0x190]
mov dword [esp], edx
call fcn.00432140
lea eax, [esp + 0x190]
mov dword [esp + 0x1730], eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov byte [esp + 0xc], 1
call fcn.004303f0
mov eax, dword [esp + 0x10]
jmp 0x4c1e6c
mov eax, ecx
lea ecx, [0x538600]
mov dword [esp], ecx
add eax, 0x32
mov dword [esp + 0x3c], eax
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0044f1d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x173c], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
call fcn.004303f0
mov ecx, dword [esp + 0x10]
movzx eax, byte [esp + 0x14]
test al, al
je 0x4c1e6a
mov edx, dword [esp + 0x3c]
cmp ecx, edx
ja 0x4c36b3
mov eax, dword [esp + 0x17bc]
test eax, eax
je 0x4c20c1
mov dword [esp + 0x40], ecx
mov eax, dword [esp + 0x173c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409c90
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1758], 0
mov dword [esp + 0x175c], 0
mov dword [esp + 0x1760], 0
mov dword [esp + 0x1764], 0
lea ecx, [0x4c36d0]
mov dword [esp + 0x1758], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x1760], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x1764], edx
mov edx, dword [esp + 0x173c]
mov dword [esp + 0x175c], edx
lea ebx, [0x526420]
mov dword [esp], ebx
mov dword [esp + 4], eax
lea eax, [esp + 0x1758]
mov dword [esp + 8], eax
call fcn.00470910
mov eax, dword [esp + 0x17b4]
lea ecx, [0x5d4444]
cmp eax, ecx
jne 0x4c1f88
mov edx, dword [esp + 0x17b8]
jmp 0x4c1f8d
mov edx, 0
jne 0x4c1f9f
cmp dword [edx + 0xc], 0x1000
jl 0x4c1f9f
mov eax, edx
jmp 0x4c203a
lea eax, [0x52abc0]
mov dword [esp], eax
mov dword [esp + 4], 0x1000
mov dword [esp + 8], 0x1000
call fcn.0044f1d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1738], eax
lea ecx, [0x537120]
mov dword [esp], ecx
call fcn.0040c3d0
mov eax, dword [esp + 4]
mov dword [eax + 0xc], 0x1000
mov dword [eax + 0x10], 0x1000
mov ecx, dword [0x6b2320]
test ecx, ecx
jne 0x4c1ffb
mov ecx, dword [esp + 0x1738]
jmp 0x4c2009
call fcn.00468860
mov ecx, dword [esp + 0x1738]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x17b4]
mov dword [eax + 0x18], ecx
mov ecx, dword [0x6b2320]
test ecx, ecx
jne 0x4c2029
mov ecx, dword [esp + 0x17b8]
jmp 0x4c2037
call fcn.00468860
mov ecx, dword [esp + 0x17b8]
mov dword [edi], ecx
mov dword [eax + 0x1c], ecx
mov dword [esp + 0x1728], eax
nop
lea ecx, [0x53dc60]
mov dword [esp], ecx
call fcn.0040c3d0
mov eax, dword [esp + 4]
mov dword [esp], eax
lea eax, [0x5d4444]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1728]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 8
mov dword [esp + 0x14], 1
mov byte [esp + 0x18], 9
mov dword [esp + 0x1c], 0
call fcn.004b5fd0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x172c], eax
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.00468a88
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x173c]
xor ebx, ebx
jmp 0x4c21e1
mov eax, dword [0x67f3f0]
mov ebx, dword [esp + 0x17b4]
mov dword [esp], ebx
mov ebx, dword [esp + 0x17b8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x173c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x17c0]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x17c4]
mov dword [esp + 0x20], eax
call fcn.004cd230
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x17c8], eax
mov dword [esp + 0x17cc], ecx
add esp, 0x17b0
ret
lea ebp, [ebx + ebx*4]
shl ebp, 5
mov esi, dword [esp + 0xf0]
mov edi, dword [esp + 0xf4]
mov eax, dword [ebp + edx]
mov ecx, dword [ebp + edx + 4]
inc ebx
add esi, eax
mov dword [esp + 0xf0], esi
adc edi, ecx
mov dword [esp + 0xf4], edi
mov esi, dword [esp + 0x100]
mov eax, dword [esp + 0x104]
mov ecx, dword [ebp + edx + 0x10]
mov edi, dword [ebp + edx + 0x14]
add esi, ecx
mov dword [esp + 0x100], esi
adc eax, edi
mov dword [esp + 0x104], eax
mov esi, dword [esp + 0xf8]
mov eax, dword [esp + 0xfc]
mov ecx, dword [ebp + edx + 8]
mov edi, dword [ebp + edx + 0xc]
add esi, ecx
mov dword [esp + 0xf8], esi
adc eax, edi
mov dword [esp + 0xfc], eax
mov esi, dword [esp + 0x108]
mov eax, dword [esp + 0x10c]
mov ecx, dword [ebp + edx + 0x18]
mov ebp, dword [ebp + edx + 0x1c]
add esi, ecx
mov dword [esp + 0x108], esi
adc eax, ebp
mov dword [esp + 0x10c], eax
mov ecx, dword [esp + 0x40]
xor eax, eax
cmp ebx, ecx
jl 0x4c2134
mov ebx, dword [esp + 0xf0]
mov dword [esp + 0x48], ebx
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xfc]
nop
sub ebx, esi
mov dword [esp + 0x2c], ebx
mov esi, ebp
sbb ebp, edi
mov dword [esp + 0x34], ebp
cmp esi, ebp
xchg edi, ebx
sete bl
xchg edi, ebx
mov edx, dword [esp + 0x48]
cmp ebx, edx
sete cl
and edi, ecx
xchg edi, eax
test al, al
xchg edi, eax
je 0x4c2238
add edx, 1
adc esi, 0
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], esi
mov ecx, dword [0x67f3f0]
shl ecx, 1
mov dword [esp + 0x38], ecx
mov ebx, dword [esp + 0x100]
mov ebp, dword [esp + 0x104]
mov edi, dword [esp + 0x108]
mov dword [esp + 0x64], edi
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x60], ecx
lea edi, [esp + 0x1788]
call fcn.00468aa6
mov ecx, dword [esp + 0x64]
sub ebx, ecx
mov ecx, dword [esp + 0x60]
sbb ebp, ecx
mov dword [esp + 4], ebp
mov dword [esp], ebx
call fcn.00409b60
mov ecx, dword [esp + 8]
lea edx, [0x52aac0]
mov dword [esp + 0x1788], edx
mov dword [esp + 0x178c], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
call fcn.00409b60
mov ecx, dword [esp + 8]
lea edx, [0x52aac0]
mov dword [esp + 0x1790], edx
mov dword [esp + 0x1794], ecx
mov ecx, dword [esp + 0x100]
mov ebx, dword [esp + 0x104]
mov dword [esp + 4], ebx
mov dword [esp], ecx
call fcn.00409b60
mov ecx, dword [esp + 8]
lea edx, [0x52aac0]
mov dword [esp + 0x1798], edx
mov dword [esp + 0x179c], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp], ecx
call fcn.00409b60
mov ecx, dword [esp + 8]
lea edx, [0x52aac0]
mov dword [esp + 0x17a0], edx
mov dword [esp + 0x17a4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
call fcn.00409b00
mov ecx, dword [esp + 4]
lea edx, [0x52aa00]
mov dword [esp + 0x17a8], edx
mov dword [esp + 0x17ac], ecx
lea ecx, [0x5d4430]
mov dword [esp], ecx
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x55120e]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x28
lea ebx, [esp + 0x1788]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 5
mov dword [esp + 0x18], 5
call fcn.004a48b0
xor eax, eax
jmp 0x4c23de
lea ecx, [0x5d4430]
mov dword [esp], ecx
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x1734]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x20
mov byte [esp + 0x14], 0
call fcn.004c1a00
mov eax, dword [esp + 0x44]
inc eax
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jge 0x4c25ed
mov dword [esp + 0x44], eax
lea ecx, [eax + eax*4]
shl ecx, 5
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x173c]
mov ebx, dword [ecx + edx + 0x10]
mov ebp, dword [ecx + edx + 0x14]
mov esi, dword [ecx + edx + 0x1c]
mov edi, dword [ecx + edx + 0x18]
mov dword [esp + 0x64], edi
mov eax, dword [ecx + edx]
mov dword [esp + 0x58], eax
mov eax, dword [ecx + edx + 4]
mov dword [esp + 0x60], eax
mov eax, dword [ecx + edx + 0xc]
mov dword [esp + 0x54], eax
mov eax, dword [ecx + edx + 8]
mov dword [esp + 0x50], eax
lea ecx, [ecx + edx + 0x20]
mov dword [esp + 0x1734], ecx
lea edi, [esp + 0x1768]
xor eax, eax
call fcn.00468aa8
mov ecx, dword [esp + 0x64]
sub ebx, ecx
sbb ebp, esi
mov dword [esp + 4], ebp
mov dword [esp], ebx
call fcn.00409b60
mov ecx, dword [esp + 8]
lea edx, [0x52aac0]
mov dword [esp + 0x1768], edx
mov dword [esp + 0x176c], ecx
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0x50]
sub ecx, ebx
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x54]
sbb ebx, ebp
mov dword [esp + 4], ebx
mov dword [esp], ecx
call fcn.00409b60
mov ecx, dword [esp + 8]
lea edx, [0x52aac0]
mov dword [esp + 0x1770], edx
mov dword [esp + 0x1774], ecx
mov ecx, dword [esp + 0x173c]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [ebx + ecx + 0x10]
mov esi, dword [ebx + ecx + 0x14]
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.00409b60
mov ecx, dword [esp + 8]
lea edx, [0x52aac0]
mov dword [esp + 0x1778], edx
mov dword [esp + 0x177c], ecx
mov ecx, dword [esp + 0x173c]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [ebx + ecx]
mov ebx, dword [ebx + ecx + 4]
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.00409b60
mov ecx, dword [esp + 8]
lea edx, [0x52aac0]
mov dword [esp + 0x1780], edx
mov dword [esp + 0x1784], ecx
lea ecx, [0x5d4430]
mov dword [esp], ecx
mov ebx, dword [esp + 0x172c]
mov dword [esp + 4], ebx
lea ebp, [0x549066]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 0x11
lea esi, [esp + 0x1768]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 4
call fcn.004a48b0
lea edi, [esp + 0x70]
mov esi, dword [esp + 0x1734]
call fcn.00468e80
xor eax, eax
jmp 0x4c35e4
mov eax, 0x20
mov dword [esp + 0x30], eax
xor ecx, ecx
jmp 0x4c368f
lea eax, [0x5d4430]
mov dword [esp], eax
mov ecx, dword [esp + 0x172c]
mov dword [esp + 4], ecx
lea edx, [0x5d1fc8]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004a48b0
lea edi, [esp + 0x70]
mov esi, dword [esp + 0x1734]
call fcn.00468e80
xor eax, eax
jmp 0x4c369d
mov eax, 0x20
jmp 0x4c23a4
lea eax, [0x5d4430]
mov dword [esp], eax
mov ecx, dword [esp + 0x172c]
mov dword [esp + 4], ecx
lea edx, [0x54a2bf]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x14
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x547f1a]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xd
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x5494ea]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x12
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x5476d1]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xb
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x1c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x54870a]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xf
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x20]
mov edx, dword [eax + 0x24]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x548719]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xf
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x28]
mov edx, dword [eax + 0x2c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x547f27]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xd
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x30]
mov edx, dword [eax + 0x34]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x549077]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x11
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x38]
mov edx, dword [eax + 0x3c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x548728]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xf
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0x44]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x548b91]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x10
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x48]
mov edx, dword [eax + 0x4c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x549088]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x11
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x50]
mov edx, dword [eax + 0x54]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x54a2d3]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x14
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0x5c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x549bb6]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x13
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1748], 0
mov dword [esp + 0x174c], 0
mov dword [esp + 0x1750], 0
mov dword [esp + 0x1754], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x60]
mov edx, dword [eax + 0x64]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1748], ecx
mov dword [esp + 0x174c], eax
mov eax, dword [esp + 0x1730]
mov edx, dword [eax + 0x68]
mov ebx, dword [eax + 0x6c]
mov dword [esp + 4], ebx
mov dword [esp], edx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1750], ecx
mov dword [esp + 0x1754], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x5494fc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x12
lea ebx, [esp + 0x1748]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 2
call fcn.004a48b0
mov dword [esp + 0x1748], 0
mov dword [esp + 0x174c], 0
mov dword [esp + 0x1750], 0
mov dword [esp + 0x1754], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x70]
mov edx, dword [eax + 0x74]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1748], ecx
mov dword [esp + 0x174c], eax
mov eax, dword [esp + 0x1730]
mov edx, dword [eax + 0x78]
mov ebx, dword [eax + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp], edx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1750], ecx
mov dword [esp + 0x1754], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x54950e]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x12
lea ebx, [esp + 0x1748]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 2
call fcn.004a48b0
mov dword [esp + 0x1748], 0
mov dword [esp + 0x174c], 0
mov dword [esp + 0x1750], 0
mov dword [esp + 0x1754], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x80]
mov edx, dword [eax + 0x84]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1748], ecx
mov dword [esp + 0x174c], eax
mov eax, dword [esp + 0x1730]
mov edx, dword [eax + 0x88]
mov ebx, dword [eax + 0x8c]
mov dword [esp + 4], ebx
mov dword [esp], edx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1750], ecx
mov dword [esp + 0x1754], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x549bc9]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x13
lea ebx, [esp + 0x1748]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 2
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x90]
mov edx, dword [eax + 0x94]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x549bdc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x13
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x98]
mov edx, dword [eax + 0x9c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x547f34]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xd
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0xa0]
mov edx, dword [eax + 0xa4]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x548ba1]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x10
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0xa8]
mov edx, dword [eax + 0xac]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x5482e4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xe
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0xb0]
mov edx, dword [eax + 0xb4]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52ac80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov ecx, dword [esp + 0x172c]
mov dword [esp + 4], ecx
lea edx, [0x5482f2]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xe
lea edx, [esp + 0x1740]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
lea eax, [0x528780]
mov dword [esp], eax
mov ecx, dword [esp + 0x1730]
lea edx, [ecx + 0xc0]
mov dword [esp + 4], edx
call fcn.00409a30
mov eax, dword [esp + 8]
lea ecx, [0x528780]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x548737]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xf
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
lea eax, [0x528780]
mov dword [esp], eax
mov ecx, dword [esp + 0x1730]
lea edx, [ecx + 0x8c0]
mov dword [esp + 4], edx
call fcn.00409a30
mov eax, dword [esp + 8]
lea ecx, [0x528780]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov ecx, dword [esp + 0x172c]
mov dword [esp + 4], ecx
lea edx, [0x548bb1]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x10
lea edx, [esp + 0x1740]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x10c0]
mov dword [esp], ecx
call fcn.00409b00
mov eax, dword [esp + 4]
lea ecx, [0x52ab80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x547f41]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0xd
lea ebx, [esp + 0x1740]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
mov ecx, dword [eax + 0x10c4]
mov dword [esp], ecx
call fcn.00409b00
mov eax, dword [esp + 4]
lea ecx, [0x52ab80]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov ecx, dword [esp + 0x172c]
mov dword [esp + 4], ecx
lea edx, [0x549bef]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x13
lea edx, [esp + 0x1740]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
movsd xmm0, qword [eax + 0x10c8]
movsd qword [esp + 0x68], xmm0
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00409b60
mov eax, dword [esp + 8]
lea ecx, [0x52a9c0]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov ecx, dword [esp + 0x172c]
mov dword [esp + 4], ecx
lea edx, [0x54a88e]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x15
lea edx, [esp + 0x1740]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov eax, dword [esp + 0x1730]
movzx eax, byte [eax + 0x10d1]
lea ecx, [0x52a8c0]
mov dword [esp + 0x1740], ecx
lea ecx, [0x684860]
lea eax, [ecx + eax*8]
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov ecx, dword [esp + 0x172c]
mov dword [esp + 4], ecx
lea edx, [0x548746]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xf
lea edx, [esp + 0x1740]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
lea eax, [0x5d4430]
mov dword [esp], eax
mov eax, dword [esp + 0x172c]
mov dword [esp + 4], eax
call fcn.004c3c10
nop
mov eax, dword [esp + 0x172c]
mov dword [esp], eax
call fcn.004b6a10
mov eax, dword [esp + 0x1728]
mov dword [esp], eax
call fcn.004b54c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x17c8], eax
mov dword [esp + 0x17cc], ecx
add esp, 0x17b0
ret
inc eax
cmp eax, 0x20
jge 0x4c2579
mov ecx, dword [esp + eax*4 + 0x70]
test ecx, ecx
jne 0x4c35e3
jmp 0x4c257e
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0x1734]
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x1740], 0
mov dword [esp + 0x1744], 0
mov dword [esp], edx
call fcn.00409b00
mov eax, dword [esp + 4]
lea ecx, [0x52ab40]
mov dword [esp + 0x1740], ecx
mov dword [esp + 0x1744], eax
lea eax, [0x5d4430]
mov dword [esp], eax
mov edx, dword [esp + 0x172c]
mov dword [esp + 4], edx
lea ebx, [0x5465ea]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 4
lea ebp, [esp + 0x1740]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.004a48b0
mov eax, dword [esp + 0x5c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x30]
cmp ecx, eax
jl 0x4c35fa
jmp 0x4c2589
inc eax
cmp eax, 0x20
jge 0x4c25e3
mov ecx, dword [esp + eax*4 + 0x70]
test ecx, ecx
jne 0x4c369c
jmp 0x4c23a4
call fcn.00468910
nop
call fcn.00467460
jmp fcn.004c1de0