Function at 0x4910a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x495e02
sub esp, 0xa0
movzx ebx, byte [0x6cfc1b]
cmp bl, 1
jbe 0x4910d3
add esp, 0xa0
ret
movzx ebx, byte [0x6cfc1b]
cmp bl, 1
jne 0x4910e6
call fcn.00427c30
ud2
mov byte [0x6cfc1b], 1
call fcn.004d37a0
call fcn.004e6200
call fcn.004f2550
call fcn.004d8fb0
call fcn.0045e4b0
call fcn.004f3ad0
call fcn.004f78f0
call fcn.004fdcb0
call fcn.004d6360
call fcn.004a9110
call fcn.004d81b0
call fcn.00515cf0
call fcn.004e51c0
call fcn.0051ce00
call fcn.0051d120
call fcn.0051ef30
call fcn.004dae10
call fcn.0051f1e0
call fcn.004dc5e0
call fcn.00520d80
call fcn.00522c20
call fcn.005247f0
call fcn.005252d0
call fcn.004e59a0
call fcn.00525400
call fcn.005340a0
call fcn.0044cf80
call fcn.0053f750
call fcn.00541c00
call fcn.00542960
mov ebx, 0x5f519e
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be538], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495dec
mov dword [0x6be53c], ebx
mov dword [esp], 0x5b8120
call fcn.0040db10
mov eax, dword [esp + 4]
mov ebp, dword [0x612660]
mov dword [eax], ebp
mov ebp, dword [0x612664]
mov dword [eax + 4], ebp
mov ebp, dword [0x612668]
mov dword [eax + 8], ebp
mov ebp, dword [0x61266c]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x612670]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x612674]
mov dword [eax + 0x14], ebp
mov ebp, dword [0x612678]
mov dword [eax + 0x18], ebp
mov ebp, dword [0x61267c]
mov dword [eax + 0x1c], ebp
mov edx, 4
mov ecx, 4
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 0x74], edx
mov dword [esp + 4], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 8], ecx
call fcn.004f8660
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495dd6
mov dword [0x6bdf78], ebx
mov ebx, 0x5f1b42
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be598], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495dc0
mov dword [0x6be59c], ebx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.004a6c10
mov ebx, dword [esp + 0x10]
mov dword [0x6be930], ebx
mov ebx, dword [esp + 0x14]
mov dword [0x6be934], ebx
mov ebx, dword [esp + 0x18]
mov dword [0x6be938], ebx
mov ebx, dword [esp + 0x1c]
cmp byte [0x6cfdd8], 0
jne 0x495daa
mov dword [0x6be93c], ebx
mov dword [esp], 0x5be700
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495d94
mov dword [0x6bdf90], ebx
xor eax, eax
cmp eax, 0xe
jge 0x49136f
mov dword [esp], 0x5be700
mov ebx, dword [0x6bdf90]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612e80
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612e80
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0xe
jl 0x491326
mov ebx, 0x5f8f98
mov dword [esp], ebx
mov dword [esp + 4], 0x2a
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be648], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495d7e
mov dword [0x6be64c], ebx
mov ebx, 0x5f6f51
mov dword [esp], ebx
mov dword [esp + 4], 0x21
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be658], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495d68
mov dword [0x6be65c], ebx
mov ebx, 0x5f51ef
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be668], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495d52
mov dword [0x6be66c], ebx
mov ebx, 0x5f48e0
mov dword [esp], ebx
mov dword [esp + 4], 0x19
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be6b0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495d3c
mov dword [0x6be6b4], ebx
mov dword [esp], 0x5bd220
mov dword [esp + 4], 0xff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0xff
mov dword [esp + 0x10], 0
call fcn.0043b3e0
mov ebx, dword [esp + 0x18]
mov dword [0x6be86c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [0x6be870], ebx
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495d26
mov dword [0x6be868], ebx
mov dword [esp], 0x5be800
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495d10
mov dword [0x6bdf98], ebx
xor eax, eax
cmp eax, 0xa
jge 0x491531
mov dword [esp], 0x5be800
mov ebx, dword [0x6bdf98]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612c40
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612c40
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0xa
jl 0x4914e8
mov dword [esp], 0x5be780
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495cfa
mov dword [0x6bdf94], ebx
mov byte [esp + 0x23], 0
mov dword [esp], 0x5be740
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 2
jge 0x4915fb
mov dword [esp], 0x5be740
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x6125c0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x6125c0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 2
jl 0x4915b4
mov dword [esp], 0x5be780
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 1
mov dword [esp], 0x5be740
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 4
jge 0x4916a8
mov dword [esp], 0x5be740
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x6127a0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x6127a0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 4
jl 0x491661
mov dword [esp], 0x5be780
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 4
mov dword [esp], 0x5be740
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x491755
mov dword [esp], 0x5be740
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x611f68
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x611f68
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x49170e
mov dword [esp], 0x5be780
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 6
mov dword [esp], 0x5be740
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x491802
mov dword [esp], 0x5be740
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x611f78
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x611f78
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x4917bb
mov dword [esp], 0x5be780
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 9
mov dword [esp], 0x5be740
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x4918af
mov dword [esp], 0x5be740
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x611f88
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x611f88
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x491868
mov dword [esp], 0x5be780
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 5
mov dword [esp], 0x5be740
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 2
jge 0x49195c
mov dword [esp], 0x5be740
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x6125e0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x6125e0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 2
jl 0x491915
mov dword [esp], 0x5be780
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov dword [esp], 0x5be7c0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495ce4
mov dword [0x6bdf9c], ebx
mov byte [esp + 0x23], 0
mov ebx, 0x611b74
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 1
mov ebx, 0x611b7c
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 2
mov ebx, 0x611b84
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 3
mov ebx, 0x611b8c
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 4
mov ebx, 0x611b90
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 5
mov ebx, 0x611b88
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 6
mov ebx, 0x611b80
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 7
mov ebx, 0x611b78
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 8
mov ebx, 0x611b98
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov byte [esp + 0x23], 9
mov ebx, 0x611b70
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be7c0
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406d30
mov ebx, 0x5f3470
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be5d8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495cce
mov dword [0x6be5dc], ebx
mov ebx, 0x5f1a32
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be698], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495cb8
mov dword [0x6be69c], ebx
mov ebx, 0x5f50c6
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be618], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495ca2
mov dword [0x6be61c], ebx
mov ebx, 0x5f2b28
mov dword [esp], ebx
mov dword [esp + 4], 0x14
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be650], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495c8c
mov dword [0x6be654], ebx
mov ebx, 0x5f3208
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d9360
mov edx, dword [esp + 8]
mov eax, dword [esp + 0xc]
cmp eax, 1
jne 0x495c80
mov dword [esp + 0x48], edx
mov dword [esp], edx
mov dword [esp + 0x4c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee272
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x495c80
mov byte [0x6cfc17], 1
mov dword [esp], 0x5becc0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495c6a
mov dword [0x6bdf8c], ebx
mov dword [esp], 0x5becc0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495c54
mov dword [0x6bdf88], ebx
mov dword [esp], 0x5be840
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495c3e
mov dword [0x6bdfa4], ebx
xor eax, eax
cmp eax, 6
jge 0x491e1e
mov dword [esp], 0x5be840
mov ebx, dword [0x6bdfa4]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612b20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612b20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 6
jl 0x491dd5
mov ebx, 0x5f6960
mov dword [esp], ebx
mov dword [esp + 4], 0x20
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be630], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495c28
mov dword [0x6be634], ebx
mov ebx, 0x5f6e49
mov dword [esp], ebx
mov dword [esp + 4], 0x21
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be638], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495c12
mov dword [0x6be63c], ebx
mov dword [esp], 0x5be600
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495bfc
mov dword [0x6bdfa0], ebx
mov dword [esp], 0x5ca400
call fcn.0040db10
mov eax, dword [esp + 4]
mov ebp, 0x5f879d
mov dword [eax], ebp
mov dword [eax + 4], 0x28
mov ecx, 1
mov byte [eax + 8], cl
mov ecx, eax
mov eax, 0x6a6b90
mov dword [esp + 0x68], eax
mov dword [0x6be6a0], eax
mov dword [esp + 0x6c], ecx
cmp byte [0x6cfdd8], 0
jne 0x495be6
mov dword [0x6be6a4], ecx
mov ebx, 0x5f3730
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be608], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495bd0
mov dword [0x6be60c], ebx
mov ebx, 0x5f236f
mov dword [esp], ebx
mov dword [esp + 4], 0x13
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be5f8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495bba
mov dword [0x6be5fc], ebx
mov ebx, 0x5f33c0
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be600], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495ba4
mov dword [0x6be604], ebx
mov ebx, 0x5fa10c
mov dword [esp], ebx
mov dword [esp + 4], 0x31
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be620], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495b8e
mov dword [0x6be624], ebx
mov ebx, 0x5f2a38
mov dword [esp], ebx
mov dword [esp + 4], 0x14
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be690], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495b78
mov dword [0x6be694], ebx
mov ebx, 0x5f3a81
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be628], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495b62
mov dword [0x6be62c], ebx
mov dword [esp], 0x5beb40
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495b4c
mov dword [0x6bdf84], ebx
xor eax, eax
cmp eax, 0x15
jge 0x4920f2
mov dword [esp], 0x5beb40
mov ebx, dword [0x6bdf84]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x613020
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x613020
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0x15
jl 0x4920a9
mov ebx, 0x5fb934
mov dword [esp], ebx
mov dword [esp + 4], 0x3e
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be6a8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495b36
mov dword [0x6be6ac], ebx
mov ebx, 0x5f8b8e
mov dword [esp], ebx
mov dword [esp + 4], 0x29
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be5e0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495b20
mov dword [0x6be5e4], ebx
mov ebx, 0x5f565d
mov dword [esp], ebx
mov dword [esp + 4], 0x1c
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be5e8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495b0a
mov dword [0x6be5ec], ebx
mov ebx, 0x5f5b79
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be5f0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495af4
mov dword [0x6be5f4], ebx
mov ebx, 0x5f4cbb
mov dword [esp], ebx
mov dword [esp + 4], 0x1a
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be670], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495ade
mov dword [0x6be674], ebx
mov ebx, 0x5f72f6
mov dword [esp], ebx
mov dword [esp + 4], 0x22
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be680], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495ac8
mov dword [0x6be684], ebx
mov ebx, 0x5f4076
mov dword [esp], ebx
mov dword [esp + 4], 0x18
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be688], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495ab2
mov dword [0x6be68c], ebx
mov ebx, 0x5f505a
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be610], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495a9c
mov dword [0x6be614], ebx
mov ebx, 0x5f3a98
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be640], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495a86
mov dword [0x6be644], ebx
mov ebx, 0x5fb3f8
mov dword [esp], ebx
mov dword [esp + 4], 0x38
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be678], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495a70
mov dword [0x6be67c], ebx
mov ebx, 0x5f8775
mov dword [esp], ebx
mov dword [esp + 4], 0x28
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be660], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495a5a
mov dword [0x6be664], ebx
xor ebx, ebx
mov dword [esp], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004d80c0
mov ecx, dword [esp + 0xc]
mov eax, 0x6a6950
mov dword [esp + 0x60], eax
mov dword [esp], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 4], ecx
call fcn.0045e0a0
mov ebx, dword [esp + 8]
mov dword [0x6be6b8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495a44
mov dword [0x6be6bc], ebx
mov dword [esp], 0x5b8120
call fcn.0040db10
mov eax, dword [esp + 4]
mov ebp, dword [0x612680]
mov dword [eax], ebp
mov ebp, dword [0x612684]
mov dword [eax + 4], ebp
mov ebp, dword [0x612688]
mov dword [eax + 8], ebp
mov ebp, dword [0x61268c]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x612690]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x612694]
mov dword [eax + 0x14], ebp
mov ebp, dword [0x612698]
mov dword [eax + 0x18], ebp
mov ebp, dword [0x61269c]
mov dword [eax + 0x1c], ebp
mov edx, 4
mov ecx, 4
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 0x74], edx
mov dword [esp + 4], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 8], ecx
call fcn.004f8660
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495a2e
mov dword [0x6bdf7c], ebx
mov ebx, 0x5f1e66
mov dword [esp], ebx
mov dword [esp + 4], 0x12
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be518], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495a18
mov dword [0x6be51c], ebx
mov dword [esp], 0x5beb40
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495a02
mov dword [0x6bdfac], ebx
xor eax, eax
cmp eax, 5
jge 0x4924f1
mov dword [esp], 0x5beb40
mov ebx, dword [0x6bdfac]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612a60
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612a60
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 5
jl 0x4924a8
mov ebx, 0x5f6131
mov dword [esp], ebx
mov dword [esp + 4], 0x1e
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be520], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x4959ec
mov dword [0x6be524], ebx
mov dword [esp], 0x5beb00
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x4959d6
mov dword [0x6be6c0], ebx
mov dword [esp], 0x5bea40
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x4959c0
mov dword [0x6be6c4], ebx
mov ebx, 0x5fadfc
mov dword [esp], ebx
mov dword [esp + 4], 0x36
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be568], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x4959aa
mov dword [0x6be56c], ebx
mov dword [esp], 0x5beb40
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406120
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdd8], 0
jne 0x495994
mov dword [0x6bdfb0], ebx
xor eax, eax
cmp eax, 3
jge 0x492676
mov dword [esp], 0x5beb40
mov ebx, dword [0x6bdfb0]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x6126e0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x6126e0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00406d30
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 3
jl 0x49262d
mov ebx, 0x5f7a07
mov dword [esp], ebx
mov dword [esp + 4], 0x24
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be528], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x49597e
mov dword [0x6be52c], ebx
mov ebx, 0x5fbb6e
mov dword [esp], ebx
mov dword [esp + 4], 0x40
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be4e8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495968
mov dword [0x6be4ec], ebx
mov ebx, 0x5f7318
mov dword [esp], ebx
mov dword [esp + 4], 0x22
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be508], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495952
mov dword [0x6be50c], ebx
mov ebx, 0x5fa13d
mov dword [esp], ebx
mov dword [esp + 4], 0x31
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be4f8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x49593c
mov dword [0x6be4fc], ebx
mov ebx, 0x5eece2
mov dword [esp], ebx
mov dword [esp + 4], 6
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be540], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495926
mov dword [0x6be544], ebx
mov ebx, 0x5f3ac6
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d6b10
mov ebx, dword [esp + 8]
mov dword [0x6be5b0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdd8], 0
jne 0x495910
mov ebp, 0x6be544
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492784
mov ebp, 0x6be4fc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49274e
mov ebp, 0x6be50c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492718
mov ebp, 0x6be4ec
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4926e2
mov ebp, 0x6be52c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4926ac
mov ebp, 0x6bdfb0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492626
mov ebp, 0x6be56c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4925e3
mov ebp, 0x6be6c4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4925ad
mov ebp, 0x6be6c0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49256a
mov ebp, 0x6be524
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492527
mov ebp, 0x6bdfac
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4924a1
mov ebp, 0x6be51c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49245e
mov ebp, 0x6bdf7c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492428
mov ebp, 0x6be6bc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492394
mov ebp, 0x6be664
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492344
mov ebp, 0x6be67c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49230e
mov ebp, 0x6be644
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4922d8
mov ebp, 0x6be614
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4922a2
mov ebp, 0x6be68c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49226c
mov ebp, 0x6be684
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492236
mov ebp, 0x6be674
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492200
mov ebp, 0x6be5f4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4921ca
mov ebp, 0x6be5ec
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492194
mov ebp, 0x6be5e4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49215e
mov ebp, 0x6be6ac
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492128
mov ebp, 0x6bdf84
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4920a2
mov ebp, 0x6be62c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49205f
mov ebp, 0x6be694
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x492029
mov ebp, 0x6be624
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491ff3
mov ebp, 0x6be604
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491fbd
mov ebp, 0x6be5fc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491f87
mov ebp, 0x6be60c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491f51
mov ebp, 0x6be6a4
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040e4e0
jmp 0x491f1b
mov ebp, 0x6bdfa0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491ecd
mov ebp, 0x6be63c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491e8a
mov ebp, 0x6be634
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491e54
mov ebp, 0x6bdfa4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491dce
mov ebp, 0x6bdf88
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491d8b
mov ebp, 0x6bdf8c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491d48
mov byte [0x6cfc17], 0
jmp 0x491d05
mov ebp, 0x6be654
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491ca5
mov ebp, 0x6be61c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491c6f
mov ebp, 0x6be69c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491c39
mov ebp, 0x6be5dc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491c03
mov ebp, 0x6bdf9c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4919c5
mov ebp, 0x6bdf94
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491574
mov ebp, 0x6bdf98
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4914e1
mov ebp, 0x6be868
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49149e
mov ebp, 0x6be6b4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491447
mov ebp, 0x6be66c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491411
mov ebp, 0x6be65c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4913db
mov ebp, 0x6be64c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4913a5
mov ebp, 0x6bdf90
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49131f
mov ebp, 0x6be93c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4912dc
mov ebp, 0x6be59c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x491283
mov ebp, 0x6bdf78
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x49124d
mov ebp, 0x6be53c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e4e0
jmp 0x4911b9
call fcn.0044ff60
jmp fcn.004910a0