Function at 0x4df620
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x6c]
cmp eax, dword [ecx + 8]
jbe 0x4e1da6
sub esp, 0xec
mov eax, dword [esp + 0xf8]
test eax, eax
jne 0x4df7b1
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4df6bb
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x4df774
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xec
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4df7a5
mov dword [edx + 0x50], ecx
jmp 0x4df757
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4df757
mov eax, dword [esp + 0xf4]
cmp byte [eax], 0x6e
mov ecx, dword [esp + 0x100]
mov dword [esp], ecx
mov edx, dword [esp + 0x104]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x108]
mov dword [esp + 8], ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.004dc350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
test ebx, ebx
jne 0x4e1cf9
test ecx, ecx
je 0x4dfcc4
mov edx, dword [esp + 0xf4]
movzx ebx, byte [edx]
cmp bl, 0x22
je 0x4dfb27
movzx eax, byte [esp + 0x10c]
test al, al
jne 0x4df9c7
cmp bl, 0x66
jne 0x4df999
mov eax, 4
lea ecx, [0x6a1baa]
mov dword [esp + 0x44], eax
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x100]
mov dword [esp], edx
mov edx, dword [esp + 0x104]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x108]
mov dword [esp + 8], edx
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4df988
mov ecx, dword [esp + 0x98]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4df96c
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
je 0x4df929
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xec
ret
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4df960
mov dword [edx + 0x50], ecx
jmp 0x4df90c
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4df90c
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4df8f0
mov eax, dword [esp + 0x98]
call fcn.00450d20
jmp 0x4df8d1
cmp bl, 0x6e
jne 0x4df9ae
mov eax, 4
lea ecx, [0x6a1c52]
jmp 0x4df850
cmp bl, 0x74
je 0x4df845
mov eax, 6
lea ecx, [0x6a2143]
jmp 0x4df850
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4dfa33
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x4dfaec
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xec
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4dfb1d
mov dword [edx + 0x50], eax
jmp 0x4dfacf
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfacf
mov dword [esp + 0x9c], eax
mov dword [esp + 0x48], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xf8]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 8], ecx
call fcn.004e25a0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x4dfc88
movzx eax, byte [esp + 0x10c]
test al, al
je 0x4e1d8d
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4dfbe5
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
add esp, 0xec
ret
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x9c]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
add esp, 0xec
ret
mov dword [esp + 0x70], ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb0], edi
mov eax, dword [esp + 0xf4]
movzx ecx, byte [eax]
cmp cl, 0x66
ja 0x4e1b00
cmp cl, 0x22
je 0x4e1339
cmp cl, 0x66
jne 0x4e0392
movzx edx, byte [esp + 0x10c]
test dl, dl
je 0x4e0386
mov ebx, dword [esp + 0xf8]
cmp ebx, 4
je 0x4e0367
mov dword [esp + 0x8c], eax
mov eax, 1
mov byte [esp + 0x2f], al
mov eax, dword [esp + 0x8c]
movzx esi, byte [esp + 0x2f]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4dfd55
cmp ebx, 5
je 0x4e034b
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4e020a
cmp cl, 0x74
sete cl
nop
mov esi, ebp
and ebp, 0x1f
cmp ebp, 1
je 0x4e01ea
cmp ebp, 0x14
je 0x4dffe6
test dl, dl
je 0x4dfecf
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4dfdd9
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
je 0x4dfe92
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xec
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4dfec3
mov dword [edx + 0x50], ecx
jmp 0x4dfe75
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4dfe75
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 4
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4dffd6
lea ecx, [0x6a1baa]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4dffba
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4dffab
mov dword [edx + 0x50], ecx
jmp 0x4dfe75
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4dff51
lea eax, [0x6a1baa]
call fcn.00450d20
jmp 0x4dff36
mov byte [esp + 0x2e], cl
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00480c20
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4e00c8
movzx ecx, byte [esp + 0x2e]
movzx ecx, cl
lea edx, [0x879840]
lea eax, [edx + ecx]
nop
movzx ecx, byte [0x8adfa8]
test cl, cl
je 0x4e00c0
lea ecx, [0x657f40]
mov dword [0x8adfac], ecx
mov edx, dword [0x8c1190]
test edx, edx
jne 0x4e00b3
mov dword [0x8adfb0], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xcc]
test ecx, ecx
je 0x4e00ab
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e0078
or edx, 0x80
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00480f00
jmp 0x4dfe75
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x4e0078
lea edi, [0x8adfb0]
call fcn.00450d20
jmp 0x4e004a
lea ecx, [0x657f40]
jmp 0x4e004a
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 4
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e01da
lea ecx, [0x6a1baa]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e01be
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e01af
mov dword [edx + 0x50], ecx
jmp 0x4dfe75
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e0155
lea eax, [0x6a1baa]
call fcn.00450d20
jmp 0x4e013a
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov byte [esp + 0xc], cl
call fcn.00481010
jmp 0x4dfe75
mov dword [esp], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4e0268
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
jne 0x4dfe75
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e033c
mov dword [edx + 0x50], ecx
jmp 0x4dfe75
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4dfe75
cmp dword [eax], 0x736c6166
jne 0x4dfd46
cmp byte [eax + 4], 0x65
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x4dfd4b
cmp dword [eax], 0x65757274
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0x2f], al
xchg esi, eax
mov esi, dword [esp + 0xb4]
jmp 0x4dfd32
mov ebx, dword [esp + 0xf8]
jmp 0x4dfd55
cmp cl, 0x2d
je 0x4e04bb
cmp cl, 0x30
jae 0x4e132e
mov ecx, 1
test cl, cl
je 0x4e04bb
movzx ecx, byte [esp + 0x10c]
test cl, cl
je 0x4e1d58
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4e0418
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
mov dword [esp], 0
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xc], edx
call fcn.0043f830
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa0], ecx
nop
mov edx, dword [esp + 0x70]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x4e0dae
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x4e0b1f
lea ebp, [edx - 7]
cmp ebp, 5
jbe 0x4e08b1
cmp edx, 0x18
je 0x4e084e
xor edx, edx
test dl, dl
jne 0x4e0763
movzx eax, byte [esp + 0x10c]
test al, al
je 0x4e064a
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4e05a7
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e0753
lea ecx, [0x6a2143]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e073a
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e072d
mov dword [edx + 0x50], eax
jmp 0x4dfe75
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e06d3
lea eax, [0x6a2143]
call fcn.00450d20
jmp 0x4e06b8
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00481b10
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.004dba80
movzx eax, byte [esp + 8]
test al, al
jne 0x4dfe75
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 8], eax
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea ecx, [0x64b6c0]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], eax
lea eax, [0x6b3a82]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0xd4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b6a70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
cmp dword [0x8ad940], ecx
je 0x4e0894
xor eax, eax
mov ecx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x4c]
jmp 0x4e052a
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [0x8ad944]
mov dword [esp + 8], eax
call fcn.00402fc0
movzx eax, byte [esp + 0xc]
jmp 0x4e087e
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.0046c250
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x4e0a35
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov dword [esp], 0
lea ecx, [0x6a24dd]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.0043f6b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xac]
mov dword [edi + 4], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e0a2b
mov dword [edi], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e0a12
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e0a05
mov dword [edx + 0x50], eax
jmp 0x4dfe75
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e09ab
call fcn.00450d20
jmp 0x4e0990
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0xb0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
lea ebp, [ebx - 0x20]
mov dword [esp + 0x6c], ebp
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp ebp, 0x20
sbb edi, edi
mov dword [esp + 0x68], edi
cmp ebx, 0x20
sbb eax, eax
mov dword [esp + 0x64], eax
cmp esi, 0x20
sbb eax, eax
mov dword [esp + 0x60], eax
mov ecx, ebp
mov eax, dword [esp + 0x38]
shr eax, cl
mov ecx, ebx
shl edx, cl
and eax, edi
mov ecx, esi
mov edi, dword [esp + 0x38]
shl edi, cl
mov esi, dword [esp + 0x60]
and edi, esi
mov esi, dword [esp + 0x64]
and edx, esi
or edx, eax
or edx, edi
mov ecx, ebx
mov edi, edx
shr edx, cl
and edx, esi
mov eax, dword [esp + 0x3c]
cmp edx, eax
setne dl
mov ecx, ebp
mov ebp, edi
shl edi, cl
mov ecx, ebx
mov eax, dword [esp + 0x38]
shl eax, cl
and eax, esi
shr eax, cl
and eax, esi
mov ebx, dword [esp + 0x68]
and edi, ebx
or eax, edi
mov ecx, dword [esp + 0x6c]
shr ebp, cl
mov ebx, dword [esp + 0x60]
and ebp, ebx
or eax, ebp
mov ebx, dword [esp + 0x38]
cmp eax, ebx
setne al
or eax, edx
test al, al
jne 0x4e08e1
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], eax
call fcn.004819e0
jmp 0x4dfe75
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.0046ca60
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x4e0ca3
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov dword [esp], 0
lea ecx, [0x6a24dd]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.0043f6b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xac]
mov dword [edi + 4], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e0c99
mov dword [edi], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e0c80
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e0c73
mov dword [edx + 0x50], eax
jmp 0x4dfe75
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e0c19
call fcn.00450d20
jmp 0x4e0bfe
mov dword [esp + 0x34], ecx
mov dword [esp + 0x40], edx
mov eax, dword [esp + 0xb0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
mov ebp, ebx
shr ebx, 5
cmp ebx, 1
sbb ebx, ebx
mov dword [esp + 0x6c], ebx
cmp ebp, 0x20
sbb esi, esi
mov dword [esp + 0x68], esi
sbb edi, edi
mov dword [esp + 0x78], edi
lea eax, [ebp - 0x20]
mov dword [esp + 0x64], eax
cmp eax, 0x20
sbb edi, edi
neg eax
cmp eax, 0x20
sbb ebx, ebx
mov dword [esp + 0x60], ebx
mov ecx, dword [esp + 0x64]
mov esi, dword [esp + 0x34]
shl esi, cl
mov ecx, eax
mov ebx, dword [esp + 0x34]
shr ebx, cl
mov ecx, ebp
shl edx, cl
and esi, edi
mov ebp, dword [esp + 0x60]
and ebx, ebp
mov ebp, dword [esp + 0x68]
and edx, ebp
or edx, ebx
or edx, esi
mov ebx, ecx
mov ecx, eax
mov esi, edx
shl edx, cl
xchg edi, ebx
not ebx
xchg edi, ebx
mov eax, dword [esp + 0x64]
or edi, eax
mov ecx, ebx
mov eax, dword [esp + 0x34]
shl eax, cl
and eax, ebp
shr eax, cl
mov ecx, edi
mov edi, esi
sar esi, cl
and eax, ebp
mov ebp, dword [esp + 0x60]
and edx, ebp
or eax, edx
mov edx, dword [esp + 0x6c]
xor edx, 0xffffffff
and edx, esi
or edx, eax
mov eax, dword [esp + 0x34]
cmp edx, eax
setne dl
mov ecx, dword [esp + 0x78]
not ecx
or ecx, ebx
sar edi, cl
mov ebx, dword [esp + 0x40]
cmp edi, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4e0b4f
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.00481540
jmp 0x4dfe75
lea ebp, [edx - 0xd]
cmp ebp, 1
jbe 0x4e1067
cmp edx, 0x14
jne 0x4e051f
mov edx, dword [esp + 0xf0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004df440
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
test edx, edx
je 0x4e0e42
nop
mov ecx, dword [esp + 0xf0]
mov ebx, dword [ecx + 0x4c]
test ebx, ebx
jne 0x4dfe75
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e0e35
mov dword [edx + 0x50], eax
jmp 0x4dfe75
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfe75
mov dword [esp + 0x94], ecx
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
call fcn.00480c20
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4e0f45
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x4e0f3d
nop
movzx edx, byte [0x8adfa8]
test dl, dl
je 0x4e0f31
mov dword [0x8adfac], ecx
mov edx, dword [0x8c1190]
test edx, edx
jne 0x4e0f1d
mov eax, dword [esp + 0x94]
mov dword [0x8adfb0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x4e0f15
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e0ee2
or edx, 0x80
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00480f00
jmp 0x4dfe75
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4e0ee2
lea edi, [0x8adfb0]
mov eax, dword [esp + 0x94]
call fcn.00450d20
jmp 0x4e0eb4
mov eax, dword [esp + 0x94]
jmp 0x4e0eb4
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4e0ee2
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e1057
lea ecx, [0x6a2143]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e103b
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e102c
mov dword [edx + 0x50], ecx
jmp 0x4dfe75
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e0fd2
lea eax, [0x6a2143]
call fcn.00450d20
jmp 0x4e0fb7
mov dword [esp + 0x5c], edx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0046bcc0
fld qword [esp + 0xc]
fld st(0)
fstp qword [esp + 0x7c]
mov eax, dword [esp + 0x14]
test eax, eax
fstp st(0)
je 0x4e1226
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov dword [esp], 0
lea ecx, [0x6a24dd]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.0043f6b0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0xac]
mov dword [edi + 4], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e121a
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e1201
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e11f4
mov dword [edx + 0x50], eax
jmp 0x4dfe75
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e119a
mov eax, ecx
call fcn.00450d20
jmp 0x4e117f
mov eax, dword [esp + 0x5c]
cmp eax, 0xd
jne 0x4e12e5
nop
fldz
fld qword [esp + 0x7c]
fld st(1)
fucomp st(1)
mov dword [esp + 0x84], eax
fnstsw ax
sahf
mov eax, dword [esp + 0x84]
fstp st(0)
fstp st(0)
jbe 0x4e1267
fld qword [esp + 0x7c]
fld st(0)
fchs
fstp st(1)
fld st(0)
fstp qword [esp + 0x7c]
fstp st(0)
fld qword [esp + 0x7c]
fld qword [0x700430]
fld st(1)
fucomp st(1)
mov dword [esp + 0x84], eax
fnstsw ax
sahf
mov eax, dword [esp + 0x84]
fstp st(0)
fstp st(0)
jbe 0x4e12e1
fld qword [0x700438]
fld qword [esp + 0x7c]
fld st(1)
fucomp st(1)
mov dword [esp + 0x84], eax
fnstsw ax
sahf
mov eax, dword [esp + 0x84]
setae al
fstp st(0)
fstp st(0)
test al, al
jne 0x4e10d0
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481450
jmp 0x4dfe75
xor eax, eax
jmp 0x4e12b2
cmp eax, 0xe
jne 0x4e12ee
xor eax, eax
jmp 0x4e12b2
lea eax, [0x66ee60]
mov dword [esp], eax
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1b
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e131e
lea eax, [0x6a9a0b]
mov dword [edi], eax
jmp 0x4e1d3f
lea eax, [0x6a9a0b]
call fcn.00450d20
jmp 0x4e1d3f
cmp cl, 0x39
seta cl
jmp 0x4e03a9
mov dword [esp], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.004e25a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x18]
mov ebx, dword [esp + 0x10]
test dl, dl
je 0x4e19e4
mov dword [esp + 0x54], eax
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x50], ebx
nop
mov edx, dword [esp + 0x70]
mov ebp, edx
and edx, 0x1f
cmp edx, 0x14
je 0x4e17b4
cmp edx, 0x17
je 0x4e1508
cmp edx, 0x18
jne 0x4e13ef
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0043f830
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00481b10
jmp 0x4dfe75
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e14f8
lea ecx, [0x6a219d]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e14df
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e14d2
mov dword [edx + 0x50], eax
jmp 0x4dfe75
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e1478
lea eax, [0x6a219d]
call fcn.00450d20
jmp 0x4e145d
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4e1692
mov eax, dword [0x8ad288]
cmp dword [eax + 0x140], 0xffffffff
jne 0x4e1683
mov eax, dword [esp + 0x50]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
mov dword [esp + 0x58], ecx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0043c2b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
mov ecx, dword [0x8ad288]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x18], edx
call fcn.004dac90
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
test edx, edx
je 0x4e163d
nop
mov ecx, dword [esp + 0xf0]
mov ebx, dword [ecx + 0x4c]
test ebx, ebx
jne 0x4dfe75
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e1630
mov dword [edx + 0x50], eax
jmp 0x4dfe75
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfe75
mov edx, dword [esp + 0x58]
cmp ecx, edx
ja 0x4e1d70
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004810e0
jmp 0x4dfe75
mov eax, dword [esp + 0x50]
shr eax, 2
lea ecx, [eax + eax*2]
jmp 0x4e157b
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e17a4
lea ecx, [0x6a219d]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e1788
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e1779
mov dword [edx + 0x50], ecx
jmp 0x4dfe75
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e171f
lea eax, [0x6a219d]
call fcn.00450d20
jmp 0x4e1704
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00480c20
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4e18c7
mov dword [esp], 0
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
call fcn.0043f830
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00407e70
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0x8adfa8]
test cl, cl
je 0x4e18bf
lea ecx, [0x659b80]
mov dword [0x8adfac], ecx
mov edx, dword [0x8c1190]
test edx, edx
jne 0x4e18b2
mov dword [0x8adfb0], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xbc]
test ecx, ecx
je 0x4e18aa
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e1877
or edx, 0x80
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.00480f00
jmp 0x4dfe75
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4e1877
lea edi, [0x8adfb0]
call fcn.00450d20
jmp 0x4e1849
lea ecx, [0x659b80]
jmp 0x4e1849
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x74], ebx
lea ebp, [0x67fc20]
mov dword [esp], ebp
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 6
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e19d4
lea ecx, [0x6a219d]
mov dword [edi], ecx
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e19bb
mov eax, dword [esp + 0xb8]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x74]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4dfe75
mov dword [esp], eax
lea ecx, [0x7046a0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004dbc60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4e19ae
mov dword [edx + 0x50], eax
jmp 0x4dfe75
lea edi, [edx + 0x50]
call fcn.00450d20
jmp 0x4dfe75
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00450d20
mov edi, edx
jmp 0x4e1954
lea eax, [0x6a219d]
call fcn.00450d20
jmp 0x4e1939
movzx eax, byte [esp + 0x10c]
test al, al
je 0x4e1d75
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4e1a5d
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
cmp cl, 0x6e
jne 0x4e1ceb
movzx ecx, byte [esp + 0x10c]
test cl, cl
je 0x4e1b2e
mov ecx, dword [esp + 0xf8]
cmp ecx, 4
je 0x4e1cdd
mov edx, 1
test dl, dl
jne 0x4e1ba3
mov eax, ebp
and ebp, 0x1f
lea ecx, [ebp - 0x14]
nop
cmp ecx, 3
ja 0x4dfe75
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00482790
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xb0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.00480f00
jmp 0x4dfe75
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00481f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 8], edx
call fcn.00407ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4e1bfa
mov ecx, dword [ecx + 4]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea edx, [0x64b6c0]
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xe8], eax
lea eax, [0x6b41dc]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b6a70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 0x4c]
test ebx, ebx
jne 0x4dfe75
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004dbc60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0x4c], eax
mov eax, dword [0x8c1190]
test eax, eax
jne 0x4e1cce
mov dword [edx + 0x50], ecx
jmp 0x4dfe75
lea edi, [edx + 0x50]
mov eax, ecx
call fcn.00450d20
jmp 0x4dfe75
cmp dword [eax], 0x6c6c756e
setne dl
jmp 0x4e1b2a
cmp cl, 0x74
je 0x4dfcfb
jmp 0x4e0392
mov eax, dword [ebx + 0x10]
mov dword [esp], edx
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xec
ret
mov eax, dword [esp + 0x5c]
mov dword [edi + 8], eax
lea eax, [0x6610c0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a9b0
lea eax, [0x659b80]
mov dword [esp], eax
lea eax, [0x700b90]
mov dword [esp + 4], eax
call fcn.0042a9b0
call fcn.00450de0
lea eax, [0x659b80]
mov dword [esp], eax
lea eax, [0x700b88]
mov dword [esp + 4], eax
call fcn.0042a9b0
lea eax, [0x659b80]
mov dword [esp], eax
lea eax, [0x700b80]
mov dword [esp + 4], eax
call fcn.0042a9b0
nop
call fcn.0044f4e0
jmp fcn.004df620