Function at 0x4dafd0
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x21c
mov eax, dword [esp + 0x224]
push ebx
push ebp
mov ebp, ecx
mov ecx, dword [esp + 0x230]
push esi
mov esi, eax
cmp eax, ecx
push edi
mov dword [esp + 0x10], ebp
mov dword [esp + 0xb0], esi
jge 0x4dd52f
mov ecx, dword [sym.imp.MSVCRT.dll_fseek]
mov edi, dword [sym.imp.MSVCRT.dll_fread]
mov edx, 8
or ebx, 0xffffffff
jmp 0x4db034
mov ecx, dword [sym.imp.MSVCRT.dll_fseek]
mov edi, dword [sym.imp.MSVCRT.dll_fread]
mov eax, dword [esp + 0x234]
mov ebp, dword [esp + 0x10]
mov edx, 8
or ebx, 0xffffffff
sub esi, eax
mov eax, dword [esp + 0x230]
lea eax, [eax + esi*8]
mov esi, dword [eax + 4]
mov eax, dword [eax]
cmp eax, 0x201
jg 0x4db217
je 0x4db1eb
add eax, 0xfffffeff
cmp eax, 0xa
ja case.default.0x4db064
jmp dword [eax*4 + 0x4dd53c]
push 0x1ec
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046e420
jmp 0x4dd506
push 0x1e4
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046f3a0
jmp 0x4dd506
push 0x1f0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046e940
jmp 0x4dd506
push 0x1f4
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046ed70
jmp 0x4dd506
push 0x1f0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046f580
jmp 0x4dd506
push 0x1ec
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046ebf0
jmp 0x4dd506
push 0xbc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046ffb0
jmp 0x4dd506
push 0x1e0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.00470070
jmp 0x4dd506
push 0x1d4
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0046fce0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1e4
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046f6c0
jmp 0x4dd506
push 0x1e8
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0046f830
jmp 0x4dd506
push 0x208
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0041db00
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
cmp eax, 0x301
jg 0x4dbf5d
je 0x4dbf31
add eax, 0xfffffdfe
cmp eax, 0x1c
ja case.default.0x4db064
jmp dword [eax*4 + 0x4dd568]
push 0x200
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00441a60
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
cmp dword [0x67a7f0], edx
jge 0x4db29d
push 0x1f8
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.004459d0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x408
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0043bb50
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
cmp dword [0x67a7f0], edx
jge 0x4db2fd
push 0x258
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00445ca0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x2e0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0043bbf0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x220
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00442c40
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1fc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.004435d0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x280
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00447e70
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x260
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4db3db
push esi
mov ecx, eax
call fcn.00449bc0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
mov esi, dword [esi + 0x238]
jmp 0x4dd421
xor esi, esi
mov ecx, ebp
push esi
call fcn.004dd700
mov esi, dword [esi + 0x238]
jmp 0x4dd421
push 0x1ec
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.004422d0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x200
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0041e1d0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x224
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00453120
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1ec
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.004537b0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1f0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00453920
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1e8
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.00457a50
jmp 0x4dd506
push 0x268
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4db50b
push esi
mov ecx, eax
call fcn.004597b0
mov esi, eax
jmp 0x4db50d
xor esi, esi
mov edx, dword [esi]
lea eax, [esp + 0x104]
push eax
mov ecx, esi
call dword [edx + 4]
mov ecx, dword [eax]
push 0x1e8
mov dword [esp + 0x74], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x78], edx
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4db600
push esi
mov ecx, esi
call fcn.00459740
mov eax, dword [eax + 0x1c]
push ecx
mov ecx, esp
push eax
call fcn.00410600
lea ecx, [esp + 0x78]
call fcn.004dd690
mov ecx, dword [eax]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x80]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x84]
mov ebx, eax
call fcn.004a5a60
lea eax, [ebx + eax*2]
mov ecx, esi
push eax
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x88]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x8c]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x190]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4db602
xor ebx, ebx
mov ecx, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov dword [esp + 0x7c], ecx
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0x7c], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0x7e], ax
mov edx, dword [esp + 0x7c]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edx
movsx eax, word [esi + 0x16]
movsx ecx, word [esi + 0x12]
movsx edx, word [esi + 0x14]
sub eax, ecx
lea ecx, [esp + 0xf4]
inc eax
push eax
movsx eax, word [esi + 0x10]
sub edx, eax
inc edx
push edx
push 0
push 0
jmp 0x4dd094
push 0x27c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4db679
push esi
mov ecx, eax
call fcn.00459e00
mov esi, eax
jmp 0x4db67b
xor esi, esi
mov eax, dword [esi]
lea ecx, [esp + 0x1f4]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x6c], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x70], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4db768
push esi
mov ecx, esi
call fcn.00459740
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x70]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x70]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x78]
mov ebx, eax
call fcn.004a5a60
lea ecx, [ebx + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x7c]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x80]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x84]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0xf8]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4db76a
xor ebx, ebx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov ecx, 0x6969c0
mov dword [esp + 0x94], eax
call fcn.004b3e00
sub word [esp + 0x94], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0x96], ax
mov ecx, dword [esp + 0x94]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
movsx edx, word [esi + 0x16]
movsx eax, word [esi + 0x12]
movsx ecx, word [esi + 0x14]
sub edx, eax
inc edx
push edx
movsx edx, word [esi + 0x10]
sub ecx, edx
inc ecx
push ecx
push 0
push 0
lea ecx, [esp + 0x194]
jmp 0x4dd094
push 0x268
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4db7ed
push esi
mov ecx, eax
call fcn.0045a810
mov esi, eax
jmp 0x4db7ef
xor esi, esi
mov eax, dword [esi]
lea ecx, [esp + 0x114]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x3c], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x40], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4db8d6
push esi
mov ecx, esi
call fcn.00459740
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x40]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x40]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x48]
mov ebx, eax
call fcn.004a5a60
lea ecx, [ebx + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x4c]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x50]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x54]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x1e0]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4db8d8
xor ebx, ebx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov ecx, 0x6969c0
mov dword [esp + 0xd0], eax
call fcn.004b3e00
sub word [esp + 0xd0], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0xd2], ax
mov ecx, dword [esp + 0xd0]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
movsx edx, word [esi + 0x16]
movsx eax, word [esi + 0x12]
movsx ecx, word [esi + 0x14]
sub edx, eax
inc edx
push edx
movsx edx, word [esi + 0x10]
sub ecx, edx
inc ecx
push ecx
push 0
push 0
lea ecx, [esp + 0x134]
jmp 0x4dd094
push 0x1e4
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0044f370
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1dc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.004583a0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1f0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0046d830
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x330
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4db9e2
push esi
mov ecx, eax
call fcn.004564e0
mov esi, eax
jmp 0x4dd0ac
xor esi, esi
jmp 0x4dd0ac
push 0x424
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00456cd0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x268
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dba32
push esi
mov ecx, eax
call fcn.0045b1c0
mov esi, eax
jmp 0x4dba34
xor esi, esi
mov eax, dword [esi]
lea ecx, [esp + 0x194]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x5c], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x60], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dbb1b
push esi
mov ecx, esi
call fcn.00459740
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x60]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x60]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x68]
mov ebx, eax
call fcn.004a5a60
lea ecx, [ebx + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x6c]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x70]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x74]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x150]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4dbb1d
xor ebx, ebx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov ecx, 0x6969c0
mov dword [esp + 0xa4], eax
call fcn.004b3e00
sub word [esp + 0xa4], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0xa6], ax
mov ecx, dword [esp + 0xa4]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
movsx edx, word [esi + 0x16]
movsx eax, word [esi + 0x12]
movsx ecx, word [esi + 0x14]
sub edx, eax
inc edx
push edx
movsx edx, word [esi + 0x10]
sub ecx, edx
inc ecx
push ecx
push 0
push 0
lea ecx, [esp + 0x1f4]
jmp 0x4dd094
push 0xe7c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dbba0
push esi
mov ecx, eax
call fcn.0045b6c0
mov esi, eax
jmp 0x4dbba2
xor esi, esi
mov eax, dword [esi]
lea ecx, [esp + 0x144]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x4c], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x50], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dbc89
push esi
mov ecx, esi
call fcn.00459740
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x50]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x50]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x58]
mov ebx, eax
call fcn.004a5a60
lea ecx, [ebx + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x5c]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x60]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x64]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x1c0]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4dbc8b
xor ebx, ebx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov ecx, 0x6969c0
mov dword [esp + 0xc0], eax
call fcn.004b3e00
sub word [esp + 0xc0], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0xc2], ax
mov ecx, dword [esp + 0xc0]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
movsx edx, word [esi + 0x16]
movsx eax, word [esi + 0x12]
movsx ecx, word [esi + 0x14]
sub edx, eax
inc edx
push edx
movsx edx, word [esi + 0x10]
sub ecx, edx
inc ecx
push ecx
push 0
push 0
lea ecx, [esp + 0x164]
jmp 0x4dd094
push 0xe8c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dbd0e
push esi
mov ecx, eax
call fcn.0045c400
mov esi, eax
jmp 0x4dbd10
xor esi, esi
mov eax, dword [esi]
lea ecx, [esp + 0x1d4]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x2c], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x30], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dbdf7
push esi
mov ecx, esi
call fcn.00459740
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x30]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x30]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x38]
mov ebx, eax
call fcn.004a5a60
lea ecx, [ebx + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x3c]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x40]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x44]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x180]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4dbdf9
xor ebx, ebx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov ecx, 0x6969c0
mov dword [esp + 0x84], eax
call fcn.004b3e00
sub word [esp + 0x84], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0x86], ax
mov ecx, dword [esp + 0x84]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
movsx edx, word [esi + 0x16]
movsx eax, word [esi + 0x12]
movsx ecx, word [esi + 0x14]
sub edx, eax
inc edx
push edx
movsx edx, word [esi + 0x10]
sub ecx, edx
inc ecx
push ecx
push 0
push 0
lea ecx, [esp + 0x1c4]
jmp 0x4dd094
push 0x1ec
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.004607e0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1ec
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00460ef0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x214
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00453da0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x3dc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00454450
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x83cc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0044e6b0
jmp 0x4dd506
push 0x20c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0041e6e0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
cmp eax, 0x501
jg 0x4dcbd0
je 0x4dcb84
add eax, 0xfffffcfe
cmp eax, 0x14
ja case.default.0x4db064
jmp dword [eax*4 + 0x4dd5dc]
push 0x234
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0041f510
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x210
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0041ee70
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x1fc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.004427e0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x204
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0041fd50
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
call fcn.00488f40
mov ecx, eax
call fcn.004752c0
mov ecx, dword [eax*4 + 0x551abc]
push 0x408
test ecx, ecx
jne 0x4dc067
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc07f
push esi
mov ecx, eax
call fcn.004dd6a0
mov esi, eax
jmp 0x4dc081
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc07f
push esi
mov ecx, eax
call fcn.00434230
mov esi, eax
jmp 0x4dc081
xor esi, esi
lea eax, [ebp + 0x68]
mov ecx, esi
push eax
call fcn.00434030
mov eax, dword [ebp + 0x4ec]
test eax, eax
jne 0x4dd0fe
lea ecx, [esi + 0x50]
push esi
mov dword [ebp + 0x4ec], ecx
mov ecx, ebp
call fcn.004dd700
jmp 0x4dd511
push 0x2e0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc0cd
push esi
mov ecx, eax
call fcn.004393c0
mov esi, eax
jmp 0x4dc0cf
xor esi, esi
lea edx, [ebp + 0x68]
mov ecx, esi
push edx
call fcn.00434030
mov eax, dword [ebp + 0x4ec]
test eax, eax
jne 0x4dd0fe
lea eax, [esi + 0x50]
push esi
mov ecx, ebp
mov dword [ebp + 0x4ec], eax
call fcn.004dd700
jmp 0x4dd511
push 0x21c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00421190
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x250
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0044b2c0
jmp 0x4dd506
push 0xe0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.004c3c00
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x270
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc195
push esi
mov ecx, eax
call fcn.0043a8f0
mov esi, eax
jmp 0x4dc197
xor esi, esi
lea ecx, [ebp + 0x68]
push ecx
mov ecx, esi
call fcn.00434030
mov eax, dword [ebp + 0x4ec]
test eax, eax
jne 0x4dd0fe
lea edx, [esi + 0x50]
push esi
mov ecx, ebp
mov dword [ebp + 0x4ec], edx
call fcn.004dd700
jmp 0x4dd511
call fcn.00488f40
mov ecx, eax
call fcn.004af400
test eax, eax
je 0x4dc202
push 0x1e8
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0044f160
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
mov eax, dword [0x6e0ab4]
test eax, eax
je case.default.0x4db064
push 0x1e0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.0044eb20
jmp 0x4dd506
push 0x200
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00421840
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x288
call fcn.004784b0
mov edi, eax
xor ebp, ebp
add esp, 4
cmp edi, ebp
je 0x4dc2c1
mov al, byte [0x966100]
test al, 1
jne 0x4dc2af
mov dl, al
push fcn.00458ab0
or dl, 1
mov word [0x96610a], bp
mov byte [0x966100], dl
mov word [0x966108], bp
mov word [0x96610e], bx
mov word [0x96610c], bx
call fcn.0053228e
add esp, 4
push 0x966108
push ebp
push esi
mov ecx, edi
call fcn.00452e60
mov edi, eax
jmp 0x4dc2c3
xor edi, edi
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xc]
mov eax, dword [esp + 0x10]
mov ecx, edi
lea ebp, [eax + 0x58]
push ebp
call fcn.0041cd10
mov ecx, edi
call fcn.00451bb0
test eax, eax
je 0x4dd511
mov ecx, dword [0x67a950]
mov eax, dword [edi + 0x224]
test ecx, eax
je 0x4dc30c
xor ebx, ebx
mov bx, word [edi + 0x254]
test ebx, ebx
jg 0x4dc318
mov ecx, 0x6969c0
call fcn.004b3e00
mov ebx, eax
mov edx, dword [edi + 0x14]
mov eax, dword [edi + 0x10]
lea esi, [edi + 0x10]
mov dword [esp + 0xd8], edx
sub word [esp + 0xd8], bx
mov dword [esi], eax
mov eax, dword [esp + 0xd8]
mov dword [esi + 4], eax
movsx ecx, word [esi + 6]
movsx edx, word [esi + 2]
movsx eax, word [esi + 4]
sub ecx, edx
inc ecx
push ecx
movsx ecx, word [esi]
sub eax, ecx
lea ecx, [esp + 0xe8]
inc eax
push eax
push 0
push 0
call fcn.004c9320
mov edx, dword [eax]
push esi
mov dword [edi + 0x34], edx
mov ecx, edi
mov eax, dword [eax + 4]
mov dword [edi + 0x38], eax
call fcn.00441770
push ebx
push 0
push ebp
mov ecx, edi
call fcn.004d9d80
jmp 0x4dd511
push 0x288
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dc3e9
mov al, byte [0x966100]
test al, 1
jne 0x4dc3d6
mov dl, al
xor eax, eax
or dl, 1
push fcn.00458ab0
mov byte [0x966100], dl
mov word [0x96610a], ax
mov word [0x966108], ax
mov word [0x96610e], bx
mov word [0x96610c], bx
call fcn.0053228e
add esp, 4
push 0x966108
push 2
push esi
mov ecx, edi
call fcn.00451660
mov ebx, eax
jmp 0x4dc3eb
xor ebx, ebx
mov ecx, dword [0x67a8fc]
mov eax, dword [ebx + 0x224]
test ecx, eax
je 0x4dc416
mov edx, dword [ebx + 0x12c]
push 0x24
push edx
call fcn.004784c0
add esp, 8
mov dword [ebx + 0x12c], 0
push 0x288
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dc47a
mov al, byte [0x966100]
test al, 1
jne 0x4dc467
mov dl, al
xor eax, eax
mov word [0x96610a], ax
mov word [0x966108], ax
or dl, 1
or eax, 0xffffffff
push fcn.00458ab0
mov byte [0x966100], dl
mov word [0x96610e], ax
mov word [0x96610c], ax
call fcn.0053228e
add esp, 4
push 0x966108
push 1
push esi
mov ecx, edi
call fcn.00452e60
mov edi, eax
jmp 0x4dc47c
xor edi, edi
push 0x1e0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc49b
push edi
push ebx
push esi
mov ecx, eax
call fcn.00472d30
mov esi, eax
jmp 0x4dc49d
xor esi, esi
mov eax, dword [ebx + 0x27c]
push esi
mov ecx, ebx
mov dword [ebx + 0x218], eax
call fcn.004d9e80
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x10]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xc]
lea ecx, [ebp + 0x58]
push ecx
mov ecx, ebx
call fcn.0041cd10
lea edx, [ebx + 0x10]
mov ecx, ebx
push edx
call fcn.00441770
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xc]
mov eax, dword [esp + 0x23c]
mov ecx, edi
push eax
call fcn.0041cd10
lea ecx, [edi + 0x10]
push ecx
mov ecx, edi
call fcn.00441770
mov edx, dword [edi + 8]
mov ecx, edi
and edx, 0xfffffffe
or dh, 0x80
mov dword [edi + 8], edx
call fcn.00451bb0
test eax, eax
je 0x4dc54f
mov eax, dword [0x67a950]
mov ecx, dword [edi + 0x224]
test eax, ecx
je 0x4dc530
xor eax, eax
mov ax, word [edi + 0x254]
test eax, eax
jg 0x4dc53a
mov ecx, 0x6969c0
call fcn.004b3e00
mov ecx, dword [esp + 0x23c]
push eax
push 0x20000
push ecx
mov ecx, edi
call fcn.004d9d80
push esi
mov ecx, ebp
mov dword [edi + 0x284], ebx
call fcn.004dd700
jmp 0x4dd511
push 0x214
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00454f50
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x208
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00422240
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x250
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc5d7
push esi
mov ecx, eax
call fcn.00455a40
mov esi, eax
jmp 0x4dc5d9
xor esi, esi
push esi
mov ecx, ebp
call fcn.004dd700
push 0
call fcn.004564b0
mov ecx, dword [0x67a8e4]
add esp, 4
test eax, ecx
je 0x4dc5fd
mov ecx, dword [0x67a8e8]
jmp 0x4dc609
mov eax, dword [esi + 0x1e4]
mov ecx, dword [0x67a8f0]
and eax, ecx
test eax, eax
jne 0x4dd511
jmp 0x4dd0b4
push 0x340
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc635
push esi
mov ecx, eax
call fcn.00462a50
mov esi, eax
jmp 0x4dc637
xor esi, esi
mov edx, dword [esi]
lea eax, [esp + 0xec]
push eax
mov ecx, esi
call dword [edx + 4]
mov ecx, dword [eax]
push 0x1e8
mov dword [esp + 0x34], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x38], edx
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dc71e
push esi
mov ecx, esi
call fcn.00463770
mov eax, dword [eax + 0x1c]
push ecx
mov ecx, esp
push eax
call fcn.00410600
lea ecx, [esp + 0x38]
call fcn.004dd690
mov ecx, dword [eax]
push ecx
lea ecx, [esp + 0x3c]
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x40]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x44]
mov ebx, eax
call fcn.004a5a60
lea eax, [ebx + eax*2]
mov ecx, esi
push eax
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x48]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x4c]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x118]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4dc720
xor ebx, ebx
mov ecx, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov dword [esp + 0x8c], ecx
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0x8c], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0x8e], ax
mov edx, dword [esp + 0x8c]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edx
movsx eax, word [esi + 0x16]
movsx ecx, word [esi + 0x12]
movsx edx, word [esi + 0x14]
sub eax, ecx
lea ecx, [esp + 0x10c]
inc eax
push eax
movsx eax, word [esi + 0x10]
sub edx, eax
inc edx
push edx
push 0
push 0
jmp 0x4dd094
push 0x11938
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc7a3
push esi
mov ecx, eax
call fcn.0045e9d0
mov esi, eax
jmp 0x4dc7a5
xor esi, esi
mov eax, dword [esi]
lea ecx, [esp + 0x11c]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x44], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x48], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dc88c
push esi
mov ecx, esi
call fcn.00459740
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x48]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x48]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x50]
mov ebx, eax
call fcn.004a5a60
lea ecx, [ebx + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x54]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x58]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x5c]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x148]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4dc88e
xor ebx, ebx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov ecx, 0x6969c0
mov dword [esp + 0x9c], eax
call fcn.004b3e00
sub word [esp + 0x9c], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0x9e], ax
mov ecx, dword [esp + 0x9c]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
movsx edx, word [esi + 0x16]
movsx eax, word [esi + 0x12]
movsx ecx, word [esi + 0x14]
sub edx, eax
inc edx
push edx
movsx edx, word [esi + 0x10]
sub ecx, edx
inc ecx
push ecx
push 0
push 0
lea ecx, [esp + 0x14c]
jmp 0x4dd094
push 0x2dc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dc911
push esi
mov ecx, eax
call fcn.00466e10
mov esi, eax
jmp 0x4dc913
xor esi, esi
mov eax, dword [esi]
lea ecx, [esp + 0x14c]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x54], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x58], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dc9fa
push esi
mov ecx, esi
call fcn.00459740
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x58]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x58]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x60]
mov ebx, eax
call fcn.004a5a60
lea ecx, [ebx + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x64]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x68]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x6c]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x178]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4dc9fc
xor ebx, ebx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov ecx, 0x6969c0
mov dword [esp + 0xac], eax
call fcn.004b3e00
sub word [esp + 0xac], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0xae], ax
mov ecx, dword [esp + 0xac]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
movsx edx, word [esi + 0x16]
movsx eax, word [esi + 0x12]
movsx ecx, word [esi + 0x14]
sub edx, eax
inc edx
push edx
movsx edx, word [esi + 0x10]
sub ecx, edx
inc ecx
push ecx
push 0
push 0
lea ecx, [esp + 0x17c]
jmp 0x4dd094
push 1
push 0x23c0
call fcn.00493e00
mov ecx, eax
call fcn.00490450
test eax, eax
push 0x318
je 0x4dca96
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcaae
push esi
mov ecx, eax
call fcn.00450710
mov edi, eax
jmp 0x4dcab0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcaae
push esi
mov ecx, eax
call fcn.00450090
mov edi, eax
jmp 0x4dcab0
xor edi, edi
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xc]
lea ebx, [ebp + 0x58]
mov ecx, edi
push ebx
call fcn.0041cd10
push 0x42c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcae7
push edi
push esi
mov ecx, eax
call fcn.00450a30
mov ebp, eax
jmp 0x4dcae9
xor ebp, ebp
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x10]
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0xc]
push ebx
mov ecx, ebp
call fcn.0041cd10
push 0x314
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcb1f
push ebp
push esi
mov ecx, eax
call fcn.00451130
mov esi, eax
jmp 0x4dcb21
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xc]
push ebx
mov ecx, esi
call fcn.0041cd10
push 0
push 0
push ebx
mov ecx, edi
call fcn.004d9c90
push 0
push 0
push ebx
mov ecx, edi
call fcn.004d9d80
push 0
push 0
push ebx
mov ecx, ebp
call fcn.004d9c90
push 0
push 0
push ebx
mov ecx, ebp
call fcn.004d9d80
push 0
push 0
push ebx
mov ecx, esi
call fcn.004d9c90
push 0
push 0
push ebx
mov ecx, esi
call fcn.004d9d80
jmp 0x4dd511
push 0x1f8
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcba1
push esi
mov ecx, eax
call fcn.00423690
mov esi, eax
jmp 0x4dcba3
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xc]
lea edi, [ebp + 0x58]
mov ecx, esi
push edi
call fcn.0041cd10
push 0
push 0x10001
push edi
mov ecx, esi
call fcn.004d9c90
jmp 0x4dd511
cmp eax, 0x601
jg 0x4dd460
je 0x4dd43e
add eax, 0xfffffafe
cmp eax, 0xd
ja case.default.0x4db064
jmp dword [eax*4 + 0x4dd630]
push 0x1fc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00422720
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x404
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcc3f
push esi
mov ecx, eax
call fcn.00424550
mov esi, eax
jmp 0x4dcc41
xor esi, esi
mov ecx, esi
call fcn.00427810
lea ecx, [esp + 0x17c]
mov ebx, eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x64], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x68], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dcd40
lea ecx, [esp + 0x1fc]
push esi
push ecx
mov ecx, esi
call fcn.00427760
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x68]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x68]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x70]
mov ebp, eax
call fcn.004a5a60
lea ecx, [ebp + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x74]
mov ebp, eax
call fcn.004a5a60
mov edx, ebx
mov ecx, esi
add edx, ebp
lea eax, [edx + eax*2]
push eax
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x78]
mov ebp, eax
call fcn.004a5a60
sub ebp, eax
mov ecx, esi
push ebp
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x7c]
mov ebp, eax
call fcn.004a5a60
sub ebp, eax
lea ecx, [esp + 0x1a8]
push ebp
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebp, dword [esp + 0x10]
jmp 0x4dcd42
xor eax, eax
push eax
mov ecx, ebp
call fcn.004dd700
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x8c]
lea edi, [ebp + 0x58]
mov ecx, esi
push edi
call fcn.0041cd10
push 0
push 0x10001
push edi
mov ecx, esi
call fcn.004d9c90
test ebx, ebx
jle 0x4dd511
push ebx
push 0
push edi
mov ecx, esi
call fcn.004d9d80
jmp 0x4dd511
push 0x280
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcdb1
push esi
mov ecx, eax
call fcn.0042ccf0
mov esi, eax
jmp 0x4dcdb3
xor esi, esi
mov ecx, esi
call fcn.0042a9e0
test eax, eax
je 0x4dcde5
mov eax, dword [esi + 0x214]
shr eax, 0x18
test eax, eax
jg 0x4dcdd5
mov ecx, 0x6969c0
call fcn.004b3e00
push eax
lea eax, [ebp + 0x58]
push 2
push eax
mov ecx, esi
call fcn.004d9c90
jmp 0x4dce15
mov ecx, esi
call fcn.0042aa10
test eax, eax
je 0x4dce15
mov eax, dword [esi + 0x214]
shr eax, 0x18
test eax, eax
jg 0x4dce07
mov ecx, 0x6969c0
call fcn.004b3e00
push eax
lea ecx, [ebp + 0x58]
push 0
push ecx
mov ecx, esi
call fcn.004d9d80
push esi
mov ecx, ebp
call fcn.004dd700
mov edi, dword [esi + 0x21c]
test edi, edi
je 0x4dce37
push edi
mov ecx, ebp
call fcn.004dd700
mov eax, dword [edi + 8]
and al, 0xfe
mov dword [edi + 8], eax
mov esi, dword [esi + 0x220]
jmp 0x4dd421
push 0x24c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.0042fb80
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
push 0x24c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dce8d
push 2
push esi
mov ecx, eax
call fcn.0042ff10
mov edi, eax
jmp 0x4dce8f
xor edi, edi
push edi
mov ecx, ebp
call fcn.004dd700
mov esi, dword [edi + 0x21c]
test esi, esi
je 0x4dceb1
push esi
mov ecx, ebp
call fcn.004dd700
mov eax, dword [esi + 8]
and al, 0xfe
mov dword [esi + 8], eax
mov edi, dword [edi + 0x218]
test edi, edi
je 0x4dd511
push edi
mov ecx, ebp
call fcn.004dd700
mov eax, dword [edi + 8]
and al, 0xfe
mov dword [edi + 8], eax
jmp 0x4dd511
push 0x24c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcef1
push esi
mov ecx, eax
call fcn.004302a0
mov edi, eax
jmp 0x4dcef3
xor edi, edi
push edi
mov ecx, ebp
call fcn.004dd700
mov esi, dword [edi + 0x21c]
test esi, esi
je 0x4dd41b
jmp 0x4dd40b
push 0x24c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcef1
push esi
mov ecx, eax
call fcn.00430570
mov edi, eax
jmp 0x4dcef3
push 0x2b4
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dcf48
push esi
mov ecx, eax
call fcn.0042e390
mov esi, eax
jmp 0x4dcf4a
xor esi, esi
mov edx, dword [esi]
lea eax, [esp + 0x19c]
push eax
mov ecx, esi
call dword [edx + 4]
mov ecx, dword [eax]
push 0x1e8
mov dword [esp + 0x1c], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x20], edx
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dd031
push esi
mov ecx, esi
call fcn.0042fb70
mov eax, dword [eax + 0x1c]
push ecx
mov ecx, esp
push eax
call fcn.00410600
lea ecx, [esp + 0x20]
call fcn.004dd690
mov ecx, dword [eax]
push ecx
lea ecx, [esp + 0x24]
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x28]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x2c]
mov ebx, eax
call fcn.004a5a60
lea eax, [ebx + eax*2]
mov ecx, esi
push eax
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x30]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x34]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x1c8]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4dd033
xor ebx, ebx
mov ecx, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov dword [esp + 0xb8], ecx
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0xb8], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0xba], ax
mov edx, dword [esp + 0xb8]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edx
movsx eax, word [esi + 0x16]
movsx ecx, word [esi + 0x12]
movsx edx, word [esi + 0x14]
sub eax, ecx
lea ecx, [esp + 0x1bc]
inc eax
push eax
movsx eax, word [esi + 0x10]
sub edx, eax
inc edx
push edx
push 0
push 0
call fcn.004c9320
mov ecx, dword [eax]
push ebx
mov dword [esi + 0x34], ecx
mov ecx, ebp
mov edx, dword [eax + 4]
mov dword [esi + 0x38], edx
call fcn.004dd700
push esi
mov ecx, ebp
call fcn.004dd700
lea edi, [ebp + 0x58]
push 0
push 0
push edi
mov ecx, esi
call fcn.004d9d80
push 0
push 0
push edi
mov ecx, esi
call fcn.004d9c90
jmp 0x4dd511
push 0x1e8
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd0fc
push esi
mov ecx, eax
call fcn.00422db0
mov esi, eax
mov ecx, ebp
push esi
call fcn.004dd700
jmp 0x4dd511
xor esi, esi
push esi
mov ecx, ebp
call fcn.004dd700
jmp 0x4dd511
push 0x2fc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd128
push esi
mov ecx, eax
call fcn.0046a520
mov esi, eax
jmp 0x4dd12a
xor esi, esi
mov eax, dword [esi]
lea ecx, [esp + 0x1cc]
push ecx
mov ecx, esi
call dword [eax + 4]
mov edx, dword [eax]
push 0x1e8
mov dword [esp + 0x24], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x28], eax
call fcn.004784b0
mov edi, eax
add esp, 4
test edi, edi
je 0x4dd211
push esi
mov ecx, esi
call fcn.0046c850
mov edx, dword [eax + 0x1c]
push ecx
mov ecx, esp
push edx
call fcn.00410600
lea ecx, [esp + 0x28]
call fcn.004dd690
mov eax, dword [eax]
lea ecx, [esp + 0x28]
push eax
call fcn.004a5a60
push eax
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd680
lea ecx, [esp + 0x30]
mov ebx, eax
call fcn.004a5a60
lea ecx, [ebx + eax*2]
push ecx
mov ecx, esi
call fcn.00472130
mov ecx, eax
call fcn.004dd670
lea ecx, [esp + 0x34]
mov ebx, eax
call fcn.004a5a60
lea edx, [ebx + eax*2]
mov ecx, esi
push edx
call fcn.00472130
mov ecx, eax
call fcn.004a5a60
lea ecx, [esp + 0x38]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
mov ecx, esi
push ebx
call fcn.00472130
mov ecx, eax
call fcn.004a5a50
lea ecx, [esp + 0x3c]
mov ebx, eax
call fcn.004a5a60
sub ebx, eax
lea ecx, [esp + 0x1f8]
push ebx
call fcn.004c9320
push eax
mov ecx, edi
call fcn.0046f9b0
mov ebx, eax
jmp 0x4dd213
xor ebx, ebx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x10]
mov ecx, 0x6969c0
mov dword [esp + 0xc8], eax
call fcn.004b3e00
sub word [esp + 0xc8], ax
mov ecx, 0x6969c0
call fcn.004b3e00
sub word [esp + 0xca], ax
mov ecx, dword [esp + 0xc8]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ecx
movsx edx, word [esi + 0x16]
movsx eax, word [esi + 0x12]
movsx ecx, word [esi + 0x14]
sub edx, eax
inc edx
push edx
movsx edx, word [esi + 0x10]
sub ecx, edx
inc ecx
push ecx
push 0
push 0
lea ecx, [esp + 0x1fc]
call fcn.004c9320
mov ecx, dword [eax]
mov edi, dword [esp + 0x10]
mov dword [esi + 0x34], ecx
push ebx
mov edx, dword [eax + 4]
mov ecx, edi
mov dword [esi + 0x38], edx
call fcn.004dd700
push esi
mov ecx, edi
call fcn.004dd700
mov eax, dword [0x67a908]
mov ecx, dword [esi + 0x2f8]
xor ebp, ebp
test eax, ecx
je 0x4dd2ae
mov ebp, 2
xor ecx, ecx
mov cl, byte [esi + 0x243]
mov edi, ecx
test edi, edi
jg 0x4dd2c8
mov ecx, 0x6969c0
call fcn.004b3e00
mov edi, eax
mov edx, dword [esp + 0x10]
push edi
push ebp
mov ecx, esi
lea ebx, [edx + 0x58]
push ebx
call fcn.004d9d80
push edi
push 0
push ebx
mov ecx, esi
call fcn.004d9c90
jmp 0x4dd511
mov edx, dword [0x67a8cc]
lea eax, [esi + 4]
push 0
push eax
push edx
mov dword [esp + 0x20], 0
call ecx
mov eax, dword [0x67a8cc]
lea ecx, [esp + 0x20]
push eax
push 1
push 4
push ecx
call edi
push 0x278
call fcn.004784b0
add esp, 0x20
test eax, eax
je 0x4dd333
mov edx, dword [esp + 0x14]
mov ecx, eax
push edx
push esi
call fcn.00431040
mov esi, eax
jmp 0x4dd335
xor esi, esi
mov ecx, esi
call fcn.0042a9e0
test eax, eax
je 0x4dd356
mov eax, dword [esi + 0x214]
shr eax, 0x18
test eax, eax
jg 0x4dcdd5
jmp 0x4dcdcb
mov ecx, esi
call fcn.0042aa10
test eax, eax
je 0x4dce15
mov eax, dword [esi + 0x214]
shr eax, 0x18
test eax, eax
jg 0x4dce07
jmp 0x4dcdfd
mov edx, dword [0x67a8cc]
push 0
push esi
push edx
mov dword [esp + 0x20], 0
call ecx
mov eax, dword [0x67a8cc]
lea ecx, [esp + 0x20]
push eax
push 1
push 4
push ecx
call edi
push 0x258
call fcn.004784b0
add esp, 0x20
test eax, eax
je 0x4dd3cb
mov edx, dword [esp + 0x14]
mov ecx, eax
push edx
push esi
call fcn.00430b00
push eax
mov ecx, ebp
call fcn.004dd700
jmp 0x4dd511
xor eax, eax
mov ecx, ebp
push eax
call fcn.004dd700
jmp 0x4dd511
push 0x24c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd3f7
push esi
mov ecx, eax
call fcn.00430810
mov edi, eax
jmp 0x4dd3f9
xor edi, edi
push edi
mov ecx, ebp
call fcn.004dd700
mov esi, dword [edi + 0x21c]
test esi, esi
je 0x4dd41b
push esi
mov ecx, ebp
call fcn.004dd700
mov eax, dword [esi + 8]
and al, 0xfe
mov dword [esi + 8], eax
mov esi, dword [edi + 0x218]
test esi, esi
je 0x4dd511
push esi
mov ecx, ebp
call fcn.004dd700
mov eax, dword [esi + 8]
and al, 0xfe
mov dword [esi + 8], eax
jmp 0x4dd511
push 0x1e0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.00474630
jmp 0x4dd506
cmp eax, 0xff02
jg 0x4dd4c8
je 0x4dd4ad
cmp eax, 0x602
je 0x4dd492
cmp eax, 0xff01
jne case.default.0x4db064
push 0x220
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.00473900
jmp 0x4dd506
push 0x1e0
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.004742e0
jmp 0x4dd506
push 0x208
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.00473e70
jmp 0x4dd506
cmp eax, 0xff03
je 0x4dd4e9
push 0xbc
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
mov ecx, eax
call fcn.00470ca0
jmp 0x4dd506
push 0x21c
call fcn.004784b0
add esp, 4
test eax, eax
je 0x4dd504
push esi
mov ecx, eax
call fcn.00473fe0
jmp 0x4dd506
xor eax, eax
add ebp, 0x58
mov ecx, eax
push ebp
call fcn.0041cd10
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0x238]
inc esi
cmp esi, eax
mov dword [esp + 0xb0], esi
jl 0x4db015
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x21c
ret 0x10