Function at 0x4a4410
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x66e6e2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xec
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
cmp esi, eax
push edi
je 0x4a5482
lea ecx, [esp + 0x30]
call fcn.0065e79e
xor edi, edi
lea ecx, [esp + 0x7c]
mov dword [esp + 0x100], edi
call fcn.0064dc20
lea ecx, [esp + 0x94]
call fcn.0064dc20
lea ecx, [esp + 0xb0]
call fcn.0064dc20
lea ecx, [esp + 0x34]
call fcn.0064dc20
lea ecx, [esp + 0x4c]
call fcn.0064dc20
mov ebx, dword [esi + 0xc4]
mov dword [esp + 0x20], edi
test ebx, ebx
jle 0x4a44ab
mov eax, dword [esi + 0xc0]
push 0
push 7
mov ecx, dword [eax + edi*4]
call fcn.00537260
inc edi
cmp edi, ebx
jl 0x4a4494
mov ebx, dword [esi + 0xd8]
xor edi, edi
test ebx, ebx
jle 0x4a44ce
mov ecx, dword [esi + 0xd4]
push 0
push 7
mov ecx, dword [ecx + edi*4]
call fcn.00537260
inc edi
cmp edi, ebx
jl 0x4a44b7
mov eax, dword [esi + 0x9c]
xor ebx, ebx
test eax, eax
mov dword [esp + 0x14], eax
jle 0x4a4554
mov edx, dword [esi + 0x98]
push 0
push 0
mov ecx, dword [edx + ebx*4]
call fcn.0048edd0
mov eax, dword [esi + 0x98]
mov ecx, dword [eax + ebx*4]
call fcn.00498d70
cmp eax, 1
jne 0x4a454b
mov ecx, dword [esi + 0x98]
mov dword [esp + 0x20], eax
mov ecx, dword [ecx + ebx*4]
call fcn.004da3c0
cmp eax, 2
jle 0x4a454b
mov edi, 1
dec eax
cmp eax, edi
mov dword [esp + 0x2c], eax
jle 0x4a454b
mov edx, dword [esi + 0x98]
push edi
mov ecx, dword [edx + ebx*4]
call fcn.0048ee80
push 1
push 3
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x2c]
inc edi
cmp edi, eax
jl 0x4a4528
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x4a44de
mov eax, dword [esi + 0x9c]
xor ebx, ebx
test eax, eax
mov dword [esp + 0x14], eax
jle 0x4a4631
mov eax, dword [esi + 0x98]
mov ecx, dword [eax + ebx*4]
call fcn.00498d70
cmp eax, 1
jne 0x4a4624
mov ecx, dword [esi + 0x98]
mov edx, dword [ecx + ebx*4]
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
call fcn.0049e7b0
mov edi, eax
test edi, edi
je 0x4a4624
mov ecx, edi
call fcn.004da3a0
test eax, eax
je 0x4a45b2
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 4]
mov eax, dword [esi + 0x98]
mov ecx, dword [eax + ebx*4]
call fcn.004da3a0
mov edx, dword [eax]
push 0
mov ecx, eax
call dword [edx + 0x68]
push eax
mov ecx, edi
call fcn.004da3b0
mov eax, dword [esi + 0x98]
mov ecx, dword [eax + ebx*4]
call fcn.004fe620
sub esp, 8
mov ecx, edi
fstp qword [esp]
call fcn.0048fee0
mov ecx, dword [esi + 0x98]
mov ecx, dword [ecx + ebx*4]
call fcn.0048ff00
sub esp, 8
mov ecx, edi
fstp qword [esp]
call fcn.0048ff10
mov edx, dword [esi + 0x98]
push 1
push 0
mov ecx, dword [edx + ebx*4]
call fcn.0048edd0
push 0
push 0
mov ecx, edi
call fcn.00537260
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x4a4568
mov eax, dword [esi + 0x88]
xor ebx, ebx
test eax, eax
mov dword [esp + 0x14], eax
jle 0x4a483c
mov eax, dword [esi + 0x84]
push 0
push 0
mov ecx, dword [eax + ebx*4]
call fcn.0048ed80
mov ecx, dword [esi + 0x84]
mov ecx, dword [ecx + ebx*4]
call fcn.004bbc50
test eax, eax
jne 0x4a467f
mov edx, dword [esi + 0x84]
push eax
push 3
mov ecx, dword [edx + ebx*4]
call fcn.00537260
jmp 0x4a482f
mov eax, dword [esi + 0x84]
push 3
mov ecx, dword [eax + ebx*4]
call fcn.00537250
cmp eax, 1
jne 0x4a482f
mov ecx, dword [esi + 0x84]
mov ecx, dword [ecx + ebx*4]
call fcn.004ac8e0
cmp eax, 6
je 0x4a482f
mov edx, dword [esi + 0x84]
mov dword [esp + 0x20], 1
mov eax, dword [edx + ebx*4]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004a81e0
mov edi, eax
test edi, edi
je 0x4a482f
mov edx, dword [esi + 0x84]
mov ecx, dword [edx + ebx*4]
cmp dword [ecx + 0x10], 7
jne 0x4a4708
call fcn.00515c90
test eax, eax
je 0x4a4708
mov ecx, eax
call fcn.00498d70
test eax, eax
jne 0x4a4708
push eax
push 3
mov ecx, edi
call fcn.00537260
jmp 0x4a482f
mov ecx, dword [esi + 0x84]
lea eax, [esp + 0xc8]
push eax
mov ecx, dword [ecx + ebx*4]
call fcn.004ac900
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
lea ecx, [esp + 0xe0]
mov dword [esp + 0x44], edx
push ecx
mov ecx, edi
mov dword [esp + 0x4c], eax
call fcn.004ac900
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], ecx
mov edx, dword [eax + 8]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x5c], edx
sub esp, 0x18
lea edx, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
mov dword [esp + 0x7c], eax
call fcn.0064dc70
mov ecx, edi
call fcn.004d54d0
fld qword [esp + 0x34]
fsub qword [esp + 0x4c]
fld qword [esp + 0x3c]
fsub qword [esp + 0x54]
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x40], esp
fstp qword [esp + 0x84]
fld qword [esp + 0x5c]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
fsub qword [esp + 0x74]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
fstp qword [esp + 0x8c]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x90]
fstp qword [eax]
mov dword [eax + 0x10], ecx
mov ecx, edi
mov dword [eax + 0x14], edx
call fcn.004ad350
push 1
push 3
mov ecx, edi
call fcn.00537260
mov eax, dword [esi + 0x84]
push 1
push 0
mov ecx, dword [eax + ebx*4]
call fcn.0048ed80
cmp dword [edi + 0x10], 7
jne 0x4a482f
mov ecx, edi
call fcn.0050ba10
test eax, eax
jne 0x4a482f
push eax
mov ecx, edi
call fcn.00515b10
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x4a4645
mov eax, dword [esi + 0xb0]
test eax, eax
jle 0x4a4c7a
xor edi, edi
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0xac]
mov ecx, dword [ecx + edi]
call fcn.004e7730
test eax, eax
je 0x4a4c68
mov edx, dword [esi + 0xac]
mov ebx, dword [ebp + 8]
mov eax, dword [edx + edi]
mov ecx, dword [eax + 4]
push ecx
mov ecx, ebx
call fcn.0049e850
test eax, eax
mov dword [esp + 0x1c], eax
jne 0x4a4a4b
mov edx, dword [esi + 0xac]
push eax
push ebx
mov dword [esp + 0x28], 1
mov ecx, dword [edx + edi]
call fcn.004def20
mov ecx, eax
mov dword [esp + 0x14], eax
call fcn.004d8f60
test eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], 0
jle 0x4a48fd
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
call fcn.004d8f70
mov ebx, eax
test ebx, ebx
je 0x4a48ec
mov ecx, ebx
call fcn.004bbc50
test eax, eax
je 0x4a48ec
cmp dword [ebx + 0x10], 6
jne 0x4a48ec
push 1
push 3
mov ecx, ebx
call fcn.00537260
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x4a48bc
mov ecx, dword [esp + 0x14]
call fcn.004d92f0
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a4932
mov ecx, dword [esp + 0x14]
push ebx
call fcn.004d9300
test eax, eax
je 0x4a4929
push 1
push 3
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a4910
mov ecx, dword [esi + 0xac]
mov ecx, dword [ecx + edi]
call fcn.004d8f60
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a4971
mov edx, dword [esi + 0xac]
push ebx
mov ecx, dword [edx + edi]
call fcn.004d8f70
test eax, eax
je 0x4a4968
push 1
push 0
mov ecx, eax
call fcn.0048ed80
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a494a
mov eax, dword [esi + 0xac]
mov ecx, dword [eax + edi]
call fcn.004d8ca0
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a49b0
mov ecx, dword [esi + 0xac]
push ebx
mov ecx, dword [ecx + edi]
call fcn.004d8cb0
test eax, eax
je 0x4a49a7
push 1
push 0
mov ecx, eax
call fcn.0048edd0
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a4989
mov edx, dword [esi + 0xac]
mov ecx, dword [edx + edi]
call fcn.004d92f0
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a49ef
mov eax, dword [esi + 0xac]
push ebx
mov ecx, dword [eax + edi]
call fcn.004d9300
test eax, eax
je 0x4a49e6
push 1
push 7
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a49c8
mov ecx, dword [esi + 0xac]
mov ecx, dword [ecx + edi]
call fcn.004e8960
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a4a2e
mov edx, dword [esi + 0xac]
push ebx
mov ecx, dword [edx + edi]
call fcn.004e8970
test eax, eax
je 0x4a4a25
push 1
push 7
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a4a07
mov eax, dword [ebp + 8]
mov ebx, dword [esp + 0x14]
push eax
mov ecx, ebx
call fcn.004da390
mov ecx, dword [ebp + 8]
push ebx
call fcn.0049e8f0
jmp 0x4a4c68
mov ecx, dword [esi + 0xac]
mov ecx, dword [ecx + edi]
call fcn.004e7770
test eax, eax
je 0x4a4c4a
mov ecx, dword [esp + 0x1c]
push 0
call fcn.00537250
test eax, eax
je 0x4a4c4a
mov edx, dword [esi + 0xac]
push 0
push ebx
mov dword [esp + 0x28], 1
mov ecx, dword [edx + edi]
call fcn.004def20
mov ecx, eax
mov dword [esp + 0x14], eax
call fcn.004d8f60
test eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], 0
jle 0x4a4ae9
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
call fcn.004d8f70
mov ebx, eax
test ebx, ebx
je 0x4a4ad8
mov ecx, ebx
call fcn.004bbc50
test eax, eax
je 0x4a4ad8
cmp dword [ebx + 0x10], 6
jne 0x4a4ad8
push 1
push 3
mov ecx, ebx
call fcn.00537260
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x4a4aa8
mov ecx, dword [esp + 0x14]
call fcn.004d92f0
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a4b1e
mov ecx, dword [esp + 0x14]
push ebx
call fcn.004d9300
test eax, eax
je 0x4a4b15
push 1
push 3
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a4afc
mov ecx, dword [esi + 0xac]
mov ecx, dword [ecx + edi]
call fcn.004d8f60
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a4b5d
mov edx, dword [esi + 0xac]
push ebx
mov ecx, dword [edx + edi]
call fcn.004d8f70
test eax, eax
je 0x4a4b54
push 1
push 0
mov ecx, eax
call fcn.0048ed80
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a4b36
mov eax, dword [esi + 0xac]
mov ecx, dword [eax + edi]
call fcn.004d8ca0
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a4b9c
mov ecx, dword [esi + 0xac]
push ebx
mov ecx, dword [ecx + edi]
call fcn.004d8cb0
test eax, eax
je 0x4a4b93
push 1
push 0
mov ecx, eax
call fcn.0048edd0
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a4b75
mov edx, dword [esi + 0xac]
mov ecx, dword [edx + edi]
call fcn.004d92f0
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a4bdb
mov eax, dword [esi + 0xac]
push ebx
mov ecx, dword [eax + edi]
call fcn.004d9300
test eax, eax
je 0x4a4bd2
push 1
push 7
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a4bb4
mov ecx, dword [esi + 0xac]
mov ecx, dword [ecx + edi]
call fcn.004e8960
xor ebx, ebx
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a4c1a
mov edx, dword [esi + 0xac]
push ebx
mov ecx, dword [edx + edi]
call fcn.004e8970
test eax, eax
je 0x4a4c11
push 1
push 7
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x10]
inc ebx
cmp ebx, eax
jl 0x4a4bf3
mov ebx, dword [ebp + 8]
mov ecx, dword [esp + 0x14]
push ebx
call fcn.004da390
mov eax, dword [esp + 0x14]
mov ecx, ebx
push eax
call fcn.0049e8f0
push ebx
mov ebx, dword [esp + 0x20]
mov ecx, ebx
call fcn.004da9f0
mov edx, dword [ebx]
push 1
mov ecx, ebx
call dword [edx + 4]
jmp 0x4a4c68
mov eax, dword [esi + 0xac]
mov ecx, dword [esp + 0x1c]
add ecx, 0x148
mov eax, dword [eax + edi]
add eax, 0x148
push eax
call fcn.00654de0
mov eax, dword [esp + 0x24]
add edi, 4
dec eax
mov dword [esp + 0x24], eax
jne 0x4a4850
mov eax, dword [esi + 0xb0]
mov dword [esp + 0x1c], 0
test eax, eax
mov dword [esp + 0x14], eax
jle 0x4a4eef
mov edx, dword [esi + 0xac]
mov eax, dword [esp + 0x1c]
mov ecx, dword [edx + eax*4]
mov edx, dword [ecx + 4]
mov ecx, dword [ebp + 8]
push edx
call fcn.0049e850
mov edi, eax
test edi, edi
je 0x4a4eda
mov eax, dword [esi + 0xac]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [eax + ecx*4]
call fcn.004da3a0
lea ebx, [eax + 0x78]
lea edx, [esp + 0x28]
push edx
mov ecx, ebx
call fcn.004d7530
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x104], 1
call fcn.0065e80a
lea ecx, [esp + 0x28]
mov byte [esp + 0x100], 0
call fcn.0065e798
mov eax, dword [esp + 0x30]
push 0x6dfc60
push eax
nop
call fcn.0081d14b
add esp, 8
test eax, eax
jne 0x4a4e9d
lea ecx, [esp + 0x94]
lea edx, [esp + 0x7c]
push ecx
push edx
mov ecx, ebx
call fcn.004d7110
mov eax, dword [esi + 0xac]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [eax + ecx*4]
call fcn.004e7730
test eax, eax
je 0x4a4d9f
mov ecx, edi
call fcn.004da3a0
push 0x6dfc60
lea ecx, [esp + 0x28]
mov edi, eax
call fcn.0065e7aa
add edi, 0x78
lea edx, [esp + 0x24]
push edx
mov ecx, edi
mov byte [esp + 0x104], 2
call fcn.004d7520
lea ecx, [esp + 0x24]
mov byte [esp + 0x100], 0
call fcn.0065e798
lea eax, [esp + 0x94]
lea ecx, [esp + 0x7c]
push eax
push ecx
mov ecx, edi
call fcn.004d70a0
mov ecx, edi
call fcn.004d7a20
jmp 0x4a4eda
fld qword [esp + 0x9c]
fadd qword [esp + 0x84]
push 0
push 0
sub esp, 8
lea ecx, [esp + 0xc0]
fmul qword [0x691ac8]
sub esp, 8
fstp qword [esp + 8]
fld qword [esp + 0xac]
fadd qword [esp + 0x94]
fmul qword [0x691ac8]
fstp qword [esp]
call fcn.0064dd00
sub esp, 0x18
lea edx, [esp + 0xc8]
mov ecx, esp
mov dword [esp + 0xc4], esp
push edx
call fcn.0064dc70
mov ecx, edi
call fcn.004e2a30
cmp eax, 1
mov ecx, edi
jne 0x4a4e65
call fcn.004da3a0
push 0x6dfc60
lea ecx, [esp + 0x1c]
mov edi, eax
call fcn.0065e7aa
add edi, 0x78
lea eax, [esp + 0x18]
push eax
mov ecx, edi
mov byte [esp + 0x104], 3
call fcn.004d7520
lea ecx, [esp + 0x18]
mov byte [esp + 0x100], 0
call fcn.0065e798
lea ecx, [esp + 0x94]
lea edx, [esp + 0x7c]
push ecx
push edx
mov ecx, edi
call fcn.004d70a0
mov ecx, edi
call fcn.004d7a20
jmp 0x4a4eda
call fcn.004da3a0
push 0x6fc144
lea ecx, [esp + 0x14]
mov edi, eax
call fcn.0065e7aa
lea eax, [esp + 0x10]
lea ecx, [edi + 0x78]
push eax
mov byte [esp + 0x104], 4
call fcn.004d7520
mov byte [esp + 0x100], 0
lea ecx, [esp + 0x10]
jmp 0x4a4ed5
mov ecx, edi
call fcn.004da3a0
push 0x6fc144
lea ecx, [esp + 0x30]
mov edi, eax
call fcn.0065e7aa
lea ecx, [esp + 0x2c]
mov byte [esp + 0x100], 5
push ecx
lea ecx, [edi + 0x78]
call fcn.004d7520
mov byte [esp + 0x100], 0
lea ecx, [esp + 0x2c]
call fcn.0065e798
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
inc eax
cmp eax, ecx
mov dword [esp + 0x1c], eax
jl 0x4a4c94
mov eax, dword [esi + 0x9c]
xor ebx, ebx
test eax, eax
mov dword [esp + 0x14], eax
jle 0x4a5074
mov edx, dword [esi + 0x98]
mov ecx, dword [edx + ebx*4]
call fcn.00498db0
test eax, eax
je 0x4a5067
mov eax, dword [esi + 0x98]
push 0
mov ecx, dword [eax + ebx*4]
call fcn.0048edc0
test eax, eax
jne 0x4a5067
mov ecx, dword [esi + 0x98]
mov ecx, dword [ecx + ebx*4]
call fcn.00498d70
test eax, eax
je 0x4a5067
mov edx, dword [esi + 0x98]
mov eax, dword [edx + ebx*4]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0049e7b0
test eax, eax
jne 0x4a5067
mov edx, dword [ebp + 8]
push eax
mov eax, dword [esi + 0x98]
push edx
mov dword [esp + 0x28], 1
mov ecx, dword [eax + ebx*4]
call fcn.004956d0
mov ecx, dword [esi + 0x98]
mov edi, eax
mov ecx, dword [ecx + ebx*4]
call fcn.004fe620
sub esp, 8
mov ecx, edi
fstp qword [esp]
call fcn.0048fee0
mov edx, dword [esi + 0x98]
mov ecx, dword [edx + ebx*4]
call fcn.0048ff00
sub esp, 8
mov ecx, edi
fstp qword [esp]
call fcn.0048ff10
mov ecx, edi
call fcn.004da3c0
test eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], 0
jle 0x4a4ffa
mov eax, dword [esp + 0x18]
mov ecx, edi
push eax
call fcn.0048ee80
test eax, eax
je 0x4a4fe9
push 1
push 3
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x4a4fce
mov ecx, edi
call fcn.004d8830
test eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], 0
jle 0x4a503d
mov ecx, dword [esp + 0x18]
push ecx
mov ecx, edi
call fcn.0048f180
test eax, eax
je 0x4a502c
push 1
push 3
mov ecx, eax
call fcn.00537260
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x4a5011
mov edx, dword [esi + 0x98]
mov ecx, dword [edx + ebx*4]
call fcn.0048fc00
test eax, eax
je 0x4a5067
mov eax, dword [eax + 4]
mov ecx, dword [ebp + 8]
push eax
call fcn.0049e850
test eax, eax
je 0x4a5067
push edi
mov ecx, eax
call fcn.004e0dd0
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x4a4f03
mov ebx, dword [esi + 0x88]
xor edi, edi
test ebx, ebx
mov dword [esp + 0x14], ebx
jle 0x4a513f
mov ecx, dword [esi + 0x84]
mov ecx, dword [ecx + edi*4]
cmp dword [ecx + 0x10], 6
jne 0x4a5136
call fcn.004bbc50
test eax, eax
je 0x4a5136
mov edx, dword [esi + 0x84]
push 0
mov ecx, dword [edx + edi*4]
call fcn.0048ed70
test eax, eax
jne 0x4a5136
mov eax, dword [esi + 0x84]
mov ecx, dword [eax + edi*4]
call fcn.004ac8e0
cmp eax, 4
je 0x4a50d4
cmp eax, 5
jne 0x4a5136
mov ecx, dword [esi + 0x84]
push 3
mov ecx, dword [ecx + edi*4]
call fcn.00537250
test eax, eax
je 0x4a5136
mov edx, dword [esi + 0x84]
mov eax, dword [edx + edi*4]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004a81e0
test eax, eax
jne 0x4a5136
mov edx, dword [esi + 0x84]
push 0
mov dword [esp + 0x24], 1
mov ecx, dword [edx + edi*4]
mov eax, dword [ecx]
call dword [eax + 0x90]
mov ecx, dword [ebp + 8]
mov ebx, eax
push ebx
call fcn.0049d780
push 1
push 3
mov ecx, ebx
call fcn.00537260
mov ebx, dword [esp + 0x14]
inc edi
cmp edi, ebx
jl 0x4a5088
mov eax, dword [esi + 0xc4]
xor edi, edi
test eax, eax
mov dword [esp + 0x14], eax
jle 0x4a5243
mov ecx, dword [esi + 0xc0]
mov ecx, dword [ecx + edi*4]
call fcn.004d5290
cmp eax, 1
jne 0x4a5236
mov edx, dword [esi + 0xc0]
push 6
mov ecx, dword [edx + edi*4]
call fcn.00537250
test eax, eax
jne 0x4a5236
mov eax, dword [esi + 0xc0]
push 7
mov ecx, dword [eax + edi*4]
call fcn.00537250
test eax, eax
jne 0x4a5236
mov ecx, dword [esi + 0xc0]
mov edx, dword [ecx + edi*4]
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
call fcn.0049f6e0
mov ecx, dword [esi + 0xc0]
mov ebx, eax
test ebx, ebx
mov ecx, dword [ecx + edi*4]
push 3
jne 0x4a51e3
call fcn.00537250
test eax, eax
je 0x4a5236
mov edx, dword [esi + 0xc0]
push 0
mov dword [esp + 0x24], 1
mov ecx, dword [edx + edi*4]
mov eax, dword [ecx]
call dword [eax + 0x68]
jmp 0x4a522d
call fcn.00537250
test eax, eax
je 0x4a5236
mov edx, dword [esi + 0xc0]
push 1
mov dword [esp + 0x24], 1
mov ecx, dword [edx + edi*4]
mov eax, dword [ecx]
call dword [eax + 0x68]
push 1
push 3
mov ecx, eax
mov dword [esp + 0x30], eax
call fcn.00537260
mov ecx, dword [ebp + 8]
push 0
push ecx
mov ecx, ebx
call fcn.004d6330
mov edx, dword [ebx]
push 1
mov ecx, ebx
call dword [edx + 4]
mov eax, dword [esp + 0x28]
mov ecx, dword [ebp + 8]
push eax
call fcn.0049f430
mov eax, dword [esp + 0x14]
inc edi
cmp edi, eax
jl 0x4a5153
mov eax, dword [esi + 0xd8]
xor ebx, ebx
test eax, eax
mov dword [esp + 0x14], eax
jle 0x4a53ca
mov ecx, dword [esi + 0xd4]
push 6
mov ecx, dword [ecx + ebx*4]
call fcn.00537250
test eax, eax
jne 0x4a53bd
mov edx, dword [esi + 0xd4]
push 7
mov ecx, dword [edx + ebx*4]
call fcn.00537250
test eax, eax
jne 0x4a53bd
mov eax, dword [esi + 0xd4]
mov ecx, dword [eax + ebx*4]
mov edx, dword [ecx + 4]
mov ecx, dword [ebp + 8]
push edx
call fcn.0049fa30
mov dword [esp + 0x24], eax
test eax, eax
mov eax, dword [esi + 0xd4]
mov ecx, dword [eax + ebx*4]
jne 0x4a5307
call fcn.00534500
test eax, eax
je 0x4a53bd
mov ecx, dword [ebp + 8]
mov edx, dword [esi + 0xd4]
push 0
push ecx
mov ecx, dword [edx + ebx*4]
mov dword [esp + 0x28], 1
call fcn.00533180
mov edi, eax
mov ecx, dword [edi + 0xb8]
test ecx, ecx
je 0x4a52eb
push 1
push 3
call fcn.00537260
mov ecx, dword [edi + 0xbc]
test ecx, ecx
je 0x4a53bd
push 1
push 3
call fcn.00537260
jmp 0x4a53bd
call fcn.00534500
test eax, eax
je 0x4a53bd
mov ecx, dword [ebp + 8]
mov edx, dword [esi + 0xd4]
push 1
push ecx
mov ecx, dword [edx + ebx*4]
mov dword [esp + 0x28], 1
call fcn.00533180
mov edi, eax
mov ecx, dword [edi + 0xb8]
test ecx, ecx
je 0x4a5345
push 1
push 3
call fcn.00537260
mov ecx, dword [edi + 0xbc]
test ecx, ecx
je 0x4a5358
push 1
push 3
call fcn.00537260
mov ecx, dword [esp + 0x24]
call fcn.004d8ca0
test eax, eax
mov dword [esp + 0x1c], eax
je 0x4a53a3
push eax
mov ecx, edi
call fcn.005313a0
mov ecx, dword [esp + 0x1c]
push edi
call fcn.004dc030
mov eax, dword [edi + 0xb8]
test eax, eax
je 0x4a538f
mov ecx, dword [esp + 0x1c]
push eax
call fcn.004d90d0
mov edi, dword [edi + 0xbc]
test edi, edi
je 0x4a53a3
mov ecx, dword [esp + 0x1c]
push edi
call fcn.004d90d0
mov ecx, dword [ebp + 8]
mov edi, dword [esp + 0x24]
push 0
push ecx
mov ecx, edi
call fcn.00534190
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x4a5257
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4a53d6
push 1
jmp 0x4a53d8
push 0
mov ecx, dword [ebp + 8]
push 1
call fcn.00537260
mov ebx, dword [esi + 0x9c]
xor edi, edi
test ebx, ebx
jle 0x4a5405
mov eax, dword [esi + 0x98]
push 0
push 0
mov ecx, dword [eax + edi*4]
call fcn.0048edd0
inc edi
cmp edi, ebx
jl 0x4a53ee
mov ebx, dword [esi + 0x88]
xor edi, edi
test ebx, ebx
jle 0x4a5428
mov ecx, dword [esi + 0x84]
push 0
push 0
mov ecx, dword [ecx + edi*4]
call fcn.0048ed80
inc edi
cmp edi, ebx
jl 0x4a5411
mov ebx, dword [esi + 0xc4]
xor edi, edi
test ebx, ebx
jle 0x4a544b
mov edx, dword [esi + 0xc0]
push 0
push 7
mov ecx, dword [edx + edi*4]
call fcn.00537260
inc edi
cmp edi, ebx
jl 0x4a5434
mov ebx, dword [esi + 0xd8]
xor edi, edi
test ebx, ebx
jle 0x4a546e
mov eax, dword [esi + 0xd4]
push 0
push 7
mov ecx, dword [eax + edi*4]
call fcn.00537260
inc edi
cmp edi, ebx
jl 0x4a5457
lea ecx, [esp + 0x30]
mov dword [esp + 0x100], 0xffffffff
call fcn.0065e798
mov ecx, dword [esp + 0xf8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4