Function at 0x546460
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x64
mov ecx, dword [eax]
push ebx
mov ebx, dword [esp + 0x6c]
push ebp
mov ebp, dword [eax + 8]
xor edx, edx
push edi
mov edi, dword [eax + 4]
mov eax, dword [eax + 0xc]
mov dword [0x69caa8], edx
mov dword [esp + 0x64], edi
movsx edi, word [ebx + 4]
cmp ecx, edi
mov dword [esp + 0x34], edx
mov edx, ecx
jge 0x546491
mov edx, edi
movsx edi, word [ebx + 8]
cmp ebp, edi
mov ecx, ebp
jge 0x54649d
mov ecx, edi
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x58], ecx
movsx ecx, word [ebx + 6]
inc ebp
cmp ebp, ecx
jle 0x5464b0
mov ebp, ecx
lea ecx, [eax + 1]
movsx eax, word [ebx + 0xa]
cmp ecx, eax
mov dword [esp + 0x20], ecx
jle 0x5464c3
mov dword [esp + 0x20], eax
movzx edi, byte [esi + 0x2e]
xor eax, eax
mov ax, word [esi + 0x18]
cmp ax, 1
mov ecx, ebp
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x24], eax
je 0x5464ed
test byte [esi + 0x30], 1
je 0x5464ed
movsx eax, ax
imul edi, eax
mov eax, dword [ebx + 0xc]
sub edx, eax
imul edx, edi
test dl, 7
je 0x546510
mov ecx, dword [esp + 0x60]
mov edi, edi
sub edx, edi
dec ecx
test dl, 7
jne 0x546500
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x64]
sub ebp, eax
imul ebp, edi
sar edx, 3
mov eax, ebp
test al, 7
mov dword [esp + 0xc], edx
je 0x54652d
add eax, edi
inc ecx
test al, 7
jne 0x546522
mov dword [esp + 0x64], ecx
movsx edi, word [ebx + 6]
sar eax, 3
cmp ecx, edi
jle 0x54653c
mov dword [esp + 0x64], edi
movsx ecx, word [ebx + 4]
cmp dword [esp + 0x60], ecx
jge 0x54654a
mov dword [esp + 0x60], ecx
mov ecx, dword [esi + 0x20]
mov edi, eax
sub edi, edx
cmp edi, ecx
jle 0x546558
lea eax, [ecx + edx]
sub eax, edx
mov edx, dword [esp + 0x78]
mov ebp, eax
mov eax, dword [edx]
mov edi, dword [eax + 0xc]
sub edx, edi
mov eax, 0x66666667
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
sub edx, edi
mov eax, 0x66666667
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [esi + 0x30]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x44]
mov ebx, 1
test bl, dl
mov dword [esp + 0x1c], eax
je 0x5465b9
cmp word [esp + 0x24], bx
jle 0x5465b9
mov dword [esp + 0x2c], ebx
xor edi, edi
jmp 0x5465bf
xor edi, edi
mov dword [esp + 0x2c], edi
cmp eax, 0xffffffff
mov edx, dword [esp + 0x84]
mov edx, dword [edx + 0xd8]
mov dword [esp + 0x18], edi
jne 0x5465d9
cmp edx, edi
jmp 0x5465f4
cmp eax, 0xfffffffe
jne 0x5465e7
cmp edx, ebx
je 0x5465fa
cmp edx, 3
jmp 0x5465f4
cmp eax, 0xfffffffd
jne 0x5465f1
cmp edx, 4
jmp 0x5465f4
cmp eax, 0xfffffffc
mov dword [esp + 0x30], edi
jne 0x5465fe
mov dword [esp + 0x30], ebx
cmp dword [esp + 0x80], edi
je 0x546748
mov eax, dword [esi + 0x1c]
mov edi, dword [0x69d2a4]
cmp edi, eax
mov dword [esp + 0x18], 0x69d2a4
je 0x54673c
mov edx, edi
neg edx
cmp edx, eax
je 0x54673c
mov eax, dword [esp + 0x84]
mov edx, dword [eax + 0xfc]
mov edi, dword [edx + 4]
mov eax, dword [esi + 0x1bc]
xor edx, edx
lea eax, [eax + edi - 1]
div edi
movsx edx, word [esp + 0x24]
mov ebx, dword [esi + 0x24]
inc eax
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 0x1b8]
imul eax, dword [esi + 0x1b4]
dec ebx
imul ebx, edx
lea edx, [esp + 0x24]
imul ebx, ecx
push edx
mov edx, dword [esp + 0x78]
mov edx, dword [edx]
mov dword [esp + 0x3c], eax
push edx
xor eax, eax
xor ecx, ecx
push eax
push ecx
call fcn.00510a40
fld dword [esp + 0x34]
call fcn.00667ad0
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx]
inc edi
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], edi
fild dword [esp + 0x90]
lea eax, [esp + 0x58]
push eax
push edx
fstp dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
push eax
xor eax, eax
push eax
call fcn.00510a40
fld dword [esp + 0x68]
add esp, 0x20
call fcn.00667ad0
mov ecx, dword [esp + 0x7c]
cmp eax, ecx
jle 0x5466e1
sub eax, ecx
jmp 0x5466e9
mov ecx, dword [esp + 0x7c]
sub ecx, eax
mov eax, ecx
mov edx, dword [esp + 0x38]
lea ecx, [eax + 3]
lea eax, [ebx + edx - 1]
imul ecx, dword [esi + 0x24]
cdq
idiv ebx
add ecx, 3
and ecx, 0xfffffffc
mov dword [0x69d2b0], ecx
mov dword [0x69d2ac], eax
movsx eax, word [esi + 0x18]
imul eax, dword [esp + 0x3c]
mov dword [0x69d2a8], eax
mov eax, dword [0x6bec84]
cdq
idiv ecx
mov edi, dword [esi + 0x1c]
mov dword [0x69d2a4], edi
cmp eax, 2
jge 0x54673c
mov dword [0x69d2a4], 0
jmp 0x546748
test edi, edi
jge 0x546748
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 0xfc]
mov edi, dword [ecx + 0x30]
xor edx, edx
cmp edi, edx
je 0x547192
cmp dword [eax + 0xdc], edx
je 0x547192
cmp dword [esp + 0x2c], edx
jne 0x547192
cmp word [esi + 0x18], 1
je 0x546789
cmp dword [esp + 0x30], edx
je 0x547192
mov ebx, dword [esp + 0x58]
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
sub edi, ebx
mov ebx, edi
imul ebx, ebp
add ebx, 3
and ebx, 0xfffffffc
cmp eax, edx
mov dword [esp + 0x34], 1
mov dword [esp + 0x80], edi
je 0x5467c7
cmp ebx, dword [eax + 0xc]
jle 0x5467c7
mov ecx, dword [esi + 0x1c]
neg ecx
mov dword [eax], ecx
xor eax, eax
mov dword [esp + 0x18], eax
mov cx, word [esi + 0x18]
shr ebx, 1
cmp cx, 1
jne 0x5468c9
mov ecx, dword [esp + 0x1c]
cmp ecx, 0xffffffff
jne 0x5467ea
mov dword [esp + 0x7c], 4
jmp 0x5467fe
cmp ecx, edx
jl 0x5467fa
cmp ecx, 0xfa
mov dword [esp + 0x7c], ecx
jle 0x5467fe
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0x84]
mov ecx, dword [edx + 0xfc]
lea edx, [esp + 0x78]
push edx
mov edx, dword [esp + 0x14]
push 0
push eax
mov eax, dword [esp + 0x88]
push eax
mov eax, dword [esp + 0x24]
push edx
mov dword [esp + 0x50], ecx
mov edx, ecx
mov ecx, dword [ecx]
push eax
push ebx
push edx
call dword [ecx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
je 0x5471fc
mov ecx, dword [0x69caa8]
mov dword [ecx*4 + 0x69cea8], ebx
mov edx, dword [0x69caa8]
mov ecx, dword [esp + 0x74]
mov dword [edx*4 + 0x69caac], eax
mov ebx, dword [0x69caa8]
mov eax, dword [esp + 0xc]
inc ebx
mov dword [0x69caa8], ebx
mov edx, dword [ecx + 0x10]
mov ebx, dword [esp + 0x58]
sub ebx, edx
imul ebx, dword [esi + 0x20]
mov edx, dword [esi]
add ebx, dword [edx]
add ebx, eax
mov eax, dword [esp + 0x78]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
test edi, edi
mov dword [esp + 0x78], eax
jle 0x546994
mov edi, edi
mov edx, dword [esp + 0x78]
push ebp
push ebx
push edx
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
add edx, ebp
add esp, 0xc
add ebx, ecx
dec edi
mov dword [esp + 0x78], edx
jne 0x5468a0
jmp 0x546994
test byte [esi + 0x30], 1
je 0x5469b3
mov ecx, dword [esp + 0x84]
mov ecx, dword [ecx + 0xfc]
mov edx, dword [ecx]
mov dword [esp + 0x7c], ecx
lea ecx, [esp + 0x78]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push eax
mov eax, dword [esp + 0x1c]
push 0
push eax
mov eax, dword [esp + 0x90]
push ecx
push ebx
push eax
call dword [edx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
je 0x546cbd
mov edx, dword [0x69caa8]
mov ecx, dword [esp + 0x7c]
mov dword [edx*4 + 0x69cea8], ebx
mov eax, dword [0x69caa8]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x58]
mov dword [eax*4 + 0x69caac], ecx
inc dword [0x69caa8]
sub ebx, dword [edx + 0x10]
imul ebx, dword [esi + 0x20]
mov eax, dword [esi]
mov ecx, dword [eax]
mov eax, dword [esp + 0xc]
add ebx, ecx
add ebx, eax
mov eax, dword [esp + 0x78]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
test edi, edi
mov dword [esp + 0x78], eax
jle 0x546994
lea ebx, [ebx]
mov edx, dword [esp + 0x78]
push ebp
push ebx
push edx
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
add edx, ebp
add esp, 0xc
add ebx, ecx
dec edi
mov dword [esp + 0x78], edx
jne 0x546970
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 0xfc]
mov edx, dword [ecx]
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x547652
jmp 0x54763e
cmp cx, 3
mov edi, dword [esp + 0x1c]
jne 0x546c76
cmp edi, 0xfffffffc
je 0x546c76
mov ecx, dword [esp + 0x84]
mov ecx, dword [ecx + 0xfc]
mov edx, dword [ecx]
lea edi, [esp + 0x78]
push edi
push 0
push eax
mov eax, dword [esp + 0x1c]
push 1
push eax
mov eax, dword [esp + 0x28]
push eax
push ebx
push ecx
call dword [edx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
je 0x546cbd
mov edx, dword [0x69caa8]
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0x58]
mov dword [edx*4 + 0x69cea8], ebx
mov eax, dword [0x69caa8]
mov edx, dword [esp + 0x74]
mov dword [eax*4 + 0x69caac], ecx
inc dword [0x69caa8]
sub edi, dword [edx + 0x10]
imul edi, dword [esi + 0x20]
mov eax, dword [esi]
mov ecx, dword [eax]
mov eax, dword [esp + 0xc]
add edi, ecx
add edi, eax
mov eax, dword [esp + 0x78]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
test eax, eax
jle 0x546a8f
mov edx, eax
mov dword [esp + 0x30], edx
mov eax, dword [esp + 0x78]
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x3c]
add edx, ebp
add esp, 0xc
add edi, ecx
dec eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x30], eax
jne 0x546a63
mov edi, dword [esp + 0x84]
mov ecx, dword [edi + 0xfc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
test eax, eax
je 0x546ab5
mov edx, dword [esp + 0x7c]
mov eax, ecx
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x10]
add esp, 8
mov eax, dword [edi + 0xfc]
mov ecx, dword [eax]
lea edx, [esp + 0x78]
push edx
mov edx, dword [esp + 0x1c]
push 0
push edx
mov edx, dword [esp + 0x1c]
push 2
push edx
mov edx, dword [esp + 0x28]
push edx
push ebx
push eax
call dword [ecx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
je 0x546eaa
mov eax, dword [0x69caa8]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0x58]
mov dword [eax*4 + 0x69cea8], ebx
mov ecx, dword [0x69caa8]
mov eax, dword [esp + 0x74]
mov dword [ecx*4 + 0x69caac], edx
inc dword [0x69caa8]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc]
sub edi, ecx
imul edi, dword [esi + 0x20]
mov ecx, dword [esi]
add edi, dword [ecx + 4]
mov eax, dword [esp + 0x78]
add edi, edx
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
test eax, eax
jle 0x546b7c
mov dword [esp + 0x30], eax
lea ebx, [ebx]
mov ecx, dword [esp + 0x78]
push ebp
push edi
push ecx
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x3c]
add edx, ebp
add esp, 0xc
add edi, ecx
dec eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x30], eax
jne 0x546b50
mov eax, dword [esp + 0x84]
mov edx, dword [eax + 0xfc]
mov ecx, dword [edx]
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x546ba6
mov ecx, dword [esp + 0x7c]
mov eax, dword [eax + 0xfc]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x10]
add esp, 8
mov edx, dword [esp + 0x84]
mov eax, dword [edx + 0xfc]
mov ecx, dword [eax]
lea edx, [esp + 0x78]
push edx
mov edx, dword [esp + 0x1c]
push 0
push edx
mov edx, dword [esp + 0x1c]
push 3
push edx
mov edx, dword [esp + 0x28]
push edx
push ebx
push eax
call dword [ecx + 8]
mov edi, eax
add esp, 0x20
cmp edi, 0xffffffff
mov dword [esp + 0x7c], edi
je 0x5471fc
mov ecx, dword [0x69caa8]
mov eax, dword [esp + 0x74]
mov dword [ecx*4 + 0x69cea8], ebx
mov edx, dword [0x69caa8]
mov ebx, dword [esp + 0x58]
mov dword [edx*4 + 0x69caac], edi
inc dword [0x69caa8]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc]
sub ebx, ecx
imul ebx, dword [esi + 0x20]
mov ecx, dword [esi]
add ebx, dword [ecx + 8]
mov eax, dword [esp + 0x78]
add ebx, edx
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
test eax, eax
jle 0x54703d
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x78]
push ebp
push ebx
push eax
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x3c]
add edx, ebp
add esp, 0xc
add ebx, ecx
dec eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x30], eax
jne 0x546c45
jmp 0x54703d
cmp cx, 4
jne 0x54705d
cmp edi, 0xfffffffc
je 0x547066
mov edx, dword [esp + 0x84]
mov ecx, dword [edx + 0xfc]
mov edx, dword [ecx]
lea edi, [esp + 0x78]
push edi
push 0
push eax
mov eax, dword [esp + 0x1c]
push 1
push eax
mov eax, dword [esp + 0x28]
push eax
push ebx
push ecx
call dword [edx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
jne 0x546cd9
mov ecx, dword [esp + 0x84]
push ecx
call fcn.004fc190
add esp, 4
pop edi
pop ebp
mov eax, 0xfffffffb
pop ebx
add esp, 0x64
ret
mov edx, dword [0x69caa8]
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0x58]
mov dword [edx*4 + 0x69cea8], ebx
mov eax, dword [0x69caa8]
mov edx, dword [esp + 0x74]
mov dword [eax*4 + 0x69caac], ecx
inc dword [0x69caa8]
sub edi, dword [edx + 0x10]
imul edi, dword [esi + 0x20]
mov eax, dword [esi]
mov ecx, dword [eax]
mov eax, dword [esp + 0xc]
add edi, ecx
add edi, eax
mov eax, dword [esp + 0x78]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
test eax, eax
jle 0x546d6c
mov edx, eax
mov dword [esp + 0x30], edx
lea ebx, [ebx]
mov eax, dword [esp + 0x78]
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x3c]
add edx, ebp
add esp, 0xc
add edi, ecx
dec eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x30], eax
jne 0x546d40
mov edi, dword [esp + 0x84]
mov ecx, dword [edi + 0xfc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
test eax, eax
je 0x546d92
mov edx, dword [esp + 0x7c]
mov eax, ecx
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x10]
add esp, 8
mov eax, dword [edi + 0xfc]
mov ecx, dword [eax]
lea edx, [esp + 0x78]
push edx
mov edx, dword [esp + 0x1c]
push 0
push edx
mov edx, dword [esp + 0x1c]
push 2
push edx
mov edx, dword [esp + 0x28]
push edx
push ebx
push eax
call dword [ecx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
je 0x546eaa
mov eax, dword [0x69caa8]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0x58]
mov dword [eax*4 + 0x69cea8], ebx
mov ecx, dword [0x69caa8]
mov eax, dword [esp + 0x74]
mov dword [ecx*4 + 0x69caac], edx
inc dword [0x69caa8]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc]
sub edi, ecx
imul edi, dword [esi + 0x20]
mov ecx, dword [esi]
add edi, dword [ecx + 4]
mov eax, dword [esp + 0x78]
add edi, edx
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
test eax, eax
jle 0x546e53
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x78]
push ebp
push edi
push ecx
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x3c]
add edx, ebp
add esp, 0xc
add edi, ecx
dec eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x30], eax
jne 0x546e27
mov edi, dword [esp + 0x84]
mov edx, dword [edi + 0xfc]
mov eax, dword [edx]
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x546e79
mov eax, edx
mov edx, dword [esp + 0x7c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x10]
add esp, 8
mov eax, dword [edi + 0xfc]
mov ecx, dword [eax]
lea edx, [esp + 0x78]
push edx
mov edx, dword [esp + 0x1c]
push 0
push edx
mov edx, dword [esp + 0x1c]
push 3
push edx
mov edx, dword [esp + 0x28]
push edx
push ebx
push eax
call dword [ecx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
jne 0x546ebf
push edi
call fcn.004fc190
add esp, 4
pop edi
pop ebp
mov eax, 0xfffffffb
pop ebx
add esp, 0x64
ret
mov eax, dword [0x69caa8]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0x58]
mov dword [eax*4 + 0x69cea8], ebx
mov ecx, dword [0x69caa8]
mov eax, dword [esp + 0x74]
mov dword [ecx*4 + 0x69caac], edx
inc dword [0x69caa8]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc]
sub edi, ecx
imul edi, dword [esi + 0x20]
mov ecx, dword [esi]
add edi, dword [ecx + 8]
mov eax, dword [esp + 0x78]
add edi, edx
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
test eax, eax
jle 0x546f4c
mov dword [esp + 0x30], eax
nop
mov ecx, dword [esp + 0x78]
push ebp
push edi
push ecx
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x3c]
add edx, ebp
add esp, 0xc
add edi, ecx
dec eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x30], eax
jne 0x546f20
mov eax, dword [esp + 0x84]
mov edx, dword [eax + 0xfc]
mov ecx, dword [edx]
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x546f76
mov ecx, dword [esp + 0x7c]
mov eax, dword [eax + 0xfc]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x10]
add esp, 8
mov edx, dword [esp + 0x84]
mov eax, dword [edx + 0xfc]
mov ecx, dword [eax]
lea edx, [esp + 0x78]
push edx
mov edx, dword [esp + 0x1c]
push 0
push edx
mov edx, dword [esp + 0x1c]
push 4
push edx
mov edx, dword [esp + 0x28]
push edx
push ebx
push eax
call dword [ecx + 8]
mov edi, eax
add esp, 0x20
cmp edi, 0xffffffff
mov dword [esp + 0x7c], edi
je 0x5471fc
mov ecx, dword [0x69caa8]
mov eax, dword [esp + 0x74]
mov dword [ecx*4 + 0x69cea8], ebx
mov edx, dword [0x69caa8]
mov ebx, dword [esp + 0x58]
mov dword [edx*4 + 0x69caac], edi
inc dword [0x69caa8]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc]
sub ebx, ecx
imul ebx, dword [esi + 0x20]
mov ecx, dword [esi]
add ebx, dword [ecx + 0xc]
mov eax, dword [esp + 0x78]
add ebx, edx
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
test eax, eax
jle 0x54703d
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x78]
push ebp
push ebx
push eax
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x3c]
add edx, ebp
add esp, 0xc
add ebx, ecx
dec eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x30], eax
jne 0x547011
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 0xfc]
mov edx, dword [ecx]
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x547652
push edi
jmp 0x547643
cmp edi, 0xfffffffc
jne 0x547652
cmp cx, dx
mov dword [esp + 0x1c], edx
jle 0x547652
mov edx, dword [esi + 0x18c]
mov eax, dword [edx + 8]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [eax + ecx*4]
mov edx, dword [esp + 0x84]
mov eax, dword [edx + 0xfc]
mov edx, dword [eax]
lea edi, [esp + 0x78]
push edi
mov edi, dword [esp + 0x1c]
push 0
push edi
push ecx
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x28]
push ecx
push ebx
push eax
call dword [edx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
je 0x5471fc
mov edx, dword [0x69caa8]
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0x58]
mov dword [edx*4 + 0x69cea8], ebx
mov eax, dword [0x69caa8]
mov edx, dword [esp + 0x74]
mov dword [eax*4 + 0x69caac], ecx
inc dword [0x69caa8]
mov eax, dword [edx + 0x10]
mov ecx, dword [esp + 0x1c]
sub edi, eax
imul edi, dword [esi + 0x20]
mov eax, dword [esi]
mov edx, dword [eax + ecx*4]
mov eax, dword [esp + 0x78]
add edi, edx
add edi, dword [esp + 0xc]
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x80]
test eax, eax
jle 0x54714e
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x78]
push ebp
push edi
push ecx
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x3c]
add edx, ebp
add esp, 0xc
add edi, ecx
dec eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x30], eax
jne 0x547122
mov eax, dword [esp + 0x84]
mov edx, dword [eax + 0xfc]
mov ecx, dword [edx]
mov edx, dword [ecx + 0x10]
test edx, edx
je 0x547178
mov ecx, dword [esp + 0x7c]
mov eax, dword [eax + 0xfc]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x10]
add esp, 8
mov eax, dword [esp + 0x1c]
movsx edx, word [esi + 0x18]
inc eax
cmp eax, edx
mov dword [esp + 0x1c], eax
jl 0x547073
jmp 0x547652
mov ebx, dword [esp + 0x20]
mov edx, dword [esp + 0x58]
mov cx, word [esi + 0x18]
sub ebx, edx
mov eax, ebx
imul eax, ebp
add eax, 3
and eax, 0xfffffffc
cmp cx, 1
mov dword [esp + 0x80], ebx
je 0x5471c4
test byte [esi + 0x30], 1
jne 0x5471c4
movsx ecx, cx
imul eax, ecx
mov edx, dword [esp + 0x84]
mov ecx, dword [edx + 0xfc]
mov edx, dword [ecx]
lea edi, [esp + 0x78]
push edi
mov edi, dword [esp + 0x14]
push 0
push 0
push 0
push edi
mov edi, dword [esp + 0x28]
inc eax
push edi
shr eax, 1
push eax
push ecx
call dword [edx + 8]
add esp, 0x20
cmp eax, 0xffffffff
mov dword [esp + 0x7c], eax
jne 0x547218
mov eax, dword [esp + 0x84]
push eax
call fcn.004fc190
add esp, 4
pop edi
pop ebp
mov eax, 0xfffffffb
pop ebx
add esp, 0x64
ret
mov ax, word [esi + 0x18]
cmp ax, 1
jne 0x547289
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x10]
mov edi, dword [esp + 0x58]
mov eax, dword [esp + 0xc]
sub edi, edx
imul edi, dword [esi + 0x20]
mov edx, dword [esi]
add edi, dword [edx]
add edi, eax
mov eax, dword [esp + 0x78]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x547621
mov ebx, dword [esp + 0x80]
mov edi, edi
mov edx, dword [esp + 0x78]
push ebp
push edi
push edx
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
add edx, ebp
add esp, 0xc
add edi, ecx
dec ebx
mov dword [esp + 0x78], edx
jne 0x547260
jmp 0x547621
test byte [esi + 0x30], 1
je 0x5472f9
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x10]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
sub edi, ecx
imul edi, dword [esi + 0x20]
mov ecx, dword [esi]
add edi, dword [ecx]
mov eax, dword [esp + 0x78]
add edi, edx
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x547621
mov ebx, dword [esp + 0x80]
jmp 0x5472d0
mov eax, dword [esp + 0x78]
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
add edx, ebp
add esp, 0xc
add edi, ecx
dec ebx
mov dword [esp + 0x78], edx
jne 0x5472d0
jmp 0x547621
cmp ax, 3
mov ecx, dword [esp + 0x1c]
jne 0x547425
cmp ecx, 0xfffffffc
je 0x547425
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x10]
mov edi, dword [esp + 0x58]
mov eax, dword [esp + 0xc]
sub edi, edx
imul edi, dword [esi + 0x20]
mov edx, dword [esi]
add edi, dword [edx]
add edi, eax
mov eax, dword [esp + 0x78]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x54736d
mov dword [esp + 0x30], ebx
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov eax, dword [esp + 0x84]
mov edx, dword [esi + 0x20]
mov ecx, dword [esp + 0x3c]
add eax, ebp
add esp, 0xc
add edi, edx
dec ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x30], ecx
jne 0x547345
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x10]
mov edi, dword [esp + 0x58]
sub edi, ecx
imul edi, dword [esi + 0x20]
mov ecx, dword [esi]
add edi, dword [ecx + 4]
add edi, dword [esp + 0xc]
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x5473c8
mov dword [esp + 0x30], ebx
lea ecx, [ecx]
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov eax, dword [esp + 0x84]
mov edx, dword [esi + 0x20]
mov ecx, dword [esp + 0x3c]
add eax, ebp
add esp, 0xc
add edi, edx
dec ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x30], ecx
jne 0x5473a0
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x10]
mov edi, dword [esp + 0x58]
sub edi, edx
imul edi, dword [esi + 0x20]
mov edx, dword [esi]
add edi, dword [edx + 8]
add edi, dword [esp + 0xc]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x547621
mov ebx, dword [esp + 0x80]
nop
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov eax, dword [esp + 0x84]
mov edx, dword [esi + 0x20]
add eax, ebp
add esp, 0xc
add edi, edx
dec ebx
mov dword [esp + 0x78], eax
jne 0x547400
jmp 0x547621
cmp ax, 4
jne 0x5475a2
cmp ecx, 0xfffffffc
je 0x5475a7
mov edx, dword [esp + 0x74]
mov eax, dword [edx + 0x10]
mov edi, dword [esp + 0x58]
sub edi, eax
imul edi, dword [esi + 0x20]
mov eax, dword [esi]
mov ecx, dword [eax]
mov eax, dword [esp + 0xc]
add edi, ecx
add edi, eax
mov eax, dword [esp + 0x78]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x547498
mov dword [esp + 0x30], ebx
nop
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov eax, dword [esp + 0x84]
mov edx, dword [esi + 0x20]
mov ecx, dword [esp + 0x3c]
add eax, ebp
add esp, 0xc
add edi, edx
dec ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x30], ecx
jne 0x547470
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x10]
mov edi, dword [esp + 0x58]
sub edi, ecx
imul edi, dword [esi + 0x20]
mov ecx, dword [esi]
add edi, dword [ecx + 4]
add edi, dword [esp + 0xc]
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x5474f0
mov dword [esp + 0x30], ebx
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov eax, dword [esp + 0x84]
mov edx, dword [esi + 0x20]
mov ecx, dword [esp + 0x3c]
add eax, ebp
add esp, 0xc
add edi, edx
dec ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x30], ecx
jne 0x5474c8
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x10]
mov edi, dword [esp + 0x58]
sub edi, edx
imul edi, dword [esi + 0x20]
mov edx, dword [esi]
add edi, dword [edx + 8]
add edi, dword [esp + 0xc]
lea ecx, [eax - 1]
not ecx
and ecx, 3
add eax, ecx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x547548
mov dword [esp + 0x30], ebx
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov eax, dword [esp + 0x84]
mov edx, dword [esi + 0x20]
mov ecx, dword [esp + 0x3c]
add eax, ebp
add esp, 0xc
add edi, edx
dec ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x30], ecx
jne 0x547520
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x10]
mov edi, dword [esp + 0x58]
sub edi, ecx
imul edi, dword [esi + 0x20]
mov ecx, dword [esi]
add edi, dword [ecx + 0xc]
add edi, dword [esp + 0xc]
lea edx, [eax - 1]
not edx
and edx, 3
add eax, edx
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x547621
mov ebx, dword [esp + 0x80]
nop
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov eax, dword [esp + 0x84]
mov edx, dword [esi + 0x20]
add eax, ebp
add esp, 0xc
add edi, edx
dec ebx
mov dword [esp + 0x78], eax
jne 0x547580
jmp 0x547621
cmp ecx, 0xfffffffc
jne 0x547621
xor edx, edx
test ax, ax
mov dword [esp + 0x30], edx
jle 0x547621
mov ecx, dword [esi + 0x20]
mov eax, dword [esp + 0x78]
lea esp, [esp]
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x58]
sub edi, dword [ebx + 0x10]
mov ebx, dword [esi]
imul edi, ecx
add edi, dword [ebx + edx*4]
add edi, dword [esp + 0xc]
lea ebx, [eax - 1]
not ebx
and ebx, 3
add eax, ebx
mov ebx, dword [esp + 0x80]
test ebx, ebx
mov dword [esp + 0x78], eax
jle 0x547614
push ebp
push edi
push eax
call sub.MSVCR71.dll_memmove
mov eax, dword [esp + 0x84]
mov ecx, dword [esi + 0x20]
add eax, ebp
add esp, 0xc
add edi, ecx
dec ebx
mov dword [esp + 0x78], eax
jne 0x5475f0
mov edx, dword [esp + 0x30]
movsx edi, word [esi + 0x18]
inc edx
cmp edx, edi
mov dword [esp + 0x30], edx
jl 0x5475c0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 0xfc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
test eax, eax
je 0x547652
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x7c]
push edx
mov eax, dword [eax + 0xfc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
add esp, 8
mov eax, dword [esp + 0x74]
mov cx, word [esp + 0x20]
mov edx, dword [esp + 0x60]
mov edi, dword [esp + 0x58]
mov word [eax + 0xa], cx
mov ecx, dword [esp + 0x64]
mov word [eax + 6], cx
mov word [eax + 8], di
mov word [eax + 4], dx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edi
mov eax, dword [esp + 0x80]
mov dword [esi + 0x24], eax
mov eax, dword [esp + 0x34]
sub ecx, edx
test eax, eax
mov dword [esi + 0x20], ebp
mov dword [esi + 0x28], ecx
mov eax, 0xfffffffa
jne 0x5476a0
mov eax, dword [esp + 0x7c]
pop edi
pop ebp
pop ebx
add esp, 0x64
ret