Function at 0x4b9bb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4baa31
sub esp, 0x74
mov eax, dword [esp + 0x80]
test eax, eax
je 0x4b9be7
test eax, 0x200
jne 0x4b9be7
lea ecx, [0x669338]
mov edx, dword [esp + 0x78]
jmp 0x4b9c12
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x58], edx
mov dword [esp + 0x30], ecx
mov ebx, dword [esp + 0x8c]
test ebx, ebx
je 0x4b9c3c
test ebx, 0x200
jne 0x4b9c3c
lea ebp, [0x669338]
mov esi, dword [esp + 0x84]
jmp 0x4b9c7c
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x8c]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
cmp ecx, ebp
jne 0x4ba6d2
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00403790
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ba6d2
nop
mov eax, dword [esp + 0x80]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x4ba193
cmp eax, 0xc
ja 0x4b9fdf
cmp eax, 1
jne 0x4b9d42
nop
nop
mov eax, dword [esp + 0x7c]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x8c]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x4b9d06
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004ad730
movzx eax, byte [esp + 0x23]
mov ecx, dword [esp + 0x88]
cmp byte [ecx], al
je 0x4b9d33
test al, al
je 0x4b9d24
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x4b9e94
cmp eax, 3
ja 0x4b9d73
cmp eax, 2
jne 0x4b9d65
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b9da7
mov ecx, dword [esp + 0x7c]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b9da7
cmp eax, 4
jne 0x4b9d86
mov ecx, dword [esp + 0x7c]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b9da7
cmp eax, 5
jne 0x4b9d98
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b9da7
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 3
ja 0x4b9dea
cmp edx, 2
jne 0x4b9dd0
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4b9e30
cmp edx, 3
jne 0x4ba9f6
mov ebx, dword [esp + 0x88]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4b9e30
cmp edx, 4
jne 0x4b9e00
mov ebx, dword [esp + 0x88]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4b9e30
cmp edx, 5
jne 0x4b9e15
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4b9e30
cmp edx, 6
jne 0x4ba9f6
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp ecx, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setl bl
xchg edi, ebx
and esi, ebp
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4b9e85
cmp ecx, ebx
seta cl
cmp eax, edx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x4b9e76
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 7
jb 0x4ba6e1
cmp eax, 9
ja 0x4b9ecc
cmp eax, 7
jne 0x4b9eb1
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4b9ef3
cmp eax, 8
jne 0x4b9ec1
mov ecx, dword [esp + 0x7c]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4b9ef3
mov ecx, dword [esp + 0x7c]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4b9ef3
cmp eax, 0xa
jne 0x4b9edb
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4b9ef3
cmp eax, 0xb
jne 0x4b9eeb
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4b9ef3
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 9
ja 0x4b9f43
cmp edx, 7
jne 0x4b9f19
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4b9f7d
cmp edx, 8
jne 0x4b9f2c
mov ebx, dword [esp + 0x88]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4b9f7d
cmp edx, 9
jne 0x4ba9bc
mov ebx, dword [esp + 0x88]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4b9f7d
cmp edx, 0xa
jne 0x4b9f55
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4b9f7d
cmp edx, 0xb
jne 0x4b9f68
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4b9f7d
cmp edx, 0xc
jne 0x4ba9bc
mov ebp, dword [esp + 0x88]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4b9fd0
cmp ecx, ebx
seta cl
cmp eax, edx
seta al
and eax, ebp
or ecx, eax
test cl, cl
je 0x4b9fc1
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0xe
ja 0x4ba07d
cmp eax, 0xd
jne 0x4b9ffb
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x4ba003
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xd
jne 0x4ba024
mov eax, dword [esp + 0x88]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x4ba038
cmp eax, 0xe
jne 0x4ba97e
mov eax, dword [esp + 0x88]
movsd xmm1, qword [eax]
ucomisd xmm0, xmm0
jne 0x4ba040
jnp 0x4ba047
mov eax, 0xffffffff
jmp 0x4ba072
ucomisd xmm1, xmm1
jne 0x4ba04f
jnp 0x4ba056
mov eax, 1
jmp 0x4ba072
ucomisd xmm1, xmm0
jbe 0x4ba063
mov eax, 0xffffffff
jmp 0x4ba072
ucomisd xmm0, xmm1
jbe 0x4ba070
mov eax, 1
jmp 0x4ba072
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x4ba183
cmp eax, 0xf
jne 0x4ba0a5
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
movss xmm1, dword [eax + 4]
cvtss2sd xmm1, xmm1
jmp 0x4ba0b2
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0x8c]
and eax, 0x1f
cmp eax, 0xf
jne 0x4ba0dc
mov eax, dword [esp + 0x88]
movss xmm2, dword [eax]
cvtss2sd xmm2, xmm2
movss xmm3, dword [eax + 4]
cvtss2sd xmm3, xmm3
jmp 0x4ba0f5
cmp eax, 0x10
jne 0x4ba940
mov eax, dword [esp + 0x88]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm0
jne 0x4ba0fd
jnp 0x4ba104
mov eax, 0xffffffff
jmp 0x4ba12f
ucomisd xmm2, xmm2
jne 0x4ba10c
jnp 0x4ba113
mov eax, 1
jmp 0x4ba12f
ucomisd xmm2, xmm0
jbe 0x4ba120
mov eax, 0xffffffff
jmp 0x4ba12f
ucomisd xmm0, xmm2
jbe 0x4ba12d
mov eax, 1
jmp 0x4ba12f
xor eax, eax
test eax, eax
jne 0x4ba178
ucomisd xmm1, xmm1
jne 0x4ba13b
jnp 0x4ba142
mov eax, 0xffffffff
jmp 0x4ba16d
ucomisd xmm3, xmm3
jne 0x4ba14a
jnp 0x4ba151
mov eax, 1
jmp 0x4ba16d
ucomisd xmm3, xmm1
jbe 0x4ba15e
mov eax, 0xffffffff
jmp 0x4ba16d
ucomisd xmm1, xmm3
jbe 0x4ba16b
mov eax, 1
jmp 0x4ba16d
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], eax
add esp, 0x74
ret
cmp eax, 0x11
jne 0x4ba6e1
xor eax, eax
jmp 0x4ba854
cmp eax, 0x16
ja 0x4ba559
cmp eax, 0x12
je 0x4ba47d
cmp eax, 0x14
je 0x4ba1b8
cmp eax, 0x16
je 0x4ba652
jmp 0x4ba6e1
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.004baa40
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4ba472
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 8], edx
call fcn.004ae6f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4ba243
test edx, 0x200
jne 0x4ba243
mov ecx, eax
lea eax, [0x669338]
jmp 0x4ba25b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4ba262
mov eax, dword [eax + 4]
test eax, eax
je 0x4ba2ca
nop
movzx edx, byte [0x7bb648]
test dl, dl
je 0x4ba29b
mov dword [0x7bb64c], eax
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4ba28a
mov dword [0x7bb650], ecx
jmp 0x4ba29b
lea edi, [0x7bb650]
mov edx, eax
mov eax, ecx
call fcn.004610d0
mov eax, edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4ba2c2
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4ba2d0
or edx, 0x80
jmp 0x4ba2d0
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4ba2d0
xor edx, edx
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
call fcn.004ae6f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4ba323
test edx, 0x200
jne 0x4ba323
mov ecx, eax
lea eax, [0x669338]
jmp 0x4ba33b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4ba342
mov eax, dword [eax + 4]
test eax, eax
je 0x4ba3aa
nop
movzx edx, byte [0x7bb648]
test dl, dl
je 0x4ba37b
mov dword [0x7bb64c], eax
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4ba36a
mov dword [0x7bb650], ecx
jmp 0x4ba37b
lea edi, [0x7bb650]
mov edx, eax
mov eax, ecx
call fcn.004610d0
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4ba3a2
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4ba3b0
or edx, 0x80
jmp 0x4ba3b0
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4ba3b0
xor edx, edx
xor eax, eax
xor ecx, ecx
mov ebx, dword [esp + 0x48]
mov dword [esp], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004b9bb0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4ba3eb
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004ae6f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 8], ebx
call fcn.004ae6f0
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.004b9bb0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.004baa40
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4ba54e
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004afd10
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.004afd10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
ja 0x4ba53f
jae 0x4ba530
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], ecx
add esp, 0x74
ret
cmp eax, 0x18
jne 0x4ba63d
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov dword [esp + 0x54], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x8c]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x4ba592
mov edx, dword [esp + 0x88]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4ba5c0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004b07a0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x28], edx
mov dword [esp + 0x50], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.004028a0
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x4ba62e
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
call fcn.004028a0
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x4ba61f
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0x19
jne 0x4ba649
xor eax, eax
jmp 0x4ba75a
cmp eax, 0x1a
jne 0x4ba6e1
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004afd10
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.004afd10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x4ba6c3
jae 0x4ba6b4
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6131b3]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044def0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409150
mov eax, dword [esp + 8]
lea ecx, [0x5e4740]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
mov edx, dword [esp + 0x38]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004afc60
mov eax, dword [esp + 0x38]
cmp dword [esp + 0xc], eax
jle 0x4ba837
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004ae8a0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], edi
call fcn.004ae8a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004b9bb0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4ba74c
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov edx, dword [esp + 0x34]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004af190
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xc], eax
jle 0x4ba931
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004aedf0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
call fcn.004aedf0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004b9bb0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4ba846
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x44], eax
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x613303]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
mov dword [esp + 0x44], eax
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x612314]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6119f0]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x61124a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
nop
call fcn.0045fcc0
jmp fcn.004b9bb0