Function at 0x4a9d30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4abed0
sub esp, 0x64
movzx eax, word [esp + 0x70]
test ax, ax
je 0x4abea9
lea eax, [0x4d70c0]
mov dword [esp], eax
call fcn.0040bad0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
movzx ecx, word [eax]
mov word [esp], cx
call fcn.004093e0
lea eax, [0x4d70c0]
mov dword [esp], eax
call fcn.00483170
mov eax, dword [esp + 8]
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4abe54
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x14], ebp
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4a9e8d
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4a9e30
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x4ee3d4]
mov dword [esp], eax
mov dword [esp + 4], 0x29
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.0049b9e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x38]
movzx ecx, word [eax]
cmp cx, 0x10b
je 0x4aae86
cmp cx, 0x20b
jne 0x4aae03
lea eax, [0x4e29e0]
mov dword [esp], eax
call fcn.0040bad0
mov eax, dword [esp + 4]
mov dword [esp + 0x3c], eax
lea ecx, [0x4e29e0]
mov dword [esp], ecx
call fcn.00409370
mov eax, dword [esp + 8]
lea ecx, [0x4e29e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00483170
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
lea ecx, [0x4d54a0]
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
lea ebx, [edx + 0x70]
mov dword [esp + 0x34], ebx
mov dword [esp + 4], ebx
call fcn.00409370
mov eax, dword [esp + 8]
lea ecx, [0x4d54a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00483170
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 8]
mov dword [esp + 0x24], eax
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4aad55
mov eax, dword [esp + 0x38]
movzx eax, word [eax]
mov ecx, dword [esp + 0x3c]
mov word [ecx], ax
lea eax, [0x4d8a80]
mov dword [esp], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3780]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 2]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4a9fb9
mov edx, 1
jmp 0x4aa025
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3780]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 3]
mov dword [esp + 0x14], ebp
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa033
mov edx, 1
jmp 0x4aa111
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 4]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa0a5
mov edx, 1
jmp 0x4aa111
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 8]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa11f
mov edx, 1
jmp 0x4aa1fd
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0xc]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa191
mov edx, 1
jmp 0x4aa1fd
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x10]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa20b
mov edx, 1
jmp 0x4aa2e9
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x14]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa27d
mov edx, 1
jmp 0x4aa2e9
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3740]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x18]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa2f7
mov edx, 1
jmp 0x4aa3d5
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x20]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa369
mov edx, 1
jmp 0x4aa3d5
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x24]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa3e3
mov edx, 1
jmp 0x4aa4c1
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x28]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa455
mov edx, 1
jmp 0x4aa4c1
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2a]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa4cf
mov edx, 1
jmp 0x4aa5ad
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2c]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa541
mov edx, 1
jmp 0x4aa5ad
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x2e]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa5bb
mov edx, 1
jmp 0x4aa699
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x30]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa62d
mov edx, 1
jmp 0x4aa699
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x32]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa6a7
mov edx, 1
jmp 0x4aa785
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x34]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa719
mov edx, 1
jmp 0x4aa785
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x38]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa793
mov edx, 1
jmp 0x4aa871
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x3c]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa805
mov edx, 1
jmp 0x4aa871
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x40]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa87f
mov edx, 1
jmp 0x4aa95d
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x44]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa8f1
mov edx, 1
jmp 0x4aa95d
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 0x46]
mov dword [esp + 0x14], ebp
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aa96b
mov edx, 1
jmp 0x4aaa49
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3740]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x48]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aa9dd
mov edx, 1
jmp 0x4aaa49
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3740]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x50]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aaa57
mov edx, 1
jmp 0x4aab35
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3740]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x58]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aaac9
mov edx, 1
jmp 0x4aab35
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3740]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 0x60]
mov dword [esp + 0x14], ebp
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aab43
mov edx, 1
jmp 0x4aac21
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x3c]
lea esi, [ebp + 0x68]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aabb5
mov edx, 1
jmp 0x4aac21
lea eax, [0x4d8a80]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea ecx, [0x5a236c]
mov dword [esp + 0xc], ecx
lea ecx, [0x4d3700]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + 0x6c]
mov dword [esp + 0x14], edx
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4aaca1
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4aac44
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x4ee3ab]
mov dword [esp], eax
mov dword [esp + 4], 0x29
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.0049b9e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
movzx edx, word [esp + 0x70]
mov ebx, dword [esp + 0x24]
sub edx, ebx
mov word [esp + 8], dx
mov dword [esp + 0xc], ecx
call fcn.004abee0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4aad36
cmp ebp, 0x10
jl 0x4aacf2
mov ebp, 0x10
mov eax, dword [esp + 0x34]
cmp ebx, eax
je 0x4aad0d
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ebp, 3
mov dword [esp + 8], ebp
call fcn.0045ee10
lea eax, [0x4d1900]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
add esp, 0x64
ret
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov word [esp], cx
call fcn.004093e0
mov eax, dword [esp + 4]
lea ecx, [0x4d70c0]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00409450
mov eax, dword [esp + 4]
lea ecx, [0x4d68c0]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x4f0490]
mov dword [esp], eax
mov dword [esp + 4], 0x4c
lea eax, [esp + 0x54]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.0049b9e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
movzx eax, word [eax]
mov word [esp], ax
call fcn.004093e0
mov eax, dword [esp + 4]
lea ecx, [0x4d70c0]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
lea eax, [0x4eeb9d]
mov dword [esp], eax
mov dword [esp + 4], 0x2c
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.0049b9e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
lea eax, [0x4e2ba0]
mov dword [esp], eax
call fcn.0040bad0
mov eax, dword [esp + 4]
mov dword [esp + 0x40], eax
lea ecx, [0x4e2ba0]
mov dword [esp], ecx
call fcn.00409370
mov eax, dword [esp + 8]
lea ecx, [0x4e2ba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00483170
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
lea ecx, [0x4d54a0]
mov dword [esp], ecx
mov edx, dword [esp + 0x40]
lea ebx, [edx + 0x60]
mov dword [esp + 0x30], ebx
mov dword [esp + 4], ebx
call fcn.00409370
mov eax, dword [esp + 8]
lea ecx, [0x4d54a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00483170
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 8]
mov dword [esp + 0x28], eax
movzx ecx, word [esp + 0x70]
cmp cx, ax
jb 0x4abda6
mov eax, dword [esp + 0x38]
movzx eax, word [eax]
mov ecx, dword [esp + 0x40]
mov word [ecx], ax
lea eax, [0x4d8a80]
mov dword [esp], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3780]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 2]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aaf98
mov edx, 1
jmp 0x4ab076
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3780]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
lea ebp, [ebx + 3]
mov dword [esp + 0x14], ebp
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab00a
mov edx, 1
jmp 0x4ab076
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 4]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab084
mov edx, 1
jmp 0x4ab162
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 8]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab0f6
mov edx, 1
jmp 0x4ab162
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0xc]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab170
mov edx, 1
jmp 0x4ab24e
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x10]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab1e2
mov edx, 1
jmp 0x4ab24e
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x14]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab25c
mov edx, 1
jmp 0x4ab33a
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x18]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab2ce
mov edx, 1
jmp 0x4ab33a
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x1c]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab348
mov edx, 1
jmp 0x4ab426
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x20]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab3ba
mov edx, 1
jmp 0x4ab426
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x24]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab434
mov edx, 1
jmp 0x4ab512
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x28]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab4a6
mov edx, 1
jmp 0x4ab512
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2a]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab520
mov edx, 1
jmp 0x4ab5fe
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2c]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab592
mov edx, 1
jmp 0x4ab5fe
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x2e]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab60c
mov edx, 1
jmp 0x4ab6ea
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x30]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab67e
mov edx, 1
jmp 0x4ab6ea
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x32]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab6f8
mov edx, 1
jmp 0x4ab7d6
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x34]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab76a
mov edx, 1
jmp 0x4ab7d6
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x38]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab7e4
mov edx, 1
jmp 0x4ab8c2
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x3c]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab856
mov edx, 1
jmp 0x4ab8c2
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x40]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab8d0
mov edx, 1
jmp 0x4ab9ae
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x44]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4ab942
mov edx, 1
jmp 0x4ab9ae
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d36c0]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x40]
lea ebp, [ebx + 0x46]
mov dword [esp + 0x14], ebp
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4ab9bc
mov edx, 1
jmp 0x4aba9a
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x48]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4aba2e
mov edx, 1
jmp 0x4aba9a
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x4c]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4abaa8
mov edx, 1
jmp 0x4abb86
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x50]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4abb1a
mov edx, 1
jmp 0x4abb86
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x54]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4abb94
mov edx, 1
jmp 0x4abc72
lea eax, [0x4d8a80]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea edx, [0x5a236c]
mov dword [esp + 0xc], edx
lea ebx, [0x4d3700]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x58]
mov dword [esp + 0x14], esi
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test edx, edx
je 0x4abc06
mov edx, 1
jmp 0x4abc72
lea eax, [0x4d8a80]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00409660
mov eax, dword [esp + 8]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
lea ecx, [0x50a150]
mov dword [esp + 8], ecx
lea ecx, [0x5a236c]
mov dword [esp + 0xc], ecx
lea ecx, [0x4d3700]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x40]
lea edx, [ecx + 0x5c]
mov dword [esp + 0x14], edx
call fcn.00481e00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
test edx, edx
setne dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
test dl, dl
je 0x4abcf2
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
test eax, eax
je 0x4abc95
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
lea eax, [0x4ee126]
mov dword [esp], eax
mov dword [esp + 4], 0x28
lea eax, [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.0049b9e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x5c]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
movzx edx, word [esp + 0x70]
mov ebx, dword [esp + 0x28]
sub edx, ebx
mov word [esp + 8], dx
mov dword [esp + 0xc], ecx
call fcn.004abee0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4abd87
cmp ebp, 0x10
jl 0x4abd43
mov ebp, 0x10
mov eax, dword [esp + 0x30]
cmp ebx, eax
je 0x4abd5e
mov dword [esp], eax
mov dword [esp + 4], ebx
shl ebp, 3
mov dword [esp + 8], ebp
call fcn.0045ee10
lea eax, [0x4d18c0]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
add esp, 0x64
ret
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov word [esp], cx
call fcn.004093e0
mov eax, dword [esp + 4]
lea ecx, [0x4d70c0]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00409450
mov eax, dword [esp + 4]
lea ecx, [0x4d68c0]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x4f0446]
mov dword [esp], eax
mov dword [esp + 4], 0x4a
lea eax, [esp + 0x54]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.0049b9e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
lea eax, [0x4f0053]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.0049b9e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x64
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x64
ret
call fcn.0045d0e0
jmp fcn.004a9d30