Function at 0x4ee270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x590]
cmp eax, dword [ecx + 8]
jbe 0x4f0a31
sub esp, 0x610
mov eax, 0
mov dword [esp + 0x598], eax
mov dword [esp + 0x59c], eax
mov dword [esp + 0x62c], 0
mov dword [esp + 0x630], 0
mov dword [esp + 0x634], 0
mov dword [esp + 0x2d8], 0
mov dword [esp + 0x2dc], 0
mov dword [esp + 0x2e0], 0
mov dword [esp + 0x2e4], 0
movzx eax, word [esp + 0x61c]
test ax, 4
je 0x4f096e
mov dword [esp + 0x50], 0
mov dword [esp + 0x50], 0xfffffffd
lea ecx, [esp + 0x50]
mov dword [esp + 0x2dc], ecx
mov dword [esp + 0x2e4], 1
mov ecx, dword [esp + 0x624]
test ecx, ecx
jg 0x4ee70c
xor edx, edx
xor ebx, ebx
mov dword [esp + 0x580], edx
mov dword [esp + 0x3c], ebx
lea eax, [0x5df3e0]
mov dword [esp], eax
call fcn.0040d050
mov eax, dword [esp + 4]
mov dword [esp + 0x62c], eax
lea edi, [esp + 0x5d0]
xor eax, eax
call fcn.004485c8
mov eax, dword [esp + 0x62c]
mov dword [esp], eax
call fcn.004ec890
mov eax, dword [esp + 0x614]
mov ecx, dword [eax]
mov dword [esp + 0x57c], ecx
call fcn.004ecbf0
mov eax, dword [esp]
mov ecx, dword [esp + 0x614]
mov dword [esp + 0x594], ecx
mov ecx, dword [0x78d10c]
mov dword [esp + 0x590], ecx
lea ecx, [esp + 0x2d8]
mov dword [esp + 0x58c], ecx
mov ecx, dword [esp + 0x62c]
mov dword [esp + 0x588], ecx
lea ecx, [esp + 0x5d0]
mov dword [esp + 0x584], ecx
mov edx, dword [esp + 0x57c]
mov edx, dword [edx + 0x18]
mov dword [esp], edx
mov dword [esp + 4], 9
mov edx, dword [esp + 0x594]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x618]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x590]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
movzx eax, word [esp + 0x61c]
movsx eax, ax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x588]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x584]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0
call fcn.0043b5a0
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x4ee5f5
xor eax, eax
mov ecx, dword [esp + 0x580]
jmp 0x4ee475
mov ebp, dword [esp + 0x578]
lea ecx, [ebp + 0x10]
inc eax
mov edx, dword [esp + 0x3c]
cmp eax, edx
jge 0x4ee5e8
mov dword [esp + 0x40], eax
mov dword [esp + 0x578], ecx
lea edi, [esp + 0x2e8]
mov esi, ecx
call fcn.00448ab8
lea edi, [esp + 0x2c8]
lea esi, [esp + 0x2e8]
call fcn.00448ab8
mov ecx, dword [esp + 0x624]
mov ebx, ecx
sub ecx, eax
mov dword [esp + 0x5c], ecx
movzx ebp, word [esp + 0x2c8]
cmp bp, 8
jne 0x4ee5e1
mov ebp, dword [esp + 0x2d0]
mov esi, ecx
mov ecx, dword [esp + 0x2d4]
test ecx, ecx
setne cl
test ebp, ebp
mov edi, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, ecx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4ee5c1
movzx ecx, word [esp + 0x2c8]
cmp cx, 0x4008
jne 0x4ee46a
mov ecx, dword [esp + 0x2d0]
mov ebp, dword [esp + 0x2d4]
test ecx, ecx
mov edi, ecx
setne cl
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, ecx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4ee46a
mov eax, dword [edi]
mov dword [esp], eax
call fcn.004f1390
mov eax, dword [esp + 0x5c]
lea ecx, [eax - 1]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 0x624]
cmp ecx, ebp
jae 0x4f09bb
mov ecx, dword [esp + 0x620]
lea eax, [ecx + eax*8 - 8]
mov esi, ecx
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edi, ebp
lea ebp, [0x5c1ae0]
cmp ecx, ebp
jne 0x4f09a3
mov dword [eax + 4], edx
mov ecx, dword [0x79e7b0]
test ecx, ecx
jne 0x4ee59f
mov dword [eax], ebx
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov ebx, edi
jmp 0x4ee46a
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.0040d8c0
lea ebp, [0x5c1ae0]
mov esi, dword [esp + 0x620]
mov edi, dword [esp + 0x624]
jmp 0x4ee590
mov dword [esp], edi
call fcn.004ecae0
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x624]
mov esi, dword [esp + 0x5c]
jmp 0x4ee4fa
mov esi, ecx
jmp 0x4ee4fa
nop
call fcn.00424e00
add esp, 0x610
ret
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x5d8]
mov dword [esp], eax
call fcn.004f1480
mov eax, dword [esp + 4]
mov dword [esp + 0x574], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
lea edi, [esp + 0x5f0]
lea esi, [esp + 0x5d0]
call fcn.00448a90
lea ecx, [0x699c80]
mov dword [esp], ecx
lea ecx, [esp + 0x5f0]
mov dword [esp + 4], ecx
call fcn.0040ab00
mov eax, dword [esp + 8]
mov dword [esp + 0x56c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x570], ecx
lea edx, [0x5dabe0]
mov dword [esp], edx
call fcn.0040d050
mov eax, dword [esp + 4]
mov dword [esp + 0x558], eax
mov ecx, dword [esp + 0x48]
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [0x79e7b0]
lea edx, [eax + 4]
test ecx, ecx
jne 0x4ee6f0
mov ecx, dword [esp + 0x574]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x56c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x79e7b0]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x4ee6d4
mov ecx, dword [esp + 0x570]
mov dword [eax + 0x10], ecx
lea ecx, [0x699aa0]
mov dword [esp + 0x630], ecx
mov dword [esp + 0x634], eax
jmp 0x4ee45f
mov dword [esp], edx
mov eax, dword [esp + 0x570]
mov dword [esp + 4], eax
call fcn.0040d8c0
mov eax, dword [esp + 0x558]
jmp 0x4ee6bb
mov dword [esp], edx
mov eax, dword [esp + 0x574]
mov dword [esp + 4], eax
call fcn.0040d8c0
mov eax, dword [esp + 0x558]
jmp 0x4ee69a
lea eax, [0x5df3e0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00434f20
mov eax, dword [esp + 0xc]
mov dword [esp + 0x568], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
xor edx, edx
jmp 0x4ee74b
mov ebx, dword [esp + 0x44]
inc ebx
mov eax, dword [esp + 0x568]
mov ecx, dword [esp + 0x3c]
mov edx, ebx
mov ebx, dword [esp + 0x624]
cmp edx, ebx
jge 0x4f0953
mov ebp, dword [esp + 0x620]
lea esi, [ebp + edx*8]
mov edi, dword [esi + 4]
mov esi, dword [esi]
sub ebx, edx
dec ebx
cmp ebx, ecx
jae 0x4f0a2a
mov dword [esp + 0x560], edi
mov dword [esp + 0x55c], esi
mov dword [esp + 0x44], edx
shl ebx, 4
lea ecx, [eax + ebx]
mov dword [esp + 0x578], ecx
mov dword [esp], ecx
call fcn.004ec890
mov eax, dword [esp + 0x55c]
test eax, eax
je 0x4f08aa
mov ecx, dword [eax + 8]
cmp ecx, 0x83c42c78
ja 0x4ef8e7
cmp ecx, 0x26ca392d
ja 0x4ef09c
cmp ecx, 0x13ff06c5
ja 0x4eec22
cmp ecx, 0xaf3a8d3
ja 0x4ee9c3
cmp ecx, 0xc66cd3
jne 0x4ee9b2
lea edx, [0x5c2aa0]
cmp edx, eax
jne 0x4ee89e
mov eax, dword [esp + 0x560]
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x468], 0
mov dword [esp + 0x46c], 0
mov dword [esp + 0x470], 0
mov dword [esp + 0x474], 0
mov word [esp + 0x468], 0x4013
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], 0
lea edi, [esp + 0x88]
lea esi, [esp + 0x468]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x88]
call fcn.00448ab8
jmp 0x4ee739
cmp ecx, 0xaf3a8d3
jne 0x4f09e1
lea ecx, [0x5c4a20]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004f1210
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b0], 0
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x2f8], 0
mov dword [esp + 0x2fc], 0
mov dword [esp + 0x300], 0
mov dword [esp + 0x304], 0
mov word [esp + 0x2f8], 0x2008
mov dword [esp + 0x300], eax
mov dword [esp + 0x304], 0
lea edi, [esp + 0x1a8]
lea esi, [esp + 0x2f8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x1a8]
call fcn.00448ab8
mov eax, dword [esp + 0x578]
mov dword [esp + 8], eax
mov dword [esp], 0xc
lea eax, [0x609cd0]
mov dword [esp + 4], eax
call fcn.004245e0
test eax, eax
jne 0x4ee9a5
lea edx, [0x5c2aa0]
jmp 0x4ee739
nop
call fcn.00424e00
add esp, 0x610
ret
cmp ecx, 0xaf3a8d3
lea edx, [0x5c2aa0]
jmp 0x4ee8a4
cmp ecx, 0x10dbf978
jne 0x4eec11
lea edx, [0x5c2a20]
cmp edx, eax
jne 0x4eea89
mov eax, dword [esp + 0x560]
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov dword [esp + 0x134], 0
mov dword [esp + 0x3e8], 0
mov dword [esp + 0x3ec], 0
mov dword [esp + 0x3f0], 0
mov dword [esp + 0x3f4], 0
mov word [esp + 0x3e8], 0x4013
mov dword [esp + 0x3f0], eax
mov dword [esp + 0x3f4], 0
lea edi, [esp + 0x128]
lea esi, [esp + 0x3e8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x128]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x13ff06c5
jne 0x4f09e1
lea ecx, [0x5cc8a0]
cmp ecx, eax
jne 0x4eec07
mov eax, dword [esp + 0x560]
movzx eax, byte [eax]
jne 0x4f09e1
test al, al
je 0x4eeb64
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x548], 0
mov dword [esp + 0x54c], 0
mov dword [esp + 0x550], 0
mov dword [esp + 0x554], 0
mov word [esp + 0x548], 0xb
mov dword [esp + 0x550], 0xffff
mov dword [esp + 0x554], 0
lea edi, [esp + 0xf8]
lea esi, [esp + 0x548]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0xf8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x538], 0
mov dword [esp + 0x53c], 0
mov dword [esp + 0x540], 0
mov dword [esp + 0x544], 0
mov word [esp + 0x538], 0xb
mov dword [esp + 0x540], 0
mov dword [esp + 0x544], 0
lea edi, [esp + 0x188]
lea esi, [esp + 0x538]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x188]
call fcn.00448ab8
jmp 0x4eeb59
mov eax, 0
jmp 0x4eeaad
cmp ecx, 0x13ff06c5
lea edx, [0x5c2a20]
jmp 0x4eea8f
cmp ecx, 0x1ffee651
ja 0x4eedcb
cmp ecx, 0x1e2f74f8
jne 0x4eedba
lea edx, [0x5c2ae0]
cmp edx, eax
jne 0x4eecf4
mov eax, dword [esp + 0x560]
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0x428], 0
mov dword [esp + 0x42c], 0
mov dword [esp + 0x430], 0
mov dword [esp + 0x434], 0
mov word [esp + 0x428], 0x4015
mov dword [esp + 0x430], eax
mov dword [esp + 0x434], 0
lea edi, [esp + 0xc8]
lea esi, [esp + 0x428]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0xc8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x1ffee651
jne 0x4f09e1
lea ecx, [0x5be5a0]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov dword [esp + 0x158], 0
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x3c8], 0
mov dword [esp + 0x3cc], 0
mov dword [esp + 0x3d0], 0
mov dword [esp + 0x3d4], 0
mov word [esp + 0x3c8], 0x4004
mov dword [esp + 0x3d0], eax
mov dword [esp + 0x3d4], 0
lea edi, [esp + 0x158]
lea esi, [esp + 0x3c8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x158]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x1ffee651
lea edx, [0x5c2ae0]
jmp 0x4eecfa
cmp ecx, 0x2522ebe7
jne 0x4ef091
lea edx, [0x5be860]
cmp edx, eax
jne 0x4eee91
mov eax, dword [esp + 0x560]
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0x408], 0
mov dword [esp + 0x40c], 0
mov dword [esp + 0x410], 0
mov dword [esp + 0x414], 0
mov word [esp + 0x408], 0x4003
mov dword [esp + 0x410], eax
mov dword [esp + 0x414], 0
lea edi, [esp + 0xd8]
lea esi, [esp + 0x408]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0xd8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x26b80717
jne 0x4ef080
lea ebx, [0x5be920]
cmp ebx, eax
jne 0x4eef57
mov eax, dword [esp + 0x560]
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0x448], 0
mov dword [esp + 0x44c], 0
mov dword [esp + 0x450], 0
mov dword [esp + 0x454], 0
mov word [esp + 0x448], 0x4014
mov dword [esp + 0x450], eax
mov dword [esp + 0x454], 0
lea edi, [esp + 0x98]
lea esi, [esp + 0x448]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x98]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x26ca392d
jne 0x4f09e1
lea ecx, [0x5ee9a0]
cmp ecx, eax
jne 0x4ef076
mov eax, dword [esp + 0x560]
jne 0x4f09e1
mov dword [esp + 0x564], eax
call fcn.004f83e0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x5c], ecx
mov edi, esp
mov esi, dword [esp + 0x564]
call fcn.00448aae
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x18], eax
call fcn.00465470
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x598], eax
mov dword [esp + 0x59c], ecx
lea eax, [esp + 0x598]
mov dword [esp + 0x278], 0
mov dword [esp + 0x27c], 0
mov dword [esp + 0x280], 0
mov dword [esp + 0x284], 0
mov dword [esp + 0x358], 0
mov dword [esp + 0x35c], 0
mov dword [esp + 0x360], 0
mov dword [esp + 0x364], 0
mov word [esp + 0x358], 0x4008
mov dword [esp + 0x360], eax
mov dword [esp + 0x364], 0
lea edi, [esp + 0x278]
lea esi, [esp + 0x358]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x278]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
mov eax, 0
jmp 0x4eef78
cmp ecx, 0x26ca392d
lea ebx, [0x5be920]
jmp 0x4eef5d
lea edx, [0x5be860]
jmp 0x4eee91
cmp ecx, 0x5fcadfef
ja 0x4ef479
cmp ecx, 0x382e7edf
ja 0x4ef2ce
cmp ecx, 0x2ea27ffb
jne 0x4ef2b3
xorps xmm0, xmm0
movsd qword [esp + 0x60], xmm0
lea edx, [0x5ccba0]
cmp edx, eax
jne 0x4ef2a4
mov ebx, dword [esp + 0x560]
movsd xmm1, qword [ebx]
movsd qword [esp + 0x60], xmm1
jne 0x4ef197
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], 0
mov dword [esp + 0x174], 0
mov dword [esp + 0x3b8], 0
mov dword [esp + 0x3bc], 0
mov dword [esp + 0x3c0], 0
mov dword [esp + 0x3c4], 0
mov word [esp + 0x3b8], 5
mov dword [esp + 0x3c0], eax
mov dword [esp + 0x3c4], ecx
lea edi, [esp + 0x168]
lea esi, [esp + 0x3b8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x168]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x382e7edf
jne 0x4f09e1
lea ecx, [0x5c4e20]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004f1130
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1c8], 0
mov dword [esp + 0x1cc], 0
mov dword [esp + 0x1d0], 0
mov dword [esp + 0x1d4], 0
mov dword [esp + 0x308], 0
mov dword [esp + 0x30c], 0
mov dword [esp + 0x310], 0
mov dword [esp + 0x314], 0
mov word [esp + 0x308], 0x2011
mov dword [esp + 0x310], eax
mov dword [esp + 0x314], 0
lea edi, [esp + 0x1c8]
lea esi, [esp + 0x308]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x1c8]
call fcn.00448ab8
mov eax, dword [esp + 0x578]
mov dword [esp + 8], eax
mov dword [esp], 0xc
lea eax, [0x609cd0]
mov dword [esp + 4], eax
call fcn.004245e0
test eax, eax
jne 0x4ef297
lea edx, [0x5c2aa0]
jmp 0x4ee739
nop
call fcn.00424e00
add esp, 0x610
ret
mov ebx, dword [esp + 0x560]
xorps xmm1, xmm1
jmp 0x4ef0e2
cmp ecx, 0x382e7edf
lea edx, [0x5ccba0]
mov ebx, dword [esp + 0x560]
xorps xmm0, xmm0
jmp 0x4ef19d
cmp ecx, 0x5a175aed
jne 0x4ef468
lea edx, [0x5c1ae0]
cmp edx, eax
jne 0x4ef394
mov eax, dword [esp + 0x560]
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
mov dword [esp + 0x1f0], 0
mov dword [esp + 0x1f4], 0
mov dword [esp + 0x378], 0
mov dword [esp + 0x37c], 0
mov dword [esp + 0x380], 0
mov dword [esp + 0x384], 0
mov word [esp + 0x378], 0x4008
mov dword [esp + 0x380], eax
mov dword [esp + 0x384], 0
lea edi, [esp + 0x1e8]
lea esi, [esp + 0x378]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x1e8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x5fcadfef
jne 0x4f09e1
lea ecx, [0x5be960]
cmp ecx, eax
jne 0x4f09e1
lea ebx, [0x5c2b20]
cmp ebx, eax
jne 0x4f09c9
mov eax, dword [esp + 0x560]
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x4e8], 0
mov dword [esp + 0x4ec], 0
mov dword [esp + 0x4f0], 0
mov dword [esp + 0x4f4], 0
mov word [esp + 0x4e8], 0x4010
mov dword [esp + 0x4f0], eax
mov dword [esp + 0x4f4], 0
lea edi, [esp + 0x1b8]
lea esi, [esp + 0x4e8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x1b8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x5fcadfef
lea edx, [0x5c1ae0]
jmp 0x4ef39a
cmp ecx, 0x6b581726
ja 0x4ef625
cmp ecx, 0x663e425f
jne 0x4ef614
lea edx, [0x5cdaa0]
cmp edx, eax
jne 0x4ef54e
mov eax, dword [esp + 0x560]
movzx eax, byte [eax]
mov dword [esp + 0x298], 0
mov dword [esp + 0x29c], 0
mov dword [esp + 0x2a0], 0
mov dword [esp + 0x2a4], 0
mov dword [esp + 0x518], 0
mov dword [esp + 0x51c], 0
mov dword [esp + 0x520], 0
mov dword [esp + 0x524], 0
mov word [esp + 0x518], 0x10
mov dword [esp + 0x520], eax
mov dword [esp + 0x524], 0
lea edi, [esp + 0x298]
lea esi, [esp + 0x518]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x298]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x6b581726
jne 0x4f09e1
lea ecx, [0x5be8e0]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0x488], 0
mov dword [esp + 0x48c], 0
mov dword [esp + 0x490], 0
mov dword [esp + 0x494], 0
mov word [esp + 0x488], 0x4003
mov dword [esp + 0x490], eax
mov dword [esp + 0x494], 0
lea edi, [esp + 0xe8]
lea esi, [esp + 0x488]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0xe8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x6b581726
lea edx, [0x5cdaa0]
jmp 0x4ef554
cmp ecx, 0x6e0df0d1
jne 0x4ef8dc
lea edx, [0x5bd920]
cmp edx, eax
jne 0x4ef6eb
mov eax, dword [esp + 0x560]
mov dword [esp + 0x208], 0
mov dword [esp + 0x20c], 0
mov dword [esp + 0x210], 0
mov dword [esp + 0x214], 0
mov dword [esp + 0x528], 0
mov dword [esp + 0x52c], 0
mov dword [esp + 0x530], 0
mov dword [esp + 0x534], 0
mov word [esp + 0x528], 0x400b
mov dword [esp + 0x530], eax
mov dword [esp + 0x534], 0
lea edi, [esp + 0x208]
lea esi, [esp + 0x528]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x208]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x8259e8b5
jne 0x4ef8cb
lea ebx, [0x5e1d60]
cmp ebx, eax
jne 0x4ef7b1
mov eax, dword [esp + 0x560]
mov dword [esp + 0x1f8], 0
mov dword [esp + 0x1fc], 0
mov dword [esp + 0x200], 0
mov dword [esp + 0x204], 0
mov dword [esp + 0x318], 0
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
mov word [esp + 0x318], 0x400c
mov dword [esp + 0x320], eax
mov dword [esp + 0x324], 0
lea edi, [esp + 0x1f8]
lea esi, [esp + 0x318]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x1f8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x83c42c78
jne 0x4f09e1
lea ecx, [0x5ef4e0]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov ebp, dword [eax + 4]
mov ecx, dword [eax + 8]
test ecx, ecx
jne 0x4ef8a4
xor ecx, ecx
xor ebp, ebp
movzx eax, byte [eax]
test al, al
je 0x4ef89b
xor eax, eax
sub eax, ecx
mov ecx, 0
sbb ecx, ebp
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], 0
mov dword [esp + 0x290], 0
mov dword [esp + 0x294], 0
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 0
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0
mov word [esp + 0x398], 0xe
mov dword [esp + 0x3a0], eax
mov dword [esp + 0x3a4], ecx
lea edi, [esp + 0x288]
lea esi, [esp + 0x398]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x288]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
mov eax, ecx
mov ecx, ebp
jmp 0x4ef7fa
mov ebx, dword [ebp]
cmp ecx, 1
jle 0x4ef8bc
mov ebp, dword [ebp + 4]
mov ecx, ebx
lea ebx, [0x5e1d60]
jmp 0x4ef7e4
mov ecx, ebx
xor ebp, ebp
lea ebx, [0x5e1d60]
jmp 0x4ef7e4
cmp ecx, 0x83c42c78
lea ebx, [0x5e1d60]
jmp 0x4ef7b7
lea edx, [0x5bd920]
jmp 0x4ef6eb
cmp ecx, 0xcc06c027
ja 0x4f013b
cmp ecx, 0xa066c615
ja 0x4efc48
cmp ecx, 0x963f9bff
ja 0x4efaab
cmp ecx, 0x86318d2e
jne 0x4efa9a
lea edx, [0x5cda60]
cmp edx, eax
jne 0x4ef9d3
mov eax, dword [esp + 0x560]
mov eax, dword [eax]
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0x438], 0
mov dword [esp + 0x43c], 0
mov dword [esp + 0x440], 0
mov dword [esp + 0x444], 0
mov word [esp + 0x438], 0x15
mov dword [esp + 0x440], eax
mov dword [esp + 0x444], 0
lea edi, [esp + 0xa8]
lea esi, [esp + 0x438]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0xa8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x963f9bff
jne 0x4f09e1
lea ecx, [0x5cd1a0]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov ebx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x2b8], 0
mov dword [esp + 0x2bc], 0
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 0
mov dword [esp + 0x458], 0
mov dword [esp + 0x45c], 0
mov dword [esp + 0x460], 0
mov dword [esp + 0x464], 0
mov word [esp + 0x458], 0x14
mov dword [esp + 0x460], ebx
mov dword [esp + 0x464], eax
lea edi, [esp + 0x2b8]
lea esi, [esp + 0x458]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x2b8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0x963f9bff
lea edx, [0x5cda60]
jmp 0x4ef9d9
cmp ecx, 0x9ad926a8
jne 0x4efc37
lea edx, [0x5c2b20]
cmp edx, eax
jne 0x4efb71
mov eax, dword [esp + 0x560]
mov dword [esp + 0x268], 0
mov dword [esp + 0x26c], 0
mov dword [esp + 0x270], 0
mov dword [esp + 0x274], 0
mov dword [esp + 0x508], 0
mov dword [esp + 0x50c], 0
mov dword [esp + 0x510], 0
mov dword [esp + 0x514], 0
mov word [esp + 0x508], 0x4010
mov dword [esp + 0x510], eax
mov dword [esp + 0x514], 0
lea edi, [esp + 0x268]
lea esi, [esp + 0x508]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x268]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xa066c615
jne 0x4f09e1
lea ecx, [0x5be8a0]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov dword [esp + 0x258], 0
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], 0
mov dword [esp + 0x264], 0
mov dword [esp + 0x4c8], 0
mov dword [esp + 0x4cc], 0
mov dword [esp + 0x4d0], 0
mov dword [esp + 0x4d4], 0
mov word [esp + 0x4c8], 0x4002
mov dword [esp + 0x4d0], eax
mov dword [esp + 0x4d4], 0
lea edi, [esp + 0x258]
lea esi, [esp + 0x4c8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x258]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xa066c615
lea edx, [0x5c2b20]
jmp 0x4efb77
cmp ecx, 0xba56ad13
ja 0x4efe20
cmp ecx, 0xb0c23ed3
jne 0x4efe05
xorps xmm0, xmm0
movss dword [esp + 0x38], xmm0
lea edx, [0x5ccb60]
cmp edx, eax
jne 0x4efdf6
mov ebx, dword [esp + 0x560]
movss xmm1, dword [ebx]
movss dword [esp + 0x38], xmm1
jne 0x4efd37
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], 0
mov dword [esp + 0x3d8], 0
mov dword [esp + 0x3dc], 0
mov dword [esp + 0x3e0], 0
mov dword [esp + 0x3e4], 0
mov word [esp + 0x3d8], 4
mov dword [esp + 0x3e0], eax
mov dword [esp + 0x3e4], ecx
lea edi, [esp + 0x138]
lea esi, [esp + 0x3d8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x138]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xba56ad13
jne 0x4f09e1
lea ecx, [0x5be5e0]
cmp ecx, eax
jne 0x4f09e1
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x3a8], 0
mov dword [esp + 0x3ac], 0
mov dword [esp + 0x3b0], 0
mov dword [esp + 0x3b4], 0
mov word [esp + 0x3a8], 0x4005
mov dword [esp + 0x3b0], ebx
mov dword [esp + 0x3b4], 0
lea edi, [esp + 0x198]
lea esi, [esp + 0x3a8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x198]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
mov ebx, dword [esp + 0x560]
xorps xmm1, xmm1
jmp 0x4efc82
cmp ecx, 0xba56ad13
lea edx, [0x5ccb60]
mov ebx, dword [esp + 0x560]
xorps xmm0, xmm0
jmp 0x4efd3d
cmp ecx, 0xbbad4102
jne 0x4f0130
lea edx, [0x5cd160]
cmp edx, eax
jne 0x4efee7
mov eax, dword [esp + 0x560]
mov eax, dword [eax]
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x498], 0
mov dword [esp + 0x49c], 0
mov dword [esp + 0x4a0], 0
mov dword [esp + 0x4a4], 0
mov word [esp + 0x498], 3
mov dword [esp + 0x4a0], eax
sar eax, 0x1f
mov dword [esp + 0x4a4], eax
lea edi, [esp + 0x118]
lea esi, [esp + 0x498]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x118]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xc0441d00
jne 0x4f0118
mov dword [esp + 0x58], ecx
lea edi, [esp + 0x5a8]
mov ebx, eax
xor eax, eax
call fcn.004485cb
lea ecx, [0x5ed740]
cmp ecx, ebx
jne 0x4f0107
lea edi, [esp + 0x5bc]
mov esi, dword [esp + 0x560]
call fcn.00448aae
lea edi, [esp + 0x5a8]
lea esi, [esp + 0x5bc]
call fcn.00448aae
lea ecx, [0x5ed740]
cmp ecx, ebx
je 0x4f0015
mov ebp, dword [esp + 0x58]
cmp ebp, 0xcc06c027
jne 0x4f09e1
lea ebp, [0x5cd1e0]
cmp ebp, ebx
jne 0x4f09e1
mov ebx, dword [esp + 0x560]
movsx ebx, byte [ebx]
mov dword [esp + 0x238], 0
mov dword [esp + 0x23c], 0
mov dword [esp + 0x240], 0
mov dword [esp + 0x244], 0
mov dword [esp + 0x4f8], 0
mov dword [esp + 0x4fc], 0
mov dword [esp + 0x500], 0
mov dword [esp + 0x504], 0
mov word [esp + 0x4f8], 0x10
mov dword [esp + 0x500], ebx
sar ebx, 0x1f
mov dword [esp + 0x504], ebx
lea edi, [esp + 0x238]
lea esi, [esp + 0x4f8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x238]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
call fcn.004f82d0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x580], ecx
mov edi, esp
lea esi, [esp + 0x5a8]
call fcn.00448aae
mov ecx, dword [esp + 0x580]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
call fcn.00465470
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004ec9d0
mov eax, dword [esp + 8]
mov dword [esp + 0x2a8], 0
mov dword [esp + 0x2ac], 0
mov dword [esp + 0x2b0], 0
mov dword [esp + 0x2b4], 0
mov dword [esp + 0x368], 0
mov dword [esp + 0x36c], 0
mov dword [esp + 0x370], 0
mov dword [esp + 0x374], 0
mov word [esp + 0x368], 8
mov dword [esp + 0x370], eax
mov dword [esp + 0x374], 0
lea edi, [esp + 0x2a8]
lea esi, [esp + 0x368]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x2a8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
lea edi, [esp + 0x5bc]
call fcn.004485cb
jmp 0x4eff28
cmp ecx, 0xcc06c027
lea ecx, [0x5ed740]
mov ebx, eax
mov eax, 0
jmp 0x4eff53
lea edx, [0x5cd160]
jmp 0x4efee7
cmp ecx, 0xe0ff5cb4
ja 0x4f049f
cmp ecx, 0xd289f421
ja 0x4f02f2
cmp ecx, 0xd04ae83d
jne 0x4f02e1
lea edx, [0x5cda20]
cmp edx, eax
jne 0x4f021b
mov eax, dword [esp + 0x560]
mov eax, dword [eax]
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0x478], 0
mov dword [esp + 0x47c], 0
mov dword [esp + 0x480], 0
mov dword [esp + 0x484], 0
mov word [esp + 0x478], 0x13
mov dword [esp + 0x480], eax
mov dword [esp + 0x484], 0
lea edi, [esp + 0xb8]
lea esi, [esp + 0x478]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0xb8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xd289f421
jne 0x4f09e1
lea ecx, [0x5e89a0]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov dword [esp + 0x248], 0
mov dword [esp + 0x24c], 0
mov dword [esp + 0x250], 0
mov dword [esp + 0x254], 0
mov dword [esp + 0x348], 0
mov dword [esp + 0x34c], 0
mov dword [esp + 0x350], 0
mov dword [esp + 0x354], 0
mov word [esp + 0x348], 9
mov dword [esp + 0x350], eax
mov dword [esp + 0x354], 0
lea edi, [esp + 0x248]
lea esi, [esp + 0x348]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x248]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xd289f421
lea edx, [0x5cda20]
jmp 0x4f0221
cmp ecx, 0xd5b87712
jne 0x4f048e
lea edx, [0x5cd9a0]
cmp edx, eax
jne 0x4f03ba
mov eax, dword [esp + 0x560]
mov eax, dword [eax]
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x3f8], 0
mov dword [esp + 0x3fc], 0
mov dword [esp + 0x400], 0
mov dword [esp + 0x404], 0
mov word [esp + 0x3f8], 0x13
mov dword [esp + 0x400], eax
mov dword [esp + 0x404], 0
lea edi, [esp + 0x108]
lea esi, [esp + 0x3f8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x108]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xe0ff5cb4
jne 0x4f0483
lea ecx, [0x5cd8e0]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004ec9d0
mov eax, dword [esp + 8]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x388], 0
mov dword [esp + 0x38c], 0
mov dword [esp + 0x390], 0
mov dword [esp + 0x394], 0
mov word [esp + 0x388], 8
mov dword [esp + 0x390], eax
mov dword [esp + 0x394], 0
lea edi, [esp + 0x68]
lea esi, [esp + 0x388]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x68]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
lea ecx, [0x5cd8e0]
jmp 0x4f09e1
cmp ecx, 0xe0ff5cb4
lea edx, [0x5cd9a0]
jmp 0x4f03c0
cmp ecx, 0xee90ca12
ja 0x4f064a
cmp ecx, 0xecd580ce
jne 0x4f0639
lea edx, [0x5cd120]
cmp edx, eax
jne 0x4f0573
mov eax, dword [esp + 0x560]
movsx eax, word [eax]
mov dword [esp + 0x1d8], 0
mov dword [esp + 0x1dc], 0
mov dword [esp + 0x1e0], 0
mov dword [esp + 0x1e4], 0
mov dword [esp + 0x4d8], 0
mov dword [esp + 0x4dc], 0
mov dword [esp + 0x4e0], 0
mov dword [esp + 0x4e4], 0
mov word [esp + 0x4d8], 2
mov dword [esp + 0x4e0], eax
sar eax, 0x1f
mov dword [esp + 0x4e4], eax
lea edi, [esp + 0x1d8]
lea esi, [esp + 0x4d8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x1d8]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xee90ca12
jne 0x4f09e1
lea ecx, [0x5bbe60]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov dword [esp + 0x228], 0
mov dword [esp + 0x22c], 0
mov dword [esp + 0x230], 0
mov dword [esp + 0x234], 0
mov dword [esp + 0x338], 0
mov dword [esp + 0x33c], 0
mov dword [esp + 0x340], 0
mov dword [esp + 0x344], 0
mov word [esp + 0x338], 0x4009
mov dword [esp + 0x340], eax
mov dword [esp + 0x344], 0
lea edi, [esp + 0x228]
lea esi, [esp + 0x338]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x228]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xee90ca12
lea edx, [0x5cd120]
jmp 0x4f0579
cmp ecx, 0xee92f42e
jne 0x4f089f
lea edx, [0x5c2a60]
cmp edx, eax
jne 0x4f0710
mov eax, dword [esp + 0x560]
mov dword [esp + 0x148], 0
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0
mov dword [esp + 0x154], 0
mov dword [esp + 0x4a8], 0
mov dword [esp + 0x4ac], 0
mov dword [esp + 0x4b0], 0
mov dword [esp + 0x4b4], 0
mov word [esp + 0x4a8], 0x4012
mov dword [esp + 0x4b0], eax
mov dword [esp + 0x4b4], 0
lea edi, [esp + 0x148]
lea esi, [esp + 0x4a8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x148]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xeff20ea0
jne 0x4f0894
lea ebx, [0x5cd9e0]
cmp ebx, eax
jne 0x4f07d9
mov eax, dword [esp + 0x560]
movzx eax, word [eax]
mov dword [esp + 0x178], 0
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], 0
mov dword [esp + 0x184], 0
mov dword [esp + 0x4b8], 0
mov dword [esp + 0x4bc], 0
mov dword [esp + 0x4c0], 0
mov dword [esp + 0x4c4], 0
mov word [esp + 0x4b8], 0x12
mov dword [esp + 0x4c0], eax
mov dword [esp + 0x4c4], 0
lea edi, [esp + 0x178]
lea esi, [esp + 0x4b8]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x178]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
cmp ecx, 0xf75371fa
jne 0x4f09e1
lea ecx, [0x5cd0e0]
cmp ecx, eax
jne 0x4f09e1
mov eax, dword [esp + 0x560]
mov eax, dword [eax]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x418], 0
mov dword [esp + 0x41c], 0
mov dword [esp + 0x420], 0
mov dword [esp + 0x424], 0
mov word [esp + 0x418], 3
mov dword [esp + 0x420], eax
sar eax, 0x1f
mov dword [esp + 0x424], eax
lea edi, [esp + 0x78]
lea esi, [esp + 0x418]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x78]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
lea ebx, [0x5cd9e0]
jmp 0x4f07d9
lea edx, [0x5c2a60]
jmp 0x4f0710
mov dword [esp + 0x218], 0
mov dword [esp + 0x21c], 0
mov dword [esp + 0x220], 0
mov dword [esp + 0x224], 0
mov dword [esp + 0x328], 0
mov dword [esp + 0x32c], 0
mov dword [esp + 0x330], 0
mov dword [esp + 0x334], 0
mov word [esp + 0x328], 1
mov dword [esp + 0x330], 0
mov dword [esp + 0x334], 0
lea edi, [esp + 0x218]
lea esi, [esp + 0x328]
call fcn.00448ab8
mov edi, dword [esp + 0x578]
lea esi, [esp + 0x218]
call fcn.00448ab8
lea edx, [0x5c2aa0]
jmp 0x4ee739
test ecx, ecx
jbe 0x4f09c2
mov edx, eax
mov dword [esp + 0x2d8], eax
mov dword [esp + 0x2e0], ebx
mov ebx, ecx
jmp 0x4ee33e
test ax, 8
je 0x4ee32b
mov dword [esp + 0x4c], 0
mov dword [esp + 0x4c], 0xfffffffd
lea ecx, [esp + 0x4c]
mov dword [esp + 0x2dc], ecx
mov dword [esp + 0x2e4], 1
jmp 0x4ee32b
mov dword [esp], ecx
mov dword [esp + 4], ebp
lea eax, [0x5cd220]
mov dword [esp + 8], eax
call fcn.0040a5d0
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [0x5cd220]
mov dword [esp + 8], eax
call fcn.0040a5d0
ud2
call fcn.004f84f0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x5a0], eax
mov dword [esp + 0x5a4], ecx
lea eax, [0x5cd8e0]
mov dword [esp], eax
lea eax, [esp + 0x5a0]
mov dword [esp + 4], eax
call fcn.0040a970
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004251b0
ud2
call fcn.00424360
ud2
call fcn.00446b60
jmp fcn.004ee270