Function at 0x498ef8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
mov edx, 0x25
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x498f01
call fcn.0052fae0
mov dword [esp], 0xcccccc
mov dword [esp + 4], 0x505050
mov dword [esp + 8], 0x666666
mov dword [esp + 0xc], 0xcccccc
push 0xff
push 0xff
push 0xff
call fcn.0051ce0f
mov dword [esp + 0x10], eax
push 0xc7
push 0x67
push 0x3b
call fcn.0051ce0f
mov dword [esp + 0x14], eax
mov eax, str.Cnv_FixturesSelectionColor
push eax
push dword [0x6b1474]
call fcn.00519094
and eax, eax
je 0x498f88
mov ebp, dword [0x6b1474]
mov ebp, dword [ebp]
push dword [ebp + 8]
pop eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x444444
mov dword [esp + 0x1c], 0x505050
mov dword [esp + 0x20], 0x333333
push 0
push 0
push 0xff
call fcn.0051ce0f
mov dword [esp + 0x24], eax
lea ebp, [0x6b09b4]
cmp byte [ebp + 0xb], 0
je 0x498fe1
push dword [esp + 0x20]
pop eax
mov dword [esp + 0x28], eax
push dword [esp + 0x1c]
pop eax
mov dword [esp + 0x2c], eax
push dword [esp + 0x18]
pop eax
mov dword [esp + 0x30], eax
jmp 0x499022
cmp byte [esp + 0xa8], 0
je 0x499008
push dword [esp + 0x14]
pop eax
mov dword [esp + 0x28], eax
push dword [esp + 0x10]
pop eax
mov dword [esp + 0x2c], eax
push dword [esp + 0xc]
pop eax
mov dword [esp + 0x30], eax
jmp 0x499022
push dword [esp + 8]
pop eax
mov dword [esp + 0x28], eax
push dword [esp + 4]
pop eax
mov dword [esp + 0x2c], eax
push dword [esp]
pop eax
mov dword [esp + 0x30], eax
push 0
push 6
call fcn.005067d4
push eax
call fcn.005197bc
mov dword [esp + 0x38], eax
push 0
push 6
call fcn.00506762
push eax
call fcn.00519798
mov dword [esp + 0x3c], eax
lea ebp, [0x6b09b4]
push dword [ebp + 5]
call fcn.0051cb35
push 1
call fcn.0051cb4c
mov ebp, dword [0x6b1390]
movsx ebx, word [ebp + 0x18]
dec ebx
mov eax, ebx
push eax
call fcn.004e4245
mov ebx, eax
lea ebp, [0x6b0cf4]
movzx eax, byte [ebp + 0x13]
cmp ebx, eax
jne 0x49a38f
mov ebp, dword [0x6b1390]
movsx ebx, word [ebp + 0x18]
movsx edi, word [ebp + 0x18]
dec edi
mov eax, edi
push eax
call fcn.004e4245
mov edi, eax
dec edi
shl edi, 9
sub ebx, edi
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x40]
mov ebp, dword [0x6b1390]
mov ebp, dword [ebp + 0x14]
push ebp
pop eax
push dword [ebp + 0x1c]
call fcn.0051c857
add ebx, eax
mov dword [esp + 0x44], ebx
mov ebx, dword [esp + 0x40]
dec ebx
mov eax, ebx
mov ecx, 0x20
cdq
idiv ecx
mov ebx, eax
mov dword [esp + 0x48], ebx
mov ebx, dword [esp + 0x44]
dec ebx
mov eax, ebx
mov ecx, 0x20
cdq
idiv ecx
mov ebx, eax
mov dword [esp + 0x4c], ebx
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x48]
shl edi, 5
sub ebx, edi
dec ebx
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x44]
mov edi, dword [esp + 0x4c]
shl edi, 5
sub ebx, edi
dec ebx
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x50]
imul ebx, dword [esp + 0x38]
mov eax, ebx
mov ecx, 0x20
cdq
idiv ecx
mov ebx, eax
mov dword [esp + 0x64], ebx
push dword [esp + 0x64]
mov ebp, dword [0x6b1390]
pop eax
mov dword [ebp + 0x3b], eax
mov ebx, dword [esp + 0x48]
imul ebx, dword [esp + 0x3c]
mov eax, ebx
mov ecx, 0x10
cdq
idiv ecx
mov ebx, eax
mov dword [esp + 0x68], ebx
push dword [esp + 0x68]
pop eax
mov dword [ebp + 0x43], eax
mov ebx, dword [esp + 0x3c]
mov eax, ebx
mov ecx, 0x10
cdq
idiv ecx
mov ebx, eax
inc ebx
mov dword [esp + 0x70], ebx
mov ebx, dword [ebp + 0x43]
add ebx, dword [esp + 0x70]
push ebx
pop eax
mov dword [ebp + 0x47], eax
mov dword [esp + 0x78], 0
mov ebx, dword [esp + 0x48]
cmp ebx, dword [esp + 0x4c]
jne 0x499395
mov ebp, dword [0x6b1390]
mov ebp, dword [ebp + 0x14]
push ebp
pop eax
push dword [ebp + 0x1c]
call fcn.0051c857
mov ebx, eax
inc ebx
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x58]
imul ebx, dword [esp + 0x38]
mov eax, ebx
mov ecx, 0x20
cdq
idiv ecx
mov ebx, eax
inc ebx
mov dword [esp + 0x6c], ebx
mov ebp, dword [0x6b1390]
mov ebx, dword [ebp + 0x3b]
add ebx, dword [esp + 0x6c]
push ebx
pop eax
mov dword [ebp + 0x3f], eax
mov dword [ebp + 0x4b], 0
mov dword [ebp + 0x4f], 0
mov dword [ebp + 0x53], 0
mov dword [ebp + 0x57], 0
cmp byte [ebp + 0x5e], 0
je 0x49920c
xor eax, eax
jmp 0x499211
mov eax, 1
and eax, eax
je 0x499258
push dword [esp + 0x2c]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0051caea
push dword [esp + 0x28]
mov ebx, dword [esp + 0x74]
add ebx, 0xfffffffe
push ebx
mov ebx, dword [esp + 0x74]
add ebx, 0xfffffffe
push ebx
mov ebx, dword [esp + 0x74]
inc ebx
push ebx
mov ebx, dword [esp + 0x74]
inc ebx
push ebx
call fcn.0051caea
jmp 0x499390
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
push dword [esp + 0x6c]
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x74]
add ebx, dword [esp + 0x7c]
push ebx
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
push dword [esp + 0x6c]
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x74]
add ebx, dword [esp + 0x7c]
push ebx
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push dword [esp + 0x6c]
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push dword [esp + 0x74]
mov ebx, dword [esp + 0x74]
add ebx, dword [esp + 0x7c]
push ebx
call fcn.0051dcf1
jmp 0x4999e6
mov ebx, dword [esp + 0x50]
neg ebx
add ebx, 0x20
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x58]
imul ebx, dword [esp + 0x38]
mov eax, ebx
mov ecx, 0x20
cdq
idiv ecx
mov ebx, eax
inc ebx
mov dword [esp + 0x6c], ebx
mov ebp, dword [0x6b1390]
mov ebx, dword [ebp + 0x3b]
add ebx, dword [esp + 0x6c]
push ebx
pop eax
mov dword [ebp + 0x3f], eax
mov ebx, dword [esp + 0x4c]
sub ebx, dword [esp + 0x48]
cmp ebx, 1
jle 0x499641
mov ebp, dword [0x6b1390]
mov ebp, dword [ebp + 0x14]
push ebp
pop eax
push dword [ebp + 0x1c]
call fcn.0051c857
mov ebx, eax
inc ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x34], 1
mov ebx, dword [esp + 0x50]
neg ebx
add ebx, 0x40
cmp ebx, dword [esp + 0x60]
jge 0x499641
mov ebp, dword [0x6b1390]
cmp byte [ebp + 0x5e], 0
je 0x499424
xor eax, eax
jmp 0x499429
mov eax, 1
and eax, eax
je 0x499483
push dword [esp + 0x2c]
push dword [esp + 0x74]
push dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x7c]
imul edi, dword [esp + 0x40]
add ebx, edi
push ebx
push 0
call fcn.0051caea
push dword [esp + 0x28]
mov ebx, dword [esp + 0x74]
add ebx, 0xfffffffe
push ebx
push dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x7c]
imul edi, dword [esp + 0x40]
add ebx, edi
inc ebx
push ebx
push 0
call fcn.0051caea
jmp 0x499628
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
mov edi, dword [esp + 0x74]
imul edi, dword [esp + 0x38]
add ebx, edi
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x40]
push ebx
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x7c]
imul edi, dword [esp + 0x40]
add ebx, edi
push ebx
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
mov edi, dword [esp + 0x74]
imul edi, dword [esp + 0x38]
add ebx, edi
push ebx
mov ebx, dword [esp + 0x40]
push ebx
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x7c]
imul edi, dword [esp + 0x40]
add ebx, edi
add ebx, dword [esp + 0x7c]
push ebx
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
mov edi, dword [esp + 0x74]
imul edi, dword [esp + 0x38]
add ebx, edi
push ebx
mov ebx, dword [esp + 0x40]
push ebx
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x7c]
imul edi, dword [esp + 0x40]
add ebx, edi
push ebx
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
mov edi, dword [esp + 0x74]
imul edi, dword [esp + 0x38]
add ebx, edi
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x40]
push ebx
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x7c]
imul edi, dword [esp + 0x40]
add ebx, edi
add ebx, dword [esp + 0x7c]
push ebx
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push 0
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x7c]
imul edi, dword [esp + 0x40]
add ebx, edi
push ebx
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
mov edi, dword [esp + 0x74]
imul edi, dword [esp + 0x38]
add ebx, edi
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x40]
push ebx
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x7c]
imul edi, dword [esp + 0x40]
add ebx, edi
push ebx
mov ebx, dword [esp + 0x48]
push ebx
call fcn.0051dcf1
mov ebx, dword [esp + 0x60]
add ebx, 0xffffffe0
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x34]
inc ebx
mov dword [esp + 0x34], ebx
jmp 0x499401
mov ebp, dword [0x6b1390]
cmp byte [ebp + 0x5e], 0
je 0x499651
xor eax, eax
jmp 0x499656
mov eax, 1
and eax, eax
je 0x49969b
push dword [esp + 0x2c]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0051caea
push dword [esp + 0x28]
mov ebx, dword [esp + 0x74]
add ebx, 0xfffffffe
push ebx
mov ebx, dword [esp + 0x74]
dec ebx
push ebx
mov ebx, dword [esp + 0x74]
inc ebx
push ebx
mov ebx, dword [esp + 0x74]
inc ebx
push ebx
call fcn.0051caea
jmp 0x4997d3
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
push dword [esp + 0x6c]
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x74]
add ebx, dword [esp + 0x7c]
push ebx
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
push dword [esp + 0x6c]
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x74]
add ebx, dword [esp + 0x7c]
push ebx
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push dword [esp + 0x6c]
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push dword [esp + 0x74]
mov ebx, dword [esp + 0x74]
add ebx, dword [esp + 0x7c]
push ebx
call fcn.0051dcf1
mov ebx, dword [esp + 0x54]
inc ebx
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x58]
imul ebx, dword [esp + 0x38]
mov eax, ebx
mov ecx, 0x20
cdq
idiv ecx
mov ebx, eax
inc ebx
mov dword [esp + 0x78], ebx
mov ebx, dword [esp + 0x4c]
imul ebx, dword [esp + 0x3c]
mov eax, ebx
mov ecx, 0x10
cdq
idiv ecx
mov ebx, eax
mov dword [esp + 0x74], ebx
mov ebp, dword [0x6b1390]
mov dword [ebp + 0x4b], 0
mov ebx, dword [ebp + 0x4b]
add ebx, dword [esp + 0x78]
push ebx
pop eax
mov dword [ebp + 0x4f], eax
push dword [esp + 0x74]
pop eax
mov dword [ebp + 0x53], eax
mov ebx, dword [ebp + 0x53]
add ebx, dword [esp + 0x70]
push ebx
pop eax
mov dword [ebp + 0x57], eax
cmp byte [ebp + 0x5e], 0
je 0x499846
xor eax, eax
jmp 0x49984b
mov eax, 1
and eax, eax
je 0x49989c
push dword [esp + 0x2c]
push dword [esp + 0x74]
push dword [esp + 0x80]
push dword [esp + 0x80]
push 0
call fcn.0051caea
push dword [esp + 0x28]
mov ebx, dword [esp + 0x74]
add ebx, 0xfffffffe
push ebx
mov ebx, dword [esp + 0x80]
dec ebx
push ebx
mov ebx, dword [esp + 0x80]
inc ebx
push ebx
push 0
call fcn.0051caea
jmp 0x4999e6
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x78]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x80]
push ebx
push dword [esp + 0x80]
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
push dword [esp + 0x78]
mov ebx, dword [esp + 0x80]
push ebx
mov ebx, dword [esp + 0x80]
add ebx, dword [esp + 0x7c]
push ebx
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
push dword [esp + 0x78]
mov ebx, dword [esp + 0x80]
push ebx
push dword [esp + 0x80]
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x78]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x80]
push ebx
mov ebx, dword [esp + 0x80]
add ebx, dword [esp + 0x7c]
push ebx
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x6c]
add ebx, dword [esp + 0x74]
push ebx
push 0
push dword [esp + 0x80]
push 0
call fcn.0051dcf1
push 0
push 0
push 0xff
call fcn.0051ce0f
push eax
mov ebx, dword [esp + 0x78]
add ebx, dword [esp + 0x74]
push ebx
mov ebx, dword [esp + 0x80]
push ebx
push dword [esp + 0x80]
mov ebx, dword [esp + 0x88]
push ebx
call fcn.0051dcf1
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
mov eax, dword [esp + 0x48]
cdq
push edx
push eax
call fcn.0052cb80
lea eax, [esp + 0x84]
push eax
call fcn.0052fa10
mov ebx, dword [esp + 0x40]
cmp ebx, 0x64
jge 0x499a7b
push edx
call fcn.0052f940
pop edx
push eax
mov edx, 0x5e4012
push edx
call fcn.0052f980
mov edx, dword [esp + 0x84]
push edx
call fcn.0052f980
lea eax, [esp + 0x84]
push eax
call fcn.0052fa10
mov ebx, dword [esp + 0x40]
cmp ebx, 0xa
jge 0x499a7b
push edx
call fcn.0052f940
pop edx
push eax
mov edx, 0x5e4012
push edx
call fcn.0052f980
mov edx, dword [esp + 0x84]
push edx
call fcn.0052f980
lea eax, [esp + 0x84]
push eax
call fcn.0052fa10
push dword [esp + 0x30]
push dword [esp + 0x84]
push dword [esp + 0x70]
mov ebx, dword [esp + 0x70]
add ebx, 3
push ebx
call fcn.0051cb63
mov ebx, dword [esp + 0x44]
cmp ebx, dword [esp + 0x40]
je 0x499b3c
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
mov eax, dword [esp + 0x4c]
cdq
push edx
push eax
call fcn.0052cb80
lea eax, [esp + 0x84]
push eax
call fcn.0052fa10
mov ebx, dword [esp + 0x44]
cmp ebx, 0x64
jge 0x499b3a
push edx
call fcn.0052f940
pop edx
push eax
mov edx, 0x5e4012
push edx
call fcn.0052f980
mov edx, dword [esp + 0x84]
push edx
call fcn.0052f980
lea eax, [esp + 0x84]
push eax
call fcn.0052fa10
mov ebx, dword [esp + 0x44]
cmp ebx, 0xa
jge 0x499b3a
push edx
call fcn.0052f940
pop edx
push eax
mov edx, 0x5e4012
push edx
call fcn.0052f980
mov edx, dword [esp + 0x84]
push edx
call fcn.0052f980
lea eax, [esp + 0x84]
push eax
call fcn.0052fa10
jmp 0x499b4d
mov edx, 0x5e3038
lea ecx, [esp + 0x80]
call fcn.004f7008
mov edx, 0x5e3038
lea ecx, [esp + 0x90]
call fcn.004f7008
mov ebp, dword [0x6b1390]
movsx ebx, byte [ebp + 0x1f]
cmp ebx, 1
jne 0x499b7e
mov edx, 0x5ebca8
lea ecx, [esp + 0x90]
call fcn.004f7008
mov ebp, dword [0x6b1390]
movsx ebx, byte [ebp + 0x20]
cmp ebx, 1
jne 0x499bba
mov edx, dword [esp + 0x90]
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f980
mov edx, 0x5ed182
push edx
call fcn.0052f980
lea eax, [esp + 0x94]
push eax
call fcn.0052fa10
mov ebp, dword [0x6b1390]
movzx ebx, byte [ebp + 0x1e]
mov eax, 1
cmp ebx, eax
jle 0x499c1d
mov edx, dword [esp + 0x90]
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f980
mov edx, 0x5e3b18
push edx
call fcn.0052f980
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
mov ebp, dword [0x6b1390]
movzx eax, byte [ebp + 0x1e]
cdq
push edx
push eax
call fcn.0052cb80
pop eax
lea eax, [esp + 0x94]
push eax
call fcn.0052fa10
mov ebx, dword [esp + 0x48]
cmp ebx, dword [esp + 0x4c]
jne 0x499cb2
push dword [esp + 0x30]
push dword [esp + 0x84]
push dword [esp + 0x70]
mov ebx, dword [esp + 0x70]
add ebx, dword [esp + 0x78]
push dword [esp + 0x8c]
call fcn.0051ccb7
sub ebx, eax
add ebx, 0xfffffffd
push ebx
call fcn.0051cb63
push dword [esp + 0x90]
call fcn.0052d3f0
mov ebx, eax
and ebx, ebx
jle 0x499cad
push dword [esp + 0x30]
push dword [esp + 0x94]
mov ebx, dword [esp + 0x70]
add ebx, dword [esp + 0x78]
push dword [esp + 0x98]
call fcn.0051cce1
sub ebx, eax
dec ebx
push ebx
mov ebx, dword [esp + 0x70]
add ebx, dword [esp + 0x78]
push dword [esp + 0x9c]
call fcn.0051ccb7
sub ebx, eax
add ebx, 0xfffffffd
push ebx
call fcn.0051cb63
jmp 0x499d32
push dword [esp + 0x30]
push dword [esp + 0x84]
push dword [esp + 0x7c]
mov ebx, dword [esp + 0x84]
push dword [esp + 0x8c]
call fcn.0051ccb7
sub ebx, eax
add ebx, 0xfffffffd
push ebx
call fcn.0051cb63
push dword [esp + 0x90]
call fcn.0052d3f0
mov ebx, eax
and ebx, ebx
jle 0x499d32
push dword [esp + 0x30]
push dword [esp + 0x94]
mov ebx, dword [esp + 0x7c]
add ebx, dword [esp + 0x78]
push dword [esp + 0x98]
call fcn.0051cce1
sub ebx, eax
dec ebx
push ebx
mov ebx, dword [esp + 0x84]
push dword [esp + 0x9c]
call fcn.0051ccb7
sub ebx, eax
add ebx, 0xfffffffd
push ebx
call fcn.0051cb63
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
mov ebp, dword [0x6b1390]
movzx eax, byte [ebp + 0x1e]
cdq
push edx
push eax
call fcn.0052cb80
lea eax, [esp + 0x88]
push eax
call fcn.0052fa10
mov edx, dword [ebp + 0x10]
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f980
lea eax, [esp + 0x8c]
push eax
call fcn.0052fa10
push dword [esp + 0x88]
call fcn.0051ccb7
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0x5c]
mov edi, dword [esp + 0x6c]
add edi, dword [esp + 0x78]
add edi, 0xfffffffa
cmp ebx, edi
jle 0x499e20
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push dword [esp + 0x90]
call fcn.0052d3f0
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0x94]
call fcn.0052e430
lea eax, [esp + 0x8c]
push eax
call fcn.0052fa10
push dword [esp + 0x88]
call fcn.0051ccb7
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0x5c]
mov edi, dword [esp + 0x6c]
add edi, dword [esp + 0x78]
add edi, 0xfffffffa
cmp ebx, edi
jl 0x499e13
push dword [esp + 0x88]
call fcn.0052d3f0
mov ebx, eax
cmp ebx, 1
jle 0x499e13
jmp 0x499e1a
mov eax, 1
jmp 0x499e1c
xor eax, eax
and eax, eax
je 0x499da2
mov ebx, dword [esp + 0x48]
cmp ebx, dword [esp + 0x4c]
jne 0x499e82
push dword [esp + 0x30]
push dword [esp + 0x8c]
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x78]
push dword [esp + 0x90]
call fcn.0051cce1
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
push ebx
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x78]
sub edi, dword [esp + 0x68]
add edi, 3
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
push ebx
call fcn.0051cb63
jmp 0x49a091
mov ebp, dword [0x6b1390]
mov ebp, dword [ebp + 0x14]
push ebp
pop eax
push dword [ebp + 0x1c]
call fcn.0051c857
mov ebx, eax
inc ebx
cmp ebx, 0x21
jle 0x499eb1
mov ebx, dword [esp + 0x4c]
sub ebx, dword [esp + 0x48]
cmp ebx, 1
jle 0x499eb1
mov eax, 1
jmp 0x499eb3
xor eax, eax
and eax, eax
je 0x499f14
push dword [esp + 0x30]
push dword [esp + 0x8c]
mov ebx, dword [esp + 0x70]
add ebx, dword [esp + 0x78]
mov edi, dword [esp + 0x78]
push dword [esp + 0x90]
call fcn.0051cce1
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
push ebx
mov ebx, dword [esp + 0x44]
push dword [esp + 0x94]
call fcn.0051ccb7
sub ebx, eax
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
call fcn.0051cb63
jmp 0x49a091
mov edx, dword [esp + 0x88]
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f980
lea eax, [esp + 0x90]
push eax
call fcn.0052fa10
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push dword [esp + 0x94]
call fcn.0052d3f0
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0x98]
call fcn.0052e430
lea eax, [esp + 0x90]
push eax
call fcn.0052fa10
push dword [esp + 0x8c]
call fcn.0051ccb7
mov dword [esp + 0x7c], eax
push dword [esp + 0x8c]
call fcn.0052d3f0
mov ebx, eax
and ebx, ebx
jle 0x499fbc
mov ebx, dword [esp + 0x7c]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x6c]
add esi, dword [esp + 0x78]
sub esi, dword [esp + 0x5c]
mov eax, esi
mov ecx, 2
cdq
idiv ecx
mov esi, eax
sub edi, esi
add edi, 0xfffffffd
cmp ebx, edi
jl 0x499fbc
jmp 0x499fc3
mov eax, 1
jmp 0x499fc5
xor eax, eax
and eax, eax
je 0x499f36
push dword [esp + 0x30]
push dword [esp + 0x90]
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x78]
push dword [esp + 0x90]
call fcn.0051cce1
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
push ebx
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x78]
add edi, dword [esp + 0x84]
sub edi, dword [esp + 0x68]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
add ebx, 3
push ebx
call fcn.0051cb63
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push dword [esp + 0x94]
push dword [esp + 0x94]
call fcn.0052e070
lea eax, [esp + 0x90]
push eax
call fcn.0052fa10
push dword [esp + 0x30]
push dword [esp + 0x90]
mov ebx, dword [esp + 0x7c]
mov edi, dword [esp + 0x78]
push dword [esp + 0x90]
call fcn.0051cce1
sub edi, eax
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
push ebx
push 0
call fcn.0051cb63
mov ebp, dword [0x6b1390]
mov edx, dword [ebp + 0x1a]
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f980
lea eax, [esp + 0x8c]
push eax
call fcn.0052fa10
push dword [esp + 0x88]
call fcn.0051ccb7
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0x5c]
mov edi, dword [esp + 0x6c]
add edi, dword [esp + 0x78]
add edi, 0xfffffffa
cmp ebx, edi
jle 0x49a156
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push dword [esp + 0x90]
call fcn.0052d3f0
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0x94]
call fcn.0052e430
lea eax, [esp + 0x8c]
push eax
call fcn.0052fa10
push dword [esp + 0x88]
call fcn.0051ccb7
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0x5c]
mov edi, dword [esp + 0x6c]
add edi, dword [esp + 0x78]
add edi, 0xfffffffa
cmp ebx, edi
jl 0x49a149
push dword [esp + 0x88]
call fcn.0052d3f0
mov ebx, eax
cmp ebx, 1
jle 0x49a149
jmp 0x49a150
mov eax, 1
jmp 0x49a152
xor eax, eax
and eax, eax
je 0x49a0d8
mov ebx, dword [esp + 0x48]
cmp ebx, dword [esp + 0x4c]
jne 0x49a1ab
push dword [esp + 0x30]
push dword [esp + 0x8c]
mov ebx, dword [esp + 0x70]
add ebx, dword [esp + 0x78]
push dword [esp + 0x90]
call fcn.0051cce1
sub ebx, eax
dec ebx
push ebx
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x78]
sub edi, dword [esp + 0x68]
add edi, 3
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
push ebx
call fcn.0051cb63
jmp 0x49a38f
mov ebp, dword [0x6b1390]
mov ebp, dword [ebp + 0x14]
push ebp
pop eax
push dword [ebp + 0x1c]
call fcn.0051c857
mov ebx, eax
inc ebx
cmp ebx, 0x21
jle 0x49a1da
mov ebx, dword [esp + 0x4c]
sub ebx, dword [esp + 0x48]
cmp ebx, 1
jle 0x49a1da
mov eax, 1
jmp 0x49a1dc
xor eax, eax
and eax, eax
je 0x49a22c
push dword [esp + 0x30]
push dword [esp + 0x8c]
mov ebx, dword [esp + 0x70]
add ebx, dword [esp + 0x78]
push dword [esp + 0x90]
call fcn.0051cce1
sub ebx, eax
dec ebx
push ebx
mov ebx, dword [esp + 0x44]
push dword [esp + 0x94]
call fcn.0051ccb7
sub ebx, eax
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
call fcn.0051cb63
jmp 0x49a38f
mov edx, dword [esp + 0x88]
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f980
lea eax, [esp + 0x90]
push eax
call fcn.0052fa10
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push dword [esp + 0x94]
call fcn.0052d3f0
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0x98]
call fcn.0052e430
lea eax, [esp + 0x90]
push eax
call fcn.0052fa10
push dword [esp + 0x8c]
call fcn.0051ccb7
mov dword [esp + 0x7c], eax
push dword [esp + 0x8c]
call fcn.0052d3f0
mov ebx, eax
and ebx, ebx
jle 0x49a2d4
mov ebx, dword [esp + 0x7c]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x6c]
add esi, dword [esp + 0x78]
sub esi, dword [esp + 0x5c]
mov eax, esi
mov ecx, 2
cdq
idiv ecx
mov esi, eax
sub edi, esi
add edi, 0xfffffffd
cmp ebx, edi
jl 0x49a2d4
jmp 0x49a2db
mov eax, 1
jmp 0x49a2dd
xor eax, eax
and eax, eax
je 0x49a24e
push dword [esp + 0x30]
push dword [esp + 0x90]
mov ebx, dword [esp + 0x70]
add ebx, dword [esp + 0x78]
push dword [esp + 0x90]
call fcn.0051cce1
sub ebx, eax
dec ebx
push ebx
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x78]
add edi, dword [esp + 0x84]
sub edi, dword [esp + 0x68]
mov eax, edi
mov ecx, 2
cdq
idiv ecx
mov edi, eax
add ebx, edi
add ebx, 3
push ebx
call fcn.0051cb63
push edx
call fcn.0052f940
pop edx
push eax
push edx
call fcn.0052f940
pop edx
push eax
push dword [esp + 0x94]
push dword [esp + 0x94]
call fcn.0052e070
lea eax, [esp + 0x90]
push eax
call fcn.0052fa10
push dword [esp + 0x30]
push dword [esp + 0x90]
mov ebx, dword [esp + 0x7c]
add ebx, dword [esp + 0x78]
push dword [esp + 0x90]
call fcn.0051cce1
sub ebx, eax
dec ebx
push ebx
push 0
call fcn.0051cb63
xor eax, eax
push dword [esp + 0x8c]
call fcn.0052fb40
push dword [esp + 0x88]
call fcn.0052fb40
push dword [esp + 0x90]
call fcn.0052fb40
push dword [esp + 0x84]
call fcn.0052fb40
push dword [esp + 0x80]
call fcn.0052fb40
add esp, 0x94
pop esi
pop edi
pop ebx
pop ebp
ret 4