Function at 0x496a60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4978f5
sub esp, 0x7c
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x88]
mov dword [esp + 8], edx
call fcn.0048f680
mov eax, dword [esp + 0xc]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x58], ebx
mov ebp, dword [esp + 0x8c]
mov dword [esp], ebp
mov esi, dword [esp + 0x90]
mov dword [esp + 4], esi
mov edi, dword [esp + 0x94]
mov dword [esp + 8], edi
call fcn.0048f680
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x68]
cmp dword [esp + 0xc], ecx
jne 0x49757e
mov dword [esp], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004033c0
movzx eax, byte [esp + 0xc]
test al, al
je 0x49757e
nop
mov eax, dword [esp + 0x88]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x497042
cmp eax, 0xc
ja 0x496e82
cmp eax, 1
je 0x496dfa
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x496c9d
cmp eax, 3
ja 0x496b75
cmp eax, 2
jne 0x496b64
mov eax, dword [esp + 0x84]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x496bb2
mov ecx, dword [esp + 0x84]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x496bb2
cmp eax, 4
jne 0x496b8b
mov ecx, dword [esp + 0x84]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x496bb2
cmp eax, 5
jne 0x496ba0
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x496bb2
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0x94]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 3
ja 0x496bf5
cmp edx, 2
jne 0x496bdb
mov edx, dword [esp + 0x90]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x496c3b
cmp edx, 3
jne 0x4978ba
mov ebx, dword [esp + 0x90]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x496c3b
cmp edx, 4
jne 0x496c0b
mov ebx, dword [esp + 0x90]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x496c3b
cmp edx, 5
jne 0x496c20
mov ebx, dword [esp + 0x90]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x496c3b
cmp edx, 6
jne 0x4978ba
mov ebx, dword [esp + 0x90]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setl bl
xchg esi, ebx
cmp ecx, ebx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x496c8e
cmp ecx, ebx
seta cl
cmp eax, edx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x496c7f
mov dword [esp + 0x98], 1
add esp, 0x7c
ret
mov dword [esp + 0x98], 0
add esp, 0x7c
ret
mov dword [esp + 0x98], 0xffffffff
add esp, 0x7c
ret
cmp eax, 7
jb 0x49758d
cmp eax, 9
ja 0x496cde
cmp eax, 7
jne 0x496cbd
mov eax, dword [esp + 0x84]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x496d0e
cmp eax, 8
jne 0x496cd0
mov ecx, dword [esp + 0x84]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x496d0e
mov ecx, dword [esp + 0x84]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x496d0e
cmp eax, 0xa
jne 0x496cf0
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x496d0e
cmp eax, 0xb
jne 0x496d03
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x496d0e
mov edx, dword [esp + 0x84]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0x94]
and edx, 0x1f
mov dword [esp + 0x44], edx
cmp edx, 9
ja 0x496d5e
cmp edx, 7
jne 0x496d34
mov edx, dword [esp + 0x90]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x496d98
cmp edx, 8
jne 0x496d47
mov ebx, dword [esp + 0x90]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x496d98
cmp edx, 9
jne 0x497880
mov ebx, dword [esp + 0x90]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x496d98
cmp edx, 0xa
jne 0x496d70
mov ebx, dword [esp + 0x90]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x496d98
cmp edx, 0xb
jne 0x496d83
mov ebx, dword [esp + 0x90]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x496d98
cmp edx, 0xc
jne 0x497880
mov ebp, dword [esp + 0x90]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x496deb
cmp eax, edx
seta al
cmp ecx, ebx
seta cl
and eax, ebp
or ecx, eax
test cl, cl
je 0x496ddc
mov dword [esp + 0x98], 1
add esp, 0x7c
ret
mov dword [esp + 0x98], 0
add esp, 0x7c
ret
mov dword [esp + 0x98], 0xffffffff
add esp, 0x7c
ret
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048c270
movzx eax, byte [esp + 0xc]
mov byte [esp + 0x23], al
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 8], ecx
call fcn.0048c270
movzx eax, byte [esp + 0x23]
cmp byte [esp + 0xc], al
je 0x496e73
test al, al
je 0x496e64
mov dword [esp + 0x98], 1
add esp, 0x7c
ret
mov dword [esp + 0x98], 0xffffffff
add esp, 0x7c
ret
mov dword [esp + 0x98], 0
add esp, 0x7c
ret
cmp eax, 0xe
ja 0x496f26
cmp eax, 0xd
jne 0x496ea1
mov eax, dword [esp + 0x84]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x496eac
mov eax, dword [esp + 0x84]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0x94]
and eax, 0x1f
cmp eax, 0xd
jne 0x496ecd
mov eax, dword [esp + 0x90]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x496ee1
cmp eax, 0xe
jne 0x497842
mov eax, dword [esp + 0x90]
movsd xmm1, qword [eax]
ucomisd xmm0, xmm0
jne 0x496ee9
jnp 0x496ef0
mov eax, 0xffffffff
jmp 0x496f1b
ucomisd xmm1, xmm1
jne 0x496ef8
jnp 0x496eff
mov eax, 1
jmp 0x496f1b
ucomisd xmm1, xmm0
jbe 0x496f0c
mov eax, 0xffffffff
jmp 0x496f1b
ucomisd xmm0, xmm1
jbe 0x496f19
mov eax, 1
jmp 0x496f1b
xor eax, eax
mov dword [esp + 0x98], eax
add esp, 0x7c
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x497032
cmp eax, 0xf
jne 0x496f51
mov eax, dword [esp + 0x84]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
movss xmm1, dword [eax + 4]
cvtss2sd xmm1, xmm1
jmp 0x496f61
mov eax, dword [esp + 0x84]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0x94]
and eax, 0x1f
cmp eax, 0xf
jne 0x496f8b
mov eax, dword [esp + 0x90]
movss xmm2, dword [eax]
cvtss2sd xmm2, xmm2
movss xmm3, dword [eax + 4]
cvtss2sd xmm3, xmm3
jmp 0x496fa4
cmp eax, 0x10
jne 0x497804
mov eax, dword [esp + 0x90]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm0
jne 0x496fac
jnp 0x496fb3
mov eax, 0xffffffff
jmp 0x496fde
ucomisd xmm2, xmm2
jne 0x496fbb
jnp 0x496fc2
mov eax, 1
jmp 0x496fde
ucomisd xmm2, xmm0
jbe 0x496fcf
mov eax, 0xffffffff
jmp 0x496fde
ucomisd xmm0, xmm2
jbe 0x496fdc
mov eax, 1
jmp 0x496fde
xor eax, eax
test eax, eax
jne 0x497027
ucomisd xmm1, xmm1
jne 0x496fea
jnp 0x496ff1
mov eax, 0xffffffff
jmp 0x49701c
ucomisd xmm3, xmm3
jne 0x496ff9
jnp 0x497000
mov eax, 1
jmp 0x49701c
ucomisd xmm3, xmm1
jbe 0x49700d
mov eax, 0xffffffff
jmp 0x49701c
ucomisd xmm1, xmm3
jbe 0x49701a
mov eax, 1
jmp 0x49701c
xor eax, eax
mov dword [esp + 0x98], eax
add esp, 0x7c
ret
mov dword [esp + 0x98], eax
add esp, 0x7c
ret
cmp eax, 0x11
jne 0x49758d
xor eax, eax
jmp 0x49770c
cmp eax, 0x16
ja 0x4973fa
cmp eax, 0x12
je 0x497312
cmp eax, 0x14
je 0x497067
cmp eax, 0x16
je 0x497418
jmp 0x49758d
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x94]
mov dword [esp + 0x14], esi
call fcn.00497900
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x497307
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x88]
mov dword [esp + 8], edx
call fcn.0048d3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048f680
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x497107
mov eax, dword [eax + 4]
test eax, eax
je 0x49716f
nop
movzx edx, byte [0x86dc30]
test dl, dl
je 0x497140
mov dword [0x86dc34], eax
mov edx, dword [0x894e10]
test edx, edx
jne 0x49712f
mov dword [0x86dc38], ecx
jmp 0x497140
lea edi, [0x86dc38]
mov edx, eax
mov eax, ecx
call fcn.0045f830
mov eax, edx
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ecx
mov eax, dword [esp + 0x74]
test eax, eax
je 0x497167
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x497175
or edx, 0x80
jmp 0x497175
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x497175
xor edx, edx
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], edx
mov ebx, dword [esp + 0x8c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x94]
mov dword [esp + 8], esi
call fcn.0048d3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048f680
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4971d1
mov eax, dword [eax + 4]
test eax, eax
je 0x497239
nop
movzx edx, byte [0x86dc30]
test dl, dl
je 0x49720a
mov dword [0x86dc34], eax
mov edx, dword [0x894e10]
test edx, edx
jne 0x4971f9
mov dword [0x86dc38], ecx
jmp 0x49720a
lea edi, [0x86dc38]
mov edx, eax
mov eax, ecx
call fcn.0045f830
mov eax, edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x497231
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x49723f
or edx, 0x80
jmp 0x49723f
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x49723f
xor edx, edx
xor eax, eax
xor ecx, ecx
mov ebx, dword [esp + 0x48]
mov dword [esp], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00496a60
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49727a
mov dword [esp + 0x98], eax
add esp, 0x7c
ret
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.0048d3b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x8c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x90]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 8], ebx
call fcn.0048d3b0
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.00496a60
mov eax, dword [esp + 0x18]
mov dword [esp + 0x98], eax
add esp, 0x7c
ret
mov dword [esp + 0x98], ecx
add esp, 0x7c
ret
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x94]
mov dword [esp + 0x14], esi
call fcn.00497900
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4973ef
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.0048e510
mov eax, dword [esp + 0xc]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 8], ecx
call fcn.0048e510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
ja 0x4973e0
jae 0x4973d1
mov dword [esp + 0x98], 1
add esp, 0x7c
ret
mov dword [esp + 0x98], 0
add esp, 0x7c
ret
mov dword [esp + 0x98], 0xffffffff
add esp, 0x7c
ret
mov dword [esp + 0x98], ecx
add esp, 0x7c
ret
cmp eax, 0x18
je 0x49749e
cmp eax, 0x19
jne 0x49740f
xor eax, eax
jmp 0x497606
cmp eax, 0x1a
jne 0x49758d
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048e510
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 8], ecx
call fcn.0048e510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x49748f
jae 0x497480
mov dword [esp + 0x98], 1
add esp, 0x7c
ret
mov dword [esp + 0x98], 0
add esp, 0x7c
ret
mov dword [esp + 0x98], 0xffffffff
add esp, 0x7c
ret
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048f590
mov eax, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 8], edx
call fcn.0048f590
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x5c]
mov dword [esp], edx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.004024c0
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x49756f
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], eax
call fcn.004024c0
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x497560
mov dword [esp + 0x98], 1
add esp, 0x7c
ret
mov dword [esp + 0x98], 0
add esp, 0x7c
ret
mov dword [esp + 0x98], 0xffffffff
add esp, 0x7c
ret
mov dword [esp + 0x98], 0xffffffff
add esp, 0x7c
ret
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x697352]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044b970
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408dc0
mov eax, dword [esp + 8]
lea ecx, [0x65f240]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004341e0
mov edx, dword [esp + 0x2c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x80]
mov dword [esp], edx
mov ebx, dword [esp + 0x84]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048e460
mov eax, dword [esp + 0x2c]
cmp dword [esp + 0xc], eax
jle 0x4976ef
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x88]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048d560
mov eax, dword [esp + 0x10]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x8c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x94]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x2c]
mov dword [esp + 0xc], edi
call fcn.0048d560
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00496a60
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4975f8
mov dword [esp + 0x98], eax
add esp, 0x7c
ret
mov dword [esp + 0x98], 0
add esp, 0x7c
ret
mov edx, dword [esp + 0x28]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x80]
mov dword [esp], edx
mov ebx, dword [esp + 0x84]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048d990
mov eax, dword [esp + 0x28]
cmp dword [esp + 0xc], eax
jle 0x4977f5
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x88]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048d650
mov eax, dword [esp + 0x10]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x8c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x94]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x28]
mov dword [esp + 0xc], edi
call fcn.0048d650
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00496a60
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4976fe
mov dword [esp + 0x98], eax
add esp, 0x7c
ret
mov dword [esp + 0x98], 0
add esp, 0x7c
ret
mov dword [esp + 0x44], eax
lea eax, [0x66e7e0]
mov dword [esp], eax
call fcn.0040b400
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x69755f]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x664b80]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004341e0
mov dword [esp + 0x44], eax
lea eax, [0x66e7e0]
mov dword [esp], eax
call fcn.0040b400
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6964c2]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x664b80]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004341e0
lea eax, [0x66e7e0]
mov dword [esp], eax
call fcn.0040b400
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x695b65]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x664b80]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004341e0
lea eax, [0x66e7e0]
mov dword [esp], eax
call fcn.0040b400
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x695333]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x664b80]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004341e0
nop
call fcn.0045e420
jmp fcn.00496a60