Function at 0x472500
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x128
mov eax, dword [0x549944]
xor eax, esp
mov dword [esp + 0x124], eax
mov eax, dword [ebp + 8]
push esi
mov esi, ecx
mov dword [esp + 0x70], eax
push edi
mov edi, edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x1c], edi
mov eax, dword [esi + 0x19c]
mov ecx, dword [esi]
mov dword [esp + 0x84], eax
mov eax, dword [esi + 0x1a0]
mov dword [esi + 0x19c], eax
inc eax
mov dword [esp + 0x80], 1
mov dword [esi + 0x1a0], eax
mov dword [esp + 0x34], ecx
test edi, edi
je 0x4725bf
cmp byte [ecx + 0x49], 0
jne 0x4725bf
cmp dword [esi + 0x24], 0
jne 0x4725bf
cmp byte [ecx + 0x9d], 0
jne 0x4725f8
cmp byte [esi + 0x190], 0
jne 0x4725f8
mov eax, dword [ecx + 0x130]
test eax, eax
je 0x4725f8
push dword [esi + 0x1b8]
push 0
push 0
push 0
push 0x15
push dword [ecx + 0x134]
call eax
add esp, 0x18
cmp eax, 1
jne 0x4725d8
push 0x53a7d0
push esi
call fcn.004081e0
add esp, 8
mov dword [esi + 0xc], 0x17
mov eax, 1
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.004e5962
mov esp, ebp
pop ebp
ret
test eax, eax
je 0x4725f8
cmp eax, 2
je 0x4725bf
push 0x53a78c
push esi
call fcn.004081e0
add esp, 8
mov dword [esi + 0xc], 1
jmp 0x4725bf
push 0x30
lea eax, [esp + 0xd4]
push 0
push eax
call fcn.004e8ed0
mov eax, dword [esp + 0x80]
add esp, 0xc
cmp byte [eax], 8
ja 0x472633
mov edx, dword [edi + 0x2c]
test edx, edx
je 0x472628
mov ecx, dword [esp + 0x34]
call fcn.0043dac0
and dword [edi + 8], 0xfffffffe
mov dword [edi + 0x2c], 0
push 0
mov edx, edi
mov ecx, esi
call fcn.00471ab0
mov eax, dword [edi + 0x2c]
xorps xmm0, xmm0
movaps xmmword [esp + 0x94], xmm0
add esp, 4
cmp dword [esi + 0x24], 0
mov dword [esp + 0x90], eax
mov eax, dword [edi + 0x1c]
movaps xmmword [esp + 0xa0], xmm0
mov dword [esp + 0x14], eax
jne 0x4727fa
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x49], 0
jne 0x4752d6
mov eax, dword [edi + 8]
mov edi, dword [esi + 8]
shr eax, 3
and eax, 1
mov dword [esp + 0x58], edi
mov dword [esp + 0x30], eax
test edi, edi
jne 0x4726bb
cmp dword [esi + 0x78], edi
jne 0x4726a6
mov eax, dword [esi]
test byte [eax + 0x44], 8
jne 0x4726a6
mov byte [esi + 0x17], 1
mov ecx, esi
call fcn.00425fe0
mov edi, eax
mov dword [esp + 0x58], eax
test edi, edi
je 0x4727fa
mov eax, dword [esp + 0x74]
cmp byte [eax], 9
jne 0x4726cf
mov edx, dword [esp + 0x1c]
mov ecx, esi
call fcn.0046bb10
mov eax, dword [esp + 0x1c]
xor ecx, ecx
mov dword [esp + 0x3c], ecx
cmp dword [eax + 0x30], ecx
jne 0x4727ae
mov edx, dword [esp + 0x14]
cmp ecx, dword [edx]
jge 0x472835
lea eax, [ecx + ecx*4]
add eax, eax
mov edx, dword [edx + eax*8 + 0x1c]
test edx, edx
je 0x472797
mov edi, dword [esp + 0x14]
mov eax, dword [edi + eax*8 + 0x18]
mov edi, dword [esp + 0x58]
mov dword [esp + 0x10], eax
movsx eax, word [eax + 0x2a]
mov dword [esp + 0x44], eax
mov eax, dword [edx]
mov eax, dword [eax]
cmp dword [esp + 0x44], eax
jne 0x4727e1
test byte [edx + 8], 8
jne 0x472797
cmp dword [edx + 0x2c], 0
je 0x472744
test ecx, ecx
jne 0x472744
mov edx, dword [esp + 0x14]
cmp dword [edx], 1
je 0x47279b
test byte [edx + 0x7c], 0xa
jne 0x47279b
push dword [esp + 0x30]
mov edx, dword [esp + 0x20]
push ecx
mov ecx, esi
call fcn.004701a0
mov ecx, dword [esp + 0x44]
add esp, 8
mov edx, dword [esp + 0x1c]
test eax, eax
mov eax, 0xffffffff
cmovne ecx, eax
mov eax, dword [esp + 0x34]
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x14], edx
cmp byte [eax + 0x49], 0
jne 0x4752d6
mov eax, dword [esp + 0x74]
cmp byte [eax], 8
jbe 0x47279b
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x90], eax
jmp 0x47279b
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
inc ecx
mov dword [esp + 0x3c], ecx
cmp dword [eax + 0x30], 0
je 0x4726e6
push dword [esp + 0x74]
mov edx, dword [esp + 0x20]
mov ecx, esi
call fcn.0046d170
mov ecx, dword [esp + 0x88]
add esp, 4
mov dword [esi + 0x19c], ecx
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.004e5962
mov esp, ebp
pop ebp
ret
push eax
mov eax, dword [esp + 0x14]
push dword [eax]
push dword [esp + 0x4c]
push 0x53c28c
push esi
call fcn.004081e0
add esp, 0x14
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x84]
mov dword [esi + 0x19c], ecx
mov ecx, dword [esp + 0xec]
test ecx, ecx
je 0x475306
cmp dword [edi + 0x1d0], 0
je 0x4752dd
mov edx, ecx
mov ecx, edi
call fcn.004050c0
jmp 0x475306
xor eax, eax
mov dword [esp + 0x2c], eax
cmp dword [edx], eax
jle 0x472ecf
mov dword [esp + 0x14], edx
mov dword [esp + 0x58], edi
nop dword [eax + eax]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 8
add ecx, edx
mov dword [esp + 8], ecx
mov eax, dword [ecx + 0x40]
or eax, dword [ecx + 0x44]
jne 0x472887
push dword [ecx + 4]
lea edx, [eax + 0x14]
push 0x538284
push dword [ecx + 8]
mov ecx, esi
call fcn.00449a30
mov ecx, dword [esp + 0x14]
add esp, 0xc
mov edx, dword [esp + 0x14]
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x60], eax
test eax, eax
je 0x472ebe
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x472912
test byte [ecx + 0x28], 0x10
jne 0x472eba
mov eax, dword [ecx + 0x1c]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0xc]
cmp dword [eax + 0x30], ecx
jg 0x4728d7
push 0
push edx
push dword [esp + 0x44]
mov edx, 0xe
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x472eba
mov esi, dword [esp + 0x3c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x472eba
mov ecx, dword [esp + 0x1c]
call fcn.0043c330
mov edx, dword [esp + 8]
add dword [esi + 0x198], eax
test byte [edx + 0x24], 0x20
jne 0x472947
mov eax, dword [esp + 0x1c]
mov ecx, esi
push dword [edx + 0x30]
mov edx, dword [esp + 0x64]
push dword [eax + 0x20]
call fcn.00470860
mov edx, dword [esp + 0x10]
add esp, 8
cmp dword [esp + 0x2c], 0
mov eax, dword [esi + 0x1b8]
mov dword [esp + 0x28], eax
mov eax, dword [edx + 8]
mov dword [esi + 0x1b8], eax
jne 0x472b1f
mov eax, dword [esp + 0x14]
cmp dword [eax], 1
je 0x472978
test byte [eax + 0x7c], 0xa
je 0x472b1f
mov eax, dword [edi + 0x88]
inc dword [esi + 0x2c]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0x2c]
mov dword [edx + 0x1c], eax
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0xc]
cmp dword [eax + 0x30], ecx
jg 0x4729be
mov eax, dword [esp + 0x5c]
mov edx, 0xf
inc eax
mov ecx, edi
push eax
push 0
push dword [esp + 0x44]
call fcn.00426240
mov edx, dword [esp + 0x14]
add esp, 0xc
jmp 0x4729fd
mov esi, dword [esp + 0x3c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x5c]
inc esi
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x5c]
mov ecx, esi
inc eax
mov byte [esp + 0xb4], 0xd
mov dword [edx + 0x18], eax
mov eax, dword [edx + 0x1c]
mov dword [esp + 0xb8], eax
mov al, byte [esi + 0x1a0]
mov byte [edx + 0x2c], al
lea eax, [esp + 0xb4]
mov edx, dword [esp + 0x60]
push eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
call fcn.00472500
mov edx, dword [esp + 0xc]
add esp, 4
mov eax, dword [esp + 0x60]
mov ecx, dword [edx + 0x10]
mov ax, word [eax + 6]
mov word [ecx + 0x2c], ax
or dword [edx + 0x28], 0x10
mov eax, dword [esp + 0xbc]
mov dword [edx + 0x20], eax
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x88]
mov edx, dword [edx + 0x1c]
cmp dword [eax + 0x30], ecx
jg 0x472a9f
push 0
push 0
push edx
mov edx, 0x40
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x472ad5
mov esi, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x40
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0xc]
mov byte [eax + 0x13], 0
mov eax, dword [edi + 0xc]
mov dword [eax + 0x1c], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x88]
cmp byte [eax + 0x49], 0
je 0x472b01
mov eax, 0x550080
mov dword [eax + 8], edx
jmp 0x472e88
mov ecx, dword [esp + 0x5c]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x472e88
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
mov dword [edx + 0x1c], ecx
mov eax, dword [edi + 0x88]
mov dword [esp + 0x64], eax
mov eax, dword [edi + 0xc]
mov esi, dword [esp + 0x64]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x30], esi
mov esi, dword [esp + 0xc]
jg 0x472b6c
push 0
push ecx
push 0
mov edx, 0x43
mov ecx, edi
call fcn.00426240
mov edx, dword [esp + 0x14]
add esp, 0xc
mov dword [esp + 0x64], eax
jmp 0x472bae
mov ecx, dword [esp + 0x64]
mov esi, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x64]
inc eax
test byte [edx + 0x28], 8
mov dword [edx + 0x18], eax
jne 0x472c23
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x5c], ecx
cmp dword [eax + 0x30], ecx
jg 0x472be9
push 0
push 0
push 0
mov edx, 0x14
mov ecx, edi
call fcn.00426240
mov edx, dword [esp + 0x14]
add esp, 0xc
mov dword [esp + 0x5c], eax
jmp 0x472c23
mov esi, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x14
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x14]
add eax, 8
mov dword [esp + 0x38], eax
cmp eax, edx
jae 0x472d5a
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x20], ecx
test ecx, ecx
je 0x472ca4
test byte [eax + 0x28], 0x10
jne 0x472ca4
mov ecx, dword [eax + 8]
mov dword [esp + 0x10], ecx
test ecx, ecx
je 0x472ca4
push dword [edx + 4]
push dword [eax + 4]
call fcn.00408320
add esp, 8
test eax, eax
jne 0x472c9c
mov eax, dword [esp + 8]
push dword [eax + 8]
push dword [esp + 0x14]
call fcn.00408320
add esp, 8
test eax, eax
jne 0x472c9c
mov eax, dword [esp + 0x20]
xor ecx, ecx
push 0xffffffffffffffff
push dword [eax + 0x20]
mov eax, dword [esp + 0x10]
mov edx, dword [eax + 0x14]
mov edx, dword [edx + 0x20]
call fcn.00444740
add esp, 8
test eax, eax
je 0x472cb4
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x38]
add eax, 0x50
mov dword [esp + 0x38], eax
cmp eax, edx
jb 0x472c36
jmp 0x472d5a
mov edx, dword [esp + 0x38]
test edx, edx
je 0x472d56
mov eax, dword [edx + 0x30]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x30]
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0xc]
cmp dword [eax + 0x30], ecx
jg 0x472cff
push 0
push dword [esp + 0x48]
mov edx, 0x6a
mov ecx, edi
push dword [esp + 0x44]
call fcn.00426240
mov edx, dword [esp + 0x44]
add esp, 0xc
jmp 0x472d39
mov esi, dword [esp + 0x3c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x6a
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov al, byte [edx + 0x2c]
mov ecx, dword [esp + 8]
mov byte [ecx + 0x2c], al
mov eax, dword [edx + 0x14]
mov edx, dword [esp + 0x60]
movzx eax, word [eax + 6]
mov word [edx + 6], ax
mov edx, eax
jmp 0x472db8
mov edx, dword [esp + 8]
mov eax, dword [edx + 0x30]
mov ecx, esi
mov dword [esp + 0xb8], eax
mov al, byte [esi + 0x1a0]
mov byte [edx + 0x2c], al
lea eax, [esp + 0xb4]
mov edx, dword [esp + 0x60]
push eax
mov byte [esp + 0xb8], 0xc
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
call fcn.00472500
mov eax, dword [esp + 0x64]
add esp, 4
mov ecx, dword [esp + 8]
movzx edx, word [eax + 6]
cmp dword [esp + 0x5c], 0
mov eax, dword [ecx + 0x10]
mov word [eax + 0x2c], dx
je 0x472df7
mov eax, dword [edi]
mov edx, dword [edi + 0x88]
cmp byte [eax + 0x49], 0
je 0x472ddb
mov eax, 0x550080
jmp 0x472df4
mov ecx, dword [esp + 0x5c]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 8]
mov dword [eax + 8], edx
mov eax, dword [edi + 0xc]
mov edx, dword [edi + 0x88]
mov ecx, dword [ecx + 0x1c]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x30], edx
jg 0x472e24
push 0
push 0
push ecx
mov edx, 0x3f
mov ecx, edi
call fcn.00426240
add esp, 0xc
mov edx, eax
jmp 0x472e5e
mov esi, dword [esp + 0x10]
lea eax, [edx + 1]
mov dword [edi + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x64]
test ecx, ecx
jns 0x472e6d
mov ecx, dword [edi + 0x88]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x49], 0
je 0x472e7c
mov eax, 0x550080
jmp 0x472e85
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov eax, dword [esp + 0x34]
mov byte [esi + 0x13], 0
mov dword [esi + 0x1c], 0
cmp byte [eax + 0x49], 0
jne 0x4752d6
mov ecx, dword [esp + 0x1c]
call fcn.0043c330
sub dword [esi + 0x198], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x1b8], eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x2c], eax
cmp eax, dword [edx]
jl 0x472850
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x20]
mov edx, dword [ecx]
mov dword [esp + 0x2c], eax
mov eax, dword [ecx + 0x24]
mov dword [esp + 0x48], eax
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x5c], eax
mov al, byte [ecx + 8]
and al, 1
mov dword [esp + 0x64], edx
mov byte [esp + 0x120], al
mov eax, dword [ecx + 8]
and al, 9
cmp al, 1
jne 0x472f3f
mov ecx, dword [esp + 0x90]
push 0xffffffffffffffff
call fcn.00444ad0
add esp, 4
test eax, eax
jne 0x472f3f
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x34]
push 0
and dword [eax + 8], 0xfffffffe
call fcn.0043d030
mov ecx, eax
add esp, 4
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x48], ecx
mov dword [eax + 0x24], ecx
mov edx, dword [esp + 0x90]
test edx, edx
je 0x473070
mov eax, dword [esp + 0x64]
mov ecx, esi
push dword [eax]
push 0
call fcn.0046aca0
mov dword [esp + 0x20], eax
add esp, 8
mov eax, dword [esi + 0x28]
mov dword [esp + 0x98], eax
mov dword [esp + 0x3c], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x64]
mov edx, dword [edi + 0x88]
mov dword [esp + 0x28], edx
mov ecx, dword [eax]
mov eax, dword [esp + 0x90]
mov eax, dword [eax]
inc eax
add ecx, eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x30], edx
jg 0x472fbc
push 0
push ecx
push dword [esp + 0x44]
mov edx, 0x6c
mov ecx, edi
call fcn.00426240
mov edx, eax
add esp, 0xc
mov dword [esp + 0x28], edx
jmp 0x472ff6
mov esi, dword [esp + 0x3c]
lea eax, [edx + 1]
mov dword [edi + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x6c
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x49], 0
je 0x473021
mov ecx, dword [esp + 0x18]
mov edx, 0xfffffff7
push ecx
mov ecx, dword [edi]
call fcn.00426b10
mov edx, dword [esp + 0x2c]
add esp, 4
mov dword [esp + 0xa4], edx
jmp 0x47307b
test edx, edx
jns 0x47302c
mov eax, dword [edi + 0x88]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x18]
je 0x47305c
push 0xfffffffffffffff7
push ecx
mov edx, eax
mov ecx, edi
call fcn.00426c90
mov edx, dword [esp + 0x30]
add esp, 8
mov dword [esp + 0xa4], edx
jmp 0x47307b
test ecx, ecx
je 0x473067
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xf7
mov dword [esp + 0xa4], edx
jmp 0x47307b
mov dword [esp + 0xa4], 0xffffffff
mov ecx, dword [esp + 0x74]
cmp byte [ecx], 0xc
jne 0x4730ed
mov eax, dword [esp + 0x64]
mov edx, dword [eax]
mov eax, dword [ecx + 4]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0xc]
cmp dword [eax + 0x30], ecx
jg 0x4730b7
push 0
push edx
push dword [esp + 0x44]
mov edx, 0x6c
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x4730ed
mov esi, dword [esp + 0x3c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x6c
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
lea eax, [edi + 0xc]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ecx
mov edx, dword [ecx + 0x44]
mov dword [esp + 0x3c], edx
lea eax, [edx + 1]
mov dword [ecx + 0x44], eax
lea eax, [edx - 1]
test edx, eax
jne 0x473131
lea eax, [edx*8 + 4]
mov edx, dword [ecx + 0x48]
mov ecx, dword [ecx]
push 0
push eax
call fcn.004055e0
mov ecx, dword [esp + 0x18]
add esp, 8
mov edx, dword [esp + 0x3c]
mov dword [ecx + 0x48], eax
mov eax, dword [ecx + 0x48]
test eax, eax
je 0x47313f
mov dword [eax + edx*4], 0xffffffff
mov eax, dword [esp + 0x1c]
not edx
mov dword [esp + 0x3c], edx
test dword [eax + 8], 0x4000
jne 0x47315b
mov ecx, 0x140
mov word [eax + 6], cx
push edx
mov edx, eax
mov ecx, esi
call fcn.0046c3d0
mov eax, dword [esp + 0x20]
add esp, 4
cmp dword [eax + 0xc], 0
jne 0x4731a4
mov ecx, dword [esp + 0xa4]
test ecx, ecx
js 0x4731a4
mov eax, dword [edi]
cmp byte [eax + 0x49], 0
je 0x47318c
mov eax, 0x550080
jmp 0x473195
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov byte [eax], 0x6d
or byte [esp + 0xac], 1
mov eax, dword [esp + 0x1c]
test byte [eax + 8], 1
je 0x4732dc
mov eax, dword [esi + 0x28]
mov ecx, esi
mov dword [esp + 0x124], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x1c]
push 0
push 0
mov edx, dword [eax]
call fcn.0046aca0
mov edx, dword [edi + 0x88]
add esp, 8
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], edx
mov eax, dword [eax]
cmp dword [eax + 0x30], edx
jg 0x473210
push 0
push 0
push ecx
mov edx, 0x6c
mov ecx, edi
call fcn.00426240
mov edx, eax
add esp, 0xc
mov dword [esp + 0x28], edx
jmp 0x47324a
mov esi, dword [esp + 0x10]
lea eax, [edx + 1]
mov dword [edi + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x6c
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x49], 0
je 0x47326e
mov ecx, dword [esp + 0x18]
mov edx, 0xfffffff7
push ecx
mov ecx, dword [edi]
call fcn.00426b10
mov edx, dword [esp + 0x2c]
add esp, 4
jmp 0x4732ad
test edx, edx
jns 0x473279
mov eax, dword [edi + 0x88]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x18]
je 0x4732a2
push 0xfffffffffffffff7
push ecx
mov edx, eax
mov ecx, edi
call fcn.00426c90
mov edx, dword [esp + 0x30]
add esp, 8
jmp 0x4732ad
test ecx, ecx
je 0x4732ad
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xf7
mov dword [esp + 0x128], edx
mov eax, dword [edi + 0x88]
test eax, eax
jle 0x4732ce
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [edi + 0x58]
mov word [eax + ecx*4 - 0x12], dx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x121], 3
jmp 0x4732e4
mov byte [esp + 0x121], 0
cmp dword [esp + 0x30], 0
mov edx, dword [esp + 0x48]
jne 0x473435
test edx, edx
jne 0x473435
mov ax, word [eax + 8]
xor ecx, ecx
cmp byte [esp + 0x120], cl
mov edx, 0x100
cmovne ecx, edx
mov edx, 0x4000
and ax, dx
mov edx, dword [esp + 0x1c]
or cx, ax
movzx ecx, cx
movsx eax, word [edx + 6]
push eax
push ecx
push dword [edx]
mov edx, dword [esp + 0x20]
mov ecx, esi
push dword [esp + 0x9c]
push dword [esp + 0x3c]
call fcn.00488860
add esp, 0x14
mov dword [esp + 0x2c], eax
test eax, eax
je 0x4727fa
mov edx, dword [esp + 0x1c]
movzx ecx, word [eax + 0x48]
cmp cx, word [edx + 6]
jge 0x473361
mov word [edx + 6], cx
cmp byte [esp + 0x120], 0
je 0x473389
mov cl, byte [eax + 0x33]
movzx edx, byte [esp + 0x121]
test cl, cl
movzx eax, cl
cmovne edx, eax
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x121], dl
mov edx, dword [esp + 0x90]
test edx, edx
je 0x4733b7
movsx ecx, byte [eax + 0x2f]
mov dword [esp + 0x94], ecx
mov al, byte [eax + 0x34]
mov byte [esp + 0xad], al
xor eax, eax
cmp ecx, dword [edx]
cmove edx, eax
mov dword [esp + 0x90], edx
mov eax, dword [esp + 0xa4]
test eax, eax
js 0x4733f9
test edx, edx
jne 0x4733f9
mov ecx, dword [edi]
cmp byte [ecx + 0x49], dl
jne 0x4733f9
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
push dword [eax + ecx*4 + 0x10]
movsx edx, byte [eax + ecx*4 + 1]
lea esi, [eax + ecx*4]
mov ecx, dword [edi]
call fcn.00426b10
mov word [esi], 0xa6
add esp, 4
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x2c]
mov ecx, esi
mov edx, dword [esp + 0x1c]
push dword [eax + 0x24]
push dword [eax + 0x20]
lea eax, [esp + 0x128]
push dword [esp + 0x7c]
push eax
lea eax, [esp + 0xa0]
push eax
push 0xffffffffffffffff
call fcn.004698e0
mov ecx, dword [esp + 0x44]
add esp, 0x18
call fcn.004896d0
jmp 0x475244
mov dword [esp + 0x18], 0
mov dword [esp + 0x54], 0
test edx, edx
je 0x473490
mov ecx, dword [eax]
mov eax, dword [ecx]
test eax, eax
jle 0x473466
add ecx, 0x1a
xor edi, edi
lea ecx, [ecx + 0x18]
dec eax
mov word [ecx - 0x18], di
test eax, eax
jg 0x473454
mov edi, dword [esp + 0x58]
mov eax, dword [edx]
test eax, eax
jle 0x47347e
lea ecx, [edx + 0x1a]
nop
xor edx, edx
lea ecx, [ecx + 0x18]
dec eax
mov word [ecx - 0x18], dx
test eax, eax
jg 0x473470
mov eax, dword [esp + 0x1c]
cmp word [eax + 6], 0x42
jle 0x473496
mov ecx, 0x42
jmp 0x473492
xor ecx, ecx
mov word [eax + 6], cx
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x48]
push 0xffffffffffffffff
call fcn.00444ad0
add esp, 4
mov ecx, 1
test eax, eax
mov dword [esp + 0x44], ecx
mov eax, 0
cmove eax, ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 8]
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov edx, dword [ecx + 0x44]
mov dword [esp + 0x6c], edx
lea eax, [edx + 1]
mov dword [ecx + 0x44], eax
lea eax, [edx - 1]
test edx, eax
jne 0x473502
lea eax, [edx*8 + 4]
mov edx, dword [ecx + 0x48]
mov ecx, dword [ecx]
push 0
push eax
call fcn.004055e0
mov ecx, dword [esp + 0x28]
add esp, 8
mov edx, dword [esp + 0x6c]
mov dword [ecx + 0x48], eax
mov eax, dword [ecx + 0x48]
test eax, eax
je 0x473510
mov dword [eax + edx*4], 0xffffffff
mov eax, dword [esp + 0x14]
xorps xmm0, xmm0
mov ecx, dword [esp + 0x48]
not edx
mov dword [esp + 0x104], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0x10c], eax
mov eax, dword [esi + 0x2c]
inc eax
mov dword [esp + 0x6c], edx
mov dword [esp + 0x108], 0
movlpd qword [esp + 0x110], xmm0
movlpd qword [esp + 0x118], xmm0
mov dword [esp + 0x100], esi
mov dword [esp + 0xe0], eax
test ecx, ecx
je 0x473574
mov eax, dword [ecx]
mov dword [esp + 0xdc], eax
jmp 0x47357f
mov dword [esp + 0xdc], 0
mov edx, dword [esp + 0x64]
mov dword [esp + 0xe8], ecx
lea ecx, [esp + 0x100]
call fcn.00444fe0
mov edx, dword [esp + 0x90]
lea ecx, [esp + 0x100]
call fcn.00444fe0
mov edx, dword [esp + 0x5c]
test edx, edx
je 0x473668
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x473622
mov eax, dword [esp + 0x1c]
xorps xmm0, xmm0
add eax, 0x20
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], eax
lea ecx, [esp + 0xb4]
lea eax, [esp + 0x88]
movlpd qword [esp + 0xbc], xmm0
movlpd qword [esp + 0xc4], xmm0
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], 0x472390
mov dword [esp + 0xcc], eax
call fcn.00439220
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x5c]
mov eax, dword [ecx + 0x20]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x100]
mov dword [esp + 0xb8], 0x444d40
lea ecx, [esp + 0xb4]
mov dword [esp + 0xbc], 0x444fc0
mov dword [esp + 0xc0], 0x444fd0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xcc], eax
call fcn.00439220
mov edx, dword [esp + 0xfc]
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xf4], ecx
test edx, edx
jle 0x4736eb
mov ax, word [esp + 0x11c]
xor esi, esi
xor edi, edi
nop dword [eax]
or ax, 8
lea ecx, [esp + 0x100]
mov word [esp + 0x11c], ax
mov eax, dword [esp + 0xf8]
mov edx, dword [esi + eax]
mov edx, dword [edx + 0x14]
call fcn.00444fe0
mov ax, word [esp + 0x11c]
lea esi, [esi + 0x10]
mov edx, dword [esp + 0xfc]
mov ecx, 0xfff7
and ax, cx
inc edi
mov word [esp + 0x11c], ax
cmp edi, edx
jl 0x473690
mov ecx, dword [esp + 0xf0]
mov edi, dword [esp + 0x58]
mov esi, dword [esp + 0xc]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x49], 0
jne 0x4752d6
cmp dword [esp + 0x48], 0
je 0x474a64
mov eax, dword [esi + 0x28]
mov edx, dword [esp + 0x48]
push ecx
mov dword [esp + 0xd8], eax
mov ecx, esi
inc eax
push 0
mov dword [esi + 0x28], eax
call fcn.0046aca0
mov ecx, dword [esp + 0xdc]
add esp, 8
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x78], eax
mov eax, dword [edi + 0x88]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 8]
mov esi, dword [esp + 0x28]
mov dword [esp + 0x20], ecx
mov eax, dword [eax]
cmp dword [eax + 0x30], esi
mov esi, dword [esp + 0xc]
jg 0x47377b
push 0
push edx
push ecx
mov edx, 0x6d
mov ecx, edi
call fcn.00426240
mov edx, eax
add esp, 0xc
mov dword [esp + 0x28], edx
jmp 0x4737b9
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x6d
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x49], 0
je 0x4737d7
mov edx, dword [esp + 0x78]
push edx
mov edx, 0xfffffff7
call fcn.00426b10
add esp, 4
jmp 0x473812
test edx, edx
jns 0x4737e2
mov eax, dword [edi + 0x88]
dec eax
mov edx, dword [esp + 0x78]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x473807
push 0xfffffffffffffff7
push edx
mov edx, eax
mov ecx, edi
call fcn.00426c90
add esp, 8
jmp 0x473812
test edx, edx
je 0x473812
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf7
mov eax, dword [esi + 0x2c]
mov edx, dword [esp + 8]
inc eax
mov edi, dword [esp + 0x58]
mov dword [esp + 0x70], eax
inc eax
mov dword [esp + 0x4c], eax
inc eax
mov dword [esi + 0x2c], eax
mov ecx, dword [edx]
mov dword [esp + 0x20], ecx
mov eax, dword [ecx + 0x44]
mov dword [esp + 0x68], eax
inc eax
mov dword [ecx + 0x44], eax
mov eax, dword [esp + 0x68]
dec eax
test dword [esp + 0x68], eax
jne 0x47386d
mov eax, dword [esp + 0x68]
mov edx, dword [ecx + 0x48]
mov ecx, dword [ecx]
push 0
lea eax, [eax*8 + 4]
push eax
call fcn.004055e0
mov ecx, dword [esp + 0x28]
add esp, 8
mov edx, dword [esp + 8]
mov dword [ecx + 0x48], eax
mov eax, dword [ecx + 0x48]
test eax, eax
je 0x47387f
mov ecx, dword [esp + 0x68]
mov dword [eax + ecx*4], 0xffffffff
inc dword [esi + 0x2c]
mov ecx, dword [edx]
mov eax, dword [esi + 0x2c]
not dword [esp + 0x68]
mov dword [esp + 0x30], eax
mov edx, dword [ecx + 0x44]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x38], edx
lea eax, [edx + 1]
mov dword [ecx + 0x44], eax
lea eax, [edx - 1]
test edx, eax
jne 0x4738c9
lea eax, [edx*8 + 4]
mov edx, dword [ecx + 0x48]
mov ecx, dword [ecx]
push 0
push eax
call fcn.004055e0
mov ecx, dword [esp + 0x28]
add esp, 8
mov edx, dword [esp + 0x38]
mov dword [ecx + 0x48], eax
mov eax, dword [ecx + 0x48]
test eax, eax
je 0x4738d7
mov dword [eax + edx*4], 0xffffffff
mov eax, dword [esi + 0x2c]
not edx
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x48]
lea ecx, [eax + 1]
mov dword [esp + 0x60], ecx
mov ecx, dword [edx]
add ecx, eax
mov dword [esi + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x7c], eax
mov eax, dword [edx]
add eax, ecx
mov dword [esi + 0x2c], eax
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x47392a
push 0
push dword [esp + 0x50]
mov edx, 0x43
mov ecx, edi
push 0
call fcn.00426240
add esp, 0xc
jmp 0x473960
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x47398a
push 0
push dword [esp + 0x74]
mov edx, 0x43
mov ecx, edi
push 0
call fcn.00426240
add esp, 0xc
jmp 0x4739c0
mov edx, dword [esp + 0x70]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x60]
mov ecx, dword [edi + 0x88]
dec edx
mov eax, dword [eax]
add edx, eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x4739f6
push edx
push dword [esp + 0x64]
mov edx, 0x46
mov ecx, edi
push 0
call fcn.00426240
add esp, 0xc
jmp 0x473a2c
mov esi, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x473a58
push 0
push dword [esp + 0x3c]
mov edx, 0xe
mov ecx, edi
push dword [esp + 0x38]
call fcn.00426240
add esp, 0xc
jmp 0x473a8e
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x38]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x10], 0
mov ecx, 0x240
mov edx, dword [esp + 0x14]
mov eax, 0x40
cmovne eax, ecx
mov ecx, esi
push 0
movzx eax, ax
push eax
push 0
push dword [esp + 0x54]
push dword [esp + 0x3c]
call fcn.00488860
mov edx, eax
add esp, 0x14
mov dword [esp + 0x44], edx
test edx, edx
je 0x4727fa
mov ecx, dword [esp + 0x48]
movsx eax, byte [edx + 0x2f]
cmp eax, dword [ecx]
jne 0x473ae3
xor eax, eax
mov dword [esp + 0x2c], eax
jmp 0x474064
cmp byte [esp + 0x120], 0
je 0x473afc
mov eax, dword [esp + 0x1c]
mov edx, 0x53c2b4
test byte [eax + 8], 1
je 0x473b01
mov edx, 0x53c2c0
mov ecx, esi
call fcn.0046ad20
cmp dword [esp + 0xf0], 0
mov eax, dword [esp + 0x48]
mov dword [esp + 0x2c], 1
mov eax, dword [eax]
mov edx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x50], eax
jle 0x473b7a
mov edi, dword [esp + 0xec]
mov esi, dword [esp + 0xf0]
add edi, 0xc
nop dword [eax + eax]
mov ecx, dword [edi]
lea edi, [edi + 0x18]
mov eax, dword [esp + 0x50]
inc eax
mov dword [esp + 0x20], ecx
cmp ecx, edx
cmovl eax, dword [esp + 0x50]
cmp ecx, edx
mov dword [esp + 0x50], eax
lea eax, [edx + 1]
cmovl eax, edx
mov edx, eax
sub esi, 1
jne 0x473b40
mov edx, dword [esp + 0x50]
mov edi, dword [esp + 0x58]
mov esi, dword [esp + 0xc]
mov dword [esp + 0x50], edx
jmp 0x473b7e
mov edx, dword [esp + 0x50]
cmp edx, 1
jne 0x473bab
mov al, byte [esi + 0x13]
test al, al
jne 0x473b96
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x14], eax
jmp 0x473bd4
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x15c]
mov dword [esp + 0x14], eax
jmp 0x473bd4
mov ecx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x14], eax
cmp edx, ecx
jg 0x473bc5
add eax, edx
sub ecx, edx
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], ecx
jmp 0x473bd4
mov eax, dword [esi + 0x2c]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x14], ecx
mov dword [esi + 0x2c], eax
xor ecx, ecx
mov dword [esp + 0x54], ecx
cmp byte [esi + 0x19], cl
jbe 0x473c15
lea edx, [esi + 0xa0]
cmp byte [edx - 6], 0
je 0x473c05
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x473c05
movzx ecx, al
mov eax, dword [edx]
mov dword [esi + ecx*4 + 0x15c], eax
inc byte [esi + 0x13]
mov ecx, dword [esp + 0x54]
movzx eax, byte [esi + 0x19]
inc ecx
add edx, 0x14
mov dword [esp + 0x54], ecx
cmp ecx, eax
jl 0x473be5
mov edx, dword [esp + 0x48]
mov ecx, esi
push 0
push 0
push dword [esp + 0x1c]
mov byte [esi + 0x19], 0
call fcn.00443740
mov ecx, dword [esp + 0xfc]
add esp, 0xc
mov dword [esp + 0x80], 0
test ecx, ecx
jle 0x473d33
mov edi, dword [esp + 0x14]
add edi, dword [esp + 0x18]
xor edx, edx
mov dword [esp + 0x20], edx
nop word [eax + eax]
mov eax, dword [esp + 0xec]
mov esi, dword [esp + 0x18]
cmp dword [edx + eax + 0xc], esi
mov esi, dword [esp + 0xc]
jl 0x473d11
push 0
push edi
push dword [edx + eax + 4]
mov ecx, esi
push dword [edx + eax + 8]
mov edx, dword [edx + eax]
call fcn.004413e0
add esp, 0x10
mov dword [esp + 0x54], eax
cmp eax, edi
je 0x473d01
mov ecx, dword [esi + 8]
mov dword [esp + 0x88], ecx
mov eax, dword [ecx + 0xc]
mov edx, dword [ecx + 0x88]
cmp dword [eax + 0x30], edx
jg 0x473cc8
mov edx, dword [esp + 0x54]
push 0
push edi
push edx
mov edx, 0x4c
call fcn.00426240
add esp, 0xc
jmp 0x473d01
lea eax, [edx + 1]
mov dword [ecx + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 0x58]
mov dword [eax + ecx*4], 0x4c
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
inc dword [esp + 0x18]
inc edi
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x80]
add edx, 0x18
inc eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x80], eax
cmp eax, ecx
jl 0x473c60
mov edi, dword [esp + 0x58]
mov al, byte [esi + 0x13]
test al, al
jne 0x473d42
inc dword [esi + 0x2c]
mov edx, dword [esi + 0x2c]
jmp 0x473d51
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov edx, dword [esi + eax*4 + 0x15c]
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x18], edx
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x473d84
push edx
push dword [esp + 0x54]
mov edx, 0x63
mov ecx, edi
push dword [esp + 0x1c]
call fcn.00426240
mov edx, dword [esp + 0x24]
add esp, 0xc
jmp 0x473dba
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x63
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xd4]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x473df2
push 0
push edx
push dword [esp + 0x28]
mov edx, 0x7e
mov ecx, edi
call fcn.00426240
mov edx, dword [esp + 0x24]
add esp, 0xc
jmp 0x473e28
mov esi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x7e
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test edx, edx
je 0x473e77
mov al, byte [esi + 0x13]
mov byte [esp + 0x27], al
cmp al, 8
jae 0x473e77
movzx edi, byte [esi + 0x19]
lea eax, [esi + 0x94]
xor ecx, ecx
mov dword [esp + 0x88], edi
test edi, edi
mov edi, dword [esp + 0x58]
je 0x473e68
cmp dword [eax + 0xc], edx
je 0x473eda
inc ecx
add eax, 0x14
cmp ecx, dword [esp + 0x88]
jl 0x473e52
movzx eax, byte [esp + 0x27]
mov dword [esi + eax*4 + 0x15c], edx
inc byte [esi + 0x13]
mov eax, dword [esp + 0x50]
cmp eax, 1
jne 0x473ee6
cmp dword [esp + 0x14], 0
je 0x473f08
mov al, byte [esi + 0x13]
mov byte [esp + 0x27], al
cmp al, 8
jae 0x473f08
movzx edx, byte [esi + 0x19]
lea eax, [esi + 0x94]
xor ecx, ecx
test edx, edx
je 0x473ec5
nop word [eax + eax]
mov edi, dword [esp + 0x14]
cmp dword [eax + 0xc], edi
mov edi, dword [esp + 0x58]
je 0x473ee0
inc ecx
add eax, 0x14
cmp ecx, edx
jl 0x473eb0
movzx eax, byte [esp + 0x27]
mov ecx, dword [esp + 0x14]
mov dword [esi + eax*4 + 0x15c], ecx
inc byte [esi + 0x13]
jmp 0x473f08
mov byte [eax + 6], 1
jmp 0x473e77
mov byte [eax + 6], 1
jmp 0x473f08
mov edx, dword [esp + 0x14]
mov ecx, esi
push eax
call fcn.00440fd0
mov eax, dword [esp + 0x54]
add esp, 4
cmp eax, dword [esi + 0x1c]
jle 0x473f08
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x14]
mov dword [esi + 0x20], eax
mov ecx, dword [esp + 0x44]
call fcn.004896d0
mov edx, dword [esi + 0x28]
mov dword [esp + 0x18], edx
mov dword [esp + 0xd8], edx
lea eax, [edx + 1]
mov dword [esi + 0x28], eax
mov al, byte [esi + 0x13]
test al, al
jne 0x473f34
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x473f43
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x15c]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x473f72
push dword [esp + 0x50]
mov ecx, edi
push dword [esp + 0x58]
push edx
mov edx, 0x6f
call fcn.00426240
add esp, 0xc
jmp 0x473fa8
mov esi, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x50]
mov dword [eax + ecx*4], 0x6f
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov edx, dword [esp + 0xd4]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x473fd8
push 0
push dword [esp + 0x70]
mov ecx, edi
push edx
mov edx, 0x23
call fcn.00426240
add esp, 0xc
jmp 0x47400e
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [eax + ecx*4], 0x23
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
xor ecx, ecx
mov byte [esp + 0xd1], 1
mov dword [esp + 0x20], ecx
cmp byte [esi + 0x19], cl
jbe 0x474057
lea edx, [esi + 0xa0]
cmp byte [edx - 6], 0
je 0x474047
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x474047
movzx ecx, al
mov eax, dword [edx]
mov dword [esi + ecx*4 + 0x15c], eax
inc byte [esi + 0x13]
mov ecx, dword [esp + 0x20]
movzx eax, byte [esi + 0x19]
inc ecx
add edx, 0x14
mov dword [esp + 0x20], ecx
cmp ecx, eax
jl 0x474027
mov edx, dword [esp + 0x44]
mov eax, 1
mov byte [esi + 0x19], 0
cmp dword [esp + 0x10], 0
je 0x4740c4
mov ecx, dword [esp + 0x34]
test byte [ecx + 0x44], 4
jne 0x4740c4
test eax, eax
jne 0x47407e
cmp byte [edx + 0x30], al
je 0x4740c4
mov dword [esp + 0x90], 0
mov eax, dword [edi]
cmp byte [eax + 0x49], 0
jne 0x4740c4
mov eax, dword [esp + 0xa4]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
push dword [eax + ecx*4 + 0x10]
movsx edx, byte [eax + ecx*4 + 1]
lea esi, [eax + ecx*4]
mov ecx, dword [edi]
call fcn.00426b10
mov word [esi], 0xa6
add esp, 4
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0xc]
mov eax, dword [edi + 0x88]
xor ecx, ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], ecx
cmp byte [esi + 0x19], cl
jbe 0x474110
lea edx, [esi + 0xa0]
nop
cmp byte [edx - 6], 0
je 0x474100
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x474100
movzx ecx, al
mov eax, dword [edx]
mov dword [esi + ecx*4 + 0x15c], eax
inc byte [esi + 0x13]
mov ecx, dword [esp + 0x10]
movzx eax, byte [esi + 0x19]
inc ecx
add edx, 0x14
mov dword [esp + 0x10], ecx
cmp ecx, eax
jl 0x4740e0
cmp dword [esp + 0x2c], 0
mov byte [esi + 0x19], 0
je 0x474183
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov edx, dword [esp + 0xd4]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x47414d
push dword [esp + 0x18]
mov ecx, edi
push dword [esp + 0x58]
push edx
mov edx, 0x79
call fcn.00426240
add esp, 0xc
jmp 0x474183
mov esi, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x48]
xor ecx, ecx
mov dword [esp + 0x54], ecx
mov edx, dword [eax]
test edx, edx
jle 0x47424a
lea edx, [eax + 4]
mov dword [esp + 0x50], edx
jmp 0x4741a4
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x7c]
add eax, ecx
cmp dword [esp + 0x2c], 0
mov dword [esp + 0x10], eax
je 0x474219
mov eax, dword [esp + 8]
mov edx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], edx
jg 0x4741e1
mov edx, dword [esp + 0x10]
push edx
push ecx
push dword [esp + 0x20]
mov edx, 0x60
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x47422e
lea eax, [edx + 1]
mov dword [edi + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x58]
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x47422e
mov byte [esp + 0xd0], 1
mov ecx, esi
mov edx, dword [edx]
push eax
call fcn.00443650
add esp, 4
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
add dword [esp + 0x50], 0x18
inc ecx
mov dword [esp + 0x54], ecx
mov edx, dword [eax]
cmp ecx, edx
jl 0x4741a0
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x474256
inc dword [ecx]
mov edx, dword [eax]
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x88], ecx
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x47428b
push edx
push dword [esp + 0x80]
mov edx, 0x5e
mov ecx, edi
push dword [esp + 0x68]
call fcn.00426240
add esp, 0xc
jmp 0x4742c8
mov esi, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x7c]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x88]
mov ecx, dword [edi]
cmp byte [ecx + 0x49], 0
je 0x4742e4
mov edx, dword [esp + 0x78]
push edx
mov edx, 0xfffffff7
call fcn.00426b10
add esp, 4
jmp 0x47431f
test eax, eax
jns 0x4742ef
mov eax, dword [edi + 0x88]
dec eax
mov edx, dword [esp + 0x78]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x474314
push 0xfffffffffffffff7
push edx
mov edx, eax
mov ecx, edi
call fcn.00426c90
add esp, 8
jmp 0x47431f
test edx, edx
je 0x47431f
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf7
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x10], ecx
mov eax, dword [eax]
lea edx, [ecx + 1]
cmp dword [eax + 0x30], ecx
jg 0x47434c
push edx
push 0
push edx
mov edx, 0x12
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x47437b
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
mov esi, dword [esp + 0xc]
mov dword [edi + 0x88], edx
mov dword [eax + ecx*4], 0x12
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 8]
mov dword [esp + 0x88], ecx
mov eax, dword [eax]
mov edx, dword [ecx + 0x88]
mov dword [esp + 0x18], eax
mov eax, dword [ecx + 0xc]
cmp dword [eax + 0x30], edx
jg 0x4743bc
mov edx, dword [esp + 0x18]
push edx
push dword [esp + 0x64]
mov edx, 0x4a
push dword [esp + 0x84]
call fcn.00426240
add esp, 0xc
jmp 0x4743f9
lea eax, [edx + 1]
mov dword [ecx + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x7c]
mov eax, dword [eax + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x60]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push dword [esp + 0x18]
mov edx, dword [esp + 0x80]
mov ecx, esi
call fcn.00440fd0
mov eax, dword [esp + 0xc]
add esp, 4
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x47443c
mov eax, dword [esp + 0x4c]
mov edx, 0xe
push 0
push dword [esp + 0x6c]
inc eax
mov ecx, edi
push eax
call fcn.00426240
add esp, 0xc
jmp 0x474477
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov esi, dword [esp + 0xc]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x88], eax
inc edx
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x4744a3
push 0
push dword [esp + 0x70]
mov edx, 0x30
mov ecx, edi
push dword [esp + 0x54]
call fcn.00426240
add esp, 0xc
jmp 0x4744d9
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [eax + ecx*4], 0x30
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x474505
push 0
push dword [esp + 0x3c]
mov edx, 0xe
mov ecx, edi
push dword [esp + 0x38]
call fcn.00426240
add esp, 0xc
jmp 0x47453b
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x38]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x88]
cmp byte [eax + 0x49], 0
je 0x474550
mov eax, 0x550080
jmp 0x474565
mov ecx, dword [esp + 0x10]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, esi
lea edx, [esp + 0xd0]
call fcn.00471e50
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x4745a0
push 0
push dword [esp + 0x74]
mov edx, 0x43
mov ecx, edi
push 1
call fcn.00426240
add esp, 0xc
jmp 0x4745d6
mov edx, dword [esp + 0x70]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x2c], 0
je 0x474644
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov edx, dword [esp + 0xd4]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x474610
push 0
push dword [esp + 0x24]
mov ecx, edi
push edx
mov edx, 3
call fcn.00426240
add esp, 0xc
jmp 0x474685
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 3
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x474681
mov ecx, dword [esp + 0x44]
call fcn.004896d0
mov eax, dword [edi]
cmp byte [eax + 0x49], 0
jne 0x474685
mov eax, dword [esp + 0x28]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
push dword [eax + ecx*4 + 0x10]
movsx edx, byte [eax + ecx*4 + 1]
lea esi, [eax + ecx*4]
mov ecx, dword [edi]
call fcn.00426b10
add esp, 4
mov word [esi], 0xa6
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [edx]
cmp dword [eax + 0x30], ecx
jg 0x4746b3
mov eax, dword [esp + 0x4c]
mov edx, 0xe
push 0
push dword [esp + 0x6c]
inc eax
mov ecx, edi
push eax
call fcn.00426240
add esp, 0xc
jmp 0x4746ee
mov esi, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
inc esi
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [edx]
cmp dword [eax + 0x30], ecx
jg 0x47471c
push 0
push dword [esp + 0x70]
mov edx, 0xd
mov ecx, edi
push 0
call fcn.00426240
mov edx, dword [esp + 0x14]
add esp, 0xc
jmp 0x474756
mov esi, dword [esp + 0x6c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x30], ecx
jg 0x474784
push 0
push dword [esp + 0x50]
mov edx, 0x43
mov ecx, edi
push 1
call fcn.00426240
mov edx, dword [esp + 0x14]
add esp, 0xc
jmp 0x4747be
mov esi, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx]
mov ecx, dword [edi + 0x88]
cmp dword [eax + 0x30], ecx
jg 0x4747ea
mov eax, dword [esp + 0x4c]
mov edx, 0x3f
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.00426240
mov edx, dword [esp + 0x14]
add esp, 0xc
jmp 0x474829
mov esi, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
inc esi
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx]
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x474849
mov eax, dword [esp + 0x68]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [edi + 0x88]
mov dword [ecx], eax
mov eax, dword [edx]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x88], ecx
lea edx, [ecx + 2]
cmp dword [eax + 0x30], ecx
jg 0x474876
push 0
push edx
push dword [esp + 0x78]
mov edx, 0x30
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x4748ac
mov esi, dword [esp + 0x70]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x30
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x4748d8
mov eax, dword [esp + 0x4c]
mov edx, 0x3f
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.00426240
add esp, 0xc
jmp 0x474913
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov esi, dword [esp + 0xc]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x88], eax
inc edx
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea edx, [esp + 0xd0]
mov ecx, esi
call fcn.00471d60
mov esi, dword [esp + 0x88]
push 0x10
inc esi
push esi
push dword [esp + 0x64]
push dword [esp + 0x18]
call fcn.00444130
push dword [esp + 0x20]
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x134]
push esi
push dword [esp + 0x8c]
mov esi, dword [esp + 0x28]
mov ecx, esi
push eax
lea eax, [esp + 0xb0]
push eax
push 0xffffffffffffffff
call fcn.004698e0
mov eax, dword [esp + 0x30]
add esp, 0x28
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x474995
mov eax, dword [esp + 0x4c]
mov edx, 0x3f
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.00426240
add esp, 0xc
jmp 0x4749cc
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
inc edx
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x4749ee
mov eax, dword [esp + 0x38]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [edi + 0x88]
mov dword [ecx], eax
lea edx, [esp + 0xd0]
mov ecx, esi
call fcn.00471ba0
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x474a29
push 0
push 0
push dword [esp + 0x38]
mov edx, 0x3f
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x475222
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x475222
mov ecx, dword [esp + 0x1c]
xor eax, eax
mov dword [esp + 0x70], eax
cmp dword [ecx + 0x20], eax
jne 0x474f33
mov eax, dword [ecx]
cmp dword [eax], 1
jne 0x474f33
mov ecx, dword [ecx + 0x1c]
cmp dword [ecx], 1
jne 0x474f33
cmp dword [ecx + 0x1c], 0
jne 0x474f33
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x38], ecx
cmp dword [ecx + 0x38], 0
jne 0x474f33
mov eax, dword [eax + 4]
cmp byte [eax], 0x92
jne 0x474f33
test edx, edx
je 0x474f33
mov eax, dword [esp + 0xf8]
mov esi, 0x100
mov eax, dword [eax + 4]
test word [eax + 2], si
mov esi, dword [esp + 0xc]
je 0x474f33
mov edi, dword [esp + 0x1c]
mov esi, dword [edi]
mov edi, dword [esp + 0x58]
mov eax, dword [esi + 4]
mov esi, dword [esp + 0xc]
test byte [eax + 4], 0x10
jne 0x474f33
mov ecx, dword [ecx + 0x48]
mov edx, 0xfff0bdc0
mov dword [esp + 0x28], edx
test ecx, ecx
je 0x474b35
mov eax, dword [esi]
xor edx, edx
mov dword [esp + 0x28], edx
cmp dword [eax + 0x14], edx
jle 0x474b35
mov eax, dword [eax + 0x10]
mov edi, dword [esi]
add eax, 0xc
nop word [eax + eax]
cmp dword [eax], ecx
je 0x474b2d
inc edx
add eax, 0x10
cmp edx, dword [edi + 0x14]
jl 0x474b20
mov edi, dword [esp + 0x58]
mov dword [esp + 0x28], edx
mov eax, dword [esi + 0x28]
xor ecx, ecx
mov dword [esp + 0x30], eax
inc eax
mov dword [esi + 0x28], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x2c], ecx
mov ecx, esi
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x78]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x88], ecx
mov eax, dword [ecx + 0x5c]
mov ecx, edx
shl dword [esp + 0x44], cl
test dword [esp + 0x44], eax
jne 0x474b92
mov ecx, dword [esp + 0x88]
bts eax, edx
mov dword [ecx + 0x5c], eax
cmp edx, 1
jne 0x474b92
call fcn.004519b0
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x38]
mov ecx, esi
push dword [eax]
push 0
push dword [eax + 0x1c]
call fcn.00449ad0
mov eax, dword [esp + 0x44]
add esp, 0xc
test byte [eax + 0x24], 0x20
je 0x474bda
mov ecx, dword [eax + 8]
mov dword [esp + 0x2c], ecx
test ecx, ecx
je 0x474bdc
nop dword [eax]
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x474bd0
mov ecx, dword [ecx + 0x14]
test ecx, ecx
jne 0x474bc0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x2c], ecx
jmp 0x474bdc
xor ecx, ecx
mov eax, dword [eax + 8]
test eax, eax
je 0x474c18
mov esi, dword [esp + 0x38]
test byte [eax + 0x38], 4
jne 0x474c09
movzx edx, word [eax + 0x30]
cmp dx, word [esi + 0x2e]
jge 0x474c09
cmp dword [eax + 0x24], 0
jne 0x474c09
test ecx, ecx
je 0x474c07
cmp dx, word [ecx + 0x30]
jge 0x474c09
mov ecx, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x474be7
mov esi, dword [esp + 0xc]
mov dword [esp + 0x2c], ecx
test ecx, ecx
je 0x474c30
mov eax, dword [ecx + 0x2c]
mov edx, ecx
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.00452430
mov dword [esp + 0x10], eax
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x88], ecx
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x474c69
mov edx, dword [esp + 0x28]
mov ecx, edi
push edx
mov edx, dword [esp + 0x1c]
push edx
push dword [esp + 0x38]
mov edx, 0x68
call fcn.00426240
add esp, 0xc
mov ecx, eax
jmp 0x474ca6
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x68
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x88]
mov eax, dword [edi]
cmp byte [eax + 0x49], 0
jne 0x474cc1
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 1
mov edx, dword [esp + 0x10]
test edx, edx
je 0x474d10
mov ecx, dword [edi]
cmp byte [ecx + 0x49], 0
je 0x474ce1
push edx
mov edx, 0xfffffff7
call fcn.00426b10
add esp, 4
jmp 0x474d10
mov eax, dword [edi + 0x88]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
cmp byte [eax + ecx*4 - 0x13], 0
lea eax, [eax + ecx*4]
je 0x474d09
push 0xfffffffffffffff7
push edx
lea edx, [eax - 0x14]
mov ecx, edi
call fcn.00426c90
add esp, 8
jmp 0x474d10
mov dword [eax - 4], edx
mov byte [eax - 0x13], 0xf7
mov eax, dword [esp + 0xf8]
mov ecx, dword [edi + 0x88]
mov edx, dword [eax + 8]
mov eax, dword [esp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x474d43
push 0
push edx
push dword [esp + 0x38]
mov edx, 0x64
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x474d79
mov esi, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x64
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 8]
mov ecx, dword [edi + 0x88]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x474da3
push 0
push 0
push dword [esp + 0x38]
mov edx, 0x70
mov ecx, edi
call fcn.00426240
add esp, 0xc
jmp 0x474dd9
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x70
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esi + 0x18f], 2
jne 0x4751d0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x38]
test ecx, ecx
je 0x474e0d
test byte [edx + 0x24], 0x20
je 0x474e01
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x474e0d
mov eax, dword [ecx]
mov dword [esp + 0x10], 1
jmp 0x474e1a
mov dword [esp + 0x10], 0
mov eax, 0x538284
cmp dword [esp + 0x10], 0
mov ecx, 0x538284
push eax
mov eax, 0x53c260
cmove eax, ecx
push eax
push dword [edx]
push 0x53c278
push dword [esi]
call fcn.00407470
mov ecx, dword [esi + 8]
add esp, 0x14
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 0x19c]
mov dword [esp + 0x10], eax
mov eax, dword [ecx + 0xc]
mov edx, dword [ecx + 0x88]
mov dword [esp + 0x44], ecx
cmp dword [eax + 0x30], edx
jg 0x474e7b
push 0
push 0
push dword [esp + 0x18]
mov edx, 0xa7
call fcn.00426240
add esp, 0xc
mov edx, eax
jmp 0x474eb9
mov esi, dword [esp + 0x10]
lea eax, [edx + 1]
mov dword [ecx + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xa7
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
cmp byte [ecx + 0x49], 0
je 0x474eea
mov ecx, dword [esp + 0x2c]
mov edx, 0xfffffff9
push ecx
mov ecx, dword [esp + 0x8c]
call fcn.00426b10
add esp, 4
jmp 0x4751d0
test edx, edx
jns 0x474ef5
mov edx, dword [eax + 0x88]
dec edx
mov eax, dword [eax + 0x58]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x2c]
je 0x474f1f
push 0xfffffffffffffff9
push ecx
mov ecx, dword [esp + 0x4c]
mov edx, eax
call fcn.00426c90
add esp, 8
jmp 0x4751d0
test ecx, ecx
je 0x4751d0
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xf9
jmp 0x4751d0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x28], 0
mov byte [esp + 0x30], 0
cmp dword [eax + 0x28], 0
jne 0x4750a0
xor eax, eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x28], eax
cmp edx, 1
jne 0x475064
mov edx, dword [esp + 0xf8]
mov edx, dword [edx]
mov ecx, dword [edx + 0x14]
mov dword [esp + 0x20], ecx
test ecx, ecx
je 0x475064
cmp dword [ecx], 1
jne 0x475064
mov eax, dword [ecx + 4]
cmp byte [eax], 0x93
jne 0x475062
mov edx, dword [edx + 8]
mov dword [esp + 0x10], edx
mov al, byte [edx]
mov byte [esp + 0x43], al
movzx eax, al
movzx ecx, byte [eax + 0x53ea00]
movzx eax, byte [0x53b258]
mov dword [esp + 0x18], ecx
movzx eax, byte [eax + 0x53ea00]
sub ecx, eax
jne 0x47500e
mov al, byte [esp + 0x43]
mov ecx, 0x53b258
sub ecx, edx
mov dword [esp + 0x88], ecx
test al, al
je 0x4750f6
mov eax, dword [esp + 0x10]
inc eax
mov dword [esp + 0x10], eax
mov cl, byte [eax]
mov byte [esp + 0x27], cl
mov ecx, dword [esp + 0x88]
movzx eax, byte [ecx + eax]
movzx ecx, byte [eax + 0x53ea00]
movzx eax, byte [esp + 0x27]
movzx eax, byte [eax + 0x53ea00]
sub eax, ecx
mov al, byte [esp + 0x27]
je 0x474fd1
movzx eax, byte [0x53b25c]
mov ecx, dword [esp + 0x18]
movzx eax, byte [eax + 0x53ea00]
sub ecx, eax
jne 0x475062
mov ecx, 0x53b25c
sub ecx, edx
mov dword [esp + 0x10], ecx
nop
cmp byte [esp + 0x43], 0
je 0x475113
mov al, byte [edx + 1]
inc edx
mov byte [esp + 0x43], al
movzx eax, byte [ecx + edx]
movzx ecx, byte [eax + 0x53ea00]
movzx eax, byte [esp + 0x43]
movzx eax, byte [eax + 0x53ea00]
sub eax, ecx
mov ecx, dword [esp + 0x10]
je 0x475030
xor eax, eax
cmp byte [esp + 0x30], 0
je 0x4750a0
mov ecx, dword [esp + 0x34]
mov edx, eax
push 0
call fcn.0043d030
mov ecx, eax
add esp, 4
mov eax, dword [esp + 0x34]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x70], ecx
cmp byte [eax + 0x49], 0
jne 0x4750a0
cmp byte [esp + 0x30], 1
setne al
mov byte [ecx + 0x10], al
mov eax, dword [ecx + 4]
mov byte [eax], 0x91
lea edx, [esp + 0xd0]
mov ecx, esi
call fcn.00471ba0
mov eax, dword [esp + 0x30]
mov ecx, esi
mov edx, dword [esp + 0x14]
push 0
movzx eax, al
push eax
push 0
push dword [esp + 0x34]
push dword [esp + 0x3c]
call fcn.00488860
add esp, 0x14
mov dword [esp + 0x10], eax
test eax, eax
jne 0x475130
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x34]
test eax, eax
je 0x4727fe
mov edx, eax
mov ecx, edi
call fcn.0043dac0
jmp 0x4727fe
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x30], 1
mov dword [esp + 0x28], eax
mov dword [esp + 0x14], ecx
jmp 0x475064
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x30], 2
mov dword [esp + 0x28], eax
mov dword [esp + 0x14], ecx
jmp 0x475064
lea edx, [esp + 0xd0]
mov ecx, esi
call fcn.00471e50
mov edx, dword [esp + 0x10]
cmp byte [edx + 0x2f], 0
jle 0x4751bb
mov eax, dword [edx + 0x24]
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x30], ecx
jg 0x475181
push 0
push dword [esp + 0x24]
mov edx, 0xd
mov ecx, edi
push 0
call fcn.00426240
mov edx, dword [esp + 0x1c]
add esp, 0xc
jmp 0x4751bb
mov esi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, edx
call fcn.004896d0
lea edx, [esp + 0xd0]
mov ecx, esi
call fcn.00471d60
push 0x10
push dword [esp + 0x70]
mov dword [esp + 0x98], 0
push dword [esp + 0x64]
push esi
call fcn.00444130
mov eax, dword [esp + 0x7c]
mov ecx, esi
mov edx, dword [esp + 0x2c]
push eax
push eax
push dword [esp + 0x8c]
push 0
push 0
push 0xffffffffffffffff
call fcn.004698e0
mov eax, dword [esp + 0x98]
add esp, 0x28
test eax, eax
je 0x475222
mov ecx, dword [esp + 0x34]
mov edx, eax
call fcn.0043dac0
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x475244
mov eax, dword [esp + 0x6c]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [edi + 0x88]
mov dword [ecx], eax
cmp byte [esp + 0x121], 3
jne 0x47525a
mov edx, 0x53c2b4
mov ecx, esi
call fcn.0046ad20
cmp dword [esp + 0x90], 0
je 0x4752a0
cmp dword [esp + 0x94], 0
mov eax, 0x53bff4
mov edx, 0x53c2cc
mov ecx, esi
cmovle edx, eax
call fcn.0046ad20
mov eax, dword [esp + 0x64]
mov ecx, esi
push dword [esp + 0x74]
mov edx, dword [esp + 0x20]
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.0046af50
add esp, 0xc
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x4752c2
mov eax, dword [esp + 0x3c]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [edi + 0x88]
mov dword [ecx], eax
xor eax, eax
cmp dword [esi + 0x24], eax
setg al
mov dword [esp + 0x80], eax
jmp 0x4727fa
mov edi, eax
jmp 0x4727fe
cmp ecx, dword [edi + 0x128]
jb 0x4752fd
cmp ecx, dword [edi + 0x12c]
jae 0x4752fd
mov eax, dword [edi + 0x124]
mov dword [ecx], eax
mov dword [edi + 0x124], ecx
jmp 0x475306
push ecx
call fcn.00405050
add esp, 4
mov edx, dword [esp + 0xf8]
test edx, edx
je 0x475382
cmp dword [edi + 0x1d0], 0
je 0x475340
mov ecx, edi
call fcn.004050c0
mov eax, dword [esp + 0x80]
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.004e5962
mov esp, ebp
pop ebp
ret
cmp edx, dword [edi + 0x128]
jb 0x475379
cmp edx, dword [edi + 0x12c]
jae 0x475379
mov eax, dword [edi + 0x124]
mov dword [edx], eax
mov eax, dword [esp + 0x80]
mov dword [edi + 0x124], edx
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.004e5962
mov esp, ebp
pop ebp
ret
push edx
call fcn.00405050
add esp, 4
mov ecx, dword [esp + 0x12c]
mov eax, dword [esp + 0x80]
pop edi
pop esi
xor ecx, esp
call fcn.004e5962
mov esp, ebp
pop ebp
ret