Function at 0x4d39f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x11c]
cmp eax, dword [ecx + 8]
jbe 0x4d63d8
sub esp, 0x19c
mov eax, dword [esp + 0x1a8]
test eax, eax
jne 0x4d3b9b
mov ecx, dword [esp + 0x1b8]
test ecx, ecx
je 0x4d3a44
test ecx, 0x200
jne 0x4d3a44
lea eax, [0x752f6c]
mov ecx, dword [esp + 0x1b0]
jmp 0x4d3a6a
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
mov eax, dword [esp + 0x1b4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov edx, dword [esp + 0x1a4]
mov dword [esp], edx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4d3ae9
mov eax, dword [eax + 4]
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4d3b7e
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d3b76
mov dword [edx + 0x40], eax
jmp 0x4d3b7e
lea edi, [edx + 0x40]
call fcn.004630d0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
add esp, 0x19c
ret
mov eax, dword [esp + 0x1a4]
cmp byte [eax], 0x6e
mov ecx, dword [esp + 0x1b0]
mov dword [esp], ecx
mov edx, dword [esp + 0x1b4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 8], ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.004d08f0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
test ebx, ebx
jne 0x4d6344
test esi, esi
je 0x4d40f0
mov eax, dword [esp + 0x1a4]
movzx ecx, byte [eax]
cmp cl, 0x22
je 0x4d3f33
movzx edx, byte [esp + 0x1bc]
test dl, dl
je 0x4d3d9f
mov ecx, dword [esp + 0x1b8]
test ecx, ecx
je 0x4d3c48
test ecx, 0x200
jne 0x4d3c48
lea eax, [0x752f6c]
mov ecx, dword [esp + 0x1b0]
jmp 0x4d3c6e
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
mov eax, dword [esp + 0x1b4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov edx, dword [esp + 0x1a4]
mov dword [esp], edx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x4d3ced
mov eax, dword [eax + 4]
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4d3d82
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d3d7a
mov dword [edx + 0x40], eax
jmp 0x4d3d82
lea edi, [edx + 0x40]
call fcn.004630d0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
add esp, 0x19c
ret
cmp cl, 0x66
je 0x4d3dbb
cmp cl, 0x6e
jne 0x4d3db6
lea eax, [0x6ce32e]
mov ecx, 4
jmp 0x4d3dd3
cmp cl, 0x74
jne 0x4d3dc8
lea eax, [0x6ce256]
mov ecx, 4
jmp 0x4d3dd3
lea eax, [0x6ceb47]
mov ecx, 6
mov dword [esp + 0x144], eax
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x1b8]
test edx, edx
je 0x4d3e03
test edx, 0x200
jne 0x4d3e03
mov edx, dword [esp + 0x1b0]
lea ebx, [0x752f6c]
jmp 0x4d3e2d
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
mov eax, dword [esp + 0x1b4]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x138], edx
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x1a0]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xd0], ecx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x84]
mov dword [edi + 4], eax
mov eax, dword [0x90e260]
test eax, eax
jne 0x4d3e7a
mov ecx, dword [esp + 0x144]
mov dword [edi], ecx
jmp 0x4d3e86
mov eax, dword [esp + 0x144]
call fcn.004630d0
mov ecx, dword [esp + 0x74]
mov dword [edi + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d3ea3
mov eax, dword [esp + 0x138]
mov dword [edi + 0xc], eax
jmp 0x4d3eb8
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0x138]
mov edx, edi
mov edi, ecx
call fcn.004630d0
mov edi, edx
mov eax, dword [esp + 0xd0]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a0]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d3f16
mov dword [esp], eax
lea ecx, [0x75108c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d3f0e
mov dword [edx + 0x40], eax
jmp 0x4d3f16
lea edi, [edx + 0x40]
call fcn.004630d0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
add esp, 0x19c
ret
mov dword [esp + 0x148], edi
mov dword [esp + 0x88], esi
mov dword [esp], eax
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.004d6ba0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x4d40b1
movzx eax, byte [esp + 0x1bc]
test al, al
je 0x4d63bf
mov eax, dword [esp + 0x1b8]
test eax, eax
je 0x4d3fa9
test eax, 0x200
jne 0x4d3fa9
lea eax, [0x752f6c]
mov ecx, dword [esp + 0x1b0]
jmp 0x4d3fcf
mov ecx, dword [esp + 0x1b0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov edx, dword [esp + 0x1a4]
mov dword [esp], edx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4d404e
mov eax, dword [eax + 4]
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
add esp, 0x19c
ret
mov eax, dword [esp + 0x88]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x148]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
add esp, 0x19c
ret
mov dword [esp + 0x168], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x164], edx
mov ebx, dword [esp + 0x1a4]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 0x66
xchg ebp, eax
ja 0x4d4aca
xchg ebp, eax
cmp al, 0x22
xchg ebp, eax
je 0x4d4131
xchg ebp, eax
cmp al, 0x66
xchg ebp, eax
je 0x4d4cef
jmp 0x4d5342
mov dword [esp], ebx
mov eax, dword [esp + 0x1a8]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 8], ecx
call fcn.004d6ba0
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test cl, cl
je 0x4d4991
mov dword [esp + 0x150], eax
mov dword [esp + 0xac], edx
nop
nop
mov ecx, dword [esp + 0xb0]
mov ebp, ecx
and ecx, 0x1f
cmp ecx, 0x14
je 0x4d476a
cmp ecx, 0x17
jne 0x4d4471
mov dword [esp + 0x90], ebx
test ebp, 0x200
jne 0x4d41b4
lea ecx, [0x752f6c]
mov esi, dword [esp + 0x168]
jmp 0x4d41de
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov esi, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4d431b
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4d421e
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d4244
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov dword [esp + 0x114], ecx
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6cebdd]
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d429e
mov ecx, dword [esp + 0x114]
mov dword [eax + 0xc], ecx
jmp 0x4d42b1
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x114]
call fcn.004630d0
mov eax, ecx
mov ecx, dword [esp + 0xd0]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d6327
mov dword [esp], ecx
lea edx, [0x75108c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d430e
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov eax, dword [0x8e5ab0]
cmp dword [eax + 0x140], 0xffffffff
jne 0x4d4346
mov eax, dword [esp + 0xac]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
jmp 0x4d4353
mov eax, dword [esp + 0xac]
shr eax, 2
lea ecx, [eax + eax*2]
mov dword [esp + 0x80], ecx
lea eax, [0x696c40]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044b780
mov eax, dword [esp + 0xc]
mov dword [esp + 0x160], eax
mov ecx, dword [0x8e5ab0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x150]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x18], edx
call fcn.0048fda0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
test ebx, ebx
je 0x4d4425
nop
mov ecx, dword [esp + 0x1a0]
mov ebx, dword [ecx + 0x3c]
test ebx, ebx
jne 0x4d6327
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d4418
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov edx, dword [esp + 0x80]
cmp edx, ecx
jb 0x4d63ba
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048a380
jmp 0x4d6327
cmp ecx, 0x18
jne 0x4d4652
test ebp, 0x200
jne 0x4d4491
lea ecx, [0x752f6c]
mov ebx, dword [esp + 0x168]
jmp 0x4d44d0
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0xb0]
mov ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x150]
mov esi, dword [0x8e6774]
cmp dword [0x8e6770], ecx
je 0x4d44e5
xor ecx, ecx
jmp 0x4d456f
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.004037d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4d4517
mov eax, dword [esp + 0x150]
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4d456f
lea eax, [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0x150]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.0044f290
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004d9b30
movzx eax, byte [esp + 8]
xor eax, 1
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0xb0]
mov ecx, eax
mov eax, dword [esp + 0x150]
test cl, cl
jne 0x4d45b1
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044f290
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.0048ad60
jmp 0x4d6327
mov dword [esp + 0x184], 0
mov dword [esp + 0x188], 0
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 8], eax
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], eax
lea eax, [0x6e300a]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0x184]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
add esp, 0x19c
ret
test ebp, ebp
je 0x4d466d
test ebp, 0x200
jne 0x4d466d
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d4693
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x118], ecx
mov dword [esp + 0x54], eax
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6cebdd]
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d46ed
mov ecx, dword [esp + 0x118]
mov dword [eax + 0xc], ecx
jmp 0x4d4700
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x118]
call fcn.004630d0
mov eax, ecx
mov ecx, dword [esp + 0xd0]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d6327
mov dword [esp], ecx
lea edx, [0x75108c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d475d
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00489ec0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4d48ae
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4d47b1
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d47d7
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x110], ecx
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6cebdd]
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d4831
mov ecx, dword [esp + 0x110]
mov dword [eax + 0xc], ecx
jmp 0x4d4844
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x110]
call fcn.004630d0
mov eax, ecx
mov ecx, dword [esp + 0xd0]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d6327
mov dword [esp], ecx
lea edx, [0x75108c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d48a1
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov dword [esp], 0
mov eax, dword [esp + 0x150]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0044f290
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004091e0
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0x8e6f00]
test cl, cl
je 0x4d491f
lea ecx, [0x696a40]
mov dword [0x8e6f04], ecx
mov edx, dword [0x90e260]
test edx, edx
jne 0x4d4912
mov dword [0x8e6f08], eax
jmp 0x4d4925
lea edi, [0x8e6f08]
call fcn.004630d0
jmp 0x4d4925
lea ecx, [0x696a40]
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
mov ecx, dword [esp + 0x174]
test ecx, ecx
je 0x4d4955
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4d495b
or edx, 0x80
jmp 0x4d495b
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x164]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048a1b0
jmp 0x4d6327
movzx eax, byte [esp + 0x1bc]
test al, al
je 0x4d63a2
mov eax, dword [esp + 0xb0]
test eax, eax
je 0x4d49c2
test eax, 0x200
jne 0x4d49c2
lea eax, [0x752f6c]
mov ecx, dword [esp + 0x168]
jmp 0x4d49e8
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov edx, dword [esp + 0x1a4]
mov dword [esp], edx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4d4a67
mov eax, dword [eax + 4]
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
add esp, 0x19c
ret
xchg ebp, eax
cmp al, 0x6e
xchg ebp, eax
jne 0x4d4ce4
movzx ebp, byte [esp + 0x1bc]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4d4c55
mov ebp, dword [esp + 0x1a8]
cmp ebp, 4
jne 0x4d4aff
cmp dword [ebx], 0x6c6c756e
je 0x4d4c55
test ecx, ecx
je 0x4d4b13
test ecx, 0x200
jne 0x4d4b13
lea ecx, [0x752f6c]
jmp 0x4d4b3f
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1a4]
mov ebp, dword [esp + 0x1a8]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x130], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4d4bb2
mov ecx, dword [eax + 4]
jmp 0x4d4bb4
mov ecx, eax
mov dword [esp + 0x194], ecx
mov eax, dword [esp + 0x130]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4d6327
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d4c48
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
nop
mov ebx, ecx
and ecx, 0x1f
add ecx, 0xffffffec
nop
cmp ecx, 3
ja 0x4d6327
test ebx, 0x200
jne 0x4d4c78
lea ecx, [0x752f6c]
jmp 0x4d4c96
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0048bb50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x164]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048a1b0
jmp 0x4d6327
xchg ebp, eax
cmp al, 0x74
xchg ebp, eax
jne 0x4d5342
movzx esi, byte [esp + 0x1bc]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4d4e86
mov edi, dword [esp + 0x1a8]
cmp edi, 4
jne 0x4d4d19
cmp dword [ebx], 0x65757274
je 0x4d4e8d
cmp edi, 5
jne 0x4d4d30
cmp dword [ebx], 0x736c6166
jne 0x4d4d30
cmp byte [ebx + 4], 0x65
je 0x4d4e8d
test ecx, ecx
je 0x4d4d44
test ecx, 0x200
jne 0x4d4d44
lea ecx, [0x752f6c]
jmp 0x4d4d70
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1a4]
mov edi, dword [esp + 0x1a8]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp], ebx
mov dword [esp + 4], edi
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4d4de3
mov ecx, dword [eax + 4]
jmp 0x4d4de5
mov ecx, eax
mov dword [esp + 0x194], ecx
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4d6327
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d4e79
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov edi, dword [esp + 0x1a8]
xchg ebp, eax
cmp al, 0x74
xchg ebp, eax
xchg ebp, ebx
sete bl
xchg ebp, ebx
nop
nop
and ecx, 0x1f
cmp ecx, 1
je 0x4d5320
cmp ecx, 0x14
je 0x4d5123
xchg esi, eax
test al, al
xchg esi, eax
je 0x4d5017
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x4d4ed5
test ecx, 0x200
jne 0x4d4ed5
lea ecx, [0x752f6c]
jmp 0x4d4f01
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1a4]
mov edi, dword [esp + 0x1a8]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x128], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp], ebx
mov dword [esp + 4], edi
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4d4f74
mov ecx, dword [eax + 4]
jmp 0x4d4f76
mov ecx, eax
mov dword [esp + 0x194], ecx
mov eax, dword [esp + 0x128]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4d6327
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d500a
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x4d5034
test ecx, 0x200
jne 0x4d5034
mov ecx, eax
lea eax, [0x752f6c]
jmp 0x4d504c
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov dword [esp + 0x124], ecx
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x6ce256]
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d50a6
mov ecx, dword [esp + 0x124]
mov dword [eax + 0xc], ecx
jmp 0x4d50b9
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x124]
call fcn.004630d0
mov eax, ecx
mov ecx, dword [esp + 0xd0]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d6327
mov dword [esp], ecx
lea edx, [0x75108c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5116
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
xchg ebp, eax
mov byte [esp + 0x2e], al
xchg ebp, eax
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 8], ecx
call fcn.00489ec0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4d5206
movzx ecx, byte [esp + 0x2e]
movzx ecx, cl
lea edx, [0x8b91c0]
lea eax, [edx + ecx*8]
nop
movzx ecx, byte [0x8e6f00]
test cl, cl
je 0x4d5194
lea ecx, [0x6950c0]
mov dword [0x8e6f04], ecx
mov edx, dword [0x90e260]
test edx, edx
jne 0x4d5187
mov dword [0x8e6f08], eax
jmp 0x4d519a
lea edi, [0x8e6f08]
call fcn.004630d0
jmp 0x4d519a
lea ecx, [0x6950c0]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
mov ecx, dword [esp + 0x17c]
test ecx, ecx
je 0x4d51ca
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4d51d0
or edx, 0x80
jmp 0x4d51d0
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x164]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048a1b0
jmp 0x4d6327
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4d5223
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d5249
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x120], ecx
mov dword [esp + 0x5c], eax
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x6ce256]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d52a3
mov ecx, dword [esp + 0x120]
mov dword [eax + 0xc], ecx
jmp 0x4d52b6
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x120]
call fcn.004630d0
mov eax, ecx
mov ecx, dword [esp + 0xd0]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d6327
mov dword [esp], ecx
lea edx, [0x75108c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5313
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov dword [esp], eax
mov dword [esp + 4], edx
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.0048a2c0
jmp 0x4d6327
xchg ebp, eax
cmp al, 0x2d
xchg ebp, eax
je 0x4d5485
add ebp, 0xffffffd0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
jbe 0x4d5485
movzx ebp, byte [esp + 0x1bc]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4d638a
test ecx, ecx
je 0x4d5381
test ecx, 0x200
jne 0x4d5381
lea ecx, [0x752f6c]
jmp 0x4d53a6
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1a4]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x10c], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp], ebx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4d5420
mov ecx, dword [eax + 4]
jmp 0x4d5422
mov ecx, eax
mov dword [esp + 0x194], ecx
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
add esp, 0x19c
ret
mov dword [esp], 0
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x1a8]
mov dword [esp + 8], eax
call fcn.0044f290
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
nop
mov edx, dword [esp + 0xb0]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x4d5ace
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x4d57a5
cmp edx, 7
jb 0x4d5d4f
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00471890
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
test edx, edx
jne 0x4d5606
mov dword [esp + 0xa4], eax
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x168]
mov ebx, dword [edx]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
cmp ebx, 0x20
sbb ebp, ebp
lea esi, [ebx - 0x20]
mov dword [esp + 0xcc], esi
cmp esi, 0x20
sbb edi, edi
mov dword [esp + 0xc8], edi
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb edx, edx
mov dword [esp + 0xc4], edx
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0x98]
shl edx, cl
and edx, edi
mov ecx, ebx
shl eax, cl
and eax, ebp
mov ecx, esi
mov edi, dword [esp + 0x98]
shr edi, cl
mov esi, dword [esp + 0xc4]
and edi, esi
or edi, eax
or edi, edx
mov dword [esp + 0xc4], edi
mov eax, ecx
mov ecx, ebx
mov edx, dword [esp + 0x98]
shl edx, cl
and edx, ebp
mov ecx, dword [esp + 0xcc]
shr edi, cl
mov ecx, ebp
mov ebp, dword [esp + 0xc8]
and edi, ebp
mov dword [esp + 0xcc], edi
mov ebp, ecx
mov ecx, eax
mov edi, dword [esp + 0xc4]
mov eax, edi
shl edi, cl
mov ecx, ebx
shr edx, cl
and edi, esi
and edx, ebp
or edx, edi
mov esi, dword [esp + 0xcc]
or edx, esi
mov esi, dword [esp + 0x98]
cmp esi, edx
setne dl
shr eax, cl
and eax, ebp
mov ebx, dword [esp + 0xa4]
cmp ebx, eax
setne al
or eax, edx
test al, al
je 0x4d5773
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4d5623
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d5649
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [esp + 0x15c], eax
mov dword [esp], 0
lea ecx, [0x6cefd1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x14c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044efe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x15c]
mov dword [edi + 4], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d56d2
mov dword [edi], eax
jmp 0x4d56d7
call fcn.004630d0
mov ecx, dword [esp + 0x34]
mov dword [edi + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d56f4
mov eax, dword [esp + 0xf8]
mov dword [edi + 0xc], eax
jmp 0x4d5709
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xf8]
mov edx, edi
mov edi, ecx
call fcn.004630d0
mov edi, edx
mov eax, dword [esp + 0xd0]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a0]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d6327
mov dword [esp], eax
lea ecx, [0x75108c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5766
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], esi
call fcn.0048ac60
jmp 0x4d6327
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00472070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
test edx, edx
jne 0x4d5928
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa8], eax
mov edx, dword [esp + 0x168]
mov ebp, dword [edx]
shl ebp, 3
add ebp, 0xffffffc0
xchg ebp, ebx
neg ebx
xchg ebp, ebx
mov dword [esp + 0xc0], ebp
cmp ebp, 0x20
sbb esi, esi
lea edi, [ebp - 0x20]
mov dword [esp + 0xcc], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0xc8], edi
cmp edi, 0x20
sbb eax, eax
mov dword [esp + 0xc4], eax
mov edx, dword [esp + 0xcc]
cmp edx, 0x20
sbb edx, edx
mov dword [esp + 0xbc], edx
shr ebp, 5
cmp ebp, 1
sbb ebp, ebp
mov dword [esp + 0xb8], ebp
mov ebp, dword [esp + 0xc0]
cmp ebp, 0x20
sbb edx, edx
mov dword [esp + 0xc0], edx
mov ecx, edi
mov edx, dword [esp + 0x9c]
shr edx, cl
mov ecx, ebp
shl ebx, cl
and ebx, esi
and edx, eax
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0x9c]
shl eax, cl
mov edi, dword [esp + 0xbc]
and eax, edi
or edx, ebx
or edx, eax
mov dword [esp + 0xcc], edx
mov eax, dword [esp + 0xc0]
not eax
or eax, ebp
mov ebx, ecx
mov ecx, eax
mov eax, edx
sar edx, cl
mov ecx, ebx
mov ebx, dword [esp + 0xa0]
cmp ebx, edx
setne dl
mov byte [esp + 0x2f], dl
mov ebx, ecx
mov ecx, ebp
mov edx, dword [esp + 0x9c]
shl edx, cl
and edx, esi
mov ecx, dword [esp + 0xc8]
shl eax, cl
xchg edi, ebx
not ebx
xchg edi, ebx
or edi, ebx
mov ecx, edi
mov ebx, dword [esp + 0xcc]
sar ebx, cl
mov ecx, ebp
shr edx, cl
and edx, esi
mov ebp, dword [esp + 0xc4]
and eax, ebp
or edx, eax
mov eax, dword [esp + 0xb8]
xor eax, 0xffffffff
and eax, ebx
or eax, edx
mov edx, dword [esp + 0x9c]
cmp edx, eax
setne al
movzx ebx, byte [esp + 0x2f]
or eax, ebx
test al, al
je 0x4d5a95
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4d5945
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d596b
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [esp + 0x15c], eax
mov dword [esp], 0
lea ecx, [0x6cefd1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x14c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044efe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x15c]
mov dword [edi + 4], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d59f4
mov dword [edi], eax
jmp 0x4d59f9
call fcn.004630d0
mov ecx, dword [esp + 0x38]
mov dword [edi + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5a16
mov eax, dword [esp + 0xfc]
mov dword [edi + 0xc], eax
jmp 0x4d5a2b
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xfc]
mov edx, edi
mov edi, ecx
call fcn.004630d0
mov edi, edx
mov eax, dword [esp + 0xd0]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a0]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d6327
mov dword [esp], eax
lea ecx, [0x75108c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5a88
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
call fcn.0048a680
jmp 0x4d6327
cmp edx, 0xe
ja 0x4d5d46
mov dword [esp + 0xb4], edx
test ebx, 0x200
jne 0x4d5af5
lea ebp, [0x752f6c]
mov esi, dword [esp + 0x168]
jmp 0x4d5b1f
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, eax
mov esi, ecx
mov eax, dword [ebp + 0x18]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14c]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004711c0
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4d5b65
mov eax, dword [esp + 0xb0]
test eax, 0x200
jmp 0x4d5bbb
mov eax, dword [esp + 0xb4]
cmp eax, 0xd
jne 0x4d5d1c
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x4d5b8b
movsd xmm1, qword [0x7506cc]
pxor xmm0, xmm1
movsd xmm1, qword [0x7506b4]
ucomisd xmm0, xmm1
jbe 0x4d5d1c
movsd xmm1, qword [0x7506bc]
ucomisd xmm1, xmm0
jb 0x4d5d1c
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4d5bcc
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d5bf2
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [esp + 0x15c], eax
mov dword [esp], 0
lea ecx, [0x6cefd1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x14c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044efe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x15c]
mov dword [edi + 4], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5c7b
mov dword [edi], eax
jmp 0x4d5c80
call fcn.004630d0
mov ecx, dword [esp + 0x30]
mov dword [edi + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5c9d
mov eax, dword [esp + 0xf4]
mov dword [edi + 0xc], eax
jmp 0x4d5cb2
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xf4]
mov edx, edi
mov edi, ecx
call fcn.004630d0
mov edi, edx
mov eax, dword [esp + 0xd0]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a0]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4d6327
mov dword [esp], eax
lea ecx, [0x75108c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5d0f
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.0048a5c0
jmp 0x4d6327
cmp edx, 0x14
je 0x4d606e
cmp edx, 0x18
jne 0x4d5dee
test ebx, 0x200
jne 0x4d5d6f
lea edx, [0x752f6c]
mov ebp, dword [esp + 0x168]
jmp 0x4d5dae
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0xb0]
mov edx, eax
mov ebp, ecx
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x8c]
mov esi, dword [0x8e6774]
cmp dword [0x8e6770], edx
je 0x4d5dc0
xor edx, edx
jmp 0x4d5df0
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004037d0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0xb0]
mov edx, eax
mov eax, dword [esp + 0x14c]
jmp 0x4d5df0
xor edx, edx
test dl, dl
jne 0x4d6043
movzx eax, byte [esp + 0x1bc]
test al, al
je 0x4d5f2b
test ebx, ebx
je 0x4d5e23
test ebx, 0x200
jne 0x4d5e23
lea eax, [0x752f6c]
mov ecx, dword [esp + 0x168]
jmp 0x4d5e49
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x108], ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov edx, dword [esp + 0x1a4]
mov dword [esp], edx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 8], edx
call fcn.00409260
mov eax, dword [esp + 0xc]
lea ecx, [0x68e840]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4d5ec8
mov eax, dword [eax + 4]
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x198], eax
lea eax, [0x6e386d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004beaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
add esp, 0x19c
ret
test ebx, ebx
je 0x4d5f46
test ebx, 0x200
jne 0x4d5f46
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d5f6c
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6ceb47]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d5fc6
mov ecx, dword [esp + 0x104]
mov dword [eax + 0xc], ecx
jmp 0x4d5fd9
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x104]
call fcn.004630d0
mov eax, ecx
mov ecx, dword [esp + 0xd0]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d6327
mov dword [esp], ecx
lea edx, [0x75108c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d6036
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov edx, dword [esp + 0x168]
mov dword [esp], edx
mov edx, dword [esp + 0x164]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0048ad60
jmp 0x4d6327
mov edx, dword [esp + 0x1a0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004d3820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test edx, edx
je 0x4d60f5
nop
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4d6327
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d60e8
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov dword [esp + 0x94], ebx
mov dword [esp + 0x154], esi
mov dword [esp + 0x158], ebp
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
call fcn.00489ec0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4d6255
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4d6158
mov ecx, dword [esp + 0x168]
lea eax, [0x752f6c]
jmp 0x4d617e
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048b1d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0x1a0]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd0], ebx
lea ebp, [0x6b5980]
mov dword [esp], ebp
call fcn.0040b800
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6ceb47]
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 8], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d61d8
mov ecx, dword [esp + 0x100]
mov dword [eax + 0xc], ecx
jmp 0x4d61eb
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x100]
call fcn.004630d0
mov eax, ecx
mov ecx, dword [esp + 0xd0]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a0]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4d6327
mov dword [esp], ecx
lea edx, [0x75108c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d0210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a0]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x90e260]
test ecx, ecx
jne 0x4d6248
mov dword [edx + 0x40], eax
jmp 0x4d6327
lea edi, [edx + 0x40]
call fcn.004630d0
jmp 0x4d6327
mov ecx, dword [esp + 0x94]
test ecx, ecx
je 0x4d62f0
nop
movzx ecx, byte [0x8e6f00]
test cl, cl
je 0x4d62aa
mov ecx, dword [esp + 0x158]
mov dword [0x8e6f04], ecx
mov edx, dword [0x90e260]
test edx, edx
jne 0x4d6296
mov eax, dword [esp + 0x154]
mov dword [0x8e6f08], eax
jmp 0x4d62b8
lea edi, [0x8e6f08]
mov eax, dword [esp + 0x154]
call fcn.004630d0
jmp 0x4d62b8
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x158]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x170], eax
mov ecx, dword [esp + 0x16c]
test ecx, ecx
je 0x4d62e8
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4d62f6
or edx, 0x80
jmp 0x4d62f6
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4d62f6
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x164]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048a1b0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
add esp, 0x19c
ret
mov eax, dword [ebx + 0x10]
mov dword [esp], ebp
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
add esp, 0x19c
ret
lea eax, [0x696a40]
mov dword [esp], eax
lea eax, [0x7508c4]
mov dword [esp + 4], eax
call fcn.00436fc0
lea eax, [0x696a40]
mov dword [esp], eax
lea eax, [0x7508c4]
mov dword [esp + 4], eax
call fcn.00436fc0
call fcn.00463190
lea eax, [0x696a40]
mov dword [esp], eax
lea eax, [0x7508c4]
mov dword [esp + 4], eax
call fcn.00436fc0
nop
call fcn.00461cc0
jmp fcn.004d39f0