Function at 0x4fe870
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1cc]
cmp eax, dword [ecx + 8]
jbe 0x501034
sub esp, 0x24c
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x258]
mov dword [esp + 8], edx
call fcn.004a5db0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x268]
mov edi, dword [esp + 0x260]
cmp esi, edi
jne 0x4fe969
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x26c]
call fcn.0045adc4
call fcn.00501040
movzx eax, byte [esp + 0x24]
test al, al
je 0x4fe947
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0x268]
mov dword [esp + 0x284], edx
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], ecx
add esp, 0x24c
ret
lea eax, [0x5383c4]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00409050
mov ecx, dword [esp + 8]
lea eax, [0x569170]
jmp 0x4fe924
mov dword [esp + 0xa0], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x10c], edx
mov dword [esp + 0x108], ebp
mov dword [esp + 0xbc], ebx
mov ecx, dword [eax + 0x50]
mov dword [esp], ebx
call ecx
cmp dword [esp + 4], 0x14
je 0x500fe5
xor eax, eax
test al, al
je 0x4ff22b
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
mov ecx, dword [esp + 0x260]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x264]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x268]
mov dword [esp + 0xc], ebx
call fcn.004fdf90
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
movzx ebp, byte [esp + 0x1c]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x108], esi
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], ecx
xchg ebp, eax
mov byte [esp + 0xb8], al
xchg ebp, eax
test esi, esi
jne 0x4ff208
mov dword [esp + 0x4c], eax
mov dword [esp + 0xa0], esi
lea esi, [ecx + eax]
cmp eax, esi
jle 0x4fea79
lea eax, [0x536e99]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00409050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x284], ecx
lea ecx, [0x569170]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov dword [esp + 0x9c], ebx
mov ebx, dword [esp + 0x260]
cmp ebx, esi
jl 0x4fea39
mov dword [esp + 0x98], esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4febbb
mov eax, dword [esp + 0xa0]
xor ecx, ecx
xor edx, edx
test eax, eax
jne 0x4feb9f
mov dword [esp + 0x108], edi
mov dword [esp + 0xa0], eax
test ecx, ecx
je 0x4feb4c
nop
movzx ebx, byte [0x61ec88]
test bl, bl
je 0x4feaeb
mov dword [0x61ec8c], ecx
mov ebx, dword [0x63be10]
test ebx, ebx
jne 0x4feb85
mov dword [0x61ec90], edx
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], edx
mov ecx, dword [esp + 0x11c]
test ecx, ecx
je 0x4feb7d
nop
movzx ebx, byte [ecx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4feb1b
or ebx, 0x80
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004a51b0
mov eax, dword [esp + 0x98]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
xor ebx, ebx
xor ecx, ecx
xor edx, edx
jmp 0x4feb1b
mov ebx, edi
lea edi, [0x61ec90]
mov ebp, eax
mov eax, edx
call fcn.0045a680
mov eax, ebp
mov edi, ebx
jmp 0x4feaeb
mov dword [esp + 0x284], esi
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edi
add esp, 0x24c
ret
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x4fea9c
mov ebx, dword [esp + 0x264]
cmp esi, ebx
ja 0x50102a
cmp eax, esi
ja 0x501023
sub ebx, eax
mov dword [esp + 0x80], ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
mov eax, esi
mov esi, dword [esp + 0x25c]
lea ebp, [ebx + esi]
cmp edx, 0x12
jg 0x4fef9a
cmp edx, 4
jg 0x4fee04
cmp edx, 2
je 0x4feda6
cmp edx, 3
jne 0x4fed54
test ecx, ecx
je 0x4fed27
movzx edx, byte [ebx + esi]
movzx ebx, dl
cmp ebx, 7
jle 0x4fecca
lea eax, [0x53d74c]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00409050
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
xor ebx, ebx
lea ebp, [0x569170]
xor esi, esi
mov dword [esp + 0x74], ebp
mov dword [esp + 0xd0], eax
mov dword [esp + 0x134], esi
mov dword [esp + 0x138], edx
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], ebx
lea ecx, [0x527580]
mov dword [esp], ecx
lea ecx, [esp + 0x134]
mov dword [esp + 4], ecx
call fcn.00408ed0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xd0]
mov esi, dword [esp + 0x98]
mov edi, ebx
mov ebp, eax
mov eax, edx
mov edx, ecx
mov ecx, ebp
jmp 0x4feaa7
cmp ecx, 1
jne 0x4fecd7
test ebx, ebx
jg 0x4fec39
movzx esi, byte [ecx + ebp - 1]
mov edi, ecx
mov ecx, edx
mov eax, 1
shl eax, cl
dec eax
xchg esi, ebx
test al, bl
xchg esi, ebx
jne 0x4fec39
lea edx, [edi - 1]
mov edi, edx
shl edx, 3
sub edx, ebx
mov eax, edi
mov edi, dword [esp + 0x80]
lea ecx, [edi - 1]
mov edi, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
lea esi, [ebp + ecx]
mov ecx, edi
mov ebx, edx
xor ebp, ebp
mov edx, eax
xor eax, eax
jmp 0x4fec61
lea eax, [0x539c5d]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00409050
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
xor ebx, ebx
lea ebp, [0x569170]
xor esi, esi
jmp 0x4fec61
cmp edx, 4
je 0x4fed6b
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0xa0]
mov ebx, edi
jmp 0x4fecb4
mov dword [esp + 0x104], edi
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004090d0
mov ecx, dword [esp + 0xc]
lea eax, [0x516ac0]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x104]
jmp 0x4fecb4
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004fca40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x108], ebx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00408fa0
mov ecx, dword [esp + 8]
lea eax, [0x51aba0]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4fecb4
cmp edx, 6
je 0x4fef34
cmp edx, 0xc
je 0x4fee79
cmp edx, 0x12
jne 0x4fed59
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004fdb20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x108], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov ecx, dword [esp + 8]
lea eax, [0x51b2e0]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4fecb4
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x9c], ecx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004800f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4fef06
mov dword [esp], 0
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.00445ca0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0x78], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov ecx, dword [esp + 8]
lea eax, [0x51b2e0]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0xd4]
jmp 0x4fecb4
nop
lea eax, [0x51e5e0]
mov dword [esp], eax
call fcn.0040b6c0
mov ebx, dword [esp + 4]
mov dword [ebx + 4], 0x1a
lea eax, [0x53b27d]
mov dword [ebx], eax
xor ecx, ecx
lea edx, [0x56906c]
xor eax, eax
jmp 0x4feed5
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004fd160
mov eax, dword [esp + 0x18]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004090d0
mov ecx, dword [esp + 0xc]
lea eax, [0x520060]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4fecb4
cmp edx, 0x16
jg 0x4ff0b1
cmp edx, 0x13
je 0x4ff053
cmp edx, 0x14
je 0x4ff018
cmp edx, 0x16
jne 0x4fed59
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004fdce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x108], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov ecx, dword [esp + 8]
lea eax, [0x51b2e0]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4fecb4
mov dword [esp], 0
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00445ca0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov ecx, dword [esp + 8]
lea eax, [0x51b2e0]
xor edx, edx
xor ebx, ebx
jmp 0x4fecb4
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004fdbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x108], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov ecx, dword [esp + 8]
lea eax, [0x51b2e0]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4fecb4
cmp edx, 0x17
je 0x4ff197
cmp edx, 0x18
je 0x4ff126
cmp edx, 0x1e
jne 0x4fed59
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004fdd90
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00409050
mov ecx, dword [esp + 8]
lea eax, [0x51b2e0]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4fecb4
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004fd8e0
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x108], ecx
lea edi, [esp + 0x144]
lea esi, [esp + 0xc]
call fcn.0045adce
lea ecx, [0x532320]
mov dword [esp], ecx
lea ecx, [esp + 0x144]
mov dword [esp + 4], ecx
call fcn.00408ed0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4fecb4
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.004fd580
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x108], ecx
lea edi, [esp + 0x158]
lea esi, [esp + 0xc]
call fcn.0045adce
lea ecx, [0x532320]
mov dword [esp], ecx
lea ecx, [esp + 0x158]
mov dword [esp + 4], ecx
call fcn.00408ed0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x108]
jmp 0x4fecb4
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edi
add esp, 0x24c
ret
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
mov ecx, dword [esp + 0x260]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x264]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x268]
mov dword [esp + 0xc], ebx
call fcn.004fdf90
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x104], ebx
mov ebp, dword [esp + 0x18]
movzx esi, byte [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], edi
mov dword [esp + 0xb4], ebp
xchg esi, eax
mov byte [esp + 0xb8], al
xchg esi, eax
test edx, edx
jne 0x500fc2
mov dword [esp + 0x9c], eax
movzx eax, byte [esp + 0x26d]
test al, al
je 0x500fa1
movzx eax, byte [esp + 0x26e]
test al, al
je 0x500f97
mov eax, 1
mov dword [esp + 0x94], edx
mov dword [esp + 0x100], ebx
mov edx, dword [esp + 0x260]
mov ebx, dword [esp + 0x9c]
cmp edx, ebx
je 0x500f54
cmp eax, ecx
jne 0x500ebc
mov eax, dword [esp + 0x274]
cmp dword [eax], edi
jne 0x500ebc
test ebp, ebp
jne 0x500eb2
mov dword [esp + 0x98], ecx
mov eax, dword [0x61e8dc]
mov ecx, dword [esp + 0x110]
cmp dword [0x61e8d8], ecx
je 0x500e27
test ebp, ebp
jg 0x4ff40c
mov eax, dword [0x61e8c4]
cmp dword [0x61e8c0], ecx
je 0x4ff391
lea eax, [0x53f6fe]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00409050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
lea ecx, [0x56915c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov dword [esp], ecx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00403770
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ff34e
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.004a52e0
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x264]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.004fdf90
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
movzx edx, byte [esp + 0x1c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x104], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0xac], ebp
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], esi
mov byte [esp + 0xb8], dl
test ebx, ebx
jne 0x500e04
mov dword [esp + 0x104], edi
mov dword [esp + 0x94], ebx
mov byte [esp + 0x41], dl
mov dword [esp + 0x7c], esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x50], eax
mov ebx, dword [esp + 0x108]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
call fcn.00501a40
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 8]
movzx edx, byte [esp + 0x11]
movzx ebx, byte [esp + 0x10]
test dl, dl
je 0x500d51
cmp eax, 0x13
jne 0x500d40
mov ebp, dword [esp + 0x48]
test ebp, ebp
jne 0x500d26
mov edx, ebx
mov ebx, dword [esp + 0x44]
cmp ebx, 0x14
jg 0x500d09
cmp ebx, 0xc
jne 0x500cec
mov eax, ebx
cmp ebx, 0x17
jne 0x4ff513
cmp eax, 0x18
jne 0x4ff513
test ebp, ebp
jne 0x4ff513
mov ebx, 0x18
mov esi, ebp
movzx ebp, byte [esp + 0x280]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4ff528
mov ebx, 0x11
mov byte [esp + 0x42], cl
movzx ebp, byte [esp + 0x26d]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x500cad
mov edi, ebx
mov ebx, 0
mov dword [esp + 0x64], ebx
mov ebx, edi
je 0x500c5a
mov ebp, dword [esp + 0x64]
je 0x500c1f
mov dword [esp + 0x60], ebx
test cl, cl
je 0x500c0a
movzx ebp, byte [esp + 0x42]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x5009e2
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x50]
lea ecx, [ebp + ebx]
cmp ecx, ebp
jge 0x4ff5c6
lea eax, [0x536e99]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00409050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x284], ecx
lea ecx, [0x569170]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov esi, dword [esp + 0x260]
cmp esi, ecx
jl 0x4ff586
mov esi, dword [esp + 0x264]
cmp esi, ecx
jb 0x50101c
cmp ecx, ebp
jb 0x501015
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x98], edi
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x258]
mov dword [esp + 8], edx
call fcn.004a3a40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004a4780
mov eax, dword [esp + 0x264]
mov ecx, dword [esp + 0x50]
sub eax, ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x25c]
lea ebp, [eax + ecx]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov dword [esp + 0xfc], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xf8], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0xf4], edi
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xec], edx
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
test esi, esi
je 0x4ff734
mov dword [esp + 0xe8], edx
mov edx, dword [esi + 8]
cmp edx, 0x4c618499
ja 0x5006bb
cmp edx, 0x1c87085b
jne 0x50049e
lea eax, [0x511de0]
cmp edi, eax
jne 0x4ff734
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004fcc90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
je 0x4ff729
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], edx
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov ecx, dword [esp + 0xec]
mov dword [ecx], eax
jmp 0x4ff706
mov dword [esp + 0x8c], ebx
mov dword [esp + 0xdc], ebp
nop
mov eax, dword [esp + 0x258]
mov edx, eax
and eax, 0x1f
cmp eax, 6
ja 0x4ffa4e
cmp eax, 1
jne 0x4ff850
mov eax, dword [esp + 0x7c]
cmp eax, 1
jne 0x4ff822
mov eax, dword [esp + 0x90]
movzx eax, byte [eax + ecx]
test al, al
jne 0x4ff7e4
xor eax, eax
xor ecx, ecx
xor ebx, ebx
test ecx, ecx
je 0x4ff7aa
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov dword [esp + 0x68], ecx
mov dword [esp + 0xc4], ebx
mov ecx, dword [esp + 0x250]
mov dword [esp], ecx
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], al
call fcn.004a52e0
mov ecx, dword [esp + 0x68]
mov ebx, dword [esp + 0xc4]
jmp 0x4ff787
cmp al, 0xff
jne 0x4ff7f4
mov eax, 1
xor ecx, ecx
xor ebx, ebx
jmp 0x4ff783
lea eax, [0x537362]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00409050
mov ebx, dword [esp + 8]
mov edx, dword [esp + 0x258]
xor eax, eax
lea ecx, [0x569170]
jmp 0x4ff783
lea eax, [0x537362]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00409050
mov ebx, dword [esp + 8]
mov edx, dword [esp + 0x258]
lea ecx, [0x569170]
xor eax, eax
jmp 0x4ff783
cmp eax, 2
jne 0x4ff9a5
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004a5db0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x7c]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 4
jne 0x4ff931
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.004fcc90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test ecx, ecx
je 0x4ff8e7
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
mov dword [esp + 0xcc], edx
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x250]
mov dword [esp], ecx
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x258]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004a57a0
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0xcc]
jmp 0x4ff8c4
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.004fca40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
je 0x4ff968
mov edx, ecx
mov ecx, eax
jmp 0x4ff8c4
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
call fcn.004a57a0
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0xc8]
jmp 0x4ff95f
cmp eax, 5
jae 0x4ff859
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004a5db0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x536b72]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00445b20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
lea ecx, [0x56915c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
cmp eax, 0x17
je 0x500215
cmp eax, 0x18
jne 0x4ffd24
mov eax, dword [esp + 0x98]
cmp eax, 0x13
jg 0x4ffc5f
cmp eax, 0xc
je 0x4ffbd8
cmp eax, 0x12
je 0x4ffbaf
cmp eax, 0x13
je 0x4ffb86
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov dword [esp], eax
call fcn.00408f40
mov eax, dword [esp + 4]
lea ecx, [0x51aae0]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], eax
lea eax, [0x53e577]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0x12c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ad550
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov eax, dword [esp + 8]
lea ecx, [0x569170]
xor edx, edx
xor ebx, ebx
test ecx, ecx
je 0x4ffb3b
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x284], edx
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov dword [esp + 0x108], eax
mov dword [esp + 0xa0], ecx
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004a59a0
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0xa0]
jmp 0x4ffb18
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004fdbe0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x4ffb14
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004fdb20
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x4ffb14
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004800f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ffc31
mov dword [esp], 0
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00445ca0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
xor ebx, ebx
mov ebp, ecx
mov ecx, edx
mov edx, ebp
mov esi, eax
mov eax, ebx
mov ebx, esi
jmp 0x4ffb14
nop
lea eax, [0x51e5e0]
mov dword [esp], eax
call fcn.0040b6c0
mov ebx, dword [esp + 4]
mov dword [ebx + 4], 0x1a
lea eax, [0x53b27d]
mov dword [ebx], eax
xor ecx, ecx
lea edx, [0x56906c]
xor eax, eax
jmp 0x4ffc20
cmp eax, 0x16
jg 0x4ffcc4
cmp eax, 0x14
je 0x4ffc9b
cmp eax, 0x16
jne 0x4ffa8b
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004fdce0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x4ffb14
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00445ca0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
xor ecx, ecx
xor eax, eax
jmp 0x4ffb14
cmp eax, 0x1b
je 0x4ffcfb
cmp eax, 0x1e
jne 0x4ffa8b
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004fdd90
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x4ffb14
mov dword [esp], 0
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00445ca0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
xor ecx, ecx
xor eax, eax
jmp 0x4ffb14
cmp eax, 0x19
jne 0x4ff9ae
xor eax, eax
jmp 0x4ffd38
mov ecx, dword [esp + 0x58]
lea eax, [ecx + 1]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x64]
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x58]
cmp dword [esp + 4], eax
jle 0x4ffdd4
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x218]
lea esi, [esp + 8]
call fcn.0045ad7e
mov eax, dword [esp + 0x224]
test eax, eax
je 0x4ffd31
lea eax, [0x53d4ef]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00409050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
lea ecx, [0x56915c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x64]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
jg 0x5001ad
xor eax, eax
test al, al
je 0x4fff36
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x9c]
cmp eax, ecx
ja 0x501009
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov ecx, dword [esp + 0x254]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x258]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.004a44d0
mov eax, dword [esp + 0x264]
mov ecx, dword [esp + 0x268]
sub eax, ecx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ecx
mov ebx, dword [esp + 0x25c]
add eax, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xe4], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x10c], ebp
mov esi, dword [esp + 0x18]
mov dword [esp + 0x88], esi
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
sub eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004090d0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0x61ec88]
test cl, cl
je 0x5001a2
lea ecx, [0x51b660]
mov dword [0x61ec8c], ecx
mov edx, dword [0x63be10]
test edx, edx
jne 0x500192
mov dword [0x61ec90], eax
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], eax
mov ecx, dword [esp + 0x114]
test ecx, ecx
je 0x500187
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4fff05
or edx, 0x80
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004a51b0
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x104]
jmp 0x4fff4b
inc eax
mov dword [esp + 0x108], ebx
mov dword [esp + 0x94], edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x54], ecx
mov ebp, dword [esp + 0xa0]
mov esi, dword [ebp + 0x64]
mov edi, dword [esp + 0xbc]
mov dword [esp], edi
call esi
mov eax, dword [esp + 0x5c]
cmp dword [esp + 4], eax
jle 0x500156
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x2c]
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x1e4]
lea esi, [esp + 8]
call fcn.0045ad7e
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x50014f
mov ecx, dword [esp + 0x1f4]
mov edx, dword [esp + 0x1f8]
mov ebx, dword [0x61e8d4]
cmp dword [0x61e8d0], ecx
je 0x500131
xor ecx, ecx
test cl, cl
je 0x4ffff8
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x108]
jmp 0x4fff4a
mov ecx, dword [esp + 0x250]
mov dword [esp], ecx
mov edx, dword [esp + 0x254]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x258]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a44d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x1fc]
mov ebp, dword [esp + 0x200]
mov dword [esp], ebx
mov dword [esp + 4], ebp
lea ebx, [0x534ade]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 4
call fcn.0049ed10
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.005014e0
lea edi, [esp + 0x180]
lea esi, [esp + 8]
call fcn.0045adc4
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x18], ebx
lea edi, [esp + 0x1c]
lea esi, [esp + 0x180]
call fcn.0045adc4
call fcn.004fe870
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
test ecx, ecx
jne 0x50010e
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x5c]
jmp 0x4fff4a
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], edx
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00403770
movzx ecx, byte [esp + 0xc]
mov eax, dword [esp + 0x5c]
jmp 0x4fffdd
xor ecx, ecx
jmp 0x4fffdd
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4fff05
lea edi, [0x61ec90]
call fcn.0045a680
jmp 0x4ffed3
lea ecx, [0x51b660]
jmp 0x4ffed3
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
mov dword [esp + 4], 0
call ecx
lea edi, [esp + 0x218]
lea esi, [esp + 8]
call fcn.0045ad7e
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x22c]
mov edx, dword [0x61e8d4]
cmp dword [0x61e8d0], eax
je 0x5001fe
xor eax, eax
jmp 0x4ffdf8
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00403770
movzx eax, byte [esp + 0xc]
jmp 0x5001f9
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x5003b2
mov eax, dword [esp + 0x108]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call fcn.004a6360
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x250]
mov dword [esp], ebx
mov ebp, dword [esp + 0x254]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x258]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004a51b0
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.004090d0
mov eax, dword [esp + 0xc]
nop
movzx ecx, byte [0x61ec88]
test cl, cl
je 0x5003a7
lea ecx, [0x516ac0]
mov dword [0x61ec8c], ecx
mov edx, dword [0x63be10]
test edx, edx
jne 0x500397
mov dword [0x61ec90], eax
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
mov ecx, dword [esp + 0x124]
test ecx, ecx
je 0x50038f
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x50032d
or edx, 0x80
mov ebx, dword [esp + 0x250]
mov dword [esp], ebx
mov ebx, dword [esp + 0x254]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x258]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004a6020
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x50032d
lea edi, [0x61ec90]
call fcn.0045a680
jmp 0x5002ff
lea ecx, [0x516ac0]
jmp 0x5002ff
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xdc]
mov dword [esp], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x8c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x108]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.004fe440
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
test eax, eax
je 0x50044f
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ebp
mov dword [esp + 0x28c], esi
add esp, 0x24c
ret
mov dword [esp + 0xc0], esi
mov dword [esp + 0x108], ebp
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004a51b0
mov ebp, dword [esp + 0x108]
mov esi, dword [esp + 0xc0]
jmp 0x50042c
cmp edx, 0x26ca392d
jne 0x500636
lea edx, [0x533600]
cmp edi, edx
jne 0x4ff734
mov ecx, dword [esp + 0x98]
cmp ecx, 0x17
jne 0x50057f
lea edi, [esp + 0x16c]
xor eax, eax
call fcn.0045a8eb
mov dword [esp], ebp
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004fd580
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x16c]
lea esi, [esp + 0xc]
call fcn.0045adce
mov edi, dword [esp + 0xf0]
test byte [edi], al
mov ecx, dword [0x63be10]
test ecx, ecx
jne 0x500552
lea esi, [esp + 0x16c]
call fcn.0045adce
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
mov dword [esp + 0x104], edx
lea eax, [0x532320]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
call fcn.0040fb60
mov edx, dword [esp + 0x104]
jmp 0x500528
lea edi, [esp + 0x16c]
xor eax, eax
call fcn.0045a8eb
mov dword [esp], ebp
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004fd8e0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x16c]
lea esi, [esp + 0xc]
call fcn.0045adce
mov edi, dword [esp + 0xf0]
test byte [edi], al
mov ecx, dword [0x63be10]
test ecx, ecx
jne 0x500609
lea esi, [esp + 0x16c]
call fcn.0045adce
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
mov dword [esp + 0x104], edx
lea eax, [0x532320]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x16c]
mov dword [esp + 8], eax
call fcn.0040fb60
mov edx, dword [esp + 0x104]
jmp 0x5005df
cmp edx, 0x4c618499
jne 0x4ff734
lea eax, [0x51f280]
cmp edi, eax
jne 0x4ff734
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004fd160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0xf8]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x63be10]
test ecx, ecx
jne 0x5006b4
mov dword [edi], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ebx
mov dword [esp + 0x28c], ebp
add esp, 0x24c
ret
call fcn.0045a680
jmp 0x500691
cmp edx, 0x7418f6b4
ja 0x5007a2
cmp edx, 0x4d10f6f9
jne 0x500718
lea eax, [0x511e20]
cmp edi, eax
jne 0x4ff734
mov eax, dword [esp + 0xe8]
mov byte [eax], 1
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
cmp edx, 0x7418f6b4
jne 0x4ff734
lea edx, [0x5117a0]
cmp edi, edx
jne 0x4ff734
mov dword [esp + 0xe0], eax
mov dword [esp], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004fce10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
je 0x500784
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], edx
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov edi, dword [esp + 0xe0]
test byte [edi], al
mov ecx, dword [0x63be10]
test ecx, ecx
jne 0x50079b
mov dword [edi], eax
jmp 0x500761
call fcn.0045a680
jmp 0x500761
cmp edx, 0x8faab972
jne 0x5008be
lea edx, [0x511ea0]
cmp edi, edx
jne 0x4ff734
mov eax, dword [esp + 0x268]
mov edx, dword [esp + 0x9c]
cmp eax, edx
ja 0x50100e
lea edi, [esp + 0x198]
mov esi, eax
xor eax, eax
call fcn.0045a8e7
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x198], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x19c], ecx
movzx ecx, byte [esp + 0x41]
mov byte [esp + 0x1a0], cl
mov dword [esp + 0x1a4], ebp
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], ebx
mov ecx, dword [esp + 0x264]
sub ecx, esi
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, esi
mov ebp, dword [esp + 0x25c]
add ecx, ebp
mov dword [esp + 0x1b0], ecx
sub edx, esi
mov dword [esp + 0x1b4], edx
mov dword [esp + 0x1b8], ebx
mov edi, dword [esp + 0xfc]
test byte [edi], al
mov edx, dword [0x63be10]
test edx, edx
jne 0x50089f
lea esi, [esp + 0x198]
call fcn.0045ada6
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x288], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
lea eax, [0x527a80]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x198]
mov dword [esp + 8], eax
call fcn.0040fb60
jmp 0x50086e
cmp edx, 0xeb2625b9
jne 0x4ff734
lea edx, [0x51f220]
cmp edi, edx
jne 0x4ff734
mov edx, dword [esp + 0x7c]
test edx, edx
je 0x5009b5
mov esi, dword [esp + 0x90]
movzx ecx, byte [esi + ecx]
movzx esi, cl
cmp esi, 7
jle 0x50096b
lea eax, [0x53d74c]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00409050
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
lea esi, [0x569170]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], ebx
mov dword [edi + 8], edx
mov dword [edi + 0xc], ebp
mov edx, dword [0x63be10]
test edx, edx
jne 0x50095e
mov dword [edi], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], esi
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov edx, eax
mov eax, ecx
call fcn.0045a680
mov eax, edx
jmp 0x50093b
cmp edx, 1
jne 0x500974
test esi, esi
jg 0x5008f7
mov eax, ebp
movzx ebp, byte [edx + ebp - 1]
mov edi, ebx
mov ebx, 1
shl ebx, cl
dec ebx
xchg ebp, eax
test bl, al
xchg ebp, eax
jne 0x5008f7
lea ebp, [edx - 1]
mov ebx, ebp
shl ebp, 3
sub ebp, esi
lea edx, [edi - 1]
mov ecx, edx
neg edx
sar edx, 0x1f
and edx, 1
add eax, edx
mov edx, ecx
xor esi, esi
mov ecx, eax
xor eax, eax
jmp 0x50091f
lea eax, [0x539c5d]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.00409050
mov eax, dword [esp + 8]
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
lea esi, [0x569170]
jmp 0x50091f
movzx ebp, byte [esp + 0x41]
xchg ebp, eax
cmp dl, al
xchg ebp, eax
je 0x4ff576
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x26c]
call fcn.0045adc4
call fcn.00501040
movzx eax, byte [esp + 0x24]
test al, al
je 0x500a60
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x104]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
mov eax, dword [esp + 0x48]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xb4], eax
movzx eax, byte [esp + 0x41]
mov byte [esp + 0xb8], al
lea edi, [esp + 0x180]
lea esi, [esp + 0x26c]
call fcn.0045adc4
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x60]
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x9c], ecx
lea edi, [esp + 0x1bc]
xor eax, eax
call fcn.0045a8e6
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00408f40
mov eax, dword [esp + 4]
lea ecx, [0x51aae0]
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], eax
lea eax, [0x525f00]
mov dword [esp], eax
lea eax, [esp + 0xac]
mov dword [esp + 4], eax
call fcn.00409150
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
lea eax, [0x52bd80]
mov dword [esp], eax
lea eax, [esp + 0x180]
mov dword [esp + 4], eax
call fcn.00408ed0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ecx
mov eax, dword [esp + 0x108]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
call fcn.00409050
mov eax, dword [esp + 8]
lea ecx, [0x51b2e0]
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d8], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00408f40
mov eax, dword [esp + 4]
lea ecx, [0x51aae0]
mov dword [esp + 0x1dc], ecx
mov dword [esp + 0x1e0], eax
lea eax, [0x53e87e]
mov dword [esp], eax
mov dword [esp + 4], 0x27
lea eax, [esp + 0x1bc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004ad550
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x50]
lea ecx, [0x56915c]
jmp 0x500a44
cmp esi, ebp
jne 0x5009f1
cmp eax, ebx
jne 0x5009f1
jmp 0x4ff567
mov dword [esp + 0x60], ebx
movzx ebx, byte [esp + 0x26f]
test bl, bl
je 0x500c51
mov ebx, dword [esp + 0x274]
test ebx, ebx
je 0x500c48
mov ebx, dword [ebx]
xor ecx, ecx
mov ebp, 3
jmp 0x4ff55b
mov ebx, dword [esp + 0x60]
jmp 0x4ff55b
mov ebx, dword [esp + 0x60]
jmp 0x4ff55b
mov dword [esp + 0x90], ebx
movzx ebx, byte [esp + 0x26e]
test bl, bl
je 0x500c9d
mov ebx, dword [esp + 0x274]
test ebx, ebx
je 0x500c8d
mov ebx, dword [ebx]
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebp, 1
mov ecx, 0
jmp 0x4ff555
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0x90]
jmp 0x4ff551
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0x90]
jmp 0x4ff551
mov edi, ebx
mov ebx, dword [esp + 0x274]
test ebx, ebx
je 0x500ce1
mov ebx, dword [ebx]
xchg ebp, eax
test al, al
xchg ebp, eax
mov dword [esp + 0xa4], eax
mov eax, 2
mov dword [esp + 0x64], eax
mov ecx, 0
mov eax, dword [esp + 0xa4]
jmp 0x4ff54b
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, edi
jmp 0x4ff53e
cmp ebx, 0x12
je 0x4ff4fe
cmp ebx, 0x14
je 0x4ff4fe
mov ebx, eax
mov eax, dword [esp + 0x44]
jmp 0x4ff500
cmp ebx, 0x16
je 0x4ff4fe
cmp ebx, 0x1b
je 0x4ff4fe
cmp ebx, 0x1e
je 0x4ff4fe
jmp 0x500cfe
mov edx, ebx
mov ebx, dword [esp + 0x278]
test ebx, ebx
je 0x500d3c
mov eax, dword [esp + 0x44]
jmp 0x4ff500
mov ebx, eax
jmp 0x500d33
mov edx, ebx
mov ebp, dword [esp + 0x48]
mov ebx, eax
mov eax, dword [esp + 0x44]
jmp 0x4ff500
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov eax, dword [esp + 0x110]
test eax, eax
je 0x500dfd
mov ecx, dword [eax + 4]
mov dword [esp + 0x12c], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x130], eax
lea eax, [0x538aa4]
mov dword [esp], eax
mov dword [esp + 4], 0x13
lea eax, [esp + 0x12c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004ad550
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x284], ecx
lea ecx, [0x56915c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov ecx, eax
jmp 0x500d79
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], edi
add esp, 0x24c
ret
xchg esi, eax
mov byte [esp + 0x43], al
xchg esi, eax
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x84], edi
mov dword [esp], ecx
mov edx, dword [esp + 0x10c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00403770
movzx eax, byte [esp + 0xc]
test al, al
je 0x500e8f
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x94]
movzx edx, byte [esp + 0x43]
mov edi, dword [esp + 0x100]
jmp 0x4ff47a
mov eax, dword [esp + 0x8c]
test eax, eax
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x260]
mov ebx, dword [esp + 0x9c]
jmp 0x4ff33a
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4ff318
mov eax, dword [esp + 0x250]
mov dword [esp], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x258]
mov dword [esp + 8], eax
lea edi, [esp + 0xc]
lea esi, [esp + 0x26c]
call fcn.0045adc4
call fcn.00501040
movzx eax, byte [esp + 0x24]
test al, al
je 0x500f2b
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x100]
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], edx
add esp, 0x24c
ret
lea eax, [0x53e185]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.00409050
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x9c]
lea ecx, [0x56915c]
jmp 0x500f0f
lea eax, [0x53ac98]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00409050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x284], ecx
lea ecx, [0x56915c]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x28c], eax
add esp, 0x24c
ret
mov eax, 2
jmp 0x4ff2d5
mov eax, dword [esp + 0x9c]
mov eax, esi
mov esi, ebp
mov ebp, ecx
mov ecx, edi
mov edi, ebx
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0x9c]
jmp 0x4ff47a
mov dword [esp + 0x284], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], ebx
add esp, 0x24c
ret
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x6c]
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
sete al
jmp 0x4fe9a1
call fcn.0045a760
mov ecx, edx
call fcn.0045a760
mov eax, ebp
call fcn.0045a760
mov edx, esi
call fcn.0045a740
mov ecx, esi
call fcn.0045a760
mov ecx, esi
mov edx, ebx
call fcn.0045a740
nop
call fcn.00459120
jmp fcn.004fe870