Function at 0x4ca850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x585c46
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a8
mov eax, dword [0xab5b48]
push ebx
push ebp
push esi
mov ebx, ecx
push edi
lea ecx, [esp + 0x60]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x20], eax
call fcn.00401920
lea ecx, [esp + 0x80]
call fcn.00401920
mov edi, dword [0xab5394]
mov dword [esp + 0xd4], 0
mov ecx, edi
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0x3f800000
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0x3f800000
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0x3f800000
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0x3f800000
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0x3f800000
mov dword [esp + 0x24], edi
call fcn.0045f4e0
mov cx, word [ebx + 0x14]
mov dword [esp + 0x4c], eax
push ecx
mov ecx, edi
call fcn.004894c0
mov esi, eax
test esi, esi
mov dword [esp + 0x18], esi
je 0x4cb706
mov ecx, esi
call fcn.004915b0
test al, al
jne 0x4cb706
mov ecx, edi
call fcn.00486870
test al, al
jne 0x4ca9c9
mov ecx, esi
call fcn.00492b20
test al, al
jne 0x4ca9c9
mov ecx, esi
call fcn.004916f0
test al, al
je 0x4cb706
mov al, byte [ebx + 0x3464]
mov byte [esp + 0x17], 1
test al, al
je 0x4caa06
push 0
push 0
call fcn.0050ef00
add esp, 8
test al, al
jne 0x4caa06
mov ecx, esi
mov byte [esp + 0x17], al
call fcn.00492b20
test al, al
jne 0x4caa06
mov ecx, esi
call fcn.004916f0
test al, al
je 0x4cb706
mov esi, dword [ebx + 0x2350]
test esi, esi
jne 0x4caa18
mov eax, dword [ebx + 0x634]
jmp 0x4caa33
lea eax, [esi - 1]
mov ecx, 0x14
cdq
idiv ecx
lea eax, [edx + 0x28]
mov edx, eax
shl edx, 5
sub edx, eax
lea eax, [ebx + edx*4]
add eax, 0x48
lea ecx, [esp + 0x38]
push eax
call fcn.00499d60
cmp esi, 1
jg 0x4caa4e
call fcn.00543d70
call fcn.005749d0
jmp 0x4caa89
lea eax, [esi - 1]
mov ecx, 0x14
cdq
idiv ecx
lea eax, [esi - 2]
mov esi, 0x14
mov ecx, edx
cdq
idiv esi
lea eax, [ecx + 0x28]
mov ecx, eax
shl ecx, 5
sub ecx, eax
lea ecx, [ebx + ecx*4]
lea eax, [edx + 0x28]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0x74]
mov ecx, dword [ebx + edx*4 + 0x74]
lea edx, [ebx + edx*4]
sub eax, ecx
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4caaa1
mov eax, 0x3e8
cdq
idiv dword [0x5b6ca0]
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x2350]
cmp eax, 1
jg 0x4caab7
mov eax, dword [ebx + 0x634]
add eax, 0x10
jmp 0x4caad2
add eax, 0xfffffffe
mov ecx, 0x14
cdq
idiv ecx
lea eax, [edx + 0x28]
mov edx, eax
shl edx, 5
sub edx, eax
lea eax, [ebx + edx*4]
add eax, 0x48
lea ecx, [esp + 0x50]
push eax
call fcn.00499d60
fld dword [esp + 0x44]
fsub dword [esp + 0x5c]
sub esp, 0x10
lea ecx, [esp + 0x118]
fstp dword [esp + 0xc]
fld dword [esp + 0x50]
fsub dword [esp + 0x68]
fstp dword [esp + 8]
fld dword [esp + 0x4c]
fsub dword [esp + 0x64]
fstp dword [esp + 4]
fld dword [esp + 0x48]
fsub dword [esp + 0x60]
fstp dword [esp]
call fcn.0045dab0
fild dword [esp + 0x10]
lea ecx, [esp + 0x108]
lea edx, [esp + 0xc4]
fdivr dword [0x589288]
fstp dword [esp + 0x48]
mov eax, dword [esp + 0x48]
push eax
push ecx
push edx
call fcn.00402ac0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x104], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x1d4]
mov dword [esp + 0x108], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x78], ecx
add esp, 0xc
mov ecx, eax
cmp eax, 8
mov dword [esp + 0x64], edx
mov dword [esp + 0x48], ecx
jge 0x4cb706
jmp 0x4cabb9
mov edi, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
call fcn.004fa2b0
mov esi, eax
test esi, esi
je 0x4cb6f4
cmp esi, ebx
je 0x4cb6f4
mov al, byte [esi + 0x3464]
test al, al
jne 0x4cb6f4
mov eax, dword [esi + 0x14]
mov ecx, edi
push eax
call fcn.004894c0
mov ebp, eax
test ebp, ebp
je 0x4cb6f4
mov ecx, ebp
call fcn.004915b0
test al, al
jne 0x4cb6f4
mov ecx, ebp
call fcn.00492b20
test al, al
jne 0x4cb6f4
mov ecx, dword [esp + 0x18]
call fcn.004916f0
test al, al
je 0x4cac40
mov ecx, ebp
call fcn.004916f0
test al, al
je 0x4cac40
mov ecx, dword [esp + 0x18]
call fcn.00491710
cmp eax, dword [ebp + 0x24]
jne 0x4cb6f4
mov ecx, dword [esp + 0x20]
call fcn.004fa670
mov ecx, eax
call fcn.004e54f0
test al, al
je 0x4cac64
mov eax, dword [esp + 0x18]
mov edx, dword [ebp + 0x24]
cmp edx, dword [eax + 0x24]
je 0x4cb6f4
mov edi, dword [esi + 0x2350]
test edi, edi
jne 0x4cac76
mov eax, dword [esi + 0x634]
jmp 0x4cac91
lea eax, [edi - 1]
mov ecx, 0x14
cdq
idiv ecx
lea eax, [edx + 0x28]
mov edx, eax
shl edx, 5
sub edx, eax
lea eax, [esi + edx*4]
add eax, 0x48
lea ecx, [esp + 0x38]
push eax
call fcn.00499d60
cmp edi, 1
jg 0x4cacac
call fcn.00543d70
call fcn.005749d0
jmp 0x4cace7
lea eax, [edi - 1]
mov ecx, 0x14
cdq
idiv ecx
lea eax, [edi - 2]
mov edi, 0x14
mov ecx, edx
cdq
idiv edi
lea eax, [ecx + 0x28]
mov ecx, eax
shl ecx, 5
sub ecx, eax
lea ecx, [esi + ecx*4]
lea eax, [edx + 0x28]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0x74]
mov ecx, dword [esi + edx*4 + 0x74]
lea edx, [esi + edx*4]
sub eax, ecx
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4cacff
mov eax, 0x3e8
cdq
idiv dword [0x5b6ca0]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x2350]
cmp eax, 1
jg 0x4cad15
mov eax, dword [esi + 0x634]
add eax, 0x10
jmp 0x4cad30
add eax, 0xfffffffe
mov ecx, 0x14
cdq
idiv ecx
lea eax, [edx + 0x28]
mov edx, eax
shl edx, 5
sub edx, eax
lea eax, [esi + edx*4]
add eax, 0x48
lea ecx, [esp + 0x118]
push eax
call fcn.00499d60
fld dword [esp + 0x44]
fsub dword [esp + 0x124]
sub esp, 0x10
lea ecx, [esp + 0x1a8]
fstp dword [esp + 0xc]
fld dword [esp + 0x50]
fsub dword [esp + 0x130]
fstp dword [esp + 8]
fld dword [esp + 0x4c]
fsub dword [esp + 0x12c]
fstp dword [esp + 4]
fld dword [esp + 0x48]
fsub dword [esp + 0x128]
fstp dword [esp]
call fcn.0045dab0
fild dword [esp + 0x10]
lea ecx, [esp + 0x198]
lea edx, [esp + 0x50]
fdivr dword [0x589288]
fstp dword [esp + 0x10]
mov eax, dword [esp + 0x10]
push eax
push ecx
push edx
call fcn.00402ac0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xb4], ecx
add esp, 0xc
lea ecx, [esp + 0xa4]
mov dword [esp + 0xac], edx
mov dword [esp + 0xb0], eax
call fcn.00403940
fsqrt
fcomp dword [0x58971c]
fnstsw ax
and eax, 0x4100
jne 0x4cae54
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0xa4]
call fcn.00403940
fsqrt
sub esp, 0x30
fld dword [esp + 0x70]
fstp qword [esp + 0x28]
fld dword [esp + 0x6c]
fstp qword [esp + 0x20]
fld dword [esp + 0x68]
fstp qword [esp + 0x18]
fld dword [esp + 0x70]
fstp qword [esp + 0x10]
fld dword [esp + 0x6c]
fstp qword [esp + 8]
fld dword [esp + 0x68]
fstp qword [esp]
push esi
sub esp, 8
fstp qword [esp]
push str.BAD_VEL___f__skater___d___nmPos____f__f__f__mOld____f__f__f__n
call fcn.00535ef0
add esp, 0x40
jmp 0x4cb6f4
mov al, byte [esi + 0x3538]
mov ecx, dword [0xab5394]
test al, al
je 0x4cae7d
call fcn.00485bf0
test al, al
push 1
je 0x4cae76
push str.InternetServerCollRadius
jmp 0x4cae94
push str.LanServerCollRadius
jmp 0x4cae94
call fcn.00485bf0
test al, al
push 1
je 0x4cae8f
push str.InternetClientCollRadius
jmp 0x4cae94
push str.LanClientCollRadius
call fcn.004196d0
mov al, byte [esi + 0x3538]
mov ecx, dword [0xab5394]
fstp dword [esp + 0x18]
add esp, 8
test al, al
je 0x4caec9
call fcn.00485bf0
test al, al
push 1
je 0x4caec2
push str.InternetServerCollCoefficient
jmp 0x4caee0
push str.LanServerCollCoefficient
jmp 0x4caee0
call fcn.00485bf0
test al, al
push 1
je 0x4caedb
push str.InternetClientCollCoefficient
jmp 0x4caee0
push str.LanClientCollCoefficient
call fcn.004196d0
fld dword [esp + 0xd8]
add esp, 8
lea ecx, [esp + 0x148]
fmul st(1)
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [esp + 0xdc]
fmul st(1)
fstp dword [esp + 8]
fld dword [esp + 0xd8]
fmul st(1)
fstp dword [esp + 4]
fld dword [esp + 0xd4]
fmul st(1)
fstp dword [esp]
fstp st(0)
call fcn.0045dab0
fld dword [esp + 0x154]
fadd dword [esp + 0x6c]
sub esp, 0x10
lea ecx, [esp + 0x148]
fstp dword [esp + 0xc]
fld dword [esp + 0x160]
fadd dword [esp + 0x78]
fstp dword [esp + 8]
fld dword [esp + 0x15c]
fadd dword [esp + 0x74]
fstp dword [esp + 4]
fld dword [esp + 0x158]
fadd dword [esp + 0x70]
fstp dword [esp]
call fcn.0045dab0
mov ecx, dword [esp + 0x138]
mov edx, dword [esp + 0x13c]
mov eax, dword [esp + 0x140]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x144]
mov dword [esp + 0x74], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x80], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
mov ecx, dword [0xab5394]
mov dword [esp + 0x8c], edx
mov al, byte [esi + 0x3538]
test al, al
je 0x4caff7
call fcn.00485bf0
test al, al
push 1
je 0x4caff0
push str.InternetServerCollCoefficient
jmp 0x4cb00e
push str.LanServerCollCoefficient
jmp 0x4cb00e
call fcn.00485bf0
test al, al
push 1
je 0x4cb009
push str.InternetClientCollCoefficient
jmp 0x4cb00e
push str.LanClientCollCoefficient
call fcn.004196d0
fld dword [esp + 0x64]
add esp, 8
lea ecx, [esp + 0x188]
fmul st(1)
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [esp + 0x68]
fmul st(1)
fstp dword [esp + 8]
fld dword [esp + 0x64]
fmul st(1)
fstp dword [esp + 4]
fld dword [esp + 0x60]
fmul st(1)
fstp dword [esp]
fstp st(0)
call fcn.0045dab0
fld dword [esp + 0x194]
fadd dword [esp + 0x8c]
sub esp, 0x10
lea ecx, [esp + 0x168]
fstp dword [esp + 0xc]
fld dword [esp + 0x1a0]
fadd dword [esp + 0x98]
fstp dword [esp + 8]
fld dword [esp + 0x19c]
fadd dword [esp + 0x94]
fstp dword [esp + 4]
fld dword [esp + 0x198]
fadd dword [esp + 0x90]
fstp dword [esp]
call fcn.0045dab0
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x15c]
mov edx, dword [esp + 0x160]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], edx
lea ecx, [esp + 0x104]
mov dword [esp + 0x9c], eax
push 1
lea edx, [esp + 0x108]
push ecx
lea eax, [esp + 0xec]
push edx
lea ecx, [esp + 0xe0]
push eax
lea edx, [esp + 0x90]
push ecx
lea eax, [esp + 0x74]
push edx
push eax
call fcn.00401950
add esp, 0x1c
sub esp, 0x10
test al, al
je 0x4cb1a2
fld dword [esp + 0xf0]
fsub dword [esp + 0x100]
lea ecx, [esp + 0x138]
fstp dword [esp + 0xc]
fld dword [esp + 0xec]
fsub dword [esp + 0xfc]
fstp dword [esp + 8]
fld dword [esp + 0xe8]
fsub dword [esp + 0xf8]
fstp dword [esp + 4]
fld dword [esp + 0xe4]
fsub dword [esp + 0xf4]
fstp dword [esp]
call fcn.0045dab0
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x12c]
mov eax, dword [esp + 0x130]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x134]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
jmp 0x4cb37b
fld dword [esp + 0x9c]
fsub dword [esp + 0x7c]
lea ecx, [esp + 0x178]
fstp dword [esp + 0xc]
fld dword [esp + 0x98]
fsub dword [esp + 0x78]
fstp dword [esp + 8]
fld dword [esp + 0x94]
fsub dword [esp + 0x74]
fstp dword [esp + 4]
fld dword [esp + 0x90]
fsub dword [esp + 0x70]
fstp dword [esp]
call fcn.0045dab0
mov edx, dword [esp + 0x168]
mov ecx, dword [esp + 0x170]
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x174]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x28]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], edx
call fcn.00403940
fsqrt
fcomp dword [esp + 0x10]
fnstsw ax
test ah, 5
jnp 0x4cb395
fld dword [esp + 0x8c]
fsub dword [esp + 0x7c]
sub esp, 0x10
lea ecx, [esp + 0x188]
fstp dword [esp + 0xc]
fld dword [esp + 0x98]
fsub dword [esp + 0x88]
fstp dword [esp + 8]
fld dword [esp + 0x94]
fsub dword [esp + 0x84]
fstp dword [esp + 4]
fld dword [esp + 0x90]
fsub dword [esp + 0x80]
fstp dword [esp]
call fcn.0045dab0
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x17c]
mov edx, dword [esp + 0x180]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x28]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
call fcn.00403940
fsqrt
fcomp dword [esp + 0x10]
fnstsw ax
test ah, 5
jnp 0x4cb395
fld dword [esp + 0x9c]
fsub dword [esp + 0x6c]
sub esp, 0x10
lea ecx, [esp + 0x118]
fstp dword [esp + 0xc]
fld dword [esp + 0xa8]
fsub dword [esp + 0x78]
fstp dword [esp + 8]
fld dword [esp + 0xa4]
fsub dword [esp + 0x74]
fstp dword [esp + 4]
fld dword [esp + 0xa0]
fsub dword [esp + 0x70]
fstp dword [esp]
call fcn.0045dab0
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x10c]
mov eax, dword [esp + 0x110]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x114]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x28]
mov dword [esp + 0x30], eax
call fcn.00403940
fsqrt
fcomp dword [esp + 0x10]
fnstsw ax
test ah, 5
jnp 0x4cb395
lea edx, [esp + 0x70]
lea eax, [esp + 0x90]
push edx
lea ecx, [esp + 0x1ac]
push eax
push ecx
call fcn.00404c70
add esp, 0xc
lea ecx, [esp + 0x28]
push eax
call fcn.00499d60
lea ecx, [esp + 0x28]
call fcn.00403940
fsqrt
fcomp dword [esp + 0x10]
fnstsw ax
test ah, 5
jp 0x4cb6f4
lea ecx, [esp + 0xf4]
call fcn.00403940
fstp dword [esp + 0x10]
lea ecx, [esp + 0xa4]
call fcn.00403940
fsqrt
fld dword [esp + 0x10]
fsqrt
fcompp
fnstsw ax
test ah, 0x41
jnp 0x4cb3d3
mov ecx, dword [esp + 0x18]
call fcn.00492b20
test al, al
je 0x4cb6f4
mov al, byte [esp + 0x17]
test al, al
je 0x4cb473
mov edi, dword [esp + 0x18]
mov eax, dword [esi + 0x14]
mov ecx, edi
mov byte [esp + 0x16], al
mov byte [ebx + 0x97a], 1
call fcn.00491580
push 0
push 0
push 8
push 2
lea edx, [esp + 0x26]
push 0x80
push edx
push 1
push 0x43
mov ecx, edi
call fcn.00492bd0
mov edi, dword [esp + 0x6c]
push eax
mov ecx, edi
call fcn.0042f340
mov al, byte [ebx + 0x14]
push 0
push 0
push 8
push 2
lea ecx, [esp + 0x26]
push 0x80
push ecx
push 1
push 0x44
mov ecx, ebp
mov byte [esp + 0x36], al
call fcn.00492bd0
push eax
mov ecx, edi
call fcn.0042f340
push 0
push 0
call fcn.0050ef00
add esp, 8
test al, al
je 0x4cb473
mov edi, dword [esi + 0x3818]
mov ecx, edi
call fcn.004f6fa0
inc eax
mov ecx, edi
push eax
call fcn.004f6ec0
mov ecx, dword [esp + 0x20]
call fcn.004fa670
mov ecx, eax
call fcn.004e5790
push str.netking
mov edi, eax
call fcn.00413eb0
add esp, 4
cmp edi, eax
je 0x4cb616
mov ecx, dword [esp + 0x20]
call fcn.004fa670
mov ecx, eax
call fcn.004e5790
push str.king
mov edi, eax
call fcn.00413eb0
add esp, 4
cmp edi, eax
je 0x4cb616
mov ecx, dword [esp + 0x20]
call fcn.004fa670
mov ecx, eax
call fcn.004e5790
push str.netctf
mov edi, eax
call fcn.00413eb0
add esp, 4
cmp edi, eax
jne 0x4cb6f4
mov ecx, dword [esp + 0x20]
call fcn.004fa670
mov ecx, eax
call fcn.004e5040
test al, al
jne 0x4cb706
mov ecx, dword [esp + 0x18]
call fcn.004916f0
test al, al
je 0x4cb6f4
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0x58aa94
mov eax, dword [esi + 0x14]
mov esi, dword [esp + 0x18]
mov ecx, esi
mov dword [esp + 0x1c0], 1
mov byte [esp + 0x1c], al
call fcn.00491710
mov ecx, esi
mov byte [esp + 0x1d], al
call fcn.00491710
mov esi, dword [ebp + 0x24]
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0xbc]
cmp eax, esi
push 1
push edx
sete bl
call fcn.00489730
mov esi, eax
test esi, esi
je 0x4cb5ff
mov ecx, esi
call fcn.00491540
test bl, bl
je 0x4cb5a4
test al, al
je 0x4cb58c
mov ecx, ebp
call fcn.004921d0
jmp 0x4cb5e2
push 0
push 0
push 8
push 2
lea eax, [esp + 0x2c]
push 0x80
push eax
push 2
push 0x73
jmp 0x4cb5d1
test al, al
je 0x4cb5bb
mov ecx, dword [esp + 0x18]
call fcn.00491710
push eax
mov ecx, ebp
call fcn.00491a60
jmp 0x4cb5e2
push 0
push 0
push 8
push 2
lea ecx, [esp + 0x2c]
push 0x80
push ecx
push 2
push 0x74
mov ecx, esi
call fcn.00492bd0
mov ecx, dword [esp + 0x6c]
push eax
call fcn.0042f340
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0xbc]
push 1
push edx
call fcn.00489820
mov esi, eax
test esi, esi
jne 0x4cb574
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0xbc], 0x58aa94
jmp 0x4cb6e9
mov ecx, dword [esp + 0x20]
call fcn.004fa670
mov ecx, eax
call fcn.004e5040
test al, al
jne 0x4cb706
mov ecx, dword [esp + 0x18]
call fcn.00492b20
test al, al
je 0x4cb6f4
xor eax, eax
mov dword [esp + 0xb4], 0x58aa94
mov dword [esp + 0xb8], eax
push 1
mov ecx, ebp
mov dword [esp + 0x1c4], eax
call fcn.00492470
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0xb4]
push 1
push eax
call fcn.00489730
mov edi, eax
test edi, edi
je 0x4cb6de
mov ecx, edi
call fcn.00491540
test al, al
jne 0x4cb6c5
mov ecx, dword [esp + 0x24]
call fcn.0045f4e0
push 0
push 0
push 8
push 2
lea ecx, [esp + 0x2f]
push 0x80
mov ebp, eax
mov eax, dword [esi + 0x14]
push ecx
push 1
push 0x55
mov ecx, edi
mov byte [esp + 0x3f], al
call fcn.00492bd0
push eax
mov ecx, ebp
call fcn.0042f340
mov ebx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0xb4]
push 1
push edx
call fcn.00489820
mov edi, eax
test edi, edi
jne 0x4cb67c
mov dword [esp + 0xb4], 0x58aa94
mov dword [esp + 0x1c0], 0xffffffff
mov ecx, dword [esp + 0x48]
inc ecx
cmp ecx, 8
mov dword [esp + 0x48], ecx
jl 0x4cabb5
mov ecx, dword [esp + 0x1b8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1b4
ret 4