00b74fa0: push ebx
00b74fa1: push esi
00b74fa2: push edi
00b74fa3: call 0x4a8350
00b74fa8: mov ecx, eax
00b74faa: call 0x5fa480
00b74faf: mov ecx, eax
00b74fb1: call 0x4a8360
00b74fb6: call 0x4a8350
00b74fbb: xor ecx, ecx
00b74fbd: mov edi, eax
00b74fbf: call 0x5fa580
00b74fc4: mov ebx, eax
00b74fc6: mov esi, ebx
00b74fc8: jmp 0xb74fd0
00b74fca: lea ebx, [ebx]
00b74fd0: mov edx, 0x400
00b74fd5: mov ecx, esi
00b74fd7: call 0x4a92d0
00b74fdc: test eax, eax
00b74fde: je 0xb74fe5
00b74fe0: cmp edi, dword ptr [esi + 0x70]
00b74fe3: je 0xb7504e
00b74fe5: mov ecx, esi
00b74fe7: call 0x5fa5b0
00b74fec: mov esi, eax
00b74fee: cmp esi, ebx
00b74ff0: jne 0xb74fd0
00b74ff2: xor esi, esi
00b74ff4: lea ecx, [esi + 3]
00b74ff7: call 0x5fdbe0
00b74ffc: test eax, eax
00b74ffe: jle 0xb75020
00b75000: mov edx, esi
00b75002: mov ecx, 3
00b75007: call 0x5fdb20
00b7500c: cmp dword ptr [eax + 0x70], edi
00b7500f: je 0xb7504e
00b75011: mov ecx, 3
00b75016: inc esi
00b75017: call 0x5fdbe0
00b7501c: cmp esi, eax
00b7501e: jl 0xb75000
00b75020: mov eax, dword ptr [edi + 0x34]
00b75023: shl eax, 0xa
00b75026: sar eax, 0x1b
00b75029: sub eax, 0
00b7502c: je 0xb7504e
00b7502e: sub eax, 2
00b75031: je 0xb75057
00b75033: sub eax, 0xa
00b75036: jne 0xb74fa3
00b7503c: call 0x4acaf0
00b75041: neg eax
00b75043: sbb eax, eax
00b75045: inc eax
00b75046: test eax, eax
00b75048: jne 0xb74fa3
00b7504e: pop edi
00b7504f: pop esi
00b75050: mov eax, 1
00b75055: pop ebx
00b75056: ret 
00b75057: call 0x54c7a0
00b7505c: cmp byte ptr [eax + 0x8b], 0
00b75063: je 0xb74fa3
00b75069: pop edi
00b7506a: pop esi
00b7506b: mov eax, 1
00b75070: pop ebx
00b75071: ret 
00b75072: int3 
00b75073: int3 
00b75074: int3 
00b75075: int3 
00b75076: int3 
00b75077: int3 
00b75078: int3 
00b75079: int3 
00b7507a: int3 
00b7507b: int3 
00b7507c: int3 
00b7507d: int3 
00b7507e: int3 
00b7507f: int3 
00b75080: push ebx
00b75081: push esi
00b75082: push edi
00b75083: call 0x4a8350
00b75088: mov ecx, eax
00b7508a: call 0x5fa500
00b7508f: mov ecx, eax
00b75091: call 0x4a8360
00b75096: call 0x4a8350
00b7509b: xor ecx, ecx
00b7509d: mov edi, eax
00b7509f: call 0x5fa580
00b750a4: mov ebx, eax
00b750a6: mov esi, ebx
00b750a8: jmp 0xb750b0
00b750aa: lea ebx, [ebx]
00b750b0: mov edx, 0x400
00b750b5: mov ecx, esi
00b750b7: call 0x4a92d0
00b750bc: test eax, eax
00b750be: je 0xb750c5
00b750c0: cmp edi, dword ptr [esi + 0x70]
00b750c3: je 0xb7512e
00b750c5: mov ecx, esi
00b750c7: call 0x5fa5b0
00b750cc: mov esi, eax
00b750ce: cmp esi, ebx
00b750d0: jne 0xb750b0
00b750d2: xor esi, esi
00b750d4: lea ecx, [esi + 3]
00b750d7: call 0x5fdbe0
00b750dc: test eax, eax
00b750de: jle 0xb75100
00b750e0: mov edx, esi
00b750e2: mov ecx, 3
00b750e7: call 0x5fdb20
00b750ec: cmp dword ptr [eax + 0x70], edi
00b750ef: je 0xb7512e
00b750f1: mov ecx, 3
00b750f6: inc esi
00b750f7: call 0x5fdbe0
00b750fc: cmp esi, eax
00b750fe: jl 0xb750e0
00b75100: mov eax, dword ptr [edi + 0x34]
00b75103: shl eax, 0xa
00b75106: sar eax, 0x1b
00b75109: sub eax, 0
00b7510c: je 0xb7512e
00b7510e: sub eax, 2
00b75111: je 0xb75137
00b75113: sub eax, 0xa
00b75116: jne 0xb75083
00b7511c: call 0x4acaf0
00b75121: neg eax
00b75123: sbb eax, eax
00b75125: inc eax
00b75126: test eax, eax
00b75128: jne 0xb75083
00b7512e: pop edi
00b7512f: pop esi
00b75130: mov eax, 1
00b75135: pop ebx
00b75136: ret 
00b75137: call 0x54c7a0
00b7513c: cmp byte ptr [eax + 0x8b], 0
00b75143: je 0xb75083
00b75149: pop edi
00b7514a: pop esi
00b7514b: mov eax, 1
00b75150: pop ebx
00b75151: ret 
00b75152: int3 
00b75153: int3 
00b75154: int3 
00b75155: int3 
00b75156: int3 
00b75157: int3 
00b75158: int3 
00b75159: int3 
00b7515a: int3 
00b7515b: int3 
00b7515c: int3 
00b7515d: int3 
00b7515e: int3 
00b7515f: int3 
00b75160: sub esp, 0x14
00b75163: push esi
00b75164: mov esi, ecx
00b75166: call 0x4a8350
00b7516b: lea ecx, [esp + 8]
00b7516f: mov dword ptr [esp + 4], eax
00b75173: lea eax, [esp + 4]
00b75177: push ecx
00b75178: mov edx, 0x2506826a
00b7517d: mov ecx, esi
00b7517f: mov dword ptr [esp + 0xc], 0
00b75187: mov dword ptr [esp + 0x10], 1
00b7518f: mov dword ptr [esp + 0x14], eax
00b75193: mov dword ptr [esp + 0x18], 0xd5ce10
00b7519b: call 0xdc09d0
00b751a0: pop esi
00b751a1: add esp, 0x14
00b751a4: ret 
00b751a5: int3 
00b751a6: int3 
00b751a7: int3 
00b751a8: int3 
00b751a9: int3 
00b751aa: int3 
00b751ab: int3 
00b751ac: int3 
00b751ad: int3 
00b751ae: int3 
00b751af: int3 
00b751b0: call 0x4aad90
00b751b5: test eax, eax
00b751b7: je 0xb751cc
00b751b9: call 0x4aad90
00b751be: lea ecx, [eax - 1]
00b751c1: call 0x4b0a90
00b751c6: mov eax, 1
00b751cb: ret 
00b751cc: mov ecx, 4
00b751d1: call 0x4b0a90
00b751d6: mov eax, 1
00b751db: ret 
00b751dc: int3 
00b751dd: int3 
00b751de: int3 
00b751df: int3 
00b751e0: call 0x4aad90
00b751e5: cmp eax, 4
00b751e8: je 0xb751fd
00b751ea: call 0x4aad90
00b751ef: lea ecx, [eax + 1]
00b751f2: call 0x4b0a90
00b751f7: mov eax, 1
00b751fc: ret 
00b751fd: xor ecx, ecx
00b751ff: call 0x4b0a90
00b75204: mov eax, 1
00b75209: ret 
00b7520a: int3 
00b7520b: int3 
00b7520c: int3 
00b7520d: int3 
00b7520e: int3 
00b7520f: int3 
00b75210: sub esp, 0x14
00b75213: push esi
00b75214: mov esi, ecx
00b75216: mov dword ptr [esp + 8], 0
00b7521e: mov dword ptr [esp + 0xc], 1
004a9980: push esi
004a9981: mov esi, ecx
004a9983: xor ecx, ecx
004a9985: call 0xa09fd0
004a998a: mov edx, dword ptr [eax + 0x2c]
004a998d: mov ecx, esi
004a998f: pop esi
004a9990: jmp 0x890b10
004a9995: int3 
004a9996: int3 
004a9997: int3 
004a9998: int3 
004a9999: int3 
004a999a: int3 
004a999b: int3 
004a999c: int3 
004a999d: int3 
004a999e: int3 
004a999f: int3 
004a99a0: push esi
004a99a1: mov esi, ecx
004a99a3: xor ecx, ecx
004a99a5: call 0xa09fd0
004a99aa: mov edx, dword ptr [eax + 0x30]
004a99ad: mov ecx, esi
004a99af: pop esi
004a99b0: jmp 0x890b10
004a99b5: int3 
004a99b6: int3 
004a99b7: int3 
004a99b8: int3 
004a99b9: int3 
004a99ba: int3 
004a99bb: int3 
004a99bc: int3 
004a99bd: int3 
004a99be: int3 
004a99bf: int3 
004a99c0: jmp dword ptr [ecx*4 + 0x4a99f0]
004a99c7: xor eax, eax
004a99c9: ret 
004a99ca: mov eax, 1
004a99cf: ret 
004a99d0: mov eax, 2
004a99d5: ret 
004a99d6: mov eax, 3
004a99db: ret 
004a99dc: mov eax, 4
004a99e1: ret 
004a8300: push esi
004a8301: mov esi, ecx
004a8303: xor ecx, ecx
004a8305: push 0x4a8313
004a830a: jmp 0xa09fd0
004a830f: mov ch, 0xa8
004a8312: aaa 
004a8313: cmp dword ptr [eax], 0
004a8316: jne 0x4a8335
004a8318: push 0x4a832f
004a831d: push 0xa245c0
004a8322: ret 
004a8323: jl 0x4a82f2
004a8325: pop ebp
004a8326: sbb dword ptr [0xacf6c611], esi
004a832c: xlatb 
004a832d: sub byte ptr [esi - 0x77], 0xb0
004a8331: enter 0, 0
004a8335: pop esi
004a8336: ret 
004a8337: int3 
004a8338: int3 
004a8339: int3 
004a833a: int3 
004a833b: int3 
004a833c: int3 
004a833d: fucompi st(1)
004a833f: imul esi, dword ptr [eax - 0x33f3000b], -0x34
004a8346: int3 
004a8347: int3 
004a8348: int3 
004a8349: int3 
004a834a: int3 
004a834b: int3 
004a834c: int3 
004a834d: int3 
004a834e: int3 
004a834f: int3 
004a8350: xor ecx, ecx
004a8352: call 0xa09fd0
004a8357: mov eax, dword ptr [eax + 8]
004a835a: ret 
004a835b: into 
004a835c: int3 
004a835d: int3 
004a835e: int3 
004a835f: int3 
004a8360: push esi
004a8361: mov esi, ecx