Function at 0x4db310
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x34]
cmp eax, dword [ecx + 8]
jbe 0x4dc706
sub esp, 0xb4
mov eax, dword [esp + 0xb8]
mov dword [eax + 0xc], 0
lea ecx, [0x6a71e0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
call fcn.00409ac0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x4dbf56
mov ecx, dword [esp + 0xc0]
test ecx, ecx
je 0x4dba50
mov ecx, dword [ecx + 8]
cmp ecx, 0x6e78e923
ja 0x4db706
cmp ecx, 0x43cfbb1f
ja 0x4db51c
cmp ecx, 0x338a7ec0
jbe 0x4db467
cmp ecx, 0x4072c7d5
jne 0x4db3d4
mov ecx, dword [esp + 0xc0]
lea edx, [0x6854c0]
cmp ecx, edx
jne 0x4dba57
nop
mov eax, dword [esp + 0xbc]
xor ecx, ecx
jmp 0x4dc566
cmp ecx, 0x43cfbb1f
jne 0x4db45b
mov ecx, dword [esp + 0xc0]
lea edx, [0x684e00]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.004da7d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00452460
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0xc4]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x4db451
mov dword [edi], eax
jmp 0x4dc0b5
call fcn.00465d80
jmp 0x4dc0b5
mov ecx, dword [esp + 0xc0]
jmp 0x4dba57
cmp ecx, 0x2e74d42b
jne 0x4db4bf
mov ecx, dword [esp + 0xc0]
lea edx, [0x68bac0]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004d9190
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc4]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4dc0b5
cmp ecx, 0x338a7ec0
jne 0x4db510
mov ecx, dword [esp + 0xc0]
lea edx, [0x68d9c0]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d9760
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov dword [ecx], eax
jmp 0x4dc0b5
mov ecx, dword [esp + 0xc0]
jmp 0x4dba57
cmp ecx, 0x510ad14d
jbe 0x4db606
cmp ecx, 0x62de383d
je 0x4db5bd
cmp ecx, 0x6d448d5d
jne 0x4db560
mov ecx, dword [esp + 0xc0]
lea edx, [0x685500]
cmp ecx, edx
jne 0x4dba57
nop
mov eax, dword [esp + 0xbc]
xor ecx, ecx
jmp 0x4dc3d3
cmp ecx, 0x6e78e923
jne 0x4db5b1
mov ecx, dword [esp + 0xc0]
lea edx, [0x68d940]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d9760
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov dword [ecx], eax
jmp 0x4dc0b5
mov ecx, dword [esp + 0xc0]
jmp 0x4dba57
mov ecx, dword [esp + 0xc0]
lea edx, [0x68ba80]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d9190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov dword [ecx], eax
jmp 0x4dc0b5
cmp ecx, 0x49163278
jne 0x4db65e
mov ecx, dword [esp + 0xc0]
lea edx, [0x68da00]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004d9760
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc4]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4dc0b5
cmp ecx, 0x510ad14d
jne 0x4db6fa
mov ecx, dword [esp + 0xc0]
lea edx, [0x684f00]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004da5c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x60], ebx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.0044d600
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp], ecx
call fcn.0044d600
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xc4]
mov dword [edx], ecx
mov dword [edx + 4], eax
jmp 0x4dc0b5
mov ecx, dword [esp + 0xc0]
jmp 0x4dba57
cmp ecx, 0xba585d67
ja 0x4db891
cmp ecx, 0x889ce7f8
ja 0x4db7e3
cmp ecx, 0x7afcd172
jne 0x4db785
mov ecx, dword [esp + 0xc0]
lea edx, [0x684ec0]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004da5c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0xc4]
mov dword [ebp], eax
mov dword [ebp + 4], ecx
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], ebx
jmp 0x4dc0b5
cmp ecx, 0x889ce7f8
jne 0x4db7d7
mov ecx, dword [esp + 0xc0]
lea edx, [0x68d980]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004d9760
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov word [ecx], ax
jmp 0x4dc0b5
mov ecx, dword [esp + 0xc0]
jmp 0x4dba57
cmp ecx, 0x8f96facd
jne 0x4db834
mov ecx, dword [esp + 0xc0]
lea edx, [0x68da80]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d9760
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov dword [ecx], eax
jmp 0x4dc0b5
cmp ecx, 0xba585d67
jne 0x4db885
mov ecx, dword [esp + 0xc0]
lea edx, [0x68ba00]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d9190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov dword [ecx], eax
jmp 0x4dc0b5
mov ecx, dword [esp + 0xc0]
jmp 0x4dba57
cmp ecx, 0xd6631a7c
ja 0x4db94c
cmp ecx, 0xc3230e0b
jne 0x4db8ef
mov ecx, dword [esp + 0xc0]
lea edx, [0x68ba40]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004d9190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov word [ecx], ax
jmp 0x4dc0b5
cmp ecx, 0xd6631a7c
jne 0x4db940
mov ecx, dword [esp + 0xc0]
lea edx, [0x68bb00]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004d9190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov byte [ecx], al
jmp 0x4dc0b5
mov ecx, dword [esp + 0xc0]
jmp 0x4dba57
cmp ecx, 0xe47f76c1
jne 0x4db9b0
mov ecx, dword [esp + 0xc0]
lea edx, [0x68d300]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.004da7d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0xc4]
mov dword [edi + 4], ecx
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x4db9a6
mov dword [edi], eax
jmp 0x4dc0b5
call fcn.00465d80
jmp 0x4dc0b5
cmp ecx, 0xf3b50de0
jne 0x4dba01
mov ecx, dword [esp + 0xc0]
lea edx, [0x68da40]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004d9760
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
mov byte [ecx], al
jmp 0x4dc0b5
cmp ecx, 0xfcd60fce
jne 0x4dba47
mov ecx, dword [esp + 0xc0]
lea edx, [0x684e40]
cmp ecx, edx
jne 0x4dba57
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.004d8890
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xc4]
mov byte [ecx], al
jmp 0x4dc0b5
mov ecx, dword [esp + 0xc0]
jmp 0x4dba57
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xc0]
test edx, edx
je 0x4dbae0
nop
movzx ebx, byte [0x1e84f40]
test bl, bl
je 0x4dbaa1
mov dword [0x1e84f44], ecx
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x4dba8d
mov eax, dword [esp + 0xc4]
mov dword [0x1e84f48], eax
jmp 0x4dbaa8
lea edi, [0x1e84f48]
mov eax, dword [esp + 0xc4]
call fcn.00465d80
jmp 0x4dbaa8
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xa4]
test ecx, ecx
je 0x4dbad8
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4dbae6
or edx, 0x80
jmp 0x4dbae6
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4dbae6
xor edx, edx
xor ecx, ecx
xor eax, eax
nop
mov ebx, edx
and edx, 0x1f
cmp edx, 0x16
jne 0x4dc2d3
mov dword [esp + 0x58], ebx
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004c6dd0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x9c], edx
nop
mov ebx, ecx
and ecx, 0x1f
cmp ecx, 0xc
ja 0x4dbca0
cmp ecx, 1
je 0x4dbc56
lea ebp, [ecx - 2]
cmp ebp, 4
ja 0x4dbbce
test ebx, 0x200
jne 0x4dbb5f
lea ecx, [0x787c08]
jmp 0x4dbb7d
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c8b70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d9190
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c8510
jmp 0x4dc0b5
cmp ecx, 7
jb 0x4dc1cc
test ebx, 0x200
jne 0x4dbbe7
lea ecx, [0x787c08]
jmp 0x4dbc05
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c8b70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d9760
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c8600
jmp 0x4dc0b5
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.004d8890
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.004c8280
jmp 0x4dc0b5
cmp ecx, 0x10
ja 0x4dbe1b
cmp ecx, 0xe
jbe 0x4dbd2d
test ebx, 0x200
jne 0x4dbcbe
lea ecx, [0x787c08]
jmp 0x4dbcdc
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c8b70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004da5c0
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c8340
jmp 0x4dc0b5
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d82f0
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d8820
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d9cb0
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x38]
test edx, 0x200
jne 0x4dbd88
lea ebx, [0x787c08]
mov ebp, dword [esp + 0xa0]
jmp 0x4dbdb2
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004c8b70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov ebp, ecx
mov eax, dword [ebx + 0x18]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004da2f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004c8440
jmp 0x4dc0b5
cmp ecx, 0x17
je 0x4dbe7a
cmp ecx, 0x18
jne 0x4dc1cc
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.004da7d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004c8700
jmp 0x4dc0b5
test ebx, 0x200
jne 0x4dbe8a
lea ecx, [0x787c08]
jmp 0x4dbea8
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c8b70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x70], eax
mov dword [esp + 0x2c], ecx
mov edx, dword [ecx + 0x28]
mov dword [esp], eax
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4dc0c5
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.004da7d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004c8cc0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov ebp, dword [esp + 0x9c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004c8170
xor eax, eax
jmp 0x4dc069
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
lea ecx, [0x7871a4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test edx, edx
jne 0x4dbf99
add esp, 0xb4
ret
mov ebp, dword [0x1e84bbc]
cmp dword [0x1e84bb8], eax
je 0x4dbffa
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], edx
mov dword [esp + 0xb0], ebx
lea eax, [0x6a9760]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
call fcn.004095e0
mov eax, dword [esp + 8]
lea ecx, [0x6a9760]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov dword [esp + 0x50], edx
mov dword [esp + 0x94], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00403940
movzx eax, byte [esp + 0xc]
test al, al
je 0x4dc02f
mov edx, dword [0x1e84be0]
mov ebx, dword [0x1e84be4]
jmp 0x4dbfa7
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x94]
jmp 0x4dbfa7
mov ebp, dword [esp + 0x7c]
movzx esi, byte [ebp + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
call fcn.004c8600
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jge 0x4dc0b5
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004c7070
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jb 0x4dc03f
jmp 0x4dc0bc
add esp, 0xb4
ret
mov eax, ebx
mov ecx, ebp
call fcn.00465e00
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4dc1a7
lea eax, [0x787c08]
mov ecx, dword [esp + 0x74]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6f4481]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00451ff0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], ecx
lea edx, [0x6a9700]
mov dword [esp], edx
call fcn.0040be50
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4dc199
mov eax, dword [esp + 0x84]
mov dword [edi], eax
lea eax, [0x785138]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], edi
lea eax, [0x6a9760]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
call fcn.004095e0
mov eax, dword [esp + 8]
lea ecx, [0x6a9760]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov eax, dword [esp + 0x84]
call fcn.00465d80
jmp 0x4dc156
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c8b70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4dc0de
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4dc2ae
lea eax, [0x787c08]
mov ecx, dword [esp + 0x74]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6f4481]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00451ff0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
lea edx, [0x6a9700]
mov dword [esp], edx
call fcn.0040be50
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x3c]
mov dword [edi + 4], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4dc2a0
mov eax, dword [esp + 0x80]
mov dword [edi], eax
lea eax, [0x785138]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], edi
lea eax, [0x6a9760]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
call fcn.004095e0
mov eax, dword [esp + 8]
lea ecx, [0x6a9760]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov eax, dword [esp + 0x80]
call fcn.00465d80
jmp 0x4dc25d
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c8b70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4dc1e5
test ebx, ebx
je 0x4dc3b6
test ebx, 0x200
jne 0x4dc3b6
lea eax, [0x787c08]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6f6465]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00451ff0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
lea edx, [0x6a9700]
mov dword [esp], edx
call fcn.0040be50
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4dc3a8
mov eax, dword [esp + 0x88]
mov dword [edi], eax
lea eax, [0x785138]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], edi
lea eax, [0x6a9760]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
call fcn.004095e0
mov eax, dword [esp + 8]
lea ecx, [0x6a9760]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov eax, dword [esp + 0x88]
call fcn.00465d80
jmp 0x4dc365
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004c8b70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4dc2ed
cmp ecx, 8
jge 0x4dc47b
lea edx, [0x6ef6bd]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4dc3f1
inc ecx
jmp 0x4dc41a
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.00460210
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xbc]
lea edx, [0x6ef6bd]
cmp eax, ebx
jne 0x4dc3d3
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d82f0
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d8820
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d9cb0
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40
call fcn.004da2f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc4]
mov dword [edx], eax
mov dword [edx + 4], ecx
jmp 0x4dc0b5
lea ecx, [esp + 0x68]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.004527e0
mov dword [esp], 0
lea eax, [0x6f0e15]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x6ee780]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6ef1a8]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.00452130
mov eax, dword [esp + 0x24]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ecx
lea edx, [0x6a9700]
mov dword [esp], edx
call fcn.0040be50
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x48]
mov dword [edi + 4], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4dc558
mov eax, dword [esp + 0x8c]
mov dword [edi], eax
lea eax, [0x785138]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], edi
lea eax, [0x6a9760]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
call fcn.004095e0
mov eax, dword [esp + 8]
lea ecx, [0x6a9760]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov eax, dword [esp + 0x8c]
call fcn.00465d80
jmp 0x4dc515
cmp ecx, 8
jge 0x4dc61b
lea edx, [0x6ef6bd]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4dc584
inc ecx
jmp 0x4dc5ad
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.00460210
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xbc]
lea edx, [0x6ef6bd]
cmp eax, ebx
jne 0x4dc566
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d82f0
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d8820
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.004d9cb0
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 0xc], 0x20
call fcn.004da2f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0044d600
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc4]
mov dword [ecx], eax
jmp 0x4dc0b5
lea ecx, [esp + 0x6c]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.004527e0
mov dword [esp], 0
lea eax, [0x6f0e15]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x6ee780]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6ef1a1]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.00452130
mov eax, dword [esp + 0x24]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
lea edx, [0x6a9700]
mov dword [esp], edx
call fcn.0040be50
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x4c]
mov dword [edi + 4], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x4dc6f8
mov eax, dword [esp + 0x90]
mov dword [edi], eax
lea eax, [0x785138]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], edi
lea eax, [0x6a9760]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
call fcn.004095e0
mov eax, dword [esp + 8]
lea ecx, [0x6a9760]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov eax, dword [esp + 0x90]
call fcn.00465d80
jmp 0x4dc6b5
call fcn.004649b0
jmp fcn.004db310