Function at 0x4ce170
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x85d3cc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x4cf43c
sub esp, 0xa8
mov eax, dword [esp + 0xac]
mov dword [eax + 0xc], 0
lea ecx, [0x668980]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.00409de0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4cecbb
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x4ce811
mov eax, dword [eax + 8]
cmp eax, 0x6e78e923
ja 0x4ce4fd
cmp eax, 0x43cfbb1f
ja 0x4ce361
cmp eax, 0x338a7ec0
jbe 0x4ce2b6
cmp eax, 0x4072c7d5
jne 0x4ce22a
mov eax, dword [esp + 0xb4]
lea ecx, [0x6577c0]
cmp eax, ecx
jne 0x4ce811
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4cf2a6
cmp eax, 0x43cfbb1f
jne 0x4ce811
mov eax, dword [esp + 0xb4]
lea ecx, [0x65a700]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cd730
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004516b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0xb8]
mov dword [ebx + 4], eax
mov dword [ebx + 8], ecx
mov eax, dword [0x85d680]
test eax, eax
je 0x4ce2af
call fcn.00468040
mov dword [edi], edx
mov eax, dword [ebx]
mov dword [edi + 4], eax
mov dword [ebx], edx
jmp 0x4cee14
cmp eax, 0x2e74d42b
jne 0x4ce30d
mov eax, dword [esp + 0xb4]
lea ecx, [0x657900]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004cc180
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4cee14
cmp eax, 0x338a7ec0
jne 0x4ce811
mov eax, dword [esp + 0xb4]
lea ecx, [0x6579c0]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cc720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cee14
cmp eax, 0x510ad14d
jbe 0x4ce43b
cmp eax, 0x62de383d
je 0x4ce3f2
cmp eax, 0x6d448d5d
jne 0x4ce39e
mov eax, dword [esp + 0xb4]
lea ecx, [0x657800]
cmp eax, ecx
jne 0x4ce811
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4cf114
cmp eax, 0x6e78e923
jne 0x4ce811
mov eax, dword [esp + 0xb4]
lea ecx, [0x657a40]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cc720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cee14
mov eax, dword [esp + 0xb4]
lea ecx, [0x6578c0]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cc180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cee14
cmp eax, 0x49163278
jne 0x4ce492
mov eax, dword [esp + 0xb4]
lea ecx, [0x657c80]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004cc720
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4cee14
cmp eax, 0x510ad14d
jne 0x4ce811
mov eax, dword [esp + 0xb4]
lea ecx, [0x657780]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004cd530
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
cvtsd2ss xmm0, xmm1
movss dword [eax + 4], xmm0
jmp 0x4cee14
cmp eax, 0xba585d67
ja 0x4ce66b
cmp eax, 0x889ce7f8
ja 0x4ce5c7
cmp eax, 0x7afcd172
jne 0x4ce572
mov eax, dword [esp + 0xb4]
lea ecx, [0x657740]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004cd530
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
jmp 0x4cee14
cmp eax, 0x889ce7f8
jne 0x4ce811
mov eax, dword [esp + 0xb4]
lea ecx, [0x657dc0]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004cc720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4cee14
cmp eax, 0x8f96facd
jne 0x4ce617
mov eax, dword [esp + 0xb4]
lea ecx, [0x657980]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cc720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cee14
cmp eax, 0xba585d67
jne 0x4ce811
mov eax, dword [esp + 0xb4]
lea ecx, [0x657840]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cc180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cee14
cmp eax, 0xd6631a7c
ja 0x4ce71b
cmp eax, 0xc3230e0b
jne 0x4ce6c7
mov eax, dword [esp + 0xb4]
lea ecx, [0x657880]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004cc180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4cee14
cmp eax, 0xd6631a7c
jne 0x4ce811
mov eax, dword [esp + 0xb4]
lea ecx, [0x657940]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004cc180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4cee14
cmp eax, 0xe47f76c1
jne 0x4ce780
mov eax, dword [esp + 0xb4]
lea ecx, [0x657680]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cd730
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x4ce779
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [edx]
mov dword [edi + 4], eax
mov dword [edx], ecx
jmp 0x4cee14
cmp eax, 0xf3b50de0
jne 0x4ce7cc
mov eax, dword [esp + 0xb4]
lea ecx, [0x657a00]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004cc720
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4cee14
cmp eax, 0xfcd60fce
jne 0x4ce811
mov eax, dword [esp + 0xb4]
lea ecx, [0x657700]
cmp eax, ecx
jne 0x4ce811
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cb8b0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4cee14
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x4ce862
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x98]
test eax, eax
je 0x4ce85a
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x4ce851
or ecx, 0x80
mov edx, dword [esp + 0x9c]
jmp 0x4ce868
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x4ce868
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebx, ecx
and ecx, 0x1f
nop
cmp ecx, 0x16
jne 0x4cf01b
mov dword [esp + 0x58], ebx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x68], eax
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0048c270
mov eax, dword [esp + 0x14]
mov dword [esp + 0x38], eax
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0xc]
mov dword [esp + 0x94], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x90], ebx
cmp eax, 0xc
ja 0x4cea15
cmp eax, 1
je 0x4ce9cb
lea ebp, [eax - 2]
cmp ebp, 4
ja 0x4ce949
test ecx, 0x200
jne 0x4ce8e0
lea eax, [0x6f34e4]
jmp 0x4ce8f8
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cc180
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048df60
jmp 0x4cee14
cmp eax, 7
jb 0x4cef1b
test ecx, 0x200
jne 0x4ce962
lea eax, [0x6f34e4]
jmp 0x4ce97a
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cc720
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048e540
jmp 0x4cee14
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cb8b0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.0048da70
jmp 0x4cee14
cmp eax, 0x10
ja 0x4ceb86
cmp eax, 0xe
jbe 0x4cea9c
test ecx, 0x200
jne 0x4cea33
lea eax, [0x6f34e4]
jmp 0x4cea4b
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cd530
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048ddd0
jmp 0x4cee14
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cb320
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cb840
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004ccc60
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x38]
test edx, 0x200
jne 0x4ceaf7
lea ebx, [0x6f34e4]
mov ebp, dword [esp + 0x94]
jmp 0x4ceb21
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, eax
mov ebp, edx
mov eax, dword [ebx + 0x18]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004cd290
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.0048dea0
jmp 0x4cee14
cmp eax, 0x17
je 0x4cebe5
cmp eax, 0x18
jne 0x4cef1b
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cd730
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0048e640
jmp 0x4cee14
test ecx, 0x200
jne 0x4cebf5
lea eax, [0x6f34e4]
jmp 0x4cec0d
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x64], edx
mov dword [esp + 0x2c], eax
mov ecx, dword [eax + 0x28]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4cee1b
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cd730
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048f490
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048d950
xor eax, eax
jmp 0x4cee0c
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
lea ecx, [0x6f2dac]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4cecf6
add esp, 0xa8
ret
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
cmp dword [0x832720], ecx
je 0x4ced59
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edx
lea eax, [0x66a140]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00409870
mov eax, dword [esp + 8]
lea ecx, [0x66a140]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437e60
mov dword [esp + 0x50], eax
mov dword [esp + 0x88], edx
mov eax, dword [esp + 0x14]
mov edx, dword [0x832724]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00404260
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ced98
mov eax, dword [0x832728]
mov edx, dword [0x83272c]
jmp 0x4ced06
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x88]
jmp 0x4ced06
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048c510
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x70]
movzx esi, byte [ebp + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
call fcn.0048e540
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jl 0x4ceda8
add esp, 0xa8
ret
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4ceef6
lea eax, [0x6f34e4]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x69409b]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00451270
mov eax, dword [esp + 0x18]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], ecx
lea edx, [0x66a620]
mov dword [esp], edx
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x40]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x4ceee9
mov ecx, dword [esp + 0x78]
mov dword [eax], ecx
lea ecx, [0x6f1b20]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
lea eax, [0x66a140]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00409870
mov eax, dword [esp + 8]
lea ecx, [0x66a140]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437e60
call fcn.00468030
mov ecx, dword [esp + 0x78]
mov dword [edi], ecx
jmp 0x4ceea0
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4cee34
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4ceff6
lea eax, [0x6f34e4]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x69409b]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00451270
mov eax, dword [esp + 0x18]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x74], ecx
lea edx, [0x66a620]
mov dword [esp], edx
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x4cefe9
mov ecx, dword [esp + 0x74]
mov dword [eax], ecx
lea ecx, [0x6f1b20]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
lea eax, [0x66a140]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00409870
mov eax, dword [esp + 8]
lea ecx, [0x66a140]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437e60
call fcn.00468030
mov ecx, dword [esp + 0x74]
mov dword [edi], ecx
jmp 0x4cefa0
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048ead0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4cef34
test ebx, ebx
je 0x4cf0f7
test ebx, 0x200
jne 0x4cf0f7
lea ecx, [0x6f34e4]
mov ecx, dword [ecx + 0x80]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x69538f]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00451270
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x7c], ecx
lea edx, [0x66a620]
mov dword [esp], edx
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x4cf0ea
mov ecx, dword [esp + 0x7c]
mov dword [eax], ecx
lea ecx, [0x6f1b20]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
lea eax, [0x66a140]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00409870
mov eax, dword [esp + 8]
lea ecx, [0x66a140]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437e60
call fcn.00468030
mov ecx, dword [esp + 0x7c]
mov dword [edi], ecx
jmp 0x4cf0a1
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0048ead0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
jmp 0x4cf035
cmp ecx, 8
jge 0x4cf1b9
lea edx, [0x69186d]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4cf132
inc ecx
jmp 0x4cf15b
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045f200
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x69186d]
cmp eax, ebx
jne 0x4cf114
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cb320
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cb840
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004ccc60
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40
call fcn.004cd290
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
jmp 0x4cee14
mov ecx, eax
sar eax, 0x1f
lea edx, [esp + 0x5c]
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.00451a30
mov dword [esp], 0
lea eax, [0x692333]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x69138a]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6915b1]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.004513a0
mov eax, dword [esp + 0x28]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x80], ecx
lea edx, [0x66a620]
mov dword [esp], edx
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x48]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x4cf296
mov ecx, dword [esp + 0x80]
mov dword [eax], ecx
lea ecx, [0x6f1b20]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
lea eax, [0x66a140]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00409870
mov eax, dword [esp + 8]
lea ecx, [0x66a140]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437e60
call fcn.00468030
mov ecx, dword [esp + 0x80]
mov dword [edi], ecx
jmp 0x4cf24a
cmp ecx, 8
jge 0x4cf34f
lea edx, [0x69186d]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4cf2c4
inc ecx
jmp 0x4cf2ed
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045f200
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x69186d]
cmp eax, ebx
jne 0x4cf2a6
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cb320
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cb840
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004ccc60
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x20
call fcn.004cd290
movsd xmm0, qword [esp + 0x10]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
jmp 0x4cee14
mov ecx, eax
sar eax, 0x1f
lea edx, [esp + 0x60]
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.00451a30
mov dword [esp], 0
lea eax, [0x692333]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x69138a]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6915aa]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.004513a0
mov eax, dword [esp + 0x28]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x84], ecx
lea edx, [0x66a620]
mov dword [esp], edx
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x4cf42c
mov ecx, dword [esp + 0x84]
mov dword [eax], ecx
lea ecx, [0x6f1b20]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
lea eax, [0x66a140]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00409870
mov eax, dword [esp + 8]
lea ecx, [0x66a140]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437e60
call fcn.00468030
mov ecx, dword [esp + 0x84]
mov dword [edi], ecx
jmp 0x4cf3e0
call fcn.00466c30
jmp fcn.004ce170