Function at 0x4def20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4dfb49
sub esp, 0x58
mov esi, dword [esp + 0x68]
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x64]
xor ebx, ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
xor edx, edx
mov byte [esp + 0x2c], dl
mov byte [esp + 0x2d], dl
mov byte [esp + 0x2e], dl
mov byte [esp + 0x2f], dl
movzx edx, byte [esp + 0x70]
cmp edx, esi
je 0x4dfa84
cmp esi, 0x5c
je 0x4dfa84
cmp byte [esp + 0x71], 0
je 0x4df90f
cmp esi, 0x80
jge 0x4df017
mov dword [esp], esi
call fcn.004e0b10
mov esi, dword [esp + 0x68]
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x64]
movzx ebx, byte [esp + 4]
cmp bl, 0
je 0x4df017
xchg esi, eax
mov byte [esp + 0x23], al
xchg esi, eax
mov esi, ecx
mov edx, ebp
mov ebx, ebp
inc ebx
cmp ebx, eax
ja 0x4defe8
mov edi, ebx
mov ebx, esi
add ebx, edx
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], eax
add esp, 0x58
ret
mov dword [esp], 0x5c5000
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.0043cd90
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov edx, edi
inc edi
mov esi, ecx
jmp 0x4defcb
cmp esi, 9
jg 0x4df676
cmp esi, 7
jne 0x4df0cf
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df07c
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df0c8
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x605088]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
add esp, 0x58
ret
call fcn.00429210
ud2
cmp esi, 8
jne 0x4df173
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df12b
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df16c
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x605090]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
jmp 0x4df0b8
call fcn.00429210
ud2
cmp esi, 9
jne 0x4df217
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df1cf
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df210
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x6050b0]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
jmp 0x4df0b8
call fcn.00429210
ud2
cmp esi, 0x20
jge 0x4df3c2
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df273
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df3bb
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x6050c8]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x68]
shr bl, 4
movzx ebx, bl
cmp ebx, 0x10
jae 0x4df3b4
mov ebp, 0x5f96d3
add ebp, ebx
movzx ebx, byte [ebp]
mov byte [esp + 0x23], bl
mov dword [esp + 0x5c], esi
mov ecx, esi
mov dword [esp + 0x60], edi
mov ebx, edi
mov dword [esp + 0x64], edx
mov eax, edi
inc ebx
cmp ebx, edx
ja 0x4df37e
mov dword [esp + 0x60], ebx
mov ebx, ecx
add ebx, eax
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov ebx, dword [esp + 0x68]
and ebx, 0xf
movzx ebx, bl
cmp ebx, 0x10
jae 0x4df377
mov ebp, 0x5f96d3
add ebp, ebx
movzx ebx, byte [ebp]
mov byte [esp + 0x23], bl
mov dword [esp + 0x5c], esi
mov edi, esi
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x64], edx
mov ecx, ebx
inc ebx
cmp ebx, edx
ja 0x4df348
mov eax, ebx
mov ebx, edi
add ebx, ecx
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
jmp 0x4df0b8
mov dword [esp], 0x5c5000
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043cd90
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, eax
inc eax
mov edi, esi
jmp 0x4df336
call fcn.004291a0
ud2
mov dword [esp], 0x5c5000
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043cd90
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, ebx
inc ebx
mov dword [esp + 0x60], ebx
mov ecx, esi
jmp 0x4df2f4
call fcn.004291a0
ud2
call fcn.00429210
ud2
cmp esi, 0x10ffff
jle 0x4df520
mov dword [esp + 0x68], 0xfffd
mov esi, ecx
mov ecx, ebp
add ecx, 2
mov dword [esp + 0x3c], eax
mov ebx, dword [esp + 0x3c]
cmp ecx, ebx
jbe 0x4df429
mov dword [esp], 0x5c5000
mov dword [esp + 0x40], esi
mov dword [esp + 4], esi
mov dword [esp + 0x44], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x48], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.0043cd90
mov ecx, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x48], eax
cmp ecx, eax
ja 0x4df519
mov dword [esp + 0x44], ecx
mov ebx, ebp
mov ebp, esi
mov dword [esp + 0x40], esi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x6050b8]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x24], 0xc
mov ebx, dword [esp + 0x24]
cmp ebx, 0
jl 0x4df0b8
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x68]
cmp ecx, 0x20
jae 0x4df511
sar ebx, cl
and ebx, 0xf
cmp ebx, 0x10
jae 0x4df50a
mov ebp, 0x5f96d3
add ebp, ebx
movzx ebx, byte [ebp]
mov byte [esp + 0x23], bl
mov dword [esp + 0x5c], esi
mov edi, esi
mov dword [esp + 0x60], eax
mov ebx, eax
mov dword [esp + 0x64], edx
mov ecx, eax
inc ebx
cmp ebx, edx
ja 0x4df4db
mov eax, ebx
mov ebx, edi
add ebx, ecx
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov ebx, dword [esp + 0x24]
sub ebx, 4
mov dword [esp + 0x24], ebx
jmp 0x4df471
mov dword [esp], 0x5c5000
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043cd90
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, eax
inc eax
mov edi, esi
jmp 0x4df4c1
call fcn.004291a0
ud2
sar ebx, 0x1f
jmp 0x4df48f
call fcn.00429210
ud2
cmp esi, 0x10000
jl 0x4df3d6
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df57f
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df66f
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x605080]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x28], 0x1c
mov ebx, dword [esp + 0x28]
cmp ebx, 0
jl 0x4df0b8
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x68]
cmp ecx, 0x20
jae 0x4df667
sar ebx, cl
and ebx, 0xf
cmp ebx, 0x10
jae 0x4df660
mov ebp, 0x5f96d3
add ebp, ebx
movzx ebx, byte [ebp]
mov byte [esp + 0x23], bl
mov dword [esp + 0x5c], esi
mov edi, esi
mov dword [esp + 0x60], eax
mov ebx, eax
mov dword [esp + 0x64], edx
mov ecx, eax
inc ebx
cmp ebx, edx
ja 0x4df631
mov eax, ebx
mov ebx, edi
add ebx, ecx
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov ebx, dword [esp + 0x28]
sub ebx, 4
mov dword [esp + 0x28], ebx
jmp 0x4df5c7
mov dword [esp], 0x5c5000
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043cd90
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, eax
inc eax
mov edi, esi
jmp 0x4df617
call fcn.004291a0
ud2
sar ebx, 0x1f
jmp 0x4df5e5
call fcn.00429210
ud2
cmp esi, 0xb
jg 0x4df7c7
cmp esi, 0xa
jne 0x4df723
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df6db
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df71c
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x6050a0]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
jmp 0x4df0b8
call fcn.00429210
ud2
cmp esi, 0xb
jne 0x4df217
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df77f
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df7c0
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x6050c0]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
jmp 0x4df0b8
call fcn.00429210
ud2
cmp esi, 0xc
jne 0x4df86b
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df823
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df864
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x605098]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
jmp 0x4df0b8
call fcn.00429210
ud2
cmp esi, 0xd
jne 0x4df217
mov edx, ecx
mov ecx, eax
mov eax, ebp
add eax, 2
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ecx
jbe 0x4df8c7
mov dword [esp], 0x5c5000
mov dword [esp + 0x4c], edx
mov dword [esp + 4], edx
mov dword [esp + 0x50], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
call fcn.0043cd90
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], ecx
cmp eax, ecx
ja 0x4df908
mov dword [esp + 0x50], eax
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x4c], edx
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [0x6050a8]
mov dword [esp + 4], ebx
mov dword [esp + 8], 2
call fcn.004540c0
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
jmp 0x4df0b8
call fcn.00429210
ud2
mov dword [esp], esi
call fcn.004e0b10
mov esi, dword [esp + 0x68]
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x64]
movzx ebx, byte [esp + 4]
cmp bl, 0
jne 0x4df962
cmp byte [esp + 0x72], 0
je 0x4dfa7f
mov dword [esp], esi
call fcn.004e0e40
mov esi, dword [esp + 0x68]
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x64]
movzx ebx, byte [esp + 4]
cmp bl, 0
je 0x4dfa7f
lea ebx, [esp + 0x2c]
cmp ebx, 0
je 0x4dfa78
mov edx, 4
mov ecx, 4
mov dword [esp + 0x4c], ebx
mov dword [esp], ebx
mov dword [esp + 0x50], edx
mov dword [esp + 4], edx
mov dword [esp + 0x54], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
call fcn.0054ce80
mov eax, dword [esp + 0x10]
cmp eax, 4
ja 0x4dfa71
lea ebx, [esp + 0x2c]
cmp ebx, 0
je 0x4dfa6a
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 4
mov dword [esp + 0x4c], ebx
mov edi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
mov ebx, dword [esp + 0x50]
mov esi, ecx
add ecx, ebx
cmp ecx, eax
jbe 0x4dfa17
mov dword [esp], 0x5c5000
mov dword [esp + 0x40], edi
mov dword [esp + 4], edi
mov dword [esp + 0x44], esi
mov dword [esp + 8], esi
mov dword [esp + 0x48], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x10], ecx
call fcn.0043cd90
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x48], eax
cmp ecx, eax
ja 0x4dfa63
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x60]
mov ebp, edi
mov dword [esp + 0x40], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004540c0
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], eax
add esp, 0x58
ret
call fcn.00429210
ud2
mov dword [ebx], eax
jmp 0x4df9b3
call fcn.00429210
ud2
mov dword [ebx], eax
jmp 0x4df96f
jmp 0x4df017
mov edi, ecx
mov edx, ebp
mov dword [esp + 0x38], eax
mov ebx, ebp
inc ebx
mov ebp, dword [esp + 0x38]
cmp ebx, ebp
ja 0x4dfb0b
mov dword [esp + 0x60], ebx
mov ebx, edi
add ebx, edx
mov byte [ebx], 0x5c
xchg esi, eax
mov byte [esp + 0x23], al
xchg esi, eax
mov dword [esp + 0x5c], ecx
mov esi, ecx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x64], eax
mov edx, ebx
inc ebx
cmp ebx, eax
ja 0x4dfadc
mov edi, ebx
mov ebx, esi
add ebx, edx
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], eax
add esp, 0x58
ret
mov dword [esp], 0x5c5000
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.0043cd90
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov edx, edi
inc edi
mov esi, ecx
jmp 0x4dfabf
mov dword [esp], 0x5c5000
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov ebp, dword [esp + 0x38]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043cd90
mov esi, dword [esp + 0x68]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov edx, ebx
inc ebx
mov dword [esp + 0x60], ebx
mov edi, ecx
jmp 0x4dfa9b
call fcn.004518d0
jmp fcn.004def20