Function at 0x4de790
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x8602c0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x494]
cmp eax, dword [ecx + 8]
jbe 0x4dfd06
sub esp, 0x514
lea edi, [esp + 0x520]
xor eax, eax
call fcn.00467eeb
lea edi, [esp + 0x3f4]
call fcn.00467edf
mov ecx, dword [esp + 0x518]
mov dword [esp + 0x428], ecx
mov ecx, dword [esp + 0x51c]
mov dword [esp + 0x42c], ecx
lea edi, [esp + 0x160]
call fcn.00467ee9
lea edi, [esp + 0x4c0]
call fcn.00467edb
lea ecx, [esp + 0x4c0]
mov dword [esp + 0x16c], ecx
call fcn.00452890
mov ecx, dword [esp]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
mov dword [esp + 0x15c], 0
mov eax, 1
lea ecx, [esp + 0x3f4]
mov edx, 1
xor ebx, ebx
lea ebp, [esp + 0x3c]
xor esi, esi
xor edi, edi
xor eax, eax
mov dword [esp + 0x120], eax
mov eax, 1
jmp 0x4de893
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x114]
mov edx, edi
mov ebx, dword [esp + 0xa4]
mov edi, ebp
mov dword [esp + 0x120], esi
mov ebp, dword [esp + 0x140]
mov esi, dword [esp + 0x104]
test eax, eax
je 0x4de915
mov dword [esp + 0x44], ebx
mov dword [esp + 0xe8], ebp
mov dword [esp + 0x80], edi
mov dword [esp + 0xa4], edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x140], ecx
mov dword [esp + 0x108], esi
call fcn.0040cd30
mov eax, dword [esp]
mov dword [esp + 0x104], eax
mov ecx, dword [esp + 0x140]
mov edx, ecx
xor ebx, ebx
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x120]
mov edi, dword [esp + 0x44]
xor ebp, ebp
mov dword [esp + 0x74], ebp
mov esi, dword [esp + 0xe8]
mov dword [esp + 0x114], esi
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x120]
jmp 0x4df214
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x158]
mov edx, dword [esp + 0x15c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409b90
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0
lea ecx, [0x4dfd10]
mov dword [esp + 0x14c], ecx
lea ecx, [esp + 0x154]
mov dword [esp + 0x150], ecx
lea ecx, [0x605c40]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x14c]
mov dword [esp + 8], eax
call fcn.0049dab0
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x15c]
xor edx, edx
xor ebx, ebx
jmp 0x4de9ad
mov ecx, ebx
mov eax, edx
mov ebx, ebp
mov edx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x158]
cmp edx, ebp
jge 0x4decab
jae 0x4df1d9
mov dword [esp + 0x4c], ebx
mov dword [esp + 0xf8], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x50], ecx
mov ebp, dword [esp + 0x154]
mov esi, edx
shl edx, 6
lea edx, [edx + esi*4]
mov dword [esp + 0xa4], edx
add ebp, edx
lea edi, [esp + 0x25c]
mov esi, ebp
call fcn.00468356
mov ecx, dword [esp + 0x25c]
mov dword [esp + 0x10c], ecx
mov ebp, dword [esp + 0x260]
mov dword [esp + 0x58], ebp
mov esi, dword [esp + 0x68]
mov edi, 1
jmp 0x4df12e
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xa0]
mov eax, ebx
mov ebx, dword [esp + 0x4c]
mov esi, dword [esp + 0x68]
mov edi, edx
cmp edi, 1
jne 0x4deb1a
lea ecx, [ebx + 1]
mov ebx, dword [esp + 0x50]
cmp ebx, ecx
jb 0x4dea59
mov edx, dword [esp + 0xf8]
jmp 0x4dea99
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62bca0]
mov dword [esp + 0x10], eax
call fcn.0044dbe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x4c], ecx
mov ebp, dword [0x860560]
mov esi, ecx
shl ecx, 6
lea ecx, [ecx + esi*4]
lea edi, [edx + ecx - 0x44]
test ebp, ebp
je 0x4deb05
mov dword [esp + 0x138], edx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x140], edi
lea eax, [0x62bca0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x25c]
mov dword [esp + 8], eax
call fcn.00411510
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x138]
mov ebx, dword [esp + 0x98]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x140]
lea esi, [esp + 0x25c]
call fcn.00468356
mov ebp, dword [esp + 0x4c]
jmp 0x4de9a0
mov edx, dword [esp + 0x15c]
cmp edx, eax
jb 0x4df1cb
cmp esi, eax
ja 0x4df1c2
sub edx, esi
neg edx
sar edx, 0x1f
mov ecx, dword [esp + 0xa4]
and ecx, edx
mov dword [esp + 0xa4], ecx
mov ebp, dword [esp + 0x154]
mov edx, edi
lea edi, [esp + 0x218]
mov esi, eax
xor eax, eax
call fcn.00467edf
mov ecx, dword [esp + 0xa4]
lea edi, [ecx + ebp]
cmp edx, 1
jle 0x4deb8b
mov eax, dword [ecx + ebp + 0x2c]
cmp dword [edi + 0x70], eax
jne 0x4deb8b
movzx eax, byte [ebp + ecx + 0x24]
lea ebp, [ebp + ecx + 0x68]
cmp byte [ebp], al
jne 0x4deb8b
xor eax, eax
jmp 0x4debaf
test edx, edx
jbe 0x4df1b9
mov eax, edi
lea edi, [esp + 0x218]
mov esi, eax
call fcn.00468356
mov esi, dword [esp + 0xa0]
mov eax, 1
lea edi, [esp + 0x36c]
lea esi, [esp + 0x218]
call fcn.00468356
test al, al
je 0x4dec8e
lea ecx, [ebx + 1]
mov ebx, dword [esp + 0x50]
cmp ebx, ecx
jb 0x4debe0
mov eax, dword [esp + 0xf8]
mov edx, ebx
jmp 0x4dec15
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x62bca0]
mov dword [esp + 0x10], eax
call fcn.0044dbe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [0x860560]
mov ebp, ecx
shl ecx, 6
lea ecx, [ecx + ebp*4]
lea edi, [eax + ecx - 0x44]
test ebx, ebx
je 0x4dec80
mov dword [esp + 0x134], eax
mov dword [esp + 0xa4], ebp
mov dword [esp + 0x94], edx
mov dword [esp + 0x140], edi
lea eax, [0x62bca0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x36c]
mov dword [esp + 8], eax
call fcn.00411510
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0x94]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x140]
lea esi, [esp + 0x36c]
call fcn.00468356
jmp 0x4dec9b
mov edx, dword [esp + 0x50]
mov ebp, ebx
mov eax, dword [esp + 0xf8]
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0xa0]
jmp 0x4de9a0
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ebx
mov dword [esp + 0x15c], ecx
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00409b90
mov eax, dword [esp + 0xc]
lea ecx, [0x68a5d8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0049dc10
mov eax, dword [esp + 0x158]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0x51c]
mov edx, dword [esp + 0x518]
xor ebx, ebx
jmp 0x4ded26
mov dword [ebx + edx + 0x40], ecx
mov ebp, dword [esp + 0x64]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x51c]
mov edx, dword [esp + 0x518]
cmp ebx, eax
jge 0x4dedd8
mov ebp, dword [esp + 0x158]
cmp ebx, ebp
jae 0x4df101
mov dword [esp + 0x64], ebx
mov eax, ebx
shl ebx, 6
lea ebx, [ebx + eax*4]
mov dword [esp + 0xa0], ebx
mov ebp, dword [esp + 0x154]
mov dword [esp + 0x140], ebp
mov esi, dword [ebp + ebx + 0x28]
mov edi, dword [ebx + ebp + 0x2c]
mov eax, dword [ebp + ebx + 0x30]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.004de220
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004d9e50
mov eax, dword [0x860560]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4dedb7
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x140]
jmp 0x4ded06
call fcn.00467c50
mov dword [edi], ecx
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x140]
mov ebp, dword [ebx + edx + 0x40]
mov dword [edi + 4], ebp
jmp 0x4ded06
mov eax, dword [esp + 0x158]
lea ecx, [0x60f320]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040cdb0
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xfc], ecx
lea edx, [0x60f320]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040cdb0
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x118], ecx
mov edx, dword [esp + 0x158]
mov dword [esp + 0xa4], edx
mov ebx, dword [esp + 0xfc]
xor ebp, ebp
jmp 0x4dee76
mov eax, dword [esp + 0x13c]
add eax, 0x44
mov ecx, dword [esp + 0x60]
lea ebp, [ecx + 1]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xfc]
mov ecx, dword [esp + 0x118]
cmp ebp, edx
jge 0x4df0a1
lea edi, [esp + 0x2e4]
mov esi, eax
call fcn.00468356
mov ecx, dword [esp + 0x158]
cmp ebp, ecx
jae 0x4df0fa
mov dword [esp + 0x60], ebp
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x2e4]
mov ecx, dword [esp + 0x2e8]
mov edx, ebp
shl ebp, 6
lea ebp, [ebp + edx*4]
mov dword [esp + 0xa0], ebp
mov esi, dword [esp + 0x154]
mov dword [esp + 0x140], esi
lea edi, [0x60f320]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00410a20
mov eax, dword [esp + 0x10]
test byte [eax], al
mov ecx, dword [0x860560]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x140]
add ebx, edx
test ecx, ecx
je 0x4def18
call fcn.00467c50
mov dword [edi], ebx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov dword [eax], ebx
mov ecx, dword [esp + 0x2ec]
mov dword [esp + 0xf4], ecx
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x2f4]
lea edi, [esp + 0xc8]
xor eax, eax
call fcn.00467ee8
lea ecx, [esp + 0xc8]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
mov ecx, dword [esp + 0xf4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004dffe0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
lea ebx, [0x60f320]
mov dword [esp], ebx
mov ebp, dword [esp + 0x118]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.004106c0
movzx ecx, byte [esp + 0x14]
test cl, cl
jne 0x4dee50
mov ecx, dword [esp + 0x2ec]
mov dword [esp + 0xf0], ecx
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x2f4]
lea edi, [esp + 0xa8]
xor eax, eax
call fcn.00467ee8
lea ecx, [esp + 0xa8]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004dffe0
mov ecx, dword [esp + 0x158]
mov eax, dword [esp + 0x60]
cmp eax, ecx
jae 0x4df0f5
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x154]
mov dword [esp + 0x140], edx
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451850
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea edx, [0x60f320]
mov dword [esp], edx
mov ebx, dword [esp + 0x118]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00410a20
mov eax, dword [0x860560]
mov ecx, dword [esp + 0x10]
test byte [ecx], al
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x140]
add edx, ebx
test eax, eax
je 0x4df09a
call fcn.00467c50
mov dword [edi], edx
mov ebx, dword [ecx]
mov dword [edi + 4], ebx
mov dword [ecx], edx
jmp 0x4dee50
lea edi, [esp + 0x520]
xor eax, eax
call fcn.00467eeb
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x158]
mov ebp, dword [esp + 0x15c]
mov dword [esp + 0x520], ecx
mov dword [esp + 0x524], edx
mov dword [esp + 0x528], ebp
mov dword [esp + 0x52c], ebx
mov ecx, dword [esp + 0x118]
mov dword [esp + 0x530], ecx
add esp, 0x514
ret
call fcn.00467cb0
mov eax, ebp
call fcn.00467cb0
mov eax, ebx
mov ecx, ebp
call fcn.00467cb0
mov eax, dword [esp + 0x9c]
lea edi, [eax + 1]
mov ebp, dword [esp + 0x58]
mov ecx, dword [esp + 0x10c]
mov esi, dword [esp + 0x68]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x4c]
lea eax, [edi + esi]
mov dword [esp + 0xa0], eax
mov edx, dword [esp + 0x158]
cmp edx, eax
jle 0x4dea3c
jbe 0x4df1d2
mov edx, dword [esp + 0x154]
shl eax, 6
mov ebx, dword [esp + 0xa0]
lea eax, [eax + ebx*4]
add eax, edx
mov edx, edi
lea edi, [esp + 0x2a0]
mov esi, eax
call fcn.00468356
mov ecx, dword [esp + 0x2a4]
cmp ecx, ebp
jne 0x4dea30
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x2a0]
mov dword [esp], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403360
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4df10a
jmp 0x4dea22
xor eax, eax
mov ecx, eax
call fcn.00467cb0
mov ecx, eax
mov eax, esi
call fcn.00467d10
mov ecx, eax
call fcn.00467cf0
mov ecx, edx
call fcn.00467cb0
mov eax, edx
mov ecx, ebp
call fcn.00467cb0
mov esi, eax
mov eax, dword [esp + 0x13c]
add eax, 0x44
mov edi, eax
mov eax, dword [esp + 0xa0]
inc eax
mov dword [esp + 0x74], ebx
mov dword [esp + 0x114], ebp
mov ebx, eax
mov ebp, esi
mov esi, ecx
mov ecx, edi
mov edi, edx
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0x40]
cmp ebx, eax
jge 0x4de868
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x78], edi
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x130], esi
mov dword [esp + 0x13c], ecx
lea edi, [esp + 0x3b0]
mov esi, ecx
call fcn.00468356
lea eax, [0x60f360]
mov dword [esp], eax
lea ecx, [esp + 0x160]
mov dword [esp + 4], ecx
lea edx, [esp + 0x3e4]
mov dword [esp + 8], edx
call fcn.0040d120
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4df29f
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x114]
jmp 0x4df1e2
lea eax, [0x60f360]
mov dword [esp], eax
lea ecx, [esp + 0x160]
mov dword [esp + 4], ecx
lea edx, [esp + 0x3e4]
mov dword [esp + 8], edx
call fcn.0040d670
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x130]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x74]
jmp 0x4df31d
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x114]
jmp 0x4df1e2
mov edi, dword [esp + 0x6c]
inc edi
mov esi, edx
mov edx, ecx
mov ecx, eax
mov eax, edi
mov dword [esp + 0x6c], eax
mov dword [esp + 0x114], ebp
mov dword [esp + 0x120], edx
mov dword [esp + 0x74], esi
mov dword [esp + 0x80], ecx
mov dword [esp + 0x90], ebx
mov edi, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x3e8]
mov edi, dword [edi + 0x64]
mov dword [esp], ecx
call edi
mov eax, dword [esp + 0x6c]
cmp dword [esp + 4], eax
jle 0x4df2eb
mov ecx, dword [esp + 0x3e4]
mov edx, dword [esp + 0x3e8]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x17c]
lea esi, [esp + 8]
call fcn.0046837e
movzx eax, byte [esp + 0x1ac]
test al, al
jne 0x4df3de
lea edi, [esp + 0x1b0]
lea esi, [esp + 0x17c]
call fcn.0046837e
mov eax, dword [esp + 0x1bc]
test eax, eax
je 0x4df497
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x114]
jmp 0x4df310
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x190]
mov dword [esp + 0xec], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x16
je 0x4df413
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xec]
jmp 0x4df42e
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xec], ecx
lea edi, [esp + 0x1e4]
lea esi, [esp + 0x17c]
call fcn.0046837e
mov ecx, dword [esp + 0x1f0]
test ecx, ecx
jne 0x4df457
xor eax, eax
jmp 0x4df46e
mov eax, dword [eax + 0x50]
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
test al, al
je 0x4df497
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x114]
jmp 0x4df310
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x198]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x639300]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.0048c520
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp eax, 1
jne 0x4df4fa
cmp byte [ecx], 0x2d
jne 0x4df4fa
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x114]
jmp 0x4df310
nop
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x6390b5]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.0047b320
mov eax, dword [esp + 0x10]
mov dword [esp + 0x11c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x100], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x54], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004de0e0
movzx eax, byte [esp + 8]
test al, al
je 0x4df561
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x11c]
jmp 0x4df565
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x110], ecx
mov edx, dword [esp + 0x3dc]
lea ebx, [0x60dac0]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x70], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0044da60
mov eax, dword [esp + 0x3dc]
mov ecx, dword [esp + 0x70]
cmp eax, ecx
jl 0x4df5a3
mov eax, ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x12c], edx
mov ebx, dword [esp + 0x3d8]
cmp ebx, edx
je 0x4df5d7
mov dword [esp], edx
mov dword [esp + 4], ebx
shl eax, 2
mov dword [esp + 8], eax
call fcn.004685e0
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x12c]
mov eax, dword [esp + 0x3dc]
cmp eax, ecx
jae 0x4dfd00
mov ecx, dword [esp + 0x6c]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x18c]
mov ebx, dword [esp + 0x190]
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ebx
mov eax, dword [eax + 0x60]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
test eax, eax
jne 0x4df662
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x16
jne 0x4df662
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov ecx, dword [esp + 0x54]
mov dword [esp + 4], ecx
lea edx, [0x6396a9]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
call fcn.004e4090
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4df698
xor eax, eax
jmp 0x4df6c9
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
test eax, eax
je 0x4df6c7
cmp eax, 0xe
jbe 0x4df6c0
cmp eax, 0x18
jne 0x4df6c7
mov eax, 1
jmp 0x4df6c9
xor eax, eax
mov byte [esp + 0x3e], al
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x4df6dc
mov edx, 1
jmp 0x4df718
movzx edx, byte [esp + 0x1ac]
test dl, dl
jne 0x4df6ef
mov edx, 1
jmp 0x4df718
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
mov ecx, dword [esp + 0x5c]
mov edx, eax
movzx eax, byte [esp + 0x3e]
test dl, dl
je 0x4dfb1d
test ecx, ecx
jne 0x4df734
mov edx, dword [esp + 0x17c]
mov ebx, dword [esp + 0x180]
jmp 0x4df73d
mov ebx, ecx
mov edx, dword [esp + 0x110]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x110], edx
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
lea eax, [0x63a00c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 9
call fcn.004e4090
mov eax, dword [esp + 0x5c]
test eax, eax
setne al
movzx ecx, byte [esp + 0x10]
mov byte [esp + 0x3f], cl
lea edi, [esp + 0x328]
mov edx, eax
xor eax, eax
call fcn.00467edf
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x328], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x32c], ecx
mov byte [esp + 0x34c], dl
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x350], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x354], ecx
mov dword [esp + 0x358], ecx
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
mov dword [esp + 0x35c], ecx
mov dword [esp + 0x360], edx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x364], cl
movzx ecx, byte [esp + 0x3e]
mov byte [esp + 0x365], cl
mov ecx, dword [esp + 0x328]
mov edx, dword [esp + 0x32c]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004519f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x330], eax
mov dword [esp + 0x334], ecx
mov dword [esp + 0x338], edx
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov dword [esp + 4], 0
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004e01c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x120], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x80], edx
mov dword [esp], 0
lea ebx, [0x68800c]
mov dword [esp + 4], ebx
mov dword [esp + 8], 1
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
lea eax, [0x6390c2]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.00451650
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x344], eax
mov dword [esp + 0x348], ecx
mov eax, dword [esp + 0x328]
mov ecx, dword [esp + 0x32c]
mov dword [esp], 0
lea edx, [0x68800c]
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x6390c2]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.00451650
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x33c], eax
mov dword [esp + 0x340], ecx
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
inc ecx
mov edx, dword [esp + 0x154]
cmp eax, ecx
jae 0x4df998
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x62bca0]
mov dword [esp + 0x10], eax
call fcn.0044dbe0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x154], edx
mov dword [esp + 0x158], ecx
mov eax, dword [0x860560]
mov ebx, ecx
shl ecx, 6
lea ecx, [ecx + ebx*4]
lea edi, [edx + ecx - 0x44]
test eax, eax
je 0x4df9e0
mov dword [esp + 0x128], edi
lea eax, [0x62bca0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esp + 0x328]
mov dword [esp + 8], ecx
call fcn.00411510
mov edi, dword [esp + 0x128]
lea esi, [esp + 0x328]
call fcn.00468356
lea eax, [0x60f3a0]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
lea edx, [esp + 0x3e4]
mov dword [esp + 8], edx
call fcn.0040d120
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x4dfaf8
mov ecx, dword [esp + 0x158]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4dfcfb
mov eax, ecx
shl ecx, 6
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x154]
lea esi, [eax + ecx - 0x44]
lea edi, [esp + 0x47c]
call fcn.00468356
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
inc ecx
mov edx, dword [esp + 0x154]
cmp eax, ecx
jae 0x4dfaa4
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x62bca0]
mov dword [esp + 0x10], eax
call fcn.0044dbe0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x154], edx
mov dword [esp + 0x158], ecx
mov eax, dword [0x860560]
mov ebx, ecx
shl ecx, 6
lea ecx, [ecx + ebx*4]
lea edi, [edx + ecx - 0x44]
test eax, eax
je 0x4dfaec
mov dword [esp + 0x128], edi
lea eax, [0x62bca0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x47c]
mov dword [esp + 8], eax
call fcn.00411510
mov edi, dword [esp + 0x128]
lea esi, [esp + 0x47c]
call fcn.00468356
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x114]
jmp 0x4df310
lea eax, [0x60f3a0]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
lea edx, [esp + 0x144]
mov dword [esp + 8], edx
call fcn.0040d670
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x60f3a0]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
lea edx, [esp + 0x144]
mov dword [esp + 8], edx
call fcn.0040d120
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x4dfb8b
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x114]
jmp 0x4dfce8
mov eax, dword [esp + 0x74]
inc eax
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
mov ecx, dword [ecx + 0x60]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x88], ecx
lea edi, [esp + 0x438]
mov edx, eax
xor eax, eax
call fcn.00467edf
mov dword [esp + 0x438], edx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x43c], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x460], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x464], ecx
mov dword [esp + 0x468], ecx
mov ecx, dword [esp + 0x148]
mov edx, dword [esp + 0x144]
mov dword [esp + 0x46c], edx
mov dword [esp + 0x470], ecx
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x8c]
cmp ecx, edx
jb 0x4dfc3c
mov eax, edx
mov ebp, dword [esp + 0x114]
mov ebx, ecx
jmp 0x4dfc71
mov eax, dword [esp + 0x114]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x62bca0]
mov dword [esp + 0x10], eax
call fcn.0044dbe0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [0x860560]
mov edx, eax
shl eax, 6
lea eax, [eax + edx*4]
lea edi, [ebp + eax - 0x44]
test ecx, ecx
je 0x4dfcdc
mov dword [esp + 0x124], ebp
mov dword [esp + 0x90], edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x128], edi
lea eax, [0x62bca0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x438]
mov dword [esp + 8], eax
call fcn.00411510
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x124]
mov edi, dword [esp + 0x128]
lea esi, [esp + 0x438]
call fcn.00468356
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x120]
jmp 0x4df310
call fcn.00467cb0
call fcn.00467cb0
nop
call fcn.00466840
jmp fcn.004de790