Function at 0x4e68a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9ec7ac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xa0]
cmp eax, dword [ecx + 8]
jbe 0x4e7bfa
sub esp, 0x120
mov ecx, dword [esp + 0x12c]
cmp ecx, 2
jl 0x4e6912
mov ebx, dword [esp + 0x130]
mov ebp, dword [esp + 0x128]
mov eax, ebp
mov edx, ebx
xor esi, esi
xor edi, edi
xor eax, eax
mov word [esp + 0x24], ax
xor edx, edx
mov dword [esp + 0x28], edx
xor edx, edx
mov dword [esp + 0x2c], edx
xor edx, edx
mov dword [esp + 0xe4], edx
xor ebx, ebx
mov dword [esp + 0x38], ebx
mov eax, ebp
mov edx, dword [esp + 0x130]
mov ebx, edx
jmp 0x4e6950
mov eax, dword [esp + 0x128]
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], ecx
mov eax, dword [esp + 0x130]
mov dword [esp + 0x13c], eax
add esp, 0x120
ret
mov edx, dword [esp + 0x30]
inc edx
mov dword [esp + 0x38], edi
mov edi, esi
mov esi, edx
mov edx, dword [esp + 0x130]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0xf8], ebp
cmp ecx, esi
jl 0x4e6eff
mov dword [esp + 0x30], esi
jle 0x4e6a0c
jbe 0x4e7bf2
mov edx, dword [eax + esi*4]
cmp byte [edx], 0x12
jne 0x4e6998
mov ebp, dword [edx + 8]
test ebp, ebp
je 0x4e6991
mov ebp, dword [edx + 4]
mov edx, dword [ebp]
mov ebp, dword [esp + 0xf8]
jmp 0x4e6998
mov ebp, dword [esp + 0xf8]
cmp byte [edx], 3
je 0x4e69b8
xor edx, edx
xor edx, edx
mov dword [esp + 0x4c], edx
xor edx, edx
mov dword [esp + 0xfc], edx
xor edx, edx
mov dword [esp + 0x50], edx
xor edx, edx
jmp 0x4e69eb
movzx ebp, word [edx + 2]
mov ebx, dword [edx + 0x14]
mov eax, dword [edx + 0x18]
mov edx, dword [edx + 0x1c]
and ebp, 1
mov dword [esp + 0x4c], eax
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0x128]
mov ebx, dword [esp + 0x3c]
mov edx, ebp
mov ebp, dword [esp + 0xf8]
movzx ebp, word [esp + 0x24]
cmp bp, dx
jne 0x4e7ac9
mov dword [esp + 0x7c], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x7c]
jmp 0x4e7b66
mov dword [esp + 0xbc], eax
xor eax, eax
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x78], eax
xor eax, eax
mov dword [esp + 0x10c], eax
xor eax, eax
mov word [esp + 0x26], ax
mov eax, dword [esp + 0xbc]
cmp edi, esi
jne 0x4e6a43
mov edi, dword [esp + 0x38]
jmp 0x4e6eb0
lea edx, [edi + 1]
cmp esi, edx
jne 0x4e6ad7
cmp ecx, edi
jbe 0x4e7ac2
mov edx, esi
mov esi, dword [esp + 0x38]
inc esi
mov edi, dword [eax + edi*4]
cmp ebx, esi
jae 0x4e6aab
mov dword [esp + 0x118], edi
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x118]
mov eax, dword [0x9eca70]
test eax, eax
je 0x4e6ace
mov eax, edi
call fcn.00468460
mov dword [edi], eax
mov ecx, dword [ebp + esi*4 - 4]
mov dword [edi + 4], ecx
mov ecx, dword [esp + 0x12c]
mov edi, eax
mov dword [ebp + esi*4 - 4], edi
jmp 0x4e6e9c
mov dword [esp + 0x70], edi
mov edx, dword [esp + 0x124]
mov ebp, dword [edx + 0x10]
nop
test ebp, ebp
je 0x4e6b58
mov ebx, dword [0x9eca70]
mov eax, dword [ebp + 0x10]
test ebx, ebx
je 0x4e6b48
mov dword [esp + 0xf4], ebp
mov dword [esp + 0x118], eax
call fcn.00468460
mov dword [edi], eax
mov ecx, dword [edx + 0x10]
mov dword [edi + 4], ecx
lea ecx, [0x71b340]
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.00411930
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x124]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x70]
mov dword [edx + 0x10], eax
xor eax, eax
mov ebx, edi
mov edi, ebp
call fcn.004686f1
jmp 0x4e6b7e
lea eax, [0x71b340]
mov dword [esp], eax
call fcn.0040c5b0
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0x124]
inc dword [eax + 0x2c]
mov edx, eax
mov ebx, dword [esp + 0x70]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x118], ebp
mov byte [ebp], 3
movzx eax, word [esp + 0x24]
mov word [ebp + 2], ax
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x14]
mov edi, dword [esp + 0x28]
cmp edi, eax
jbe 0x4e6bce
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
lea eax, [0x6e43c0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, eax
mov eax, edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], edi
mov dword [esp + 0x108], ecx
mov dword [esp], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x28]
shl edx, 2
mov dword [esp + 8], edx
call fcn.00468df0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x118]
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x5c]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x9eca70]
test eax, eax
jne 0x4e6c23
mov ebx, dword [esp + 0x108]
jmp 0x4e6c37
call fcn.00468460
mov ebx, dword [esp + 0x108]
mov dword [edi], ebx
mov ebp, dword [ecx + 0x14]
mov dword [edi + 4], ebp
mov dword [ecx + 0x14], ebx
mov ebx, dword [esp + 0x128]
mov ebp, dword [esp + 0x124]
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x12c]
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x70]
jmp 0x4e7a49
mov esi, dword [esp + 0x130]
cmp esi, edx
jb 0x4e7ab0
mov edi, dword [esp + 0x70]
cmp edi, edx
ja 0x4e7aa7
mov dword [esp], ebp
sub esi, edi
mov dword [esp + 0x5c], esi
sub edx, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
shl edi, 2
sar esi, 0x1f
and edi, esi
lea esi, [ebx + edi]
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 0x13
call fcn.004e64e0
mov eax, dword [esp + 0x124]
mov edi, dword [eax + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xe0], ecx
nop
test edi, edi
je 0x4e6d3a
mov dword [esp + 0xf0], edi
mov ebx, dword [0x9eca70]
mov ebp, dword [edi + 0x10]
test ebx, ebx
je 0x4e6d23
mov dword [esp + 0x114], ebp
mov ecx, edi
call fcn.00468460
mov dword [edi], ebp
mov edx, dword [eax + 0x10]
mov dword [edi + 4], edx
lea edx, [0x71b340]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00411930
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0xe0]
mov ebp, dword [esp + 0x114]
mov edi, dword [esp + 0xf0]
mov dword [eax + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.004686f1
mov eax, edx
mov edi, dword [esp + 0xf0]
jmp 0x4e6d56
lea eax, [0x71b340]
mov dword [esp], eax
call fcn.0040c5b0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x124]
inc dword [eax + 0x2c]
mov dword [esp + 0xf0], edi
mov byte [edi], 0x12
mov ebx, dword [edi + 0xc]
mov ebp, dword [edi + 4]
cmp ebx, 2
jae 0x4e6da7
mov dword [esp], ebp
mov dword [esp + 4], 2
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x124]
mov edi, dword [esp + 0xf0]
mov esi, dword [0x9eca70]
test esi, esi
jne 0x4e6dc5
mov ecx, edi
mov edx, ebx
mov ebx, dword [esp + 0xe0]
mov esi, dword [esp + 0x118]
jmp 0x4e6ded
mov ecx, edi
call fcn.00468480
mov esi, dword [esp + 0x118]
mov dword [edi], esi
mov edx, dword [ebp]
mov dword [edi + 4], edx
mov edx, ebx
mov ebx, dword [esp + 0xe0]
mov dword [edi + 8], ebx
mov eax, dword [ebp + 4]
mov dword [edi + 0xc], eax
mov dword [ebp], esi
mov dword [ebp + 4], ebx
mov dword [ecx + 8], 2
mov dword [ecx + 0xc], edx
mov ebx, dword [0x9eca70]
test ebx, ebx
je 0x4e6e14
call fcn.00468460
mov dword [edi], ebp
mov ebx, dword [ecx + 4]
mov dword [edi + 4], ebx
mov dword [ecx + 4], ebp
mov ebx, dword [esp + 0x38]
inc ebx
mov ebp, dword [esp + 0x3c]
cmp ebp, ebx
jb 0x4e6e2d
mov eax, dword [esp + 0xf8]
jmp 0x4e6e6f
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xf0]
mov edx, eax
mov eax, ebp
mov ebp, edx
mov esi, dword [0x9eca70]
test esi, esi
je 0x4e6e87
call fcn.00468460
mov dword [edi], ecx
mov esi, dword [eax + ebx*4 - 4]
mov dword [edi + 4], esi
mov dword [eax + ebx*4 - 4], ecx
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x30]
mov esi, ebx
mov ebx, ebp
mov ebp, eax
mov eax, dword [esp + 0x128]
mov edx, dword [esp + 0x130]
mov edi, esi
mov esi, dword [esp + 0x30]
mov dword [esp + 0x94], eax
movzx eax, word [esp + 0x26]
mov word [esp + 0x24], ax
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x84], edx
mov edx, dword [esp + 0x10c]
mov dword [esp + 0xe4], edx
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x84]
jmp 0x4e693c
mov ecx, dword [esp + 0x38]
mov eax, ebp
mov edx, ebx
xor esi, esi
xor edi, edi
xor eax, eax
mov dword [esp + 0x104], eax
xor edx, edx
mov dword [esp + 0x78], edx
mov eax, ebp
mov edx, ebx
jmp 0x4e6f31
mov edx, dword [esp + 0x30]
inc edx
mov dword [esp + 0x78], edi
mov edi, esi
mov esi, edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x11c], ebp
cmp esi, ecx
jg 0x4e73d0
mov dword [esp + 0x30], esi
mov dword [esp + 0x74], ebx
mov dword [esp + 0x70], edi
jge 0x4e70ab
jae 0x4e79eb
mov edx, dword [eax + esi*4]
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x4e6f69
xor edx, edx
jmp 0x4e6f89
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x4e6f89
mov ebp, dword [edx + 8]
test ebp, ebp
je 0x4e6f89
mov ebp, dword [edx + 4]
mov ebp, dword [ebp]
cmp byte [ebp], 2
jne 0x4e6f87
xor edx, edx
jmp 0x4e6f89
mov edx, ebp
mov ebp, dword [esp + 0x104]
test ebp, ebp
jne 0x4e6faa
mov dword [esp + 0xd4], eax
xor eax, eax
mov byte [esp + 0x23], al
mov eax, dword [esp + 0xd4]
jmp 0x4e6feb
mov dword [esp + 0x100], edx
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.004ecf80
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x70]
mov byte [esp + 0x23], al
mov eax, dword [esp + 0xf8]
movzx ebx, byte [esp + 0x23]
test bl, bl
je 0x4e7093
movzx ebx, byte [ebp]
cmp bl, 3
jne 0x4e7007
cmp dword [ebp + 0x18], 1
je 0x4e7072
cmp bl, 4
je 0x4e7072
cmp bl, 5
je 0x4e7072
cmp bl, 6
je 0x4e7072
cmp bl, 0x11
jne 0x4e7093
mov ebx, dword [ebp + 0x28]
cmp dword [ebp + 0x2c], ebx
jne 0x4e7093
mov ebx, dword [ebp + 8]
test ebx, ebx
jbe 0x4e79e2
mov ebx, dword [ebp + 4]
mov ebx, dword [ebx]
movzx eax, byte [ebx]
cmp al, 3
jne 0x4e704a
cmp dword [ebx + 0x18], 1
jne 0x4e704a
mov eax, dword [esp + 0xf8]
jmp 0x4e7072
cmp al, 4
jne 0x4e7058
mov eax, dword [esp + 0xf8]
jmp 0x4e7072
cmp al, 5
jne 0x4e7066
mov eax, dword [esp + 0xf8]
jmp 0x4e7072
cmp al, 6
jne 0x4e708c
mov eax, dword [esp + 0xf8]
mov edx, dword [esp + 0x3c]
mov esi, edi
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x78]
mov ebp, dword [esp + 0x11c]
jmp 0x4e6f20
mov eax, dword [esp + 0xf8]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x118], edx
mov edx, dword [esp + 0x3c]
jmp 0x4e70c2
mov dword [esp + 0xcc], eax
xor eax, eax
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0xcc]
cmp edi, esi
jne 0x4e70cf
mov edi, dword [esp + 0x78]
jmp 0x4e73af
lea edx, [edi + 1]
cmp esi, edx
jne 0x4e715d
cmp edi, ecx
jae 0x4e79db
mov edx, esi
mov esi, dword [esp + 0x78]
inc esi
mov edi, dword [eax + edi*4]
cmp ebx, esi
jae 0x4e7134
mov dword [esp + 0x114], edi
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x114]
mov eax, dword [0x9eca70]
test eax, eax
je 0x4e7154
mov eax, edi
call fcn.00468460
mov dword [edi], eax
mov ecx, dword [ebp + esi*4 - 4]
mov dword [edi + 4], ecx
mov ecx, dword [esp + 0x38]
mov edi, eax
mov dword [ebp + esi*4 - 4], edi
jmp 0x4e739e
mov edx, dword [esp + 0x124]
jmp 0x4e795b
mov edi, dword [esp + 0x3c]
cmp esi, edi
ja 0x4e79cb
mov ebp, dword [esp + 0x70]
cmp ebp, esi
ja 0x4e79c2
mov dword [esp], edx
sub edi, ebp
mov dword [esp + 0x70], edi
sub esi, ebp
xchg edi, ebx
neg ebx
xchg edi, ebx
shl ebp, 2
sar edi, 0x1f
and ebp, edi
add ebp, eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov ebp, dword [esp + 0x70]
mov dword [esp + 0xc], ebp
mov byte [esp + 0x10], 0x13
call fcn.004e64e0
mov eax, dword [esp + 0x124]
mov edi, dword [eax + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xdc], ecx
nop
test edi, edi
je 0x4e723f
mov dword [esp + 0xec], edi
mov ebx, dword [0x9eca70]
mov ebp, dword [edi + 0x10]
test ebx, ebx
je 0x4e7228
mov dword [esp + 0x114], ebp
mov ecx, edi
call fcn.00468460
mov dword [edi], ebp
mov edx, dword [eax + 0x10]
mov dword [edi + 4], edx
lea edx, [0x71b340]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00411930
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0xdc]
mov ebp, dword [esp + 0x114]
mov edi, dword [esp + 0xec]
mov dword [eax + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.004686f1
mov eax, edx
mov edi, dword [esp + 0xec]
jmp 0x4e725b
lea eax, [0x71b340]
mov dword [esp], eax
call fcn.0040c5b0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x124]
inc dword [eax + 0x2c]
mov dword [esp + 0xec], edi
mov byte [edi], 0x12
mov ebx, dword [edi + 0xc]
mov ebp, dword [edi + 4]
cmp ebx, 2
jae 0x4e72ac
mov dword [esp], ebp
mov dword [esp + 4], 2
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x124]
mov edi, dword [esp + 0xec]
mov esi, dword [0x9eca70]
test esi, esi
jne 0x4e72ca
mov ecx, edi
mov edx, ebx
mov ebx, dword [esp + 0xdc]
mov esi, dword [esp + 0x104]
jmp 0x4e72f2
mov ecx, edi
call fcn.00468480
mov esi, dword [esp + 0x104]
mov dword [edi], esi
mov edx, dword [ebp]
mov dword [edi + 4], edx
mov edx, ebx
mov ebx, dword [esp + 0xdc]
mov dword [edi + 8], ebx
mov eax, dword [ebp + 4]
mov dword [edi + 0xc], eax
mov dword [ebp], esi
mov dword [ebp + 4], ebx
mov dword [ecx + 8], 2
mov dword [ecx + 0xc], edx
mov ebx, dword [0x9eca70]
test ebx, ebx
je 0x4e7319
call fcn.00468460
mov dword [edi], ebp
mov ebx, dword [ecx + 4]
mov dword [edi + 4], ebx
mov dword [ecx + 4], ebp
mov ebx, dword [esp + 0x78]
inc ebx
mov ebp, dword [esp + 0x74]
cmp ebp, ebx
jb 0x4e7332
mov eax, dword [esp + 0x11c]
jmp 0x4e7374
mov eax, dword [esp + 0x11c]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xec]
mov edx, eax
mov eax, ebp
mov ebp, edx
mov esi, dword [0x9eca70]
test esi, esi
je 0x4e738c
call fcn.00468460
mov dword [edi], ecx
mov esi, dword [eax + ebx*4 - 4]
mov dword [edi + 4], esi
mov dword [eax + ebx*4 - 4], ecx
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
mov esi, ebx
mov ebx, ebp
mov ebp, eax
mov eax, dword [esp + 0xf8]
mov edx, dword [esp + 0x3c]
mov edi, esi
mov esi, dword [esp + 0x30]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0xc4]
jmp 0x4e6f20
mov ecx, dword [esp + 0x78]
mov eax, ebp
xor edx, edx
xor esi, esi
xor edi, edi
jmp 0x4e73f0
inc esi
mov edx, esi
mov esi, ecx
mov edi, eax
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x38], edi
mov dword [esp + 0xf8], ebp
cmp edx, ecx
jg 0x4e76ba
jge 0x4e744b
jae 0x4e7905
mov eax, dword [eax + edx*4]
movzx ecx, byte [eax]
cmp cl, 3
jne 0x4e741c
cmp dword [eax + 0x18], 1
je 0x4e742b
cmp cl, 4
je 0x4e742b
cmp cl, 5
je 0x4e742b
cmp cl, 6
jne 0x4e7440
mov edi, dword [esp + 0x78]
mov ecx, esi
mov eax, dword [esp + 0x38]
mov esi, edx
mov edx, dword [esp + 0x11c]
jmp 0x4e73de
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x54], edx
cmp esi, edx
jne 0x4e7466
cmp edx, ecx
mov edx, eax
mov esi, dword [esp + 0x54]
mov edi, ecx
mov eax, dword [esp + 0x38]
jmp 0x4e762c
lea ebp, [esi + 1]
cmp edx, ebp
jne 0x4e751f
cmp esi, ecx
jae 0x4e78fe
lea ebp, [edi + 1]
mov esi, dword [eax + esi*4]
cmp ebx, ebp
jb 0x4e748c
mov edi, dword [esp + 0xf8]
jmp 0x4e74db
mov dword [esp + 0x118], esi
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x54]
mov esi, dword [esp + 0x118]
mov edi, ebp
mov ebp, eax
mov eax, dword [0x9eca70]
test eax, eax
jne 0x4e74e9
cmp edx, ecx
jmp 0x4e7505
mov dword [esp + 0x6c], ebx
mov eax, edi
call fcn.00468460
mov dword [edi], esi
mov ebx, dword [eax + ebp*4 - 4]
mov dword [edi + 4], ebx
cmp edx, ecx
mov ebx, dword [esp + 0x6c]
mov edi, eax
mov dword [edi + ebp*4 - 4], esi
mov edx, dword [esp + 0x11c]
mov esi, dword [esp + 0x54]
mov eax, ebp
mov ebp, edi
mov edi, ecx
jmp 0x4e762c
mov dword [esp + 0x68], ebx
mov dword [esp + 0x74], ebp
mov dword [esp + 0x64], esi
jmp 0x4e77d0
mov ebp, dword [esp + 0x64]
cmp ebp, ecx
jae 0x4e78e9
mov ebx, dword [eax + ebp*4]
cmp esi, ecx
jae 0x4e78e2
mov edi, dword [0x9eca70]
mov ecx, dword [eax + esi*4]
test edi, edi
je 0x4e756e
call fcn.00468480
mov dword [edi], ecx
mov edx, dword [eax + ebp*4]
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov edx, dword [eax + esi*4]
mov dword [edi + 0xc], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ebp*4], ecx
mov dword [eax + esi*4], ebx
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x74]
jmp 0x4e7827
mov ecx, dword [eax + ebp*4]
mov dword [esp], ecx
call fcn.004e6320
mov eax, dword [esp + 0x38]
inc eax
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x11c]
mov ecx, dword [edx + ecx*4]
mov ebx, dword [esp + 0x68]
cmp ebx, eax
jb 0x4e75b0
mov ebp, dword [esp + 0xf8]
jmp 0x4e75fa
mov dword [esp + 0x118], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x11c]
mov esi, dword [0x9eca70]
test esi, esi
jne 0x4e7610
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x78]
cmp esi, edi
jmp 0x4e7628
call fcn.00468460
mov dword [edi], ecx
mov esi, dword [ebp + eax*4 - 4]
mov dword [edi + 4], esi
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x78]
cmp esi, edi
mov dword [ebp + eax*4 - 4], ecx
jge 0x4e76b2
jae 0x4e78d2
inc eax
mov ecx, dword [edx + esi*4]
cmp ebx, eax
jae 0x4e768b
mov dword [esp + 0x118], ecx
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x11c]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x78]
mov edx, dword [0x9eca70]
test edx, edx
je 0x4e76a7
call fcn.00468460
mov dword [edi], ecx
mov edx, dword [ebp + eax*4 - 4]
mov dword [edi + 4], edx
mov edi, dword [esp + 0x78]
mov dword [ebp + eax*4 - 4], ecx
mov edx, dword [esp + 0x11c]
lea ecx, [esi + 1]
jmp 0x4e73de
mov eax, ebp
xor ecx, ecx
xor edx, edx
jmp 0x4e76cb
mov eax, dword [esp + 0xf8]
mov ecx, esi
cmp ecx, edi
jge 0x4e778a
lea esi, [ecx + 1]
cmp edi, esi
jle 0x4e7715
mov dword [esp + 0x110], ebp
mov ebp, dword [eax + ecx*4]
cmp byte [ebp], 2
jne 0x4e770e
cmp edi, esi
jbe 0x4e77a6
mov ebp, dword [eax + ecx*4 + 4]
cmp byte [ebp], 2
jne 0x4e7705
mov ebp, dword [esp + 0x110]
jmp 0x4e76c2
mov ebp, dword [esp + 0x110]
jmp 0x4e7715
mov ebp, dword [esp + 0x110]
inc edx
mov ecx, dword [eax + ecx*4]
cmp ebx, edx
jae 0x4e7765
mov dword [esp + 0x60], esi
mov dword [esp + 0x118], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x714de0]
mov dword [esp + 0x10], eax
call fcn.0044e230
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x118]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x38]
mov eax, dword [0x9eca70]
test eax, eax
je 0x4e7781
call fcn.00468460
mov dword [edi], ecx
mov eax, dword [ebp + edx*4 - 4]
mov dword [edi + 4], eax
mov edi, dword [esp + 0x38]
mov dword [ebp + edx*4 - 4], ecx
jmp 0x4e76c2
mov dword [esp + 0x134], ebp
mov dword [esp + 0x138], edx
mov dword [esp + 0x13c], ebx
add esp, 0x120
ret
mov eax, esi
mov ecx, edi
call fcn.004684c0
inc eax
mov ecx, dword [esp + 0x11c]
mov ebx, dword [esp + 0x78]
mov ecx, ebx
mov ebx, dword [esp + 0x68]
mov edi, dword [esp + 0x38]
mov esi, ebp
mov ebp, eax
mov eax, dword [esp + 0x11c]
cmp ebp, edx
jge 0x4e7530
cmp esi, ecx
jae 0x4e78f7
mov ebx, dword [eax + esi*4]
cmp ebp, ecx
jae 0x4e78f0
movzx edi, byte [ebx]
mov eax, dword [eax + ebp*4]
movzx ecx, byte [eax]
xchg edi, eax
cmp cl, al
xchg edi, eax
ja 0x4e7804
jne 0x4e7808
mov ebx, dword [ebx + 0x18]
cmp dword [eax + 0x18], ebx
jle 0x4e7808
mov eax, ebp
jmp 0x4e77af
mov eax, ebp
mov ebp, esi
jmp 0x4e77af
mov dword [ebp + 0x10], edi
mov dword [eax + 0x10], ebp
lea esi, [edx + 1]
mov ecx, dword [esp + 0x78]
mov ebp, dword [esp + 0x64]
mov edx, dword [esp + 0x54]
mov eax, ebx
mov ebx, esi
cmp ebx, edx
jge 0x4e7581
mov esi, dword [eax + ebp*4]
cmp ebx, ecx
jae 0x4e78db
mov dword [esp + 0x40], ebx
mov ecx, dword [eax + ebx*4]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.004e9ca0
mov eax, dword [esp + 0x124]
mov ecx, dword [eax + 0x3c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x11c]
mov ebp, dword [ebx + edx*4]
test ecx, ecx
je 0x4e789f
mov dword [esp + 0xe8], ebp
lea edx, [0x6e8e60]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0040f7d0
mov eax, dword [esp + 0x124]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0xe8]
test byte [ebp], al
mov esi, dword [0x9eca70]
mov edi, dword [eax + 0x10]
test esi, esi
je 0x4e780e
mov ecx, edi
call fcn.00468480
mov dword [edi], ecx
mov esi, dword [ebp + 0x10]
mov dword [edi + 4], esi
mov dword [edi + 8], ebp
mov esi, dword [eax + 0x10]
mov dword [edi + 0xc], esi
mov edi, ecx
jmp 0x4e780e
mov eax, esi
mov ecx, edi
call fcn.004684c0
mov eax, ebx
call fcn.004684c0
mov eax, esi
call fcn.004684c0
mov eax, ebp
call fcn.004684c0
mov eax, ebp
call fcn.004684c0
mov eax, esi
call fcn.004684c0
mov eax, esi
call fcn.004684c0
mov eax, edx
call fcn.004684c0
mov dword [edx + eax*4], ecx
mov ebx, dword [esp + 0x124]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.004e4b60
mov eax, dword [esp + 0x44]
lea edi, [eax + 1]
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x30]
mov ecx, ebx
mov edx, dword [esp + 0x124]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x30]
cmp edi, esi
jge 0x4e7169
cmp edi, ecx
jae 0x4e79d4
mov dword [esp + 0x44], edi
mov ecx, dword [eax + edi*4]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x70]
cmp edi, ecx
setne bl
mov byte [esp + 8], bl
call fcn.004e7e90
mov eax, dword [0x9eca70]
mov ecx, dword [esp + 0xc]
test eax, eax
jne 0x4e79a5
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0xf8]
jmp 0x4e790c
call fcn.00468460
mov dword [edi], ecx
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx + eax*4]
mov dword [edi + 4], ebx
jmp 0x4e790c
mov eax, ebp
mov ecx, esi
call fcn.00468520
mov ecx, esi
mov edx, edi
call fcn.00468500
mov eax, edi
call fcn.004684c0
mov eax, edi
call fcn.004684c0
xor eax, eax
mov ecx, eax
call fcn.004684c0
mov eax, esi
call fcn.004684c0
mov dword [edx + eax*4], ecx
mov ebx, dword [esp + 0x124]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.004e4b60
mov eax, dword [esp + 0x48]
lea edi, [eax + 1]
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x12c]
mov ebp, dword [esp + 0x30]
mov eax, ebx
mov ecx, dword [esp + 0x118]
mov edx, ebp
mov ebx, dword [esp + 0x128]
mov ebp, dword [esp + 0x124]
mov esi, dword [esp + 0x28]
cmp edi, edx
jge 0x4e6c60
cmp eax, edi
jbe 0x4e7ab9
mov dword [esp + 0x48], edi
mov eax, dword [ebx + edi*4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004e7c10
mov eax, dword [0x9eca70]
mov ecx, dword [esp + 0xc]
test eax, eax
jne 0x4e7a8a
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x128]
jmp 0x4e79f2
call fcn.00468460
mov dword [edi], ecx
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x128]
mov ebx, dword [edx + eax*4]
mov dword [edi + 4], ebx
jmp 0x4e79f2
mov eax, edi
mov ecx, edx
call fcn.00468520
mov ecx, edx
mov edx, esi
call fcn.00468500
mov ecx, eax
mov eax, edi
call fcn.004684c0
mov eax, edi
call fcn.004684c0
mov ebp, dword [esp + 0xf8]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x2c], eax
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x78], ecx
mov word [esp + 0xa4], dx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x10c], edx
mov dword [esp + 0x9c], ebx
movzx ebx, word [esp + 0xa4]
mov word [esp + 0x26], bx
mov edx, dword [esp + 0x130]
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xac]
mov ebx, dword [esp + 0x9c]
jmp 0x4e6a36
lea eax, [ebx + 1]
mov ecx, dword [esp + 0xe4]
mov ebx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x12c]
mov ebx, dword [esp + 0x3c]
movzx ebp, word [esp + 0x24]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x128]
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x34]
cmp esi, ebx
jle 0x4e7ba8
mov ebp, dword [esp + 0x4c]
cmp ebx, ebp
jge 0x4e7bac
mov ebp, dword [esp + 0xe4]
mov eax, dword [ebp + ebx*4]
mov ebp, dword [esp + 0xfc]
lea ecx, [ebp + ebx*4]
cmp dword [ecx], eax
je 0x4e7b39
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x12c]
mov ebp, dword [esp + 0x4c]
jmp 0x4e7bac
mov ebp, dword [esp + 0x4c]
test ebx, ebx
jle 0x4e7bd9
mov edx, dword [esp + 0x2c]
cmp edx, ebx
jb 0x4e7beb
mov edx, dword [esp + 0x130]
mov esi, edi
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
mov ebp, dword [esp + 0xf8]
jmp 0x4e693c
mov ebx, dword [esp + 0x3c]
movzx ebp, word [esp + 0x24]
mov esi, dword [esp + 0x30]
jmp 0x4e7ac9
mov ecx, ebx
call fcn.00468500
mov eax, esi
call fcn.004684c0
nop
call fcn.00467050
jmp fcn.004e68a0