Function at 0x4cf270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x4d05fd
sub esp, 0xa8
mov eax, dword [esp + 0xac]
mov dword [eax + 0xc], 0
lea ecx, [0x695f40]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.00409510
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x4cfe77
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x4cf975
mov ecx, dword [ecx + 8]
cmp ecx, 0x6e78e923
ja 0x4cf632
cmp ecx, 0x43cfbb1f
ja 0x4cf47c
cmp ecx, 0x338a7ec0
jbe 0x4cf3c7
cmp ecx, 0x4072c7d5
jne 0x4cf334
mov ecx, dword [esp + 0xb4]
lea edx, [0x6802e0]
cmp ecx, edx
jne 0x4cf97c
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4d0469
cmp ecx, 0x43cfbb1f
jne 0x4cf3bb
mov ecx, dword [esp + 0xb4]
lea edx, [0x67ebe0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004ce9d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044f3a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x8e84e0]
test ecx, ecx
jne 0x4cf3b1
mov dword [edi], eax
jmp 0x4cffd6
call fcn.00463080
jmp 0x4cffd6
mov ecx, dword [esp + 0xb4]
jmp 0x4cf97c
cmp ecx, 0x2e74d42b
jne 0x4cf41f
mov ecx, dword [esp + 0xb4]
lea edx, [0x680720]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004cd3e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4cffd6
cmp ecx, 0x338a7ec0
jne 0x4cf470
mov ecx, dword [esp + 0xb4]
lea edx, [0x683720]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cd9b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cffd6
mov ecx, dword [esp + 0xb4]
jmp 0x4cf97c
cmp ecx, 0x510ad14d
jbe 0x4cf566
cmp ecx, 0x62de383d
je 0x4cf51d
cmp ecx, 0x6d448d5d
jne 0x4cf4c0
mov ecx, dword [esp + 0xb4]
lea edx, [0x680320]
cmp ecx, edx
jne 0x4cf97c
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4d02d9
cmp ecx, 0x6e78e923
jne 0x4cf511
mov ecx, dword [esp + 0xb4]
lea edx, [0x6836a0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cd9b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cffd6
mov ecx, dword [esp + 0xb4]
jmp 0x4cf97c
mov ecx, dword [esp + 0xb4]
lea edx, [0x6806e0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cd3e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cffd6
cmp ecx, 0x49163278
jne 0x4cf5be
mov ecx, dword [esp + 0xb4]
lea edx, [0x683760]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004cd9b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4cffd6
cmp ecx, 0x510ad14d
jne 0x4cf626
mov ecx, dword [esp + 0xb4]
lea edx, [0x67ece0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004ce7d0
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
cvtsd2ss xmm0, xmm1
movss dword [eax + 4], xmm0
jmp 0x4cffd6
mov ecx, dword [esp + 0xb4]
jmp 0x4cf97c
cmp ecx, 0xba585d67
ja 0x4cf7b6
cmp ecx, 0x889ce7f8
ja 0x4cf708
cmp ecx, 0x7afcd172
jne 0x4cf6aa
mov ecx, dword [esp + 0xb4]
lea edx, [0x67eca0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004ce7d0
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
jmp 0x4cffd6
cmp ecx, 0x889ce7f8
jne 0x4cf6fc
mov ecx, dword [esp + 0xb4]
lea edx, [0x6836e0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004cd9b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4cffd6
mov ecx, dword [esp + 0xb4]
jmp 0x4cf97c
cmp ecx, 0x8f96facd
jne 0x4cf759
mov ecx, dword [esp + 0xb4]
lea edx, [0x6837e0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cd9b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cffd6
cmp ecx, 0xba585d67
jne 0x4cf7aa
mov ecx, dword [esp + 0xb4]
lea edx, [0x680660]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cd3e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4cffd6
mov ecx, dword [esp + 0xb4]
jmp 0x4cf97c
cmp ecx, 0xd6631a7c
ja 0x4cf871
cmp ecx, 0xc3230e0b
jne 0x4cf814
mov ecx, dword [esp + 0xb4]
lea edx, [0x6806a0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004cd3e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4cffd6
cmp ecx, 0xd6631a7c
jne 0x4cf865
mov ecx, dword [esp + 0xb4]
lea edx, [0x680760]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004cd3e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4cffd6
mov ecx, dword [esp + 0xb4]
jmp 0x4cf97c
cmp ecx, 0xe47f76c1
jne 0x4cf8d5
mov ecx, dword [esp + 0xb4]
lea edx, [0x683060]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004ce9d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov ecx, dword [0x8e84e0]
test ecx, ecx
jne 0x4cf8cb
mov dword [edi], eax
jmp 0x4cffd6
call fcn.00463080
jmp 0x4cffd6
cmp ecx, 0xf3b50de0
jne 0x4cf926
mov ecx, dword [esp + 0xb4]
lea edx, [0x6837a0]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004cd9b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4cffd6
cmp ecx, 0xfcd60fce
jne 0x4cf96c
mov ecx, dword [esp + 0xb4]
lea edx, [0x67ec20]
cmp ecx, edx
jne 0x4cf97c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004ccaf0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4cffd6
mov ecx, dword [esp + 0xb4]
jmp 0x4cf97c
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x4cfa05
nop
movzx ebx, byte [0x8c1150]
test bl, bl
je 0x4cf9c6
mov dword [0x8c1154], ecx
mov ecx, dword [0x8e84e0]
test ecx, ecx
jne 0x4cf9b2
mov eax, dword [esp + 0xb8]
mov dword [0x8c1158], eax
jmp 0x4cf9cd
lea edi, [0x8c1158]
mov eax, dword [esp + 0xb8]
call fcn.00463080
jmp 0x4cf9cd
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x4cf9fd
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4cfa0b
or edx, 0x80
jmp 0x4cfa0b
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4cfa0b
xor edx, edx
xor ecx, ecx
xor eax, eax
nop
mov ebx, edx
and edx, 0x1f
cmp edx, 0x16
jne 0x4d01e2
mov dword [esp + 0x58], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048ab80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x90], edx
nop
mov ebx, ecx
and ecx, 0x1f
cmp ecx, 0xc
ja 0x4cfbc5
cmp ecx, 1
je 0x4cfb7b
lea ebp, [ecx - 2]
cmp ebp, 4
ja 0x4cfaf3
test ebx, 0x200
jne 0x4cfa84
lea ecx, [0x73b54c]
jmp 0x4cfaa2
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cd3e0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048c490
jmp 0x4cffd6
cmp ecx, 7
jb 0x4d00e4
test ebx, 0x200
jne 0x4cfb0c
lea ecx, [0x73b54c]
jmp 0x4cfb2a
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cd9b0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048ca70
jmp 0x4cffd6
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004ccaf0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.0048c000
jmp 0x4cffd6
cmp ecx, 0x10
ja 0x4cfd3c
cmp ecx, 0xe
jbe 0x4cfc52
test ebx, 0x200
jne 0x4cfbe3
lea ecx, [0x73b54c]
jmp 0x4cfc01
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004ce7d0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048c300
jmp 0x4cffd6
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cc670
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cca80
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cdf00
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x38]
test edx, 0x200
jne 0x4cfcad
lea ebx, [0x73b54c]
mov ebp, dword [esp + 0x94]
jmp 0x4cfcd7
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov ebp, ecx
mov eax, dword [ebx + 0x18]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004ce520
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.0048c3d0
jmp 0x4cffd6
cmp ecx, 0x17
je 0x4cfd9b
cmp ecx, 0x18
jne 0x4d00e4
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004ce9d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0048cb70
jmp 0x4cffd6
test ebx, 0x200
jne 0x4cfdab
lea ecx, [0x73b54c]
jmp 0x4cfdc9
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x2c], ecx
mov edx, dword [ecx + 0x28]
mov dword [esp], eax
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4cffe6
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004ce9d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048d720
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048bef0
xor eax, eax
jmp 0x4cff8a
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
lea ecx, [0x73b058]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test edx, edx
jne 0x4cfeba
add esp, 0xa8
ret
mov ebp, dword [0x8c0ae4]
cmp dword [0x8c0ae0], eax
je 0x4cff1b
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], ebx
lea eax, [0x698040]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f90
mov eax, dword [esp + 8]
lea ecx, [0x698040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
mov dword [esp + 0x50], edx
mov dword [esp + 0x88], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004037d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4cff50
mov edx, dword [0x8c0b08]
mov ebx, dword [0x8c0b0c]
jmp 0x4cfec8
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x88]
jmp 0x4cfec8
mov ebp, dword [esp + 0x70]
movzx esi, byte [ebp + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
call fcn.0048ca70
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jge 0x4cffd6
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048ae20
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jb 0x4cff60
jmp 0x4cffdd
add esp, 0xa8
ret
mov eax, ebx
mov ecx, ebp
call fcn.00463100
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4d00bf
lea eax, [0x73b54c]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6c9782]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ef90
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], ecx
lea edx, [0x697fe0]
mov dword [esp], edx
call fcn.0040b800
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov eax, dword [0x8e84e0]
test eax, eax
jne 0x4d00b4
mov eax, dword [esp + 0x78]
mov dword [edi], eax
lea eax, [0x7395a8]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x698040]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f90
mov eax, dword [esp + 8]
lea ecx, [0x698040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
mov eax, dword [esp + 0x78]
call fcn.00463080
jmp 0x4d0071
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4cffff
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4d01bd
lea eax, [0x73b54c]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6c9782]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ef90
mov eax, dword [esp + 0x14]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
lea edx, [0x697fe0]
mov dword [esp], edx
call fcn.0040b800
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x3c]
mov dword [edi + 4], eax
mov eax, dword [0x8e84e0]
test eax, eax
jne 0x4d01b2
mov eax, dword [esp + 0x74]
mov dword [edi], eax
lea eax, [0x7395a8]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x698040]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f90
mov eax, dword [esp + 8]
lea ecx, [0x698040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
mov eax, dword [esp + 0x74]
call fcn.00463080
jmp 0x4d016f
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4d00fd
test ebx, ebx
je 0x4d02bc
test ebx, 0x200
jne 0x4d02bc
lea eax, [0x73b54c]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6cb160]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ef90
mov eax, dword [esp + 0x14]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
lea edx, [0x697fe0]
mov dword [esp], edx
call fcn.0040b800
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0x8e84e0]
test eax, eax
jne 0x4d02b1
mov eax, dword [esp + 0x7c]
mov dword [edi], eax
lea eax, [0x7395a8]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x698040]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f90
mov eax, dword [esp + 8]
lea ecx, [0x698040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
mov eax, dword [esp + 0x7c]
call fcn.00463080
jmp 0x4d026e
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048cfe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4d01fc
cmp ecx, 8
jge 0x4d037e
lea edx, [0x6c6616]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4d02f7
inc ecx
jmp 0x4d0320
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045cfd0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x6c6616]
cmp eax, ebx
jne 0x4d02d9
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cc670
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cca80
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cdf00
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40
call fcn.004ce520
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
jmp 0x4cffd6
lea ecx, [esp + 0x5c]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f720
mov dword [esp], 0
lea eax, [0x6c7617]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x6c5c96]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6c626b]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044f0d0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ecx
lea edx, [0x697fe0]
mov dword [esp], edx
call fcn.0040b800
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x48]
mov dword [edi + 4], eax
mov eax, dword [0x8e84e0]
test eax, eax
jne 0x4d045b
mov eax, dword [esp + 0x80]
mov dword [edi], eax
lea eax, [0x7395a8]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x698040]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f90
mov eax, dword [esp + 8]
lea ecx, [0x698040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
mov eax, dword [esp + 0x80]
call fcn.00463080
jmp 0x4d0418
cmp ecx, 8
jge 0x4d0512
lea edx, [0x6c6616]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4d0487
inc ecx
jmp 0x4d04b0
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045cfd0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x6c6616]
cmp eax, ebx
jne 0x4d0469
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cc670
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cca80
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cdf00
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x20
call fcn.004ce520
movsd xmm0, qword [esp + 0x10]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
jmp 0x4cffd6
lea ecx, [esp + 0x60]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f720
mov dword [esp], 0
lea eax, [0x6c7617]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x6c5c96]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6c6264]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044f0d0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
lea edx, [0x697fe0]
mov dword [esp], edx
call fcn.0040b800
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x4c]
mov dword [edi + 4], eax
mov eax, dword [0x8e84e0]
test eax, eax
jne 0x4d05ef
mov eax, dword [esp + 0x84]
mov dword [edi], eax
lea eax, [0x7395a8]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x698040]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f90
mov eax, dword [esp + 8]
lea ecx, [0x698040]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436f70
mov eax, dword [esp + 0x84]
call fcn.00463080
jmp 0x4d05ac
call fcn.00461c70
jmp fcn.004cf270