Function at 0x4e4760
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x4e5aed
sub esp, 0xa8
mov eax, dword [esp + 0xac]
mov dword [eax + 0xc], 0
lea ecx, [0x767060]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.00409930
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x4e5367
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x4e4e65
mov ecx, dword [ecx + 8]
cmp ecx, 0x6e78e923
ja 0x4e4b22
cmp ecx, 0x43cfbb1f
ja 0x4e496c
cmp ecx, 0x338a7ec0
jbe 0x4e48b7
cmp ecx, 0x4072c7d5
jne 0x4e4824
mov ecx, dword [esp + 0xb4]
lea edx, [0x73c1a0]
cmp ecx, edx
jne 0x4e4e6c
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4e5959
cmp ecx, 0x43cfbb1f
jne 0x4e48ab
mov ecx, dword [esp + 0xb4]
lea edx, [0x73a1a0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004e3c20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044f070
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x4e48a1
mov dword [edi], eax
jmp 0x4e54c6
call fcn.004643b0
jmp 0x4e54c6
mov ecx, dword [esp + 0xb4]
jmp 0x4e4e6c
cmp ecx, 0x2e74d42b
jne 0x4e490f
mov ecx, dword [esp + 0xb4]
lea edx, [0x740fa0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004e2610
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4e54c6
cmp ecx, 0x338a7ec0
jne 0x4e4960
mov ecx, dword [esp + 0xb4]
lea edx, [0x7442e0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004e2be0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4e54c6
mov ecx, dword [esp + 0xb4]
jmp 0x4e4e6c
cmp ecx, 0x510ad14d
jbe 0x4e4a56
cmp ecx, 0x62de383d
je 0x4e4a0d
cmp ecx, 0x6d448d5d
jne 0x4e49b0
mov ecx, dword [esp + 0xb4]
lea edx, [0x73c1e0]
cmp ecx, edx
jne 0x4e4e6c
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4e57c9
cmp ecx, 0x6e78e923
jne 0x4e4a01
mov ecx, dword [esp + 0xb4]
lea edx, [0x744260]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004e2be0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4e54c6
mov ecx, dword [esp + 0xb4]
jmp 0x4e4e6c
mov ecx, dword [esp + 0xb4]
lea edx, [0x740f60]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004e2610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4e54c6
cmp ecx, 0x49163278
jne 0x4e4aae
mov ecx, dword [esp + 0xb4]
lea edx, [0x744320]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004e2be0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4e54c6
cmp ecx, 0x510ad14d
jne 0x4e4b16
mov ecx, dword [esp + 0xb4]
lea edx, [0x73a2e0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004e3a20
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
cvtsd2ss xmm0, xmm1
movss dword [eax + 4], xmm0
jmp 0x4e54c6
mov ecx, dword [esp + 0xb4]
jmp 0x4e4e6c
cmp ecx, 0xba585d67
ja 0x4e4ca6
cmp ecx, 0x889ce7f8
ja 0x4e4bf8
cmp ecx, 0x7afcd172
jne 0x4e4b9a
mov ecx, dword [esp + 0xb4]
lea edx, [0x73a2a0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004e3a20
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
jmp 0x4e54c6
cmp ecx, 0x889ce7f8
jne 0x4e4bec
mov ecx, dword [esp + 0xb4]
lea edx, [0x7442a0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004e2be0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4e54c6
mov ecx, dword [esp + 0xb4]
jmp 0x4e4e6c
cmp ecx, 0x8f96facd
jne 0x4e4c49
mov ecx, dword [esp + 0xb4]
lea edx, [0x7443a0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004e2be0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4e54c6
cmp ecx, 0xba585d67
jne 0x4e4c9a
mov ecx, dword [esp + 0xb4]
lea edx, [0x740ee0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004e2610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4e54c6
mov ecx, dword [esp + 0xb4]
jmp 0x4e4e6c
cmp ecx, 0xd6631a7c
ja 0x4e4d61
cmp ecx, 0xc3230e0b
jne 0x4e4d04
mov ecx, dword [esp + 0xb4]
lea edx, [0x740f20]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004e2610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4e54c6
cmp ecx, 0xd6631a7c
jne 0x4e4d55
mov ecx, dword [esp + 0xb4]
lea edx, [0x740fe0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004e2610
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4e54c6
mov ecx, dword [esp + 0xb4]
jmp 0x4e4e6c
cmp ecx, 0xe47f76c1
jne 0x4e4dc5
mov ecx, dword [esp + 0xb4]
lea edx, [0x7438a0]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004e3c20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x4e4dbb
mov dword [edi], eax
jmp 0x4e54c6
call fcn.004643b0
jmp 0x4e54c6
cmp ecx, 0xf3b50de0
jne 0x4e4e16
mov ecx, dword [esp + 0xb4]
lea edx, [0x744360]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004e2be0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4e54c6
cmp ecx, 0xfcd60fce
jne 0x4e4e5c
mov ecx, dword [esp + 0xb4]
lea edx, [0x73a220]
cmp ecx, edx
jne 0x4e4e6c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004e1d10
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4e54c6
mov ecx, dword [esp + 0xb4]
jmp 0x4e4e6c
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x4e4ef5
nop
movzx ebx, byte [0xa851a8]
test bl, bl
je 0x4e4eb6
mov dword [0xa851ac], ecx
mov ecx, dword [0xaab020]
test ecx, ecx
jne 0x4e4ea2
mov eax, dword [esp + 0xb8]
mov dword [0xa851b0], eax
jmp 0x4e4ebd
lea edi, [0xa851b0]
mov eax, dword [esp + 0xb8]
call fcn.004643b0
jmp 0x4e4ebd
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x4e4eed
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e4efb
or edx, 0x80
jmp 0x4e4efb
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4e4efb
xor edx, edx
xor ecx, ecx
xor eax, eax
nop
mov ebx, edx
and edx, 0x1f
cmp edx, 0x16
jne 0x4e56d2
mov dword [esp + 0x58], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004c1d00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x90], edx
nop
mov ebx, ecx
and ecx, 0x1f
cmp ecx, 0xc
ja 0x4e50b5
cmp ecx, 1
je 0x4e506b
lea ebp, [ecx - 2]
cmp ebp, 4
ja 0x4e4fe3
test ebx, 0x200
jne 0x4e4f74
lea ecx, [0x8470c4]
jmp 0x4e4f92
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004e2610
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c3a60
jmp 0x4e54c6
cmp ecx, 7
jb 0x4e55d4
test ebx, 0x200
jne 0x4e4ffc
lea ecx, [0x8470c4]
jmp 0x4e501a
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004e2be0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c4040
jmp 0x4e54c6
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004e1d10
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.004c35d0
jmp 0x4e54c6
cmp ecx, 0x10
ja 0x4e522c
cmp ecx, 0xe
jbe 0x4e5142
test ebx, 0x200
jne 0x4e50d3
lea ecx, [0x8470c4]
jmp 0x4e50f1
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004e3a20
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c38d0
jmp 0x4e54c6
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e1770
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e1ca0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e3130
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x38]
test edx, 0x200
jne 0x4e519d
lea ebx, [0x8470c4]
mov ebp, dword [esp + 0x94]
jmp 0x4e51c7
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov ebp, ecx
mov eax, dword [ebx + 0x18]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004e3770
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004c39a0
jmp 0x4e54c6
cmp ecx, 0x17
je 0x4e528b
cmp ecx, 0x18
jne 0x4e55d4
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004e3c20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004c4140
jmp 0x4e54c6
test ebx, 0x200
jne 0x4e529b
lea ecx, [0x8470c4]
jmp 0x4e52b9
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x2c], ecx
mov edx, dword [ecx + 0x28]
mov dword [esp], eax
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4e54d6
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004e3c20
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004c4d00
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004c34c0
xor eax, eax
jmp 0x4e547a
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
lea ecx, [0x846084]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test edx, edx
jne 0x4e53aa
add esp, 0xa8
ret
mov ebp, dword [0xa84a9c]
cmp dword [0xa84a98], eax
je 0x4e540b
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], ebx
lea eax, [0x769880]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093b0
mov eax, dword [esp + 8]
lea ecx, [0x769880]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436340
mov dword [esp + 0x50], edx
mov dword [esp + 0x88], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00403870
movzx eax, byte [esp + 0xc]
test al, al
je 0x4e5440
mov edx, dword [0xa84ac0]
mov ebx, dword [0xa84ac4]
jmp 0x4e53b8
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x88]
jmp 0x4e53b8
mov ebp, dword [esp + 0x70]
movzx esi, byte [ebp + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
call fcn.004c4040
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jge 0x4e54c6
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004c23f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jb 0x4e5450
jmp 0x4e54cd
add esp, 0xa8
ret
mov eax, ebx
mov ecx, ebp
call fcn.00464430
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4e55af
lea eax, [0x8470c4]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7bd858]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ec00
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], ecx
lea edx, [0x769820]
mov dword [esp], edx
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov eax, dword [0xaab020]
test eax, eax
jne 0x4e55a4
mov eax, dword [esp + 0x78]
mov dword [edi], eax
lea eax, [0x844124]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x769880]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093b0
mov eax, dword [esp + 8]
lea ecx, [0x769880]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436340
mov eax, dword [esp + 0x78]
call fcn.004643b0
jmp 0x4e5561
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4e54ef
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4e56ad
lea eax, [0x8470c4]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7bd858]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ec00
mov eax, dword [esp + 0x14]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
lea edx, [0x769820]
mov dword [esp], edx
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x3c]
mov dword [edi + 4], eax
mov eax, dword [0xaab020]
test eax, eax
jne 0x4e56a2
mov eax, dword [esp + 0x74]
mov dword [edi], eax
lea eax, [0x844124]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x769880]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093b0
mov eax, dword [esp + 8]
lea ecx, [0x769880]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436340
mov eax, dword [esp + 0x74]
call fcn.004643b0
jmp 0x4e565f
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4e55ed
test ebx, ebx
je 0x4e57ac
test ebx, 0x200
jne 0x4e57ac
lea eax, [0x8470c4]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x7c0667]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ec00
mov eax, dword [esp + 0x14]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
lea edx, [0x769820]
mov dword [esp], edx
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0xaab020]
test eax, eax
jne 0x4e57a1
mov eax, dword [esp + 0x7c]
mov dword [edi], eax
lea eax, [0x844124]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x769880]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093b0
mov eax, dword [esp + 8]
lea ecx, [0x769880]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436340
mov eax, dword [esp + 0x7c]
call fcn.004643b0
jmp 0x4e575e
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004c45b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4e56ec
cmp ecx, 8
jge 0x4e586e
lea edx, [0x7b78ff]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4e57e7
inc ecx
jmp 0x4e5810
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045d270
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x7b78ff]
cmp eax, ebx
jne 0x4e57c9
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e1770
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e1ca0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e3130
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40
call fcn.004e3770
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
jmp 0x4e54c6
lea ecx, [esp + 0x5c]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f3f0
mov dword [esp], 0
lea eax, [0x7b933b]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x7b66f5]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x7b72b8]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044ed40
mov eax, dword [esp + 0x24]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ecx
lea edx, [0x769820]
mov dword [esp], edx
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x48]
mov dword [edi + 4], eax
mov eax, dword [0xaab020]
test eax, eax
jne 0x4e594b
mov eax, dword [esp + 0x80]
mov dword [edi], eax
lea eax, [0x844124]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x769880]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093b0
mov eax, dword [esp + 8]
lea ecx, [0x769880]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436340
mov eax, dword [esp + 0x80]
call fcn.004643b0
jmp 0x4e5908
cmp ecx, 8
jge 0x4e5a02
lea edx, [0x7b78ff]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4e5977
inc ecx
jmp 0x4e59a0
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045d270
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x7b78ff]
cmp eax, ebx
jne 0x4e5959
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e1770
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e1ca0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004e3130
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x20
call fcn.004e3770
movsd xmm0, qword [esp + 0x10]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
jmp 0x4e54c6
lea ecx, [esp + 0x60]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f3f0
mov dword [esp], 0
lea eax, [0x7b933b]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x7b66f5]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x7b72b1]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044ed40
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
lea edx, [0x769820]
mov dword [esp], edx
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x4c]
mov dword [edi + 4], eax
mov eax, dword [0xaab020]
test eax, eax
jne 0x4e5adf
mov eax, dword [esp + 0x84]
mov dword [edi], eax
lea eax, [0x844124]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x769880]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093b0
mov eax, dword [esp + 8]
lea ecx, [0x769880]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436340
mov eax, dword [esp + 0x84]
call fcn.004643b0
jmp 0x4e5a9c
call fcn.00462fa0
jmp fcn.004e4760