Function at 0x4d6900
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x4d7c8d
sub esp, 0xa8
mov eax, dword [esp + 0xac]
mov dword [eax + 0xc], 0
lea ecx, [0x6811e0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.00409500
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x4d7507
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x4d7005
mov ecx, dword [ecx + 8]
cmp ecx, 0x6e78e923
ja 0x4d6cc2
cmp ecx, 0x43cfbb1f
ja 0x4d6b0c
cmp ecx, 0x338a7ec0
jbe 0x4d6a57
cmp ecx, 0x4072c7d5
jne 0x4d69c4
mov ecx, dword [esp + 0xb4]
lea edx, [0x665a60]
cmp ecx, edx
jne 0x4d700c
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4d7af9
cmp ecx, 0x43cfbb1f
jne 0x4d6a4b
mov ecx, dword [esp + 0xb4]
lea edx, [0x6644a0]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d6060
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044f3d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x112f780]
test ecx, ecx
jne 0x4d6a41
mov dword [edi], eax
jmp 0x4d7666
call fcn.00462e70
jmp 0x4d7666
mov ecx, dword [esp + 0xb4]
jmp 0x4d700c
cmp ecx, 0x2e74d42b
jne 0x4d6aaf
mov ecx, dword [esp + 0xb4]
lea edx, [0x668620]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004d4a70
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4d7666
cmp ecx, 0x338a7ec0
jne 0x4d6b00
mov ecx, dword [esp + 0xb4]
lea edx, [0x66b2e0]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d5040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d7666
mov ecx, dword [esp + 0xb4]
jmp 0x4d700c
cmp ecx, 0x510ad14d
jbe 0x4d6bf6
cmp ecx, 0x62de383d
je 0x4d6bad
cmp ecx, 0x6d448d5d
jne 0x4d6b50
mov ecx, dword [esp + 0xb4]
lea edx, [0x665aa0]
cmp ecx, edx
jne 0x4d700c
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4d7969
cmp ecx, 0x6e78e923
jne 0x4d6ba1
mov ecx, dword [esp + 0xb4]
lea edx, [0x66b260]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d5040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d7666
mov ecx, dword [esp + 0xb4]
jmp 0x4d700c
mov ecx, dword [esp + 0xb4]
lea edx, [0x6685e0]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d4a70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d7666
cmp ecx, 0x49163278
jne 0x4d6c4e
mov ecx, dword [esp + 0xb4]
lea edx, [0x66b320]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004d5040
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4d7666
cmp ecx, 0x510ad14d
jne 0x4d6cb6
mov ecx, dword [esp + 0xb4]
lea edx, [0x6645a0]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004d5e60
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
cvtsd2ss xmm0, xmm1
movss dword [eax + 4], xmm0
jmp 0x4d7666
mov ecx, dword [esp + 0xb4]
jmp 0x4d700c
cmp ecx, 0xba585d67
ja 0x4d6e46
cmp ecx, 0x889ce7f8
ja 0x4d6d98
cmp ecx, 0x7afcd172
jne 0x4d6d3a
mov ecx, dword [esp + 0xb4]
lea edx, [0x664560]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004d5e60
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
jmp 0x4d7666
cmp ecx, 0x889ce7f8
jne 0x4d6d8c
mov ecx, dword [esp + 0xb4]
lea edx, [0x66b2a0]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004d5040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4d7666
mov ecx, dword [esp + 0xb4]
jmp 0x4d700c
cmp ecx, 0x8f96facd
jne 0x4d6de9
mov ecx, dword [esp + 0xb4]
lea edx, [0x66b3a0]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d5040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d7666
cmp ecx, 0xba585d67
jne 0x4d6e3a
mov ecx, dword [esp + 0xb4]
lea edx, [0x668560]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d4a70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d7666
mov ecx, dword [esp + 0xb4]
jmp 0x4d700c
cmp ecx, 0xd6631a7c
ja 0x4d6f01
cmp ecx, 0xc3230e0b
jne 0x4d6ea4
mov ecx, dword [esp + 0xb4]
lea edx, [0x6685a0]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004d4a70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4d7666
cmp ecx, 0xd6631a7c
jne 0x4d6ef5
mov ecx, dword [esp + 0xb4]
lea edx, [0x668660]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004d4a70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4d7666
mov ecx, dword [esp + 0xb4]
jmp 0x4d700c
cmp ecx, 0xe47f76c1
jne 0x4d6f65
mov ecx, dword [esp + 0xb4]
lea edx, [0x66aa60]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d6060
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov ecx, dword [0x112f780]
test ecx, ecx
jne 0x4d6f5b
mov dword [edi], eax
jmp 0x4d7666
call fcn.00462e70
jmp 0x4d7666
cmp ecx, 0xf3b50de0
jne 0x4d6fb6
mov ecx, dword [esp + 0xb4]
lea edx, [0x66b360]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004d5040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4d7666
cmp ecx, 0xfcd60fce
jne 0x4d6ffc
mov ecx, dword [esp + 0xb4]
lea edx, [0x6644e0]
cmp ecx, edx
jne 0x4d700c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d4180
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4d7666
mov ecx, dword [esp + 0xb4]
jmp 0x4d700c
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x4d7095
nop
movzx ebx, byte [0x1108d90]
test bl, bl
je 0x4d7056
mov dword [0x1108d94], ecx
mov ecx, dword [0x112f780]
test ecx, ecx
jne 0x4d7042
mov eax, dword [esp + 0xb8]
mov dword [0x1108d98], eax
jmp 0x4d705d
lea edi, [0x1108d98]
mov eax, dword [esp + 0xb8]
call fcn.00462e70
jmp 0x4d705d
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x4d708d
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4d709b
or edx, 0x80
jmp 0x4d709b
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4d709b
xor edx, edx
xor ecx, ecx
xor eax, eax
nop
mov ebx, edx
and edx, 0x1f
cmp edx, 0x16
jne 0x4d7872
mov dword [esp + 0x58], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004bae30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x90], edx
nop
mov ebx, ecx
and ecx, 0x1f
cmp ecx, 0xc
ja 0x4d7255
cmp ecx, 1
je 0x4d720b
lea ebp, [ecx - 2]
cmp ebp, 4
ja 0x4d7183
test ebx, 0x200
jne 0x4d7114
lea ecx, [0x72be58]
jmp 0x4d7132
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d4a70
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004bcba0
jmp 0x4d7666
cmp ecx, 7
jb 0x4d7774
test ebx, 0x200
jne 0x4d719c
lea ecx, [0x72be58]
jmp 0x4d71ba
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d5040
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004bcc90
jmp 0x4d7666
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d4180
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.004bc710
jmp 0x4d7666
cmp ecx, 0x10
ja 0x4d73cc
cmp ecx, 0xe
jbe 0x4d72e2
test ebx, 0x200
jne 0x4d7273
lea ecx, [0x72be58]
jmp 0x4d7291
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d5e60
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004bca10
jmp 0x4d7666
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d3d00
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d4110
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d5590
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x38]
test edx, 0x200
jne 0x4d733d
lea ebx, [0x72be58]
mov ebp, dword [esp + 0x94]
jmp 0x4d7367
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov ebp, ecx
mov eax, dword [ebx + 0x18]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004d5bb0
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004bcae0
jmp 0x4d7666
cmp ecx, 0x17
je 0x4d742b
cmp ecx, 0x18
jne 0x4d7774
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d6060
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004bcd90
jmp 0x4d7666
test ebx, 0x200
jne 0x4d743b
lea ecx, [0x72be58]
jmp 0x4d7459
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x2c], ecx
mov edx, dword [ecx + 0x28]
mov dword [esp], eax
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4d7676
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d6060
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bdaf0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004bc600
xor eax, eax
jmp 0x4d761a
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
lea ecx, [0x72b608]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test edx, edx
jne 0x4d754a
add esp, 0xa8
ret
mov ebp, dword [0x11086e4]
cmp dword [0x11086e0], eax
je 0x4d75ab
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], ebx
lea eax, [0x682940]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x682940]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
mov dword [esp + 0x50], edx
mov dword [esp + 0x88], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00403790
movzx eax, byte [esp + 0xc]
test al, al
je 0x4d75e0
mov edx, dword [0x1108708]
mov ebx, dword [0x110870c]
jmp 0x4d7558
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x88]
jmp 0x4d7558
mov ebp, dword [esp + 0x70]
movzx esi, byte [ebp + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
call fcn.004bcc90
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jge 0x4d7666
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004bb530
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jb 0x4d75f0
jmp 0x4d766d
add esp, 0xa8
ret
mov eax, ebx
mov ecx, ebp
call fcn.00462ef0
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4d774f
lea eax, [0x72be58]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6b8296]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044efc0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], ecx
lea edx, [0x6828e0]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov eax, dword [0x112f780]
test eax, eax
jne 0x4d7744
mov eax, dword [esp + 0x78]
mov dword [edi], eax
lea eax, [0x72a21c]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x682940]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x682940]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
mov eax, dword [esp + 0x78]
call fcn.00462e70
jmp 0x4d7701
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4d768f
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4d784d
lea eax, [0x72be58]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6b8296]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044efc0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
lea edx, [0x6828e0]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x3c]
mov dword [edi + 4], eax
mov eax, dword [0x112f780]
test eax, eax
jne 0x4d7842
mov eax, dword [esp + 0x74]
mov dword [edi], eax
lea eax, [0x72a21c]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x682940]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x682940]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
mov eax, dword [esp + 0x74]
call fcn.00462e70
jmp 0x4d77ff
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4d778d
test ebx, ebx
je 0x4d794c
test ebx, 0x200
jne 0x4d794c
lea eax, [0x72be58]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6ba799]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044efc0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
lea edx, [0x6828e0]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0x112f780]
test eax, eax
jne 0x4d7941
mov eax, dword [esp + 0x7c]
mov dword [edi], eax
lea eax, [0x72a21c]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x682940]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x682940]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
mov eax, dword [esp + 0x7c]
call fcn.00462e70
jmp 0x4d78fe
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4d788c
cmp ecx, 8
jge 0x4d7a0e
lea edx, [0x6b2df2]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4d7987
inc ecx
jmp 0x4d79b0
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045d380
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x6b2df2]
cmp eax, ebx
jne 0x4d7969
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d3d00
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d4110
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d5590
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40
call fcn.004d5bb0
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
jmp 0x4d7666
lea ecx, [esp + 0x5c]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f750
mov dword [esp], 0
lea eax, [0x6b4593]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x6b20a1]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6b2933]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044f100
mov eax, dword [esp + 0x24]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ecx
lea edx, [0x6828e0]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x48]
mov dword [edi + 4], eax
mov eax, dword [0x112f780]
test eax, eax
jne 0x4d7aeb
mov eax, dword [esp + 0x80]
mov dword [edi], eax
lea eax, [0x72a21c]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x682940]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x682940]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
mov eax, dword [esp + 0x80]
call fcn.00462e70
jmp 0x4d7aa8
cmp ecx, 8
jge 0x4d7ba2
lea edx, [0x6b2df2]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4d7b17
inc ecx
jmp 0x4d7b40
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045d380
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x6b2df2]
cmp eax, ebx
jne 0x4d7af9
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d3d00
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d4110
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d5590
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x20
call fcn.004d5bb0
movsd xmm0, qword [esp + 0x10]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
jmp 0x4d7666
lea ecx, [esp + 0x60]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f750
mov dword [esp], 0
lea eax, [0x6b4593]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x6b20a1]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6b292c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044f100
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
lea edx, [0x6828e0]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x4c]
mov dword [edi + 4], eax
mov eax, dword [0x112f780]
test eax, eax
jne 0x4d7c7f
mov eax, dword [esp + 0x84]
mov dword [edi], eax
lea eax, [0x72a21c]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x682940]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x682940]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
mov eax, dword [esp + 0x84]
call fcn.00462e70
jmp 0x4d7c3c
call fcn.00461a60
jmp fcn.004d6900