Function at 0x4e6820
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x47c]
cmp eax, dword [ecx + 8]
jbe 0x4e7b4c
sub esp, 0x4fc
lea edi, [esp + 0x3d0]
xor eax, eax
call fcn.0046462e
mov ecx, dword [esp + 0x500]
mov dword [esp + 0x408], ecx
mov edx, dword [esp + 0x504]
mov dword [esp + 0x40c], edx
lea edi, [esp + 0x120]
call fcn.00464639
lea edi, [esp + 0x4a8]
call fcn.0046462b
lea ecx, [esp + 0x4a8]
mov dword [esp + 0x12c], ecx
call fcn.0044fce0
mov ecx, dword [esp]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea edi, [esp + 0x10c]
xor eax, eax
call fcn.0046463b
mov ecx, 1
lea edx, [esp + 0x3d0]
mov ebx, 1
xor ebp, ebp
lea esi, [esp + 0x3c]
xor edi, edi
jmp 0x4e6909
xor eax, eax
mov ecx, esi
mov edx, edi
mov ebx, ebp
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xb4]
test ecx, ecx
je 0x4e695d
mov dword [esp + 0x7c], ebp
mov dword [esp + 0xcc], esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x78], ecx
mov dword [esp + 0xec], edx
mov dword [esp + 0xd0], edi
call fcn.0040c7e0
mov eax, dword [esp]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0xec]
mov edx, ecx
xor ebx, ebx
mov ebp, dword [esp + 0x7c]
xor esi, esi
mov edi, dword [esp + 0xcc]
jmp 0x4e7035
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x108]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
lea ecx, [0x4e7b60]
mov dword [esp + 0xf8], ecx
lea ecx, [esp + 0x100]
mov dword [esp + 0xfc], ecx
lea ecx, [0x67e2a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00492740
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x108]
xor edx, edx
xor ebx, ebx
jmp 0x4e69f0
mov eax, ebp
mov esi, ecx
mov ecx, ebx
mov ebx, esi
mov ebp, dword [esp + 0x104]
mov esi, ebx
mov ebx, dword [esp + 0x100]
cmp edx, ebp
jge 0x4e6cfb
jae 0x4e6ff9
mov dword [esp + 0x4c], ecx
mov dword [esp + 0xac], eax
mov dword [esp + 0x70], edx
mov dword [esp + 0xa0], esi
lea ebp, [edx + edx*8]
mov dword [esp + 0x9c], ebp
lea ebx, [ebx + ebp*8]
lea edi, [esp + 0x2f8]
mov esi, ebx
call fcn.00464a9c
mov ecx, dword [esp + 0x2f8]
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0x2fc]
mov dword [esp + 0x5c], ebx
mov esi, 1
jmp 0x4e6f2d
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0x9c]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x9c]
cmp esi, 1
jne 0x4e6b4b
mov ecx, dword [esp + 0xa0]
inc ecx
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jae 0x4e6ad9
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6af640]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x98]
mov ebx, edx
mov dword [esp + 0x48], ecx
mov edx, ebp
lea ebp, [ecx + ecx*8]
lea edi, [eax + ebp*8 - 0x48]
mov ebp, dword [0x8d9190]
test ebp, ebp
jne 0x4e6afe
lea esi, [esp + 0x2f8]
call fcn.00464a9c
jmp 0x4e6b3e
mov dword [esp + 0xe4], eax
mov dword [esp + 0x90], ebx
lea eax, [0x6af640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2f8]
mov dword [esp + 8], eax
call fcn.00411360
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x90]
mov ecx, dword [esp + 0x48]
mov ebp, eax
xor eax, eax
jmp 0x4e69e8
mov ebx, dword [esp + 0x108]
mov ecx, ebx
mov ebx, dword [esp + 0x100]
cmp ecx, ebp
jb 0x4e6fe7
cmp edx, ebp
ja 0x4e6fde
mov dword [esp + 0x94], ecx
lea edi, [esp + 0x1d8]
xor eax, eax
call fcn.0046462e
mov ecx, dword [esp + 0x9c]
shl ecx, 3
mov edi, ebp
mov ebp, dword [esp + 0x94]
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ecx, ebp
lea ebp, [ebx + ecx]
cmp esi, 1
jle 0x4e6bd3
mov edx, ebx
mov ebx, dword [ebx + ecx + 0x78]
cmp dword [ebp + 0x30], ebx
jne 0x4e6bd3
mov dword [esp + 0xc8], ebp
movzx ebx, byte [edx + ecx + 0x28]
lea ebp, [edx + ecx + 0x70]
cmp byte [ebp], bl
jne 0x4e6bcc
xor ecx, ecx
jmp 0x4e6bf5
mov ebp, dword [esp + 0xc8]
test esi, esi
jbe 0x4e6fd5
mov esi, ebp
lea edi, [esp + 0x1d8]
call fcn.00464a9c
mov edi, dword [esp + 0x98]
mov ecx, 1
mov byte [esp + 0x3d], cl
lea esi, [esp + 0x1d8]
mov edx, edi
lea edi, [esp + 0x388]
call fcn.00464a9c
movzx ecx, byte [esp + 0x3d]
test cl, cl
je 0x4e6ce4
mov ecx, dword [esp + 0xa0]
inc ecx
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jb 0x4e6c34
mov ebp, dword [esp + 0xac]
jmp 0x4e6c76
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6af640]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebp, eax
mov ebx, edx
xor eax, eax
mov edx, dword [esp + 0x98]
mov dword [esp + 0x48], ecx
lea ecx, [ecx + ecx*8]
lea edi, [ebp + ecx*8 - 0x48]
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4e6c99
lea esi, [esp + 0x388]
call fcn.00464a9c
jmp 0x4e6cdb
mov dword [esp + 0xe0], ebp
mov dword [esp + 0x8c], ebx
lea eax, [0x6af640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x388]
mov dword [esp + 8], eax
call fcn.00411360
xor eax, eax
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0xe0]
mov ecx, dword [esp + 0x48]
jmp 0x4e69e8
mov ebx, dword [esp + 0x4c]
mov ecx, dword [esp + 0xa0]
mov ebp, dword [esp + 0xac]
jmp 0x4e69e8
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], esi
mov dword [esp + 0x108], ecx
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x728430]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00492890
mov eax, dword [esp + 0x104]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x500]
mov edx, dword [esp + 0x504]
xor ebx, ebx
jmp 0x4e6d72
mov ebp, dword [esp + 0x6c]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x500]
mov edx, dword [esp + 0x504]
cmp ebx, eax
jge 0x4e6e14
mov ebp, dword [esp + 0x100]
mov esi, dword [esp + 0x104]
cmp ebx, esi
jae 0x4e6efd
mov dword [esp + 0x6c], ebx
mov dword [esp + 0xec], ebp
lea eax, [ebx + ebx*8]
mov dword [esp + 0x9c], eax
lea esi, [ebp + eax*8]
lea edi, [ebp + eax*8 + 0x2c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x30]
mov esi, dword [esi + 0x34]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.004e5aa0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e1a50
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xec]
lea edi, [ecx + eax*8 + 0x44]
mov eax, dword [0x8d9190]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4e6e08
mov dword [edi], ecx
jmp 0x4e6d56
mov eax, ecx
call fcn.004643a0
jmp 0x4e6d56
mov eax, dword [esp + 0x104]
lea ecx, [0x6891a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040c860
mov eax, dword [esp + 0xc]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x104]
mov dword [esp + 0xa0], edx
xor ebx, ebx
jmp 0x4e6ec1
mov dword [esp + 0x68], ebx
mov dword [esp + 0xe8], ecx
lea edi, [esp + 0x268]
mov esi, ecx
call fcn.00464a9c
mov ecx, dword [esp + 0x268]
mov edx, dword [esp + 0x26c]
lea ebx, [0x6891a0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004108e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x68]
mov dword [eax], ecx
mov eax, dword [esp + 0xe8]
add eax, 0x48
lea ebx, [ecx + 1]
mov edx, dword [esp + 0xa0]
mov ecx, eax
mov eax, dword [esp + 0xbc]
cmp ebx, edx
jl 0x4e6e59
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x104]
mov ebx, dword [esp + 0x108]
mov dword [esp + 0x508], ecx
mov dword [esp + 0x50c], edx
mov dword [esp + 0x510], ebx
mov dword [esp + 0x514], eax
add esp, 0x4fc
ret
mov eax, ebx
mov ecx, esi
call fcn.00464420
mov eax, dword [esp + 0x80]
lea esi, [eax + 1]
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x5c]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0xac]
mov ebp, dword [esp + 0x9c]
mov edi, ebp
lea ebp, [esi + edx]
mov dword [esp + 0x98], ebp
mov ebx, dword [esp + 0x104]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x100]
mov dword [esp + 0xec], ebx
mov ebx, dword [esp + 0x94]
cmp ebx, ebp
jle 0x4e6a89
jbe 0x4e6ff0
mov dword [esp + 0x80], esi
lea ebx, [ebp + ebp*8]
mov ebp, dword [esp + 0xec]
lea ebx, [ebp + ebx*8]
mov ebp, edi
lea edi, [esp + 0x220]
mov esi, ebx
call fcn.00464a9c
mov ecx, dword [esp + 0x224]
mov ebx, dword [esp + 0x220]
mov esi, ebp
mov ebp, dword [esp + 0x5c]
cmp ecx, ebp
jne 0x4e6a74
mov dword [esp], ebx
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402ab0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4e6f06
jmp 0x4e6a62
xor eax, eax
mov ecx, eax
call fcn.00464420
mov eax, edx
mov ecx, ebp
call fcn.00464480
mov edx, ecx
mov ecx, ebp
call fcn.00464460
mov eax, ebp
mov ecx, ebx
call fcn.00464420
mov eax, edx
mov ecx, ebp
call fcn.00464420
mov ebx, dword [esp + 0xe8]
add ebx, 0x48
mov ebp, dword [esp + 0x9c]
inc ebp
mov esi, eax
mov edi, edx
mov eax, dword [esp + 0xb4]
mov edx, dword [esp + 0xec]
mov eax, ebx
mov ebx, ebp
mov ebp, ecx
mov ecx, eax
mov eax, dword [esp + 0xb4]
mov eax, dword [esp + 0x78]
cmp ebx, eax
jge 0x4e68ec
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], esi
mov dword [esp + 0xb8], edi
mov dword [esp + 0xe8], ecx
lea edi, [esp + 0x340]
mov esi, ecx
call fcn.00464a9c
lea eax, [0x688ce0]
mov dword [esp], eax
lea ecx, [esp + 0x120]
mov dword [esp + 4], ecx
lea edx, [esp + 0x378]
mov dword [esp + 8], edx
call fcn.0040cbb0
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4e70af
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0xb8]
jmp 0x4e7002
lea eax, [0x688ce0]
mov dword [esp], eax
lea ecx, [esp + 0x120]
mov dword [esp + 4], ecx
lea edx, [esp + 0x378]
mov dword [esp + 8], edx
call fcn.0040d100
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x54]
jmp 0x4e7112
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0xdc]
jmp 0x4e7002
mov ebp, dword [esp + 0x74]
inc ebp
mov ebx, ecx
mov ecx, eax
mov eax, ebp
mov dword [esp + 0x74], eax
mov dword [esp + 0x98], ecx
mov dword [esp + 0x94], ebx
mov dword [esp + 0xdc], edx
mov ebp, dword [esp + 0x378]
mov esi, dword [esp + 0x37c]
mov ebp, dword [ebp + 0x64]
mov dword [esp], esi
call ebp
mov eax, dword [esp + 0x74]
cmp dword [esp + 4], eax
jle 0x4e70ed
mov ecx, dword [esp + 0x378]
mov edx, dword [esp + 0x37c]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x13c]
lea esi, [esp + 8]
call fcn.00464ace
movzx eax, byte [esp + 0x16c]
test al, al
jne 0x4e71bd
lea edi, [esp + 0x170]
lea esi, [esp + 0x13c]
call fcn.00464ace
mov eax, dword [esp + 0x17c]
test eax, eax
je 0x4e726b
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xdc]
jmp 0x4e7107
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xa8], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x16
je 0x4e71f2
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xa8]
jmp 0x4e720d
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa8], ecx
lea edi, [esp + 0x1a4]
lea esi, [esp + 0x13c]
call fcn.00464ace
mov ecx, dword [esp + 0x1b0]
test ecx, ecx
jne 0x4e7236
xor eax, eax
jmp 0x4e724d
mov eax, dword [eax + 0x50]
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
test al, al
je 0x4e726b
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xdc]
jmp 0x4e7107
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x158]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x6bfbce]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.00486940
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
cmp ecx, 1
jne 0x4e72c3
cmp byte [eax], 0x2d
jne 0x4e72c3
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xdc]
jmp 0x4e7107
nop
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x6bf716]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004d77e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xb0], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x50], ebx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004e5960
movzx eax, byte [esp + 8]
test al, al
je 0x4e732a
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa4]
jmp 0x4e732e
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x370]
lea ebx, [0x6869e0]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x64], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0044aea0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x36c]
mov edx, dword [esp + 0x370]
mov ebx, dword [esp + 0x64]
cmp edx, ebx
jl 0x4e7377
mov edx, ebx
mov dword [esp + 0xd8], eax
cmp ecx, eax
je 0x4e73a0
mov dword [esp], eax
mov dword [esp + 4], ecx
shl edx, 2
mov dword [esp + 8], edx
call fcn.00464d30
mov eax, dword [esp + 0xd8]
mov ebx, dword [esp + 0x64]
mov edx, dword [esp + 0x370]
cmp edx, ebx
jae 0x4e7b42
mov ecx, dword [esp + 0x74]
mov dword [eax + edx*4], ecx
mov edx, dword [esp + 0x14c]
mov ebx, dword [esp + 0x150]
mov dword [esp + 0xf0], edx
mov dword [esp + 0xf4], ebx
mov edx, dword [edx + 0x60]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 8]
test eax, eax
jne 0x4e742b
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x16
jne 0x4e742b
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
lea edx, [0x6c014c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
call fcn.004ec370
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4e7461
xor eax, eax
jmp 0x4e7491
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
lea ecx, [eax - 1]
cmp ecx, 0xd
jbe 0x4e7488
cmp eax, 0x18
jne 0x4e748f
mov eax, 1
jmp 0x4e7491
xor eax, eax
mov byte [esp + 0x3e], al
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x4e74a4
mov edx, 1
jmp 0x4e74e0
movzx edx, byte [esp + 0x16c]
test dl, dl
jne 0x4e74b7
mov edx, 1
jmp 0x4e74e0
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
mov ecx, dword [esp + 0x60]
mov edx, eax
movzx eax, byte [esp + 0x3e]
test dl, dl
je 0x4e7623
test ecx, ecx
jne 0x4e74fc
mov edx, dword [esp + 0x13c]
mov ebx, dword [esp + 0x140]
jmp 0x4e7505
mov ebx, ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x88], ebx
mov dword [esp + 0xc4], edx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
lea eax, [0x6c0d36]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 9
call fcn.004ec370
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0x60]
test ecx, ecx
setne cl
mov byte [esp + 0x3f], cl
lea edi, [esp + 0x2b0]
mov edx, eax
xor eax, eax
call fcn.0046462e
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x2b0], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x2b4], ecx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x2d8], cl
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0x2dc], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x2e0], ecx
mov dword [esp + 0x2e4], ecx
mov ecx, dword [esp + 0xf0]
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0x2e8], ecx
mov dword [esp + 0x2ec], ebx
mov byte [esp + 0x2f0], dl
movzx ecx, byte [esp + 0x3e]
mov byte [esp + 0x2f1], cl
mov ecx, dword [esp + 0x2b0]
mov edx, dword [esp + 0x2b4]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044edf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2b8], eax
mov dword [esp + 0x2bc], ecx
mov dword [esp + 0x2c0], edx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x4e77de
lea eax, [0x688d20]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
lea edx, [esp + 0xf0]
mov dword [esp + 8], edx
call fcn.0040d100
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x688d20]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
lea edx, [esp + 0xf0]
mov dword [esp + 8], edx
call fcn.0040cbb0
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x4e7694
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xdc]
jmp 0x4e7107
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [eax + 0x60]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x88], ecx
lea edi, [esp + 0x418]
mov edx, eax
xor eax, eax
call fcn.0046462e
mov dword [esp + 0x418], edx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x41c], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0x444], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x448], ecx
mov dword [esp + 0x44c], ecx
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x450], edx
mov dword [esp + 0x454], ecx
mov ecx, dword [esp + 0x94]
inc ecx
mov edx, dword [esp + 0x98]
cmp edx, ecx
jb 0x4e773d
mov edx, dword [esp + 0xdc]
mov eax, dword [esp + 0x98]
jmp 0x4e7772
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x6af640]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x98], ecx
lea ebx, [ecx + ecx*8]
lea edi, [edx + ebx*8 - 0x48]
mov ebx, dword [0x8d9190]
test ebx, ebx
jne 0x4e7798
lea esi, [esp + 0x418]
call fcn.00464a9c
jmp 0x4e77d1
mov dword [esp + 0xd4], edx
mov dword [esp + 0x84], eax
lea eax, [0x6af640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x418]
mov dword [esp + 8], eax
call fcn.00411360
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0x98]
jmp 0x4e7107
inc edx
cmp edx, ecx
jge 0x4e781e
movzx esi, byte [eax + edx]
xchg esi, eax
cmp al, 0x80
xchg esi, eax
jae 0x4e7816
and esi, 0xffffffdf
lea edi, [esi - 0x41]
xchg edi, eax
cmp al, 0x19
xchg edi, eax
jbe 0x4e7801
mov ebp, 1
jmp 0x4e77dd
xchg esi, eax
cmp al, 0x4b
xchg esi, eax
je 0x4e780f
xchg esi, eax
cmp al, 0x53
xchg esi, eax
jne 0x4e77dd
mov ebx, 1
jmp 0x4e77dd
lea eax, [0x6dac88]
jmp 0x4e783e
test bl, bl
je 0x4e782a
lea eax, [0x6dad9c]
jmp 0x4e783e
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4e7838
lea eax, [0x6dad90]
jmp 0x4e783e
lea eax, [0x6dadbc]
mov dword [esp + 0x2c4], eax
nop
mov dword [esp + 0x110], 0
mov dword [esp + 0x118], 0
mov byte [esp + 0x11c], 0
lea eax, [esp + 0x10c]
mov dword [esp], eax
lea ecx, [0x7253f8]
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
call fcn.004d7eb0
mov eax, dword [esp + 0x2b8]
mov ecx, dword [esp + 0x2bc]
mov edx, dword [esp + 0x2c0]
lea ebx, [esp + 0x10c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004e10d0
lea eax, [esp + 0x10c]
mov dword [esp], eax
lea ecx, [0x6bf7ba]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004d7eb0
mov ecx, dword [esp + 0x110]
mov eax, dword [esp + 0x10c]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
cmp ebx, ecx
ja 0x4e7b3b
mov dword [esp], 0
sub edx, ebx
neg edx
sar edx, 0x1f
and edx, ebx
add eax, edx
mov dword [esp + 4], eax
sub ecx, ebx
mov dword [esp + 8], ecx
call fcn.0044ec30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2d0], eax
mov dword [esp + 0x2d4], ecx
mov eax, dword [esp + 0x2b0]
mov ecx, dword [esp + 0x2b4]
mov dword [esp], 0
lea edx, [0x7253f8]
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x6bf7ba]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.0044ea20
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x2c8], eax
mov dword [esp + 0x2cc], ecx
mov eax, dword [esp + 0x104]
inc eax
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x108]
cmp edx, eax
jae 0x4e79e3
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x6af640]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x108], edx
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
lea eax, [eax + eax*8]
lea edi, [ecx + eax*8 - 0x48]
mov eax, dword [0x8d9190]
test eax, eax
jne 0x4e7a09
lea esi, [esp + 0x2b0]
call fcn.00464a9c
jmp 0x4e7a26
lea eax, [0x6af640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2b0]
mov dword [esp + 8], eax
call fcn.00411360
lea eax, [0x688d20]
mov dword [esp], eax
mov ecx, dword [esp + 0xd0]
mov dword [esp + 4], ecx
lea edx, [esp + 0x378]
mov dword [esp + 8], edx
call fcn.0040cbb0
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x4e7b1c
mov edx, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4e7b36
lea eax, [ecx + ecx*8]
lea esi, [edx + eax*8 - 0x48]
lea edi, [esp + 0x460]
call fcn.00464a9c
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x104]
inc edx
cmp ecx, edx
jae 0x4e7ad9
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6af640]
mov dword [esp + 0x10], eax
call fcn.0044af60
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x108], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], edx
lea ecx, [edx + edx*8]
lea edi, [eax + ecx*8 - 0x48]
mov eax, dword [0x8d9190]
test eax, eax
jne 0x4e7aff
lea esi, [esp + 0x460]
call fcn.00464a9c
jmp 0x4e7b1c
lea eax, [0x6af640]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x460]
mov dword [esp + 8], eax
call fcn.00411360
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xdc]
jmp 0x4e7107
call fcn.00464420
mov eax, ebx
call fcn.00464480
mov eax, edx
mov ecx, ebx
call fcn.00464420
nop
call fcn.00462f90
jmp fcn.004e6820