Function at 0x4ce130
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c
push ebx
mov ebx, dword [esp + 0x24]
push ebp
push esi
push edi
mov esi, dword [ebx + 8]
test esi, esi
jne 0x4ce15e
cmp dword [ebx + 0x74], esi
jne 0x4ce153
mov eax, dword [ebx]
test byte [eax + 0x50], 8
jne 0x4ce153
mov byte [ebx + 0x17], 1
push ebx
call fcn.0052ec00
add esp, 4
mov esi, eax
mov eax, dword [ebx + 0x28]
dec dword [ebx + 0x38]
dec eax
cmp dword [esp + 0x4c], 0
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x10], eax
jge 0x4ce18c
push eax
mov eax, dword [esp + 0x44]
movzx eax, byte [eax + 0x18]
push eax
push 0x30
push esi
call fcn.0052e180
add esp, 0x10
mov ecx, dword [esp + 0x40]
xor ebp, ebp
cmp dword [ecx + 0x14], ebp
jle 0x4ce25e
mov ebx, dword [esp + 0x10]
nop
mov edi, dword [ecx]
mov eax, dword [esp + 0x44]
test byte [edi + 0x1c], 0x20
movzx eax, word [eax + ebp*4]
je 0x4ce200
test ax, ax
js 0x4ce200
movsx ecx, ax
xor edx, edx
mov dword [esp + 0x20], 0
test ecx, ecx
jle 0x4ce1dc
mov eax, dword [edi + 4]
add eax, 0xe
mov dword [esp + 0x20], ecx
test byte [eax], 0x20
jne 0x4ce1d6
inc edx
add eax, 0x10
dec ecx
jne 0x4ce1d0
mov ecx, dword [esp + 0x20]
mov eax, dword [edi + 4]
add ecx, ecx
test byte [eax + ecx*8 + 0xe], 0x20
je 0x4ce1fd
mov ax, word [edi + 0x24]
sub ax, dx
add ax, word [esp + 0x20]
movzx eax, ax
jmp 0x4ce200
movzx eax, dx
mov edx, dword [esp + 0x48]
mov ecx, dword [esi + 0x74]
inc edx
cwde
add edx, eax
cmp dword [esi + 0x78], ecx
jg 0x4ce221
push 0
push ebx
push edx
push 0x32
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ce24c
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
inc ebp
cmp ebp, dword [ecx + 0x14]
jl 0x4ce1a0
mov ebx, dword [esp + 0x30]
cmp dword [esp + 0x50], 0
jne 0x4cea3b
mov ebp, dword [esp + 0x3c]
test ebp, ebp
jne 0x4ce4ec
mov al, byte [ebx + 0x13]
test al, al
jne 0x4ce284
inc dword [ebx + 0x2c]
mov edi, dword [ebx + 0x2c]
jmp 0x4ce293
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov edi, dword [ebx + eax*4 + 0x98]
mov eax, dword [esp + 0x44]
movzx eax, word [eax]
push eax
push dword [ecx]
call fcn.00529be0
mov edx, dword [esp + 0x50]
add esp, 8
mov ecx, dword [esi + 0x74]
inc edx
cwde
add edx, eax
cmp dword [esi + 0x78], ecx
jg 0x4ce2c6
push 0
push edi
push edx
push 0x50
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ce2f1
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x50
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ebp, dword [esi + 0x74]
cmp dword [esi + 0x78], ebp
jg 0x4ce30d
push 0
push 0
push edi
push 0xf
push esi
call fcn.004e2c80
add esp, 0x14
mov ebp, eax
jmp 0x4ce342
lea eax, [ebp + 1]
mov dword [esi + 0x74], eax
lea ecx, [ebp*4]
mov eax, dword [esi + 0x70]
add ecx, ebp
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
cmp edx, dword [eax]
jne 0x4ce3c5
cmp dword [esp + 0x4c], 1
jne 0x4ce3c5
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4ce377
push edi
push dword [esp + 0x14]
push dword [esp + 0x50]
push 0x35
push esi
call fcn.004e2c80
mov edx, dword [esp + 0x4c]
add esp, 0x14
jmp 0x4ce3aa
mov ebx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x35
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4ce3c5
lea ecx, [eax + eax*4]
mov edx, 0x90
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esp + 0x38]
push 0x65
push edx
push dword [esp + 0x3c]
push dword [esp + 0x20]
push ebx
call fcn.0051c1b0
mov ecx, dword [esi + 0x74]
add esp, 0x14
cmp dword [esi + 0x78], ecx
jg 0x4ce3f5
push edi
push 0
push dword [esp + 0x1c]
push 0x21
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ce424
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x21
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4ce441
push 0
push dword [esp + 0x14]
push 0
push 0xb
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ce474
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x74]
lea ecx, [edx - 2]
test ecx, ecx
jns 0x4ce481
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4ce490
mov eax, 0x74c854
jmp 0x4ce499
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esi + 0x74]
test ebp, ebp
jns 0x4ce4a6
lea ebp, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4ce4b5
mov eax, 0x74c854
jmp 0x4ce4c4
mov eax, dword [esi + 0x70]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
test edi, edi
je 0x4cea3b
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4cea3b
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edi
inc byte [ebx + 0x13]
jmp 0x4cea3b
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x50], edx
cmp edx, 1
jne 0x4ce520
mov al, byte [ebx + 0x13]
test al, al
jne 0x4ce50b
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4ce54a
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov dword [esp + 0x18], eax
jmp 0x4ce54a
mov ecx, dword [ebx + 0x1c]
mov edi, dword [ebx + 0x20]
mov dword [esp + 0x18], edi
cmp edx, ecx
jg 0x4ce53b
lea eax, [edi + edx]
sub ecx, edx
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], ecx
jmp 0x4ce54a
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x18], ecx
mov dword [ebx + 0x2c], eax
mov al, byte [ebx + 0x13]
test al, al
jne 0x4ce559
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x4ce568
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
mov edx, dword [ebp + 0x2c]
mov dword [esp + 0x1c], eax
cmp dword [esi + 0x78], ecx
jg 0x4ce58d
push dword [esp + 0x34]
push edx
push dword [esp + 0x1c]
push 0x65
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ce5bd
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x65
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0x10], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x34]
mov dword [ecx + 0xc], eax
mov edi, dword [ebx + 8]
push ebp
push ebx
call fcn.00519ed0
mov edx, eax
add esp, 8
test edx, edx
je 0x4ce5f8
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4ce5e6
push edx
push 0xfffffffffffffff7
push eax
call fcn.004cfa50
add esp, 0xc
jmp 0x4ce5f8
mov eax, dword [edi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x70]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov ecx, dword [esp + 0x50]
xor ebp, ebp
mov dword [esp + 0x24], ebp
test ecx, ecx
jle 0x4ce6d9
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x20], eax
mov edi, dword [ebx]
mov eax, dword [esp + 0x44]
test byte [edi + 0x1c], 0x20
movzx eax, word [eax + ebp*4]
je 0x4ce670
test ax, ax
js 0x4ce670
movsx ecx, ax
xor ebp, ebp
xor edx, edx
test ecx, ecx
jle 0x4ce64c
mov eax, dword [edi + 4]
mov ebp, ecx
add eax, 0xe
mov edi, edi
test byte [eax], 0x20
jne 0x4ce646
inc edx
add eax, 0x10
dec ecx
jne 0x4ce640
mov eax, dword [edi + 4]
mov ecx, ebp
add ecx, ecx
test byte [eax + ecx*8 + 0xe], 0x20
je 0x4ce669
mov ax, word [edi + 0x24]
sub ax, dx
add ax, bp
movzx eax, ax
jmp 0x4ce66c
movzx eax, dx
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 0x48]
mov ecx, dword [esi + 0x74]
inc edx
mov edi, dword [esp + 0x20]
cwde
add edx, eax
cmp dword [esi + 0x78], ecx
jg 0x4ce695
push 0
push edi
push edx
push 0x4f
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ce6c0
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
inc dword [esp + 0x20]
inc ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x24], ebp
cmp ebp, ecx
jl 0x4ce616
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
cmp eax, dword [edx]
jne 0x4ce8ad
cmp dword [esp + 0x4c], 1
jne 0x4ce8ad
mov eax, dword [esi + 0x74]
inc eax
add eax, ecx
mov dword [esp + 0x20], eax
test ecx, ecx
jle 0x4ce85d
xor ebx, ebx
jmp 0x4ce710
mov edi, dword [edx]
mov eax, dword [esp + 0x44]
test byte [edi + 0x1c], 0x20
movzx eax, word [eax + ebx*4]
je 0x4ce764
test ax, ax
js 0x4ce764
movsx ecx, ax
xor ebp, ebp
xor edx, edx
test ecx, ecx
jle 0x4ce744
mov eax, dword [edi + 4]
mov ebp, ecx
add eax, 0xe
test byte [eax], 0x20
jne 0x4ce73e
inc edx
add eax, 0x10
dec ecx
jne 0x4ce738
mov eax, dword [edi + 4]
mov ecx, ebp
add ecx, ecx
test byte [eax + ecx*8 + 0xe], 0x20
je 0x4ce761
mov ax, word [edi + 0x24]
sub ax, dx
add ax, bp
movzx eax, ax
jmp 0x4ce764
movzx eax, dx
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x48]
cwde
inc edi
add edi, eax
mov eax, dword [ecx + 4]
mov ebp, dword [ecx + 0xc]
mov dword [esp + 0x24], edi
movzx eax, word [eax + ebx*2]
test byte [ebp + 0x1c], 0x20
mov dword [esp + 0x28], eax
movzx eax, ax
je 0x4ce7d3
test ax, ax
js 0x4ce7d3
movsx ecx, ax
xor edi, edi
xor edx, edx
test ecx, ecx
jle 0x4ce7af
mov eax, dword [ebp + 4]
mov edi, ecx
add eax, 0xe
test byte [eax], 0x20
jne 0x4ce7a9
inc edx
add eax, 0x10
dec ecx
jne 0x4ce7a3
mov eax, dword [ebp + 4]
mov ecx, edi
add ecx, ecx
test byte [eax + ecx*8 + 0xe], 0x20
je 0x4ce7cc
mov ax, word [ebp + 0x24]
sub ax, dx
add ax, di
movzx eax, ax
jmp 0x4ce7cf
movzx eax, dx
mov edi, dword [esp + 0x24]
mov ebp, dword [esp + 0x48]
mov ecx, dword [esp + 0x38]
cwde
lea edx, [ebp + 1]
add edx, eax
mov eax, dword [esp + 0x28]
cmp ax, word [ecx + 0x20]
jne 0x4ce7ed
mov edx, ebp
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4ce808
push edx
push dword [esp + 0x24]
push edi
push 0x34
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ce833
mov ebp, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x34
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4ce84a
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esp + 0x40]
inc ebx
cmp ebx, dword [esp + 0x50]
jl 0x4ce710
mov ebx, dword [esp + 0x30]
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4ce87a
push 0
push dword [esp + 0x14]
push 0
push 0xb
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ce8ad
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push dword [esp + 0x3c]
push dword [ebx]
call fcn.00517e10
mov edx, dword [esi + 0x74]
add esp, 8
mov edi, eax
cmp dword [esi + 0x78], edx
jg 0x4ce8e2
mov ebp, dword [esp + 0x1c]
push ebp
push dword [esp + 0x54]
mov ebp, dword [esp + 0x20]
push ebp
push 0x60
push esi
call fcn.004e2c80
add esp, 0x14
mov edx, eax
jmp 0x4ce919
mov ebp, dword [esp + 0x18]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x50]
mov dword [eax + ecx*4 + 8], ebp
mov ebp, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 0xc], ebp
mov ebp, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4ce937
mov ecx, dword [esp + 0x50]
cmp ecx, 0xfffffff4
je 0x4ce983
push edi
push ecx
push eax
call fcn.004cfa50
add esp, 0xc
jmp 0x4ce983
test edx, edx
jns 0x4ce93f
mov edx, dword [esi + 0x74]
dec edx
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x50]
test ecx, ecx
jns 0x4ce977
cmp byte [eax + 1], 0
jne 0x4ce977
cmp ecx, 0xfffffffd
jne 0x4ce963
mov dword [eax + 0x10], edi
mov byte [eax + 1], cl
jmp 0x4ce983
test edi, edi
je 0x4ce983
mov dword [eax + 0x10], edi
mov byte [eax + 1], cl
cmp ecx, 0xfffffff4
jne 0x4ce983
inc dword [edi + 0xc]
jmp 0x4ce983
push ecx
push edi
push eax
push esi
call fcn.00547a80
add esp, 0x10
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4ce9a7
mov edi, dword [esp + 0x1c]
push edi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0x1f
push esi
call fcn.004e2c80
add esp, 0x14
mov edx, eax
jmp 0x4ce9da
mov edi, dword [esp + 0x14]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4ce9f5
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 0
test edi, edi
je 0x4cea0d
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4cea0d
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edi
inc byte [ebx + 0x13]
mov eax, dword [esp + 0x50]
cmp eax, 1
jne 0x4cea30
test ebp, ebp
je 0x4cea3b
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4cea3b
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ebp
inc byte [ebx + 0x13]
jmp 0x4cea3b
cmp eax, dword [ebx + 0x1c]
jle 0x4cea3b
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], ebp
mov edx, dword [esp + 0x40]
mov cl, byte [edx + 0x18]
test cl, cl
jne 0x4ceabd
mov edx, dword [ebx]
mov eax, dword [edx + 0x20]
and eax, 0x80000
or eax, 0
jne 0x4ceab9
cmp dword [ebx + 0x74], eax
jne 0x4ceab9
cmp byte [ebx + 0x14], al
jne 0x4ceab9
mov edi, dword [ebx + 8]
test edi, edi
jne 0x4cea7b
test byte [edx + 0x50], 8
jne 0x4cea70
mov byte [ebx + 0x17], 1
push ebx
call fcn.0052ec00
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x74]
test eax, eax
jne 0x4cea84
mov eax, ebx
push 0xffffffffffffffff
push 0
push 0
push 2
push 0x313
push 0x46
push edi
mov byte [eax + 0x15], 1
call fcn.0052e240
mov eax, dword [edi + 0x74]
add esp, 0x1c
test eax, eax
jle 0x4ceb21
lea ecx, [eax + eax*4]
mov edx, 4
mov eax, dword [edi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x4ceb21
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x4c]
test ebp, ebp
jle 0x4cead6
test cl, cl
jne 0x4cead6
mov eax, dword [ebx + 0x74]
test eax, eax
jne 0x4cead2
mov eax, ebx
mov byte [eax + 0x15], 1
mov ecx, dword [esi + 0x74]
movzx edx, byte [edx + 0x18]
cmp dword [esi + 0x78], ecx
jg 0x4ceaf6
push 0
push ebp
push edx
push 0x9d
push esi
call fcn.004e2c80
add esp, 0x14
jmp 0x4ceb21
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x9d
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x10]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4ceb3f
push edx
push esi
push ecx
call fcn.004f4d20
add esp, 0xc
jmp 0x4ceb48
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4ceb6b
push 0
push 0
push dword [esp + 0x1c]
push 0x79
push esi
call fcn.004e2c80
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
pop edi
pop esi
pop ebp
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
pop ebx
add esp, 0x1c
ret