Function at 0x4c7310
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6b21fc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xc8]
cmp eax, dword [ecx + 8]
jbe 0x4c80a8
sub esp, 0x148
call fcn.00494ed0
lea edi, [esp + 0x110]
lea esi, [esp]
call fcn.00468f8e
mov eax, dword [esp + 0x14c]
test byte [eax], al
mov ecx, dword [0x6b2320]
lea edi, [eax + 0x14]
mov dword [esp + 0xc4], edi
test ecx, ecx
je 0x4c738d
lea eax, [0x544b60]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x110]
mov dword [esp + 8], eax
call fcn.004111d0
mov eax, dword [esp + 0x14c]
mov edi, dword [esp + 0xc4]
lea esi, [esp + 0x110]
call fcn.00468f8e
lea edi, [esp + 0xd4]
mov esi, eax
call fcn.00468f8e
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xd4]
test ecx, 0x80000000
je 0x4c73e1
mov ebx, edx
shl edx, 1
shl ecx, 1
mov ebp, ebx
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shr ecx, 0x1f
shr edx, 0x1f
or ebx, edx
add ebx, 0xd7b17f80
adc ecx, 0xd
jmp 0x4c73f1
mov ebx, dword [esp + 0xdc]
mov ecx, dword [esp + 0xe0]
mov ebp, edx
imul ecx, ecx, 0x3b9aca00
mov edx, eax
mov eax, ebx
mov esi, edx
mov edx, 0x3b9aca00
mul edx
add ecx, edx
and ebp, 0x3fffffff
mov edx, ebp
sar ebp, 0x1f
add edx, eax
adc ebp, ecx
mov ecx, edx
add edx, 0x3d1a0000
cmp ecx, 0xc2e60000
sete bl
cmp ebp, 0x5e4dfc14
sete al
and ebx, eax
test bl, bl
jne 0x4c7455
mov dword [esp + 0x3c], edx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x94], ecx
nop
nop
mov eax, 0x48
xor ebx, ebx
jmp 0x4c7e2c
movzx ecx, byte [esi + 0x28]
test cl, cl
je 0x4c75c6
mov dword [esp], esi
mov dword [esp + 4], 1
lea eax, [0x546ac7]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 7
lea eax, [0x546732]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 5
call fcn.004c3d50
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
mov dword [esp + 4], 1
lea ecx, [0x54645f]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 3
lea edx, [0x5476bb]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 0xb
call fcn.004c3d50
lea edi, [esp + 0xfc]
mov esi, dword [esp + 0xc4]
call fcn.00468f8e
lea edi, [esp + 0xe8]
mov esi, dword [esp + 0x14c]
call fcn.00468f8e
lea edi, [esp]
lea esi, [esp + 0xfc]
call fcn.00468f8e
lea edi, [esp + 0x14]
lea esi, [esp + 0xe8]
call fcn.00468f8e
call fcn.00494770
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
test ecx, ecx
sete dl
test eax, eax
sete bl
and ebx, edx
test bl, bl
jne 0x4c7552
mov dword [esp + 0x80], eax
mov dword [esp + 0x40], ecx
nop
nop
mov edx, dword [esp + 0x14c]
mov ebx, 0x50
xor ebp, ebp
jmp 0x4c7ba9
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
mov dword [esp + 4], 0xb
lea ecx, [0x54645f]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 3
lea ecx, [0x5476bb]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0xb
call fcn.004c3d50
mov eax, dword [esp + 0x14c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [eax + 0x30]
test edx, edx
sete bl
test ecx, ecx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebx, ebp
test bl, bl
jne 0x4c75c4
mov dword [esp + 0x68], edx
mov dword [esp + 0x4c], ecx
nop
nop
mov ebx, 0x60
xor ebp, ebp
jmp 0x4c7948
mov esi, eax
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov ecx, dword [esi + 0x38]
mov dword [esp + 0xb4], ecx
xor eax, eax
xor ecx, ecx
jmp 0x4c76bf
mov dword [esp + 0xb0], edx
mov eax, dword [esp + 0xb4]
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
call fcn.004c8180
mov eax, dword [esp + 0x24]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x14c]
mov dword [esp], ebx
lea ebp, [esp + 0x9c]
mov dword [esp + 4], ebp
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x1c], edx
call fcn.004c44c0
mov eax, dword [esp + 0xb4]
mov eax, dword [eax + 4]
mov dword [esp + 0xb4], eax
mov esi, dword [esp + 0x14c]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x4c7787
mov dword [esp + 0x7c], eax
mov ebx, dword [edx + 0x18]
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], edx
mov edx, dword [esp + 0xb4]
mov ebx, dword [edx + 0x18]
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x98], edx
mov ebp, dword [esi + 0x2c]
mov eax, ebx
mul ebp
mov edi, dword [esp + 0x98]
imul edi, ebp
add edx, edi
mov ebp, dword [esi + 0x30]
mov dword [esp + 0xa4], eax
imul ebx, ebp
add edx, ebx
mov dword [esp + 0xa8], edx
mov edx, dword [esp + 0xb4]
mov edx, dword [edx + 0x14]
test edx, edx
je 0x4c7780
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
lea eax, [0x4c80c0]
mov dword [esp + 0xc8], eax
lea edx, [esp + 0xb4]
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], esi
lea edx, [esp + 0xc8]
jmp 0x4c7605
xor edx, edx
jmp 0x4c7605
mov eax, dword [esi + 0x9c]
mov ecx, dword [esi + 0xa0]
mov dword [esp + 0x90], ecx
xor edx, edx
jmp 0x4c78b2
mov dword [esp + 0xc0], eax
lea edi, [esp + 0x124]
mov esi, eax
call fcn.00468f66
lea ecx, [edx + 1]
mov dword [esp + 0x8c], ecx
mov edx, ecx
sar ecx, 0x1f
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
mov esi, dword [esp + 0x12c]
mov edi, dword [esp + 0x130]
mov eax, dword [esp + 0x134]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x84], eax
cmp byte [esp + 0x144], 1
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], ebx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], ebp
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], esi
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x34], ecx
sete cl
mov byte [esp + 0x38], cl
call fcn.004c5520
mov eax, dword [esp + 0xc0]
add eax, 0x24
mov ecx, dword [esp + 0x90]
mov esi, dword [esp + 0x14c]
mov edx, dword [esp + 0x8c]
cmp edx, ecx
jl 0x4c77a1
lea eax, [esi + 0x64]
mov ecx, dword [esi + 0x84]
mov edx, dword [esi + 0x88]
mov ebx, dword [esi + 0x8c]
mov dword [esp], eax
mov dword [esp + 4], 6
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.004cc580
mov eax, dword [esp + 0x14c]
mov ecx, dword [eax + 0x60]
mov edx, dword [eax + 0x64]
mov ebx, dword [eax + 0x68]
mov ebp, dword [eax + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call fcn.004c0e70
mov eax, dword [esp + 0x14c]
mov eax, dword [eax + 0x60]
mov dword [esp], eax
call fcn.004c1320
add esp, 0x148
ret
mov dword [eax + 0x68], esi
mov ecx, ebx
or ecx, 0xffffff80
mov byte [esi + edi - 1], cl
shr ebx, 7
mov ecx, ebp
shl ecx, 0x19
or ebx, ecx
shr ebp, 7
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x48], ebx
test ebp, ebp
xchg esi, ebx
seta bl
xchg esi, ebx
xchg edi, ebx
sete bl
xchg edi, ebx
cmp ebx, 0x80
setae cl
and edi, ecx
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
je 0x4c79ea
mov ecx, dword [eax + 0x6c]
mov esi, dword [eax + 0x68]
inc esi
mov edi, dword [eax + 0x64]
cmp ecx, esi
jae 0x4c792b
mov dword [esp + 0x64], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c79d0
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov eax, ebx
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x64]
mov esi, edx
mov edi, ecx
mov edx, dword [esp + 0x68]
jmp 0x4c792b
mov ecx, dword [eax + 0x6c]
mov ebp, dword [eax + 0x68]
inc ebp
mov esi, dword [eax + 0x64]
cmp ecx, ebp
jae 0x4c7a58
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c7a47
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov eax, ebx
mov ebx, dword [esp + 0x48]
mov ebp, edx
mov esi, ecx
mov edx, dword [esp + 0x68]
mov dword [eax + 0x68], ebp
mov byte [ebp + esi - 1], bl
mov ecx, dword [esp + 0x4c]
jmp 0x4c7a7e
mov dword [eax + 0x68], ebp
mov ebx, ecx
or ebx, 0xffffff80
mov byte [ebp + esi - 1], bl
shr ecx, 7
mov ebx, edx
shl ebx, 0x19
or ecx, ebx
shr edx, 7
mov dword [esp + 0x44], ecx
test edx, edx
sete bl
xchg ebp, ebx
seta bl
xchg ebp, ebx
cmp ecx, 0x80
xchg esi, ebx
setae bl
xchg esi, ebx
and ebx, esi
or ebx, ebp
test bl, bl
je 0x4c7b1a
mov ebx, dword [eax + 0x6c]
mov ebp, dword [eax + 0x68]
inc ebp
mov esi, dword [eax + 0x64]
cmp ebx, ebp
jae 0x4c7a65
mov dword [esp + 0x60], edx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c7b04
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov eax, ebx
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x60]
jmp 0x4c7a65
mov edx, dword [eax + 0x6c]
mov ebx, dword [eax + 0x68]
inc ebx
mov ebp, dword [eax + 0x64]
cmp edx, ebx
jae 0x4c7b84
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c7b77
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov eax, ebx
mov ebx, edx
mov ebp, ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0x68], ebx
mov byte [ebx + ebp - 1], cl
jmp 0x4c75c4
mov dword [edx + 0x68], esi
mov eax, ebx
or eax, 0xffffff80
mov byte [esi + edi - 1], al
shr ebx, 7
mov eax, ebp
shl eax, 0x19
or ebx, eax
shr ebp, 7
mov dword [esp + 0x54], ebx
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
seta bl
xchg edi, ebx
cmp ebx, 0x80
setae al
and esi, eax
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
je 0x4c7c54
mov eax, dword [edx + 0x6c]
mov esi, dword [edx + 0x68]
inc esi
mov edi, dword [edx + 0x64]
cmp eax, esi
jae 0x4c7b90
mov dword [esp + 0x70], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c7c35
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x64]
mov dword [edi + 4], eax
mov dword [ebx + 0x64], ecx
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x70]
mov esi, edx
mov edi, ecx
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x14c]
jmp 0x4c7b90
mov eax, dword [edx + 0x6c]
mov ebp, dword [edx + 0x68]
inc ebp
mov esi, dword [edx + 0x64]
cmp eax, ebp
jae 0x4c7cc7
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c7cb1
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x64]
mov dword [edi + 4], eax
mov dword [ebx + 0x64], ecx
mov ebx, dword [esp + 0x54]
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x14c]
mov dword [edx + 0x68], ebp
mov byte [ebp + esi - 1], bl
mov eax, dword [esp + 0x80]
jmp 0x4c7cf0
mov dword [edx + 0x68], ebp
mov ebx, eax
or ebx, 0xffffff80
mov byte [ebp + esi - 1], bl
shr eax, 7
mov ebx, ecx
shl ebx, 0x19
or eax, ebx
shr ecx, 7
mov dword [esp + 0x50], eax
test ecx, ecx
sete bl
xchg ebp, ebx
seta bl
xchg ebp, ebx
cmp eax, 0x80
xchg esi, ebx
setae bl
xchg esi, ebx
and ebx, esi
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4c7d8d
mov ebx, dword [edx + 0x6c]
mov ebp, dword [edx + 0x68]
inc ebp
mov esi, dword [edx + 0x64]
cmp ebx, ebp
jae 0x4c7cd7
mov dword [esp + 0x6c], ecx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c7d77
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x64]
mov dword [edi + 4], eax
mov dword [ebx + 0x64], ecx
mov eax, dword [esp + 0x50]
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x6c]
mov edx, ebx
jmp 0x4c7cd7
mov ecx, dword [edx + 0x6c]
mov ebx, dword [edx + 0x68]
inc ebx
mov ebp, dword [edx + 0x64]
cmp ecx, ebx
jae 0x4c7dfc
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c7dea
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x64]
mov dword [edi + 4], eax
mov dword [ebx + 0x64], ecx
mov eax, dword [esp + 0x50]
mov ebx, edx
mov ebp, ecx
mov edx, dword [esp + 0x14c]
mov dword [edx + 0x68], ebx
mov byte [ebx + ebp - 1], al
jmp 0x4c7552
mov dword [esi + 0x68], ebp
mov edx, eax
or edx, 0xffffff80
mov byte [ebp + edi - 1], dl
shr eax, 7
mov edx, ebx
shl edx, 0x19
or eax, edx
shr ebx, 7
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x5c], eax
test ebx, ebx
xchg edi, ebx
sete bl
xchg edi, ebx
seta dl
cmp eax, 0x80
xchg ebp, ebx
setae bl
xchg ebp, ebx
and edi, ebp
or edx, edi
test dl, dl
je 0x4c7ed7
mov edx, dword [esi + 0x6c]
mov ebp, dword [esi + 0x68]
inc ebp
mov edi, dword [esi + 0x64]
cmp edx, ebp
jae 0x4c7e08
mov dword [esp + 0x78], ebx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c7eb5
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x78]
mov esi, dword [esp + 0x14c]
mov ebp, edx
mov edi, ecx
mov ecx, dword [esp + 0x94]
jmp 0x4c7e08
mov edx, dword [esi + 0x6c]
mov ebx, dword [esi + 0x68]
inc ebx
mov ebp, dword [esi + 0x64]
cmp edx, ebx
jb 0x4c7eed
add ecx, 0x3d1a0000
jmp 0x4c7f65
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
jne 0x4c7f3e
mov ebp, dword [esp + 0x94]
add ebp, 0x3d1a0000
jmp 0x4c7f58
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov ebp, dword [esp + 0x94]
add ebp, 0x3d1a0000
mov dword [ebx + 0x64], ecx
mov eax, dword [esp + 0x5c]
mov esi, ebx
mov ebx, edx
mov ebp, ecx
mov dword [esi + 0x68], ebx
mov byte [ebx + ebp - 1], al
mov ecx, dword [esp + 0x98]
adc ecx, 0xa1b203eb
mov edx, dword [esp + 0x3c]
jmp 0x4c7f98
mov dword [esi + 0x68], ebp
mov ebx, edx
or ebx, 0xffffff80
mov byte [ebp + eax - 1], bl
shr edx, 7
mov ebx, ecx
shl ebx, 0x19
or edx, ebx
shr ecx, 7
mov dword [esp + 0x58], edx
test ecx, ecx
seta bl
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp edx, 0x80
setae al
and ebp, eax
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4c8032
mov ebx, dword [esi + 0x6c]
mov ebp, dword [esi + 0x68]
inc ebp
mov eax, dword [esi + 0x64]
cmp ebx, ebp
jae 0x4c7f7f
mov dword [esp + 0x74], ecx
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c801c
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov esi, ebx
mov ebp, edx
mov eax, ecx
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x58]
jmp 0x4c7f7f
mov ecx, dword [esi + 0x6c]
mov ebx, dword [esi + 0x68]
inc ebx
mov ebp, dword [esi + 0x64]
cmp ecx, ebx
jae 0x4c809c
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14c]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4c808f
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov esi, ebx
mov ebx, edx
mov ebp, ecx
mov edx, dword [esp + 0x58]
mov dword [esi + 0x68], ebx
mov byte [ebx + ebp - 1], dl
jmp 0x4c7455
call fcn.00467460
jmp fcn.004c7310