Function at 0x4fcce0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x478]
cmp eax, dword [ecx + 8]
jbe 0x4fe025
sub esp, 0x4f8
lea edi, [esp + 0x45c]
xor eax, eax
call fcn.0045eb6e
mov ecx, dword [esp + 0x4fc]
mov dword [esp + 0x494], ecx
mov edx, dword [esp + 0x500]
mov dword [esp + 0x498], edx
lea edi, [esp + 0x11c]
call fcn.0045eb79
lea edi, [esp + 0x4a4]
call fcn.0045eb6b
lea ecx, [esp + 0x4a4]
mov dword [esp + 0x128], ecx
call fcn.0044bbb0
mov ecx, dword [esp]
mov dword [esp + 0x124], ecx
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
lea edi, [esp + 0x108]
xor eax, eax
call fcn.0045eb7b
mov ecx, 1
lea edx, [esp + 0x45c]
mov ebx, 1
xor ebp, ebp
lea esi, [esp + 0x3c]
xor edi, edi
jmp 0x4fcdc5
mov ebx, eax
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0xe8]
mov edi, dword [esp + 0xb4]
xor eax, eax
test ecx, ecx
je 0x4fce1d
mov dword [esp + 0x80], ebp
mov dword [esp + 0xd0], esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0xe8], edx
mov dword [esp + 0xd4], edi
call fcn.0040bf10
mov eax, dword [esp]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0xe8]
xor edx, edx
mov ebx, dword [esp + 0x80]
xor ebp, ebp
mov esi, dword [esp + 0xd0]
jmp 0x4fd50e
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x104]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00408e80
mov eax, dword [esp + 0xc]
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
lea ecx, [0x4fe030]
mov dword [esp + 0xec], ecx
lea ecx, [esp + 0xfc]
mov dword [esp + 0xf0], ecx
lea ecx, [0x600060]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0xec]
mov dword [esp + 8], eax
call fcn.00488090
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x104]
xor edx, edx
xor ebx, ebx
jmp 0x4fceac
mov eax, ecx
mov ecx, ebp
mov ebp, dword [esp + 0x100]
mov esi, ebx
mov ebx, dword [esp + 0xfc]
cmp edx, ebp
jge 0x4fd1d1
jae 0x4fd4ed
mov dword [esp + 0x70], edx
mov dword [esp + 0xac], eax
mov dword [esp + 0xa0], esi
mov dword [esp + 0x4c], ecx
lea ebp, [edx + edx*8]
mov dword [esp + 0x9c], ebp
lea ebx, [ebx + ebp*8]
lea edi, [esp + 0x2f4]
mov esi, ebx
call fcn.0045efdc
mov ecx, dword [esp + 0x2f4]
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0x2f8]
mov dword [esp + 0x5c], ebx
mov esi, 1
jmp 0x4fd421
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0x9c]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x9c]
cmp esi, 1
jne 0x4fd00e
mov ecx, dword [esp + 0xa0]
lea ebx, [ecx + 1]
mov edx, ebp
mov ebp, dword [esp + 0x4c]
cmp ebp, ebx
jae 0x4fcf9f
lea edx, [0x622360]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xa0]
mov ebp, edx
mov edx, dword [esp + 0x98]
mov dword [esp + 0x48], ebx
mov ebx, dword [0x7e77b0]
lea ecx, [ecx + ecx*8]
lea edi, [eax + ecx*8]
test ebx, ebx
jne 0x4fcfc1
lea esi, [esp + 0x2f4]
call fcn.0045efdc
jmp 0x4fd001
mov dword [esp + 0xe4], eax
mov dword [esp + 0x90], ebp
lea eax, [0x622360]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2f4]
mov dword [esp + 8], eax
call fcn.0040ff10
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0x98]
mov ebp, dword [esp + 0x90]
mov ebx, dword [esp + 0x48]
mov ecx, eax
xor eax, eax
jmp 0x4fcea8
mov ebx, dword [esp + 0x104]
mov ecx, ebx
mov ebx, dword [esp + 0xfc]
cmp ecx, ebp
jb 0x4fd4db
cmp edx, ebp
ja 0x4fd4d2
mov dword [esp + 0x94], ecx
lea edi, [esp + 0x1d4]
xor eax, eax
call fcn.0045eb6e
mov ecx, dword [esp + 0x9c]
shl ecx, 3
mov edi, ebp
mov ebp, dword [esp + 0x94]
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ecx, ebp
lea ebp, [ebx + ecx]
cmp esi, 1
jle 0x4fd096
mov edx, ebx
mov ebx, dword [ebx + ecx + 0x30]
cmp dword [ebp + 0x78], ebx
jne 0x4fd096
mov dword [esp + 0xcc], ebp
movzx ebx, byte [edx + ecx + 0x28]
lea ebp, [edx + ecx + 0x70]
cmp byte [ebp], bl
jne 0x4fd08f
xor ecx, ecx
jmp 0x4fd0b8
mov ebp, dword [esp + 0xcc]
test esi, esi
jbe 0x4fd4c9
mov esi, ebp
lea edi, [esp + 0x1d4]
call fcn.0045efdc
mov edi, dword [esp + 0x98]
mov ecx, 1
mov byte [esp + 0x3d], cl
lea esi, [esp + 0x1d4]
mov edx, edi
lea edi, [esp + 0x384]
call fcn.0045efdc
movzx ecx, byte [esp + 0x3d]
test cl, cl
je 0x4fd1ba
mov ecx, dword [esp + 0xa0]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x4c]
cmp ebp, ebx
jb 0x4fd0f9
mov esi, dword [esp + 0xac]
jmp 0x4fd141
lea eax, [0x622360]
mov dword [esp], eax
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00447740
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xa0]
mov esi, eax
mov ebp, edx
xor eax, eax
mov edx, dword [esp + 0x98]
mov dword [esp + 0xac], esi
mov edi, ebx
mov ebx, dword [0x7e77b0]
lea ecx, [ecx + ecx*8]
lea ecx, [esi + ecx*8]
test ebx, ebx
jne 0x4fd16c
mov ebx, edi
mov edi, ecx
lea esi, [esp + 0x384]
call fcn.0045efdc
jmp 0x4fd1ae
mov dword [esp + 0xa0], edi
mov dword [esp + 0x8c], ebp
lea eax, [0x622360]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x384]
mov dword [esp + 8], eax
call fcn.0040ff10
xor eax, eax
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x8c]
mov ecx, dword [esp + 0xac]
jmp 0x4fcea8
mov ebp, dword [esp + 0x4c]
mov ebx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xac]
jmp 0x4fcea8
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], esi
mov dword [esp + 0x104], ecx
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call fcn.00408e80
mov eax, dword [esp + 0xc]
lea ecx, [0x68c028]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00488b60
mov eax, dword [esp + 0x100]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x4fc]
mov edx, dword [esp + 0x500]
xor ebx, ebx
jmp 0x4fd248
mov ebp, dword [esp + 0x6c]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x4fc]
mov edx, dword [esp + 0x500]
cmp ebx, eax
jge 0x4fd2f8
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
cmp ebx, esi
jae 0x4fd3f1
mov dword [esp + 0x6c], ebx
mov dword [esp + 0xe8], ebp
lea eax, [ebx + ebx*8]
mov dword [esp + 0x9c], eax
lea esi, [ebp + eax*8]
lea edi, [ebp + eax*8 + 0x2c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x30]
mov esi, dword [esi + 0x34]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.004fbf40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004f8080
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xe8]
lea edi, [ecx + eax*8 + 0x44]
mov eax, dword [0x7e77b0]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4fd2ec
mov dword [edi], ecx
jmp 0x4fd22c
mov eax, ecx
call fcn.0045e950
jmp 0x4fd22c
mov eax, dword [esp + 0x100]
lea ecx, [0x608280]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040bf90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
test ecx, ecx
je 0x4fd341
mov dword [esp + 0xbc], eax
mov dword [esp + 0xa0], ecx
xor ebx, ebx
jmp 0x4fd38c
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x104]
mov dword [esp + 0x504], ecx
mov dword [esp + 0x508], edx
mov dword [esp + 0x50c], ebx
mov dword [esp + 0x510], eax
add esp, 0x4f8
ret
mov ebp, dword [esp + 0xe8]
lea edx, [ebp + 0x48]
mov ebx, eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x68], ebx
mov dword [esp + 0xe8], edx
lea edi, [esp + 0x264]
mov esi, edx
call fcn.0045efdc
mov ecx, dword [esp + 0x264]
mov ebp, dword [esp + 0x268]
lea edx, [0x608280]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
call fcn.0040f490
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x68]
mov dword [eax], ecx
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xa0]
cmp ecx, eax
jg 0x4fd379
mov eax, dword [esp + 0xbc]
jmp 0x4fd341
mov eax, ebx
mov ecx, esi
call fcn.0045e9d0
mov eax, dword [esp + 0x84]
lea esi, [eax + 1]
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x5c]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0xac]
mov ebp, dword [esp + 0x9c]
mov edi, ebp
lea ebp, [esi + edx]
mov dword [esp + 0x98], ebp
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 0xe8], ebx
mov ebx, dword [esp + 0x94]
cmp ebx, ebp
jle 0x4fcf45
jbe 0x4fd4e4
mov dword [esp + 0x84], esi
lea ebx, [ebp + ebp*8]
mov ebp, dword [esp + 0xe8]
lea ebx, [ebp + ebx*8]
mov ebp, edi
lea edi, [esp + 0x21c]
mov esi, ebx
call fcn.0045efdc
mov ecx, dword [esp + 0x220]
mov ebx, dword [esp + 0x21c]
mov esi, ebp
mov ebp, dword [esp + 0x5c]
cmp ecx, ebp
jne 0x4fcf30
mov dword [esp], ebx
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004025c0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4fd3fa
jmp 0x4fcf1e
xor eax, eax
mov ecx, esi
call fcn.0045e9d0
mov eax, edx
mov ecx, ebp
call fcn.0045ea30
mov edx, ecx
mov ecx, ebp
call fcn.0045ea10
mov eax, ebp
mov ecx, ebx
call fcn.0045e9d0
mov eax, edx
mov ecx, ebp
call fcn.0045e9d0
mov esi, eax
mov eax, dword [esp + 0xe0]
add eax, 0x48
mov ebp, ecx
mov ecx, eax
mov edi, edx
mov edx, ebx
mov ebx, esi
mov esi, edi
mov dword [esp + 0x9c], edx
mov dword [esp + 0xe0], ecx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x54], ebp
mov dword [esp + 0xb8], esi
lea edi, [esp + 0x33c]
mov esi, ecx
call fcn.0045efdc
lea ecx, [0x607f00]
mov dword [esp], ecx
lea ecx, [esp + 0x11c]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x374]
mov dword [esp + 8], ecx
call fcn.0040c2e0
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4fd579
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xb8]
jmp 0x4fd5c6
lea eax, [0x607f00]
mov dword [esp], eax
lea ecx, [esp + 0x11c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x374]
mov dword [esp + 8], edx
call fcn.0040c830
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0xb8]
jmp 0x4fd5ec
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x9c]
inc ebx
mov ebp, dword [esp + 0x7c]
cmp ebp, ebx
jg 0x4fd4f6
jmp 0x4fcdac
mov esi, dword [esp + 0x74]
lea eax, [esi + 1]
mov ecx, edx
mov edx, ebx
mov ebx, ebp
mov dword [esp + 0x74], eax
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ecx
mov dword [esp + 0xb8], ebx
mov ebp, dword [esp + 0x374]
mov esi, dword [esp + 0x378]
mov ebp, dword [ebp + 0x64]
mov dword [esp], esi
call ebp
mov eax, dword [esp + 0x74]
cmp dword [esp + 4], eax
jle 0x4fd5b7
mov ecx, dword [esp + 0x374]
mov edx, dword [esp + 0x378]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x138]
lea esi, [esp + 8]
call fcn.0045f00e
movzx eax, byte [esp + 0x168]
test al, al
jne 0x4fd68b
lea edi, [esp + 0x16c]
lea esi, [esp + 0x138]
call fcn.0045f00e
mov eax, dword [esp + 0x178]
test eax, eax
je 0x4fd733
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb8]
jmp 0x4fd5df
mov eax, dword [esp + 0x148]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x14c]
mov dword [esp + 0xa8], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x16
je 0x4fd6c0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xa8]
jmp 0x4fd6db
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa8], ecx
lea edi, [esp + 0x1a0]
lea esi, [esp + 0x138]
call fcn.0045f00e
mov ecx, dword [esp + 0x1ac]
test ecx, ecx
jne 0x4fd704
xor eax, eax
jmp 0x4fd71b
mov eax, dword [eax + 0x50]
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
test al, al
je 0x4fd733
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb8]
jmp 0x4fd5df
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x154]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x62e154]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.004b27d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
cmp ecx, 1
jne 0x4fd785
cmp byte [eax], 0x2d
jne 0x4fd785
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb8]
jmp 0x4fd5df
nop
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x62dc69]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004a10e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0xb0], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x50], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004fbe00
movzx eax, byte [esp + 8]
test al, al
je 0x4fd7ec
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa4]
jmp 0x4fd7f0
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x36c]
lea ebx, [0x606780]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x64], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.004475c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x368]
mov edx, dword [esp + 0x36c]
mov ebx, dword [esp + 0x64]
cmp edx, ebx
jl 0x4fd839
mov edx, ebx
mov dword [esp + 0xdc], eax
cmp ecx, eax
je 0x4fd862
mov dword [esp], eax
mov dword [esp + 4], ecx
shl edx, 2
mov dword [esp + 8], edx
call fcn.0045f270
mov eax, dword [esp + 0xdc]
mov ebx, dword [esp + 0x64]
mov edx, dword [esp + 0x36c]
cmp edx, ebx
jae 0x4fe01b
mov ecx, dword [esp + 0x74]
mov dword [eax + edx*4], ecx
mov edx, dword [esp + 0x148]
mov dword [esp + 0x78], edx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0xc8], ebx
mov ebp, dword [edx + 0x60]
mov dword [esp], ebx
call ebp
mov eax, dword [esp + 8]
test eax, eax
jne 0x4fd8bb
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x16
je 0x4fd8c8
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0xc8]
jmp 0x4fd8e3
mov eax, dword [esp + 0x78]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
call eax
mov edx, dword [esp + 4]
mov ebx, dword [esp + 8]
mov dword [esp + 0x78], edx
mov dword [esp + 0xc8], ebx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
lea ebp, [0x62e723]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 6
call fcn.00502e10
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4fd924
xor eax, eax
jmp 0x4fd951
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
lea ecx, [eax - 1]
cmp ecx, 0xd
jbe 0x4fd948
cmp eax, 0x18
jne 0x4fd94f
mov eax, 1
jmp 0x4fd951
xor eax, eax
mov byte [esp + 0x3e], al
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x4fd964
mov edx, 1
jmp 0x4fd99d
movzx edx, byte [esp + 0x168]
test dl, dl
jne 0x4fd977
mov edx, 1
jmp 0x4fd99d
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x19
setne al
mov ecx, dword [esp + 0x60]
mov edx, eax
movzx eax, byte [esp + 0x3e]
test dl, dl
je 0x4fdadb
test ecx, ecx
jne 0x4fd9b9
mov edx, dword [esp + 0x138]
mov ebx, dword [esp + 0x13c]
jmp 0x4fd9c2
mov ebx, ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x98], ebx
mov dword [esp + 0xc4], edx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
lea eax, [0x62f2fd]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 9
call fcn.00502e10
movzx eax, byte [esp + 0x10]
mov byte [esp + 0x3f], al
lea edi, [esp + 0x2ac]
xor eax, eax
call fcn.0045eb6e
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x2ac], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x2b0], ecx
mov ecx, dword [esp + 0x60]
test ecx, ecx
setne cl
mov byte [esp + 0x2d4], cl
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x2d8], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x2dc], ecx
mov dword [esp + 0x2e0], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x2e4], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x2e8], ecx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x2ec], cl
movzx ecx, byte [esp + 0x3e]
mov byte [esp + 0x2ed], cl
mov ecx, dword [esp + 0x2ac]
mov edx, dword [esp + 0x2b0]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044b040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2b4], eax
mov dword [esp + 0x2b8], ecx
mov dword [esp + 0x2bc], edx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x4fdcbd
mov eax, dword [esp + 0x78]
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xf8], ecx
lea edx, [0x607f40]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xf4]
mov dword [esp + 8], ebp
call fcn.0040c830
mov eax, dword [esp + 0xc]
inc dword [eax]
mov eax, dword [esp + 0x78]
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xf8], ecx
lea edx, [0x607f40]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xf4]
mov dword [esp + 8], ebp
call fcn.0040c2e0
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x4fdb78
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xb8]
jmp 0x4fd5df
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x60]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x98], ecx
lea edi, [esp + 0x3cc]
mov edx, eax
xor eax, eax
call fcn.0045eb6e
mov dword [esp + 0x3cc], edx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x3d0], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x3f8], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x3fc], ecx
mov dword [esp + 0x400], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x404], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x408], ecx
mov ecx, dword [esp + 0x54]
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x58]
cmp ebx, edx
jb 0x4fdc10
mov ebp, dword [esp + 0xb8]
jmp 0x4fdc4e
lea eax, [0x622360]
mov dword [esp], eax
mov ebp, dword [esp + 0xb8]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00447740
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0x54]
mov ebp, ebx
mov ebx, edx
mov edx, eax
xor eax, eax
mov eax, dword [0x7e77b0]
lea ecx, [ecx + ecx*8]
lea edi, [ebp + ecx*8]
test eax, eax
jne 0x4fdc70
lea esi, [esp + 0x3cc]
call fcn.0045efdc
jmp 0x4fd5df
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x94], edx
mov dword [esp + 0x88], ebx
lea eax, [0x622360]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x3cc]
mov dword [esp + 8], eax
call fcn.0040ff10
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0xd8]
jmp 0x4fd5df
inc edx
cmp edx, ecx
jge 0x4fdcfd
movzx esi, byte [eax + edx]
xchg esi, eax
cmp al, 0x80
xchg esi, eax
jae 0x4fdcf5
and esi, 0xffffffdf
lea edi, [esi - 0x41]
xchg edi, eax
cmp al, 0x19
xchg edi, eax
jbe 0x4fdce0
mov ebp, 1
jmp 0x4fdcbc
xchg esi, eax
cmp al, 0x4b
xchg esi, eax
je 0x4fdcee
xchg esi, eax
cmp al, 0x53
xchg esi, eax
jne 0x4fdcbc
mov ebx, 1
jmp 0x4fdcbc
lea eax, [0x6457b8]
jmp 0x4fdd1d
test bl, bl
je 0x4fdd09
lea eax, [0x645808]
jmp 0x4fdd1d
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4fdd17
lea eax, [0x6457fc]
jmp 0x4fdd1d
lea eax, [0x645828]
mov dword [esp + 0x2c0], eax
nop
mov dword [esp + 0x10c], 0
mov dword [esp + 0x114], 0
mov byte [esp + 0x118], 0
lea eax, [esp + 0x108]
mov dword [esp], eax
lea ecx, [0x68a36d]
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
call fcn.0049ca50
mov eax, dword [esp + 0x2b4]
mov ecx, dword [esp + 0x2b8]
mov edx, dword [esp + 0x2bc]
lea ebx, [esp + 0x108]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004f7530
lea eax, [esp + 0x108]
mov dword [esp], eax
lea ecx, [0x62dd27]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.0049ca50
mov ecx, dword [esp + 0x10c]
mov eax, dword [esp + 0x108]
mov edx, dword [esp + 0x110]
mov ebx, dword [esp + 0x114]
cmp ecx, ebx
jb 0x4fe014
mov dword [esp], 0
sub edx, ebx
neg edx
sar edx, 0x1f
and edx, ebx
add eax, edx
mov dword [esp + 4], eax
sub ecx, ebx
mov dword [esp + 8], ecx
call fcn.0044aee0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2cc], eax
mov dword [esp + 0x2d0], ecx
mov eax, dword [esp + 0x2ac]
mov ecx, dword [esp + 0x2b0]
mov dword [esp], 0
lea edx, [0x68a36d]
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x62dd27]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.0044acd0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x2c4], eax
mov dword [esp + 0x2c8], ecx
mov eax, dword [esp + 0x100]
lea ecx, [eax + 1]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x104]
cmp ebx, ecx
jae 0x4fdec0
lea ebp, [0x622360]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00447740
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x104], ecx
mov dword [esp + 0xfc], edx
lea ecx, [eax + 1]
mov dword [esp + 0x100], ecx
mov ecx, dword [0x7e77b0]
lea eax, [eax + eax*8]
lea edi, [edx + eax*8]
test ecx, ecx
jne 0x4fdee8
lea esi, [esp + 0x2ac]
call fcn.0045efdc
jmp 0x4fdf05
lea eax, [0x622360]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2ac]
mov dword [esp + 8], eax
call fcn.0040ff10
lea eax, [0x607f40]
mov dword [esp], eax
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x374]
mov dword [esp + 8], edx
call fcn.0040c2e0
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x4fdffb
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4fe00f
lea eax, [ecx + ecx*8]
lea esi, [edx + eax*8 - 0x48]
lea edi, [esp + 0x414]
call fcn.0045efdc
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x104]
lea ebx, [eax + 1]
cmp edx, ebx
jae 0x4fdfb6
lea ebp, [0x622360]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00447740
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x104], edx
mov dword [esp + 0xfc], ecx
lea edx, [eax + 1]
mov dword [esp + 0x100], edx
mov edx, dword [0x7e77b0]
lea eax, [eax + eax*8]
lea edi, [ecx + eax*8]
test edx, edx
jne 0x4fdfde
lea esi, [esp + 0x414]
call fcn.0045efdc
jmp 0x4fdffb
lea eax, [0x622360]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x414]
mov dword [esp + 8], eax
call fcn.0040ff10
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb8]
jmp 0x4fd5df
call fcn.0045e9d0
mov eax, ebx
call fcn.0045ea30
mov eax, edx
mov ecx, ebx
call fcn.0045e9d0
nop
call fcn.0045d540
jmp fcn.004fcce0