Function at 0x4d6ea0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9ec7ac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x88]
cmp eax, dword [ecx + 8]
jbe 0x4d7fe5
sub esp, 0x108
mov eax, dword [esp + 0x11c]
mov dword [esp], eax
mov ecx, dword [esp + 0x120]
mov dword [esp + 4], ecx
call fcn.004d90e0
mov eax, dword [esp + 8]
test eax, eax
je 0x4d7753
mov dword [esp + 0x30], eax
lea ecx, [0x6e4500]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0044e0b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp], ecx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
call fcn.00473a30
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x4d772e
mov edx, dword [esp + 0x11c]
test edx, edx
je 0x4d772a
mov edx, dword [edx + 8]
cmp edx, 0x6d448d5d
ja 0x4d7389
cmp edx, 0x38dfc0a9
ja 0x4d712e
cmp edx, 0x2de60e3b
ja 0x4d700b
cmp edx, 0x252f926b
je 0x4d6fbf
cmp edx, 0x2de60e3b
jne 0x4d772a
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d88a0]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0xdc]
xor eax, eax
jmp 0x4d7fca
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d83e0]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
mov dword [esp + 0x54], ebx
mov edx, dword [edx]
mov dword [esp + 0xa8], edx
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
mov ecx, dword [esp + 0x30]
xor eax, eax
jmp 0x4d7fa6
cmp edx, 0x2e74d42b
je 0x4d70cf
cmp edx, 0x338a7ec0
je 0x4d7077
cmp edx, 0x38dfc0a9
jne 0x4d772a
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d7ea0]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
mov dword [esp + 0x68], ebx
mov edx, dword [edx]
mov dword [esp + 0xbc], edx
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
mov ecx, dword [esp + 0x30]
xor eax, eax
jmp 0x4d7ef7
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d11c0]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x114]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x120]
mov dword [ecx], eax
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d1100]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x114]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x120]
mov dword [edx + 4], eax
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
cmp edx, 0x4f3c6e38
ja 0x4d7250
cmp edx, 0x4072c7d5
je 0x4d71ec
cmp edx, 0x49163278
je 0x4d718d
cmp edx, 0x4f3c6e38
jne 0x4d772a
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d85a0]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0xdc]
xor eax, eax
jmp 0x4d7e69
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d1480]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x114]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x120]
mov dword [edx + 4], eax
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d0fc0]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x114]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x78], eax
movss xmm0, dword [esp + 0x78]
mov eax, dword [esp + 0x120]
movss dword [eax], xmm0
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
cmp edx, 0x62de383d
je 0x4d7331
cmp edx, 0x6d0f0857
jne 0x4d72b0
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d8560]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
mov dword [esp + 0x60], ebx
mov edx, dword [edx]
mov dword [esp + 0xb4], edx
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x118]
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0xdc]
xor eax, eax
jmp 0x4d7e36
cmp edx, 0x6d448d5d
jne 0x4d772a
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d1000]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x114]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], ecx
movsd xmm0, qword [esp + 0x8c]
mov eax, dword [esp + 0x120]
movsd qword [eax], xmm0
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d10c0]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x114]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x120]
mov dword [ecx], eax
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
cmp edx, 0x889ce7f8
ja 0x4d756e
cmp edx, 0x7e440822
ja 0x4d744d
cmp edx, 0x70800450
jne 0x4d73f5
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d8520]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
mov dword [esp + 0x58], ebx
mov edx, dword [edx]
mov dword [esp + 0xac], edx
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
mov ecx, dword [esp + 0x30]
xor eax, eax
jmp 0x4d7d7c
cmp edx, 0x7e440822
jne 0x4d772a
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d88e0]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
mov dword [esp + 0x70], ebx
mov edx, dword [edx]
mov dword [esp + 0xc4], edx
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
mov ecx, dword [esp + 0x30]
xor eax, eax
jmp 0x4d7cdf
cmp edx, 0x81044065
je 0x4d7513
cmp edx, 0x854f63b7
jne 0x4d74ad
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d80a0]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
mov dword [esp + 0x5c], ebx
mov edx, dword [edx]
mov dword [esp + 0xb0], edx
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x118]
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0xdc]
xor eax, eax
jmp 0x4d7c4d
cmp edx, 0x889ce7f8
jne 0x4d772a
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d15c0]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x114]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call eax
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x120]
mov word [ecx], ax
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d7da0]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x120]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x30]
cmp ecx, edx
jle 0x4d753e
mov ecx, edx
jmp 0x4d7544
mov edx, ecx
mov ecx, dword [esp + 0x30]
mov eax, dword [eax]
mov ebx, dword [esp + 0xdc]
cmp eax, ebx
je 0x4d774b
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.00468df0
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
cmp edx, 0xd6631a7c
ja 0x4d766d
cmp edx, 0x9ae5bb3b
jne 0x4d75ce
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d84e0]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
mov dword [esp + 0x6c], ebx
mov edx, dword [edx]
mov dword [esp + 0xc0], edx
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
mov ecx, dword [esp + 0x30]
xor eax, eax
jmp 0x4d7b94
cmp edx, 0xc3230e0b
jne 0x4d7630
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d1080]
cmp eax, ecx
jne 0x4d772a
mov eax, dword [esp + 0x114]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call eax
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x120]
mov word [ecx], ax
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
cmp edx, 0xd6631a7c
jne 0x4d772a
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d1140]
cmp eax, ecx
jne 0x4d772a
mov ecx, dword [esp + 0xdc]
movzx ecx, byte [ecx]
mov edx, dword [esp + 0x120]
mov byte [edx], cl
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
cmp edx, 0xd83fe3b3
jne 0x4d76c1
mov edx, dword [esp + 0x11c]
lea ebx, [0x6d7de0]
cmp edx, ebx
jne 0x4d772a
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
mov dword [esp + 0x64], ebx
mov edx, dword [edx]
mov dword [esp + 0xb8], edx
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
mov ecx, dword [esp + 0x30]
xor eax, eax
jmp 0x4d7b02
cmp edx, 0xf3b50de0
jne 0x4d76f3
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d1200]
cmp eax, ecx
jne 0x4d772a
mov ecx, dword [esp + 0xdc]
movzx ecx, byte [ecx]
mov edx, dword [esp + 0x120]
mov byte [edx], cl
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
cmp edx, 0xfcd60fce
jne 0x4d772a
mov eax, dword [esp + 0x11c]
lea ecx, [0x6d0f00]
cmp eax, ecx
jne 0x4d772a
mov ecx, dword [esp + 0xdc]
movzx ecx, byte [ecx]
test cl, cl
setne cl
mov edx, dword [esp + 0x120]
mov byte [edx], cl
mov ecx, dword [esp + 0x30]
jmp 0x4d774b
xor ecx, ecx
jmp 0x4d774b
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], ecx
add esp, 0x108
ret
test ecx, ecx
jne 0x4d7a71
mov eax, dword [esp + 0x11c]
test eax, eax
je 0x4d77a6
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0x120]
mov dword [esp + 0xe4], ecx
mov edx, dword [esp + 0xe0]
test edx, edx
je 0x4d779e
movzx ebx, byte [edx + 0xf]
nop
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4d7795
or ebx, 0x80
mov ebp, dword [esp + 0xe4]
jmp 0x4d77b3
xor ebx, ebx
xor edx, edx
xor ebp, ebp
jmp 0x4d77b3
mov ecx, dword [esp + 0x120]
xor ebx, ebx
xor edx, edx
xor ebp, ebp
mov esi, ebx
and ebx, 0x1f
nop
cmp ebx, 0x16
je 0x4d781d
cmp ebx, 0x17
je 0x4d77cd
mov ebx, 0xffffffff
jmp 0x4d7887
mov dword [esp + 0x80], esi
mov dword [esp + 0x98], ebp
mov dword [esp + 0x94], edx
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004d80a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x120]
mov ebx, eax
mov esi, dword [esp + 0x80]
mov edx, dword [esp + 0x94]
mov ebp, dword [esp + 0x98]
mov eax, dword [esp + 0x11c]
jmp 0x4d7887
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a0960
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xdc], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x80], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d80a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x120]
mov ebx, eax
mov esi, dword [esp + 0x80]
mov edx, dword [esp + 0xd8]
mov ebp, dword [esp + 0xdc]
mov eax, dword [esp + 0x11c]
test ebx, ebx
jge 0x4d7957
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], ecx
mov eax, dword [esp + 0xe8]
test eax, eax
je 0x4d78b0
lea ecx, [0x7ad404]
jmp 0x4d78b4
xor ecx, ecx
xor eax, eax
mov ecx, dword [ecx + 0x80]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x73d428]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1a
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00451c70
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xa4], ecx
lea edx, [0x6f2340]
mov dword [esp], edx
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [0x9eca70]
test ecx, ecx
jne 0x4d792c
mov ecx, dword [esp + 0xa4]
jmp 0x4d793a
call fcn.00468450
mov ecx, dword [esp + 0xa4]
mov dword [edi], ecx
mov dword [eax], ecx
lea ecx, [0x7aaeb4]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
add esp, 0x108
ret
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], edx
lea eax, [0x6e4500]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.0044e0b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xdc], eax
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.004686fa
mov eax, dword [esp + 0x114]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0xf8], ecx
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
call fcn.00473a30
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4d7a27
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], ecx
add esp, 0x108
ret
lea eax, [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc], eax
call fcn.004d85f0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
add esp, 0x108
ret
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
add esp, 0x108
ret
mov edx, dword [esi + 0x24]
mov dword [esp], ebp
sub ecx, eax
mov dword [esp + 0x7c], ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
add eax, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xb8]
mov dword [edx + ecx*4], eax
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x64]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x30]
mov ecx, edi
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
cmp eax, ebx
jge 0x4d774b
mov dword [esp + 0x44], eax
shl eax, 2
cmp ecx, eax
jae 0x4d7a8e
call fcn.00468520
mov edx, dword [esi + 0x20]
mov dword [esp], ebp
sub ecx, eax
mov dword [esp + 0x7c], ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
add eax, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call edx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2], ax
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x30]
mov ecx, edi
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
cmp eax, ebx
jge 0x4d774b
mov dword [esp + 0x4c], eax
shl eax, 1
cmp ecx, eax
jae 0x4d7b1e
call fcn.00468520
mov ebx, dword [esp + 0x3c]
lea edi, [edx + ebx*8]
mov dword [esp + 0xd4], edi
lea edx, [edx + ebx*8 + 4]
mov dword [esp + 0xd0], edx
mov ebp, dword [ebp + 0x28]
mov dword [esp], esi
sub ecx, eax
mov dword [esp + 0x7c], ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ecx, dword [esp + 0xdc]
add eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call ebp
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
mov dword [edx], eax
mov eax, dword [esp + 0xd4]
mov dword [eax], ecx
mov eax, dword [esp + 0x3c]
inc eax
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x114]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0xdc]
mov ecx, esi
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x118]
cmp eax, ebx
jge 0x4d774b
mov dword [esp + 0x3c], eax
shl eax, 3
cmp ecx, eax
jae 0x4d7baf
call fcn.00468520
mov edx, dword [esi + 0x20]
mov dword [esp], ebp
sub ecx, eax
mov dword [esp + 0x7c], ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
add eax, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call edx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0xc4]
mov word [edx + ecx*2], ax
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x30]
mov ecx, edi
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
cmp eax, ebx
jge 0x4d774b
mov dword [esp + 0x50], eax
shl eax, 1
cmp ecx, eax
jae 0x4d7c69
call fcn.00468520
mov edx, dword [esi + 0x24]
mov dword [esp], ebp
sub ecx, eax
mov dword [esp + 0x7c], ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
add eax, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call edx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x74], eax
movss xmm0, dword [esp + 0x74]
mov eax, dword [esp + 0x38]
lea ecx, [eax + 1]
mov edx, dword [esp + 0xac]
movss dword [edx + eax*4], xmm0
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x30]
mov ebx, eax
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
mov eax, ecx
mov ecx, dword [esp + 0x30]
cmp eax, ebx
jge 0x4d774b
mov dword [esp + 0x38], eax
shl eax, 2
cmp ecx, eax
jae 0x4d7cfa
call fcn.00468520
mov ebx, dword [esp + 0x40]
lea edi, [edx + ebx*8]
mov dword [esp + 0xcc], edi
lea edx, [edx + ebx*8 + 4]
mov dword [esp + 0xc8], edx
mov ebp, dword [ebp + 0x28]
mov dword [esp], esi
sub ecx, eax
mov dword [esp + 0x7c], ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ecx, dword [esp + 0xdc]
add eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call ebp
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc8]
mov dword [edx], eax
mov eax, dword [esp + 0xcc]
mov dword [eax], ecx
mov eax, dword [esp + 0x40]
inc eax
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x114]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0xdc]
mov ecx, esi
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x118]
cmp eax, ebx
jge 0x4d774b
mov dword [esp + 0x40], eax
shl eax, 3
cmp ecx, eax
jae 0x4d7d98
call fcn.00468520
lea edi, [eax + 1]
xchg esi, eax
test al, al
xchg esi, eax
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, ebx
mov byte [edx + eax], bl
xchg esi, ebx
mov eax, edi
cmp eax, ebx
jge 0x4d7e77
movzx esi, byte [eax + ebp]
cmp eax, ecx
jb 0x4d7e52
jmp 0x4d7e7e
mov ecx, ebx
jmp 0x4d774b
call fcn.004684c0
mov edx, dword [esi + 0x24]
mov dword [esp], ebp
sub ecx, eax
mov dword [esp + 0x7c], ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
add eax, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xbc]
mov dword [edx + ecx*4], eax
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x68]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x30]
mov ecx, edi
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
cmp eax, ebx
jge 0x4d774b
mov dword [esp + 0x48], eax
shl eax, 2
cmp ecx, eax
jae 0x4d7e83
call fcn.00468520
mov edx, dword [esi + 0x28]
mov dword [esp], ebp
sub ecx, eax
mov dword [esp + 0x7c], ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
add eax, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], ecx
movsd xmm0, qword [esp + 0x84]
mov eax, dword [esp + 0x34]
lea ecx, [eax + 1]
mov edx, dword [esp + 0xa8]
movsd qword [edx + eax*8], xmm0
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x30]
mov ebx, eax
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0xdc]
mov eax, ecx
mov ecx, dword [esp + 0x30]
cmp eax, ebx
jge 0x4d774b
mov dword [esp + 0x34], eax
shl eax, 3
cmp ecx, eax
jae 0x4d7f13
call fcn.00468520
xchg esi, ebx
mov byte [edx + eax], bl
xchg esi, ebx
inc eax
cmp eax, ebx
jge 0x4d7fd8
movzx esi, byte [eax + ebp]
cmp eax, ecx
jb 0x4d7fc2
jmp 0x4d7fdf
mov ecx, ebx
jmp 0x4d774b
call fcn.004684c0
nop
call fcn.00467050
jmp fcn.004d6ea0