Function at 0x4da5e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x4db96d
sub esp, 0xa8
mov eax, dword [esp + 0xac]
mov dword [eax + 0xc], 0
lea ecx, [0x6d8ba0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.00409500
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x4db1e7
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x4dace5
mov ecx, dword [ecx + 8]
cmp ecx, 0x6e78e923
ja 0x4da9a2
cmp ecx, 0x43cfbb1f
ja 0x4da7ec
cmp ecx, 0x338a7ec0
jbe 0x4da737
cmp ecx, 0x4072c7d5
jne 0x4da6a4
mov ecx, dword [esp + 0xb4]
lea edx, [0x6b6ea0]
cmp ecx, edx
jne 0x4dacec
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4db7d9
cmp ecx, 0x43cfbb1f
jne 0x4da72b
mov ecx, dword [esp + 0xb4]
lea edx, [0x6b4c20]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d9d40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044f620
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4da721
mov dword [edi], eax
jmp 0x4db346
call fcn.00463350
jmp 0x4db346
mov ecx, dword [esp + 0xb4]
jmp 0x4dacec
cmp ecx, 0x2e74d42b
jne 0x4da78f
mov ecx, dword [esp + 0xb4]
lea edx, [0x6ba5e0]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004d8750
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4db346
cmp ecx, 0x338a7ec0
jne 0x4da7e0
mov ecx, dword [esp + 0xb4]
lea edx, [0x6bd5a0]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d8d20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4db346
mov ecx, dword [esp + 0xb4]
jmp 0x4dacec
cmp ecx, 0x510ad14d
jbe 0x4da8d6
cmp ecx, 0x62de383d
je 0x4da88d
cmp ecx, 0x6d448d5d
jne 0x4da830
mov ecx, dword [esp + 0xb4]
lea edx, [0x6b6ee0]
cmp ecx, edx
jne 0x4dacec
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4db649
cmp ecx, 0x6e78e923
jne 0x4da881
mov ecx, dword [esp + 0xb4]
lea edx, [0x6bd520]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d8d20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4db346
mov ecx, dword [esp + 0xb4]
jmp 0x4dacec
mov ecx, dword [esp + 0xb4]
lea edx, [0x6ba5a0]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d8750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4db346
cmp ecx, 0x49163278
jne 0x4da92e
mov ecx, dword [esp + 0xb4]
lea edx, [0x6bd5e0]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004d8d20
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4db346
cmp ecx, 0x510ad14d
jne 0x4da996
mov ecx, dword [esp + 0xb4]
lea edx, [0x6b4de0]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004d9b40
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
cvtsd2ss xmm0, xmm1
movss dword [eax + 4], xmm0
jmp 0x4db346
mov ecx, dword [esp + 0xb4]
jmp 0x4dacec
cmp ecx, 0xba585d67
ja 0x4dab26
cmp ecx, 0x889ce7f8
ja 0x4daa78
cmp ecx, 0x7afcd172
jne 0x4daa1a
mov ecx, dword [esp + 0xb4]
lea edx, [0x6b4da0]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004d9b40
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
jmp 0x4db346
cmp ecx, 0x889ce7f8
jne 0x4daa6c
mov ecx, dword [esp + 0xb4]
lea edx, [0x6bd560]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004d8d20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4db346
mov ecx, dword [esp + 0xb4]
jmp 0x4dacec
cmp ecx, 0x8f96facd
jne 0x4daac9
mov ecx, dword [esp + 0xb4]
lea edx, [0x6bd660]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d8d20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4db346
cmp ecx, 0xba585d67
jne 0x4dab1a
mov ecx, dword [esp + 0xb4]
lea edx, [0x6ba520]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004d8750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4db346
mov ecx, dword [esp + 0xb4]
jmp 0x4dacec
cmp ecx, 0xd6631a7c
ja 0x4dabe1
cmp ecx, 0xc3230e0b
jne 0x4dab84
mov ecx, dword [esp + 0xb4]
lea edx, [0x6ba560]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004d8750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4db346
cmp ecx, 0xd6631a7c
jne 0x4dabd5
mov ecx, dword [esp + 0xb4]
lea edx, [0x6ba620]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004d8750
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4db346
mov ecx, dword [esp + 0xb4]
jmp 0x4dacec
cmp ecx, 0xe47f76c1
jne 0x4dac45
mov ecx, dword [esp + 0xb4]
lea edx, [0x6bcb60]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d9d40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4dac3b
mov dword [edi], eax
jmp 0x4db346
call fcn.00463350
jmp 0x4db346
cmp ecx, 0xf3b50de0
jne 0x4dac96
mov ecx, dword [esp + 0xb4]
lea edx, [0x6bd620]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004d8d20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4db346
cmp ecx, 0xfcd60fce
jne 0x4dacdc
mov ecx, dword [esp + 0xb4]
lea edx, [0x6b4d20]
cmp ecx, edx
jne 0x4dacec
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d7e60
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4db346
mov ecx, dword [esp + 0xb4]
jmp 0x4dacec
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x4dad75
nop
movzx ebx, byte [0x98a3a0]
test bl, bl
je 0x4dad36
mov dword [0x98a3a4], ecx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4dad22
mov eax, dword [esp + 0xb8]
mov dword [0x98a3a8], eax
jmp 0x4dad3d
lea edi, [0x98a3a8]
mov eax, dword [esp + 0xb8]
call fcn.00463350
jmp 0x4dad3d
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x4dad6d
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4dad7b
or edx, 0x80
jmp 0x4dad7b
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4dad7b
xor edx, edx
xor ecx, ecx
xor eax, eax
nop
mov ebx, edx
and edx, 0x1f
cmp edx, 0x16
jne 0x4db552
mov dword [esp + 0x58], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004be6e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x90], edx
nop
mov ebx, ecx
and ecx, 0x1f
cmp ecx, 0xc
ja 0x4daf35
cmp ecx, 1
je 0x4daeeb
lea ebp, [ecx - 2]
cmp ebp, 4
ja 0x4dae63
test ebx, 0x200
jne 0x4dadf4
lea ecx, [0x79fb0c]
jmp 0x4dae12
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d8750
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c0450
jmp 0x4db346
cmp ecx, 7
jb 0x4db454
test ebx, 0x200
jne 0x4dae7c
lea ecx, [0x79fb0c]
jmp 0x4dae9a
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d8d20
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c0540
jmp 0x4db346
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d7e60
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.004bffc0
jmp 0x4db346
cmp ecx, 0x10
ja 0x4db0ac
cmp ecx, 0xe
jbe 0x4dafc2
test ebx, 0x200
jne 0x4daf53
lea ecx, [0x79fb0c]
jmp 0x4daf71
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d9b40
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004c02c0
jmp 0x4db346
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d79e0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d7df0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d9270
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x38]
test edx, 0x200
jne 0x4db01d
lea ebx, [0x79fb0c]
mov ebp, dword [esp + 0x94]
jmp 0x4db047
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov ebp, ecx
mov eax, dword [ebx + 0x18]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004d9890
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004c0390
jmp 0x4db346
cmp ecx, 0x17
je 0x4db10b
cmp ecx, 0x18
jne 0x4db454
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d9d40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004c0640
jmp 0x4db346
test ebx, 0x200
jne 0x4db11b
lea ecx, [0x79fb0c]
jmp 0x4db139
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, edx
mov dword [esp + 0x64], eax
mov dword [esp + 0x2c], ecx
mov edx, dword [ecx + 0x28]
mov dword [esp], eax
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4db356
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004d9d40
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004c13a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004bfeb0
xor eax, eax
jmp 0x4db2fa
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
lea ecx, [0x79f1b4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test edx, edx
jne 0x4db22a
add esp, 0xa8
ret
mov ebp, dword [0x989cc4]
cmp dword [0x989cc0], eax
je 0x4db28b
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], ebx
lea eax, [0x6daba0]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x6daba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437060
mov dword [esp + 0x50], edx
mov dword [esp + 0x88], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00403790
movzx eax, byte [esp + 0xc]
test al, al
je 0x4db2c0
mov edx, dword [0x989ce8]
mov ebx, dword [0x989cec]
jmp 0x4db238
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x88]
jmp 0x4db238
mov ebp, dword [esp + 0x70]
movzx esi, byte [ebp + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
call fcn.004c0540
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jge 0x4db346
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004bede0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jb 0x4db2d0
jmp 0x4db34d
add esp, 0xa8
ret
mov eax, ebx
mov ecx, ebp
call fcn.004633d0
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4db42f
lea eax, [0x79fb0c]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x71e0e4]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044f210
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], ecx
lea edx, [0x6dab40]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov eax, dword [0x9b1930]
test eax, eax
jne 0x4db424
mov eax, dword [esp + 0x78]
mov dword [edi], eax
lea eax, [0x79d538]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x6daba0]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x6daba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437060
mov eax, dword [esp + 0x78]
call fcn.00463350
jmp 0x4db3e1
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4db36f
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4db52d
lea eax, [0x79fb0c]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x71e0e4]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044f210
mov eax, dword [esp + 0x14]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
lea edx, [0x6dab40]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x3c]
mov dword [edi + 4], eax
mov eax, dword [0x9b1930]
test eax, eax
jne 0x4db522
mov eax, dword [esp + 0x74]
mov dword [edi], eax
lea eax, [0x79d538]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x6daba0]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x6daba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437060
mov eax, dword [esp + 0x74]
call fcn.00463350
jmp 0x4db4df
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4db46d
test ebx, ebx
je 0x4db62c
test ebx, 0x200
jne 0x4db62c
lea eax, [0x79fb0c]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x720363]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044f210
mov eax, dword [esp + 0x14]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
lea edx, [0x6dab40]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0x9b1930]
test eax, eax
jne 0x4db621
mov eax, dword [esp + 0x7c]
mov dword [edi], eax
lea eax, [0x79d538]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x6daba0]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x6daba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437060
mov eax, dword [esp + 0x7c]
call fcn.00463350
jmp 0x4db5de
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4db56c
cmp ecx, 8
jge 0x4db6ee
lea edx, [0x7189b7]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4db667
inc ecx
jmp 0x4db690
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045d690
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x7189b7]
cmp eax, ebx
jne 0x4db649
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d79e0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d7df0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d9270
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40
call fcn.004d9890
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
jmp 0x4db346
lea ecx, [esp + 0x5c]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f9a0
mov dword [esp], 0
lea eax, [0x71a2c7]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x717a06]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x71845e]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044f350
mov eax, dword [esp + 0x24]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ecx
lea edx, [0x6dab40]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x48]
mov dword [edi + 4], eax
mov eax, dword [0x9b1930]
test eax, eax
jne 0x4db7cb
mov eax, dword [esp + 0x80]
mov dword [edi], eax
lea eax, [0x79d538]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x6daba0]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x6daba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437060
mov eax, dword [esp + 0x80]
call fcn.00463350
jmp 0x4db788
cmp ecx, 8
jge 0x4db882
lea edx, [0x7189b7]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4db7f7
inc ecx
jmp 0x4db820
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045d690
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x7189b7]
cmp eax, ebx
jne 0x4db7d9
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d79e0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d7df0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004d9270
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x20
call fcn.004d9890
movsd xmm0, qword [esp + 0x10]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
jmp 0x4db346
lea ecx, [esp + 0x60]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f9a0
mov dword [esp], 0
lea eax, [0x71a2c7]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x717a06]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x718457]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044f350
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
lea edx, [0x6dab40]
mov dword [esp], edx
call fcn.0040b7f0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x4c]
mov dword [edi + 4], eax
mov eax, dword [0x9b1930]
test eax, eax
jne 0x4db95f
mov eax, dword [esp + 0x84]
mov dword [edi], eax
lea eax, [0x79d538]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x6daba0]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x6daba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437060
mov eax, dword [esp + 0x84]
call fcn.00463350
jmp 0x4db91c
call fcn.00461f40
jmp fcn.004da5e0