Function at 0x4ce5d0
Capabilities:
Access peb ldr_data
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5169a1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x16d4
call fcn.004f82b0
push ebx
push ebp
push esi
push edi
mov eax, dword [esp + 0x1700]
xor ebx, ebx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x60], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x54], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x58], edx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x48], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x3c], ecx
mov ecx, dword [str.PROCEDURE_FUNCTION]
mov dword [esp + 0x50], edx
mov edx, dword [0x7982b0]
mov dword [esp + 0x4c], eax
mov eax, dword [0x7982b4]
mov dword [esp + 0x74], ecx
mov ecx, dword [0x7982b8]
mov dword [esp + 0x78], edx
mov dx, word [0x7982bc]
mov dword [esp + 0x7c], eax
mov al, byte [0x7982be]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x80], ecx
mov word [esp + 0x84], dx
mov byte [esp + 0x86], al
mov dword [esp + 0x4a8], ebx
mov dword [esp + 0x4ac], ebx
mov dword [esp + 0x4b0], ebx
mov dword [esp + 0x4b4], ebx
mov byte [esp + 0x4b8], bl
mov byte [esp + 0x4b9], bl
mov byte [esp + 0x4ba], bl
lea ecx, [esp + 0x74]
mov dword [esp + 0x16ec], ebx
push ecx
lea ecx, [esp + 0x4ac]
call fcn.004db5a0
mov edx, dword [str.COMPILE_OMIT]
mov eax, dword [0x7982a0]
mov ecx, dword [0x7982a4]
mov dword [esp + 0x64], edx
mov dl, byte [0x7982a8]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov byte [esp + 0x70], dl
mov dword [esp + 0xcd0], ebx
mov dword [esp + 0xcd4], ebx
mov dword [esp + 0xcd8], ebx
mov dword [esp + 0xcdc], ebx
mov byte [esp + 0xce0], bl
mov byte [esp + 0xce1], bl
mov byte [esp + 0xce2], bl
lea eax, [esp + 0x64]
lea ecx, [esp + 0xcd0]
push eax
mov byte [esp + 0x16f0], 1
call fcn.004db5a0
mov ecx, 7
mov esi, str.BOF_EOF_FUNCTION_POINTER_SHARE
lea edi, [esp + 0x88]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov dword [esp + 0x8bc], ebx
mov dword [esp + 0x8c0], ebx
mov dword [esp + 0x8c4], ebx
mov dword [esp + 0x8c8], ebx
mov byte [esp + 0x8cc], bl
mov byte [esp + 0x8cd], bl
mov byte [esp + 0x8ce], bl
lea ecx, [esp + 0x88]
mov byte [esp + 0x16ec], 2
push ecx
lea ecx, [esp + 0x8c0]
call fcn.004db5a0
mov esi, dword [esp + 0x16f4]
mov edx, dword [esp + 0x16f8]
mov ebp, dword [esp + 0x1704]
mov dword [esp + 0x18], esi
lea eax, [esi + edx]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x16fc]
mov byte [esp + 0x1c], 1
and eax, 0x1f
mov byte [esp + 0x1d], bl
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov edx, dword [ebp]
push 0x1f
push esi
mov ecx, ebp
call dword [edx + 0x38]
mov ecx, dword [esp + 0x10]
push esi
mov eax, dword [ecx]
call dword [eax + 0x44]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x20
push eax
mov esi, eax
call fcn.0049e3b0
mov ecx, dword [esp + 0x10]
and eax, 0xff
mov dword [esp + 0x28], eax
cmp dword [ecx + 0xfb0], ebx
je 0x4ce85b
mov edx, dword [ecx]
push eax
call dword [edx]
test al, al
je 0x4ce85b
mov ecx, dword [esp + 0x28]
inc esi
shl ecx, 8
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x10]
push 0x20
push esi
call fcn.0049e3b0
mov ecx, dword [esp + 0x28]
and eax, 0xff
or ecx, eax
mov dword [esp + 0x28], ecx
push esi
lea ecx, [esp + 0x14]
call fcn.0049e140
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
cmp eax, edx
jae 0x4cf26c
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
cmp ecx, 1
jne 0x4ceaa5
mov esi, dword [esp + 0x28]
push esi
call fcn.004f79d4
add esp, 4
test eax, eax
jne 0x4cef12
cmp esi, 0x5f
je 0x4cef12
cmp esi, 0x3a
je 0x4cef12
cmp dword [esp + 0x28], 0x2e
jne 0x4ce960
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx]
xor edi, edi
dec edx
mov dword [esp + 0x34], edi
push edx
call dword [eax + 0x48]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
mov dword [esp + 0x20], ebx
jae 0x4ce929
mov cl, byte [esp + 0x1d]
inc eax
mov byte [esp + 0x1c], cl
mov ecx, dword [esp + 0x28]
cmp ecx, 0x100
mov dword [esp + 0x24], ecx
mov dword [esp + 0x18], eax
jl 0x4ce904
inc eax
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x2c]
xor edx, edx
cmp ecx, 0x100
mov dword [esp + 0x28], ecx
setge dl
add edx, eax
lea ecx, [esp + 0x10]
push edx
call fcn.0049e140
mov eax, dword [esp + 0x18]
jmp 0x4ce943
mov ecx, 0x20
mov byte [esp + 0x1c], bl
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], ecx
mov byte [esp + 0x1d], 1
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x20]
dec eax
push esi
mov edx, dword [ecx]
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], 1
jmp 0x4cef12
lea eax, [esp + 0x2a8]
push 0x200
push eax
lea ecx, [esp + 0x18]
call fcn.004e0340
cmp byte [esp + 0x1708], bl
jne 0x4ce98f
lea ecx, [esp + 0x2a8]
push ecx
call fcn.004cf2f0
add esp, 4
lea edx, [esp + 0x2a8]
lea ecx, [esp + 0xcd0]
push edx
call fcn.004db760
test al, al
je 0x4ce9af
cmp edi, ebx
jne 0x4cea7c
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0x2a8]
push eax
call fcn.004db760
test al, al
je 0x4ce9d5
cmp edi, ebx
je 0x4ce9d5
mov dword [esp + 0x20], 0xf
jmp 0x4cea84
lea ecx, [esp + 0x2a8]
push ecx
mov ecx, dword [esp + 0x50]
call fcn.004db760
test al, al
je 0x4cea67
cmp edi, ebx
je 0x4cea67
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x38]
xor edi, edi
cmp esi, eax
jge 0x4cea3a
push esi
mov ecx, ebp
call fcn.004cff80
cmp al, 0xa
mov byte [esp + 0x5c], al
je 0x4cea3a
movsx edx, al
push edx
call fcn.004f78b1
add esp, 4
test eax, eax
je 0x4cea31
mov eax, dword [esp + 0x5c]
push eax
call fcn.004cf2e0
add esp, 4
mov byte [esp + edi + 0x14e4], al
inc edi
mov eax, dword [esp + 0x38]
inc esi
cmp esi, eax
jl 0x4ce9fc
cmp edi, ebx
mov byte [esp + edi + 0x14e4], bl
je 0x4cea84
lea ecx, [esp + 0x14e4]
push ecx
lea ecx, [esp + 0x4ac]
call fcn.004db760
test al, al
je 0x4cea84
mov dword [esp + 0x20], 0xf
jmp 0x4cea84
mov ecx, dword [esp + 0x40]
lea edx, [esp + 0x2a8]
push edx
call fcn.004db760
test al, al
je 0x4cea84
mov dword [esp + 0x20], 9
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx]
dec edx
push edx
call dword [eax + 0x48]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x20], ebx
jmp 0x4cef12
cmp ecx, 8
jne 0x4cecab
mov esi, dword [esp + 0x28]
cmp esi, 0x3a
jne 0x4ceb60
cmp eax, edx
jae 0x4ceaf1
mov cl, byte [esp + 0x1d]
mov dword [esp + 0x24], esi
mov esi, dword [esp + 0x2c]
inc eax
xor edx, edx
cmp esi, 0x100
setge dl
add edx, eax
mov byte [esp + 0x1c], cl
push edx
lea ecx, [esp + 0x14]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], esi
call fcn.0049e140
jmp 0x4ceb0b
mov eax, 0x20
mov byte [esp + 0x1c], bl
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov byte [esp + 0x1d], 1
lea eax, [esp + 0x10e4]
push 0x200
push eax
lea ecx, [esp + 0x18]
call fcn.004e0340
cmp byte [esp + 0x1708], bl
jne 0x4ceb3a
lea ecx, [esp + 0x10e4]
push ecx
call fcn.004cf2f0
add esp, 4
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x10e4]
push edx
call fcn.004db760
test al, al
je 0x4cef12
mov dword [esp + 0x20], 0xe
jmp 0x4cef12
push esi
call fcn.004f79d4
add esp, 4
test eax, eax
jne 0x4cef12
cmp esi, 0x5f
je 0x4cef12
cmp esi, 0x3a
je 0x4cef12
lea eax, [esp + 0xa8]
push 0x200
push eax
lea ecx, [esp + 0x18]
call fcn.004e0340
cmp byte [esp + 0x1708], bl
jne 0x4cebb2
lea ecx, [esp + 0xa8]
push ecx
call fcn.004cf2f0
add esp, 4
mov ecx, dword [esp + 0x60]
lea edx, [esp + 0xa8]
push edx
call fcn.004db760
test al, al
je 0x4cebd1
mov eax, 8
jmp 0x4ceefa
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0xa8]
push eax
call fcn.004db760
test al, al
je 0x4cebf0
mov eax, 9
jmp 0x4ceefa
lea ecx, [esp + 0xa8]
push ecx
mov ecx, dword [esp + 0x58]
call fcn.004db760
test al, al
je 0x4cec0f
mov eax, 0xa
jmp 0x4ceefa
mov ecx, dword [esp + 0x58]
lea edx, [esp + 0xa8]
push edx
call fcn.004db760
test al, al
je 0x4cec2e
mov eax, 0xb
jmp 0x4ceefa
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0xa8]
push eax
call fcn.004db760
test al, al
je 0x4cec4d
mov eax, 0xc
jmp 0x4ceefa
lea ecx, [esp + 0xa8]
push ecx
mov ecx, dword [esp + 0x48]
call fcn.004db760
test al, al
je 0x4cec6c
mov eax, 0xd
jmp 0x4ceefa
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0xa8]
push edx
call fcn.004db760
test al, al
je 0x4cec8b
mov eax, 0xe
jmp 0x4ceefa
lea eax, [esp + 0xa8]
lea ecx, [esp + 0x8bc]
push eax
call fcn.004db760
neg al
sbb eax, eax
and eax, 0x10
jmp 0x4ceefa
cmp ecx, 3
jne 0x4cedb6
cmp dword [esp + 0x28], 0x27
jne 0x4ced1b
mov ecx, dword [esp + 0x10]
dec eax
push 3
push eax
mov edx, dword [ecx]
call dword [edx + 0x48]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
cmp esi, eax
mov dword [esp + 0x20], ebx
jae 0x4ced97
mov al, byte [esp + 0x1d]
inc esi
mov byte [esp + 0x1c], al
mov eax, dword [esp + 0x28]
cmp eax, 0x100
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], esi
jl 0x4cecfd
inc esi
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x2c]
xor ecx, ecx
cmp eax, 0x100
mov dword [esp + 0x28], eax
setge cl
add ecx, esi
push ecx
lea ecx, [esp + 0x14]
call fcn.0049e140
cmp dword [esp + 0x2c], 0x27
jne 0x4cef12
lea ecx, [esp + 0x10]
call fcn.0049e250
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
cmp esi, eax
mov dword [esp + 0x20], ebx
jae 0x4ced97
mov eax, dword [esp + 0x28]
mov cl, byte [esp + 0x1d]
inc esi
cmp eax, 0x100
mov byte [esp + 0x1c], cl
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], esi
jl 0x4ced74
inc esi
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x2c]
xor edx, edx
cmp eax, 0x100
lea ecx, [esp + 0x10]
setge dl
add edx, esi
mov dword [esp + 0x28], eax
push edx
call fcn.0049e140
jmp 0x4cef12
mov eax, 0x20
mov byte [esp + 0x1c], bl
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov byte [esp + 0x1d], 1
jmp 0x4cf069
cmp ecx, 7
jne 0x4cedf2
mov ecx, dword [esp + 0x28]
cmp ecx, 0x28
jne 0x4cedcd
inc dword [esp + 0x34]
jmp 0x4cef12
cmp ecx, 0x29
jne 0x4cef12
cmp dword [esp + 0x34], ebx
jne 0x4cede9
mov ecx, dword [esp + 0x10]
push 7
mov edx, dword [ecx]
jmp 0x4cef09
dec dword [esp + 0x34]
jmp 0x4cef12
cmp ecx, 0xe
jne 0x4cee1b
mov eax, dword [esp + 0x28]
push eax
call fcn.004f79d4
add esp, 4
test eax, eax
jne 0x4cef12
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov edx, dword [ecx]
jmp 0x4cef04
cmp ecx, 5
jne 0x4cef12
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004f792f
add esp, 4
test eax, eax
jne 0x4cef12
cmp byte [esp + 0x1708], bl
jne 0x4cee5e
mov edx, dword [esp + 0x28]
push edx
push str.ABCDEFabcdef
call fcn.004f8ae0
add esp, 8
test eax, eax
jne 0x4cef12
jmp 0x4cee78
mov eax, dword [esp + 0x28]
push eax
push str.ABCDEF
call fcn.004f8ae0
add esp, 8
test eax, eax
jne 0x4cef12
mov eax, dword [esp + 0x28]
cmp eax, 0x2e
je 0x4cef12
mov cl, byte [esp + 0x1708]
push eax
cmp cl, bl
jne 0x4ceea4
push str.BOHboh
call fcn.004f8ae0
add esp, 8
test eax, eax
jne 0x4cef12
jmp 0x4ceeb5
push 0x798258
call fcn.004f8ae0
add esp, 8
test eax, eax
jne 0x4cef12
lea ecx, [esp + 0x12e4]
push 0x200
push ecx
lea ecx, [esp + 0x18]
xor esi, esi
call fcn.004e0340
mov al, byte [esp + 0x12e4]
cmp al, bl
je 0x4ceef5
lea ecx, [esp + 0x12e4]
cmp al, 0x2e
jne 0x4ceee4
inc esi
mov al, byte [ecx + 1]
inc ecx
cmp al, bl
jne 0x4ceedf
cmp esi, ebx
mov eax, 6
jg 0x4ceefa
mov eax, 5
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], eax
mov edx, dword [ecx]
push eax
mov eax, dword [esp + 0x1c]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], ebx
cmp byte [esp + 0x1c], bl
je 0x4cf05f
mov esi, dword [esp + 0x28]
xor edi, edi
push esi
mov dword [esp + 0x34], edi
call fcn.004f78b1
add esp, 4
test eax, eax
jne 0x4cef38
cmp esi, 0x5f
jne 0x4cef5e
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
mov edi, 1
push eax
mov dword [esp + 0x38], edi
call dword [edx + 0x48]
mov dword [esp + 0x20], edi
jmp 0x4cf1f3
mov eax, dword [esp + 0x28]
mov ecx, 0x20
cmp eax, ecx
je 0x4cef75
cmp eax, 9
jb 0x4cef92
cmp eax, 0xd
ja 0x4cef92
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], ebx
jmp 0x4cf1f3
cmp eax, 0x21
je 0x4cf046
cmp eax, 0x2a
je 0x4cf046
cmp eax, 0x3f
jne 0x4cf025
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
cmp eax, edx
mov dword [esp + 0x20], 9
jae 0x4ceff7
mov cl, byte [esp + 0x1d]
inc eax
mov byte [esp + 0x1c], cl
mov ecx, dword [esp + 0x2c]
xor edx, edx
cmp ecx, 0x100
setge dl
add edx, eax
mov dword [esp + 0x28], ecx
push edx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 0x3f
mov dword [esp + 0x1c], eax
call fcn.0049e140
mov eax, dword [esp + 0x18]
jmp 0x4cf00c
mov byte [esp + 0x1c], bl
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], ecx
mov byte [esp + 0x1d], 1
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x20]
dec eax
push esi
mov edx, dword [ecx]
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], ebx
jmp 0x4cf1f3
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx]
dec edx
push edx
call dword [eax + 0x48]
mov dword [esp + 0x20], 0xf
jmp 0x4cf1f3
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx]
dec edx
push edx
call dword [eax + 0x48]
jmp 0x4cf1eb
cmp byte [esp + 0x1d], bl
je 0x4cf082
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
dec esi
push edx
mov eax, dword [ecx]
push esi
call dword [eax + 0x48]
mov dword [esp + 0x20], ebx
jmp 0x4cf1f3
cmp dword [esp + 0x20], ebx
jne 0x4cf1f3
mov eax, dword [esp + 0x28]
push eax
call fcn.004f78b1
add esp, 4
test eax, eax
je 0x4cf0be
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], 8
jmp 0x4cf1f3
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004f792f
add esp, 4
test eax, eax
je 0x4cf0f0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], 5
jmp 0x4cf1f3
mov eax, dword [esp + 0x28]
cmp eax, 0x21
je 0x4cf1d7
cmp eax, 0x7c
je 0x4cf1d7
cmp eax, 0x27
jne 0x4cf160
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x10]
cmp eax, 0x27
jne 0x4cf13a
call fcn.0049e250
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], ebx
jmp 0x4cf1f3
call fcn.0049e250
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], 3
jmp 0x4cf1f3
cmp eax, 0x40
jne 0x4cf1f3
mov al, byte [esp + 0x1708]
mov ecx, dword [esp + 0x2c]
cmp al, bl
push ecx
jne 0x4cf1a8
push str.DEKNPSTdeknpst
call fcn.004f8ae0
add esp, 8
test eax, eax
je 0x4cf1f3
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], 7
jmp 0x4cf1f3
push str.DEKNPST
call fcn.004f8ae0
add esp, 8
test eax, eax
je 0x4cf1f3
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], 7
jmp 0x4cf1f3
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx]
dec eax
push eax
call dword [edx + 0x48]
mov dword [esp + 0x20], 2
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
jae 0x4cf242
mov cl, byte [esp + 0x1d]
inc eax
mov byte [esp + 0x1c], cl
mov ecx, dword [esp + 0x28]
cmp ecx, 0x100
mov dword [esp + 0x24], ecx
mov dword [esp + 0x18], eax
jl 0x4cf221
inc eax
mov dword [esp + 0x18], eax
mov esi, dword [esp + 0x2c]
xor edx, edx
cmp esi, 0x100
lea ecx, [esp + 0x10]
setge dl
add edx, eax
mov dword [esp + 0x28], esi
push edx
call fcn.0049e140
jmp 0x4cf25c
mov eax, 0x20
mov byte [esp + 0x1c], bl
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov byte [esp + 0x1d], 1
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
cmp eax, edx
jb 0x4ce879
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x20]
dec eax
push esi
mov edx, dword [ecx]
push eax
call dword [edx + 0x48]
lea ecx, [esp + 0x8bc]
mov byte [esp + 0x16ec], 1
call fcn.004db560
lea ecx, [esp + 0xcd0]
mov byte [esp + 0x16ec], bl
call fcn.004db560
lea ecx, [esp + 0x4a8]
mov dword [esp + 0x16ec], 0xffffffff
call fcn.004db560
mov ecx, dword [esp + 0x16e4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x16e0
ret