Function at 0x4ccda0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6c4e70]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x490]
cmp eax, dword [ecx + 8]
jbe 0x4ce2f8
sub esp, 0x510
lea edi, [esp + 0x51c]
xor eax, eax
call fcn.004610eb
lea edi, [esp + 0x3f0]
call fcn.004610df
mov ecx, dword [esp + 0x514]
mov dword [esp + 0x424], ecx
mov edx, dword [esp + 0x518]
mov dword [esp + 0x428], edx
lea edi, [esp + 0x15c]
call fcn.004610e9
lea edi, [esp + 0x4bc]
call fcn.004610db
lea ecx, [esp + 0x4bc]
mov dword [esp + 0x168], ecx
call fcn.0044e280
mov ecx, dword [esp]
mov dword [esp + 0x164], ecx
mov dword [esp + 0x150], 0
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
mov eax, 1
lea ecx, [esp + 0x3f0]
mov edx, 1
xor ebx, ebx
lea ebp, [esp + 0x3c]
xor esi, esi
xor edi, edi
xor eax, eax
mov dword [esp + 0xfc], eax
mov eax, 1
jmp 0x4ccea3
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xf8]
mov edx, edi
mov ebx, dword [esp + 0x80]
mov edi, ebp
mov dword [esp + 0xfc], esi
mov ebp, dword [esp + 0x13c]
mov esi, dword [esp + 0xf4]
test eax, eax
je 0x4ccf22
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x118], ebp
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x5c], edi
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x11c], esi
call fcn.0040c790
mov eax, dword [esp]
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0x13c]
mov edx, ecx
xor ebx, ebx
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0xa0]
xor ebp, ebp
mov dword [esp + 0x54], ebp
mov esi, dword [esp + 0x118]
mov dword [esp + 0xf8], esi
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xfc]
jmp 0x4cd821
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x158]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409600
mov eax, dword [esp + 0xc]
mov dword [esp + 0x148], 0
mov dword [esp + 0x14c], 0
lea ecx, [0x4ce310]
mov dword [esp + 0x148], ecx
lea ecx, [esp + 0x150]
mov dword [esp + 0x14c], ecx
lea ecx, [0x55b060]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x148]
mov dword [esp + 8], eax
call fcn.00466ea0
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x158]
xor edx, edx
xor ebx, ebx
jmp 0x4ccfba
mov ecx, ebx
mov eax, edx
mov ebx, ebp
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x154]
cmp edx, ebp
jge 0x4cd2b8
jae 0x4cd7e6
mov dword [esp + 0x74], edx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0xec], eax
mov dword [esp + 0x48], ebx
mov ebp, dword [esp + 0x150]
mov esi, edx
shl edx, 6
lea edx, [edx + esi*4]
mov dword [esp + 0xa0], edx
add ebp, edx
lea edi, [esp + 0x324]
mov esi, ebp
call fcn.00461556
mov ecx, dword [esp + 0x324]
mov dword [esp + 0x100], ecx
mov ebp, dword [esp + 0x328]
mov dword [esp + 0x60], ebp
mov esi, dword [esp + 0x74]
mov edi, 1
jmp 0x4cd73b
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
mov eax, ebx
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x74]
mov edi, edx
cmp edi, 1
jne 0x4cd127
lea ecx, [ebx + 1]
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jb 0x4cd066
mov edx, dword [esp + 0xec]
jmp 0x4cd0a6
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5783a0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x48], ecx
mov ebp, dword [0x6c4f80]
mov esi, ecx
shl ecx, 6
lea ecx, [ecx + esi*4]
lea edi, [edx + ecx - 0x44]
test ebp, ebp
je 0x4cd112
mov dword [esp + 0x134], edx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x13c], edi
lea eax, [0x5783a0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x324]
mov dword [esp + 8], eax
call fcn.00410740
mov eax, dword [esp + 0x9c]
mov edx, dword [esp + 0x134]
mov ebx, dword [esp + 0x94]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x13c]
lea esi, [esp + 0x324]
call fcn.00461556
mov ebp, dword [esp + 0x48]
jmp 0x4ccfad
mov edx, dword [esp + 0x158]
cmp edx, eax
jb 0x4cd7d8
cmp esi, eax
ja 0x4cd7cf
sub edx, esi
neg edx
sar edx, 0x1f
mov ecx, dword [esp + 0xa0]
and ecx, edx
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 0x150]
mov edx, edi
lea edi, [esp + 0x214]
mov esi, eax
xor eax, eax
call fcn.004610df
mov ecx, dword [esp + 0xa0]
lea edi, [ecx + ebp]
cmp edx, 1
jle 0x4cd198
mov eax, dword [ebp + ecx + 0x70]
cmp dword [edi + 0x2c], eax
jne 0x4cd198
movzx eax, byte [ebp + ecx + 0x24]
lea ebp, [ebp + ecx + 0x68]
cmp byte [ebp], al
jne 0x4cd198
xor eax, eax
jmp 0x4cd1bc
test edx, edx
jbe 0x4cd7c6
mov eax, edi
lea edi, [esp + 0x214]
mov esi, eax
call fcn.00461556
mov esi, dword [esp + 0x9c]
mov eax, 1
lea edi, [esp + 0x3ac]
lea esi, [esp + 0x214]
call fcn.00461556
test al, al
je 0x4cd29b
lea ecx, [ebx + 1]
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jb 0x4cd1ed
mov eax, dword [esp + 0xec]
mov edx, ebx
jmp 0x4cd222
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5783a0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [0x6c4f80]
mov ebp, ecx
shl ecx, 6
lea ecx, [ecx + ebp*4]
lea edi, [eax + ecx - 0x44]
test ebx, ebx
je 0x4cd28d
mov dword [esp + 0x130], eax
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x90], edx
mov dword [esp + 0x13c], edi
lea eax, [0x5783a0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x3ac]
mov dword [esp + 8], eax
call fcn.00410740
mov eax, dword [esp + 0x130]
mov edx, dword [esp + 0x90]
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0x13c]
lea esi, [esp + 0x3ac]
call fcn.00461556
jmp 0x4cd2a8
mov edx, dword [esp + 0x4c]
mov ebp, ebx
mov eax, dword [esp + 0xec]
mov ebx, edx
mov edx, eax
mov eax, dword [esp + 0x9c]
jmp 0x4ccfad
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], ebx
mov dword [esp + 0x158], ecx
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00409600
mov eax, dword [esp + 0xc]
lea ecx, [0x5c07f8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00467000
mov eax, dword [esp + 0x154]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x518]
mov edx, dword [esp + 0x514]
xor ebx, ebx
jmp 0x4cd333
mov dword [ebx + edx + 0x40], ecx
mov ebp, dword [esp + 0x70]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x518]
mov edx, dword [esp + 0x514]
cmp ebx, eax
jge 0x4cd3e5
mov ebp, dword [esp + 0x154]
cmp ebx, ebp
jae 0x4cd70e
mov dword [esp + 0x70], ebx
mov eax, ebx
shl ebx, 6
lea ebx, [ebx + eax*4]
mov dword [esp + 0x9c], ebx
mov ebp, dword [esp + 0x150]
mov dword [esp + 0x13c], ebp
mov esi, dword [ebp + ebx + 0x28]
mov edi, dword [ebp + ebx + 0x2c]
mov eax, dword [ebp + ebx + 0x30]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.004cc830
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004c8310
mov eax, dword [0x6c4f80]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4cd3c4
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x13c]
jmp 0x4cd313
call fcn.00460f00
mov dword [edi], ecx
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x13c]
mov ebp, dword [ebx + edx + 0x40]
mov dword [edi + 4], ebp
jmp 0x4cd313
mov eax, dword [esp + 0x154]
lea ecx, [0x562720]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040c810
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x114], ecx
lea edx, [0x562720]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040c810
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x110], ecx
mov edx, dword [esp + 0x154]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x114]
xor ebp, ebp
jmp 0x4cd483
mov eax, dword [esp + 0x138]
add eax, 0x44
mov ecx, dword [esp + 0x6c]
lea ebp, [ecx + 1]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x114]
mov ecx, dword [esp + 0x110]
cmp ebp, edx
jge 0x4cd6ae
lea edi, [esp + 0x29c]
mov esi, eax
call fcn.00461556
mov ecx, dword [esp + 0x154]
cmp ebp, ecx
jae 0x4cd707
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x29c]
mov ecx, dword [esp + 0x2a0]
mov edx, ebp
shl ebp, 6
lea ebp, [ebp + edx*4]
mov dword [esp + 0x9c], ebp
mov esi, dword [esp + 0x150]
mov dword [esp + 0x13c], esi
lea edi, [0x562720]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0040fc40
mov eax, dword [esp + 0x10]
test byte [eax], al
mov ecx, dword [0x6c4f80]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x13c]
add ebx, edx
test ecx, ecx
je 0x4cd525
call fcn.00460f00
mov dword [edi], ebx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov dword [eax], ebx
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x2a8]
mov ebx, dword [esp + 0x2ac]
lea edi, [esp + 0xc4]
xor eax, eax
call fcn.004610e8
lea ecx, [esp + 0xc4]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004ce5e0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
lea ebx, [0x562720]
mov dword [esp], ebx
mov ebp, dword [esp + 0x110]
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.0040f8e0
movzx ecx, byte [esp + 0x14]
test cl, cl
jne 0x4cd45d
mov ecx, dword [esp + 0x2a4]
mov dword [esp + 0x108], ecx
mov edx, dword [esp + 0x2a8]
mov ebx, dword [esp + 0x2ac]
lea edi, [esp + 0xa4]
xor eax, eax
call fcn.004610e8
lea ecx, [esp + 0xa4]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
mov ecx, dword [esp + 0x108]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004ce5e0
mov ecx, dword [esp + 0x154]
mov eax, dword [esp + 0x6c]
cmp eax, ecx
jae 0x4cd702
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x150]
mov dword [esp + 0x13c], edx
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d240
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea edx, [0x562720]
mov dword [esp], edx
mov ebx, dword [esp + 0x110]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0040fc40
mov eax, dword [esp + 0x10]
test byte [eax], al
mov ecx, dword [0x6c4f80]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x13c]
add edx, ebx
test ecx, ecx
je 0x4cd6a7
call fcn.00460f00
mov dword [edi], edx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov dword [eax], edx
jmp 0x4cd45d
lea edi, [esp + 0x51c]
xor eax, eax
call fcn.004610eb
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x154]
mov ebp, dword [esp + 0x158]
mov dword [esp + 0x51c], ecx
mov dword [esp + 0x520], edx
mov dword [esp + 0x524], ebp
mov dword [esp + 0x528], ebx
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x52c], ecx
add esp, 0x510
ret
call fcn.00460f60
mov eax, ebp
call fcn.00460f60
mov eax, ebx
mov ecx, ebp
call fcn.00460f60
mov eax, dword [esp + 0x98]
lea edi, [eax + 1]
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0x100]
mov esi, dword [esp + 0x74]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x48]
lea eax, [edi + esi]
mov dword [esp + 0x9c], eax
mov edx, dword [esp + 0x154]
cmp edx, eax
jle 0x4cd049
jbe 0x4cd7df
mov edx, dword [esp + 0x150]
shl eax, 6
mov ebx, dword [esp + 0x9c]
lea eax, [eax + ebx*4]
add eax, edx
mov edx, edi
lea edi, [esp + 0x258]
mov esi, eax
call fcn.00461556
mov ecx, dword [esp + 0x25c]
cmp ecx, ebp
jne 0x4cd03d
mov dword [esp + 0x98], edx
mov eax, dword [esp + 0x258]
mov dword [esp], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00403360
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4cd717
jmp 0x4cd02f
xor eax, eax
mov ecx, eax
call fcn.00460f60
mov ecx, eax
mov eax, esi
call fcn.00460fc0
mov ecx, eax
call fcn.00460fa0
mov ecx, edx
call fcn.00460f60
mov eax, edx
mov ecx, ebp
call fcn.00460f60
mov esi, eax
mov eax, dword [esp + 0x138]
add eax, 0x44
mov edi, eax
mov eax, dword [esp + 0xa0]
inc eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0xf8], ebp
mov ebx, eax
mov ebp, esi
mov esi, ecx
mov ecx, edi
mov edi, edx
mov edx, dword [esp + 0x13c]
mov eax, dword [esp + 0x7c]
cmp ebx, eax
jge 0x4cce78
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x12c], esi
mov dword [esp + 0x58], edi
mov dword [esp + 0x138], ecx
lea edi, [esp + 0x368]
mov esi, ecx
call fcn.00461556
lea eax, [0x562360]
mov dword [esp], eax
lea ecx, [esp + 0x15c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x39c]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4cd8ac
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xf8]
jmp 0x4cd7ef
lea eax, [0x562360]
mov dword [esp], eax
lea ecx, [esp + 0x15c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x39c]
mov dword [esp + 8], edx
call fcn.0040d0c0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x12c]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0x54]
jmp 0x4cd927
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xf8]
jmp 0x4cd7ef
mov edi, dword [esp + 0x78]
inc edi
mov esi, edx
mov edx, ecx
mov ecx, eax
mov eax, edi
mov dword [esp + 0xf8], ebp
mov dword [esp + 0x78], eax
mov dword [esp + 0x54], esi
mov dword [esp + 0xfc], edx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x5c], ecx
mov edi, dword [esp + 0x39c]
mov ecx, dword [esp + 0x3a0]
mov edi, dword [edi + 0x64]
mov dword [esp], ecx
call edi
mov eax, dword [esp + 0x78]
cmp dword [esp + 4], eax
jle 0x4cd8f8
mov ecx, dword [esp + 0x39c]
mov edx, dword [esp + 0x3a0]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x178]
lea esi, [esp + 8]
call fcn.0046157e
movzx eax, byte [esp + 0x1a8]
test al, al
jne 0x4cd9e2
lea edi, [esp + 0x1ac]
lea esi, [esp + 0x178]
call fcn.0046157e
mov eax, dword [esp + 0x1b8]
test eax, eax
je 0x4cda98
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xf8]
jmp 0x4cd91a
mov eax, dword [esp + 0x188]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x18c]
mov dword [esp + 0xe8], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x16
je 0x4cda17
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xe8]
jmp 0x4cda32
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xe8], ecx
lea edi, [esp + 0x1e0]
lea esi, [esp + 0x178]
call fcn.0046157e
mov ecx, dword [esp + 0x1ec]
test ecx, ecx
jne 0x4cda5b
xor eax, eax
jmp 0x4cda72
mov eax, dword [eax + 0x50]
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
test al, al
je 0x4cda98
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xf8]
jmp 0x4cd91a
mov eax, dword [esp + 0x190]
mov ecx, dword [esp + 0x194]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x586709]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.00481f00
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp eax, 1
jne 0x4cdaf8
cmp byte [ecx], 0x2d
jne 0x4cdaf8
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xf8]
jmp 0x4cd91a
nop
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x58637e]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004c0510
mov eax, dword [esp + 0x10]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0xf0], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x50], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004cc6f0
movzx eax, byte [esp + 8]
test al, al
je 0x4cdb5f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xe4]
jmp 0x4cdb63
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x104], ecx
mov dword [esp + 0x64], eax
mov edx, dword [esp + 0x394]
lea ebx, [0x5609a0]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x68], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.00449500
mov eax, dword [esp + 0x394]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jl 0x4cdba1
mov eax, ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x128], edx
mov ebx, dword [esp + 0x390]
cmp ebx, edx
je 0x4cdbd5
mov dword [esp], edx
mov dword [esp + 4], ebx
shl eax, 2
mov dword [esp + 8], eax
call fcn.004617e0
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x128]
mov eax, dword [esp + 0x394]
cmp eax, ecx
jae 0x4ce2f2
mov ecx, dword [esp + 0x78]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x188]
mov ebx, dword [esp + 0x18c]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ebx
mov eax, dword [eax + 0x60]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
test eax, eax
jne 0x4cdc60
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x16
jne 0x4cdc60
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
lea edx, [0x5869b3]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
call fcn.004d2f90
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4cdc96
xor eax, eax
jmp 0x4cdcc7
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
test eax, eax
je 0x4cdcc5
cmp eax, 0xe
jbe 0x4cdcbe
cmp eax, 0x18
jne 0x4cdcc5
mov eax, 1
jmp 0x4cdcc7
xor eax, eax
mov byte [esp + 0x3e], al
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x4cdcda
mov edx, 1
jmp 0x4cdd16
movzx edx, byte [esp + 0x1a8]
test dl, dl
jne 0x4cdced
mov edx, 1
jmp 0x4cdd16
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
mov ecx, dword [esp + 0x64]
mov edx, eax
movzx eax, byte [esp + 0x3e]
test dl, dl
je 0x4ce112
test ecx, ecx
jne 0x4cdd32
mov edx, dword [esp + 0x178]
mov ebx, dword [esp + 0x17c]
jmp 0x4cdd3b
mov ebx, ecx
mov edx, dword [esp + 0x104]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x104], edx
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
lea eax, [0x587530]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 9
call fcn.004d2f90
mov eax, dword [esp + 0x64]
test eax, eax
setne al
movzx ecx, byte [esp + 0x10]
mov byte [esp + 0x3f], cl
lea edi, [esp + 0x2e0]
mov edx, eax
xor eax, eax
call fcn.004610df
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x2e0], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x2e4], ecx
mov byte [esp + 0x304], dl
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x308], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x30c], ecx
mov dword [esp + 0x310], ecx
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
mov dword [esp + 0x314], ecx
mov dword [esp + 0x318], edx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x31c], cl
movzx ecx, byte [esp + 0x3e]
mov byte [esp + 0x31d], cl
mov ecx, dword [esp + 0x2e0]
mov edx, dword [esp + 0x2e4]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044d3e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2e8], eax
mov dword [esp + 0x2ec], ecx
mov dword [esp + 0x2f0], edx
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], 0
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004ce7b0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xfc], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x5c], edx
mov dword [esp], 0
lea ebx, [0x5bf0f0]
mov dword [esp + 4], ebx
mov dword [esp + 8], 1
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
lea eax, [0x5863dd]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.0044d040
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x2fc], eax
mov dword [esp + 0x300], ecx
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x2e4]
mov dword [esp], 0
lea edx, [0x5bf0f0]
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x5863dd]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.0044d040
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x2f4], eax
mov dword [esp + 0x2f8], ecx
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x154]
inc ecx
mov edx, dword [esp + 0x150]
cmp eax, ecx
jae 0x4cdf90
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x5783a0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x158], eax
mov dword [esp + 0x150], edx
mov dword [esp + 0x154], ecx
mov eax, dword [0x6c4f80]
mov ebx, ecx
shl ecx, 6
lea ecx, [ecx + ebx*4]
lea edi, [edx + ecx - 0x44]
test eax, eax
je 0x4cdfd8
mov dword [esp + 0x124], edi
lea eax, [0x5783a0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esp + 0x2e0]
mov dword [esp + 8], ecx
call fcn.00410740
mov edi, dword [esp + 0x124]
lea esi, [esp + 0x2e0]
call fcn.00461556
lea eax, [0x562760]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x39c]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x4ce0f0
mov ecx, dword [esp + 0x154]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4ce2ed
mov eax, dword [esp + 0x150]
mov edx, ecx
shl ecx, 6
lea ecx, [ecx + edx*4]
lea esi, [ecx + eax - 0x44]
lea edi, [esp + 0x478]
call fcn.00461556
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x154]
inc ecx
mov edx, dword [esp + 0x150]
cmp eax, ecx
jae 0x4ce09c
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x5783a0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x158], eax
mov dword [esp + 0x150], edx
mov dword [esp + 0x154], ecx
mov eax, dword [0x6c4f80]
mov ebx, ecx
shl ecx, 6
lea ecx, [ecx + ebx*4]
lea edi, [edx + ecx - 0x44]
test eax, eax
je 0x4ce0e4
mov dword [esp + 0x124], edi
lea eax, [0x5783a0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x478]
mov dword [esp + 8], eax
call fcn.00410740
mov edi, dword [esp + 0x124]
lea esi, [esp + 0x478]
call fcn.00461556
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xf8]
jmp 0x4cd91a
lea eax, [0x562760]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x140]
mov dword [esp + 8], edx
call fcn.0040d0c0
mov eax, dword [esp + 0xc]
inc dword [eax]
lea eax, [0x562760]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x140]
mov dword [esp + 8], edx
call fcn.0040cb70
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x4ce180
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xf8]
jmp 0x4ce2dd
mov eax, dword [esp + 0x54]
inc eax
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
mov ecx, dword [ecx + 0x60]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x88], ecx
lea edi, [esp + 0x434]
mov edx, eax
xor eax, eax
call fcn.004610df
mov dword [esp + 0x434], edx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x438], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x45c], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x460], ecx
mov dword [esp + 0x464], ecx
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x140]
mov dword [esp + 0x468], edx
mov dword [esp + 0x46c], ecx
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x8c]
cmp ecx, edx
jb 0x4ce231
mov eax, edx
mov ebp, dword [esp + 0xf8]
mov ebx, ecx
jmp 0x4ce266
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x5783a0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [0x6c4f80]
mov edx, eax
shl eax, 6
lea eax, [eax + edx*4]
lea edi, [ebp + eax - 0x44]
test ecx, ecx
je 0x4ce2d1
mov dword [esp + 0x120], ebp
mov dword [esp + 0x98], edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x124], edi
lea eax, [0x5783a0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x434]
mov dword [esp + 8], eax
call fcn.00410740
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x120]
mov edi, dword [esp + 0x124]
lea esi, [esp + 0x434]
call fcn.00461556
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xfc]
jmp 0x4cd91a
call fcn.00460f60
call fcn.00460f60
nop
call fcn.0045faf0
jmp fcn.004ccda0