Function at 0x4f1cb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x178]
cmp eax, dword [ecx + 8]
jbe 0x4f2bfa
sub esp, 0x1f8
mov dword [esp + 0x210], 0
mov dword [esp + 0x214], 0
mov dword [esp + 0x218], 0
mov dword [esp + 0x21c], 0
mov dword [esp + 0x220], 0
mov dword [esp + 0x224], 0
mov edx, dword [esp + 0x200]
test edx, edx
jbe 0x4f2bf0
mov eax, dword [esp + 0x1fc]
mov ecx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov dword [esp + 0x70], ebx
imul ebp, edx, 0x1c
mov esi, dword [eax + ebp - 4]
mov dword [esp + 0x6c], esi
mov ebp, dword [eax + ebp - 8]
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
jne 0x4f1d5d
xor eax, eax
jmp 0x4f1d76
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.0044e500
movzx eax, byte [esp + 8]
mov byte [esp + 0x3b], al
mov ecx, dword [esp + 0x200]
mov edx, dword [esp + 0x208]
mov ebx, dword [esp + 0x1fc]
xor ebp, ebp
xor esi, esi
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x44], ebp
xor ebp, ebp
jmp 0x4f1df7
mov dword [esp + 0x1ec], esi
mov edx, ecx
lea ecx, [eax + eax*2]
shl ecx, 4
lea edi, [ecx + esi - 0x30]
lea esi, [esp + 0x1bc]
call fcn.00466488
mov ecx, dword [esp + 0x54]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x200]
mov ebx, dword [esp + 0x208]
mov esi, dword [esp + 0x1fc]
mov edi, dword [esp + 0x1ec]
mov ebx, esi
mov esi, edi
mov edi, eax
mov dword [esp + 0x44], edx
movzx eax, byte [esp + 0x3b]
mov edx, dword [esp + 0x208]
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x40], edi
cmp ecx, ebp
jle 0x4f207e
jbe 0x4f2be9
mov dword [esp + 0x54], ebp
imul eax, ebp, 0x1c
lea esi, [ebx + eax + 4]
lea edi, [esp + 0x74]
call fcn.004664c4
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov eax, dword [esp + 0x70]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x208]
mov dword [esp + 0x1c], eax
call fcn.004f36a0
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
mov esi, ebp
mov ebp, dword [esp + 0x88]
mov edi, ebp
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x70], ebp
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x6c], ebp
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], 0x3f800000
mov eax, dword [esp + 0x208]
mov dword [esp + 0x1c], eax
call fcn.004f36a0
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
mov esi, ebp
mov ebp, dword [esp + 0x88]
mov edi, ebp
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x68], ebp
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x64], ebp
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], 0
call fcn.004f3b90
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
mov edi, eax
mov eax, dword [esp + 0x88]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x3f800000
call fcn.004f3b90
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x5c], eax
lea edi, [esp + 0x1bc]
xor eax, eax
call fcn.00465fe4
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], ecx
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x70]
mov dword [esp + 0x1cc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1d0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x1d4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x1d8], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x1dc], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1e0], eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x1e4], eax
mov dword [esp + 0x1e8], ecx
mov eax, dword [esp + 0x40]
inc eax
mov ecx, dword [esp + 0x44]
cmp ecx, eax
jb 0x4f2044
mov esi, dword [esp + 0x1ec]
jmp 0x4f1d9f
mov edx, dword [esp + 0x1ec]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6d0ea0]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4f1d9f
mov ebx, esi
xor ecx, ecx
jmp 0x4f20a2
mov ebp, dword [esp + 0x1f4]
lea esi, [ebp + 0x30]
mov eax, ebx
mov edx, dword [esp + 0x208]
mov ebx, dword [esp + 0x1ec]
mov edi, dword [esp + 0x40]
cmp ecx, edi
jge 0x4f23f9
mov dword [esp + 0x50], ecx
mov dword [esp + 0x1f4], esi
lea edi, [esp + 0x15c]
call fcn.00466488
lea edi, [esp + 0x12c]
lea esi, [esp + 0x15c]
call fcn.00466488
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x130]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0x158]
mov esi, edx
mov edx, dword [esp + 0x134]
mov edi, edx
mov edx, dword [esp + 0x138]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], 0x3c23d70a
call fcn.004f41d0
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x214]
mov edx, dword [esp + 0x218]
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x30]
mov esi, ebp
mov ebp, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
call fcn.004f2fd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], ecx
mov dword [esp + 0x218], edx
lea edi, [esp + 0xfc]
lea esi, [esp + 0x15c]
call fcn.00466488
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x124]
mov ebx, dword [esp + 0x128]
mov ebp, dword [esp + 0x104]
mov esi, ebp
mov ebp, dword [esp + 0x108]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x208]
xor eax, 0x80000000
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0x3c23d70a
call fcn.004f41d0
mov eax, dword [esp + 0x21c]
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x224]
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x30]
mov esi, ebp
mov ebp, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
call fcn.004f2fd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ecx
mov dword [esp + 0x224], edx
mov eax, dword [esp + 0x50]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x40]
cmp edx, ecx
jg 0x4f22ad
movzx ebx, byte [esp + 0x3b]
test bl, bl
je 0x4f2084
cmp edx, ecx
jmp 0x4f22b2
movzx ebx, byte [esp + 0x3b]
mov dword [esp + 0x58], ecx
lea edi, [esp + 0x18c]
mov ebp, eax
mov eax, 0
call fcn.00465fe4
jle 0x4f22f1
jbe 0x4f2bde
lea eax, [ebp + ebp*2]
shl eax, 4
mov ecx, dword [esp + 0x1ec]
lea esi, [eax + ecx + 0x30]
lea edi, [esp + 0x18c]
call fcn.00466488
jmp 0x4f2310
test bl, bl
je 0x4f2310
test edx, edx
jbe 0x4f2bd5
lea edi, [esp + 0x18c]
mov esi, dword [esp + 0x1ec]
call fcn.00466488
mov eax, dword [esp + 0x19c]
mov ecx, dword [esp + 0x174]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
je 0x4f235a
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x178]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
jne 0x4f23e7
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x174]
mov ebx, dword [esp + 0x178]
mov ebp, dword [esp + 0x19c]
mov esi, dword [esp + 0x1a0]
mov edi, dword [esp + 0x180]
mov dword [esp + 0x70], edi
mov edi, dword [esp + 0x1ac]
mov dword [esp + 0x6c], edi
lea edi, [esp + 0x210]
mov dword [esp], edi
lea edi, [esp + 0x21c]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x208]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x28], eax
call fcn.004f4ba0
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x40]
movzx ebx, byte [esp + 0x3b]
jmp 0x4f2084
test al, al
jne 0x4f2468
test edi, edi
jbe 0x4f2bcc
lea eax, [edi + edi*2]
mov ecx, dword [esp + 0x220]
mov ebp, dword [esp + 0x21c]
test ecx, ecx
je 0x4f245d
mov dword [esp + 0x58], eax
mov dword [esp + 0x1f0], ebp
mov dword [esp + 0x48], ecx
lea eax, [0x6b1f00]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
call fcn.0044bce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1f0]
mov edx, dword [esp + 0x48]
mov ebx, edx
xor ebp, ebp
xor esi, esi
jmp 0x4f2aee
xor ecx, ecx
xor ebp, ebp
xor esi, esi
jmp 0x4f27bb
nop
mov edx, dword [esp + 0x210]
mov ecx, dword [esp + 0x214]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4f27b6
imul eax, ecx, 0x1c
mov ecx, dword [edx + eax - 8]
mov dword [esp + 0x70], ecx
mov eax, dword [edx + eax - 4]
mov dword [esp + 0x6c], eax
mov ebx, dword [edx + 8]
mov dword [esp + 0x68], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x64], edx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
je 0x4f24d9
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
jne 0x4f2609
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], eax
lea edi, [esp + 0xe0]
xor eax, eax
call fcn.00465fe9
mov eax, dword [esp + 0x70]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x214]
inc eax
mov ecx, dword [esp + 0x210]
mov edx, dword [esp + 0x218]
cmp edx, eax
jae 0x4f25ef
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x6b1f00]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x218], edx
mov dword [esp + 0x210], ecx
mov dword [esp + 0x214], eax
imul edx, eax, 0x1c
lea edi, [ecx + edx - 0x1c]
lea esi, [esp + 0xe0]
call fcn.004664ba
nop
mov edx, dword [esp + 0x21c]
mov ecx, dword [esp + 0x220]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4f27b1
imul eax, ecx, 0x1c
mov ecx, dword [edx + eax - 8]
mov dword [esp + 0x70], ecx
mov eax, dword [edx + eax - 4]
mov dword [esp + 0x6c], eax
mov ebx, dword [edx + 8]
mov dword [esp + 0x68], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x64], edx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
je 0x4f267a
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
jne 0x4f27aa
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], eax
lea edi, [esp + 0xc4]
xor eax, eax
call fcn.00465fe9
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x220]
inc eax
mov ecx, dword [esp + 0x21c]
mov edx, dword [esp + 0x224]
cmp edx, eax
jae 0x4f2790
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x6b1f00]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x224], edx
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x220], eax
imul eax, eax, 0x1c
lea edi, [eax + ecx - 0x1c]
lea esi, [esp + 0xc4]
call fcn.004664ba
add esp, 0x1f8
ret
call fcn.00465e00
call fcn.00465e00
mov dword [esp + 0x21c], esi
mov dword [esp + 0x220], ebp
mov dword [esp + 0x224], ecx
shl eax, 4
mov ecx, dword [eax + ebx - 0x28]
mov ebp, dword [eax + ebx - 0x24]
mov esi, dword [eax + ebx - 0x18]
mov eax, dword [eax + ebx - 0x14]
lea edi, [esp + 0x210]
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
call fcn.004f53c0
mov eax, dword [esp + 0x21c]
mov ecx, dword [esp + 0x210]
mov edx, dword [esp + 0x220]
mov ebx, dword [esp + 0x214]
mov ebp, dword [esp + 0x218]
mov esi, dword [esp + 0x224]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], esi
call fcn.004f2fd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], ecx
mov dword [esp + 0x218], edx
mov eax, dword [esp + 0x1ec]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x70], edx
mov dword [esp], ecx
mov dword [esp + 4], 0xbf800000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov dword [esp + 4], 0xbf800000
call fcn.0044e3e0
mov eax, dword [esp + 0x1ec]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 8]
lea ebx, [esp + 0x210]
mov dword [esp], ebx
mov ebx, dword [esp + 0x208]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004f53c0
nop
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x214]
lea edx, [ecx - 1]
cmp ecx, edx
jbe 0x4f2ab1
imul ecx, ecx, 0x1c
mov edx, dword [eax + ecx - 8]
mov dword [esp + 0x70], edx
mov ecx, dword [eax + ecx - 4]
mov dword [esp + 0x6c], ecx
mov ebx, dword [eax + 8]
mov dword [esp + 0x68], ebx
mov eax, dword [eax + 4]
mov dword [esp + 0x64], eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
je 0x4f2959
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
call fcn.0044e500
movzx eax, byte [esp + 8]
test al, al
jne 0x4f2a89
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], eax
lea edi, [esp + 0xa8]
xor eax, eax
call fcn.00465fe9
mov eax, dword [esp + 0x70]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x214]
inc eax
mov ecx, dword [esp + 0x210]
mov edx, dword [esp + 0x218]
cmp edx, eax
jae 0x4f2a6f
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x6b1f00]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x218], edx
mov dword [esp + 0x210], ecx
mov dword [esp + 0x214], eax
imul eax, eax, 0x1c
lea edi, [eax + ecx - 0x1c]
lea esi, [esp + 0xa8]
call fcn.004664ba
mov dword [esp + 0x21c], 0
mov dword [esp + 0x220], 0
mov dword [esp + 0x224], 0
add esp, 0x1f8
ret
mov eax, edx
call fcn.00465e00
mov edx, ecx
imul ecx, ecx, 0x1c
lea ecx, [ecx + eax - 0x1c]
mov ebx, edi
mov edi, ecx
lea esi, [esp + 0x8c]
call fcn.004664ba
mov ecx, dword [esp + 0x4c]
inc ecx
mov esi, dword [esp + 0x1f0]
mov ebp, ecx
mov esi, edx
mov ecx, dword [esp + 0x1f0]
mov edx, ebx
mov ebx, dword [esp + 0x48]
cmp ebp, ebx
jge 0x4f2ba6
mov dword [esp + 0x4c], ebp
mov edi, ebx
sub ebx, ebp
lea ebp, [ebx - 1]
cmp edi, ebp
jbe 0x4f2bc3
mov dword [esp + 0x3c], esi
imul ebx, ebx, 0x1c
lea ebx, [ebx + ecx - 0x1c]
mov ebp, edi
lea edi, [esp + 0x8c]
mov esi, ebx
call fcn.004664ba
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x94]
mov esi, ebp
mov ebp, dword [esp + 0xa0]
mov edi, edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0x90], ebp
mov dword [esp + 0x94], edx
mov ecx, dword [esp + 0x3c]
inc ecx
cmp edi, ecx
jae 0x4f2ab8
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], 1
lea eax, [0x6b1f00]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x48]
mov edi, edx
jmp 0x4f2ab8
mov ebx, dword [esp + 0x1ec]
mov ecx, edx
mov ebp, esi
mov esi, eax
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x208]
jmp 0x4f27bb
mov eax, ebp
mov ecx, edi
call fcn.00465e00
xor eax, eax
mov ecx, eax
call fcn.00465e00
xor eax, eax
mov ecx, eax
call fcn.00465e00
mov eax, dword [esp + 0x58]
mov ecx, edx
call fcn.00465e00
mov eax, ebp
call fcn.00465e00
xor eax, eax
mov ecx, eax
call fcn.00465e00
nop
call fcn.004649b0
jmp fcn.004f1cb0