Function at 0x4ecf00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x95eda0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x5c]
cmp eax, dword [ecx + 8]
jbe 0x4edd56
sub esp, 0xdc
mov edx, dword [esp + 0xf4]
test edx, edx
je 0x4ed77d
mov ebx, dword [edx + 8]
cmp ebx, 0x6d448d5d
ja 0x4ed381
cmp ebx, 0x38dfc0a9
ja 0x4ed122
cmp ebx, 0x2de60e3b
ja 0x4ecff2
cmp ebx, 0x252f926b
je 0x4ecf97
cmp ebx, 0x2de60e3b
jne 0x4ed77d
lea ebx, [0x699880]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xe0]
xor eax, eax
jmp 0x4edd3f
lea ebx, [0x699c40]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [esp + 0xb4], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x38], edx
mov ebp, dword [esp + 0xf0]
mov ecx, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x70]
jmp 0x4edd19
cmp ebx, 0x2e74d42b
je 0x4ed0c4
cmp ebx, 0x338a7ec0
je 0x4ed06d
cmp ebx, 0x38dfc0a9
jne 0x4ed77d
lea ebx, [0x699980]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [esp + 0xc8], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x4c], edx
mov ebp, dword [esp + 0xf0]
mov ecx, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x78], eax
xor eax, eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x78]
jmp 0x4edc65
lea eax, [0x691ee0]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xf8]
mov dword [ecx], eax
jmp 0x4ed78c
lea eax, [0x691f20]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xf8]
mov dword [edx], eax
mov dword [edx + 4], ecx
jmp 0x4ed78c
cmp ebx, 0x4f3c6e38
ja 0x4ed23e
cmp ebx, 0x4072c7d5
je 0x4ed1db
cmp ebx, 0x49163278
je 0x4ed17d
cmp ebx, 0x4f3c6e38
jne 0x4ed77d
lea ebx, [0x699c80]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xe0]
xor eax, eax
jmp 0x4edbd2
lea eax, [0x691f60]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xf8]
mov dword [edx], eax
mov dword [edx + 4], ecx
jmp 0x4ed78c
lea eax, [0x6920e0]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
movss xmm0, dword [esp + 0x6c]
mov eax, dword [esp + 0xf8]
movss dword [eax], xmm0
jmp 0x4ed78c
cmp ebx, 0x62de383d
je 0x4ed32a
cmp ebx, 0x6d0f0857
jne 0x4ed2b3
lea ebx, [0x699a40]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [esp + 0xc0], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x44], edx
mov ebp, dword [esp + 0xec]
mov esi, dword [esp + 0xf0]
mov ecx, dword [esp + 0xe4]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x80], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x80]
jmp 0x4edb9d
cmp ebx, 0x6d448d5d
jne 0x4ed77d
lea eax, [0x692120]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
movsd xmm0, qword [esp + 0x64]
mov eax, dword [esp + 0xf8]
movsd qword [eax], xmm0
jmp 0x4ed78c
lea eax, [0x691ea0]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xf8]
mov dword [ecx], eax
jmp 0x4ed78c
cmp ebx, 0x889ce7f8
ja 0x4ed594
cmp ebx, 0x7e440822
ja 0x4ed46f
cmp ebx, 0x70800450
jne 0x4ed402
lea ebx, [0x699c00]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [esp + 0xb8], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x3c], edx
mov ebp, dword [esp + 0xf0]
mov ecx, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x88], eax
xor eax, eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x88]
jmp 0x4edada
cmp ebx, 0x7e440822
jne 0x4ed77d
lea ebx, [0x699900]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [esp + 0xd0], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x54], edx
mov ebp, dword [esp + 0xf0]
mov ecx, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x90], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x90]
jmp 0x4eda2f
cmp ebx, 0x81044065
je 0x4ed549
cmp ebx, 0x854f63b7
jne 0x4ed4e4
lea ebx, [0x699a80]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [esp + 0xbc], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x40], edx
mov ebp, dword [esp + 0xec]
mov esi, dword [esp + 0xf0]
mov ecx, dword [esp + 0xe4]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x98], eax
xor eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x98]
jmp 0x4ed992
cmp ebx, 0x889ce7f8
jne 0x4ed77d
lea eax, [0x691e60]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x1c]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xc], ecx
call eax
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xf8]
mov word [ecx], ax
jmp 0x4ed78c
lea eax, [0x6998c0]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xf8]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0xe4]
cmp edx, ecx
jl 0x4ed56e
mov edx, ecx
mov eax, dword [eax]
mov ecx, dword [esp + 0xe0]
cmp ecx, eax
je 0x4ed78c
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00472150
jmp 0x4ed78c
cmp ebx, 0xd6631a7c
ja 0x4ed6ab
cmp ebx, 0x9ae5bb3b
jne 0x4ed609
lea ebx, [0x699940]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [esp + 0xcc], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x50], edx
mov ebp, dword [esp + 0xf0]
mov ecx, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xa0], eax
xor eax, eax
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa0]
jmp 0x4ed8d0
cmp ebx, 0xc3230e0b
jne 0x4ed66a
lea eax, [0x691e20]
cmp edx, eax
jne 0x4ed77d
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x1c]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0xc], ecx
call eax
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xf8]
mov word [ecx], ax
jmp 0x4ed78c
cmp ebx, 0xd6631a7c
jne 0x4ed77d
lea ebx, [0x691da0]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xe4]
test edx, edx
jbe 0x4ed848
mov eax, dword [esp + 0xe0]
movzx eax, byte [eax]
mov ecx, dword [esp + 0xf8]
mov byte [ecx], al
jmp 0x4ed78c
cmp ebx, 0xd83fe3b3
jne 0x4ed714
lea ebx, [0x699a00]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xf8]
mov ebx, dword [edx]
mov dword [esp + 0xc4], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x48], edx
mov ebp, dword [esp + 0xf0]
mov ecx, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xa8], eax
xor eax, eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xa8]
jmp 0x4ed82a
cmp ebx, 0xf3b50de0
jne 0x4ed746
lea ebx, [0x691de0]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xe4]
test edx, edx
jbe 0x4ed7a4
mov eax, dword [esp + 0xe0]
movzx eax, byte [eax]
mov ecx, dword [esp + 0xf8]
mov byte [ecx], al
jmp 0x4ed78c
cmp ebx, 0xfcd60fce
jne 0x4ed77d
lea ebx, [0x692160]
cmp edx, ebx
jne 0x4ed77d
mov edx, dword [esp + 0xe4]
test edx, edx
jbe 0x4ed79b
mov eax, dword [esp + 0xe0]
movzx eax, byte [eax]
test al, al
setne al
mov ecx, dword [esp + 0xf8]
mov byte [ecx], al
jmp 0x4ed78c
mov byte [esp + 0xfc], 0
add esp, 0xdc
ret
mov byte [esp + 0xfc], 1
add esp, 0xdc
ret
xor eax, eax
mov ecx, eax
call fcn.00471840
xor eax, eax
mov ecx, eax
call fcn.00471840
mov edx, dword [esi + 0x20]
mov dword [esp], ebp
sub eax, ebx
mov dword [esp + 0xb0], eax
sub ecx, ebx
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [edi + ebx]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
call edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0xc4]
mov dword [ebx + ecx*4], eax
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov ecx, ebp
mov edx, dword [esp + 0x48]
mov ebp, dword [esp + 0xf0]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x28]
cmp ebx, edx
jge 0x4ed78c
shl ebx, 2
cmp ecx, ebx
jae 0x4ed7ad
mov eax, ebx
call fcn.004718a0
xor eax, eax
mov ecx, eax
call fcn.00471840
mov edx, dword [esi + 0x1c]
mov dword [esp], ebp
sub eax, ebx
mov dword [esp + 0xb0], eax
sub ecx, ebx
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [edi + ebx]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
call edx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x30]
mov ebx, dword [esp + 0xcc]
mov word [ebx + ecx*2], ax
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov ecx, ebp
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0xf0]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x30]
cmp ebx, edx
jge 0x4ed78c
shl ebx, 1
cmp ecx, ebx
jae 0x4ed851
mov eax, ebx
call fcn.004718a0
mov edx, dword [esp + 0x20]
lea ebx, [ebx + edx*8]
mov dword [esp + 0xd8], ebx
mov ebp, dword [ebp + 0x24]
mov dword [esp], esi
sub eax, edi
mov dword [esp + 0xb0], eax
sub ecx, edi
neg eax
sar eax, 0x1f
and edi, eax
mov eax, dword [esp + 0xe0]
add edi, eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
call ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xd8]
mov dword [edx], eax
mov dword [edx + 4], ecx
mov eax, dword [esp + 0x20]
inc eax
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0xe0]
mov ecx, ebp
mov edx, dword [esp + 0x40]
mov ebx, esi
mov ebp, dword [esp + 0xec]
mov esi, dword [esp + 0xf0]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0x20]
cmp edi, edx
jge 0x4ed78c
shl edi, 3
cmp ecx, edi
jae 0x4ed8ed
mov eax, edi
call fcn.004718a0
mov edx, dword [esi + 0x1c]
mov dword [esp], ebp
sub eax, ebx
mov dword [esp + 0xb0], eax
sub ecx, ebx
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [edi + ebx]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
call edx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x34]
mov ebx, dword [esp + 0xd0]
mov word [ebx + ecx*2], ax
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov ecx, ebp
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xf0]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x34]
cmp ebx, edx
jge 0x4ed78c
shl ebx, 1
cmp ecx, ebx
jae 0x4ed9b0
mov eax, ebx
call fcn.004718a0
mov edx, dword [esi + 0x20]
mov dword [esp], ebp
sub eax, ebx
mov dword [esp + 0xb0], eax
sub ecx, ebx
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [edi + ebx]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
call edx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
movss xmm0, dword [esp + 0x60]
mov eax, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov ebx, dword [esp + 0xb8]
movss dword [ebx + eax*4], xmm0
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xf0]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0xe4]
mov ebx, dword [esp + 0x1c]
cmp ebx, edx
jge 0x4ed78c
shl ebx, 2
cmp ecx, ebx
jae 0x4eda4c
mov eax, ebx
call fcn.004718a0
mov edx, dword [esp + 0x24]
lea ebx, [ebx + edx*8]
mov dword [esp + 0xd4], ebx
mov ebp, dword [ebp + 0x24]
mov dword [esp], esi
sub eax, edi
mov dword [esp + 0xb0], eax
sub ecx, edi
neg eax
sar eax, 0x1f
and edi, eax
mov eax, dword [esp + 0xe0]
add edi, eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
call ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xd4]
mov dword [edx], eax
mov dword [edx + 4], ecx
mov eax, dword [esp + 0x24]
inc eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0xe0]
mov ecx, ebp
mov edx, dword [esp + 0x44]
mov ebx, esi
mov ebp, dword [esp + 0xec]
mov esi, dword [esp + 0xf0]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0x24]
cmp edi, edx
jge 0x4ed78c
shl edi, 3
cmp ecx, edi
jae 0x4edaf8
mov eax, edi
call fcn.004718a0
lea edi, [eax + 1]
xchg esi, eax
test al, al
xchg esi, eax
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, ebx
mov byte [edx + eax], bl
xchg esi, ebx
mov eax, edi
cmp ebx, eax
jle 0x4ed78c
movzx esi, byte [ebp + eax]
cmp eax, ecx
jb 0x4edbbb
call fcn.00471840
mov edx, dword [esi + 0x20]
mov dword [esp], ebp
sub eax, ebx
mov dword [esp + 0xb0], eax
sub ecx, ebx
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [edi + ebx]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
call edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xc8]
mov dword [ebx + ecx*4], eax
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov ecx, ebp
mov edx, dword [esp + 0x4c]
mov ebp, dword [esp + 0xf0]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x2c]
cmp ebx, edx
jge 0x4ed78c
shl ebx, 2
cmp ecx, ebx
jae 0x4edbe8
mov eax, ebx
call fcn.004718a0
mov edx, dword [esi + 0x24]
mov dword [esp], ebp
sub eax, ebx
mov dword [esp + 0xb0], eax
sub ecx, ebx
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [ebx + edi]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
call edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
movsd xmm0, qword [esp + 0x58]
mov eax, dword [esp + 0x18]
lea ecx, [eax + 1]
mov ebx, dword [esp + 0xb4]
movsd qword [ebx + eax*8], xmm0
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov edx, dword [esp + 0x38]
mov ebp, dword [esp + 0xf0]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0xe4]
mov ebx, dword [esp + 0x18]
cmp ebx, edx
jge 0x4ed78c
shl ebx, 3
cmp ecx, ebx
jae 0x4edc83
mov eax, ebx
call fcn.004718a0
xchg esi, ebx
mov byte [edx + eax], bl
xchg esi, ebx
inc eax
cmp ebx, eax
jle 0x4ed78c
movzx esi, byte [ebp + eax]
cmp eax, ecx
jb 0x4edd37
call fcn.00471840
nop
call fcn.004703c0
jmp fcn.004ecf00