Function at 0x4cd230
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6b21fc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xb8]
cmp eax, dword [ecx + 8]
jbe 0x4cdeae
sub esp, 0x138
mov eax, dword [esp + 0x13c]
mov dword [esp], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 4], eax
call fcn.004c6bc0
mov eax, dword [esp + 8]
mov dword [esp + 0x118], eax
mov dword [esp], eax
mov dword [esp + 4], 0xb
lea ecx, [0x546737]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
lea ecx, [0x54673c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 5
call fcn.004c3d50
mov eax, dword [esp + 0x118]
test byte [eax], al
mov ecx, dword [esp + 0x150]
test ecx, ecx
sete dl
mov ebx, dword [esp + 0x154]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and edx, ebp
test dl, dl
jne 0x4cd2e3
nop
nop
mov edx, 0x60
xor ebp, ebp
jmp 0x4cdc45
mov dword [esp], eax
mov dword [esp + 4], 1
lea ecx, [0x547f4e]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xd
lea ecx, [0x546732]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 5
call fcn.004c3d50
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov dword [esp + 4], 1
lea ecx, [0x5476c6]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xb
lea ecx, [0x54673c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 5
call fcn.004c3d50
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov dword [esp + 4], 1
lea ecx, [0x547f5b]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xd
lea ecx, [0x546732]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 5
call fcn.004c3d50
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov dword [esp + 4], 1
lea ecx, [0x5476dc]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xb
lea ecx, [0x54673c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 5
call fcn.004c3d50
mov eax, dword [esp + 0x15c]
test eax, eax
je 0x4cd542
mov ecx, dword [esp + 0x118]
mov edx, dword [ecx + 0x90]
nop
lea ebx, [0x52bce0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x158]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.00410690
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
test al, al
jne 0x4cd50b
mov eax, dword [esp + 0x118]
mov ecx, dword [eax + 0x88]
mov dword [esp + 0x6c], ecx
mov edx, dword [eax + 0x8c]
lea ebx, [ecx + 1]
mov ebp, dword [eax + 0x84]
cmp edx, ebx
jae 0x4cd4a2
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x52a880]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x8c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cd492
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x84]
mov dword [edi + 4], eax
mov dword [ebx + 0x84], ecx
mov eax, ebx
mov ebx, edx
mov ebp, ecx
mov ecx, dword [esp + 0x6c]
mov dword [eax + 0x88], ebx
lea edx, [ebp + ebx*8 - 4]
mov esi, dword [esp + 0x15c]
mov dword [edx], esi
mov edx, dword [0x6b2320]
lea ebx, [ebp + ebx*8 - 8]
test edx, edx
jne 0x4cd4cc
mov edx, dword [esp + 0x158]
jmp 0x4cd4df
call fcn.00468870
mov edx, dword [esp + 0x158]
mov dword [edi], edx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], edx
mov ecx, dword [eax + 0x90]
lea ebx, [0x52bce0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
call fcn.004109f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x6c]
mov dword [eax], ecx
mov edx, ecx
sar ecx, 0x1f
nop
test ecx, ecx
sete bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebx, ebp
test bl, bl
jne 0x4cd542
mov dword [esp + 0x6c], edx
mov dword [esp + 0x30], ecx
nop
nop
mov ebx, dword [esp + 0x118]
mov eax, 0x70
xor ebp, ebp
jmp 0x4cd9e0
lea edi, [esp + 0x70]
xor eax, eax
call fcn.00468aa8
lea ecx, [0x538600]
mov dword [esp], ecx
call fcn.0040c3d0
mov edi, dword [esp + 4]
mov dword [esp + 0x110], edi
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
xor eax, eax
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x4cd65a
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 0
mov dword [esp + 0x134], 0
lea eax, [0x4cdec0]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], edx
mov dword [esp + 0x130], ecx
mov ecx, dword [esp + 0x118]
mov dword [esp + 0x134], ecx
mov dword [esp], ecx
lea edx, [esp + 0x70]
mov dword [esp + 4], edx
mov dword [esp + 8], 4
mov dword [esp + 0xc], 4
mov ebx, dword [esp + 0x114]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x14], ebp
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x18], esi
lea edi, [esp + 0x128]
mov dword [esp + 0x1c], edi
call fcn.004c44c0
mov eax, dword [esp + 0x124]
lea ecx, [eax + 0xa0]
mov eax, dword [esp + 0x6c]
inc eax
mov edx, dword [esp + 0x148]
mov ebx, dword [esp + 0x110]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x5c]
mov edi, ebx
mov ebx, dword [esp + 0x5c]
mov ebp, esi
mov esi, dword [esp + 0x114]
cmp edx, eax
jle 0x4cd7e2
mov dword [esp + 0x6c], eax
mov dword [esp + 0x114], esi
mov dword [esp + 0x124], ecx
mov esi, ecx
call fcn.00468e30
mov edi, dword [esp + 0x110]
mov ecx, dword [esp + 0x114]
xor esi, esi
mov esi, 1
xchg esi, eax
mov byte [esp + 0x2b], al
xchg esi, eax
xor esi, esi
jmp 0x4cd831
mov dword [esp + 0x114], ecx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x5c], ebx
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
mov esi, dword [edi + 4]
mov ebx, dword [edi]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x154]
mov dword [esp + 0x14], eax
mov edx, dword [esp + 0x150]
mov dword [esp + 0x10], edx
call fcn.004cdf40
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], edx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], ebx
mov eax, dword [esp + 0x110]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov ebx, dword [eax + 0x18]
mov ebp, dword [eax + 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov dword [esp + 0x68], edi
mov edi, dword [eax + 8]
mov eax, dword [eax + 0xc]
sub ecx, ebx
sbb edx, ebp
mov dword [esp + 4], edx
mov dword [esp], ecx
sub esi, edi
mov ecx, dword [esp + 0x68]
sbb ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov eax, dword [esp + 0x154]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 0x10], ecx
call fcn.004cdf40
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], ebx
mov eax, dword [esp + 0x110]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
test edx, edx
setg bl
xchg ebp, ebx
sete bl
xchg ebp, ebx
test ecx, ecx
xchg esi, ebx
seta bl
xchg esi, ebx
and ebp, esi
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4cd7ba
xor ecx, ecx
xor edx, edx
jmp 0x4cd581
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 4], ebp
mov dword [esp], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
call fcn.00460f70
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, eax
jmp 0x4cd581
mov eax, dword [esp + 0x118]
mov dword [esp], eax
call fcn.004c7310
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
add esp, 0x138
ret
mov ebx, dword [esp + 0x54]
lea esi, [ebx + 1]
mov edi, dword [esp + 0x110]
xor ebx, ebx
mov byte [esp + 0x2b], bl
mov ebx, edx
mov ebp, eax
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x148]
cmp esi, 2
jge 0x4cd69d
mov dword [esp + 0x54], esi
mov dword [esp + 0x120], ecx
lea ebp, [edi + 0x20]
lea edi, [esp + 0x90]
mov esi, ebp
call fcn.00468e80
xor ecx, ecx
jmp 0x4cd8ce
mov ecx, 0x20
movzx esi, byte [esp + 0x2b]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4cd880
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x64], ebx
xor esi, esi
jmp 0x4cd914
mov esi, 0x20
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x120]
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], esi
call fcn.004c8180
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
test eax, eax
je 0x4cd80e
jmp 0x4cd8e3
inc ecx
cmp ecx, 0x20
jge 0x4cd85a
mov esi, dword [esp + ecx*4 + 0x90]
test esi, esi
jne 0x4cd8cd
jmp 0x4cd85f
mov edi, dword [esp + 0x110]
mov ebp, eax
mov ebx, edx
jmp 0x4cd69d
mov edi, dword [esp + 0x60]
lea esi, [edi + 1]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x148]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x11c]
cmp esi, ecx
jge 0x4cd9b9
mov dword [esp + 0x60], esi
mov eax, dword [esp + 0x110]
mov ecx, dword [eax + esi*4 + 0x20]
mov dword [esp], ecx
call fcn.00455180
mov eax, dword [esp + 4]
test eax, eax
jne 0x4cd93f
xor eax, eax
jmp 0x4cd975
mov dword [esp], eax
call fcn.00455360
cmp dword [esp + 8], 8
jge 0x4cd952
xor eax, eax
jmp 0x4cd975
mov eax, dword [esp + 4]
mov dword [esp], eax
lea eax, [0x546c9e]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00403120
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4cd8f3
mov eax, dword [esp + 0x60]
mov edx, eax
shl eax, 2
lea ebx, [edx - 0x20]
neg ebx
mov esi, ebx
neg ebx
sar ebx, 0x1f
and eax, ebx
mov ebx, dword [esp + 0x110]
lea ebp, [ebx + eax + 0x20]
mov ecx, dword [esp + 0x2c]
sub ecx, edx
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x148]
mov ebx, dword [esp + 0x64]
jmp 0x4cd885
mov esi, 0x20
jmp 0x4cd885
mov dword [ebx + 0x68], esi
mov ecx, eax
or ecx, 0xffffff80
mov byte [esi + edi - 1], cl
shr eax, 7
mov esi, ebp
shl esi, 0x19
or eax, esi
shr ebp, 7
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x38], eax
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
seta bl
xchg edi, ebx
cmp eax, 0x80
setae cl
and esi, ecx
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
je 0x4cda7f
mov ecx, dword [ebx + 0x6c]
mov esi, dword [ebx + 0x68]
inc esi
mov edi, dword [ebx + 0x64]
cmp ecx, esi
jae 0x4cd9c3
mov dword [esp + 0x48], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cda67
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov eax, dword [esp + 0x38]
mov ebp, dword [esp + 0x48]
mov esi, edx
mov edi, ecx
mov edx, dword [esp + 0x6c]
jmp 0x4cd9c3
mov ecx, dword [ebx + 0x6c]
mov ebp, dword [ebx + 0x68]
inc ebp
mov esi, dword [ebx + 0x64]
cmp ecx, ebp
jae 0x4cdaeb
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cdadc
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov eax, dword [esp + 0x38]
mov ebp, edx
mov esi, ecx
mov edx, dword [esp + 0x6c]
mov dword [ebx + 0x68], ebp
mov byte [ebp + esi - 1], al
mov ecx, dword [esp + 0x30]
jmp 0x4cdb15
mov dword [ebx + 0x68], esi
mov ebp, edx
or ebp, 0xffffff80
xchg ebp, ebx
mov byte [esi + eax - 1], bl
xchg ebp, ebx
shr edx, 7
mov ebp, ecx
shl ebp, 0x19
or edx, ebp
shr ecx, 7
mov dword [esp + 0x34], edx
test ecx, ecx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
cmp edx, 0x80
setae al
and ebp, eax
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x4cdbb1
mov ebp, dword [ebx + 0x6c]
mov esi, dword [ebx + 0x68]
inc esi
mov eax, dword [ebx + 0x64]
cmp ebp, esi
jae 0x4cdaf8
mov dword [esp + 0x44], ecx
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cdb9d
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov esi, edx
mov eax, ecx
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x34]
jmp 0x4cdaf8
mov ecx, dword [ebx + 0x6c]
mov ebp, dword [ebx + 0x68]
inc ebp
mov esi, dword [ebx + 0x64]
cmp ecx, ebp
jae 0x4cdc19
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cdc0e
call fcn.00468870
mov dword [edi], ecx
mov ebp, dword [ebx + 0x64]
mov dword [edi + 4], ebp
mov dword [ebx + 0x64], ecx
mov ebp, edx
mov esi, ecx
mov edx, dword [esp + 0x34]
mov dword [ebx + 0x68], ebp
mov byte [ebp + esi - 1], dl
jmp 0x4cd542
mov dword [eax + 0x68], esi
mov ecx, edx
or ecx, 0xffffff80
mov byte [esi + edi - 1], cl
shr edx, 7
mov esi, ebp
shl esi, 0x19
or edx, esi
shr ebp, 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0x40], edx
test ebp, ebp
xchg esi, ebx
seta bl
xchg esi, ebx
xchg edi, ebx
sete bl
xchg edi, ebx
cmp edx, 0x80
setae cl
and edi, ecx
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
je 0x4cdcea
mov ecx, dword [eax + 0x6c]
mov esi, dword [eax + 0x68]
inc esi
mov edi, dword [eax + 0x64]
cmp ecx, esi
jae 0x4cdc25
mov dword [esp + 0x50], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cdccd
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x64]
mov dword [edi + 4], eax
mov dword [ebx + 0x64], ecx
mov eax, ebx
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0x50]
mov esi, edx
mov edi, ecx
mov edx, dword [esp + 0x40]
jmp 0x4cdc25
mov ecx, dword [eax + 0x6c]
mov ebp, dword [eax + 0x68]
inc ebp
mov esi, dword [eax + 0x64]
cmp ecx, ebp
jae 0x4cdd5b
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cdd47
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x64]
mov dword [edi + 4], eax
mov dword [ebx + 0x64], ecx
mov eax, ebx
mov ebx, dword [esp + 0x154]
mov ebp, edx
mov esi, ecx
mov edx, dword [esp + 0x40]
mov dword [eax + 0x68], ebp
mov byte [ebp + esi - 1], dl
mov ecx, dword [esp + 0x150]
mov edx, ecx
jmp 0x4cdd88
mov dword [eax + 0x68], esi
mov ebp, ecx
or ebp, 0xffffff80
xchg ebp, eax
mov byte [esi + edi - 1], al
xchg ebp, eax
shr ecx, 7
mov ebp, ebx
shl ebp, 0x19
or ecx, ebp
shr ebx, 7
mov dword [esp + 0x3c], ecx
test ebx, ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
xchg esi, ebx
sete bl
xchg esi, ebx
cmp ecx, 0x80
xchg edi, ebx
setae bl
xchg edi, ebx
and esi, edi
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x4cde31
mov ebp, dword [eax + 0x6c]
mov esi, dword [eax + 0x68]
inc esi
mov edi, dword [eax + 0x64]
cmp ebp, esi
jae 0x4cdd6d
mov dword [esp + 0x4c], ebx
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cde14
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x64]
mov dword [edi + 4], eax
mov dword [ebx + 0x64], ecx
mov eax, ebx
mov ebx, dword [esp + 0x4c]
mov esi, edx
mov edi, ecx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x150]
jmp 0x4cdd6d
mov ebx, dword [eax + 0x6c]
mov ebp, dword [eax + 0x68]
inc ebp
mov esi, dword [eax + 0x64]
cmp ebx, ebp
jae 0x4cdea2
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x52abc0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x118]
mov dword [ebx + 0x6c], eax
mov eax, dword [0x6b2320]
test eax, eax
je 0x4cde8e
call fcn.00468870
mov dword [edi], ecx
mov eax, dword [ebx + 0x64]
mov dword [edi + 4], eax
mov dword [ebx + 0x64], ecx
mov eax, ebx
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x150]
mov dword [eax + 0x68], ebp
mov byte [ebp + esi - 1], cl
jmp 0x4cd2e3
call fcn.00467460
jmp fcn.004cd230