Function at 0x4be310
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb8]
cmp eax, dword [ecx + 8]
jbe 0x4bf66f
sub esp, 0x138
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 4], ecx
call fcn.004c07c0
mov eax, dword [esp + 8]
test eax, eax
jne 0x4be361
mov ecx, dword [esp + 0x14c]
jmp 0x4becfb
mov dword [esp + 0x30], eax
lea ecx, [0x638820]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0044a8a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10c], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp], ecx
mov edx, dword [esp + 0x140]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
call fcn.00491b40
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x4becde
mov edx, dword [esp + 0x14c]
test edx, edx
je 0x4becd1
mov edx, dword [edx + 8]
cmp edx, 0x6d448d5d
ja 0x4be89a
cmp edx, 0x38dfc0a9
ja 0x4be5f8
cmp edx, 0x2de60e3b
ja 0x4be4a7
cmp edx, 0x252f926b
je 0x4be449
cmp edx, 0x2de60e3b
jne 0x4be43d
mov edx, dword [esp + 0x14c]
lea ebx, [0x62fa20]
cmp edx, ebx
jne 0x4becd8
mov ebx, dword [esp + 0x150]
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0x10c]
xor eax, eax
jmp 0x4bf650
mov edx, dword [esp + 0x14c]
jmp 0x4becd8
mov edx, dword [esp + 0x14c]
lea ebx, [0x62e420]
cmp edx, ebx
jne 0x4becd8
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x54], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xe8], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x94], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x94]
jmp 0x4bf5c3
cmp edx, 0x2e74d42b
je 0x4be58f
cmp edx, 0x338a7ec0
je 0x4be52d
cmp edx, 0x38dfc0a9
jne 0x4be521
mov edx, dword [esp + 0x14c]
lea ebx, [0x62f9a0]
cmp edx, ebx
jne 0x4becd8
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x68], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xfc], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x9c], eax
xor eax, eax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x9c]
jmp 0x4bf515
mov edx, dword [esp + 0x14c]
jmp 0x4becd8
mov ecx, dword [esp + 0x14c]
lea edx, [0x62cae0]
cmp ecx, edx
jne 0x4be588
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x150]
mov dword [ecx], eax
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov edx, ecx
jmp 0x4becd8
mov ecx, dword [esp + 0x14c]
lea edx, [0x62a2a0]
cmp ecx, edx
jne 0x4be5f1
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x150]
mov dword [edx + 4], eax
mov dword [edx], ecx
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov edx, ecx
jmp 0x4becd8
cmp edx, 0x4f3c6e38
ja 0x4be736
cmp edx, 0x4072c7d5
je 0x4be6c8
cmp edx, 0x49163278
je 0x4be65f
cmp edx, 0x4f3c6e38
jne 0x4be653
mov edx, dword [esp + 0x14c]
lea ebx, [0x62dc60]
cmp edx, ebx
jne 0x4becd8
mov ebx, dword [esp + 0x150]
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0x10c]
xor eax, eax
jmp 0x4bf4b9
mov edx, dword [esp + 0x14c]
jmp 0x4becd8
mov ecx, dword [esp + 0x14c]
lea edx, [0x62cb20]
cmp ecx, edx
jne 0x4be6c1
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x150]
mov dword [edx + 4], eax
mov dword [edx], ecx
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov edx, ecx
jmp 0x4becd8
mov ecx, dword [esp + 0x14c]
lea edx, [0x6278e0]
cmp ecx, edx
jne 0x4be72f
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x78], eax
movss xmm0, dword [esp + 0x78]
mov eax, dword [esp + 0x150]
movss dword [eax], xmm0
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov edx, ecx
jmp 0x4becd8
cmp edx, 0x62de383d
je 0x4be838
cmp edx, 0x6d0f0857
jne 0x4be7ab
mov edx, dword [esp + 0x14c]
lea ebx, [0x62f9e0]
cmp edx, ebx
jne 0x4be7a4
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x60], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xf4], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xa4], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xa4]
jmp 0x4bf43a
mov ecx, edx
jmp 0x4be893
cmp edx, 0x6d448d5d
jne 0x4be82f
mov ecx, dword [esp + 0x14c]
lea edx, [0x627920]
cmp ecx, edx
jne 0x4be893
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], ecx
movsd xmm0, qword [esp + 0x8c]
mov eax, dword [esp + 0x150]
movsd qword [eax], xmm0
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov ecx, dword [esp + 0x14c]
jmp 0x4be893
mov ecx, dword [esp + 0x14c]
lea edx, [0x62a260]
cmp ecx, edx
jne 0x4be893
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x150]
mov dword [ecx], eax
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov edx, ecx
jmp 0x4becd8
cmp edx, 0x889ce7f8
ja 0x4bead4
cmp edx, 0x7e440822
ja 0x4be98a
cmp edx, 0x70800450
jne 0x4be918
mov edx, dword [esp + 0x14c]
lea ebx, [0x62e3e0]
cmp edx, ebx
jne 0x4becd8
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x58], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xec], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xac], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xac]
jmp 0x4bf37b
cmp edx, 0x7e440822
jne 0x4be97e
mov edx, dword [esp + 0x14c]
lea ebx, [0x62f960]
cmp edx, ebx
jne 0x4becd8
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x70], ebp
mov ebx, dword [ebx]
mov dword [esp + 0x104], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xb4], eax
xor eax, eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xb4]
jmp 0x4bf2cd
mov edx, dword [esp + 0x14c]
jmp 0x4becd8
cmp edx, 0x81044065
je 0x4bea71
cmp edx, 0x854f63b7
jne 0x4be9ff
mov edx, dword [esp + 0x14c]
lea ebx, [0x6307e0]
cmp edx, ebx
jne 0x4be9f8
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x5c], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xf0], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xbc], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xbc]
jmp 0x4bf21a
mov ecx, edx
jmp 0x4beacd
cmp edx, 0x889ce7f8
jne 0x4bea68
mov ecx, dword [esp + 0x14c]
lea edx, [0x62caa0]
cmp ecx, edx
jne 0x4beacd
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x150]
mov word [ecx], ax
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov ecx, dword [esp + 0x14c]
jmp 0x4beacd
mov ecx, dword [esp + 0x14c]
lea edx, [0x630820]
cmp ecx, edx
jne 0x4beacd
mov edx, dword [esp + 0x150]
mov ebx, dword [edx + 4]
mov edx, dword [edx]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jle 0x4bea9a
mov eax, ebp
jmp 0x4bea9e
mov eax, ebp
mov ebp, ebx
mov ebx, dword [esp + 0x10c]
cmp edx, ebx
je 0x4becf3
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00464010
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x14c]
jmp 0x4becf3
mov edx, ecx
jmp 0x4becd8
cmp edx, 0xd6631a7c
ja 0x4bebf7
cmp edx, 0x9ae5bb3b
jne 0x4beb49
mov edx, dword [esp + 0x14c]
lea ebx, [0x630760]
cmp edx, ebx
jne 0x4beb42
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x6c], ebp
mov ebx, dword [ebx]
mov dword [esp + 0x100], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xc4], eax
xor eax, eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xc4]
jmp 0x4bf161
mov ecx, edx
jmp 0x4beccd
cmp edx, 0xc3230e0b
jne 0x4bebb2
mov ecx, dword [esp + 0x14c]
lea edx, [0x62a220]
cmp ecx, edx
jne 0x4beccd
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x150]
mov word [ecx], ax
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4becf3
cmp edx, 0xd6631a7c
jne 0x4bebeb
mov ecx, dword [esp + 0x14c]
lea edx, [0x62a2e0]
cmp ecx, edx
jne 0x4beccd
mov edx, dword [esp + 0x10c]
movzx edx, byte [edx]
mov ebx, dword [esp + 0x150]
mov byte [ebx], dl
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov ecx, dword [esp + 0x14c]
jmp 0x4beccd
cmp edx, 0xd83fe3b3
jne 0x4bec5d
mov edx, dword [esp + 0x14c]
lea ebx, [0x6307a0]
cmp edx, ebx
jne 0x4bec59
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x64], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xf8], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xcc], eax
xor eax, eax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0xcc]
jmp 0x4bf0b2
mov ecx, edx
jmp 0x4beccd
cmp edx, 0xf3b50de0
jne 0x4bec8f
mov ecx, dword [esp + 0x14c]
lea edx, [0x62cb60]
cmp ecx, edx
jne 0x4beccd
mov edx, dword [esp + 0x10c]
movzx edx, byte [edx]
mov eax, dword [esp + 0x150]
mov byte [eax], dl
mov eax, dword [esp + 0x30]
jmp 0x4becf3
cmp edx, 0xfcd60fce
jne 0x4becc6
mov ecx, dword [esp + 0x14c]
lea edx, [0x6268a0]
cmp ecx, edx
jne 0x4beccd
mov edx, dword [esp + 0x10c]
movzx edx, byte [edx]
test dl, dl
setne dl
mov ebx, dword [esp + 0x150]
mov byte [ebx], dl
mov eax, dword [esp + 0x30]
jmp 0x4becf3
mov ecx, dword [esp + 0x14c]
mov edx, ecx
jmp 0x4becd8
mov edx, dword [esp + 0x14c]
mov ecx, edx
xor eax, eax
jmp 0x4becf3
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], edx
add esp, 0x138
ret
test eax, eax
jne 0x4bf057
mov edx, dword [esp + 0x14c]
test edx, edx
je 0x4bed8e
nop
movzx ebx, byte [0x86e3e0]
test bl, bl
je 0x4bed49
mov dword [0x86e3e4], ecx
mov ecx, dword [0x893c80]
test ecx, ecx
jne 0x4bed35
mov eax, dword [esp + 0x150]
mov dword [0x86e3e8], eax
jmp 0x4bed50
lea edi, [0x86e3e8]
mov eax, dword [esp + 0x150]
call fcn.00463680
jmp 0x4bed50
mov eax, dword [esp + 0x150]
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], eax
mov ecx, dword [esp + 0x110]
test ecx, ecx
je 0x4bed84
nop
movzx ebx, byte [ecx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4bed80
or ebx, 0x80
mov ebp, eax
jmp 0x4bed9b
mov ebp, eax
xor ebx, ebx
xor ecx, ecx
xor eax, eax
jmp 0x4bed9b
mov ebp, dword [esp + 0x150]
xor ebx, ebx
xor ecx, ecx
xor eax, eax
nop
mov esi, ebx
and ebx, 0x1f
cmp ebx, 0x16
je 0x4bee05
cmp ebx, 0x17
je 0x4bedb5
mov ebx, 0xffffffff
jmp 0x4bee6f
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x80], esi
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004bf770
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x150]
mov ebx, eax
mov esi, dword [esp + 0x80]
mov ecx, dword [esp + 0xd4]
mov eax, dword [esp + 0xd8]
jmp 0x4bee6f
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004b78f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x80], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004bf770
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x150]
mov ebx, eax
mov esi, dword [esp + 0x80]
mov ecx, dword [esp + 0x108]
mov eax, dword [esp + 0x10c]
test ebx, ebx
jge 0x4bef3d
mov dword [esp + 0x118], edx
mov dword [esp + 0x11c], ebp
mov eax, dword [esp + 0x118]
test eax, eax
je 0x4bee98
lea ecx, [0x6d0aa4]
jmp 0x4bee9c
xor ecx, ecx
xor eax, eax
mov ecx, dword [ecx + 0x80]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x676cdd]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1a
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044e470
mov eax, dword [esp + 0x14]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], ecx
lea edx, [0x641ce0]
mov dword [esp], edx
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x28]
mov dword [edi + 4], eax
mov eax, dword [0x893c80]
test eax, eax
jne 0x4bef16
mov eax, dword [esp + 0xe4]
mov dword [edi], eax
jmp 0x4bef22
mov eax, dword [esp + 0xe4]
call fcn.00463680
lea eax, [0x6cf424]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], edi
add esp, 0x138
ret
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0xe0], eax
mov dword [esp + 0xdc], ecx
lea eax, [0x638820]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.0044a8a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10c], eax
lea edi, [esp + 0x120]
xor eax, eax
call fcn.0046391a
mov eax, dword [esp + 0x144]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x128], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], ecx
mov edx, dword [esp + 0x13c]
mov dword [esp], edx
mov edx, dword [esp + 0x140]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
call fcn.00491b40
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
je 0x4bf00d
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], edx
add esp, 0x138
ret
lea eax, [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc], eax
call fcn.004bfcc0
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
add esp, 0x138
ret
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
add esp, 0x138
ret
mov ebx, dword [esp + 0xf8]
mov dword [ebx + ecx*4], eax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x44]
cmp edx, ebp
jge 0x4bf102
shl edx, 2
cmp edi, edx
jb 0x4bf119
mov ebx, dword [eax + 0x24]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x64]
cmp ecx, edx
jb 0x4bf074
jmp 0x4bf110
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4becf3
mov eax, ecx
mov ecx, edx
call fcn.00463700
mov eax, edx
mov ecx, edi
call fcn.00463760
mov ebx, dword [esp + 0x100]
mov word [ebx + ecx*2], ax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x4c]
cmp edx, ebp
jge 0x4bf1b1
shl edx, 1
cmp edi, edx
jb 0x4bf1c8
mov ebx, dword [eax + 0x20]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x6c]
cmp ecx, edx
jb 0x4bf122
jmp 0x4bf1bf
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4becf3
mov eax, ecx
mov ecx, edx
call fcn.00463700
mov eax, edx
mov ecx, edi
call fcn.00463760
mov ebp, dword [esp + 0xf0]
lea esi, [ebp + edx*8 + 4]
mov dword [esi], eax
lea eax, [ebp + edx*8]
mov dword [eax], ecx
lea eax, [edx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, edx
mov edx, dword [esp + 0x14c]
mov ebx, ebp
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x3c]
cmp edx, ebp
jge 0x4bf26e
shl edx, 3
cmp edi, edx
jb 0x4bf285
mov ebx, dword [eax + 0x28]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x5c]
cmp edx, ebx
jb 0x4bf1d1
jmp 0x4bf27c
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4becf3
mov eax, edx
mov ecx, ebx
call fcn.00463700
mov eax, edx
mov ecx, edi
call fcn.00463760
mov ebx, dword [esp + 0x104]
mov word [ebx + ecx*2], ax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x50]
cmp edx, ebp
jge 0x4bf31d
shl edx, 1
cmp edi, edx
jb 0x4bf334
mov ebx, dword [eax + 0x20]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x70]
cmp ecx, edx
jb 0x4bf28e
jmp 0x4bf32b
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4becf3
mov eax, ecx
mov ecx, edx
call fcn.00463700
mov eax, edx
mov ecx, edi
call fcn.00463760
mov ebx, dword [esp + 0xec]
movss dword [ebx + eax*4], xmm0
inc eax
mov esi, dword [esp + 0x148]
mov edx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x38]
cmp edx, ebp
jge 0x4bf3d5
shl edx, 2
cmp edi, edx
jb 0x4bf3e8
mov ebx, dword [eax + 0x24]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x74], eax
movss xmm0, dword [esp + 0x74]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x58]
cmp eax, ecx
jb 0x4bf33d
jmp 0x4bf3e3
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4becf3
call fcn.00463700
mov eax, edx
mov ecx, edi
call fcn.00463760
mov ebp, dword [esp + 0xf4]
lea esi, [ebp + edx*8 + 4]
mov dword [esi], eax
lea eax, [ebp + edx*8]
mov dword [eax], ecx
lea eax, [edx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, edx
mov edx, dword [esp + 0x14c]
mov ebx, ebp
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x40]
cmp edx, ebp
jge 0x4bf48e
shl edx, 3
cmp edi, edx
jb 0x4bf4a5
mov ebx, dword [eax + 0x28]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x60]
cmp edx, ebx
jb 0x4bf3f1
jmp 0x4bf49c
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4becf3
mov eax, edx
mov ecx, ebx
call fcn.00463700
mov eax, edx
mov ecx, edi
call fcn.00463760
test dl, dl
setne dl
mov byte [ebx + eax], dl
inc eax
mov edx, edi
cmp eax, ebp
jge 0x4bf4c9
mov edi, edx
movzx edx, byte [eax + esi]
cmp eax, ecx
jb 0x4bf4ae
jmp 0x4bf4d2
mov ecx, edx
mov eax, ebp
jmp 0x4becf3
call fcn.00463700
mov ebx, dword [esp + 0xfc]
mov dword [ebx + ecx*4], eax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x68]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x48]
cmp edx, ebp
jge 0x4bf565
shl edx, 2
cmp edi, edx
jb 0x4bf57c
mov ebx, dword [eax + 0x24]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x68]
cmp ecx, edx
jb 0x4bf4d7
jmp 0x4bf573
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4becf3
mov eax, ecx
mov ecx, edx
call fcn.00463700
mov eax, edx
mov ecx, edi
call fcn.00463760
mov ebx, dword [esp + 0xe8]
movsd qword [ebx + eax*8], xmm0
inc eax
mov esi, dword [esp + 0x148]
mov edx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x34]
cmp edx, ebp
jge 0x4bf62e
shl edx, 3
cmp edi, edx
jb 0x4bf641
mov ebx, dword [eax + 0x28]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], ecx
movsd xmm0, qword [esp + 0x84]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x54]
cmp eax, ecx
jb 0x4bf585
jmp 0x4bf63c
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4becf3
call fcn.00463700
mov eax, edx
mov ecx, edi
call fcn.00463760
mov byte [ebx + eax], dl
inc eax
mov edx, edi
cmp eax, ebp
jge 0x4bf660
mov edi, edx
movzx edx, byte [eax + esi]
cmp eax, ecx
jb 0x4bf64a
jmp 0x4bf669
mov ecx, edx
mov eax, ebp
jmp 0x4becf3
call fcn.00463700
nop
call fcn.00462270
jmp fcn.004be310