Function at 0x4d0710
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x4d1a94
sub esp, 0xa8
mov eax, dword [esp + 0xac]
mov dword [eax + 0xc], 0
lea ecx, [0x68ec00]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.00409970
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x4d130e
mov ecx, dword [esp + 0xb4]
test ecx, ecx
je 0x4d0e15
mov ecx, dword [ecx + 8]
cmp ecx, 0x6e78e923
ja 0x4d0ad2
cmp ecx, 0x43cfbb1f
ja 0x4d091c
cmp ecx, 0x338a7ec0
jbe 0x4d0867
cmp ecx, 0x4072c7d5
jne 0x4d07d4
mov ecx, dword [esp + 0xb4]
lea edx, [0x6793c0]
cmp ecx, edx
jne 0x4d0e1c
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4d1900
cmp ecx, 0x43cfbb1f
jne 0x4d085b
mov ecx, dword [esp + 0xb4]
lea edx, [0x677e80]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cfcb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044edf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4d0851
mov dword [edi], eax
jmp 0x4d146d
call fcn.004643a0
jmp 0x4d146d
mov ecx, dword [esp + 0xb4]
jmp 0x4d0e1c
cmp ecx, 0x2e74d42b
jne 0x4d08bf
mov ecx, dword [esp + 0xb4]
lea edx, [0x679800]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004ce6c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4d146d
cmp ecx, 0x338a7ec0
jne 0x4d0910
mov ecx, dword [esp + 0xb4]
lea edx, [0x67c700]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cec80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d146d
mov ecx, dword [esp + 0xb4]
jmp 0x4d0e1c
cmp ecx, 0x510ad14d
jbe 0x4d0a06
cmp ecx, 0x62de383d
je 0x4d09bd
cmp ecx, 0x6d448d5d
jne 0x4d0960
mov ecx, dword [esp + 0xb4]
lea edx, [0x679400]
cmp ecx, edx
jne 0x4d0e1c
nop
mov eax, dword [esp + 0xb0]
xor ecx, ecx
jmp 0x4d1770
cmp ecx, 0x6e78e923
jne 0x4d09b1
mov ecx, dword [esp + 0xb4]
lea edx, [0x67c680]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cec80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d146d
mov ecx, dword [esp + 0xb4]
jmp 0x4d0e1c
mov ecx, dword [esp + 0xb4]
lea edx, [0x6797c0]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004ce6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d146d
cmp ecx, 0x49163278
jne 0x4d0a5e
mov ecx, dword [esp + 0xb4]
lea edx, [0x67c740]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004cec80
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4d146d
cmp ecx, 0x510ad14d
jne 0x4d0ac6
mov ecx, dword [esp + 0xb4]
lea edx, [0x677f80]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x40
call fcn.004cfab0
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
cvtsd2ss xmm0, xmm1
movss dword [eax + 4], xmm0
jmp 0x4d146d
mov ecx, dword [esp + 0xb4]
jmp 0x4d0e1c
cmp ecx, 0xba585d67
ja 0x4d0c56
cmp ecx, 0x889ce7f8
ja 0x4d0ba8
cmp ecx, 0x7afcd172
jne 0x4d0b4a
mov ecx, dword [esp + 0xb4]
lea edx, [0x677f40]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004cfab0
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
jmp 0x4d146d
cmp ecx, 0x889ce7f8
jne 0x4d0b9c
mov ecx, dword [esp + 0xb4]
lea edx, [0x67c6c0]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004cec80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4d146d
mov ecx, dword [esp + 0xb4]
jmp 0x4d0e1c
cmp ecx, 0x8f96facd
jne 0x4d0bf9
mov ecx, dword [esp + 0xb4]
lea edx, [0x67c7c0]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cec80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d146d
cmp ecx, 0xba585d67
jne 0x4d0c4a
mov ecx, dword [esp + 0xb4]
lea edx, [0x679740]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004ce6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov dword [ecx], eax
jmp 0x4d146d
mov ecx, dword [esp + 0xb4]
jmp 0x4d0e1c
cmp ecx, 0xd6631a7c
ja 0x4d0d11
cmp ecx, 0xc3230e0b
jne 0x4d0cb4
mov ecx, dword [esp + 0xb4]
lea edx, [0x679780]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004ce6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov word [ecx], ax
jmp 0x4d146d
cmp ecx, 0xd6631a7c
jne 0x4d0d05
mov ecx, dword [esp + 0xb4]
lea edx, [0x679840]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004ce6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4d146d
mov ecx, dword [esp + 0xb4]
jmp 0x4d0e1c
cmp ecx, 0xe47f76c1
jne 0x4d0d75
mov ecx, dword [esp + 0xb4]
lea edx, [0x67c000]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cfcb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4d0d6b
mov dword [edi], eax
jmp 0x4d146d
call fcn.004643a0
jmp 0x4d146d
cmp ecx, 0xf3b50de0
jne 0x4d0dc6
mov ecx, dword [esp + 0xb4]
lea edx, [0x67c780]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004cec80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4d146d
cmp ecx, 0xfcd60fce
jne 0x4d0e0c
mov ecx, dword [esp + 0xb4]
lea edx, [0x677ec0]
cmp ecx, edx
jne 0x4d0e1c
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cddc0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0xb8]
mov byte [ecx], al
jmp 0x4d146d
mov ecx, dword [esp + 0xb4]
jmp 0x4d0e1c
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb4]
test edx, edx
je 0x4d0ea5
nop
movzx ebx, byte [0x8b2ca0]
test bl, bl
je 0x4d0e66
mov dword [0x8b2ca4], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4d0e52
mov eax, dword [esp + 0xb8]
mov dword [0x8b2ca8], eax
jmp 0x4d0e6d
lea edi, [0x8b2ca8]
mov eax, dword [esp + 0xb8]
call fcn.004643a0
jmp 0x4d0e6d
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x4d0e9d
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4d0eab
or edx, 0x80
jmp 0x4d0eab
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4d0eab
xor edx, edx
xor ecx, ecx
xor eax, eax
nop
mov ebx, edx
and edx, 0x1f
cmp edx, 0x16
jne 0x4d1679
mov dword [esp + 0x58], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048a570
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x38], edx
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x4d1060
cmp edx, 1
je 0x4d1016
lea ebp, [edx - 2]
cmp ebp, 4
ja 0x4d0f90
test ebx, 0x200
jne 0x4d0f23
lea edx, [0x728fe4]
jmp 0x4d0f3f
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov eax, ecx
mov ecx, dword [edx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004ce6c0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048be80
jmp 0x4d146d
cmp edx, 7
jb 0x4d157b
test ebx, 0x200
jne 0x4d0fa9
lea edx, [0x728fe4]
jmp 0x4d0fc5
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov eax, ecx
mov ecx, dword [edx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cec80
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048c460
jmp 0x4d146d
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cddc0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.0048b9f0
jmp 0x4d146d
cmp edx, 0x10
ja 0x4d11d5
cmp edx, 0xe
jbe 0x4d10eb
test ebx, 0x200
jne 0x4d107e
lea edx, [0x728fe4]
jmp 0x4d109a
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov eax, ecx
mov ecx, dword [edx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cfab0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0048bcf0
jmp 0x4d146d
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cd820
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cdd50
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cf1c0
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x38]
test edx, 0x200
jne 0x4d1146
lea ebx, [0x728fe4]
mov ebp, dword [esp + 0x94]
jmp 0x4d1170
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov ebp, ecx
mov eax, dword [ebx + 0x18]
mov dword [esp], ebp
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004cf800
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.0048bdc0
jmp 0x4d146d
cmp edx, 0x17
je 0x4d1234
cmp edx, 0x18
jne 0x4d157b
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cfcb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0048c560
jmp 0x4d146d
test ebx, 0x200
jne 0x4d1244
lea edx, [0x728fe4]
jmp 0x4d1260
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov eax, ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x2c], edx
mov ecx, dword [edx + 0x28]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4d147d
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.004cfcb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048d120
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048b8e0
xor eax, eax
jmp 0x4d1421
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
lea ecx, [0x72897c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test edx, edx
jne 0x4d1351
add esp, 0xa8
ret
mov ebp, dword [0x8b26ac]
cmp dword [0x8b26a8], eax
je 0x4d13b2
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], ebx
lea eax, [0x690d60]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093f0
mov eax, dword [esp + 8]
lea ecx, [0x690d60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
mov dword [esp + 0x50], edx
mov dword [esp + 0x88], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004038b0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4d13e7
mov edx, dword [0x8b26d0]
mov ebx, dword [0x8b26d4]
jmp 0x4d135f
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x88]
jmp 0x4d135f
mov ebp, dword [esp + 0x70]
movzx esi, byte [ebp + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
call fcn.0048c460
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jge 0x4d146d
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov edx, dword [esp + 0x90]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048a810
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jb 0x4d13f7
jmp 0x4d1474
add esp, 0xa8
ret
mov eax, ebx
mov ecx, ebp
call fcn.00464420
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4d1556
lea eax, [0x728fe4]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6c3896]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], ecx
lea edx, [0x690d00]
mov dword [esp], edx
call fcn.0040bd00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov eax, dword [0x8d9190]
test eax, eax
jne 0x4d154b
mov eax, dword [esp + 0x78]
mov dword [edi], eax
lea eax, [0x727230]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x690d60]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093f0
mov eax, dword [esp + 8]
lea ecx, [0x690d60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
mov eax, dword [esp + 0x78]
call fcn.004643a0
jmp 0x4d1508
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4d1496
mov eax, dword [esp + 0x58]
test eax, 0x200
jne 0x4d1654
lea eax, [0x728fe4]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6c3896]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
lea edx, [0x690d00]
mov dword [esp], edx
call fcn.0040bd00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x3c]
mov dword [edi + 4], eax
mov eax, dword [0x8d9190]
test eax, eax
jne 0x4d1649
mov eax, dword [esp + 0x74]
mov dword [edi], eax
lea eax, [0x727230]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x690d60]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093f0
mov eax, dword [esp + 8]
lea ecx, [0x690d60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
mov eax, dword [esp + 0x74]
call fcn.004643a0
jmp 0x4d1606
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4d1594
test ebx, ebx
je 0x4d1753
test ebx, 0x200
jne 0x4d1753
lea eax, [0x728fe4]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6c5313]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
lea edx, [0x690d00]
mov dword [esp], edx
call fcn.0040bd00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], eax
mov eax, dword [0x8d9190]
test eax, eax
jne 0x4d1748
mov eax, dword [esp + 0x7c]
mov dword [edi], eax
lea eax, [0x727230]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x690d60]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093f0
mov eax, dword [esp + 8]
lea ecx, [0x690d60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
mov eax, dword [esp + 0x7c]
call fcn.004643a0
jmp 0x4d1705
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
jmp 0x4d1693
cmp ecx, 8
jge 0x4d1815
lea edx, [0x6c085e]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4d178e
inc ecx
jmp 0x4d17b7
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045cc80
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x6c085e]
cmp eax, ebx
jne 0x4d1770
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cd820
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cdd50
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cf1c0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40
call fcn.004cf800
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0xb8]
movsd qword [eax], xmm0
jmp 0x4d146d
lea ecx, [esp + 0x5c]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f170
mov dword [esp], 0
lea eax, [0x6c1717]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x6bff00]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6c04c9]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044eac0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ecx
lea edx, [0x690d00]
mov dword [esp], edx
call fcn.0040bd00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x48]
mov dword [edi + 4], eax
mov eax, dword [0x8d9190]
test eax, eax
jne 0x4d18f2
mov eax, dword [esp + 0x80]
mov dword [edi], eax
lea eax, [0x727230]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x690d60]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093f0
mov eax, dword [esp + 8]
lea ecx, [0x690d60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
mov eax, dword [esp + 0x80]
call fcn.004643a0
jmp 0x4d18af
cmp ecx, 8
jge 0x4d19a9
lea edx, [0x6c085e]
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4d191e
inc ecx
jmp 0x4d1947
mov dword [esp], edx
mov dword [esp + 4], 8
mov dword [esp + 8], ecx
call fcn.0045cc80
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xb0]
lea edx, [0x6c085e]
cmp eax, ebx
jne 0x4d1900
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cd820
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cdd50
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.004cf1c0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 0xc], 0x20
call fcn.004cf800
movsd xmm0, qword [esp + 0x10]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0xb8]
movss dword [eax], xmm0
jmp 0x4d146d
lea ecx, [esp + 0x60]
mov dword [esp], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call fcn.0044f170
mov dword [esp], 0
lea eax, [0x6c1717]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
lea eax, [0x6bff00]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 6
lea eax, [0x6c04c2]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 7
call fcn.0044eac0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
lea edx, [0x690d00]
mov dword [esp], edx
call fcn.0040bd00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x4c]
mov dword [edi + 4], eax
mov eax, dword [0x8d9190]
test eax, eax
jne 0x4d1a86
mov eax, dword [esp + 0x84]
mov dword [edi], eax
lea eax, [0x727230]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
lea eax, [0x690d60]
mov dword [esp], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.004093f0
mov eax, dword [esp + 8]
lea ecx, [0x690d60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436170
mov eax, dword [esp + 0x84]
call fcn.004643a0
jmp 0x4d1a43
call fcn.00462f90
jmp fcn.004d0710