Function at 0x4bb440
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
mov eax, dword [0x4eb984]
xor eax, esp
mov dword [esp + 0x68], eax
mov eax, dword [0x520cd4]
push ebp
xor ebp, ebp
push 0x4d94b8
push eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x34], ebp
call fcn.004c3cf8
add esp, 8
mov dword [0x520cd0], eax
cmp eax, ebp
jne 0x4bb49e
mov ecx, dword [0x520cd4]
push ecx
push ebp
mov ecx, 0x51f7e8
call fcn.00433b00
lea eax, [ebp + 0x12]
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
push 2
push 0xffffffffffffffff
push 0xfffe0000
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4bb4ca
mov edx, dword [0x520cd0]
push edx
call fcn.004c44ea
and eax, edx
add esp, 4
cmp eax, 0xffffffff
jne 0x4bb524
mov eax, dword [0x520cd0]
push ebp
push ebp
push ebp
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
je 0x4bb524
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c34b2
mov edx, dword [0x520cd4]
add esp, 4
push edx
push 0x205
mov dword [0x520cd0], ebp
call fcn.004750b0
push eax
push ebp
call fcn.004ace90
add esp, 0xc
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov eax, dword [0x520cd0]
push edi
mov edi, 0x4dfaec
call fcn.004bb350
test eax, eax
jne 0x4bb57c
mov eax, dword [0x520cd0]
push eax
call fcn.004c34b2
add esp, 4
push 0x2ae
mov dword [0x520cd0], ebp
call fcn.004750b0
mov ecx, dword [0x520cd4]
push eax
push ecx
call fcn.004ace90
add esp, 8
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov edx, dword [0x520cd0]
push ebx
push esi
push edx
call fcn.004c44ea
mov esi, eax
mov eax, dword [0x520cd0]
mov ebx, edx
add esp, 4
mov edi, 0x4dfaec
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
call fcn.004bb350
test eax, eax
je 0x4bb5dd
lea esp, [esp]
mov eax, dword [0x520cd0]
push eax
call fcn.004c44ea
mov esi, eax
mov eax, dword [0x520cd0]
mov ebx, edx
add esp, 4
mov edi, 0x4dfaec
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
call fcn.004bb350
test eax, eax
jne 0x4bb5b0
mov ecx, dword [0x520cd0]
push ebp
push ebx
push esi
push ecx
call fcn.004c414f
add esp, 0x10
test eax, eax
je 0x4bb63a
mov edx, dword [0x520cd0]
push edx
call fcn.004c34b2
mov eax, dword [0x520cd4]
add esp, 4
push eax
push 0x205
mov dword [0x520cd0], ebp
call fcn.004750b0
push eax
push ebp
call fcn.004ace90
add esp, 0xc
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov ecx, dword [0x520cd0]
push ecx
push 0x12
lea edx, [esp + 0x4c]
push 1
push edx
call fcn.004c4096
movzx eax, byte [esp + 0x55]
movzx edx, byte [esp + 0x54]
shl ax, 8
movzx ecx, ax
or ecx, edx
movzx edx, byte [esp + 0x57]
shl dx, 8
movzx ebp, dx
movzx edx, byte [esp + 0x63]
shl dx, 8
inc ecx
movzx ebx, dx
movzx edx, byte [esp + 0x61]
lea eax, [ecx - 1]
mov dword [0x520ce8], eax
movzx eax, byte [esp + 0x56]
or ebp, eax
movzx eax, byte [esp + 0x62]
or ebx, eax
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x60]
shl ebx, 0x10
or ebx, eax
movzx eax, byte [esp + 0x5b]
shl ax, 8
or ebx, edx
movzx edx, byte [esp + 0x5a]
or ax, dx
movzx eax, ax
cdq
mov edi, eax
movzx eax, byte [esp + 0x5f]
shl ax, 8
movzx esi, ax
movzx eax, byte [esp + 0x5d]
mov dword [esp + 0x44], edx
movzx edx, byte [esp + 0x5e]
or esi, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x5c]
shl esi, 0x10
or esi, edx
movzx edx, byte [esp + 0x64]
or esi, eax
movzx ax, byte [esp + 0x65]
shl ax, 8
add esp, 0x10
or ax, dx
mov dword [0x520ce4], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0
mov dword [esp + 0x30], edi
mov word [0x51f83c], ax
je 0x4bb7b1
movzx eax, ax
inc eax
push eax
call fcn.004c1d07
add esp, 4
mov dword [0x520d70], eax
test eax, eax
je 0x4bc223
mov ecx, dword [0x520cd0]
movzx edx, word [0x51f83c]
push ecx
push 1
push edx
push eax
call fcn.004c4096
add esp, 0x10
cmp eax, 1
mov eax, dword [0x520d70]
je 0x4bb7a0
push eax
call fcn.004c1404
mov ecx, dword [0x520cd0]
push ecx
mov dword [0x520d70], 0
call fcn.004c3dc2
add esp, 8
neg eax
pop esi
sbb eax, eax
pop ebx
and eax, 9
pop edi
add eax, 2
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
movzx edx, word [0x51f83c]
mov byte [edx + eax], 0
mov ecx, dword [0x520ce4]
or edi, dword [esp + 0x34]
jne 0x4bb7e1
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c34b2
add esp, 4
mov dword [0x520cd0], edi
pop esi
pop ebx
pop edi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
cmp ecx, 1
je 0x4bb90f
cmp dword [0x520c70], 0
jne 0x4bc9ed
mov edx, dword [0x51f844]
push 0x4d7b60
push edx
call fcn.00460550
test al, al
jne 0x4bb83c
mov eax, dword [0x520cd0]
push eax
call fcn.004c34b2
add esp, 4
pop esi
pop ebx
pop edi
mov dword [0x520cd0], 0
mov eax, 0x10
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov ecx, dword [0x520ce4]
cmp ecx, 1
je 0x4bb90f
mov edx, dword [0x520cdc]
mov eax, dword [0x520cd4]
mov di, word [eax]
cmp di, word [edx]
jne 0x4bb87c
test di, di
je 0x4bb878
mov di, word [eax + 2]
cmp di, word [edx + 2]
jne 0x4bb87c
add eax, 4
add edx, 4
test di, di
jne 0x4bb856
xor eax, eax
jmp 0x4bb881
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4bb90f
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c34b2
add esp, 4
cmp word [0x54fd32], 0x53
mov dword [0x520cd0], 0
jne 0x4bb8de
push 0x5fa
call fcn.004750b0
mov edx, dword [0x520cd4]
push eax
push edx
call fcn.004ace90
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 0xc
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
push 0x2c8
call fcn.004750b0
push eax
mov eax, dword [0x520cd4]
push eax
call fcn.004ace90
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 0xc
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
xor edx, edx
cmp dword [0x520c68], 1
mov dword [0x520d40], edx
mov dword [0x520d48], edx
mov dword [0x520d4c], edx
jne 0x4bb931
cmp ecx, 1
je 0x4bb943
cmp dword [0x520c70], edx
je 0x4bbc6a
mov ebx, dword [esp + 0x24]
xor edx, edx
cmp ebx, 0xffffffff
jne 0x4bb94e
cmp dword [esp + 0x28], edx
je 0x4bb9c3
cmp esi, 0xffffffff
jne 0x4bb959
xor eax, eax
cmp eax, edx
je 0x4bb9c3
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub ecx, esi
mov eax, 0
sbb edx, eax
sub ecx, 0x50
push 0
sbb edx, eax
mov eax, dword [0x520cd0]
push edx
push ecx
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4bbfdf
mov eax, dword [0x520cd0]
mov edi, 0x4dfae4
call fcn.004bb350
test eax, eax
je 0x4bbff8
mov eax, dword [0x520cd0]
push eax
call fcn.004c44ea
add esp, 4
mov ecx, 0xfffffffc
sub ecx, ebx
mov esi, 0xffffffff
sbb esi, dword [esp + 0x28]
jmp 0x4bbc5e
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [0x520cd0]
sub eax, 0x18
push 0
sbb ecx, 0
push ecx
push eax
push edx
call fcn.004c414f
add esp, 0x10
test eax, eax
mov eax, dword [0x520cd0]
je 0x4bba32
push eax
call fcn.004c34b2
add esp, 4
push 0x2ae
mov dword [0x520cd0], 0
call fcn.004750b0
mov ecx, dword [0x520cd4]
push eax
push ecx
call fcn.004ace90
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
push 0x4dfadc
call fcn.004bb3f0
test eax, eax
je 0x4bbc6a
mov edx, dword [0x520cd0]
push edx
call fcn.004c44ea
mov esi, eax
mov eax, dword [0x520cd0]
push eax
push 1
lea ecx, [esp + 0x50]
mov edi, edx
push 0x10
sub esi, 4
mov ebx, 0
push ecx
sbb edi, ebx
call fcn.004c4096
add esp, 0x14
cmp eax, 1
je 0x4bba91
mov edx, dword [0x520cd0]
push edx
call fcn.004c34b2
mov dword [0x520cd0], ebx
jmp 0x4bbd3e
mov eax, dword [0x520cd0]
push 0x4dfaec
call fcn.004bb3f0
test eax, eax
jne 0x4bbae2
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c34b2
mov edx, dword [0x520cd4]
add esp, 4
push edx
mov ecx, 0x51f7e8
mov dword [0x520cd0], ebx
call fcn.00433c90
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
movzx ax, byte [esp + 0x4f]
movzx edx, byte [esp + 0x4d]
movzx ecx, byte [esp + 0x4e]
shl ax, 8
movzx eax, ax
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x4c]
shl eax, 0x10
or eax, ecx
movzx ecx, byte [esp + 0x4b]
or eax, edx
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x4a]
or edx, ecx
movzx ecx, byte [esp + 0x49]
shl cx, 8
shl edx, 0x10
movzx ecx, cx
or edx, ecx
movzx ecx, byte [esp + 0x48]
or edx, ecx
xor ebx, ebx
or ebx, edx
movzx edx, byte [esp + 0x53]
xor ecx, ecx
or eax, ecx
movzx ecx, byte [esp + 0x52]
shl dx, 8
mov dword [esp + 0x40], eax
movzx eax, dx
movzx edx, byte [esp + 0x51]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x50]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [0x520ce4], eax
cmp eax, 1
jne 0x4bc9ed
mov eax, dword [esp + 0x40]
mov ecx, dword [0x520cd0]
push 0
push eax
push ebx
push ecx
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4bbbcb
mov eax, dword [0x520cd0]
push 0x4dfad4
call fcn.004bb3f0
test eax, eax
jne 0x4bbc6a
mov ecx, dword [0x520cd0]
push eax
sub esi, 0x50
sbb edi, eax
push edi
push esi
push ecx
call fcn.004c414f
add esp, 0x10
test eax, eax
je 0x4bbc15
mov edx, dword [0x520cd0]
push edx
call fcn.004c34b2
add esp, 4
push 0x2ae
mov dword [0x520cd0], 0
call fcn.004750b0
push eax
mov eax, dword [0x520cd4]
push eax
call fcn.004ace90
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov esi, dword [0x520cd0]
call fcn.004bb290
test eax, eax
je 0x4bbff8
mov ecx, 0x4dfad4
mov edx, 0x5890bc
call fcn.004bb3c0
test eax, eax
je 0x4bbff8
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c44ea
add esp, 4
mov ecx, 0xfffffffc
sub ecx, ebx
mov esi, 0xffffffff
sbb esi, dword [esp + 0x40]
add eax, ecx
adc edx, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub eax, 0x18
push 0
sbb ecx, 0
push ecx
push eax
mov eax, dword [0x520cd0]
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4bbfdf
mov eax, dword [0x520cd0]
push 0x4dfadc
call fcn.004bb3f0
test eax, eax
je 0x4bc198
mov eax, dword [0x520cd0]
push eax
call fcn.004c44ea
mov ecx, dword [0x520cd0]
sub eax, 4
push ecx
mov esi, 0
sbb edx, esi
push 1
mov dword [esp + 0x24], edx
lea edx, [esp + 0x50]
push 0x10
push edx
mov dword [esp + 0x28], eax
call fcn.004c4096
add esp, 0x14
cmp eax, 1
mov eax, dword [0x520cd0]
je 0x4bbd1e
push eax
call fcn.004c34b2
mov ecx, dword [0x520cd4]
add esp, 4
push ecx
mov ecx, 0x51f7e8
mov dword [0x520cd0], esi
call fcn.00433c90
lea eax, [esi + 0xb]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
push 0x4dfaec
call fcn.004bb3f0
test eax, eax
jne 0x4bbd69
mov edx, dword [0x520cd0]
push edx
call fcn.004c34b2
mov dword [0x520cd0], esi
mov eax, dword [0x520cd4]
add esp, 4
push eax
mov ecx, 0x51f7e8
call fcn.00433c90
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
movzx cx, byte [esp + 0x47]
movzx eax, byte [esp + 0x45]
movzx edx, byte [esp + 0x46]
shl ax, 8
shl cx, 8
movzx esi, cx
or esi, edx
movzx edx, byte [esp + 0x44]
movzx ecx, ax
movzx eax, byte [esp + 0x4f]
shl ax, 8
shl esi, 0x10
or esi, ecx
movzx ecx, byte [esp + 0x4e]
or esi, edx
movzx edx, byte [esp + 0x4d]
movzx ebx, ax
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x4b]
or ebx, ecx
movzx ecx, byte [esp + 0x4c]
mov edi, dword [esp + 0x1c]
shl dx, 8
shl ebx, 0x10
or ebx, eax
movzx eax, dx
movzx edx, byte [esp + 0x49]
or ebx, ecx
movzx ecx, byte [esp + 0x4a]
or eax, ecx
shl dx, 8
shl eax, 0x10
movzx ecx, dx
movzx edx, byte [esp + 0x48]
or eax, ecx
or eax, edx
movzx edx, byte [esp + 0x53]
xor ecx, ecx
xor ebp, ebp
or ebp, eax
or ebx, ecx
movzx ecx, byte [esp + 0x52]
add ebp, edi
adc ebx, dword [esp + 0x20]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x51]
or eax, ecx
shl dx, 8
shl eax, 0x10
movzx ecx, dx
movzx edx, byte [esp + 0x50]
or eax, ecx
or eax, edx
mov dword [0x520ce4], eax
dec eax
mov dword [0x520ce8], eax
cmp esi, eax
je 0x4bbeca
mov eax, dword [0x520cd0]
push eax
call fcn.004c34b2
mov ecx, dword [0x520cd4]
add esp, 4
push esi
push ecx
mov dword [0x520cd0], 0
call fcn.0043eb50
mov edi, eax
push 0x4d94b8
push edi
call fcn.004c3cf8
add esp, 8
mov dword [0x520cd0], eax
test eax, eax
jne 0x4bbebd
lea esp, [esp]
push esi
call fcn.0043f4a0
test eax, eax
jne 0x4bca15
push edi
call fcn.004c1404
mov edx, dword [0x520cd4]
add esp, 4
push esi
push edx
call fcn.0043eb50
mov edi, eax
push 0x4d94b8
push edi
call fcn.004c3cf8
add esp, 8
mov dword [0x520cd0], eax
test eax, eax
je 0x4bbe80
push edi
call fcn.004c1404
mov edi, dword [esp + 0x20]
add esp, 4
mov eax, dword [0x520cd0]
push 0
push ebx
push ebp
push eax
mov dword [0x520ce8], esi
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4bbfdf
mov eax, dword [0x520cd0]
push 0x4dfad4
call fcn.004bb3f0
test eax, eax
jne 0x4bbf78
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
sub eax, 0x50
sbb ecx, 0
push ecx
push eax
mov eax, dword [0x520cd0]
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4bbfdf
mov esi, dword [0x520cd0]
call fcn.004bb290
test eax, eax
je 0x4bbfdf
mov ecx, 0x4dfad4
mov edx, 0x5890bc
call fcn.004bb3c0
test eax, eax
je 0x4bbfdf
mov eax, dword [0x520cd0]
push eax
call fcn.004c44ea
add esp, 4
mov edi, eax
mov ecx, 0xfffffffc
sub ecx, ebp
mov eax, 0xffffffff
sbb eax, ebx
add edi, ecx
adc edx, eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edx
mov eax, dword [0x520cd0]
push eax
push 0x34
lea ecx, [esp + 0x4c]
push 1
push ecx
call fcn.004c4096
add esp, 0x10
cmp eax, 0x34
jae 0x4bc02a
push 0x2ae
call fcn.004750b0
mov edx, dword [0x520cd4]
push eax
push edx
call fcn.004ace90
mov eax, dword [0x520cd0]
push eax
call fcn.004c34b2
add esp, 0xc
pop esi
pop ebx
pop edi
mov dword [0x520cd0], 0
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c34b2
add esp, 4
mov dword [0x520cd0], 0
push 0x2ae
call fcn.004750b0
mov edx, dword [0x520cd4]
push eax
push edx
call fcn.004ace90
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
movzx ecx, byte [esp + 0x57]
movzx eax, byte [esp + 0x55]
movzx edx, byte [esp + 0x56]
shl cx, 8
shl ax, 8
movzx ebp, cx
or ebp, edx
movzx edx, byte [esp + 0x54]
movzx ecx, ax
movzx eax, byte [esp + 0x67]
shl ax, 8
movzx esi, byte [esp + 0x62]
shl ebp, 0x10
or ebp, ecx
or ebp, edx
movzx edx, byte [esp + 0x66]
movzx ecx, ax
movzx eax, byte [esp + 0x65]
or ecx, edx
shl ax, 8
movzx edx, ax
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x63]
movzx eax, byte [esp + 0x64]
shl dx, 8
movzx edx, dx
or edx, esi
movzx esi, byte [esp + 0x61]
or ecx, eax
shl si, 8
shl edx, 0x10
movzx esi, si
or edx, esi
movzx esi, byte [esp + 0x60]
or edx, esi
xor eax, eax
or eax, edx
movzx edx, byte [esp + 0x76]
mov dword [esp + 0x30], eax
movzx eax, byte [esp + 0x77]
xor esi, esi
or ecx, esi
movzx esi, byte [esp + 0x72]
shl ax, 8
mov dword [esp + 0x34], ecx
movzx ecx, ax
movzx eax, byte [esp + 0x75]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x74]
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x73]
shl dx, 8
movzx edx, dx
or edx, esi
movzx esi, byte [esp + 0x71]
shl si, 8
movzx esi, si
or ecx, eax
shl edx, 0x10
or edx, esi
movzx esi, byte [esp + 0x70]
xor eax, eax
or edx, esi
or eax, edx
xor esi, esi
or ecx, esi
add eax, edi
adc ecx, dword [esp + 0x20]
mov dword [esp + 0x24], eax
movzx eax, byte [esp + 0x4f]
mov dword [esp + 0x28], ecx
movzx ecx, byte [esp + 0x4e]
shl ax, 8
or ax, cx
cmp ax, 0x2e
jbe 0x4bc198
mov edx, dword [0x520cd4]
push edx
push 0x342
call fcn.004750b0
push eax
mov eax, dword [0x520cd4]
push eax
call fcn.004ace90
mov eax, dword [0x520c68]
add esp, 0xc
cmp eax, 1
je 0x4bc198
cmp eax, 2
je 0x4bc198
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c34b2
add esp, 4
mov dword [0x520cd0], esi
lea eax, [esi + 3]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
adc ecx, dword [esp + 0x20]
xor edi, edi
mov ebx, 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov dword [0x51f850], eax
mov dword [0x51f854], ecx
mov dword [esp + 0x3c], edi
mov dword [0x51f858], edi
mov dword [0x51f85c], edi
mov dword [esp + 0x2c], ebx
cmp dword [0x520ce8], ebp
je 0x4bc1f3
mov edx, dword [0x520cd0]
push edx
call fcn.004c34b2
add esp, 4
mov dword [0x520cd0], edi
mov eax, dword [0x520ce4]
mov dword [0x520ce8], ebp
cmp ebp, eax
jae 0x4bc9a9
dec eax
cmp ebp, eax
jne 0x4bc23b
mov eax, dword [0x520cd4]
push eax
call fcn.004c2b4c
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
cmp esi, edi
jne 0x4bc24e
pop esi
pop ebx
pop edi
mov eax, 4
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov ecx, dword [0x520cd4]
push ebp
push ecx
call fcn.0043eb50
mov dword [esp + 0x10], eax
mov esi, eax
mov eax, dword [0x520cd0]
cmp eax, edi
jne 0x4bc2e9
push 0x4d94b8
push esi
call fcn.004c3cf8
add esp, 8
mov dword [0x520cd0], eax
cmp eax, edi
jne 0x4bc2e9
mov edx, dword [0x520ce8]
push edx
call fcn.0043f4a0
cmp eax, 9
je 0x4bca05
cmp eax, 3
je 0x4bc3e0
mov eax, dword [0x520ce4]
lea ecx, [eax - 1]
mov eax, dword [0x520ce8]
cmp eax, ecx
jne 0x4bc2be
mov edx, dword [0x520cd4]
push edx
call fcn.004c2b4c
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
je 0x4bc223
jmp 0x4bc2ce
push eax
mov eax, dword [0x51f844]
push eax
call fcn.0043eb50
mov dword [esp + 0x10], eax
push 0x4d94b8
push eax
call fcn.004c3cf8
add esp, 8
mov dword [0x520cd0], eax
cmp eax, edi
je 0x4bc272
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x38], edi
jne 0x4bc31e
cmp dword [esp + 0x2c], edi
je 0x4bc322
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push edi
push ecx
push edx
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
mov eax, dword [0x520cd0]
jne 0x4bca2d
mov dword [esp + 0x14], 0x520d68
mov dword [esp + 0x2c], edi
mov esi, eax
call fcn.004bb290
test eax, eax
je 0x4bc95d
mov ebp, dword [esp + 0x14]
mov eax, dword [0x520cd0]
push eax
call fcn.004c44ea
mov dword [0x520cf4], edx
add esp, 4
mov ecx, 0x4dfaec
mov edx, 0x5890bc
mov dword [0x520cf0], eax
call fcn.004bb3c0
test eax, eax
jne 0x4bc95d
mov ecx, 0x4dfad4
mov edx, 0x5890bc
call fcn.004bb3c0
test eax, eax
jne 0x4bc95d
mov ecx, 0x4dfae4
mov edx, 0x5890bc
call fcn.004bb3c0
test eax, eax
jne 0x4bc3e9
cmp dword [0x520c68], ebx
je 0x4bc94a
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c34b2
add esp, 4
mov dword [0x520cd0], edi
push 0x2ae
call fcn.004750b0
mov edx, dword [esp + 0x10]
push eax
push edx
call fcn.004ace90
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov dword [esp + 0x38], ebx
jmp 0x4bc98e
mov ecx, dword [0x520cd0]
push ecx
push ebx
lea edx, [esp + 0x4c]
push 0x2a
push edx
call fcn.004c4096
add esp, 0x10
cmp eax, ebx
jne 0x4bc93e
push 0x80
call fcn.004c1d07
mov esi, eax
add esp, 4
cmp esi, edi
je 0x4bc223
movzx eax, byte [esp + 0x45]
movzx ecx, byte [esp + 0x44]
shl ax, 8
or ax, cx
mov word [esi], ax
movzx edx, byte [esp + 0x47]
movzx eax, byte [esp + 0x46]
shl dx, 8
or dx, ax
mov word [esi + 2], dx
movzx ecx, byte [esp + 0x49]
movzx edx, byte [esp + 0x48]
shl cx, 8
or cx, dx
mov word [esi + 4], cx
movzx eax, byte [esp + 0x4b]
movzx ecx, byte [esp + 0x4a]
shl ax, 8
or ax, cx
mov word [esi + 6], ax
movzx edx, byte [esp + 0x4f]
movzx ecx, byte [esp + 0x4e]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x4d]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x4c]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [esi + 8], eax
movzx eax, byte [esp + 0x53]
movzx edx, byte [esp + 0x52]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x51]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x50]
shl ecx, 0x10
or ecx, edx
or ecx, eax
mov dword [esi + 0xc], ecx
movzx ecx, byte [esp + 0x57]
movzx eax, byte [esp + 0x56]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x55]
or edx, eax
shl cx, 8
shl edx, 0x10
movzx eax, cx
movzx ecx, byte [esp + 0x54]
or edx, eax
or edx, ecx
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], edi
movzx edx, byte [esp + 0x5b]
movzx ecx, byte [esp + 0x5a]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x59]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x58]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], edi
movzx eax, byte [esp + 0x5d]
movzx ecx, byte [esp + 0x5c]
shl ax, 8
or ax, cx
mov word [esi + 0x20], ax
movzx edx, byte [esp + 0x5f]
shl dx, 8
movzx eax, byte [esp + 0x5e]
or dx, ax
mov word [esi + 0x24], dx
movzx ecx, byte [esp + 0x61]
movzx edx, byte [esp + 0x60]
shl cx, 8
or cx, dx
mov word [esi + 0x26], cx
movzx eax, byte [esp + 0x63]
movzx edx, byte [esp + 0x62]
shl ax, 8
movzx ecx, ax
or ecx, edx
mov dword [esi + 0x28], ecx
movzx eax, byte [esp + 0x65]
movzx ecx, byte [esp + 0x64]
shl ax, 8
or ax, cx
mov word [esi + 0x2c], ax
movzx edx, byte [esp + 0x69]
movzx ecx, byte [esp + 0x68]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x67]
or eax, ecx
shl eax, 0x10
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x66]
or eax, ecx
or eax, edx
mov dword [esi + 0x38], eax
movzx eax, byte [esp + 0x6d]
movzx edx, byte [esp + 0x6c]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x6b]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x6a]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, word [esi + 0x20]
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], edi
mov dword [esi + 0x48], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edi
cmp ax, di
jne 0x4bc62e
cmp dword [0x520c68], ebx
jne 0x4bc3b0
jmp 0x4bc94a
movzx ecx, ax
add ecx, ebx
push ecx
call fcn.004c1d07
add esp, 4
mov dword [esi + 0x4c], eax
cmp eax, edi
je 0x4bc223
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4bc667
movzx edx, ax
push edx
call fcn.004c1d07
add esp, 4
mov dword [esi + 0x44], eax
cmp eax, edi
je 0x4bc223
movzx eax, word [esi + 0x26]
cmp ax, di
je 0x4bc687
movzx eax, ax
push eax
call fcn.004c1d07
add esp, 4
mov dword [esi + 0x48], eax
cmp eax, edi
je 0x4bc223
mov ecx, dword [0x520cd0]
movzx edx, word [esi + 0x20]
mov eax, dword [esi + 0x4c]
push ecx
push ebx
push edx
push eax
call fcn.004c4096
add esp, 0x10
cmp eax, ebx
jne 0x4bc93e
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4bc6d1
mov ecx, dword [0x520cd0]
push ecx
movzx edx, ax
mov eax, dword [esi + 0x44]
push ebx
push edx
push eax
call fcn.004c4096
add esp, 0x10
cmp eax, ebx
jne 0x4bc93e
movzx eax, word [esi + 0x26]
cmp ax, di
je 0x4bc6fa
mov ecx, dword [0x520cd0]
push ecx
movzx edx, ax
mov eax, dword [esi + 0x48]
push ebx
push edx
push eax
call fcn.004c4096
add esp, 0x10
cmp eax, ebx
jne 0x4bc93e
movzx ecx, word [esi + 0x20]
mov edx, dword [esi + 0x4c]
mov eax, 0x800
mov byte [ecx + edx], 0
test word [esi + 4], ax
jne 0x4bc736
push esi
call fcn.004ba370
cmp dword [esi + 0x58], edi
jne 0x4bc736
movzx ecx, byte [esi + 1]
mov edx, dword [esi + 0x4c]
push ecx
push edx
call fcn.004b9e70
test al, al
je 0x4bc736
mov eax, 0x800
or word [esi + 4], ax
mov ecx, 0x800
test word [esi + 4], cx
je 0x4bc773
mov edx, dword [esi + 0x4c]
push edx
call fcn.004d107b
add esp, 4
mov dword [esi + 0x58], eax
test eax, eax
je 0x4bc223
push eax
call fcn.0043f200
mov edi, eax
test edi, edi
je 0x4bc773
mov eax, dword [esi + 0x4c]
push eax
call fcn.004c1404
add esp, 4
mov dword [esi + 0x4c], edi
movzx eax, word [esi]
movzx ecx, al
shr ax, 8
xor edi, edi
cmp ax, di
jne 0x4bc79c
test dword [esi + 0x38], 0xffff0000
je 0x4bc7ad
cmp ecx, 0x19
je 0x4bc79c
cmp ecx, 0x1a
je 0x4bc79c
cmp ecx, 0x28
jne 0x4bc7ad
cmp ax, 6
je 0x4bc7ad
cmp ax, 0xb
jne 0x4bc7b8
cmp ecx, 0x32
jne 0x4bc7b8
mov eax, dword [esi + 0x4c]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
movzx eax, word [esi]
movzx ecx, al
shr ax, 8
cmp ax, di
jne 0x4bc7df
test dword [esi + 0x38], 0xffff0000
je 0x4bc7f0
cmp ecx, 0x19
je 0x4bc7df
cmp ecx, 0x1a
je 0x4bc7df
cmp ecx, 0x28
jne 0x4bc7f0
cmp ax, 6
je 0x4bc7f0
cmp ax, 0xb
jne 0x4bc7fb
cmp ecx, 0x32
jne 0x4bc7fb
mov eax, dword [esi + 0x48]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
call fcn.004ba5b0
mov edx, 1
cmp dword [0x520c68], edx
jne 0x4bc815
cmp dword [0x520ce4], edx
je 0x4bc81d
cmp dword [0x520c70], edi
je 0x4bc82b
mov ecx, dword [esp + 0x1c]
add dword [esi + 0x30], ecx
mov eax, dword [esp + 0x20]
adc dword [esi + 0x34], eax
cmp dword [esi + 0x28], edi
jne 0x4bc871
cmp dword [esp + 0x3c], edi
je 0x4bc84e
mov ecx, dword [esi + 0x34]
cmp ecx, dword [0x51f85c]
ja 0x4bc871
jb 0x4bc84e
mov eax, dword [esi + 0x30]
cmp eax, dword [0x51f858]
jae 0x4bc871
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x30]
cmp eax, dword [esp + 0x28]
ja 0x4bc871
jb 0x4bc862
cmp ecx, dword [esp + 0x24]
jae 0x4bc871
mov dword [0x51f858], ecx
mov dword [0x51f85c], eax
mov dword [esp + 0x3c], edx
add dword [0x51f840], edx
mov ecx, dword [esi + 0x4c]
push ecx
mov dword [esi + 0x6c], edi
mov dword [esi + 0x70], edi
call fcn.00494c30
mov dword [esi + 0x50], eax
cmp eax, edi
je 0x4bc223
push eax
call fcn.004d107b
add esp, 4
mov dword [esi + 0x3c], eax
cmp eax, edi
je 0x4bc223
mov edx, dword [esi + 0x4c]
push edx
call fcn.004d107b
add esp, 4
mov dword [esi + 0x54], eax
cmp eax, edi
jne 0x4bc8bf
push 4
call fcn.004b7c00
mov eax, dword [esi + 0x58]
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], edi
cmp eax, edi
je 0x4bc90c
push eax
call fcn.0043f200
cmp eax, edi
jne 0x4bc8ed
mov eax, dword [esi + 0x4c]
push eax
call fcn.004d107b
add esp, 4
cmp eax, edi
je 0x4bc223
push eax
call fcn.004d107b
add esp, 4
mov dword [esi + 0x5c], eax
cmp eax, edi
je 0x4bc223
mov ecx, dword [esi + 0x58]
push ecx
call fcn.00494970
jmp 0x4bc915
mov edx, dword [esi + 0x4c]
push edx
call fcn.00494900
push eax
mov dword [esi + 0x64], eax
call fcn.00494c80
mov dword [esi + 0x68], eax
cmp eax, edi
je 0x4bc223
lea eax, [esi + 0x78]
mov dword [ebp], esi
mov dword [eax], edi
mov ebp, eax
xor edi, edi
mov dword [esp + 0x14], ebp
lea ebx, [edi + 1]
jmp 0x4bc94a
cmp dword [0x520c68], ebx
jne 0x4bca69
mov esi, dword [0x520cd0]
call fcn.004bb290
test eax, eax
jne 0x4bc335
mov eax, dword [0x520cd0]
push eax
call fcn.004c34b2
mov ecx, dword [esp + 0x14]
push ecx
mov dword [0x520cd0], edi
call fcn.004c1404
add esp, 8
mov ecx, 0x4dfae4
mov edx, 0x5890bc
call fcn.004bb3c0
test eax, eax
je 0x4bc9a9
mov ebp, dword [0x520ce8]
mov eax, dword [0x520ce4]
add ebp, ebx
mov dword [0x520ce8], ebp
cmp ebp, eax
jb 0x4bc206
mov eax, dword [0x51f840]
mov ecx, dword [esp + 0x30]
xor edx, edx
cmp eax, ecx
jne 0x4bc9c2
cmp edx, dword [esp + 0x34]
je 0x4bb7cc
movzx eax, ax
cmp eax, ecx
jne 0x4bc9d3
cmp edi, dword [esp + 0x34]
je 0x4bb7cc
push 0x2ae
call fcn.004750b0
mov edx, dword [0x51f844]
push eax
push edx
call fcn.004ace90
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov edx, dword [esp + 0x10]
push edx
push edi
mov ecx, 0x51f7e8
call fcn.00433b00
pop esi
pop ebx
pop edi
mov eax, 9
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
push eax
call fcn.004c34b2
add esp, 4
push esi
push 0x205
mov dword [0x520cd0], edi
call fcn.004750b0
push eax
push edi
call fcn.004ace90
add esp, 0xc
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret
mov eax, dword [0x520cd0]
push eax
call fcn.004c3dc2
add esp, 4
mov esi, eax
neg esi
sbb esi, esi
and esi, 9
add esi, 2
cmp esi, 0xb
jne 0x4bca97
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x51f7e8
call fcn.00433c90
mov ecx, dword [esp + 0x78]
mov eax, esi
pop esi
pop ebx
pop edi
pop ebp
xor ecx, esp
call fcn.004c0c62
add esp, 0x6c
ret