Function at 0x4b21f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x4b3a4e
sub esp, 0xac
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x4b3385
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x4b3381
test eax, 0x200
jne 0x4b2244
lea edx, [0x73f518]
mov ebx, dword [esp + 0xb0]
jmp 0x4b227c
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bc560
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
test ecx, 0x200
jne 0x4b2293
lea ebp, [0x73f518]
mov esi, dword [esp + 0xbc]
jmp 0x4b22db
mov dword [esp + 0x74], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004bc560
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x74]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
cmp edx, ebp
jne 0x4b22f8
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00403790
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4b2307
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [0x6e5d1c]
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb8]
mov dword [esp + 8], ebp
mov esi, dword [esp + 0xbc]
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0xc4]
mov dword [esp + 0x14], esi
lea edx, [0x6e5d1c]
call eax
movzx eax, byte [esp + 0x18]
test al, al
je 0x4b2549
nop
mov eax, dword [esp + 0xb8]
mov ecx, eax
and eax, 0x1f
add eax, 0xffffffeb
nop
cmp eax, 1
ja 0x4b23b2
mov eax, dword [esp + 0xb0]
cmp dword [eax], 4
jne 0x4b3a35
mov edx, dword [eax + 4]
test edx, edx
je 0x4b3a35
test ecx, 0x80
je 0x4b23a7
mov edx, dword [esp + 0xb4]
mov ebx, dword [edx]
jmp 0x4b23c2
mov edx, dword [esp + 0xb4]
mov ebx, edx
jmp 0x4b23c2
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov ebx, edx
nop
mov ebp, dword [esp + 0xc4]
mov esi, ebp
and ebp, 0x1f
add ebp, 0xffffffeb
nop
cmp ebp, 1
ja 0x4b2412
mov ebp, dword [esp + 0xbc]
cmp dword [ebp], 4
jne 0x4b3a1d
mov edi, dword [ebp + 4]
test edi, edi
je 0x4b3a1d
test esi, 0x80
je 0x4b2407
mov edi, dword [esp + 0xc0]
mov ebp, dword [edi]
jmp 0x4b241b
mov edi, dword [esp + 0xc0]
mov ebp, edi
jmp 0x4b241b
mov edi, dword [esp + 0xc0]
mov ebp, edi
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebp
cmp ebp, ebx
jae 0x4b243d
test ecx, 0x200
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x78]
jmp 0x4b244e
test ecx, 0x200
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], ebp
jne 0x4b246f
mov dword [esp + 0x60], eax
lea eax, [0x73f518]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x60]
jmp 0x4b2498
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004bc560
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x30], eax
mov eax, ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], eax
lea edx, [0x68fe40]
mov dword [esp], edx
mov esi, dword [esp + 0xc8]
mov dword [esp + 4], esi
lea edi, [esp + 0x9c]
mov dword [esp + 8], edi
call fcn.0040c670
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
jne 0x4b3372
mov eax, dword [esp + 0x80]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xa8], eax
lea eax, [0x68fe40]
mov dword [esp], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
lea ecx, [esp + 0x9c]
mov dword [esp + 8], ecx
call fcn.0040cbc0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
nop
mov eax, dword [esp + 0xb8]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x4b2920
cmp eax, 0xc
jbe 0x4b2693
cmp eax, 0xe
jbe 0x4b2623
lea edx, [eax - 0xf]
cmp edx, 1
jbe 0x4b2589
cmp eax, 0x11
jne 0x4b32d0
xor eax, eax
jmp 0x4b3909
cmp eax, 0xf
jne 0x4b25a8
mov eax, dword [esp + 0xb4]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
movss xmm1, dword [eax + 4]
cvtss2sd xmm1, xmm1
jmp 0x4b25b8
mov eax, dword [esp + 0xb4]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0xc4]
and eax, 0x1f
cmp eax, 0xf
jne 0x4b25e2
mov eax, dword [esp + 0xc0]
movss xmm2, dword [eax]
cvtss2sd xmm2, xmm2
movss xmm3, dword [eax + 4]
cvtss2sd xmm3, xmm3
jmp 0x4b25fb
cmp eax, 0x10
jne 0x4b38bd
mov eax, dword [esp + 0xc0]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm2
sete cl
setnp al
and ecx, eax
ucomisd xmm1, xmm3
sete dl
setnp al
and edx, eax
and ecx, edx
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 0xd
jne 0x4b2639
mov eax, dword [esp + 0xb4]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x4b2644
mov eax, dword [esp + 0xb4]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0xc4]
and eax, 0x1f
cmp eax, 0xd
jne 0x4b2665
mov eax, dword [esp + 0xc0]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x4b2679
cmp eax, 0xe
jne 0x4b387f
mov eax, dword [esp + 0xc0]
movsd xmm1, qword [eax]
ucomisd xmm1, xmm0
sete cl
setnp al
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 1
jne 0x4b26f4
mov eax, dword [esp + 0xb4]
movzx eax, byte [eax]
mov ecx, dword [esp + 0xc4]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x4b26da
mov byte [esp + 0x27], al
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004b8bf0
movzx eax, byte [esp + 0x27]
mov ecx, dword [esp + 0xc0]
cmp byte [ecx], al
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
lea edx, [eax - 2]
cmp edx, 4
ja 0x4b280b
cmp eax, 3
ja 0x4b272b
cmp eax, 2
jne 0x4b271a
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b2768
mov ecx, dword [esp + 0xb4]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b2768
cmp eax, 4
jne 0x4b2741
mov ecx, dword [esp + 0xb4]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b2768
cmp eax, 5
jne 0x4b2756
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b2768
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0xc4]
and edx, 0x1f
mov dword [esp + 0x5c], edx
cmp edx, 3
ja 0x4b27ab
cmp edx, 2
jne 0x4b2791
mov edx, dword [esp + 0xc0]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4b27f1
cmp edx, 3
jne 0x4b3845
mov ebx, dword [esp + 0xc0]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4b27f1
cmp edx, 4
jne 0x4b27c1
mov ebx, dword [esp + 0xc0]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4b27f1
cmp edx, 5
jne 0x4b27d6
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4b27f1
cmp edx, 6
jne 0x4b3845
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 7
jb 0x4b32d0
cmp eax, 9
ja 0x4b284c
cmp eax, 7
jne 0x4b282b
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4b287c
cmp eax, 8
jne 0x4b283e
mov ecx, dword [esp + 0xb4]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4b287c
mov ecx, dword [esp + 0xb4]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4b287c
cmp eax, 0xa
jne 0x4b285e
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4b287c
cmp eax, 0xb
jne 0x4b2871
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4b287c
mov edx, dword [esp + 0xb4]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0xc4]
and edx, 0x1f
mov dword [esp + 0x5c], edx
cmp edx, 9
ja 0x4b28cc
cmp edx, 7
jne 0x4b28a2
mov edx, dword [esp + 0xc0]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4b2906
cmp edx, 8
jne 0x4b28b5
mov ebx, dword [esp + 0xc0]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4b2906
cmp edx, 9
jne 0x4b380b
mov ebx, dword [esp + 0xc0]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4b2906
cmp edx, 0xa
jne 0x4b28de
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4b2906
cmp edx, 0xb
jne 0x4b28f1
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4b2906
cmp edx, 0xc
jne 0x4b380b
mov ebp, dword [esp + 0xc0]
mov edx, dword [ebp]
xor ebx, ebx
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 0x15
jbe 0x4b2dd3
cmp eax, 0x17
jbe 0x4b29f9
cmp eax, 0x18
je 0x4b296d
cmp eax, 0x19
jne 0x4b32d0
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004bb210
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
xor ecx, ecx
jmp 0x4b371b
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [esp + 0xc4]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x4b2998
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4b29ce
mov dword [esp + 0x68], eax
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004bc480
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x28]
cmp edx, ecx
je 0x4b29d6
xor eax, eax
jmp 0x4b29eb
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x16
je 0x4b2cc1
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4b2a3b
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4b2a31
test ebp, 0x200
jmp 0x4b2a73
cmp ebx, 0x14
je 0x4b2a4d
jmp 0x4b36d6
cmp ebx, 0x16
ja 0x4b2a48
test ebp, 0x200
jmp 0x4b2a73
cmp ebx, 0x17
jne 0x4b2a64
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4b2aa8
cmp ebx, 0x1a
jne 0x4b36d6
test ebp, 0x200
je 0x4b2a80
mov esi, dword [esp + 0xc0]
xor edi, edi
jmp 0x4b2aa8
test ebp, 0x80
je 0x4b2a93
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
jmp 0x4b2a9c
mov esi, dword [esp + 0xc0]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
test edx, edx
setne dl
xor edx, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4b2cb2
mov edx, dword [eax + 4]
cmp ebx, 0x17
jne 0x4b2ac7
mov ebx, dword [esi + 4]
jmp 0x4b2b06
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.004ba740
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
cmp ebx, edx
jne 0x4b2ca3
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004bc6b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004bc6b0
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
je 0x4b2c94
mov eax, dword [esp + 0xb8]
test eax, 0x200
jne 0x4b2b83
lea ecx, [0x73f518]
mov edx, dword [esp + 0xb0]
jmp 0x4b2bad
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bc560
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4b2bd3
xor eax, eax
jmp 0x4b35e5
mov eax, dword [esp + 0xb0]
cmp dword [0x8f72a0], eax
jne 0x4b2bf0
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4b2c16
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.004b8c90
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xbc]
cmp dword [0x8f72a0], edx
jne 0x4b2c33
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4b2c69
mov dword [esp + 0x2c], eax
mov dword [esp + 0x6c], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 8], eax
call fcn.004b8c90
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x6c]
cmp eax, edx
je 0x4b2c71
xor eax, eax
jmp 0x4b2c86
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004bc6b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004bc6b0
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
jne 0x4b2d2b
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.004b9ca0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b9ca0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004b21f0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x13
jne 0x4b2ebc
test ecx, 0x200
jne 0x4b2ead
test ecx, 0x80
je 0x4b2dfb
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
jmp 0x4b2e02
mov eax, dword [esp + 0xb4]
test eax, eax
setne al
xor eax, 1
test al, al
je 0x4b2ead
nop
mov eax, dword [esp + 0xc4]
mov ecx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
cmp eax, 0x14
ja 0x4b2e42
lea edx, [eax - 0x12]
cmp edx, 1
ja 0x4b2e38
test ecx, 0x200
jmp 0x4b2e76
cmp eax, 0x14
je 0x4b2e54
jmp 0x4b35a4
cmp eax, 0x16
ja 0x4b2e4f
test ecx, 0x200
jmp 0x4b2e76
cmp eax, 0x17
jne 0x4b2e67
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
test eax, eax
setne al
xor eax, 1
jmp 0x4b2e9a
cmp eax, 0x1a
jne 0x4b35a4
test ecx, 0x200
jne 0x4b2ead
test ecx, 0x80
je 0x4b2e8b
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
jmp 0x4b2e92
mov eax, dword [esp + 0xc0]
test eax, eax
setne al
xor eax, 1
test al, al
je 0x4b2ead
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
cmp eax, 0x14
jne 0x4b30aa
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
test edx, edx
setne dl
xor edx, 1
test dl, dl
je 0x4b2eed
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc4]
jmp 0x4b2f8d
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4b2f1d
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4b2f13
test ebp, 0x200
jmp 0x4b2f55
cmp ebx, 0x14
je 0x4b2f2f
jmp 0x4b356a
cmp ebx, 0x16
ja 0x4b2f2a
test ebp, 0x200
jmp 0x4b2f55
cmp ebx, 0x17
jne 0x4b2f46
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
jmp 0x4b2f83
cmp ebx, 0x1a
jne 0x4b356a
test ebp, 0x200
jne 0x4b3010
test ebp, 0x80
je 0x4b2f6e
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
jmp 0x4b2f77
mov ebx, dword [esp + 0xc0]
mov esi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4b3010
test byte [eax], al
nop
mov eax, ebp
and ebp, 0x1f
mov dword [esp + 0x5c], ebp
cmp ebp, 0x14
ja 0x4b2fb7
lea ecx, [ebp - 0x12]
cmp ecx, 1
ja 0x4b2fad
test eax, 0x200
jmp 0x4b2fe2
cmp ebp, 0x14
je 0x4b2fc8
jmp 0x4b3530
cmp ebp, 0x16
ja 0x4b2fc3
test eax, 0x200
jmp 0x4b2fe2
cmp ebp, 0x17
jne 0x4b2fd4
mov eax, dword [ebx]
test eax, eax
setne al
xor eax, 1
jmp 0x4b2ffd
cmp ebp, 0x1a
jne 0x4b3530
test eax, 0x200
je 0x4b2fe8
xor eax, eax
jmp 0x4b2ffd
test eax, 0x80
je 0x4b2ff3
mov eax, dword [ebx]
jmp 0x4b2ff5
mov eax, ebx
test eax, eax
setne al
xor eax, 1
cmp al, dl
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b9ca0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b9ca0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004b21f0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x15
jne 0x4b32d0
test ecx, 0x200
je 0x4b30c6
mov eax, dword [esp + 0xb4]
xor edx, edx
jmp 0x4b30ea
test ecx, 0x80
je 0x4b30d9
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
jmp 0x4b30e2
mov eax, dword [esp + 0xb4]
mov edx, eax
test edx, edx
setne dl
xor edx, 1
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4b311a
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4b3110
test ebp, 0x200
jmp 0x4b3152
cmp ebx, 0x14
je 0x4b312c
jmp 0x4b34f6
cmp ebx, 0x16
ja 0x4b3127
test ebp, 0x200
jmp 0x4b3152
cmp ebx, 0x17
jne 0x4b3143
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4b3187
cmp ebx, 0x1a
jne 0x4b34f6
test ebp, 0x200
je 0x4b315f
mov esi, dword [esp + 0xc0]
xor edi, edi
jmp 0x4b3187
test ebp, 0x80
je 0x4b3172
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
jmp 0x4b317b
mov esi, dword [esp + 0xc0]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4b32c1
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004ba740
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
cmp ecx, 0x17
jne 0x4b31c1
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 4]
jmp 0x4b31f9
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
call fcn.004ba740
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xc0]
cmp edx, eax
jne 0x4b32b2
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.004bc6b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004bc6b0
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
je 0x4b32a3
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.004bab60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4b33a7
mov dword [esp + 0x58], eax
xor edx, edx
jmp 0x4b33c4
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
call fcn.004ba550
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0
call fcn.004ba550
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x90]
cmp dword [esp + 0x10], ecx
je 0x4b3348
xor eax, eax
jmp 0x4b3364
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004036b0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
test eax, eax
jmp 0x4b338c
mov ecx, dword [esp + 0xc4]
setne al
test ecx, ecx
setne cl
cmp cl, al
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov ebx, dword [esp + 0x8c]
add ebx, 0xc
mov ecx, ebx
mov edx, eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x54], edx
mov eax, dword [ecx + 4]
mov dword [esp + 0x98], eax
mov ebx, dword [ecx + 8]
mov dword [esp + 0x5c], ebx
mov ebp, dword [ecx]
mov dword [esp + 0x94], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp], esi
mov edi, dword [esp + 0xb4]
mov dword [esp + 4], edi
mov edi, dword [esp + 0xb8]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.004ba900
mov eax, dword [esp + 0x18]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x94]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x98]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x14], edi
call fcn.004ba900
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x4b34e7
test ecx, ecx
je 0x4b34e7
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004b21f0
movzx eax, byte [esp + 0x1c]
test al, al
je 0x4b34e7
mov eax, dword [esp + 0x54]
inc eax
mov ecx, dword [esp + 0x58]
cmp ecx, eax
jg 0x4b33b6
jmp 0x4b33a7
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6ce8c1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6ce8c1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6ce8c1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6ce8c1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
mov ecx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xb4]
cmp dword [ecx + 4], eax
jle 0x4b36c7
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004ba3a0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0xc], edi
call fcn.004ba3a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004b21f0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b35de
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6ce8c1]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
mov edx, dword [esp + 0x44]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x4b37fc
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004b9e50
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x44]
mov dword [esp + 0xc], edi
call fcn.004b9e50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004b21f0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b3710
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6cddd6]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6cd4dd]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
mov dword [esp + 0x5c], eax
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6ce89b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
mov dword [esp + 0x5c], eax
lea eax, [0x69f1a0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6cfafe]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6955e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436cf0
mov edx, dword [esp + 0x4c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004ba740
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0xc], eax
jle 0x4b3a0e
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004ba3a0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
call fcn.004ba3a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004b21f0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b38fb
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d378]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d378]
mov dword [esp + 4], eax
call fcn.00436cf0
nop
call fcn.00461ac0
jmp fcn.004b21f0