Function at 0x4c0a10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x70]
cmp eax, dword [ecx + 8]
jbe 0x4c29ad
sub esp, 0xf0
mov ecx, dword [esp + 0x108]
test ecx, ecx
jle 0x4c0ad9
mov edx, dword [esp + 0x100]
test edx, edx
je 0x4c0ae0
test edx, 0x60
jne 0x4c0ae0
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004aefa0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf4]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c0a9e
mov dword [edx + 0x10], eax
jmp 0x4c0aa6
lea edi, [edx + 0x10]
call fcn.004610d0
mov dword [esp], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
call fcn.004bfab0
movzx eax, byte [esp + 8]
test al, al
jne 0x4c0ad2
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x100]
jmp 0x4c0ae0
add esp, 0xf0
ret
mov edx, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
mov dword [edi + 0xc], 0
mov ebx, dword [0x7e1c20]
test ebx, ebx
jne 0x4c0b01
mov dword [edi + 0x10], 0
jmp 0x4c0b11
lea ebx, [edi + 0x10]
xor eax, eax
mov ebp, edi
mov edi, ebx
call fcn.004610d0
mov edi, ebp
mov dword [edi + 0x1c], edx
mov ebx, dword [0x7e1c20]
test ebx, ebx
jne 0x4c0b34
mov ebx, dword [esp + 0xf8]
mov dword [edi + 0x14], ebx
mov ebp, dword [esp + 0xfc]
mov dword [edi + 0x18], ebp
jmp 0x4c0b61
lea ebx, [edi + 0x14]
mov eax, dword [esp + 0xf8]
mov ebp, edi
mov edi, ebx
call fcn.004610d0
lea edi, [ebp + 0x18]
mov ebx, eax
mov eax, dword [esp + 0xfc]
call fcn.004610d0
mov ebp, eax
mov edi, dword [esp + 0xf4]
nop
mov esi, edx
and edx, 0x1f
cmp edx, 0x10
jbe 0x4c19d4
cmp edx, 0x15
ja 0x4c1153
cmp edx, 0x13
ja 0x4c0b8c
cmp edx, 0x11
je 0x4c1165
jmp 0x4c1971
cmp edx, 0x14
je 0x4c0ec3
movzx edx, byte [edi + 0x2c]
test dl, dl
je 0x4c0df5
test esi, 0x200
jne 0x4c0bb1
lea eax, [0x669338]
jmp 0x4c0bcb
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov eax, dword [eax + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [eax + edx]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4c0c42
mov dword [esp + 0xa0], ebp
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00461a40
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c0c97
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
mov ebx, dword [esp + 0x100]
test ebx, 0x200
jmp 0x4c0cbb
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.004610d0
mov ebx, dword [esp + 0x100]
test ebx, 0x200
mov eax, edx
mov edx, dword [esp + 0xb8]
je 0x4c0cc6
mov ebp, dword [esp + 0xfc]
jmp 0x4c0cf5
test ebx, 0x80
je 0x4c0cda
mov ebp, dword [esp + 0xfc]
mov esi, dword [ebp]
jmp 0x4c0ce3
mov ebp, dword [esp + 0xfc]
mov esi, ebp
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4c0d70
mov esi, dword [esp + 0x80]
mov ebx, dword [esp + 0x50]
lea ebx, [ebx + esi + 1]
cmp ecx, ebx
jae 0x4c0d5a
lea ebp, [0x5e4900]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c0d4a
mov dword [edi], eax
jmp 0x4c0d4f
call fcn.004610d0
mov ebp, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
mov ebx, dword [esp + 0xf8]
jmp 0x4c0e7f
nop
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x50]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4c0dc7
mov dword [esp + 0x80], ebx
lea ebp, [0x5e4900]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c0de7
mov dword [edi], edx
jmp 0x4c0dee
mov eax, edx
call fcn.004610d0
add esp, 0xf0
ret
nop
mov edx, dword [edi + 4]
mov eax, ecx
lea ecx, [edx + 4]
mov esi, dword [edi + 8]
mov ebp, dword [edi]
cmp esi, ecx
jae 0x4c0e58
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0044a7d0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0xf8]
mov edi, dword [esp + 0xf4]
mov dword [ebp + edx], 0x5b70616d
mov dword [edi + 4], ecx
mov dword [edi + 8], esi
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c0e74
mov dword [edi], ebp
jmp 0x4c0e7f
mov ecx, eax
mov eax, ebp
call fcn.004610d0
mov eax, ecx
mov dword [esp], ebx
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004b97c0
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
je 0x4c2644
mov dword [esp + 0x80], ecx
mov dword [esp + 0x90], eax
xor ebx, ebx
jmp 0x4c273a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004ae6f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test ecx, ecx
jne 0x4c111c
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4c1099
mov eax, dword [esp + 0x100]
test eax, 0x200
jne 0x4c0f17
lea eax, [0x669338]
mov ecx, dword [esp + 0xf8]
jmp 0x4c0f3d
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [eax + edx]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4c0fb4
mov dword [esp + 0x98], ebp
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00461a40
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x7e1c20]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x48]
lea ebx, [ebp + ebx + 5]
test edx, edx
jne 0x4c100b
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4c1022
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.004610d0
mov eax, edx
mov edx, dword [esp + 0xb8]
nop
cmp ecx, ebx
jae 0x4c106a
mov dword [esp + 0x80], ebx
lea ebp, [0x5e4900]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c108d
mov dword [edi], edx
jmp 0x4c1d16
mov eax, edx
call fcn.004610d0
jmp 0x4c1d16
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4c10ec
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], edx
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c1110
mov dword [edi], ebp
jmp 0x4c1d16
mov eax, ebp
call fcn.004610d0
jmp 0x4c1d16
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x14], eax
call fcn.004c0a10
jmp 0x4c1d16
cmp edx, 0x17
ja 0x4c17c2
cmp edx, 0x16
je 0x4c164e
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x104]
cmp eax, 0x71
jg 0x4c1184
cmp eax, 0x58
je 0x4c1192
cmp eax, 0x71
je 0x4c1192
jmp 0x4c1377
cmp eax, 0x73
je 0x4c1192
cmp eax, 0x78
jne 0x4c1377
test esi, 0x200
jne 0x4c11ad
mov dword [esp + 0x84], eax
lea eax, [0x669338]
mov dword [esp + 0x3c], eax
jmp 0x4c11cb
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ebx, ecx
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x28]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4c1349
mov eax, dword [esp + 0x74]
cmp eax, 0x17
je 0x4c12f7
mov eax, dword [esp + 0x100]
test eax, 0x100
jne 0x4c1262
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004af190
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
lea ecx, [0x5e4900]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0044a5d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb4], eax
xor ecx, ecx
jmp 0x4c2530
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004af190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.004b04f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
cmp dword [0x7bab54], edx
jne 0x4c12d6
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
jmp 0x4c24ae
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004ad7d0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x4c24ae
mov eax, dword [esp + 0xf8]
cmp dword [0x7bab54], eax
jne 0x4c131a
mov eax, dword [esp + 0xfc]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
jmp 0x4c24ae
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004ad7d0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x4c24ae
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4c15cc
test esi, 0x200
jne 0x4c1393
lea ecx, [0x669338]
jmp 0x4c13af
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [edx + eax]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4c1426
mov dword [esp + 0x94], ebp
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x94]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00461a40
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c146e
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4c1485
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.004610d0
mov eax, edx
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x74]
cmp ebx, 0x17
jne 0x4c1537
mov ebp, dword [esp + 0xfc]
mov esi, dword [ebp]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4c153e
nop
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x44]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4c1509
mov dword [esp + 0x80], ebx
lea ebp, [0x5e4900]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c1529
mov dword [edi], edx
jmp 0x4c1530
mov eax, edx
call fcn.004610d0
add esp, 0xf0
ret
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x44]
lea ebp, [ebp + esi + 1]
cmp ecx, ebp
jae 0x4c15a0
lea ebx, [0x5e4900]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c1593
mov dword [edi], eax
jmp 0x4c1598
call fcn.004610d0
mov ebx, dword [esp + 0x74]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
cmp ebx, 0x17
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov eax, 0
jmp 0x4c235c
mov ecx, dword [edi + 4]
lea eax, [ecx + 1]
mov esi, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, eax
jae 0x4c162f
lea edx, [0x5e4900]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c161d
mov dword [edi], eax
jmp 0x4c1622
call fcn.004610d0
mov edx, dword [esp + 0x74]
mov ebp, dword [esp + 0xfc]
mov esi, eax
lea eax, [ecx + 1]
mov dword [edi + 4], eax
mov byte [esi + ecx], 0x5b
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xf8]
xor ebx, ebx
jmp 0x4c2191
test ecx, ecx
je 0x4c1656
xor eax, eax
jmp 0x4c1692
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004afd10
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
test al, al
je 0x4c1971
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004ae6f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x15
ja 0x4c16cf
cmp edx, 0x11
je 0x4c16dd
cmp edx, 0x15
je 0x4c16dd
jmp 0x4c17a1
cmp edx, 0x17
je 0x4c16dd
cmp edx, 0x19
jne 0x4c17a1
mov dword [esp + 0x74], ebx
nop
mov edx, dword [esp + 0xf4]
mov ebp, dword [edx + 4]
lea esi, [ebp + 1]
mov edi, dword [edx]
mov ebx, dword [edx + 8]
cmp ebx, esi
jae 0x4c1761
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c1748
mov dword [edi], eax
jmp 0x4c174d
call fcn.004610d0
mov edx, edi
mov ebp, ecx
mov edi, eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
lea ebx, [ebp + 1]
mov dword [edx + 4], ebx
mov byte [edi + ebp], 0x26
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x14], eax
call fcn.004c0a10
add esp, 0xf0
ret
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
jmp 0x4c1971
cmp edx, 0x18
je 0x4c19ae
cmp edx, 0x19
jne 0x4c196c
movzx eax, byte [edi + 0x2c]
test al, al
je 0x4c18f1
test esi, 0x200
jne 0x4c17f0
lea eax, [0x669338]
jmp 0x4c180a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov eax, dword [eax + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
lea ebx, [edx + eax]
mov dword [esp + 0x80], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4c187e
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x4c], eax
mov dword [esp + 0x7c], edx
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x9c]
mov dword [esp + 0x7c], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00461a40
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x7e1c20]
test eax, eax
jne 0x4c18c9
mov eax, dword [esp + 0xb8]
mov dword [edi], eax
jmp 0x4c18d5
mov eax, dword [esp + 0xb8]
call fcn.004610d0
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov eax, dword [edi + 4]
lea edx, [eax + 1]
mov ecx, dword [edi]
mov esi, dword [edi + 8]
cmp esi, edx
jae 0x4c195b
lea ebx, [0x5e4900]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c1942
mov dword [edi], eax
jmp 0x4c1947
call fcn.004610d0
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
mov ecx, edx
lea edx, [eax + 1]
mov dword [edi + 4], edx
mov byte [ecx + eax], 0x7b
xor eax, eax
jmp 0x4c1d99
cmp edx, 0x1a
jne 0x4c1995
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004bf1c0
jmp 0x4c1d16
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004bdae0
jmp 0x4c1d16
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0xc], eax
call fcn.004be970
jmp 0x4c1d16
cmp edx, 0xc
ja 0x4c1c44
cmp edx, 1
ja 0x4c1b67
test edx, edx
jne 0x4c1b47
test ecx, ecx
jne 0x4c1aa3
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x80], ecx
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp edx, ecx
jae 0x4c1a3b
mov dword [esp + 0x7c], eax
lea ebp, [0x5e4900]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0044a7d0
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov dword [esp + 0xb8], ebx
add eax, ebx
mov dword [esp], eax
lea eax, [0x613ca7]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.00461a40
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x7e1c20]
test eax, eax
jne 0x4c1a92
mov eax, dword [esp + 0xb8]
mov dword [edi], eax
jmp 0x4c1d16
mov eax, dword [esp + 0xb8]
call fcn.004610d0
jmp 0x4c1d16
mov ecx, dword [esp + 0x104]
cmp ecx, 0x76
jne 0x4c1b36
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4c1b06
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c1b2a
mov dword [edi], ebp
jmp 0x4c1d16
mov eax, ebp
call fcn.004610d0
jmp 0x4c1d16
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.004bdd50
jmp 0x4c1d16
movzx eax, byte [ebp]
mov dword [esp], edi
mov byte [esp + 4], al
mov eax, dword [esp + 0x104]
mov dword [esp + 8], eax
call fcn.004be240
jmp 0x4c1d16
cmp edx, 6
ja 0x4c1bdb
cmp edx, 3
ja 0x4c1b8b
cmp edx, 2
jne 0x4c1b80
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4c1bb6
movsx eax, byte [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4c1bb6
cmp edx, 4
jne 0x4c1b9b
movsx eax, word [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4c1bb6
cmp edx, 5
jne 0x4c1baa
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4c1bb6
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004be330
jmp 0x4c1d16
cmp edx, 9
ja 0x4c1c01
cmp edx, 7
jne 0x4c1bec
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4c1c1f
cmp edx, 8
jne 0x4c1bf9
movzx eax, byte [ebp]
xor ecx, ecx
jmp 0x4c1c1f
movzx eax, word [ebp]
xor ecx, ecx
jmp 0x4c1c1f
cmp edx, 0xa
jne 0x4c1c0d
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4c1c1f
cmp edx, 0xb
jne 0x4c1c1a
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
jmp 0x4c1c1f
mov eax, dword [ebp]
xor ecx, ecx
mov dword [esp], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004be330
jmp 0x4c1d16
cmp edx, 0xe
ja 0x4c1ca5
cmp edx, 0xd
jne 0x4c1c7d
movss xmm0, dword [ebp]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004be650
jmp 0x4c1d16
movsd xmm0, qword [ebp]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004be650
jmp 0x4c1d16
cmp edx, 0xf
jne 0x4c1ce5
movss xmm0, dword [ebp]
movss xmm1, dword [ebp + 4]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
cvtss2sd xmm0, xmm1
movsd qword [esp + 0xc], xmm0
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0x104]
mov dword [esp + 0x18], eax
call fcn.004be7b0
jmp 0x4c1d16
movsd xmm0, qword [ebp]
movsd xmm1, qword [ebp + 8]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
movsd qword [esp + 0xc], xmm1
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0x104]
mov dword [esp + 0x18], eax
call fcn.004be7b0
add esp, 0xf0
ret
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004bda40
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004c0a10
mov eax, dword [esp + 0x64]
inc eax
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov dword [esp + 0x64], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
call fcn.004afc60
mov eax, dword [esp + 0x64]
cmp dword [esp + 0xc], eax
jle 0x4c2097
test eax, eax
jle 0x4c1ec0
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4c1e58
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4c1e30
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov word [ebp + ecx], 0x202c
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c1e4b
mov dword [edi], ebp
jmp 0x4c1ec7
mov ecx, eax
mov eax, ebp
call fcn.004610d0
mov eax, ecx
jmp 0x4c1ec7
mov ecx, dword [edi + 4]
lea edx, [ecx + 1]
mov ebx, dword [edi]
mov ebp, dword [edi + 8]
cmp ebp, edx
jae 0x4c1eb4
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c1ea9
mov dword [edi], eax
jmp 0x4c1eae
call fcn.004610d0
mov ebx, eax
mov eax, dword [esp + 0x64]
lea edx, [ecx + 1]
mov dword [edi + 4], edx
mov byte [ebx + ecx], 0x20
jmp 0x4c1ec7
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2b]
test cl, cl
jne 0x4c1edb
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4c1d1d
mov ecx, dword [esp + 0x100]
test ecx, 0x200
jne 0x4c1ef9
lea edx, [0x669338]
mov ebx, dword [esp + 0xf8]
jmp 0x4c1f27
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0x64]
mov ecx, dword [edx + 0x2c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0xbc]
lea esi, [esp + 8]
call fcn.004617de
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
test eax, eax
je 0x4c2087
mov dword [esp + 0x54], eax
nop
mov edx, dword [esp + 0xf4]
mov ebx, dword [edx + 4]
mov dword [esp + 0x80], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x7c], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp esi, ebp
jae 0x4c1fbe
mov dword [esp + 0xa4], ecx
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044a7d0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00461a40
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x7e1c20]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x54]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4c2015
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4c202c
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.004610d0
mov eax, edx
mov edx, dword [esp + 0xb8]
cmp ecx, ebx
jae 0x4c207b
lea ebp, [0x5e4900]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c2072
mov dword [edi], eax
jmp 0x4c2077
call fcn.004610d0
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
jmp 0x4c208e
mov edi, dword [esp + 0xf4]
mov eax, dword [esp + 0x64]
jmp 0x4c1d1d
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4c20f8
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c20ef
mov dword [edi], eax
jmp 0x4c20f4
call fcn.004610d0
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4c1d16
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
call fcn.004aedf0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004c0a10
mov eax, dword [esp + 0x58]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
mov eax, edx
mov ecx, esi
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x58], ebx
cmp edx, 0x17
jne 0x4c219f
mov esi, dword [ebp + 4]
jmp 0x4c21d7
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.004af190
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xfc]
mov edi, dword [esp + 0xf4]
cmp esi, ebx
jle 0x4c2269
test ebx, ebx
jle 0x4c2107
mov esi, dword [edi + 4]
lea edx, [esi + 1]
mov ebx, dword [edi]
mov eax, dword [edi + 8]
cmp eax, edx
jae 0x4c224f
lea ecx, [0x5e4900]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c2238
mov dword [edi], eax
jmp 0x4c223d
call fcn.004610d0
mov ebp, dword [esp + 0xfc]
mov esi, ecx
mov ebx, eax
mov ecx, dword [esp + 0xf8]
lea eax, [esi + 1]
mov dword [edi + 4], eax
mov byte [ebx + esi], 0x20
mov eax, dword [esp + 0x100]
mov ebx, dword [esp + 0x58]
jmp 0x4c2107
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 1]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, ecx
jae 0x4c22c4
lea ebp, [0x5e4900]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c22bb
mov dword [edi], eax
jmp 0x4c22c0
call fcn.004610d0
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x5d
jmp 0x4c1d16
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004aedf0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004c0a10
mov eax, dword [esp + 0x5c]
inc eax
mov ebx, dword [esp + 0x74]
cmp ebx, 0x17
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
mov ecx, edx
mov edx, ebp
mov ebp, esi
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x5c], eax
jne 0x4c2367
mov esi, dword [edx + 4]
jmp 0x4c239f
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004af190
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0xf8]
mov edi, dword [esp + 0xf4]
cmp esi, eax
jle 0x4c2444
test eax, eax
jle 0x4c22d3
mov esi, dword [edi + 4]
lea ebx, [esi + 2]
mov ecx, dword [edi + 8]
mov edx, dword [edi]
cmp ecx, ebx
jae 0x4c240c
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044a7d0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov word [edx + esi], 0x202c
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x7e1c20]
test ecx, ecx
jne 0x4c2426
mov dword [edi], edx
jmp 0x4c2431
mov ecx, eax
mov eax, edx
call fcn.004610d0
mov eax, ecx
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
jmp 0x4c22d3
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 1]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, ecx
jae 0x4c249f
lea ebp, [0x5e4900]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c2496
mov dword [edi], eax
jmp 0x4c249b
call fcn.004610d0
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7d
jmp 0x4c1d16
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], edx
mov dword [esp + 0xa8], ecx
mov ebx, dword [esp + 0x3c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x8c]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x104]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.004beb10
add esp, 0xf0
ret
mov ebx, dword [esp + 0xb4]
mov byte [ebx + eax], dl
lea edx, [eax + 1]
mov eax, ebx
mov ecx, edx
mov edx, dword [esp + 0x40]
cmp ecx, edx
jge 0x4c25f7
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004aedf0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
and eax, 0x1f
mov dword [esp + 0x74], eax
cmp eax, 9
ja 0x4c25b8
cmp eax, 7
jne 0x4c2590
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4c25ef
cmp eax, 8
jne 0x4c25a4
movzx edx, byte [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4c25ef
cmp eax, 9
jne 0x4c260a
movzx edx, word [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4c25ef
cmp eax, 0xa
jne 0x4c25cb
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4c25ef
cmp eax, 0xb
jne 0x4c25de
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4c25ef
cmp eax, 0xc
jne 0x4c260a
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jb 0x4c251f
jmp 0x4c2605
mov eax, edx
mov ecx, dword [esp + 0xb4]
jmp 0x4c24ae
call fcn.00461150
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6119f0]
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
mov eax, dword [esp + 0xf4]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4c26bd
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4c26ae
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c26a5
mov dword [edi], eax
jmp 0x4c26aa
call fcn.004610d0
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4c1d16
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4c2718
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c270f
mov dword [edi], eax
jmp 0x4c2714
call fcn.004610d0
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
jmp 0x4c1d16
mov ebp, dword [esp + 0xac]
lea edx, [ebp + 0xc]
mov ebx, eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xac], edx
mov dword [esp + 0x68], ebx
mov ebp, dword [edx + 4]
mov esi, dword [edx + 8]
mov edi, edx
mov edx, dword [edx]
test ebx, ebx
jle 0x4c289d
mov dword [esp + 0x74], esi
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb0], edx
mov ecx, dword [esp + 0xf4]
movzx ebx, byte [ecx + 0x2c]
test bl, bl
je 0x4c280a
nop
mov ebx, dword [ecx + 4]
lea esi, [ebx + 2]
mov ebp, dword [ecx + 8]
mov edx, dword [ecx]
cmp ebp, esi
jae 0x4c27d7
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], esi
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0044a7d0
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x7c]
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0xac]
mov word [edx + ebx], 0x202c
mov dword [ecx + 4], esi
mov dword [ecx + 8], ebp
mov ebx, dword [0x7e1c20]
test ebx, ebx
jne 0x4c27f4
mov dword [ecx], edx
jmp 0x4c288b
mov ebx, edi
mov edi, ecx
mov ebp, eax
mov eax, edx
call fcn.004610d0
mov eax, ebp
mov edi, ebx
jmp 0x4c288b
nop
mov ebx, dword [ecx + 4]
lea edi, [ebx + 1]
mov eax, dword [ecx]
mov esi, dword [ecx + 8]
cmp esi, edi
jae 0x4c2873
lea ecx, [0x5e4900]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c285c
mov dword [edi], eax
jmp 0x4c2861
call fcn.004610d0
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov ebx, ecx
mov ecx, edi
lea esi, [ebx + 1]
mov dword [ecx + 4], esi
mov byte [eax + ebx], 0x20
mov eax, dword [esp + 0x90]
mov edi, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x108]
lea ebx, [edx + 1]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x14], ebx
call fcn.004c0a10
nop
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4c2937
lea eax, [0x5e4900]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044a7d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x7e1c20]
test edx, edx
jne 0x4c292e
mov dword [edi], eax
jmp 0x4c2933
call fcn.004610d0
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x3a
mov edx, dword [esp + 0x90]
mov ebx, dword [edx + 0xc]
mov ecx, dword [edx + 0x10]
mov ebp, dword [esp + 0x68]
cmp ebp, ecx
jae 0x4c29a5
lea ecx, [ebp + ebp*2]
mov edx, dword [ebx + ecx*4]
mov esi, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4 + 8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x14], edx
call fcn.004c0a10
mov eax, dword [esp + 0x68]
inc eax
mov ecx, dword [esp + 0x80]
cmp ecx, eax
jg 0x4c2727
jmp 0x4c2644
mov eax, ebp
call fcn.00461150
nop
call fcn.0045fcc0
jmp fcn.004c0a10