Function at 0x4b8bc0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xd4]
cmp eax, dword [ecx + 8]
jbe 0x4b9f48
sub esp, 0x154
mov dword [esp + 0x174], 0
mov dword [esp + 0x178], 0
mov eax, dword [esp + 0x158]
mov ecx, dword [eax + 0x474]
lea edx, [eax + 0x474]
mov dword [esp + 0x114], edx
test ecx, ecx
je 0x4b9dc8
mov ebx, dword [eax + 0x478]
mov ebp, dword [esp + 0x170]
cmp ebp, ebx
jne 0x4b9d3a
mov dword [esp], ecx
mov eax, dword [esp + 0x15c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 8], eax
call fcn.004ac0e0
mov eax, dword [esp + 0x158]
mov ecx, dword [eax + 0x474]
mov dword [esp + 8], ecx
mov dword [esp], 0xc
lea ecx, [0x52ef90]
mov dword [esp + 4], ecx
call fcn.00425500
test eax, eax
jne 0x4b9d2d
mov eax, dword [esp + 0x16c]
cmp eax, 0xa
jg 0x4b9cf1
cmp eax, 4
jne 0x4b9ccc
mov ecx, 1
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0x164]
mov edx, dword [eax + 0x14]
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x6c], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0x68], ebx
mov ebp, ecx
sub ecx, ebx
mov dword [esp + 0x20], ecx
mov esi, dword [esp + 0x60]
mov edi, esi
imul esi, ecx
inc esi
mov dword [esp + 0x44], esi
mov dword [esp + 0xe0], eax
xor eax, eax
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xe0]
jmp 0x4b8d22
xchg ebp, ebx
mov byte [eax], bl
xchg ebp, ebx
lea eax, [ebp + 1]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x74]
mov ebp, dword [esp + 0x54]
cmp ebp, 5
jge 0x4b8dff
jae 0x4b9f41
lea ebx, [ebp + ebp*2]
mov ecx, dword [esp + 0x158]
mov eax, dword [ecx + ebx*4 + 0x434]
lea edx, [ecx + ebx*4 + 0x42c]
cmp eax, esi
jl 0x4b8d78
cmp esi, eax
ja 0x4b9f3a
mov dword [ecx + ebx*4 + 0x430], esi
mov eax, dword [ecx + ebx*4 + 0x42c]
mov edx, dword [ecx + ebx*4 + 0x430]
test edx, edx
ja 0x4b8d01
jmp 0x4b9f33
mov dword [esp + 0x110], edx
mov dword [esp + 0x64], ebx
lea eax, [0x5035e0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], esi
call fcn.00437f30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x158]
mov dword [ebp + ebx*4 + 0x430], ecx
mov dword [ebp + ebx*4 + 0x434], edx
mov ecx, dword [0x5e0f70]
test ecx, ecx
jne 0x4b8ddf
mov dword [ebp + ebx*4 + 0x42c], eax
mov ecx, ebp
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x60]
jmp 0x4b8d61
mov ecx, dword [esp + 0x110]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040df80
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x158]
jmp 0x4b8dcf
mov ebp, dword [esp + 0x158]
lea ebx, [ebp + 0x42c]
lea edi, [esp + 0x118]
mov esi, ebx
call fcn.0044bfba
mov ecx, dword [ebp + 0x470]
lea ebx, [ebp + 0x468]
mov esi, ebx
mov ebx, dword [esp + 0x44]
cmp ecx, ebx
jl 0x4b9c5c
cmp ebx, ecx
ja 0x4b9f2c
mov dword [ebp + 0x46c], ebx
mov eax, dword [ebp + 0x468]
mov ecx, dword [ebp + 0x470]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004b8b80
mov eax, dword [esp + 0x158]
mov ecx, dword [eax + 0x468]
mov edx, dword [eax + 0x46c]
mov ebx, dword [eax + 0x470]
lea ebp, [0x541640]
mov esi, dword [esp + 0x164]
cmp ebp, esi
jne 0x4b9c55
mov ebp, dword [esp + 0x168]
lea edi, [0x5416e0]
cmp edi, esi
jne 0x4b9c4e
mov edi, dword [esp + 0x168]
lea eax, [0x5416c0]
cmp eax, esi
jne 0x4b9c47
mov eax, dword [esp + 0x168]
mov dword [esp + 0xfc], eax
lea eax, [0x541680]
cmp eax, esi
jne 0x4b9c40
mov eax, dword [esp + 0x168]
mov dword [esp + 0x104], ebp
mov dword [esp + 0xe8], edi
mov dword [esp + 0x100], eax
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd8]
jmp 0x4b9067
xchg edi, eax
mov byte [ebx + ebp + 2], al
xchg edi, eax
add eax, 4
add ebx, 3
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0xf0]
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x50]
cmp eax, ebx
jge 0x4b8f96
cmp eax, edx
jae 0x4b9ef9
movzx esi, byte [edi + eax]
mov ebx, dword [esp + 0x58]
cmp ebx, ecx
jae 0x4b9ef9
xchg esi, eax
mov byte [ebp + ebx], al
xchg esi, eax
lea esi, [eax + 1]
cmp esi, edx
jae 0x4b9ef2
lea esi, [ebx + 1]
movzx edi, byte [eax + edi + 1]
cmp esi, ecx
jae 0x4b9ef2
xchg edi, eax
mov byte [ebx + ebp + 1], al
xchg edi, eax
lea esi, [eax + 2]
cmp esi, edx
jae 0x4b9eeb
lea esi, [ebx + 2]
mov edi, dword [esp + 0xf0]
movzx edi, byte [eax + edi + 2]
cmp esi, ecx
jb 0x4b8f09
jmp 0x4b9eeb
mov eax, dword [esp + 0x170]
test eax, eax
je 0x4b916d
mov ecx, dword [esp + 0x16c]
cmp ecx, 0xa
jne 0x4b9120
xor edx, edx
mov ebx, dword [esp + 0x158]
mov ebp, dword [ebx + 0x474]
cmp edx, 5
jae 0x4b9dd4
lea eax, [edx + edx*2]
mov ecx, dword [esp + eax*4 + 0x118]
mov edx, dword [esp + eax*4 + 0x120]
mov eax, dword [esp + eax*4 + 0x11c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp], ebp
call fcn.004ac470
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x4b9105
mov ebx, dword [esp + 0x120]
mov edx, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
mov eax, dword [esp + 0xec]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x24]
inc eax
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], ebx
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x74]
cmp ebx, edx
jge 0x4b9c1d
mov dword [esp + 0xec], ecx
mov edx, dword [esp + 0x16c]
cmp edx, 0xa
jg 0x4b955a
cmp edx, 4
je 0x4b93b4
cmp edx, 6
jne 0x4b9267
mov ebp, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
test edi, edi
je 0x4b923c
mov eax, dword [edi + 0xc]
mov edx, dword [edi + 4]
mov edi, dword [edi]
test eax, eax
je 0x4b917b
mov dword [esp + 0xf0], edi
mov esi, dword [esp + 0x6c]
sub ebx, esi
imul eax, ebx
mov ebx, dword [esp + 0x20]
lea ebx, [eax + ebx*4]
mov dword [esp + 0x50], ebx
mov dword [esp + 0xc8], eax
mov eax, 1
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0xc8]
jmp 0x4b8f2c
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], eax
nop
call fcn.00425d20
add esp, 0x154
ret
lea eax, [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0xec]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x48]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x10], ebp
call fcn.004b8480
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x170]
mov ecx, dword [esp + 0x16c]
mov esi, dword [esp + 0x6c]
jmp 0x4b8fb7
mov ecx, dword [esp + 0x16c]
xor edx, edx
jmp 0x4b8fb7
mov dword [esp + 0x108], ebp
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0x68]
mov edx, 1
jmp 0x4b91b1
shr edx, 8
mov byte [ebx + esi + 2], dl
mov edi, dword [esp + 0x3c]
lea eax, [edi + 1]
lea edx, [ebx + 3]
mov ecx, ebp
mov ebx, dword [esp + 0x24]
mov ebp, esi
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0x70]
cmp eax, edi
jge 0x4b9233
mov dword [esp + 0x3c], eax
mov dword [esp + 0x58], edx
mov ecx, dword [esi + 0x10]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x168]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0x5c]
cmp ebx, ebp
jae 0x4b9ee4
shr eax, 8
mov esi, dword [esp + 0x108]
mov byte [esi + ebx], al
lea eax, [ebx + 1]
cmp eax, ebp
jae 0x4b9edd
shr ecx, 8
mov byte [ebx + esi + 1], cl
lea eax, [ebx + 2]
cmp eax, ebp
jb 0x4b9191
jmp 0x4b9ed6
mov esi, dword [esp + 0x6c]
jmp 0x4b8f96
test eax, eax
je 0x4b925f
mov edi, dword [eax + 0xc]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xd0], eax
mov eax, edi
mov edi, edx
mov edx, dword [esp + 0xd0]
jmp 0x4b90c6
xor edi, edi
xor eax, eax
xor edx, edx
jmp 0x4b9248
cmp edx, 0xa
jne 0x4b93ab
mov ebp, dword [esp + 0xfc]
test ebp, ebp
jne 0x4b9323
lea eax, [0x50cb80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov ecx, dword [esp + 0x168]
mov dword [esp + 8], ecx
call fcn.0040b450
mov eax, dword [esp + 0x10]
mov dword [esp + 0xf8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xf4], ecx
mov edx, dword [esp + 0x68]
mov ebx, 1
jmp 0x4b92d6
mov byte [ecx + ebx], dl
mov ebp, dword [esp + 0x34]
lea edx, [ebp + 1]
inc ebx
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xf4]
mov ebp, dword [esp + 0x70]
cmp edx, ebp
jge 0x4b931a
mov dword [esp + 0x34], edx
mov dword [esp + 0x58], ebx
mov ebx, dword [ecx + 0x18]
mov dword [esp + 4], edx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
mov dword [esp], eax
call ebx
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
movzx edx, byte [esp + 0xc]
mov ebx, dword [esp + 0x58]
cmp ebx, eax
jb 0x4b92bd
jmp 0x4b9ec8
mov esi, dword [esp + 0x6c]
jmp 0x4b8f96
mov esi, dword [esp + 0x6c]
sub ebx, esi
mov esi, dword [ebp + 0xc]
imul esi, ebx
mov ebx, dword [esp + 0x118]
mov eax, dword [esp + 0x11c]
mov edi, dword [esp + 0x120]
cmp eax, 1
jb 0x4b9ecf
dec edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 1
add ebx, edi
mov edi, dword [ebp]
mov ebp, dword [ebp + 8]
mov ecx, dword [esp + 0x20]
lea edx, [esi + ecx]
cmp esi, edx
ja 0x4b9ecf
cmp edx, ebp
ja 0x4b9ecf
dec eax
sub ebp, esi
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
lea edx, [edi + esi]
cmp eax, ecx
jle 0x4b93a7
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0044c240
mov ebp, dword [esp + 0x70]
jmp 0x4b931a
mov ecx, eax
jmp 0x4b938e
mov esi, dword [esp + 0x6c]
jmp 0x4b8f96
test ebp, ebp
jne 0x4b94b4
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
mov dword [esp + 0xb8], ecx
mov ecx, 1
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xb8]
jmp 0x4b942c
mov byte [ecx + ebp], al
mov eax, dword [esp + 0x28]
inc eax
lea ecx, [ebp + 1]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x28], eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xec]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x70]
cmp ebp, eax
jge 0x4b94ab
mov eax, dword [esi + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
call eax
mov eax, dword [0x5cd970]
mov eax, dword [eax + 0x10]
mov ecx, dword [0x5cd974]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea edx, [0x5410e0]
cmp edx, ecx
jne 0x4b9f07
movzx eax, byte [eax]
mov ecx, dword [esp + 0x118]
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x58]
cmp ebp, ebx
jb 0x4b93eb
jmp 0x4b9f00
mov esi, dword [esp + 0x6c]
jmp 0x4b8f96
mov esi, dword [esp + 0x6c]
sub ebx, esi
mov esi, dword [ebp + 0xc]
imul esi, ebx
mov ebx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov edi, dword [esp + 0x118]
cmp ebx, 1
jb 0x4b9f25
dec eax
neg eax
sar eax, 0x1f
and eax, 1
add eax, edi
mov edi, dword [ebp]
mov ebp, dword [ebp + 8]
mov ecx, dword [esp + 0x20]
lea edx, [esi + ecx]
cmp esi, edx
ja 0x4b9f25
cmp edx, ebp
ja 0x4b9f25
lea edx, [ebx - 1]
sub ebp, esi
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
lea ebx, [edi + esi]
cmp edx, ecx
jle 0x4b9556
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0044c240
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0xe8]
jmp 0x4b94ab
mov ecx, edx
jmp 0x4b951d
cmp edx, 0xc
jg 0x4b989c
cmp edx, 0xb
jne 0x4b977d
test eax, eax
jne 0x4b96d5
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], eax
mov dword [esp + 0xa8], ecx
mov ecx, 1
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xa8]
jmp 0x4b95e5
mov byte [edx + ebx + 3], cl
mov eax, dword [esp + 0x38]
inc eax
lea ecx, [edx + 4]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x38], eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xec]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x70]
cmp ebp, eax
jge 0x4b96cc
mov eax, dword [esi + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
call eax
mov eax, dword [0x5cd980]
mov eax, dword [eax + 0x10]
mov ecx, dword [0x5cd984]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea edx, [0x541120]
cmp edx, ecx
jne 0x4b9ea3
movzx ecx, byte [eax + 3]
movzx ebx, byte [eax + 1]
movzx ebp, byte [eax + 2]
movzx eax, byte [eax]
mov esi, dword [esp + 0x118]
mov edi, dword [esp + 0x11c]
mov edx, dword [esp + 0x58]
cmp edx, edi
jae 0x4b9e9c
mov byte [esi + edx], al
mov eax, dword [esp + 0x11c]
mov esi, dword [esp + 0x118]
lea edi, [edx + 1]
cmp edi, eax
jae 0x4b9e95
mov byte [edx + esi + 1], bl
mov eax, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
lea esi, [edx + 2]
cmp esi, eax
jae 0x4b9e8e
xchg ebp, eax
mov byte [edx + ebx + 2], al
xchg ebp, eax
mov eax, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
lea ebp, [edx + 3]
cmp ebp, eax
jb 0x4b95a3
jmp 0x4b9e87
mov esi, dword [esp + 0x6c]
jmp 0x4b8f96
mov esi, dword [esp + 0x6c]
sub ebx, esi
mov ebp, dword [eax + 0xc]
imul ebx, ebp
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x11c]
mov edi, dword [esp + 0x120]
cmp esi, 1
jb 0x4b9ec1
dec edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 1
add ebp, edi
mov edi, dword [eax]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x20]
lea edx, [ebx + ecx*4]
shl ecx, 2
cmp ebx, edx
ja 0x4b9ec1
cmp edx, eax
ja 0x4b9ec1
lea edx, [esi - 1]
sub eax, ebx
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [ebx + edi]
cmp edx, ecx
jle 0x4b9779
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044c240
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0xe8]
jmp 0x4b96cc
mov ecx, edx
jmp 0x4b9740
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x30], eax
mov dword [esp + 0x98], ecx
mov ecx, 1
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x98]
jmp 0x4b97ee
mov byte [ebp + ebx + 1], cl
mov eax, dword [esp + 0x30]
inc eax
lea ecx, [ebp + 2]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x30], eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xec]
mov ebp, dword [esp + 0x30]
mov eax, dword [esp + 0x70]
cmp ebp, eax
jge 0x4b9893
mov eax, dword [esi + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
call eax
mov eax, dword [0x5cd968]
mov eax, dword [eax + 0x10]
mov ecx, dword [0x5cd96c]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea edx, [0x541100]
cmp edx, eax
jne 0x4b9e69
movzx eax, word [ecx]
mov ecx, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x58]
cmp ebp, ecx
jae 0x4b9e62
mov ecx, eax
shr ax, 8
mov byte [ebx + ebp], al
mov eax, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
lea esi, [ebp + 1]
cmp esi, eax
jb 0x4b97ac
jmp 0x4b9e5b
mov esi, dword [esp + 0x6c]
jmp 0x4b8f96
cmp edx, 0xe
jne 0x4b9a21
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x88], ecx
mov ecx, 1
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x88]
jmp 0x4b9916
mov byte [esi + edx + 5], al
mov eax, dword [esp + 0x2c]
inc eax
lea ecx, [esi + 6]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xec]
mov ebp, dword [esp + 0x2c]
mov eax, dword [esp + 0x70]
cmp ebp, eax
jge 0x4b9a18
mov eax, dword [esi + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x58]
cmp esi, ebx
jae 0x4b9e54
mov ebx, eax
shr eax, 8
mov byte [ebp + esi], al
mov eax, dword [esp + 0x11c]
mov ebp, dword [esp + 0x118]
lea edi, [esi + 1]
cmp edi, eax
jae 0x4b9e4d
mov byte [esi + ebp + 1], bl
mov eax, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
lea ebp, [esi + 2]
cmp ebp, eax
jae 0x4b9e46
mov eax, ecx
shr ecx, 8
mov byte [esi + ebx + 2], cl
mov ecx, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
lea ebp, [esi + 3]
cmp ebp, ecx
jae 0x4b9e3f
mov byte [esi + ebx + 3], al
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
lea ebx, [esi + 4]
cmp ebx, eax
jae 0x4b9e38
mov eax, edx
shr edx, 8
mov byte [esi + ecx + 4], dl
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x118]
lea ebx, [esi + 5]
cmp ebx, ecx
jb 0x4b98d4
jmp 0x4b9e31
mov esi, dword [esp + 0x6c]
jmp 0x4b8f96
cmp edx, 0xf
jne 0x4b93ab
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x40], eax
mov dword [esp + 0x78], ecx
mov ecx, 1
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x78]
jmp 0x4b9a95
mov byte [edx + ecx + 7], bl
mov eax, dword [esp + 0x40]
inc eax
lea ecx, [edx + 8]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x164]
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x40], eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xec]
mov ebp, dword [esp + 0x40]
mov eax, dword [esp + 0x70]
cmp ebp, eax
jge 0x4b9c14
mov eax, dword [esi + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
call eax
mov eax, dword [0x5cd978]
mov eax, dword [eax + 0x10]
mov ecx, dword [0x5cd97c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea edx, [0x541140]
cmp edx, ecx
jne 0x4b9e13
movzx ecx, word [eax + 4]
movzx ebx, word [eax + 6]
movzx ebp, word [eax + 2]
movzx eax, word [eax]
mov esi, dword [esp + 0x11c]
mov edi, dword [esp + 0x118]
mov edx, dword [esp + 0x58]
cmp edx, esi
jae 0x4b9e0c
mov word [esp + 0x1e], bx
mov esi, eax
shr ax, 8
mov byte [edi + edx], al
mov eax, dword [esp + 0x11c]
mov edi, dword [esp + 0x118]
lea ebx, [edx + 1]
cmp ebx, eax
jae 0x4b9e05
xchg esi, eax
mov byte [edx + edi + 1], al
xchg esi, eax
mov eax, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
lea esi, [edx + 2]
cmp esi, eax
jae 0x4b9dfe
mov eax, ebp
shr bp, 8
xchg ebp, eax
mov byte [edx + ebx + 2], al
xchg ebp, eax
mov ebx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x118]
lea esi, [edx + 3]
cmp esi, ebx
jae 0x4b9df7
mov byte [edx + ebp + 3], al
mov eax, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
lea ebp, [edx + 4]
cmp ebp, eax
jae 0x4b9df0
mov eax, ecx
shr cx, 8
mov byte [edx + ebx + 4], cl
mov ecx, dword [esp + 0x11c]
mov ebx, dword [esp + 0x118]
lea ebp, [edx + 5]
cmp ebp, ecx
jae 0x4b9de9
mov byte [edx + ebx + 5], al
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
lea ebx, [edx + 6]
cmp ebx, eax
jae 0x4b9de2
movzx eax, word [esp + 0x1e]
mov ebx, eax
shr ax, 8
mov byte [edx + ecx + 6], al
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
lea ebp, [edx + 7]
cmp ebp, eax
jb 0x4b9a53
jmp 0x4b9ddb
mov esi, dword [esp + 0x6c]
jmp 0x4b8f96
mov dword [esp + 0x174], 0
mov dword [esp + 0x178], 0
nop
call fcn.00425d20
add esp, 0x154
ret
xor eax, eax
jmp 0x4b8ed9
xor eax, eax
jmp 0x4b8ebd
xor edi, edi
jmp 0x4b8ea8
xor ebp, ebp
jmp 0x4b8e93
mov dword [esp + 0x10c], esi
lea eax, [0x5035e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.00437f30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x158]
mov dword [ebx + 0x46c], edx
mov dword [ebx + 0x470], ecx
mov ecx, dword [0x5e0f70]
test ecx, ecx
jne 0x4b9cad
mov dword [ebx + 0x468], eax
jmp 0x4b8e5e
mov ecx, dword [esp + 0x10c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040df80
mov ebx, dword [esp + 0x158]
jmp 0x4b8e5e
cmp eax, 6
jne 0x4b9cdb
mov ecx, 3
jmp 0x4b8c9b
cmp eax, 0xa
jne 0x4b9cea
mov ecx, 1
jmp 0x4b8c9b
xor ecx, ecx
jmp 0x4b8c9b
cmp eax, 0xc
jg 0x4b9d0f
cmp eax, 0xb
jne 0x4b9d05
mov ecx, 4
jmp 0x4b8c9b
mov ecx, 2
jmp 0x4b8c9b
cmp eax, 0xe
jne 0x4b9d1e
mov ecx, 6
jmp 0x4b8c9b
cmp eax, 0xf
jne 0x4b9cea
mov ecx, 8
jmp 0x4b8c9b
nop
call fcn.00425d20
add esp, 0x154
ret
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004abf10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test edx, edx
jne 0x4b9dad
mov ecx, dword [0x5e0f70]
test ecx, ecx
jne 0x4b9d91
mov ecx, dword [esp + 0x158]
mov dword [ecx + 0x474], eax
mov eax, dword [esp + 0x170]
mov dword [ecx + 0x478], eax
jmp 0x4b8c4e
mov ecx, dword [esp + 0x114]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040df80
mov ecx, dword [esp + 0x158]
jmp 0x4b9d7f
mov dword [esp + 0x174], edx
mov dword [esp + 0x178], ecx
nop
call fcn.00425d20
add esp, 0x154
ret
mov ebp, dword [esp + 0x170]
jmp 0x4b9d3a
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
mov dword [esp], ecx
lea eax, [0x514660]
mov dword [esp + 4], eax
lea eax, [0x506b40]
mov dword [esp + 8], eax
call fcn.0040ad80
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
mov dword [esp], eax
lea eax, [0x50c880]
mov dword [esp + 4], eax
lea eax, [0x506b40]
mov dword [esp + 8], eax
call fcn.0040ad80
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
mov dword [esp], ecx
lea eax, [0x5145e0]
mov dword [esp + 4], eax
lea eax, [0x506b40]
mov dword [esp + 8], eax
call fcn.0040ad80
ud2
call fcn.004252e0
ud2
call fcn.00425280
ud2
call fcn.004252e0
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
call fcn.00425280
ud2
mov dword [esp], ecx
lea eax, [0x50c820]
mov dword [esp + 4], eax
lea eax, [0x506b40]
mov dword [esp + 8], eax
call fcn.0040ad80
ud2
call fcn.004252e0
ud2
call fcn.004252e0
ud2
call fcn.00425280
ud2
call fcn.004252e0
ud2
call fcn.00425280
ud2
call fcn.00449fd0
jmp fcn.004b8bc0