Function at 0x4a08f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x9c]
cmp eax, dword [ecx + 8]
jbe 0x4a2fa7
sub esp, 0x11c
mov eax, dword [esp + 0x134]
test eax, eax
jle 0x4a2f2b
mov ecx, dword [esp + 0x12c]
test ecx, ecx
jne 0x4a2e5f
mov edx, dword [esp + 0x120]
mov dword [edx + 0xc], 0
mov ebx, dword [0x728500]
lea ebp, [edx + 0x10]
test ebx, ebx
jne 0x4a2e35
mov dword [edx + 0x10], 0
mov dword [edx + 0x1c], ecx
mov ebx, dword [0x728500]
lea ebp, [edx + 0x14]
lea esi, [edx + 0x18]
test ebx, ebx
jne 0x4a2dd9
mov ebx, dword [esp + 0x124]
mov dword [edx + 0x14], ebx
mov ebp, dword [esp + 0x128]
mov dword [edx + 0x18], ebp
mov esi, ecx
and ecx, 0x1f
cmp ecx, 0x10
jbe 0x4a29d3
cmp ecx, 0x15
ja 0x4a2094
cmp ecx, 0x13
ja 0x4a1489
cmp ecx, 0x11
jne 0x4a1444
mov dword [esp + 0x8c], ecx
mov edi, dword [esp + 0x130]
cmp edi, 0x71
jg 0x4a142d
cmp edi, 0x58
jne 0x4a141f
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004935e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x98], ecx
mov edx, dword [ecx + 0x2c]
mov dword [esp], eax
call edx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 0x54]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
cmp eax, 8
jne 0x4a0c31
mov eax, dword [esp + 0x8c]
cmp eax, 0x17
je 0x4a0bfb
mov eax, dword [esp + 0x12c]
test eax, 0x100
jne 0x4a0b7b
mov ecx, dword [esp + 0x124]
mov dword [esp], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00492650
mov eax, dword [esp + 0xc]
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00438580
mov eax, dword [esp + 0x14]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0xbc], edx
xor ebx, ebx
jmp 0x4a0aa5
mov ebp, dword [esp + 0xbc]
mov byte [ebp + ecx], al
lea ebx, [ecx + 1]
mov eax, dword [esp + 0x70]
mov ecx, edx
mov edx, ebp
cmp ebx, ecx
jge 0x4a0b07
mov dword [esp + 0x5c], ebx
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.00491fb0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004937a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x6c]
cmp ecx, edx
jb 0x4a0a8f
jmp 0x4a2f4c
mov dword [esp + 0x6c], ecx
mov dword [esp + 0xbc], edx
mov dword [esp + 0x70], eax
mov ebx, dword [esp + 0x98]
mov ebx, dword [ebx + 0x84]
mov ebp, dword [esp + 0x9c]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x120]
mov dword [esp], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x130]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
call fcn.0049ea40
add esp, 0x11c
ret
mov ecx, dword [esp + 0x124]
mov dword [esp], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00492650
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x124]
mov dword [esp], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.00493260
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00491420
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
jmp 0x4a0b07
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov eax, dword [esp + 0x128]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 8], eax
call fcn.00491420
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
jmp 0x4a0b07
mov eax, dword [esp + 0x120]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x4a0ee0
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4a0e5f
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x5b
xor ecx, ecx
jmp 0x4a0cd5
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov edx, dword [esp + 0x128]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x12c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.00491fb0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x134]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004a08f0
mov eax, dword [esp + 0x58]
lea ecx, [eax + 1]
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov edx, dword [esp + 0x128]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x12c]
mov dword [esp + 8], ebx
call fcn.00492650
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x58]
cmp ecx, eax
jge 0x4a0dbd
test ecx, ecx
jle 0x4a0c65
mov eax, dword [esp + 0x120]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
lea esi, [edx + 1]
cmp esi, ebp
jg 0x4a0d3b
lea ebp, [edx + 1]
mov dword [eax + 4], ebp
mov byte [ebx + edx], 0x20
jmp 0x4a0c65
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a0d8c
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x58]
jmp 0x4a0d2c
mov dword [esp + 0xe4], eax
mov dword [esp + 0x88], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x88]
mov ebx, dword [esp + 0x120]
jmp 0x4a0d7b
mov eax, dword [esp + 0x120]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4a0de4
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x5d
add esp, 0x11c
ret
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a0e2e
mov dword [ebx], eax
mov edx, ecx
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x4a0dd3
mov dword [esp + 0xe0], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x120]
jmp 0x4a0e24
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a0eaf
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x120]
jmp 0x4a0c57
mov dword [esp + 0xdc], eax
mov dword [esp + 0x80], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x120]
jmp 0x4a0e9f
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
call fcn.004935e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + 0x84]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
lea ebp, [ecx + ebx]
mov dword [esp + 0x88], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4a13c2
cmp ebp, edi
ja 0x4a2f45
mov dword [esp + 0x84], edi
mov dword [esp + 0xd8], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a13a3
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
mov eax, dword [esp + 0x8c]
cmp eax, 0x17
je 0x4a1287
mov eax, dword [ecx + 4]
mov edx, dword [ecx]
mov ebx, dword [ecx + 8]
lea ebp, [eax + 1]
cmp ebp, ebx
jg 0x4a1211
lea ebx, [eax + 1]
mov dword [ecx + 4], ebx
mov byte [edx + eax], 0x7b
xor eax, eax
jmp 0x4a103f
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0xc], ebx
call fcn.00491fb0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x134]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004a08f0
mov eax, dword [esp + 0x68]
inc eax
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x124]
mov dword [esp], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x12c]
mov dword [esp + 8], ebx
call fcn.00492650
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x68]
cmp ecx, eax
jge 0x4a1171
test ecx, ecx
jle 0x4a0fcd
mov eax, dword [esp + 0x120]
mov edx, dword [eax + 4]
lea ebx, [edx + 2]
mov dword [esp + 0x88], ebx
mov ebp, dword [eax + 8]
mov esi, dword [eax]
cmp ebx, ebp
ja 0x4a1126
cmp ebx, ebp
ja 0x4a2f37
mov dword [esp + 0xd8], esi
mov dword [esp + 0x84], ebp
lea eax, [esi + edx]
mov dword [esp], eax
lea eax, [0x5f65c6]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a1107
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
jmp 0x4a0fcd
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x120]
jmp 0x4a0fcd
mov dword [esp + 0x84], edx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438700
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x88]
jmp 0x4a10a1
mov eax, dword [esp + 0x120]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4a1196
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x7d
jmp 0x4a0ddd
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a11e0
mov dword [ebx], eax
mov edx, ecx
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x4a1187
mov dword [esp + 0xe0], eax
mov dword [esp + 0x80], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x120]
jmp 0x4a11d6
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a125c
mov dword [ebx], eax
mov edx, eax
mov eax, ecx
mov ecx, ebx
jmp 0x4a0fbf
mov dword [esp + 0xdc], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x120]
jmp 0x4a1251
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
call fcn.00492510
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a12c1
mov ecx, dword [esp + 0x120]
jmp 0x4a0fac
mov eax, dword [esp + 0x120]
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov dword [esp + 0x88], edx
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4a135c
cmp edx, ebx
ja 0x4a2f3e
mov dword [esp + 0x84], ebx
mov dword [esp + 0xd8], ebp
lea eax, [ebp + ecx]
mov dword [esp], eax
lea eax, [0x5f6ac6]
mov dword [esp + 4], eax
mov dword [esp + 8], 5
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a1347
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
add esp, 0x11c
ret
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
jmp 0x4a1340
mov dword [esp + 0x84], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438700
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
jmp 0x4a12de
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x120]
jmp 0x4a0f9c
mov dword [esp + 0x84], ebx
mov dword [esp + 0xa0], eax
mov dword [esp + 0x40], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00438700
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x88]
jmp 0x4a0f41
cmp edi, 0x71
je 0x4a09cb
jmp 0x4a0c31
cmp edi, 0x73
je 0x4a09cb
cmp edi, 0x78
je 0x4a09cb
jmp 0x4a0c31
lea eax, [ecx - 0x12]
cmp eax, 1
ja 0x4a1470
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
call fcn.0049f310
jmp 0x4a0ddd
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.0049d7d0
jmp 0x4a0ddd
cmp ecx, 0x14
je 0x4a1d32
movzx ecx, byte [edx + 0x2c]
test cl, cl
jne 0x4a1a65
mov ecx, dword [edx + 4]
lea edi, [ecx + 4]
mov dword [esp + 0x88], edi
mov eax, dword [edx + 8]
mov esi, dword [edx]
cmp edi, eax
ja 0x4a1a10
cmp edi, eax
ja 0x4a2f84
mov dword [esp + 0xd8], esi
mov dword [esp + 0x84], eax
lea eax, [esi + ecx]
mov dword [esp], eax
lea eax, [0x5f69f5]
mov dword [esp + 4], eax
mov dword [esp + 8], 4
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a19f1
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
call fcn.00492940
mov eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc]
xor edx, edx
jmp 0x4a15f4
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x3a
mov ecx, dword [esp + 0x124]
mov dword [esp], ecx
mov edx, dword [esp + 0x128]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x12c]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0xb4]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0xb8]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x14], ebp
call fcn.004927a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x14], ecx
call fcn.004a08f0
mov eax, dword [esp + 0xd4]
lea ecx, [eax + 0xc]
mov eax, dword [esp + 0x64]
lea edx, [eax + 1]
mov eax, dword [esp + 0x50]
cmp edx, eax
jge 0x4a18bc
mov dword [esp + 0x64], edx
mov dword [esp + 0xd4], ecx
mov ebx, dword [ecx + 8]
mov dword [esp + 0x54], ebx
mov ebp, dword [ecx + 4]
mov dword [esp + 0xb8], ebp
mov esi, dword [ecx]
mov dword [esp + 0xb4], esi
test edx, edx
jle 0x4a18b0
mov edi, dword [esp + 0x120]
movzx eax, byte [edi + 0x2c]
test al, al
je 0x4a180f
mov eax, dword [edi + 4]
lea edx, [eax + 2]
mov dword [esp + 0x88], edx
mov ecx, dword [edi]
mov ebx, dword [edi + 8]
cmp edx, ebx
ja 0x4a17ba
cmp edx, ebx
ja 0x4a2f7d
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x84], ebx
add eax, ecx
mov dword [esp], eax
lea eax, [0x5f65c6]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a179b
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
mov dword [esp], ecx
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x130]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x134]
lea edi, [esi + 1]
mov dword [esp + 0x88], edi
mov dword [esp + 0x14], edi
call fcn.004a08f0
mov eax, dword [esp + 0x120]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jle 0x4a1555
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a176a
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x120]
jmp 0x4a1555
mov dword [esp + 0xe0], eax
mov dword [esp + 0x80], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x120]
jmp 0x4a175a
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x120]
jmp 0x4a16ba
mov dword [esp + 0x84], eax
lea ebp, [0x5be360]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438700
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0xb8]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x120]
jmp 0x4a1656
mov eax, dword [edi + 4]
mov edx, dword [edi]
mov ecx, dword [edi + 8]
lea ebx, [eax + 1]
cmp ebx, ecx
jg 0x4a182f
lea ebx, [eax + 1]
mov dword [edi + 4], ebx
mov byte [edx + eax], 0x20
mov ecx, edi
jmp 0x4a16ba
lea ebp, [0x5be360]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a1885
mov dword [ebx], eax
mov ebp, dword [esp + 0xb8]
mov esi, dword [esp + 0xb4]
mov edi, ebx
mov edx, eax
mov eax, ecx
jmp 0x4a181e
mov dword [esp + 0xdc], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x120]
jmp 0x4a186f
mov ecx, dword [esp + 0x120]
jmp 0x4a16ba
mov eax, dword [esp + 0x120]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4a1962
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4a18ed
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x7d
jmp 0x4a0ddd
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a1937
mov dword [ebx], eax
mov edx, ecx
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x4a18de
mov dword [esp + 0xd0], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x120]
jmp 0x4a192d
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov ebx, dword [eax + 8]
lea ebp, [ecx + 1]
cmp ebp, ebx
jg 0x4a1980
lea ebx, [ecx + 1]
mov dword [eax + 4], ebx
mov byte [edx + ecx], 0x5d
jmp 0x4a0ddd
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a19c6
mov dword [ebx], eax
mov edx, eax
mov eax, ebx
jmp 0x4a1971
mov dword [esp + 0xd0], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x120]
jmp 0x4a19c0
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x120]
jmp 0x4a151d
mov dword [esp + 0x84], ecx
lea edx, [0x5be360]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.00438700
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
mov edi, dword [esp + 0x88]
jmp 0x4a14b8
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004935e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + 0x84]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x88], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4a1cd5
cmp ebp, edi
ja 0x4a2f92
mov dword [esp + 0xd8], esi
mov dword [esp + 0x84], edi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a1cbd
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
call fcn.00492510
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a1bdb
mov eax, dword [esp + 0x120]
mov ecx, dword [eax + 8]
mov edx, dword [eax]
mov ebx, dword [eax + 4]
lea ebp, [ebx + 1]
cmp ebp, ecx
jg 0x4a1b63
lea ecx, [ebx + 1]
mov dword [eax + 4], ecx
mov byte [edx + ebx], 0x7b
jmp 0x4a151d
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a1bb0
mov dword [ebx], eax
mov ebx, ecx
mov edx, eax
mov eax, dword [esp + 0x120]
jmp 0x4a1b54
mov dword [esp + 0xcc], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x120]
jmp 0x4a1ba3
mov eax, dword [esp + 0x120]
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov dword [esp + 0x88], edx
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4a1c76
cmp edx, ebx
ja 0x4a2f8b
mov dword [esp + 0x84], ebx
mov dword [esp + 0xd8], ebp
lea eax, [ebp + ecx]
mov dword [esp], eax
lea eax, [0x5f6ac6]
mov dword [esp + 4], eax
mov dword [esp + 8], 5
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a1c61
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
add esp, 0x11c
ret
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
jmp 0x4a1c5a
mov dword [esp + 0x84], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438700
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
jmp 0x4a1bf8
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
jmp 0x4a1b0c
mov dword [esp + 0x84], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0xb0], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00438700
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x88]
jmp 0x4a1ab1
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00491c40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x4a205d
mov eax, dword [esp + 0x120]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x4a1e45
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov dword [esp + 0x88], edx
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4a1dfe
cmp edx, ebx
ja 0x4a2f53
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x84], ebx
lea eax, [ebp + ecx]
mov dword [esp], eax
lea eax, [0x5f6b16]
mov dword [esp + 4], eax
mov dword [esp + 8], 5
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a1de6
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
jmp 0x4a0ddd
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
jmp 0x4a0ddd
mov dword [esp + 0x84], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438700
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
jmp 0x4a1d7f
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov eax, dword [esp + 0x128]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 8], eax
call fcn.004935e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + 0x84]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x88], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4a2000
cmp ebp, esi
ja 0x4a2f61
mov dword [esp + 0xd8], edi
mov dword [esp + 0x84], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a1fda
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
mov edx, dword [ecx + 4]
lea ebx, [edx + 5]
mov dword [esp + 0x88], ebx
mov ebp, dword [ecx + 8]
cmp ebx, ebp
ja 0x4a1f93
cmp ebx, ebp
ja 0x4a2f5a
mov dword [esp + 0xd8], eax
mov dword [esp + 0x84], ebp
lea ecx, [eax + edx]
mov dword [esp], ecx
lea ecx, [0x5f6ac6]
mov dword [esp + 4], ecx
mov dword [esp + 8], 5
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a1f7b
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
jmp 0x4a0ddd
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
jmp 0x4a0ddd
mov dword [esp + 0x84], edx
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438700
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x88]
jmp 0x4a1f15
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x120]
jmp 0x4a1f01
mov dword [esp + 0x84], ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0xac], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00438700
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x88]
jmp 0x4a1ea6
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x134]
inc eax
mov dword [esp + 0x14], eax
call fcn.004a08f0
jmp 0x4a0ddd
cmp ecx, 0x17
ja 0x4a2265
cmp ecx, 0x16
jne 0x4a09ab
test eax, eax
jne 0x4a144c
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00492ce0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4a20e7
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
mov esi, dword [esp + 0x12c]
jmp 0x4a144c
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
call fcn.00491c40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, eax
and eax, 0x1f
cmp eax, 0x15
ja 0x4a2251
cmp eax, 0x11
jne 0x4a2227
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0x120]
mov ebp, dword [eax + 4]
mov esi, dword [eax + 8]
mov edi, dword [eax]
lea ebx, [ebp + 1]
cmp ebx, esi
jg 0x4a218f
lea ebx, [ebp + 1]
mov dword [eax + 4], ebx
mov byte [edi + ebp], 0x26
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x8c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x134]
inc eax
mov dword [esp + 0x14], eax
call fcn.004a08f0
add esp, 0x11c
ret
mov dword [esp + 0x94], ecx
mov dword [esp + 0x90], edx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a21f6
mov dword [ebx], eax
mov edx, dword [esp + 0x90]
mov ebp, ecx
mov edi, eax
mov eax, ebx
mov ecx, dword [esp + 0x94]
jmp 0x4a214c
mov dword [esp + 0xe4], eax
mov dword [esp + 0x88], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x88]
mov ebx, dword [esp + 0x120]
jmp 0x4a21dd
cmp eax, 0x15
je 0x4a212f
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
mov esi, dword [esp + 0x12c]
jmp 0x4a144c
cmp eax, 0x17
je 0x4a212f
cmp eax, 0x19
je 0x4a212f
jmp 0x4a2230
cmp ecx, 0x18
je 0x4a2994
cmp ecx, 0x19
jne 0x4a2986
movzx ecx, byte [edx + 0x2c]
test cl, cl
jne 0x4a2853
mov ecx, dword [edx + 8]
mov edi, dword [edx + 4]
mov eax, dword [edx]
lea esi, [edi + 1]
cmp esi, ecx
jg 0x4a27cb
lea ecx, [edi + 1]
mov dword [edx + 4], ecx
mov byte [eax + edi], 0x7b
lea eax, [esp + 8]
mov dword [esp + 0xc8], eax
xor ecx, ecx
jmp 0x4a2334
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0xc], ebx
call fcn.0049d640
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x134]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004a08f0
mov eax, dword [esp + 0x60]
lea ecx, [eax + 1]
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
mov dword [esp + 0x60], ecx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x12c]
mov dword [esp + 8], eax
call fcn.00492ca0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x60]
cmp ecx, eax
jge 0x4a2731
test ecx, ecx
jle 0x4a2725
mov eax, dword [esp + 0x120]
movzx edx, byte [eax + 0x2c]
test dl, dl
je 0x4a2689
mov edx, dword [eax + 4]
lea ebx, [edx + 2]
mov dword [esp + 0x88], ebx
mov ebp, dword [eax + 8]
mov esi, dword [eax]
cmp ebx, ebp
ja 0x4a263e
cmp ebx, ebp
ja 0x4a2f6f
mov dword [esp + 0xd8], esi
mov dword [esp + 0x84], ebp
lea eax, [esi + edx]
mov dword [esp], eax
lea eax, [0x5f65c6]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a261f
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
movzx eax, byte [ecx + 0x2b]
test al, al
je 0x4a260e
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
call fcn.004935e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + 0x30]
mov edx, dword [esp + 0x60]
mov dword [esp + 4], edx
mov dword [esp], eax
call ecx
lea edi, [esp + 0xe8]
mov esi, dword [esp + 0xc8]
call fcn.0044c27e
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xe8]
test eax, eax
je 0x4a2602
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x88], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4a25a5
cmp ebp, esi
ja 0x4a2f68
mov dword [esp + 0xd8], edi
mov dword [esp + 0x84], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a257f
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
lea ebp, [ebx + 1]
cmp ebp, edx
jg 0x4a2503
lea edx, [ebx + 1]
mov dword [ecx + 4], edx
mov byte [eax + ebx], 0x3a
jmp 0x4a22b2
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a254e
mov dword [ebx], eax
mov ebx, ecx
mov ecx, dword [esp + 0x120]
jmp 0x4a24f4
mov dword [esp + 0xe0], eax
mov dword [esp + 0x80], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x120]
jmp 0x4a2543
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x120]
jmp 0x4a24e7
mov dword [esp + 0x84], ebx
mov dword [esp + 0x3c], eax
mov dword [esp + 0xa8], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00438700
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x88]
jmp 0x4a248c
mov ecx, dword [esp + 0x120]
jmp 0x4a22b2
movzx eax, byte [ecx + 0x2c]
test al, al
jne 0x4a2405
jmp 0x4a22b2
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x120]
jmp 0x4a23f9
mov dword [esp + 0x84], edx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438700
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x88]
jmp 0x4a2394
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
lea esi, [edx + 1]
cmp esi, ebp
jg 0x4a26a9
lea ebp, [edx + 1]
mov dword [eax + 4], ebp
mov byte [ebx + edx], 0x20
mov ecx, eax
jmp 0x4a23f9
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a26fa
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x60]
jmp 0x4a2698
mov dword [esp + 0xdc], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x120]
jmp 0x4a26e9
mov ecx, dword [esp + 0x120]
jmp 0x4a23f9
mov eax, dword [esp + 0x120]
mov ecx, dword [eax]
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
lea ebp, [ebx + 1]
cmp ebp, edx
jg 0x4a2756
lea edx, [ebx + 1]
mov dword [eax + 4], edx
mov byte [ecx + ebx], 0x7d
jmp 0x4a0ddd
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a27a0
mov dword [ebx], eax
mov edx, eax
mov eax, ebx
mov ebx, ecx
mov ecx, edx
jmp 0x4a2747
mov dword [esp + 0xd0], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x120]
jmp 0x4a2796
lea edx, [0x5be360]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x120]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a2822
mov dword [ebx], eax
mov edx, ebx
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
mov edi, ecx
jmp 0x4a2296
mov dword [esp + 0xe4], eax
mov dword [esp + 0x88], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x88]
mov ebx, dword [esp + 0x120]
jmp 0x4a280b
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004935e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + 0x84]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x120]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4a292f
cmp ebp, edi
ja 0x4a2f76
mov dword [esp + 0x74], edi
mov dword [esp + 0xc4], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044c4f0
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x74]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a2913
mov eax, dword [esp + 0xc4]
mov dword [ecx], eax
mov eax, dword [esp + 0x134]
mov edx, ecx
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
mov esi, dword [esp + 0x12c]
jmp 0x4a2283
mov dword [esp], ecx
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x120]
jmp 0x4a28f0
mov dword [esp + 0x74], ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0xa4], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00438700
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x84]
jmp 0x4a289f
cmp ecx, 0x1a
je 0x4a144c
jmp 0x4a1470
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004934f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0xc], eax
call fcn.0049e8d0
jmp 0x4a0ddd
cmp ecx, 0xc
ja 0x4a2ca2
cmp ecx, 1
ja 0x4a2c06
test esi, 0x1f
jne 0x4a2bce
test eax, eax
jne 0x4a2ad3
mov eax, dword [edx + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x88], ecx
mov ebx, dword [edx + 8]
mov ebp, dword [edx]
cmp ecx, ebx
ja 0x4a2a8c
cmp ecx, ebx
ja 0x4a2fa0
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x84], ebx
add eax, ebp
mov dword [esp], eax
lea eax, [0x5fb950]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a2a74
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
jmp 0x4a0ddd
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
jmp 0x4a0ddd
mov dword [esp + 0x84], eax
lea edx, [0x5be360]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00438700
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x120]
jmp 0x4a2a0f
mov eax, dword [esp + 0x130]
cmp eax, 0x76
jne 0x4a2bbd
mov eax, dword [edx + 4]
lea ecx, [eax + 5]
mov dword [esp + 0x88], ecx
mov ebx, dword [edx + 8]
mov ebp, dword [edx]
cmp ecx, ebx
ja 0x4a2b76
cmp ecx, ebx
ja 0x4a2f99
mov dword [esp + 0x84], ebx
mov dword [esp + 0xd8], ebp
add eax, ebp
mov dword [esp], eax
lea eax, [0x5f6b16]
mov dword [esp + 4], eax
mov dword [esp + 8], 5
call fcn.0044c4f0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a2b5e
mov eax, dword [esp + 0xd8]
mov dword [ecx], eax
jmp 0x4a0ddd
mov dword [esp], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
call fcn.0040ec50
jmp 0x4a0ddd
mov dword [esp + 0x84], eax
lea edx, [0x5be360]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00438700
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x120]
jmp 0x4a2af9
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0049dae0
jmp 0x4a0ddd
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004913e0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x120]
mov dword [esp], ecx
mov byte [esp + 4], al
mov eax, dword [esp + 0x130]
mov dword [esp + 8], eax
call fcn.0049e140
jmp 0x4a0ddd
lea eax, [ecx - 2]
cmp eax, 4
jbe 0x4a2c5e
lea eax, [ecx - 7]
cmp eax, 5
ja 0x4a1470
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004937a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
call fcn.0049e220
jmp 0x4a0ddd
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00492160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x120]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
call fcn.0049e220
jmp 0x4a0ddd
cmp ecx, 0xe
ja 0x4a2d36
cmp ecx, 0xd
jne 0x4a2cf3
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00491ee0
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x120]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
call fcn.0049e540
jmp 0x4a0ddd
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00491ee0
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x120]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
call fcn.0049e540
jmp 0x4a0ddd
cmp ecx, 0xf
jne 0x4a2d8a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00491b60
movsd xmm0, qword [esp + 0x14]
movsd xmm1, qword [esp + 0xc]
mov eax, dword [esp + 0x120]
mov dword [esp], eax
movsd qword [esp + 4], xmm1
movsd qword [esp + 0xc], xmm0
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0x130]
mov dword [esp + 0x18], eax
call fcn.0049e6a0
jmp 0x4a0ddd
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00491b60
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0x120]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
movsd qword [esp + 0xc], xmm1
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0x130]
mov dword [esp + 0x18], eax
call fcn.0049e6a0
jmp 0x4a0ddd
mov dword [esp + 0xc0], esi
mov dword [esp], ebp
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0x128]
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
jmp 0x4a0982
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040ec50
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x120]
jmp 0x4a0957
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov edx, dword [esp + 0x128]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00492280
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a2e99
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x12c]
jmp 0x4a0931
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 8], edx
call fcn.00492320
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x120]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x728500]
lea ebx, [edx + 0x10]
test ecx, ecx
jne 0x4a2f16
mov dword [edx + 0x10], eax
mov dword [esp], edx
mov eax, dword [esp + 0x130]
mov dword [esp + 4], eax
call fcn.0049fc70
movzx eax, byte [esp + 8]
test al, al
jne 0x4a2f0f
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x12c]
jmp 0x4a0931
add esp, 0x11c
ret
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov edx, dword [esp + 0x120]
jmp 0x4a2ee0
mov ecx, dword [esp + 0x12c]
jmp 0x4a0931
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425900
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.0044a1d0
jmp fcn.004a08f0