Function at 0x4afca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xf33f68]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x54]
cmp eax, dword [ecx + 8]
jbe 0x4b14a2
sub esp, 0xd4
mov eax, dword [esp + 0xe0]
test eax, eax
je 0x4b0e1b
mov ecx, dword [esp + 0xec]
test ecx, ecx
je 0x4b0e17
test eax, 0x200
jne 0x4afcf2
lea edx, [0xc80e44]
mov ebx, dword [esp + 0xd8]
jmp 0x4afd2a
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bb070
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xec]
test ecx, 0x200
jne 0x4afd41
lea ebp, [0xc80e44]
mov esi, dword [esp + 0xe4]
jmp 0x4afd89
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004bb070
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x6c]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xec]
cmp edx, ebp
jne 0x4afda6
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00404f40
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4afdb5
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov eax, dword [0x7f30e8]
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xe0]
mov dword [esp + 8], ebp
mov esi, dword [esp + 0xe4]
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0xec]
mov dword [esp + 0x14], esi
lea edx, [0x7f30e8]
call eax
movzx eax, byte [esp + 0x18]
test al, al
je 0x4affe5
mov eax, dword [esp + 0xe0]
mov ecx, eax
and eax, 0x1f
add eax, 0xffffffeb
nop
nop
cmp eax, 1
ja 0x4afe60
mov eax, dword [esp + 0xd8]
cmp dword [eax], 4
jne 0x4b1489
mov edx, dword [eax + 4]
test edx, edx
je 0x4b1489
test ecx, 0x80
je 0x4afe55
mov edx, dword [esp + 0xdc]
mov ebx, dword [edx]
jmp 0x4afe70
mov edx, dword [esp + 0xdc]
mov ebx, edx
jmp 0x4afe70
mov eax, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov ebx, edx
mov ebp, dword [esp + 0xec]
mov esi, ebp
and ebp, 0x1f
add ebp, 0xffffffeb
nop
nop
cmp ebp, 1
ja 0x4afec0
mov ebp, dword [esp + 0xe4]
cmp dword [ebp], 4
jne 0x4b1471
mov edi, dword [ebp + 4]
test edi, edi
je 0x4b1471
test esi, 0x80
je 0x4afeb5
mov edi, dword [esp + 0xe8]
mov ebp, dword [edi]
jmp 0x4afec9
mov edi, dword [esp + 0xe8]
mov ebp, edi
jmp 0x4afec9
mov edi, dword [esp + 0xe8]
mov ebp, edi
mov dword [esp + 0x70], ebx
mov dword [esp + 0x78], ebp
cmp ebp, ebx
jae 0x4afee5
test ecx, 0x200
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x70]
jmp 0x4afef3
test ecx, 0x200
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], ebp
jne 0x4aff11
mov dword [esp + 0x50], eax
lea eax, [0xc80e44]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x50]
jmp 0x4aff37
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004bb070
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x74]
mov dword [esp + 0x30], eax
mov eax, ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], eax
lea edx, [0x77ace0]
mov dword [esp], edx
mov esi, dword [esp + 0xf0]
mov dword [esp + 4], esi
lea edi, [esp + 0xc4]
mov dword [esp + 8], edi
call fcn.0040e340
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
jne 0x4b0e08
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xd0], eax
lea eax, [0x77ace0]
mov dword [esp], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 4], eax
lea ecx, [esp + 0xc4]
mov dword [esp + 8], ecx
call fcn.0040e8d0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
mov eax, dword [esp + 0xe0]
mov ecx, eax
and eax, 0x1f
nop
cmp eax, 0x11
ja 0x4b03ce
cmp eax, 0xc
jbe 0x4b012f
cmp eax, 0xe
jbe 0x4b00bf
lea edx, [eax - 0xf]
cmp edx, 1
jbe 0x4b0025
cmp eax, 0x11
jne 0x4b0d72
xor eax, eax
jmp 0x4b135d
cmp eax, 0xf
jne 0x4b0044
mov eax, dword [esp + 0xdc]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
cvtss2sd xmm0, xmm0
cvtss2sd xmm1, xmm1
jmp 0x4b0054
mov eax, dword [esp + 0xdc]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov eax, dword [esp + 0xec]
and eax, 0x1f
nop
cmp eax, 0xf
jne 0x4b007e
mov eax, dword [esp + 0xe8]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm3, xmm3
jmp 0x4b0097
cmp eax, 0x10
jne 0x4b1311
mov eax, dword [esp + 0xe8]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm1, xmm3
sete cl
setnp al
and ecx, eax
ucomisd xmm0, xmm2
sete dl
setnp al
and edx, eax
and edx, ecx
mov byte [esp + 0xf4], dl
add esp, 0xd4
ret
cmp eax, 0xd
jne 0x4b00d5
mov eax, dword [esp + 0xdc]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x4b00e0
mov eax, dword [esp + 0xdc]
movsd xmm0, qword [eax]
mov eax, dword [esp + 0xec]
and eax, 0x1f
nop
cmp eax, 0xd
jne 0x4b0101
mov eax, dword [esp + 0xe8]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x4b0115
cmp eax, 0xe
jne 0x4b12d3
mov eax, dword [esp + 0xe8]
movsd xmm1, qword [eax]
ucomisd xmm1, xmm0
sete cl
setnp al
and ecx, eax
mov byte [esp + 0xf4], cl
add esp, 0xd4
ret
cmp eax, 1
jne 0x4b0190
mov eax, dword [esp + 0xec]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0xdc]
movzx edx, byte [edx]
cmp eax, 1
je 0x4b0176
mov byte [esp + 0x27], dl
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b60f0
movzx edx, byte [esp + 0x27]
mov eax, dword [esp + 0xe8]
cmp byte [eax], dl
sete al
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
lea edx, [eax - 2]
cmp edx, 4
ja 0x4b02b9
cmp eax, 3
ja 0x4b01cd
cmp eax, 2
jne 0x4b01b6
mov eax, dword [esp + 0xdc]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b0216
mov ecx, dword [esp + 0xdc]
movsx eax, byte [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x4b0216
cmp eax, 4
jne 0x4b01e9
mov ecx, dword [esp + 0xdc]
movsx eax, word [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x4b0216
cmp eax, 5
jne 0x4b0204
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x4b0216
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0xec]
and edx, 0x1f
mov dword [esp + 0x5c], edx
nop
cmp edx, 3
ja 0x4b025f
cmp edx, 2
jne 0x4b0245
mov edx, dword [esp + 0xe8]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
mov ebp, ebx
mov ebx, edx
mov edx, ebp
jmp 0x4b029f
cmp edx, 3
jne 0x4b1299
mov ebx, dword [esp + 0xe8]
movsx edx, byte [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x4b029f
cmp edx, 4
jne 0x4b0275
mov ebx, dword [esp + 0xe8]
movsx edx, word [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x4b029f
cmp edx, 5
jne 0x4b028a
mov ebx, dword [esp + 0xe8]
mov edx, dword [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x4b029f
cmp edx, 6
jne 0x4b1299
mov ebx, dword [esp + 0xe8]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
cmp ecx, edx
sete cl
cmp eax, ebx
sete al
and eax, ecx
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
cmp eax, 7
jb 0x4b0d72
cmp eax, 9
ja 0x4b02fa
cmp eax, 7
jne 0x4b02d9
mov eax, dword [esp + 0xdc]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4b032a
cmp eax, 8
jne 0x4b02ec
mov ecx, dword [esp + 0xdc]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4b032a
mov ecx, dword [esp + 0xdc]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4b032a
cmp eax, 0xa
jne 0x4b030c
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4b032a
cmp eax, 0xb
jne 0x4b031f
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4b032a
mov edx, dword [esp + 0xdc]
mov eax, dword [edx]
xor ecx, ecx
mov edx, dword [esp + 0xec]
and edx, 0x1f
mov dword [esp + 0x5c], edx
nop
cmp edx, 9
ja 0x4b037a
cmp edx, 7
jne 0x4b0350
mov edx, dword [esp + 0xe8]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4b03b4
cmp edx, 8
jne 0x4b0363
mov ebx, dword [esp + 0xe8]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4b03b4
cmp edx, 9
jne 0x4b125f
mov ebx, dword [esp + 0xe8]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4b03b4
cmp edx, 0xa
jne 0x4b038c
mov ebx, dword [esp + 0xe8]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4b03b4
cmp edx, 0xb
jne 0x4b039f
mov ebx, dword [esp + 0xe8]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4b03b4
cmp edx, 0xc
jne 0x4b125f
mov ebp, dword [esp + 0xe8]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
sete cl
cmp eax, edx
sete al
and ecx, eax
mov byte [esp + 0xf4], cl
add esp, 0xd4
ret
cmp eax, 0x15
jbe 0x4b0889
cmp eax, 0x17
jbe 0x4b04a7
cmp eax, 0x18
je 0x4b041b
cmp eax, 0x19
jne 0x4b0d72
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b9f90
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
xor ecx, ecx
jmp 0x4b116f
mov eax, dword [esp + 0xec]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0xdc]
mov ebx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, 0x18
jne 0x4b0446
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4b047c
mov dword [esp + 0x28], ebx
mov dword [esp + 0x60], edx
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004baf90
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x28]
cmp eax, ebx
je 0x4b0484
xor eax, eax
jmp 0x4b0499
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403420
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
cmp eax, 0x16
je 0x4b0777
mov eax, dword [esp + 0xec]
mov edx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
nop
cmp eax, 0x14
ja 0x4b04e0
lea ebx, [eax - 0x12]
cmp ebx, 1
ja 0x4b04d6
test edx, 0x200
jmp 0x4b0518
cmp eax, 0x14
je 0x4b04f2
jmp 0x4b112a
cmp eax, 0x16
ja 0x4b04ed
test edx, 0x200
jmp 0x4b0518
cmp eax, 0x17
jne 0x4b0509
mov ebx, dword [esp + 0xe8]
mov ebp, dword [ebx]
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
jmp 0x4b054d
cmp eax, 0x1a
jne 0x4b112a
test edx, 0x200
je 0x4b0525
mov ebx, dword [esp + 0xe8]
xor ebp, ebp
jmp 0x4b054d
test edx, 0x80
je 0x4b0538
mov ebx, dword [esp + 0xe8]
mov ebp, dword [ebx]
jmp 0x4b0541
mov ebx, dword [esp + 0xe8]
mov ebp, ebx
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
mov esi, dword [esp + 0xdc]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg ebp, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg ebp, eax
jne 0x4b0768
mov ebp, dword [esi + 4]
cmp eax, 0x17
jne 0x4b057d
mov eax, dword [ebx + 4]
jmp 0x4b05bc
mov dword [esp + 0x3c], ebp
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.004b96c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0xdc]
cmp eax, ebp
jne 0x4b0759
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call fcn.004bb1c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp], ecx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xec]
mov dword [esp + 8], ebx
call fcn.004bb1c0
mov eax, dword [esp + 0x84]
cmp dword [esp + 0xc], eax
je 0x4b074a
mov eax, dword [esp + 0xe0]
test eax, 0x200
jne 0x4b0639
lea ecx, [0xc80e44]
mov edx, dword [esp + 0xd8]
jmp 0x4b0663
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bb070
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4b0689
xor eax, eax
jmp 0x4b1039
mov eax, dword [esp + 0xd8]
cmp dword [0xef36b4], eax
jne 0x4b06a6
mov eax, dword [esp + 0xdc]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4b06cc
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
call fcn.004b6190
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xe4]
cmp dword [0xef36b4], edx
jne 0x4b06e9
mov edx, dword [esp + 0xe8]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4b071f
mov dword [esp + 0x2c], eax
mov dword [esp + 0x64], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 8], eax
call fcn.004b6190
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x64]
cmp edx, eax
je 0x4b0727
xor eax, eax
jmp 0x4b073c
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00403420
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004bb1c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp], ecx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xec]
mov dword [esp + 8], ebx
call fcn.004bb1c0
mov eax, dword [esp + 0x84]
cmp dword [esp + 0xc], eax
jne 0x4b07e1
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
call fcn.004b8ca0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov ebx, dword [esp + 0xe8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xec]
mov dword [esp + 8], ebx
call fcn.004b8ca0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x18], eax
call fcn.004afca0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
cmp eax, 0x13
jne 0x4b0964
test ecx, 0x200
jne 0x4b0946
test ecx, 0x80
je 0x4b08b1
mov eax, dword [esp + 0xdc]
mov eax, dword [eax]
jmp 0x4b08b8
mov eax, dword [esp + 0xdc]
test eax, eax
jne 0x4b0946
mov eax, dword [esp + 0xec]
mov ecx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
nop
cmp eax, 0x14
ja 0x4b08f0
lea edx, [eax - 0x12]
cmp edx, 1
ja 0x4b08e6
test ecx, 0x200
jmp 0x4b0921
cmp eax, 0x14
je 0x4b0902
jmp 0x4b0ff8
cmp eax, 0x16
ja 0x4b08fd
test ecx, 0x200
jmp 0x4b0921
cmp eax, 0x17
jne 0x4b0912
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
test eax, eax
setne al
jmp 0x4b0942
cmp eax, 0x1a
jne 0x4b0ff8
test ecx, 0x200
jne 0x4b0946
test ecx, 0x80
je 0x4b0936
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
jmp 0x4b093d
mov eax, dword [esp + 0xe8]
test eax, eax
setne al
test al, al
je 0x4b0955
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
cmp eax, 0x14
jne 0x4b0b4e
mov eax, dword [esp + 0xdc]
mov edx, dword [eax]
test edx, edx
je 0x4b0aae
mov ebx, dword [esp + 0xec]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
nop
cmp ebx, 0x14
ja 0x4b09ae
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4b09a4
test ebp, 0x200
jmp 0x4b09e3
cmp ebx, 0x14
je 0x4b09c0
jmp 0x4b0fbe
cmp ebx, 0x16
ja 0x4b09bb
test ebp, 0x200
jmp 0x4b09e3
cmp ebx, 0x17
jne 0x4b09d4
mov ebx, dword [esp + 0xe8]
mov esi, dword [ebx]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x4b0a0a
cmp ebx, 0x1a
jne 0x4b0fbe
test ebp, 0x200
jne 0x4b0a14
test ebp, 0x80
je 0x4b09f8
mov ebx, dword [esp + 0xe8]
mov esi, dword [ebx]
jmp 0x4b0a01
mov ebx, dword [esp + 0xe8]
mov esi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4b0abc
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b8ca0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov ebx, dword [esp + 0xe8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xec]
mov dword [esp + 8], ebx
call fcn.004b8ca0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x18], eax
call fcn.004afca0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0xec]
test byte [eax], al
mov eax, ebp
and ebp, 0x1f
mov dword [esp + 0x5c], ebp
nop
cmp ebp, 0x14
ja 0x4b0ae6
lea ecx, [ebp - 0x12]
cmp ecx, 1
ja 0x4b0adc
test eax, 0x200
jmp 0x4b0b13
cmp ebp, 0x14
je 0x4b0af7
jmp 0x4b0f84
cmp ebp, 0x16
ja 0x4b0af2
test eax, 0x200
jmp 0x4b0b13
cmp ebp, 0x17
jne 0x4b0b05
mov eax, dword [ebx]
test eax, eax
setne al
xor eax, 1
test edx, edx
jmp 0x4b0b35
cmp ebp, 0x1a
jne 0x4b0f84
test eax, 0x200
je 0x4b0b1e
test edx, edx
mov eax, 0
jmp 0x4b0b35
test eax, 0x80
je 0x4b0b29
mov eax, dword [ebx]
jmp 0x4b0b2b
mov eax, ebx
test eax, eax
setne al
xor eax, 1
test edx, edx
setne cl
xor ecx, 1
cmp al, cl
sete al
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
cmp eax, 0x15
jne 0x4b0d72
test ecx, 0x200
je 0x4b0b6a
mov eax, dword [esp + 0xdc]
xor edx, edx
jmp 0x4b0b8e
test ecx, 0x80
je 0x4b0b7d
mov eax, dword [esp + 0xdc]
mov edx, dword [eax]
jmp 0x4b0b86
mov eax, dword [esp + 0xdc]
mov edx, eax
test edx, edx
setne dl
xor edx, 1
mov ebx, dword [esp + 0xec]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
nop
cmp ebx, 0x14
ja 0x4b0bbe
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4b0bb4
test ebp, 0x200
jmp 0x4b0bf6
cmp ebx, 0x14
je 0x4b0bd0
jmp 0x4b0f4a
cmp ebx, 0x16
ja 0x4b0bcb
test ebp, 0x200
jmp 0x4b0bf6
cmp ebx, 0x17
jne 0x4b0be7
mov esi, dword [esp + 0xe8]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4b0c2b
cmp ebx, 0x1a
jne 0x4b0f4a
test ebp, 0x200
je 0x4b0c03
mov esi, dword [esp + 0xe8]
xor edi, edi
jmp 0x4b0c2b
test ebp, 0x80
je 0x4b0c16
mov esi, dword [esp + 0xe8]
mov edi, dword [esi]
jmp 0x4b0c1f
mov esi, dword [esp + 0xe8]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4b0d63
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b96c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
cmp ecx, 0x17
jne 0x4b0c65
mov ecx, dword [esp + 0xe8]
mov edx, dword [ecx + 4]
jmp 0x4b0c9d
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov ecx, dword [esp + 0xe8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
call fcn.004b96c0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xe8]
cmp edx, eax
jne 0x4b0d54
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xe0]
mov dword [esp + 8], edx
call fcn.004bb1c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp], ecx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xec]
mov dword [esp + 8], ebx
call fcn.004bb1c0
mov eax, dword [esp + 0x84]
cmp dword [esp + 0xc], eax
je 0x4b0d45
nop
lea edi, [esp + 0x88]
xor eax, eax
call fcn.0046ca71
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x8c], ecx
jmp 0x4b0e3d
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
call fcn.004b94d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0xe4]
mov dword [esp], edx
mov edx, dword [esp + 0xe8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xec]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0
call fcn.004b94d0
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x10], eax
je 0x4b0ddd
xor eax, eax
jmp 0x4b0dfa
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00404e60
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
test eax, eax
jmp 0x4b0e22
mov ecx, dword [esp + 0xec]
setne al
test ecx, ecx
setne cl
cmp cl, al
sete al
mov byte [esp + 0xf4], al
add esp, 0xd4
ret
lea eax, [esp + 0x88]
mov dword [esp], eax
call fcn.004b9ce0
movzx eax, byte [esp + 4]
test al, al
je 0x4b0f3b
lea eax, [esp + 0x88]
mov dword [esp], eax
call fcn.004b9c10
mov eax, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x84], edx
lea ebx, [esp + 0x88]
mov dword [esp], ebx
call fcn.004b9b40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov ebp, dword [esp + 0xe8]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xec]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004b98e0
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4b0f2c
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4b0f2c
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x80]
mov dword [esp], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x18], eax
call fcn.004afca0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b0e3d
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x7c5533]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x7c5533]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x7c5533]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x7c5533]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
mov ecx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xdc]
cmp dword [ecx + 4], eax
jle 0x4b111b
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004b9320
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov ebp, dword [esp + 0xe8]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xec]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0xc], edi
call fcn.004b9320
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x18], eax
call fcn.004afca0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b1032
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x7c5533]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
mov edx, dword [esp + 0x44]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x4b1250
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004b8e50
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov ebp, dword [esp + 0xe8]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xec]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x44]
mov dword [esp + 0xc], edi
call fcn.004b8e50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x18], eax
call fcn.004afca0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b1164
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x7c4919]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x7c3c81]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
mov dword [esp + 0x5c], eax
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x7c5546]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
mov dword [esp + 0x5c], eax
lea eax, [0x78b300]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x7c6ff8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x77f4a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00439a40
mov edx, dword [esp + 0x4c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004b96c0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0xc], eax
jle 0x4b1462
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004b9320
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov ebp, dword [esp + 0xe8]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xec]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
call fcn.004b9320
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xf0]
mov dword [esp + 0x18], eax
call fcn.004afca0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b134f
mov byte [esp + 0xf4], 0
add esp, 0xd4
ret
mov byte [esp + 0xf4], 1
add esp, 0xd4
ret
lea eax, [0x776800]
mov dword [esp], eax
lea eax, [0xc7e768]
mov dword [esp + 4], eax
call fcn.00439a40
lea eax, [0x776800]
mov dword [esp], eax
lea eax, [0xc7e768]
mov dword [esp + 4], eax
call fcn.00439a40
nop
call fcn.0046b3d0
jmp fcn.004afca0