Function at 0x48ddf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x6c]
cmp eax, dword [ecx + 8]
jbe 0x48fcfb
sub esp, 0xec
mov ecx, dword [esp + 0x104]
test ecx, ecx
jle 0x48deba
mov edx, dword [esp + 0xfc]
test edx, edx
je 0x48dec1
test edx, 0x60
jne 0x48dec1
nop
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.0046b990
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf0]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48de7f
mov dword [edx + 0x10], eax
jmp 0x48de87
lea edi, [edx + 0x10]
call fcn.004528f0
mov dword [esp], edx
mov eax, dword [esp + 0x100]
mov dword [esp + 4], eax
call fcn.0048cf10
movzx eax, byte [esp + 8]
test al, al
jne 0x48deb3
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0xfc]
jmp 0x48dec1
add esp, 0xec
ret
mov edx, dword [esp + 0xfc]
mov edi, dword [esp + 0xf0]
mov dword [edi + 0xc], 0
mov ebx, dword [0x85df80]
test ebx, ebx
jne 0x48dee2
mov dword [edi + 0x10], 0
jmp 0x48def2
lea ebx, [edi + 0x10]
xor eax, eax
mov ebp, edi
mov edi, ebx
call fcn.004528f0
mov edi, ebp
mov dword [edi + 0x1c], edx
mov ebx, dword [0x85df80]
test ebx, ebx
jne 0x48df15
mov ebx, dword [esp + 0xf4]
mov dword [edi + 0x14], ebx
mov ebp, dword [esp + 0xf8]
mov dword [edi + 0x18], ebp
jmp 0x48df42
lea ebx, [edi + 0x14]
mov eax, dword [esp + 0xf4]
mov ebp, edi
mov edi, ebx
call fcn.004528f0
lea edi, [ebp + 0x18]
mov ebx, eax
mov eax, dword [esp + 0xf8]
call fcn.004528f0
mov ebp, eax
mov edi, dword [esp + 0xf0]
nop
nop
mov esi, edx
and edx, 0x1f
cmp edx, 0x10
jbe 0x48ed48
cmp edx, 0x15
ja 0x48e4e5
cmp edx, 0x13
ja 0x48df6e
cmp edx, 0x11
je 0x48e4f7
jmp 0x48ece5
cmp edx, 0x14
je 0x48e26e
movzx edx, byte [edi + 0x2c]
test dl, dl
je 0x48e1aa
test esi, 0x200
jne 0x48df93
lea eax, [0x7d7500]
jmp 0x48dfad
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0046c780
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov eax, dword [eax + 0x80]
mov dword [esp], ebx
call eax
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xf0]
mov edx, dword [ecx + 4]
lea ebx, [eax + edx]
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x48e01f
mov dword [esp + 0x7c], edx
mov dword [esp + 0x50], eax
mov dword [esp + 0x9c], ebp
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
lea ecx, [0x79f960]
mov dword [esp + 0x10], ecx
call fcn.0043ff80
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x9c]
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], ebx
mov dword [esp + 0xb4], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.004531b0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xf0]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x7c]
mov dword [edi + 8], ecx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48e078
mov edx, dword [esp + 0xb4]
mov dword [edi], edx
mov ebx, dword [esp + 0xfc]
test ebx, 0x200
jmp 0x48e09c
mov edx, eax
mov eax, dword [esp + 0xb4]
call fcn.004528f0
mov ebx, dword [esp + 0xfc]
test ebx, 0x200
mov eax, edx
mov edx, dword [esp + 0xb4]
je 0x48e0a7
mov ebp, dword [esp + 0xf8]
jmp 0x48e0c8
test ebx, 0x80
je 0x48e0bb
mov ebp, dword [esp + 0xf8]
mov esi, dword [ebp]
jmp 0x48e0c4
mov ebp, dword [esp + 0xf8]
mov esi, ebp
test esi, esi
je 0x48e137
inc eax
cmp ecx, eax
jae 0x48e12a
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48e113
mov dword [edi], eax
jmp 0x48e118
call fcn.004528f0
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov edx, eax
mov eax, ecx
mov dword [edi + 4], eax
mov byte [eax + edx - 1], 0x7b
jmp 0x48e23c
nop
lea ebx, [eax + 5]
cmp ecx, ebx
jae 0x48e17c
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf0]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48e19c
mov dword [edi], edx
jmp 0x48e1a3
mov eax, edx
call fcn.004528f0
add esp, 0xec
ret
nop
mov edx, dword [edi + 4]
mov eax, ecx
lea ecx, [edx + 4]
mov esi, dword [edi + 8]
mov ebp, dword [edi]
cmp esi, ecx
jae 0x48e207
mov dword [esp + 0x7c], edx
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 4
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x104]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xf4]
mov edi, dword [esp + 0xf0]
mov dword [ebp + edx], 0x5b70616d
mov dword [edi + 4], ecx
mov dword [edi + 8], esi
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48e223
mov dword [edi], ebp
jmp 0x48e22e
mov ecx, eax
mov eax, ebp
call fcn.004528f0
mov eax, ecx
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0046ef10
mov eax, dword [esp + 0xc]
mov dword [esp + 0x8c], eax
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x7c], edx
xor ebx, ebx
jmp 0x48f9ef
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0046b540
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test edx, edx
jne 0x48e4ae
mov edi, dword [esp + 0xf0]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x48e431
mov eax, dword [esp + 0xfc]
test eax, 0x200
jne 0x48e2c2
lea eax, [0x7d7500]
mov ecx, dword [esp + 0xf4]
jmp 0x48e2e8
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0046c780
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xf0]
mov edx, dword [ecx + 4]
lea ebx, [eax + edx]
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x48e35a
mov dword [esp + 0x7c], edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x94], ebp
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
lea ecx, [0x79f960]
mov dword [esp + 0x10], ecx
call fcn.0043ff80
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x94]
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], ebx
mov dword [esp + 0xb4], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.004531b0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xf0]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x7c]
mov dword [edi + 8], ecx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48e3a6
mov edx, dword [esp + 0xb4]
mov dword [edi], edx
jmp 0x48e3bd
mov edx, eax
mov eax, dword [esp + 0xb4]
call fcn.004528f0
mov eax, edx
mov edx, dword [esp + 0xb4]
nop
lea ebx, [eax + 5]
cmp ecx, ebx
jae 0x48e402
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf0]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48e425
mov dword [edi], edx
jmp 0x48f083
mov eax, edx
call fcn.004528f0
jmp 0x48f083
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x48e47e
mov dword [esp + 0x7c], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 5
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0xf0]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48e4a2
mov dword [edi], ebp
jmp 0x48f083
mov eax, ebp
call fcn.004528f0
jmp 0x48f083
mov ebx, dword [esp + 0xf0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x104]
inc eax
mov dword [esp + 0x14], eax
call fcn.0048ddf0
jmp 0x48f083
cmp edx, 0x17
ja 0x48eb32
cmp edx, 0x16
je 0x48e9bd
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x100]
cmp eax, 0x71
jg 0x48e516
cmp eax, 0x58
je 0x48e524
cmp eax, 0x71
je 0x48e524
jmp 0x48e709
cmp eax, 0x73
je 0x48e524
cmp eax, 0x78
jne 0x48e709
test esi, 0x200
jne 0x48e53f
mov dword [esp + 0x80], eax
lea eax, [0x7d7500]
mov dword [esp + 0x3c], eax
jmp 0x48e55d
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0046c780
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ebx, ecx
mov dword [esp + 0x88], ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x28]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x48e6db
mov eax, dword [esp + 0x74]
cmp eax, 0x17
je 0x48e689
mov eax, dword [esp + 0xfc]
test eax, 0x100
jne 0x48e5f4
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0046bb80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
lea ecx, [0x79f960]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0043fec0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
xor ecx, ecx
jmp 0x48f890
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0046bb80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.0046c3f0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
cmp dword [0x8383f0], ecx
jne 0x48e668
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
jmp 0x48f875
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0046a650
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
jmp 0x48f875
mov eax, dword [esp + 0xf4]
cmp dword [0x8383f0], eax
jne 0x48e6ac
mov eax, dword [esp + 0xf8]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
jmp 0x48f804
mov dword [esp], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 8], eax
call fcn.0046a650
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x48f804
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0xf0]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x48e93d
test esi, 0x200
jne 0x48e725
lea ecx, [0x7d7500]
jmp 0x48e741
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0046c780
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x80]
mov dword [esp], ebx
call eax
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xf0]
mov edx, dword [ecx + 4]
lea ebx, [eax + edx]
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x48e7b3
mov dword [esp + 0x7c], edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x90], ebp
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
lea ecx, [0x79f960]
mov dword [esp + 0x10], ecx
call fcn.0043ff80
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], ebx
mov dword [esp + 0xb4], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.004531b0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xf0]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x7c]
mov dword [edi + 8], ecx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48e7ff
mov edx, dword [esp + 0xb4]
mov dword [edi], edx
jmp 0x48e816
mov edx, eax
mov eax, dword [esp + 0xb4]
call fcn.004528f0
mov eax, edx
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x74]
cmp ebx, 0x17
jne 0x48e8a4
mov ebp, dword [esp + 0xf8]
mov esi, dword [ebp]
test esi, esi
jne 0x48e8ab
nop
lea ebx, [eax + 5]
cmp ecx, ebx
jae 0x48e876
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf0]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48e896
mov dword [edi], edx
jmp 0x48e89d
mov eax, edx
call fcn.004528f0
add esp, 0xec
ret
mov ebp, dword [esp + 0xf8]
lea esi, [eax + 1]
cmp ecx, esi
jb 0x48e8b7
cmp ebx, 0x17
jmp 0x48e91d
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48e904
mov dword [edi], eax
mov edx, dword [esp + 0x74]
cmp edx, 0x17
jmp 0x48e910
call fcn.004528f0
mov edx, dword [esp + 0x74]
cmp edx, 0x17
mov ebx, edx
mov ebp, dword [esp + 0xf8]
mov esi, ecx
mov edx, eax
mov dword [edi + 4], esi
mov byte [esi + edx - 1], 0x7b
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0xf4]
mov eax, 0
jmp 0x48f6b5
mov ecx, dword [edi + 4]
inc ecx
mov eax, dword [edi]
mov esi, dword [edi + 8]
cmp esi, ecx
jae 0x48e9a7
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48e990
mov dword [edi], eax
jmp 0x48e995
call fcn.004528f0
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov dword [edi + 4], ecx
mov byte [ecx + eax - 1], 0x5b
mov eax, dword [esp + 0xfc]
xor ecx, ecx
jmp 0x48f4ea
test ecx, ecx
je 0x48e9c5
xor eax, eax
jmp 0x48ea01
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0046c240
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x104]
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0xf0]
test al, al
je 0x48ece5
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0046b540
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
nop
mov edx, dword [esp + 0x14]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x15
ja 0x48ea3f
cmp edx, 0x11
je 0x48ea4d
cmp edx, 0x15
je 0x48ea4d
jmp 0x48eb11
cmp edx, 0x17
je 0x48ea4d
cmp edx, 0x19
jne 0x48eb11
nop
mov edx, dword [esp + 0xf0]
mov ebp, dword [edx + 4]
inc ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp edi, ebp
jae 0x48ead7
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xac], eax
mov dword [esp + 0x74], ebx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48eaba
mov dword [edi], eax
jmp 0x48eabf
call fcn.004528f0
mov edx, edi
mov ebx, dword [esp + 0x74]
mov ebp, ecx
mov esi, eax
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xb0]
mov dword [edx + 4], ebp
mov byte [ebp + esi - 1], 0x26
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x104]
inc eax
mov dword [esp + 0x14], eax
call fcn.0048ddf0
add esp, 0xec
ret
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0xf0]
jmp 0x48ece5
cmp edx, 0x18
je 0x48ed22
cmp edx, 0x19
jne 0x48ece0
movzx eax, byte [edi + 0x2c]
test al, al
je 0x48ec60
test esi, 0x200
jne 0x48eb60
lea eax, [0x7d7500]
jmp 0x48eb7a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0046c780
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov eax, dword [eax + 0x80]
mov dword [esp], ebx
call eax
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xf0]
mov edx, dword [ecx + 4]
lea ebx, [edx + eax]
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x48ebec
mov dword [esp + 0x98], ebp
mov dword [esp + 0x4c], eax
mov dword [esp + 0x7c], edx
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
lea ecx, [0x79f960]
mov dword [esp + 0x10], ecx
call fcn.0043ff80
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x7c], esi
mov dword [esp + 0xb4], edi
mov dword [esp + 0x78], ebx
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.004531b0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xf0]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x85df80]
test eax, eax
jne 0x48ec38
mov eax, dword [esp + 0xb4]
mov dword [edi], eax
jmp 0x48ec44
mov eax, dword [esp + 0xb4]
call fcn.004528f0
mov ecx, dword [esp + 0x104]
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
mov eax, dword [edi + 4]
inc eax
mov edx, dword [edi]
mov ecx, dword [edi + 8]
cmp ecx, eax
jae 0x48ecd1
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48ecb3
mov dword [edi], eax
jmp 0x48ecb8
call fcn.004528f0
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
mov dword [edi + 4], eax
mov byte [eax + edx - 1], 0x7b
xor eax, eax
jmp 0x48f10d
cmp edx, 0x1a
jne 0x48ed09
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
call fcn.0048c5b0
jmp 0x48f083
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.0048ae80
jmp 0x48f083
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x100]
mov dword [esp + 0xc], eax
call fcn.0048bd70
jmp 0x48f083
cmp edx, 0xc
ja 0x48efb1
cmp edx, 1
ja 0x48eed4
test edx, edx
jne 0x48eeb3
test ecx, ecx
jne 0x48ee19
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 0x17]
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp edx, ecx
jae 0x48edb0
mov dword [esp + 0x7c], eax
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x17
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 0xb4], ebx
add eax, ebx
mov dword [esp], eax
lea eax, [0x7b3770]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.004531b0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xf0]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x85df80]
test eax, eax
jne 0x48ee08
mov eax, dword [esp + 0xb4]
mov dword [edi], eax
jmp 0x48f083
mov eax, dword [esp + 0xb4]
call fcn.004528f0
jmp 0x48f083
mov ecx, dword [esp + 0x100]
cmp ecx, 0x76
jne 0x48eea2
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x48ee72
mov dword [esp + 0x7c], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 5
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0xf0]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48ee96
mov dword [edi], ebp
jmp 0x48f083
mov eax, ebp
call fcn.004528f0
jmp 0x48f083
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.0048b0f0
jmp 0x48f083
nop
movzx eax, byte [ebp]
mov dword [esp], edi
mov byte [esp + 4], al
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.0048b640
jmp 0x48f083
cmp edx, 6
ja 0x48ef48
cmp edx, 3
ja 0x48eef8
cmp edx, 2
jne 0x48eeed
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x48ef23
movsx eax, byte [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x48ef23
cmp edx, 4
jne 0x48ef08
movsx eax, word [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x48ef23
cmp edx, 5
jne 0x48ef17
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x48ef23
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
call fcn.0048b730
jmp 0x48f083
cmp edx, 9
ja 0x48ef6e
cmp edx, 7
jne 0x48ef59
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x48ef8c
cmp edx, 8
jne 0x48ef66
movzx eax, byte [ebp]
xor ecx, ecx
jmp 0x48ef8c
movzx eax, word [ebp]
xor ecx, ecx
jmp 0x48ef8c
cmp edx, 0xa
jne 0x48ef7a
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x48ef8c
cmp edx, 0xb
jne 0x48ef87
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
jmp 0x48ef8c
mov eax, dword [ebp]
xor ecx, ecx
mov dword [esp], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
call fcn.0048b730
jmp 0x48f083
cmp edx, 0xe
ja 0x48f012
cmp edx, 0xd
jne 0x48efea
movss xmm0, dword [ebp]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
call fcn.0048ba50
jmp 0x48f083
movsd xmm0, qword [ebp]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
call fcn.0048ba50
jmp 0x48f083
cmp edx, 0xf
jne 0x48f052
movss xmm0, dword [ebp]
movss xmm1, dword [ebp + 4]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
cvtss2sd xmm0, xmm1
movsd qword [esp + 0xc], xmm0
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0x100]
mov dword [esp + 0x18], eax
call fcn.0048bbb0
jmp 0x48f083
movsd xmm0, qword [ebp]
movsd xmm1, qword [ebp + 8]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
movsd qword [esp + 0xc], xmm1
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0x100]
mov dword [esp + 0x18], eax
call fcn.0048bbb0
add esp, 0xec
ret
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048adf0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x104]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.0048ddf0
mov eax, dword [esp + 0x60]
inc eax
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x60], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0046c190
mov eax, dword [esp + 0x60]
cmp dword [esp + 0xc], eax
jle 0x48f3f0
test eax, eax
jle 0x48f227
mov edi, dword [esp + 0xf0]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x48f1bf
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x48f197
mov dword [esp + 0x7c], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 2
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0xf0]
mov word [ebp + ecx], 0x202c
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48f1b2
mov dword [edi], ebp
jmp 0x48f22e
mov ecx, eax
mov eax, ebp
call fcn.004528f0
mov eax, ecx
jmp 0x48f22e
mov ecx, dword [edi + 4]
inc ecx
mov edx, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, ecx
jae 0x48f21d
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48f212
mov dword [edi], eax
jmp 0x48f217
call fcn.004528f0
mov edx, eax
mov eax, dword [esp + 0x60]
mov dword [edi + 4], ecx
mov byte [ecx + edx - 1], 0x20
jmp 0x48f22e
mov edi, dword [esp + 0xf0]
movzx ecx, byte [edi + 0x2b]
test cl, cl
jne 0x48f242
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x48f08a
mov ecx, dword [esp + 0xfc]
test ecx, 0x200
jne 0x48f260
lea edx, [0x7d7500]
mov ebx, dword [esp + 0xf4]
jmp 0x48f28e
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0046c780
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0x60]
mov ecx, dword [edx + 0x2c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0xb8]
lea esi, [esp + 8]
call fcn.00452f4e
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xb8]
test eax, eax
je 0x48f3e0
nop
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp esi, ebp
jae 0x48f31f
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x70], eax
mov dword [esp + 0xa4], ecx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
lea ecx, [0x79f960]
mov dword [esp + 0x10], ecx
call fcn.0043ff80
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x7c], ebp
mov dword [esp + 0xb4], edi
mov dword [esp + 0x78], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004531b0
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48f36b
mov edx, dword [esp + 0xb4]
mov dword [edi], edx
jmp 0x48f382
mov edx, eax
mov eax, dword [esp + 0xb4]
call fcn.004528f0
mov eax, edx
mov edx, dword [esp + 0xb4]
inc eax
cmp ecx, eax
jae 0x48f3d6
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48f3cd
mov dword [edi], eax
jmp 0x48f3d2
call fcn.004528f0
mov edx, eax
mov eax, ecx
mov dword [edi + 4], eax
mov byte [eax + edx - 1], 0x3a
jmp 0x48f3e7
mov edi, dword [esp + 0xf0]
mov eax, dword [esp + 0x60]
jmp 0x48f08a
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 4]
inc ecx
mov edx, dword [eax]
mov ebx, dword [eax + 8]
cmp ebx, ecx
jae 0x48f453
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48f44a
mov dword [edi], eax
jmp 0x48f44f
call fcn.004528f0
mov edx, eax
mov eax, edi
mov dword [eax + 4], ecx
mov byte [ecx + edx - 1], 0x7d
jmp 0x48f083
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0046b7e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x104]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.0048ddf0
mov eax, dword [esp + 0x54]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0xf0]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xf4]
mov eax, ebx
mov edx, dword [esp + 0x74]
mov ebx, esi
mov edi, dword [esp + 0xf0]
mov dword [esp + 0x54], ecx
cmp edx, 0x17
jne 0x48f4f8
mov esi, dword [ebp + 4]
jmp 0x48f530
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0046bb80
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov edi, dword [esp + 0xf0]
cmp esi, ecx
jle 0x48f5c2
test ecx, ecx
jle 0x48f460
mov esi, dword [edi + 4]
inc esi
mov edx, dword [edi]
mov ecx, dword [edi + 8]
cmp ecx, esi
jae 0x48f5b1
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48f593
mov dword [edi], eax
jmp 0x48f598
call fcn.004528f0
mov ebx, dword [esp + 0xf4]
mov ebp, dword [esp + 0xf8]
mov esi, ecx
mov edx, eax
mov eax, dword [esp + 0xfc]
mov dword [edi + 4], esi
mov byte [esi + edx - 1], 0x20
mov ecx, dword [esp + 0x54]
jmp 0x48f460
nop
mov eax, dword [edi + 4]
inc eax
mov ecx, dword [edi]
mov edx, dword [edi + 8]
cmp edx, eax
jae 0x48f621
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48f616
mov dword [edi], eax
jmp 0x48f61b
call fcn.004528f0
mov edx, eax
mov eax, ecx
mov ecx, edx
mov dword [edi + 4], eax
mov byte [eax + ecx - 1], 0x5d
jmp 0x48f083
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0046b7e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x100]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x104]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.0048ddf0
mov eax, dword [esp + 0x58]
inc eax
mov ebx, dword [esp + 0x74]
cmp ebx, 0x17
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xf4]
mov ecx, edx
mov edx, esi
mov edi, dword [esp + 0xf0]
mov dword [esp + 0x58], eax
jne 0x48f6c0
mov esi, dword [ebp + 4]
jmp 0x48f6f8
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.0046bb80
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0xf8]
mov edi, dword [esp + 0xf0]
cmp esi, eax
jle 0x48f798
test eax, eax
jle 0x48f62e
mov esi, dword [edi + 4]
lea ebx, [esi + 2]
mov ecx, dword [edi + 8]
mov ebp, dword [edi]
cmp ecx, ebx
jae 0x48f75f
mov dword [esp + 0x7c], esi
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 2
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0xf4]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0xf0]
mov word [ebp + esi], 0x202c
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x85df80]
test ecx, ecx
jne 0x48f77a
mov dword [edi], ebp
jmp 0x48f785
mov ecx, eax
mov eax, ebp
call fcn.004528f0
mov eax, ecx
mov ecx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
jmp 0x48f62e
nop
mov eax, dword [edi + 4]
inc eax
mov ecx, dword [edi]
mov edx, dword [edi + 8]
cmp edx, eax
jae 0x48f7f7
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48f7ec
mov dword [edi], eax
jmp 0x48f7f1
call fcn.004528f0
mov edx, eax
mov eax, ecx
mov ecx, edx
mov dword [edi + 4], eax
mov byte [eax + ecx - 1], 0x7d
jmp 0x48f083
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0xa0], ecx
mov ebx, dword [esp + 0x3c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xf0]
mov dword [esp], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x100]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.0048bf10
add esp, 0xec
ret
mov ebx, eax
mov eax, edx
mov edx, ecx
mov ecx, ebx
jmp 0x48f804
mov ebx, dword [esp + 0xb0]
mov byte [ebx + eax], dl
lea edx, [eax + 1]
mov eax, ebx
mov ecx, edx
mov edx, dword [esp + 0x40]
cmp ecx, edx
jge 0x48f957
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov edx, dword [esp + 0xf8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.0046b7e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
and eax, 0x1f
mov dword [esp + 0x74], eax
cmp eax, 9
ja 0x48f918
cmp eax, 7
jne 0x48f8f0
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x48f94f
cmp eax, 8
jne 0x48f904
movzx edx, byte [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x48f94f
cmp eax, 9
jne 0x48f963
movzx edx, word [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x48f94f
cmp eax, 0xa
jne 0x48f92b
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x48f94f
cmp eax, 0xb
jne 0x48f93e
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x48f94f
cmp eax, 0xc
jne 0x48f963
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jb 0x48f87f
jmp 0x48f95e
mov ecx, edx
jmp 0x48f875
call fcn.00452970
lea eax, [0x7a3720]
mov dword [esp], eax
call fcn.0040b550
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x7b238b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
lea ecx, [0x7a0ec0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0042f830
lea ecx, [ebp + ebp*2]
mov edx, dword [ebx + ecx*4]
mov esi, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4 + 8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x14], edx
call fcn.0048ddf0
mov eax, dword [esp + 0xb0]
lea ecx, [eax + 0xc]
mov eax, dword [esp + 0x64]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0x7c]
cmp ebx, edx
jge 0x48fc10
mov dword [esp + 0x64], ebx
mov dword [esp + 0xb0], ecx
mov ebp, dword [ecx]
mov esi, dword [ecx + 4]
mov edi, edx
mov edx, dword [ecx + 8]
test ebx, ebx
jle 0x48fb4e
mov dword [esp + 0x74], edx
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], ebp
mov ecx, dword [esp + 0xf0]
movzx ebx, byte [ecx + 0x2c]
test bl, bl
je 0x48fad0
mov ebx, dword [ecx + 4]
lea edx, [ebx + 2]
mov esi, dword [ecx + 8]
mov ebp, dword [ecx]
cmp esi, edx
jae 0x48fa90
mov dword [esp + 0x78], ebx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0xf0]
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0x7c]
mov word [ebp + ebx], 0x202c
mov dword [ecx + 4], edx
mov dword [ecx + 8], esi
mov edx, dword [0x85df80]
test edx, edx
jne 0x48faab
mov dword [ecx], ebp
jmp 0x48fabc
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, ebp
call fcn.004528f0
mov eax, ebx
mov edi, edx
mov edx, dword [esp + 0x74]
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
jmp 0x48fb4e
nop
mov ebx, dword [ecx + 4]
inc ebx
mov edi, dword [ecx]
mov eax, dword [ecx + 8]
cmp eax, ebx
jae 0x48fb46
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48fb24
mov dword [edi], eax
jmp 0x48fb29
call fcn.004528f0
mov edx, dword [esp + 0x74]
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
mov ebx, ecx
mov edi, eax
mov ecx, dword [esp + 0xf0]
mov dword [ecx + 4], ebx
mov byte [ebx + edi - 1], 0x20
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x104]
lea ebx, [edx + 1]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x14], ebx
call fcn.0048ddf0
nop
mov eax, dword [esp + 0xf0]
mov ecx, dword [eax + 4]
inc ecx
mov edx, dword [eax]
mov ebx, dword [eax + 8]
cmp ebx, ecx
jae 0x48fbea
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48fbe1
mov dword [edi], eax
jmp 0x48fbe6
call fcn.004528f0
mov edx, eax
mov eax, edi
mov dword [eax + 4], ecx
mov byte [ecx + edx - 1], 0x3a
mov edx, dword [esp + 0x8c]
mov ebx, dword [edx + 0xc]
mov ecx, dword [edx + 0x10]
mov ebp, dword [esp + 0x64]
cmp ebp, ecx
jb 0x48f99d
jmp 0x48fcf3
mov eax, dword [esp + 0xf0]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x48fc89
nop
mov ecx, dword [eax + 4]
inc ecx
mov edx, dword [eax]
mov ebx, dword [eax + 8]
cmp ebx, ecx
jae 0x48fc7c
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48fc73
mov dword [edi], eax
jmp 0x48fc78
call fcn.004528f0
mov edx, eax
mov eax, edi
mov dword [eax + 4], ecx
mov byte [ecx + edx - 1], 0x7d
jmp 0x48f083
nop
mov ecx, dword [eax + 4]
inc ecx
mov edx, dword [eax]
mov ebx, dword [eax + 8]
cmp ebx, ecx
jae 0x48fce6
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x79f960]
mov dword [esp + 0x10], eax
call fcn.0043ff80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf0]
mov dword [edi + 8], edx
mov edx, dword [0x85df80]
test edx, edx
jne 0x48fcdd
mov dword [edi], eax
jmp 0x48fce2
call fcn.004528f0
mov edx, eax
mov eax, edi
mov dword [eax + 4], ecx
mov byte [ecx + edx - 1], 0x5d
jmp 0x48f083
mov eax, ebp
call fcn.00452970
nop
call fcn.004514c0
jmp fcn.0048ddf0