Function at 0x4a61c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x4a8638
sub esp, 0x110
mov eax, dword [esp + 0x128]
test eax, eax
jle 0x4a85bc
mov ecx, dword [esp + 0x120]
test ecx, ecx
jne 0x4a84f0
mov edx, dword [esp + 0x114]
mov dword [edx + 0xc], 0
mov ebx, dword [0x9cadb0]
lea ebp, [edx + 0x10]
test ebx, ebx
jne 0x4a84c6
mov dword [edx + 0x10], 0
mov dword [edx + 0x1c], ecx
mov ebx, dword [0x9cadb0]
lea ebp, [edx + 0x14]
lea esi, [edx + 0x18]
test ebx, ebx
jne 0x4a846a
mov ebx, dword [esp + 0x118]
mov dword [edx + 0x14], ebx
mov ebp, dword [esp + 0x11c]
mov dword [edx + 0x18], ebp
mov esi, ecx
and ecx, 0x1f
cmp ecx, 0x10
jbe 0x4a8099
cmp ecx, 0x15
ja 0x4a77a2
cmp ecx, 0x13
ja 0x4a6cd2
cmp ecx, 0x11
jne 0x4a6c8d
mov dword [esp + 0x88], ecx
mov edi, dword [esp + 0x124]
cmp edi, 0x71
jg 0x4a6c76
cmp edi, 0x58
jne 0x4a6c68
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00498230
mov eax, dword [esp + 0xc]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [eax + 0x28]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
cmp eax, 8
jne 0x4a64ff
mov eax, dword [esp + 0x88]
cmp eax, 0x17
je 0x4a64c9
mov eax, dword [esp + 0x120]
test eax, 0x100
jne 0x4a6449
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00496ac0
mov eax, dword [esp + 0xc]
lea ecx, [0x6cb000]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00439020
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x68], edx
xor ebx, ebx
jmp 0x4a6373
mov ebp, dword [esp + 0xa8]
mov byte [ebp + ecx], al
lea ebx, [ecx + 1]
mov eax, ebp
mov ecx, dword [esp + 0x6c]
cmp ebx, edx
jge 0x4a63d5
mov dword [esp + 0x54], ebx
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.004963f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004983b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x68]
cmp ecx, edx
jb 0x4a635f
jmp 0x4a85dd
mov dword [esp + 0xa8], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ecx
mov ebx, dword [esp + 0x8c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x114]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x124]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
call fcn.004a4460
add esp, 0x110
ret
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00496ac0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x120]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.00497ea0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00495780
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
jmp 0x4a63d5
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.00495780
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
jmp 0x4a63d5
mov eax, dword [esp + 0x114]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x4a67a9
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4a672e
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x5b
xor ecx, ecx
jmp 0x4a65a3
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004963f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x128]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004a61c0
mov eax, dword [esp + 0x58]
lea ecx, [eax + 1]
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
call fcn.00496ac0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x58]
cmp ecx, eax
jge 0x4a668c
test ecx, ecx
jle 0x4a6533
mov eax, dword [esp + 0x114]
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
mov ebp, dword [eax]
lea esi, [ebx + 1]
cmp esi, edx
jg 0x4a660a
lea edx, [ebx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ebx], 0x20
jmp 0x4a6533
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a665b
mov dword [ebx], eax
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x58]
jmp 0x4a65fa
mov dword [esp + 0xd8], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
jmp 0x4a664a
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4a66b3
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x5d
add esp, 0x110
ret
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a66fd
mov dword [ebx], eax
mov edx, ecx
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x4a66a2
mov dword [esp + 0xd4], eax
mov dword [esp + 0x80], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x114]
jmp 0x4a66f3
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a677e
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x114]
jmp 0x4a6525
mov dword [esp + 0xd0], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x114]
jmp 0x4a676e
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.00498230
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4a6c0b
cmp ebp, edi
ja 0x4a85d6
mov dword [esp + 0x80], edi
mov dword [esp + 0xcc], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044cf90
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 8], eax
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x4a6bec
mov eax, dword [esp + 0xcc]
mov dword [ecx], eax
mov eax, dword [esp + 0x88]
cmp eax, 0x17
je 0x4a6b08
mov eax, dword [ecx + 8]
mov edx, dword [ecx + 4]
mov ebx, dword [ecx]
lea ebp, [edx + 1]
cmp ebp, eax
jg 0x4a6a8d
lea eax, [edx + 1]
mov dword [ecx + 4], eax
mov byte [ebx + edx], 0x7b
xor eax, eax
jmp 0x4a6904
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004963f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x128]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004a61c0
mov eax, dword [esp + 0x64]
inc eax
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
call fcn.00496ac0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x64]
cmp ecx, eax
jge 0x4a69f3
test ecx, ecx
jle 0x4a6896
mov eax, dword [esp + 0x114]
mov edx, dword [eax + 4]
lea ebx, [edx + 2]
mov ebp, dword [eax + 8]
mov esi, dword [eax]
cmp ebx, ebp
ja 0x4a69a1
cmp ebx, ebp
ja 0x4a85c8
movzx edi, word [0x719eec]
mov word [esi + edx], di
mov dword [eax + 4], ebx
mov dword [eax + 8], ebp
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a6985
mov dword [eax], esi
jmp 0x4a6896
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.0040ecd0
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x64]
jmp 0x4a6896
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ebx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004391a0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x80]
jmp 0x4a695b
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4a6a18
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x7d
jmp 0x4a66ac
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a6a62
mov dword [ebx], eax
mov edx, ecx
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x4a6a09
mov dword [esp + 0xd4], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x114]
jmp 0x4a6a58
lea ecx, [0x6cb000]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a6add
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov ecx, dword [esp + 0x114]
jmp 0x4a6888
mov dword [esp + 0xd0], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x114]
jmp 0x4a6acd
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.00496980
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a6b42
mov ecx, dword [esp + 0x114]
jmp 0x4a6875
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4a6b9e
cmp edx, ebx
ja 0x4a85cf
mov esi, dword [0x71ab86]
movzx edi, byte [0x71ab8a]
mov dword [ebp + ecx], esi
xchg edi, eax
mov byte [ebp + ecx + 4], al
xchg edi, eax
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov ecx, dword [0x9cadb0]
test ecx, ecx
jne 0x4a6b90
mov dword [eax], ebp
add esp, 0x110
ret
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040ecd0
jmp 0x4a6b89
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], edx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004391a0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
jmp 0x4a6b58
mov dword [esp], ecx
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov ecx, dword [esp + 0x114]
jmp 0x4a6865
mov dword [esp + 0x80], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x94], ecx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
jmp 0x4a680a
cmp edi, 0x71
je 0x4a629b
jmp 0x4a64ff
cmp edi, 0x73
je 0x4a629b
cmp edi, 0x78
je 0x4a629b
jmp 0x4a64ff
lea eax, [ecx - 0x12]
cmp eax, 1
ja 0x4a6cb9
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004a4cb0
jmp 0x4a66ac
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004a32a0
jmp 0x4a66ac
cmp ecx, 0x14
je 0x4a74ae
movzx ecx, byte [edx + 0x2c]
test cl, cl
jne 0x4a721e
mov ecx, dword [edx + 4]
lea edi, [ecx + 4]
mov eax, dword [edx + 8]
mov esi, dword [edx]
cmp edi, eax
ja 0x4a71c8
cmp edi, eax
ja 0x4a8615
mov ebp, dword [0x71a922]
mov dword [esi + ecx], ebp
mov dword [edx + 4], edi
mov dword [edx + 8], eax
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x4a71a9
mov dword [edx], esi
mov dword [esp], ebx
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x120]
mov dword [esp + 8], ecx
call fcn.00496dc0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], ecx
xor edx, edx
jmp 0x4a6df4
lea edx, [ebx + 1]
mov dword [eax + 4], edx
mov byte [ecx + ebx], 0x3a
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0xc4]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x14], ebp
call fcn.00496c10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x14], ecx
call fcn.004a61c0
mov eax, dword [esp + 0xc8]
add eax, 0xc
mov ecx, dword [esp + 0x5c]
lea edx, [ecx + 1]
mov ecx, dword [esp + 0x50]
cmp edx, ecx
jge 0x4a7076
mov dword [esp + 0x5c], edx
mov dword [esp + 0xc8], eax
mov ebx, dword [eax + 8]
mov dword [esp + 0x88], ebx
mov ebp, dword [eax + 4]
mov dword [esp + 0xc4], ebp
mov esi, dword [eax]
mov dword [esp + 0xc0], esi
test edx, edx
jle 0x4a706a
mov edi, dword [esp + 0x114]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4a6fcd
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov eax, dword [edi]
mov ebx, dword [edi + 8]
cmp edx, ebx
ja 0x4a6f77
cmp edx, ebx
ja 0x4a860e
movzx ebp, word [0x719eec]
mov word [eax + ecx], bp
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x9cadb0]
test ecx, ecx
jne 0x4a6f58
mov dword [edi], eax
mov dword [esp], edi
mov dword [esp + 4], esi
mov eax, dword [esp + 0xc4]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x124]
mov dword [esp + 0x10], edx
mov ebx, dword [esp + 0x128]
lea ebp, [ebx + 1]
mov dword [esp + 0x84], ebp
mov dword [esp + 0x14], ebp
call fcn.004a61c0
mov eax, dword [esp + 0x114]
mov ecx, dword [eax]
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
lea ebp, [ebx + 1]
cmp ebp, edx
jle 0x4a6d52
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a6f27
mov dword [ebx], eax
mov ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x114]
jmp 0x4a6d52
mov dword [esp + 0xd8], eax
mov dword [esp + 0x80], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x114]
jmp 0x4a6f17
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040ecd0
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0x114]
jmp 0x4a6e7b
mov dword [esp + 0x84], edx
mov dword [esp + 0x7c], ecx
lea ebp, [0x6cb000]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004391a0
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0x114]
jmp 0x4a6e52
mov ecx, dword [edi + 8]
mov edx, dword [edi + 4]
mov eax, dword [edi]
lea ebx, [edx + 1]
cmp ebx, ecx
jg 0x4a6feb
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
mov byte [eax + edx], 0x20
jmp 0x4a6e7b
lea ebp, [0x6cb000]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a703f
mov dword [ebx], eax
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
mov edi, ebx
mov edx, ecx
jmp 0x4a6fdc
mov dword [esp + 0xd4], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x114]
jmp 0x4a702b
mov edi, dword [esp + 0x114]
jmp 0x4a6e7b
mov eax, dword [esp + 0x114]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4a7118
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov ebx, dword [eax + 8]
lea ebp, [ecx + 1]
cmp ebp, ebx
jg 0x4a70a7
lea ebx, [ecx + 1]
mov dword [eax + 4], ebx
mov byte [edx + ecx], 0x7d
jmp 0x4a66ac
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a70ed
mov dword [ebx], eax
mov edx, eax
mov eax, ebx
jmp 0x4a7098
mov dword [esp + 0xd0], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x114]
jmp 0x4a70e7
mov ecx, dword [eax + 8]
mov edx, dword [eax]
mov ebx, dword [eax + 4]
lea ebp, [ebx + 1]
cmp ebp, ecx
jg 0x4a7136
lea ecx, [ebx + 1]
mov dword [eax + 4], ecx
mov byte [edx + ebx], 0x5d
jmp 0x4a66ac
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a717e
mov dword [ebx], eax
mov edx, eax
mov eax, ebx
mov ebx, ecx
jmp 0x4a7127
mov dword [esp + 0xd0], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x114]
jmp 0x4a7176
mov dword [esp], edx
mov dword [esp + 4], esi
call fcn.0040ecd0
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
jmp 0x4a6d21
mov dword [esp + 0x84], edi
mov dword [esp + 0x7c], ecx
lea edx, [0x6cb000]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.004391a0
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov edi, dword [esp + 0x84]
jmp 0x4a6cfa
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00498230
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [ebx + ecx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4a7457
cmp ebp, edi
ja 0x4a8623
mov dword [esp + 0x7c], edi
mov dword [esp + 0xbc], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044cf90
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [ecx + 8], eax
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x4a743f
mov eax, dword [esp + 0xbc]
mov dword [ecx], eax
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.00496980
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a7395
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4a731d
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x7b
mov ebx, dword [esp + 0x118]
jmp 0x4a6d21
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a736a
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x114]
jmp 0x4a7307
mov dword [esp + 0xb8], eax
mov dword [esp + 0x70], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x114]
jmp 0x4a735d
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4a73f1
cmp edx, ebx
ja 0x4a861c
mov esi, dword [0x71ab86]
movzx edi, byte [0x71ab8a]
mov dword [ebp + ecx], esi
xchg edi, eax
mov byte [ebp + ecx + 4], al
xchg edi, eax
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov ecx, dword [0x9cadb0]
test ecx, ecx
jne 0x4a73e3
mov dword [eax], ebp
add esp, 0x110
ret
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040ecd0
jmp 0x4a73dc
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], edx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004391a0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
jmp 0x4a73ab
mov dword [esp], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.0040ecd0
jmp 0x4a72bf
mov dword [esp + 0x9c], eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x7c], ebx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x84]
jmp 0x4a726a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00496070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x4a776b
mov eax, dword [esp + 0x114]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x4a7589
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4a753b
cmp edx, ebx
ja 0x4a85e4
movzx esi, byte [0x71abfd]
mov edi, dword [0x71abf9]
mov dword [ebp + ecx], edi
xchg esi, eax
mov byte [ebp + ecx + 4], al
xchg esi, eax
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov ecx, dword [0x9cadb0]
test ecx, ecx
jne 0x4a752a
mov dword [eax], ebp
jmp 0x4a66ac
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040ecd0
jmp 0x4a66ac
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ecx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004391a0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
jmp 0x4a74f4
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.00498230
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4a770e
cmp ebp, edi
ja 0x4a85f2
mov dword [esp + 0xcc], esi
mov dword [esp + 0x80], edi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044cf90
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 8], eax
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x4a76e8
mov eax, dword [esp + 0xcc]
mov dword [ecx], eax
mov edx, dword [ecx + 4]
lea ebx, [edx + 5]
mov ebp, dword [ecx + 8]
cmp ebx, ebp
ja 0x4a769a
cmp ebx, ebp
ja 0x4a85eb
mov esi, dword [0x71ab86]
movzx edi, byte [0x71ab8a]
mov dword [eax + edx], esi
xchg edi, ebx
mov byte [eax + edx + 4], bl
xchg edi, ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebp
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a7689
mov dword [ecx], eax
jmp 0x4a66ac
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040ecd0
jmp 0x4a66ac
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], edx
lea ecx, [0x6cb000]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004391a0
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x84]
jmp 0x4a7652
mov dword [esp], ecx
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x114]
jmp 0x4a7645
mov dword [esp + 0x80], ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x98], ecx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
jmp 0x4a75ea
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x128]
inc eax
mov dword [esp + 0x14], eax
call fcn.004a61c0
jmp 0x4a66ac
cmp ecx, 0x17
ja 0x4a7973
cmp ecx, 0x16
jne 0x4a627b
test eax, eax
jne 0x4a6c95
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00497500
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4a77f5
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x120]
jmp 0x4a6c95
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.00496070
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, eax
and eax, 0x1f
cmp eax, 0x15
ja 0x4a795f
cmp eax, 0x11
jne 0x4a7935
mov dword [esp + 0x88], ebx
mov eax, dword [esp + 0x114]
mov ebp, dword [eax + 8]
mov esi, dword [eax + 4]
mov edi, dword [eax]
lea ebx, [esi + 1]
cmp ebx, ebp
jg 0x4a789d
lea ebx, [esi + 1]
mov dword [eax + 4], ebx
mov byte [edi + esi], 0x26
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x88]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x128]
inc eax
mov dword [esp + 0x14], eax
call fcn.004a61c0
add esp, 0x110
ret
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc0], edx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a7904
mov dword [ebx], eax
mov edx, dword [esp + 0xc0]
mov esi, ecx
mov edi, eax
mov eax, ebx
mov ecx, dword [esp + 0xc4]
jmp 0x4a785a
mov dword [esp + 0xd8], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
jmp 0x4a78eb
cmp eax, 0x15
je 0x4a783d
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x120]
jmp 0x4a6c95
cmp eax, 0x17
je 0x4a783d
cmp eax, 0x19
je 0x4a783d
jmp 0x4a793e
cmp ecx, 0x18
je 0x4a805a
cmp ecx, 0x19
jne 0x4a804c
movzx ecx, byte [edx + 0x2c]
test cl, cl
jne 0x4a7f19
mov ecx, dword [edx + 4]
mov edi, dword [edx]
mov eax, dword [edx + 8]
lea esi, [ecx + 1]
cmp esi, eax
jg 0x4a7e91
lea eax, [ecx + 1]
mov dword [edx + 4], eax
mov byte [edi + ecx], 0x7b
lea eax, [esp + 8]
mov dword [esp + 0xb4], eax
xor ecx, ecx
jmp 0x4a7a42
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0xc], ebx
call fcn.004a3110
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x128]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004a61c0
mov eax, dword [esp + 0x60]
lea ecx, [eax + 1]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x60], ecx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.00497140
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x60]
cmp ecx, eax
jge 0x4a7df9
test ecx, ecx
jle 0x4a7ded
mov eax, dword [esp + 0x114]
movzx edx, byte [eax + 0x2c]
test dl, dl
je 0x4a7d52
mov edx, dword [eax + 4]
lea ebx, [edx + 2]
mov ebp, dword [eax + 8]
mov esi, dword [eax]
cmp ebx, ebp
ja 0x4a7d00
cmp ebx, ebp
ja 0x4a8600
movzx edi, word [0x719eec]
mov word [esi + edx], di
mov dword [eax + 4], ebx
mov dword [eax + 8], ebp
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a7ce4
mov dword [eax], esi
movzx edx, byte [eax + 0x2b]
test dl, dl
je 0x4a7cd3
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.00498230
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x2c]
mov edx, dword [esp + 0x60]
mov dword [esp + 4], edx
mov dword [esp], ecx
call eax
lea edi, [esp + 0xdc]
mov esi, dword [esp + 0xb4]
call fcn.0044cd1e
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xdc]
test eax, eax
je 0x4a7cc7
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4a7c6a
cmp ebp, edi
ja 0x4a85f9
mov dword [esp + 0x80], edi
mov dword [esp + 0xcc], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044cf90
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 8], eax
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x4a7c44
mov eax, dword [esp + 0xcc]
mov dword [ecx], eax
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
lea ebp, [ebx + 1]
cmp ebp, edx
jg 0x4a7bce
lea edx, [ebx + 1]
mov dword [ecx + 4], edx
mov byte [eax + ebx], 0x3a
jmp 0x4a79c0
lea ecx, [0x6cb000]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a7c19
mov dword [ebx], eax
mov ebx, ecx
mov ecx, dword [esp + 0x114]
jmp 0x4a7bbf
mov dword [esp + 0xd4], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x114]
jmp 0x4a7c0e
mov dword [esp], ecx
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x114]
jmp 0x4a7bb2
mov dword [esp + 0x80], ebx
mov dword [esp + 0x40], eax
mov dword [esp + 0xa0], ecx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
jmp 0x4a7b57
mov ecx, dword [esp + 0x114]
jmp 0x4a79c0
movzx edx, byte [eax + 0x2c]
test dl, dl
jne 0x4a7ad0
jmp 0x4a79c0
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.0040ecd0
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x60]
jmp 0x4a7ac4
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ebx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004391a0
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x80]
jmp 0x4a7a9b
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
mov ebp, dword [eax]
lea esi, [ebx + 1]
cmp esi, edx
jg 0x4a7d71
lea edx, [ebx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ebx], 0x20
jmp 0x4a7ac4
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a7dc2
mov dword [ebx], eax
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x60]
jmp 0x4a7d61
mov dword [esp + 0xd0], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x114]
jmp 0x4a7db1
mov eax, dword [esp + 0x114]
jmp 0x4a7ac4
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 8]
mov edx, dword [eax]
mov ebx, dword [eax + 4]
lea ebp, [ebx + 1]
cmp ebp, ecx
jg 0x4a7e1e
lea ecx, [ebx + 1]
mov dword [eax + 4], ecx
mov byte [edx + ebx], 0x7d
jmp 0x4a66ac
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a7e66
mov dword [ebx], eax
mov edx, eax
mov eax, ebx
mov ebx, ecx
jmp 0x4a7e0f
mov dword [esp + 0xb8], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x114]
jmp 0x4a7e5e
lea edx, [0x6cb000]
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
call fcn.004391a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0x9cadb0]
test edx, edx
jne 0x4a7ee8
mov dword [ebx], eax
mov edx, ebx
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov edi, eax
jmp 0x4a79a4
mov dword [esp + 0xd8], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
jmp 0x4a7ed1
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00498230
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [ebx + eax]
mov dword [esp + 0x80], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4a7ff5
cmp ebp, esi
ja 0x4a8607
mov dword [esp + 0x70], esi
mov dword [esp + 0xb0], edi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044cf90
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x70]
mov dword [ecx + 8], eax
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x4a7fd9
mov eax, dword [esp + 0xb0]
mov dword [ecx], eax
mov eax, dword [esp + 0x128]
mov edx, ecx
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x120]
jmp 0x4a7991
mov dword [esp], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov ecx, dword [esp + 0x114]
jmp 0x4a7fb6
mov dword [esp + 0x3c], eax
mov dword [esp + 0x70], ebx
mov dword [esp + 0xa4], ecx
lea eax, [0x6cb000]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.004391a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x80]
jmp 0x4a7f65
cmp ecx, 0x1a
je 0x4a6c95
jmp 0x4a6cb9
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00498140
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x114]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0xc], eax
call fcn.004a42f0
jmp 0x4a66ac
cmp ecx, 0xc
ja 0x4a8333
cmp ecx, 1
ja 0x4a8297
test esi, 0x1f
jne 0x4a825f
test eax, eax
jne 0x4a8199
mov eax, dword [edx + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x84], ecx
mov ebx, dword [edx + 8]
mov ebp, dword [edx]
cmp ecx, ebx
ja 0x4a8152
cmp ecx, ebx
ja 0x4a8631
mov dword [esp + 0xcc], ebp
mov dword [esp + 0x80], ebx
add eax, ebp
mov dword [esp], eax
lea eax, [0x727b53]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.0044cf90
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 8], eax
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x4a813a
mov eax, dword [esp + 0xcc]
mov dword [ecx], eax
jmp 0x4a66ac
mov dword [esp], ecx
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.0040ecd0
jmp 0x4a66ac
mov dword [esp + 0x80], eax
lea edx, [0x6cb000]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004391a0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x114]
jmp 0x4a80d5
mov eax, dword [esp + 0x124]
cmp eax, 0x76
jne 0x4a824e
mov eax, dword [edx + 4]
lea ecx, [eax + 5]
mov ebx, dword [edx]
mov ebp, dword [edx + 8]
cmp ecx, ebp
ja 0x4a8200
cmp ecx, ebp
ja 0x4a862a
mov esi, dword [0x71abf9]
movzx edi, byte [0x71abfd]
mov dword [ebx + eax], esi
xchg edi, ecx
mov byte [ebx + eax + 4], cl
xchg edi, ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ebp
mov eax, dword [0x9cadb0]
test eax, eax
jne 0x4a81ef
mov dword [edx], ebx
jmp 0x4a66ac
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.0040ecd0
jmp 0x4a66ac
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], eax
lea edx, [0x6cb000]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.004391a0
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x114]
jmp 0x4a81b8
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004a3580
jmp 0x4a66ac
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00495740
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x114]
mov dword [esp], ecx
mov byte [esp + 4], al
mov eax, dword [esp + 0x124]
mov dword [esp + 8], eax
call fcn.004a3b90
jmp 0x4a66ac
lea eax, [ecx - 2]
cmp eax, 4
jbe 0x4a82ef
lea eax, [ecx - 7]
cmp eax, 5
ja 0x4a6cb9
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004983b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x114]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004a3c70
jmp 0x4a66ac
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004965d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x114]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004a3c70
jmp 0x4a66ac
cmp ecx, 0xe
ja 0x4a83c7
cmp ecx, 0xd
jne 0x4a8384
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00496320
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004a3f90
jmp 0x4a66ac
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00496320
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004a3f90
jmp 0x4a66ac
cmp ecx, 0xf
jne 0x4a841b
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00495f90
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
movsd qword [esp + 0xc], xmm1
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0x124]
mov dword [esp + 0x18], eax
call fcn.004a40f0
jmp 0x4a66ac
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00495f90
movsd xmm0, qword [esp + 0x14]
movsd xmm1, qword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [esp], eax
movsd qword [esp + 4], xmm1
movsd qword [esp + 0xc], xmm0
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0x124]
mov dword [esp + 0x18], eax
call fcn.004a40f0
jmp 0x4a66ac
mov dword [esp + 0xac], esi
mov dword [esp], ebp
mov eax, dword [esp + 0x118]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
jmp 0x4a6252
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040ecd0
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x114]
jmp 0x4a6227
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004966f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a852a
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
jmp 0x4a6201
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.00496790
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x114]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x9cadb0]
lea ebx, [edx + 0x10]
test ecx, ecx
jne 0x4a85a7
mov dword [edx + 0x10], eax
mov dword [esp], edx
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
call fcn.004a5540
movzx eax, byte [esp + 8]
test al, al
jne 0x4a85a0
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
jmp 0x4a6201
add esp, 0x110
ret
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov edx, dword [esp + 0x114]
jmp 0x4a8571
mov ecx, dword [esp + 0x120]
jmp 0x4a6201
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.0044ae20
jmp fcn.004a61c0