Function at 0x4b6e90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb8]
cmp eax, dword [ecx + 8]
jbe 0x4b81ef
sub esp, 0x138
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
mov ecx, dword [esp + 0x150]
mov dword [esp + 4], ecx
call fcn.004b9340
mov eax, dword [esp + 8]
test eax, eax
jne 0x4b6ee1
mov ecx, dword [esp + 0x14c]
jmp 0x4b787b
mov dword [esp + 0x30], eax
lea ecx, [0x5ffa00]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00449ec0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10c], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp], ecx
mov edx, dword [esp + 0x140]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
call fcn.0048e8f0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x4b785e
mov edx, dword [esp + 0x14c]
test edx, edx
je 0x4b7851
mov edx, dword [edx + 8]
cmp edx, 0x6d448d5d
ja 0x4b741a
cmp edx, 0x38dfc0a9
ja 0x4b7178
cmp edx, 0x2de60e3b
ja 0x4b7027
cmp edx, 0x252f926b
je 0x4b6fc9
cmp edx, 0x2de60e3b
jne 0x4b6fbd
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f7ce0]
cmp edx, ebx
jne 0x4b7858
mov ebx, dword [esp + 0x150]
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0x10c]
xor eax, eax
jmp 0x4b81d0
mov edx, dword [esp + 0x14c]
jmp 0x4b7858
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f64e0]
cmp edx, ebx
jne 0x4b7858
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x54], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xe8], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x94], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x94]
jmp 0x4b8143
cmp edx, 0x2e74d42b
je 0x4b710f
cmp edx, 0x338a7ec0
je 0x4b70ad
cmp edx, 0x38dfc0a9
jne 0x4b70a1
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f7c60]
cmp edx, ebx
jne 0x4b7858
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x68], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xfc], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x9c], eax
xor eax, eax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x9c]
jmp 0x4b8095
mov edx, dword [esp + 0x14c]
jmp 0x4b7858
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f4e80]
cmp ecx, edx
jne 0x4b7108
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x150]
mov dword [ecx], eax
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov edx, ecx
jmp 0x4b7858
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f2ec0]
cmp ecx, edx
jne 0x4b7171
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x150]
mov dword [edx + 4], eax
mov dword [edx], ecx
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov edx, ecx
jmp 0x4b7858
cmp edx, 0x4f3c6e38
ja 0x4b72b6
cmp edx, 0x4072c7d5
je 0x4b7248
cmp edx, 0x49163278
je 0x4b71df
cmp edx, 0x4f3c6e38
jne 0x4b71d3
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f5da0]
cmp edx, ebx
jne 0x4b7858
mov ebx, dword [esp + 0x150]
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0x10c]
xor eax, eax
jmp 0x4b8039
mov edx, dword [esp + 0x14c]
jmp 0x4b7858
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f4ec0]
cmp ecx, edx
jne 0x4b7241
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x150]
mov dword [edx + 4], eax
mov dword [edx], ecx
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov edx, ecx
jmp 0x4b7858
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f04c0]
cmp ecx, edx
jne 0x4b72af
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x78], eax
movss xmm0, dword [esp + 0x78]
mov eax, dword [esp + 0x150]
movss dword [eax], xmm0
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov edx, ecx
jmp 0x4b7858
cmp edx, 0x62de383d
je 0x4b73b8
cmp edx, 0x6d0f0857
jne 0x4b732b
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f7ca0]
cmp edx, ebx
jne 0x4b7324
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x60], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xf4], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xa4], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xa4]
jmp 0x4b7fba
mov ecx, edx
jmp 0x4b7413
cmp edx, 0x6d448d5d
jne 0x4b73af
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f0500]
cmp ecx, edx
jne 0x4b7413
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], ecx
movsd xmm0, qword [esp + 0x8c]
mov eax, dword [esp + 0x150]
movsd qword [eax], xmm0
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov ecx, dword [esp + 0x14c]
jmp 0x4b7413
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f2e80]
cmp ecx, edx
jne 0x4b7413
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x150]
mov dword [ecx], eax
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov edx, ecx
jmp 0x4b7858
cmp edx, 0x889ce7f8
ja 0x4b7654
cmp edx, 0x7e440822
ja 0x4b750a
cmp edx, 0x70800450
jne 0x4b7498
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f64a0]
cmp edx, ebx
jne 0x4b7858
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x58], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xec], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xac], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xac]
jmp 0x4b7efb
cmp edx, 0x7e440822
jne 0x4b74fe
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f7c20]
cmp edx, ebx
jne 0x4b7858
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x70], ebp
mov ebx, dword [ebx]
mov dword [esp + 0x104], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xb4], eax
xor eax, eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xb4]
jmp 0x4b7e4d
mov edx, dword [esp + 0x14c]
jmp 0x4b7858
cmp edx, 0x81044065
je 0x4b75f1
cmp edx, 0x854f63b7
jne 0x4b757f
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f86e0]
cmp edx, ebx
jne 0x4b7578
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x5c], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xf0], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xbc], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xbc]
jmp 0x4b7d9a
mov ecx, edx
jmp 0x4b764d
cmp edx, 0x889ce7f8
jne 0x4b75e8
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f4e40]
cmp ecx, edx
jne 0x4b764d
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x150]
mov word [ecx], ax
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov ecx, dword [esp + 0x14c]
jmp 0x4b764d
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f8720]
cmp ecx, edx
jne 0x4b764d
mov edx, dword [esp + 0x150]
mov ebx, dword [edx + 4]
mov edx, dword [edx]
mov ebp, dword [esp + 0x30]
cmp ebx, ebp
jle 0x4b761a
mov eax, ebp
jmp 0x4b761e
mov eax, ebp
mov ebp, ebx
mov ebx, dword [esp + 0x10c]
cmp edx, ebx
je 0x4b7873
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00462e90
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x14c]
jmp 0x4b7873
mov edx, ecx
jmp 0x4b7858
cmp edx, 0xd6631a7c
ja 0x4b7777
cmp edx, 0x9ae5bb3b
jne 0x4b76c9
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f8660]
cmp edx, ebx
jne 0x4b76c2
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x6c], ebp
mov ebx, dword [ebx]
mov dword [esp + 0x100], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xc4], eax
xor eax, eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xc4]
jmp 0x4b7ce1
mov ecx, edx
jmp 0x4b784d
cmp edx, 0xc3230e0b
jne 0x4b7732
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f2e40]
cmp ecx, edx
jne 0x4b784d
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x148]
mov dword [esp], edx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x150]
mov word [ecx], ax
mov ecx, dword [esp + 0x14c]
mov eax, dword [esp + 0x30]
jmp 0x4b7873
cmp edx, 0xd6631a7c
jne 0x4b776b
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f2f00]
cmp ecx, edx
jne 0x4b784d
mov edx, dword [esp + 0x10c]
movzx edx, byte [edx]
mov ebx, dword [esp + 0x150]
mov byte [ebx], dl
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov ecx, dword [esp + 0x14c]
jmp 0x4b784d
cmp edx, 0xd83fe3b3
jne 0x4b77dd
mov edx, dword [esp + 0x14c]
lea ebx, [0x5f86a0]
cmp edx, ebx
jne 0x4b77d9
mov ebx, dword [esp + 0x150]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x64], ebp
mov ebx, dword [ebx]
mov dword [esp + 0xf8], ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0xcc], eax
xor eax, eax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0xcc]
jmp 0x4b7c32
mov ecx, edx
jmp 0x4b784d
cmp edx, 0xf3b50de0
jne 0x4b780f
mov ecx, dword [esp + 0x14c]
lea edx, [0x5f4f00]
cmp ecx, edx
jne 0x4b784d
mov edx, dword [esp + 0x10c]
movzx edx, byte [edx]
mov eax, dword [esp + 0x150]
mov byte [eax], dl
mov eax, dword [esp + 0x30]
jmp 0x4b7873
cmp edx, 0xfcd60fce
jne 0x4b7846
mov ecx, dword [esp + 0x14c]
lea edx, [0x5ef5c0]
cmp ecx, edx
jne 0x4b784d
mov edx, dword [esp + 0x10c]
movzx edx, byte [edx]
test dl, dl
setne dl
mov ebx, dword [esp + 0x150]
mov byte [ebx], dl
mov eax, dword [esp + 0x30]
jmp 0x4b7873
mov ecx, dword [esp + 0x14c]
mov edx, ecx
jmp 0x4b7858
mov edx, dword [esp + 0x14c]
mov ecx, edx
xor eax, eax
jmp 0x4b7873
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], edx
add esp, 0x138
ret
test eax, eax
jne 0x4b7bd7
mov edx, dword [esp + 0x14c]
test edx, edx
je 0x4b790e
nop
movzx ebx, byte [0x7f8710]
test bl, bl
je 0x4b78c9
mov dword [0x7f8714], ecx
mov ecx, dword [0x81dcc0]
test ecx, ecx
jne 0x4b78b5
mov eax, dword [esp + 0x150]
mov dword [0x7f8718], eax
jmp 0x4b78d0
lea edi, [0x7f8718]
mov eax, dword [esp + 0x150]
call fcn.00462500
jmp 0x4b78d0
mov eax, dword [esp + 0x150]
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], eax
mov ecx, dword [esp + 0x110]
test ecx, ecx
je 0x4b7904
nop
movzx ebx, byte [ecx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4b7900
or ebx, 0x80
mov ebp, eax
jmp 0x4b791b
mov ebp, eax
xor ebx, ebx
xor ecx, ecx
xor eax, eax
jmp 0x4b791b
mov ebp, dword [esp + 0x150]
xor ebx, ebx
xor ecx, ecx
xor eax, eax
nop
mov esi, ebx
and ebx, 0x1f
cmp ebx, 0x16
je 0x4b7985
cmp ebx, 0x17
je 0x4b7935
mov ebx, 0xffffffff
jmp 0x4b79ef
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x80], esi
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004b82f0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x150]
mov ebx, eax
mov esi, dword [esp + 0x80]
mov ecx, dword [esp + 0xd4]
mov eax, dword [esp + 0xd8]
jmp 0x4b79ef
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004b29c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x10c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x80], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004b82f0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x150]
mov ebx, eax
mov esi, dword [esp + 0x80]
mov ecx, dword [esp + 0x108]
mov eax, dword [esp + 0x10c]
test ebx, ebx
jge 0x4b7abd
mov dword [esp + 0x118], edx
mov dword [esp + 0x11c], ebp
mov eax, dword [esp + 0x118]
test eax, eax
je 0x4b7a18
lea ecx, [0x68dc64]
jmp 0x4b7a1c
xor ecx, ecx
xor eax, eax
mov ecx, dword [ecx + 0x80]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x63f97e]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1a
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044da90
mov eax, dword [esp + 0x14]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], ecx
lea edx, [0x6072c0]
mov dword [esp], edx
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x28]
mov dword [edi + 4], eax
mov eax, dword [0x81dcc0]
test eax, eax
jne 0x4b7a96
mov eax, dword [esp + 0xe4]
mov dword [edi], eax
jmp 0x4b7aa2
mov eax, dword [esp + 0xe4]
call fcn.00462500
lea eax, [0x68bbe4]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], edi
add esp, 0x138
ret
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0xe0], eax
mov dword [esp + 0xdc], ecx
lea eax, [0x5ffa00]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.00449ec0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10c], eax
lea edi, [esp + 0x120]
xor eax, eax
call fcn.0046279a
mov eax, dword [esp + 0x144]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x128], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], ecx
mov edx, dword [esp + 0x13c]
mov dword [esp], edx
mov edx, dword [esp + 0x140]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
call fcn.0048e8f0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
je 0x4b7b8d
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], edx
add esp, 0x138
ret
lea eax, [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc], eax
call fcn.004b8840
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
add esp, 0x138
ret
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
add esp, 0x138
ret
mov ebx, dword [esp + 0xf8]
mov dword [ebx + ecx*4], eax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x44]
cmp edx, ebp
jge 0x4b7c82
shl edx, 2
cmp edi, edx
jb 0x4b7c99
mov ebx, dword [eax + 0x24]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x64]
cmp ecx, edx
jb 0x4b7bf4
jmp 0x4b7c90
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4b7873
mov eax, ecx
mov ecx, edx
call fcn.00462580
mov eax, edx
mov ecx, edi
call fcn.004625e0
mov ebx, dword [esp + 0x100]
mov word [ebx + ecx*2], ax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x4c]
cmp edx, ebp
jge 0x4b7d31
shl edx, 1
cmp edi, edx
jb 0x4b7d48
mov ebx, dword [eax + 0x20]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x6c]
cmp ecx, edx
jb 0x4b7ca2
jmp 0x4b7d3f
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4b7873
mov eax, ecx
mov ecx, edx
call fcn.00462580
mov eax, edx
mov ecx, edi
call fcn.004625e0
mov ebp, dword [esp + 0xf0]
lea esi, [ebp + edx*8 + 4]
mov dword [esi], eax
lea eax, [ebp + edx*8]
mov dword [eax], ecx
lea eax, [edx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, edx
mov edx, dword [esp + 0x14c]
mov ebx, ebp
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x3c]
cmp edx, ebp
jge 0x4b7dee
shl edx, 3
cmp edi, edx
jb 0x4b7e05
mov ebx, dword [eax + 0x28]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x5c]
cmp edx, ebx
jb 0x4b7d51
jmp 0x4b7dfc
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4b7873
mov eax, edx
mov ecx, ebx
call fcn.00462580
mov eax, edx
mov ecx, edi
call fcn.004625e0
mov ebx, dword [esp + 0x104]
mov word [ebx + ecx*2], ax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x50]
cmp edx, ebp
jge 0x4b7e9d
shl edx, 1
cmp edi, edx
jb 0x4b7eb4
mov ebx, dword [eax + 0x20]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x70]
cmp ecx, edx
jb 0x4b7e0e
jmp 0x4b7eab
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4b7873
mov eax, ecx
mov ecx, edx
call fcn.00462580
mov eax, edx
mov ecx, edi
call fcn.004625e0
mov ebx, dword [esp + 0xec]
movss dword [ebx + eax*4], xmm0
inc eax
mov esi, dword [esp + 0x148]
mov edx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x38]
cmp edx, ebp
jge 0x4b7f55
shl edx, 2
cmp edi, edx
jb 0x4b7f68
mov ebx, dword [eax + 0x24]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x74], eax
movss xmm0, dword [esp + 0x74]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x58]
cmp eax, ecx
jb 0x4b7ebd
jmp 0x4b7f63
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4b7873
call fcn.00462580
mov eax, edx
mov ecx, edi
call fcn.004625e0
mov ebp, dword [esp + 0xf4]
lea esi, [ebp + edx*8 + 4]
mov dword [esi], eax
lea eax, [ebp + edx*8]
mov dword [eax], ecx
lea eax, [edx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, edx
mov edx, dword [esp + 0x14c]
mov ebx, ebp
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x40]
cmp edx, ebp
jge 0x4b800e
shl edx, 3
cmp edi, edx
jb 0x4b8025
mov ebx, dword [eax + 0x28]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x60]
cmp edx, ebx
jb 0x4b7f71
jmp 0x4b801c
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4b7873
mov eax, edx
mov ecx, ebx
call fcn.00462580
mov eax, edx
mov ecx, edi
call fcn.004625e0
test dl, dl
setne dl
mov byte [ebx + eax], dl
inc eax
mov edx, edi
cmp eax, ebp
jge 0x4b8049
mov edi, edx
movzx edx, byte [eax + esi]
cmp eax, ecx
jb 0x4b802e
jmp 0x4b8052
mov ecx, edx
mov eax, ebp
jmp 0x4b7873
call fcn.00462580
mov ebx, dword [esp + 0xfc]
mov dword [ebx + ecx*4], eax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x68]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x48]
cmp edx, ebp
jge 0x4b80e5
shl edx, 2
cmp edi, edx
jb 0x4b80fc
mov ebx, dword [eax + 0x24]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x68]
cmp ecx, edx
jb 0x4b8057
jmp 0x4b80f3
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4b7873
mov eax, ecx
mov ecx, edx
call fcn.00462580
mov eax, edx
mov ecx, edi
call fcn.004625e0
mov ebx, dword [esp + 0xe8]
movsd qword [ebx + eax*8], xmm0
inc eax
mov esi, dword [esp + 0x148]
mov edx, dword [esp + 0x144]
mov ebp, dword [esp + 0x10c]
mov edi, dword [esp + 0x30]
mov ecx, ebp
mov edx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x34]
cmp edx, ebp
jge 0x4b81ae
shl edx, 3
cmp edi, edx
jb 0x4b81c1
mov ebx, dword [eax + 0x28]
mov dword [esp], esi
sub edi, edx
mov dword [esp + 0x7c], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
add edx, ecx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], ecx
movsd xmm0, qword [esp + 0x84]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x54]
cmp eax, ecx
jb 0x4b8105
jmp 0x4b81bc
mov ecx, dword [esp + 0x14c]
mov eax, edi
jmp 0x4b7873
call fcn.00462580
mov eax, edx
mov ecx, edi
call fcn.004625e0
mov byte [ebx + eax], dl
inc eax
mov edx, edi
cmp eax, ebp
jge 0x4b81e0
mov edi, edx
movzx edx, byte [eax + esi]
cmp eax, ecx
jb 0x4b81ca
jmp 0x4b81e9
mov ecx, edx
mov eax, ebp
jmp 0x4b7873
call fcn.00462580
nop
call fcn.004610f0
jmp fcn.004b6e90