Function at 0x4bb100
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x908
mov eax, dword [0x4db00c]
xor eax, esp
mov dword [esp + 0x904], eax
push esi
push edi
mov edi, dword [0x4db880]
mov dword [esp + 0x10c], ecx
xor ecx, ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
cmp byte [0x4db7c7], cl
je 0x4bd4bc
mov esi, dword [eax + 0x20]
mov dword [esp + 0x28], eax
add esi, edi
mov dword [esp + 0x24], ecx
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0xff665a04
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bb17d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bb160
cmp edx, 0x58e95377
je 0x4bb186
inc dword [esp + 0x24]
add esi, 4
jmp 0x4bb150
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push dword [esp + 0x10c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db880]
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x58d70dce
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bb1fd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bb1e0
cmp edx, 0xde0416ef
je 0x4bb206
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bb1d0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
push 0x1db
push 0x35c
mov eax, dword [edx + 0x24]
push dword [esp + 0x114]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov dword [esp + 0x1c], eax
xor edi, edi
mov eax, dword [0x4db880]
mov ecx, dword [eax + 0x3c]
mov ecx, dword [ecx + eax + 0x78]
add ecx, eax
mov dword [esp + 0x28], ecx
mov esi, dword [ecx + 0x20]
add esi, eax
mov ecx, dword [esi]
mov edx, 0x3268f30c
add ecx, eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bb280
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bb263
cmp edx, 0xe3812f03
je 0x4bb28b
mov eax, dword [0x4db880]
inc edi
add esi, 4
jmp 0x4bb253
mov esi, dword [esp + 0x28]
mov edx, dword [0x4db880]
push dword [esp + 0x1c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
mov esi, dword [esp + 0x28]
push esi
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x740]
push eax
push esi
mov dword [esp + 0x748], 0
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov ecx, dword [esp + 0x740]
xorps xmm0, xmm0
mov dword [esp + 0x74c], eax
lea eax, [esp + 0x2ac]
mov dword [esp + 0x748], ecx
lea ecx, [esp + 0x890]
push eax
movq qword [esp + 0x894], xmm0
mov dword [esp + 0x89c], 0
mov dword [esp + 0x2b0], 0xff17181c
call fcn.004b8f70
lea eax, [esp + 0x2a8]
mov dword [esp + 0x7a8], 0
xorps xmm0, xmm0
mov dword [esp + 0x2a8], 0xff1b1d22
push eax
lea ecx, [esp + 0x7a4]
movq qword [esp + 0x7a4], xmm0
call fcn.004b8f70
lea eax, [esp + 0x2b0]
mov dword [esp + 0x79c], 0
xorps xmm0, xmm0
mov dword [esp + 0x2b0], 0xff202328
push eax
lea ecx, [esp + 0x798]
movq qword [esp + 0x798], xmm0
call fcn.004b8f70
lea eax, [esp + 0x2a4]
mov dword [esp + 0x7bc], 0
xorps xmm0, xmm0
mov dword [esp + 0x2a4], 0xffcccccc
push eax
lea ecx, [esp + 0x7b8]
movq qword [esp + 0x7b8], xmm0
call fcn.004b8f70
lea eax, [esp + 0x2a0]
mov dword [esp + 0x7dc], 0
xorps xmm0, xmm0
mov dword [esp + 0x2a0], 0xff636363
push eax
lea ecx, [esp + 0x7d8]
movq qword [esp + 0x7d8], xmm0
call fcn.004b8f70
lea eax, [esp + 0x29c]
mov dword [esp + 0x780], 0
xorps xmm0, xmm0
mov dword [esp + 0x29c], 0xffffc95d
push eax
lea ecx, [esp + 0x77c]
movq qword [esp + 0x77c], xmm0
call fcn.004b8f70
lea eax, [esp + 0x298]
mov dword [esp + 0x804], 0
xorps xmm0, xmm0
mov dword [esp + 0x298], 0xff15161a
push eax
lea ecx, [esp + 0x800]
movq qword [esp + 0x800], xmm0
call fcn.004b8f70
xorps xmm0, xmm0
mov dword [esp + 0x88c], 0
movq qword [esp + 0x884], xmm0
lea eax, [esp + 0x294]
mov dword [esp + 0x294], 0xfff4f4f4
push eax
lea ecx, [esp + 0x888]
call fcn.004b8f70
lea eax, [esp + 0x290]
mov dword [esp + 0x7f8], 0
xorps xmm0, xmm0
mov dword [esp + 0x290], 0xffbe974a
push eax
lea ecx, [esp + 0x7f4]
movq qword [esp + 0x7f4], xmm0
call fcn.004b8f70
lea eax, [esp + 0x214]
mov dword [esp + 0x810], 0
xorps xmm0, xmm0
mov dword [esp + 0x214], 0xffffde72
push eax
lea ecx, [esp + 0x80c]
movq qword [esp + 0x80c], xmm0
call fcn.004b8f70
xorps xmm0, xmm0
mov word [esp + 0x250], 0x7544
movlpd qword [esp + 0x784], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4d7860]
movups xmmword [esp + 0x240], xmm0
mov byte [esp + 0x252], 0
nop dword [eax]
nop word [eax + eax]
mov al, byte [esp + 0x240]
xor byte [esp + ecx + 0x241], al
inc ecx
cmp ecx, 0x11
jb 0x4bb540
sub esp, 0x18
mov byte [esp + 0x26a], 0
mov esi, esp
mov ecx, esi
call fcn.004b8a80
lea ecx, [esp + 0x259]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bb572
sub ecx, edx
lea eax, [esp + 0x259]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x440]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x784]
push ecx
push 0
push eax
call dword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
lea ecx, [esp + 0x428]
mov dword [esp + 0x788], eax
call fcn.004b7ab0
mov esi, dword [sym.imp.gdiplus.dll_GdipCreateFont]
lea eax, [esp + 0x718]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41680000
push dword [esp + 0x794]
mov dword [esp + 0x72c], 0
call esi
mov dword [esp + 0x878], eax
mov eax, dword [esp + 0x718]
mov dword [esp + 0x874], eax
lea eax, [esp + 0x71c]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41880000
push dword [esp + 0x794]
mov dword [esp + 0x730], 0
call esi
mov dword [esp + 0x7b0], eax
mov eax, dword [esp + 0x71c]
mov dword [esp + 0x7ac], eax
lea eax, [esp + 0x720]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41940000
push dword [esp + 0x794]
mov dword [esp + 0x734], 0
call esi
mov dword [esp + 0x7c4], eax
mov eax, dword [esp + 0x720]
mov dword [esp + 0x7c0], eax
lea eax, [esp + 0x724]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x419c0000
push dword [esp + 0x794]
mov dword [esp + 0x738], 0
call esi
mov eax, dword [esp + 0x724]
mov dword [esp + 0x110], eax
lea eax, [esp + 0x728]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41b80000
push dword [esp + 0x794]
mov dword [esp + 0x73c], 0
call esi
mov dword [esp + 0x7ec], eax
xorps xmm0, xmm0
mov eax, dword [esp + 0x728]
mov dword [esp + 0x7e8], eax
movlpd qword [esp + 0x758], xmm0
lea eax, [esp + 0x758]
push eax
push 0
push 0
call dword [sym.imp.gdiplus.dll_GdipCreateStringFormat]
push 1
push dword [esp + 0x75c]
mov dword [esp + 0x764], eax
call dword [sym.imp.gdiplus.dll_GdipSetStringFormatAlign]
mov ecx, dword [esp + 0x75c]
test eax, eax
push 0x1f6
push 0x35e
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esp + 0x8a4]
cmovne ecx, eax
push dword [esp + 0x75c]
mov dword [esp + 0x774], ecx
call dword [sym.imp.gdiplus.dll_GdipFillRectangleI]
mov ecx, dword [esp + 0x74c]
test eax, eax
push 4
push dword [esp + 0x74c]
cmovne ecx, eax
mov dword [esp + 0x754], ecx
call dword [sym.imp.gdiplus.dll_GdipSetSmoothingMode]
mov ecx, dword [esp + 0x74c]
test eax, eax
push 4
push dword [esp + 0x74c]
cmovne ecx, eax
mov dword [esp + 0x754], ecx
call dword [sym.imp.gdiplus.dll_GdipSetTextRenderingHint]
mov ecx, dword [esp + 0x74c]
test eax, eax
push 2
push dword [esp + 0x74c]
cmovne ecx, eax
mov dword [esp + 0x754], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x74c]
test eax, eax
push 0x14
cmovne ecx, eax
cmp dword [0x4db7c0], 2
mov dword [esp + 0x750], ecx
lea ecx, [esp + 0x74c]
push 0x334
jne 0x4bb7f6
push dword [0x4db800]
jmp 0x4bb7fc
push dword [0x4db84c]
call fcn.004b9120
cmp dword [0x4db7c0], 3
lea ecx, [esp + 0x748]
push 0x22
push 0x316
jne 0x4bb820
push dword [0x4db814]
jmp 0x4bb826
push dword [0x4db7d8]
call fcn.004b9120
movaps xmm0, xmmword [0x4d5050]
lea edx, [esp + 0x7a0]
sub esp, 0x10
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004baf00
mov eax, dword [0x4db82c]
add esp, 0x18
test eax, eax
je 0x4bb865
mov eax, dword [eax + 4]
jmp 0x4bb867
xor eax, eax
mov edi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x19
push 0x20
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
lea edx, [esp + 0x7a0]
movaps xmm0, xmmword [0x4d5090]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x75c], ecx
lea ecx, [esp + 0x758]
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004baf00
add esp, 0x18
cmp dword [0x4db7c0], 5
push 0x28
push 0x28
push 0x1a
push 0x1b2
jne 0x4bb8ef
lea ecx, [esp + 0x6d8]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x818]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4bb90e
lea ecx, [esp + 0x6e8]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x788]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004baf00
mov eax, dword [0x4db818]
add esp, 0x18
test eax, eax
je 0x4bb931
mov eax, dword [eax + 4]
jmp 0x4bb933
xor eax, eax
push 0x20
push 0x6c
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
lea eax, [esp + 0x340]
mov dword [esp + 0x74c], ecx
mov ecx, 0x4db098
push eax
call fcn.004b7480
mov ecx, 0x4db098
mov esi, dword [eax]
lea eax, [esp + 0x344]
push eax
call fcn.004b74a0
lea ecx, [esp + 0x213]
push ecx
push esi
push dword [eax]
lea ecx, [esp + 0x3ec]
call fcn.004b8420
mov dword [esp + 0x28], eax
mov cl, 0x4b
mov byte [esp + 0x15c], 2
mov al, 0x7a
xor cl, byte [esp + 0x15c]
mov ch, 0x66
mov byte [esp + 0x15d], cl
sub esp, 0x18
mov cl, byte [esp + 0x174]
mov dl, 0x6c
xor al, cl
mov byte [esp + 0x3b], 0x22
mov byte [esp + 0x179], al
xor ch, cl
mov al, byte [esp + 0x3b]
mov dh, 0x67
mov ah, 0x38
mov byte [esp + 0x177], ch
xor dl, cl
mov byte [esp + 0x17c], 0
xor dh, cl
mov byte [esp + 0x176], dl
xor ah, cl
mov byte [esp + 0x178], dh
xor al, cl
mov byte [esp + 0x17a], ah
mov esi, esp
mov byte [esp + 0x17b], al
mov ecx, esi
mov byte [esp + 0x17c], 0
call fcn.004b8a80
lea ecx, [esp + 0x175]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bba23
sub ecx, edx
lea eax, [esp + 0x175]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x428]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
mov edx, eax
lea esi, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x4bba57
mov ecx, dword [esp + 0x28]
sub edx, esi
sar edx, 1
push edx
push eax
push 0
call fcn.004c1920
push eax
lea ecx, [esp + 0x8f8]
call fcn.004c1460
lea ecx, [esp + 0x410]
call fcn.004b7ab0
lea ecx, [esp + 0x3e0]
call fcn.004b7ab0
cmp dword [0x4db7c0], 4
movss xmm1, dword [0x4d3680]
movss xmm2, dword [0x4d3674]
jne 0x4bbac1
lea eax, [esp + 0x884]
lea ecx, [esp + 0x368]
jmp 0x4bbacf
lea eax, [esp + 0x7b4]
lea ecx, [esp + 0x348]
mov dword [esp + 0x14], eax
call fcn.004b8e30
lea ecx, [esp + 0x8f4]
mov esi, eax
call fcn.004b7390
push dword [esp + 0x14]
lea ecx, [esp + 0x75c]
push ecx
push esi
lea ecx, [esp + 0x880]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
movaps xmm0, xmmword [0x4d5060]
lea edx, [esp + 0x7a0]
sub esp, 0x10
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d4fe0]
lea edx, [esp + 0x7cc]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 0x14
push 0xffcccccc
movups xmmword [eax], xmm0
call fcn.004baf00
add esp, 0x18
lea ecx, [esp + 0x748]
cmp dword [0x4db7c0], 0x3f3
push 0x1a
push 0x1a
push 0x22
push 0x204
jne 0x4bbb85
push dword [0x4db7fc]
jmp 0x4bbb8b
push dword [0x4db854]
call fcn.004b9160
cmp dword [0x4db7c0], 0x3f4
lea ecx, [esp + 0x748]
push 0x1a
push 0x1a
push 0x22
push 0x22f
jne 0x4bbbb6
push dword [0x4db828]
jmp 0x4bbbbc
push dword [0x4db7e8]
call fcn.004b9160
cmp dword [0x4db7c0], 0x3f5
lea ecx, [esp + 0x748]
push 0x1a
push 0x1a
push 0x22
push 0x25a
jne 0x4bbbe7
push dword [0x4db85c]
jmp 0x4bbbed
push dword [0x4db7d4]
call fcn.004b9160
cmp byte [0x4db019], 0
push 0x28
push 0x28
push 0x1a
je 0x4bbc0f
push 0x2c3
lea ecx, [esp + 0x6f8]
jmp 0x4bbc1b
push 0x296
lea ecx, [esp + 0x708]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x7a4]
mov ecx, esp
movups xmm0, xmmword [eax]
push 6
push 0xff202128
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004baf00
mov eax, dword [0x4db844]
add esp, 0x18
test eax, eax
je 0x4bbc56
mov eax, dword [eax + 4]
jmp 0x4bbc58
xor eax, eax
push 0x24
push 0x29f
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4db7f4]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bbc8a
mov eax, dword [eax + 4]
jmp 0x4bbc8c
xor eax, eax
push 0x17
push 0x17
push 0x24
push 0x2cc
push eax
push dword [esp + 0x75c]
call dword [sym.imp.gdiplus.dll_GdipDrawImageRectI]
mov ecx, dword [esp + 0x74c]
lea edx, [esp + 0x7a0]
movaps xmm0, xmmword [0x4d5070]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x75c], ecx
lea ecx, [esp + 0x758]
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004baf00
add esp, 0x18
cmp byte [0x4db019], 0
je 0x4bbeaf
movss xmm2, dword [0x4d3678]
lea ecx, [esp + 0x360]
movss xmm1, dword [0x4d3688]
call fcn.004b8e30
push 0x53
lea ecx, [esp + 0x80]
mov dword [esp + 0x18], eax
mov byte [esp + 0x80], 0x3b
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x80]
mov byte [esp + 0x81], al
call fcn.004b6890
push 0x6c
lea ecx, [esp + 0x80]
mov byte [esp + 0x82], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x80]
mov byte [esp + 0x83], al
call fcn.004b6890
push 0x63
lea ecx, [esp + 0x80]
mov byte [esp + 0x84], al
call fcn.004b6890
push 0x74
lea ecx, [esp + 0x80]
mov byte [esp + 0x85], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0x80]
mov byte [esp + 0x86], al
call fcn.004b6890
push 0x41
lea ecx, [esp + 0x80]
mov byte [esp + 0x87], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0x80]
mov byte [esp + 0x88], al
call fcn.004b6890
push 0x47
lea ecx, [esp + 0x80]
mov byte [esp + 0x89], al
call fcn.004b6890
push 0x61
lea ecx, [esp + 0x80]
mov byte [esp + 0x8a], al
call fcn.004b6890
push 0x6d
lea ecx, [esp + 0x80]
mov byte [esp + 0x8b], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x80]
mov byte [esp + 0x8c], al
call fcn.004b6890
mov byte [esp + 0x89], al
xor esi, esi
mov byte [esp + 0x8a], 0
nop dword [eax]
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x81]
call fcn.004b68b0
lea ecx, [esp + 0x7c]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x81]
mov byte [esp + 0x27], al
call fcn.004b68b0
mov cl, byte [esp + 0x23]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x4bbe40
push 0xd
lea ecx, [esp + 0x81]
call fcn.004b68b0
lea ecx, [esp + 0x7d]
mov byte [eax], 0
call fcn.004b68a0
sub esp, 0x18
lea esi, [esp + 0x3e0]
mov ecx, esp
push eax
call fcn.004b76c0
mov ecx, esi
call fcn.004c1c80
jmp 0x4bbf6b
mov dword [esp + 0x2f8], 0x43d70000
mov cl, 0x21
mov dword [esp + 0x2fc], 0x42c00000
xor eax, eax
mov dword [esp + 0x1fc], 0xc0dae321
mov dword [esp + 0x200], 0xd3c9d1c4
mov dword [esp + 0x204], 0xc2c901c4
mov word [esp + 0x208], 0xd2d1
mov byte [esp + 0x20a], 0
nop dword [eax]
xor byte [esp + eax + 0x1fd], cl
inc eax
cmp eax, 0xd
jae 0x4bbf16
mov cl, byte [esp + 0x1fc]
jmp 0x4bbf00
sub esp, 0x18
mov byte [esp + 0x222], 0
mov esi, esp
mov ecx, esi
call fcn.004b8a80
lea ecx, [esp + 0x215]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bbf34
sub ecx, edx
lea eax, [esp + 0x215]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x3c8]
call fcn.004c2010
lea ecx, [esp + 0x310]
lea esi, [esp + 0x3c8]
mov dword [esp + 0x2c], ecx
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7b4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push dword [esp + 0x1c]
lea ecx, [esp + 0x7cc]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
mov ecx, esi
call fcn.004b7ab0
movaps xmm0, xmmword [0x4d5780]
lea edx, [esp + 0x794]
sub esp, 0x10
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d5790]
lea edx, [esp + 0x7ac]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d57a0]
lea edx, [esp + 0x7ac]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d57b0]
lea edx, [esp + 0x7b8]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d57c0]
lea edx, [esp + 0x7b8]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d57d0]
lea edx, [esp + 0x7b8]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d5020]
lea edx, [esp + 0x7ac]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 6
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d5030]
add esp, 8
mov eax, esp
lea edx, [esp + 0x7a4]
push 6
push 0xff202128
lea ecx, [esp + 0x760]
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d5040]
lea edx, [esp + 0x7ac]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 6
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004baf00
movaps xmm0, xmmword [0x4d4ff0]
lea edx, [esp + 0x790]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004baf00
mov eax, dword [0x4db01c]
add esp, 0x18
cmp eax, 0xffffffff
jne 0x4bc2c4
mov cl, 0x4b
mov byte [esp + 0x150], 0x22
mov dh, cl
mov byte [esp + 0x23], 0x4f
xor cl, byte [esp + 0x150]
mov al, 0x6e
xor al, byte [esp + 0x150]
mov ah, 0x47
mov byte [esp + 0x151], al
mov ch, 0x76
mov al, byte [esp + 0x23]
sub esp, 0x18
mov byte [esp + 0x16a], cl
mov dl, 0x44
mov cl, byte [esp + 0x168]
mov esi, esp
xor al, cl
mov byte [esp + 0x39], ah
mov byte [esp + 0x16f], al
xor ch, cl
mov al, byte [esp + 0x39]
xor dl, cl
xor ah, cl
mov byte [esp + 0x16d], ch
xor dh, cl
mov byte [esp + 0x171], 0
xor al, cl
mov dword [esp + 0x308], 0x43200000
mov ecx, esi
mov dword [esp + 0x30c], 0x43a38000
mov byte [esp + 0x16b], dl
mov byte [esp + 0x16c], ah
mov byte [esp + 0x16e], dh
mov byte [esp + 0x170], al
mov byte [esp + 0x171], 0
call fcn.004b8a80
lea ecx, [esp + 0x169]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bc210
sub ecx, edx
lea eax, [esp + 0x169]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x3b0]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7d4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x2f8]
push ecx
lea ecx, [esp + 0x7b8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x398]
call fcn.004b7ab0
cmp dword [0x4db7c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4bc2b8
lea ecx, [esp + 0x718]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x818]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4bc4e3
lea ecx, [esp + 0x648]
jmp 0x4bc4cb
movss xmm2, dword [0x4d3684]
movss xmm1, dword [0x4d367c]
cmp eax, 1
jge 0x4bc42e
lea ecx, [esp + 0x358]
call fcn.004b8e30
push 0x45
lea ecx, [esp + 0x44]
mov dword [esp + 0x2c], eax
mov byte [esp + 0x44], 0xa
call fcn.004b6890
push 0x6e
lea ecx, [esp + 0x44]
mov byte [esp + 0x45], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0x44]
mov byte [esp + 0x46], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x44]
mov byte [esp + 0x47], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0x44]
mov byte [esp + 0x48], al
call fcn.004b6890
mov byte [esp + 0x45], al
xor esi, esi
mov byte [esp + 0x46], 0
push esi
lea ecx, [esp + 0x45]
call fcn.004b68b0
lea ecx, [esp + 0x40]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x45]
mov byte [esp + 0x25], al
call fcn.004b68b0
mov cl, byte [esp + 0x21]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4bc344
push 5
lea ecx, [esp + 0x45]
call fcn.004b68b0
lea ecx, [esp + 0x41]
mov byte [eax], 0
call fcn.004b68a0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b76c0
lea ecx, [esp + 0x398]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7d4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push dword [esp + 0x30]
lea ecx, [esp + 0x7b8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x380]
call fcn.004b73e0
cmp dword [0x4db7c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4bc422
lea ecx, [esp + 0x658]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x800]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4bc4e3
lea ecx, [esp + 0x6c8]
jmp 0x4bc4cb
lea ecx, [esp + 0x350]
call fcn.004b8e30
mov edx, dword [0x4db01c]
lea ecx, [esp + 0x620]
mov esi, eax
call fcn.004ba7f0
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7d4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push esi
lea ecx, [esp + 0x7b8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x620]
call fcn.004b73e0
cmp dword [0x4db7c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4bc4c4
lea ecx, [esp + 0x668]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x818]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4bc4e3
lea ecx, [esp + 0x678]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x788]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004baf00
movaps xmm0, xmmword [0x4d5000]
lea edx, [esp + 0x790]
add esp, 0x18
lea ecx, [esp + 0x748]
sub esp, 0x10
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004baf00
movss xmm2, dword [0x4d3684]
lea ecx, [esp + 0x390]
movss xmm1, dword [0x4d368c]
add esp, 0x18
call fcn.004b8e30
push 0x45
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], eax
mov byte [esp + 0x34], 0x4d
call fcn.004b6890
push 0x6e
lea ecx, [esp + 0x34]
mov byte [esp + 0x35], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0x34]
mov byte [esp + 0x36], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x34]
mov byte [esp + 0x37], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0x34]
mov byte [esp + 0x38], al
call fcn.004b6890
mov byte [esp + 0x35], al
xor esi, esi
mov byte [esp + 0x36], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x35]
call fcn.004b68b0
lea ecx, [esp + 0x30]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x35]
mov byte [esp + 0x25], al
call fcn.004b68b0
mov cl, byte [esp + 0x21]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4bc5a0
push 5
lea ecx, [esp + 0x35]
call fcn.004b68b0
lea ecx, [esp + 0x31]
mov byte [eax], 0
call fcn.004b68a0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b76c0
lea ecx, [esp + 0x620]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7d4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push dword [esp + 0x30]
lea ecx, [esp + 0x7b8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x608]
call fcn.004b73e0
cmp dword [0x4db7c0], 0x3ea
push 0x28
push 0xe6
push 0x184
push 0x13b
jne 0x4bc67e
lea ecx, [esp + 0x688]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x800]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4bc69d
lea ecx, [esp + 0x698]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x788]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004baf00
movaps xmm0, xmmword [0x4d5010]
lea edx, [esp + 0x790]
add esp, 0x18
lea ecx, [esp + 0x748]
sub esp, 0x10
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004baf00
movss xmm2, dword [0x4d3684]
lea ecx, [esp + 0x388]
movss xmm1, dword [0x4d3690]
add esp, 0x18
call fcn.004b8e30
push 0x45
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2c], eax
mov byte [esp + 0x3c], 0x26
call fcn.004b6890
push 0x6e
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3d], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3e], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3f], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0x3c]
mov byte [esp + 0x40], al
call fcn.004b6890
mov byte [esp + 0x3d], al
xor esi, esi
mov byte [esp + 0x3e], 0
push esi
lea ecx, [esp + 0x3d]
call fcn.004b68b0
lea ecx, [esp + 0x38]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x3d]
mov byte [esp + 0x25], al
call fcn.004b68b0
mov cl, byte [esp + 0x21]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4bc755
push 5
lea ecx, [esp + 0x3d]
call fcn.004b68b0
lea ecx, [esp + 0x39]
mov byte [eax], 0
call fcn.004b68a0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b76c0
lea ecx, [esp + 0x608]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7d4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push dword [esp + 0x30]
lea ecx, [esp + 0x7b8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x5f0]
call fcn.004b73e0
cmp dword [0x4db7c0], 0x3eb
push 0x28
push 0xe6
push 0x184
push 0x254
jne 0x4bc833
lea ecx, [esp + 0x6a8]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x800]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4bc852
lea ecx, [esp + 0x6b8]
call fcn.004b8e40
sub esp, 0x10
lea edx, [esp + 0x788]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004baf00
mov eax, dword [0x4db7ec]
add esp, 0x18
test eax, eax
je 0x4bc875
mov eax, dword [eax + 4]
jmp 0x4bc877
xor eax, eax
push 0xb9
push 0x6e
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4db838]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bc8a9
mov eax, dword [eax + 4]
jmp 0x4bc8ab
xor eax, eax
push 0xb9
push 0x182
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4db824]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bc8e0
mov eax, dword [eax + 4]
jmp 0x4bc8e2
xor eax, eax
push 0xb9
push 0x2a1
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
mov dl, 0xe
mov byte [esp + 0x1a1], 0
cmovne ecx, eax
mov dword [esp + 0x300], 0x43140000
mov dword [esp + 0x74c], ecx
sub esp, 0x18
mov ch, 0x7d
mov dword [esp + 0x31c], 0x43870000
mov cl, 8
mov byte [esp + 0x1b4], ch
xor cl, ch
mov byte [esp + 0x1b9], 0
mov al, 0x2f
mov byte [esp + 0x1b6], cl
mov ah, 9
xor al, ch
xor dl, ch
mov byte [esp + 0x1b5], al
xor ah, ch
mov byte [esp + 0x1b7], dl
mov esi, esp
mov byte [esp + 0x1b8], ah
mov ecx, esi
call fcn.004b8a80
lea ecx, [esp + 0x1b5]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bc980
sub ecx, edx
lea eax, [esp + 0x1b5]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x5f0]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7b4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x308]
push ecx
lea ecx, [esp + 0x7f4]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x5d8]
call fcn.004b7ab0
mov ch, 0x2f
mov byte [esp + 0x1a9], 0
mov cl, 0x5f
mov byte [esp + 0x1a4], ch
xor cl, ch
mov dword [esp + 0x308], 0x43d68000
sub esp, 0x18
mov byte [esp + 0x1be], cl
mov al, 0x6e
mov dword [esp + 0x324], 0x43870000
mov dl, 0x4a
mov byte [esp + 0x1c1], 0
mov ah, 0x57
xor al, ch
xor dl, ch
mov byte [esp + 0x1bd], al
xor ah, ch
mov byte [esp + 0x1bf], dl
mov esi, esp
mov byte [esp + 0x1c0], ah
mov ecx, esi
call fcn.004b8a80
lea ecx, [esp + 0x1bd]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bca60
sub ecx, edx
lea eax, [esp + 0x1bd]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x5d8]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7b4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x310]
push ecx
lea ecx, [esp + 0x7f4]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x5c0]
call fcn.004b7ab0
mov ch, 0x40
mov byte [esp + 0x1b1], 0
mov cl, 0x33
mov byte [esp + 0x1ac], ch
xor cl, ch
mov dword [esp + 0x310], 0x44318000
sub esp, 0x18
mov byte [esp + 0x1c6], cl
mov al, 3
mov dword [esp + 0x32c], 0x43870000
mov dl, 0x60
mov byte [esp + 0x1c9], 0
mov ah, 0x72
xor al, ch
xor dl, ch
mov byte [esp + 0x1c5], al
xor ah, ch
mov byte [esp + 0x1c7], dl
mov esi, esp
mov byte [esp + 0x1c8], ah
mov ecx, esi
call fcn.004b8a80
lea ecx, [esp + 0x1c5]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bcb40
sub ecx, edx
lea eax, [esp + 0x1c5]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x5c0]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7b4]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x318]
push ecx
lea ecx, [esp + 0x7f4]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x5a8]
call fcn.004b7ab0
push 0
push dword [esp + 0x74c]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4db858]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bcbda
mov eax, dword [eax + 4]
jmp 0x4bcbdc
xor eax, eax
push 0x14c
push 0x29
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4db858]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bcc0e
mov eax, dword [eax + 4]
jmp 0x4bcc10
xor eax, eax
push 0x14c
push 0x142
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4db858]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bcc45
mov eax, dword [eax + 4]
jmp 0x4bcc47
xor eax, eax
push 0x14c
push 0x25b
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4db7dc]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bcc7c
mov eax, dword [eax + 4]
jmp 0x4bcc7e
xor eax, eax
push 0x22
push 0x1bc
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
cmp dword [0x4db01c], 0xfffffffe
mov dword [esp + 0x74c], ecx
jne 0x4bcdc8
mov byte [esp + 0x180], 0x22
mov al, 0x6b
xor al, byte [esp + 0x180]
mov cl, 0x4c
xor cl, byte [esp + 0x180]
mov ch, 0x47
mov byte [esp + 0x181], al
sub esp, 0x18
mov byte [esp + 0x39], ch
mov dl, 2
mov al, byte [esp + 0x39]
mov ah, 0x66
mov byte [esp + 0x19a], cl
mov dh, 0x54
mov cl, byte [esp + 0x198]
mov esi, esp
xor al, cl
mov byte [esp + 0x3b], 0x4e
mov byte [esp + 0x19f], al
xor ch, cl
mov al, byte [esp + 0x3b]
xor dl, cl
xor al, cl
mov byte [esp + 0x3a], 0x4d
mov byte [esp + 0x1a0], al
xor ah, cl
mov al, byte [esp + 0x3a]
xor dh, cl
xor al, cl
mov byte [esp + 0x33], 0x52
mov byte [esp + 0x1a1], al
mov al, byte [esp + 0x33]
xor al, cl
mov byte [esp + 0x19d], ch
mov byte [esp + 0x1a3], 0
mov ecx, esi
mov dword [esp + 0x330], 0x43140000
mov dword [esp + 0x334], 0x43c30000
mov byte [esp + 0x19b], dl
mov byte [esp + 0x19c], ah
mov byte [esp + 0x19e], dh
mov byte [esp + 0x1a2], al
mov byte [esp + 0x1a3], 0
call fcn.004b8a80
lea ecx, [esp + 0x199]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bcd90
sub ecx, edx
lea eax, [esp + 0x199]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x5a8]
call fcn.004c1c80
lea esi, [esp + 0x5a8]
lea edi, [esp + 0x330]
jmp 0x4bce93
mov byte [esp + 0x130], 0x20
mov al, 0x6c
xor al, byte [esp + 0x130]
mov cl, 0x41
mov byte [esp + 0x131], al
mov ch, 0x43
mov al, byte [esp + 0x130]
sub esp, 0x18
xor cl, al
mov byte [esp + 0x14f], 0
xor ch, al
mov byte [esp + 0x14a], cl
mov dl, 0x55
mov byte [esp + 0x14d], ch
mov ah, 0x4e
mov dword [esp + 0x338], 0x43140000
mov dh, 0x48
mov dword [esp + 0x33c], 0x43c30000
mov esi, esp
mov byte [esp + 0x14f], 0
xor dl, al
xor ah, al
xor dh, al
mov byte [esp + 0x14b], dl
mov ecx, esi
mov byte [esp + 0x14c], ah
mov byte [esp + 0x14e], dh
call fcn.004b8a80
lea ecx, [esp + 0x149]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bce60
sub ecx, edx
lea eax, [esp + 0x149]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x590]
call fcn.004c1c80
lea esi, [esp + 0x590]
lea edi, [esp + 0x338]
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7fc]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push edi
lea ecx, [esp + 0x7cc]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
mov ecx, esi
call fcn.004b7ab0
mov byte [esp + 0x174], 0x7d
mov al, 0x34
xor al, byte [esp + 0x174]
mov cl, 0x13
xor cl, byte [esp + 0x174]
mov ch, 0x18
mov byte [esp + 0x175], al
sub esp, 0x18
mov byte [esp + 0x33], ch
mov dl, 0x5d
mov al, byte [esp + 0x33]
mov ah, 0x39
mov byte [esp + 0x18e], cl
mov dh, 0xb
mov cl, byte [esp + 0x18c]
mov esi, esp
xor al, cl
mov byte [esp + 0x3a], 0x11
mov byte [esp + 0x193], al
xor ch, cl
mov al, byte [esp + 0x3a]
xor dl, cl
xor al, cl
mov byte [esp + 0x39], 0x12
mov byte [esp + 0x194], al
xor ah, cl
mov al, byte [esp + 0x39]
xor dh, cl
xor al, cl
mov byte [esp + 0x3b], 0xd
mov byte [esp + 0x195], al
mov al, byte [esp + 0x3b]
xor al, cl
mov byte [esp + 0x191], ch
mov byte [esp + 0x197], 0
mov ecx, esi
mov dword [esp + 0x340], 0x43d88000
mov dword [esp + 0x344], 0x43c30000
mov byte [esp + 0x18f], dl
mov byte [esp + 0x190], ah
mov byte [esp + 0x192], dh
mov byte [esp + 0x196], al
mov byte [esp + 0x197], 0
call fcn.004b8a80
lea ecx, [esp + 0x18d]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bcfb0
sub ecx, edx
lea eax, [esp + 0x18d]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x578]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7fc]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x330]
push ecx
lea ecx, [esp + 0x7cc]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x560]
call fcn.004b7ab0
mov byte [esp + 0x1c0], 0x5f
mov al, 0x16
xor al, byte [esp + 0x1c0]
mov cl, 0x31
xor cl, byte [esp + 0x1c0]
mov ch, 0x3a
mov byte [esp + 0x1c1], al
sub esp, 0x18
mov byte [esp + 0x33], ch
mov dl, 0x7f
mov al, byte [esp + 0x33]
mov ah, 0x1b
mov byte [esp + 0x1da], cl
mov dh, 0x29
mov cl, byte [esp + 0x1d8]
mov esi, esp
xor al, cl
mov byte [esp + 0x3a], 0x33
mov byte [esp + 0x1df], al
xor ch, cl
mov al, byte [esp + 0x3a]
xor dl, cl
xor al, cl
mov byte [esp + 0x39], 0x30
mov byte [esp + 0x1e0], al
xor ah, cl
mov al, byte [esp + 0x39]
xor dh, cl
xor al, cl
mov byte [esp + 0x3b], 0x2f
mov byte [esp + 0x1e1], al
mov al, byte [esp + 0x3b]
xor al, cl
mov byte [esp + 0x1dd], ch
mov byte [esp + 0x1e3], 0
mov ecx, esi
mov dword [esp + 0x348], 0x44328000
mov dword [esp + 0x34c], 0x43c30000
mov byte [esp + 0x1db], dl
mov byte [esp + 0x1dc], ah
mov byte [esp + 0x1de], dh
mov byte [esp + 0x1e2], al
mov byte [esp + 0x1e3], 0
call fcn.004b8a80
lea ecx, [esp + 0x1d9]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd0f8
sub ecx, edx
lea eax, [esp + 0x1d9]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x560]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x7fc]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x338]
push ecx
lea ecx, [esp + 0x7cc]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b9070
lea ecx, [esp + 0x548]
call fcn.004b7ab0
push 2
push dword [esp + 0x74c]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov edi, dword [0x4db880]
test eax, eax
mov ecx, dword [esp + 0x74c]
cmovne ecx, eax
mov dword [esp + 0x74c], ecx
xor ecx, ecx
mov eax, dword [edi + 0x3c]
mov dword [esp + 0x14], ecx
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x3da02466
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd1cf
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd1b2
cmp edx, 0xed60e11
je 0x4bd1d8
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd1a2
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
push 0xcc0020
push 0
mov eax, dword [edx + 0x24]
push 0
push dword [esp + 0x30]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
push 0x1db
push 0x35c
push 0
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
push 0
push dword [esp + 0x12c]
add eax, edi
call eax
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xf43e3adb
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd264
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd247
cmp edx, 0xd0410f30
je 0x4bd26d
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd237
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x2c]
mov eax, dword [edx + 0x24]
push dword [esp + 0x28]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x6a1a8c5
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd2df
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd2c2
cmp edx, 0xc3f1c081
je 0x4bd2e8
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd2b2
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x1c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x8d05cd4b
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd35d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd340
cmp edx, 0x391b5b35
je 0x4bd366
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd330
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
lea ecx, [esp + 0x8f4]
call fcn.004b7ab0
push dword [esp + 0x758]
call dword [sym.imp.gdiplus.dll_GdipDeleteStringFormat]
push dword [esp + 0x7e8]
mov esi, dword [sym.imp.gdiplus.dll_GdipDeleteFont]
call esi
push dword [esp + 0x110]
call esi
push dword [esp + 0x7c0]
call esi
push dword [esp + 0x7ac]
call esi
push dword [esp + 0x874]
call esi
push dword [esp + 0x784]
call dword [sym.imp.gdiplus.dll_GdipDeleteFontFamily]
push dword [esp + 0x80c]
mov esi, dword [sym.imp.gdiplus.dll_GdipDeleteBrush]
mov dword [esp + 0x80c], 0x4cd584
call esi
push dword [esp + 0x7f4]
mov dword [esp + 0x7f4], 0x4cd584
call esi
push dword [esp + 0x888]
mov dword [esp + 0x888], 0x4cd584
call esi
push dword [esp + 0x800]
mov dword [esp + 0x800], 0x4cd584
call esi
push dword [esp + 0x77c]
mov dword [esp + 0x77c], 0x4cd584
call esi
push dword [esp + 0x7d8]
mov dword [esp + 0x7d8], 0x4cd584
call esi
push dword [esp + 0x7b8]
mov dword [esp + 0x7b8], 0x4cd584
call esi
push dword [esp + 0x798]
mov dword [esp + 0x798], 0x4cd584
call esi
push dword [esp + 0x7a4]
mov dword [esp + 0x7a4], 0x4cd584
call esi
push dword [esp + 0x894]
mov dword [esp + 0x894], 0x4cd584
call esi
push dword [esp + 0x748]
jmp 0x4c13dc
mov dword [esp + 0x214], eax
mov esi, dword [eax + 0x20]
mov dword [esp + 0x14], ecx
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x3773ae8
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd4fd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd4e0
cmp edx, 0x84c8f73
je 0x4bd506
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd4d0
mov edx, dword [esp + 0x214]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x10c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db880]
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x610e6d20
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd57e
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd561
cmp edx, 0xff2dcf01
je 0x4bd587
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd551
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
push 0x258
push 0x1c2
mov eax, dword [edx + 0x24]
push dword [esp + 0x114]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db880]
mov dword [esp + 0x28], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x2c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x4fa78c60
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd60d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd5f0
cmp edx, 0x5bf1bb5f
je 0x4bd616
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd5e0
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
push dword [esp + 0x28]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db870]
mov dword [esp + 0x198], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x2c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xdaefae9d
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd68f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd672
cmp edx, 0xff5e1e4e
je 0x4bd698
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd662
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x8c0]
mov ecx, dword [esp + 0x14]
push eax
push dword [0x4db864]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x2c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xa247d126
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd710
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd6f3
cmp edx, 0x5df2de4c
je 0x4bd719
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd6e3
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
movaps xmm0, xmmword [0x4d6550]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x23c], 0x2110
movups xmmword [esp + 0x22c], xmm0
mov byte [esp + 0x23e], 0
xor ecx, ecx
nop dword [eax]
mov al, byte [esp + 0x22c]
xor byte [esp + ecx + 0x22d], al
inc ecx
cmp ecx, 0x11
jb 0x4bd760
sub esp, 0x18
mov byte [esp + 0x256], 0
mov edi, esp
mov ecx, edi
call fcn.004b8a80
lea ecx, [esp + 0x245]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd792
sub ecx, edx
lea eax, [esp + 0x245]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x548]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x12
call esi
lea ecx, [esp + 0x530]
mov dword [esp + 0x20c], eax
call fcn.004b7ab0
mov edi, dword [0x4db880]
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x2c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x8ef36c33
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd842
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd825
cmp edx, 0x251bb0e7
je 0x4bd84b
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd815
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
movaps xmm0, xmmword [0x4d7b10]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x264], 0x6657
movups xmmword [esp + 0x254], xmm0
mov byte [esp + 0x266], 0
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [esp + 0x254]
xor byte [esp + ecx + 0x255], al
inc ecx
cmp ecx, 0x11
jb 0x4bd890
sub esp, 0x18
mov byte [esp + 0x27e], 0
mov edi, esp
mov ecx, edi
call fcn.004b8a80
lea ecx, [esp + 0x26d]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd8c2
sub ecx, edx
lea eax, [esp + 0x26d]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x410]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x14
call esi
lea ecx, [esp + 0x3f8]
mov dword [esp + 0x110], eax
call fcn.004b7ab0
mov edi, dword [0x4db880]
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x2c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x634b49b8
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd972
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd955
cmp edx, 0xbea4d45a
je 0x4bd97b
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bd945
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
movaps xmm0, xmmword [0x4d6ab0]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x278], 0x5465
movups xmmword [esp + 0x268], xmm0
mov byte [esp + 0x27a], 0
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [esp + 0x268]
xor byte [esp + ecx + 0x269], al
inc ecx
cmp ecx, 0x11
jb 0x4bd9c0
sub esp, 0x18
mov byte [esp + 0x292], 0
mov edi, esp
mov ecx, edi
call fcn.004b8a80
lea ecx, [esp + 0x281]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd9f2
sub ecx, edx
lea eax, [esp + 0x281]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x530]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x1e
call esi
lea ecx, [esp + 0x518]
mov dword [esp + 0x2c], eax
call fcn.004b7ab0
lea eax, [esp + 0x72c]
mov dword [esp + 0x72c], 0
push eax
push dword [esp + 0x28]
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov ecx, dword [esp + 0x72c]
xorps xmm0, xmm0
mov dword [esp + 0x754], eax
lea eax, [esp + 0x28c]
mov dword [esp + 0x750], ecx
lea ecx, [esp + 0x83c]
push eax
movq qword [esp + 0x840], xmm0
mov dword [esp + 0x848], 0
mov dword [esp + 0x290], 0xff17181c
call fcn.004b8f70
lea eax, [esp + 0x27c]
mov dword [esp + 0x7d0], 0
xorps xmm0, xmm0
mov dword [esp + 0x27c], 0xff1d2025
push eax
lea ecx, [esp + 0x7cc]
movq qword [esp + 0x7cc], xmm0
call fcn.004b8f70
lea eax, [esp + 0x2bc]
mov dword [esp + 0x81c], 0
xorps xmm0, xmm0
mov dword [esp + 0x2bc], 0xffcccccc
push eax
lea ecx, [esp + 0x818]
movq qword [esp + 0x818], xmm0
call fcn.004b8f70
lea eax, [esp + 0x280]
mov dword [esp + 0x828], 0
xorps xmm0, xmm0
mov dword [esp + 0x280], 0xffffc95d
push eax
lea ecx, [esp + 0x824]
movq qword [esp + 0x824], xmm0
call fcn.004b8f70
lea eax, [esp + 0x284]
mov dword [esp + 0x850], 0
xorps xmm0, xmm0
mov dword [esp + 0x284], 0xffffde72
push eax
lea ecx, [esp + 0x84c]
movq qword [esp + 0x84c], xmm0
call fcn.004b8f70
xorps xmm0, xmm0
mov dword [esp + 0x8a4], 0
movq qword [esp + 0x89c], xmm0
mov dword [esp + 0x288], 0xff828282
lea eax, [esp + 0x288]
push eax
lea ecx, [esp + 0x8a0]
call fcn.004b8f70
lea eax, [esp + 0x2b4]
mov dword [esp + 0x85c], 0
xorps xmm0, xmm0
mov dword [esp + 0x2b4], 0xff555555
push eax
lea ecx, [esp + 0x858]
movq qword [esp + 0x858], xmm0
call fcn.004b8f70
lea eax, [esp + 0x2b8]
mov dword [esp + 0x868], 0
xorps xmm0, xmm0
mov dword [esp + 0x2b8], 0xff15161a
push eax
lea ecx, [esp + 0x864]
movq qword [esp + 0x864], xmm0
call fcn.004b8f70
xorps xmm0, xmm0
mov word [esp + 0x228], 0x4475
movlpd qword [esp + 0x78c], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4d7210]
movups xmmword [esp + 0x218], xmm0
mov byte [esp + 0x22a], 0
nop word [eax + eax]
mov al, byte [esp + 0x218]
xor byte [esp + ecx + 0x219], al
inc ecx
cmp ecx, 0x11
jb 0x4bdc70
sub esp, 0x18
mov byte [esp + 0x242], 0
mov esi, esp
mov ecx, esi
call fcn.004b8a80
lea ecx, [esp + 0x231]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bdca2
sub ecx, edx
lea eax, [esp + 0x231]
push ecx
push eax
mov ecx, esi
call fcn.004b8710
lea ecx, [esp + 0x518]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x78c]
push ecx
push 0
push eax
call dword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
lea ecx, [esp + 0x500]
mov dword [esp + 0x790], eax
call fcn.004b7ab0
mov esi, dword [sym.imp.gdiplus.dll_GdipCreateFont]
lea eax, [esp + 0x734]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41580000
push dword [esp + 0x79c]
mov dword [esp + 0x748], 0
call esi
mov dword [esp + 0x838], eax
mov eax, dword [esp + 0x734]
mov dword [esp + 0x834], eax
lea eax, [esp + 0x73c]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41800000
push dword [esp + 0x79c]
mov dword [esp + 0x750], 0
call esi
mov dword [esp + 0x870], eax
mov eax, dword [esp + 0x73c]
mov dword [esp + 0x86c], eax
lea eax, [esp + 0x738]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41920000
push dword [esp + 0x79c]
mov dword [esp + 0x74c], 0
call esi
mov dword [esp + 0x7e4], eax
mov eax, dword [esp + 0x738]
mov dword [esp + 0x7e0], eax
lea eax, [esp + 0x730]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41a00000
push dword [esp + 0x79c]
mov dword [esp + 0x744], 0
call esi
mov dword [esp + 0x830], eax
mov eax, dword [esp + 0x730]
mov dword [esp + 0x82c], eax
lea eax, [esp + 0x744]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41b40000
push dword [esp + 0x79c]
mov dword [esp + 0x758], 0
call esi
mov dword [esp + 0x880], eax
mov eax, dword [esp + 0x744]
mov dword [esp + 0x87c], eax
push 0x259
push 0x1c3
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esp + 0x850]
push dword [esp + 0x764]
call dword [sym.imp.gdiplus.dll_GdipFillRectangleI]
mov ecx, dword [esp + 0x754]
test eax, eax
push 4
push dword [esp + 0x754]
cmovne ecx, eax
mov dword [esp + 0x75c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetSmoothingMode]
mov ecx, dword [esp + 0x754]
test eax, eax
push 4
push dword [esp + 0x754]
cmovne ecx, eax
mov dword [esp + 0x75c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetTextRenderingHint]
mov ecx, dword [esp + 0x754]
test eax, eax
push 0
push dword [esp + 0x754]
cmovne ecx, eax
mov dword [esp + 0x75c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingMode]
mov ecx, dword [esp + 0x754]
test eax, eax
push 2
push dword [esp + 0x754]
cmovne ecx, eax
mov dword [esp + 0x75c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
cmp dword [0x4db7c0], 2
mov dword [esp + 0x754], ecx
jne 0x4bdf26
mov eax, dword [0x4db800]
test eax, eax
je 0x4bdf00
mov eax, dword [eax + 4]
jmp 0x4bdf02
xor eax, eax
mov esi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x14
push 0x168
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4bdf60
mov dword [esp + 0x754], eax
jmp 0x4bdf60
mov eax, dword [0x4db84c]
test eax, eax
je 0x4bdf34
mov eax, dword [eax + 4]
jmp 0x4bdf36
xor eax, eax
mov esi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x14
push 0x168
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
cmp dword [0x4db7c0], 3
jne 0x4bdf97
mov eax, dword [0x4db814]
test eax, eax
je 0x4bdf77
mov eax, dword [eax + 4]
jmp 0x4bdf79
xor eax, eax
push 0x22
push 0x14a
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4bdfcb
mov dword [esp + 0x754], eax
jmp 0x4bdfcb
mov eax, dword [0x4db7d8]
test eax, eax
je 0x4bdfa5
mov eax, dword [eax + 4]
jmp 0x4bdfa7
xor eax, eax
push 0x22
push 0x14a
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
mov eax, dword [0x4db840]
test eax, eax
je 0x4bdfd9
mov eax, dword [eax + 4]
jmp 0x4bdfdb
xor eax, eax
push 0x23
push 0xa8
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
mov byte [esp + 0x1b4], 0x3e
mov dl, 0x52
cmovne ecx, eax
mov byte [esp + 0x22], 0x1e
mov dword [esp + 0x754], ecx
mov al, 0x69
xor al, byte [esp + 0x1b4]
mov cl, 0x5b
mov byte [esp + 0x1b5], al
mov ch, 0x51
mov byte [esp + 0x1b], cl
sub esp, 0x18
xor cl, byte [esp + 0x1cc]
mov ah, 0x5d
mov al, byte [esp + 0x33]
mov dh, 0x53
mov byte [esp + 0x1ce], cl
mov edi, esp
mov cl, byte [esp + 0x1cc]
xor al, cl
mov byte [esp + 0x39], 0x4a
mov byte [esp + 0x1d3], al
xor dl, cl
mov al, byte [esp + 0x3a]
xor ah, cl
xor al, cl
mov byte [esp + 0x3b], ch
mov byte [esp + 0x1d4], al
xor ch, cl
mov al, byte [esp + 0x39]
xor dh, cl
xor al, cl
mov byte [esp + 0x1d1], ch
mov byte [esp + 0x1d5], al
mov al, byte [esp + 0x3b]
xor al, cl
mov byte [esp + 0x1d7], 0
mov ecx, edi
mov dword [esp + 0x350], 0x43000000
mov dword [esp + 0x354], 0x42f00000
mov byte [esp + 0x1cf], dl
mov byte [esp + 0x1d0], ah
mov byte [esp + 0x1d2], dh
mov byte [esp + 0x1d6], al
mov byte [esp + 0x1d7], 0
call fcn.004b8a80
lea ecx, [esp + 0x1cd]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be0e0
sub ecx, edx
lea eax, [esp + 0x1cd]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x500]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x814]
push ecx
lea ecx, [esp + 0x33c]
push ecx
lea ecx, [esp + 0x7e8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x764]
call fcn.004b8fd0
lea ecx, [esp + 0x4e8]
call fcn.004b7ab0
mov cl, 6
mov byte [esp + 0x144], 0x60
mov dl, cl
mov byte [esp + 0x1b], 0xf
xor cl, byte [esp + 0x144]
mov al, 0x25
xor al, byte [esp + 0x144]
mov ch, 0x13
mov byte [esp + 0x145], al
sub esp, 0x18
mov al, byte [esp + 0x33]
mov ah, 0x15
mov byte [esp + 0x15e], cl
mov dh, 9
mov cl, byte [esp + 0x15c]
mov edi, esp
xor al, cl
mov byte [esp + 0x3a], 0xe
mov byte [esp + 0x163], al
xor ch, cl
mov al, byte [esp + 0x3a]
xor dl, cl
xor ah, cl
mov byte [esp + 0x161], ch
xor dh, cl
mov byte [esp + 0x165], 0
xor al, cl
mov dword [esp + 0x2d8], 0x42dc0000
mov ecx, edi
mov dword [esp + 0x2dc], 0x43110000
mov byte [esp + 0x15f], dl
mov byte [esp + 0x160], ah
mov byte [esp + 0x162], dh
mov byte [esp + 0x164], al
mov byte [esp + 0x165], 0
call fcn.004b8a80
lea ecx, [esp + 0x15d]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be200
sub ecx, edx
lea eax, [esp + 0x15d]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x4e8]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x820]
push ecx
lea ecx, [esp + 0x2c4]
push ecx
lea ecx, [esp + 0x7e8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x764]
call fcn.004b8fd0
lea ecx, [esp + 0x4d0]
call fcn.004b7ab0
mov dh, 0x7e
mov byte [esp + 0x1e2], 0
mov cl, 0x1f
mov dword [esp + 0x2c8], 0x43540000
mov ch, 0x11
mov dword [esp + 0x2cc], 0x43110000
xor cl, dh
mov byte [esp + 0x1dc], dh
xor ch, dh
mov byte [esp + 0x1de], cl
sub esp, 0x18
mov byte [esp + 0x1f9], ch
mov al, 0x33
mov byte [esp + 0x1fa], 0
mov dl, 0x1d
mov ah, 0xc
mov edi, esp
xor al, dh
xor dl, dh
mov byte [esp + 0x1f5], al
xor ah, dh
mov byte [esp + 0x1f7], dl
mov ecx, edi
mov byte [esp + 0x1f8], ah
call fcn.004b8a80
lea ecx, [esp + 0x1f5]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be2e0
sub ecx, edx
lea eax, [esp + 0x1f5]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x4d0]
call fcn.004c1c80
add esp, 0x18
mov ecx, eax
call fcn.004b7390
lea ecx, [esp + 0x814]
push ecx
lea ecx, [esp + 0x2cc]
push ecx
lea ecx, [esp + 0x7e8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x764]
call fcn.004b8fd0
lea ecx, [esp + 0x4b8]
call fcn.004b7ab0
xor eax, eax
cmp byte [0x4db019], al
je 0x4be409
mov dword [esp + 0x2d0], 0x43090000
mov cl, 0xa
mov dword [esp + 0x2d4], 0x432e0000
mov dword [esp + 0x1cc], 0x6d63590a
mov dword [esp + 0x1d0], 0x64632a64
mov dword [esp + 0x1d4], 0x7d65642a
mov byte [esp + 0x1d8], al
xor byte [esp + eax + 0x1cd], cl
inc eax
cmp eax, 0xb
jae 0x4be3a6
mov cl, byte [esp + 0x1cc]
jmp 0x4be390
sub esp, 0x18
mov byte [esp + 0x1f0], 0
mov edi, esp
mov ecx, edi
call fcn.004b8a80
lea ecx, [esp + 0x1e5]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be3c4
sub ecx, edx
lea eax, [esp + 0x1e5]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x4b8]
call fcn.004c1c80
mov ecx, eax
lea edi, [esp + 0x4b8]
lea eax, [esp + 0x884]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2e8]
jmp 0x4be4c4
mov dword [esp + 0x2d8], 0x43040000
mov cl, 0x51
mov dword [esp + 0x2dc], 0x43320000
mov dword [esp + 0x1ec], 0xb8bf9351
mov dword [esp + 0x1f0], 0xa071b9a3
mov dword [esp + 0x1f4], 0xb1a6b8b4
mov word [esp + 0x1f8], 0xa0
nop dword [eax]
xor byte [esp + eax + 0x1ed], cl
inc eax
cmp eax, 0xc
jae 0x4be466
mov cl, byte [esp + 0x1ec]
jmp 0x4be450
sub esp, 0x18
mov byte [esp + 0x211], 0
mov edi, esp
mov ecx, edi
call fcn.004b8a80
lea ecx, [esp + 0x205]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be484
sub ecx, edx
lea eax, [esp + 0x205]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x4a0]
call fcn.004c2010
mov ecx, eax
lea edi, [esp + 0x4a0]
lea eax, [esp + 0x84c]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2f0]
add esp, 0x18
mov dword [esp + 0x1c], eax
call fcn.004b7390
lea ecx, [esp + 0x854]
push ecx
push dword [esp + 0x20]
lea ecx, [esp + 0x758]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push eax
call fcn.004b8fd0
mov ecx, edi
call fcn.004b7ab0
sub esp, 0x10
lea edx, [esp + 0x7d8]
cmp byte [0x4db019], 0
lea ecx, [esp + 0x760]
mov eax, esp
push 5
push 0xff1d2025
je 0x4be522
movaps xmm0, xmmword [0x4d4fd0]
jmp 0x4be529
movaps xmm0, xmmword [0x4d4fc0]
movups xmmword [eax], xmm0
call fcn.004baf00
mov eax, dword [0x4db820]
add esp, 0x18
test eax, eax
je 0x4be542
mov eax, dword [eax + 4]
jmp 0x4be544
xor eax, eax
push 0xe8
push 0x127
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4db860]
mov dword [esp + 0x754], ecx
test eax, eax
je 0x4be579
mov eax, dword [eax + 4]
jmp 0x4be57b
xor eax, eax
push 0xe8
push 0x14f
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
lea edx, [esp + 0x7c8]
movaps xmm0, xmmword [0x4d50a0]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x764], ecx
lea ecx, [esp + 0x760]
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004baf00
add esp, 0x18
cmp dword [0x4db7c0], 4
jne 0x4be608
mov eax, dword [0x4db7f0]
test eax, eax
je 0x4be5e5
mov eax, dword [eax + 4]
jmp 0x4be5e7
xor eax, eax
push 0x11d
push 0x144
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4be63f
mov dword [esp + 0x754], eax
jmp 0x4be63f
mov eax, dword [0x4db7e0]
test eax, eax
je 0x4be616
mov eax, dword [eax + 4]
jmp 0x4be618
xor eax, eax
push 0x11d
push 0x144
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
movaps xmm0, xmmword [0x4d50b0]
lea edx, [esp + 0x7c8]
sub esp, 0x10
lea ecx, [esp + 0x760]
mov eax, esp
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004baf00
add esp, 0x18
lea ecx, [esp + 0x750]
cmp dword [0x4db7c0], 5
push 0x15d
jne 0x4be6a3
cmp byte [0x4db7c6], 0
je 0x4be696
push 0x146
push dword [0x4db810]
jmp 0x4be6c4
push 0x145
push dword [0x4db81c]
jmp 0x4be6c4
cmp byte [0x4db7c6], 0
je 0x4be6b9
push 0x146
push dword [0x4db7f8]
jmp 0x4be6c4
push 0x145
push dword [0x4db848]
call fcn.004b9120
movaps xmm0, xmmword [0x4d4fb0]
lea edx, [esp + 0x7c8]
sub esp, 0x10
lea ecx, [esp + 0x760]
mov eax, esp
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004baf00
add esp, 0x18
cmp byte [0x4db018], 0
je 0x4be72b
cmp dword [0x4db7c0], 0xfa2
lea ecx, [esp + 0x750]
push 0x197
push 0x2d
jne 0x4be720
push dword [0x4db83c]
jmp 0x4be726
push dword [0x4db850]
call fcn.004b9120
movaps xmm0, xmmword [0x4d5080]
lea ecx, [esp + 0x750]
sub esp, 0x10
cmp dword [0x4db7c0], 1
mov eax, esp
push 6
movups xmmword [eax], xmm0
jne 0x4be75a
push 0xffffde72
lea edx, [esp + 0x860]
jmp 0x4be766
push 0xffffc95d
lea edx, [esp + 0x838]
call fcn.004baf00
add esp, 0x18
push 0
push dword [esp + 0x754]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
cmp byte [0x4db019], 0
mov dword [esp + 0x754], ecx
je 0x4be88a
mov byte [esp + 0x114], 0x1f
mov al, 0x4c
xor al, byte [esp + 0x114]
mov ah, 0x71
mov byte [esp + 0x115], al
mov cl, 0x76
mov al, byte [esp + 0x114]
mov dl, 0x78
xor cl, al
mov byte [esp + 0x1b], ah
mov ch, 0x3f
mov byte [esp + 0x116], cl
xor ch, al
mov byte [esp + 0x11c], 0
mov dh, 0x56
mov byte [esp + 0x119], ch
xor dl, al
mov dword [esp + 0x2e0], 0x43170000
xor ah, al
mov dword [esp + 0x2e4], 0x43e38000
xor dh, al
mov byte [esp + 0x117], dl
mov al, byte [esp + 0x1b]
sub esp, 0x18
xor al, byte [esp + 0x12c]
mov edi, esp
mov ecx, edi
mov byte [esp + 0x130], ah
mov byte [esp + 0x132], dh
mov byte [esp + 0x133], al
mov byte [esp + 0x134], 0
call fcn.004b8a80
lea ecx, [esp + 0x12d]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be845
sub ecx, edx
lea eax, [esp + 0x12d]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x488]
call fcn.004c1c80
mov ecx, eax
lea edi, [esp + 0x488]
lea eax, [esp + 0x844]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2f8]
jmp 0x4be946
mov dh, 0x27
mov byte [esp + 0x1ea], 0
mov cl, 0xc9
mov dword [esp + 0x2e8], 0x43110000
mov ch, 0xcf
mov dword [esp + 0x2ec], 0x43e30000
xor cl, dh
mov byte [esp + 0x1e4], dh
xor ch, dh
mov byte [esp + 0x1e6], cl
sub esp, 0x18
mov byte [esp + 0x201], ch
mov al, 0xe5
mov byte [esp + 0x202], 0
mov dl, 0xce
mov ah, 0xd5
mov edi, esp
xor al, dh
xor dl, dh
mov byte [esp + 0x1fd], al
xor ah, dh
mov byte [esp + 0x1ff], dl
mov ecx, edi
mov byte [esp + 0x200], ah
call fcn.004b8a80
lea ecx, [esp + 0x1fd]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be906
sub ecx, edx
lea eax, [esp + 0x1fd]
push ecx
push eax
mov ecx, edi
call fcn.004b8710
lea ecx, [esp + 0x470]
call fcn.004c2010
mov ecx, eax
lea edi, [esp + 0x470]
lea eax, [esp + 0x894]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x300]
add esp, 0x18
mov dword [esp + 0x1c], eax
call fcn.004b7390
lea ecx, [esp + 0x860]
push ecx
push dword [esp + 0x20]
lea ecx, [esp + 0x758]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push eax
call fcn.004b8fd0
mov ecx, edi
call fcn.004b7ab0
push 2
push dword [esp + 0x754]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
cmp dword [0x4db7c0], 0x3e9
mov dword [esp + 0x754], ecx
jne 0x4be9d7
mov eax, dword [0x4db830]
test eax, eax
je 0x4be9b4
mov eax, dword [eax + 4]
jmp 0x4be9b6
xor eax, eax
push 0x22b
push 0x97
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4bea0e
mov dword [esp + 0x754], eax
jmp 0x4bea0e
mov eax, dword [0x4db808]
test eax, eax
je 0x4be9e5
mov eax, dword [eax + 4]
jmp 0x4be9e7
xor eax, eax
push 0x22b
push 0x97
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
cmp dword [0x4db7c0], 0x3ea
jne 0x4bea4b
mov eax, dword [0x4db7e4]
test eax, eax
je 0x4bea28
mov eax, dword [eax + 4]
jmp 0x4bea2a
xor eax, eax
push 0x22b
push 0xbf
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4bea82
mov dword [esp + 0x754], eax
jmp 0x4bea82
mov eax, dword [0x4db834]
test eax, eax
je 0x4bea59
mov eax, dword [eax + 4]
jmp 0x4bea5b
xor eax, eax
push 0x22b
push 0xbf
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
cmp dword [0x4db7c0], 0x3eb
jne 0x4beabf
mov eax, dword [0x4db804]
test eax, eax
je 0x4bea9c
mov eax, dword [eax + 4]
jmp 0x4bea9e
xor eax, eax
push 0x22b
push 0xe7
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4beaf6
mov dword [esp + 0x754], eax
jmp 0x4beaf6
mov eax, dword [0x4db80c]
test eax, eax
je 0x4beacd
mov eax, dword [eax + 4]
jmp 0x4beacf
xor eax, eax
push 0x22b
push 0xe7
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x827d4ad1
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4beb41
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4beb24
cmp edx, 0xeaf602e7
je 0x4beb4a
inc dword [esp + 0x14]
add esi, 4
jmp 0x4beb14
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x555555
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov byte [esp + 0x128], 0x74
mov al, 0x4d
xor al, byte [esp + 0x128]
mov cl, 0x1e
mov byte [esp + 0x129], al
mov ch, 5
mov al, byte [esp + 0x128]
mov dl, 0x18
xor cl, al
mov byte [esp + 0x12f], 0
xor ch, al
mov byte [esp + 0x12a], cl
mov ah, 0x23
mov byte [esp + 0x12d], ch
mov dh, 0x39
mov byte [esp + 0x12f], 0
xor dl, al
lea ecx, [esp + 0x8dc]
xor ah, al
mov byte [esp + 0x12b], dl
xor dh, al
mov byte [esp + 0x12c], ah
mov byte [esp + 0x12e], dh
call fcn.004b8a80
lea ecx, [esp + 0x129]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bebf0
sub ecx, edx
lea eax, [esp + 0x129]
push ecx
push eax
lea ecx, [esp + 0x8e4]
call fcn.004b8710
mov byte [esp + 0x120], 0x6a
mov al, 0xd
xor al, byte [esp + 0x120]
mov cl, 0x3c
mov byte [esp + 0x121], al
mov ch, 0x32
mov al, byte [esp + 0x120]
mov dl, 0x22
xor cl, al
mov byte [esp + 0x127], 0
xor ch, al
mov byte [esp + 0x122], cl
mov ah, 9
mov byte [esp + 0x125], ch
mov dh, 0x21
mov byte [esp + 0x127], 0
xor dl, al
lea ecx, [esp + 0x8a8]
xor ah, al
mov byte [esp + 0x123], dl
xor dh, al
mov byte [esp + 0x124], ah
mov byte [esp + 0x126], dh
call fcn.004b8a80
lea ecx, [esp + 0x121]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bec90
sub ecx, edx
lea eax, [esp + 0x121]
push ecx
push eax
lea ecx, [esp + 0x8b0]
call fcn.004b8710
mov byte [esp + 0x138], 0x45
mov cl, 0x20
xor cl, byte [esp + 0x138]
mov al, 0x22
xor al, byte [esp + 0x138]
mov ch, 0x11
mov byte [esp + 0x139], al
mov dl, 0xc
mov byte [esp + 0x13a], cl
mov dh, 0xb
mov cl, byte [esp + 0x138]
mov ah, 0xf
mov byte [esp + 0x1b], 0x72
xor dl, cl
mov al, byte [esp + 0x1b]
xor ch, cl
xor al, cl
mov byte [esp + 0x22], 0x35
xor dh, cl
mov byte [esp + 0x13f], al
mov al, byte [esp + 0x22]
xor ah, cl
xor al, cl
mov byte [esp + 0x13d], ch
lea ecx, [esp + 0x139]
mov byte [esp + 0x141], 0
mov byte [esp + 0x13b], dl
mov byte [esp + 0x13e], dh
lea edx, [ecx + 1]
mov byte [esp + 0x13c], ah
mov byte [esp + 0x140], al
mov byte [esp + 0x141], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bed47
sub ecx, edx
lea eax, [esp + 0x139]
push ecx
push eax
lea ecx, [esp + 0x8b0]
call fcn.004b7e50
mov byte [esp + 0x18c], 0x37
mov al, 0x65
xor al, byte [esp + 0x18c]
mov cl, 6
xor cl, byte [esp + 0x18c]
mov ah, 0x41
mov byte [esp + 0x18d], al
mov ch, 0x59
mov byte [esp + 0x18e], cl
mov dl, 0x40
mov cl, byte [esp + 0x18c]
mov dh, 0x50
mov byte [esp + 0x1b], 0x79
xor ah, cl
mov al, byte [esp + 0x1b]
xor ch, cl
xor al, cl
mov byte [esp + 0x22], 0x61
mov byte [esp + 0x193], al
xor dl, cl
mov al, byte [esp + 0x22]
xor dh, cl
xor al, cl
mov byte [esp + 0x190], ah
mov byte [esp + 0x194], al
lea eax, [esp + 0x18d]
mov byte [esp + 0x191], ch
lea ecx, [esp + 0x8a8]
mov byte [esp + 0x195], 0
push eax
mov byte [esp + 0x193], dl
mov byte [esp + 0x196], dh
mov byte [esp + 0x199], 0
call fcn.004b8aa0
test al, al
je 0x4beede
mov byte [esp + 0x168], 0x59
mov cl, 0x28
xor cl, byte [esp + 0x168]
mov al, 0x1c
xor al, byte [esp + 0x168]
mov ch, 0xf
mov byte [esp + 0x169], al
mov dl, 0x29
mov byte [esp + 0x16a], cl
mov dh, 0x34
mov cl, byte [esp + 0x168]
mov ah, 0x3b
mov byte [esp + 0x1b], 0x3a
xor dl, cl
mov al, byte [esp + 0x1b]
xor ch, cl
xor al, cl
mov byte [esp + 0x22], 0x2b
mov byte [esp + 0x16f], al
xor dh, cl
mov al, byte [esp + 0x22]
xor ah, cl
xor al, cl
mov byte [esp + 0x21], 0x10
mov byte [esp + 0x170], al
mov al, byte [esp + 0x21]
xor al, cl
mov byte [esp + 0x16d], ch
lea ecx, [esp + 0x169]
mov byte [esp + 0x172], 0
mov byte [esp + 0x16b], dl
mov byte [esp + 0x16e], dh
lea edx, [ecx + 1]
mov byte [esp + 0x16c], ah
mov byte [esp + 0x171], al
mov byte [esp + 0x172], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4beec0
sub ecx, edx
lea eax, [esp + 0x169]
push ecx
push eax
lea ecx, [esp + 0x8e4]
call fcn.004b7e50
lea ecx, [esp + 0x8a8]
call fcn.004b7630
lea ecx, [esp + 0x8dc]
call fcn.004b7630
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x362881fb
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bef41
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bef24
cmp edx, 0xdae3e215
je 0x4bef4a
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bef14
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 1
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db880]
xor ecx, ecx
movaps xmm0, xmmword [esp + 0x8c0]
movaps xmmword [esp + 0x760], xmm0
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0xd3d28759
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4befcd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4befb0
cmp edx, 0xda25b17e
je 0x4befd6
inc dword [esp + 0x14]
add esi, 4
jmp 0x4befa0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x110]
mov eax, dword [edx + 0x24]
push dword [esp + 0x28]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4db7d0], 1
mov dword [esp + 0x760], 0x37
mov dword [esp + 0x764], 0x11b
jne 0x4bf07d
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0xad9ab014
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf06d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf050
cmp edx, 0x3c58753a
je 0x4bf076
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf040
push 0xcccccc
jmp 0x4bf0eb
mov eax, dword [0x4db7c0]
cmp eax, 0x7d1
je 0x4bf092
cmp eax, 4
jne 0x4bf10e
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x654ec216
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf0dd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf0c0
cmp edx, 0x14a6b520
je 0x4bf0e6
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf0b0
push 0x969696
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edx, 0x4cd469
mov ecx, 0x4db098
call fcn.004c16a0
mov edi, dword [0x4db870]
xor ecx, ecx
test al, al
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
je 0x4bf1b9
mov esi, dword [eax + edi + 0x20]
add eax, edi
mov dword [esp + 0x1c], eax
add esi, edi
mov ecx, dword [esi]
mov edx, 0x5ec92e49
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf171
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf154
cmp edx, 0x65b0d243
je 0x4bf17a
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf144
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, 0x4db098
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b7450
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call esi
jmp 0x4bf48d
mov esi, dword [eax + edi + 0x20]
add eax, edi
add esi, edi
mov dword [esp + 0x1c], eax
cmp byte [0x4db019], 0
je 0x4bf332
mov ecx, dword [esi]
mov edx, 0xade668e9
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf1ff
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf1e2
cmp edx, 0x47dc82a3
je 0x4bf208
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf1d2
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x59
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x64]
add eax, edi
mov byte [esp + 0x64], 0x1d
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0x6f
lea ecx, [esp + 0x64]
mov byte [esp + 0x65], al
call fcn.004b6890
push 0x75
lea ecx, [esp + 0x64]
mov byte [esp + 0x66], al
call fcn.004b6890
push 0x72
lea ecx, [esp + 0x64]
mov byte [esp + 0x67], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0x64]
mov byte [esp + 0x68], al
call fcn.004b6890
push 0x49
lea ecx, [esp + 0x64]
mov byte [esp + 0x69], al
call fcn.004b6890
push 0x6e
lea ecx, [esp + 0x64]
mov byte [esp + 0x6a], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0x64]
mov byte [esp + 0x6b], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x64]
mov byte [esp + 0x6c], al
call fcn.004b6890
push 0x78
lea ecx, [esp + 0x64]
mov byte [esp + 0x6d], al
call fcn.004b6890
mov byte [esp + 0x6a], al
xor esi, esi
mov byte [esp + 0x6b], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x65]
call fcn.004b68b0
lea ecx, [esp + 0x60]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x65]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bf2d0
push 0xa
lea ecx, [esp + 0x65]
call fcn.004b68b0
lea ecx, [esp + 0x61]
mov byte [eax], 0
call fcn.004b68a0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
jmp 0x4bf48d
mov ecx, dword [esi]
mov edx, 0x9671a9ff
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf35f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf342
cmp edx, 0x56eb82c5
je 0x4bf368
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf332
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x58]
add eax, edi
mov byte [esp + 0x58], 0x10
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0xffffffffffffffe0
lea ecx, [esp + 0x58]
mov byte [esp + 0x59], al
call fcn.004b6890
push 0xfffffffffffffff8
lea ecx, [esp + 0x58]
mov byte [esp + 0x5a], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0x58]
mov byte [esp + 0x5b], al
call fcn.004b6890
push 0xffffffffffffffc8
lea ecx, [esp + 0x58]
mov byte [esp + 0x5c], al
call fcn.004b6890
push 0xffffffffffffffed
lea ecx, [esp + 0x58]
mov byte [esp + 0x5d], al
call fcn.004b6890
push 0xffffffffffffffe4
lea ecx, [esp + 0x58]
mov byte [esp + 0x5e], al
call fcn.004b6890
push 0xffffffffffffffe5
lea ecx, [esp + 0x58]
mov byte [esp + 0x5f], al
call fcn.004b6890
push 0xffffffffffffffea
lea ecx, [esp + 0x58]
mov byte [esp + 0x60], al
call fcn.004b6890
push 0xfffffffffffffff1
lea ecx, [esp + 0x58]
mov byte [esp + 0x61], al
call fcn.004b6890
mov byte [esp + 0x5e], al
xor esi, esi
mov byte [esp + 0x5f], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x59]
call fcn.004b68b0
lea ecx, [esp + 0x54]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x59]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bf430
push 0xa
lea ecx, [esp + 0x59]
call fcn.004b68b0
lea ecx, [esp + 0x55]
mov byte [eax], 0
call fcn.004b68a0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x6a984433
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf4dd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf4c0
cmp edx, 0x4a3d2195
je 0x4bf4e6
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf4b0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x555555
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4db7d0], 2
mov dword [esp + 0x760], 0x37
mov dword [esp + 0x764], 0x15b
jne 0x4bf5a5
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xc4a98ddc
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf57d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf560
cmp edx, 0xa41a6f62
je 0x4bf586
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf550
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0xcccccc
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
jmp 0x4bf630
mov eax, dword [0x4db7c0]
cmp eax, 0x7d2
je 0x4bf5ba
cmp eax, 5
jne 0x4bf63e
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xb796e276
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf60d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf5f0
cmp edx, 0x4b2f3640
je 0x4bf616
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf5e0
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x969696
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [esi + 0x1c]
push dword [esp + 0x28]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edx, 0x4cd469
mov ecx, 0x4db0c8
call fcn.004c16a0
xor ecx, ecx
mov dword [esp + 0x14], ecx
test al, al
je 0x4bf83d
cmp byte [0x4db7c6], cl
je 0x4bf6f5
mov edi, dword [0x4db870]
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x3c8b25ae
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf6ad
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf690
cmp edx, 0x4e7b43ba
je 0x4bf6b6
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf680
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
mov ecx, 0x4db0c8
movzx edx, word [eax + edi]
mov eax, dword [esi + 0x1c]
lea eax, [eax + edx*4]
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b7450
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call esi
jmp 0x4bfbad
mov edi, dword [0x4db880]
mov dword [esp + 0x764], 0x159
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x8195628e
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf74d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf730
cmp edx, 0xbb1f5a55
je 0x4bf756
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf720
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x2c]
mov eax, dword [edx + 0x24]
push dword [esp + 0x28]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db870]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x78cb14e2
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf7cd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf7b0
cmp edx, 0x3fd587e
je 0x4bf7d6
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf7a0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, 0x4db0c8
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b7440
push eax
push 0
lea eax, [esp + 0x448]
mov ecx, 0x4db884
push eax
call fcn.004b73f0
mov ecx, eax
call fcn.004b7450
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call esi
lea ecx, [esp + 0x440]
call fcn.004b7630
jmp 0x4bfbad
mov edi, dword [0x4db870]
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4db019], 0
je 0x4bfa51
mov ecx, dword [esi]
mov edx, 0x69c0021e
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf88f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf872
cmp edx, 0x18d74caa
je 0x4bf898
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bf862
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x59
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x90]
add eax, edi
mov byte [esp + 0x90], 0x67
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0x6f
lea ecx, [esp + 0x90]
mov byte [esp + 0x91], al
call fcn.004b6890
push 0x75
lea ecx, [esp + 0x90]
mov byte [esp + 0x92], al
call fcn.004b6890
push 0x72
lea ecx, [esp + 0x90]
mov byte [esp + 0x93], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0x90]
mov byte [esp + 0x94], al
call fcn.004b6890
push 0x50
lea ecx, [esp + 0x90]
mov byte [esp + 0x95], al
call fcn.004b6890
push 0x61
lea ecx, [esp + 0x90]
mov byte [esp + 0x96], al
call fcn.004b6890
push 0x73
lea ecx, [esp + 0x90]
mov byte [esp + 0x97], al
call fcn.004b6890
push 0x73
lea ecx, [esp + 0x90]
mov byte [esp + 0x98], al
call fcn.004b6890
push 0x77
lea ecx, [esp + 0x90]
mov byte [esp + 0x99], al
call fcn.004b6890
push 0x6f
lea ecx, [esp + 0x90]
mov byte [esp + 0x9a], al
call fcn.004b6890
push 0x72
lea ecx, [esp + 0x90]
mov byte [esp + 0x9b], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0x90]
mov byte [esp + 0x9c], al
call fcn.004b6890
mov byte [esp + 0x99], al
xor esi, esi
mov byte [esp + 0x9a], 0
nop dword [eax]
push esi
lea ecx, [esp + 0x91]
call fcn.004b68b0
lea ecx, [esp + 0x8c]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x91]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x4bf9e0
push 0xd
lea ecx, [esp + 0x91]
call fcn.004b68b0
lea ecx, [esp + 0x8d]
mov byte [eax], 0
call fcn.004b68a0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
jmp 0x4bfbad
mov ecx, dword [esi]
mov edx, 0x5b79f9e5
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfa7e
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfa61
cmp edx, 0xd4e46c6f
je 0x4bfa87
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bfa51
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x4c]
add eax, edi
mov byte [esp + 0x4c], 0x17
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0xffffffffffffffe0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x4d], al
call fcn.004b6890
push 0xfffffffffffffff8
lea ecx, [esp + 0x4c]
mov byte [esp + 0x4e], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0x4c]
mov byte [esp + 0x4f], al
call fcn.004b6890
push 0xffffffffffffffcf
lea ecx, [esp + 0x4c]
mov byte [esp + 0x50], al
call fcn.004b6890
push 0xffffffffffffffe0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x51], al
call fcn.004b6890
push 0xfffffffffffffff0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x52], al
call fcn.004b6890
push 0xffffffffffffffee
lea ecx, [esp + 0x4c]
mov byte [esp + 0x53], al
call fcn.004b6890
push 0xffffffffffffffeb
lea ecx, [esp + 0x4c]
mov byte [esp + 0x54], al
call fcn.004b6890
push 0xfffffffffffffffc
lea ecx, [esp + 0x4c]
mov byte [esp + 0x55], al
call fcn.004b6890
mov byte [esp + 0x52], al
xor esi, esi
mov byte [esp + 0x53], 0
nop word [eax + eax]
push esi
lea ecx, [esp + 0x4d]
call fcn.004b68b0
lea ecx, [esp + 0x48]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x4d]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bfb50
push 0xa
lea ecx, [esp + 0x4d]
call fcn.004b68b0
lea ecx, [esp + 0x49]
mov byte [eax], 0
call fcn.004b68a0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x80727285
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfbfd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfbe0
cmp edx, 0xdc70b82b
je 0x4bfc06
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bfbd0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x555555
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x232e7e92
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfc7d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfc60
cmp edx, 0x47743a41
je 0x4bfc86
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bfc50
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x20c]
mov eax, dword [edx + 0x24]
push dword [esp + 0x28]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
movaps xmm0, xmmword [esp + 0x8c0]
mov ecx, 0x4db0b0
movaps xmmword [esp + 0x760], xmm0
push 0x4cd469
mov dword [esp + 0x768], 0x1fb
call fcn.004b8aa0
test al, al
je 0x4c040a
cmp dword [0x4db7c0], 0xfa1
jne 0x4bfd6e
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x80bb4cf1
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfd3d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfd20
cmp edx, 0x60c68147
je 0x4bfd46
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bfd10
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x828282
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db870]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4db019], cl
je 0x4c00a1
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xd76ffd05
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfdcd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfdb0
cmp edx, 0xa2a6e94f
je 0x4bfdd6
inc dword [esp + 0x14]
add esi, 4
jmp 0x4bfda0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x48
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xd4]
add eax, edi
mov byte [esp + 0xd4], 0x1e
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0x61
lea ecx, [esp + 0xd4]
mov byte [esp + 0xd5], al
call fcn.004b6890
push 0x76
lea ecx, [esp + 0xd4]
mov byte [esp + 0xd6], al
call fcn.004b6890
push 0x69
lea ecx, [esp + 0xd4]
mov byte [esp + 0xd7], al
call fcn.004b6890
push 0x6e
lea ecx, [esp + 0xd4]
mov byte [esp + 0xd8], al
call fcn.004b6890
push 0x67
lea ecx, [esp + 0xd4]
mov byte [esp + 0xd9], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0xd4]
mov byte [esp + 0xda], al
call fcn.004b6890
push 0x74
lea ecx, [esp + 0xd4]
mov byte [esp + 0xdb], al
call fcn.004b6890
push 0x72
lea ecx, [esp + 0xd4]
mov byte [esp + 0xdc], al
call fcn.004b6890
push 0x6f
lea ecx, [esp + 0xd4]
mov byte [esp + 0xdd], al
call fcn.004b6890
push 0x75
lea ecx, [esp + 0xd4]
mov byte [esp + 0xde], al
call fcn.004b6890
push 0x62
lea ecx, [esp + 0xd4]
mov byte [esp + 0xdf], al
call fcn.004b6890
push 0x6c
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe0], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe1], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe2], al
call fcn.004b6890
push 0x73
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe3], al
call fcn.004b6890
push 0x69
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe4], al
call fcn.004b6890
mov byte [esp + 0xe1], al
lea ecx, [esp + 0xd0]
push 0x67
call fcn.004b6890
push 0x6e
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe6], al
call fcn.004b6890
push 0x69
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe7], al
call fcn.004b6890
push 0x6e
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe8], al
call fcn.004b6890
push 0x67
lea ecx, [esp + 0xd4]
mov byte [esp + 0xe9], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0xd4]
mov byte [esp + 0xea], al
call fcn.004b6890
push 0x69
lea ecx, [esp + 0xd4]
mov byte [esp + 0xeb], al
call fcn.004b6890
push 0x6e
lea ecx, [esp + 0xd4]
mov byte [esp + 0xec], al
call fcn.004b6890
push 0x3f
lea ecx, [esp + 0xd4]
mov byte [esp + 0xed], al
call fcn.004b6890
mov byte [esp + 0xea], al
xor esi, esi
mov byte [esp + 0xeb], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0xd5]
call fcn.004b68b0
lea ecx, [esp + 0xd0]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0xd5]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0x1a
jb 0x4c0030
push 0x1a
lea ecx, [esp + 0xd5]
call fcn.004b68b0
lea ecx, [esp + 0xd1]
mov byte [eax], 0
call fcn.004b68a0
push 1
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
jmp 0x4c03ad
mov ecx, dword [esi]
mov edx, 0x6ad8b330
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c00ce
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c00b1
cmp edx, 0x382de7e8
je 0x4c00d7
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c00a1
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xf0]
add eax, edi
mov byte [esp + 0xf0], 0x74
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0xffffffffffffffee
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf1], al
call fcn.004b6890
push 0xffffffffffffffe7
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf2], al
call fcn.004b6890
push 0xffffffffffffffed
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf3], al
call fcn.004b6890
push 0xffffffffffffffe8
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf4], al
call fcn.004b6890
push 0xffffffffffffffea
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf5], al
call fcn.004b6890
push 0xffffffffffffffeb
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf6], al
call fcn.004b6890
push 0xffffffffffffffe8
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf7], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf8], al
call fcn.004b6890
push 0xffffffffffffffef
lea ecx, [esp + 0xf0]
mov byte [esp + 0xf9], al
call fcn.004b6890
push 0xfffffffffffffff0
lea ecx, [esp + 0xf0]
mov byte [esp + 0xfa], al
call fcn.004b6890
push 0xffffffffffffffee
lea ecx, [esp + 0xf0]
mov byte [esp + 0xfb], al
call fcn.004b6890
push 0xffffffffffffffe1
lea ecx, [esp + 0xf0]
mov byte [esp + 0xfc], al
call fcn.004b6890
push 0xffffffffffffffeb
lea ecx, [esp + 0xf0]
mov byte [esp + 0xfd], al
call fcn.004b6890
push 0xffffffffffffffe5
lea ecx, [esp + 0xf0]
mov byte [esp + 0xfe], al
call fcn.004b6890
push 0xffffffffffffffec
lea ecx, [esp + 0xf0]
mov byte [esp + 0xff], al
call fcn.004b6890
push 0xfffffffffffffffb
lea ecx, [esp + 0xf0]
mov byte [esp + 0x100], al
call fcn.004b6890
mov byte [esp + 0xfd], al
lea ecx, [esp + 0xec]
push 0x20
call fcn.004b6890
push 0xfffffffffffffff1
lea ecx, [esp + 0xf0]
mov byte [esp + 0x102], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0xf0]
mov byte [esp + 0x103], al
call fcn.004b6890
push 0xffffffffffffffe2
lea ecx, [esp + 0xf0]
mov byte [esp + 0x104], al
call fcn.004b6890
push 0xfffffffffffffff5
lea ecx, [esp + 0xf0]
mov byte [esp + 0x105], al
call fcn.004b6890
push 0xffffffffffffffee
lea ecx, [esp + 0xf0]
mov byte [esp + 0x106], al
call fcn.004b6890
push 0xffffffffffffffe4
lea ecx, [esp + 0xf0]
mov byte [esp + 0x107], al
call fcn.004b6890
push 0xffffffffffffffee
lea ecx, [esp + 0xf0]
mov byte [esp + 0x108], al
call fcn.004b6890
push 0xffffffffffffffec
lea ecx, [esp + 0xf0]
mov byte [esp + 0x109], al
call fcn.004b6890
push 0x3f
lea ecx, [esp + 0xf0]
mov byte [esp + 0x10a], al
call fcn.004b6890
mov byte [esp + 0x107], al
xor esi, esi
mov byte [esp + 0x108], 0
push esi
lea ecx, [esp + 0xf1]
call fcn.004b68b0
lea ecx, [esp + 0xec]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0xf1]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0x1b
jb 0x4c0341
push 0x1b
lea ecx, [esp + 0xf1]
call fcn.004b68b0
lea ecx, [esp + 0xed]
mov byte [eax], 0
call fcn.004b68a0
push 1
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xa8753610
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0401
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c03e0
cmp edx, 0x338320e6
je 0x4c0576
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c03d0
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x87e10619
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c045d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0440
cmp edx, 0xa9666caf
je 0x4c0466
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c0430
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x5dc9ff
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db870]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x84e10160
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c04dd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c04c0
cmp edx, 0xbfabb258
je 0x4c04e6
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c04b0
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
mov ecx, 0x4db0b0
movzx edx, word [eax + edi]
mov eax, dword [esi + 0x1c]
lea eax, [eax + edx*4]
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b7450
push 1
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call esi
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x85e102f3
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c056d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0550
cmp edx, 0x165aa55
je 0x4c0576
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c0540
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x555555
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4db7c0], 0xfa2
mov dword [esp + 0x760], 0x49
mov dword [esp + 0x764], 0x195
jne 0x4c0640
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xe124f3c0
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c060f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c05f2
cmp edx, 0x36fdcf96
je 0x4c0618
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c05e2
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x828282
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db870]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4db019], cl
je 0x4c07e2
nop word [eax + eax]
mov ecx, dword [esi]
mov edx, 0xf455bdac
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c069d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0680
cmp edx, 0xc0d72144
je 0x4c06a6
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c0670
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x52
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x70]
add eax, edi
mov byte [esp + 0x70], 0x66
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x70]
mov byte [esp + 0x71], al
call fcn.004b6890
push 0x6d
lea ecx, [esp + 0x70]
mov byte [esp + 0x72], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x70]
mov byte [esp + 0x73], al
call fcn.004b6890
push 0x6d
lea ecx, [esp + 0x70]
mov byte [esp + 0x74], al
call fcn.004b6890
push 0x62
lea ecx, [esp + 0x70]
mov byte [esp + 0x75], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x70]
mov byte [esp + 0x76], al
call fcn.004b6890
push 0x72
lea ecx, [esp + 0x70]
mov byte [esp + 0x77], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0x70]
mov byte [esp + 0x78], al
call fcn.004b6890
push 0x4d
lea ecx, [esp + 0x70]
mov byte [esp + 0x79], al
call fcn.004b6890
push 0x65
lea ecx, [esp + 0x70]
mov byte [esp + 0x7a], al
call fcn.004b6890
mov byte [esp + 0x77], al
xor esi, esi
mov byte [esp + 0x78], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x71]
call fcn.004b68b0
lea ecx, [esp + 0x6c]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0x71]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x4c0780
push 0xb
lea ecx, [esp + 0x71]
call fcn.004b68b0
lea ecx, [esp + 0x6d]
mov byte [eax], 0
call fcn.004b68a0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
jmp 0x4c09dd
mov ecx, dword [esi]
mov edx, 0xbd2c7cb3
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c080f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c07f2
cmp edx, 0xf8116d89
je 0x4c0818
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c07e2
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0xffffffffffffffc7
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xa0]
add eax, edi
mov byte [esp + 0xa0], 0x4c
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0xffffffffffffffe0
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa1], al
call fcn.004b6890
push 0xffffffffffffffef
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa2], al
call fcn.004b6890
push 0xffffffffffffffee
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa3], al
call fcn.004b6890
push 0xffffffffffffffec
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa4], al
call fcn.004b6890
push 0xffffffffffffffed
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa5], al
call fcn.004b6890
push 0xffffffffffffffe8
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa6], al
call fcn.004b6890
push 0xfffffffffffffff2
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa7], al
call fcn.004b6890
push 0xfffffffffffffffc
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa8], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0xa0]
mov byte [esp + 0xa9], al
call fcn.004b6890
push 0xffffffffffffffcc
lea ecx, [esp + 0xa0]
mov byte [esp + 0xaa], al
call fcn.004b6890
push 0xffffffffffffffe5
lea ecx, [esp + 0xa0]
mov byte [esp + 0xab], al
call fcn.004b6890
push 0xffffffffffffffed
lea ecx, [esp + 0xa0]
mov byte [esp + 0xac], al
call fcn.004b6890
push 0xffffffffffffffff
lea ecx, [esp + 0xa0]
mov byte [esp + 0xad], al
call fcn.004b6890
mov byte [esp + 0xaa], al
xor esi, esi
mov byte [esp + 0xab], 0
push esi
lea ecx, [esp + 0xa1]
call fcn.004b68b0
lea ecx, [esp + 0x9c]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0xa1]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x4c0971
push 0xe
lea ecx, [esp + 0xa1]
call fcn.004b68b0
lea ecx, [esp + 0x9d]
mov byte [eax], 0
call fcn.004b68a0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xea138daa
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0a2d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0a10
cmp edx, 0x8d1e18c4
je 0x4c0a36
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c0a00
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x555555
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4db7c0], 0xfa3
mov dword [esp + 0x760], 0xe6
mov dword [esp + 0x764], 0x195
jne 0x4c0b00
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xdc2c6f39
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0acf
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0ab2
cmp edx, 0x9c4a2c0f
je 0x4c0ad8
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c0aa2
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x828282
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4db870]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4db019], cl
je 0x4c0d61
nop word [eax + eax]
mov ecx, dword [esi]
mov edx, 0x25708247
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0b5d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0b40
cmp edx, 0xfb7aeced
je 0x4c0b66
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c0b30
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x46
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xc0]
add eax, edi
mov byte [esp + 0xc0], 0x33
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0x6f
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc1], al
call fcn.004b6890
push 0x72
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc2], al
call fcn.004b6890
push 0x67
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc3], al
call fcn.004b6890
push 0x6f
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc4], al
call fcn.004b6890
push 0x74
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc5], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc6], al
call fcn.004b6890
push 0x50
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc7], al
call fcn.004b6890
push 0x61
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc8], al
call fcn.004b6890
push 0x73
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc9], al
call fcn.004b6890
push 0x73
lea ecx, [esp + 0xc0]
mov byte [esp + 0xca], al
call fcn.004b6890
push 0x77
lea ecx, [esp + 0xc0]
mov byte [esp + 0xcb], al
call fcn.004b6890
push 0x6f
lea ecx, [esp + 0xc0]
mov byte [esp + 0xcc], al
call fcn.004b6890
push 0x72
lea ecx, [esp + 0xc0]
mov byte [esp + 0xcd], al
call fcn.004b6890
push 0x64
lea ecx, [esp + 0xc0]
mov byte [esp + 0xce], al
call fcn.004b6890
push 0x3f
lea ecx, [esp + 0xc0]
mov byte [esp + 0xcf], al
call fcn.004b6890
mov byte [esp + 0xcc], al
xor esi, esi
mov byte [esp + 0xcd], 0
nop dword [eax]
push esi
lea ecx, [esp + 0xc1]
call fcn.004b68b0
lea ecx, [esp + 0xbc]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0xc1]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x4c0cf0
push 0x10
lea ecx, [esp + 0xc1]
call fcn.004b68b0
lea ecx, [esp + 0xbd]
mov byte [eax], 0
call fcn.004b68a0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
jmp 0x4c0f5c
mov ecx, dword [esi]
mov edx, 0x5207fd06
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0d8e
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0d71
cmp edx, 0x1f4de412
je 0x4c0d97
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c0d61
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push 0xffffffffffffffc7
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xb0]
add eax, edi
mov byte [esp + 0xb0], 0x68
mov dword [esp + 0x20], eax
call fcn.004b6890
push 0xffffffffffffffe0
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb1], al
call fcn.004b6890
push 0xffffffffffffffe1
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb2], al
call fcn.004b6890
push 0xfffffffffffffffb
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb3], al
call fcn.004b6890
push 0xffffffffffffffeb
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb4], al
call fcn.004b6890
push 0xffffffffffffffe8
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb5], al
call fcn.004b6890
push 0x20
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb6], al
call fcn.004b6890
push 0xffffffffffffffcf
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb7], al
call fcn.004b6890
push 0xffffffffffffffe0
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb8], al
call fcn.004b6890
push 0xfffffffffffffff0
lea ecx, [esp + 0xb0]
mov byte [esp + 0xb9], al
call fcn.004b6890
push 0xffffffffffffffee
lea ecx, [esp + 0xb0]
mov byte [esp + 0xba], al
call fcn.004b6890
push 0xffffffffffffffeb
lea ecx, [esp + 0xb0]
mov byte [esp + 0xbb], al
call fcn.004b6890
push 0xfffffffffffffffc
lea ecx, [esp + 0xb0]
mov byte [esp + 0xbc], al
call fcn.004b6890
push 0x3f
lea ecx, [esp + 0xb0]
mov byte [esp + 0xbd], al
call fcn.004b6890
mov byte [esp + 0xba], al
xor esi, esi
mov byte [esp + 0xbb], 0
push esi
lea ecx, [esp + 0xb1]
call fcn.004b68b0
lea ecx, [esp + 0xac]
movzx eax, byte [eax]
push eax
call fcn.004b6890
push esi
lea ecx, [esp + 0xb1]
mov byte [esp + 0x1f], al
call fcn.004b68b0
mov cl, byte [esp + 0x1b]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x4c0ef0
push 0xe
lea ecx, [esp + 0xb1]
call fcn.004b68b0
lea ecx, [esp + 0xad]
mov byte [eax], 0
call fcn.004b68a0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x34]
call dword [esp + 0x30]
mov edi, dword [0x4db880]
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop word [eax + eax]
mov ecx, dword [esi]
mov edx, 0x93a1b8b6
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0fad
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0f90
inc dword [esp + 0x14]
add esi, 4
jmp 0x4c0f80
call dword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
mov ecx, dword [esp + 0x90c]
pop edi
pop esi
xor ecx, esp
call fcn.004cadd9
mov esp, ebp
pop ebp
ret