Function at 0x4b1800
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x13c]
cmp eax, dword [ecx + 8]
jbe 0x4b2f69
sub esp, 0x1bc
mov ebx, dword [esp + 0x1c4]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
ja 0x4b1ff0
xchg ebp, eax
cmp al, 4
xchg ebp, eax
ja 0x4b1b4a
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jbe 0x4b19f4
xchg ebp, eax
cmp al, 3
xchg ebp, eax
jne 0x4b1993
mov ebp, dword [ebx + 0x18]
test ebp, ebp
je 0x4b1883
mov dword [esp + 0x88], ebp
mov esi, dword [esp + 0x1c0]
xor eax, eax
xor ecx, ecx
xor edx, edx
xor edi, edi
xor eax, eax
mov dword [esp + 0x58], eax
xor eax, eax
jmp 0x4b2df3
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x18c]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0x18c], 6
mov ecx, dword [esp + 0x1c0]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
mov eax, edx
mov edx, dword [ecx + 8]
mov esi, ecx
lea ecx, [ebx + 1]
cmp edx, ecx
jae 0x4b1924
mov dword [esp + 0xb0], esi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b1912
mov dword [edi], eax
jmp 0x4b1917
call fcn.0045d600
mov esi, edi
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebx + 1]
mov dword [esi + 4], ecx
mov ecx, dword [0x605b20]
lea edx, [ebx + ebx*2]
lea edi, [ebp + edx*8]
test ecx, ecx
jne 0x4b1949
lea esi, [esp + 0x18c]
call fcn.0045dcb4
jmp 0x4b196d
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x18c]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0x18]
mov edx, dword [ebx + 0x1c]
movzx ebx, word [ebx + 2]
mov ebp, dword [esp + 0x1c0]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], bx
call fcn.004b35e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1d0], edx
mov byte [esp + 0x1d4], bl
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 1
xchg ebp, eax
je 0x4b1b1a
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x4b2b04
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x1a4]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0x1a4], 6
mov ecx, dword [esp + 0x1c0]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
mov eax, edx
mov edx, dword [ecx + 8]
mov esi, ecx
lea ecx, [ebx + 1]
cmp edx, ecx
jae 0x4b1aab
mov dword [esp + 0xb0], esi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b1a99
mov dword [edi], eax
jmp 0x4b1a9e
call fcn.0045d600
mov esi, edi
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebx + 1]
mov dword [esi + 4], ecx
mov ecx, dword [0x605b20]
lea edx, [ebx + ebx*2]
lea edi, [ebp + edx*8]
test ecx, ecx
jne 0x4b1ad0
lea esi, [esp + 0x1a4]
call fcn.0045dcb4
jmp 0x4b1af4
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
mov dword [esp + 0x1c8], 0
mov dword [esp + 0x1cc], 0
mov dword [esp + 0x1d0], 0
mov byte [esp + 0x1d4], 0
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 6
xchg ebp, eax
ja 0x4b1c2c
xchg ebp, eax
cmp al, 5
xchg ebp, eax
jne 0x4b1bc4
mov eax, dword [0x5dba80]
mov ecx, dword [0x5dba84]
mov edx, dword [0x5dba88]
mov ebx, dword [esp + 0x1c0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], 0
call fcn.004b35e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1d0], edx
mov byte [esp + 0x1d4], bl
add esp, 0x1bc
ret
mov eax, dword [0x5dba70]
mov ecx, dword [0x5dba74]
mov edx, dword [0x5dba78]
mov ebx, dword [esp + 0x1c0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], 0
call fcn.004b35e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1d0], edx
mov byte [esp + 0x1d4], bl
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 7
xchg ebp, eax
jne 0x4b1d71
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x174]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0x174], 3
mov ecx, dword [esp + 0x1c0]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jae 0x4b1cdf
mov dword [esp + 0xb0], edi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b1cc8
mov dword [edi], eax
jmp 0x4b1ccd
call fcn.0045d600
mov esi, dword [esp + 0x1c0]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x605b20]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x4b1d04
lea esi, [esp + 0x174]
call fcn.0045dcb4
jmp 0x4b1d28
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x174]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c0]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x4b2dba
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 1
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 8
xchg ebp, eax
jne 0x4b1eb6
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x15c]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0x15c], 3
mov ecx, dword [esp + 0x1c0]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jae 0x4b1e24
mov dword [esp + 0xb0], edi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b1e0d
mov dword [edi], eax
jmp 0x4b1e12
call fcn.0045d600
mov esi, dword [esp + 0x1c0]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x605b20]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x4b1e49
lea esi, [esp + 0x15c]
call fcn.0045dcb4
jmp 0x4b1e6d
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x15c]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c0]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x4b2db5
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 2
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x144]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0x144], 3
mov ecx, dword [esp + 0x1c0]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jae 0x4b1f5e
mov dword [esp + 0xb0], edi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b1f47
mov dword [edi], eax
jmp 0x4b1f4c
call fcn.0045d600
mov esi, dword [esp + 0x1c0]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x605b20]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x4b1f83
lea esi, [esp + 0x144]
call fcn.0045dcb4
jmp 0x4b1fa7
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x144]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c0]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x4b2db0
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 4
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
ja 0x4b26a5
xchg ebp, eax
cmp al, 0xb
xchg ebp, eax
jbe 0x4b2426
xchg ebp, eax
cmp al, 0xc
xchg ebp, eax
je 0x4b22ec
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
mov ebp, dword [ebx + 0x30]
mov dword [esp + 0x88], ebp
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0xe4]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0xe4], 2
mov ecx, dword [esp + 0x1c0]
mov esi, ebx
mov ebx, dword [ecx]
mov dword [esp + 0xb0], ebx
mov edi, ebp
mov ebp, dword [ebx + 4]
mov edx, dword [ebx]
mov ecx, dword [ebx + 8]
lea ebx, [ebp + 1]
cmp ecx, ebx
jae 0x4b20c3
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b20aa
mov dword [edi], eax
jmp 0x4b20af
call fcn.0045d600
mov esi, dword [esp + 0x1c4]
mov edi, dword [esp + 0x88]
mov ebp, ecx
mov edx, eax
xor eax, eax
lea ecx, [ebp + 1]
mov ebx, dword [esp + 0xb0]
mov dword [ebx + 4], ecx
mov ecx, dword [0x605b20]
lea ebx, [ebp + ebp*2]
lea edx, [edx + ebx*8]
test ecx, ecx
jne 0x4b20f3
mov edi, edx
mov ebx, esi
lea esi, [esp + 0xe4]
call fcn.0045dcb4
jmp 0x4b2119
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edx
lea eax, [esp + 0xe4]
mov dword [esp + 8], eax
call fcn.004108a0
xor eax, eax
mov ebx, dword [esp + 0x1c4]
mov edx, dword [esp + 0x1c0]
mov ebp, dword [edx]
mov ecx, dword [ebp + 4]
mov ebp, dword [ebp]
mov esi, dword [esp + 0x84]
cmp esi, ecx
jae 0x4b2da9
mov edi, dword [esp + 0x88]
shl edi, 1
mov ecx, esi
lea esi, [esi + esi*2]
lea ebp, [ebp + esi*8 + 8]
mov dword [ebp], edi
mov ebp, dword [edx]
lea esi, [edi + 1]
cmp dword [ebp + 0x10], esi
jge 0x4b2159
mov dword [ebp + 0x10], esi
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 4]
test ebp, ebp
jbe 0x4b2da0
mov eax, dword [esi]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004b1800
mov eax, dword [esp + 0x1c0]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c4]
mov edx, dword [edx + 0x30]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x80], ebx
nop
mov ecx, dword [ecx + 4]
mov dword [esp + 0x7c], ecx
mov ebp, dword [esp + 8]
mov dword [esp + 0x78], ebp
movzx esi, byte [esp + 0x14]
xchg esi, eax
mov byte [esp + 0x36], al
xchg esi, eax
lea edi, [esp + 0xcc]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0xcc], 2
mov eax, dword [esp + 0x1c0]
mov ecx, dword [eax]
mov edi, dword [ecx + 4]
mov ebx, dword [ecx]
mov esi, dword [ecx + 8]
lea ebp, [edi + 1]
cmp esi, ebp
jae 0x4b2247
mov dword [esp + 0xb0], ecx
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b222c
mov dword [edi], eax
jmp 0x4b2231
call fcn.0045d600
mov edx, dword [esp + 0x88]
mov ebx, eax
mov eax, dword [esp + 0x1c0]
mov ebp, ecx
mov ecx, edi
mov edi, ebp
lea ebp, [edi + 1]
mov dword [ecx + 4], ebp
mov ecx, dword [0x605b20]
lea ebp, [edi + edi*2]
lea edi, [ebx + ebp*8]
test ecx, ecx
jne 0x4b226b
lea esi, [esp + 0xcc]
call fcn.0045dcb4
jmp 0x4b2296
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xcc]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x1c0]
mov edx, dword [esp + 0x88]
mov ebx, dword [eax]
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x7c]
cmp ebp, ecx
jae 0x4b2d99
shl edx, 1
or edx, 1
lea esi, [ebp + ebp*2]
lea ebx, [ebx + esi*8 + 8]
mov dword [ebx], edx
mov ebx, dword [eax]
inc edx
cmp dword [ebx + 0x10], edx
jge 0x4b22c3
mov dword [ebx + 0x10], edx
mov edx, dword [esp + 0x84]
test edx, edx
je 0x4b22d6
mov ebx, dword [esp + 0x78]
test ebx, ebx
jne 0x4b22e1
xor esi, esi
xor ecx, ecx
xor edx, edx
jmp 0x4b2cf6
mov esi, edx
shl edx, 1
mov edi, dword [eax]
jmp 0x4b2cae
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0xfc], 3
mov ecx, dword [esp + 0x1c0]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jae 0x4b2394
mov dword [esp + 0xb0], edi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b237d
mov dword [edi], eax
jmp 0x4b2382
call fcn.0045d600
mov esi, dword [esp + 0x1c0]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x605b20]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x4b23b9
lea esi, [esp + 0xfc]
call fcn.0045dcb4
jmp 0x4b23dd
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xfc]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c0]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x4b2c9e
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 0x20
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
jne 0x4b256b
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x12c]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0x12c], 3
mov ecx, dword [esp + 0x1c0]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jae 0x4b24d9
mov dword [esp + 0xb0], edi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b24c2
mov dword [edi], eax
jmp 0x4b24c7
call fcn.0045d600
mov esi, dword [esp + 0x1c0]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x605b20]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x4b24fe
lea esi, [esp + 0x12c]
call fcn.0045dcb4
jmp 0x4b2522
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x12c]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c0]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x4b2c99
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 8
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0x114]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0x114], 3
mov ecx, dword [esp + 0x1c0]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 4]
mov eax, edx
mov edx, dword [ebx]
mov esi, ecx
mov ecx, dword [ebx + 8]
mov edi, ebx
lea ebx, [ebp + 1]
cmp ecx, ebx
jae 0x4b2613
mov dword [esp + 0xb0], edi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b25fc
mov dword [edi], eax
jmp 0x4b2601
call fcn.0045d600
mov esi, dword [esp + 0x1c0]
mov ebp, ecx
mov edx, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebp + 1]
mov dword [edi + 4], ecx
mov ecx, dword [0x605b20]
lea ebx, [ebp + ebp*2]
lea edi, [edx + ebx*8]
test ecx, ecx
jne 0x4b2638
lea esi, [esp + 0x114]
call fcn.0045dcb4
jmp 0x4b265c
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x114]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x1c0]
mov edx, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, ecx
jae 0x4b2c94
lea ecx, [eax + eax*2]
lea ecx, [edx + ecx*8 + 8]
mov dword [ecx], 0x10
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 0xf
xchg ebp, eax
jbe 0x4b28c9
xchg ebp, eax
cmp al, 0x10
xchg ebp, eax
je 0x4b282b
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x4b27fd
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
je 0x4b26ed
mov dword [esp + 0x88], ecx
mov dword [esp + 0xac], edx
xor eax, eax
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x4b2b42
mov ecx, dword [esp + 0x1c0]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
lea edi, [esp + 0xb4]
xor eax, eax
call fcn.0045d7da
mov byte [esp + 0xb4], 6
mov ecx, dword [esp + 0x1c0]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
mov eax, edx
mov edx, dword [ecx + 8]
mov esi, ecx
lea ecx, [ebx + 1]
cmp edx, ecx
jae 0x4b278e
mov dword [esp + 0xb0], esi
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xb0]
mov dword [edi + 8], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4b277c
mov dword [edi], eax
jmp 0x4b2781
call fcn.0045d600
mov esi, edi
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x88]
lea ecx, [ebx + 1]
mov dword [esi + 4], ecx
mov ecx, dword [0x605b20]
lea edx, [ebx + ebx*2]
lea edi, [ebp + edx*8]
test ecx, ecx
jne 0x4b27b3
lea esi, [esp + 0xb4]
call fcn.0045dcb4
jmp 0x4b27d7
lea eax, [0x503da0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.004108a0
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1c8], eax
shl eax, 1
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], 1
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 0x13
xchg ebp, eax
jne 0x4b2b04
mov eax, dword [ebx + 4]
mov dword [esp + 0xa8], eax
mov ecx, dword [ebx + 8]
mov dword [esp + 0x88], ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x4b2ad7
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
jbe 0x4b2a25
mov eax, dword [edx]
mov ecx, dword [esp + 0x1c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004b1800
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x1c4]
movzx ebp, word [ebp + 2]
mov esi, dword [esp + 0x1c0]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], bl
test bp, 0x20
setne al
mov byte [esp + 0x14], al
call fcn.004b3190
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
movzx ebx, byte [esp + 0x24]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1d0], edx
mov byte [esp + 0x1d4], bl
add esp, 0x1bc
ret
xchg ebp, eax
cmp al, 0xe
xchg ebp, eax
jne 0x4b2972
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
jbe 0x4b2a1e
mov eax, dword [edx]
mov ecx, dword [esp + 0x1c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004b1800
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x1c4]
movzx ebp, word [ebp + 2]
mov esi, dword [esp + 0x1c0]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], bl
test bp, 0x20
setne al
mov byte [esp + 0x14], al
call fcn.004b34c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
movzx ebx, byte [esp + 0x24]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1d0], edx
mov byte [esp + 0x1d4], bl
add esp, 0x1bc
ret
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
test ecx, ecx
jbe 0x4b2a17
mov eax, dword [edx]
mov ecx, dword [esp + 0x1c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004b1800
mov eax, dword [esp + 0x1c4]
movzx eax, word [eax + 2]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
movzx edx, byte [esp + 0x14]
mov byte [esp + 0x37], dl
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x1c0]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov byte [esp + 0x10], dl
test ax, 0x20
setne al
mov byte [esp + 0x14], al
call fcn.004b3330
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x1c8], edx
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], ecx
movzx eax, byte [esp + 0x37]
mov byte [esp + 0x1d4], al
add esp, 0x1bc
ret
xor eax, eax
call fcn.0045d680
xor eax, eax
call fcn.0045d680
xor eax, eax
call fcn.0045d680
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x64], ebp
xchg edi, eax
mov byte [esp + 0x3a], al
xchg edi, eax
mov dword [esp + 0x70], esi
mov dword [esp + 0x84], edx
mov ecx, dword [eax + edx*4]
mov ebx, dword [esp + 0x1c0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.004b1800
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x1c0]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 4], esi
mov esi, dword [esp + 0x64]
mov dword [esp + 8], esi
mov esi, dword [esp + 0x5c]
mov dword [esp + 0xc], esi
movzx esi, byte [esp + 0x3a]
xchg esi, eax
mov byte [esp + 0x10], al
xchg esi, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov byte [esp + 0x20], bl
call fcn.004b2f80
mov eax, dword [esp + 0x84]
lea edx, [eax + 1]
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp + 0x2c]
movzx edi, byte [esp + 0x30]
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x88]
cmp edx, ecx
jl 0x4b2a2c
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x1cc], ebp
mov dword [esp + 0x1d0], ebx
xchg edi, eax
mov byte [esp + 0x1d4], al
xchg edi, eax
add esp, 0x1bc
ret
lea eax, [0x4f9fa0]
mov dword [esp], eax
lea eax, [0x53afb0]
mov dword [esp + 4], eax
call fcn.00433110
mov edx, dword [esp + 0x44]
inc edx
mov esi, eax
mov edi, ecx
mov ecx, dword [esp + 0x88]
mov eax, edx
mov edx, dword [esp + 0xac]
mov ecx, ebx
mov ebx, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x88]
cmp eax, ecx
jge 0x4b2c0e
mov dword [esp + 0x44], eax
mov edi, dword [edx + eax*4]
test eax, eax
jne 0x4b2b81
mov eax, dword [esp + 0x1c0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.004b1800
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, eax
mov eax, ecx
mov ecx, edx
jmp 0x4b2b1c
xchg ebp, eax
mov byte [esp + 0x39], al
xchg ebp, eax
mov dword [esp + 0x60], esi
mov dword [esp + 0x6c], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.004b1800
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x6c]
test ebp, ebp
je 0x4b2bbf
test edx, edx
jne 0x4b2bcc
xor ecx, ecx
xor ebp, ebp
xor eax, eax
xor ebx, ebx
jmp 0x4b2b1c
mov byte [esp + 0x3b], bl
mov edi, dword [esp + 0x1c0]
mov esi, edi
mov edi, dword [edi]
mov dword [esp + 0x9c], edi
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x94]
jmp 0x4b2c4e
movzx edx, byte [esp + 0x39]
test dl, dl
jne 0x4b2b1c
xor ebx, ebx
jmp 0x4b2b1c
mov dword [esp + 0x1c8], ebx
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1d0], edi
xchg ebp, eax
mov byte [esp + 0x1d4], al
xchg ebp, eax
add esp, 0x1bc
ret
mov edi, dword [esp + 0x9c]
movzx ebx, byte [esp + 0x3b]
mov esi, dword [esp + 0x1c0]
mov dword [esp + 0x50], ebp
mov ebp, dword [esp + 0x6c]
mov esi, dword [esp + 0x50]
test esi, esi
je 0x4b2bfa
mov ebp, dword [edi]
mov ebx, dword [edi + 4]
shr esi, 1
cmp ebx, esi
jbe 0x4b2c8b
lea ebx, [esi + esi*2]
lea esi, [ebp + ebx*8]
mov edi, dword [esp + 0x50]
test edi, 1
jne 0x4b2c7e
lea ebx, [ebp + ebx*8 + 4]
mov ebp, dword [ebx]
mov dword [ebx], edx
jmp 0x4b2c33
mov esi, dword [esi + 8]
lea ebx, [ebp + ebx*8 + 8]
mov dword [ebx], edx
mov ebp, esi
jmp 0x4b2c33
mov eax, esi
mov ecx, ebx
call fcn.0045d690
call fcn.0045d690
call fcn.0045d690
call fcn.0045d690
mov esi, dword [esp + 0x84]
mov edx, ebp
mov ebp, ecx
test edx, edx
je 0x4b2cea
mov dword [esp + 0x4c], edx
mov ecx, ebp
mov ebp, dword [edi]
mov esi, dword [edi + 4]
shr edx, 1
cmp esi, edx
jbe 0x4b2d90
lea edx, [edx + edx*2]
mov esi, dword [esp + 0x4c]
test esi, 1
jne 0x4b2ce0
lea edx, [ebp + edx*8 + 4]
mov ebp, dword [edx]
mov dword [edx], ebx
jmp 0x4b2ca3
lea edx, [ebp + edx*8 + 8]
mov ebp, dword [edx]
mov dword [edx], ebx
jmp 0x4b2ca3
mov ecx, dword [esp + 0x80]
movzx edx, byte [esp + 0x36]
test esi, esi
je 0x4b2d09
test ebp, ebp
je 0x4b2d09
mov ebx, dword [eax]
mov dword [esp + 0xa0], ebx
jmp 0x4b2d41
xor eax, eax
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x1c8], ecx
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1d0], eax
mov byte [esp + 0x1d4], dl
add esp, 0x1bc
ret
mov edi, dword [esp + 0xa0]
mov edx, eax
mov esi, ecx
mov ecx, ebx
mov ebx, edi
test ecx, ecx
je 0x4b2d7f
mov dword [esp + 0x54], ecx
mov edi, dword [ebx]
mov eax, edx
mov edx, dword [ebx + 4]
shr ecx, 1
cmp edx, ecx
jbe 0x4b2d87
lea edx, [ecx + ecx*2]
mov ecx, esi
lea esi, [edi + edx*8]
mov ebx, dword [esp + 0x54]
test ebx, 1
jne 0x4b2d74
lea edx, [edi + edx*8 + 4]
mov ebx, dword [edx]
mov dword [edx], ebp
jmp 0x4b2d32
mov ebx, dword [esi + 8]
lea edx, [edi + edx*8 + 8]
mov dword [edx], ebp
jmp 0x4b2d32
shl ebp, 1
mov eax, ebp
mov ecx, esi
jmp 0x4b2d0f
mov eax, ecx
mov ecx, edx
call fcn.0045d690
mov eax, edx
mov ecx, esi
call fcn.0045d690
mov eax, ebp
call fcn.0045d690
xor eax, eax
mov ecx, ebp
call fcn.0045d680
mov eax, esi
call fcn.0045d690
call fcn.0045d690
call fcn.0045d690
call fcn.0045d690
mov ebx, dword [esp + 0x1c4]
mov eax, dword [esp + 0x88]
mov edi, dword [esp + 0x1c0]
mov eax, dword [esp + 0x84]
mov edi, esi
mov dword [esp + 0x58], edx
mov esi, dword [esp + 0x1c0]
mov edx, ecx
mov ecx, ebp
mov ebp, dword [esp + 0x88]
cmp eax, ebp
jge 0x4b2edc
xchg edi, eax
mov byte [esp + 0x38], al
xchg edi, eax
mov edi, dword [ebx + 0x1c]
mov ebp, dword [ebx + 0x14]
mov dword [esp + 0xa4], ebp
lea ebp, [eax + 1]
cmp edi, ebp
jb 0x4b2f5f
cmp eax, ebp
ja 0x4b2f58
mov dword [esp + 0x40], eax
mov dword [esp + 0x84], ebp
mov dword [esp + 0x74], ecx
mov dword [esp + 0x68], edx
movzx ecx, word [ebx + 2]
mov dword [esp], esi
sub edi, eax
mov edx, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
shl eax, 2
sar edi, 0x1f
and eax, edi
mov edi, dword [esp + 0xa4]
add eax, edi
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], edx
mov word [esp + 0x10], cx
call fcn.004b35e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov ebp, dword [esp + 0x40]
test ebp, ebp
jne 0x4b2e92
mov ebp, eax
mov esi, ebx
jmp 0x4b2dbf
mov ebp, dword [esp + 0x74]
test ebp, ebp
je 0x4b2e9e
test eax, eax
jne 0x4b2eab
xor ecx, ecx
xor ebp, ebp
xor edx, edx
xor esi, esi
jmp 0x4b2dbf
mov byte [esp + 0x3b], bl
mov esi, dword [esp + 0x1c0]
mov edi, dword [esi]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x8c]
jmp 0x4b2f19
movzx esi, byte [esp + 0x38]
and esi, ebx
jmp 0x4b2dbf
mov dword [esp + 0x1c8], ecx
mov dword [esp + 0x1cc], edx
mov eax, dword [esp + 0x58]
mov dword [esp + 0x1d0], eax
xchg edi, eax
mov byte [esp + 0x1d4], al
xchg edi, eax
add esp, 0x1bc
ret
movzx ebx, byte [esp + 0x3b]
mov esi, dword [esp + 0x1c0]
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x48]
test esi, esi
je 0x4b2ed0
mov ebp, dword [edi]
mov ebx, dword [edi + 4]
shr esi, 1
cmp ebx, esi
jbe 0x4b2f4f
lea ebx, [esi + esi*2]
mov esi, dword [esp + 0x48]
test esi, 1
jne 0x4b2f45
lea ebx, [ebp + ebx*8 + 4]
mov ebp, dword [ebx]
mov dword [ebx], eax
jmp 0x4b2f05
lea ebx, [ebp + ebx*8 + 8]
mov ebp, dword [ebx]
mov dword [ebx], eax
jmp 0x4b2f05
mov eax, esi
mov ecx, ebx
call fcn.0045d690
mov ecx, ebp
call fcn.0045d6e0
mov ecx, ebp
mov edx, edi
call fcn.0045d6c0
nop
call fcn.0045c1c0
jmp fcn.004b1800