Function at 0x4bccf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x68]
cmp eax, dword [ecx + 8]
jbe 0x4bee1b
sub esp, 0xe8
mov ecx, dword [esp + 0x100]
test ecx, ecx
jle 0x4bed9e
mov edx, dword [esp + 0xf8]
test edx, edx
je 0x4bcd36
test edx, 0x60
je 0x4bed1a
mov edi, dword [esp + 0xec]
mov dword [edi + 0xc], 0
mov ebx, dword [0x8c1150]
test ebx, ebx
jne 0x4bed03
mov dword [edi + 0x10], 0
mov dword [edi + 0x1c], edx
mov ebx, dword [0x8c1150]
test ebx, ebx
jne 0x4beccd
mov ebx, dword [esp + 0xf0]
mov dword [edi + 0x14], ebx
mov ebp, dword [esp + 0xf4]
mov dword [edi + 0x18], ebp
nop
mov esi, edx
and edx, 0x1f
mov dword [esp + 0x7c], edx
cmp edx, 0x10
jbe 0x4be8c3
cmp edx, 0x15
ja 0x4be124
cmp edx, 0x13
ja 0x4bd79a
cmp edx, 0x11
jne 0x4bd755
mov eax, dword [esp + 0xfc]
cmp eax, 0x71
jg 0x4bd73e
cmp eax, 0x58
jne 0x4bd730
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x80], ecx
mov edx, dword [eax + 0x28]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4bd0c3
mov eax, dword [esp + 0x7c]
cmp eax, 0x17
je 0x4bd08d
mov eax, dword [esp + 0xf8]
test eax, 0x100
jne 0x4bd00d
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004801e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x6c], eax
lea ecx, [0x659d80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0043c2b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
xor ecx, ecx
jmp 0x4bce86
mov ebx, dword [esp + 0xb0]
mov byte [ebx + eax], dl
lea edx, [eax + 1]
mov eax, ebx
mov ecx, edx
mov edx, dword [esp + 0x6c]
cmp ecx, edx
jge 0x4bcf9a
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.0047fe70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
nop
and eax, 0x1f
mov dword [esp + 0x7c], eax
cmp eax, 9
ja 0x4bcf58
cmp eax, 7
jne 0x4bcef0
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jb 0x4bce75
jmp 0x4bee0e
cmp eax, 8
jne 0x4bcf04
movzx edx, byte [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4bcee9
cmp eax, 9
jne 0x4bcf18
movzx edx, word [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4bcee9
lea eax, [0x66ee60]
mov dword [esp], eax
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x12
mov eax, dword [0x8c1150]
test eax, eax
jne 0x4bcf48
lea eax, [0x6a5b83]
mov dword [edi], eax
jmp 0x4bedaa
lea eax, [0x6a5b83]
call fcn.00450d20
jmp 0x4bedaa
cmp eax, 0xa
jne 0x4bcf6e
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4bcee9
cmp eax, 0xb
jne 0x4bcf84
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4bcee9
cmp eax, 0xc
jne 0x4bcf18
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4bcee9
mov ecx, edx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x9c], eax
mov ebx, dword [esp + 0x3c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x80]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xec]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
call fcn.004bac10
add esp, 0xe8
ret
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004801e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.00481c00
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0047f290
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
jmp 0x4bcf9c
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.0047f290
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
jmp 0x4bcf9c
mov eax, dword [esp + 0xec]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x4bd2e6
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4bd296
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x5b
xor ecx, ecx
jmp 0x4bd169
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0047fe70
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x100]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004bccf0
mov eax, dword [esp + 0x54]
lea ecx, [eax + 1]
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
call fcn.004801e0
mov eax, dword [esp + 0x54]
cmp dword [esp + 0xc], eax
jle 0x4bd221
test eax, eax
jle 0x4bd0f9
nop
mov ecx, dword [esp + 0xec]
mov edx, dword [ecx + 4]
lea ebx, [edx + 1]
mov ebp, dword [ecx + 8]
mov esi, dword [ecx]
cmp ebx, ebp
ja 0x4bd1ce
lea ebx, [edx + 1]
mov dword [ecx + 4], ebx
mov byte [esi + edx], 0x20
jmp 0x4bd0f9
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bd21a
mov dword [edi], eax
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0x54]
mov ecx, edi
jmp 0x4bd1bf
call fcn.00450d20
jmp 0x4bd20e
nop
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
ja 0x4bd249
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
add esp, 0xe8
ret
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bd28f
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4bd238
call fcn.00450d20
jmp 0x4bd289
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bd2df
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4bd0ea
call fcn.00450d20
jmp 0x4bd2d6
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
mov dword [esp + 0x78], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x74], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4bd6ef
mov dword [esp + 0xac], esi
mov dword [esp + 0x70], edi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004516d0
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [edi + 8], ecx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bd6d3
mov edx, dword [esp + 0xac]
mov dword [edi], edx
mov ebx, dword [esp + 0x7c]
cmp ebx, 0x17
jne 0x4bd6c7
add ebx, 0xffffffeb
cmp ebx, 1
ja 0x4bd6a6
mov ebx, dword [esp + 0xf8]
test ebx, 0x200
je 0x4bd676
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4bd5f3
nop
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x44]
lea ebp, [esi + ebp + 1]
cmp ebp, ecx
ja 0x4bd59c
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
xor eax, eax
jmp 0x4bd466
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0047fe70
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x100]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004bccf0
mov eax, dword [esp + 0x58]
inc eax
mov ebx, dword [esp + 0xf8]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004801e0
mov eax, dword [esp + 0x58]
cmp dword [esp + 0xc], eax
jle 0x4bd529
test eax, eax
jle 0x4bd3f1
nop
mov edi, dword [esp + 0xec]
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp edx, ebx
ja 0x4bd4e6
mov esi, 0x202c
mov word [ebp + ecx], si
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x8c1150]
test ecx, ecx
jne 0x4bd4d6
mov dword [edi], ebp
jmp 0x4bd3f1
mov ecx, eax
mov eax, ebp
call fcn.00450d20
mov eax, ecx
jmp 0x4bd3f1
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], edx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
jmp 0x4bd4b5
nop
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
ja 0x4bd54f
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4bd242
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bd595
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4bd540
call fcn.00450d20
jmp 0x4bd58f
lea ebx, [0x659d80]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bd5ec
mov dword [edi], eax
mov ebx, dword [esp + 0xf8]
mov edx, eax
mov eax, ecx
jmp 0x4bd3e3
call fcn.00450d20
jmp 0x4bd5dc
nop
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x44]
lea ebx, [ebp + ebx + 5]
cmp ebx, ecx
ja 0x4bd63b
mov ebp, 0x6c696e28
mov dword [edx + eax], ebp
mov ebp, 0x29
xchg ebp, ebx
mov byte [edx + eax + 4], bl
xchg ebp, ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1150]
test ecx, ecx
jne 0x4bd632
mov dword [edi], edx
add esp, 0xe8
ret
mov eax, edx
call fcn.00450d20
jmp 0x4bd62b
mov dword [esp + 0x78], ebx
lea ebp, [0x659d80]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043c410
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
jmp 0x4bd604
test ebx, 0x80
je 0x4bd69b
mov ebp, dword [esp + 0xf4]
mov esi, dword [ebp]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
mov ebp, esi
jmp 0x4bd3c4
mov ebp, dword [esp + 0xf4]
mov esi, ebp
jmp 0x4bd688
mov esi, dword [esp + 0xf4]
mov esi, dword [esi]
test esi, esi
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
mov ebx, dword [esp + 0xf8]
jmp 0x4bd3c4
mov ebx, dword [esp + 0xf8]
jmp 0x4bd3ce
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.00450d20
mov eax, edx
mov edx, dword [esp + 0xac]
jmp 0x4bd396
mov dword [esp + 0x88], ecx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x88]
mov ebx, dword [esp + 0x78]
jmp 0x4bd34c
cmp eax, 0x71
je 0x4bcdc5
jmp 0x4bd0c3
cmp eax, 0x73
je 0x4bcdc5
cmp eax, 0x78
je 0x4bcdc5
jmp 0x4bd0c3
lea eax, [edx - 0x12]
cmp eax, 1
ja 0x4bd781
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
call fcn.004bb300
jmp 0x4bd242
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004b9b50
jmp 0x4bd242
cmp edx, 0x14
je 0x4bde9f
movzx edx, byte [edi + 0x2c]
test dl, dl
jne 0x4bdc17
nop
mov edx, dword [edi + 4]
mov eax, ecx
lea ecx, [edx + 4]
mov esi, dword [edi + 8]
mov ebp, dword [edi]
cmp ecx, esi
ja 0x4bdbc7
mov ebx, 0x5b70616d
mov dword [ebp + edx], ebx
mov dword [edi + 4], ecx
mov dword [edi + 8], esi
mov ecx, dword [0x8c1150]
test ecx, ecx
jne 0x4bdbb7
mov dword [edi], ebp
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.0048bed0
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
jle 0x4bd982
mov dword [esp + 0x84], eax
mov dword [esp + 0x78], ecx
xor ebx, ebx
jmp 0x4bd83c
mov ebp, dword [esp + 0xa8]
lea edx, [ebp + 0xc]
mov ebx, eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0xa8], edx
mov dword [esp + 0x60], ebx
mov ebp, dword [edx + 8]
mov dword [esp + 0x7c], ebp
mov esi, dword [edx + 4]
mov dword [esp + 0xb0], esi
mov edi, edx
mov edx, dword [edx]
mov dword [esp + 0xa4], edx
test ebx, ebx
jle 0x4bdbab
mov ecx, dword [esp + 0xec]
movzx ebx, byte [ecx + 0x2c]
test bl, bl
je 0x4bdb20
nop
mov ebx, dword [ecx + 4]
lea ebp, [ebx + 2]
mov esi, dword [ecx]
mov edx, dword [ecx + 8]
cmp ebp, edx
ja 0x4bdad0
mov dword [esp + 0x74], edx
mov edx, 0x202c
mov word [esi + ebx], dx
mov dword [ecx + 4], ebp
mov edx, dword [esp + 0x74]
mov dword [ecx + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bdaba
mov dword [ecx], esi
mov dword [esp], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x100]
lea ebx, [edx + 1]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x14], ebx
call fcn.004bccf0
nop
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4bda6a
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x3a
mov edx, dword [esp + 0x84]
mov ecx, dword [edx + 0x10]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x60]
cmp ebp, ecx
jae 0x4bee13
lea ecx, [ebp + ebp*2]
mov edx, dword [ebx + ecx*4 + 8]
mov esi, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 0x14], edx
call fcn.004bccf0
mov eax, dword [esp + 0x60]
inc eax
mov ecx, dword [esp + 0x78]
cmp eax, ecx
jl 0x4bd829
mov eax, dword [esp + 0xec]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4bd9fd
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
ja 0x4bd9b0
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4bd242
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bd9f6
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4bd9a1
call fcn.00450d20
jmp 0x4bd9f0
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4bda1d
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x5d
jmp 0x4bd242
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bda63
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4bda0d
call fcn.00450d20
jmp 0x4bda5d
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bdab3
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4bd917
call fcn.00450d20
jmp 0x4bdaaa
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, esi
call fcn.00450d20
mov eax, ebx
mov edi, edx
jmp 0x4bd8b9
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xec]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x74]
mov edi, dword [esp + 0xa8]
jmp 0x4bd892
nop
mov ebx, dword [ecx + 4]
lea edi, [ebx + 1]
mov eax, dword [ecx + 8]
mov ebp, dword [ecx]
cmp edi, eax
ja 0x4bdb4e
lea esi, [ebx + 1]
mov dword [ecx + 4], esi
mov byte [ebp + ebx], 0x20
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0xa8]
jmp 0x4bd8b9
lea ecx, [0x659d80]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bdba4
mov dword [edi], eax
mov edx, dword [esp + 0xa4]
mov esi, dword [esp + 0xb0]
mov ebx, ecx
mov ebp, eax
mov ecx, edi
jmp 0x4bdb30
call fcn.00450d20
jmp 0x4bdb8e
mov ecx, dword [esp + 0xec]
jmp 0x4bd8b9
mov ecx, eax
mov eax, ebp
call fcn.00450d20
mov eax, ecx
jmp 0x4bd7e4
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], edx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0043c410
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xf0]
mov edi, dword [esp + 0xec]
jmp 0x4bd7c5
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
mov dword [esp + 0x78], ebx
lea ebp, [ecx + ebx]
mov dword [esp + 0x74], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4bde5e
mov dword [esp + 0x70], edi
mov dword [esp + 0xac], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004516d0
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [edi + 8], ecx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bde42
mov edx, dword [esp + 0xac]
mov dword [edi], edx
mov ebx, dword [esp + 0x7c]
lea ebp, [ebx - 0x15]
cmp ebp, 1
ja 0x4bde02
mov ebx, dword [esp + 0xf8]
test ebx, 0x200
je 0x4bdd45
nop
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x48]
lea ebp, [esi + ebp + 1]
cmp ebp, ecx
ja 0x4bdcf1
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
jmp 0x4bd7e4
lea ebx, [0x659d80]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4bdd3e
mov dword [edi], eax
mov ebx, dword [esp + 0xf8]
mov edx, eax
mov eax, ecx
jmp 0x4bdce2
call fcn.00450d20
jmp 0x4bdd31
test ebx, 0x80
je 0x4bddf4
mov ebp, dword [esp + 0xf4]
mov esi, dword [ebp]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4bdcd1
nop
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x48]
lea ebx, [ebp + ebx + 5]
cmp ebx, ecx
ja 0x4bddb9
mov ebp, 0x6c696e28
mov dword [edx + eax], ebp
mov ebp, 0x29
xchg ebp, ebx
mov byte [edx + eax + 4], bl
xchg ebp, ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1150]
test ecx, ecx
jne 0x4bddb0
mov dword [edi], edx
add esp, 0xe8
ret
mov eax, edx
call fcn.00450d20
jmp 0x4bdda9
mov dword [esp + 0x78], ebx
lea ebp, [0x659d80]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043c410
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
jmp 0x4bdd82
mov ebp, dword [esp + 0xf4]
mov esi, ebp
jmp 0x4bdd5b
lea eax, [0x66ee60]
mov dword [esp], eax
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x13
mov eax, dword [0x8c1150]
test eax, eax
jne 0x4bde32
lea eax, [0x6a6366]
mov dword [edi], eax
jmp 0x4bedc3
lea eax, [0x6a6366]
call fcn.00450d20
jmp 0x4bedc3
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.00450d20
mov eax, edx
mov edx, dword [esp + 0xac]
jmp 0x4bdcb2
mov dword [esp + 0x94], eax
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x78]
jmp 0x4bdc68
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0047fbe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x4be0ed
mov edi, dword [esp + 0xec]
movzx ecx, byte [edi + 0x2c]
test cl, cl
jne 0x4bdf5c
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp edx, ebx
ja 0x4bdf1d
mov esi, 0x6c696e3c
mov dword [ebp + ecx], esi
mov esi, 0x3e
xchg esi, eax
mov byte [ebp + ecx + 4], al
xchg esi, eax
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x8c1150]
test ecx, ecx
jne 0x4bdf11
mov dword [edi], ebp
jmp 0x4bd242
mov eax, ebp
call fcn.00450d20
jmp 0x4bd242
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], edx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
jmp 0x4bdee6
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
mov dword [esp + 0x78], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x74], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4be0ac
mov dword [esp + 0xac], edi
mov dword [esp + 0x70], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004516d0
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [edi + 8], ecx
mov edx, dword [0x8c1150]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x50]
lea ebx, [ebp + ebx + 5]
test edx, edx
jne 0x4be090
mov edx, dword [esp + 0xac]
mov dword [edi], edx
nop
cmp ebx, ecx
ja 0x4be055
mov ebp, 0x6c696e28
mov dword [edx + eax], ebp
mov ebp, 0x29
xchg ebp, ebx
mov byte [edx + eax + 4], bl
xchg ebp, ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x8c1150]
test ecx, ecx
jne 0x4be049
mov dword [edi], edx
jmp 0x4bd242
mov eax, edx
call fcn.00450d20
jmp 0x4bd242
mov dword [esp + 0x78], ebx
lea ebp, [0x659d80]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043c410
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
jmp 0x4be01d
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.00450d20
mov eax, edx
mov edx, dword [esp + 0xac]
jmp 0x4be018
mov dword [esp + 0x98], ecx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x98]
mov ebx, dword [esp + 0x78]
jmp 0x4bdfc2
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x100]
inc eax
mov dword [esp + 0x14], eax
call fcn.004bccf0
jmp 0x4bd242
cmp edx, 0x17
ja 0x4be2c6
cmp edx, 0x16
jne 0x4bcdac
test ecx, ecx
je 0x4be285
xor eax, eax
test al, al
je 0x4bd75d
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0047fbe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
nop
mov ebx, eax
and eax, 0x1f
cmp eax, 0x15
ja 0x4be271
cmp eax, 0x11
jne 0x4be247
mov dword [esp + 0x7c], ebx
nop
mov eax, dword [esp + 0xec]
mov ebp, dword [eax + 4]
lea esi, [ebp + 1]
mov edi, dword [eax]
mov ebx, dword [eax + 8]
cmp esi, ebx
ja 0x4be1d7
lea ebx, [ebp + 1]
mov dword [eax + 4], ebx
mov byte [edi + ebp], 0x26
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x100]
inc eax
mov dword [esp + 0x14], eax
call fcn.004bccf0
add esp, 0xe8
ret
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xa4], edx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4be240
mov dword [edi], eax
mov edx, dword [esp + 0xa4]
mov ebp, ecx
mov ecx, dword [esp + 0xb0]
mov ebx, eax
mov eax, edi
mov edi, ebx
jmp 0x4be197
call fcn.00450d20
jmp 0x4be225
cmp eax, 0x15
je 0x4be17c
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xec]
jmp 0x4bd75d
cmp eax, 0x17
je 0x4be17c
cmp eax, 0x19
je 0x4be17c
jmp 0x4be250
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00480d80
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x100]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xec]
jmp 0x4be140
cmp edx, 0x18
je 0x4be884
cmp edx, 0x19
jne 0x4be876
movzx eax, byte [edi + 0x2c]
test al, al
jne 0x4be773
mov eax, dword [edi + 4]
lea edx, [eax + 1]
mov ecx, dword [edi + 8]
mov esi, dword [edi]
cmp edx, ecx
ja 0x4be715
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [esi + eax], 0x7b
lea eax, [esp + 8]
mov dword [esp + 0xa0], eax
xor ecx, ecx
jmp 0x4be395
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0xc], ebx
call fcn.004b99a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x100]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004bccf0
mov eax, dword [esp + 0x64]
lea ecx, [eax + 1]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov dword [esp + 0x64], ecx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00480cd0
mov eax, dword [esp + 0x64]
cmp dword [esp + 0xc], eax
jle 0x4be6a1
test eax, eax
jle 0x4be695
mov edi, dword [esp + 0xec]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4be626
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp edx, ebx
ja 0x4be5e0
mov esi, 0x202c
mov word [ebp + ecx], si
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x8c1150]
test ecx, ecx
jne 0x4be5d0
mov dword [edi], ebp
movzx ecx, byte [edi + 0x2b]
test cl, cl
je 0x4be5bf
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x2c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call eax
lea edi, [esp + 0xb4]
mov esi, dword [esp + 0xa0]
call fcn.0045145e
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb4]
test eax, eax
je 0x4be5b3
mov dword [esp + 0x40], eax
nop
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
mov dword [esp + 0x78], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x74], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4be572
mov dword [esp + 0xac], edi
mov dword [esp + 0x70], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004516d0
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [edi + 8], ecx
mov edx, dword [0x8c1150]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x40]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4be559
mov edx, dword [esp + 0xac]
mov dword [edi], edx
nop
cmp ebx, ecx
ja 0x4be50c
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
jmp 0x4be313
lea ebp, [0x659d80]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4be552
mov dword [edi], eax
mov edx, eax
mov eax, ecx
jmp 0x4be4fd
call fcn.00450d20
jmp 0x4be54c
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.00450d20
mov eax, edx
mov edx, dword [esp + 0xac]
jmp 0x4be4f8
mov dword [esp + 0x8c], ecx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x78]
jmp 0x4be4a6
mov edi, dword [esp + 0xec]
jmp 0x4be313
movzx ecx, byte [edi + 0x2c]
test cl, cl
jne 0x4be419
jmp 0x4be313
mov ecx, eax
mov eax, ebp
call fcn.00450d20
mov eax, ecx
jmp 0x4be40d
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], edx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
jmp 0x4be3ed
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 1]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp edx, ebx
ja 0x4be646
lea edx, [ecx + 1]
mov dword [edi + 4], edx
mov byte [ebp + ecx], 0x20
jmp 0x4be40d
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4be68e
mov dword [edi], eax
mov ebp, eax
mov eax, dword [esp + 0x64]
jmp 0x4be636
call fcn.00450d20
jmp 0x4be686
mov edi, dword [esp + 0xec]
jmp 0x4be40d
nop
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4be6c8
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x7d
jmp 0x4bd242
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4be70e
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4be6b8
call fcn.00450d20
jmp 0x4be708
lea ebx, [0x659d80]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x8c1150]
test edx, edx
jne 0x4be76c
mov dword [edi], eax
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, eax
mov eax, ecx
jmp 0x4be2f7
call fcn.00450d20
jmp 0x4be755
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00481f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
lea ebp, [ebx + eax]
mov dword [esp + 0x78], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4be82d
mov dword [esp + 0xac], edi
mov dword [esp + 0x74], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004516d0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x74]
mov dword [edi + 8], eax
mov eax, dword [0x8c1150]
test eax, eax
jne 0x4be81f
mov eax, dword [esp + 0xac]
mov dword [edi], eax
mov ecx, dword [esp + 0x100]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
jmp 0x4be2e4
mov eax, dword [esp + 0xac]
call fcn.00450d20
jmp 0x4be7fe
mov dword [esp + 0x4c], eax
mov dword [esp + 0x74], ebx
mov dword [esp + 0x90], ecx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x74]
jmp 0x4be7b8
cmp edx, 0x1a
je 0x4bd75d
jmp 0x4bd781
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00481e60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xec]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0xc], eax
call fcn.004baa70
jmp 0x4bd242
cmp edx, 0xc
ja 0x4bebf0
cmp edx, 1
ja 0x4bea6f
test edx, edx
jne 0x4bea37
test ecx, ecx
jne 0x4be991
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x78], ecx
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp ecx, edx
ja 0x4be95e
mov dword [esp + 0x74], edx
mov dword [esp + 0xac], ebx
add eax, ebx
mov dword [esp], eax
lea eax, [0x6a7980]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.004516d0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x74]
mov dword [edi + 8], eax
mov eax, dword [0x8c1150]
test eax, eax
jne 0x4be94d
mov eax, dword [esp + 0xac]
mov dword [edi], eax
jmp 0x4bd242
mov eax, dword [esp + 0xac]
call fcn.00450d20
jmp 0x4bd242
mov dword [esp + 0x74], eax
lea ebp, [0x659d80]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0043c410
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x74]
jmp 0x4be8f9
mov ecx, dword [esp + 0xfc]
cmp ecx, 0x76
jne 0x4bea26
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi]
mov ebp, dword [edi + 8]
cmp edx, ebp
ja 0x4be9e7
mov esi, 0x6c696e3c
mov dword [ebx + ecx], esi
mov esi, 0x3e
xchg esi, eax
mov byte [ebx + ecx + 4], al
xchg esi, eax
mov dword [edi + 4], edx
mov dword [edi + 8], ebp
mov ecx, dword [0x8c1150]
test ecx, ecx
jne 0x4be9db
mov dword [edi], ebx
jmp 0x4bd242
mov eax, ebx
call fcn.00450d20
jmp 0x4bd242
mov dword [esp + 0x78], edx
mov dword [esp + 0x74], ecx
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043c410
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
jmp 0x4be9b1
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.004b9dc0
jmp 0x4bd242
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0047f1e0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov byte [esp + 4], al
mov eax, dword [esp + 0xfc]
mov dword [esp + 8], eax
call fcn.004ba2f0
jmp 0x4bd242
lea eax, [edx - 2]
cmp eax, 4
ja 0x4beb29
cmp edx, 3
ja 0x4beabd
cmp edx, 2
jne 0x4beab2
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
call fcn.004ba3e0
jmp 0x4bd242
movsx eax, byte [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4bea8d
cmp edx, 4
jne 0x4beacd
movsx eax, word [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4bea8d
cmp edx, 5
jne 0x4beadc
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4bea8d
cmp edx, 6
jne 0x4beae9
mov ecx, dword [ebp]
mov eax, dword [ebp + 4]
jmp 0x4bea8d
lea eax, [0x66ee60]
mov dword [esp], eax
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x11
mov eax, dword [0x8c1150]
test eax, eax
jne 0x4beb19
lea eax, [0x6a557d]
mov dword [edi], eax
jmp 0x4bedf5
lea eax, [0x6a557d]
call fcn.00450d20
jmp 0x4bedf5
lea eax, [edx - 7]
cmp eax, 5
ja 0x4bd781
cmp edx, 9
ja 0x4bebc7
cmp edx, 7
jne 0x4beb6d
mov eax, dword [ebp]
xor ecx, ecx
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
call fcn.004ba3e0
jmp 0x4bd242
cmp edx, 8
jne 0x4beb7a
movzx eax, byte [ebp]
xor ecx, ecx
jmp 0x4beb48
cmp edx, 9
jne 0x4beb87
movzx eax, word [ebp]
xor ecx, ecx
jmp 0x4beb48
lea eax, [0x66ee60]
mov dword [esp], eax
call fcn.0040a500
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x12
mov eax, dword [0x8c1150]
test eax, eax
jne 0x4bebb7
lea eax, [0x6a5b83]
mov dword [edi], eax
jmp 0x4beddc
lea eax, [0x6a5b83]
call fcn.00450d20
jmp 0x4beddc
cmp edx, 0xa
jne 0x4bebd6
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4beb48
cmp edx, 0xb
jne 0x4bebe6
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
jmp 0x4beb48
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4beb48
cmp edx, 0xe
ja 0x4bec54
cmp edx, 0xd
jne 0x4bec29
fld dword [ebp]
mov dword [esp], edi
fld st(0)
fstp st(1)
fld st(0)
fstp qword [esp + 4]
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
fstp st(0)
call fcn.004ba720
jmp 0x4bd242
fld qword [ebp]
mov dword [esp], edi
fld st(0)
fstp qword [esp + 4]
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
fstp st(0)
call fcn.004ba720
jmp 0x4bd242
cmp edx, 0xf
jne 0x4bec97
fld dword [ebp + 4]
fld dword [ebp]
mov dword [esp], edi
fld st(0)
fstp st(1)
fld st(0)
fstp qword [esp + 4]
fld st(1)
fstp st(2)
fld st(1)
fstp qword [esp + 0xc]
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x18], eax
fstp st(0)
fstp st(0)
call fcn.004ba890
jmp 0x4bd242
fld qword [ebp + 8]
fld qword [ebp]
mov dword [esp], edi
fld st(0)
fstp qword [esp + 4]
fld st(1)
fstp qword [esp + 0xc]
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x18], eax
fstp st(0)
fstp st(0)
call fcn.004ba890
jmp 0x4bd242
lea esi, [edi + 0x14]
mov eax, edi
mov edi, esi
mov ebx, eax
mov eax, dword [esp + 0xf0]
call fcn.00450d20
lea edi, [ebx + 0x18]
mov ebp, eax
mov eax, dword [esp + 0xf4]
call fcn.00450d20
mov ebx, ebp
mov ebp, eax
mov edi, dword [esp + 0xec]
jmp 0x4bcd7e
lea ebx, [edi + 0x10]
mov eax, edi
mov edi, ebx
mov ebp, eax
xor eax, eax
call fcn.00450d20
mov edi, ebp
jmp 0x4bcd59
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.00480030
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xec]
mov dword [edx + 0xc], eax
mov eax, dword [0x8c1150]
test eax, eax
jne 0x4bed92
mov dword [edx + 0x10], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
call fcn.004bbce0
movzx eax, byte [esp + 8]
test al, al
jne 0x4bed8b
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xf8]
jmp 0x4bcd36
add esp, 0xe8
ret
lea edi, [edx + 0x10]
mov eax, ecx
call fcn.00450d20
jmp 0x4bed5c
mov edx, dword [esp + 0xf8]
jmp 0x4bcd36
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
lea eax, [0x6610c0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a9b0
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
lea eax, [0x6610c0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a9b0
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
lea eax, [0x6610c0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a9b0
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
lea eax, [0x6610c0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a9b0
call fcn.00450da0
mov eax, ebp
call fcn.00450da0
nop
call fcn.0044f4e0
jmp fcn.004bccf0