Function at 0x4bd150
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x4be65c
sub esp, 0x110
mov ecx, dword [esp + 0x11c]
cmp ecx, 2
jl 0x4be561
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x120]
mov eax, ebp
mov edx, ebx
xor esi, esi
xor edi, edi
xor eax, eax
mov word [esp + 0x24], ax
xor edx, edx
mov dword [esp + 0x34], edx
xor edx, edx
mov dword [esp + 0x30], edx
xor edx, edx
mov dword [esp + 0x10c], edx
xor ebx, ebx
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x118]
mov eax, ebp
mov edx, ebx
jmp 0x4bd260
inc ebx
mov ebp, dword [esp + 0x10c]
mov esi, dword [esp + 0x30]
mov ebp, dword [esp + 0x104]
movzx esi, word [esp + 0x24]
mov dword [esp + 0x38], ebx
movzx ebx, word [esp + 0x22]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x30]
cmp ebx, esi
jge 0x4bd221
mov ebp, dword [esp + 0x28]
cmp ebx, ebp
jge 0x4bd221
cmp ebx, esi
jae 0x4be64b
mov ebp, dword [esp + 0x10c]
mov ebp, dword [ebp + ebx*4]
mov esi, dword [esp + 0x104]
mov esi, dword [esi + ebx*4]
cmp ebp, esi
je 0x4bd1cb
test ebx, ebx
jle 0x4bd2e1
mov ebp, dword [esp + 0x34]
cmp ebx, ebp
ja 0x4be642
movzx esi, word [esp + 0x24]
mov eax, dword [esp + 0x64]
inc eax
mov word [esp + 0x24], si
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov ebp, dword [esp + 0x40]
mov ebx, dword [esp + 0x108]
mov esi, eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x108], ebx
cmp esi, ecx
jg 0x4bd912
mov dword [esp + 0x64], esi
jge 0x4bd8fe
jae 0x4be654
mov ebx, dword [edx + esi*4]
cmp byte [ebx], 0x12
jne 0x4bd297
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 4]
test ebp, ebp
jle 0x4bd297
mov ebx, dword [esi]
cmp byte [ebx], 3
je 0x4bd8da
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x28], ebx
xor ebx, ebx
mov word [esp + 0x22], bx
mov dword [esp + 0x104], ebp
mov dword [esp + 0x2c], esi
movzx esi, word [esp + 0x24]
cmp bx, si
jne 0x4bd2e1
mov dword [esp + 0xb0], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xb0]
jmp 0x4bd1ec
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x104]
movzx ebx, word [esp + 0x22]
mov word [esp + 0x26], bx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x64]
cmp ebx, edi
jne 0x4bd333
mov edi, dword [esp + 0x108]
mov ebx, ebp
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], edi
mov edi, dword [esp + 0x64]
movzx esi, word [esp + 0x26]
mov ebp, dword [esp + 0x5c]
jmp 0x4bd23a
mov dword [esp + 0x58], ebp
mov dword [esp + 0x100], esi
lea ebp, [edi + 1]
cmp ebx, ebp
jne 0x4bd44a
cmp edi, ecx
jae 0x4be63b
mov ebp, dword [esp + 0x3c]
lea ebx, [ebp + 1]
mov esi, dword [edx + edi*4]
mov edi, esi
mov esi, dword [esp + 0x40]
cmp ebx, esi
ja 0x4bd3e3
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], esi
mov ebx, dword [esp + 0xe0]
lea esi, [ebx + ebp*4]
mov dword [esp + 0xfc], esi
mov esi, dword [0x98ef80]
test esi, esi
jne 0x4bd3cd
mov dword [ebx + ebp*4], edi
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov edi, ebx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], esi
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x100]
jmp 0x4bd311
mov ebp, edi
mov edi, dword [esp + 0xfc]
mov esi, eax
mov eax, ebp
call fcn.004502f0
mov eax, esi
jmp 0x4bd3a7
mov dword [esp + 0xf8], edi
lea eax, [0x699180]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043bd10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x118]
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0xf8]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x120]
jmp 0x4bd381
mov dword [esp + 0x4c], edi
nop
mov ebp, dword [esp + 0x114]
mov esi, dword [ebp + 0x10]
lea edx, [ebp + 0x10]
mov dword [esp + 0xf4], edx
test esi, esi
je 0x4bd8ac
mov ecx, dword [0x98ef80]
mov ebx, dword [esi + 0x10]
test ecx, ecx
jne 0x4bd867
mov dword [ebp + 0x10], ebx
mov edi, esi
mov ebx, eax
xor eax, eax
call fcn.00450571
mov dword [esp + 0xdc], esi
mov byte [esi], 3
movzx ecx, word [esp + 0x24]
mov word [esi + 2], cx
mov ecx, dword [esi + 0x14]
mov edi, dword [esi + 0x1c]
mov edx, dword [esp + 0x30]
cmp edx, edi
ja 0x4bd834
mov dword [esp + 0x84], edi
mov dword [esp + 0x104], ecx
mov dword [esp], ecx
mov eax, dword [esp + 0x10c]
mov dword [esp + 4], eax
shl edx, 2
mov dword [esp + 8], edx
call fcn.00450c80
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xdc]
mov dword [ecx + 0x18], eax
mov edx, dword [esp + 0x84]
mov dword [ecx + 0x1c], edx
mov edx, dword [0x98ef80]
test edx, edx
jne 0x4bd81c
mov ebx, dword [esp + 0x104]
mov dword [ecx + 0x14], ebx
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x11c]
mov edi, dword [esp + 0x64]
mov edx, dword [esp + 0x4c]
jmp 0x4bd556
inc edx
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x114]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x64]
mov ecx, dword [esp + 0xdc]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x11c]
mov edi, dword [esp + 0x64]
cmp edx, edi
jge 0x4bd5ac
cmp edx, esi
jae 0x4be632
mov dword [esp + 0x84], edx
mov ecx, dword [ebx + edx*4]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004be670
mov eax, dword [0x98ef80]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x118]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x4bd5a0
mov dword [ebx + edx*4], ecx
jmp 0x4bd526
mov eax, ecx
call fcn.004502f0
jmp 0x4bd526
mov edx, dword [esp + 0x120]
cmp edi, edx
ja 0x4be62b
mov eax, dword [esp + 0x4c]
cmp eax, edi
ja 0x4be624
mov dword [esp], ebp
sub edx, eax
mov dword [esp + 0x84], edx
mov esi, eax
shl eax, 2
neg edx
sar edx, 0x1f
and edx, eax
lea eax, [ebx + edx]
mov dword [esp + 4], eax
sub edi, esi
mov dword [esp + 8], edi
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 0x13
call fcn.004bcd70
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], eax
nop
mov ecx, dword [esp + 0x114]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x4bd7fc
mov dword [esp + 0xd4], edi
mov ebx, dword [0x98ef80]
mov ebp, dword [edi + 0x10]
test ebx, ebx
jne 0x4bd7ca
mov dword [ecx + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.00450571
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xd0], ecx
mov byte [ecx], 0x12
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 0xc]
cmp ebp, 2
jb 0x4bd780
mov esi, 2
mov edi, ebp
mov ebp, dword [0x98ef80]
test ebp, ebp
jne 0x4bd751
mov ebp, dword [esp + 0xdc]
mov dword [ebx], ebp
mov dword [ebx + 4], edx
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], edi
mov ebp, dword [0x98ef80]
test ebp, ebp
jne 0x4bd740
mov dword [ecx + 4], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x40]
cmp ebp, esi
ja 0x4bd6fa
mov edx, dword [esp + 0x108]
mov dword [esp + 0x40], esi
mov edi, ebp
mov ebp, dword [0x98ef80]
lea esi, [edx + ebx*4]
test ebp, ebp
jne 0x4bd6e9
mov dword [edx + ebx*4], ecx
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x40]
mov ebx, edx
mov esi, edi
mov edx, dword [esp + 0x118]
jmp 0x4bd3af
mov ebx, edi
mov edi, esi
mov eax, ecx
call fcn.004502f0
xor eax, eax
mov edi, ebx
jmp 0x4bd6c7
lea eax, [0x699180]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043bd10
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x3c]
jmp 0x4bd6b1
lea edi, [ecx + 4]
mov eax, ebx
call fcn.004502f0
xor eax, eax
jmp 0x4bd69b
mov dword [esp + 0x84], edi
mov edi, ebx
mov eax, dword [esp + 0xdc]
call fcn.004502f0
lea ebp, [ebx + 4]
mov edi, ebp
mov eax, edx
call fcn.004502f0
xor eax, eax
mov edi, dword [esp + 0x84]
jmp 0x4bd684
lea eax, [0x699180]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.0043bd10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 2]
xor eax, eax
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xc0]
jmp 0x4bd668
mov eax, edi
mov edi, dword [esp + 0xf4]
mov ecx, eax
mov eax, ebp
call fcn.004502f0
lea edx, [0x6a09e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004105b0
xor eax, eax
mov edx, dword [esp + 0xc0]
jmp 0x4bd643
lea eax, [0x6a09e0]
mov dword [esp], eax
call fcn.0040a3f0
mov ecx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xc0]
jmp 0x4bd64a
lea edi, [ecx + 0x14]
mov edx, eax
mov eax, dword [esp + 0x104]
call fcn.004502f0
mov eax, edx
jmp 0x4bd507
lea eax, [0x668560]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.0043bd10
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x30]
jmp 0x4bd4af
mov dword [esp + 0xcc], esi
mov edi, edx
mov eax, ebx
call fcn.004502f0
lea ecx, [0x6a09e0]
mov dword [esp], ecx
mov dword [esp + 4], esi
call fcn.004105b0
xor eax, eax
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x120]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xcc]
jmp 0x4bd48a
lea eax, [0x6a09e0]
mov dword [esp], eax
call fcn.0040a3f0
mov esi, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x120]
mov ebp, dword [esp + 0x114]
jmp 0x4bd48a
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x14]
mov eax, dword [ebx + 0x1c]
movzx ebx, word [ebx + 2]
and ebx, 1
mov dword [esp + 0x28], ebp
mov ebp, esi
mov esi, eax
mov eax, dword [esp + 0x120]
jmp 0x4bd2ae
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov word [esp + 0x26], bx
xor ebx, ebx
jmp 0x4bd2fe
mov esi, dword [esp + 0x3c]
mov eax, ebp
mov ecx, ebx
xor edx, edx
xor edi, edi
xor eax, eax
mov dword [esp + 0xd8], eax
xor ecx, ecx
mov dword [esp + 0x84], ecx
mov eax, ebp
mov ecx, ebx
jmp 0x4bd952
inc edx
mov dword [esp + 0xd8], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 0x84], ebx
mov ebx, esi
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x10c], ebx
cmp edx, esi
jg 0x4bdf7f
mov dword [esp + 0x60], edx
mov dword [esp + 0x80], ebp
mov dword [esp + 0x50], edi
jge 0x4bdf71
jae 0x4be61b
mov ebx, dword [ecx + edx*4]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x4bdf3b
xor ebx, ebx
mov dword [esp + 0xb8], ebx
mov ebp, dword [esp + 0xd8]
test ebp, ebp
jne 0x4bdefc
mov dword [esp + 0xa0], eax
xor eax, eax
mov byte [esp + 0x21], al
mov eax, dword [esp + 0xa0]
movzx esi, byte [esp + 0x21]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4bda32
movzx esi, byte [ebp]
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x4bded1
cmp dword [ebp + 0x18], 1
jne 0x4bded1
mov dword [esp + 0x98], eax
mov eax, 1
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x98]
movzx ebx, byte [esp + 0x20]
test bl, bl
je 0x4bde76
mov ebx, 1
test bl, bl
je 0x4bda32
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0x10c]
mov esi, dword [esp + 0x80]
mov dword [esp + 0x84], esi
mov esi, dword [esp + 0x10c]
jmp 0x4bd936
mov ebx, dword [esp + 0xb8]
cmp edx, edi
jne 0x4bda66
mov ebp, dword [esp + 0x10c]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x84]
mov dword [esp + 0x84], esi
mov esi, ebp
mov ebp, ebx
mov ebx, edi
mov edi, edx
jmp 0x4bd936
mov dword [esp + 0xe4], ebx
lea esi, [edi + 1]
cmp edx, esi
jne 0x4bdb7a
mov ebp, dword [esp + 0x3c]
cmp edi, ebp
jae 0x4be609
mov esi, dword [esp + 0x84]
lea ebp, [esi + 1]
mov ebx, dword [ecx + edi*4]
mov edi, ebx
mov ebx, dword [esp + 0x80]
cmp ebp, ebx
ja 0x4bdb16
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x84], ebp
mov dword [esp + 0x7c], ebx
mov ebx, dword [esp + 0xe0]
lea ebp, [ebx + esi*4]
mov dword [esp + 0xf0], ebp
mov ebp, dword [0x98ef80]
test ebp, ebp
jne 0x4bdb00
mov dword [ebx + esi*4], edi
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x84]
mov edi, esi
mov esi, ebp
mov ebp, ebx
mov ebx, dword [esp + 0xe4]
jmp 0x4bda52
mov ebp, edi
mov edi, dword [esp + 0xf0]
mov esi, eax
mov eax, ebp
call fcn.004502f0
mov eax, esi
jmp 0x4bdae3
mov dword [esp + 0xf8], edi
lea eax, [0x699180]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.0043bd10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x60]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0xf8]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x40]
jmp 0x4bdaba
mov esi, dword [esp + 0x114]
jmp 0x4bdbb6
lea edi, [edx + 1]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x60]
mov eax, dword [esp + 0x40]
mov ecx, ebx
mov edx, ebp
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x114]
cmp edi, edx
jge 0x4bdc16
mov ebx, dword [esp + 0x3c]
cmp edi, ebx
jae 0x4be600
mov dword [esp + 0x7c], edi
mov eax, dword [ecx + edi*4]
mov dword [esp], esi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
cmp edi, eax
setne dl
mov byte [esp + 8], dl
call fcn.004be8a0
mov eax, dword [0x98ef80]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x108]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x4bdc0a
mov dword [ebx + edx*4], ecx
jmp 0x4bdb83
mov eax, ecx
call fcn.004502f0
jmp 0x4bdb83
cmp edx, eax
ja 0x4be5f7
mov edi, dword [esp + 0x50]
cmp edi, edx
ja 0x4be5ee
mov dword [esp], esi
sub eax, edi
mov ebp, eax
neg eax
shl edi, 2
sar eax, 0x1f
and eax, edi
add eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
sub edx, eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov byte [esp + 0x10], 0x13
call fcn.004bcd70
mov eax, dword [esp + 0x14]
mov dword [esp + 0xbc], eax
nop
mov ecx, dword [esp + 0x114]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x4bde56
mov dword [esp + 0xc8], edi
mov ebx, dword [0x98ef80]
mov ebp, dword [edi + 0x10]
test ebx, ebx
jne 0x4bde26
mov dword [ecx + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.00450571
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc4], ecx
mov byte [ecx], 0x12
mov ebx, dword [ecx + 0xc]
mov ebp, dword [ecx + 4]
cmp ebx, 2
jb 0x4bdddc
mov esi, 2
mov edi, ebx
mov ebx, dword [0x98ef80]
test ebx, ebx
jne 0x4bddb3
mov ebx, dword [esp + 0xd8]
mov dword [ebp], ebx
mov dword [ebp + 4], edx
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], edi
mov ebx, dword [0x98ef80]
test ebx, ebx
jne 0x4bdda2
mov dword [ecx + 4], ebp
mov ebx, dword [esp + 0x84]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x80]
cmp ebp, esi
ja 0x4bdd59
mov edx, dword [esp + 0x10c]
mov dword [esp + 0x84], esi
mov edi, ebp
mov ebp, dword [0x98ef80]
lea esi, [edx + ebx*4]
test ebp, ebp
jne 0x4bdd48
mov dword [edx + ebx*4], ecx
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x108]
mov ebp, dword [esp + 0x84]
mov esi, edi
mov ebx, edx
mov edx, dword [esp + 0x60]
jmp 0x4bdaee
mov ebx, edi
mov edi, esi
mov eax, ecx
call fcn.004502f0
xor eax, eax
mov edi, ebx
jmp 0x4bdd29
lea eax, [0x699180]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043bd10
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0xc4]
mov ebx, dword [esp + 0x84]
jmp 0x4bdd10
lea edi, [ecx + 4]
mov eax, ebp
call fcn.004502f0
xor eax, eax
jmp 0x4bdcf4
mov dword [esp + 0x7c], edi
mov edi, ebp
mov eax, dword [esp + 0xd8]
call fcn.004502f0
lea ebx, [ebp + 4]
mov edi, ebx
mov eax, edx
call fcn.004502f0
xor eax, eax
mov edi, dword [esp + 0x7c]
jmp 0x4bdcdd
lea eax, [0x699180]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.0043bd10
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea esi, [eax + 2]
xor eax, eax
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xbc]
jmp 0x4bdcc0
lea edx, [ecx + 0x10]
mov eax, edi
mov edi, edx
mov ebx, eax
mov eax, ebp
call fcn.004502f0
lea edx, [0x6a09e0]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.004105b0
xor eax, eax
mov edx, dword [esp + 0xbc]
jmp 0x4bdc9b
lea eax, [0x6a09e0]
mov dword [esp], eax
call fcn.0040a3f0
mov ecx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xbc]
jmp 0x4bdca2
xchg esi, eax
cmp al, 0x11
xchg esi, eax
jne 0x4bdeca
mov ebx, dword [ebp + 0x2c]
cmp dword [ebp + 0x28], ebx
jne 0x4bdeca
mov ebx, dword [ebp + 4]
mov esi, dword [ebp + 8]
test esi, esi
jbe 0x4be612
mov ebx, dword [ebx]
movzx esi, byte [ebx]
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x4bdeaf
cmp dword [ebx + 0x18], 1
jne 0x4bdeaf
mov ebx, 1
jmp 0x4bda06
xchg esi, eax
cmp al, 4
xchg esi, eax
je 0x4bdea5
xchg esi, eax
cmp al, 5
xchg esi, eax
je 0x4bdea5
xchg esi, eax
cmp al, 6
xchg esi, eax
sete bl
jmp 0x4bda06
xor ebx, ebx
jmp 0x4bda06
xchg esi, eax
cmp al, 4
xchg esi, eax
je 0x4bd9dd
xchg esi, eax
cmp al, 5
xchg esi, eax
je 0x4bd9dd
xchg esi, eax
cmp al, 6
xchg esi, eax
sete al
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x40]
jmp 0x4bd9f4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.004c4df0
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x50]
mov byte [esp + 0x21], al
mov eax, dword [esp + 0x40]
jmp 0x4bd9b9
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x4bdf68
mov ebp, dword [ebx + 4]
mov esi, dword [ebx + 8]
test esi, esi
jle 0x4bdf68
mov ebx, dword [ebp]
cmp byte [ebx], 2
jne 0x4bdf5f
mov esi, dword [esp + 0x3c]
xor ebx, ebx
jmp 0x4bd98f
mov esi, dword [esp + 0x3c]
jmp 0x4bd98f
mov esi, dword [esp + 0x3c]
jmp 0x4bd98f
mov ebp, dword [esp + 0xd8]
xor ebx, ebx
jmp 0x4bda39
mov edx, dword [esp + 0x84]
mov eax, ebx
xor ecx, ecx
xor esi, esi
xor edi, edi
jmp 0x4bdfa1
inc ecx
mov ebx, dword [esp + 0x84]
mov ebx, edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x108], ebx
cmp ecx, edx
jg 0x4be42a
jge 0x4bdfe7
jae 0x4be5e5
mov edx, dword [eax + ecx*4]
movzx ebx, byte [edx]
cmp bl, 3
jne 0x4be40d
cmp dword [edx + 0x18], 1
jne 0x4be40d
mov edx, 1
test dl, dl
je 0x4bdfe7
mov edx, dword [esp + 0x108]
jmp 0x4bdf90
mov dword [esp + 0x68], ecx
cmp ecx, esi
jne 0x4be0af
mov edx, dword [esp + 0x84]
cmp ecx, edx
mov ebx, dword [esp + 0x108]
jge 0x4be0a9
jae 0x4be5a6
lea esi, [edi + 1]
mov edx, dword [eax + ecx*4]
cmp esi, ebp
ja 0x4be056
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], ebp
mov ebp, dword [0x98ef80]
lea esi, [ebx + edi*4]
test ebp, ebp
jne 0x4be047
mov dword [ebx + edi*4], edx
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
lea esi, [ecx + 1]
mov edi, ebp
mov ebp, edx
mov edx, ebx
jmp 0x4bdf90
mov edi, esi
mov ebp, eax
mov eax, edx
call fcn.004502f0
mov eax, ebp
jmp 0x4be031
mov dword [esp + 0x78], edi
mov dword [esp + 0xf8], edx
lea eax, [0x699180]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0043bd10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xf8]
mov edi, dword [esp + 0x78]
jmp 0x4be019
mov edx, ebp
mov ebp, edi
jmp 0x4be039
lea edx, [esi + 1]
cmp ecx, edx
jne 0x4be1a0
mov edx, dword [esp + 0x84]
cmp esi, edx
jae 0x4be5dc
lea ebx, [edi + 1]
mov esi, dword [eax + esi*4]
cmp ebx, ebp
ja 0x4be13c
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebp
mov ebx, dword [esp + 0xe0]
lea ebp, [ebx + edi*4]
mov dword [esp + 0xec], ebp
mov ebp, dword [0x98ef80]
test ebp, ebp
jne 0x4be126
mov dword [ebx + edi*4], esi
cmp ecx, edx
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov edi, esi
jmp 0x4be003
mov edi, dword [esp + 0xec]
mov ebp, eax
mov eax, esi
call fcn.004502f0
cmp ecx, edx
mov eax, ebp
jmp 0x4be117
mov dword [esp + 0xf8], esi
lea eax, [0x699180]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043bd10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x10c]
jmp 0x4be0ef
mov dword [esp + 0x74], ebp
mov dword [esp + 0x80], edx
mov dword [esp + 0x44], esi
mov ebx, dword [esp + 0x84]
jmp 0x4be1d3
mov ebx, dword [esp + 0x54]
inc ebx
mov ebp, dword [esp + 0x84]
mov ebp, dword [esp + 0x74]
mov esi, edx
mov edx, ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x7c], esi
cmp edx, ecx
jge 0x4be221
cmp esi, ebx
jae 0x4be5d3
mov ebp, dword [eax + esi*4]
movzx esi, byte [ebp]
cmp edx, ebx
jae 0x4be5ca
mov dword [esp + 0x54], edx
mov ebx, dword [eax + edx*4]
movzx edx, byte [ebx]
xchg esi, eax
cmp al, dl
xchg esi, eax
jae 0x4be208
mov edx, dword [esp + 0x54]
jmp 0x4be1b8
jne 0x4be21d
mov edx, dword [ebx + 0x18]
cmp dword [ebp + 0x18], edx
setl dl
test dl, dl
jne 0x4be202
mov edx, dword [esp + 0x7c]
jmp 0x4be1b8
xor edx, edx
jmp 0x4be213
mov edx, dword [esp + 0x44]
cmp edx, ebx
jae 0x4be5c1
mov ebp, dword [eax + edx*4]
mov dword [esp + 0xf8], ebp
lea ebp, [eax + edx*4]
cmp esi, ebx
jae 0x4be5b8
mov dword [esp + 0xe8], ebp
mov ebp, dword [0x98ef80]
mov ebx, dword [eax + esi*4]
lea esi, [eax + esi*4]
test ebp, ebp
jne 0x4be3e1
mov dword [eax + edx*4], ebx
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xf8]
mov dword [eax + ebx*4], ebp
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x80]
jmp 0x4be2a1
lea esi, [eax + 1]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x68]
mov eax, ecx
mov ecx, ebx
mov ebx, dword [esp + 0x84]
mov edi, dword [esp + 0x3c]
mov ebp, esi
cmp ebp, ecx
jge 0x4be30c
mov esi, dword [eax + edx*4]
cmp ebp, ebx
jae 0x4be5af
mov dword [esp + 0x48], ebp
mov ecx, dword [eax + ebp*4]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.004c0590
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x10c]
mov edx, dword [ecx + eax*4]
test byte [edx], al
mov ebx, dword [0x98ef80]
mov ebp, dword [esp + 0x114]
mov esi, dword [ebp + 0x10]
test ebx, ebx
jne 0x4be2ef
mov dword [edx + 0x10], esi
mov dword [ebp + 0x10], edx
jmp 0x4be27e
lea edi, [edx + 0x10]
mov ebx, eax
mov eax, esi
call fcn.004502f0
lea edi, [ebp + 0x10]
mov eax, edx
call fcn.004502f0
mov eax, ebx
jmp 0x4be27e
mov ecx, dword [eax + edx*4]
mov dword [esp], ecx
call fcn.004bcba0
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x10c]
mov edx, dword [ebx + edx*4]
mov ebp, dword [esp + 0x74]
cmp ecx, ebp
ja 0x4be38f
mov esi, dword [esp + 0x108]
mov dword [esp + 0x40], ebp
mov edi, ebx
mov ebx, dword [0x98ef80]
lea ebp, [esi + eax*4]
test ebx, ebx
jne 0x4be371
mov dword [esi + eax*4], edx
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
cmp eax, edx
mov eax, edi
mov ebx, esi
mov ebp, dword [esp + 0x40]
mov esi, ecx
mov ecx, dword [esp + 0x68]
jmp 0x4be11f
mov eax, edi
mov edi, ebp
mov ebx, eax
mov eax, edx
call fcn.004502f0
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
cmp eax, edx
mov edi, ebx
jmp 0x4be35e
mov dword [esp + 0xf8], edx
lea edx, [0x699180]
mov dword [esp], edx
mov ebx, dword [esp + 0x108]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.0043bd10
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x10c]
jmp 0x4be33b
mov ebp, edi
mov edi, dword [esp + 0xe8]
mov eax, ebx
call fcn.004502f0
mov edi, esi
mov eax, dword [esp + 0xf8]
call fcn.004502f0
mov eax, dword [esp + 0x10c]
mov edi, ebp
jmp 0x4be26e
cmp bl, 4
je 0x4bdfd5
cmp bl, 5
je 0x4bdfd5
cmp bl, 6
sete dl
jmp 0x4bdfda
mov eax, ebx
xor ecx, ecx
xor edx, edx
jmp 0x4be436
mov ebx, ecx
mov ecx, esi
cmp ecx, edi
jge 0x4be545
mov dword [esp + 0x10c], ebx
lea esi, [ecx + 1]
cmp esi, edi
jge 0x4be53e
cmp ecx, edi
jae 0x4be59d
mov ebx, dword [eax + ecx*4]
cmp byte [ebx], 2
jne 0x4be537
cmp esi, edi
jae 0x4be594
mov ebx, dword [eax + ecx*4 + 4]
cmp byte [ebx], 2
jne 0x4be47e
mov ecx, dword [esp + 0x10c]
jmp 0x4be432
cmp ecx, edi
jae 0x4be58b
mov dword [esp + 0x70], esi
lea ebx, [edx + 1]
mov esi, dword [eax + ecx*4]
cmp ebx, ebp
ja 0x4be4dd
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x40], ebp
mov ebx, dword [0x98ef80]
lea ebp, [ecx + edx*4]
test ebx, ebx
jne 0x4be4ca
mov dword [ecx + edx*4], esi
mov esi, dword [esp + 0x70]
mov ebp, dword [esp + 0x40]
mov edx, dword [esp + 0x84]
jmp 0x4be432
mov edx, edi
mov edi, ebp
mov ebx, eax
mov eax, esi
call fcn.004502f0
mov eax, ebx
mov edi, edx
jmp 0x4be4b6
mov dword [esp + 0x6c], edx
mov dword [esp + 0xf8], esi
lea eax, [0x699180]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043bd10
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x108]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0x3c]
jmp 0x4be49b
cmp ecx, edi
jmp 0x4be480
cmp ecx, edi
jmp 0x4be480
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], edx
mov dword [esp + 0x12c], ebp
add esp, 0x110
ret
mov eax, dword [esp + 0x118]
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], ecx
mov eax, dword [esp + 0x120]
mov dword [esp + 0x12c], eax
add esp, 0x110
ret
mov eax, ecx
mov ecx, edi
call fcn.00450370
mov eax, esi
mov ecx, edi
call fcn.00450370
mov eax, ecx
mov ecx, edi
call fcn.00450370
mov eax, ecx
mov ecx, edx
call fcn.00450370
mov eax, ebp
mov ecx, ebx
call fcn.00450370
mov eax, esi
mov ecx, ebx
call fcn.00450370
mov eax, edx
mov ecx, ebx
call fcn.00450370
mov eax, edx
mov ecx, ebx
call fcn.00450370
mov eax, esi
mov ecx, ebx
call fcn.00450370
mov eax, esi
mov ecx, edx
call fcn.00450370
mov eax, ecx
mov ecx, edx
call fcn.00450370
mov eax, edi
mov ecx, edx
call fcn.004503d0
mov ecx, edx
mov edx, eax
call fcn.004503b0
mov eax, edi
mov ecx, ebx
call fcn.00450370
mov eax, edi
mov ecx, ebp
call fcn.00450370
xor eax, eax
mov ecx, esi
call fcn.00450370
mov eax, edx
mov ecx, esi
call fcn.00450370
mov ecx, edi
call fcn.004503d0
mov ecx, edi
call fcn.004503b0
mov eax, edx
mov ecx, esi
call fcn.00450370
mov eax, edi
call fcn.00450370
mov ecx, ebx
mov edx, ebp
call fcn.004503b0
mov eax, ebx
mov ecx, esi
call fcn.00450370
mov eax, esi
call fcn.00450370
nop
call fcn.0044eab0
jmp fcn.004bd150