Function at 0x4e3ee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x84]
cmp eax, dword [ecx + 8]
jbe 0x4e6504
sub esp, 0x104
mov eax, dword [esp + 0x110]
test eax, eax
jne 0x4e4076
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e3fc4
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4e4059
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4051
mov dword [edx + 0x40], eax
jmp 0x4e4059
lea edi, [edx + 0x40]
call fcn.0045e710
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
add esp, 0x104
ret
mov eax, dword [esp + 0x10c]
cmp byte [eax], 0x6e
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
call fcn.004e0f40
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x28]
test eax, eax
jne 0x4e6470
test edx, edx
je 0x4e457d
mov eax, dword [esp + 0x10c]
movzx ecx, byte [eax]
cmp cl, 0x22
je 0x4e43da
movzx edx, byte [esp + 0x124]
test dl, dl
jne 0x4e4276
cmp cl, 0x66
je 0x4e411d
cmp cl, 0x6e
jne 0x4e4118
lea eax, [0x661429]
mov ecx, 4
jmp 0x4e4135
cmp cl, 0x74
jne 0x4e412a
lea eax, [0x661391]
mov ecx, 4
jmp 0x4e4135
lea eax, [0x66196a]
mov ecx, 6
mov dword [esp + 0x34], ecx
mov dword [esp + 0xa4], eax
mov edx, dword [esp + 0x118]
mov dword [esp], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x34]
mov dword [edi + 4], eax
mov eax, dword [0x84c7c0]
test eax, eax
jne 0x4e41ba
mov ecx, dword [esp + 0xa4]
mov dword [edi], ecx
jmp 0x4e41c6
mov eax, dword [esp + 0xa4]
call fcn.0045e710
mov ecx, dword [esp + 0xc8]
mov dword [edi + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e41e6
mov eax, dword [esp + 0xcc]
mov dword [edi + 0xc], eax
jmp 0x4e41fb
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xcc]
mov edx, edi
mov edi, ecx
call fcn.0045e710
mov edi, edx
mov eax, dword [esp + 0x80]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4e4259
mov dword [esp], eax
lea ecx, [0x6c330c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4251
mov dword [edx + 0x40], eax
jmp 0x4e4259
lea edi, [edx + 0x40]
call fcn.0045e710
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
add esp, 0x104
ret
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e4328
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4e43bd
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e43b5
mov dword [edx + 0x40], eax
jmp 0x4e43bd
lea edi, [edx + 0x40]
call fcn.0045e710
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
add esp, 0x104
ret
mov dword [esp + 0xa8], ebx
mov dword [esp + 0x38], edx
mov dword [esp], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.004e6cc0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x4e4541
movzx eax, byte [esp + 0x124]
test al, al
je 0x4e64eb
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e44de
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
add esp, 0x104
ret
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0xa8]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
add esp, 0x104
ret
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc0], esi
mov dword [esp + 0x60], edi
mov eax, dword [esp + 0x10c]
movzx ecx, byte [eax]
cmp cl, 0x66
ja 0x4e4e60
cmp cl, 0x22
je 0x4e45b5
cmp cl, 0x66
je 0x4e504e
jmp 0x4e5631
mov dword [esp], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.004e6cc0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test al, al
je 0x4e4d3e
mov dword [esp + 0x5c], ecx
mov dword [esp + 0xb0], edx
nop
nop
mov eax, dword [esp + 0x60]
mov ebp, eax
and eax, 0x1f
cmp eax, 0x14
je 0x4e4b30
cmp eax, 0x17
je 0x4e489e
cmp eax, 0x18
jne 0x4e479b
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [0x825044]
mov edx, dword [esp + 0x10]
cmp dword [0x825040], eax
je 0x4e4655
xor eax, eax
jmp 0x4e46b0
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00403610
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4e4672
xor eax, eax
jmp 0x4e46b0
lea eax, [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], ecx
call fcn.0044acf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e9800
movzx eax, byte [esp + 8]
xor eax, 1
test al, al
jne 0x4e46fa
mov dword [esp], 0
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.0044acf0
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f530
jmp 0x4e6453
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov eax, dword [esp + 0x10c]
mov dword [esp], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 8], eax
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf0], eax
lea eax, [0x673eff]
mov dword [esp], eax
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [esp + 0xec]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
add esp, 0x104
ret
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6619b8]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4821
mov ecx, dword [esp + 0xcc]
mov dword [eax + 0xc], ecx
jmp 0x4e4834
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xcc]
call fcn.0045e710
mov eax, ecx
mov ecx, dword [esp + 0x80]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4e6453
mov dword [esp], ecx
lea edx, [0x6c330c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4891
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov dword [esp + 0x40], ebx
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4e4a29
mov eax, dword [0x82498c]
cmp dword [eax + 0x140], 0xffffffff
jne 0x4e4913
mov eax, dword [esp + 0x5c]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
jmp 0x4e491d
mov eax, dword [esp + 0x5c]
shr eax, 2
lea ecx, [eax + eax*2]
mov dword [esp + 0x30], ecx
lea eax, [0x62f440]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00447580
mov eax, dword [esp + 0xc]
mov dword [esp + 0xbc], eax
mov ecx, dword [0x82498c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x18], edx
call fcn.004dfc30
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
test eax, eax
je 0x4e49e3
nop
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4e6453
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e49d6
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov edx, dword [esp + 0x30]
cmp edx, ecx
jb 0x4e64e6
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048ec10
jmp 0x4e6453
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6619b8]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4ab3
mov ecx, dword [esp + 0xcc]
mov dword [eax + 0xc], ecx
jmp 0x4e4ac6
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xcc]
call fcn.0045e710
mov eax, ecx
mov ecx, dword [esp + 0x80]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4e6453
mov dword [esp], ecx
lea edx, [0x6c330c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4b23
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048e780
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4e4c37
mov dword [esp], 0
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.0044acf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408ee0
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0x8256b8]
test cl, cl
je 0x4e4bc8
lea ecx, [0x62f240]
mov dword [0x8256bc], ecx
mov edx, dword [0x84c7c0]
test edx, edx
jne 0x4e4bbb
mov dword [0x8256c0], eax
jmp 0x4e4bce
lea edi, [0x8256c0]
call fcn.0045e710
jmp 0x4e4bce
lea ecx, [0x62f240]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0xd4]
test ecx, ecx
je 0x4e4bfe
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e4c04
or edx, 0x80
jmp 0x4e4c04
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048ea40
jmp 0x4e6453
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6619b8]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4cc1
mov ecx, dword [esp + 0xcc]
mov dword [eax + 0xc], ecx
jmp 0x4e4cd4
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xcc]
call fcn.0045e710
mov eax, ecx
mov ecx, dword [esp + 0x80]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4e6453
mov dword [esp], ecx
lea edx, [0x6c330c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4d31
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
movzx eax, byte [esp + 0x124]
test al, al
je 0x4e64ce
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e4dfd
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
add esp, 0x104
ret
cmp cl, 0x6e
jne 0x4e5045
movzx ecx, byte [esp + 0x124]
test cl, cl
je 0x4e4fcf
mov ecx, dword [esp + 0x110]
cmp ecx, 4
jne 0x4e4e91
cmp dword [eax], 0x6c6c756e
je 0x4e4fcf
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e4f2e
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4e6453
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e4fc2
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
nop
mov eax, edi
and edi, 0x1f
lea ecx, [edi - 0x14]
nop
cmp ecx, 3
ja 0x4e6453
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00490110
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048ea40
jmp 0x4e6453
cmp cl, 0x74
jne 0x4e5631
movzx edx, byte [esp + 0x124]
test dl, dl
je 0x4e51cb
mov ebx, dword [esp + 0x110]
cmp ebx, 4
jne 0x4e5076
cmp dword [eax], 0x65757274
je 0x4e51d2
cmp ebx, 5
jne 0x4e508d
cmp dword [eax], 0x736c6166
jne 0x4e508d
cmp byte [eax + 4], 0x65
je 0x4e51d2
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e512a
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4e6453
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e51be
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov ebx, dword [esp + 0x110]
cmp cl, 0x74
sete cl
nop
nop
and edi, 0x1f
cmp edi, 1
je 0x4e5614
cmp edi, 0x14
je 0x4e5432
test dl, dl
je 0x4e5339
mov dword [esp], esi
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e5298
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4e6453
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e532c
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov dword [esp], esi
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x661391]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e53b5
mov ecx, dword [esp + 0xcc]
mov dword [eax + 0xc], ecx
jmp 0x4e53c8
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xcc]
call fcn.0045e710
mov eax, ecx
mov ecx, dword [esp + 0x80]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4e6453
mov dword [esp], ecx
lea edx, [0x6c330c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5425
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov byte [esp + 0x2f], cl
mov dword [esp], esi
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048e780
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4e550d
movzx ecx, byte [esp + 0x2f]
movzx ecx, cl
lea edx, [0x800700]
lea eax, [edx + ecx*8]
nop
movzx ecx, byte [0x8256b8]
test cl, cl
je 0x4e549e
lea ecx, [0x62dd40]
mov dword [0x8256bc], ecx
mov edx, dword [0x84c7c0]
test edx, edx
jne 0x4e5491
mov dword [0x8256c0], eax
jmp 0x4e54a4
lea edi, [0x8256c0]
call fcn.0045e710
jmp 0x4e54a4
lea ecx, [0x62dd40]
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0xdc]
test ecx, ecx
je 0x4e54d4
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e54da
or edx, 0x80
jmp 0x4e54da
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048ea40
jmp 0x4e6453
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x661391]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5597
mov ecx, dword [esp + 0xcc]
mov dword [eax + 0xc], ecx
jmp 0x4e55aa
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xcc]
call fcn.0045e710
mov eax, ecx
mov ecx, dword [esp + 0x80]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4e6453
mov dword [esp], ecx
lea edx, [0x6c330c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5607
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov dword [esp], esi
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov byte [esp + 0xc], cl
call fcn.0048eb50
jmp 0x4e6453
cmp cl, 0x2d
je 0x4e5756
add ecx, 0xffffffd0
cmp cl, 9
jbe 0x4e5756
movzx ecx, byte [esp + 0x124]
test cl, cl
je 0x4e64b6
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e56f3
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
add esp, 0x104
ret
mov dword [esp], 0
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 8], ecx
call fcn.0044acf0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
nop
mov edx, dword [esp + 0x60]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x4e5cd2
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x4e5a19
cmp edx, 7
jb 0x4e5ce4
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0047bde0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x4e5893
mov dword [esp + 0x54], edx
mov dword [esp + 0x4c], ecx
mov eax, dword [esp + 0xc0]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
lea ebp, [ebx - 0x20]
mov dword [esp + 0x7c], ebp
cmp ebp, 0x20
sbb esi, esi
mov dword [esp + 0x78], esi
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
mov dword [esp + 0x74], ebp
cmp ebp, 0x20
sbb eax, eax
mov dword [esp + 0x70], eax
cmp ebx, 0x20
sbb eax, eax
mov ecx, edi
mov ebp, dword [esp + 0x4c]
shl ebp, cl
and ebp, esi
mov ecx, ebx
shl edx, cl
and edx, eax
mov ecx, dword [esp + 0x74]
mov esi, dword [esp + 0x4c]
shr esi, cl
mov edi, dword [esp + 0x70]
and esi, edi
or edx, esi
or edx, ebp
mov ebp, ecx
mov ecx, ebx
mov esi, dword [esp + 0x4c]
shl esi, cl
and esi, eax
shr esi, cl
and esi, eax
mov ecx, ebp
mov ebp, edx
shl edx, cl
and edx, edi
or esi, edx
mov ecx, dword [esp + 0x7c]
mov edx, ebp
shr ebp, cl
mov edi, dword [esp + 0x78]
and ebp, edi
or esi, ebp
mov ebp, dword [esp + 0x4c]
cmp ebp, esi
xchg esi, ebx
setne bl
xchg esi, ebx
mov ecx, ebx
shr edx, cl
and edx, eax
mov eax, dword [esp + 0x54]
cmp eax, edx
setne dl
or edx, esi
test dl, dl
je 0x4e59ea
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
mov dword [esp], 0
lea ecx, [0x661d35]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
call fcn.0044aa40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5946
mov dword [edi], eax
jmp 0x4e594b
call fcn.0045e710
mov ecx, dword [esp + 0xc8]
mov dword [edi + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e596b
mov eax, dword [esp + 0xcc]
mov dword [edi + 0xc], eax
jmp 0x4e5980
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xcc]
mov edx, edi
mov edi, ecx
call fcn.0045e710
mov edi, edx
mov eax, dword [esp + 0x80]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4e6453
mov dword [esp], eax
lea ecx, [0x6c330c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e59dd
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov ecx, dword [esp + 0xc0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebp
call fcn.0048f430
jmp 0x4e6453
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0047c5c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x14]
test eax, eax
jne 0x4e5b48
mov dword [esp + 0x50], edx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x58], ebx
mov eax, dword [esp + 0xc0]
mov ebp, dword [eax]
shl ebp, 3
add ebp, 0xffffffc0
xchg ebp, ebx
neg ebx
xchg ebp, ebx
mov dword [esp + 0x6c], ebp
lea esi, [ebp - 0x20]
mov dword [esp + 0x7c], esi
cmp esi, 0x20
sbb edi, edi
mov dword [esp + 0x78], edi
cmp ebp, 0x20
sbb edx, edx
mov dword [esp + 0x74], edx
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb eax, eax
mov dword [esp + 0x70], eax
shr ebp, 5
cmp ebp, 1
sbb ebp, ebp
mov dword [esp + 0x68], ebp
mov ebp, dword [esp + 0x6c]
cmp ebp, 0x20
sbb eax, eax
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x48]
shl eax, cl
and eax, edi
mov ecx, ebp
shl ebx, cl
and ebx, edx
mov ecx, esi
mov edi, dword [esp + 0x48]
shr edi, cl
mov esi, dword [esp + 0x70]
and edi, esi
or ebx, edi
or ebx, eax
mov eax, ecx
mov ecx, ebp
mov edi, dword [esp + 0x48]
shl edi, cl
and edi, edx
mov edx, dword [esp + 0x78]
not edx
mov ebp, dword [esp + 0x7c]
or edx, ebp
mov ebp, ecx
mov ecx, edx
mov edx, ebx
sar ebx, cl
mov ecx, ebp
mov ebp, dword [esp + 0x68]
xor ebp, 0xffffffff
and ebp, ebx
mov ebx, ecx
mov ecx, eax
mov eax, edx
shl edx, cl
and edx, esi
mov ecx, ebx
shr edi, cl
mov esi, dword [esp + 0x74]
and edi, esi
or edi, edx
or ebp, edi
mov edx, dword [esp + 0x48]
cmp edx, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
mov esi, dword [esp + 0x6c]
xchg esi, ebx
not ebx
xchg esi, ebx
or ecx, esi
sar eax, cl
mov ebx, dword [esp + 0x58]
cmp ebx, eax
setne al
or eax, ebp
test al, al
je 0x4e5c9f
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
mov dword [esp], 0
lea ecx, [0x661d35]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
call fcn.0044aa40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5bfb
mov dword [edi], eax
jmp 0x4e5c00
call fcn.0045e710
mov ecx, dword [esp + 0xc8]
mov dword [edi + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5c20
mov eax, dword [esp + 0xcc]
mov dword [edi + 0xc], eax
jmp 0x4e5c35
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xcc]
mov edx, edi
mov edi, ecx
call fcn.0045e710
mov edi, edx
mov eax, dword [esp + 0x80]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4e6453
mov dword [esp], eax
lea ecx, [0x6c330c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5c92
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
call fcn.0048efe0
jmp 0x4e6453
cmp edx, 0xe
jbe 0x4e623e
cmp edx, 0x14
je 0x4e5f9f
cmp edx, 0x18
je 0x4e5ced
xor edx, edx
jmp 0x4e5d4b
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [0x825044]
mov edx, dword [esp + 0x10]
cmp dword [0x825040], eax
je 0x4e5d25
xor eax, eax
jmp 0x4e5d3a
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00403610
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x60]
mov edx, eax
mov eax, dword [esp + 0xac]
test dl, dl
jne 0x4e5f74
movzx eax, byte [esp + 0x124]
test al, al
je 0x4e5e71
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x114]
mov dword [esp + 8], edx
call fcn.00408f60
mov eax, dword [esp + 0xc]
lea ecx, [0x627c20]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e5e0e
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
lea eax, [0x6746a0]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
add esp, 0x104
ret
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x66196a]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5ef7
mov ecx, dword [esp + 0xcc]
mov dword [eax + 0xc], ecx
jmp 0x4e5f0a
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xcc]
call fcn.0045e710
mov eax, ecx
mov ecx, dword [esp + 0x80]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4e6453
mov dword [esp], ecx
lea edx, [0x6c330c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e5f67
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0048f530
jmp 0x4e6453
mov edx, dword [esp + 0x108]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004e3d10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test eax, eax
je 0x4e6026
nop
mov eax, dword [esp + 0x108]
mov ebx, dword [eax + 0x3c]
test ebx, ebx
jne 0x4e6453
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e6019
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0x44], ebx
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 8], edx
call fcn.0048e780
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4e6137
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x4e60fe
nop
movzx ecx, byte [0x8256b8]
test cl, cl
je 0x4e60b8
mov ecx, dword [esp + 0xcc]
mov dword [0x8256bc], ecx
mov edx, dword [0x84c7c0]
test edx, edx
jne 0x4e60a4
mov eax, dword [esp + 0xb4]
mov dword [0x8256c0], eax
jmp 0x4e60c6
lea edi, [0x8256c0]
mov eax, dword [esp + 0xb4]
call fcn.0045e710
jmp 0x4e60c6
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0xe4]
test ecx, ecx
je 0x4e60f6
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e6104
or edx, 0x80
jmp 0x4e6104
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4e6104
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048ea40
jmp 0x4e6453
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x66196a]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc8]
mov dword [eax + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e61c1
mov ecx, dword [esp + 0xcc]
mov dword [eax + 0xc], ecx
jmp 0x4e61d4
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xcc]
call fcn.0045e710
mov eax, ecx
mov ecx, dword [esp + 0x80]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x108]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x4e6453
mov dword [esp], ecx
lea edx, [0x6c330c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e6231
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov dword [esp + 0x64], edx
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0047b720
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4e62e4
mov eax, dword [esp + 0x64]
cmp eax, 0xd
jne 0x4e6431
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x4e62c0
movsd xmm1, qword [0x6c0fe8]
pxor xmm0, xmm1
movsd xmm1, qword [0x6c0fd0]
ucomisd xmm0, xmm1
jbe 0x4e6431
movsd xmm1, qword [0x6c0fd8]
ucomisd xmm1, xmm0
jb 0x4e6431
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], ecx
mov edx, dword [esp + 0x108]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x80], ebx
lea ebp, [0x64a5c0]
mov dword [esp], ebp
call fcn.0040b620
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
mov dword [esp], 0
lea ecx, [0x661d35]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
call fcn.0044aa40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xb8]
mov dword [edi + 4], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e6397
mov dword [edi], eax
jmp 0x4e639c
call fcn.0045e710
mov ecx, dword [esp + 0xc8]
mov dword [edi + 8], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e63bc
mov eax, dword [esp + 0xcc]
mov dword [edi + 0xc], eax
jmp 0x4e63d1
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xcc]
mov edx, edi
mov edi, ecx
call fcn.0045e710
mov edi, edx
mov eax, dword [esp + 0x80]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4e6453
mov dword [esp], eax
lea ecx, [0x6c330c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004e0860
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x108]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4e6427
mov dword [edx + 0x40], eax
jmp 0x4e6453
lea edi, [edx + 0x40]
call fcn.0045e710
jmp 0x4e6453
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
call fcn.0048ef20
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], 0
add esp, 0x104
ret
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x110]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x114]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
add esp, 0x104
ret
lea eax, [0x62f240]
mov dword [esp], eax
lea eax, [0x6c11e8]
mov dword [esp + 4], eax
call fcn.00433500
lea eax, [0x62f240]
mov dword [esp], eax
lea eax, [0x6c11e8]
mov dword [esp + 4], eax
call fcn.00433500
call fcn.0045e7d0
lea eax, [0x62f240]
mov dword [esp], eax
lea eax, [0x6c11e8]
mov dword [esp + 4], eax
call fcn.00433500
nop
call fcn.0045d2d0
jmp fcn.004e3ee0