Function at 0x4b5a60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x478]
cmp eax, dword [ecx + 8]
jbe 0x4b6da5
sub esp, 0x4f8
lea edi, [esp + 0x45c]
xor eax, eax
call fcn.0045d92e
mov ecx, dword [esp + 0x4fc]
mov dword [esp + 0x494], ecx
mov edx, dword [esp + 0x500]
mov dword [esp + 0x498], edx
lea edi, [esp + 0x11c]
call fcn.0045d939
lea edi, [esp + 0x4a4]
call fcn.0045d92b
lea ecx, [esp + 0x4a4]
mov dword [esp + 0x128], ecx
call fcn.0044b6a0
mov ecx, dword [esp]
mov dword [esp + 0x124], ecx
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
lea edi, [esp + 0x108]
xor eax, eax
call fcn.0045d93b
mov ecx, 1
lea edx, [esp + 0x45c]
mov ebx, 1
xor ebp, ebp
lea esi, [esp + 0x3c]
xor edi, edi
jmp 0x4b5b45
mov ebx, eax
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0xe8]
mov edi, dword [esp + 0xb4]
xor eax, eax
test ecx, ecx
je 0x4b5b9d
mov dword [esp + 0x80], ebp
mov dword [esp + 0xd0], esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0xe8], edx
mov dword [esp + 0xd4], edi
call fcn.0040bb30
mov eax, dword [esp]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0xe8]
xor edx, edx
mov ebx, dword [esp + 0x80]
xor ebp, ebp
mov esi, dword [esp + 0xd0]
jmp 0x4b628e
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x104]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00408b50
mov eax, dword [esp + 0xc]
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
lea ecx, [0x4b6db0]
mov dword [esp + 0xec], ecx
lea ecx, [esp + 0xfc]
mov dword [esp + 0xf0], ecx
lea ecx, [0x57ece0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0xec]
mov dword [esp + 8], eax
call fcn.0047bfd0
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x104]
xor edx, edx
xor ebx, ebx
jmp 0x4b5c2c
mov eax, ecx
mov ecx, ebp
mov ebp, dword [esp + 0x100]
mov esi, ebx
mov ebx, dword [esp + 0xfc]
cmp edx, ebp
jge 0x4b5f51
jae 0x4b626d
mov dword [esp + 0x70], edx
mov dword [esp + 0xac], eax
mov dword [esp + 0xa0], esi
mov dword [esp + 0x4c], ecx
lea ebp, [edx + edx*8]
mov dword [esp + 0x9c], ebp
lea ebx, [ebx + ebp*8]
lea edi, [esp + 0x2f4]
mov esi, ebx
call fcn.0045dd9c
mov ecx, dword [esp + 0x2f4]
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0x2f8]
mov dword [esp + 0x5c], ebx
mov esi, 1
jmp 0x4b61a1
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0x9c]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x9c]
cmp esi, 1
jne 0x4b5d8e
mov ecx, dword [esp + 0xa0]
lea ebx, [ecx + 1]
mov edx, ebp
mov ebp, dword [esp + 0x4c]
cmp ebp, ebx
jae 0x4b5d1f
lea edx, [0x599700]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004472c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xa0]
mov ebp, edx
mov edx, dword [esp + 0x98]
mov dword [esp + 0x48], ebx
mov ebx, dword [0x705d20]
lea ecx, [ecx + ecx*8]
lea edi, [eax + ecx*8]
test ebx, ebx
jne 0x4b5d41
lea esi, [esp + 0x2f4]
call fcn.0045dd9c
jmp 0x4b5d81
mov dword [esp + 0xe4], eax
mov dword [esp + 0x90], ebp
lea eax, [0x599700]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2f4]
mov dword [esp + 8], eax
call fcn.0040fb30
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0x98]
mov ebp, dword [esp + 0x90]
mov ebx, dword [esp + 0x48]
mov ecx, eax
xor eax, eax
jmp 0x4b5c28
mov ebx, dword [esp + 0x104]
mov ecx, ebx
mov ebx, dword [esp + 0xfc]
cmp ecx, ebp
jb 0x4b625b
cmp edx, ebp
ja 0x4b6252
mov dword [esp + 0x94], ecx
lea edi, [esp + 0x1d4]
xor eax, eax
call fcn.0045d92e
mov ecx, dword [esp + 0x9c]
shl ecx, 3
mov edi, ebp
mov ebp, dword [esp + 0x94]
sub ebp, edx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ecx, ebp
lea ebp, [ebx + ecx]
cmp esi, 1
jle 0x4b5e16
mov edx, ebx
mov ebx, dword [ebx + ecx + 0x30]
cmp dword [ebp + 0x78], ebx
jne 0x4b5e16
mov dword [esp + 0xcc], ebp
movzx ebx, byte [edx + ecx + 0x28]
lea ebp, [edx + ecx + 0x70]
cmp byte [ebp], bl
jne 0x4b5e0f
xor ecx, ecx
jmp 0x4b5e38
mov ebp, dword [esp + 0xcc]
test esi, esi
jbe 0x4b6249
mov esi, ebp
lea edi, [esp + 0x1d4]
call fcn.0045dd9c
mov edi, dword [esp + 0x98]
mov ecx, 1
mov byte [esp + 0x3d], cl
lea esi, [esp + 0x1d4]
mov edx, edi
lea edi, [esp + 0x384]
call fcn.0045dd9c
movzx ecx, byte [esp + 0x3d]
test cl, cl
je 0x4b5f3a
mov ecx, dword [esp + 0xa0]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x4c]
cmp ebp, ebx
jb 0x4b5e79
mov esi, dword [esp + 0xac]
jmp 0x4b5ec1
lea eax, [0x599700]
mov dword [esp], eax
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004472c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xa0]
mov esi, eax
mov ebp, edx
xor eax, eax
mov edx, dword [esp + 0x98]
mov dword [esp + 0xac], esi
mov edi, ebx
mov ebx, dword [0x705d20]
lea ecx, [ecx + ecx*8]
lea ecx, [esi + ecx*8]
test ebx, ebx
jne 0x4b5eec
mov ebx, edi
mov edi, ecx
lea esi, [esp + 0x384]
call fcn.0045dd9c
jmp 0x4b5f2e
mov dword [esp + 0xa0], edi
mov dword [esp + 0x8c], ebp
lea eax, [0x599700]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x384]
mov dword [esp + 8], eax
call fcn.0040fb30
xor eax, eax
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x8c]
mov ecx, dword [esp + 0xac]
jmp 0x4b5c28
mov ebp, dword [esp + 0x4c]
mov ebx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xac]
jmp 0x4b5c28
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], esi
mov dword [esp + 0x104], ecx
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call fcn.00408b50
mov eax, dword [esp + 0xc]
lea ecx, [0x5eba08]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0047caa0
mov eax, dword [esp + 0x100]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x4fc]
mov edx, dword [esp + 0x500]
xor ebx, ebx
jmp 0x4b5fc8
mov ebp, dword [esp + 0x6c]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x4fc]
mov edx, dword [esp + 0x500]
cmp ebx, eax
jge 0x4b6078
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
cmp ebx, esi
jae 0x4b6171
mov dword [esp + 0x6c], ebx
mov dword [esp + 0xe8], ebp
lea eax, [ebx + ebx*8]
mov dword [esp + 0x9c], eax
lea esi, [ebp + eax*8]
lea edi, [ebp + eax*8 + 0x2c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x30]
mov esi, dword [esi + 0x34]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.004b4cc0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004b0e00
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xe8]
lea edi, [ecx + eax*8 + 0x44]
mov eax, dword [0x705d20]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4b606c
mov dword [edi], ecx
jmp 0x4b5fac
mov eax, ecx
call fcn.0045d700
jmp 0x4b5fac
mov eax, dword [esp + 0x100]
lea ecx, [0x5850a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040bbb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
test ecx, ecx
je 0x4b60c1
mov dword [esp + 0xbc], eax
mov dword [esp + 0xa0], ecx
xor ebx, ebx
jmp 0x4b610c
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x104]
mov dword [esp + 0x504], ecx
mov dword [esp + 0x508], edx
mov dword [esp + 0x50c], ebx
mov dword [esp + 0x510], eax
add esp, 0x4f8
ret
mov ebp, dword [esp + 0xe8]
lea edx, [ebp + 0x48]
mov ebx, eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x68], ebx
mov dword [esp + 0xe8], edx
lea edi, [esp + 0x264]
mov esi, edx
call fcn.0045dd9c
mov ecx, dword [esp + 0x264]
mov ebp, dword [esp + 0x268]
lea edx, [0x5850a0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
call fcn.0040f0b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x68]
mov dword [eax], ecx
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xa0]
cmp ecx, eax
jg 0x4b60f9
mov eax, dword [esp + 0xbc]
jmp 0x4b60c1
mov eax, ebx
mov ecx, esi
call fcn.0045d780
mov eax, dword [esp + 0x84]
lea esi, [eax + 1]
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x5c]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0xac]
mov ebp, dword [esp + 0x9c]
mov edi, ebp
lea ebp, [esi + edx]
mov dword [esp + 0x98], ebp
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 0xe8], ebx
mov ebx, dword [esp + 0x94]
cmp ebx, ebp
jle 0x4b5cc5
jbe 0x4b6264
mov dword [esp + 0x84], esi
lea ebx, [ebp + ebp*8]
mov ebp, dword [esp + 0xe8]
lea ebx, [ebp + ebx*8]
mov ebp, edi
lea edi, [esp + 0x21c]
mov esi, ebx
call fcn.0045dd9c
mov ecx, dword [esp + 0x220]
mov ebx, dword [esp + 0x21c]
mov esi, ebp
mov ebp, dword [esp + 0x5c]
cmp ecx, ebp
jne 0x4b5cb0
mov dword [esp], ebx
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402360
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4b617a
jmp 0x4b5c9e
xor eax, eax
mov ecx, esi
call fcn.0045d780
mov eax, edx
mov ecx, ebp
call fcn.0045d7e0
mov edx, ecx
mov ecx, ebp
call fcn.0045d7c0
mov eax, ebp
mov ecx, ebx
call fcn.0045d780
mov eax, edx
mov ecx, ebp
call fcn.0045d780
mov esi, eax
mov eax, dword [esp + 0xe0]
add eax, 0x48
mov ebp, ecx
mov ecx, eax
mov edi, edx
mov edx, ebx
mov ebx, esi
mov esi, edi
mov dword [esp + 0x9c], edx
mov dword [esp + 0xe0], ecx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x54], ebp
mov dword [esp + 0xb8], esi
lea edi, [esp + 0x33c]
mov esi, ecx
call fcn.0045dd9c
lea ecx, [0x584ea0]
mov dword [esp], ecx
lea ecx, [esp + 0x11c]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x374]
mov dword [esp + 8], ecx
call fcn.0040bf00
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4b62f9
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xb8]
jmp 0x4b6346
lea eax, [0x584ea0]
mov dword [esp], eax
lea ecx, [esp + 0x11c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x374]
mov dword [esp + 8], edx
call fcn.0040c450
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0xb8]
jmp 0x4b636c
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x9c]
inc ebx
mov ebp, dword [esp + 0x7c]
cmp ebp, ebx
jg 0x4b6276
jmp 0x4b5b2c
mov esi, dword [esp + 0x74]
lea eax, [esi + 1]
mov ecx, edx
mov edx, ebx
mov ebx, ebp
mov dword [esp + 0x74], eax
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ecx
mov dword [esp + 0xb8], ebx
mov ebp, dword [esp + 0x374]
mov esi, dword [esp + 0x378]
mov ebp, dword [ebp + 0x64]
mov dword [esp], esi
call ebp
mov eax, dword [esp + 0x74]
cmp dword [esp + 4], eax
jle 0x4b6337
mov ecx, dword [esp + 0x374]
mov edx, dword [esp + 0x378]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x138]
lea esi, [esp + 8]
call fcn.0045ddce
movzx eax, byte [esp + 0x168]
test al, al
jne 0x4b640b
lea edi, [esp + 0x16c]
lea esi, [esp + 0x138]
call fcn.0045ddce
mov eax, dword [esp + 0x178]
test eax, eax
je 0x4b64b3
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb8]
jmp 0x4b635f
mov eax, dword [esp + 0x148]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x14c]
mov dword [esp + 0xa8], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x16
je 0x4b6440
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xa8]
jmp 0x4b645b
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa8], ecx
lea edi, [esp + 0x1a0]
lea esi, [esp + 0x138]
call fcn.0045ddce
mov ecx, dword [esp + 0x1ac]
test ecx, ecx
jne 0x4b6484
xor eax, eax
jmp 0x4b649b
mov eax, dword [eax + 0x50]
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
test al, al
je 0x4b64b3
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb8]
jmp 0x4b635f
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x154]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x5a272d]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.00476940
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
cmp ecx, 1
jne 0x4b6505
cmp byte [eax], 0x2d
jne 0x4b6505
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb8]
jmp 0x4b635f
nop
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x5a232b]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004aeef0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0xb0], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x50], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004b4b80
movzx eax, byte [esp + 8]
test al, al
je 0x4b656c
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa4]
jmp 0x4b6570
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x36c]
lea ebx, [0x583aa0]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x64], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.00447200
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x368]
mov edx, dword [esp + 0x36c]
mov ebx, dword [esp + 0x64]
cmp edx, ebx
jl 0x4b65b9
mov edx, ebx
mov dword [esp + 0xdc], eax
cmp ecx, eax
je 0x4b65e2
mov dword [esp], eax
mov dword [esp + 4], ecx
shl edx, 2
mov dword [esp + 8], edx
call fcn.0045e030
mov eax, dword [esp + 0xdc]
mov ebx, dword [esp + 0x64]
mov edx, dword [esp + 0x36c]
cmp edx, ebx
jae 0x4b6d9b
mov ecx, dword [esp + 0x74]
mov dword [eax + edx*4], ecx
mov edx, dword [esp + 0x148]
mov dword [esp + 0x78], edx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0xc8], ebx
mov ebp, dword [edx + 0x60]
mov dword [esp], ebx
call ebp
mov eax, dword [esp + 8]
test eax, eax
jne 0x4b663b
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x16
je 0x4b6648
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0xc8]
jmp 0x4b6663
mov eax, dword [esp + 0x78]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
call eax
mov edx, dword [esp + 4]
mov ebx, dword [esp + 8]
mov dword [esp + 0x78], edx
mov dword [esp + 0xc8], ebx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
lea ebp, [0x5a2c15]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 6
call fcn.004bb0e0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4b66a4
xor eax, eax
jmp 0x4b66d1
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
lea ecx, [eax - 1]
cmp ecx, 0xd
jbe 0x4b66c8
cmp eax, 0x18
jne 0x4b66cf
mov eax, 1
jmp 0x4b66d1
xor eax, eax
mov byte [esp + 0x3e], al
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x4b66e4
mov edx, 1
jmp 0x4b671d
movzx edx, byte [esp + 0x168]
test dl, dl
jne 0x4b66f7
mov edx, 1
jmp 0x4b671d
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x19
setne al
mov ecx, dword [esp + 0x60]
mov edx, eax
movzx eax, byte [esp + 0x3e]
test dl, dl
je 0x4b685b
test ecx, ecx
jne 0x4b6739
mov edx, dword [esp + 0x138]
mov ebx, dword [esp + 0x13c]
jmp 0x4b6742
mov ebx, ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x98], ebx
mov dword [esp + 0xc4], edx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
lea eax, [0x5a3831]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 9
call fcn.004bb0e0
movzx eax, byte [esp + 0x10]
mov byte [esp + 0x3f], al
lea edi, [esp + 0x2ac]
xor eax, eax
call fcn.0045d92e
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x2ac], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x2b0], ecx
mov ecx, dword [esp + 0x60]
test ecx, ecx
setne cl
mov byte [esp + 0x2d4], cl
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x2d8], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x2dc], ecx
mov dword [esp + 0x2e0], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x2e4], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x2e8], ecx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x2ec], cl
movzx ecx, byte [esp + 0x3e]
mov byte [esp + 0x2ed], cl
mov ecx, dword [esp + 0x2ac]
mov edx, dword [esp + 0x2b0]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044ab30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2b4], eax
mov dword [esp + 0x2b8], ecx
mov dword [esp + 0x2bc], edx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x4b6a3d
mov eax, dword [esp + 0x78]
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xf8], ecx
lea edx, [0x584ee0]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xf4]
mov dword [esp + 8], ebp
call fcn.0040c450
mov eax, dword [esp + 0xc]
inc dword [eax]
mov eax, dword [esp + 0x78]
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xf8], ecx
lea edx, [0x584ee0]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xf4]
mov dword [esp + 8], ebp
call fcn.0040bf00
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x4b68f8
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xb8]
jmp 0x4b635f
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x60]
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x98], ecx
lea edi, [esp + 0x3cc]
mov edx, eax
xor eax, eax
call fcn.0045d92e
mov dword [esp + 0x3cc], edx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x3d0], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x3f8], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x3fc], ecx
mov dword [esp + 0x400], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x404], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x408], ecx
mov ecx, dword [esp + 0x54]
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x58]
cmp ebx, edx
jb 0x4b6990
mov ebp, dword [esp + 0xb8]
jmp 0x4b69ce
lea eax, [0x599700]
mov dword [esp], eax
mov ebp, dword [esp + 0xb8]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004472c0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0x54]
mov ebp, ebx
mov ebx, edx
mov edx, eax
xor eax, eax
mov eax, dword [0x705d20]
lea ecx, [ecx + ecx*8]
lea edi, [ebp + ecx*8]
test eax, eax
jne 0x4b69f0
lea esi, [esp + 0x3cc]
call fcn.0045dd9c
jmp 0x4b635f
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x94], edx
mov dword [esp + 0x88], ebx
lea eax, [0x599700]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x3cc]
mov dword [esp + 8], eax
call fcn.0040fb30
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0xd8]
jmp 0x4b635f
inc edx
cmp edx, ecx
jge 0x4b6a7d
movzx esi, byte [eax + edx]
xchg esi, eax
cmp al, 0x80
xchg esi, eax
jae 0x4b6a75
and esi, 0xffffffdf
lea edi, [esi - 0x41]
xchg edi, eax
cmp al, 0x19
xchg edi, eax
jbe 0x4b6a60
mov ebp, 1
jmp 0x4b6a3c
xchg esi, eax
cmp al, 0x4b
xchg esi, eax
je 0x4b6a6e
xchg esi, eax
cmp al, 0x53
xchg esi, eax
jne 0x4b6a3c
mov ebx, 1
jmp 0x4b6a3c
lea eax, [0x5b6cb8]
jmp 0x4b6a9d
test bl, bl
je 0x4b6a89
lea eax, [0x5b6cf4]
jmp 0x4b6a9d
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4b6a97
lea eax, [0x5b6ce8]
jmp 0x4b6a9d
lea eax, [0x5b6d14]
mov dword [esp + 0x2c0], eax
nop
mov dword [esp + 0x10c], 0
mov dword [esp + 0x114], 0
mov byte [esp + 0x118], 0
lea eax, [esp + 0x108]
mov dword [esp], eax
lea ecx, [0x5a233f]
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
call fcn.004af390
mov eax, dword [esp + 0x2b4]
mov ecx, dword [esp + 0x2b8]
mov edx, dword [esp + 0x2bc]
lea ebx, [esp + 0x108]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004b02e0
lea eax, [esp + 0x108]
mov dword [esp], eax
lea ecx, [0x5a23c9]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004af390
mov ecx, dword [esp + 0x10c]
mov eax, dword [esp + 0x108]
mov edx, dword [esp + 0x110]
mov ebx, dword [esp + 0x114]
cmp ecx, ebx
jb 0x4b6d94
mov dword [esp], 0
sub edx, ebx
neg edx
sar edx, 0x1f
and edx, ebx
add eax, edx
mov dword [esp + 4], eax
sub ecx, ebx
mov dword [esp + 8], ecx
call fcn.0044a9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2cc], eax
mov dword [esp + 0x2d0], ecx
mov eax, dword [esp + 0x2ac]
mov ecx, dword [esp + 0x2b0]
mov dword [esp], 0
lea edx, [0x5a233f]
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x5a23c9]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.0044a7c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x2c4], eax
mov dword [esp + 0x2c8], ecx
mov eax, dword [esp + 0x100]
lea ecx, [eax + 1]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x104]
cmp ebx, ecx
jae 0x4b6c40
lea ebp, [0x599700]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004472c0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x104], ecx
mov dword [esp + 0xfc], edx
lea ecx, [eax + 1]
mov dword [esp + 0x100], ecx
mov ecx, dword [0x705d20]
lea eax, [eax + eax*8]
lea edi, [edx + eax*8]
test ecx, ecx
jne 0x4b6c68
lea esi, [esp + 0x2ac]
call fcn.0045dd9c
jmp 0x4b6c85
lea eax, [0x599700]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x2ac]
mov dword [esp + 8], eax
call fcn.0040fb30
lea eax, [0x584ee0]
mov dword [esp], eax
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x374]
mov dword [esp + 8], edx
call fcn.0040bf00
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x4b6d7b
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4b6d8f
lea eax, [ecx + ecx*8]
lea esi, [edx + eax*8 - 0x48]
lea edi, [esp + 0x414]
call fcn.0045dd9c
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x104]
lea ebx, [eax + 1]
cmp edx, ebx
jae 0x4b6d36
lea ebp, [0x599700]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.004472c0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x104], edx
mov dword [esp + 0xfc], ecx
lea edx, [eax + 1]
mov dword [esp + 0x100], edx
mov edx, dword [0x705d20]
lea eax, [eax + eax*8]
lea edi, [ecx + eax*8]
test edx, edx
jne 0x4b6d5e
lea esi, [esp + 0x414]
call fcn.0045dd9c
jmp 0x4b6d7b
lea eax, [0x599700]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x414]
mov dword [esp + 8], eax
call fcn.0040fb30
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
mov ebp, dword [esp + 0xb8]
jmp 0x4b635f
call fcn.0045d780
mov eax, ebx
call fcn.0045d7e0
mov eax, edx
mov ecx, ebx
call fcn.0045d780
nop
call fcn.0045c2f0
jmp fcn.004b5a60