Function at 0x4564ec
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x49cee3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push ebp
push esi
push edi
mov ebp, ecx
mov al, byte [esp + 0x64]
xor esi, esi
mov dword [esp + 0x5c], esi
mov byte [esp + 0x34], al
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
push esi
lea ecx, [esp + 0x18]
mov byte [esp + 0x60], 1
mov dword [esp + 0x24], esi
call fcn.0046eb50
push esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x60], 2
call fcn.0046eb50
push esi
lea ecx, [esp + 0x20]
mov byte [esp + 0x60], 3
call fcn.0046eb50
mov cl, byte [esp + 0x64]
mov edi, 0x4b63f0
mov byte [esp + 0x44], cl
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0x5c], 4
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x48], esi
mov ebx, ecx
lea ecx, [esp + 0x44]
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
call fcn.0040af80
cmp eax, ebx
jae 0x4563a5
call fcn.0048d50b
mov edi, dword [esp + 0x48]
cmp edi, esi
je 0x4563cd
mov al, byte [edi - 1]
test al, al
je 0x4563cd
cmp al, 0xff
je 0x4563cd
cmp ebx, esi
jne 0x4563f6
dec al
push esi
lea ecx, [esp + 0x48]
mov byte [edi - 1], al
call fcn.00401bb0
jmp 0x456425
cmp ebx, esi
jne 0x4563de
push 1
lea ecx, [esp + 0x48]
call fcn.00401bb0
jmp 0x456425
mov eax, dword [esp + 0x50]
cmp eax, 0x1f
ja 0x4563eb
cmp eax, ebx
jae 0x456404
push 1
lea ecx, [esp + 0x48]
call fcn.00401bb0
push ebx
lea ecx, [esp + 0x48]
call fcn.00401ea0
mov edi, dword [esp + 0x48]
mov ecx, ebx
mov esi, 0x4b63f0
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x4c], ebx
mov byte [eax + ebx], 0
mov cl, byte [0x4b65fd]
mov byte [esp + 0x5c], 5
push ecx
call fcn.0040b460
mov edx, dword [0x4b63dc]
add esp, 4
mov dword [esp + 0x2c], eax
mov byte [edx + 0x60], 1
mov byte [ebp + 0x34], 0
mov esi, dword [ebp + 0x40]
mov edi, dword [ebp + 0x3c]
cmp esi, esi
mov ebx, esi
je 0x456475
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
call fcn.0046eb30
mov ecx, edi
call fcn.0046ee50
add ebx, 4
add edi, 4
cmp ebx, esi
jne 0x456457
mov ebx, dword [ebp + 0x40]
mov esi, edi
cmp edi, ebx
je 0x45648c
mov ecx, esi
call fcn.0046ec60
add esi, 4
cmp esi, ebx
jne 0x45647e
push ecx
mov dword [ebp + 0x40], edi
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0
call fcn.0046eb50
lea esi, [ebp + 0x28]
mov ecx, esi
call fcn.0046ee50
mov al, byte [0x4b65fd]
mov ecx, esi
push eax
call fcn.0046efc0
lea ecx, [esp + 0x64]
push ecx
mov ecx, esi
call fcn.0046edf0
push 0
mov ecx, esi
call fcn.0046efc0
push 1
mov ecx, esi
call fcn.0046efc0
push 1
mov ecx, esi
call fcn.0046efc0
push 0
push 0
push ecx
mov word [ebp + 0x2c], 1
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
push 0x4ae254
call fcn.0046ebc0
push ecx
mov byte [esp + 0x6c], 6
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
push 0x4af0b4
call fcn.0046ebc0
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
push ecx
lea eax, [ebp + 0x28]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0046eb30
sub esp, 0x10
lea edx, [esp + 0x27]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
push str.TEMPLET1.DB
mov byte [esp + 0x78], 7
call fcn.00401aa0
mov ecx, dword [0x4b63ec]
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x74], 5
call fcn.00414c40
xor ebx, ebx
cmp ax, bx
je 0x4579d9
mov ecx, dword [esp + 0x38]
push ebx
call fcn.0046ee40
push 4
lea ecx, [esp + 0x38]
mov byte [esp + 0x28], al
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.0046eb30
lea ecx, [esp + 0x18]
call fcn.0046ee50
push 5
lea ecx, [esp + 0x38]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.0046eb30
lea ecx, [esp + 0x1c]
call fcn.0046ee50
push 0xb
lea ecx, [esp + 0x38]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.0046eb30
lea ecx, [esp + 0x20]
call fcn.0046ee50
mov ecx, dword [esp + 0x24]
and ecx, 0xff
lea eax, [ecx - 1]
cmp eax, 0x26
ja case.0x4565f3.13
jmp dword [eax*4 + 0x457a9c]
mov ecx, dword [0x4b63ec]
lea edx, [esp + 0x1c]
push edx
call fcn.00415640
push ebx
push ebx
push ecx
lea eax, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.0046eb30
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
mov byte [esp + 0x70], 8
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x456686
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00417830
mov word [ebp + 0x2c], ax
mov ecx, ebp
call fcn.004562b0
jmp case.0x4565f3.13
mov ecx, dword [0x4b63ec]
lea eax, [esp + 0x1c]
push eax
call fcn.00415640
push ebx
push 1
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 9
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
lea eax, [esp + 0x18]
push eax
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00417830
mov word [ebp + 0x2c], ax
mov ecx, ebp
call fcn.004562b0
jmp case.0x4565f3.13
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 2
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0xa
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 3
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0xb
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
cmp ax, 1
jne 0x456827
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
cmp ax, 2
jne 0x45671f
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 4
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0xc
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
cmp ax, 3
jne 0x4568e9
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
cmp ax, 4
jne 0x45671f
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 5
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0xd
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
cmp ax, 3
jne 0x4569ab
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
cmp ax, 4
jne 0x4569e6
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
cmp ax, 2
jne 0x45671f
mov ecx, ebp
mov word [ebp + 0x2c], bx
call fcn.004562b0
jmp case.0x4565f3.13
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 7
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0xe
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
cmp ax, 5
jne 0x456a83
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
cmp ax, 6
jne 0x456abe
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
cmp ax, 7
jne 0x45671f
mov ecx, ebp
mov word [ebp + 0x2c], bx
call fcn.004562b0
jmp case.0x4565f3.13
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 8
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0xf
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
cmp ax, 6
jne 0x456b5b
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
cmp ax, 7
jne 0x45671f
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 0x17
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0x10
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
cmp ax, 8
jne 0x456c1d
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
cmp ax, 9
jne 0x4569e6
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 0x16
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0x11
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
cmp ax, 9
jne 0x456cdf
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
cmp ax, 2
jne 0x45671f
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [0x4b63ec]
call fcn.00415640
push ebx
push 0x19
push ecx
lea edx, [ebp + 0x30]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0046eb30
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x70], 0x12
call fcn.0046eb30
mov ecx, 0x4b6448
mov byte [esp + 0x6c], 5
call fcn.00472d90
inc word [ebp + 0x2c]
cmp ax, 8
jne 0x456da1
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
cmp ax, 0xa
jne 0x45671f
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov ecx, ebp
call fcn.004619c0
mov ecx, ebp
mov dword [esp + 0x20], eax
call fcn.004562b0
jmp case.0x4565f3.13
push 0x4b63c8
push 1
lea ecx, [esp + 0x3c]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.0046eb30
mov ecx, dword [0x4b63dc]
call fcn.004101b0
inc word [ebp + 0x2c]
push ecx
cmp ax, 1
mov dword [esp + 0x24], eax
mov ecx, esp
jne 0x456e5e
lea edx, [esp + 0x18]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
lea edx, [esp + 0x1c]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x456eaf
xor eax, eax
jmp 0x456eb8
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x456ebe
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x456f11
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x13
je 0x456efe
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x456ee9
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.00457b40
mov ecx, ebp
mov dword [esp + 0x20], eax
call fcn.004562b0
jmp case.0x4565f3.13
mov dl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], dl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x456f51
xor eax, eax
jmp 0x456f5a
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x456f60
xor eax, eax
shl eax, 2
push eax
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x456faf
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x14
je 0x456f9c
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x456f87
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.00458030
test ax, ax
mov dword [esp + 0x20], eax
jne 0x45671f
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x457025
xor eax, eax
jmp 0x45702e
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x457034
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x457087
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x15
je 0x457074
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x45705f
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.0045b150
test ax, ax
mov dword [esp + 0x20], eax
jne 0x45671f
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x4570fd
xor eax, eax
jmp 0x457106
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x45710c
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x45715f
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x16
je 0x45714c
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x457137
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.00465410
mov ecx, ebp
mov dword [esp + 0x20], eax
call fcn.004562b0
jmp case.0x4565f3.13
mov ecx, dword [0x4b63dc]
call fcn.0040d270
inc word [ebp + 0x2c]
push ecx
cmp ax, 1
mov dword [esp + 0x24], eax
mov ecx, esp
jne 0x4571ca
lea edx, [esp + 0x18]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
lea edx, [esp + 0x1c]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov ecx, dword [0x4b63dc]
call fcn.0040e170
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
push 3
lea ecx, [esp + 0x38]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x457290
push 3
lea ecx, [esp + 0x38]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00417620
push eax
call fcn.00427b70
add esp, 4
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
mov ecx, ebp
call fcn.00462c00
mov ecx, ebp
mov dword [esp + 0x20], eax
call fcn.004562b0
jmp case.0x4565f3.13
push 0xe
lea edx, [esp + 0x38]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.0040a7f0
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx]
call dword [eax + 8]
inc word [ebp + 0x2c]
push ecx
cmp ax, 1
mov dword [esp + 0x24], eax
mov ecx, esp
jne 0x457339
lea edx, [esp + 0x18]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
lea edx, [esp + 0x1c]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
cmp ax, bx
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
inc word [ebp + 0x2c]
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x38]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.0040a7f0
mov ecx, ebp
call fcn.00463b70
mov ecx, ebp
mov dword [esp + 0x20], eax
call fcn.004562b0
jmp case.0x4565f3.13
mov al, byte [esp + 0x34]
inc word [ebp + 0x2c]
sub esp, 0x10
mov ebx, esp
mov dword [esp + 0x40], esp
mov byte [ebx], al
mov ecx, dword [esp + 0x48]
test ecx, ecx
jne 0x4573bd
xor eax, eax
jmp 0x4573c6
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
test eax, eax
jge 0x4573cc
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.0048db76
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x4c]
add esp, 4
mov esi, eax
cmp edi, ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], esi
je 0x457421
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x17
je 0x45740a
push edi
mov ecx, esi
call fcn.0046eb30
mov eax, dword [esp + 0x30]
add edi, 4
add esi, 4
cmp edi, eax
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x4573f5
mov ecx, ebp
mov dword [ebx + 8], esi
mov dword [ebx + 0xc], esi
call fcn.00464f00
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
mov dword [esp + 0x28], eax
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x457482
xor eax, eax
jmp 0x45748b
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x457491
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x4574e4
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x18
je 0x4574d1
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x4574bc
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.00465220
inc word [ebp + 0x2c]
push ecx
cmp ax, 1
mov dword [esp + 0x24], eax
mov ecx, esp
jne 0x457534
lea edx, [esp + 0x18]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
lea edx, [esp + 0x1c]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x457585
xor eax, eax
jmp 0x45758e
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x457594
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x4575e7
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x19
je 0x4575d4
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x4575bf
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.00465910
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
mov dword [esp + 0x28], eax
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x457650
xor eax, eax
jmp 0x457659
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x45765f
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x4576b2
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x1a
je 0x45769f
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x45768a
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.0045f710
test ax, ax
mov dword [esp + 0x20], eax
jne 0x45671f
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x457728
xor eax, eax
jmp 0x457731
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x457737
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x45778a
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x1b
je 0x457777
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x457762
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.00465b30
inc word [ebp + 0x2c]
push ecx
cmp ax, 1
mov dword [esp + 0x24], eax
mov ecx, esp
jne 0x4577da
lea edx, [esp + 0x18]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
lea edx, [esp + 0x1c]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x45782b
xor eax, eax
jmp 0x457834
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x45783a
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x45788d
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x1c
je 0x45787a
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x457865
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.00466830
inc word [ebp + 0x2c]
push ecx
test ax, ax
mov dword [esp + 0x24], eax
mov ecx, esp
jne 0x4578dc
lea edx, [esp + 0x18]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
lea edx, [esp + 0x1c]
mov dword [esp + 0x34], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x45670a
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [esp + 0x30], eax
mov byte [eax], cl
mov ecx, dword [esp + 0x48]
cmp ecx, ebx
jne 0x45792d
xor eax, eax
jmp 0x457936
mov eax, dword [esp + 0x4c]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x45793c
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0048db76
mov ecx, dword [esp + 0x34]
add esp, 4
mov esi, eax
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov ebx, ecx
cmp edi, ecx
mov dword [esp + 0x38], esi
je 0x45798f
mov dword [esp + 0x40], esi
test esi, esi
mov byte [esp + 0x6c], 0x1d
je 0x45797c
push edi
mov ecx, esi
call fcn.0046eb30
add edi, 4
add esi, 4
cmp edi, ebx
mov byte [esp + 0x6c], 5
mov dword [esp + 0x38], esi
jne 0x457967
mov eax, dword [esp + 0x30]
mov ecx, ebp
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
call fcn.00466b40
inc word [ebp + 0x2c]
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
mov dword [esp + 0x28], eax
call fcn.0046eb30
mov ecx, dword [0x4b63ec]
call fcn.00416cf0
test ax, ax
je 0x45671f
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
jmp 0x456706
mov eax, dword [esp + 0x48]
cmp eax, ebx
je 0x4579fe
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4579f5
cmp al, 0xff
je 0x4579f5
dec al
mov byte [ecx], al
jmp 0x4579fe
push ecx
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov byte [esp + 0x5c], 3
call fcn.0046ec60
lea ecx, [esp + 0x18]
mov byte [esp + 0x5c], 2
call fcn.0046ec60
lea ecx, [esp + 0x14]
mov byte [esp + 0x5c], 1
call fcn.0046ec60
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
cmp esi, eax
mov byte [esp + 0x5c], 0
mov edi, eax
je 0x457a59
mov ecx, esi
call fcn.0046ec60
add esi, 4
cmp esi, edi
jne 0x457a47
mov esi, dword [esp + 0x38]
push esi
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x64]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x5c], 0xffffffff
call fcn.0046ec60
mov ecx, dword [esp + 0x54]
mov ax, word [esp + 0x20]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x50
ret 4