Function at 0x4b0c50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x68]
cmp eax, dword [ecx + 8]
jbe 0x4b2d7b
sub esp, 0xe8
mov ecx, dword [esp + 0x100]
test ecx, ecx
jle 0x4b2cfe
mov edx, dword [esp + 0xf8]
test edx, edx
je 0x4b0c96
test edx, 0x60
je 0x4b2c7a
mov edi, dword [esp + 0xec]
mov dword [edi + 0xc], 0
mov ebx, dword [0x823e50]
test ebx, ebx
jne 0x4b2c63
mov dword [edi + 0x10], 0
mov dword [edi + 0x1c], edx
mov ebx, dword [0x823e50]
test ebx, ebx
jne 0x4b2c2d
mov ebx, dword [esp + 0xf0]
mov dword [edi + 0x14], ebx
mov ebp, dword [esp + 0xf4]
mov dword [edi + 0x18], ebp
nop
mov esi, edx
and edx, 0x1f
mov dword [esp + 0x7c], edx
cmp edx, 0x10
jbe 0x4b2823
cmp edx, 0x15
ja 0x4b2084
cmp edx, 0x13
ja 0x4b16fa
cmp edx, 0x11
jne 0x4b16b5
mov eax, dword [esp + 0xfc]
cmp eax, 0x71
jg 0x4b169e
cmp eax, 0x58
jne 0x4b1690
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a11c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x80], ecx
mov edx, dword [eax + 0x28]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4b1023
mov eax, dword [esp + 0x7c]
cmp eax, 0x17
je 0x4b0fed
mov eax, dword [esp + 0xf8]
test eax, 0x100
jne 0x4b0f6d
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0049fb10
mov eax, dword [esp + 0xc]
mov dword [esp + 0x6c], eax
lea ecx, [0x607920]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0043bc20
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
xor ecx, ecx
jmp 0x4b0de6
mov ebx, dword [esp + 0xb0]
mov byte [ebx + eax], dl
lea edx, [eax + 1]
mov eax, ebx
mov ecx, edx
mov edx, dword [esp + 0x6c]
cmp ecx, edx
jge 0x4b0efa
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.0049f7a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
nop
and eax, 0x1f
mov dword [esp + 0x7c], eax
cmp eax, 9
ja 0x4b0eb8
cmp eax, 7
jne 0x4b0e50
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jb 0x4b0dd5
jmp 0x4b2d6e
cmp eax, 8
jne 0x4b0e64
movzx edx, byte [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4b0e49
cmp eax, 9
jne 0x4b0e78
movzx edx, word [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4b0e49
lea eax, [0x619c20]
mov dword [esp], eax
call fcn.0040a450
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x12
mov eax, dword [0x823e50]
test eax, eax
jne 0x4b0ea8
lea eax, [0x64aa4d]
mov dword [edi], eax
jmp 0x4b2d0a
lea eax, [0x64aa4d]
call fcn.004502e0
jmp 0x4b2d0a
cmp eax, 0xa
jne 0x4b0ece
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4b0e49
cmp eax, 0xb
jne 0x4b0ee4
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4b0e49
cmp eax, 0xc
jne 0x4b0e78
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jmp 0x4b0e49
mov ecx, edx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x9c], eax
mov ebx, dword [esp + 0x3c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x80]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xec]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
call fcn.004aeb70
add esp, 0xe8
ret
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0049fb10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.004a0e70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0049ecf0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
jmp 0x4b0efc
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.0049ecf0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
jmp 0x4b0efc
mov eax, dword [esp + 0xec]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x4b1246
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4b11f6
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x5b
xor ecx, ecx
jmp 0x4b10c9
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0049f7a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x100]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b0c50
mov eax, dword [esp + 0x54]
lea ecx, [eax + 1]
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
call fcn.0049fb10
mov eax, dword [esp + 0x54]
cmp dword [esp + 0xc], eax
jle 0x4b1181
test eax, eax
jle 0x4b1059
nop
mov ecx, dword [esp + 0xec]
mov edx, dword [ecx + 4]
lea ebx, [edx + 1]
mov ebp, dword [ecx + 8]
mov esi, dword [ecx]
cmp ebx, ebp
ja 0x4b112e
lea ebx, [edx + 1]
mov dword [ecx + 4], ebx
mov byte [esi + edx], 0x20
jmp 0x4b1059
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b117a
mov dword [edi], eax
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0x54]
mov ecx, edi
jmp 0x4b111f
call fcn.004502e0
jmp 0x4b116e
nop
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
ja 0x4b11a9
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
add esp, 0xe8
ret
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b11ef
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4b1198
call fcn.004502e0
jmp 0x4b11e9
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b123f
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4b104a
call fcn.004502e0
jmp 0x4b1236
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.004a11c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
mov dword [esp + 0x78], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x74], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4b164f
mov dword [esp + 0xac], esi
mov dword [esp + 0x70], edi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00450c70
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [edi + 8], ecx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b1633
mov edx, dword [esp + 0xac]
mov dword [edi], edx
mov ebx, dword [esp + 0x7c]
cmp ebx, 0x17
jne 0x4b1627
add ebx, 0xffffffeb
cmp ebx, 1
ja 0x4b1606
mov ebx, dword [esp + 0xf8]
test ebx, 0x200
je 0x4b15d6
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4b1553
nop
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x44]
lea ebp, [esi + ebp + 1]
cmp ebp, ecx
ja 0x4b14fc
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
xor eax, eax
jmp 0x4b13c6
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0049f7a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x100]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b0c50
mov eax, dword [esp + 0x58]
inc eax
mov ebx, dword [esp + 0xf8]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0049fb10
mov eax, dword [esp + 0x58]
cmp dword [esp + 0xc], eax
jle 0x4b1489
test eax, eax
jle 0x4b1351
nop
mov edi, dword [esp + 0xec]
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp edx, ebx
ja 0x4b1446
mov esi, 0x202c
mov word [ebp + ecx], si
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x823e50]
test ecx, ecx
jne 0x4b1436
mov dword [edi], ebp
jmp 0x4b1351
mov ecx, eax
mov eax, ebp
call fcn.004502e0
mov eax, ecx
jmp 0x4b1351
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], edx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
jmp 0x4b1415
nop
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
ja 0x4b14af
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b11a2
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b14f5
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4b14a0
call fcn.004502e0
jmp 0x4b14ef
lea ebx, [0x607920]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b154c
mov dword [edi], eax
mov ebx, dword [esp + 0xf8]
mov edx, eax
mov eax, ecx
jmp 0x4b1343
call fcn.004502e0
jmp 0x4b153c
nop
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x44]
lea ebx, [ebp + ebx + 5]
cmp ebx, ecx
ja 0x4b159b
mov ebp, 0x6c696e28
mov dword [edx + eax], ebp
mov ebp, 0x29
xchg ebp, ebx
mov byte [edx + eax + 4], bl
xchg ebp, ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x823e50]
test ecx, ecx
jne 0x4b1592
mov dword [edi], edx
add esp, 0xe8
ret
mov eax, edx
call fcn.004502e0
jmp 0x4b158b
mov dword [esp + 0x78], ebx
lea ebp, [0x607920]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043bce0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
jmp 0x4b1564
test ebx, 0x80
je 0x4b15fb
mov ebp, dword [esp + 0xf4]
mov esi, dword [ebp]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
mov ebp, esi
jmp 0x4b1324
mov ebp, dword [esp + 0xf4]
mov esi, ebp
jmp 0x4b15e8
mov esi, dword [esp + 0xf4]
mov esi, dword [esi]
test esi, esi
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
mov ebx, dword [esp + 0xf8]
jmp 0x4b1324
mov ebx, dword [esp + 0xf8]
jmp 0x4b132e
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.004502e0
mov eax, edx
mov edx, dword [esp + 0xac]
jmp 0x4b12f6
mov dword [esp + 0x88], ecx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043bce0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x88]
mov ebx, dword [esp + 0x78]
jmp 0x4b12ac
cmp eax, 0x71
je 0x4b0d25
jmp 0x4b1023
cmp eax, 0x73
je 0x4b0d25
cmp eax, 0x78
je 0x4b0d25
jmp 0x4b1023
lea eax, [edx - 0x12]
cmp eax, 1
ja 0x4b16e1
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
call fcn.004af260
jmp 0x4b11a2
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004adab0
jmp 0x4b11a2
cmp edx, 0x14
je 0x4b1dff
movzx edx, byte [edi + 0x2c]
test dl, dl
jne 0x4b1b77
nop
mov edx, dword [edi + 4]
mov eax, ecx
lea ecx, [edx + 4]
mov esi, dword [edi + 8]
mov ebp, dword [edi]
cmp ecx, esi
ja 0x4b1b27
mov ebx, 0x5b70616d
mov dword [ebp + edx], ebx
mov dword [edi + 4], ecx
mov dword [edi + 8], esi
mov ecx, dword [0x823e50]
test ecx, ecx
jne 0x4b1b17
mov dword [edi], ebp
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.004a9180
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
jle 0x4b18e2
mov dword [esp + 0x84], eax
mov dword [esp + 0x78], ecx
xor ebx, ebx
jmp 0x4b179c
mov ebp, dword [esp + 0xa8]
lea edx, [ebp + 0xc]
mov ebx, eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0xa8], edx
mov dword [esp + 0x60], ebx
mov ebp, dword [edx + 8]
mov dword [esp + 0x7c], ebp
mov esi, dword [edx + 4]
mov dword [esp + 0xb0], esi
mov edi, edx
mov edx, dword [edx]
mov dword [esp + 0xa4], edx
test ebx, ebx
jle 0x4b1b0b
mov ecx, dword [esp + 0xec]
movzx ebx, byte [ecx + 0x2c]
test bl, bl
je 0x4b1a80
nop
mov ebx, dword [ecx + 4]
lea ebp, [ebx + 2]
mov esi, dword [ecx]
mov edx, dword [ecx + 8]
cmp ebp, edx
ja 0x4b1a30
mov dword [esp + 0x74], edx
mov edx, 0x202c
mov word [esi + ebx], dx
mov dword [ecx + 4], ebp
mov edx, dword [esp + 0x74]
mov dword [ecx + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b1a1a
mov dword [ecx], esi
mov dword [esp], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x100]
lea ebx, [edx + 1]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x14], ebx
call fcn.004b0c50
nop
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4b19ca
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x3a
mov edx, dword [esp + 0x84]
mov ecx, dword [edx + 0x10]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x60]
cmp ebp, ecx
jae 0x4b2d73
lea ecx, [ebp + ebp*2]
mov edx, dword [ebx + ecx*4 + 8]
mov esi, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 0x14], edx
call fcn.004b0c50
mov eax, dword [esp + 0x60]
inc eax
mov ecx, dword [esp + 0x78]
cmp eax, ecx
jl 0x4b1789
mov eax, dword [esp + 0xec]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4b195d
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
ja 0x4b1910
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b11a2
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b1956
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4b1901
call fcn.004502e0
jmp 0x4b1950
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4b197d
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x5d
jmp 0x4b11a2
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b19c3
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4b196d
call fcn.004502e0
jmp 0x4b19bd
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b1a13
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4b1877
call fcn.004502e0
jmp 0x4b1a0a
mov edx, edi
mov edi, ecx
mov ebx, eax
mov eax, esi
call fcn.004502e0
mov eax, ebx
mov edi, edx
jmp 0x4b1819
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043bce0
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xec]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x74]
mov edi, dword [esp + 0xa8]
jmp 0x4b17f2
nop
mov ebx, dword [ecx + 4]
lea edi, [ebx + 1]
mov eax, dword [ecx + 8]
mov ebp, dword [ecx]
cmp edi, eax
ja 0x4b1aae
lea esi, [ebx + 1]
mov dword [ecx + 4], esi
mov byte [ebp + ebx], 0x20
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0xa8]
jmp 0x4b1819
lea ecx, [0x607920]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b1b04
mov dword [edi], eax
mov edx, dword [esp + 0xa4]
mov esi, dword [esp + 0xb0]
mov ebx, ecx
mov ebp, eax
mov ecx, edi
jmp 0x4b1a90
call fcn.004502e0
jmp 0x4b1aee
mov ecx, dword [esp + 0xec]
jmp 0x4b1819
mov ecx, eax
mov eax, ebp
call fcn.004502e0
mov eax, ecx
jmp 0x4b1744
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], edx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0043bce0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xf0]
mov edi, dword [esp + 0xec]
jmp 0x4b1725
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a11c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
mov dword [esp + 0x78], ebx
lea ebp, [ecx + ebx]
mov dword [esp + 0x74], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4b1dbe
mov dword [esp + 0x70], edi
mov dword [esp + 0xac], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00450c70
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [edi + 8], ecx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b1da2
mov edx, dword [esp + 0xac]
mov dword [edi], edx
mov ebx, dword [esp + 0x7c]
lea ebp, [ebx - 0x15]
cmp ebp, 1
ja 0x4b1d62
mov ebx, dword [esp + 0xf8]
test ebx, 0x200
je 0x4b1ca5
nop
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x48]
lea ebp, [esi + ebp + 1]
cmp ebp, ecx
ja 0x4b1c51
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
jmp 0x4b1744
lea ebx, [0x607920]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b1c9e
mov dword [edi], eax
mov ebx, dword [esp + 0xf8]
mov edx, eax
mov eax, ecx
jmp 0x4b1c42
call fcn.004502e0
jmp 0x4b1c91
test ebx, 0x80
je 0x4b1d54
mov ebp, dword [esp + 0xf4]
mov esi, dword [ebp]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4b1c31
nop
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x48]
lea ebx, [ebp + ebx + 5]
cmp ebx, ecx
ja 0x4b1d19
mov ebp, 0x6c696e28
mov dword [edx + eax], ebp
mov ebp, 0x29
xchg ebp, ebx
mov byte [edx + eax + 4], bl
xchg ebp, ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x823e50]
test ecx, ecx
jne 0x4b1d10
mov dword [edi], edx
add esp, 0xe8
ret
mov eax, edx
call fcn.004502e0
jmp 0x4b1d09
mov dword [esp + 0x78], ebx
lea ebp, [0x607920]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043bce0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
jmp 0x4b1ce2
mov ebp, dword [esp + 0xf4]
mov esi, ebp
jmp 0x4b1cbb
lea eax, [0x619c20]
mov dword [esp], eax
call fcn.0040a450
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x13
mov eax, dword [0x823e50]
test eax, eax
jne 0x4b1d92
lea eax, [0x64b1c0]
mov dword [edi], eax
jmp 0x4b2d23
lea eax, [0x64b1c0]
call fcn.004502e0
jmp 0x4b2d23
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.004502e0
mov eax, edx
mov edx, dword [esp + 0xac]
jmp 0x4b1c12
mov dword [esp + 0x94], eax
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043bce0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x78]
jmp 0x4b1bc8
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0049f510
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x4b204d
mov edi, dword [esp + 0xec]
movzx ecx, byte [edi + 0x2c]
test cl, cl
jne 0x4b1ebc
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp edx, ebx
ja 0x4b1e7d
mov esi, 0x6c696e3c
mov dword [ebp + ecx], esi
mov esi, 0x3e
xchg esi, eax
mov byte [ebp + ecx + 4], al
xchg esi, eax
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x823e50]
test ecx, ecx
jne 0x4b1e71
mov dword [edi], ebp
jmp 0x4b11a2
mov eax, ebp
call fcn.004502e0
jmp 0x4b11a2
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], edx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
jmp 0x4b1e46
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.004a11c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
mov dword [esp + 0x78], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x74], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4b200c
mov dword [esp + 0xac], edi
mov dword [esp + 0x70], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00450c70
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [edi + 8], ecx
mov edx, dword [0x823e50]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x50]
lea ebx, [ebp + ebx + 5]
test edx, edx
jne 0x4b1ff0
mov edx, dword [esp + 0xac]
mov dword [edi], edx
nop
cmp ebx, ecx
ja 0x4b1fb5
mov ebp, 0x6c696e28
mov dword [edx + eax], ebp
mov ebp, 0x29
xchg ebp, ebx
mov byte [edx + eax + 4], bl
xchg ebp, ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x823e50]
test ecx, ecx
jne 0x4b1fa9
mov dword [edi], edx
jmp 0x4b11a2
mov eax, edx
call fcn.004502e0
jmp 0x4b11a2
mov dword [esp + 0x78], ebx
lea ebp, [0x607920]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043bce0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
jmp 0x4b1f7d
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.004502e0
mov eax, edx
mov edx, dword [esp + 0xac]
jmp 0x4b1f78
mov dword [esp + 0x98], ecx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043bce0
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x98]
mov ebx, dword [esp + 0x78]
jmp 0x4b1f22
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x100]
inc eax
mov dword [esp + 0x14], eax
call fcn.004b0c50
jmp 0x4b11a2
cmp edx, 0x17
ja 0x4b2226
cmp edx, 0x16
jne 0x4b0d0c
test ecx, ecx
je 0x4b21e5
xor eax, eax
test al, al
je 0x4b16bd
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0049f510
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
nop
mov ebx, eax
and eax, 0x1f
cmp eax, 0x15
ja 0x4b21d1
cmp eax, 0x11
jne 0x4b21a7
mov dword [esp + 0x7c], ebx
nop
mov eax, dword [esp + 0xec]
mov ebp, dword [eax + 4]
lea esi, [ebp + 1]
mov edi, dword [eax]
mov ebx, dword [eax + 8]
cmp esi, ebx
ja 0x4b2137
lea ebx, [ebp + 1]
mov dword [eax + 4], ebx
mov byte [edi + ebp], 0x26
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x100]
inc eax
mov dword [esp + 0x14], eax
call fcn.004b0c50
add esp, 0xe8
ret
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xa4], edx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b21a0
mov dword [edi], eax
mov edx, dword [esp + 0xa4]
mov ebp, ecx
mov ecx, dword [esp + 0xb0]
mov ebx, eax
mov eax, edi
mov edi, ebx
jmp 0x4b20f7
call fcn.004502e0
jmp 0x4b2185
cmp eax, 0x15
je 0x4b20dc
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xec]
jmp 0x4b16bd
cmp eax, 0x17
je 0x4b20dc
cmp eax, 0x19
je 0x4b20dc
jmp 0x4b21b0
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a06b0
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x100]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xec]
jmp 0x4b20a0
cmp edx, 0x18
je 0x4b27e4
cmp edx, 0x19
jne 0x4b27d6
movzx eax, byte [edi + 0x2c]
test al, al
jne 0x4b26d3
mov eax, dword [edi + 4]
lea edx, [eax + 1]
mov ecx, dword [edi + 8]
mov esi, dword [edi]
cmp edx, ecx
ja 0x4b2675
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [esi + eax], 0x7b
lea eax, [esp + 8]
mov dword [esp + 0xa0], eax
xor ecx, ecx
jmp 0x4b22f5
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0xc], ebx
call fcn.004ad900
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x100]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b0c50
mov eax, dword [esp + 0x64]
lea ecx, [eax + 1]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov dword [esp + 0x64], ecx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.004a0600
mov eax, dword [esp + 0x64]
cmp dword [esp + 0xc], eax
jle 0x4b2601
test eax, eax
jle 0x4b25f5
mov edi, dword [esp + 0xec]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b2586
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp edx, ebx
ja 0x4b2540
mov esi, 0x202c
mov word [ebp + ecx], si
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x823e50]
test ecx, ecx
jne 0x4b2530
mov dword [edi], ebp
movzx ecx, byte [edi + 0x2b]
test cl, cl
je 0x4b251f
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xf8]
mov dword [esp + 8], edx
call fcn.004a11c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x2c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call eax
lea edi, [esp + 0xb4]
mov esi, dword [esp + 0xa0]
call fcn.004509fe
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb4]
test eax, eax
je 0x4b2513
mov dword [esp + 0x40], eax
nop
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
mov dword [esp + 0x78], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x74], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4b24d2
mov dword [esp + 0xac], edi
mov dword [esp + 0x70], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00450c70
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x70]
mov dword [edi + 8], ecx
mov edx, dword [0x823e50]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x40]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4b24b9
mov edx, dword [esp + 0xac]
mov dword [edi], edx
nop
cmp ebx, ecx
ja 0x4b246c
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
jmp 0x4b2273
lea ebp, [0x607920]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b24b2
mov dword [edi], eax
mov edx, eax
mov eax, ecx
jmp 0x4b245d
call fcn.004502e0
jmp 0x4b24ac
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.004502e0
mov eax, edx
mov edx, dword [esp + 0xac]
jmp 0x4b2458
mov dword [esp + 0x8c], ecx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043bce0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x78]
jmp 0x4b2406
mov edi, dword [esp + 0xec]
jmp 0x4b2273
movzx ecx, byte [edi + 0x2c]
test cl, cl
jne 0x4b2379
jmp 0x4b2273
mov ecx, eax
mov eax, ebp
call fcn.004502e0
mov eax, ecx
jmp 0x4b236d
mov dword [esp + 0x78], ecx
mov dword [esp + 0x74], edx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xec]
jmp 0x4b234d
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 1]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp edx, ebx
ja 0x4b25a6
lea edx, [ecx + 1]
mov dword [edi + 4], edx
mov byte [ebp + ecx], 0x20
jmp 0x4b236d
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b25ee
mov dword [edi], eax
mov ebp, eax
mov eax, dword [esp + 0x64]
jmp 0x4b2596
call fcn.004502e0
jmp 0x4b25e6
mov edi, dword [esp + 0xec]
jmp 0x4b236d
nop
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4b2628
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x7d
jmp 0x4b11a2
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b266e
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4b2618
call fcn.004502e0
jmp 0x4b2668
lea ebx, [0x607920]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xec]
mov dword [edi + 8], edx
mov edx, dword [0x823e50]
test edx, edx
jne 0x4b26cc
mov dword [edi], eax
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, eax
mov eax, ecx
jmp 0x4b2257
call fcn.004502e0
jmp 0x4b26b5
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a11c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xec]
mov ebx, dword [edx + 4]
lea ebp, [ebx + eax]
mov dword [esp + 0x78], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4b278d
mov dword [esp + 0xac], edi
mov dword [esp + 0x74], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00450c70
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x74]
mov dword [edi + 8], eax
mov eax, dword [0x823e50]
test eax, eax
jne 0x4b277f
mov eax, dword [esp + 0xac]
mov dword [edi], eax
mov ecx, dword [esp + 0x100]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
jmp 0x4b2244
mov eax, dword [esp + 0xac]
call fcn.004502e0
jmp 0x4b275e
mov dword [esp + 0x4c], eax
mov dword [esp + 0x74], ebx
mov dword [esp + 0x90], ecx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043bce0
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x74]
jmp 0x4b2718
cmp edx, 0x1a
je 0x4b16bd
jmp 0x4b16e1
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a10d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xec]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0xc], eax
call fcn.004ae9d0
jmp 0x4b11a2
cmp edx, 0xc
ja 0x4b2b50
cmp edx, 1
ja 0x4b29cf
test edx, edx
jne 0x4b2997
test ecx, ecx
jne 0x4b28f1
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x78], ecx
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp ecx, edx
ja 0x4b28be
mov dword [esp + 0x74], edx
mov dword [esp + 0xac], ebx
add eax, ebx
mov dword [esp], eax
lea eax, [0x64c5b4]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.00450c70
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x74]
mov dword [edi + 8], eax
mov eax, dword [0x823e50]
test eax, eax
jne 0x4b28ad
mov eax, dword [esp + 0xac]
mov dword [edi], eax
jmp 0x4b11a2
mov eax, dword [esp + 0xac]
call fcn.004502e0
jmp 0x4b11a2
mov dword [esp + 0x74], eax
lea ebp, [0x607920]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0043bce0
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x74]
jmp 0x4b2859
mov ecx, dword [esp + 0xfc]
cmp ecx, 0x76
jne 0x4b2986
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi]
mov ebp, dword [edi + 8]
cmp edx, ebp
ja 0x4b2947
mov esi, 0x6c696e3c
mov dword [ebx + ecx], esi
mov esi, 0x3e
xchg esi, eax
mov byte [ebx + ecx + 4], al
xchg esi, eax
mov dword [edi + 4], edx
mov dword [edi + 8], ebp
mov ecx, dword [0x823e50]
test ecx, ecx
jne 0x4b293b
mov dword [edi], ebx
jmp 0x4b11a2
mov eax, ebx
call fcn.004502e0
jmp 0x4b11a2
mov dword [esp + 0x78], edx
mov dword [esp + 0x74], ecx
lea eax, [0x607920]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043bce0
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov edi, dword [esp + 0xec]
jmp 0x4b2911
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.004add20
jmp 0x4b11a2
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.0049ec40
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov byte [esp + 4], al
mov eax, dword [esp + 0xfc]
mov dword [esp + 8], eax
call fcn.004ae250
jmp 0x4b11a2
lea eax, [edx - 2]
cmp eax, 4
ja 0x4b2a89
cmp edx, 3
ja 0x4b2a1d
cmp edx, 2
jne 0x4b2a12
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
call fcn.004ae340
jmp 0x4b11a2
movsx eax, byte [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b29ed
cmp edx, 4
jne 0x4b2a2d
movsx eax, word [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b29ed
cmp edx, 5
jne 0x4b2a3c
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b29ed
cmp edx, 6
jne 0x4b2a49
mov ecx, dword [ebp]
mov eax, dword [ebp + 4]
jmp 0x4b29ed
lea eax, [0x619c20]
mov dword [esp], eax
call fcn.0040a450
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x11
mov eax, dword [0x823e50]
test eax, eax
jne 0x4b2a79
lea eax, [0x64a4b2]
mov dword [edi], eax
jmp 0x4b2d55
lea eax, [0x64a4b2]
call fcn.004502e0
jmp 0x4b2d55
lea eax, [edx - 7]
cmp eax, 5
ja 0x4b16e1
cmp edx, 9
ja 0x4b2b27
cmp edx, 7
jne 0x4b2acd
mov eax, dword [ebp]
xor ecx, ecx
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
call fcn.004ae340
jmp 0x4b11a2
cmp edx, 8
jne 0x4b2ada
movzx eax, byte [ebp]
xor ecx, ecx
jmp 0x4b2aa8
cmp edx, 9
jne 0x4b2ae7
movzx eax, word [ebp]
xor ecx, ecx
jmp 0x4b2aa8
lea eax, [0x619c20]
mov dword [esp], eax
call fcn.0040a450
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x12
mov eax, dword [0x823e50]
test eax, eax
jne 0x4b2b17
lea eax, [0x64aa4d]
mov dword [edi], eax
jmp 0x4b2d3c
lea eax, [0x64aa4d]
call fcn.004502e0
jmp 0x4b2d3c
cmp edx, 0xa
jne 0x4b2b36
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4b2aa8
cmp edx, 0xb
jne 0x4b2b46
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
jmp 0x4b2aa8
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4b2aa8
cmp edx, 0xe
ja 0x4b2bb4
cmp edx, 0xd
jne 0x4b2b89
fld dword [ebp]
mov dword [esp], edi
fld st(0)
fstp st(1)
fld st(0)
fstp qword [esp + 4]
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
fstp st(0)
call fcn.004ae680
jmp 0x4b11a2
fld qword [ebp]
mov dword [esp], edi
fld st(0)
fstp qword [esp + 4]
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], eax
fstp st(0)
call fcn.004ae680
jmp 0x4b11a2
cmp edx, 0xf
jne 0x4b2bf7
fld dword [ebp + 4]
fld dword [ebp]
mov dword [esp], edi
fld st(0)
fstp st(1)
fld st(0)
fstp qword [esp + 4]
fld st(1)
fstp st(2)
fld st(1)
fstp qword [esp + 0xc]
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x18], eax
fstp st(0)
fstp st(0)
call fcn.004ae7f0
jmp 0x4b11a2
fld qword [ebp + 8]
fld qword [ebp]
mov dword [esp], edi
fld st(0)
fstp qword [esp + 4]
fld st(1)
fstp qword [esp + 0xc]
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x18], eax
fstp st(0)
fstp st(0)
call fcn.004ae7f0
jmp 0x4b11a2
lea esi, [edi + 0x14]
mov eax, edi
mov edi, esi
mov ebx, eax
mov eax, dword [esp + 0xf0]
call fcn.004502e0
lea edi, [ebx + 0x18]
mov ebp, eax
mov eax, dword [esp + 0xf4]
call fcn.004502e0
mov ebx, ebp
mov ebp, eax
mov edi, dword [esp + 0xec]
jmp 0x4b0cde
lea ebx, [edi + 0x10]
mov eax, edi
mov edi, ebx
mov ebp, eax
xor eax, eax
call fcn.004502e0
mov edi, ebp
jmp 0x4b0cb9
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
mov ecx, dword [esp + 0xf4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.0049f960
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xec]
mov dword [edx + 0xc], eax
mov eax, dword [0x823e50]
test eax, eax
jne 0x4b2cf2
mov dword [edx + 0x10], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
call fcn.004afc40
movzx eax, byte [esp + 8]
test al, al
jne 0x4b2ceb
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xf8]
jmp 0x4b0c96
add esp, 0xe8
ret
lea edi, [edx + 0x10]
mov eax, ecx
call fcn.004502e0
jmp 0x4b2cbc
mov edx, dword [esp + 0xf8]
jmp 0x4b0c96
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
lea eax, [0x60dba0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a3c0
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
lea eax, [0x60dba0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a3c0
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
lea eax, [0x60dba0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a3c0
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
lea eax, [0x60dba0]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0042a3c0
call fcn.00450360
mov eax, ebp
call fcn.00450360
nop
call fcn.0044eaa0
jmp fcn.004b0c50