Function at 0x4b8ab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x64]
cmp eax, dword [ecx + 8]
jbe 0x4ba8b2
sub esp, 0xe4
mov ecx, dword [esp + 0xfc]
test ecx, ecx
jle 0x4b8b79
mov edx, dword [esp + 0xf4]
test edx, edx
je 0x4b8b80
test edx, 0x60
jne 0x4b8b80
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov ecx, dword [esp + 0xf0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004823c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe8]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4b8b3e
mov dword [edx + 0x10], eax
jmp 0x4b8b46
lea edi, [edx + 0x10]
call fcn.0045c980
mov dword [esp], edx
mov eax, dword [esp + 0xf8]
mov dword [esp + 4], eax
call fcn.004b7d20
movzx eax, byte [esp + 8]
test al, al
jne 0x4b8b72
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0xf4]
jmp 0x4b8b80
add esp, 0xe4
ret
mov edx, dword [esp + 0xf4]
mov edi, dword [esp + 0xe8]
mov dword [edi + 0xc], 0
mov ebx, dword [0x68ad40]
test ebx, ebx
jne 0x4b8ba1
mov dword [edi + 0x10], 0
jmp 0x4b8bb1
lea ebx, [edi + 0x10]
xor eax, eax
mov ebp, edi
mov edi, ebx
call fcn.0045c980
mov edi, ebp
mov dword [edi + 0x1c], edx
mov ebx, dword [0x68ad40]
test ebx, ebx
jne 0x4b8bd4
mov ebx, dword [esp + 0xec]
mov dword [edi + 0x14], ebx
mov ebp, dword [esp + 0xf0]
mov dword [edi + 0x18], ebp
jmp 0x4b8c01
lea ebx, [edi + 0x14]
mov eax, dword [esp + 0xec]
mov ebp, edi
mov edi, ebx
call fcn.0045c980
lea edi, [ebp + 0x18]
mov ebx, eax
mov eax, dword [esp + 0xf0]
call fcn.0045c980
mov ebp, eax
mov edi, dword [esp + 0xe8]
nop
mov esi, edx
and edx, 0x1f
cmp edx, 0x10
jbe 0x4b9977
cmp edx, 0x15
ja 0x4b9192
cmp edx, 0x13
ja 0x4b8c2c
cmp edx, 0x11
je 0x4b91a4
jmp 0x4b98fb
cmp edx, 0x14
je 0x4b8f31
movzx edx, byte [edi + 0x2c]
test dl, dl
jne 0x4b8ccd
nop
mov edx, dword [edi + 4]
mov eax, ecx
lea ecx, [edx + 4]
mov esi, dword [edi + 8]
mov ebp, dword [edi]
cmp esi, ecx
jae 0x4b8c9e
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], ecx
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.004464a0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xec]
mov edi, dword [esp + 0xe8]
mov dword [ebp + edx], 0x5b70616d
mov dword [edi + 4], ecx
mov dword [edi + 8], esi
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4b8cbd
mov dword [edi], ebp
jmp 0x4b8e74
mov ecx, eax
mov eax, ebp
call fcn.0045c980
mov eax, ecx
jmp 0x4b8e74
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00483740
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xe8]
mov edx, dword [ecx + 4]
mov dword [esp + 0x7c], edx
lea ebx, [eax + edx]
mov dword [esp + 0x78], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b8d56
mov dword [esp + 0x90], ebp
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x90]
mov dword [esp + 0x74], esi
mov dword [esp + 0xac], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0045d2d0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xe8]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x74]
mov dword [edi + 8], ecx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b8d9e
mov edx, dword [esp + 0xac]
mov dword [edi], edx
jmp 0x4b8db5
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.0045c980
mov eax, edx
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0xf4]
test ebx, 0x200
je 0x4b8dcd
mov ebp, dword [esp + 0xf0]
jmp 0x4b8e00
test ebx, 0x80
je 0x4b8de1
mov ebp, dword [esp + 0xf0]
mov esi, dword [ebp]
jmp 0x4b8dea
mov ebp, dword [esp + 0xf0]
mov esi, ebp
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4b8eb5
nop
mov esi, dword [esp + 0x7c]
mov ebx, dword [esp + 0x44]
lea ebx, [ebx + esi + 1]
cmp ecx, ebx
jae 0x4b8e63
lea ebp, [0x5317a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b8e53
mov dword [edi], eax
jmp 0x4b8e58
call fcn.0045c980
mov ebp, dword [esp + 0xf0]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov eax, dword [esp + 0xf0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 8], eax
call fcn.004b1d20
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
jle 0x4ba54c
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x84], eax
xor ebx, ebx
jmp 0x4ba642
nop
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x44]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4b8f03
mov dword [esp + 0x7c], ebx
lea ebp, [0x5317a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xe8]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4b8f23
mov dword [edi], edx
jmp 0x4b8f2a
mov eax, edx
call fcn.0045c980
add esp, 0xe4
ret
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00481fc0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test eax, eax
jne 0x4b915b
mov edi, dword [esp + 0xe8]
movzx ecx, byte [edi + 0x2c]
test cl, cl
jne 0x4b8fe1
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b8fb1
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], edx
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004464a0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
mov edi, dword [esp + 0xe8]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4b8fd5
mov dword [edi], ebp
jmp 0x4b9cc1
mov eax, ebp
call fcn.0045c980
jmp 0x4b9cc1
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 8], eax
call fcn.00483740
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xe8]
mov edx, dword [ecx + 4]
mov dword [esp + 0x7c], edx
lea ebx, [edx + eax]
mov dword [esp + 0x78], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b907f
mov dword [esp + 0x88], ebp
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x74], esi
mov dword [esp + 0xac], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0045d2d0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xe8]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x74]
mov dword [edi + 8], ecx
mov edx, dword [0x68ad40]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x48]
lea ebx, [ebp + ebx + 5]
test edx, edx
jne 0x4b90d3
mov edx, dword [esp + 0xac]
mov dword [edi], edx
jmp 0x4b90ea
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.0045c980
mov eax, edx
mov edx, dword [esp + 0xac]
nop
cmp ecx, ebx
jae 0x4b912c
mov dword [esp + 0x7c], ebx
lea ebp, [0x5317a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xe8]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4b914f
mov dword [edi], edx
jmp 0x4b9cc1
mov eax, edx
call fcn.0045c980
jmp 0x4b9cc1
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xfc]
inc eax
mov dword [esp + 0x14], eax
call fcn.004b8ab0
jmp 0x4b9cc1
cmp edx, 0x17
ja 0x4b9764
cmp edx, 0x16
je 0x4b95ed
mov dword [esp + 0x70], edx
mov eax, dword [esp + 0xf8]
cmp eax, 0x71
jg 0x4b91c3
cmp eax, 0x58
je 0x4b91d1
cmp eax, 0x71
je 0x4b91d1
jmp 0x4b9364
cmp eax, 0x73
je 0x4b91d1
cmp eax, 0x78
jne 0x4b9364
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00483740
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x80], ecx
mov edx, dword [eax + 0x28]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4b9336
mov eax, dword [esp + 0x70]
cmp eax, 0x17
je 0x4b9300
mov eax, dword [esp + 0xf4]
test eax, 0x100
jne 0x4b9280
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00482550
mov eax, dword [esp + 0xc]
mov dword [esp + 0x68], eax
lea ecx, [0x5317a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00446320
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
xor ecx, ecx
jmp 0x4ba43f
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00482550
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov ecx, dword [esp + 0xf0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xf4]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.00483410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004812c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
jmp 0x4ba3bd
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov eax, dword [esp + 0xf0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 8], eax
call fcn.004812c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
jmp 0x4ba3bd
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
mov edi, dword [esp + 0xe8]
movzx edx, byte [edi + 0x2c]
test dl, dl
jne 0x4b93e3
mov edx, dword [edi + 4]
lea ecx, [edx + 1]
mov eax, dword [edi]
mov esi, dword [edi + 8]
cmp esi, ecx
jae 0x4b93d2
lea ebx, [0x5317a0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b93bd
mov dword [edi], eax
jmp 0x4b93c2
call fcn.0045c980
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
mov edx, ecx
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
mov byte [eax + edx], 0x5b
xor eax, eax
jmp 0x4ba2a8
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00483740
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xe8]
mov edx, dword [ecx + 4]
mov dword [esp + 0x7c], edx
lea ebx, [eax + edx]
mov dword [esp + 0x78], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b946c
mov dword [esp + 0x8c], ebp
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x8c]
mov dword [esp + 0xac], edi
mov dword [esp + 0x74], esi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0045d2d0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xe8]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x74]
mov dword [edi + 8], ecx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b94b4
mov edx, dword [esp + 0xac]
mov dword [edi], edx
jmp 0x4b94cb
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.0045c980
mov eax, edx
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x70]
cmp ebx, 0x17
jne 0x4b9573
mov ebx, dword [esp + 0xf0]
mov ebp, dword [ebx]
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4b957a
nop
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x4c]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4b9545
mov dword [esp + 0x7c], ebx
lea ebp, [0x5317a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xe8]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4b9565
mov dword [edi], edx
jmp 0x4b956c
mov eax, edx
call fcn.0045c980
add esp, 0xe4
ret
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x4c]
lea ebp, [esi + ebp + 1]
cmp ecx, ebp
jae 0x4b95dc
lea ebx, [0x5317a0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b95cc
mov dword [edi], eax
jmp 0x4b95d1
call fcn.0045c980
mov ebx, dword [esp + 0xf0]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
xor eax, eax
jmp 0x4ba0fd
test ecx, ecx
je 0x4b95f5
xor eax, eax
jmp 0x4b9631
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00482c60
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0xfc]
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
mov edi, dword [esp + 0xe8]
test al, al
je 0x4b98fb
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00481fc0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
nop
mov ebx, eax
and eax, 0x1f
cmp eax, 0x15
ja 0x4b966f
cmp eax, 0x11
je 0x4b967d
cmp eax, 0x15
je 0x4b967d
jmp 0x4b9743
cmp eax, 0x17
je 0x4b967d
cmp eax, 0x19
jne 0x4b9743
mov dword [esp + 0x70], ebx
nop
mov eax, dword [esp + 0xe8]
mov ebp, dword [eax + 4]
lea esi, [ebp + 1]
mov edi, dword [eax]
mov ebx, dword [eax + 8]
cmp ebx, esi
jae 0x4b9703
mov dword [esp + 0xa8], edx
mov dword [esp + 0xa4], ecx
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b96e8
mov dword [edi], eax
jmp 0x4b96ed
call fcn.0045c980
mov edx, dword [esp + 0xa8]
mov ebp, ecx
mov ecx, dword [esp + 0xa4]
mov ebx, eax
mov eax, edi
mov edi, ebx
lea ebx, [ebp + 1]
mov dword [eax + 4], ebx
mov byte [edi + ebp], 0x26
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xfc]
inc eax
mov dword [esp + 0x14], eax
call fcn.004b8ab0
add esp, 0xe4
ret
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
mov edi, dword [esp + 0xe8]
jmp 0x4b98fb
cmp edx, 0x18
je 0x4b9938
cmp edx, 0x19
jne 0x4b98f6
movzx eax, byte [edi + 0x2c]
test al, al
je 0x4b987b
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00483740
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xe8]
mov edx, dword [ecx + 4]
lea ebx, [eax + edx]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b980b
mov dword [esp + 0x78], edx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x40], eax
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0x94]
mov dword [esp + 0x78], esi
mov dword [esp + 0xac], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0045d2d0
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x78]
mov dword [edi + 8], eax
mov eax, dword [0x68ad40]
test eax, eax
jne 0x4b9853
mov eax, dword [esp + 0xac]
mov dword [edi], eax
jmp 0x4b985f
mov eax, dword [esp + 0xac]
call fcn.0045c980
mov ecx, dword [esp + 0xfc]
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
mov eax, dword [edi + 4]
lea edx, [eax + 1]
mov ecx, dword [edi]
mov esi, dword [edi + 8]
cmp esi, edx
jae 0x4b98e5
lea ebx, [0x5317a0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b98cc
mov dword [edi], eax
jmp 0x4b98d1
call fcn.0045c980
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
mov edx, eax
mov eax, ecx
mov ecx, edx
lea edx, [eax + 1]
mov dword [edi + 4], edx
mov byte [ecx + eax], 0x7b
xor eax, eax
jmp 0x4b9d44
cmp edx, 0x1a
jne 0x4b991f
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
call fcn.004b7450
jmp 0x4b9cc1
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004b5db0
jmp 0x4b9cc1
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00483650
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xf8]
mov dword [esp + 0xc], eax
call fcn.004b6c00
jmp 0x4b9cc1
cmp edx, 0xc
ja 0x4b9bef
cmp edx, 1
ja 0x4b9b12
test edx, edx
jne 0x4b9ada
test ecx, ecx
jne 0x4b9a40
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x7c], ecx
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp edx, ecx
jae 0x4b99db
mov dword [esp + 0x78], eax
lea ebp, [0x5317a0]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.004464a0
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], edx
mov dword [esp + 0xac], ebx
add eax, ebx
mov dword [esp], eax
lea eax, [0x5537b1]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.0045d2d0
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x78]
mov dword [edi + 8], eax
mov eax, dword [0x68ad40]
test eax, eax
jne 0x4b9a2f
mov eax, dword [esp + 0xac]
mov dword [edi], eax
jmp 0x4b9cc1
mov eax, dword [esp + 0xac]
call fcn.0045c980
jmp 0x4b9cc1
mov ecx, dword [esp + 0xf8]
cmp ecx, 0x76
jne 0x4b9ac9
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b9a99
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], ecx
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004464a0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0xe8]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4b9abd
mov dword [edi], ebp
jmp 0x4b9cc1
mov eax, ebp
call fcn.0045c980
jmp 0x4b9cc1
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.004b6010
jmp 0x4b9cc1
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00481210
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xe8]
mov dword [esp], ecx
mov byte [esp + 4], al
mov eax, dword [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.004b64e0
jmp 0x4b9cc1
cmp edx, 6
ja 0x4b9b86
cmp edx, 3
ja 0x4b9b36
cmp edx, 2
jne 0x4b9b2b
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b9b61
movsx eax, byte [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b9b61
cmp edx, 4
jne 0x4b9b46
movsx eax, word [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b9b61
cmp edx, 5
jne 0x4b9b55
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b9b61
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
call fcn.004b65d0
jmp 0x4b9cc1
cmp edx, 9
ja 0x4b9bac
cmp edx, 7
jne 0x4b9b97
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4b9bca
cmp edx, 8
jne 0x4b9ba4
movzx eax, byte [ebp]
xor ecx, ecx
jmp 0x4b9bca
movzx eax, word [ebp]
xor ecx, ecx
jmp 0x4b9bca
cmp edx, 0xa
jne 0x4b9bb8
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4b9bca
cmp edx, 0xb
jne 0x4b9bc5
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
jmp 0x4b9bca
mov eax, dword [ebp]
xor ecx, ecx
mov dword [esp], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
call fcn.004b65d0
jmp 0x4b9cc1
cmp edx, 0xe
ja 0x4b9c50
cmp edx, 0xd
jne 0x4b9c28
movss xmm0, dword [ebp]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
call fcn.004b68e0
jmp 0x4b9cc1
movsd xmm0, qword [ebp]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
call fcn.004b68e0
jmp 0x4b9cc1
cmp edx, 0xf
jne 0x4b9c90
movss xmm0, dword [ebp]
movss xmm1, dword [ebp + 4]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
cvtss2sd xmm0, xmm1
movsd qword [esp + 0xc], xmm0
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x18], eax
call fcn.004b6a40
jmp 0x4b9cc1
movsd xmm0, qword [ebp]
movsd xmm1, qword [ebp + 8]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
movsd qword [esp + 0xc], xmm1
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x18], eax
call fcn.004b6a40
add esp, 0xe4
ret
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004b5d10
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0xfc]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b8ab0
mov eax, dword [esp + 0x64]
inc eax
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
mov dword [esp + 0x64], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0xf4]
mov dword [esp + 8], ecx
call fcn.00482bb0
mov eax, dword [esp + 0x64]
cmp dword [esp + 0xc], eax
jle 0x4ba018
test eax, eax
jle 0x4b9e65
mov edi, dword [esp + 0xe8]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b9dfd
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b9dd5
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], ecx
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004464a0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0xe8]
mov word [ebp + ecx], 0x202c
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4b9df0
mov dword [edi], ebp
jmp 0x4b9e6c
mov ecx, eax
mov eax, ebp
call fcn.0045c980
mov eax, ecx
jmp 0x4b9e6c
mov ecx, dword [edi + 4]
lea edx, [ecx + 1]
mov ebx, dword [edi]
mov ebp, dword [edi + 8]
cmp ebp, edx
jae 0x4b9e59
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b9e4e
mov dword [edi], eax
jmp 0x4b9e53
call fcn.0045c980
mov ebx, eax
mov eax, dword [esp + 0x64]
lea edx, [ecx + 1]
mov dword [edi + 4], edx
mov byte [ebx + ecx], 0x20
jmp 0x4b9e6c
mov edi, dword [esp + 0xe8]
movzx ecx, byte [edi + 0x2b]
test cl, cl
jne 0x4b9e80
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b9cc8
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov ecx, dword [esp + 0xf0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xf4]
mov dword [esp + 8], edx
call fcn.00483740
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x2c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call eax
lea edi, [esp + 0xb0]
lea esi, [esp + 8]
call fcn.0045d05e
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb0]
test eax, eax
je 0x4ba008
mov dword [esp + 0x50], eax
nop
mov edx, dword [esp + 0xe8]
mov ebx, dword [edx + 4]
mov dword [esp + 0x7c], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x78], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp esi, ebp
jae 0x4b9f42
mov dword [esp + 0x98], ecx
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.004464a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x98]
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0xac], edi
mov dword [esp + 0x74], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0045d2d0
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0xe8]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x74]
mov dword [edi + 8], ecx
mov edx, dword [0x68ad40]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x50]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4b9f96
mov edx, dword [esp + 0xac]
mov dword [edi], edx
jmp 0x4b9fad
mov edx, eax
mov eax, dword [esp + 0xac]
call fcn.0045c980
mov eax, edx
mov edx, dword [esp + 0xac]
cmp ecx, ebx
jae 0x4b9ffc
lea ebp, [0x5317a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4b9ff3
mov dword [edi], eax
jmp 0x4b9ff8
call fcn.0045c980
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
jmp 0x4ba00f
mov edi, dword [esp + 0xe8]
mov eax, dword [esp + 0x64]
jmp 0x4b9cc8
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4ba079
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4ba070
mov dword [edi], eax
jmp 0x4ba075
call fcn.0045c980
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b9cc1
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00482210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0xfc]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b8ab0
mov eax, dword [esp + 0x54]
inc eax
mov ebx, dword [esp + 0xf0]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov edx, dword [esp + 0xf4]
mov dword [esp + 8], edx
call fcn.00482550
mov eax, dword [esp + 0x54]
cmp dword [esp + 0xc], eax
jle 0x4ba1bb
test eax, eax
jle 0x4ba088
nop
mov edi, dword [esp + 0xe8]
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4ba18d
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], edx
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004464a0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
mov edi, dword [esp + 0xe8]
mov word [ebp + ecx], 0x202c
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x68ad40]
test ecx, ecx
jne 0x4ba1ab
mov dword [edi], ebp
jmp 0x4ba088
mov ecx, eax
mov eax, ebp
call fcn.0045c980
mov eax, ecx
jmp 0x4ba088
nop
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4ba21d
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4ba214
mov dword [edi], eax
jmp 0x4ba219
call fcn.0045c980
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b9cc1
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00482210
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xe8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0xfc]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b8ab0
mov eax, dword [esp + 0x60]
inc eax
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
mov dword [esp + 0x60], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0xf4]
mov dword [esp + 8], ecx
call fcn.00482550
mov eax, dword [esp + 0x60]
cmp dword [esp + 0xc], eax
jle 0x4ba34c
test eax, eax
jle 0x4ba22c
mov ecx, dword [esp + 0xe8]
mov edx, dword [ecx + 4]
lea ebx, [edx + 1]
mov ebp, dword [ecx]
mov esi, dword [ecx + 8]
cmp esi, ebx
jae 0x4ba33c
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4ba32d
mov dword [edi], eax
jmp 0x4ba332
call fcn.0045c980
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x60]
mov ecx, edi
lea ebx, [edx + 1]
mov dword [ecx + 4], ebx
mov byte [ebp + edx], 0x20
jmp 0x4ba22c
nop
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4ba3ae
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4ba3a5
mov dword [edi], eax
jmp 0x4ba3aa
call fcn.0045c980
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
jmp 0x4b9cc1
mov dword [esp + 0x6c], edx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x9c], eax
mov ebx, dword [esp + 0x3c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x80]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xe8]
mov dword [esp], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.004b6da0
add esp, 0xe4
ret
mov ebx, dword [esp + 0xa8]
mov byte [ebx + eax], dl
lea edx, [eax + 1]
mov eax, ebx
mov ecx, edx
mov edx, dword [esp + 0x68]
cmp ecx, edx
jge 0x4ba506
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov edx, dword [esp + 0xf0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.00482210
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
and eax, 0x1f
mov dword [esp + 0x70], eax
cmp eax, 9
ja 0x4ba4c7
cmp eax, 7
jne 0x4ba49f
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4ba4fe
cmp eax, 8
jne 0x4ba4b3
movzx edx, byte [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4ba4fe
cmp eax, 9
jne 0x4ba512
movzx edx, word [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4ba4fe
cmp eax, 0xa
jne 0x4ba4da
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4ba4fe
cmp eax, 0xb
jne 0x4ba4ed
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4ba4fe
cmp eax, 0xc
jne 0x4ba512
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jb 0x4ba42e
jmp 0x4ba50d
mov ecx, edx
jmp 0x4ba3bd
call fcn.0045ca00
lea eax, [0x5380c0]
mov dword [esp], eax
call fcn.0040b290
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x551bdb]
mov dword [eax], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 8], ecx
lea ecx, [0x533f80]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00432520
mov eax, dword [esp + 0xe8]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4ba5c5
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4ba5b6
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4ba5ad
mov dword [edi], eax
jmp 0x4ba5b2
call fcn.0045c980
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b9cc1
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4ba620
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4ba617
mov dword [edi], eax
jmp 0x4ba61c
call fcn.0045c980
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
jmp 0x4b9cc1
mov ebp, dword [esp + 0xa0]
lea edx, [ebp + 0xc]
mov ebx, eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x58], ebx
mov ebp, dword [edx + 4]
mov esi, dword [edx + 8]
mov edi, edx
mov edx, dword [edx]
test ebx, ebx
jle 0x4ba7a5
mov dword [esp + 0x70], esi
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], edx
mov ecx, dword [esp + 0xe8]
movzx ebx, byte [ecx + 0x2c]
test bl, bl
je 0x4ba712
nop
mov ebx, dword [ecx + 4]
lea esi, [ebx + 2]
mov ebp, dword [ecx + 8]
mov edx, dword [ecx]
cmp ebp, esi
jae 0x4ba6df
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], esi
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004464a0
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xe8]
mov ebx, dword [esp + 0x78]
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0xa0]
mov word [edx + ebx], 0x202c
mov dword [ecx + 4], esi
mov dword [ecx + 8], ebp
mov ebx, dword [0x68ad40]
test ebx, ebx
jne 0x4ba6fc
mov dword [ecx], edx
jmp 0x4ba793
mov ebx, edi
mov edi, ecx
mov ebp, eax
mov eax, edx
call fcn.0045c980
mov eax, ebp
mov edi, ebx
jmp 0x4ba793
nop
mov ebx, dword [ecx + 4]
lea edi, [ebx + 1]
mov eax, dword [ecx]
mov esi, dword [ecx + 8]
cmp esi, edi
jae 0x4ba77b
lea ecx, [0x5317a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4ba764
mov dword [edi], eax
jmp 0x4ba769
call fcn.0045c980
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xa8]
mov ebx, ecx
mov ecx, edi
lea esi, [ebx + 1]
mov dword [ecx + 4], esi
mov byte [eax + ebx], 0x20
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0x70]
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0xfc]
lea ebx, [edx + 1]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x14], ebx
call fcn.004b8ab0
nop
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4ba83f
lea eax, [0x5317a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.004464a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x4ba836
mov dword [edi], eax
jmp 0x4ba83b
call fcn.0045c980
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x3a
mov edx, dword [esp + 0x84]
mov ebx, dword [edx + 0xc]
mov ecx, dword [edx + 0x10]
mov ebp, dword [esp + 0x58]
cmp ebp, ecx
jae 0x4ba8aa
lea ecx, [ebp + ebp*2]
mov edx, dword [ebx + ecx*4]
mov esi, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4 + 8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x14], edx
call fcn.004b8ab0
mov eax, dword [esp + 0x58]
inc eax
mov ecx, dword [esp + 0x7c]
cmp ecx, eax
jg 0x4ba62f
jmp 0x4ba54c
mov eax, ebp
call fcn.0045ca00
nop
call fcn.0045b540
jmp fcn.004b8ab0