Function at 0x4b7cc0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x958
mov eax, dword [0x4d700c]
xor eax, esp
mov dword [esp + 0x954], eax
push esi
push edi
mov edi, dword [0x4d7880]
mov dword [esp + 0x114], ecx
xor ecx, ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
cmp byte [0x4d77c7], cl
je 0x4ba043
mov esi, dword [eax + 0x20]
mov dword [esp + 0x24], eax
add esi, edi
mov dword [esp + 0x20], ecx
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x582546f2
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4b7d3d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4b7d20
cmp edx, 0x80bb9195
je 0x4b7d46
inc dword [esp + 0x20]
add esi, 4
jmp 0x4b7d10
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
push dword [esp + 0x114]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7880]
mov dword [esp + 0x20], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x87649ed0
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4b7dbd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4b7da0
cmp edx, 0x14933cf1
je 0x4b7dc6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4b7d90
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push 0x1db
push 0x35c
mov eax, dword [edx + 0x24]
push dword [esp + 0x11c]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov dword [esp + 0x18], eax
xor edi, edi
mov eax, dword [0x4d7880]
mov ecx, dword [eax + 0x3c]
mov ecx, dword [ecx + eax + 0x78]
add ecx, eax
mov dword [esp + 0x24], ecx
mov esi, dword [ecx + 0x20]
add esi, eax
mov ecx, dword [esi]
mov edx, 0xf4fe28cf
add ecx, eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x4b7e40
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4b7e23
cmp edx, 0x1f710a5c
je 0x4b7e4b
mov eax, dword [0x4d7880]
inc edi
add esi, 4
jmp 0x4b7e13
mov esi, dword [esp + 0x24]
mov edx, dword [0x4d7880]
push dword [esp + 0x18]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
mov esi, dword [esp + 0x24]
push esi
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x77c]
push eax
push esi
mov dword [esp + 0x784], 0
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov ecx, dword [esp + 0x77c]
xorps xmm0, xmm0
mov dword [esp + 0x78c], eax
lea eax, [esp + 0x2d8]
mov dword [esp + 0x788], ecx
lea ecx, [esp + 0x894]
push eax
movq qword [esp + 0x898], xmm0
mov dword [esp + 0x8a0], 0
mov dword [esp + 0x2dc], 0xff17181c
call fcn.004b5850
lea eax, [esp + 0x2c0]
mov dword [esp + 0x7e0], 0
xorps xmm0, xmm0
mov dword [esp + 0x2c0], 0xff1b1d22
push eax
lea ecx, [esp + 0x7dc]
movq qword [esp + 0x7dc], xmm0
call fcn.004b5850
lea eax, [esp + 0x2b4]
mov dword [esp + 0x7d4], 0
xorps xmm0, xmm0
mov dword [esp + 0x2b4], 0xff202328
push eax
lea ecx, [esp + 0x7d0]
movq qword [esp + 0x7d0], xmm0
call fcn.004b5850
lea eax, [esp + 0x2cc]
mov dword [esp + 0x7f4], 0
xorps xmm0, xmm0
mov dword [esp + 0x2cc], 0xffcccccc
push eax
lea ecx, [esp + 0x7f0]
movq qword [esp + 0x7f0], xmm0
call fcn.004b5850
lea eax, [esp + 0x2ac]
mov dword [esp + 0x814], 0
xorps xmm0, xmm0
mov dword [esp + 0x2ac], 0xff636363
push eax
lea ecx, [esp + 0x810]
movq qword [esp + 0x810], xmm0
call fcn.004b5850
lea eax, [esp + 0x2a8]
mov dword [esp + 0x7b8], 0
xorps xmm0, xmm0
mov dword [esp + 0x2a8], 0xffffc95d
push eax
lea ecx, [esp + 0x7b4]
movq qword [esp + 0x7b4], xmm0
call fcn.004b5850
lea eax, [esp + 0x2b8]
mov dword [esp + 0x848], 0
xorps xmm0, xmm0
mov dword [esp + 0x2b8], 0xff15161a
push eax
lea ecx, [esp + 0x844]
movq qword [esp + 0x844], xmm0
call fcn.004b5850
xorps xmm0, xmm0
mov dword [esp + 0x8a8], 0
movq qword [esp + 0x8a0], xmm0
lea eax, [esp + 0x2bc]
mov dword [esp + 0x2bc], 0xfff4f4f4
push eax
lea ecx, [esp + 0x8a4]
call fcn.004b5850
lea eax, [esp + 0x2c4]
mov dword [esp + 0x83c], 0
xorps xmm0, xmm0
mov dword [esp + 0x2c4], 0xffbe974a
push eax
lea ecx, [esp + 0x838]
movq qword [esp + 0x838], xmm0
call fcn.004b5850
lea eax, [esp + 0x23c]
mov dword [esp + 0x830], 0
xorps xmm0, xmm0
mov dword [esp + 0x23c], 0xffffde72
push eax
lea ecx, [esp + 0x82c]
movq qword [esp + 0x82c], xmm0
call fcn.004b5850
xorps xmm0, xmm0
mov word [esp + 0x28c], 0x5263
movlpd qword [esp + 0x7c4], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4d2940]
movups xmmword [esp + 0x27c], xmm0
mov byte [esp + 0x28e], 0
nop dword [eax]
nop word [eax + eax]
mov al, byte [esp + 0x27c]
xor byte [esp + ecx + 0x27d], al
inc ecx
cmp ecx, 0x11
jb 0x4b8100
sub esp, 0x18
mov byte [esp + 0x2a6], 0
mov esi, esp
mov ecx, esi
call fcn.004b5360
lea ecx, [esp + 0x295]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b8132
sub ecx, edx
lea eax, [esp + 0x295]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x618]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x7c4]
push ecx
push 0
push eax
call dword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
lea ecx, [esp + 0x600]
mov dword [esp + 0x7c8], eax
call fcn.004b4390
mov esi, dword [sym.imp.gdiplus.dll_GdipCreateFont]
lea eax, [esp + 0x768]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41680000
push dword [esp + 0x7d4]
mov dword [esp + 0x77c], 0
call esi
mov dword [esp + 0x8b0], eax
mov eax, dword [esp + 0x768]
mov dword [esp + 0x8ac], eax
lea eax, [esp + 0x76c]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41880000
push dword [esp + 0x7d4]
mov dword [esp + 0x780], 0
call esi
mov dword [esp + 0x7e8], eax
mov eax, dword [esp + 0x76c]
mov dword [esp + 0x7e4], eax
lea eax, [esp + 0x770]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41940000
push dword [esp + 0x7d4]
mov dword [esp + 0x784], 0
call esi
mov dword [esp + 0x7fc], eax
mov eax, dword [esp + 0x770]
mov dword [esp + 0x7f8], eax
lea eax, [esp + 0x774]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x419c0000
push dword [esp + 0x7d4]
mov dword [esp + 0x788], 0
call esi
mov eax, dword [esp + 0x774]
mov dword [esp + 0x118], eax
lea eax, [esp + 0x778]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41b80000
push dword [esp + 0x7d4]
mov dword [esp + 0x78c], 0
call esi
mov dword [esp + 0x824], eax
xorps xmm0, xmm0
mov eax, dword [esp + 0x778]
mov dword [esp + 0x820], eax
movlpd qword [esp + 0x798], xmm0
lea eax, [esp + 0x798]
push eax
push 0
push 0
call dword [sym.imp.gdiplus.dll_GdipCreateStringFormat]
push 1
push dword [esp + 0x79c]
mov dword [esp + 0x7a4], eax
call dword [sym.imp.gdiplus.dll_GdipSetStringFormatAlign]
mov ecx, dword [esp + 0x79c]
test eax, eax
push 0x1f6
push 0x35e
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esp + 0x8a8]
cmovne ecx, eax
push dword [esp + 0x79c]
mov dword [esp + 0x7b4], ecx
call dword [sym.imp.gdiplus.dll_GdipFillRectangleI]
mov ecx, dword [esp + 0x78c]
test eax, eax
push 4
push dword [esp + 0x78c]
cmovne ecx, eax
mov dword [esp + 0x794], ecx
call dword [sym.imp.gdiplus.dll_GdipSetSmoothingMode]
mov ecx, dword [esp + 0x78c]
test eax, eax
push 4
push dword [esp + 0x78c]
cmovne ecx, eax
mov dword [esp + 0x794], ecx
call dword [sym.imp.gdiplus.dll_GdipSetTextRenderingHint]
mov ecx, dword [esp + 0x78c]
test eax, eax
push 2
push dword [esp + 0x78c]
cmovne ecx, eax
mov dword [esp + 0x794], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x78c]
test eax, eax
push 0x14
cmovne ecx, eax
cmp dword [0x4d77c0], 2
mov dword [esp + 0x790], ecx
lea ecx, [esp + 0x78c]
push 0x334
jne 0x4b83b6
push dword [0x4d7800]
jmp 0x4b83bc
push dword [0x4d784c]
call fcn.004b5a00
cmp dword [0x4d77c0], 3
lea ecx, [esp + 0x788]
push 0x22
push 0x316
jne 0x4b83e0
push dword [0x4d7814]
jmp 0x4b83e6
push dword [0x4d77d8]
call fcn.004b5a00
movaps xmm0, xmmword [0x4d1050]
lea edx, [esp + 0x7d8]
sub esp, 0x10
lea ecx, [esp + 0x798]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004b7ac0
mov eax, dword [0x4d782c]
add esp, 0x18
test eax, eax
je 0x4b8425
mov eax, dword [eax + 4]
jmp 0x4b8427
xor eax, eax
mov edi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x19
push 0x20
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
lea edx, [esp + 0x7d8]
movaps xmm0, xmmword [0x4d1090]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x79c], ecx
lea ecx, [esp + 0x798]
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004b7ac0
add esp, 0x18
cmp dword [0x4d77c0], 5
push 0x28
push 0x28
push 0x1a
push 0x1b2
jne 0x4b84af
lea ecx, [esp + 0x698]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x838]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4b84ce
lea ecx, [esp + 0x6d8]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x7c0]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x7a0]
call fcn.004b7ac0
mov eax, dword [0x4d7818]
add esp, 0x18
test eax, eax
je 0x4b84f1
mov eax, dword [eax + 4]
jmp 0x4b84f3
xor eax, eax
push 0x20
push 0x6c
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
lea eax, [esp + 0x36c]
mov dword [esp + 0x78c], ecx
mov ecx, 0x4d7098
push eax
call fcn.004b3d10
mov ecx, 0x4d7098
mov esi, dword [eax]
lea eax, [esp + 0x368]
push eax
call fcn.004b3d30
lea ecx, [esp + 0x23a]
push ecx
push esi
push dword [eax]
lea ecx, [esp + 0x5dc]
call fcn.004b4d00
mov dword [esp + 0x24], eax
mov cl, 0x4d
mov byte [esp + 0x178], 4
mov al, 0x7c
xor cl, byte [esp + 0x178]
mov ch, 0x60
mov byte [esp + 0x179], cl
sub esp, 0x18
mov cl, byte [esp + 0x190]
mov dl, 0x6a
xor al, cl
mov byte [esp + 0x37], 0x24
mov byte [esp + 0x195], al
xor ch, cl
mov al, byte [esp + 0x37]
mov dh, 0x61
mov ah, 0x3e
mov byte [esp + 0x193], ch
xor dl, cl
mov byte [esp + 0x198], 0
xor dh, cl
mov byte [esp + 0x192], dl
xor ah, cl
mov byte [esp + 0x194], dh
xor al, cl
mov byte [esp + 0x196], ah
mov esi, esp
mov byte [esp + 0x197], al
mov ecx, esi
mov byte [esp + 0x198], 0
call fcn.004b5360
lea ecx, [esp + 0x191]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b85e3
sub ecx, edx
lea eax, [esp + 0x191]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x600]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
mov edx, eax
lea esi, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x4b8617
mov ecx, dword [esp + 0x24]
sub edx, esi
sar edx, 1
push edx
push eax
push 0
call fcn.004be7c0
push eax
lea ecx, [esp + 0x948]
call fcn.004be300
lea ecx, [esp + 0x5e8]
call fcn.004b4390
lea ecx, [esp + 0x5d0]
call fcn.004b4390
cmp dword [0x4d77c0], 4
movss xmm1, dword [0x4cf680]
movss xmm2, dword [0x4cf674]
jne 0x4b8681
lea eax, [esp + 0x8a0]
lea ecx, [esp + 0x370]
jmp 0x4b868f
lea eax, [esp + 0x7ec]
lea ecx, [esp + 0x380]
mov dword [esp + 0x10], eax
call fcn.004b5710
lea ecx, [esp + 0x944]
mov esi, eax
call fcn.004b3c20
push dword [esp + 0x10]
lea ecx, [esp + 0x79c]
push ecx
push esi
lea ecx, [esp + 0x8b8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
movaps xmm0, xmmword [0x4d1060]
lea edx, [esp + 0x7d8]
sub esp, 0x10
lea ecx, [esp + 0x798]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d0fe0]
lea edx, [esp + 0x804]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 0x14
push 0xffcccccc
movups xmmword [eax], xmm0
call fcn.004b7ac0
add esp, 0x18
lea ecx, [esp + 0x788]
cmp dword [0x4d77c0], 0x3f3
push 0x1a
push 0x1a
push 0x22
push 0x204
jne 0x4b8745
push dword [0x4d77fc]
jmp 0x4b874b
push dword [0x4d7854]
call fcn.004b5a40
cmp dword [0x4d77c0], 0x3f4
lea ecx, [esp + 0x788]
push 0x1a
push 0x1a
push 0x22
push 0x22f
jne 0x4b8776
push dword [0x4d7828]
jmp 0x4b877c
push dword [0x4d77e8]
call fcn.004b5a40
cmp dword [0x4d77c0], 0x3f5
lea ecx, [esp + 0x788]
push 0x1a
push 0x1a
push 0x22
push 0x25a
jne 0x4b87a7
push dword [0x4d785c]
jmp 0x4b87ad
push dword [0x4d77d4]
call fcn.004b5a40
cmp byte [0x4d7019], 0
push 0x28
push 0x28
push 0x1a
je 0x4b87cf
push 0x2c3
lea ecx, [esp + 0x708]
jmp 0x4b87db
push 0x296
lea ecx, [esp + 0x748]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x7dc]
mov ecx, esp
movups xmm0, xmmword [eax]
push 6
push 0xff202128
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x7a0]
call fcn.004b7ac0
mov eax, dword [0x4d7844]
add esp, 0x18
test eax, eax
je 0x4b8816
mov eax, dword [eax + 4]
jmp 0x4b8818
xor eax, eax
push 0x24
push 0x29f
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4d77f4]
mov dword [esp + 0x78c], ecx
test eax, eax
je 0x4b884a
mov eax, dword [eax + 4]
jmp 0x4b884c
xor eax, eax
push 0x17
push 0x17
push 0x24
push 0x2cc
push eax
push dword [esp + 0x79c]
call dword [sym.imp.gdiplus.dll_GdipDrawImageRectI]
mov ecx, dword [esp + 0x78c]
lea edx, [esp + 0x7d8]
movaps xmm0, xmmword [0x4d1070]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x79c], ecx
lea ecx, [esp + 0x798]
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004b7ac0
add esp, 0x18
cmp byte [0x4d7019], 0
je 0x4b8a75
movss xmm2, dword [0x4cf678]
lea ecx, [esp + 0x378]
movss xmm1, dword [0x4cf688]
call fcn.004b5710
push 0x53
lea ecx, [esp + 0x88]
mov dword [esp + 0x14], eax
mov byte [esp + 0x88], 0xe
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x88]
mov byte [esp + 0x89], al
call fcn.004b3140
push 0x6c
lea ecx, [esp + 0x88]
mov byte [esp + 0x8a], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x88]
mov byte [esp + 0x8b], al
call fcn.004b3140
push 0x63
lea ecx, [esp + 0x88]
mov byte [esp + 0x8c], al
call fcn.004b3140
push 0x74
lea ecx, [esp + 0x88]
mov byte [esp + 0x8d], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0x88]
mov byte [esp + 0x8e], al
call fcn.004b3140
push 0x41
lea ecx, [esp + 0x88]
mov byte [esp + 0x8f], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0x88]
mov byte [esp + 0x90], al
call fcn.004b3140
push 0x47
lea ecx, [esp + 0x88]
mov byte [esp + 0x91], al
call fcn.004b3140
push 0x61
lea ecx, [esp + 0x88]
mov byte [esp + 0x92], al
call fcn.004b3140
push 0x6d
lea ecx, [esp + 0x88]
mov byte [esp + 0x93], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x88]
mov byte [esp + 0x94], al
call fcn.004b3140
mov byte [esp + 0x91], al
xor esi, esi
mov byte [esp + 0x92], 0
nop dword [eax]
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x89]
call fcn.004b3130
lea ecx, [esp + 0x84]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x89]
mov byte [esp + 0x23], al
call fcn.004b3130
mov cl, byte [esp + 0x1f]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x4b8a00
push 0xd
lea ecx, [esp + 0x89]
call fcn.004b3130
lea ecx, [esp + 0x85]
mov byte [eax], 0
call fcn.004b3120
sub esp, 0x18
lea esi, [esp + 0x5d0]
mov ecx, esp
push eax
call fcn.004b3fa0
mov ecx, esi
call fcn.004beb20
jmp 0x4b8b2d
mov dword [esp + 0x318], 0x43d70000
mov cl, 0xa
mov dword [esp + 0x31c], 0x42c00000
xor eax, eax
mov dword [esp + 0x224], 0xebf1c80a
mov dword [esp + 0x228], 0xf8e2faef
mov dword [esp + 0x22c], 0xe9e22aef
mov word [esp + 0x230], 0xf9fa
mov byte [esp + 0x232], 0
xor byte [esp + eax + 0x225], cl
inc eax
cmp eax, 0xd
jae 0x4b8ad8
mov cl, byte [esp + 0x224]
jmp 0x4b8ac2
sub esp, 0x18
mov byte [esp + 0x24a], 0
mov esi, esp
mov ecx, esi
call fcn.004b5360
lea ecx, [esp + 0x23d]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b8af6
sub ecx, edx
lea eax, [esp + 0x23d]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x5b8]
call fcn.004beb90
lea ecx, [esp + 0x330]
lea esi, [esp + 0x5b8]
mov dword [esp + 0x28], ecx
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x7ec]
push ecx
lea ecx, [esp + 0x79c]
push ecx
push dword [esp + 0x18]
lea ecx, [esp + 0x804]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
mov ecx, esi
call fcn.004b4390
movaps xmm0, xmmword [0x4d1780]
lea edx, [esp + 0x7cc]
sub esp, 0x10
lea ecx, [esp + 0x798]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d1790]
lea edx, [esp + 0x7e4]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d17a0]
lea edx, [esp + 0x7e4]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d17b0]
lea edx, [esp + 0x7f0]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d17c0]
lea edx, [esp + 0x7f0]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d17d0]
lea edx, [esp + 0x7f0]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d1020]
lea edx, [esp + 0x7e4]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 6
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d1030]
add esp, 8
mov eax, esp
lea edx, [esp + 0x7dc]
push 6
push 0xff202128
lea ecx, [esp + 0x7a0]
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d1040]
lea edx, [esp + 0x7e4]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 6
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d0ff0]
lea edx, [esp + 0x7c8]
add esp, 8
lea ecx, [esp + 0x798]
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004b7ac0
mov eax, dword [0x4d701c]
add esp, 0x18
cmp eax, 0xffffffff
jne 0x4b8e84
xor al, al
mov byte [esp + 0x160], 0x4c
mov byte [esp + 0x169], al
mov cl, 0x25
xor al, byte [esp + 0x160]
mov dh, cl
xor cl, byte [esp + 0x160]
mov ah, 0x29
mov byte [esp + 0x161], al
mov ch, 0x18
mov byte [esp + 0x162], cl
sub esp, 0x18
mov cl, byte [esp + 0x178]
mov dl, 0x2a
mov byte [esp + 0x37], 0x21
xor ch, cl
mov al, byte [esp + 0x37]
xor dl, cl
xor al, cl
mov byte [esp + 0x35], ah
mov byte [esp + 0x17f], al
xor ah, cl
mov al, byte [esp + 0x35]
xor dh, cl
xor al, cl
mov byte [esp + 0x17d], ch
mov esi, esp
mov dword [esp + 0x338], 0x43200000
mov ecx, esi
mov dword [esp + 0x33c], 0x43a38000
mov byte [esp + 0x17b], dl
mov byte [esp + 0x17c], ah
mov byte [esp + 0x17e], dh
mov byte [esp + 0x180], al
mov byte [esp + 0x181], 0
call fcn.004b5360
lea ecx, [esp + 0x179]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b8dd0
sub ecx, edx
lea eax, [esp + 0x179]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x5a0]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x80c]
push ecx
lea ecx, [esp + 0x79c]
push ecx
lea ecx, [esp + 0x328]
push ecx
lea ecx, [esp + 0x7f0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x588]
call fcn.004b4390
cmp dword [0x4d77c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4b8e78
lea ecx, [esp + 0x738]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x838]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4b90a3
lea ecx, [esp + 0x688]
jmp 0x4b908b
movss xmm2, dword [0x4cf684]
movss xmm1, dword [0x4cf67c]
cmp eax, 1
jge 0x4b8fee
lea ecx, [esp + 0x3b8]
call fcn.004b5710
push 0x45
lea ecx, [esp + 0x40]
mov dword [esp + 0x28], eax
mov byte [esp + 0x40], 0x20
call fcn.004b3140
push 0x6e
lea ecx, [esp + 0x40]
mov byte [esp + 0x41], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0x40]
mov byte [esp + 0x42], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x40]
mov byte [esp + 0x43], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0x40]
mov byte [esp + 0x44], al
call fcn.004b3140
mov byte [esp + 0x41], al
xor esi, esi
mov byte [esp + 0x42], 0
push esi
lea ecx, [esp + 0x41]
call fcn.004b3130
lea ecx, [esp + 0x3c]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x41]
mov byte [esp + 0x21], al
call fcn.004b3130
mov cl, byte [esp + 0x1d]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4b8f04
push 5
lea ecx, [esp + 0x41]
call fcn.004b3130
lea ecx, [esp + 0x3d]
mov byte [eax], 0
call fcn.004b3120
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b3fa0
lea ecx, [esp + 0x588]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x80c]
push ecx
lea ecx, [esp + 0x79c]
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x7f0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x570]
call fcn.004b3c70
cmp dword [0x4d77c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4b8fe2
lea ecx, [esp + 0x6e8]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x844]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4b90a3
lea ecx, [esp + 0x758]
jmp 0x4b908b
lea ecx, [esp + 0x3b0]
call fcn.004b5710
mov edx, dword [0x4d701c]
lea ecx, [esp + 0x558]
mov esi, eax
call fcn.004b73e0
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x80c]
push ecx
lea ecx, [esp + 0x79c]
push ecx
push esi
lea ecx, [esp + 0x7f0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x558]
call fcn.004b3c70
cmp dword [0x4d77c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4b9084
lea ecx, [esp + 0x6c8]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x838]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4b90a3
lea ecx, [esp + 0x6b8]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x7c0]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x7a0]
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d1000]
lea edx, [esp + 0x7c8]
add esp, 0x18
lea ecx, [esp + 0x788]
sub esp, 0x10
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004b7ac0
movss xmm2, dword [0x4cf684]
lea ecx, [esp + 0x3c0]
movss xmm1, dword [0x4cf68c]
add esp, 0x18
call fcn.004b5710
push 0x45
lea ecx, [esp + 0x38]
mov dword [esp + 0x28], eax
mov byte [esp + 0x38], 0x71
call fcn.004b3140
push 0x6e
lea ecx, [esp + 0x38]
mov byte [esp + 0x39], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0x38]
mov byte [esp + 0x3a], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x38]
mov byte [esp + 0x3b], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0x38]
mov byte [esp + 0x3c], al
call fcn.004b3140
mov byte [esp + 0x39], al
xor esi, esi
mov byte [esp + 0x3a], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x39]
call fcn.004b3130
lea ecx, [esp + 0x34]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x39]
mov byte [esp + 0x21], al
call fcn.004b3130
mov cl, byte [esp + 0x1d]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4b9160
push 5
lea ecx, [esp + 0x39]
call fcn.004b3130
lea ecx, [esp + 0x35]
mov byte [eax], 0
call fcn.004b3120
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b3fa0
lea ecx, [esp + 0x558]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x80c]
push ecx
lea ecx, [esp + 0x79c]
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x7f0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x540]
call fcn.004b3c70
cmp dword [0x4d77c0], 0x3ea
push 0x28
push 0xe6
push 0x184
push 0x13b
jne 0x4b923e
lea ecx, [esp + 0x6a8]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x844]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4b925d
lea ecx, [esp + 0x6f8]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x7c0]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x7a0]
call fcn.004b7ac0
movaps xmm0, xmmword [0x4d1010]
lea edx, [esp + 0x7c8]
add esp, 0x18
lea ecx, [esp + 0x788]
sub esp, 0x10
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004b7ac0
movss xmm2, dword [0x4cf684]
lea ecx, [esp + 0x3b8]
movss xmm1, dword [0x4cf690]
add esp, 0x18
call fcn.004b5710
push 0x45
lea ecx, [esp + 0x30]
mov dword [esp + 0x28], eax
mov byte [esp + 0x30], 0x33
call fcn.004b3140
push 0x6e
lea ecx, [esp + 0x30]
mov byte [esp + 0x31], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0x30]
mov byte [esp + 0x32], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x30]
mov byte [esp + 0x33], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0x30]
mov byte [esp + 0x34], al
call fcn.004b3140
mov byte [esp + 0x31], al
xor esi, esi
mov byte [esp + 0x32], 0
push esi
lea ecx, [esp + 0x31]
call fcn.004b3130
lea ecx, [esp + 0x2c]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x31]
mov byte [esp + 0x21], al
call fcn.004b3130
mov cl, byte [esp + 0x1d]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4b9315
push 5
lea ecx, [esp + 0x31]
call fcn.004b3130
lea ecx, [esp + 0x2d]
mov byte [eax], 0
call fcn.004b3120
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b3fa0
lea ecx, [esp + 0x540]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x80c]
push ecx
lea ecx, [esp + 0x79c]
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x7f0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x528]
call fcn.004b3c70
cmp dword [0x4d77c0], 0x3eb
push 0x28
push 0xe6
push 0x184
push 0x254
jne 0x4b93f3
lea ecx, [esp + 0x728]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x844]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4b9412
lea ecx, [esp + 0x718]
call fcn.004b5720
sub esp, 0x10
lea edx, [esp + 0x7c0]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x7a0]
call fcn.004b7ac0
mov eax, dword [0x4d77ec]
add esp, 0x18
test eax, eax
je 0x4b9435
mov eax, dword [eax + 4]
jmp 0x4b9437
xor eax, eax
push 0xb9
push 0x6e
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4d7838]
mov dword [esp + 0x78c], ecx
test eax, eax
je 0x4b9469
mov eax, dword [eax + 4]
jmp 0x4b946b
xor eax, eax
push 0xb9
push 0x182
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4d7824]
mov dword [esp + 0x78c], ecx
test eax, eax
je 0x4b94a0
mov eax, dword [eax + 4]
jmp 0x4b94a2
xor eax, eax
push 0xb9
push 0x2a1
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
mov dl, 0xb
mov byte [esp + 0x195], 0
cmovne ecx, eax
mov dword [esp + 0x328], 0x43140000
mov dword [esp + 0x78c], ecx
sub esp, 0x18
mov ch, 0x78
mov dword [esp + 0x344], 0x43870000
mov cl, 0xd
mov byte [esp + 0x1a8], ch
xor cl, ch
mov byte [esp + 0x1ad], 0
mov al, 0x2a
mov byte [esp + 0x1aa], cl
mov ah, 0xc
xor al, ch
xor dl, ch
mov byte [esp + 0x1a9], al
xor ah, ch
mov byte [esp + 0x1ab], dl
mov esi, esp
mov byte [esp + 0x1ac], ah
mov ecx, esi
call fcn.004b5360
lea ecx, [esp + 0x1a9]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b9540
sub ecx, edx
lea eax, [esp + 0x1a9]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x528]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x7ec]
push ecx
lea ecx, [esp + 0x79c]
push ecx
lea ecx, [esp + 0x330]
push ecx
lea ecx, [esp + 0x82c]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x510]
call fcn.004b4390
mov ch, 0x70
mov dword [esp + 0x330], 0x43d68000
xor cl, cl
mov byte [esp + 0x1a4], ch
xor cl, ch
mov dword [esp + 0x334], 0x43870000
sub esp, 0x18
mov byte [esp + 0x1be], cl
mov al, 0x31
mov byte [esp + 0x1c1], 0
mov dl, 0x15
mov ah, 8
xor al, ch
xor dl, ch
xor ah, ch
mov byte [esp + 0x1bd], al
mov esi, esp
mov byte [esp + 0x1bf], dl
mov ecx, esi
mov byte [esp + 0x1c0], ah
call fcn.004b5360
lea ecx, [esp + 0x1bd]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b9613
sub ecx, edx
lea eax, [esp + 0x1bd]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x510]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x7ec]
push ecx
lea ecx, [esp + 0x79c]
push ecx
lea ecx, [esp + 0x338]
push ecx
lea ecx, [esp + 0x82c]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x4f8]
call fcn.004b4390
mov ch, 0x6b
mov byte [esp + 0x1bd], 0
mov cl, 0x18
mov byte [esp + 0x1b8], ch
xor cl, ch
mov dword [esp + 0x310], 0x44318000
sub esp, 0x18
mov byte [esp + 0x1d2], cl
mov al, 0x28
mov dword [esp + 0x32c], 0x43870000
mov dl, 0x4b
mov byte [esp + 0x1d5], 0
mov ah, 0x59
xor al, ch
xor dl, ch
mov byte [esp + 0x1d1], al
xor ah, ch
mov byte [esp + 0x1d3], dl
mov esi, esp
mov byte [esp + 0x1d4], ah
mov ecx, esi
call fcn.004b5360
lea ecx, [esp + 0x1d1]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b96f0
sub ecx, edx
lea eax, [esp + 0x1d1]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x4f8]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x7ec]
push ecx
lea ecx, [esp + 0x79c]
push ecx
lea ecx, [esp + 0x318]
push ecx
lea ecx, [esp + 0x82c]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x4e0]
call fcn.004b4390
push 0
push dword [esp + 0x78c]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4d7858]
mov dword [esp + 0x78c], ecx
test eax, eax
je 0x4b978a
mov eax, dword [eax + 4]
jmp 0x4b978c
xor eax, eax
push 0x14c
push 0x29
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4d7858]
mov dword [esp + 0x78c], ecx
test eax, eax
je 0x4b97be
mov eax, dword [eax + 4]
jmp 0x4b97c0
xor eax, eax
push 0x14c
push 0x142
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4d7858]
mov dword [esp + 0x78c], ecx
test eax, eax
je 0x4b97f5
mov eax, dword [eax + 4]
jmp 0x4b97f7
xor eax, eax
push 0x14c
push 0x25b
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4d77dc]
mov dword [esp + 0x78c], ecx
test eax, eax
je 0x4b982c
mov eax, dword [eax + 4]
jmp 0x4b982e
xor eax, eax
push 0x22
push 0x1bc
push eax
push dword [esp + 0x794]
call edi
mov ecx, dword [esp + 0x78c]
test eax, eax
cmovne ecx, eax
cmp dword [0x4d701c], 0xfffffffe
mov dword [esp + 0x78c], ecx
jne 0x4b9978
mov byte [esp + 0x1cc], 3
mov al, 0x4a
xor al, byte [esp + 0x1cc]
mov cl, 0x6d
xor cl, byte [esp + 0x1cc]
mov ch, 0x66
mov byte [esp + 0x1cd], al
sub esp, 0x18
mov byte [esp + 0x35], ch
mov dl, 0x23
mov al, byte [esp + 0x35]
mov ah, 0x47
mov byte [esp + 0x1e6], cl
mov dh, 0x75
mov cl, byte [esp + 0x1e4]
mov esi, esp
xor al, cl
mov byte [esp + 0x37], 0x6f
mov byte [esp + 0x1eb], al
xor ch, cl
mov al, byte [esp + 0x37]
xor dl, cl
xor al, cl
mov byte [esp + 0x36], 0x6c
mov byte [esp + 0x1ec], al
xor ah, cl
mov al, byte [esp + 0x36]
xor dh, cl
xor al, cl
mov byte [esp + 0x2f], 0x73
mov byte [esp + 0x1ed], al
mov al, byte [esp + 0x2f]
xor al, cl
mov byte [esp + 0x1e9], ch
mov byte [esp + 0x1ef], 0
mov ecx, esi
mov dword [esp + 0x350], 0x43140000
mov dword [esp + 0x354], 0x43c30000
mov byte [esp + 0x1e7], dl
mov byte [esp + 0x1e8], ah
mov byte [esp + 0x1ea], dh
mov byte [esp + 0x1ee], al
mov byte [esp + 0x1ef], 0
call fcn.004b5360
lea ecx, [esp + 0x1e5]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b9940
sub ecx, edx
lea eax, [esp + 0x1e5]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x4e0]
call fcn.004beb20
lea esi, [esp + 0x4e0]
lea edi, [esp + 0x350]
jmp 0x4b9a43
mov byte [esp + 0x134], 0x55
mov al, 0x19
xor al, byte [esp + 0x134]
mov cl, 0x34
mov byte [esp + 0x135], al
mov ch, 0x36
mov al, byte [esp + 0x134]
sub esp, 0x18
xor cl, al
mov byte [esp + 0x153], 0
xor ch, al
mov byte [esp + 0x14e], cl
mov dl, 0x20
mov byte [esp + 0x151], ch
mov ah, 0x3b
mov dword [esp + 0x358], 0x43140000
mov dh, 0x3d
mov dword [esp + 0x35c], 0x43c30000
mov esi, esp
mov byte [esp + 0x153], 0
xor dl, al
xor ah, al
xor dh, al
mov byte [esp + 0x14f], dl
mov ecx, esi
mov byte [esp + 0x150], ah
mov byte [esp + 0x152], dh
call fcn.004b5360
lea ecx, [esp + 0x14d]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b9a10
sub ecx, edx
lea eax, [esp + 0x14d]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x4c8]
call fcn.004beb20
lea esi, [esp + 0x4c8]
lea edi, [esp + 0x358]
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x840]
push ecx
lea ecx, [esp + 0x79c]
push ecx
push edi
lea ecx, [esp + 0x804]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
mov ecx, esi
call fcn.004b4390
mov byte [esp + 0x1dc], 0x48
mov al, 1
xor al, byte [esp + 0x1dc]
mov cl, 0x26
xor cl, byte [esp + 0x1dc]
mov ch, 0x2d
mov byte [esp + 0x1dd], al
sub esp, 0x18
mov byte [esp + 0x2f], ch
mov dl, 0x68
mov al, byte [esp + 0x2f]
mov ah, 0xc
mov byte [esp + 0x1f6], cl
mov dh, 0x3e
mov cl, byte [esp + 0x1f4]
mov esi, esp
xor al, cl
mov byte [esp + 0x36], 0x24
mov byte [esp + 0x1fb], al
xor ch, cl
mov al, byte [esp + 0x36]
xor dl, cl
xor al, cl
mov byte [esp + 0x35], 0x27
mov byte [esp + 0x1fc], al
xor ah, cl
mov al, byte [esp + 0x35]
xor dh, cl
xor al, cl
mov byte [esp + 0x37], 0x38
mov byte [esp + 0x1fd], al
mov al, byte [esp + 0x37]
xor al, cl
mov byte [esp + 0x1f9], ch
mov byte [esp + 0x1ff], 0
mov ecx, esi
mov dword [esp + 0x360], 0x43d88000
mov dword [esp + 0x364], 0x43c30000
mov byte [esp + 0x1f7], dl
mov byte [esp + 0x1f8], ah
mov byte [esp + 0x1fa], dh
mov byte [esp + 0x1fe], al
mov byte [esp + 0x1ff], 0
call fcn.004b5360
lea ecx, [esp + 0x1f5]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b9b60
sub ecx, edx
lea eax, [esp + 0x1f5]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x4b0]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x840]
push ecx
lea ecx, [esp + 0x79c]
push ecx
lea ecx, [esp + 0x350]
push ecx
lea ecx, [esp + 0x804]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x498]
call fcn.004b4390
push 0x6f
lea ecx, [esp + 0x170]
mov dword [esp + 0x354], 0x44328000
mov dword [esp + 0x358], 0x43c30000
mov dword [esp + 0x170], 0x2c62450c
mov dword [esp + 0x174], 0x697a6948
mov byte [esp + 0x178], 0x60
call fcn.004b3140
push 0x70
lea ecx, [esp + 0x170]
mov byte [esp + 0x179], al
call fcn.004b3140
mov byte [esp + 0x176], al
xor esi, esi
mov byte [esp + 0x177], 0
push esi
lea ecx, [esp + 0x171]
call fcn.004b3130
lea ecx, [esp + 0x16c]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x171]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4b9c32
push 0xa
lea ecx, [esp + 0x171]
call fcn.004b3130
lea ecx, [esp + 0x16d]
mov byte [eax], 0
call fcn.004b3120
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b3fa0
lea ecx, [esp + 0x498]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x840]
push ecx
lea ecx, [esp + 0x79c]
push ecx
lea ecx, [esp + 0x358]
push ecx
lea ecx, [esp + 0x804]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a0]
call fcn.004b5950
lea ecx, [esp + 0x480]
call fcn.004b3c70
push 2
push dword [esp + 0x78c]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov edi, dword [0x4d7880]
test eax, eax
mov ecx, dword [esp + 0x78c]
cmovne ecx, eax
mov dword [esp + 0x78c], ecx
xor ecx, ecx
mov eax, dword [edi + 0x3c]
mov dword [esp + 0x10], ecx
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x104682d5
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4b9d52
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4b9d35
cmp edx, 0xc04ee81e
je 0x4b9d5b
inc dword [esp + 0x10]
add esi, 4
jmp 0x4b9d25
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push 0xcc0020
push 0
mov eax, dword [edx + 0x24]
push 0
push dword [esp + 0x2c]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
push 0x1db
push 0x35c
push 0
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
push 0
push dword [esp + 0x134]
add eax, edi
call eax
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop word [eax + eax]
mov ecx, dword [esi]
mov edx, 0xdc617a50
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4b9ded
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4b9dd0
cmp edx, 0xa8da9a2f
je 0x4b9df6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4b9dc0
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xc981be
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4b9e6d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4b9e50
cmp edx, 0xebce826
je 0x4b9e76
inc dword [esp + 0x10]
add esi, 4
jmp 0x4b9e40
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x18]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xb87d93c0
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4b9ee4
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4b9ec7
cmp edx, 0xb3daa16a
je 0x4b9eed
inc dword [esp + 0x10]
add esi, 4
jmp 0x4b9eb7
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x20]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
lea ecx, [esp + 0x944]
call fcn.004b4390
push dword [esp + 0x798]
call dword [sym.imp.gdiplus.dll_GdipDeleteStringFormat]
push dword [esp + 0x820]
mov esi, dword [sym.imp.gdiplus.dll_GdipDeleteFont]
call esi
push dword [esp + 0x118]
call esi
push dword [esp + 0x7f8]
call esi
push dword [esp + 0x7e4]
call esi
push dword [esp + 0x8ac]
call esi
push dword [esp + 0x7c4]
call dword [sym.imp.gdiplus.dll_GdipDeleteFontFamily]
push dword [esp + 0x82c]
mov esi, dword [sym.imp.gdiplus.dll_GdipDeleteBrush]
mov dword [esp + 0x82c], 0x4c9584
call esi
push dword [esp + 0x838]
mov dword [esp + 0x838], 0x4c9584
call esi
push dword [esp + 0x8a4]
mov dword [esp + 0x8a4], 0x4c9584
call esi
push dword [esp + 0x844]
mov dword [esp + 0x844], 0x4c9584
call esi
push dword [esp + 0x7b4]
mov dword [esp + 0x7b4], 0x4c9584
call esi
push dword [esp + 0x810]
mov dword [esp + 0x810], 0x4c9584
call esi
push dword [esp + 0x7f0]
mov dword [esp + 0x7f0], 0x4c9584
call esi
push dword [esp + 0x7d0]
mov dword [esp + 0x7d0], 0x4c9584
call esi
push dword [esp + 0x7dc]
mov dword [esp + 0x7dc], 0x4c9584
call esi
push dword [esp + 0x898]
mov dword [esp + 0x898], 0x4c9584
call esi
push dword [esp + 0x788]
jmp 0x4be27c
mov dword [esp + 0x23c], eax
mov esi, dword [eax + 0x20]
mov dword [esp + 0x10], ecx
add esi, edi
mov ecx, dword [esi]
mov edx, 0x4bb2295a
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ba080
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ba063
cmp edx, 0xa6b05ffd
je 0x4ba089
inc dword [esp + 0x10]
add esi, 4
jmp 0x4ba053
mov edx, dword [esp + 0x23c]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x114]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7880]
mov dword [esp + 0x20], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x3a72580a
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ba101
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ba0e4
cmp edx, 0x6db2c18b
je 0x4ba10a
inc dword [esp + 0x10]
add esi, 4
jmp 0x4ba0d4
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push 0x258
push 0x1c2
mov eax, dword [edx + 0x24]
push dword [esp + 0x11c]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7880]
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0xe06f2822
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ba18d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ba170
cmp edx, 0x985269b1
je 0x4ba196
inc dword [esp + 0x10]
add esi, 4
jmp 0x4ba160
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7870]
mov dword [esp + 0x1d8], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x9752631b
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ba20f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ba1f2
cmp edx, 0x79f559dc
je 0x4ba218
inc dword [esp + 0x10]
add esi, 4
jmp 0x4ba1e2
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x910]
mov ecx, dword [esp + 0x10]
push eax
push dword [0x4d7864]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xb7374c24
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ba290
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ba273
cmp edx, 0xb133f11e
je 0x4ba299
inc dword [esp + 0x10]
add esi, 4
jmp 0x4ba263
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
movaps xmm0, xmmword [0x4d3a90]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x278], 0x7d4c
movups xmmword [esp + 0x268], xmm0
mov byte [esp + 0x27a], 0
xor ecx, ecx
nop dword [eax]
mov al, byte [esp + 0x268]
xor byte [esp + ecx + 0x269], al
inc ecx
cmp ecx, 0x11
jb 0x4ba2e0
sub esp, 0x18
mov byte [esp + 0x292], 0
mov edi, esp
mov ecx, edi
call fcn.004b5360
lea ecx, [esp + 0x281]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ba312
sub ecx, edx
lea eax, [esp + 0x281]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x480]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x12
call esi
lea ecx, [esp + 0x468]
mov dword [esp + 0x234], eax
call fcn.004b4390
mov edi, dword [0x4d7880]
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x27cc5dae
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ba3c2
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ba3a5
cmp edx, 0xb5a8d3c4
je 0x4ba3cb
inc dword [esp + 0x10]
add esi, 4
jmp 0x4ba395
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
movaps xmm0, xmmword [0x4d19a0]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x264], 0x1726
movups xmmword [esp + 0x254], xmm0
mov byte [esp + 0x266], 0
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [esp + 0x254]
xor byte [esp + ecx + 0x255], al
inc ecx
cmp ecx, 0x11
jb 0x4ba410
sub esp, 0x18
mov byte [esp + 0x27e], 0
mov edi, esp
mov ecx, edi
call fcn.004b5360
lea ecx, [esp + 0x26d]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ba442
sub ecx, edx
lea eax, [esp + 0x26d]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x408]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x14
call esi
lea ecx, [esp + 0x3f0]
mov dword [esp + 0x118], eax
call fcn.004b4390
mov edi, dword [0x4d7880]
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xd8cdbc45
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ba4f2
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ba4d5
cmp edx, 0x3a56404d
je 0x4ba4fb
inc dword [esp + 0x10]
add esi, 4
jmp 0x4ba4c5
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
movaps xmm0, xmmword [0x4d1cd0]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x2a0], 0x31
movups xmmword [esp + 0x290], xmm0
mov byte [esp + 0x2a2], 0
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [esp + 0x290]
xor byte [esp + ecx + 0x291], al
inc ecx
cmp ecx, 0x11
jb 0x4ba540
sub esp, 0x18
mov byte [esp + 0x2ba], 0
mov edi, esp
mov ecx, edi
call fcn.004b5360
lea ecx, [esp + 0x2a9]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ba572
sub ecx, edx
lea eax, [esp + 0x2a9]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x468]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x1e
call esi
lea ecx, [esp + 0x450]
mov dword [esp + 0x28], eax
call fcn.004b4390
lea eax, [esp + 0x780]
mov dword [esp + 0x780], 0
push eax
push dword [esp + 0x24]
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov ecx, dword [esp + 0x780]
xorps xmm0, xmm0
mov dword [esp + 0x794], eax
lea eax, [esp + 0x2c8]
mov dword [esp + 0x790], ecx
lea ecx, [esp + 0x864]
push eax
movq qword [esp + 0x868], xmm0
mov dword [esp + 0x870], 0
mov dword [esp + 0x2cc], 0xff17181c
call fcn.004b5850
lea eax, [esp + 0x2d0]
mov dword [esp + 0x808], 0
xorps xmm0, xmm0
mov dword [esp + 0x2d0], 0xff1d2025
push eax
lea ecx, [esp + 0x804]
movq qword [esp + 0x804], xmm0
call fcn.004b5850
lea eax, [esp + 0x2b0]
mov dword [esp + 0x854], 0
xorps xmm0, xmm0
mov dword [esp + 0x2b0], 0xffcccccc
push eax
lea ecx, [esp + 0x850]
movq qword [esp + 0x850], xmm0
call fcn.004b5850
lea eax, [esp + 0x2a4]
mov dword [esp + 0x860], 0
xorps xmm0, xmm0
mov dword [esp + 0x2a4], 0xffffc95d
push eax
lea ecx, [esp + 0x85c]
movq qword [esp + 0x85c], xmm0
call fcn.004b5850
lea eax, [esp + 0x2e4]
mov dword [esp + 0x878], 0
xorps xmm0, xmm0
mov dword [esp + 0x2e4], 0xffffde72
push eax
lea ecx, [esp + 0x874]
movq qword [esp + 0x874], xmm0
call fcn.004b5850
xorps xmm0, xmm0
mov dword [esp + 0x8dc], 0
movq qword [esp + 0x8d4], xmm0
mov dword [esp + 0x2e0], 0xff828282
lea eax, [esp + 0x2e0]
push eax
lea ecx, [esp + 0x8d8]
call fcn.004b5850
lea eax, [esp + 0x2dc]
mov dword [esp + 0x884], 0
xorps xmm0, xmm0
mov dword [esp + 0x2dc], 0xff555555
push eax
lea ecx, [esp + 0x880]
movq qword [esp + 0x880], xmm0
call fcn.004b5850
lea eax, [esp + 0x2d4]
mov dword [esp + 0x890], 0
xorps xmm0, xmm0
mov dword [esp + 0x2d4], 0xff15161a
push eax
lea ecx, [esp + 0x88c]
movq qword [esp + 0x88c], xmm0
call fcn.004b5850
xorps xmm0, xmm0
mov word [esp + 0x250], 0x7f4e
movlpd qword [esp + 0x7bc], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4d3a00]
movups xmmword [esp + 0x240], xmm0
mov byte [esp + 0x252], 0
nop word [eax + eax]
mov al, byte [esp + 0x240]
xor byte [esp + ecx + 0x241], al
inc ecx
cmp ecx, 0x11
jb 0x4ba7f0
sub esp, 0x18
mov byte [esp + 0x26a], 0
mov esi, esp
mov ecx, esi
call fcn.004b5360
lea ecx, [esp + 0x259]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ba822
sub ecx, edx
lea eax, [esp + 0x259]
push ecx
push eax
mov ecx, esi
call fcn.004b4ff0
lea ecx, [esp + 0x450]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x7bc]
push ecx
push 0
push eax
call dword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
lea ecx, [esp + 0x438]
mov dword [esp + 0x7c0], eax
call fcn.004b4390
mov esi, dword [sym.imp.gdiplus.dll_GdipCreateFont]
lea eax, [esp + 0x760]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41580000
push dword [esp + 0x7cc]
mov dword [esp + 0x774], 0
call esi
mov dword [esp + 0x8d0], eax
mov eax, dword [esp + 0x760]
mov dword [esp + 0x8cc], eax
lea eax, [esp + 0x75c]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41800000
push dword [esp + 0x7cc]
mov dword [esp + 0x770], 0
call esi
mov dword [esp + 0x8c8], eax
mov eax, dword [esp + 0x75c]
mov dword [esp + 0x8c4], eax
lea eax, [esp + 0x758]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41920000
push dword [esp + 0x7cc]
mov dword [esp + 0x76c], 0
call esi
mov dword [esp + 0x81c], eax
mov eax, dword [esp + 0x758]
mov dword [esp + 0x818], eax
lea eax, [esp + 0x764]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41a00000
push dword [esp + 0x7cc]
mov dword [esp + 0x778], 0
call esi
mov dword [esp + 0x8c0], eax
mov eax, dword [esp + 0x764]
mov dword [esp + 0x8bc], eax
lea eax, [esp + 0x784]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41b40000
push dword [esp + 0x7cc]
mov dword [esp + 0x798], 0
call esi
mov dword [esp + 0x8b8], eax
mov eax, dword [esp + 0x784]
mov dword [esp + 0x8b4], eax
push 0x259
push 0x1c3
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esp + 0x878]
push dword [esp + 0x7a4]
call dword [sym.imp.gdiplus.dll_GdipFillRectangleI]
mov ecx, dword [esp + 0x794]
test eax, eax
push 4
push dword [esp + 0x794]
cmovne ecx, eax
mov dword [esp + 0x79c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetSmoothingMode]
mov ecx, dword [esp + 0x794]
test eax, eax
push 4
push dword [esp + 0x794]
cmovne ecx, eax
mov dword [esp + 0x79c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetTextRenderingHint]
mov ecx, dword [esp + 0x794]
test eax, eax
push 0
push dword [esp + 0x794]
cmovne ecx, eax
mov dword [esp + 0x79c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingMode]
mov ecx, dword [esp + 0x794]
test eax, eax
push 2
push dword [esp + 0x794]
cmovne ecx, eax
mov dword [esp + 0x79c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
cmp dword [0x4d77c0], 2
mov dword [esp + 0x794], ecx
jne 0x4baaa6
mov eax, dword [0x4d7800]
test eax, eax
je 0x4baa80
mov eax, dword [eax + 4]
jmp 0x4baa82
xor eax, eax
mov esi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x14
push 0x168
push eax
push dword [esp + 0x79c]
call esi
test eax, eax
je 0x4baae0
mov dword [esp + 0x794], eax
jmp 0x4baae0
mov eax, dword [0x4d784c]
test eax, eax
je 0x4baab4
mov eax, dword [eax + 4]
jmp 0x4baab6
xor eax, eax
mov esi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x14
push 0x168
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x794], ecx
cmp dword [0x4d77c0], 3
jne 0x4bab17
mov eax, dword [0x4d7814]
test eax, eax
je 0x4baaf7
mov eax, dword [eax + 4]
jmp 0x4baaf9
xor eax, eax
push 0x22
push 0x14a
push eax
push dword [esp + 0x79c]
call esi
test eax, eax
je 0x4bab4b
mov dword [esp + 0x794], eax
jmp 0x4bab4b
mov eax, dword [0x4d77d8]
test eax, eax
je 0x4bab25
mov eax, dword [eax + 4]
jmp 0x4bab27
xor eax, eax
push 0x22
push 0x14a
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x794], ecx
mov eax, dword [0x4d7840]
test eax, eax
je 0x4bab59
mov eax, dword [eax + 4]
jmp 0x4bab5b
xor eax, eax
push 0x23
push 0xa8
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
test eax, eax
mov byte [esp + 0x1ac], 0x69
mov dl, 5
cmovne ecx, eax
mov byte [esp + 0x1e], 0x49
mov dword [esp + 0x794], ecx
mov al, 0x3e
xor al, byte [esp + 0x1ac]
mov cl, 0xc
mov byte [esp + 0x1ad], al
mov ch, 6
mov byte [esp + 0x17], cl
sub esp, 0x18
xor cl, byte [esp + 0x1c4]
mov ah, 0xa
mov al, byte [esp + 0x2f]
mov dh, 4
mov byte [esp + 0x1c6], cl
mov edi, esp
mov cl, byte [esp + 0x1c4]
xor al, cl
mov byte [esp + 0x35], 0x1d
mov byte [esp + 0x1cb], al
xor dl, cl
mov al, byte [esp + 0x36]
xor ah, cl
xor al, cl
mov byte [esp + 0x37], ch
mov byte [esp + 0x1cc], al
xor ch, cl
mov al, byte [esp + 0x35]
xor dh, cl
xor al, cl
mov byte [esp + 0x1c9], ch
mov byte [esp + 0x1cd], al
mov al, byte [esp + 0x37]
xor al, cl
mov byte [esp + 0x1cf], 0
mov ecx, edi
mov dword [esp + 0x370], 0x43000000
mov dword [esp + 0x374], 0x42f00000
mov byte [esp + 0x1c7], dl
mov byte [esp + 0x1c8], ah
mov byte [esp + 0x1ca], dh
mov byte [esp + 0x1ce], al
mov byte [esp + 0x1cf], 0
call fcn.004b5360
lea ecx, [esp + 0x1c5]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bac60
sub ecx, edx
lea eax, [esp + 0x1c5]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x438]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x84c]
push ecx
lea ecx, [esp + 0x35c]
push ecx
lea ecx, [esp + 0x820]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a4]
call fcn.004b58b0
lea ecx, [esp + 0x420]
call fcn.004b4390
mov cl, 4
mov byte [esp + 0x154], 0x62
mov dl, cl
mov byte [esp + 0x17], 0xd
xor cl, byte [esp + 0x154]
mov al, 0x27
xor al, byte [esp + 0x154]
mov ch, 0x11
mov byte [esp + 0x155], al
sub esp, 0x18
mov al, byte [esp + 0x2f]
mov ah, 0x17
mov byte [esp + 0x16e], cl
mov dh, 0xb
mov cl, byte [esp + 0x16c]
mov edi, esp
xor al, cl
mov byte [esp + 0x36], 0xc
mov byte [esp + 0x173], al
xor ch, cl
mov al, byte [esp + 0x36]
xor dl, cl
xor ah, cl
mov byte [esp + 0x171], ch
xor dh, cl
mov byte [esp + 0x175], 0
xor al, cl
mov dword [esp + 0x378], 0x42dc0000
mov ecx, edi
mov dword [esp + 0x37c], 0x43110000
mov byte [esp + 0x16f], dl
mov byte [esp + 0x170], ah
mov byte [esp + 0x172], dh
mov byte [esp + 0x174], al
mov byte [esp + 0x175], 0
call fcn.004b5360
lea ecx, [esp + 0x16d]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bad80
sub ecx, edx
lea eax, [esp + 0x16d]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x420]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x858]
push ecx
lea ecx, [esp + 0x364]
push ecx
lea ecx, [esp + 0x820]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a4]
call fcn.004b58b0
lea ecx, [esp + 0x408]
call fcn.004b4390
mov dh, 0x3a
mov byte [esp + 0x20e], 0
mov cl, 0x5b
mov dword [esp + 0x2e8], 0x43540000
mov ch, 0x55
mov dword [esp + 0x2ec], 0x43110000
xor cl, dh
mov byte [esp + 0x208], dh
xor ch, dh
mov byte [esp + 0x20a], cl
sub esp, 0x18
mov byte [esp + 0x225], ch
mov al, 0x77
mov byte [esp + 0x226], 0
mov dl, 0x59
mov ah, 0x48
mov edi, esp
xor al, dh
xor dl, dh
mov byte [esp + 0x221], al
xor ah, dh
mov byte [esp + 0x223], dl
mov ecx, edi
mov byte [esp + 0x224], ah
call fcn.004b5360
lea ecx, [esp + 0x221]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bae60
sub ecx, edx
lea eax, [esp + 0x221]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x630]
call fcn.004beb20
add esp, 0x18
mov ecx, eax
call fcn.004b3c20
lea ecx, [esp + 0x84c]
push ecx
lea ecx, [esp + 0x2ec]
push ecx
lea ecx, [esp + 0x820]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x7a4]
call fcn.004b58b0
lea ecx, [esp + 0x618]
call fcn.004b4390
xor eax, eax
cmp byte [0x4d7019], al
je 0x4baf89
mov dword [esp + 0x2f0], 0x43090000
mov cl, 0x71
mov dword [esp + 0x2f4], 0x432e0000
mov dword [esp + 0x1e8], 0x16182271
mov dword [esp + 0x1ec], 0x1f18511f
mov dword [esp + 0x1f0], 0x61e1f51
mov byte [esp + 0x1f4], al
xor byte [esp + eax + 0x1e9], cl
inc eax
cmp eax, 0xb
jae 0x4baf26
mov cl, byte [esp + 0x1e8]
jmp 0x4baf10
sub esp, 0x18
mov byte [esp + 0x20c], 0
mov edi, esp
mov ecx, edi
call fcn.004b5360
lea ecx, [esp + 0x201]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4baf44
sub ecx, edx
lea eax, [esp + 0x201]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x648]
call fcn.004beb20
mov ecx, eax
lea edi, [esp + 0x648]
lea eax, [esp + 0x8dc]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x308]
jmp 0x4bb044
mov dword [esp + 0x2f8], 0x43040000
mov cl, 0x77
mov dword [esp + 0x2fc], 0x43320000
mov dword [esp + 0x1f8], 0x9e99b577
mov dword [esp + 0x1fc], 0x86579f85
mov dword [esp + 0x200], 0x97809e92
mov word [esp + 0x204], 0x86
nop dword [eax]
xor byte [esp + eax + 0x1f9], cl
inc eax
cmp eax, 0xc
jae 0x4bafe6
mov cl, byte [esp + 0x1f8]
jmp 0x4bafd0
sub esp, 0x18
mov byte [esp + 0x21d], 0
mov edi, esp
mov ecx, edi
call fcn.004b5360
lea ecx, [esp + 0x211]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bb004
sub ecx, edx
lea eax, [esp + 0x211]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x660]
call fcn.004beb90
mov ecx, eax
lea edi, [esp + 0x660]
lea eax, [esp + 0x8e4]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x310]
add esp, 0x18
mov dword [esp + 0x18], eax
call fcn.004b3c20
lea ecx, [esp + 0x87c]
push ecx
push dword [esp + 0x1c]
lea ecx, [esp + 0x798]
push dword [esp + 0x18]
push 0xffffffffffffffff
push eax
call fcn.004b58b0
mov ecx, edi
call fcn.004b4390
sub esp, 0x10
lea edx, [esp + 0x810]
cmp byte [0x4d7019], 0
lea ecx, [esp + 0x7a0]
mov eax, esp
push 5
push 0xff1d2025
je 0x4bb0a2
movaps xmm0, xmmword [0x4d0fd0]
jmp 0x4bb0a9
movaps xmm0, xmmword [0x4d0fc0]
movups xmmword [eax], xmm0
call fcn.004b7ac0
mov eax, dword [0x4d7820]
add esp, 0x18
test eax, eax
je 0x4bb0c2
mov eax, dword [eax + 4]
jmp 0x4bb0c4
xor eax, eax
push 0xe8
push 0x127
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4d7860]
mov dword [esp + 0x794], ecx
test eax, eax
je 0x4bb0f9
mov eax, dword [eax + 4]
jmp 0x4bb0fb
xor eax, eax
push 0xe8
push 0x14f
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
lea edx, [esp + 0x800]
movaps xmm0, xmmword [0x4d10a0]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x7a4], ecx
lea ecx, [esp + 0x7a0]
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004b7ac0
add esp, 0x18
cmp dword [0x4d77c0], 4
jne 0x4bb188
mov eax, dword [0x4d77f0]
test eax, eax
je 0x4bb165
mov eax, dword [eax + 4]
jmp 0x4bb167
xor eax, eax
push 0x11d
push 0x144
push eax
push dword [esp + 0x79c]
call esi
test eax, eax
je 0x4bb1bf
mov dword [esp + 0x794], eax
jmp 0x4bb1bf
mov eax, dword [0x4d77e0]
test eax, eax
je 0x4bb196
mov eax, dword [eax + 4]
jmp 0x4bb198
xor eax, eax
push 0x11d
push 0x144
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x794], ecx
movaps xmm0, xmmword [0x4d10b0]
lea edx, [esp + 0x800]
sub esp, 0x10
lea ecx, [esp + 0x7a0]
mov eax, esp
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004b7ac0
add esp, 0x18
lea ecx, [esp + 0x790]
cmp dword [0x4d77c0], 5
push 0x15d
jne 0x4bb223
cmp byte [0x4d77c6], 0
je 0x4bb216
push 0x146
push dword [0x4d7810]
jmp 0x4bb244
push 0x145
push dword [0x4d781c]
jmp 0x4bb244
cmp byte [0x4d77c6], 0
je 0x4bb239
push 0x146
push dword [0x4d77f8]
jmp 0x4bb244
push 0x145
push dword [0x4d7848]
call fcn.004b5a00
movaps xmm0, xmmword [0x4d0fb0]
lea edx, [esp + 0x800]
sub esp, 0x10
lea ecx, [esp + 0x7a0]
mov eax, esp
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004b7ac0
add esp, 0x18
cmp byte [0x4d7018], 0
je 0x4bb2ab
cmp dword [0x4d77c0], 0xfa2
lea ecx, [esp + 0x790]
push 0x197
push 0x2d
jne 0x4bb2a0
push dword [0x4d783c]
jmp 0x4bb2a6
push dword [0x4d7850]
call fcn.004b5a00
movaps xmm0, xmmword [0x4d1080]
lea ecx, [esp + 0x790]
sub esp, 0x10
cmp dword [0x4d77c0], 1
mov eax, esp
push 6
movups xmmword [eax], xmm0
jne 0x4bb2da
push 0xffffde72
lea edx, [esp + 0x888]
jmp 0x4bb2e6
push 0xffffc95d
lea edx, [esp + 0x870]
call fcn.004b7ac0
add esp, 0x18
push 0
push dword [esp + 0x794]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
cmp byte [0x4d7019], 0
mov dword [esp + 0x794], ecx
je 0x4bb40a
mov byte [esp + 0x11c], 4
mov al, 0x57
xor al, byte [esp + 0x11c]
mov ah, 0x6a
mov byte [esp + 0x11d], al
mov cl, 0x6d
mov al, byte [esp + 0x11c]
mov dl, 0x63
xor cl, al
mov byte [esp + 0x17], ah
mov ch, 0x24
mov byte [esp + 0x11e], cl
xor ch, al
mov byte [esp + 0x124], 0
mov dh, 0x4d
mov byte [esp + 0x121], ch
xor dl, al
mov dword [esp + 0x300], 0x43170000
xor ah, al
mov dword [esp + 0x304], 0x43e38000
xor dh, al
mov byte [esp + 0x11f], dl
mov al, byte [esp + 0x17]
sub esp, 0x18
xor al, byte [esp + 0x134]
mov edi, esp
mov ecx, edi
mov byte [esp + 0x138], ah
mov byte [esp + 0x13a], dh
mov byte [esp + 0x13b], al
mov byte [esp + 0x13c], 0
call fcn.004b5360
lea ecx, [esp + 0x135]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bb3c5
sub ecx, edx
lea eax, [esp + 0x135]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x678]
call fcn.004beb20
mov ecx, eax
lea edi, [esp + 0x678]
lea eax, [esp + 0x8d4]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x318]
jmp 0x4bb4c6
mov dh, 0x7e
mov byte [esp + 0x216], 0
mov cl, 0x90
mov dword [esp + 0x308], 0x43110000
mov ch, 0x96
mov dword [esp + 0x30c], 0x43e30000
xor cl, dh
mov byte [esp + 0x210], dh
xor ch, dh
mov byte [esp + 0x212], cl
sub esp, 0x18
mov byte [esp + 0x22d], ch
mov al, 0xbc
mov byte [esp + 0x22e], 0
mov dl, 0x97
mov ah, 0x8c
mov edi, esp
xor al, dh
xor dl, dh
mov byte [esp + 0x229], al
xor ah, dh
mov byte [esp + 0x22b], dl
mov ecx, edi
mov byte [esp + 0x22c], ah
call fcn.004b5360
lea ecx, [esp + 0x229]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bb486
sub ecx, edx
lea eax, [esp + 0x229]
push ecx
push eax
mov ecx, edi
call fcn.004b4ff0
lea ecx, [esp + 0x3d8]
call fcn.004beb90
mov ecx, eax
lea edi, [esp + 0x3d8]
lea eax, [esp + 0x8cc]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x320]
add esp, 0x18
mov dword [esp + 0x18], eax
call fcn.004b3c20
lea ecx, [esp + 0x888]
push ecx
push dword [esp + 0x1c]
lea ecx, [esp + 0x798]
push dword [esp + 0x18]
push 0xffffffffffffffff
push eax
call fcn.004b58b0
mov ecx, edi
call fcn.004b4390
push 2
push dword [esp + 0x794]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
cmp dword [0x4d77c0], 0x3e9
mov dword [esp + 0x794], ecx
jne 0x4bb557
mov eax, dword [0x4d7830]
test eax, eax
je 0x4bb534
mov eax, dword [eax + 4]
jmp 0x4bb536
xor eax, eax
push 0x22b
push 0x97
push eax
push dword [esp + 0x79c]
call esi
test eax, eax
je 0x4bb58e
mov dword [esp + 0x794], eax
jmp 0x4bb58e
mov eax, dword [0x4d7808]
test eax, eax
je 0x4bb565
mov eax, dword [eax + 4]
jmp 0x4bb567
xor eax, eax
push 0x22b
push 0x97
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x794], ecx
cmp dword [0x4d77c0], 0x3ea
jne 0x4bb5b8
push 0x22b
push 0xbf
push dword [0x4d77e4]
lea ecx, [esp + 0x79c]
call fcn.004b5a00
jmp 0x4bb5ef
mov eax, dword [0x4d7834]
test eax, eax
je 0x4bb5c6
mov eax, dword [eax + 4]
jmp 0x4bb5c8
xor eax, eax
push 0x22b
push 0xbf
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x794], ecx
cmp dword [0x4d77c0], 0x3eb
jne 0x4bb62c
mov eax, dword [0x4d7804]
test eax, eax
je 0x4bb609
mov eax, dword [eax + 4]
jmp 0x4bb60b
xor eax, eax
push 0x22b
push 0xe7
push eax
push dword [esp + 0x79c]
call esi
test eax, eax
je 0x4bb663
mov dword [esp + 0x794], eax
jmp 0x4bb663
mov eax, dword [0x4d780c]
test eax, eax
je 0x4bb63a
mov eax, dword [eax + 4]
jmp 0x4bb63c
xor eax, eax
push 0x22b
push 0xe7
push eax
push dword [esp + 0x79c]
call esi
mov ecx, dword [esp + 0x794]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x794], ecx
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xde7721ce
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bb6ae
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bb691
cmp edx, 0x7f021f98
je 0x4bb6b7
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bb681
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov byte [esp + 0x148], 0x57
mov al, 0x65
xor al, byte [esp + 0x148]
mov cl, 0x12
xor cl, byte [esp + 0x148]
mov ch, 0xe
mov byte [esp + 0x149], al
mov dl, 0x1e
mov byte [esp + 0x14a], cl
mov ah, 0x3d
mov cl, byte [esp + 0x148]
mov dh, 0x15
mov byte [esp + 0x17], 0x3b
xor ch, cl
mov al, byte [esp + 0x17]
xor dl, cl
xor al, cl
mov byte [esp + 0x1e], 0x21
mov byte [esp + 0x14f], al
xor ah, cl
mov al, byte [esp + 0x1e]
xor dh, cl
xor al, cl
mov byte [esp + 0x14d], ch
mov byte [esp + 0x151], 0
lea ecx, [esp + 0x92c]
mov byte [esp + 0x14b], dl
mov byte [esp + 0x14c], ah
mov byte [esp + 0x14e], dh
mov byte [esp + 0x150], al
mov byte [esp + 0x151], 0
call fcn.004b5360
lea ecx, [esp + 0x149]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bb784
sub ecx, edx
lea eax, [esp + 0x149]
push ecx
push eax
lea ecx, [esp + 0x934]
call fcn.004b4ff0
mov byte [esp + 0x128], 0x76
mov al, 0x3e
xor al, byte [esp + 0x128]
mov cl, 0x2e
mov byte [esp + 0x129], al
mov dl, 0x15
mov al, byte [esp + 0x128]
mov ah, 0x3f
xor cl, al
mov byte [esp + 0x17], 0x3c
mov ch, 0x39
mov byte [esp + 0x12a], cl
xor ch, al
mov byte [esp + 0x130], 0
mov dh, 0x47
mov byte [esp + 0x12d], ch
xor dl, al
mov byte [esp + 0x130], 0
xor ah, al
mov byte [esp + 0x12b], dl
xor dh, al
mov byte [esp + 0x12c], ah
mov al, byte [esp + 0x17]
lea ecx, [esp + 0x8f8]
xor al, byte [esp + 0x128]
mov byte [esp + 0x12e], dh
mov byte [esp + 0x12f], al
call fcn.004b5360
lea ecx, [esp + 0x129]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bb835
sub ecx, edx
lea eax, [esp + 0x129]
push ecx
push eax
lea ecx, [esp + 0x900]
call fcn.004b4ff0
mov cl, 0x3e
mov byte [esp + 0x13c], 0x5c
mov ch, cl
mov byte [esp + 0x17], 0x3a
xor cl, byte [esp + 0x13c]
mov al, 0x3f
xor al, byte [esp + 0x13c]
mov dl, 0x2b
mov byte [esp + 0x13d], al
mov dh, 0x37
mov al, byte [esp + 0x17]
mov ah, 0x64
mov byte [esp + 0x13e], cl
mov cl, byte [esp + 0x13c]
xor al, cl
mov byte [esp + 0x1e], 0x3b
xor dl, cl
mov byte [esp + 0x143], al
mov al, byte [esp + 0x1e]
xor ch, cl
xor dh, cl
mov byte [esp + 0x141], ch
xor ah, cl
mov byte [esp + 0x145], 0
xor al, cl
mov byte [esp + 0x13f], dl
lea ecx, [esp + 0x13d]
mov byte [esp + 0x142], dh
mov byte [esp + 0x140], ah
lea edx, [ecx + 1]
mov byte [esp + 0x144], al
mov byte [esp + 0x145], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bb8f0
sub ecx, edx
lea eax, [esp + 0x13d]
push ecx
push eax
lea ecx, [esp + 0x900]
call fcn.004b4730
mov byte [esp + 0x218], 0x57
mov cl, 0x2e
xor cl, byte [esp + 0x218]
mov al, 0x33
xor al, byte [esp + 0x218]
mov dl, 0x23
mov byte [esp + 0x219], al
mov ch, 0x2f
mov byte [esp + 0x21a], cl
mov dh, 0x60
mov cl, byte [esp + 0x218]
mov ah, 0x31
mov byte [esp + 0x17], 0x66
xor dl, cl
mov al, byte [esp + 0x17]
xor dh, cl
xor al, cl
mov byte [esp + 0x1e], 0x3b
mov byte [esp + 0x21f], al
xor ch, cl
mov al, byte [esp + 0x1e]
xor ah, cl
xor al, cl
mov byte [esp + 0x1d], 0x32
mov byte [esp + 0x220], al
mov al, byte [esp + 0x1d]
xor al, cl
mov byte [esp + 0x1f], 0x3f
mov byte [esp + 0x221], al
mov al, byte [esp + 0x1f]
xor al, cl
mov byte [esp + 0x21b], dl
mov byte [esp + 0x21d], ch
lea ecx, [esp + 0x219]
mov byte [esp + 0x21e], dh
lea edx, [esp + 0x8f8]
mov byte [esp + 0x223], 0
mov byte [esp + 0x21c], ah
mov byte [esp + 0x222], al
mov byte [esp + 0x223], 0
call fcn.004b4a70
test al, al
je 0x4bbabe
mov byte [esp + 0x184], 0x5d
mov cl, 0x39
xor cl, byte [esp + 0x184]
mov al, 0x6a
xor al, byte [esp + 0x184]
mov ch, 0x14
mov byte [esp + 0x185], al
mov dl, 0x10
mov byte [esp + 0x186], cl
mov dh, 0x65
mov cl, byte [esp + 0x184]
mov ah, 0x29
mov byte [esp + 0x17], 0x6b
xor dl, cl
mov al, byte [esp + 0x17]
xor ch, cl
xor al, cl
mov byte [esp + 0x1e], 0x19
mov byte [esp + 0x18b], al
xor dh, cl
mov al, byte [esp + 0x1e]
xor ah, cl
xor al, cl
mov byte [esp + 0x1d], 0x24
mov byte [esp + 0x18c], al
mov al, byte [esp + 0x1d]
xor al, cl
mov byte [esp + 0x1f], 0x3e
mov byte [esp + 0x18d], al
mov al, byte [esp + 0x1f]
xor al, cl
mov byte [esp + 0x189], ch
lea ecx, [esp + 0x185]
mov byte [esp + 0x18f], 0
mov byte [esp + 0x187], dl
mov byte [esp + 0x18a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x188], ah
mov byte [esp + 0x18e], al
mov byte [esp + 0x18f], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bbaa0
sub ecx, edx
lea eax, [esp + 0x185]
push ecx
push eax
lea ecx, [esp + 0x934]
call fcn.004b45a0
lea ecx, [esp + 0x8f8]
call fcn.004b3e90
lea ecx, [esp + 0x92c]
call fcn.004b3e90
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xba9394b9
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bbb21
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bbb04
cmp edx, 0x983cd5b7
je 0x4bbb2a
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bbaf4
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 1
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7880]
xor ecx, ecx
movaps xmm0, xmmword [esp + 0x910]
movaps xmmword [esp + 0x7a0], xmm0
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0xe8658c37
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bbbad
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bbb90
cmp edx, 0x95fc2a94
je 0x4bbbb6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bbb80
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x118]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov byte [esp + 0x1c0], 0x75
mov al, 0x34
xor al, byte [esp + 0x1c0]
mov cl, 0xf
xor cl, byte [esp + 0x1c0]
mov ch, 0x3b
mov byte [esp + 0x1c1], al
mov dl, 7
mov byte [esp + 0x1c2], cl
mov ah, 0x1e
mov cl, byte [esp + 0x1c0]
mov dh, 0x18
mov byte [esp + 0x17], 0x14
xor ch, cl
mov al, byte [esp + 0x17]
xor dl, cl
xor al, cl
mov byte [esp + 0x1e], 3
mov byte [esp + 0x1c7], al
xor ah, cl
mov al, byte [esp + 0x1e]
xor dh, cl
xor al, cl
mov byte [esp + 0x1d], 0x1d
mov byte [esp + 0x1c8], al
mov al, byte [esp + 0x1d]
xor al, cl
mov byte [esp + 0x1f], 0x36
mov byte [esp + 0x1c9], al
mov al, byte [esp + 0x1f]
xor al, cl
mov byte [esp + 0x1c5], ch
mov byte [esp + 0x1cb], 0
lea ecx, [esp + 0x8e0]
mov dword [esp + 0x7a0], 0x37
mov dword [esp + 0x7a4], 0x11b
mov byte [esp + 0x1c3], dl
mov byte [esp + 0x1c4], ah
mov byte [esp + 0x1c6], dh
mov byte [esp + 0x1ca], al
mov byte [esp + 0x1cb], 0
call fcn.004b5360
lea ecx, [esp + 0x1c1]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bbcc0
sub ecx, edx
lea eax, [esp + 0x1c1]
push ecx
push eax
lea ecx, [esp + 0x8e8]
call fcn.004b4ff0
mov byte [esp + 0x198], 0x63
mov al, 4
xor al, byte [esp + 0x198]
mov cl, 0xf
xor cl, byte [esp + 0x198]
mov dh, 7
mov byte [esp + 0x199], al
mov ah, 0xe
mov byte [esp + 0x19a], cl
mov ch, 0x19
mov cl, byte [esp + 0x198]
mov dl, 0x30
mov byte [esp + 0x17], 0x5a
xor ah, cl
mov al, byte [esp + 0x17]
xor ch, cl
xor al, cl
mov byte [esp + 0x1e], dh
mov byte [esp + 0x19f], al
xor dl, cl
mov al, byte [esp + 0x1e]
xor dh, cl
xor al, cl
mov byte [esp + 0x19c], ah
mov byte [esp + 0x1a0], al
lea eax, [esp + 0x23b]
push eax
push 1
push 0
lea eax, [esp + 0x8ec]
mov byte [esp + 0x1a9], ch
mov byte [esp + 0x1ad], 0
lea ecx, [esp + 0x394]
push eax
mov byte [esp + 0x1ab], dl
mov byte [esp + 0x1ae], dh
mov byte [esp + 0x1b1], 0
call fcn.004b4790
lea eax, [esp + 0x199]
push eax
lea ecx, [esp + 0x38c]
call fcn.004b5380
lea ecx, [esp + 0x388]
mov byte [esp + 0x17], al
call fcn.004b3e90
cmp byte [esp + 0x17], 0
je 0x4bbe95
push 0x71
lea ecx, [esp + 0x48]
mov byte [esp + 0x48], 0x57
call fcn.004b3140
push 0x4a
lea ecx, [esp + 0x48]
mov byte [esp + 0x49], al
call fcn.004b3140
push 0x66
lea ecx, [esp + 0x48]
mov byte [esp + 0x4a], al
call fcn.004b3140
push 0x4f
lea ecx, [esp + 0x48]
mov byte [esp + 0x4b], al
call fcn.004b3140
push 0x78
lea ecx, [esp + 0x48]
mov byte [esp + 0x4c], al
call fcn.004b3140
push 0x77
lea ecx, [esp + 0x48]
mov byte [esp + 0x4d], al
call fcn.004b3140
push 0x6b
lea ecx, [esp + 0x48]
mov byte [esp + 0x4e], al
call fcn.004b3140
push 0x74
lea ecx, [esp + 0x48]
mov byte [esp + 0x4f], al
call fcn.004b3140
mov byte [esp + 0x4c], al
xor esi, esi
mov byte [esp + 0x4d], 0
nop
push esi
lea ecx, [esp + 0x49]
call fcn.004b3130
lea ecx, [esp + 0x44]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x49]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 8
jb 0x4bbe40
push 8
lea ecx, [esp + 0x49]
call fcn.004b3130
lea ecx, [esp + 0x45]
mov byte [eax], 0
call fcn.004b3120
push eax
lea ecx, [esp + 0x8e4]
call fcn.004b3e30
lea ecx, [esp + 0x8e0]
call fcn.004b3e90
cmp dword [0x4d77d0], 1
jne 0x4bbf0d
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xb5cb9e48
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bbefd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bbee0
cmp edx, 0xc1e4c29e
je 0x4bbf06
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bbed0
push 0xcccccc
jmp 0x4bbf7b
mov eax, dword [0x4d77c0]
cmp eax, 0x7d1
je 0x4bbf22
cmp eax, 4
jne 0x4bbf9e
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x3a434760
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bbf6d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bbf50
cmp edx, 0xa8c50876
je 0x4bbf76
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bbf40
push 0x969696
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edx, 0x4c9469
mov ecx, 0x4d7098
call fcn.004be540
mov edi, dword [0x4d7870]
xor ecx, ecx
test al, al
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
je 0x4bc049
mov esi, dword [eax + edi + 0x20]
add eax, edi
mov dword [esp + 0x18], eax
add esi, edi
mov ecx, dword [esi]
mov edx, 0x660a2e39
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc001
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bbfe4
cmp edx, 0x2ea2db3
je 0x4bc00a
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bbfd4
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, 0x4d7098
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b3ce0
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call esi
jmp 0x4bc31d
mov esi, dword [eax + edi + 0x20]
add eax, edi
add esi, edi
mov dword [esp + 0x18], eax
cmp byte [0x4d7019], 0
je 0x4bc1c2
mov ecx, dword [esi]
mov edx, 0x44d539b
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc08f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc072
cmp edx, 0x716b9471
je 0x4bc098
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc062
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x59
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x54]
add eax, edi
mov byte [esp + 0x54], 6
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0x6f
lea ecx, [esp + 0x54]
mov byte [esp + 0x55], al
call fcn.004b3140
push 0x75
lea ecx, [esp + 0x54]
mov byte [esp + 0x56], al
call fcn.004b3140
push 0x72
lea ecx, [esp + 0x54]
mov byte [esp + 0x57], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0x54]
mov byte [esp + 0x58], al
call fcn.004b3140
push 0x49
lea ecx, [esp + 0x54]
mov byte [esp + 0x59], al
call fcn.004b3140
push 0x6e
lea ecx, [esp + 0x54]
mov byte [esp + 0x5a], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0x54]
mov byte [esp + 0x5b], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x54]
mov byte [esp + 0x5c], al
call fcn.004b3140
push 0x78
lea ecx, [esp + 0x54]
mov byte [esp + 0x5d], al
call fcn.004b3140
mov byte [esp + 0x5a], al
xor esi, esi
mov byte [esp + 0x5b], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x55]
call fcn.004b3130
lea ecx, [esp + 0x50]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x55]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bc160
push 0xa
lea ecx, [esp + 0x55]
call fcn.004b3130
lea ecx, [esp + 0x51]
mov byte [eax], 0
call fcn.004b3120
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4bc31d
mov ecx, dword [esi]
mov edx, 0xecd6561a
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc1ef
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc1d2
cmp edx, 0xefc71216
je 0x4bc1f8
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc1c2
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x60]
add eax, edi
mov byte [esp + 0x60], 0x5b
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0xffffffffffffffe0
lea ecx, [esp + 0x60]
mov byte [esp + 0x61], al
call fcn.004b3140
push 0xfffffffffffffff8
lea ecx, [esp + 0x60]
mov byte [esp + 0x62], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0x60]
mov byte [esp + 0x63], al
call fcn.004b3140
push 0xffffffffffffffc8
lea ecx, [esp + 0x60]
mov byte [esp + 0x64], al
call fcn.004b3140
push 0xffffffffffffffed
lea ecx, [esp + 0x60]
mov byte [esp + 0x65], al
call fcn.004b3140
push 0xffffffffffffffe4
lea ecx, [esp + 0x60]
mov byte [esp + 0x66], al
call fcn.004b3140
push 0xffffffffffffffe5
lea ecx, [esp + 0x60]
mov byte [esp + 0x67], al
call fcn.004b3140
push 0xffffffffffffffea
lea ecx, [esp + 0x60]
mov byte [esp + 0x68], al
call fcn.004b3140
push 0xfffffffffffffff1
lea ecx, [esp + 0x60]
mov byte [esp + 0x69], al
call fcn.004b3140
mov byte [esp + 0x66], al
xor esi, esi
mov byte [esp + 0x67], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x61]
call fcn.004b3130
lea ecx, [esp + 0x5c]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x61]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bc2c0
push 0xa
lea ecx, [esp + 0x61]
call fcn.004b3130
lea ecx, [esp + 0x5d]
mov byte [eax], 0
call fcn.004b3120
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x88ac9a9f
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc36d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc350
cmp edx, 0x2c4af981
je 0x4bc376
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc340
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4d77d0], 2
mov dword [esp + 0x7a0], 0x37
mov dword [esp + 0x7a4], 0x15b
jne 0x4bc435
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xaa7dff16
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc40d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc3f0
cmp edx, 0x59616220
je 0x4bc416
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc3e0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xcccccc
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
jmp 0x4bc4c0
mov eax, dword [0x4d77c0]
cmp eax, 0x7d2
je 0x4bc44a
cmp eax, 5
jne 0x4bc4ce
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x70a210fe
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc49d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc480
cmp edx, 0x18c7e9c8
je 0x4bc4a6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc470
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x969696
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [esi + 0x1c]
push dword [esp + 0x24]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edx, 0x4c9469
mov ecx, 0x4d70c8
call fcn.004be540
xor ecx, ecx
mov dword [esp + 0x10], ecx
test al, al
je 0x4bc6cd
cmp byte [0x4d77c6], cl
je 0x4bc585
mov edi, dword [0x4d7870]
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x5ab02df4
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc53d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc520
cmp edx, 0xa5c649ec
je 0x4bc546
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc510
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
mov ecx, 0x4d70c8
movzx edx, word [eax + edi]
mov eax, dword [esi + 0x1c]
lea eax, [eax + edx*4]
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b3ce0
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call esi
jmp 0x4bca3d
mov edi, dword [0x4d7880]
mov dword [esp + 0x7a4], 0x159
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x7e1f8f12
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc5dd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc5c0
cmp edx, 0xacd062c1
je 0x4bc5e6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc5b0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x51fadc98
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc65d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc640
cmp edx, 0x6ac90a50
je 0x4bc666
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc630
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, 0x4d70c8
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b3cd0
push eax
push 0
lea eax, [esp + 0x3e0]
mov ecx, 0x4d7884
push eax
call fcn.004b3c80
mov ecx, eax
call fcn.004b3ce0
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call esi
lea ecx, [esp + 0x3d8]
call fcn.004b3e90
jmp 0x4bca3d
mov edi, dword [0x4d7870]
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4d7019], 0
je 0x4bc8e1
mov ecx, dword [esi]
mov edx, 0xcaf51d1a
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc71f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc702
cmp edx, 0xd43df716
je 0x4bc728
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc6f2
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x59
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x98]
add eax, edi
mov byte [esp + 0x98], 0x76
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0x6f
lea ecx, [esp + 0x98]
mov byte [esp + 0x99], al
call fcn.004b3140
push 0x75
lea ecx, [esp + 0x98]
mov byte [esp + 0x9a], al
call fcn.004b3140
push 0x72
lea ecx, [esp + 0x98]
mov byte [esp + 0x9b], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0x98]
mov byte [esp + 0x9c], al
call fcn.004b3140
push 0x50
lea ecx, [esp + 0x98]
mov byte [esp + 0x9d], al
call fcn.004b3140
push 0x61
lea ecx, [esp + 0x98]
mov byte [esp + 0x9e], al
call fcn.004b3140
push 0x73
lea ecx, [esp + 0x98]
mov byte [esp + 0x9f], al
call fcn.004b3140
push 0x73
lea ecx, [esp + 0x98]
mov byte [esp + 0xa0], al
call fcn.004b3140
push 0x77
lea ecx, [esp + 0x98]
mov byte [esp + 0xa1], al
call fcn.004b3140
push 0x6f
lea ecx, [esp + 0x98]
mov byte [esp + 0xa2], al
call fcn.004b3140
push 0x72
lea ecx, [esp + 0x98]
mov byte [esp + 0xa3], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0x98]
mov byte [esp + 0xa4], al
call fcn.004b3140
mov byte [esp + 0xa1], al
xor esi, esi
mov byte [esp + 0xa2], 0
nop dword [eax]
push esi
lea ecx, [esp + 0x99]
call fcn.004b3130
lea ecx, [esp + 0x94]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x99]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x4bc870
push 0xd
lea ecx, [esp + 0x99]
call fcn.004b3130
lea ecx, [esp + 0x95]
mov byte [eax], 0
call fcn.004b3120
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4bca3d
mov ecx, dword [esi]
mov edx, 0x4566aea0
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bc90e
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bc8f1
cmp edx, 0xdd829098
je 0x4bc917
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bc8e1
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x6c]
add eax, edi
mov byte [esp + 0x6c], 0x52
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0xffffffffffffffe0
lea ecx, [esp + 0x6c]
mov byte [esp + 0x6d], al
call fcn.004b3140
push 0xfffffffffffffff8
lea ecx, [esp + 0x6c]
mov byte [esp + 0x6e], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0x6c]
mov byte [esp + 0x6f], al
call fcn.004b3140
push 0xffffffffffffffcf
lea ecx, [esp + 0x6c]
mov byte [esp + 0x70], al
call fcn.004b3140
push 0xffffffffffffffe0
lea ecx, [esp + 0x6c]
mov byte [esp + 0x71], al
call fcn.004b3140
push 0xfffffffffffffff0
lea ecx, [esp + 0x6c]
mov byte [esp + 0x72], al
call fcn.004b3140
push 0xffffffffffffffee
lea ecx, [esp + 0x6c]
mov byte [esp + 0x73], al
call fcn.004b3140
push 0xffffffffffffffeb
lea ecx, [esp + 0x6c]
mov byte [esp + 0x74], al
call fcn.004b3140
push 0xfffffffffffffffc
lea ecx, [esp + 0x6c]
mov byte [esp + 0x75], al
call fcn.004b3140
mov byte [esp + 0x72], al
xor esi, esi
mov byte [esp + 0x73], 0
nop word [eax + eax]
push esi
lea ecx, [esp + 0x6d]
call fcn.004b3130
lea ecx, [esp + 0x68]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x6d]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bc9e0
push 0xa
lea ecx, [esp + 0x6d]
call fcn.004b3130
lea ecx, [esp + 0x69]
mov byte [eax], 0
call fcn.004b3120
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x31d4d1b7
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bca8d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bca70
cmp edx, 0xd1e82939
je 0x4bca96
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bca60
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0xddc5aaa
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bcb0d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bcaf0
cmp edx, 0xd2edc369
je 0x4bcb16
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bcae0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x234]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
movaps xmm0, xmmword [esp + 0x910]
mov ecx, 0x4d70b0
movaps xmmword [esp + 0x7a0], xmm0
push 0x4c9469
mov dword [esp + 0x7a8], 0x1fb
call fcn.004b5380
test al, al
je 0x4bd29a
cmp dword [0x4d77c0], 0xfa1
jne 0x4bcbfe
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x2964db43
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bcbcd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bcbb0
cmp edx, 0xb5777e65
je 0x4bcbd6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bcba0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x828282
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4d7019], cl
je 0x4bcf31
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x5d92a709
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bcc5d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bcc40
cmp edx, 0x32269203
je 0x4bcc66
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bcc30
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x48
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xdc]
add eax, edi
mov byte [esp + 0xdc], 0x4a
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0x61
lea ecx, [esp + 0xdc]
mov byte [esp + 0xdd], al
call fcn.004b3140
push 0x76
lea ecx, [esp + 0xdc]
mov byte [esp + 0xde], al
call fcn.004b3140
push 0x69
lea ecx, [esp + 0xdc]
mov byte [esp + 0xdf], al
call fcn.004b3140
push 0x6e
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe0], al
call fcn.004b3140
push 0x67
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe1], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe2], al
call fcn.004b3140
push 0x74
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe3], al
call fcn.004b3140
push 0x72
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe4], al
call fcn.004b3140
push 0x6f
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe5], al
call fcn.004b3140
push 0x75
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe6], al
call fcn.004b3140
push 0x62
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe7], al
call fcn.004b3140
push 0x6c
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe8], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe9], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0xdc]
mov byte [esp + 0xea], al
call fcn.004b3140
push 0x73
lea ecx, [esp + 0xdc]
mov byte [esp + 0xeb], al
call fcn.004b3140
push 0x69
lea ecx, [esp + 0xdc]
mov byte [esp + 0xec], al
call fcn.004b3140
mov byte [esp + 0xe9], al
lea ecx, [esp + 0xd8]
push 0x67
call fcn.004b3140
push 0x6e
lea ecx, [esp + 0xdc]
mov byte [esp + 0xee], al
call fcn.004b3140
push 0x69
lea ecx, [esp + 0xdc]
mov byte [esp + 0xef], al
call fcn.004b3140
push 0x6e
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf0], al
call fcn.004b3140
push 0x67
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf1], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf2], al
call fcn.004b3140
push 0x69
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf3], al
call fcn.004b3140
push 0x6e
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf4], al
call fcn.004b3140
push 0x3f
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf5], al
call fcn.004b3140
mov byte [esp + 0xf2], al
xor esi, esi
mov byte [esp + 0xf3], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0xdd]
call fcn.004b3130
lea ecx, [esp + 0xd8]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0xdd]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0x1a
jb 0x4bcec0
push 0x1a
lea ecx, [esp + 0xdd]
call fcn.004b3130
lea ecx, [esp + 0xd9]
mov byte [eax], 0
call fcn.004b3120
push 1
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4bd23d
mov ecx, dword [esi]
mov edx, 0x8327cfa8
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bcf5e
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bcf41
cmp edx, 0x9dbfbf60
je 0x4bcf67
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bcf31
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xf8]
add eax, edi
mov byte [esp + 0xf8], 0x36
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0xffffffffffffffee
lea ecx, [esp + 0xf8]
mov byte [esp + 0xf9], al
call fcn.004b3140
push 0xffffffffffffffe7
lea ecx, [esp + 0xf8]
mov byte [esp + 0xfa], al
call fcn.004b3140
push 0xffffffffffffffed
lea ecx, [esp + 0xf8]
mov byte [esp + 0xfb], al
call fcn.004b3140
push 0xffffffffffffffe8
lea ecx, [esp + 0xf8]
mov byte [esp + 0xfc], al
call fcn.004b3140
push 0xffffffffffffffea
lea ecx, [esp + 0xf8]
mov byte [esp + 0xfd], al
call fcn.004b3140
push 0xffffffffffffffeb
lea ecx, [esp + 0xf8]
mov byte [esp + 0xfe], al
call fcn.004b3140
push 0xffffffffffffffe8
lea ecx, [esp + 0xf8]
mov byte [esp + 0xff], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0xf8]
mov byte [esp + 0x100], al
call fcn.004b3140
push 0xffffffffffffffef
lea ecx, [esp + 0xf8]
mov byte [esp + 0x101], al
call fcn.004b3140
push 0xfffffffffffffff0
lea ecx, [esp + 0xf8]
mov byte [esp + 0x102], al
call fcn.004b3140
push 0xffffffffffffffee
lea ecx, [esp + 0xf8]
mov byte [esp + 0x103], al
call fcn.004b3140
push 0xffffffffffffffe1
lea ecx, [esp + 0xf8]
mov byte [esp + 0x104], al
call fcn.004b3140
push 0xffffffffffffffeb
lea ecx, [esp + 0xf8]
mov byte [esp + 0x105], al
call fcn.004b3140
push 0xffffffffffffffe5
lea ecx, [esp + 0xf8]
mov byte [esp + 0x106], al
call fcn.004b3140
push 0xffffffffffffffec
lea ecx, [esp + 0xf8]
mov byte [esp + 0x107], al
call fcn.004b3140
push 0xfffffffffffffffb
lea ecx, [esp + 0xf8]
mov byte [esp + 0x108], al
call fcn.004b3140
mov byte [esp + 0x105], al
lea ecx, [esp + 0xf4]
push 0x20
call fcn.004b3140
push 0xfffffffffffffff1
lea ecx, [esp + 0xf8]
mov byte [esp + 0x10a], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0xf8]
mov byte [esp + 0x10b], al
call fcn.004b3140
push 0xffffffffffffffe2
lea ecx, [esp + 0xf8]
mov byte [esp + 0x10c], al
call fcn.004b3140
push 0xfffffffffffffff5
lea ecx, [esp + 0xf8]
mov byte [esp + 0x10d], al
call fcn.004b3140
push 0xffffffffffffffee
lea ecx, [esp + 0xf8]
mov byte [esp + 0x10e], al
call fcn.004b3140
push 0xffffffffffffffe4
lea ecx, [esp + 0xf8]
mov byte [esp + 0x10f], al
call fcn.004b3140
push 0xffffffffffffffee
lea ecx, [esp + 0xf8]
mov byte [esp + 0x110], al
call fcn.004b3140
push 0xffffffffffffffec
lea ecx, [esp + 0xf8]
mov byte [esp + 0x111], al
call fcn.004b3140
push 0x3f
lea ecx, [esp + 0xf8]
mov byte [esp + 0x112], al
call fcn.004b3140
mov byte [esp + 0x10f], al
xor esi, esi
mov byte [esp + 0x110], 0
push esi
lea ecx, [esp + 0xf9]
call fcn.004b3130
lea ecx, [esp + 0xf4]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0xf9]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0x1b
jb 0x4bd1d1
push 0x1b
lea ecx, [esp + 0xf9]
call fcn.004b3130
lea ecx, [esp + 0xf5]
mov byte [eax], 0
call fcn.004b3120
push 1
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x988b424b
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd291
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd270
cmp edx, 0x5066a52d
je 0x4bd406
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd260
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x9f4272e4
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd2ed
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd2d0
cmp edx, 0x6907904a
je 0x4bd2f6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd2c0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x5dc9ff
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0xa0427477
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd36d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd350
cmp edx, 0x37aeac1d
je 0x4bd376
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd340
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
mov ecx, 0x4d70b0
movzx edx, word [eax + edi]
mov eax, dword [esi + 0x1c]
lea eax, [eax + edx*4]
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b3ce0
push 1
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call esi
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x22f0551c
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd3fd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd3e0
cmp edx, 0xa465eda2
je 0x4bd406
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd3d0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4d77c0], 0xfa2
mov dword [esp + 0x7a0], 0x49
mov dword [esp + 0x7a4], 0x195
jne 0x4bd4ce
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0xa671bd4d
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd49d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd480
cmp edx, 0x46ec2e93
je 0x4bd4a6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd470
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x828282
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4d7019], cl
je 0x4bd676
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x52881c65
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd52d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd510
cmp edx, 0x252f2bef
je 0x4bd536
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd500
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x52
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x78]
add eax, edi
mov byte [esp + 0x78], 0x57
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x78]
mov byte [esp + 0x79], al
call fcn.004b3140
push 0x6d
lea ecx, [esp + 0x78]
mov byte [esp + 0x7a], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x78]
mov byte [esp + 0x7b], al
call fcn.004b3140
push 0x6d
lea ecx, [esp + 0x78]
mov byte [esp + 0x7c], al
call fcn.004b3140
push 0x62
lea ecx, [esp + 0x78]
mov byte [esp + 0x7d], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x78]
mov byte [esp + 0x7e], al
call fcn.004b3140
push 0x72
lea ecx, [esp + 0x78]
mov byte [esp + 0x7f], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0x78]
mov byte [esp + 0x80], al
call fcn.004b3140
push 0x4d
lea ecx, [esp + 0x78]
mov byte [esp + 0x81], al
call fcn.004b3140
push 0x65
lea ecx, [esp + 0x78]
mov byte [esp + 0x82], al
call fcn.004b3140
mov byte [esp + 0x7f], al
xor esi, esi
mov byte [esp + 0x80], 0
push esi
lea ecx, [esp + 0x79]
call fcn.004b3130
lea ecx, [esp + 0x74]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0x79]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x4bd614
push 0xb
lea ecx, [esp + 0x79]
call fcn.004b3130
lea ecx, [esp + 0x75]
mov byte [eax], 0
call fcn.004b3120
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4bd87c
mov ecx, dword [esi]
mov edx, 0x6a7b0a0c
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd6a3
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd686
cmp edx, 0xcf975e64
je 0x4bd6ac
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd676
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc7
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xa8]
add eax, edi
mov byte [esp + 0xa8], 0xc
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0xffffffffffffffe0
lea ecx, [esp + 0xa8]
mov byte [esp + 0xa9], al
call fcn.004b3140
push 0xffffffffffffffef
lea ecx, [esp + 0xa8]
mov byte [esp + 0xaa], al
call fcn.004b3140
push 0xffffffffffffffee
lea ecx, [esp + 0xa8]
mov byte [esp + 0xab], al
call fcn.004b3140
push 0xffffffffffffffec
lea ecx, [esp + 0xa8]
mov byte [esp + 0xac], al
call fcn.004b3140
push 0xffffffffffffffed
lea ecx, [esp + 0xa8]
mov byte [esp + 0xad], al
call fcn.004b3140
push 0xffffffffffffffe8
lea ecx, [esp + 0xa8]
mov byte [esp + 0xae], al
call fcn.004b3140
push 0xfffffffffffffff2
lea ecx, [esp + 0xa8]
mov byte [esp + 0xaf], al
call fcn.004b3140
push 0xfffffffffffffffc
lea ecx, [esp + 0xa8]
mov byte [esp + 0xb0], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0xa8]
mov byte [esp + 0xb1], al
call fcn.004b3140
push 0xffffffffffffffcc
lea ecx, [esp + 0xa8]
mov byte [esp + 0xb2], al
call fcn.004b3140
push 0xffffffffffffffe5
lea ecx, [esp + 0xa8]
mov byte [esp + 0xb3], al
call fcn.004b3140
push 0xffffffffffffffed
lea ecx, [esp + 0xa8]
mov byte [esp + 0xb4], al
call fcn.004b3140
push 0xffffffffffffffff
lea ecx, [esp + 0xa8]
mov byte [esp + 0xb5], al
call fcn.004b3140
mov byte [esp + 0xb2], al
xor esi, esi
mov byte [esp + 0xb3], 0
nop word [eax + eax]
push esi
lea ecx, [esp + 0xa9]
call fcn.004b3130
lea ecx, [esp + 0xa4]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0xa9]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x4bd810
push 0xe
lea ecx, [esp + 0xa9]
call fcn.004b3130
lea ecx, [esp + 0xa5]
mov byte [eax], 0
call fcn.004b3120
push 0
lea ecx, [esp + 0x7a4]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop word [eax + eax]
mov ecx, dword [esi]
mov edx, 0xfcb5b763
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd8cd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd8b0
cmp edx, 0x255b14c5
je 0x4bd8d6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd8a0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4d77c0], 0xfa3
mov dword [esp + 0x7a0], 0xe6
mov dword [esp + 0x7a4], 0x195
jne 0x4bd99e
mov edi, dword [0x4d7880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0xc01c0392
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd96d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd950
cmp edx, 0x89c24cac
je 0x4bd976
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd940
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x828282
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4d7870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4d7019], cl
je 0x4bdc01
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x942c616
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd9fd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd9e0
cmp edx, 0x1f92a3a2
je 0x4bda06
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd9d0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x46
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xc8]
add eax, edi
mov byte [esp + 0xc8], 0x19
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0x6f
lea ecx, [esp + 0xc8]
mov byte [esp + 0xc9], al
call fcn.004b3140
push 0x72
lea ecx, [esp + 0xc8]
mov byte [esp + 0xca], al
call fcn.004b3140
push 0x67
lea ecx, [esp + 0xc8]
mov byte [esp + 0xcb], al
call fcn.004b3140
push 0x6f
lea ecx, [esp + 0xc8]
mov byte [esp + 0xcc], al
call fcn.004b3140
push 0x74
lea ecx, [esp + 0xc8]
mov byte [esp + 0xcd], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0xc8]
mov byte [esp + 0xce], al
call fcn.004b3140
push 0x50
lea ecx, [esp + 0xc8]
mov byte [esp + 0xcf], al
call fcn.004b3140
push 0x61
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd0], al
call fcn.004b3140
push 0x73
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd1], al
call fcn.004b3140
push 0x73
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd2], al
call fcn.004b3140
push 0x77
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd3], al
call fcn.004b3140
push 0x6f
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd4], al
call fcn.004b3140
push 0x72
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd5], al
call fcn.004b3140
push 0x64
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd6], al
call fcn.004b3140
push 0x3f
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd7], al
call fcn.004b3140
mov byte [esp + 0xd4], al
xor esi, esi
mov byte [esp + 0xd5], 0
nop dword [eax]
push esi
lea ecx, [esp + 0xc9]
call fcn.004b3130
lea ecx, [esp + 0xc4]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0xc9]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x4bdb90
mov ecx, dword [esi]
mov edx, 0x403e2770
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bdc2e
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bdc11
cmp edx, 0xb0c36328
je 0x4bdc37
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bdc01
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc7
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xb8]
add eax, edi
mov byte [esp + 0xb8], 0x33
mov dword [esp + 0x1c], eax
call fcn.004b3140
push 0xffffffffffffffe0
lea ecx, [esp + 0xb8]
mov byte [esp + 0xb9], al
call fcn.004b3140
push 0xffffffffffffffe1
lea ecx, [esp + 0xb8]
mov byte [esp + 0xba], al
call fcn.004b3140
push 0xfffffffffffffffb
lea ecx, [esp + 0xb8]
mov byte [esp + 0xbb], al
call fcn.004b3140
push 0xffffffffffffffeb
lea ecx, [esp + 0xb8]
mov byte [esp + 0xbc], al
call fcn.004b3140
push 0xffffffffffffffe8
lea ecx, [esp + 0xb8]
mov byte [esp + 0xbd], al
call fcn.004b3140
push 0x20
lea ecx, [esp + 0xb8]
mov byte [esp + 0xbe], al
call fcn.004b3140
push 0xffffffffffffffcf
lea ecx, [esp + 0xb8]
mov byte [esp + 0xbf], al
call fcn.004b3140
push 0xffffffffffffffe0
lea ecx, [esp + 0xb8]
mov byte [esp + 0xc0], al
call fcn.004b3140
push 0xfffffffffffffff0
lea ecx, [esp + 0xb8]
mov byte [esp + 0xc1], al
call fcn.004b3140
push 0xffffffffffffffee
lea ecx, [esp + 0xb8]
mov byte [esp + 0xc2], al
call fcn.004b3140
push 0xffffffffffffffeb
lea ecx, [esp + 0xb8]
mov byte [esp + 0xc3], al
call fcn.004b3140
push 0xfffffffffffffffc
lea ecx, [esp + 0xb8]
mov byte [esp + 0xc4], al
call fcn.004b3140
push 0x3f
lea ecx, [esp + 0xb8]
mov byte [esp + 0xc5], al
call fcn.004b3140
mov byte [esp + 0xc2], al
xor esi, esi
mov byte [esp + 0xc3], 0
push esi
lea ecx, [esp + 0xb9]
call fcn.004b3130
lea ecx, [esp + 0xb4]
movzx eax, byte [eax]
push eax
call fcn.004b3140
push esi
lea ecx, [esp + 0xb9]
mov byte [esp + 0x1b], al
call fcn.004b3130
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x4bdd90
call dword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
mov ecx, dword [esp + 0x95c]
pop edi
pop esi
xor ecx, esp
call fcn.004c6ca9
mov esp, ebp
pop ebp
ret