Function at 0x4b1080
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x70]
cmp eax, dword [ecx + 8]
jbe 0x4b2fce
sub esp, 0xf0
mov ecx, dword [esp + 0x108]
test ecx, ecx
jle 0x4b1149
mov edx, dword [esp + 0x100]
test edx, edx
je 0x4b1150
test edx, 0x60
jne 0x4b1150
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004a7180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf4]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b110e
mov dword [edx + 0x10], eax
jmp 0x4b1116
lea edi, [edx + 0x10]
call fcn.0045f450
mov dword [esp], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
call fcn.004b00f0
movzx eax, byte [esp + 8]
test al, al
jne 0x4b1142
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x100]
jmp 0x4b1150
add esp, 0xf0
ret
mov edx, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
mov dword [edi + 0xc], 0
mov ebx, dword [0x67e2d0]
test ebx, ebx
jne 0x4b1171
mov dword [edi + 0x10], 0
jmp 0x4b1181
lea ebx, [edi + 0x10]
xor eax, eax
mov ebp, edi
mov edi, ebx
call fcn.0045f450
mov edi, ebp
mov dword [edi + 0x1c], edx
mov ebx, dword [0x67e2d0]
test ebx, ebx
jne 0x4b11a4
mov ebx, dword [esp + 0xf8]
mov dword [edi + 0x14], ebx
mov ebp, dword [esp + 0xfc]
mov dword [edi + 0x18], ebp
jmp 0x4b11d1
lea ebx, [edi + 0x14]
mov eax, dword [esp + 0xf8]
mov ebp, edi
mov edi, ebx
call fcn.0045f450
lea edi, [ebp + 0x18]
mov ebx, eax
mov eax, dword [esp + 0xfc]
call fcn.0045f450
mov ebp, eax
mov edi, dword [esp + 0xf4]
nop
mov esi, edx
and edx, 0x1f
cmp edx, 0x10
jbe 0x4b1fd5
cmp edx, 0x15
ja 0x4b17c0
cmp edx, 0x13
ja 0x4b11fc
cmp edx, 0x11
je 0x4b17d2
jmp 0x4b1f59
cmp edx, 0x14
je 0x4b1531
movzx edx, byte [edi + 0x2c]
test dl, dl
jne 0x4b12a9
nop
mov edx, dword [edi + 4]
mov eax, ecx
lea ecx, [edx + 4]
mov esi, dword [edi + 8]
mov ebp, dword [edi]
cmp esi, ecx
jae 0x4b127a
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ecx
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.00447650
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0xf8]
mov edi, dword [esp + 0xf4]
mov dword [ebp + edx], 0x5b70616d
mov dword [edi + 4], ecx
mov dword [edi + 8], esi
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b1299
mov dword [edi], ebp
jmp 0x4b1465
mov ecx, eax
mov eax, ebp
call fcn.0045f450
mov eax, ecx
jmp 0x4b1465
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x88], edx
lea ebx, [eax + edx]
mov dword [esp + 0x84], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b133b
mov dword [esp + 0xa0], ebp
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00447650
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x80], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0045fd70
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [edi + 8], ecx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b138c
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4b13a3
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.0045f450
mov eax, edx
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x100]
test ebx, 0x200
je 0x4b13bb
mov ebp, dword [esp + 0xfc]
jmp 0x4b13ee
test ebx, 0x80
je 0x4b13cf
mov ebp, dword [esp + 0xfc]
mov esi, dword [ebp]
jmp 0x4b13d8
mov ebp, dword [esp + 0xfc]
mov esi, ebp
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4b14a9
nop
mov esi, dword [esp + 0x88]
mov ebx, dword [esp + 0x4c]
lea ebx, [ebx + esi + 1]
cmp ecx, ebx
jae 0x4b1454
lea ebp, [0x547680]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b1444
mov dword [edi], eax
jmp 0x4b1449
call fcn.0045f450
mov ebp, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
mov ebx, dword [esp + 0xf8]
mov dword [esp], ebx
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004a9b70
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
je 0x4b2c53
mov dword [esp + 0x88], ecx
mov dword [esp + 0x90], eax
xor ebx, ebx
jmp 0x4b2d49
nop
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x4c]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4b1503
mov dword [esp + 0x88], ebx
lea ebp, [0x547680]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447650
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov ebx, dword [esp + 0x88]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b1523
mov dword [edi], edx
jmp 0x4b152a
mov eax, edx
call fcn.0045f450
add esp, 0xf0
ret
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a6d30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test ecx, ecx
jne 0x4b1789
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
jne 0x4b15f1
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b15c1
mov dword [esp + 0x88], ecx
mov dword [esp + 0x84], edx
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00447650
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xf4]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b15e5
mov dword [edi], ebp
jmp 0x4b2397
mov eax, ebp
call fcn.0045f450
jmp 0x4b2397
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x88], edx
lea ebx, [edx + eax]
mov dword [esp + 0x84], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b1698
mov dword [esp + 0x98], ebp
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00447650
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x80], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0045fd70
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [edi + 8], ecx
mov edx, dword [0x67e2d0]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x44]
lea ebx, [ebp + ebx + 5]
test edx, edx
jne 0x4b16f8
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4b170f
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.0045f450
mov eax, edx
mov edx, dword [esp + 0xb8]
nop
cmp ecx, ebx
jae 0x4b175a
mov dword [esp + 0x88], ebx
lea ebp, [0x547680]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447650
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov ebx, dword [esp + 0x88]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b177d
mov dword [edi], edx
jmp 0x4b2397
mov eax, edx
call fcn.0045f450
jmp 0x4b2397
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x14], eax
call fcn.004b1080
jmp 0x4b2397
cmp edx, 0x17
ja 0x4b1db0
cmp edx, 0x16
je 0x4b1c3c
mov dword [esp + 0x7c], edx
mov eax, dword [esp + 0x104]
cmp eax, 0x71
jg 0x4b17f1
cmp eax, 0x58
je 0x4b17ff
cmp eax, 0x71
je 0x4b17ff
jmp 0x4b1992
cmp eax, 0x73
je 0x4b17ff
cmp eax, 0x78
jne 0x4b1992
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
mov edx, dword [eax + 0x28]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4b1964
mov eax, dword [esp + 0x7c]
cmp eax, 0x17
je 0x4b192e
mov eax, dword [esp + 0x100]
test eax, 0x100
jne 0x4b18ae
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004a7310
mov eax, dword [esp + 0xc]
mov dword [esp + 0x68], eax
lea ecx, [0x547680]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00447590
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb4], eax
xor ecx, ecx
jmp 0x4b2b46
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004a7310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.004a7f20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004a5eb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
jmp 0x4b2ac4
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004a5eb0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
jmp 0x4b2ac4
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
movzx edx, byte [edi + 0x2c]
test dl, dl
jne 0x4b1a11
mov edx, dword [edi + 4]
lea ecx, [edx + 1]
mov eax, dword [edi]
mov esi, dword [edi + 8]
cmp esi, ecx
jae 0x4b1a00
lea ebx, [0x547680]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b19eb
mov dword [edi], eax
jmp 0x4b19f0
call fcn.0045f450
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov edx, ecx
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
mov byte [eax + edx], 0x5b
xor eax, eax
jmp 0x4b29af
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x88], edx
lea ebx, [eax + edx]
mov dword [esp + 0x84], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b1aa3
mov dword [esp + 0x94], ebp
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00447650
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x94]
mov dword [esp + 0xb8], edi
mov dword [esp + 0x80], esi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0045fd70
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [edi + 8], ecx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b1af4
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4b1b0b
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.0045f450
mov eax, edx
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x7c]
cmp ebx, 0x17
jne 0x4b1bbf
mov ebx, dword [esp + 0xfc]
mov ebp, dword [ebx]
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4b1bc6
nop
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x40]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4b1b91
mov dword [esp + 0x88], ebx
lea ebp, [0x547680]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447650
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov ebx, dword [esp + 0x88]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b1bb1
mov dword [edi], edx
jmp 0x4b1bb8
mov eax, edx
call fcn.0045f450
add esp, 0xf0
ret
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x88]
mov esi, dword [esp + 0x40]
lea ebp, [esi + ebp + 1]
cmp ecx, ebp
jae 0x4b1c2b
lea ebx, [0x547680]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b1c1b
mov dword [edi], eax
jmp 0x4b1c20
call fcn.0045f450
mov ebx, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
xor eax, eax
jmp 0x4b27f8
test ecx, ecx
je 0x4b1c44
xor eax, eax
jmp 0x4b1c80
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a79d0
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
test al, al
je 0x4b1f59
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a6d30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x15
ja 0x4b1cbd
cmp edx, 0x11
je 0x4b1ccb
cmp edx, 0x15
je 0x4b1ccb
jmp 0x4b1d8f
cmp edx, 0x17
je 0x4b1ccb
cmp edx, 0x19
jne 0x4b1d8f
mov dword [esp + 0x7c], ebx
nop
mov edx, dword [esp + 0xf4]
mov ebp, dword [edx + 4]
lea esi, [ebp + 1]
mov edi, dword [edx]
mov ebx, dword [edx + 8]
cmp ebx, esi
jae 0x4b1d4f
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb0], eax
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b1d36
mov dword [edi], eax
jmp 0x4b1d3b
call fcn.0045f450
mov edx, edi
mov ebp, ecx
mov edi, eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
lea ebx, [ebp + 1]
mov dword [edx + 4], ebx
mov byte [edi + ebp], 0x26
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x14], eax
call fcn.004b1080
add esp, 0xf0
ret
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
jmp 0x4b1f59
cmp edx, 0x18
je 0x4b1f96
cmp edx, 0x19
jne 0x4b1f54
movzx eax, byte [edi + 0x2c]
test al, al
je 0x4b1ed9
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
lea ebx, [eax + edx]
mov dword [esp + 0x88], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b1e60
mov dword [esp + 0x84], edx
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x48], eax
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00447650
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x9c]
mov dword [esp + 0x84], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0045fd70
mov eax, dword [esp + 0x88]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x84]
mov dword [edi + 8], eax
mov eax, dword [0x67e2d0]
test eax, eax
jne 0x4b1eb1
mov eax, dword [esp + 0xb8]
mov dword [edi], eax
jmp 0x4b1ebd
mov eax, dword [esp + 0xb8]
call fcn.0045f450
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov eax, dword [edi + 4]
lea edx, [eax + 1]
mov ecx, dword [edi]
mov esi, dword [edi + 8]
cmp esi, edx
jae 0x4b1f43
lea ebx, [0x547680]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b1f2a
mov dword [edi], eax
jmp 0x4b1f2f
call fcn.0045f450
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
mov ecx, edx
lea edx, [eax + 1]
mov dword [edi + 4], edx
mov byte [ecx + eax], 0x7b
xor eax, eax
jmp 0x4b241a
cmp edx, 0x1a
jne 0x4b1f7d
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004af820
jmp 0x4b2397
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004ae170
jmp 0x4b2397
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a8160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0xc], eax
call fcn.004aefd0
jmp 0x4b2397
cmp edx, 0xc
ja 0x4b226f
cmp edx, 1
ja 0x4b2192
test edx, edx
jne 0x4b215a
test ecx, ecx
jne 0x4b20b0
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x88], ecx
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp edx, ecx
jae 0x4b2042
mov dword [esp + 0x84], eax
lea ebp, [0x547680]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00447650
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x84], edx
mov dword [esp + 0xb8], ebx
add eax, ebx
mov dword [esp], eax
lea eax, [0x5612d0]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.0045fd70
mov eax, dword [esp + 0x88]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x84]
mov dword [edi + 8], eax
mov eax, dword [0x67e2d0]
test eax, eax
jne 0x4b209f
mov eax, dword [esp + 0xb8]
mov dword [edi], eax
jmp 0x4b2397
mov eax, dword [esp + 0xb8]
call fcn.0045f450
jmp 0x4b2397
mov ecx, dword [esp + 0x104]
cmp ecx, 0x76
jne 0x4b2149
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b2119
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ecx
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00447650
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0xf4]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b213d
mov dword [edi], ebp
jmp 0x4b2397
mov eax, ebp
call fcn.0045f450
jmp 0x4b2397
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.004ae3d0
jmp 0x4b2397
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a5e00
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov byte [esp + 4], al
mov eax, dword [esp + 0x104]
mov dword [esp + 8], eax
call fcn.004ae8a0
jmp 0x4b2397
cmp edx, 6
ja 0x4b2206
cmp edx, 3
ja 0x4b21b6
cmp edx, 2
jne 0x4b21ab
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b21e1
movsx eax, byte [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b21e1
cmp edx, 4
jne 0x4b21c6
movsx eax, word [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b21e1
cmp edx, 5
jne 0x4b21d5
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b21e1
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004ae990
jmp 0x4b2397
cmp edx, 9
ja 0x4b222c
cmp edx, 7
jne 0x4b2217
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4b224a
cmp edx, 8
jne 0x4b2224
movzx eax, byte [ebp]
xor ecx, ecx
jmp 0x4b224a
movzx eax, word [ebp]
xor ecx, ecx
jmp 0x4b224a
cmp edx, 0xa
jne 0x4b2238
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4b224a
cmp edx, 0xb
jne 0x4b2245
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
jmp 0x4b224a
mov eax, dword [ebp]
xor ecx, ecx
mov dword [esp], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004ae990
jmp 0x4b2397
cmp edx, 0xe
ja 0x4b22e9
cmp edx, 0xd
jne 0x4b22bb
mov eax, dword [ebp]
mov dword [esp], eax
call fcn.00448ff0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004aeca0
jmp 0x4b2397
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004aeca0
jmp 0x4b2397
cmp edx, 0xf
jne 0x4b2360
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp + 0x78], ecx
mov dword [esp], eax
call fcn.00448ff0
mov eax, dword [esp + 4]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.00448ff0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0x74]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0x104]
mov dword [esp + 0x18], eax
call fcn.004aee10
jmp 0x4b2397
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0x104]
mov dword [esp + 0x18], eax
call fcn.004aee10
add esp, 0xf0
ret
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004ae0d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b1080
mov eax, dword [esp + 0x60]
inc eax
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov dword [esp + 0x60], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
call fcn.004a7920
mov eax, dword [esp + 0x60]
cmp dword [esp + 0xc], eax
jle 0x4b2713
test eax, eax
jle 0x4b254b
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b24e3
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b24bb
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ecx
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00447650
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0xf4]
mov word [ebp + ecx], 0x202c
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b24d6
mov dword [edi], ebp
jmp 0x4b2552
mov ecx, eax
mov eax, ebp
call fcn.0045f450
mov eax, ecx
jmp 0x4b2552
mov ecx, dword [edi + 4]
lea edx, [ecx + 1]
mov ebx, dword [edi]
mov ebp, dword [edi + 8]
cmp ebp, edx
jae 0x4b253f
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b2534
mov dword [edi], eax
jmp 0x4b2539
call fcn.0045f450
mov ebx, eax
mov eax, dword [esp + 0x60]
lea edx, [ecx + 1]
mov dword [edi + 4], edx
mov byte [ebx + ecx], 0x20
jmp 0x4b2552
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2b]
test cl, cl
jne 0x4b2566
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b239e
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x100]
mov dword [esp + 8], edx
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x2c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
call eax
lea edi, [esp + 0xbc]
lea esi, [esp + 8]
call fcn.0045fb0e
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
test eax, eax
je 0x4b2703
mov dword [esp + 0x50], eax
nop
mov edx, dword [esp + 0xf4]
mov ebx, dword [edx + 4]
mov dword [esp + 0x88], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp esi, ebp
jae 0x4b2631
mov dword [esp + 0xa4], ecx
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00447650
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x88]
mov dword [esp + 0xb8], edi
mov dword [esp + 0x80], esi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0045fd70
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [edi + 8], ecx
mov edx, dword [0x67e2d0]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x50]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4b2691
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4b26a8
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.0045f450
mov eax, edx
mov edx, dword [esp + 0xb8]
cmp ecx, ebx
jae 0x4b26f7
lea ebp, [0x547680]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b26ee
mov dword [edi], eax
jmp 0x4b26f3
call fcn.0045f450
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
jmp 0x4b270a
mov edi, dword [esp + 0xf4]
mov eax, dword [esp + 0x60]
jmp 0x4b239e
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b2774
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b276b
mov dword [edi], eax
jmp 0x4b2770
call fcn.0045f450
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b2397
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a6fd0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b1080
mov eax, dword [esp + 0x58]
inc eax
mov ebx, dword [esp + 0xfc]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov edx, dword [esp + 0x100]
mov dword [esp + 8], edx
call fcn.004a7310
mov eax, dword [esp + 0x58]
cmp dword [esp + 0xc], eax
jle 0x4b28c2
test eax, eax
jle 0x4b2783
nop
mov edi, dword [esp + 0xf4]
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b2894
mov dword [esp + 0x88], ecx
mov dword [esp + 0x84], edx
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00447650
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xf4]
mov word [ebp + ecx], 0x202c
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x67e2d0]
test ecx, ecx
jne 0x4b28b2
mov dword [edi], ebp
jmp 0x4b2783
mov ecx, eax
mov eax, ebp
call fcn.0045f450
mov eax, ecx
jmp 0x4b2783
nop
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b2924
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b291b
mov dword [edi], eax
jmp 0x4b2920
call fcn.0045f450
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b2397
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a6fd0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b1080
mov eax, dword [esp + 0x54]
inc eax
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov dword [esp + 0x54], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
call fcn.004a7310
mov eax, dword [esp + 0x54]
cmp dword [esp + 0xc], eax
jle 0x4b2a53
test eax, eax
jle 0x4b2933
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
lea ebx, [edx + 1]
mov ebp, dword [ecx]
mov esi, dword [ecx + 8]
cmp esi, ebx
jae 0x4b2a43
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b2a34
mov dword [edi], eax
jmp 0x4b2a39
call fcn.0045f450
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x54]
mov ecx, edi
lea ebx, [edx + 1]
mov dword [ecx + 4], ebx
mov byte [ebp + edx], 0x20
jmp 0x4b2933
nop
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b2ab5
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b2aac
mov dword [edi], eax
jmp 0x4b2ab1
call fcn.0045f450
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
jmp 0x4b2397
mov dword [esp + 0x6c], edx
mov dword [esp + 0x68], ecx
mov dword [esp + 0xa8], eax
mov ebx, dword [esp + 0x3c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x8c]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x104]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.004af170
add esp, 0xf0
ret
mov ebx, dword [esp + 0xb4]
mov byte [ebx + eax], dl
lea edx, [eax + 1]
mov eax, ebx
mov ecx, edx
mov edx, dword [esp + 0x68]
cmp ecx, edx
jge 0x4b2c0d
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a6fd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
and eax, 0x1f
mov dword [esp + 0x7c], eax
cmp eax, 9
ja 0x4b2bce
cmp eax, 7
jne 0x4b2ba6
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4b2c05
cmp eax, 8
jne 0x4b2bba
movzx edx, byte [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4b2c05
cmp eax, 9
jne 0x4b2c19
movzx edx, word [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4b2c05
cmp eax, 0xa
jne 0x4b2be1
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4b2c05
cmp eax, 0xb
jne 0x4b2bf4
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jmp 0x4b2c05
cmp eax, 0xc
jne 0x4b2c19
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
jb 0x4b2b35
jmp 0x4b2c14
mov ecx, edx
jmp 0x4b2ac4
call fcn.0045f4d0
lea eax, [0x54c480]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x55fa13]
mov dword [eax], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 8], ecx
lea ecx, [0x548f60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433350
mov eax, dword [esp + 0xf4]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4b2ccc
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b2cbd
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b2cb4
mov dword [edi], eax
jmp 0x4b2cb9
call fcn.0045f450
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b2397
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b2d27
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b2d1e
mov dword [edi], eax
jmp 0x4b2d23
call fcn.0045f450
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
jmp 0x4b2397
mov ebp, dword [esp + 0xac]
lea edx, [ebp + 0xc]
mov ebx, eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xac], edx
mov dword [esp + 0x64], ebx
mov ebp, dword [edx + 4]
mov esi, dword [edx + 8]
mov edi, edx
mov edx, dword [edx]
test ebx, ebx
jle 0x4b2eb8
mov dword [esp + 0x7c], esi
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb0], edx
mov ecx, dword [esp + 0xf4]
movzx ebx, byte [ecx + 0x2c]
test bl, bl
je 0x4b2e25
nop
mov ebx, dword [ecx + 4]
lea esi, [ebx + 2]
mov ebp, dword [ecx + 8]
mov edx, dword [ecx]
cmp ebp, esi
jae 0x4b2df2
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00447650
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0xac]
mov word [edx + ebx], 0x202c
mov dword [ecx + 4], esi
mov dword [ecx + 8], ebp
mov ebx, dword [0x67e2d0]
test ebx, ebx
jne 0x4b2e0f
mov dword [ecx], edx
jmp 0x4b2ea6
mov ebx, edi
mov edi, ecx
mov ebp, eax
mov eax, edx
call fcn.0045f450
mov eax, ebp
mov edi, ebx
jmp 0x4b2ea6
nop
mov ebx, dword [ecx + 4]
lea edi, [ebx + 1]
mov eax, dword [ecx]
mov esi, dword [ecx + 8]
cmp esi, edi
jae 0x4b2e8e
lea ecx, [0x547680]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b2e77
mov dword [edi], eax
jmp 0x4b2e7c
call fcn.0045f450
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov ebx, ecx
mov ecx, edi
lea esi, [ebx + 1]
mov dword [ecx + 4], esi
mov byte [eax + ebx], 0x20
mov eax, dword [esp + 0x90]
mov edi, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov esi, dword [esp + 0x7c]
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x108]
lea ebx, [edx + 1]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x14], ebx
call fcn.004b1080
nop
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b2f55
lea eax, [0x547680]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00447650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4b2f4c
mov dword [edi], eax
jmp 0x4b2f51
call fcn.0045f450
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x3a
mov edx, dword [esp + 0x90]
mov ebx, dword [edx + 0xc]
mov ecx, dword [edx + 0x10]
mov ebp, dword [esp + 0x64]
cmp ebp, ecx
jae 0x4b2fc6
lea ecx, [ebp + ebp*2]
mov edx, dword [ebx + ecx*4]
mov esi, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4 + 8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x14], edx
call fcn.004b1080
mov eax, dword [esp + 0x64]
inc eax
mov ecx, dword [esp + 0x88]
cmp ecx, eax
jg 0x4b2d36
jmp 0x4b2c53
mov eax, ebp
call fcn.0045f4d0
nop
call fcn.0045e080
jmp fcn.004b1080