Function at 0x4a3150
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x3b8
mov eax, 0x8c28fd
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x3cc]
mov ebp, edx
lea edi, [edx + 0x1f4]
movzx ebx, byte [edx + 0x24e]
mov bh, byte [edx + 0x24f]
mov dword [esp + 0x118], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x140], 0
shr eax, 0x10
mov dword [esp + 4], ebp
mov dword [esp + 0x174], edi
mov dword [esp + 0x270], eax
mov eax, 0x8c4513
shr eax, 0x10
mov dword [esp + 0x264], eax
mov eax, 0x8c28ee
shr eax, 0x10
mov dword [esp + 0x26c], eax
mov eax, 0x8c28dd
shr eax, 0x10
mov dword [esp + 0x274], eax
mov eax, 0x8c28cf
shr eax, 0x10
mov dword [esp + 0x268], eax
mov eax, 0x8c2813
shr eax, 0x10
mov dword [esp + 0x278], eax
mov eax, str.HandshakeTypeHelloVerifyRequestCertificateURLHandshakeType_0x
shr eax, 0x10
mov dword [esp + 0x27c], eax
call 0x4a3214
pop eax
mov dword [esp + 0x170], eax
lea eax, [edx + 0x2b4]
mov dword [esp + 0x150], eax
lea eax, [edx + 0x298]
mov dword [esp + 0x284], eax
lea eax, [edx + 0x270]
mov dword [esp + 0x7c], eax
lea eax, [edx + 0x271]
mov dword [esp + 0x288], eax
lea eax, [edx + 0x260]
mov dword [esp + 0x11c], eax
lea eax, [edx + 0x280]
mov dword [esp + 0x280], eax
mov eax, dword [edx + 0x208]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x154], ecx
lea ecx, [esp + 0x94]
mov dword [esp + 0x158], edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x34], edx
mov dword [esp + 0x14], edx
mov dword [esp + 0x14c], edx
test eax, eax
je 0x4a3300
mov esi, dword [esp + 0x88]
nop word cs:[eax + eax]
nop
mov edx, edi
push dword [esp + 0x154]
push dword [esp + 0x15c]
call fcn.0045af30
add esp, 8
movzx eax, byte [esp + 0x94]
cmp al, 4
jne 0x4a698f
mov eax, dword [esp + 0x98]
test eax, eax
je 0x4a69c3
add eax, esi
cmp dword [ebp + 0x208], 0
lea ecx, [esp + 0x94]
mov esi, eax
jne 0x4a32b0
jmp 0x4a3321
cmp dword [ebp + 0x1ec], 0
mov eax, dword [esp + 0x88]
jne 0x4a6b55
test byte [ebp + 0x252], 1
jne 0x4a6b55
mov dword [esp + 0x88], eax
push dword [esp + 0x158]
push ecx
mov eax, dword [esp + 0x15c]
call dword [eax + 0x38]
add esp, 8
cmp byte [esp + 0x94], 4
jne 0x4a6a46
and bl, bh
cmp dword [esp + 0x88], 0
mov byte [esp + 0x91], bl
setne al
test bl, al
jne 0x4a6a2f
test byte [esp + 0x140], 1
jne 0x4a36b0
nop word cs:[eax + eax]
nop
cmp dword [ebp + 0x1ec], 0
jne 0x4a36b0
cmp byte [ebp + 0x252], 0
jne 0x4a36b0
cmp byte [ebp + 0x24e], 0
jne 0x4a33b0
cmp dword [ebp + 0x208], 0
jne 0x4a36b0
cmp dword [ebp + 0x1d8], 1
jne 0x4a3400
xor eax, eax
sub eax, dword [ebp + 0x1f0]
cmp dword [ebp + 0x1dc], eax
jae 0x4a3400
lea ecx, [esp + 0x318]
mov edx, 0x27
push 0x1e
push str.received_plaintext_buffer_full
call fcn.004ab540
add esp, 8
movzx ebx, byte [esp + 0x318]
cmp bl, 4
jne 0x4a35ec
jmp 0x4a3678
cmp dword [ebp + 0x268], 0
mov edi, dword [ebp + 0x2c0]
mov eax, 0xffff
mov ecx, 0x4805
cmove eax, ecx
cmp edi, eax
jae 0x4a34a0
lea ebx, [edi + 0x1000]
mov esi, dword [ebp + 0x2bc]
cmp eax, ebx
cmovb ebx, eax
mov ebp, ebx
sub ebp, esi
jbe 0x4a34d8
mov eax, dword [esp + 0x150]
mov eax, dword [eax]
sub eax, esi
cmp eax, ebp
jb 0x4a3653
mov eax, dword [esp + 4]
cmp ebp, 2
mov edi, dword [eax + 0x2b8]
lea eax, [edi + esi]
jb 0x4a3479
lea ecx, [ebp - 1]
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [esi + ebp - 1]
add edi, esi
mov eax, edi
mov ebp, dword [esp + 4]
inc esi
mov byte [eax], 0
lea ecx, [esp + 0x94]
mov ebx, esi
mov dword [ebp + 0x2bc], esi
mov edi, dword [ebp + 0x2c0]
jmp 0x4a3530
lea ecx, [esp + 0x188]
mov edx, 0x15
push 0x13
push 0x8c2819
call fcn.004476a0
add esp, 8
movzx ecx, byte [esp + 0x188]
mov eax, dword [esp + 0x18c]
cmp cl, 4
je 0x4a3588
jmp 0x4a35c7
test edi, edi
sete cl
cmp esi, eax
seta al
or al, cl
je 0x4a3523
mov ebp, dword [esp + 4]
mov dword [ebp + 0x2bc], ebx
cmp dword [ebp + 0x2b4], ebx
jbe 0x4a3529
push ebx
push dword [ebp + 0x2b8]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapReAlloc]
test eax, eax
je 0x4a6b8b
mov dword [ebp + 0x2b8], eax
mov dword [ebp + 0x2b4], ebx
jmp 0x4a3529
mov ebp, dword [esp + 4]
mov ebx, esi
lea ecx, [esp + 0x94]
sub ebx, edi
jb 0x4a6b8b
mov eax, dword [ebp + 0x2b8]
add eax, edi
push ebx
push eax
push dword [esp + 0x160]
push ecx
mov eax, dword [esp + 0x164]
call dword [eax + 0xc]
add esp, 0x10
movzx eax, byte [esp + 0x94]
cmp al, 4
jne 0x4a3595
mov eax, dword [esp + 0x98]
mov cl, 4
add edi, eax
mov dword [esp + 0x18c], eax
mov byte [esp + 0x188], 4
mov dword [ebp + 0x2c0], edi
cmp cl, 4
jne 0x4a35c7
test eax, eax
jne 0x4a35c7
mov byte [ebp + 0x253], 1
jmp 0x4a35c7
lea edx, [esp + 0x9a]
lea esi, [esp + 0x18c]
movzx ecx, byte [edx - 3]
movzx edi, word [edx - 5]
mov edx, dword [esp + 0x98]
mov byte [esi - 1], cl
mov word [esi - 3], di
mov byte [esp + 0x188], al
mov dword [esp + 0x18c], edx
mov ebx, dword [esp + 0x188]
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x31c], eax
mov dword [esp + 0x318], ebx
cmp bl, 4
je 0x4a3678
lea ecx, [esp + 0x318]
call fcn.004a9480
cmp al, 0x23
jne 0x4a6a1f
cmp bl, 3
jne 0x4a3380
mov esi, dword [esp + 0x31c]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x4a3621
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x4a363f
cmp dword [ebx + 8], 9
jb 0x4a3630
mov edi, dword [edi - 4]
push edi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4a3380
mov ecx, dword [esp + 0x150]
mov edx, esi
push 1
push 1
push ebp
call fcn.004f0af0
add esp, 0xc
mov eax, dword [esp + 4]
mov esi, dword [eax + 0x2bc]
jmp 0x4a3450
mov eax, dword [esp + 0x31c]
mov ecx, dword [esp + 0x140]
add dword [esp + 0x118], eax
test eax, eax
movzx ecx, cl
mov eax, 1
cmove ecx, eax
mov dword [esp + 0x140], ecx
nop word cs:[eax + eax]
nop dword [eax + eax]
movzx ecx, byte [ebp + 0x270]
mov edi, dword [ebp + 0x274]
mov ebx, dword [ebp + 0x278]
mov eax, dword [ebp + 0x27c]
mov byte [ebp + 0x270], 0x10
cmp cl, 0x16
jne 0x4a5b40
mov eax, dword [ebp + 0x2c4]
mov esi, dword [ebp + 0x2c0]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x40], ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0x20], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x68], eax
cmp esi, dword [ebp + 0x2bc]
ja 0x4a6b8b
mov edi, dword [ebp + 0x268]
mov eax, dword [ebp + 0x2b8]
mov dword [esp + 0x18], esi
test edi, edi
mov dword [esp + 0x10], eax
je 0x4a38a0
mov eax, dword [ebp + 0x264]
cmp dword [eax], 1
jne 0x4a38a0
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 4]
mov esi, dword [eax + 0xc]
mov ebx, ecx
add edx, 4
mov dword [esp + 8], esi
sub ebx, esi
mov esi, 0
cmovb ebx, esi
mov esi, dword [esp + 0x18]
cmp edx, ebx
jne 0x4a38a0
xor edx, edx
cmp edi, 1
jne 0x4a3781
mov edx, dword [ebp + 0x26c]
mov dword [ebp + 0x26c], 0
mov ecx, dword [eax + 0xc]
mov dword [esp + 8], ecx
mov ecx, dword [eax + 0x10]
mov ebx, ecx
sub ebx, dword [esp + 8]
jb 0x4a6b8b
cmp ecx, esi
ja 0x4a6b8b
movd xmm0, dword [eax + 8]
cmp edi, 1
mov dword [esp + 0x4c], edx
mov dword [ebp + 0x268], 0
je 0x4a37d8
lea edx, [edi*4 - 4]
lea ecx, [eax + 0x14]
dec edi
lea edx, [edx + edx*4]
push edx
push ecx
push eax
movdqu xmmword [esp + 0x5c], xmm0
call sub.VCRUNTIME140.dll_memmove
movdqu xmm0, xmmword [esp + 0x5c]
add esp, 0xc
mov dword [ebp + 0x268], edi
mov ecx, dword [esp + 0x10]
movd eax, xmm0
movd dword [esp + 0x124], xmm0
add ecx, dword [esp + 8]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], ebx
mov byte [esp + 0x130], 2
mov dword [esp + 0x120], 0
mov edi, dword [esp + 0x138]
lea ebx, [esp + 0x94]
cmp ax, 0xa
mov dword [esp + 0x24], eax
je 0x4a5eb0
movzx eax, byte [esp + 0x130]
movzx esi, word [esp + 0x126]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x12c]
test eax, eax
je 0x4a45f6
cmp eax, 1
mov word [esp + 8], si
je 0x4a469d
movzx ebx, byte [esp + 0x47]
mov bh, byte [esp + 0x1f]
cmp eax, 2
je 0x4a463f
cmp eax, 3
jne 0x4a658c
mov ebp, 0x80000005
mov eax, 0x80000000
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x84], edx
jmp 0x4a4757
cmp dword [esp + 0x20], esi
ja 0x4a6b8b
movzx ebx, word [ebp + 0x240]
mov word [esp + 0x13c], bx
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
mov eax, esi
mov esi, dword [ebp + 0x2c]
sub eax, ecx
add ecx, edx
cmp bx, 5
movzx ebx, byte [ebp + 0x32]
mov edx, dword [ebp + 0x14]
mov dword [esp + 0x228], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x22c], eax
mov dword [esp + 0x230], 0
mov byte [esp + 8], bl
mov dword [esp + 0x2c], edx
mov dword [esp], ecx
mov ecx, dword [ebp + 0x28]
mov dword [esp + 0x50], ecx
jne 0x4a3bd0
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x94]
lea edx, [esp + 0x228]
call fcn.004477c0
mov eax, dword [esp + 0x94]
test eax, eax
jne 0x4a5e22
lea eax, [esp + 0x9a]
movzx ebp, word [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 6]
cmp bp, 0xa
movq qword [esp + 0x188], xmm0
movq qword [esp + 0x18e], xmm1
je 0x4a5ea4
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
lea eax, [esp + 0x29e]
mov word [esp + 0x29c], bp
lea ecx, [esp + 0x94]
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
movzx edx, byte [esp + 0x2a8]
test edx, edx
je 0x4a39c3
cmp edx, 1
jne 0x4a39cb
mov eax, dword [esp + 4]
cmp byte [eax + 0x30], 0
jne 0x4a39cb
cmp dword [esp + 0x2a4], 2
ja 0x4a39cb
test edi, edi
je 0x4a3f4d
cmp byte [esp + 8], 2
jne 0x4a3a73
mov edi, dword [esp + 0x2a4]
push esi
mov ebx, dword [esp + 0x54]
push ebx
lea eax, [esp + 0x2a4]
push eax
push dword [esp + 0xc]
push ecx
mov eax, dword [esp + 0x40]
call dword [eax + 0xc]
add esp, 0x14
test byte [esp + 0x94], 1
je 0x4a3ad6
cmp byte [esp + 0x98], 6
jne 0x4a3afa
test byte [esp + 0xc], 1
je 0x4a3afa
mov ebx, dword [esp + 0x24]
sub ebx, edi
jb 0x4a3afa
mov eax, dword [esp + 4]
lea ecx, [esp + 0x98]
mov word [esp + 0x188], 0xa
mov dword [eax], 1
mov dword [eax + 4], ebx
call fcn.00447990
movzx ebp, word [esp + 0x188]
mov dword [esp + 0xc], 1
mov dword [esp + 0x24], ebx
cmp bp, 0xa
je 0x4a3b74
jmp 0x4a3e94
mov ebx, edx
movzx eax, byte [esp + 0x2a9]
movzx ecx, word [esp + 0x29e]
mov edx, dword [esp + 0x2a0]
mov edi, dword [esp + 0x2a4]
mov word [esp + 0x188], bp
mov word [esp + 0x18a], cx
mov dword [esp + 0x18c], edx
mov dword [esp + 0x190], edi
mov byte [esp + 0x194], bl
mov byte [esp + 0x195], al
mov byte [esp + 0x198], 0
cmp bp, 0xa
je 0x4a3b74
jmp 0x4a3e94
mov edx, dword [esp + 4]
mov eax, ebx
mov ecx, esi
not esi
add eax, 1
adc ecx, 0
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], ecx
cmp byte [edx + 0x30], 0
je 0x4a3b26
xor ebx, 0xffff0000
jmp 0x4a3b30
lea eax, [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 8]
lea eax, [esp + 0x18c]
movq qword [eax + 8], xmm1
movq qword [eax], xmm0
mov word [esp + 0x188], 0xb
jmp 0x4a3b62
xor ebx, 0xffff0000
mov byte [edx + 0x30], 1
or ebx, esi
lea edx, [esp + 0x98]
mov dword [esp + 0x50], eax
mov esi, ecx
movq xmm0, qword [edx]
movq xmm1, qword [edx + 8]
movq qword [esp + 0x190], xmm1
movq qword [esp + 0x188], xmm0
sete byte [esp + 0x198]
movzx ebp, word [esp + 0x188]
cmp bp, 0xa
jne 0x4a3e94
mov eax, dword [esp + 4]
mov edi, dword [eax + 0x268]
mov ecx, dword [eax + 0x264]
lea eax, [edi*4]
lea eax, [eax + eax*4]
nop
test eax, eax
je 0x4a3917
cmp dword [ecx], 1
jne 0x4a5bd6
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 0x10]
mov ebp, 0
add edx, 4
sub ebx, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb ebx, ebp
add eax, 0xffffffec
cmp edx, ebx
je 0x4a3b90
jmp 0x4a5bd6
movzx eax, byte [ebp + 0x30]
mov edx, dword [ebp]
mov ecx, dword [ebp + 4]
mov byte [esp + 0xc], al
mov dword [esp + 0x24], edx
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x94]
lea edx, [esp + 0x228]
call fcn.004477c0
mov eax, dword [esp + 0x94]
test eax, eax
jne 0x4a5e22
lea eax, [esp + 0x9a]
movzx ebp, word [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 6]
cmp bp, 0xa
movq qword [esp + 0x188], xmm0
movq qword [esp + 0x18e], xmm1
je 0x4a5ea4
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
lea eax, [esp + 0x29e]
mov word [esp + 0x29c], bp
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
movzx eax, byte [esp + 0x2a8]
test al, al
setne cl
test edi, edi
setne dl
or dl, cl
je 0x4a3f44
cmp byte [esp + 8], 2
jne 0x4a3d25
mov edi, dword [esp + 0x2a4]
push esi
mov ebx, dword [esp + 0x54]
push ebx
lea eax, [esp + 0x2a4]
push eax
push dword [esp + 0xc]
lea eax, [esp + 0xa4]
push eax
mov eax, dword [esp + 0x40]
call dword [eax + 0xc]
add esp, 0x14
test byte [esp + 0x94], 1
je 0x4a3d7c
cmp byte [esp + 0x98], 6
jne 0x4a3db3
test byte [esp + 0x24], 1
je 0x4a3db3
mov ebx, dword [esp + 0x30]
sub ebx, edi
jb 0x4a3db3
mov eax, dword [esp + 4]
lea ecx, [esp + 0x98]
mov word [esp + 0x188], 0xa
mov dword [eax], 1
mov dword [eax + 4], ebx
call fcn.00447990
movzx ebp, word [esp + 0x188]
mov dword [esp + 0x24], 1
mov dword [esp + 0x30], ebx
jmp 0x4a3e32
movzx ecx, byte [esp + 0x2a9]
movzx edx, word [esp + 0x29e]
mov edi, dword [esp + 0x2a0]
mov ebx, dword [esp + 0x2a4]
mov word [esp + 0x188], bp
mov word [esp + 0x18a], dx
mov dword [esp + 0x18c], edi
mov dword [esp + 0x190], ebx
mov byte [esp + 0x194], al
mov byte [esp + 0x195], cl
mov byte [esp + 0x198], 0
jmp 0x4a3e32
mov eax, ebx
mov ecx, esi
mov edx, dword [esp + 4]
add eax, 1
adc ecx, 0
test byte [esp + 0xc], 1
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], ecx
je 0x4a3de7
lea edx, [esp + 0x98]
xor ebx, 0xffff0000
not esi
movq xmm0, qword [edx]
movq xmm1, qword [edx + 8]
or esi, ebx
jmp 0x4a3e0a
lea eax, [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 8]
lea eax, [esp + 0x18c]
movq qword [eax + 8], xmm1
movq qword [eax], xmm0
mov word [esp + 0x188], 0xb
movzx ebp, word [esp + 0x188]
jmp 0x4a3e32
xor ebx, 0xffff0000
not esi
mov byte [edx + 0x30], 1
mov byte [esp + 0xc], 1
or esi, ebx
lea esi, [esp + 0x98]
movq xmm0, qword [esi]
movq xmm1, qword [esi + 8]
movq qword [esp + 0x190], xmm1
movq qword [esp + 0x188], xmm0
sete byte [esp + 0x198]
movzx ebp, word [esp + 0x188]
mov dword [esp + 0x50], eax
mov esi, ecx
cmp bp, 0xa
jne 0x4a3e94
mov eax, dword [esp + 4]
mov edi, dword [eax + 0x268]
mov ecx, dword [eax + 0x264]
lea eax, [edi*4]
lea eax, [eax + eax*4]
nop word cs:[eax + eax]
nop dword [eax]
test eax, eax
je 0x4a3be6
cmp dword [ecx], 1
jne 0x4a5bd6
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 0x10]
mov ebp, 0
add edx, 4
sub ebx, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb ebx, ebp
add eax, 0xffffffec
cmp edx, ebx
je 0x4a3e60
jmp 0x4a5bd6
movzx eax, bp
cmp eax, 0xb
je 0x4a6318
movzx eax, byte [esp + 0x195]
movzx ecx, byte [esp + 0x194]
cmp byte [esp + 0x198], 0
mov esi, dword [esp + 4]
mov dword [esp + 0x24], ebp
mov byte [esp + 0x160], al
movzx eax, word [esp + 0x18a]
mov dword [esp], ecx
mov word [esp + 0x30], ax
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x190]
je 0x4a3f86
cmp byte [esi + 0x251], 0
jne 0x4a3f86
mov byte [esi + 0x251], 1
mov edi, eax
xor eax, eax
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0
mov ecx, esi
lea edx, [esp + 0x94]
cmp byte [esi + 0x31], 2
sete al
push eax
call fcn.00459840
mov eax, edi
add esp, 4
jmp 0x4a3f86
mov dword [esp], 0
jmp 0x4a3f50
mov dword [esp], edx
movzx eax, byte [esp + 0x2a9]
mov esi, dword [esp + 4]
mov dword [esp + 0x24], ebp
mov byte [esp + 0x160], al
movzx eax, word [esp + 0x29e]
mov word [esp + 0x30], ax
mov eax, dword [esp + 0x2a0]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x2a4]
mov ecx, dword [esp + 0x230]
mov edi, dword [esi + 0x264]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esi + 0x268]
mov esi, edi
mov dword [esp + 0xc], edi
lea edx, [ecx*4]
mov dword [esp + 8], ecx
lea ebp, [edx + edx*4]
mov edx, ebp
nop word cs:[eax + eax]
nop dword [eax]
test edx, edx
je 0x4a3ff4
cmp dword [esi], 1
jne 0x4a3fe7
mov edi, dword [esi + 4]
mov ebx, dword [esi + 0x10]
mov ecx, 0
add edi, 4
sub ebx, dword [esi + 0xc]
lea esi, [esi + 0x14]
cmovb ebx, ecx
add edx, 0xffffffec
cmp edi, ebx
je 0x4a3fc0
cmp byte [esp], 2
mov dl, 1
je 0x4a3ffb
jmp 0x4a6579
cmp byte [esp], 2
sete dl
test eax, eax
je 0x4a4003
xor ebx, ebx
jmp 0x4a4019
mov esi, dword [esp + 4]
movzx ebx, byte [esi + 0x294]
cmp bl, 0x20
je 0x4a697c
inc bl
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 4]
add dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x50]
mov byte [esi + 0x294], bl
sub ecx, dword [esp + 0x10]
test dl, dl
lea edi, [ecx + eax]
je 0x4a4846
mov dword [esp + 0x50], ecx
cmp edi, ecx
mov ecx, dword [esp + 0x18]
jb 0x4a6b8b
cmp edi, ecx
ja 0x4a6b8b
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x20]
mov dword [ecx + 0x26c], edx
mov ecx, dword [esp + 8]
sub ecx, 1
jae 0x4a4182
test eax, eax
je 0x4a4213
mov ecx, eax
mov eax, dword [esp + 0x50]
add ebp, 0x10
add eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov eax, ecx
jmp 0x4a40d8
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x2c]
mov dword [edx + ebp - 0x10], ecx
mov ecx, dword [esp + 0x24]
mov dword [edx + ebp - 0xc], edi
mov word [edx + ebp - 8], cx
movzx ecx, word [esp + 0x30]
mov word [edx + ebp - 6], cx
mov dword [edx + ebp - 4], esi
mov esi, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [edx + ebp], ebx
add ebp, 0x14
inc esi
test eax, eax
mov dword [esp + 8], esi
mov dword [ecx + 0x268], esi
je 0x4a4213
cmp eax, 3
ja 0x4a40fb
mov esi, dword [esp + 0x50]
mov ebx, eax
mov dword [esp + 0x50], 1
mov dword [esp + 0x2c], 0
xor eax, eax
sub esi, dword [esp + 0x10]
jmp 0x4a4148
lea ecx, [eax - 4]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x2c], 1
movzx edi, byte [eax + 1]
movzx edx, word [eax + 2]
mov esi, eax
shl edx, 0x10
shl edi, 8
or edi, edx
mov edx, 0
bswap edi
sub ecx, edi
lea ebx, [edi + 4]
cmovb ecx, edx
lea edx, [edi + eax + 4]
mov eax, 1
cmovbe ebx, dword [esp]
cmovbe edx, eax
sub esi, dword [esp + 0x10]
mov eax, ecx
mov dword [esp + 0x50], edx
add ebx, esi
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 8]
cmp edx, dword [ecx]
jne 0x4a4090
mov ecx, dword [esp + 0x11c]
mov dword [esp], eax
call fcn.00447730
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x264]
mov dword [esp + 0xc], eax
mov eax, dword [esp]
jmp 0x4a4090
mov edx, dword [esp + 0xc]
lea ecx, [ecx + ecx*4]
lea ecx, [edx + ecx*4]
cmp dword [ecx], 1
jne 0x4a41ad
mov edx, dword [ecx + 4]
mov esi, dword [ecx + 0x10]
add edx, 4
sub esi, dword [ecx + 0xc]
mov ecx, 0
cmovb esi, ecx
cmp edx, esi
je 0x4a4071
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 8]
mov esi, dword [esp + 4]
cmp edx, dword [ecx]
jne 0x4a41d6
mov ecx, dword [esp + 0x11c]
call fcn.00447730
mov eax, dword [esi + 0x264]
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
movzx eax, word [esp + 0x30]
lea ecx, [ebx + ebx*4]
inc ebx
mov dword [ebp + ecx*4], 0
mov word [ebp + ecx*4 + 8], dx
mov word [ebp + ecx*4 + 0xa], ax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], ebx
mov dword [ebp + ecx*4 + 0xc], eax
mov dword [ebp + ecx*4 + 0x10], edi
mov dword [esi + 0x268], ebx
mov ebp, dword [esp + 4]
mov eax, dword [esp + 8]
xor ebx, ebx
mov edx, dword [ebp + 0x264]
test eax, eax
jne 0x4a4240
jmp 0x4a4529
mov ebp, dword [esp + 4]
mov edx, dword [ebp + 0x264]
test ecx, ecx
mov eax, ecx
je 0x4a451d
lea ecx, [eax - 2]
lea ebx, [eax - 1]
mov dword [esp + 8], eax
lea eax, [eax + eax*4]
mov ebp, 0xffffffff
mov dword [esp + 0x50], edx
mov dword [esp], ecx
lea eax, [eax*4 - 0x14]
mov ecx, edx
nop word cs:[eax + eax]
nop dword [eax]
test eax, eax
je 0x4a4521
test byte [ecx], 1
je 0x4a42a3
mov edx, dword [ecx + 4]
mov esi, dword [ecx + 0x10]
mov edi, 0
add edx, 4
sub esi, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb esi, edi
dec ebx
inc ebp
add eax, 0xffffffec
cmp edx, esi
mov edx, dword [esp + 0x50]
je 0x4a4270
jmp 0x4a42a5
dec ebx
inc ebp
mov dword [esp + 0x24], ebx
mov ebx, dword [esp + 8]
lea eax, [ebp + 1]
cmp ebx, eax
jbe 0x4a6b8b
lea eax, [eax + eax*4]
mov edi, dword [edx + eax*4 + 0x10]
lea ecx, [edx + eax*4]
mov esi, dword [edx + eax*4 + 0xc]
lea eax, [edx + eax*4 + 0x14]
mov dword [esp + 0xc], edi
mov edi, edx
mov edx, ebx
sub edx, ebp
lea edx, [edx + edx*4]
lea edx, [edx*4 - 0x28]
push edx
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, ebp
lea ecx, [ebp + ebp*4]
mov dword [esp + 0x30], ebp
not eax
movd xmm0, dword [edi + ecx*4 + 8]
lea edx, [edi + ecx*4]
add eax, ebx
mov ebx, dword [edi + ecx*4 + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 - 0x14]
movdqu xmmword [esp + 0x160], xmm0
mov dword [esp + 0x2c], ebx
mov ebx, dword [edi + ecx*4 + 0x10]
lea ecx, [edi + ecx*4 + 0x14]
mov edi, dword [esp + 0xc]
push eax
push ecx
push edx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [eax + 0x268], ecx
mov eax, edi
mov ecx, 0
sub eax, esi
mov ebp, eax
cmovb ebp, ecx
jb 0x4a6b8b
mov ecx, dword [esp + 0x18]
cmp edi, ecx
ja 0x4a6b8b
mov edi, dword [esp + 0x2c]
sub ecx, eax
cmp ecx, ebx
jb 0x4a6b8b
mov ecx, dword [esp + 0x10]
add esi, ecx
add ecx, ebx
push eax
push esi
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
add ebp, ebx
mov eax, dword [esp + 0x18]
mov ebx, ebp
cmp ebp, edi
mov ebp, dword [esp + 0x30]
jb 0x4a6b8b
cmp ebx, eax
ja 0x4a6b8b
mov edx, dword [esp + 0x50]
mov ecx, dword [esp]
sub ebx, edi
je 0x4a450f
mov eax, dword [esp + 0x24]
add edi, dword [esp + 0x10]
shl eax, 2
mov dword [esp + 0x2c], edi
lea eax, [eax + eax*4]
mov dword [esp + 0x148], eax
lea eax, [ebp*4]
lea edi, [eax + eax*4]
jmp 0x4a4411
mov eax, dword [esp + 0xc]
movdqu xmm0, xmmword [esp + 0x160]
inc ecx
inc ebp
mov dword [edx + edi], eax
mov eax, dword [esp + 0x24]
mov dword [edx + edi + 4], eax
movd dword [edx + edi + 8], xmm0
mov dword [edx + edi + 0xc], esi
mov dword [edx + edi + 0x10], ebx
mov ebx, dword [esp + 8]
mov esi, dword [esp + 4]
add edi, 0x14
test ebx, ebx
mov dword [esi + 0x268], ecx
je 0x4a422c
cmp ebx, 3
mov dword [esp], ecx
ja 0x4a4440
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x2c], 1
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
sub esi, dword [esp + 0x10]
jmp 0x4a44b0
mov dword [esp + 0x30], ebp
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x50], edx
lea eax, [ebx - 4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
movzx edx, byte [ebp + 1]
movzx ecx, word [ebp + 2]
mov esi, ebp
shl ecx, 0x10
shl edx, 8
or edx, ecx
mov ecx, 0
bswap edx
sub eax, edx
lea ebx, [edx + 4]
mov dword [esp + 0x24], edx
cmovbe ebx, dword [esp + 8]
cmovb eax, ecx
lea ecx, [edx + ebp + 4]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], ebx
mov ebx, 1
cmovbe ecx, ebx
mov ebx, dword [esp + 8]
sub esi, dword [esp + 0x10]
mov dword [esp + 8], eax
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp]
add ebx, esi
cmp ecx, ebp
jb 0x4a6b8b
mov eax, dword [esp + 0x11c]
cmp ecx, dword [eax]
jne 0x4a44de
mov ecx, dword [esp + 0x11c]
call fcn.00447730
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov edx, dword [eax + 0x264]
cmp ecx, ebp
jbe 0x4a43d0
lea ecx, [edx + edi + 0x14]
lea eax, [edx + edi]
push dword [esp + 0x148]
push eax
push ecx
mov dword [esp + 0x5c], edx
call sub.VCRUNTIME140.dll_memmove
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x5c]
add esp, 0xc
jmp 0x4a43d0
mov ebp, dword [esp + 4]
test ecx, ecx
mov eax, ecx
jne 0x4a4240
xor ebx, ebx
jmp 0x4a4529
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 4]
shl ebx, 2
lea eax, [ebx + ebx*4]
jmp 0x4a4552
add edx, 0x14
add eax, 0xffffffec
cmp ecx, 0xffff
ja 0x4a6353
test eax, eax
je 0x4a4566
test edx, edx
je 0x4a4566
xor ecx, ecx
cmp dword [edx], 1
jne 0x4a4540
mov ecx, dword [edx + 4]
jmp 0x4a4540
mov edi, dword [ebp + 0x268]
mov eax, dword [ebp + 0x264]
lea ecx, [edi*4]
mov edx, eax
lea esi, [ecx + ecx*4]
nop
mov ecx, esi
test esi, esi
je 0x4a45a9
cmp dword [edx], 1
jne 0x4a45a9
mov ebx, dword [edx + 4]
mov ebp, dword [edx + 0x10]
mov esi, 0
add ebx, 4
sub ebp, dword [edx + 0xc]
lea edx, [edx + 0x14]
cmovb ebp, esi
lea esi, [ecx - 0x14]
cmp ebx, ebp
je 0x4a4580
mov ebp, dword [esp + 4]
test ecx, ecx
sete byte [ebp + 0x24d]
test edi, edi
je 0x4a45db
cmp dword [eax], 1
jne 0x4a45db
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0x10]
add ecx, 4
sub edx, dword [eax + 0xc]
mov eax, 0
cmovb edx, eax
cmp ecx, edx
je 0x4a499e
mov esi, dword [esp + 0x18]
movzx ebx, word [esp + 0x13c]
cmp dword [esp + 0x20], esi
jbe 0x4a38b9
jmp 0x4a6b8b
cmp byte [ebp + 0x24f], 0
jne 0x4a4723
cmp word [ebp + 0x240], 5
jne 0x4a4723
cmp edx, 1
jne 0x4a6506
cmp byte [ecx], 1
jne 0x4a6506
movzx eax, byte [ebp + 0x24b]
test al, al
je 0x4a654f
dec al
mov byte [ebp + 0x24b], al
jmp 0x4a540f
mov bl, 0xc
test edx, edx
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], ecx
je 0x4a4764
mov ch, byte [ecx]
mov al, 0x14
mov cl, ch
add cl, 2
cmp cl, 0x1b
ja 0x4a4669
movzx eax, cl
movzx eax, byte [eax + 0x8ff5a4]
cmp edx, 4
mov byte [esp + 0x92], al
mov byte [esp + 0x93], ch
jae 0x4a4781
mov ecx, dword [esp + 0x278]
mov ax, 3
mov edi, 0x8c2813
xor edx, edx
mov dword [esp + 0x10], eax
mov ebp, ecx
jmp 0x4a509f
mov al, 0xc
test edx, edx
mov dword [esp], eax
movzx eax, byte [esp + 0x47]
je 0x4a65a1
movzx esi, byte [ecx]
mov ebx, ecx
mov ah, 2
mov edi, edx
cmp esi, 2
mov dword [esp + 0x10], esi
sete cl
sub ah, cl
cmp esi, 1
mov esi, 0
movzx edx, ah
cmove edx, esi
cmp edi, 1
je 0x4a65bb
movzx ecx, byte [ebx + 1]
mov bl, 0x23
mov ebp, edi
mov dword [esp + 0x14], ebx
cmp ecx, 0x79
mov dword [esp + 0x14c], ecx
ja 0x4a498e
mov ecx, dword [ecx*4 + 0x4a6be0]
mov ah, byte [esp + 0x1f]
mov ebx, eax
add ecx, dword [esp + 0x170]
jmp ecx
test edx, edx
je 0x4a6614
cmp byte [ecx], 1
movzx ebx, byte [esp + 0x47]
jne 0x4a6659
mov ebp, 0x80000004
cmp edx, 1
jne 0x4a66a0
mov bh, byte [esp + 0x1f]
mov eax, dword [esp + 0x114]
mov word [esp + 8], si
mov cl, ah
mov byte [esp + 0x1f], bh
mov edx, eax
jmp 0x4a5135
mov ecx, dword [esp + 0x27c]
mov ax, 0xd
mov edi, str.HandshakeTypeHelloVerifyRequestCertificateURLHandshakeType_0x
xor edx, edx
mov dword [esp + 0x10], eax
mov ebp, ecx
jmp 0x4a509f
mov byte [esp + 0x2c], ch
mov ecx, dword [esp + 0x50]
mov edi, edx
movzx ebx, byte [ecx + 1]
movzx ecx, word [ecx + 2]
shl ecx, 0x10
shl ebx, 8
or ebx, ecx
lea ecx, [edx - 4]
mov ebp, ebx
bswap ebp
cmp ecx, ebp
jae 0x4a47d0
mov eax, ebp
mov bl, 0xb
xor edx, edx
mov edi, ebp
mov dword [esp + 0x10], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
shr eax, 0x10
mov ebp, eax
jmp 0x4a509f
lea ecx, [ebp + 4]
cmp ecx, edi
ja 0x4a6b8b
mov ecx, dword [esp + 0x50]
mov edi, ebp
cmp al, 0x13
lea ecx, [ecx + 4]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], ebp
mov dword [esp], ecx
mov dword [esp + 0x78], 0
ja 0x4a4831
movzx ecx, al
mov dl, 0x10
mov dword [esp + 0x18], 0x8c28dd
mov si, 0x11
mov ebp, dword [ecx*4 + 0x4a6b90]
mov ecx, dword [esp + 0x274]
mov dword [esp + 0xc], edx
xor edx, edx
add ebp, dword [esp + 0x170]
jmp ebp
mov ebp, edi
mov dword [esp + 0x78], edi
mov edi, 0x80000015
mov ebx, 0x80000000
jmp 0x4a5841
mov esi, eax
mov eax, dword [esp + 0x20]
cmp edi, ecx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x18]
jb 0x4a6b8b
cmp edi, eax
ja 0x4a6b8b
mov eax, dword [esp]
mov edx, ecx
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 4]
mov byte [esp + 0x130], al
movzx eax, byte [esp + 0x160]
add ecx, edx
movzx edx, word [esp + 0x30]
mov byte [esp + 0x131], al
mov eax, dword [esp + 0x24]
mov word [esp + 0x124], ax
mov word [esp + 0x126], dx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], esi
mov dword [esp + 0x120], 0
mov dword [esp + 0x4c], edx
jmp 0x4a380e
movzx ecx, byte [esp + 0x14]
mov esi, dword [esp + 0x10]
mov byte [esp + 0x1f], ah
mov eax, dword [esp + 0x14c]
movzx edi, dl
mov ebp, 0x80000001
shl ecx, 0x10
shl esi, 8
shl eax, 0x18
or edi, ecx
or edi, esi
or eax, edi
jmp 0x4a5139
mov ah, byte [esp + 0x1f]
mov ebx, eax
cmp ebp, 2
jbe 0x4a495e
jmp 0x4a65d9
mov eax, dword [esp + 0x20]
mov dword [ebp], 0
lea ecx, [esp + 0x124]
mov edx, ebp
mov dword [esp + 0x48], eax
lea eax, [esp + 0x48]
push eax
push dword [esp + 0x1c]
push dword [esp + 0x18]
call fcn.004aaad0
add esp, 0xc
movzx eax, word [esp + 0x124]
jmp 0x4a3803
mov esi, edx
mov ecx, 0x80000016
mov eax, dword [esp + 0x38]
movzx edx, byte [esp + 0x34]
shl ebp, 0x10
movzx ebx, bl
shl esi, 0x10
shl eax, 0x10
shl edx, 8
or edx, eax
movzx eax, di
or eax, ebp
movzx ebp, word [esp + 0x10]
or ebx, edx
or ebp, esi
cmp ecx, 0x80000016
je 0x4a65b0
mov dword [esp + 0x84], ecx
mov ecx, 0x17
lea edi, [esp + 0x29c]
lea esi, [esp + 0x188]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x25c], ebx
mov dword [esp + 0x260], eax
mov dword [esp + 0x258], ebp
mov ebp, 0x80000000
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x20]
mov bh, byte [esp + 0x8e]
mov bl, byte [esp + 0x8f]
mov cl, dh
mov dword [esp + 0x6c], eax
mov eax, edx
mov byte [esp + 0x90], bh
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x260]
lea edi, [esp + 0x334]
lea esi, [esp + 0x29c]
mov dword [esp + 0x32c], ecx
mov ecx, dword [esp + 0x258]
mov dword [esp + 0x330], ecx
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov byte [esp + 0x390], bl
mov byte [esp + 0x47], bl
mov dword [esp + 0x114], eax
movzx ecx, byte [esp + 0x90]
movzx esi, word [esp + 8]
mov byte [esp + 0x391], cl
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x318], ebp
mov byte [esp + 0x31c], dl
mov byte [esp + 0x31d], cl
mov ecx, eax
shr ecx, 0x10
cmp ebp, 0x80000001
mov dword [esp + 0x10], ecx
mov word [esp + 0x31e], cx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x320], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x324], ecx
mov ecx, dword [esp + 0x25c]
mov dword [esp + 0x328], ecx
mov ecx, dword [esp + 0x24]
mov word [esp + 0x394], cx
mov word [esp + 0x396], si
jne 0x4a5239
mov ebp, dword [esp + 4]
shr eax, 0x18
cmp dl, 2
je 0x4a64a8
cmp byte [ebp + 0x24f], 1
mov ecx, dword [esp + 0x10]
jne 0x4a53a8
test cl, cl
jne 0x4a53a8
mov edi, dword [esp + 0x138]
mov byte [ebp + 0x252], 1
jmp 0x4a5403
mov ecx, 0x20
lea edi, [esp + 0x188]
lea esi, [esp + 0x318]
rep movsd dword es:[edi], dword [esi]
mov ebp, dword [esp + 4]
cmp byte [ebp + 0x24f], 1
jne 0x4a52c3
cmp word [ebp + 0x240], 5
je 0x4a52c3
mov eax, dword [esp + 0x188]
mov ecx, 0x7fffffff
add eax, ecx
cmp eax, 5
setb cl
cmp eax, 1
setne al
test cl, al
jne 0x4a52c3
movzx eax, byte [esp + 0x200]
cmp byte [ebp + 0x24c], al
jne 0x4a52c3
movzx eax, byte [ebp + 0x249]
mov edi, dword [esp + 0x138]
test al, al
je 0x4a5487
dec al
mov ecx, ebp
mov byte [ebp + 0x249], al
call fcn.0045a1d0
mov al, 0x16
mov dword [esp + 8], eax
jmp 0x4a54e4
mov eax, dword [esp + 0x280]
mov dword [esp + 0x228], ebp
lea ebx, [esp + 0x94]
mov ecx, 0x20
lea esi, [esp + 0x318]
mov edi, ebx
mov dword [esp + 0x22c], eax
mov eax, dword [esp + 0x284]
mov dword [esp + 0x230], eax
rep movsd dword es:[edi], dword [esi]
push ebx
lea eax, [esp + 0x22c]
push eax
push dword [esp + 0x30]
lea eax, [esp + 0x2a8]
push eax
mov eax, dword [esp + 0x50]
call dword [eax + 0xc]
add esp, 0x10
movzx ecx, byte [esp + 0x29c]
cmp ecx, 2
jae 0x4a5418
movzx eax, byte [esp + 0x29d]
mov edi, dword [esp + 0x2a8]
mov esi, ecx
mov ecx, ebp
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x10001
mov edx, ebx
mov byte [esp + 0x1e], al
movzx eax, word [esp + 0x29e]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x2a0]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x40], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
sete al
push eax
call fcn.00459840
mov ecx, esi
add esp, 4
mov byte [ebp + 0x251], 1
jmp 0x4a54fb
mov edi, dword [esp + 0x138]
test dl, dl
mov byte [esp + 0x189], cl
mov byte [esp + 0x18a], al
mov byte [esp + 0x188], 0xa
jne 0x4a662b
movzx eax, byte [ebp + 0x248]
test al, al
je 0x4a6660
dec al
mov byte [ebp + 0x248], al
cmp word [ebp + 0x240], 5
jne 0x4a53f7
cmp cl, 0x17
jne 0x4a6747
lea ecx, [esp + 0x188]
call fcn.00447990
lea ecx, [esp + 0x318]
call fcn.004aabf0
mov eax, dword [esp + 0x68]
jmp 0x4a5508
cmp ecx, 0x16
jne 0x4a5449
mov eax, dword [esp + 0x2a4]
push dword [esp + 0x2a0]
mov esi, ecx
call dword [eax + 0x20]
mov ecx, esi
add esp, 4
mov edi, dword [esp + 0x138]
mov dword [esp + 0x28], eax
mov dword [esp + 0x40], edx
jmp 0x4a54f4
movzx eax, byte [esp + 0x29d]
mov esi, dword [esp + 0x2a0]
mov edx, dword [esp + 0x2a4]
mov edi, dword [esp + 0x2a8]
lea ebx, [esp + 0x94]
mov byte [esp + 0x1e], al
movzx eax, word [esp + 0x29e]
mov dword [esp + 0x28], esi
mov dword [esp + 0x40], edx
mov dword [esp + 0x68], eax
jmp 0x4a54fb
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
test eax, eax
je 0x4a549a
push dword [esp + 0x28]
call eax
add esp, 4
mov eax, dword [esp + 0x40]
cmp dword [eax + 4], 0
je 0x4a54b6
cmp dword [eax + 8], 9
jae 0x4a54c3
mov al, 9
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
jmp 0x4a54d0
mov al, 9
mov byte [esp + 0x1e], 0x40
mov dword [esp + 8], eax
jmp 0x4a54e4
mov al, 9
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax - 4]
mov byte [esp + 0x1e], 0x40
push eax
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
lea ecx, [esp + 0x188]
call fcn.004aabf0
mov ecx, dword [esp + 8]
lea ebx, [esp + 0x94]
mov eax, dword [esp + 0x68]
cmp cl, 0x16
jne 0x4a64f9
cmp byte [ebp + 0x252], 0
jne 0x4a648b
mov dword [esp + 0x138], edi
mov ecx, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x68], eax
mov eax, 0
sub ecx, edi
cmovb ecx, eax
mov eax, dword [ebp + 0x2c0]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x4c], 0
mov esi, eax
sub esi, edi
jbe 0x4a558f
cmp eax, dword [ebp + 0x2bc]
ja 0x4a6b8b
mov eax, dword [ebp + 0x2b8]
lea ecx, [eax + edi]
push esi
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [ebp + 0x2c0], esi
mov ecx, 0
mov eax, dword [ebp + 0x2c4]
sub eax, edi
cmovb eax, ecx
mov dword [ebp + 0x2c4], eax
jmp 0x4a3701
mov esi, eax
jne 0x4a3701
xor eax, eax
mov dword [ebp + 0x2c0], 0
xor esi, esi
mov dword [ebp + 0x2c4], eax
jmp 0x4a3701
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x84], edi
movsd xmm1, qword [esp + 0x210]
movsd xmm2, qword [esp + 0x250]
cmp ecx, dword [esp + 0x74]
lea ecx, [esp + 0x92]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x94], edi
mov edi, dword [esp]
movzx ecx, word [esp + 0x3c]
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], ebp
mov word [esp + 0xa4], si
mov word [esp + 0xa6], dx
lea edx, [esp + 0x9a]
movlps qword [esp + 0xa8], xmm0
movq xmm0, qword [esp + 0x208]
mov word [edx + 0x16], cx
movzx ecx, byte [esp + 0x3e]
mov byte [edx + 0x18], cl
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xb3], ecx
mov ecx, dword [esp + 0x160]
mov dword [esp + 0xb7], ecx
movzx ecx, byte [esp + 0x30]
mov byte [esp + 0xbb], cl
movsd qword [edx + 0x2a], xmm1
mov ecx, dword [esp + 0x13c]
movsd xmm1, qword [esp + 0x248]
movq qword [edx + 0x22], xmm0
mov dword [esp + 0xcc], ecx
movsd qword [edx + 0x5e], xmm2
movsd qword [edx + 0x56], xmm1
movsd xmm2, qword [esp + 0x240]
movsd xmm1, qword [esp + 0x238]
movsd qword [edx + 0x4e], xmm2
movsd qword [edx + 0x46], xmm1
movq xmm2, qword [esp + 0x228]
movq xmm1, qword [esp + 0x230]
movq qword [edx + 0x3e], xmm1
movq qword [edx + 0x36], xmm2
jae 0x4a5981
lea ecx, [esp + 0x94]
call fcn.00458990
mov ax, 0x17
mov edi, 0x8c2908
mov bl, 0xf
xor edx, edx
mov ecx, 0x8c2908
mov dword [esp + 0x84], 0x80000016
mov dword [esp + 0x10], eax
jmp 0x4a59cb
mov ecx, ebx
mov dword [esp], edi
lea edi, [esp + 0x188]
lea esi, [esp + 0xa4]
mov edx, ebp
shr ecx, 0x10
shr edx, 0x10
mov dword [esp + 0x38], ecx
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
mov byte [esp + 0x8f], al
mov al, bh
mov dword [esp + 0x10], ecx
mov ecx, dword [esp]
mov dword [esp + 0x34], eax
movzx eax, byte [esp + 0x2c]
mov edi, ecx
mov byte [esp + 0x8e], al
shr ecx, 0x10
mov esi, edx
mov ebp, ecx
mov ecx, dword [esp + 0x84]
jmp 0x4a50a6
mov edx, dword [esp + 0x288]
mov byte [esp + 0x28c], cl
lea esi, [esp + 0x28d]
movzx ecx, byte [edx + 2]
mov byte [esi + 2], cl
movzx ecx, word [edx]
lea edx, [esp + 0x28c]
mov word [esi], cx
lea ecx, [esp + 0x94]
mov dword [esp + 0x290], edi
mov dword [esp + 0x294], ebx
mov dword [esp + 0x298], eax
call fcn.004a8640
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x4a5c6e
mov edi, dword [ebp + 0x278]
mov esi, dword [ebp + 0x274]
mov eax, dword [edi]
test eax, eax
je 0x4a5baf
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x4a5c77
cmp dword [edi + 8], 9
jb 0x4a5bc2
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4a5c77
mov eax, dword [esp + 0x20]
mov word [esp + 0x124], 0x2a09
mov dword [esp + 0x48], eax
mov ebp, dword [esp + 4]
mov dword [esp + 0x120], 1
lea edx, [esp + 0x124]
lea ecx, [esp + 0x94]
movsd xmm0, qword [edx]
movsd xmm1, qword [edx + 8]
movsd qword [esp + 0x300], xmm1
movsd qword [esp + 0x2f8], xmm0
call fcn.004a8640
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x4a5ccd
mov edi, dword [ebp + 0x278]
mov esi, dword [ebp + 0x274]
mov eax, dword [edi]
test eax, eax
je 0x4a5c4a
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x4a5cd6
cmp dword [edi + 8], 9
jb 0x4a5c5d
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4a5cd6
push eax
call fcn.004a8dd0
add esp, 4
movsd xmm1, qword [esp + 0x9c]
mov eax, dword [esp + 0x7c]
movq xmm0, qword [esp + 0x94]
movq xmm2, qword [esp + 0x28c]
movsd qword [eax + 8], xmm1
movq xmm1, qword [esp + 0x294]
movq qword [eax], xmm0
movq qword [esp + 0x178], xmm2
movq qword [esp + 0x180], xmm1
cmp byte [esp + 0x178], 0x16
je 0x4a5dc2
jmp 0x4a6a69
push eax
call fcn.004a8dd0
add esp, 4
movsd xmm0, qword [esp + 0x94]
mov eax, dword [esp + 0x7c]
movsd xmm1, qword [esp + 0x9c]
mov esi, dword [esp + 0x4c]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [ebp + 0x2c0]
mov edi, eax
sub edi, esi
jbe 0x4a5d3d
cmp eax, dword [ebp + 0x2bc]
ja 0x4a6b8b
mov eax, dword [ebp + 0x2b8]
lea ecx, [eax + esi]
push edi
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [ebp + 0x2c0], edi
mov ecx, 0
mov eax, dword [ebp + 0x2c4]
sub eax, esi
cmovb eax, ecx
jmp 0x4a5d4b
jne 0x4a5d51
mov dword [ebp + 0x2c0], 0
xor eax, eax
mov dword [ebp + 0x2c4], eax
movq xmm0, qword [esp + 0x2f8]
movq xmm1, qword [esp + 0x300]
mov eax, dword [esp + 0x40]
movq qword [esp + 0x180], xmm1
movq qword [esp + 0x178], xmm0
mov eax, dword [eax]
test eax, eax
je 0x4a5d88
push dword [esp + 0x28]
call eax
add esp, 4
mov eax, dword [esp + 0x40]
cmp dword [eax + 4], 0
je 0x4a5db4
cmp dword [eax + 8], 9
jae 0x4a5d9e
mov eax, dword [esp + 0x28]
jmp 0x4a5da5
mov eax, dword [esp + 0x28]
mov eax, dword [eax - 4]
push eax
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp byte [esp + 0x178], 0x16
jne 0x4a6a69
test byte [esp + 0x91], 1
jne 0x4a6a2f
movzx ecx, byte [ebp + 0x24e]
mov bh, byte [ebp + 0x24f]
mov eax, dword [ebp + 0x208]
mov edi, dword [esp + 0x174]
mov bl, cl
and cl, bh
test eax, eax
setne dl
test cl, dl
lea ecx, [esp + 0x94]
jne 0x4a329a
test bl, bl
je 0x4a5e0f
test bh, 1
jne 0x4a6a2f
test byte [esp + 0x140], 1
je 0x4a329a
jmp 0x4a6b79
cmp eax, 1
jne 0x4a5ea4
lea ecx, [esp + 0x9a]
mov eax, dword [esp + 0x20]
mov ebp, dword [esp + 4]
movsd xmm1, qword [ecx + 6]
movsd xmm0, qword [ecx]
lea ecx, [esp + 0x124]
mov dword [esp + 0x48], eax
movzx eax, word [esp + 0x98]
mov edx, ebp
movsd qword [esp + 0x18e], xmm1
movsd qword [esp + 0x188], xmm0
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
mov word [esp + 0x318], ax
lea eax, [esp + 0x31a]
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
push dword [esp + 0x40]
push dword [esp + 0x2c]
lea eax, [esp + 0x320]
jmp 0x4a633c
mov eax, dword [esp + 0x20]
mov ebp, dword [esp + 4]
mov dword [esp + 0x48], eax
mov esi, dword [esp + 0x4c]
mov eax, dword [ebp + 0x2c0]
mov edi, dword [esp + 0x48]
mov ebx, eax
sub ebx, esi
mov dword [ebp + 0x2c4], edi
jbe 0x4a5f00
cmp eax, dword [ebp + 0x2bc]
ja 0x4a6b8b
mov eax, dword [ebp + 0x2b8]
lea ecx, [eax + esi]
push ebx
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
sub edi, esi
mov eax, 0
mov dword [ebp + 0x2c0], ebx
cmovb edi, eax
mov eax, dword [esp + 0x7c]
jmp 0x4a5f12
mov eax, dword [esp + 0x7c]
jne 0x4a5f18
mov dword [ebp + 0x2c0], 0
xor edi, edi
mov dword [ebp + 0x2c4], edi
cmp byte [eax], 0x16
jne 0x4a5f55
mov edi, dword [ebp + 0x278]
mov esi, dword [ebp + 0x274]
mov eax, dword [edi]
test eax, eax
je 0x4a5f35
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x4a5f5e
cmp dword [edi + 8], 9
jb 0x4a5f44
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4a5f5e
push eax
call fcn.004a8dd0
add esp, 4
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x40]
mov byte [ebp + 0x270], 0x16
xor esi, esi
mov edi, 0
mov dword [ebp + 0x274], eax
mov dword [ebp + 0x278], ecx
mov ebx, dword [ebp + 0x208]
test ebx, ebx
je 0x4a6198
mov ecx, dword [esp + 4]
xor edi, edi
mov dword [esp + 8], ebx
mov edx, dword [ecx + 0x204]
mov ecx, dword [ecx + 0x1fc]
cmp edx, ecx
mov ebp, ecx
mov dword [esp], edx
cmovb ebp, edi
sub edx, ebp
mov dword [esp + 0x20], ebp
mov ebp, ecx
sub ebp, edx
lea eax, [edx + ebx]
cmp ebp, ebx
cmovb eax, ecx
mov ecx, dword [esp + 4]
sub ebx, ebp
cmovb ebx, edi
sub eax, edx
mov dword [esp + 0x50], ebx
mov ecx, dword [ecx + 0x200]
mov dword [esp + 0x10], ecx
je 0x4a60c8
shl eax, 2
mov ebx, edx
mov edx, 0xaaaaaaab
xor edi, edi
lea ecx, [eax + eax*2]
mov eax, ecx
mul edx
mov eax, 0
shr edx, 3
cmp ecx, 0x60
jb 0x4a608d
mov edi, dword [esp + 0x10]
mov eax, edx
shl ebx, 2
pxor xmm0, xmm0
pxor xmm1, xmm1
lea ecx, [ebx + ebx*2]
and eax, 0xfffffff8
lea ecx, [edi + ecx + 0x5c]
mov edi, eax
movd xmm2, dword [ecx - 0x30]
movd xmm3, dword [ecx - 0x3c]
movd xmm4, dword [ecx - 0x54]
movd xmm6, dword [ecx - 0xc]
movd xmm5, dword [ecx - 0x18]
punpckldq xmm3, xmm2
movd xmm2, dword [ecx - 0x48]
punpckldq xmm4, xmm2
movd xmm2, dword [ecx]
punpcklqdq xmm4, xmm3
paddd xmm0, xmm4
movd xmm4, dword [ecx - 0x24]
add ecx, 0x60
add edi, 0xfffffff8
punpckldq xmm6, xmm2
punpckldq xmm4, xmm5
punpcklqdq xmm4, xmm6
paddd xmm1, xmm4
jne 0x4a6020
paddd xmm1, xmm0
cmp edx, eax
pshufd xmm0, xmm1, 0xee
paddd xmm0, xmm1
pshufd xmm1, xmm0, 0x55
paddd xmm1, xmm0
movd edi, xmm1
je 0x4a60c8
lea ecx, [eax + eax*2]
sub eax, edx
mov edx, dword [esp]
mov ebx, dword [esp + 0x10]
lea edx, [edx + edx*2]
shl edx, 2
lea ecx, [edx + ecx*4]
mov edx, dword [esp + 0x20]
shl edx, 2
lea edx, [edx + edx*2]
sub ecx, edx
lea ecx, [ebx + ecx + 8]
nop word cs:[eax + eax]
nop dword [eax]
add edi, dword [ecx]
add ecx, 0xc
inc eax
jne 0x4a60c0
mov ebx, dword [esp + 8]
cmp ebp, ebx
jae 0x4a6198
mov ecx, dword [esp + 0x50]
xor eax, eax
cmp ecx, 8
jb 0x4a616f
mov eax, ecx
mov ecx, dword [esp + 0x10]
movd xmm1, edi
pxor xmm0, xmm0
and eax, 0xfffffff8
mov edx, eax
add ecx, 0x5c
nop dword [eax]
movd xmm2, dword [ecx - 0x30]
movd xmm3, dword [ecx - 0x3c]
movd xmm4, dword [ecx - 0x54]
movd xmm6, dword [ecx - 0xc]
movd xmm5, dword [ecx - 0x18]
punpckldq xmm3, xmm2
movd xmm2, dword [ecx - 0x48]
punpckldq xmm4, xmm2
movd xmm2, dword [ecx]
punpcklqdq xmm4, xmm3
paddd xmm1, xmm4
movd xmm4, dword [ecx - 0x24]
add ecx, 0x60
add edx, 0xfffffff8
punpckldq xmm6, xmm2
punpckldq xmm4, xmm5
punpcklqdq xmm4, xmm6
paddd xmm0, xmm4
jne 0x4a6100
paddd xmm0, xmm1
cmp dword [esp + 0x50], eax
pshufd xmm1, xmm0, 0xee
paddd xmm1, xmm0
pshufd xmm0, xmm1, 0x55
paddd xmm0, xmm1
movd edi, xmm0
je 0x4a6198
mov ecx, dword [esp + 0x10]
cmp ebx, ebp
cmovb ebp, ebx
add ebp, eax
lea eax, [eax + eax*2]
sub ebp, ebx
lea eax, [ecx + eax*4 + 8]
nop word cs:[eax + eax]
nop dword [eax]
add edi, dword [eax]
add eax, 0xc
inc ebp
jne 0x4a6190
mov eax, dword [esp + 4]
mov ebx, dword [eax + 0x1ec]
mov ecx, dword [eax + 0x20c]
test ebx, ebx
je 0x4a6448
mov eax, dword [esp + 4]
mov dword [esp + 8], ecx
xor esi, esi
mov dword [esp + 0x50], ebx
mov edx, dword [eax + 0x1e8]
mov ecx, dword [eax + 0x1e0]
cmp edx, ecx
mov eax, ecx
mov dword [esp + 0x2c], edx
mov ebp, ecx
cmovb eax, esi
sub edx, eax
mov dword [esp], eax
sub ebp, edx
lea eax, [edx + ebx]
cmp ebp, ebx
cmovb eax, ecx
mov ecx, dword [esp + 4]
sub ebx, ebp
cmovb ebx, esi
sub eax, edx
mov dword [esp + 0x20], ebx
mov ecx, dword [ecx + 0x1e4]
mov dword [esp + 0x10], ecx
je 0x4a62f8
shl eax, 2
mov ebx, edx
mov edx, 0xaaaaaaab
xor esi, esi
lea ecx, [eax + eax*2]
mov eax, ecx
mul edx
mov eax, 0
shr edx, 3
cmp ecx, 0x60
jb 0x4a62bd
mov esi, dword [esp + 0x10]
mov eax, edx
shl ebx, 2
pxor xmm0, xmm0
pxor xmm1, xmm1
lea ecx, [ebx + ebx*2]
and eax, 0xfffffff8
lea ecx, [esi + ecx + 0x5c]
mov esi, eax
nop word cs:[eax + eax]
movd xmm2, dword [ecx - 0x30]
movd xmm3, dword [ecx - 0x3c]
movd xmm4, dword [ecx - 0x54]
movd xmm6, dword [ecx - 0xc]
movd xmm5, dword [ecx - 0x18]
punpckldq xmm3, xmm2
movd xmm2, dword [ecx - 0x48]
punpckldq xmm4, xmm2
movd xmm2, dword [ecx]
punpcklqdq xmm4, xmm3
paddd xmm0, xmm4
movd xmm4, dword [ecx - 0x24]
add ecx, 0x60
add esi, 0xfffffff8
punpckldq xmm6, xmm2
punpckldq xmm4, xmm5
punpcklqdq xmm4, xmm6
paddd xmm1, xmm4
jne 0x4a6250
paddd xmm1, xmm0
cmp edx, eax
pshufd xmm0, xmm1, 0xee
paddd xmm0, xmm1
pshufd xmm1, xmm0, 0x55
paddd xmm1, xmm0
movd esi, xmm1
je 0x4a62f8
lea ecx, [eax + eax*2]
sub eax, edx
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x10]
lea edx, [edx + edx*2]
shl edx, 2
lea ecx, [edx + ecx*4]
mov edx, dword [esp]
shl edx, 2
lea edx, [edx + edx*2]
sub ecx, edx
lea ecx, [ebx + ecx + 8]
nop word cs:[eax + eax]
nop dword [eax]
add esi, dword [ecx]
add ecx, 0xc
inc eax
jne 0x4a62f0
mov ebx, dword [esp + 0x50]
cmp ebp, ebx
jae 0x4a634a
mov ecx, dword [esp + 0x20]
xor eax, eax
cmp ecx, 8
jae 0x4a638f
mov ecx, dword [esp + 8]
jmp 0x4a6423
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x124]
mov edx, ebp
mov dword [esp + 0x48], eax
push dword [esp + 0x40]
push dword [esp + 0x2c]
lea eax, [esp + 0x194]
push eax
call fcn.004aaa00
add esp, 0xc
jmp 0x4a5bec
mov ecx, dword [esp + 8]
jmp 0x4a6448
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x9b]
movq xmm0, qword [esp + 0x94]
lea ecx, [esp + 0x124]
mov dword [ecx + 0xc], edx
movq qword [ecx + 5], xmm0
mov byte [esp + 0x124], 3
mov dword [esp + 0x48], eax
mov byte [esp + 0x128], 1
jmp 0x4a5bec
mov eax, ecx
mov ecx, dword [esp + 0x10]
movd xmm1, esi
pxor xmm0, xmm0
and eax, 0xfffffff8
mov edx, eax
add ecx, 0x5c
nop word cs:[eax + eax]
nop
movd xmm2, dword [ecx - 0x30]
movd xmm3, dword [ecx - 0x3c]
movd xmm4, dword [ecx - 0x54]
movd xmm6, dword [ecx - 0xc]
movd xmm5, dword [ecx - 0x18]
punpckldq xmm3, xmm2
movd xmm2, dword [ecx - 0x48]
punpckldq xmm4, xmm2
movd xmm2, dword [ecx]
punpcklqdq xmm4, xmm3
paddd xmm1, xmm4
movd xmm4, dword [ecx - 0x24]
add ecx, 0x60
add edx, 0xfffffff8
punpckldq xmm6, xmm2
punpckldq xmm4, xmm5
punpcklqdq xmm4, xmm6
paddd xmm0, xmm4
jne 0x4a63b0
paddd xmm0, xmm1
cmp dword [esp + 0x20], eax
mov ecx, dword [esp + 8]
pshufd xmm1, xmm0, 0xee
paddd xmm1, xmm0
pshufd xmm0, xmm1, 0x55
paddd xmm0, xmm1
movd esi, xmm0
je 0x4a6448
mov edx, dword [esp + 0x10]
cmp ebx, ebp
cmovb ebp, ebx
add ebp, eax
lea eax, [eax + eax*2]
sub ebp, ebx
lea eax, [edx + eax*4 + 8]
nop word [eax + eax]
add esi, dword [eax]
add eax, 0xc
inc ebp
jne 0x4a6440
mov ebp, dword [esp + 4]
sub edi, ecx
mov dword [esp + 0x17c], edi
sub esi, dword [ebp + 0x1f0]
movzx eax, byte [ebp + 0x252]
mov dword [esp + 0x180], esi
mov byte [esp + 0x184], al
mov byte [esp + 0x178], 0x16
test byte [esp + 0x91], 1
je 0x4a5dd0
jmp 0x4a6a2f
mov eax, dword [ebp + 0x2c0]
cmp eax, dword [ebp + 0x2bc]
ja 0x4a6b8b
mov esi, dword [esp + 0x4c]
add esi, eax
jmp 0x4a5eba
mov dword [esp + 0x50], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0xd0001
mov ecx, ebp
lea edx, [esp + 0x94]
sete al
push eax
call fcn.00459840
add esp, 4
mov al, 0xa
mov byte [ebp + 0x251], 1
mov dword [esp + 8], eax
jmp 0x4a6681
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x28]
jmp 0x4a688e
xor eax, eax
cmp byte [ebp + 0x31], 2
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x10001
mov ecx, ebp
lea edx, [esp + 0x94]
sete al
push eax
call fcn.00459840
lea ebx, [esp + 0x98]
add esp, 4
mov byte [ebp + 0x251], 1
mov al, 9
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x80]
mov byte [esp + 0x1e], 0x15
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x50], eax
jmp 0x4a6817
mov eax, dword [esp + 0x20]
mov word [esp + 0x124], 0x1d09
jmp 0x4a5be4
mov ebp, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
mov cl, 3
jmp 0x4a66c1
mov ebp, 0xa
mov dword [esp + 0x6c], 0x8c41e4
jmp 0x4a65ef
mov dword [esp + 0x6c], eax
mov ecx, ebx
jmp 0x4a66c1
mov edx, dword [esp + 0x14c]
mov eax, dword [esp + 0x14]
mov ebp, 0x10
mov dword [esp + 0x6c], 0x8c4782
mov ecx, edx
mov edx, eax
jmp 0x4a65ef
mov ecx, dword [esp + 0x10]
mov al, 0xf
mov ebp, 0x13
mov dword [esp + 0x6c], 0x8c27e4
mov dword [esp], eax
movzx esi, byte [esp + 0x14]
movzx eax, cl
mov ecx, dword [esp]
movzx ebx, dl
shl eax, 8
shl esi, 0x10
or eax, esi
or ebx, eax
movzx eax, cl
shl ebx, 8
or ebx, eax
jmp 0x4a66c1
mov ecx, 0xc
mov dword [esp + 0x6c], 0x8c280e
mov ebp, 2
jmp 0x4a66b2
movzx ecx, word [esp + 0x18a]
mov edi, dword [esp + 0x18c]
mov esi, dword [esp + 0x190]
mov ebp, dword [esp + 0x194]
mov al, 0xa
mov dword [esp + 8], eax
mov al, ch
mov dword [esp + 0x50], ecx
jmp 0x4a67c6
mov ecx, 2
jmp 0x4a66b2
lea ecx, [esp + 0x188]
call fcn.00447990
mov al, 9
mov dword [esp + 8], eax
mov al, 0x41
mov dword [esp + 0x10], eax
movzx eax, byte [esp + 0x1f]
mov dword [esp + 0x50], eax
movzx eax, byte [esp + 0x67]
mov edi, dword [esp + 0x134]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x15c]
jmp 0x4a67c6
mov ecx, 0xf
mov ebp, 0x17
mov dword [esp + 0x6c], 0x8c27f7
mov ebx, dword [esp + 0x114]
and ebx, 0xffffff00
or ebx, ecx
mov edi, dword [esp + 4]
mov esi, ebx
movzx eax, cl
lea edx, [esp + 0x94]
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x114], ebx
mov dword [esp + 0x98], 0x100001
and esi, 0xffffff00
or esi, eax
xor eax, eax
cmp byte [edi + 0x31], 2
mov ecx, edi
sete al
push eax
call fcn.00459840
add esp, 4
mov al, 3
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x80]
mov byte [edi + 0x251], 1
mov dword [esp + 0x84], ebp
mov dword [esp + 8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x50], eax
mov dword [esp + 0x68], eax
jmp 0x4a6802
movzx eax, word [esp + 0x18a]
mov edi, dword [esp + 0x18c]
mov esi, dword [esp + 0x194]
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x100001
mov ecx, ebp
lea edx, [esp + 0x94]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x190]
mov dword [esp + 0x80], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
sete al
push eax
call fcn.00459840
add esp, 4
mov al, 0xa
mov byte [ebp + 0x251], 1
mov ebp, esi
mov esi, dword [esp + 0x80]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x50]
mov al, ah
mov ebx, dword [esp + 0x50]
mov byte [esp + 0x67], al
movzx eax, al
shl eax, 8
movzx ecx, bl
or ecx, eax
mov dword [esp + 0x68], ecx
lea ecx, [esp + 0x318]
call fcn.004aabf0
mov byte [esp + 0x1f], bl
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x50], esi
mov edx, esi
mov esi, edi
mov ecx, edi
mov dword [esp + 0x15c], ebp
mov edi, ebp
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov byte [esp + 0x1e], bl
lea ebx, [esp + 0x94]
mov eax, dword [eax]
test eax, eax
je 0x4a6841
push dword [esp + 0x28]
mov dword [esp + 0x14], esi
mov esi, edi
mov ebx, ecx
mov edi, edx
call eax
mov edx, edi
mov edi, esi
mov esi, dword [esp + 0x14]
mov ecx, ebx
lea ebx, [esp + 0x98]
add esp, 4
mov eax, dword [esp + 0x40]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x80], edx
cmp dword [eax + 4], 0
je 0x4a6882
cmp dword [eax + 8], 9
jae 0x4a6865
mov eax, dword [esp + 0x28]
jmp 0x4a686c
mov eax, dword [esp + 0x28]
mov eax, dword [eax - 4]
push eax
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
lea ebx, [esp + 0x94]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x50]
mov byte [esp + 0x218], cl
movzx ecx, byte [esp + 0x1e]
mov byte [esp + 0x219], cl
mov word [esp + 0x21a], ax
mov dword [esp + 0x21c], esi
mov dword [esp + 0x220], edx
mov ecx, ebx
lea edx, [esp + 0x218]
mov dword [esp + 0x224], edi
call fcn.004a8640
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x4a690d
mov edi, dword [ebp + 0x278]
mov esi, dword [ebp + 0x274]
mov eax, dword [edi]
test eax, eax
je 0x4a68ed
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x4a6916
cmp dword [edi + 8], 9
jb 0x4a68fc
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4a6916
push eax
call fcn.004a8dd0
add esp, 4
movsd xmm0, qword [esp + 0x94]
mov eax, dword [esp + 0x7c]
movsd xmm1, qword [esp + 0x9c]
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x150]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
call fcn.00447650
movq xmm0, qword [esp + 0x218]
movq xmm1, qword [esp + 0x220]
movq qword [esp + 0x180], xmm1
movq qword [esp + 0x178], xmm0
cmp byte [esp + 0x178], 0x16
je 0x4a5dc2
jmp 0x4a6a69
mov eax, dword [esp + 0x20]
mov word [esp + 0x124], 0x3e09
jmp 0x4a5be4
movzx ecx, byte [esp + 0x97]
mov edx, dword [esp + 0x60]
movzx edi, word [esp + 0x95]
mov esi, dword [esp + 0x98]
mov byte [edx + 7], cl
mov word [edx + 5], di
mov byte [edx + 4], al
mov eax, 1
mov dword [edx + 8], esi
mov dword [edx], eax
jmp 0x4a6b6e
mov ecx, dword [esp + 0x3cc]
mov eax, dword [ecx + 4]
push dword [ecx]
lea ecx, [esp + 0x98]
push ecx
call dword [eax + 0x38]
add esp, 8
cmp byte [esp + 0x94], 4
jne 0x4a6a01
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x118]
mov dword [ecx + 4], eax
xor eax, eax
mov dword [ecx + 8], esi
mov dword [ecx], eax
jmp 0x4a6b6e
movsd xmm0, qword [esp + 0x94]
mov ecx, dword [esp + 0x60]
mov eax, 1
movsd qword [ecx + 4], xmm0
mov dword [ecx], eax
jmp 0x4a6b6e
mov eax, dword [esp + 0x318]
mov ecx, dword [esp + 0x31c]
jmp 0x4a6a54
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x88]
jmp 0x4a6b62
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x60]
mov dword [edx + 8], ecx
mov dword [edx + 4], eax
mov dword [edx], 1
jmp 0x4a6b6e
mov eax, dword [esp + 0x3cc]
mov edx, dword [esp + 0x174]
lea ecx, [esp + 0x188]
mov esi, dword [eax + 4]
mov edi, dword [eax]
push esi
push edi
call fcn.0045af30
add esp, 8
push edi
lea eax, [esp + 0x98]
push eax
call dword [esi + 0x38]
add esp, 8
mov esi, dword [esp + 0x60]
lea edx, [esp + 0x178]
lea ecx, [esi + 4]
call fcn.004ab5d0
cmp byte [esp + 0x94], 3
mov dword [esi], 1
jne 0x4a6b04
mov esi, dword [esp + 0x98]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x4a6ad7
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x4a6af5
cmp dword [ebx + 8], 9
jb 0x4a6ae6
mov edi, dword [edi - 4]
push edi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp byte [esp + 0x188], 3
jne 0x4a6b6e
mov esi, dword [esp + 0x18c]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x4a6b26
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x4a6b44
cmp dword [ebx + 8], 9
jb 0x4a6b35
mov edi, dword [edi - 4]
push edi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
push esi
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4a6b6e
mov edx, eax
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x118]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax], 0
add esp, 0x3b8
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x60]
mov word [eax + 4], 0x2501
mov dword [eax], 1
jmp 0x4a6b6e
ud2