Function at 0x4f3e81
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
lea eax, [ebp - 8]
sub esp, 0x154
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xa4], esp
mov dword [ebp - 0xb4], 0x953ef0
mov dword [ebp - 0xb0], 0x95d800
mov dword [ebp - 0xa8], 0x4e1c69
mov dword [esp], eax
call fcn.0085e721
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x38]
mov eax, dword [eax + 0x2c]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
mov dword [esp], eax
mov dword [ebp - 0xc8], 0xffffffff
call fcn.00486b71
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], 0
mov edx, dword [ebp + 8]
sub esp, 0xc
mov ebx, dword [ebx + 0x20]
mov dword [edx + 0x20], eax
test ebx, ebx
je 0x4f3f62
mov ecx, ebx
mov dword [ebp - 0xd0], ebx
call fcn.004de691
mov dword [esp + 4], 0x48
mov ebx, dword [ebp - 0xd0]
mov dword [esp], ebx
call fcn.009676d1
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4f3f62
mov ecx, eax
mov dword [ebp - 0xd0], eax
call fcn.004de691
mov dword [esp + 4], 0x48
mov eax, dword [ebp - 0xd0]
mov dword [esp], eax
call fcn.009676d1
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xd8]
mov edx, dword [eax]
lea eax, [ecx + 8]
mov dword [ecx], eax
mov dword [ebp - 0xf4], eax
mov eax, dword [edx + 0xf4]
mov byte [esp + 8], 0
mov ebx, dword [edx + 0xf8]
mov dword [esp], eax
add ebx, eax
mov dword [esp + 4], ebx
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0xd8], ecx
call fcn.009303b1
mov eax, dword [ebp - 0xd8]
sub esp, 0xc
mov edx, dword [eax + 4]
mov dword [ebp - 0xd4], edx
add edx, 1
mov dword [ebp - 0xd0], edx
mov edx, eax
mov eax, dword [eax]
cmp dword [ebp - 0xf4], eax
je 0x4f5cd1
mov edx, dword [edx + 8]
cmp dword [ebp - 0xd0], edx
ja 0x4f43e9
mov ebx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd0]
mov byte [eax + ebx], 0x20
mov eax, dword [ebp - 0xd8]
mov dword [eax + 4], edx
mov eax, dword [eax]
mov byte [eax + ebx + 1], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x18]
test eax, eax
je 0x4f5aa1
mov dword [esp], 0x98100c
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
call fcn.0088b2e1
sub esp, 4
test eax, eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc4]
mov edx, dword [eax + 0xc8]
jne 0x4f41f9
mov eax, dword [eax + 0x7c]
test eax, eax
jne 0x4f41f9
mov eax, dword [ebp + 8]
mov ebx, dword [eax + 0x20]
test ebx, ebx
je 0x4f41f9
lea eax, [ebp - 0x68]
lea ebx, [ebp - 0x60]
add edx, ecx
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0x68], ebx
mov dword [esp], ecx
mov ecx, eax
mov byte [esp + 8], 0
mov dword [esp + 4], edx
mov dword [ebp - 0xc8], 1
call fcn.009303b1
sub esp, 0xc
cmp dword [ebp - 0x64], 5
ja 0x4f40b9
mov dword [esp + 8], 0x9a
mov dword [esp + 4], 0x980f14
mov dword [esp], 0x981010
mov dword [ebp - 0xc8], 2
call dword [fcn.00a3383c]
mov eax, dword [ebp + 8]
lea ebx, [ebp - 0x50]
mov dword [ebp - 0xe8], ebx
mov eax, dword [eax + 0x20]
mov dword [ebp - 0xd0], eax
add eax, 0x18
mov dword [esp + 4], eax
mov dword [esp], ebx
mov dword [ebp - 0xc8], 2
call fcn.00474341
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x4c]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 3
call fcn.00930641
lea ebx, [ebp - 0x30]
lea ecx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x38], ebx
mov edx, dword [eax]
mov dword [ebp - 0xf0], ebx
cmp edx, ecx
je 0x4f60d9
mov dword [ebp - 0x38], edx
mov edx, dword [eax + 8]
mov dword [ebp - 0x30], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x34], edx
mov dword [eax], ecx
mov byte [eax + 8], 0
mov edx, dword [ebp - 0x38]
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x34]
cmp eax, 5
jbe 0x4f6152
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov dword [esp], 6
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xc8], 4
call fcn.0092fd21
mov eax, dword [ebp - 0x38]
sub esp, 0x10
cmp eax, dword [ebp - 0xf0]
je 0x4f41a6
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x48]
cmp eax, edx
je 0x4f41b8
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 2
call fcn.00931e71
mov eax, dword [ebp - 0x68]
sub esp, 8
cmp eax, dword [ebp - 0xe4]
je 0x4f4218
mov dword [esp], eax
call fcn.009676c1
jmp 0x4f4218
mov dword [esp + 4], edx
mov dword [esp], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 1
call fcn.00931e71
sub esp, 8
mov ebx, dword [ebp - 0xd8]
mov eax, 0x3fffffff
sub eax, dword [ebx + 4]
cmp eax, 0xa
jbe 0x4f61be
mov dword [esp + 4], 0xb
mov dword [esp], 0x98106f
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 1
call fcn.00931e71
mov dword [ebp - 0x98], 0
sub esp, 8
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov dword [esp], 0x3c0
mov dword [ebp - 0xc8], 5
call fcn.00967791
mov dword [ebp - 0xf8], eax
mov ebx, eax
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edx
je 0x4f4437
sub eax, 0x30
lea ecx, [edx + 8]
mov dword [ebp - 0xd4], ebx
sub eax, edx
mov dword [ebp - 0xd0], ecx
shr eax, 4
imul eax, eax, 0xaaaaaab
lea eax, [eax + eax*2]
shl eax, 4
lea eax, [edx + eax + 0x38]
mov dword [ebp - 0xdc], eax
jmp 0x4f4381
mov edx, dword [ebp - 0xd4]
mov dword [edx], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [edx + 8], eax
mov edx, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [edx - 4]
mov dword [ecx + 4], eax
mov eax, edx
mov dword [edx - 8], edx
mov byte [edx], 0
mov dword [edx - 4], 0
lea edx, [ecx + 0x20]
mov dword [ecx + 0x18], edx
mov ecx, eax
mov eax, dword [eax + 0x10]
add ecx, 0x18
cmp eax, ecx
je 0x4f43c1
mov ecx, dword [ebp - 0xd4]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x20], eax
mov edx, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [edx + 0x14]
mov dword [ecx + 0x1c], eax
mov eax, dword [edx - 8]
cmp eax, edx
je 0x4f4361
mov dword [esp], eax
call fcn.009676c1
add dword [ebp - 0xd0], 0x30
mov eax, dword [ebp - 0xd0]
add dword [ebp - 0xd4], 0x30
cmp dword [ebp - 0xdc], eax
je 0x4f4431
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xd0]
lea edx, [eax + 8]
mov dword [eax], edx
mov eax, dword [ecx - 8]
cmp eax, ecx
jne 0x4f42e1
mov eax, dword [ecx]
mov ebx, ecx
mov ecx, dword [ebp - 0xd4]
mov dword [ecx + 8], eax
mov eax, dword [ebx + 4]
mov dword [edx + 4], eax
mov eax, dword [ebx + 8]
mov dword [edx + 8], eax
mov eax, dword [ebx + 0xc]
mov dword [edx + 0xc], eax
jmp 0x4f42f4
mov ecx, dword [eax]
mov ebx, dword [ebp - 0xd4]
mov dword [ebx + 0x20], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
jmp 0x4f4340
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0xd4]
mov dword [esp], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 1
call fcn.00932051
mov eax, dword [ebp - 0xd8]
sub esp, 0x10
mov eax, dword [eax]
jmp 0x4f3fe1
mov edx, dword [ebp - 0x98]
test edx, edx
je 0x4f4443
mov dword [esp], edx
call fcn.009676c1
mov ecx, dword [ebp - 0xf8]
lea edx, [ecx + 8]
lea eax, [ecx + 0x3c0]
mov byte [ecx + 0x12], 0x3a
mov dword [ecx], edx
mov dword [ebp - 0x90], eax
mov eax, ecx
mov dword [ebp - 0xfc], edx
mov edx, 0x746e
lea eax, [eax + 0x20]
mov word [ecx + 0x10], dx
mov edx, ecx
mov dword [ecx + 8], 0x72657355
mov dword [ecx + 0xc], 0x6567412d
mov dword [ecx + 4], 0xb
mov byte [ecx + 0x13], 0
mov dword [edx + 0x18], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x98], ecx
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x94], ecx
lea ecx, [ecx + 0x18]
mov byte [esp + 8], 0
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x48]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
mov dword [ebp - 0xc8], 0x18
call fcn.009303b1
lea eax, [ebp - 0x78]
add dword [ebp - 0x94], 0x30
sub esp, 0xc
mov dword [ebp - 0x80], eax
mov eax, 0x2f2a
mov word [ebp - 0x78], ax
mov eax, dword [ebp + 8]
mov byte [ebp - 0x76], 0x2a
cmp byte [eax + 0x75], 0
mov dword [ebp - 0x7c], 3
mov byte [ebp - 0x75], 0
je 0x4f4611
mov dword [ebp - 0xc8], 6
call fcn.0051dbe1
mov dword [ebp - 0xd0], eax
mov eax, dword [eax]
test eax, eax
jne 0x4f459f
jmp 0x4f4611
mov edx, dword [ebp - 0xd4]
mov byte [eax + edx], 0x2c
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x80]
mov byte [eax + edx + 1], 0
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov dword [esp], eax
call fcn.0086e921
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x7c]
cmp eax, edx
ja 0x4f6102
lea edx, [ebp - 0x80]
mov dword [ebp - 0xdc], edx
mov ecx, edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xd4]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.00931e71
add dword [ebp - 0xd0], 4
mov eax, dword [ebp - 0xd0]
sub esp, 8
mov eax, dword [eax]
test eax, eax
je 0x4f461a
mov eax, dword [ebp - 0x7c]
lea edx, [ebp - 0x78]
lea ecx, [eax + 1]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xdc], ecx
cmp eax, edx
mov edx, 0xf
cmovne edx, dword [ebp - 0x78]
cmp ecx, edx
jbe 0x4f4521
mov dword [esp + 0xc], 1
lea ecx, [ebp - 0x80]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0xd4]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.00932051
mov eax, dword [ebp - 0x80]
sub esp, 0x10
jmp 0x4f4521
lea eax, [ebp - 0x80]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [esp], 0x98107b
lea ecx, [ebp - 0x98]
mov dword [esp + 4], eax
mov dword [ebp - 0xc8], 6
call fcn.009281c1
mov eax, dword [ebp + 8]
sub esp, 8
cmp byte [eax + 0x74], 0
je 0x4f4670
lea eax, [ebp - 0x30]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 8]
mov byte [ebp - 0x30], 0
cmp byte [eax + 0x77], 0
jne 0x4f5b71
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x68]
mov dword [ebp - 0xe0], edx
mov ecx, edx
mov eax, dword [eax]
movzx ebx, word [eax + 0xa8]
mov word [ebp - 0xd0], bx
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.004352d1
sub esp, 4
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xe8], ecx
mov byte [esp + 8], 0
mov edx, dword [ebp - 0x64]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
mov dword [ebp - 0xc8], 8
call fcn.009303b1
movzx ebx, word [ebp - 0xd0]
sub esp, 0xc
cmp bx, 0x50
je 0x4f47a1
cmp bx, 0x1bb
je 0x4f47a1
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x50]
lea ebx, [eax + 1]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x48]
cmp edx, eax
mov eax, 0xf
cmovne eax, dword [ebp - 0x48]
mov dword [ebp - 0xdc], ebx
cmp ebx, eax
ja 0x4f5e61
mov ebx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xdc]
mov byte [edx + ebx], 0x3a
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x50]
mov byte [eax + ebx + 1], 0
mov dword [esp + 8], 0
movzx eax, word [ebp - 0xd0]
mov dword [esp + 4], eax
lea eax, [ebp - 0x38]
mov dword [esp], eax
mov dword [ebp - 0xc8], 0x1a
call fcn.0087ab31
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0x1b
call fcn.00931e71
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x30]
sub esp, 8
cmp eax, edx
je 0x4f47a1
mov dword [esp], eax
call fcn.009676c1
lea esi, [esi]
nop
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x90]
je 0x4f5b11
lea edx, [eax + 8]
mov dword [eax + 8], 0x74736f48
lea ebx, [ebp - 0x48]
mov dword [eax], edx
lea edx, [eax + 0x20]
mov byte [eax + 0xc], 0x3a
mov byte [eax + 0xd], 0
mov dword [eax + 0x18], edx
mov edx, dword [ebp - 0x50]
mov dword [eax + 4], 5
cmp edx, ebx
je 0x4f5e09
mov dword [eax + 0x18], edx
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x20], edx
mov edx, dword [ebp - 0x4c]
add dword [ebp - 0x94], 0x30
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 0x68]
lea ebx, [ebp - 0x60]
mov dword [ebp - 0xe4], ebx
cmp eax, ebx
je 0x4f4810
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp + 8]
cmp byte [eax + 0x76], 0
jne 0x4f56b1
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp byte [eax + 0x144], 0
je 0x4f5001
cmp byte [eax + 0x145], 0
jne 0x4f4849
cmp byte [eax + 0x146], 0
je 0x4f5001
lea esi, [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x4f4ba8
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0xc8], 6
call eax
mov ecx, eax
xor eax, eax
cmp eax, ecx
sbb eax, edx
jge 0x4f4ba8
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp byte [eax + 0x144], 0
je 0x4f50f1
cmp byte [eax + 0x146], 0
je 0x4f50f1
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x65747962
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x50], eax
mov eax, 0x3d73
mov word [ebp - 0x44], ax
mov dword [ebp - 0x4c], 6
mov byte [ebp - 0x42], 0
mov dword [ebp - 0xc8], 0xa
call fcn.004f2b71
lea ebx, [ebp - 0x30]
mov dword [ebp - 0xd4], edx
or edx, eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x30], 0
je 0x4f5dc9
mov dword [ebp - 0xdc], 0
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
nop
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0085d5b1
mov ecx, dword [ebp - 0xdc]
mov ebx, edx
mov edx, eax
mov eax, ebx
lea ebx, [ecx + 1]
mov dword [ebp - 0xdc], ebx
mov ebx, eax
or ebx, edx
jne 0x4f4911
mov dword [ebp - 0xec], ecx
lea ecx, [ebp - 0x38]
mov dword [esp + 4], 0
mov eax, dword [ebp - 0xdc]
mov dword [esp], eax
mov dword [ebp - 0xc8], 0x1c
call fcn.00931321
sub esp, 8
lea esi, [esi]
nop
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0xdc], ebx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0
mov eax, dword [ebp - 0xd0]
mov dword [esp], eax
mov edx, dword [ebp - 0xd4]
mov dword [esp + 4], edx
call fcn.0085d701
mov ecx, dword [ebp - 0xec]
mov ebx, dword [ebp - 0xdc]
add eax, 0x30
mov byte [ebx + ecx], al
sub ecx, 1
mov dword [ebp - 0xec], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0
mov eax, dword [ebp - 0xd0]
mov dword [esp], eax
mov edx, dword [ebp - 0xd4]
mov dword [esp + 4], edx
call fcn.0085d5b1
mov ecx, eax
mov eax, edx
mov dword [ebp - 0xd4], edx
or eax, ecx
mov dword [ebp - 0xd0], ecx
jne 0x4f4979
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0xb
call fcn.00931e71
mov eax, dword [ebp - 0x38]
sub esp, 8
cmp eax, dword [ebp - 0xf0]
je 0x4f4a3d
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x50]
lea ebx, [eax + 1]
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x48]
cmp edx, eax
mov eax, 0xf
cmovne eax, dword [ebp - 0x48]
mov dword [ebp - 0xd4], ebx
cmp ebx, eax
ja 0x4f5d81
mov ebx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xd4]
mov byte [edx + ebx], 0x2d
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x50]
mov byte [eax + ebx + 1], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp byte [eax + 0x144], 0
jne 0x4f5c81
mov dword [ebp - 0xc8], 0xa
mov ecx, dword [ebp + 8]
call fcn.004f2bb1
mov ecx, eax
xor eax, eax
cmp eax, ecx
sbb eax, edx
jge 0x4f4b20
mov dword [ebp - 0xc8], 0xa
mov ecx, dword [ebp + 8]
call fcn.004f2bb1
mov dword [esp + 4], eax
lea eax, [ebp - 0x38]
mov dword [esp + 0xc], 0
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [ebp - 0xc8], 0xa
call fcn.0046d571
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0xc
call fcn.00931e71
mov eax, dword [ebp - 0x38]
sub esp, 8
cmp eax, dword [ebp - 0xf0]
je 0x4f4b20
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x10c], eax
cmp eax, dword [ebp - 0x90]
je 0x4f5e29
lea ebx, [eax + 8]
mov dword [eax + 8], 0x676e6152
lea ecx, [eax + 0x18]
mov dword [eax], ebx
mov dword [ebp - 0x118], ebx
mov ebx, 0x3a65
mov word [eax + 0xc], bx
mov ebx, eax
lea eax, [eax + 0x20]
mov dword [eax - 0x1c], 6
mov byte [eax - 0x12], 0
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x50]
mov byte [esp + 8], 0
mov edx, dword [ebp - 0x4c]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
mov dword [ebp - 0xc8], 0x1d
call fcn.009303b1
add dword [ebp - 0x94], 0x30
sub esp, 0xc
mov eax, dword [ebp - 0x50]
lea ebx, [ebp - 0x48]
cmp eax, ebx
je 0x4f4ba8
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x18]
test eax, eax
je 0x4f4c56
mov ebx, dword [ebp + 8]
mov edx, dword [ebx]
cmp byte [edx + 0x144], 0
je 0x4f4c4b
cmp byte [edx + 0x145], 0
je 0x4f5069
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x90]
je 0x4f6071
lea edx, [eax + 8]
mov dword [eax + 8], 0x6e6e6f43
mov ecx, 0x6576
mov dword [eax], edx
mov edx, 0x6e6f
mov dword [eax + 0xc], 0x69746365
mov word [eax + 0x10], dx
lea edx, [eax + 0x20]
mov dword [eax + 4], 0xb
mov dword [eax + 0x20], 0x7065654b
mov dword [eax + 0x24], 0x696c412d
add dword [ebp - 0x94], 0x30
mov byte [eax + 0x12], 0x3a
mov byte [eax + 0x13], 0
mov dword [eax + 0x18], edx
mov word [eax + 0x28], cx
mov dword [eax + 0x1c], 0xa
mov byte [eax + 0x2a], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x18]
test eax, eax
je 0x4f4c56
mov eax, dword [eax + 0x7c]
test eax, eax
jne 0x4f5081
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x20]
test eax, eax
je 0x4f4da6
mov dword [esp], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xc8], 6
call fcn.004de6d1
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 0x64]
sub esp, 4
mov ebx, 0x2063
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x48], 0x69736142
mov word [ebp - 0x44], bx
add edx, eax
mov dword [ebp - 0x4c], 6
mov byte [ebp - 0x42], 0
mov dword [esp + 4], eax
lea eax, [ebp - 0x38]
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [ebp - 0xc8], 0xe
call fcn.0087c101
mov eax, dword [ebp - 0x34]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0xf
call fcn.00931e71
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x30]
sub esp, 8
cmp eax, edx
je 0x4f4cfc
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x104], eax
mov edx, eax
cmp eax, dword [ebp - 0x90]
je 0x4f5d41
lea ebx, [eax + 8]
mov ecx, 0x3a6e
mov dword [eax + 8], 0x68747541
mov word [eax + 0x14], cx
lea ecx, [eax + 0x18]
lea eax, [eax + 0x20]
mov dword [eax - 0x14], 0x7a69726f
mov dword [eax - 0x10], 0x6f697461
mov dword [eax - 0x1c], 0xe
mov byte [eax - 0xa], 0
mov dword [eax - 0x20], ebx
mov dword [ebp - 0x114], ebx
mov dword [edx + 0x18], eax
mov eax, dword [ebp - 0x50]
mov byte [esp + 8], 0
mov edx, dword [ebp - 0x4c]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
mov dword [ebp - 0xc8], 0x1e
call fcn.009303b1
add dword [ebp - 0x94], 0x30
sub esp, 0xc
mov eax, dword [ebp - 0x50]
lea ebx, [ebp - 0x48]
cmp eax, ebx
je 0x4f4d93
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xe4]
je 0x4f4da6
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov edx, dword [eax + 0xe0]
test edx, edx
jne 0x4f5a21
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x4f5173
mov eax, dword [ebp - 0xe4]
mov byte [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 8]
mov edx, dword [eax]
lea eax, [ebp - 0x48]
mov dword [ebp - 0x50], eax
mov eax, dword [edx + 0x30]
mov byte [esp + 8], 0
mov ebx, dword [edx + 0x34]
mov dword [esp], eax
add ebx, eax
mov dword [esp + 4], ebx
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0x10
call fcn.009303b1
mov ebx, dword [ebp + 8]
sub esp, 0xc
mov eax, dword [ebx]
mov edx, dword [eax + 0x4c]
mov dword [esp + 4], edx
mov eax, dword [eax + 0x48]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0x11
call fcn.00931e71
mov ebx, dword [ebp + 8]
sub esp, 8
mov ebx, dword [ebx + 0x24]
mov dword [ebp - 0xd0], ebx
mov dword [esp], 0x981104
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
call fcn.0088b2e1
lea edx, [ebp - 0x38]
sub esp, 4
test eax, eax
mov ecx, edx
sete al
movzx eax, al
mov dword [ebp - 0xd4], eax
call fcn.00466891
mov edx, dword [ebp - 0xd4]
mov dword [esp + 0x10], edx
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov dword [esp + 8], 0x3b9aca00
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0085d5b1
lea ecx, [ebp - 0x8c]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xe8]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
add eax, 0x18
mov dword [esp + 4], eax
mov ebx, dword [ebp - 0xd0]
mov dword [esp], ebx
call fcn.004975b1
mov eax, dword [ebp - 0x88]
mov ebx, dword [ebp - 0x8c]
sub esp, 0x14
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xd0], ebx
cmp eax, ebx
jne 0x4f4f35
jmp 0x4f5131
mov edx, dword [ebp - 0xd4]
add dword [ebp - 0xd0], 4
mov byte [eax + edx], 0x3b
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x68]
mov byte [eax + edx + 1], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xec], eax
je 0x4f5131
mov eax, dword [ebp - 0xd0]
lea ecx, [ebp - 0x38]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [ebp - 0xc8], 0x13
call fcn.004dffe1
mov eax, dword [ebp - 0x34]
sub esp, 4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xc8], 0x12
call fcn.00931e71
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x30]
sub esp, 8
cmp eax, ecx
je 0x4f4f8c
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x64]
mov edx, 0xf
lea ecx, [eax + 1]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xe4]
cmovne edx, dword [ebp - 0x60]
mov dword [ebp - 0xdc], ecx
cmp ecx, edx
jbe 0x4f4f01
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0xd4]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xc8], 0x13
call fcn.00932051
mov eax, dword [ebp - 0x68]
sub esp, 0x10
jmp 0x4f4f01
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x90]
je 0x4f5d11
lea edx, [eax + 8]
mov dword [eax + 8], 0x6e6e6f43
mov dword [eax], edx
mov edx, 0x6e6f
mov word [eax + 0x10], dx
lea edx, [eax + 0x20]
mov dword [eax + 0xc], 0x69746365
mov dword [eax + 4], 0xb
mov dword [eax + 0x20], 0x736f6c63
mov byte [eax + 0x24], 0x65
mov byte [eax + 0x12], 0x3a
add dword [ebp - 0x94], 0x30
mov byte [eax + 0x13], 0
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], 5
mov byte [eax + 0x25], 0
jmp 0x4f4849
cmp byte [edx + 0x146], 0
jne 0x4f4bd5
mov eax, dword [eax + 0x7c]
test eax, eax
je 0x4f4c56
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x38]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.004f3481
sub esp, 4
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0x98]
mov dword [esp], eax
mov dword [ebp - 0xc8], 0xd
call fcn.00928371
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
sub esp, 4
cmp eax, edx
je 0x4f50cc
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x30]
cmp eax, edx
je 0x4f4c56
mov dword [esp], eax
call fcn.009676c1
jmp 0x4f4c56
mov dword [ebp - 0xc8], 6
mov ecx, dword [ebp + 8]
call fcn.004f2b71
mov ecx, eax
xor eax, eax
cmp eax, ecx
sbb eax, edx
jl 0x4f4895
mov ecx, dword [ebp + 8]
call fcn.004f2bb1
mov ecx, eax
xor eax, eax
cmp eax, ecx
sbb eax, edx
jl 0x4f4895
jmp 0x4f4ba8
mov eax, dword [ebp - 0x64]
test eax, eax
jne 0x4f5ce1
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x4f514e
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x50]
lea ebx, [ebp - 0x48]
cmp eax, ebx
je 0x4f5160
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xe4]
je 0x4f5173
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp + 8]
mov ebx, dword [eax + 0x60]
test ebx, ebx
jne 0x4f5949
mov eax, dword [ebp + 8]
cmp byte [eax + 0x78], 0
je 0x4f5781
mov edx, dword [ebp + 8]
mov ebx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x98]
mov edx, dword [edx + 0x3c]
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe0], edx
cmp ebx, eax
je 0x4f52f0
mov dword [ebp - 0xd4], eax
lea esi, [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x38]
mov eax, dword [ebp - 0xe0]
sub eax, ecx
mov dword [ebp - 0xd0], ecx
sar eax, 3
imul eax, eax, 0xaaaaaaab
mov edx, eax
sar edx, 2
test edx, edx
jle 0x4f5496
lea eax, [edx + edx*2]
shl eax, 5
add eax, ecx
mov dword [ebp - 0xe4], eax
jmp 0x4f5295
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0xdc], eax
add eax, 0x18
mov dword [ebp - 0xd0], eax
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004705f1
test al, al
jne 0x4f52bf
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xd4]
lea edx, [eax + 0x30]
mov dword [ebp - 0xd0], edx
mov dword [esp + 4], ecx
mov dword [esp], edx
call fcn.004705f1
test al, al
jne 0x4f52bf
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xd4]
lea edx, [eax + 0x48]
mov dword [ebp - 0xd0], edx
mov dword [esp + 4], ecx
mov dword [esp], edx
call fcn.004705f1
test al, al
jne 0x4f52bf
mov eax, dword [ebp - 0xdc]
add eax, 0x60
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xe4], eax
je 0x4f5481
mov eax, dword [ebp - 0xd4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xd0]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.004705f1
test al, al
je 0x4f5201
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0xe0], eax
cmp eax, dword [ebp - 0xd0]
je 0x4f54c9
add dword [ebp - 0xd4], 0x30
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0xe8], eax
jne 0x4f51c1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xe0], eax
je 0x4f538e
lea esi, [esi]
nop
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ecx + 4]
mov dword [esp + 4], eax
mov eax, dword [ecx]
mov dword [esp], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 6
call fcn.00931e71
mov ecx, dword [ebp - 0xd8]
mov eax, 0x3fffffff
sub esp, 8
sub eax, dword [ecx + 4]
cmp eax, 1
jbe 0x4f60f6
mov dword [esp + 4], 2
mov dword [esp], 0x980fee
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 6
call fcn.00931e71
add dword [ebp - 0xd0], 0x18
sub esp, 8
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xe0], eax
jne 0x4f5311
mov ebx, dword [ebp - 0xd8]
mov eax, 0x3fffffff
sub eax, dword [ebx + 4]
cmp eax, 1
jbe 0x4f61d4
mov dword [esp + 4], 2
mov dword [esp], 0x980fee
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 6
call fcn.00931e71
mov eax, dword [ebp - 0x80]
lea ebx, [ebp - 0x78]
sub esp, 8
cmp eax, ebx
je 0x4f53de
mov dword [esp], eax
call fcn.009676c1
mov eax, dword [ebp - 0x94]
mov ebx, dword [ebp - 0x98]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], ebx
cmp eax, ebx
je 0x4f5451
lea esi, [esi]
mov edx, dword [ebp - 0xd0]
mov eax, dword [edx + 0x18]
add edx, 0x20
cmp eax, edx
je 0x4f5419
mov dword [esp], eax
call fcn.009676c1
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ecx]
lea edx, [ecx + 8]
cmp eax, edx
je 0x4f5430
mov dword [esp], eax
call fcn.009676c1
add dword [ebp - 0xd0], 0x30
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xd4], eax
jne 0x4f5401
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x4f5463
mov dword [esp], eax
call fcn.009676c1
lea eax, [ebp - 0xcc]
mov dword [esp], eax
call fcn.0085e7b1
mov eax, dword [ebp - 0xd8]
mov ebx, dword [ebp - 4]
leave
ret 4
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0xd0]
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp eax, 2
je 0x4f55fa
cmp eax, 3
je 0x4f55c9
cmp eax, 1
je 0x4f562b
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xd0], eax
jmp 0x4f52bf
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ecx + 4]
mov dword [esp + 4], eax
mov eax, dword [ecx]
mov dword [esp], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 6
call fcn.00931e71
mov edx, dword [ebp - 0xd8]
sub esp, 8
mov ecx, dword [edx + 4]
mov eax, dword [edx]
lea ebx, [ecx + 1]
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xd0], ebx
cmp dword [ebp - 0xf4], eax
je 0x4f5b61
mov edx, dword [edx + 8]
cmp dword [ebp - 0xd0], edx
ja 0x4f5661
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xd8]
mov byte [eax + ecx], 0x20
mov eax, dword [ebp - 0xd0]
mov dword [edx + 4], eax
mov eax, dword [edx]
mov byte [eax + ecx + 1], 0
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ecx + 0x1c]
mov dword [esp + 4], eax
mov eax, dword [ecx + 0x18]
mov ecx, edx
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
mov dword [ebp - 0xd8], edx
call fcn.00931e71
mov edx, dword [ebp - 0xd8]
mov eax, 0x3fffffff
sub esp, 8
sub eax, dword [edx + 4]
cmp eax, 1
jbe 0x4f6118
mov dword [esp + 4], 2
mov dword [esp], 0x980fee
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 6
call fcn.00931e71
mov eax, dword [ebp + 8]
sub esp, 8
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0xe0], eax
jmp 0x4f52d7
mov eax, dword [ebp - 0xd4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xd0]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.004705f1
test al, al
jne 0x4f52bf
add dword [ebp - 0xd0], 0x18
mov eax, dword [ebp - 0xd4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xd0]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.004705f1
test al, al
jne 0x4f52bf
add dword [ebp - 0xd0], 0x18
mov eax, dword [ebp - 0xd4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xd0]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.004705f1
test al, al
jne 0x4f52bf
jmp 0x4f54b1
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0xdc]
mov dword [esp], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 6
call fcn.00932051
mov eax, dword [ebp - 0xd8]
sub esp, 0x10
mov eax, dword [eax]
jmp 0x4f5528
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x90]
je 0x4f6031
lea edx, [eax + 8]
mov ebx, 0x616d
mov byte [eax + 0xe], 0x3a
mov dword [eax], edx
lea edx, [eax + 0x20]
mov dword [eax + 8], 0x67617250
mov word [eax + 0xc], bx
mov dword [eax + 4], 7
mov dword [eax + 0x20], 0x632d6f6e
mov dword [eax + 0x24], 0x65686361
mov byte [eax + 0xf], 0
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], 8
mov byte [eax + 0x28], 0
mov eax, dword [ebp - 0x94]
add eax, 0x30
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x90], eax
je 0x4f5f81
lea edx, [eax + 8]
mov ecx, 0x3a6c
mov dword [eax + 8], 0x68636143
mov dword [eax], edx
lea edx, [eax + 0x20]
mov dword [eax + 0xc], 0x6f432d65
mov dword [eax + 4], 0xe
mov dword [eax + 0x20], 0x632d6f6e
mov dword [eax + 0x24], 0x65686361
mov dword [eax + 0x10], 0x6f72746e
add dword [ebp - 0x94], 0x30
mov word [eax + 0x14], cx
mov byte [eax + 0x16], 0
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], 8
mov byte [eax + 0x28], 0
jmp 0x4f481d
lea eax, [ebp - 0x48]
mov edx, 0x3135
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x48], 0
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], 0x2d616873
mov word [ebp - 0x2c], dx
mov byte [ebp - 0x2a], 0x32
mov dword [ebp - 0x34], 7
mov byte [ebp - 0x29], 0
mov dword [esp], ecx
mov dword [ebp - 0xc8], 0x14
call fcn.004b3cd1
mov byte [ebp - 0xd0], al
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0xf0]
je 0x4f57eb
mov dword [esp], eax
call fcn.009676c1
cmp byte [ebp - 0xd0], 0
je 0x4f582c
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x4c]
cmp eax, 0xc
jbe 0x4f61a8
mov dword [esp + 4], 0xd
mov dword [esp], 0x981125
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0x15
call fcn.00931e71
sub esp, 8
mov eax, dword [ebp - 0xf0]
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x2a], 0x36
mov dword [ebp - 0x30], 0x2d616873
mov dword [ebp - 0x38], eax
mov eax, 0x3532
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x34], 7
mov byte [ebp - 0x29], 0
mov dword [esp], ecx
mov dword [ebp - 0xc8], 0x16
call fcn.004b3cd1
mov byte [ebp - 0xd0], al
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0xf0]
je 0x4f5882
mov dword [esp], eax
call fcn.009676c1
cmp byte [ebp - 0xd0], 0
je 0x4f58c3
mov eax, 0x3fffffff
sub eax, dword [ebp - 0x4c]
cmp eax, 0xc
jbe 0x4f617c
mov dword [esp + 4], 0xd
mov dword [esp], 0x981133
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0x15
call fcn.00931e71
sub esp, 8
mov eax, dword [ebp - 0xf0]
lea edx, [ebp - 0x38]
mov byte [ebp - 0x2c], 0x31
mov dword [ebp - 0x30], 0x2d616873
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 5
mov byte [ebp - 0x2b], 0
mov dword [esp], edx
mov dword [ebp - 0xc8], 0x17
call fcn.004b3cd1
mov byte [ebp - 0xd0], al
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0xf0]
je 0x4f5910
mov dword [esp], eax
call fcn.009676c1
cmp byte [ebp - 0xd0], 0
mov eax, dword [ebp - 0x4c]
jne 0x4f5f41
test eax, eax
jne 0x4f5ea9
mov eax, dword [ebp - 0x50]
lea ebx, [ebp - 0x48]
cmp eax, ebx
je 0x4f518e
mov dword [esp], eax
call fcn.009676c1
jmp 0x4f518e
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x100], eax
cmp eax, dword [ebp - 0x90]
je 0x4f5fb1
lea ebx, [eax + 8]
mov ecx, eax
mov dword [eax], ebx
mov dword [ebp - 0x120], ebx
lea ebx, [ebp - 0x38]
mov dword [ebp - 0x38], 0x12
mov dword [esp + 4], 0
mov dword [esp], ebx
mov dword [ebp - 0xc8], 6
mov dword [ebp - 0x100], eax
call fcn.00931fd1
mov edx, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x100]
mov ecx, 0x3a65
sub esp, 8
mov dword [ebx], eax
mov dword [ebx + 8], edx
mov word [eax + 0x10], cx
lea ecx, [ebx + 0x18]
mov dword [eax], 0x4d2d6649
mov dword [eax + 4], 0x6669646f
mov dword [eax + 8], 0x2d646569
mov dword [eax + 0xc], 0x636e6953
mov eax, dword [ebp - 0x38]
mov edx, dword [ebx]
mov dword [ebx + 4], eax
mov byte [edx + eax], 0
lea eax, [ebx + 0x20]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x5c]
mov byte [esp + 8], 0
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x60]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
mov dword [ebp - 0xc8], 0x20
call fcn.009303b1
add dword [ebp - 0x94], 0x30
sub esp, 0xc
jmp 0x4f5181
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x110], ebx
cmp ebx, dword [ebp - 0x90]
je 0x4f5ff1
lea edx, [ebx + 8]
mov dword [ebx + 8], 0x65666552
lea ecx, [ebx + 0x18]
mov dword [ebx], edx
mov dword [ebp - 0x11c], edx
lea edx, [ebx + 0x20]
mov dword [ebx + 0xc], 0x3a726572
mov byte [ebx + 0x10], 0
mov dword [ebx + 0x18], edx
mov edx, dword [eax + 0xdc]
mov dword [ebx + 4], 8
mov byte [esp + 8], 0
mov ebx, dword [eax + 0xe0]
mov dword [esp], edx
add ebx, edx
mov dword [esp + 4], ebx
mov dword [ebp - 0xc8], 0x1f
call fcn.009303b1
add dword [ebp - 0x94], 0x30
sub esp, 0xc
jmp 0x4f4db9
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov edx, dword [eax + 0x34]
mov dword [esp + 4], edx
mov eax, dword [eax + 0x30]
mov dword [esp], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], 1
call fcn.00931e71
mov eax, dword [ebp + 8]
sub esp, 8
mov eax, dword [eax]
mov edx, dword [eax + 0x4c]
mov dword [esp + 4], edx
mov eax, dword [eax + 0x48]
mov dword [esp], eax
mov ecx, dword [ebp - 0xd8]
call fcn.00931e71
mov eax, dword [ebp + 8]
sub esp, 8
mov eax, dword [eax]
mov edx, dword [eax + 0x64]
mov dword [esp + 4], edx
mov eax, dword [eax + 0x60]
mov dword [esp], eax
mov ecx, dword [ebp - 0xd8]
call fcn.00931e71
jmp 0x4f4215
mov ebx, dword [ebp - 0xe8]
mov dword [esp], eax
lea ecx, [ebp - 0x98]
mov dword [esp + 4], 0x9810a2
mov dword [esp + 8], ebx
mov dword [ebp - 0xc8], 9
call fcn.0092ade1
mov eax, dword [ebp - 0x50]
lea ebx, [ebp - 0x48]
sub esp, 0xc
cmp eax, ebx
je 0x4f47f8
mov dword [esp], eax
call fcn.009676c1
jmp 0x4f47f8
mov edx, 0xf
jmp 0x4f551c
mov dword [esp + 4], 0xd
lea ecx, [ebp - 0x38]
mov dword [esp], 0x981083
mov dword [ebp - 0xc8], 7
call fcn.00931e71
mov eax, dword [ebp - 0x34]
sub esp, 8
test eax, eax
je 0x4f5cc3
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x108], ebx
cmp ebx, dword [ebp - 0x90]
je 0x4f5c93
lea eax, [ebx + 8]
mov ecx, ebx
mov dword [ebx], eax
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0x10
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [ebp - 0xc8], 7
mov dword [ebp - 0x108], ebx
call fcn.00931fd1
mov edx, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x108]
sub esp, 8
mov dword [ebx], eax
lea ecx, [ebx + 0x18]
mov dword [ebx + 8], edx
mov dword [eax], 0x65636341
mov dword [eax + 4], 0x452d7470
mov dword [eax + 8], 0x646f636e
mov dword [eax + 0xc], 0x3a676e69
mov eax, dword [ebp - 0x50]
mov edx, dword [ebx]
mov dword [ebx + 4], eax
mov byte [edx + eax], 0
lea eax, [ebx + 0x20]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x38]
mov byte [esp + 8], 0
mov edx, dword [ebp - 0x34]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
mov dword [ebp - 0xc8], 0x19
call fcn.009303b1
add dword [ebp - 0x94], 0x30
mov eax, dword [ebp - 0x38]
sub esp, 0xc
cmp eax, dword [ebp - 0xf0]
je 0x4f4670
mov dword [esp], eax
call fcn.009676c1
jmp 0x4f4670
cmp byte [eax + 0x146], 0
je 0x4f4a95
jmp 0x4f4ab1
lea eax, [ebp - 0x38]
mov dword [esp + 4], 0x981091
lea ecx, [ebp - 0x98]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x108]
mov dword [esp], eax
mov dword [ebp - 0xc8], 7
call fcn.0092a481
sub esp, 0xc
mov eax, dword [ebp - 0x38]
jmp 0x4f5c60
mov edx, 0xf
jmp 0x4f3fd5
mov eax, dword [ebp - 0xe0]
mov dword [esp], 0x98110a
lea ecx, [ebp - 0x98]
mov dword [esp + 4], eax
mov dword [ebp - 0xc8], 0x13
call fcn.009281c1
sub esp, 8
jmp 0x4f513c
mov dword [esp + 8], 0x9810c8
lea ecx, [ebp - 0x98]
mov dword [esp + 4], 0x9810ce
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.00928bf1
sub esp, 0xc
jmp 0x4f4849
mov eax, dword [ebp - 0xe8]
mov dword [esp + 4], 0x9810ec
lea ecx, [ebp - 0x98]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x104]
mov dword [esp], eax
mov dword [ebp - 0xc8], 0xe
call fcn.00929fd1
sub esp, 0xc
jmp 0x4f4d81
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0xd0]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0xa
call fcn.00932051
mov edx, dword [ebp - 0x50]
sub esp, 0x10
jmp 0x4f4a68
mov dword [esp + 0xc], 1
lea ecx, [ebp - 0x38]
mov dword [esp + 8], 0x980f4e
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0xc8], 0x1c
call fcn.0092fd21
sub esp, 0x10
jmp 0x4f4a05
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x20], edx
mov edx, dword [ebp - 0x44]
mov dword [eax + 0x24], edx
mov edx, dword [ebp - 0x40]
mov dword [eax + 0x28], edx
mov edx, dword [ebp - 0x3c]
mov dword [eax + 0x2c], edx
jmp 0x4f47eb
mov eax, dword [ebp - 0xe8]
mov dword [esp + 4], 0x9810da
lea ecx, [ebp - 0x98]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [esp], eax
mov dword [ebp - 0xc8], 0xa
call fcn.0092b2a1
sub esp, 0xc
jmp 0x4f4b96
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0xd4]
mov dword [esp], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0x1a
call fcn.00932051
mov edx, dword [ebp - 0x50]
sub esp, 0x10
jmp 0x4f471f
lea edx, [eax - 2]
cmp edx, eax
ja 0x4f6124
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp - 0x50]
mov byte [edx + eax - 2], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x128], eax
cmp eax, dword [ebp - 0x90]
je 0x4f60a1
lea ebx, [eax + 8]
mov dword [eax + 8], 0x746e6157
lea ecx, [eax + 0x18]
mov dword [eax], ebx
mov dword [eax + 0xc], 0x6769442d
mov dword [eax + 0x10], 0x3a747365
mov dword [eax + 4], 0xc
mov byte [eax + 0x14], 0
mov dword [ebp - 0x12c], ebx
mov ebx, eax
lea eax, [eax + 0x20]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x50]
mov byte [esp + 8], 0
mov edx, dword [ebp - 0x4c]
mov dword [esp], eax
add edx, eax
mov dword [esp + 4], edx
mov dword [ebp - 0xc8], 0x21
call fcn.009303b1
add dword [ebp - 0x94], 0x30
sub esp, 0xc
jmp 0x4f5928
mov edx, 0x3fffffff
sub edx, eax
cmp edx, 0xa
jbe 0x4f6192
mov dword [esp + 4], 0xb
mov dword [esp], 0x981141
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0xc8], 0x15
call fcn.00931e71
mov eax, dword [ebp - 0x4c]
sub esp, 8
jmp 0x4f5920
mov dword [esp + 8], 0x9810a8
lea ecx, [ebp - 0x98]
mov dword [esp + 4], 0x9810b9
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.00929a91
sub esp, 0xc
jmp 0x4f481d
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x981112
lea ecx, [ebp - 0x98]
add eax, 0x5c
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x100]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.0092a931
sub esp, 0xc
jmp 0x4f5181
add eax, 0xdc
mov dword [esp + 4], 0x9810fb
lea ecx, [ebp - 0x98]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x110]
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.0092c141
sub esp, 0xc
jmp 0x4f4db9
mov dword [esp + 8], 0x9810a8
lea ecx, [ebp - 0x98]
mov dword [esp + 4], 0x9810b1
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.0092b751
mov eax, dword [ebp - 0x94]
sub esp, 0xc
jmp 0x4f5715
mov dword [esp + 8], 0x9810e1
lea ecx, [ebp - 0x98]
mov dword [esp + 4], 0x9810ce
mov dword [esp], eax
mov dword [ebp - 0xc8], 6
call fcn.009286b1
sub esp, 0xc
jmp 0x4f4c41
mov eax, dword [ebp - 0xe8]
mov dword [esp + 4], 0x981161
lea ecx, [ebp - 0x98]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
mov dword [ebp - 0xc8], 0x15
call fcn.009295e1
sub esp, 0xc
jmp 0x4f5928
mov edx, dword [eax + 8]
mov dword [ebp - 0x30], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x2c], edx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x28], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x24], edx
jmp 0x4f413f
mov dword [esp], 0x980f50
call fcn.0096e795
mov dword [esp], 0x980f50
mov dword [ebp - 0xc8], 6
call fcn.0096e795
mov dword [esp], 0x980f50
call fcn.0096e795
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x98114d
mov dword [esp], 0x981038
mov dword [ebp - 0xc8], 0x15
call fcn.0095c231
mov dword [esp + 0xc], eax
mov dword [esp + 8], 6
mov dword [esp + 4], 0x981020
mov dword [esp], 0x981038
mov dword [ebp - 0xc8], 4
call fcn.0095c231
mov dword [esp], 0x980f50
mov dword [ebp - 0xc8], 0x15
call fcn.0096e795
mov dword [esp], 0x980f50
mov dword [ebp - 0xc8], 0x15
call fcn.0096e795
mov dword [esp], 0x980f50
mov dword [ebp - 0xc8], 0x15
call fcn.0096e795
mov dword [esp], 0x980f50
mov dword [ebp - 0xc8], 1
call fcn.0096e795
mov dword [esp], 0x980f50
mov dword [ebp - 0xc8], 6
call fcn.0096e795
add ebp, 8
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc8], 0x20
mov dword [ebp - 0xd0], eax
ja 0x4f620f
mov eax, dword [ebp - 0xc8]
jmp dword [eax*4 + 0x981170]
ud2