Function at 0x4bb7b0
Capabilities:
Encode data using xor
Hash data using fnv
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x918
mov eax, dword [0x4dc00c]
xor eax, esp
mov dword [esp + 0x914], eax
push esi
push edi
mov edi, dword [0x4dc880]
mov dword [esp + 0xf8], ecx
xor ecx, ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
cmp byte [0x4dc7c7], cl
je 0x4bda73
mov esi, dword [eax + 0x20]
mov dword [esp + 0x24], eax
add esi, edi
mov dword [esp + 0x20], ecx
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0xf8bd1014
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bb82d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bb810
cmp edx, 0x448ed987
je 0x4bb836
inc dword [esp + 0x20]
add esi, 4
jmp 0x4bb800
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
push dword [esp + 0xf8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc880]
mov dword [esp + 0x20], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x7d25aea2
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bb8ad
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bb890
cmp edx, 0xf15328e3
je 0x4bb8b6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bb880
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push 0x1db
push 0x35c
mov eax, dword [edx + 0x24]
push dword [esp + 0x100]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov dword [esp + 0x18], eax
xor edi, edi
mov eax, dword [0x4dc880]
mov ecx, dword [eax + 0x3c]
mov ecx, dword [ecx + eax + 0x78]
add ecx, eax
mov dword [esp + 0x24], ecx
mov esi, dword [ecx + 0x20]
add esi, eax
mov ecx, dword [esi]
mov edx, 0x898495ec
add ecx, eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bb930
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bb913
cmp edx, 0x7467af63
je 0x4bb93b
mov eax, dword [0x4dc880]
inc edi
add esi, 4
jmp 0x4bb903
mov esi, dword [esp + 0x24]
mov edx, dword [0x4dc880]
push dword [esp + 0x18]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
mov esi, dword [esp + 0x24]
push esi
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x728]
push eax
push esi
mov dword [esp + 0x730], 0
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov ecx, dword [esp + 0x728]
xorps xmm0, xmm0
mov dword [esp + 0x74c], eax
lea eax, [esp + 0x2b8]
mov dword [esp + 0x748], ecx
lea ecx, [esp + 0x854]
push eax
movq qword [esp + 0x858], xmm0
mov dword [esp + 0x860], 0
mov dword [esp + 0x2bc], 0xff17181c
call fcn.004b90c0
lea eax, [esp + 0x2a0]
mov dword [esp + 0x7a0], 0
xorps xmm0, xmm0
mov dword [esp + 0x2a0], 0xff1b1d22
push eax
lea ecx, [esp + 0x79c]
movq qword [esp + 0x79c], xmm0
call fcn.004b90c0
lea eax, [esp + 0x2ac]
mov dword [esp + 0x794], 0
xorps xmm0, xmm0
mov dword [esp + 0x2ac], 0xff202328
push eax
lea ecx, [esp + 0x790]
movq qword [esp + 0x790], xmm0
call fcn.004b90c0
lea eax, [esp + 0x29c]
mov dword [esp + 0x7b4], 0
xorps xmm0, xmm0
mov dword [esp + 0x29c], 0xffcccccc
push eax
lea ecx, [esp + 0x7b0]
movq qword [esp + 0x7b0], xmm0
call fcn.004b90c0
lea eax, [esp + 0x298]
mov dword [esp + 0x7d4], 0
xorps xmm0, xmm0
mov dword [esp + 0x298], 0xff636363
push eax
lea ecx, [esp + 0x7d0]
movq qword [esp + 0x7d0], xmm0
call fcn.004b90c0
lea eax, [esp + 0x294]
mov dword [esp + 0x778], 0
xorps xmm0, xmm0
mov dword [esp + 0x294], 0xffffc95d
push eax
lea ecx, [esp + 0x774]
movq qword [esp + 0x774], xmm0
call fcn.004b90c0
lea eax, [esp + 0x2a4]
mov dword [esp + 0x808], 0
xorps xmm0, xmm0
mov dword [esp + 0x2a4], 0xff15161a
push eax
lea ecx, [esp + 0x804]
movq qword [esp + 0x804], xmm0
call fcn.004b90c0
xorps xmm0, xmm0
mov dword [esp + 0x868], 0
movq qword [esp + 0x860], xmm0
lea eax, [esp + 0x2a8]
mov dword [esp + 0x2a8], 0xfff4f4f4
push eax
lea ecx, [esp + 0x864]
call fcn.004b90c0
lea eax, [esp + 0x2b0]
mov dword [esp + 0x7fc], 0
xorps xmm0, xmm0
mov dword [esp + 0x2b0], 0xffbe974a
push eax
lea ecx, [esp + 0x7f8]
movq qword [esp + 0x7f8], xmm0
call fcn.004b90c0
lea eax, [esp + 0x214]
mov dword [esp + 0x7f0], 0
xorps xmm0, xmm0
mov dword [esp + 0x214], 0xffffde72
push eax
lea ecx, [esp + 0x7ec]
movq qword [esp + 0x7ec], xmm0
call fcn.004b90c0
xorps xmm0, xmm0
mov word [esp + 0x264], 0x7b4a
movlpd qword [esp + 0x784], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4d8800]
movups xmmword [esp + 0x254], xmm0
mov byte [esp + 0x266], 0
nop dword [eax]
nop word [eax + eax]
mov al, byte [esp + 0x254]
xor byte [esp + ecx + 0x255], al
inc ecx
cmp ecx, 0x11
jb 0x4bbbf0
sub esp, 0x18
mov byte [esp + 0x27e], 0
mov esi, esp
mov ecx, esi
call fcn.004b8bd0
lea ecx, [esp + 0x26d]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bbc22
sub ecx, edx
lea eax, [esp + 0x26d]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x608]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x784]
push ecx
push 0
push eax
call dword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
lea ecx, [esp + 0x5f0]
mov dword [esp + 0x788], eax
call fcn.004b7bf0
mov esi, dword [sym.imp.gdiplus.dll_GdipCreateFont]
lea eax, [esp + 0x72c]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41680000
push dword [esp + 0x794]
mov dword [esp + 0x740], 0
call esi
mov dword [esp + 0x878], eax
mov eax, dword [esp + 0x72c]
mov dword [esp + 0x874], eax
lea eax, [esp + 0x730]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41880000
push dword [esp + 0x794]
mov dword [esp + 0x744], 0
call esi
mov dword [esp + 0x7a8], eax
mov eax, dword [esp + 0x730]
mov dword [esp + 0x7a4], eax
lea eax, [esp + 0x734]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41940000
push dword [esp + 0x794]
mov dword [esp + 0x748], 0
call esi
mov dword [esp + 0x7bc], eax
mov eax, dword [esp + 0x734]
mov dword [esp + 0x7b8], eax
lea eax, [esp + 0x738]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x419c0000
push dword [esp + 0x794]
mov dword [esp + 0x74c], 0
call esi
mov eax, dword [esp + 0x738]
mov dword [esp + 0xfc], eax
lea eax, [esp + 0x73c]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41b80000
push dword [esp + 0x794]
mov dword [esp + 0x750], 0
call esi
mov dword [esp + 0x7e4], eax
xorps xmm0, xmm0
mov eax, dword [esp + 0x73c]
mov dword [esp + 0x7e0], eax
movlpd qword [esp + 0x758], xmm0
lea eax, [esp + 0x758]
push eax
push 0
push 0
call dword [sym.imp.gdiplus.dll_GdipCreateStringFormat]
push 1
push dword [esp + 0x75c]
mov dword [esp + 0x764], eax
call dword [sym.imp.gdiplus.dll_GdipSetStringFormatAlign]
mov ecx, dword [esp + 0x75c]
test eax, eax
push 0x1f6
push 0x35e
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esp + 0x868]
cmovne ecx, eax
push dword [esp + 0x75c]
mov dword [esp + 0x774], ecx
call dword [sym.imp.gdiplus.dll_GdipFillRectangleI]
mov ecx, dword [esp + 0x74c]
test eax, eax
push 4
push dword [esp + 0x74c]
cmovne ecx, eax
mov dword [esp + 0x754], ecx
call dword [sym.imp.gdiplus.dll_GdipSetSmoothingMode]
mov ecx, dword [esp + 0x74c]
test eax, eax
push 4
push dword [esp + 0x74c]
cmovne ecx, eax
mov dword [esp + 0x754], ecx
call dword [sym.imp.gdiplus.dll_GdipSetTextRenderingHint]
mov ecx, dword [esp + 0x74c]
test eax, eax
push 2
push dword [esp + 0x74c]
cmovne ecx, eax
mov dword [esp + 0x754], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x74c]
test eax, eax
push 0x14
cmovne ecx, eax
cmp dword [0x4dc7c0], 2
mov dword [esp + 0x750], ecx
lea ecx, [esp + 0x74c]
push 0x334
jne 0x4bbea6
push dword [0x4dc800]
jmp 0x4bbeac
push dword [0x4dc84c]
call fcn.004b9270
cmp dword [0x4dc7c0], 3
lea ecx, [esp + 0x748]
push 0x22
push 0x316
jne 0x4bbed0
push dword [0x4dc814]
jmp 0x4bbed6
push dword [0x4dc7d8]
call fcn.004b9270
movaps xmm0, xmmword [0x4d6040]
lea edx, [esp + 0x798]
sub esp, 0x10
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004bb5b0
mov eax, dword [0x4dc82c]
add esp, 0x18
test eax, eax
je 0x4bbf15
mov eax, dword [eax + 4]
jmp 0x4bbf17
xor eax, eax
mov edi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x19
push 0x20
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
lea edx, [esp + 0x798]
movaps xmm0, xmmword [0x4d6080]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x75c], ecx
lea ecx, [esp + 0x758]
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004bb5b0
add esp, 0x18
cmp dword [0x4dc7c0], 5
push 0x28
push 0x28
push 0x1a
push 0x1b2
jne 0x4bbf9f
lea ecx, [esp + 0x658]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x7f8]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4bbfbe
lea ecx, [esp + 0x668]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x780]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004bb5b0
mov eax, dword [0x4dc818]
add esp, 0x18
test eax, eax
je 0x4bbfe1
mov eax, dword [eax + 4]
jmp 0x4bbfe3
xor eax, eax
push 0x20
push 0x6c
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
lea eax, [esp + 0x34c]
mov dword [esp + 0x74c], ecx
mov ecx, 0x4dc098
push eax
call fcn.004b75c0
mov ecx, 0x4dc098
mov esi, dword [eax]
lea eax, [esp + 0x348]
push eax
call fcn.004b75e0
lea ecx, [esp + 0x213]
push ecx
push esi
push dword [eax]
lea ecx, [esp + 0x5cc]
call fcn.004b8570
mov dword [esp + 0x24], eax
mov cl, 0x27
mov byte [esp + 0x14c], 0x6e
mov al, 0x16
xor cl, byte [esp + 0x14c]
xor dl, dl
mov byte [esp + 0x14d], cl
mov ch, 0xa
mov cl, byte [esp + 0x14c]
sub esp, 0x18
xor al, cl
mov byte [esp + 0x37], 0x4e
mov byte [esp + 0x169], al
xor ch, cl
mov al, byte [esp + 0x37]
mov dh, 0xb
mov ah, 0x54
mov byte [esp + 0x16c], dl
xor dl, cl
mov byte [esp + 0x167], ch
xor dh, cl
mov byte [esp + 0x166], dl
xor ah, cl
mov byte [esp + 0x168], dh
xor al, cl
mov byte [esp + 0x16a], ah
mov esi, esp
mov byte [esp + 0x16b], al
mov ecx, esi
mov byte [esp + 0x16c], 0
call fcn.004b8bd0
lea ecx, [esp + 0x165]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bc0d2
sub ecx, edx
lea eax, [esp + 0x165]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x5f0]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
mov edx, eax
lea esi, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x4bc106
mov ecx, dword [esp + 0x24]
sub edx, esi
sar edx, 1
push edx
push eax
push 0
call fcn.004c1ee0
push eax
lea ecx, [esp + 0x8f0]
call fcn.004c1a20
lea ecx, [esp + 0x5d8]
call fcn.004b7bf0
lea ecx, [esp + 0x5c0]
call fcn.004b7bf0
cmp dword [0x4dc7c0], 4
movss xmm1, dword [0x4d467c]
movss xmm2, dword [0x4d4674]
jne 0x4bc170
lea eax, [esp + 0x860]
lea ecx, [esp + 0x370]
jmp 0x4bc17e
lea eax, [esp + 0x7ac]
lea ecx, [esp + 0x368]
mov dword [esp + 0x10], eax
call fcn.004b8f80
lea ecx, [esp + 0x8ec]
mov esi, eax
call fcn.004b74d0
push dword [esp + 0x10]
lea ecx, [esp + 0x75c]
push ecx
push esi
lea ecx, [esp + 0x880]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
movaps xmm0, xmmword [0x4d6050]
lea edx, [esp + 0x798]
sub esp, 0x10
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d5fd0]
lea edx, [esp + 0x7c4]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 0x14
push 0xffcccccc
movups xmmword [eax], xmm0
call fcn.004bb5b0
add esp, 0x18
lea ecx, [esp + 0x748]
cmp dword [0x4dc7c0], 0x3f3
push 0x1a
push 0x1a
push 0x22
push 0x204
jne 0x4bc234
push dword [0x4dc7fc]
jmp 0x4bc23a
push dword [0x4dc854]
call fcn.004b92b0
cmp dword [0x4dc7c0], 0x3f4
lea ecx, [esp + 0x748]
push 0x1a
push 0x1a
push 0x22
push 0x22f
jne 0x4bc265
push dword [0x4dc828]
jmp 0x4bc26b
push dword [0x4dc7e8]
call fcn.004b92b0
cmp dword [0x4dc7c0], 0x3f5
lea ecx, [esp + 0x748]
push 0x1a
push 0x1a
push 0x22
push 0x25a
jne 0x4bc296
push dword [0x4dc85c]
jmp 0x4bc29c
push dword [0x4dc7d4]
call fcn.004b92b0
cmp byte [0x4dc019], 0
push 0x28
push 0x28
push 0x1a
je 0x4bc2be
push 0x2c3
lea ecx, [esp + 0x678]
jmp 0x4bc2ca
push 0x296
lea ecx, [esp + 0x698]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x79c]
mov ecx, esp
movups xmm0, xmmword [eax]
push 6
push 0xff202128
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004bb5b0
mov eax, dword [0x4dc844]
add esp, 0x18
test eax, eax
je 0x4bc305
mov eax, dword [eax + 4]
jmp 0x4bc307
xor eax, eax
push 0x24
push 0x29f
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4dc7f4]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bc339
mov eax, dword [eax + 4]
jmp 0x4bc33b
xor eax, eax
push 0x17
push 0x17
push 0x24
push 0x2cc
push eax
push dword [esp + 0x75c]
call dword [sym.imp.gdiplus.dll_GdipDrawImageRectI]
mov ecx, dword [esp + 0x74c]
lea edx, [esp + 0x798]
movaps xmm0, xmmword [0x4d6060]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x75c], ecx
lea ecx, [esp + 0x758]
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004bb5b0
xor eax, eax
add esp, 0x18
cmp byte [0x4dc019], al
je 0x4bc45e
mov dword [esp + 0x2f0], 0x43d70000
mov cl, 0x74
mov dword [esp + 0x2f4], 0x42c00000
mov dword [esp + 0x1fc], 0x18112774
mov dword [esp + 0x200], 0x54001711
mov dword [esp + 0x204], 0x15335435
mov word [esp + 0x208], 0x1119
mov byte [esp + 0x20a], al
nop dword [eax + eax]
xor byte [esp + eax + 0x1fd], cl
inc eax
cmp eax, 0xd
jae 0x4bc406
mov cl, byte [esp + 0x1fc]
jmp 0x4bc3f0
sub esp, 0x18
mov byte [esp + 0x222], 0
mov esi, esp
mov ecx, esi
call fcn.004b8bd0
lea ecx, [esp + 0x215]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bc424
sub ecx, edx
lea eax, [esp + 0x215]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x5c0]
call fcn.004c2240
mov ecx, eax
lea esi, [esp + 0x5c0]
lea eax, [esp + 0x308]
jmp 0x4bc519
mov dword [esp + 0x2f8], 0x43d70000
mov cl, 0x12
mov dword [esp + 0x2fc], 0x42c00000
mov dword [esp + 0x1ec], 0xf3e9d012
mov dword [esp + 0x1f0], 0xe0fae2f7
mov dword [esp + 0x1f4], 0xf1fa32f7
mov word [esp + 0x1f8], 0xe1e2
mov byte [esp + 0x1fa], 0
nop dword [eax]
xor byte [esp + eax + 0x1ed], cl
inc eax
cmp eax, 0xd
jae 0x4bc4c6
mov cl, byte [esp + 0x1ec]
jmp 0x4bc4b0
sub esp, 0x18
mov byte [esp + 0x212], 0
mov esi, esp
mov ecx, esi
call fcn.004b8bd0
lea ecx, [esp + 0x205]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bc4e4
sub ecx, edx
lea eax, [esp + 0x205]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x5a8]
call fcn.004c25c0
mov ecx, eax
lea esi, [esp + 0x5a8]
lea eax, [esp + 0x310]
add esp, 0x18
mov dword [esp + 0x10], eax
call fcn.004b74d0
lea ecx, [esp + 0x7ac]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push dword [esp + 0x18]
lea ecx, [esp + 0x7c4]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
mov ecx, esi
call fcn.004b7bf0
movaps xmm0, xmmword [0x4d6770]
lea edx, [esp + 0x78c]
sub esp, 0x10
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d6780]
lea edx, [esp + 0x7a4]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d6790]
lea edx, [esp + 0x7a4]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d67a0]
lea edx, [esp + 0x7b0]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d67b0]
lea edx, [esp + 0x7b0]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d67c0]
lea edx, [esp + 0x7b0]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 5
push 0xff1b1d22
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d6010]
lea edx, [esp + 0x7a4]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 6
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d6020]
add esp, 8
mov eax, esp
lea edx, [esp + 0x79c]
push 6
push 0xff202128
lea ecx, [esp + 0x760]
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d6030]
lea edx, [esp + 0x7a4]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 6
push 0xff202128
movups xmmword [eax], xmm0
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d5fe0]
lea edx, [esp + 0x788]
add esp, 8
lea ecx, [esp + 0x758]
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004bb5b0
mov eax, dword [0x4dc01c]
add esp, 0x18
cmp eax, 0xffffffff
jne 0x4bc874
mov cl, 0x31
mov byte [esp + 0x128], 0x58
mov dh, cl
mov byte [esp + 0x1f], 0x35
xor cl, byte [esp + 0x128]
mov al, 0x14
xor al, byte [esp + 0x128]
mov ah, 0x3d
mov byte [esp + 0x129], al
mov ch, 0xc
mov al, byte [esp + 0x1f]
sub esp, 0x18
mov byte [esp + 0x142], cl
mov dl, 0x3e
mov cl, byte [esp + 0x140]
mov esi, esp
xor al, cl
mov byte [esp + 0x35], ah
mov byte [esp + 0x147], al
xor ch, cl
mov al, byte [esp + 0x35]
xor dl, cl
xor ah, cl
mov byte [esp + 0x145], ch
xor dh, cl
mov byte [esp + 0x149], 0
xor al, cl
mov dword [esp + 0x300], 0x43200000
mov ecx, esi
mov dword [esp + 0x304], 0x43a38000
mov byte [esp + 0x143], dl
mov byte [esp + 0x144], ah
mov byte [esp + 0x146], dh
mov byte [esp + 0x148], al
mov byte [esp + 0x149], 0
call fcn.004b8bd0
lea ecx, [esp + 0x141]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bc7c0
sub ecx, edx
lea eax, [esp + 0x141]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x590]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x7cc]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x2f0]
push ecx
lea ecx, [esp + 0x7b0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x578]
call fcn.004b7bf0
cmp dword [0x4dc7c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4bc868
lea ecx, [esp + 0x6b8]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x7f8]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4bca93
lea ecx, [esp + 0x648]
jmp 0x4bca7b
movss xmm2, dword [0x4d4680]
movss xmm1, dword [0x4d4678]
cmp eax, 1
jge 0x4bc9de
lea ecx, [esp + 0x360]
call fcn.004b8f80
push 0x45
lea ecx, [esp + 0x40]
mov dword [esp + 0x28], eax
mov byte [esp + 0x40], 0xe
call fcn.004b69f0
push 0x6e
lea ecx, [esp + 0x40]
mov byte [esp + 0x41], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0x40]
mov byte [esp + 0x42], al
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0x40]
mov byte [esp + 0x43], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0x40]
mov byte [esp + 0x44], al
call fcn.004b69f0
mov byte [esp + 0x41], al
xor esi, esi
mov byte [esp + 0x42], 0
push esi
lea ecx, [esp + 0x41]
call fcn.004b69e0
lea ecx, [esp + 0x3c]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x41]
mov byte [esp + 0x21], al
call fcn.004b69e0
mov cl, byte [esp + 0x1d]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4bc8f4
push 5
lea ecx, [esp + 0x41]
call fcn.004b69e0
lea ecx, [esp + 0x3d]
mov byte [eax], 0
call fcn.004b69d0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b7800
lea ecx, [esp + 0x578]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x7cc]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x7b0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x560]
call fcn.004b7520
cmp dword [0x4dc7c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4bc9d2
lea ecx, [esp + 0x6e8]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x804]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4bca93
lea ecx, [esp + 0x6a8]
jmp 0x4bca7b
lea ecx, [esp + 0x358]
call fcn.004b8f80
mov edx, dword [0x4dc01c]
lea ecx, [esp + 0x548]
mov esi, eax
call fcn.004bad60
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x7cc]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push esi
lea ecx, [esp + 0x7b0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x548]
call fcn.004b7520
cmp dword [0x4dc7c0], 0x3e9
push 0x28
push 0xe6
push 0x184
push 0x22
jne 0x4bca74
lea ecx, [esp + 0x718]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x7f8]
mov ecx, esp
push 6
push 0xffffde72
jmp 0x4bca93
lea ecx, [esp + 0x688]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x780]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d5ff0]
lea edx, [esp + 0x788]
add esp, 0x18
lea ecx, [esp + 0x748]
sub esp, 0x10
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004bb5b0
movss xmm2, dword [0x4d4680]
lea ecx, [esp + 0x390]
movss xmm1, dword [0x4d4684]
add esp, 0x18
call fcn.004b8f80
push 0x45
lea ecx, [esp + 0x38]
mov dword [esp + 0x28], eax
mov byte [esp + 0x38], 0x28
call fcn.004b69f0
push 0x6e
lea ecx, [esp + 0x38]
mov byte [esp + 0x39], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0x38]
mov byte [esp + 0x3a], al
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0x38]
mov byte [esp + 0x3b], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0x38]
mov byte [esp + 0x3c], al
call fcn.004b69f0
mov byte [esp + 0x39], al
xor esi, esi
mov byte [esp + 0x3a], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x39]
call fcn.004b69e0
lea ecx, [esp + 0x34]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x39]
mov byte [esp + 0x21], al
call fcn.004b69e0
mov cl, byte [esp + 0x1d]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4bcb50
push 5
lea ecx, [esp + 0x39]
call fcn.004b69e0
lea ecx, [esp + 0x35]
mov byte [eax], 0
call fcn.004b69d0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b7800
lea ecx, [esp + 0x548]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x7cc]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x7b0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x530]
call fcn.004b7520
cmp dword [0x4dc7c0], 0x3ea
push 0x28
push 0xe6
push 0x184
push 0x13b
jne 0x4bcc2e
lea ecx, [esp + 0x708]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x804]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4bcc4d
lea ecx, [esp + 0x6f8]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x780]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004bb5b0
movaps xmm0, xmmword [0x4d6000]
lea edx, [esp + 0x788]
add esp, 0x18
lea ecx, [esp + 0x748]
sub esp, 0x10
mov eax, esp
push 6
push 0xffffc95d
movups xmmword [eax], xmm0
call fcn.004bb5b0
movss xmm2, dword [0x4d4680]
lea ecx, [esp + 0x368]
movss xmm1, dword [0x4d4688]
add esp, 0x18
call fcn.004b8f80
push 0x45
lea ecx, [esp + 0x30]
mov dword [esp + 0x28], eax
mov byte [esp + 0x30], 0x14
call fcn.004b69f0
push 0x6e
lea ecx, [esp + 0x30]
mov byte [esp + 0x31], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0x30]
mov byte [esp + 0x32], al
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0x30]
mov byte [esp + 0x33], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0x30]
mov byte [esp + 0x34], al
call fcn.004b69f0
mov byte [esp + 0x31], al
xor esi, esi
mov byte [esp + 0x32], 0
push esi
lea ecx, [esp + 0x31]
call fcn.004b69e0
lea ecx, [esp + 0x2c]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x31]
mov byte [esp + 0x21], al
call fcn.004b69e0
mov cl, byte [esp + 0x1d]
inc esi
mov byte [eax], cl
cmp esi, 5
jb 0x4bcd05
push 5
lea ecx, [esp + 0x31]
call fcn.004b69e0
lea ecx, [esp + 0x2d]
mov byte [eax], 0
call fcn.004b69d0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b7800
lea ecx, [esp + 0x530]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x7cc]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x7b0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x518]
call fcn.004b7520
cmp dword [0x4dc7c0], 0x3eb
push 0x28
push 0xe6
push 0x184
push 0x254
jne 0x4bcde3
lea ecx, [esp + 0x6d8]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x804]
mov ecx, esp
push 6
push 0xffbe974a
jmp 0x4bce02
lea ecx, [esp + 0x6c8]
call fcn.004b8f90
sub esp, 0x10
lea edx, [esp + 0x780]
mov ecx, esp
push 6
push 0xffffc95d
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [esp + 0x760]
call fcn.004bb5b0
mov eax, dword [0x4dc7ec]
add esp, 0x18
test eax, eax
je 0x4bce25
mov eax, dword [eax + 4]
jmp 0x4bce27
xor eax, eax
push 0xb9
push 0x6e
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4dc838]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bce59
mov eax, dword [eax + 4]
jmp 0x4bce5b
xor eax, eax
push 0xb9
push 0x182
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4dc824]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bce90
mov eax, dword [eax + 4]
jmp 0x4bce92
xor eax, eax
push 0xb9
push 0x2a1
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
mov dl, 0x41
mov byte [esp + 0x191], 0
cmovne ecx, eax
mov dword [esp + 0x300], 0x43140000
mov dword [esp + 0x74c], ecx
sub esp, 0x18
mov ch, 0x32
mov dword [esp + 0x31c], 0x43870000
mov cl, 0x47
mov byte [esp + 0x1a4], ch
xor cl, ch
mov byte [esp + 0x1a9], 0
mov al, 0x60
mov byte [esp + 0x1a6], cl
mov ah, 0x46
xor al, ch
xor dl, ch
mov byte [esp + 0x1a5], al
xor ah, ch
mov byte [esp + 0x1a7], dl
mov esi, esp
mov byte [esp + 0x1a8], ah
mov ecx, esi
call fcn.004b8bd0
lea ecx, [esp + 0x1a5]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bcf30
sub ecx, edx
lea eax, [esp + 0x1a5]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x518]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x7ac]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x308]
push ecx
lea ecx, [esp + 0x7ec]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x500]
call fcn.004b7bf0
mov ch, 0xb
mov byte [esp + 0x199], 0
mov cl, 0x7b
mov byte [esp + 0x194], ch
xor cl, ch
mov dword [esp + 0x308], 0x43d68000
sub esp, 0x18
mov byte [esp + 0x1ae], cl
mov al, 0x4a
mov dword [esp + 0x324], 0x43870000
mov dl, 0x6e
mov byte [esp + 0x1b1], 0
mov ah, 0x73
xor al, ch
xor dl, ch
mov byte [esp + 0x1ad], al
xor ah, ch
mov byte [esp + 0x1af], dl
mov esi, esp
mov byte [esp + 0x1b0], ah
mov ecx, esi
call fcn.004b8bd0
lea ecx, [esp + 0x1ad]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd010
sub ecx, edx
lea eax, [esp + 0x1ad]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x500]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x7ac]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x310]
push ecx
lea ecx, [esp + 0x7ec]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x4e8]
call fcn.004b7bf0
mov ch, 0x54
mov byte [esp + 0x1a1], 0
mov cl, 0x27
mov byte [esp + 0x19c], ch
xor cl, ch
mov dword [esp + 0x310], 0x44318000
sub esp, 0x18
mov byte [esp + 0x1b6], cl
mov al, 0x17
mov dword [esp + 0x32c], 0x43870000
mov dl, 0x74
mov byte [esp + 0x1b9], 0
mov ah, 0x66
xor al, ch
xor dl, ch
mov byte [esp + 0x1b5], al
xor ah, ch
mov byte [esp + 0x1b7], dl
mov esi, esp
mov byte [esp + 0x1b8], ah
mov ecx, esi
call fcn.004b8bd0
lea ecx, [esp + 0x1b5]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd0f0
sub ecx, edx
lea eax, [esp + 0x1b5]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x4e8]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x7ac]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x318]
push ecx
lea ecx, [esp + 0x7ec]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x4d0]
call fcn.004b7bf0
push 0
push dword [esp + 0x74c]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4dc858]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bd18a
mov eax, dword [eax + 4]
jmp 0x4bd18c
xor eax, eax
push 0x14c
push 0x29
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4dc858]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bd1be
mov eax, dword [eax + 4]
jmp 0x4bd1c0
xor eax, eax
push 0x14c
push 0x142
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4dc858]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bd1f5
mov eax, dword [eax + 4]
jmp 0x4bd1f7
xor eax, eax
push 0x14c
push 0x25b
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4dc7dc]
mov dword [esp + 0x74c], ecx
test eax, eax
je 0x4bd22c
mov eax, dword [eax + 4]
jmp 0x4bd22e
xor eax, eax
push 0x22
push 0x1bc
push eax
push dword [esp + 0x754]
call edi
mov ecx, dword [esp + 0x74c]
test eax, eax
cmovne ecx, eax
cmp dword [0x4dc01c], 0xfffffffe
mov dword [esp + 0x74c], ecx
jne 0x4bd378
mov byte [esp + 0x180], 5
mov al, 0x4c
xor al, byte [esp + 0x180]
mov cl, 0x6b
xor cl, byte [esp + 0x180]
mov ch, 0x60
mov byte [esp + 0x181], al
sub esp, 0x18
mov byte [esp + 0x35], ch
mov dl, 0x25
mov al, byte [esp + 0x35]
mov ah, 0x41
mov byte [esp + 0x19a], cl
mov dh, 0x73
mov cl, byte [esp + 0x198]
mov esi, esp
xor al, cl
mov byte [esp + 0x37], 0x69
mov byte [esp + 0x19f], al
xor ch, cl
mov al, byte [esp + 0x37]
xor dl, cl
xor al, cl
mov byte [esp + 0x36], 0x6a
mov byte [esp + 0x1a0], al
xor ah, cl
mov al, byte [esp + 0x36]
xor dh, cl
xor al, cl
mov byte [esp + 0x2f], 0x75
mov byte [esp + 0x1a1], al
mov al, byte [esp + 0x2f]
xor al, cl
mov byte [esp + 0x19d], ch
mov byte [esp + 0x1a3], 0
mov ecx, esi
mov dword [esp + 0x330], 0x43140000
mov dword [esp + 0x334], 0x43c30000
mov byte [esp + 0x19b], dl
mov byte [esp + 0x19c], ah
mov byte [esp + 0x19e], dh
mov byte [esp + 0x1a2], al
mov byte [esp + 0x1a3], 0
call fcn.004b8bd0
lea ecx, [esp + 0x199]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd340
sub ecx, edx
lea eax, [esp + 0x199]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x4d0]
call fcn.004c2240
lea esi, [esp + 0x4d0]
lea edi, [esp + 0x330]
jmp 0x4bd443
mov byte [esp + 0x120], 0x72
mov al, 0x3e
xor al, byte [esp + 0x120]
mov cl, 0x13
mov byte [esp + 0x121], al
mov ch, 0x11
mov al, byte [esp + 0x120]
sub esp, 0x18
xor cl, al
mov byte [esp + 0x13f], 0
xor ch, al
mov byte [esp + 0x13a], cl
mov dl, 7
mov byte [esp + 0x13d], ch
mov ah, 0x1c
mov dword [esp + 0x338], 0x43140000
mov dh, 0x1a
mov dword [esp + 0x33c], 0x43c30000
mov esi, esp
mov byte [esp + 0x13f], 0
xor dl, al
xor ah, al
xor dh, al
mov byte [esp + 0x13b], dl
mov ecx, esi
mov byte [esp + 0x13c], ah
mov byte [esp + 0x13e], dh
call fcn.004b8bd0
lea ecx, [esp + 0x139]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd410
sub ecx, edx
lea eax, [esp + 0x139]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x4b8]
call fcn.004c2240
lea esi, [esp + 0x4b8]
lea edi, [esp + 0x338]
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x800]
push ecx
lea ecx, [esp + 0x75c]
push ecx
push edi
lea ecx, [esp + 0x7c4]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
mov ecx, esi
call fcn.004b7bf0
mov byte [esp + 0x174], 0x14
mov al, 0x5d
xor al, byte [esp + 0x174]
mov cl, 0x7a
xor cl, byte [esp + 0x174]
mov ch, 0x71
mov byte [esp + 0x175], al
sub esp, 0x18
mov byte [esp + 0x2f], ch
mov dl, 0x34
mov al, byte [esp + 0x2f]
mov ah, 0x50
mov byte [esp + 0x18e], cl
mov dh, 0x62
mov cl, byte [esp + 0x18c]
mov esi, esp
xor al, cl
mov byte [esp + 0x36], 0x78
mov byte [esp + 0x193], al
xor ch, cl
mov al, byte [esp + 0x36]
xor dl, cl
xor al, cl
mov byte [esp + 0x35], 0x7b
mov byte [esp + 0x194], al
xor ah, cl
mov al, byte [esp + 0x35]
xor dh, cl
xor al, cl
mov byte [esp + 0x37], 0x64
mov byte [esp + 0x195], al
mov al, byte [esp + 0x37]
xor al, cl
mov byte [esp + 0x191], ch
mov byte [esp + 0x197], 0
mov ecx, esi
mov dword [esp + 0x340], 0x43d88000
mov dword [esp + 0x344], 0x43c30000
mov byte [esp + 0x18f], dl
mov byte [esp + 0x190], ah
mov byte [esp + 0x192], dh
mov byte [esp + 0x196], al
mov byte [esp + 0x197], 0
call fcn.004b8bd0
lea ecx, [esp + 0x18d]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bd560
sub ecx, edx
lea eax, [esp + 0x18d]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x4a0]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x800]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x330]
push ecx
lea ecx, [esp + 0x7c4]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x488]
call fcn.004b7bf0
push 0x65
lea ecx, [esp + 0x104]
mov dword [esp + 0x334], 0x44328000
mov dword [esp + 0x338], 0x43c30000
mov dword [esp + 0x104], 0x6f21064f
mov word [esp + 0x108], 0x2a0b
mov byte [esp + 0x10a], 0x39
call fcn.004b69f0
push 0x6c
lea ecx, [esp + 0x104]
mov byte [esp + 0x10b], al
call fcn.004b69f0
push 0x6f
lea ecx, [esp + 0x104]
mov byte [esp + 0x10c], al
call fcn.004b69f0
push 0x70
lea ecx, [esp + 0x104]
mov byte [esp + 0x10d], al
call fcn.004b69f0
mov byte [esp + 0x10a], al
xor esi, esi
mov byte [esp + 0x10b], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x105]
call fcn.004b69e0
lea ecx, [esp + 0x100]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x105]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bd660
push 0xa
lea ecx, [esp + 0x105]
call fcn.004b69e0
lea ecx, [esp + 0x101]
mov byte [eax], 0
call fcn.004b69d0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004b7800
lea ecx, [esp + 0x488]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x800]
push ecx
lea ecx, [esp + 0x75c]
push ecx
lea ecx, [esp + 0x338]
push ecx
lea ecx, [esp + 0x7c4]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x760]
call fcn.004b91c0
lea ecx, [esp + 0x470]
call fcn.004b7520
push 2
push dword [esp + 0x74c]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov edi, dword [0x4dc880]
test eax, eax
mov ecx, dword [esp + 0x74c]
cmovne ecx, eax
mov dword [esp + 0x74c], ecx
xor ecx, ecx
mov eax, dword [edi + 0x3c]
mov dword [esp + 0x10], ecx
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xbab3276
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd780
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd763
cmp edx, 0x1aba72a1
je 0x4bd789
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd753
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push 0xcc0020
push 0
mov eax, dword [edx + 0x24]
push 0
push dword [esp + 0x2c]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
push 0x1db
push 0x35c
push 0
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
push 0
push dword [esp + 0x118]
add eax, edi
call eax
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xf1d9da97
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd81d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd800
cmp edx, 0xca05c774
je 0x4bd826
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd7f0
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x52ae4475
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd89d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd880
cmp edx, 0x5056b331
je 0x4bd8a6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd870
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x18]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x3e0a2c0f
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bd914
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bd8f7
cmp edx, 0x11c80c61
je 0x4bd91d
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bd8e7
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x20]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
lea ecx, [esp + 0x8ec]
call fcn.004b7bf0
push dword [esp + 0x758]
call dword [sym.imp.gdiplus.dll_GdipDeleteStringFormat]
push dword [esp + 0x7e0]
mov esi, dword [sym.imp.gdiplus.dll_GdipDeleteFont]
call esi
push dword [esp + 0xfc]
call esi
push dword [esp + 0x7b8]
call esi
push dword [esp + 0x7a4]
call esi
push dword [esp + 0x874]
call esi
push dword [esp + 0x784]
call dword [sym.imp.gdiplus.dll_GdipDeleteFontFamily]
push dword [esp + 0x7ec]
mov esi, dword [sym.imp.gdiplus.dll_GdipDeleteBrush]
mov dword [esp + 0x7ec], 0x4ce584
call esi
push dword [esp + 0x7f8]
mov dword [esp + 0x7f8], 0x4ce584
call esi
push dword [esp + 0x864]
mov dword [esp + 0x864], 0x4ce584
call esi
push dword [esp + 0x804]
mov dword [esp + 0x804], 0x4ce584
call esi
push dword [esp + 0x774]
mov dword [esp + 0x774], 0x4ce584
call esi
push dword [esp + 0x7d0]
mov dword [esp + 0x7d0], 0x4ce584
call esi
push dword [esp + 0x7b0]
mov dword [esp + 0x7b0], 0x4ce584
call esi
push dword [esp + 0x790]
mov dword [esp + 0x790], 0x4ce584
call esi
push dword [esp + 0x79c]
mov dword [esp + 0x79c], 0x4ce584
call esi
push dword [esp + 0x858]
mov dword [esp + 0x858], 0x4ce584
call esi
push dword [esp + 0x748]
jmp 0x4c199c
mov dword [esp + 0x214], eax
mov esi, dword [eax + 0x20]
mov dword [esp + 0x10], ecx
add esi, edi
mov ecx, dword [esi]
mov edx, 0x5ca8565d
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bdab0
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bda93
cmp edx, 0x443214d2
je 0x4bdab9
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bda83
mov edx, dword [esp + 0x214]
mov ecx, dword [esp + 0x10]
push dword [esp + 0xf8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc880]
mov dword [esp + 0x20], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x24], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xeefd833d
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bdb31
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bdb14
cmp edx, 0x185bb008
je 0x4bdb3a
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bdb04
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
push 0x258
push 0x1c2
mov eax, dword [edx + 0x24]
push dword [esp + 0x100]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc880]
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x717767c6
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bdbbd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bdba0
cmp edx, 0x8a8c6c3d
je 0x4bdbc6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bdb90
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc870]
mov dword [esp + 0x170], eax
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x7c1b16f3
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bdc3f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bdc22
cmp edx, 0xbaf0d1b4
je 0x4bdc48
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bdc12
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x8a0]
mov ecx, dword [esp + 0x10]
push eax
push dword [0x4dc864]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x3afe5e84
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bdcc0
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bdca3
cmp edx, 0x9848d73e
je 0x4bdcc9
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bdc93
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
movaps xmm0, xmmword [0x4d74f0]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x278], 0x2312
movups xmmword [esp + 0x268], xmm0
mov byte [esp + 0x27a], 0
xor ecx, ecx
nop dword [eax]
mov al, byte [esp + 0x268]
xor byte [esp + ecx + 0x269], al
inc ecx
cmp ecx, 0x11
jb 0x4bdd10
sub esp, 0x18
mov byte [esp + 0x292], 0
mov edi, esp
mov ecx, edi
call fcn.004b8bd0
lea ecx, [esp + 0x281]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bdd42
sub ecx, edx
lea eax, [esp + 0x281]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x470]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x12
call esi
lea ecx, [esp + 0x458]
mov dword [esp + 0x20c], eax
call fcn.004b7bf0
mov edi, dword [0x4dc880]
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xce6b91dd
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bddf2
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bddd5
cmp edx, 0x325f7a55
je 0x4bddfb
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bddc5
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
movaps xmm0, xmmword [0x4d7de0]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x250], 0x4170
movups xmmword [esp + 0x240], xmm0
mov byte [esp + 0x252], 0
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [esp + 0x240]
xor byte [esp + ecx + 0x241], al
inc ecx
cmp ecx, 0x11
jb 0x4bde40
sub esp, 0x18
mov byte [esp + 0x26a], 0
mov edi, esp
mov ecx, edi
call fcn.004b8bd0
lea ecx, [esp + 0x259]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bde72
sub ecx, edx
lea eax, [esp + 0x259]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x3f8]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x14
call esi
lea ecx, [esp + 0x3e0]
mov dword [esp + 0xfc], eax
call fcn.004b7bf0
mov edi, dword [0x4dc880]
mov ecx, dword [edi + 0x3c]
mov eax, dword [ecx + edi + 0x78]
xor ecx, ecx
add eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0xc47a332e
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bdf22
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bdf05
cmp edx, 0xcbc3f044
je 0x4bdf2b
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bdef5
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
movaps xmm0, xmmword [0x4d6cc0]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
add esi, edi
mov word [esp + 0x23c], 0x332
movups xmmword [esp + 0x22c], xmm0
mov byte [esp + 0x23e], 0
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [esp + 0x22c]
xor byte [esp + ecx + 0x22d], al
inc ecx
cmp ecx, 0x11
jb 0x4bdf70
sub esp, 0x18
mov byte [esp + 0x256], 0
mov edi, esp
mov ecx, edi
call fcn.004b8bd0
lea ecx, [esp + 0x245]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bdfa2
sub ecx, edx
lea eax, [esp + 0x245]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x458]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
push eax
push 0
push 2
push 0
push 0
push 0xcc
push 0
push 0
push 0
push 0x384
push 0
push 0
push 0
push 0x1e
call esi
lea ecx, [esp + 0x440]
mov dword [esp + 0x28], eax
call fcn.004b7bf0
lea eax, [esp + 0x740]
mov dword [esp + 0x740], 0
push eax
push dword [esp + 0x24]
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov ecx, dword [esp + 0x740]
xorps xmm0, xmm0
mov dword [esp + 0x754], eax
lea eax, [esp + 0x2bc]
mov dword [esp + 0x750], ecx
lea ecx, [esp + 0x824]
push eax
movq qword [esp + 0x828], xmm0
mov dword [esp + 0x830], 0
mov dword [esp + 0x2c0], 0xff17181c
call fcn.004b90c0
lea eax, [esp + 0x2b4]
mov dword [esp + 0x7c8], 0
xorps xmm0, xmm0
mov dword [esp + 0x2b4], 0xff1d2025
push eax
lea ecx, [esp + 0x7c4]
movq qword [esp + 0x7c4], xmm0
call fcn.004b90c0
lea eax, [esp + 0x27c]
mov dword [esp + 0x814], 0
xorps xmm0, xmm0
mov dword [esp + 0x27c], 0xffcccccc
push eax
lea ecx, [esp + 0x810]
movq qword [esp + 0x810], xmm0
call fcn.004b90c0
lea eax, [esp + 0x280]
mov dword [esp + 0x820], 0
xorps xmm0, xmm0
mov dword [esp + 0x280], 0xffffc95d
push eax
lea ecx, [esp + 0x81c]
movq qword [esp + 0x81c], xmm0
call fcn.004b90c0
lea eax, [esp + 0x284]
mov dword [esp + 0x838], 0
xorps xmm0, xmm0
mov dword [esp + 0x284], 0xffffde72
push eax
lea ecx, [esp + 0x834]
movq qword [esp + 0x834], xmm0
call fcn.004b90c0
xorps xmm0, xmm0
mov dword [esp + 0x89c], 0
movq qword [esp + 0x894], xmm0
mov dword [esp + 0x288], 0xff828282
lea eax, [esp + 0x288]
push eax
lea ecx, [esp + 0x898]
call fcn.004b90c0
lea eax, [esp + 0x28c]
mov dword [esp + 0x844], 0
xorps xmm0, xmm0
mov dword [esp + 0x28c], 0xff555555
push eax
lea ecx, [esp + 0x840]
movq qword [esp + 0x840], xmm0
call fcn.004b90c0
lea eax, [esp + 0x290]
mov dword [esp + 0x850], 0
xorps xmm0, xmm0
mov dword [esp + 0x290], 0xff15161a
push eax
lea ecx, [esp + 0x84c]
movq qword [esp + 0x84c], xmm0
call fcn.004b90c0
xorps xmm0, xmm0
mov word [esp + 0x228], 0x4574
movlpd qword [esp + 0x77c], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4d82c0]
movups xmmword [esp + 0x218], xmm0
mov byte [esp + 0x22a], 0
nop word [eax + eax]
mov al, byte [esp + 0x218]
xor byte [esp + ecx + 0x219], al
inc ecx
cmp ecx, 0x11
jb 0x4be220
sub esp, 0x18
mov byte [esp + 0x242], 0
mov esi, esp
mov ecx, esi
call fcn.004b8bd0
lea ecx, [esp + 0x231]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be252
sub ecx, edx
lea eax, [esp + 0x231]
push ecx
push eax
mov ecx, esi
call fcn.004b8860
lea ecx, [esp + 0x440]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x77c]
push ecx
push 0
push eax
call dword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
lea ecx, [esp + 0x428]
mov dword [esp + 0x780], eax
call fcn.004b7bf0
mov esi, dword [sym.imp.gdiplus.dll_GdipCreateFont]
lea eax, [esp + 0x724]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41580000
push dword [esp + 0x78c]
mov dword [esp + 0x738], 0
call esi
mov dword [esp + 0x870], eax
mov eax, dword [esp + 0x724]
mov dword [esp + 0x86c], eax
lea eax, [esp + 0x720]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41800000
push dword [esp + 0x78c]
mov dword [esp + 0x734], 0
call esi
mov dword [esp + 0x890], eax
mov eax, dword [esp + 0x720]
mov dword [esp + 0x88c], eax
lea eax, [esp + 0x71c]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41920000
push dword [esp + 0x78c]
mov dword [esp + 0x730], 0
call esi
mov dword [esp + 0x7dc], eax
mov eax, dword [esp + 0x71c]
mov dword [esp + 0x7d8], eax
lea eax, [esp + 0x744]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41a00000
push dword [esp + 0x78c]
mov dword [esp + 0x758], 0
call esi
mov dword [esp + 0x888], eax
mov eax, dword [esp + 0x744]
mov dword [esp + 0x884], eax
lea eax, [esp + 0x718]
push eax
push 3
push 1
push ecx
mov dword [esp], 0x41b40000
push dword [esp + 0x78c]
mov dword [esp + 0x72c], 0
call esi
mov dword [esp + 0x880], eax
mov eax, dword [esp + 0x718]
mov dword [esp + 0x87c], eax
push 0x259
push 0x1c3
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esp + 0x838]
push dword [esp + 0x764]
call dword [sym.imp.gdiplus.dll_GdipFillRectangleI]
mov ecx, dword [esp + 0x754]
test eax, eax
push 4
push dword [esp + 0x754]
cmovne ecx, eax
mov dword [esp + 0x75c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetSmoothingMode]
mov ecx, dword [esp + 0x754]
test eax, eax
push 4
push dword [esp + 0x754]
cmovne ecx, eax
mov dword [esp + 0x75c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetTextRenderingHint]
mov ecx, dword [esp + 0x754]
test eax, eax
push 0
push dword [esp + 0x754]
cmovne ecx, eax
mov dword [esp + 0x75c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingMode]
mov ecx, dword [esp + 0x754]
test eax, eax
push 2
push dword [esp + 0x754]
cmovne ecx, eax
mov dword [esp + 0x75c], ecx
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
cmp dword [0x4dc7c0], 2
mov dword [esp + 0x754], ecx
jne 0x4be4d6
mov eax, dword [0x4dc800]
test eax, eax
je 0x4be4b0
mov eax, dword [eax + 4]
jmp 0x4be4b2
xor eax, eax
mov esi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x14
push 0x168
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4be510
mov dword [esp + 0x754], eax
jmp 0x4be510
mov eax, dword [0x4dc84c]
test eax, eax
je 0x4be4e4
mov eax, dword [eax + 4]
jmp 0x4be4e6
xor eax, eax
mov esi, dword [sym.imp.gdiplus.dll_GdipDrawImageI]
push 0x14
push 0x168
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
cmp dword [0x4dc7c0], 3
jne 0x4be547
mov eax, dword [0x4dc814]
test eax, eax
je 0x4be527
mov eax, dword [eax + 4]
jmp 0x4be529
xor eax, eax
push 0x22
push 0x14a
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4be57b
mov dword [esp + 0x754], eax
jmp 0x4be57b
mov eax, dword [0x4dc7d8]
test eax, eax
je 0x4be555
mov eax, dword [eax + 4]
jmp 0x4be557
xor eax, eax
push 0x22
push 0x14a
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
mov eax, dword [0x4dc840]
test eax, eax
je 0x4be589
mov eax, dword [eax + 4]
jmp 0x4be58b
xor eax, eax
push 0x23
push 0xa8
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
mov byte [esp + 0x1a4], 0x63
mov dl, 0xf
cmovne ecx, eax
mov byte [esp + 0x1e], 0x43
mov dword [esp + 0x754], ecx
mov al, 0x34
xor al, byte [esp + 0x1a4]
mov cl, 6
mov byte [esp + 0x1a5], al
mov ch, 0xc
mov byte [esp + 0x17], cl
xor ah, ah
xor cl, byte [esp + 0x1a4]
sub esp, 0x18
mov al, byte [esp + 0x2f]
mov dh, 0xe
mov byte [esp + 0x1be], cl
mov edi, esp
mov cl, byte [esp + 0x1bc]
xor al, cl
mov byte [esp + 0x35], 0x17
mov byte [esp + 0x1c3], al
xor dl, cl
mov al, byte [esp + 0x36]
xor dh, cl
xor al, cl
mov byte [esp + 0x37], ch
mov byte [esp + 0x1c4], al
xor ch, cl
mov al, byte [esp + 0x35]
xor al, cl
mov byte [esp + 0x1c7], ah
mov byte [esp + 0x1c5], al
xor ah, cl
mov al, byte [esp + 0x37]
xor al, cl
mov byte [esp + 0x1c1], ch
mov ecx, edi
mov dword [esp + 0x350], 0x43000000
mov dword [esp + 0x354], 0x42f00000
mov byte [esp + 0x1bf], dl
mov byte [esp + 0x1c0], ah
mov byte [esp + 0x1c2], dh
mov byte [esp + 0x1c6], al
mov byte [esp + 0x1c7], 0
call fcn.004b8bd0
lea ecx, [esp + 0x1bd]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be690
sub ecx, edx
lea eax, [esp + 0x1bd]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x428]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x80c]
push ecx
lea ecx, [esp + 0x33c]
push ecx
lea ecx, [esp + 0x7e0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x764]
call fcn.004b9120
lea ecx, [esp + 0x410]
call fcn.004b7bf0
mov cl, 0x3c
mov byte [esp + 0x140], 0x5a
mov dl, cl
mov byte [esp + 0x17], 0x35
xor cl, byte [esp + 0x140]
mov al, 0x1f
xor al, byte [esp + 0x140]
mov ch, 0x29
mov byte [esp + 0x141], al
sub esp, 0x18
mov al, byte [esp + 0x2f]
mov ah, 0x2f
mov byte [esp + 0x15a], cl
mov dh, 0x33
mov cl, byte [esp + 0x158]
mov edi, esp
xor al, cl
mov byte [esp + 0x36], 0x34
mov byte [esp + 0x15f], al
xor ch, cl
mov al, byte [esp + 0x36]
xor dl, cl
xor ah, cl
mov byte [esp + 0x15d], ch
xor dh, cl
mov byte [esp + 0x161], 0
xor al, cl
mov dword [esp + 0x358], 0x42dc0000
mov ecx, edi
mov dword [esp + 0x35c], 0x43110000
mov byte [esp + 0x15b], dl
mov byte [esp + 0x15c], ah
mov byte [esp + 0x15e], dh
mov byte [esp + 0x160], al
mov byte [esp + 0x161], 0
call fcn.004b8bd0
lea ecx, [esp + 0x159]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be7b0
sub ecx, edx
lea eax, [esp + 0x159]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x410]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x818]
push ecx
lea ecx, [esp + 0x344]
push ecx
lea ecx, [esp + 0x7e0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x764]
call fcn.004b9120
lea ecx, [esp + 0x3f8]
call fcn.004b7bf0
mov dh, 0x45
mov byte [esp + 0x1d2], 0
mov cl, 0x24
mov dword [esp + 0x2c0], 0x43540000
mov ch, 0x2a
mov dword [esp + 0x2c4], 0x43110000
xor cl, dh
mov byte [esp + 0x1cc], dh
xor ch, dh
mov byte [esp + 0x1ce], cl
sub esp, 0x18
mov byte [esp + 0x1e9], ch
mov al, 8
mov byte [esp + 0x1ea], 0
mov dl, 0x26
mov ah, 0x37
mov edi, esp
xor al, dh
xor dl, dh
mov byte [esp + 0x1e5], al
xor ah, dh
mov byte [esp + 0x1e7], dl
mov ecx, edi
mov byte [esp + 0x1e8], ah
call fcn.004b8bd0
lea ecx, [esp + 0x1e5]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be890
sub ecx, edx
lea eax, [esp + 0x1e5]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x620]
call fcn.004c2240
add esp, 0x18
mov ecx, eax
call fcn.004b74d0
lea ecx, [esp + 0x80c]
push ecx
lea ecx, [esp + 0x2c4]
push ecx
lea ecx, [esp + 0x7e0]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x764]
call fcn.004b9120
lea ecx, [esp + 0x608]
call fcn.004b7bf0
xor eax, eax
cmp byte [0x4dc019], al
je 0x4be9b9
mov dword [esp + 0x2c8], 0x43090000
mov cl, 0x64
mov dword [esp + 0x2cc], 0x432e0000
mov dword [esp + 0x1bc], 0x30d3764
mov dword [esp + 0x1c0], 0xa0d440a
mov dword [esp + 0x1c4], 0x130b0a44
mov byte [esp + 0x1c8], al
xor byte [esp + eax + 0x1bd], cl
inc eax
cmp eax, 0xb
jae 0x4be956
mov cl, byte [esp + 0x1bc]
jmp 0x4be940
sub esp, 0x18
mov byte [esp + 0x1e0], 0
mov edi, esp
mov ecx, edi
call fcn.004b8bd0
lea ecx, [esp + 0x1d5]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4be974
sub ecx, edx
lea eax, [esp + 0x1d5]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x638]
call fcn.004c2240
mov ecx, eax
lea edi, [esp + 0x638]
lea eax, [esp + 0x8a4]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x2e0]
jmp 0x4bea74
mov dword [esp + 0x2d0], 0x43040000
mov cl, 0x43
mov dword [esp + 0x2d4], 0x43320000
mov dword [esp + 0x1dc], 0xaaad8143
mov dword [esp + 0x1e0], 0xb263abb1
mov dword [esp + 0x1e4], 0xa3b4aaa6
mov word [esp + 0x1e8], 0xb2
nop dword [eax]
xor byte [esp + eax + 0x1dd], cl
inc eax
cmp eax, 0xc
jae 0x4bea16
mov cl, byte [esp + 0x1dc]
jmp 0x4bea00
sub esp, 0x18
mov byte [esp + 0x201], 0
mov edi, esp
mov ecx, edi
call fcn.004b8bd0
lea ecx, [esp + 0x1f5]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bea34
sub ecx, edx
lea eax, [esp + 0x1f5]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x398]
call fcn.004c25c0
mov ecx, eax
lea edi, [esp + 0x398]
lea eax, [esp + 0x884]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x2e8]
add esp, 0x18
mov dword [esp + 0x18], eax
call fcn.004b74d0
lea ecx, [esp + 0x83c]
push ecx
push dword [esp + 0x1c]
lea ecx, [esp + 0x758]
push dword [esp + 0x18]
push 0xffffffffffffffff
push eax
call fcn.004b9120
mov ecx, edi
call fcn.004b7bf0
sub esp, 0x10
lea edx, [esp + 0x7d0]
cmp byte [0x4dc019], 0
lea ecx, [esp + 0x760]
mov eax, esp
push 5
push 0xff1d2025
je 0x4bead2
movaps xmm0, xmmword [0x4d5fc0]
jmp 0x4bead9
movaps xmm0, xmmword [0x4d5fb0]
movups xmmword [eax], xmm0
call fcn.004bb5b0
mov eax, dword [0x4dc820]
add esp, 0x18
test eax, eax
je 0x4beaf2
mov eax, dword [eax + 4]
jmp 0x4beaf4
xor eax, eax
push 0xe8
push 0x127
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x4dc860]
mov dword [esp + 0x754], ecx
test eax, eax
je 0x4beb29
mov eax, dword [eax + 4]
jmp 0x4beb2b
xor eax, eax
push 0xe8
push 0x14f
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
lea edx, [esp + 0x7c0]
movaps xmm0, xmmword [0x4d6090]
test eax, eax
cmovne ecx, eax
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x764], ecx
lea ecx, [esp + 0x760]
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004bb5b0
add esp, 0x18
cmp dword [0x4dc7c0], 4
jne 0x4bebb8
mov eax, dword [0x4dc7f0]
test eax, eax
je 0x4beb95
mov eax, dword [eax + 4]
jmp 0x4beb97
xor eax, eax
push 0x11d
push 0x144
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4bebef
mov dword [esp + 0x754], eax
jmp 0x4bebef
mov eax, dword [0x4dc7e0]
test eax, eax
je 0x4bebc6
mov eax, dword [eax + 4]
jmp 0x4bebc8
xor eax, eax
push 0x11d
push 0x144
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
movaps xmm0, xmmword [0x4d60a0]
lea edx, [esp + 0x7c0]
sub esp, 0x10
lea ecx, [esp + 0x760]
mov eax, esp
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004bb5b0
add esp, 0x18
lea ecx, [esp + 0x750]
cmp dword [0x4dc7c0], 5
push 0x15d
jne 0x4bec53
cmp byte [0x4dc7c6], 0
je 0x4bec46
push 0x146
push dword [0x4dc810]
jmp 0x4bec74
push 0x145
push dword [0x4dc81c]
jmp 0x4bec74
cmp byte [0x4dc7c6], 0
je 0x4bec69
push 0x146
push dword [0x4dc7f8]
jmp 0x4bec74
push 0x145
push dword [0x4dc848]
call fcn.004b9270
movaps xmm0, xmmword [0x4d5fa0]
lea edx, [esp + 0x7c0]
sub esp, 0x10
lea ecx, [esp + 0x760]
mov eax, esp
push 5
push 0xff1d2025
movups xmmword [eax], xmm0
call fcn.004bb5b0
add esp, 0x18
cmp byte [0x4dc018], 0
je 0x4becdb
cmp dword [0x4dc7c0], 0xfa2
lea ecx, [esp + 0x750]
push 0x197
push 0x2d
jne 0x4becd0
push dword [0x4dc83c]
jmp 0x4becd6
push dword [0x4dc850]
call fcn.004b9270
movaps xmm0, xmmword [0x4d6070]
lea ecx, [esp + 0x750]
sub esp, 0x10
cmp dword [0x4dc7c0], 1
mov eax, esp
push 6
movups xmmword [eax], xmm0
jne 0x4bed0a
push 0xffffde72
lea edx, [esp + 0x848]
jmp 0x4bed16
push 0xffffc95d
lea edx, [esp + 0x830]
call fcn.004bb5b0
add esp, 0x18
push 0
push dword [esp + 0x754]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
cmp byte [0x4dc019], 0
mov dword [esp + 0x754], ecx
je 0x4bee3a
mov byte [esp + 0x10c], 0x66
mov al, 0x35
xor al, byte [esp + 0x10c]
mov ah, 8
mov byte [esp + 0x10d], al
mov cl, 0xf
mov al, byte [esp + 0x10c]
mov dl, 1
xor cl, al
mov byte [esp + 0x17], ah
mov ch, 0x46
mov byte [esp + 0x10e], cl
xor ch, al
mov byte [esp + 0x114], 0
mov dh, 0x2f
mov byte [esp + 0x111], ch
xor dl, al
mov dword [esp + 0x2d8], 0x43170000
xor ah, al
mov dword [esp + 0x2dc], 0x43e38000
xor dh, al
mov byte [esp + 0x10f], dl
mov al, byte [esp + 0x17]
sub esp, 0x18
xor al, byte [esp + 0x124]
mov edi, esp
mov ecx, edi
mov byte [esp + 0x128], ah
mov byte [esp + 0x12a], dh
mov byte [esp + 0x12b], al
mov byte [esp + 0x12c], 0
call fcn.004b8bd0
lea ecx, [esp + 0x125]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bedf5
sub ecx, edx
lea eax, [esp + 0x125]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x3b0]
call fcn.004c2240
mov ecx, eax
lea edi, [esp + 0x3b0]
lea eax, [esp + 0x89c]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x2f0]
jmp 0x4beef6
mov dh, 0x6e
mov byte [esp + 0x1da], 0
mov cl, 0x80
mov dword [esp + 0x2e0], 0x43110000
mov ch, 0x86
mov dword [esp + 0x2e4], 0x43e30000
xor cl, dh
mov byte [esp + 0x1d4], dh
xor ch, dh
mov byte [esp + 0x1d6], cl
sub esp, 0x18
mov byte [esp + 0x1f1], ch
mov al, 0xac
mov byte [esp + 0x1f2], 0
mov dl, 0x87
mov ah, 0x9c
mov edi, esp
xor al, dh
xor dl, dh
mov byte [esp + 0x1ed], al
xor ah, dh
mov byte [esp + 0x1ef], dl
mov ecx, edi
mov byte [esp + 0x1f0], ah
call fcn.004b8bd0
lea ecx, [esp + 0x1ed]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4beeb6
sub ecx, edx
lea eax, [esp + 0x1ed]
push ecx
push eax
mov ecx, edi
call fcn.004b8860
lea ecx, [esp + 0x3c8]
call fcn.004c25c0
mov ecx, eax
lea edi, [esp + 0x3c8]
lea eax, [esp + 0x894]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x2f8]
add esp, 0x18
mov dword [esp + 0x18], eax
call fcn.004b74d0
lea ecx, [esp + 0x848]
push ecx
push dword [esp + 0x1c]
lea ecx, [esp + 0x758]
push dword [esp + 0x18]
push 0xffffffffffffffff
push eax
call fcn.004b9120
mov ecx, edi
call fcn.004b7bf0
push 2
push dword [esp + 0x754]
call dword [sym.imp.gdiplus.dll_GdipSetCompositingQuality]
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
cmp dword [0x4dc7c0], 0x3e9
mov dword [esp + 0x754], ecx
jne 0x4bef87
mov eax, dword [0x4dc830]
test eax, eax
je 0x4bef64
mov eax, dword [eax + 4]
jmp 0x4bef66
xor eax, eax
push 0x22b
push 0x97
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4befbe
mov dword [esp + 0x754], eax
jmp 0x4befbe
mov eax, dword [0x4dc808]
test eax, eax
je 0x4bef95
mov eax, dword [eax + 4]
jmp 0x4bef97
xor eax, eax
push 0x22b
push 0x97
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
cmp dword [0x4dc7c0], 0x3ea
jne 0x4beffb
mov eax, dword [0x4dc7e4]
test eax, eax
je 0x4befd8
mov eax, dword [eax + 4]
jmp 0x4befda
xor eax, eax
push 0x22b
push 0xbf
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4bf032
mov dword [esp + 0x754], eax
jmp 0x4bf032
mov eax, dword [0x4dc834]
test eax, eax
je 0x4bf009
mov eax, dword [eax + 4]
jmp 0x4bf00b
xor eax, eax
push 0x22b
push 0xbf
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
cmp dword [0x4dc7c0], 0x3eb
jne 0x4bf06f
mov eax, dword [0x4dc804]
test eax, eax
je 0x4bf04c
mov eax, dword [eax + 4]
jmp 0x4bf04e
xor eax, eax
push 0x22b
push 0xe7
push eax
push dword [esp + 0x75c]
call esi
test eax, eax
je 0x4bf0a6
mov dword [esp + 0x754], eax
jmp 0x4bf0a6
mov eax, dword [0x4dc80c]
test eax, eax
je 0x4bf07d
mov eax, dword [eax + 4]
jmp 0x4bf07f
xor eax, eax
push 0x22b
push 0xe7
push eax
push dword [esp + 0x75c]
call esi
mov ecx, dword [esp + 0x754]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x754], ecx
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x92845c71
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf0f1
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf0d4
cmp edx, 0xb90a78c7
je 0x4bf0fa
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bf0c4
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov byte [esp + 0x118], 0x4c
mov al, 0x1a
xor al, byte [esp + 0x118]
mov cl, 3
mov byte [esp + 0x119], al
mov ch, 0x14
mov al, byte [esp + 0x118]
mov dl, 7
xor cl, al
mov byte [esp + 0x11f], 0
xor ch, al
mov byte [esp + 0x11a], cl
mov ah, 0x2e
mov byte [esp + 0x11d], ch
mov dh, 0x7b
mov byte [esp + 0x11f], 0
xor dl, al
lea ecx, [esp + 0x904]
xor ah, al
mov byte [esp + 0x11b], dl
xor dh, al
mov byte [esp + 0x11c], ah
mov byte [esp + 0x11e], dh
call fcn.004b8bd0
lea ecx, [esp + 0x119]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf1a0
sub ecx, edx
lea eax, [esp + 0x119]
push ecx
push eax
lea ecx, [esp + 0x90c]
call fcn.004b8860
mov byte [esp + 0x1b0], 0x6b
mov al, 0x13
xor al, byte [esp + 0x1b0]
mov cl, 0x3a
xor cl, byte [esp + 0x1b0]
mov ch, 3
mov byte [esp + 0x1b1], al
mov dl, 1
mov byte [esp + 0x1b2], cl
mov ah, 0x27
mov cl, byte [esp + 0x1b0]
mov dh, 0x5c
mov byte [esp + 0x17], 0x3f
xor ch, cl
mov al, byte [esp + 0x17]
xor dl, cl
xor al, cl
mov byte [esp + 0x1e], 0x5e
mov byte [esp + 0x1b7], al
xor ah, cl
mov al, byte [esp + 0x1e]
xor dh, cl
xor al, cl
mov byte [esp + 0x1d], 0x26
mov byte [esp + 0x1b8], al
mov al, byte [esp + 0x1d]
xor al, cl
mov byte [esp + 0x1f], 0x12
mov byte [esp + 0x1b9], al
mov al, byte [esp + 0x1f]
xor al, cl
mov byte [esp + 0x1b5], ch
mov byte [esp + 0x1bb], 0
lea ecx, [esp + 0x8d4]
mov byte [esp + 0x1b3], dl
mov byte [esp + 0x1b4], ah
mov byte [esp + 0x1b6], dh
mov byte [esp + 0x1ba], al
mov byte [esp + 0x1bb], 0
call fcn.004b8bd0
lea ecx, [esp + 0x1b1]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf287
sub ecx, edx
lea eax, [esp + 0x1b1]
push ecx
push eax
lea ecx, [esp + 0x8dc]
call fcn.004b8860
mov byte [esp + 0x158], 0x74
mov al, 0x47
xor al, byte [esp + 0x158]
mov cl, 0x31
mov byte [esp + 0x159], al
mov dl, 0x43
mov al, byte [esp + 0x158]
mov ah, 0x1f
xor cl, al
mov byte [esp + 0x17], 0x41
xor dl, al
mov byte [esp + 0x15a], cl
xor ah, al
mov byte [esp + 0x160], 0
mov ch, 7
mov byte [esp + 0x15c], ah
xor ch, al
mov byte [esp + 0x15b], dl
mov dh, 0x1a
mov byte [esp + 0x15d], ch
xor dh, al
mov byte [esp + 0x160], 0
mov al, byte [esp + 0x17]
lea ecx, [esp + 0x8d4]
xor al, byte [esp + 0x158]
mov byte [esp + 0x15f], al
lea eax, [esp + 0x159]
push eax
mov byte [esp + 0x162], dh
call fcn.004b8bf0
test al, al
je 0x4bf4da
mov byte [esp + 0x164], 0x71
mov al, 7
xor al, byte [esp + 0x164]
mov cl, 0x13
xor cl, byte [esp + 0x164]
mov ch, 0x47
mov byte [esp + 0x165], al
mov dl, 1
mov byte [esp + 0x166], cl
mov ah, 0x1d
mov cl, byte [esp + 0x164]
mov dh, 0x16
mov byte [esp + 0x17], 0x45
xor ch, cl
mov al, byte [esp + 0x17]
xor dl, cl
xor al, cl
mov byte [esp + 0x1e], 0x23
mov byte [esp + 0x16b], al
xor ah, cl
mov al, byte [esp + 0x1e]
xor dh, cl
xor al, cl
mov byte [esp + 0x1d], 0x3c
mov byte [esp + 0x16c], al
mov al, byte [esp + 0x1d]
xor al, cl
mov byte [esp + 0x169], ch
mov byte [esp + 0x16e], 0
lea ecx, [esp + 0x8bc]
mov byte [esp + 0x167], dl
mov byte [esp + 0x168], ah
mov byte [esp + 0x16a], dh
mov byte [esp + 0x16d], al
mov byte [esp + 0x16e], 0
call fcn.004b8bd0
lea ecx, [esp + 0x165]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf3f5
sub ecx, edx
lea eax, [esp + 0x165]
push ecx
push eax
lea ecx, [esp + 0x8c4]
call fcn.004b8860
mov byte [esp + 0x134], 0x6c
mov cl, 0x2a
xor cl, byte [esp + 0x134]
mov al, 4
xor al, byte [esp + 0x134]
mov ch, 0x1a
mov byte [esp + 0x135], al
mov dl, 0x3d
mov byte [esp + 0x136], cl
mov dh, 0x28
mov cl, byte [esp + 0x134]
mov ah, 0x5a
mov byte [esp + 0x17], 0x21
xor dl, cl
mov al, byte [esp + 0x17]
xor ch, cl
xor al, cl
mov byte [esp + 0x1e], 0x2f
xor dh, cl
mov byte [esp + 0x13b], al
mov al, byte [esp + 0x1e]
xor ah, cl
xor al, cl
mov byte [esp + 0x139], ch
lea ecx, [esp + 0x135]
mov byte [esp + 0x13d], 0
mov byte [esp + 0x137], dl
mov byte [esp + 0x13a], dh
lea edx, [ecx + 1]
mov byte [esp + 0x138], ah
mov byte [esp + 0x13c], al
mov byte [esp + 0x13d], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf4b0
sub ecx, edx
lea eax, [esp + 0x135]
push ecx
push eax
lea ecx, [esp + 0x8c4]
call fcn.004b7e00
lea ecx, [esp + 0x8bc]
call fcn.004b7770
lea ecx, [esp + 0x8d4]
call fcn.004b7770
lea ecx, [esp + 0x904]
call fcn.004b7770
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x62de7241
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf53d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf520
cmp edx, 0xa37d1c1f
je 0x4bf546
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bf510
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 1
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc880]
xor ecx, ecx
movaps xmm0, xmmword [esp + 0x8a0]
movaps xmmword [esp + 0x760], xmm0
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x372f102b
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf5cd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf5b0
cmp edx, 0xaf8e8120
je 0x4bf5d6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bf5a0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push dword [esp + 0xfc]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4dc7d0], 1
mov dword [esp + 0x760], 0x37
mov dword [esp + 0x764], 0x11b
jne 0x4bf67d
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x5f66ea96
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf66d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf650
cmp edx, 0x2afe75a0
je 0x4bf676
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bf640
push 0xcccccc
jmp 0x4bf6eb
mov eax, dword [0x4dc7c0]
cmp eax, 0x7d1
je 0x4bf692
cmp eax, 4
jne 0x4bf70e
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x15b802ec
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf6dd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf6c0
cmp edx, 0x6bd8772
je 0x4bf6e6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bf6b0
push 0x969696
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edx, 0x4ce469
mov ecx, 0x4dc098
call fcn.004c1c60
mov edi, dword [0x4dc870]
xor ecx, ecx
test al, al
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
je 0x4bf7b9
mov esi, dword [eax + edi + 0x20]
add eax, edi
mov dword [esp + 0x18], eax
add esi, edi
mov ecx, dword [esi]
mov edx, 0xb6659897
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf771
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf754
cmp edx, 0xbf002c7d
je 0x4bf77a
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bf744
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, 0x4dc098
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b7590
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call esi
jmp 0x4bfa8d
mov esi, dword [eax + edi + 0x20]
add eax, edi
add esi, edi
mov dword [esp + 0x18], eax
cmp byte [0x4dc019], 0
je 0x4bf932
mov ecx, dword [esi]
mov edx, 0xe5b6f997
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf7ff
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf7e2
cmp edx, 0xf9ff3f7d
je 0x4bf808
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bf7d2
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x59
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x48]
add eax, edi
mov byte [esp + 0x48], 0x49
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0x6f
lea ecx, [esp + 0x48]
mov byte [esp + 0x49], al
call fcn.004b69f0
push 0x75
lea ecx, [esp + 0x48]
mov byte [esp + 0x4a], al
call fcn.004b69f0
push 0x72
lea ecx, [esp + 0x48]
mov byte [esp + 0x4b], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0x48]
mov byte [esp + 0x4c], al
call fcn.004b69f0
push 0x49
lea ecx, [esp + 0x48]
mov byte [esp + 0x4d], al
call fcn.004b69f0
push 0x6e
lea ecx, [esp + 0x48]
mov byte [esp + 0x4e], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0x48]
mov byte [esp + 0x4f], al
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0x48]
mov byte [esp + 0x50], al
call fcn.004b69f0
push 0x78
lea ecx, [esp + 0x48]
mov byte [esp + 0x51], al
call fcn.004b69f0
mov byte [esp + 0x4e], al
xor esi, esi
mov byte [esp + 0x4f], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x49]
call fcn.004b69e0
lea ecx, [esp + 0x44]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x49]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bf8d0
push 0xa
lea ecx, [esp + 0x49]
call fcn.004b69e0
lea ecx, [esp + 0x45]
mov byte [eax], 0
call fcn.004b69d0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4bfa8d
mov ecx, dword [esi]
mov edx, 0xedc99d1e
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bf95f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bf942
cmp edx, 0x3a356daa
je 0x4bf968
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bf932
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x54]
add eax, edi
mov byte [esp + 0x54], 0x42
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0xffffffffffffffe0
lea ecx, [esp + 0x54]
mov byte [esp + 0x55], al
call fcn.004b69f0
push 0xfffffffffffffff8
lea ecx, [esp + 0x54]
mov byte [esp + 0x56], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0x54]
mov byte [esp + 0x57], al
call fcn.004b69f0
push 0xffffffffffffffc8
lea ecx, [esp + 0x54]
mov byte [esp + 0x58], al
call fcn.004b69f0
push 0xffffffffffffffed
lea ecx, [esp + 0x54]
mov byte [esp + 0x59], al
call fcn.004b69f0
push 0xffffffffffffffe4
lea ecx, [esp + 0x54]
mov byte [esp + 0x5a], al
call fcn.004b69f0
push 0xffffffffffffffe5
lea ecx, [esp + 0x54]
mov byte [esp + 0x5b], al
call fcn.004b69f0
push 0xffffffffffffffea
lea ecx, [esp + 0x54]
mov byte [esp + 0x5c], al
call fcn.004b69f0
push 0xfffffffffffffff1
lea ecx, [esp + 0x54]
mov byte [esp + 0x5d], al
call fcn.004b69f0
mov byte [esp + 0x5a], al
xor esi, esi
mov byte [esp + 0x5b], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x55]
call fcn.004b69e0
lea ecx, [esp + 0x50]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x55]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4bfa30
push 0xa
lea ecx, [esp + 0x55]
call fcn.004b69e0
lea ecx, [esp + 0x51]
mov byte [eax], 0
call fcn.004b69d0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x98ba99eb
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfadd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfac0
cmp edx, 0x5aea708d
je 0x4bfae6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bfab0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4dc7d0], 2
mov dword [esp + 0x760], 0x37
mov dword [esp + 0x764], 0x15b
jne 0x4bfba5
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x2f72ad34
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfb7d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfb60
cmp edx, 0xe5d11f9a
je 0x4bfb86
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bfb50
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xcccccc
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
jmp 0x4bfc30
mov eax, dword [0x4dc7c0]
cmp eax, 0x7d2
je 0x4bfbba
cmp eax, 5
jne 0x4bfc3e
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xb2c526b2
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfc0d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfbf0
cmp edx, 0x7dfc940c
je 0x4bfc16
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bfbe0
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x969696
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [esi + 0x1c]
push dword [esp + 0x24]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edx, 0x4ce469
mov ecx, 0x4dc0c8
call fcn.004c1c60
xor ecx, ecx
mov dword [esp + 0x10], ecx
test al, al
je 0x4bfe3d
cmp byte [0x4dc7c6], cl
je 0x4bfcf5
mov edi, dword [0x4dc870]
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0xd0e5dd42
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfcad
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfc90
cmp edx, 0x61dfca9e
je 0x4bfcb6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bfc80
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
mov ecx, 0x4dc0c8
movzx edx, word [eax + edi]
mov eax, dword [esi + 0x1c]
lea eax, [eax + edx*4]
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b7590
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call esi
jmp 0x4c016d
mov edi, dword [0x4dc880]
mov dword [esp + 0x764], 0x159
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x8cad7992
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfd4d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfd30
cmp edx, 0x4a924541
je 0x4bfd56
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bfd20
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x28]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x7820c5e
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfdcd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfdb0
cmp edx, 0xb1f177ea
je 0x4bfdd6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bfda0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, 0x4dc0c8
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b7580
push eax
push 0
lea eax, [esp + 0x3d0]
mov ecx, 0x4dc884
push eax
call fcn.004b7530
mov ecx, eax
call fcn.004b7590
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call esi
lea ecx, [esp + 0x3c8]
call fcn.004b7770
jmp 0x4c016d
mov edi, dword [0x4dc870]
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4dc019], 0
je 0x4c0012
mov ecx, dword [esi]
mov edx, 0xa864cb3a
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4bfe8f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4bfe72
cmp edx, 0xcbc78176
je 0x4bfe98
inc dword [esp + 0x10]
add esi, 4
jmp 0x4bfe62
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x59
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x7c]
add eax, edi
mov byte [esp + 0x7c], 0x63
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0x6f
lea ecx, [esp + 0x7c]
mov byte [esp + 0x7d], al
call fcn.004b69f0
push 0x75
lea ecx, [esp + 0x7c]
mov byte [esp + 0x7e], al
call fcn.004b69f0
push 0x72
lea ecx, [esp + 0x7c]
mov byte [esp + 0x7f], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0x7c]
mov byte [esp + 0x80], al
call fcn.004b69f0
push 0x50
lea ecx, [esp + 0x7c]
mov byte [esp + 0x81], al
call fcn.004b69f0
push 0x61
lea ecx, [esp + 0x7c]
mov byte [esp + 0x82], al
call fcn.004b69f0
push 0x73
lea ecx, [esp + 0x7c]
mov byte [esp + 0x83], al
call fcn.004b69f0
push 0x73
lea ecx, [esp + 0x7c]
mov byte [esp + 0x84], al
call fcn.004b69f0
push 0x77
lea ecx, [esp + 0x7c]
mov byte [esp + 0x85], al
call fcn.004b69f0
push 0x6f
lea ecx, [esp + 0x7c]
mov byte [esp + 0x86], al
call fcn.004b69f0
push 0x72
lea ecx, [esp + 0x7c]
mov byte [esp + 0x87], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0x7c]
mov byte [esp + 0x88], al
call fcn.004b69f0
mov byte [esp + 0x85], al
xor esi, esi
mov byte [esp + 0x86], 0
nop dword [eax]
push esi
lea ecx, [esp + 0x7d]
call fcn.004b69e0
lea ecx, [esp + 0x78]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x7d]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xd
jb 0x4bffb0
push 0xd
lea ecx, [esp + 0x7d]
call fcn.004b69e0
lea ecx, [esp + 0x79]
mov byte [eax], 0
call fcn.004b69d0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4c016d
mov ecx, dword [esi]
mov edx, 0x11f30da0
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c003f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0022
cmp edx, 0x600bd98
je 0x4c0048
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0012
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x60]
add eax, edi
mov byte [esp + 0x60], 0x3e
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0xffffffffffffffe0
lea ecx, [esp + 0x60]
mov byte [esp + 0x61], al
call fcn.004b69f0
push 0xfffffffffffffff8
lea ecx, [esp + 0x60]
mov byte [esp + 0x62], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0x60]
mov byte [esp + 0x63], al
call fcn.004b69f0
push 0xffffffffffffffcf
lea ecx, [esp + 0x60]
mov byte [esp + 0x64], al
call fcn.004b69f0
push 0xffffffffffffffe0
lea ecx, [esp + 0x60]
mov byte [esp + 0x65], al
call fcn.004b69f0
push 0xfffffffffffffff0
lea ecx, [esp + 0x60]
mov byte [esp + 0x66], al
call fcn.004b69f0
push 0xffffffffffffffee
lea ecx, [esp + 0x60]
mov byte [esp + 0x67], al
call fcn.004b69f0
push 0xffffffffffffffeb
lea ecx, [esp + 0x60]
mov byte [esp + 0x68], al
call fcn.004b69f0
push 0xfffffffffffffffc
lea ecx, [esp + 0x60]
mov byte [esp + 0x69], al
call fcn.004b69f0
mov byte [esp + 0x66], al
xor esi, esi
mov byte [esp + 0x67], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x61]
call fcn.004b69e0
lea ecx, [esp + 0x5c]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x61]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xa
jb 0x4c0110
push 0xa
lea ecx, [esp + 0x61]
call fcn.004b69e0
lea ecx, [esp + 0x5d]
mov byte [eax], 0
call fcn.004b69d0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x7434cadb
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c01bd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c01a0
cmp edx, 0xbdc3c6fd
je 0x4c01c6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0190
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x4e636018
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c023d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0220
cmp edx, 0x99130e47
je 0x4c0246
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0210
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push dword [esp + 0x20c]
mov eax, dword [edx + 0x24]
push dword [esp + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
movaps xmm0, xmmword [esp + 0x8a0]
mov ecx, 0x4dc0b0
movaps xmmword [esp + 0x760], xmm0
push 0x4ce469
mov dword [esp + 0x768], 0x1fb
call fcn.004b8bf0
test al, al
je 0x4c09ca
cmp dword [0x4dc7c0], 0xfa1
jne 0x4c032e
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x3d322b87
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c02fd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c02e0
cmp edx, 0x8440d789
je 0x4c0306
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c02d0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x828282
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4dc019], cl
je 0x4c0661
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xf1c7089f
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c038d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0370
cmp edx, 0xbfd9f425
je 0x4c0396
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0360
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x48
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xc0]
add eax, edi
mov byte [esp + 0xc0], 0x78
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0x61
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc1], al
call fcn.004b69f0
push 0x76
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc2], al
call fcn.004b69f0
push 0x69
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc3], al
call fcn.004b69f0
push 0x6e
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc4], al
call fcn.004b69f0
push 0x67
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc5], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc6], al
call fcn.004b69f0
push 0x74
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc7], al
call fcn.004b69f0
push 0x72
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc8], al
call fcn.004b69f0
push 0x6f
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc9], al
call fcn.004b69f0
push 0x75
lea ecx, [esp + 0xc0]
mov byte [esp + 0xca], al
call fcn.004b69f0
push 0x62
lea ecx, [esp + 0xc0]
mov byte [esp + 0xcb], al
call fcn.004b69f0
push 0x6c
lea ecx, [esp + 0xc0]
mov byte [esp + 0xcc], al
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0xc0]
mov byte [esp + 0xcd], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0xc0]
mov byte [esp + 0xce], al
call fcn.004b69f0
push 0x73
lea ecx, [esp + 0xc0]
mov byte [esp + 0xcf], al
call fcn.004b69f0
push 0x69
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd0], al
call fcn.004b69f0
mov byte [esp + 0xcd], al
lea ecx, [esp + 0xbc]
push 0x67
call fcn.004b69f0
push 0x6e
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd2], al
call fcn.004b69f0
push 0x69
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd3], al
call fcn.004b69f0
push 0x6e
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd4], al
call fcn.004b69f0
push 0x67
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd5], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd6], al
call fcn.004b69f0
push 0x69
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd7], al
call fcn.004b69f0
push 0x6e
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd8], al
call fcn.004b69f0
push 0x3f
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd9], al
call fcn.004b69f0
mov byte [esp + 0xd6], al
xor esi, esi
mov byte [esp + 0xd7], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0xc1]
call fcn.004b69e0
lea ecx, [esp + 0xbc]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0xc1]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0x1a
jb 0x4c05f0
push 0x1a
lea ecx, [esp + 0xc1]
call fcn.004b69e0
lea ecx, [esp + 0xbd]
mov byte [eax], 0
call fcn.004b69d0
push 1
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4c096d
mov ecx, dword [esi]
mov edx, 0x5e59d546
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c068e
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0671
cmp edx, 0x834a2a52
je 0x4c0697
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0661
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc2
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xdc]
add eax, edi
mov byte [esp + 0xdc], 0x55
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0xffffffffffffffee
lea ecx, [esp + 0xdc]
mov byte [esp + 0xdd], al
call fcn.004b69f0
push 0xffffffffffffffe7
lea ecx, [esp + 0xdc]
mov byte [esp + 0xde], al
call fcn.004b69f0
push 0xffffffffffffffed
lea ecx, [esp + 0xdc]
mov byte [esp + 0xdf], al
call fcn.004b69f0
push 0xffffffffffffffe8
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe0], al
call fcn.004b69f0
push 0xffffffffffffffea
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe1], al
call fcn.004b69f0
push 0xffffffffffffffeb
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe2], al
call fcn.004b69f0
push 0xffffffffffffffe8
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe3], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe4], al
call fcn.004b69f0
push 0xffffffffffffffef
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe5], al
call fcn.004b69f0
push 0xfffffffffffffff0
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe6], al
call fcn.004b69f0
push 0xffffffffffffffee
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe7], al
call fcn.004b69f0
push 0xffffffffffffffe1
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe8], al
call fcn.004b69f0
push 0xffffffffffffffeb
lea ecx, [esp + 0xdc]
mov byte [esp + 0xe9], al
call fcn.004b69f0
push 0xffffffffffffffe5
lea ecx, [esp + 0xdc]
mov byte [esp + 0xea], al
call fcn.004b69f0
push 0xffffffffffffffec
lea ecx, [esp + 0xdc]
mov byte [esp + 0xeb], al
call fcn.004b69f0
push 0xfffffffffffffffb
lea ecx, [esp + 0xdc]
mov byte [esp + 0xec], al
call fcn.004b69f0
mov byte [esp + 0xe9], al
lea ecx, [esp + 0xd8]
push 0x20
call fcn.004b69f0
push 0xfffffffffffffff1
lea ecx, [esp + 0xdc]
mov byte [esp + 0xee], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0xdc]
mov byte [esp + 0xef], al
call fcn.004b69f0
push 0xffffffffffffffe2
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf0], al
call fcn.004b69f0
push 0xfffffffffffffff5
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf1], al
call fcn.004b69f0
push 0xffffffffffffffee
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf2], al
call fcn.004b69f0
push 0xffffffffffffffe4
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf3], al
call fcn.004b69f0
push 0xffffffffffffffee
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf4], al
call fcn.004b69f0
push 0xffffffffffffffec
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf5], al
call fcn.004b69f0
push 0x3f
lea ecx, [esp + 0xdc]
mov byte [esp + 0xf6], al
call fcn.004b69f0
mov byte [esp + 0xf3], al
xor esi, esi
mov byte [esp + 0xf4], 0
push esi
lea ecx, [esp + 0xdd]
call fcn.004b69e0
lea ecx, [esp + 0xd8]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0xdd]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0x1b
jb 0x4c0901
push 0x1b
lea ecx, [esp + 0xdd]
call fcn.004b69e0
lea ecx, [esp + 0xd9]
mov byte [eax], 0
call fcn.004b69d0
push 1
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xa7833295
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c09c1
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c09a0
cmp edx, 0xed5b06fb
je 0x4c0b36
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0990
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0xc97ba67c
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0a1d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0a00
cmp edx, 0xf9fbbdc2
je 0x4c0a26
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c09f0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x5dc9ff
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x98d6ca1d
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0a9d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0a80
cmp edx, 0x725cd7e7
je 0x4c0aa6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0a70
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
mov ecx, 0x4dc0b0
movzx edx, word [eax + edi]
mov eax, dword [esi + 0x1c]
lea eax, [eax + edx*4]
mov esi, dword [eax + edi]
add esi, edi
call fcn.004b7590
push 1
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call esi
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x97d6c88a
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0b2d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0b10
cmp edx, 0xd14f9c64
je 0x4c0b36
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0b00
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4dc7c0], 0xfa2
mov dword [esp + 0x760], 0x49
mov dword [esp + 0x764], 0x195
jne 0x4c0bfe
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0x612160a1
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0bcd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0bb0
cmp edx, 0x340cb677
je 0x4c0bd6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0ba0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x828282
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4dc019], cl
je 0x4c0da2
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x930acc03
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0c5d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0c40
cmp edx, 0xbda06659
je 0x4c0c66
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0c30
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x52
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x6c]
add eax, edi
mov byte [esp + 0x6c], 0x7d
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0x6c]
mov byte [esp + 0x6d], al
call fcn.004b69f0
push 0x6d
lea ecx, [esp + 0x6c]
mov byte [esp + 0x6e], al
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0x6c]
mov byte [esp + 0x6f], al
call fcn.004b69f0
push 0x6d
lea ecx, [esp + 0x6c]
mov byte [esp + 0x70], al
call fcn.004b69f0
push 0x62
lea ecx, [esp + 0x6c]
mov byte [esp + 0x71], al
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0x6c]
mov byte [esp + 0x72], al
call fcn.004b69f0
push 0x72
lea ecx, [esp + 0x6c]
mov byte [esp + 0x73], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0x6c]
mov byte [esp + 0x74], al
call fcn.004b69f0
push 0x4d
lea ecx, [esp + 0x6c]
mov byte [esp + 0x75], al
call fcn.004b69f0
push 0x65
lea ecx, [esp + 0x6c]
mov byte [esp + 0x76], al
call fcn.004b69f0
mov byte [esp + 0x73], al
xor esi, esi
mov byte [esp + 0x74], 0
nop dword [eax + eax]
push esi
lea ecx, [esp + 0x6d]
call fcn.004b69e0
lea ecx, [esp + 0x68]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x6d]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xb
jb 0x4c0d40
push 0xb
lea ecx, [esp + 0x6d]
call fcn.004b69e0
lea ecx, [esp + 0x69]
mov byte [eax], 0
call fcn.004b69d0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4c0f9d
mov ecx, dword [esi]
mov edx, 0x848c7062
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0dcf
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0db2
cmp edx, 0x6d2732fe
je 0x4c0dd8
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0da2
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc7
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x9c]
add eax, edi
mov byte [esp + 0x9c], 9
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0xffffffffffffffe0
lea ecx, [esp + 0x9c]
mov byte [esp + 0x9d], al
call fcn.004b69f0
push 0xffffffffffffffef
lea ecx, [esp + 0x9c]
mov byte [esp + 0x9e], al
call fcn.004b69f0
push 0xffffffffffffffee
lea ecx, [esp + 0x9c]
mov byte [esp + 0x9f], al
call fcn.004b69f0
push 0xffffffffffffffec
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa0], al
call fcn.004b69f0
push 0xffffffffffffffed
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa1], al
call fcn.004b69f0
push 0xffffffffffffffe8
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa2], al
call fcn.004b69f0
push 0xfffffffffffffff2
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa3], al
call fcn.004b69f0
push 0xfffffffffffffffc
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa4], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa5], al
call fcn.004b69f0
push 0xffffffffffffffcc
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa6], al
call fcn.004b69f0
push 0xffffffffffffffe5
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa7], al
call fcn.004b69f0
push 0xffffffffffffffed
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa8], al
call fcn.004b69f0
push 0xffffffffffffffff
lea ecx, [esp + 0x9c]
mov byte [esp + 0xa9], al
call fcn.004b69f0
mov byte [esp + 0xa6], al
xor esi, esi
mov byte [esp + 0xa7], 0
push esi
lea ecx, [esp + 0x9d]
call fcn.004b69e0
lea ecx, [esp + 0x98]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x9d]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x4c0f31
push 0xe
lea ecx, [esp + 0x9d]
call fcn.004b69e0
lea ecx, [esp + 0x99]
mov byte [eax], 0
call fcn.004b69d0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x882ea279
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c0fed
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c0fd0
cmp edx, 0x1bd4e24f
je 0x4c0ff6
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c0fc0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x555555
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
cmp dword [0x4dc7c0], 0xfa3
mov dword [esp + 0x760], 0xe6
mov dword [esp + 0x764], 0x195
jne 0x4c10be
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop
mov ecx, dword [esi]
mov edx, 0xf70a6d12
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c108d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c1070
cmp edx, 0x8d8c7e2c
je 0x4c1096
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c1060
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x828282
push dword [esp + 0x24]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov edi, dword [0x4dc870]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
cmp byte [0x4dc019], cl
je 0x4c1321
nop dword [eax + eax]
mov ecx, dword [esi]
mov edx, 0x3c8a0834
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c111d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c1100
cmp edx, 0x863bd82c
je 0x4c1126
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c10f0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0x46
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xac]
add eax, edi
mov byte [esp + 0xac], 0x1c
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0x6f
lea ecx, [esp + 0xac]
mov byte [esp + 0xad], al
call fcn.004b69f0
push 0x72
lea ecx, [esp + 0xac]
mov byte [esp + 0xae], al
call fcn.004b69f0
push 0x67
lea ecx, [esp + 0xac]
mov byte [esp + 0xaf], al
call fcn.004b69f0
push 0x6f
lea ecx, [esp + 0xac]
mov byte [esp + 0xb0], al
call fcn.004b69f0
push 0x74
lea ecx, [esp + 0xac]
mov byte [esp + 0xb1], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0xac]
mov byte [esp + 0xb2], al
call fcn.004b69f0
push 0x50
lea ecx, [esp + 0xac]
mov byte [esp + 0xb3], al
call fcn.004b69f0
push 0x61
lea ecx, [esp + 0xac]
mov byte [esp + 0xb4], al
call fcn.004b69f0
push 0x73
lea ecx, [esp + 0xac]
mov byte [esp + 0xb5], al
call fcn.004b69f0
push 0x73
lea ecx, [esp + 0xac]
mov byte [esp + 0xb6], al
call fcn.004b69f0
push 0x77
lea ecx, [esp + 0xac]
mov byte [esp + 0xb7], al
call fcn.004b69f0
push 0x6f
lea ecx, [esp + 0xac]
mov byte [esp + 0xb8], al
call fcn.004b69f0
push 0x72
lea ecx, [esp + 0xac]
mov byte [esp + 0xb9], al
call fcn.004b69f0
push 0x64
lea ecx, [esp + 0xac]
mov byte [esp + 0xba], al
call fcn.004b69f0
push 0x3f
lea ecx, [esp + 0xac]
mov byte [esp + 0xbb], al
call fcn.004b69f0
mov byte [esp + 0xb8], al
xor esi, esi
mov byte [esp + 0xb9], 0
nop dword [eax]
push esi
lea ecx, [esp + 0xad]
call fcn.004b69e0
lea ecx, [esp + 0xa8]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0xad]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0x10
jb 0x4c12b0
push 0x10
lea ecx, [esp + 0xad]
call fcn.004b69e0
lea ecx, [esp + 0xa9]
mov byte [eax], 0
call fcn.004b69d0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
jmp 0x4c151c
mov ecx, dword [esi]
mov edx, 0x4a5689fe
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c134e
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c1331
cmp edx, 0x89ae77ca
je 0x4c1357
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c1321
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffc7
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0x8c]
add eax, edi
mov byte [esp + 0x8c], 0x18
mov dword [esp + 0x1c], eax
call fcn.004b69f0
push 0xffffffffffffffe0
lea ecx, [esp + 0x8c]
mov byte [esp + 0x8d], al
call fcn.004b69f0
push 0xffffffffffffffe1
lea ecx, [esp + 0x8c]
mov byte [esp + 0x8e], al
call fcn.004b69f0
push 0xfffffffffffffffb
lea ecx, [esp + 0x8c]
mov byte [esp + 0x8f], al
call fcn.004b69f0
push 0xffffffffffffffeb
lea ecx, [esp + 0x8c]
mov byte [esp + 0x90], al
call fcn.004b69f0
push 0xffffffffffffffe8
lea ecx, [esp + 0x8c]
mov byte [esp + 0x91], al
call fcn.004b69f0
push 0x20
lea ecx, [esp + 0x8c]
mov byte [esp + 0x92], al
call fcn.004b69f0
push 0xffffffffffffffcf
lea ecx, [esp + 0x8c]
mov byte [esp + 0x93], al
call fcn.004b69f0
push 0xffffffffffffffe0
lea ecx, [esp + 0x8c]
mov byte [esp + 0x94], al
call fcn.004b69f0
push 0xfffffffffffffff0
lea ecx, [esp + 0x8c]
mov byte [esp + 0x95], al
call fcn.004b69f0
push 0xffffffffffffffee
lea ecx, [esp + 0x8c]
mov byte [esp + 0x96], al
call fcn.004b69f0
push 0xffffffffffffffeb
lea ecx, [esp + 0x8c]
mov byte [esp + 0x97], al
call fcn.004b69f0
push 0xfffffffffffffffc
lea ecx, [esp + 0x8c]
mov byte [esp + 0x98], al
call fcn.004b69f0
push 0x3f
lea ecx, [esp + 0x8c]
mov byte [esp + 0x99], al
call fcn.004b69f0
mov byte [esp + 0x96], al
xor esi, esi
mov byte [esp + 0x97], 0
push esi
lea ecx, [esp + 0x8d]
call fcn.004b69e0
lea ecx, [esp + 0x88]
movzx eax, byte [eax]
push eax
call fcn.004b69f0
push esi
lea ecx, [esp + 0x8d]
mov byte [esp + 0x1b], al
call fcn.004b69e0
mov cl, byte [esp + 0x17]
inc esi
mov byte [eax], cl
cmp esi, 0xe
jb 0x4c14b0
push 0xe
lea ecx, [esp + 0x8d]
call fcn.004b69e0
lea ecx, [esp + 0x89]
mov byte [eax], 0
call fcn.004b69d0
push 0
lea ecx, [esp + 0x764]
push ecx
push 0xffffffffffffffff
push eax
push dword [esp + 0x30]
call dword [esp + 0x2c]
mov edi, dword [0x4dc880]
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop word [eax + eax]
mov ecx, dword [esi]
mov edx, 0x84bd9182
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c156d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c1550
cmp edx, 0xcd8be032
je 0x4c1576
inc dword [esp + 0x10]
add esi, 4
jmp 0x4c1540
call dword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
mov ecx, dword [esp + 0x91c]
pop edi
pop esi
xor ecx, esp
call fcn.004cbdc9
mov esp, ebp
pop ebp
ret