Function at 0x4b63c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57c9e8
mov eax, dword fs:[0]
push eax
sub esp, 0x3bc
mov eax, dword [0x6a7420]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3b4], ecx
mov eax, dword [ebp + 0x10]
mov esi, 0x85
mov edi, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp + 0x14]
movzx ecx, word [edi + 0xc]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x3bc], eax
xor eax, eax
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], eax
mov eax, ecx
mov dword [ebp - 0x3b0], 0x88
mov dword [ebp - 0x3a8], edx
mov dword [ebp - 0x3c0], 0x12c
cmp ax, word [ebp - 0x3b0]
je 0x4b6475
cmp cx, si
je 0x4b6475
mov eax, dword [ebp - 0x3c0]
cmp word [edx + 0x28], ax
je 0x4b6475
mov eax, ecx
mov ecx, 0x8e
cmp ax, cx
je 0x4b6475
mov dword [ebp - 0x3c4], edi
jmp 0x4b647b
mov dword [ebp - 0x3c8], edi
movzx eax, word [edx + 0x28]
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
add eax, 0xfffff7ff
cmp eax, 0x33
ja case.0x4b649a.2050
movzx eax, byte [eax + 0x4b8f6c]
jmp dword [eax*4 + 0x4b8f40]
movzx eax, word [edx + 0x6c]
push eax
push 0x871
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
push 0x86c
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
jmp 0x4b660e
movzx eax, word [edx + 0x6c]
push eax
push 0x872
jmp 0x4b64ab
movzx eax, word [edx + 0x6c]
push eax
push 0x873
jmp 0x4b64ab
movzx eax, word [edx + 0x6c]
push eax
push 0x874
jmp 0x4b64ab
movzx eax, word [edx + 0x6c]
push eax
push 0x876
jmp 0x4b64ab
movzx eax, word [edx + 0x6c]
push eax
push 0x875
jmp 0x4b64ab
movzx eax, word [edx + 0x6c]
push eax
push 0x878
jmp 0x4b64ab
movzx eax, word [edx + 0x6c]
push eax
push 0x877
jmp 0x4b64ab
movzx eax, word [edx + 0x6c]
push eax
push 0x87a
jmp 0x4b64ab
movzx eax, word [edx + 0x38]
cmp eax, 7
ja case.default.0x4b6534
jmp dword [eax*4 + 0x4b8fa0]
push 0x197
jmp 0x4b6563
push 0x198
jmp 0x4b6563
push 0x199
jmp 0x4b6563
push 0x19a
jmp 0x4b6563
push 0x19b
jmp 0x4b6563
push 0x196
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
mov eax, 0xc54d
cmp word [edx], ax
jne 0x4b65ac
push 0x9f4
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
mov eax, 0xc54c
cmp word [edx], ax
jne 0x4b65d8
push 0x9f5
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x2a0]
push eax
call esi
mov edx, dword [ebp - 0x3a8]
add esp, 8
movzx eax, word [edx + 0x78]
sub eax, 0
je 0x4b65f2
dec eax
jne case.0x4b649a.2050
lea eax, [ebp - 0x2a0]
push eax
push 0x111
jmp 0x4b65fe
lea eax, [ebp - 0x2a0]
push eax
push 0x110
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
push str.___________s___s
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
push 1
push 0
push 0
push 0xffffc8
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
push dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0x3b4]
xorps xmm1, xmm1
push edi
movss dword [ebp - 0x3b0], xmm1
call fcn.004b9810
mov ecx, dword [ebp - 0x3a8]
movzx eax, word [ecx + 0x6a]
dec eax
je 0x4b666f
dec eax
jne 0x4b6691
push eax
push eax
push eax
push 0xf83232
push 0xed
jmp 0x4b667f
push 0
push 0
push 0
push 0xf83232
push 0xec
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
mov ecx, edi
call fcn.0043d260
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x6c]
test ax, ax
je 0x4b66f5
push eax
push 0xee
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6c831c]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x45c]
cmp ax, word [ecx + 0x6c]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b66ea
push 0xf83232
jmp 0x4b66ef
push 0xffffff
push eax
call fcn.0043d260
push 0
push 0
push 0
push 0xffffff
push str.
mov ecx, edi
call fcn.0043d260
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x6e]
test ax, ax
je 0x4b6770
push eax
push 0xef
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6c831c]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x66c]
cmp ax, word [ecx + 0x6e]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b6765
push 0xe61414
jmp 0x4b676a
push 0xffffff
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x70]
test ax, ax
je 0x4b67d4
push eax
push 0xf0
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6c831c]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x66e]
cmp ax, word [ecx + 0x70]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b67c9
push 0xe61414
jmp 0x4b67ce
push 0xffffff
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x72]
test ax, ax
je 0x4b6838
push eax
push 0xf1
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6c831c]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x670]
cmp ax, word [ecx + 0x72]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b682d
push 0xe61414
jmp 0x4b6832
push 0xffffff
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3a8]
movzx eax, word [eax + 0x74]
test ax, ax
je 0x4b689c
push eax
push 0xf2
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push eax
call esi
mov eax, dword [0x6c831c]
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov ax, word [eax + 0x672]
cmp ax, word [ecx + 0x74]
lea eax, [ebp - 0x140]
push 0
push 0
push 0
mov ecx, edi
jae 0x4b6891
push 0xe61414
jmp 0x4b6896
push 0xffffff
push eax
call fcn.0043d260
push 0
push 0
push 0
push 0xffffff
push 0x585acc
mov ecx, edi
call fcn.0043d260
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b68ca
movzx eax, word [eax + 8]
test ax, ax
je 0x4b68ca
mov ecx, eax
jmp 0x4b68cc
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3a]
test dx, dx
je 0x4b6964
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b691a
movzx eax, word [eax + 8]
test ax, ax
je 0x4b691a
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x17e
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b693f
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x17e
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb04
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6954
cmp word [eax + 8], 0
jne 0x4b6a11
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6a1c
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b69a0
test edx, edx
je 0x4b69dc
movzx eax, word [edx + 8]
test ax, ax
je 0x4b69a0
push eax
push ecx
push 0x17e
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6a11
test edx, edx
je 0x4b69dc
movzx eax, word [edx + 8]
test ax, ax
je 0x4b69dc
push eax
push 0x17e
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6a1c
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6a41
movzx eax, word [eax + 8]
test ax, ax
je 0x4b6a2a
push eax
push 0x17e
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6a41
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4b6a41
mov ecx, eax
jmp 0x4b6a43
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3c]
test dx, dx
je 0x4b6adb
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b6a91
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4b6a91
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x17f
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6ab6
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x17f
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb04
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6acb
cmp word [eax + 0xa], 0
jne 0x4b6b88
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6b93
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b6b17
test edx, edx
je 0x4b6b53
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4b6b17
push eax
push ecx
push 0x17f
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6b88
test edx, edx
je 0x4b6b53
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4b6b53
push eax
push 0x17f
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6b93
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6bb8
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4b6ba1
push eax
push 0x17f
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6bb8
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4b6bb8
mov ecx, eax
jmp 0x4b6bba
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x3e]
test dx, dx
je 0x4b6c52
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b6c08
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4b6c08
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x180
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6c2d
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x180
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb04
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6c42
cmp word [eax + 0xc], 0
jne 0x4b6cff
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6d0a
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b6c8e
test edx, edx
je 0x4b6cca
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4b6c8e
push eax
push ecx
push 0x180
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6cff
test edx, edx
je 0x4b6cca
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4b6cca
push eax
push 0x180
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6d0a
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6d2f
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4b6d18
push eax
push 0x180
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6d2f
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4b6d2f
mov ecx, eax
jmp 0x4b6d31
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x40]
test dx, dx
je 0x4b6dc9
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b6d7f
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4b6d7f
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x181
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6da4
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x181
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb04
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6db9
cmp word [eax + 0xe], 0
jne 0x4b6e76
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6e81
mov edx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b6e05
test edx, edx
je 0x4b6e41
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4b6e05
push eax
push ecx
push 0x181
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6e76
test edx, edx
je 0x4b6e41
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4b6e41
push eax
push 0x181
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6e81
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6ea6
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4b6e95
push eax
push 0x181
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov edx, dword [ebp - 0x3ac]
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6ea6
mov eax, dword [eax + 0x10]
test eax, eax
jne 0x4b6ea8
xor eax, eax
mov ecx, dword [ebp - 0x3a8]
mov ecx, dword [ecx + 0x44]
test ecx, ecx
je 0x4b6f2f
test edx, edx
je 0x4b6ee7
mov edx, dword [edx + 0x10]
test edx, edx
je 0x4b6ee7
push edx
add eax, ecx
mov ecx, 0x6cb3b8
push eax
push 0x182
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6f0b
add eax, ecx
mov ecx, 0x6cb3b8
push eax
push 0x182
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb04
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b6f1f
cmp dword [eax + 0x10], 0
jne 0x4b6fd0
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6fdb
test eax, eax
je 0x4b6f63
test edx, edx
je 0x4b6f9d
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x4b6f63
push ecx
push eax
push 0x182
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b6fd0
test edx, edx
je 0x4b6f9d
mov eax, dword [edx + 0x10]
test eax, eax
je 0x4b6f9d
push eax
push 0x182
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b6fdb
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b7000
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4b6fe9
push eax
push 0x182
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b7000
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4b7000
mov ecx, eax
jmp 0x4b7002
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
movzx edx, word [eax + 0x4c]
test dx, dx
je 0x4b709a
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7050
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4b7050
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x183
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b7075
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x183
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb04
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b708a
cmp word [eax + 0x14], 0
jne 0x4b714d
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b7158
test ecx, ecx
je 0x4b70d6
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7118
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4b70d6
push eax
push ecx
push 0x183
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b714d
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7118
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4b7118
push eax
push 0x183
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b7158
mov edx, dword [ebp - 0x3a4]
test edx, edx
je 0x4b7177
movzx eax, word [edx + 0x14]
test ax, ax
je 0x4b716c
push eax
push 0x183
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov edx, dword [ebp - 0x3a4]
test edx, edx
je 0x4b7177
mov eax, dword [edx + 0x16]
test eax, eax
jne 0x4b7179
xor eax, eax
mov ecx, dword [ebp - 0x3a8]
mov ecx, dword [ecx + 0x48]
test ecx, ecx
je 0x4b720a
mov edx, dword [ebp - 0x3ac]
test edx, edx
je 0x4b71c2
mov edx, dword [edx + 0x16]
test edx, edx
je 0x4b71c2
push edx
add eax, ecx
mov ecx, 0x6cb3b8
push eax
push 0x184
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b71e6
add eax, ecx
mov ecx, 0x6cb3b8
push eax
push 0x184
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb04
push eax
call esi
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b71fa
cmp dword [eax + 0x16], 0
jne 0x4b72b1
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b72bc
test eax, eax
je 0x4b7244
mov ecx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b7284
mov ecx, dword [ecx + 0x16]
test ecx, ecx
je 0x4b7244
push ecx
push eax
push 0x184
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
jmp 0x4b72b1
mov ecx, dword [ebp - 0x3ac]
test ecx, ecx
je 0x4b7284
mov eax, dword [ecx + 0x16]
test eax, eax
je 0x4b7284
push eax
push 0x184
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b72bc
test edx, edx
je 0x4b72d0
mov eax, dword [edx + 0x16]
test eax, eax
je 0x4b72d0
push eax
push 0x184
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov edx, dword [ebp - 0x3a4]
movss xmm4, dword [0x5871a8]
mov esi, 1
jmp 0x4b72e6
mov edx, dword [ebp - 0x3a4]
movzx ecx, si
xorps xmm2, xmm2
test cx, cx
jne 0x4b72f6
movaps xmm1, xmm2
jmp 0x4b730a
mov edx, dword [ebp - 0x3a8]
mov eax, ecx
movss xmm1, dword [edx + eax*4 + 0x4c]
mov edx, dword [ebp - 0x3a4]
cmp dword [ebp - 0x3ac], 0
mulss xmm1, xmm4
je 0x4b734f
test cx, cx
jne 0x4b732d
movaps xmm3, xmm2
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4b7357
mov edx, dword [ebp - 0x3ac]
mov eax, ecx
movss xmm3, dword [edx + eax*4 + 0x16]
mov edx, dword [ebp - 0x3a4]
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4b7357
movss xmm3, dword [ebp - 0x3b0]
test edx, edx
je 0x4b7375
test cx, cx
jne 0x4b7369
movaps xmm0, xmm2
mulss xmm0, xmm4
jmp 0x4b7378
movss xmm0, dword [edx + ecx*4 + 0x1a]
mulss xmm0, xmm4
jmp 0x4b7378
movaps xmm0, xmm2
cvttss2si eax, xmm1
movss dword [ebp - 0x3b8], xmm0
test eax, eax
je 0x4b7424
cvttss2si eax, xmm3
mov ecx, 0x6cb3b8
addss xmm0, xmm1
test eax, eax
je 0x4b73c7
push eax
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4b73ee
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb0c
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b74df
movss xmm0, dword [ebp - 0x3b8]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4b74df
push 0
push 0
push 0
push 0x55fc55
jmp 0x4b74ea
cvttss2si ecx, xmm3
test ecx, ecx
je 0x4b7478
ucomiss xmm0, xmm2
push ecx
mov ecx, 0x6cb3b8
lahf
test ah, 0x44
jnp 0x4b7464
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4b74ad
lea eax, [esi + 0x108]
push eax
call fcn.004d1140
push eax
push str._s___d___
jmp 0x4b749d
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4b74d6
cvttss2si eax, xmm0
mov ecx, 0x6cb3b8
push eax
lea eax, [esi + 0x108]
push eax
call fcn.004d1140
push eax
push 0x58bb0c
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
movss xmm0, dword [ebp - 0x3b8]
xorps xmm2, xmm2
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4b74ce
push 0
push 0
push 0
push 0x55fc55
jmp 0x4b74ea
movss xmm3, dword [ebp - 0x3b0]
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x4b74f8
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
movss xmm4, dword [0x5871a8]
inc esi
cmp esi, 5
jle 0x4b72e0
mov esi, dword [ebp - 0x3a4]
test esi, esi
je 0x4b7521
movzx eax, word [esi + 0x1a]
test ax, ax
je 0x4b7521
mov ecx, eax
jmp 0x4b7523
xor ecx, ecx
mov eax, dword [ebp - 0x3a8]
mov esi, 0x80a
mov dword [ebp - 0x3b8], ecx
movzx edx, word [eax + 0x80]
test dx, dx
jne 0x4b754d
cmp word [eax + 0x82], dx
je 0x4b7740
cmp word [eax + 0x28], si
je 0x4b7669
movzx esi, word [eax + 0x82]
mov eax, dword [ebp - 0x3ac]
cmp dx, si
jne 0x4b75d0
test eax, eax
je 0x4b759d
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b759d
push eax
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x185
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
push str._s__d___d_
jmp 0x4b7630
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x185
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb18
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4b7640
test eax, eax
je 0x4b7610
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b7610
movzx ecx, cx
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x185
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d___d___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4b7640
movzx ecx, cx
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x185
call fcn.004d1140
push eax
push str._s__d___d
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
mov esi, dword [ebp - 0x3a4]
test esi, esi
je 0x4b7727
cmp word [esi + 0x1a], 0
je 0x4b7727
push 0
push 0
push 0
push 0x55fc55
jmp 0x4b7732
movzx ecx, word [eax + 0x82]
mov eax, dword [ebp - 0x3ac]
cmp dx, cx
jne 0x4b76c9
test eax, eax
je 0x4b76a1
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b76a1
push eax
push edx
push 0x185
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
push str._s__d_____d_
jmp 0x4b7717
push edx
push 0x185
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d__
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4b7727
test eax, eax
je 0x4b7700
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b7700
push eax
push ecx
push edx
push 0x185
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d_____d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4b7727
push ecx
push edx
push 0x185
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
push str._s__d_____d__
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7796
movzx eax, word [eax + 0x34]
test ax, ax
je 0x4b7796
push eax
push 0x186
mov ecx, 0x6cb3b8
call fcn.004d1140
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.0043d260
jmp 0x4b779c
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
mov ecx, dword [ebp - 0x3a8]
movzx edx, word [ecx + 0x84]
test dx, dx
jne 0x4b77bb
cmp word [ecx + 0x86], dx
je 0x4b79b6
mov eax, 0x80a
cmp word [ecx + 0x28], ax
mov eax, dword [ebp - 0x3ac]
je 0x4b78eb
movzx esi, word [ecx + 0x86]
cmp dx, si
jne 0x4b7846
test eax, eax
je 0x4b7810
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b7810
push eax
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x187
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
push str._s__d___d_
jmp 0x4b78b2
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x187
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb18
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
jmp 0x4b78c2
test eax, eax
je 0x4b788c
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b788c
mov ecx, dword [ebp - 0x3b8]
movzx ecx, cx
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x187
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d___d___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x18
jmp 0x4b78c2
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6cb3b8
push eax
push 0x187
call fcn.004d1140
push eax
push str._s__d___d
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b7997
cmp word [eax + 0x1a], 0
je 0x4b7997
push 0
push 0
push 0
push 0x55fc55
jmp 0x4b79a2
movzx ecx, word [ecx + 0x86]
cmp dx, cx
jne 0x4b7941
test eax, eax
je 0x4b791d
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b791d
push eax
push ecx
push 0x187
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
push str._s__d_____d_
jmp 0x4b798b
push ecx
push 0x187
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d__
push eax
call esi
add esp, 0x10
jmp 0x4b7997
test eax, eax
je 0x4b7974
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b7974
push eax
push ecx
push edx
push 0x187
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d_____d_
push eax
call esi
add esp, 0x18
jmp 0x4b7997
push ecx
push edx
push 0x187
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
push str._s__d_____d__
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x14
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov ecx, dword [ebp - 0x3a8]
cmp word [ecx + 0x80], 0
mov edx, dword [ebp - 0x3a4]
jne 0x4b7adc
cmp word [ecx + 0x82], 0
jne 0x4b7adc
cmp word [ecx + 0x84], 0
jne 0x4b7adc
cmp word [ecx + 0x86], 0
jne 0x4b7adc
test edx, edx
je 0x4b7a44
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x4b7a44
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7a8a
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b7a44
push eax
push ecx
push 0x2a9
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d__d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4b7abd
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7a8a
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b7a8a
push eax
push 0x2a9
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b7ac8
test edx, edx
je 0x4b7adc
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x4b7adc
push eax
push 0x2a9
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov edx, dword [ebp - 0x3a4]
mov esi, 1
jmp 0x4b7ae9
mov edx, dword [ebp - 0x3a4]
movzx ecx, si
xorps xmm2, xmm2
test cx, cx
jne 0x4b7af9
movaps xmm1, xmm2
jmp 0x4b7b10
mov edx, dword [ebp - 0x3a8]
mov eax, ecx
movss xmm1, dword [edx + eax*4 + 0x88]
mov edx, dword [ebp - 0x3a4]
cmp dword [ebp - 0x3ac], 0
movss xmm4, dword [0x5871a8]
mulss xmm1, xmm4
je 0x4b7b5d
test cx, cx
jne 0x4b7b3b
movaps xmm3, xmm2
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4b7b65
mov edx, dword [ebp - 0x3ac]
mov eax, ecx
movss xmm3, dword [edx + eax*4 + 0x32]
mov edx, dword [ebp - 0x3a4]
mulss xmm3, xmm4
movss dword [ebp - 0x3b0], xmm3
jmp 0x4b7b65
movss xmm3, dword [ebp - 0x3b0]
test edx, edx
je 0x4b7b83
test cx, cx
jne 0x4b7b77
movaps xmm0, xmm2
mulss xmm0, xmm4
jmp 0x4b7b86
movss xmm0, dword [edx + ecx*4 + 0x32]
mulss xmm0, xmm4
jmp 0x4b7b86
movaps xmm0, xmm2
cvttss2si eax, xmm1
movss dword [ebp - 0x3b8], xmm0
test eax, eax
je 0x4b7c32
cvttss2si eax, xmm3
mov ecx, 0x6cb3b8
addss xmm0, xmm1
test eax, eax
je 0x4b7bd5
push eax
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4b7bfc
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb0c
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b7ced
movss xmm0, dword [ebp - 0x3b8]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4b7ced
push 0
push 0
push 0
push 0x55fc55
jmp 0x4b7cf8
cvttss2si ecx, xmm3
test ecx, ecx
je 0x4b7c86
ucomiss xmm0, xmm2
push ecx
mov ecx, 0x6cb3b8
lahf
test ah, 0x44
jnp 0x4b7c72
cvttss2si eax, xmm0
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4b7cbb
lea eax, [esi + 0x187]
push eax
call fcn.004d1140
push eax
push str._s___d___
jmp 0x4b7cab
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4b7ce4
cvttss2si eax, xmm0
mov ecx, 0x6cb3b8
push eax
lea eax, [esi + 0x187]
push eax
call fcn.004d1140
push eax
push 0x58bb0c
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
movss xmm0, dword [ebp - 0x3b8]
xorps xmm2, xmm2
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jnp 0x4b7cdc
push 0
push 0
push 0
push 0x55fc55
jmp 0x4b7cf8
movss xmm3, dword [ebp - 0x3b0]
ucomiss xmm3, xmm2
lahf
test ah, 0x44
jnp 0x4b7d06
push 0
push 0
push 0
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
inc esi
cmp esi, 5
jle 0x4b7ae3
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b7d27
movzx eax, word [eax + 0x1c]
test ax, ax
je 0x4b7d27
mov esi, eax
jmp 0x4b7d29
xor esi, esi
mov eax, dword [ebp - 0x3a8]
movzx ecx, word [eax + 0xa4]
test cx, cx
je 0x4b7e94
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7d80
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4b7d80
push eax
movzx eax, si
add ecx, eax
push ecx
push 0x18d
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x14
jmp 0x4b7dab
movzx eax, si
add ecx, eax
push ecx
push 0x18d
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push 0x58bb04
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4b7e84
test si, si
je 0x4b7e84
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
mov ecx, dword [ebp - 0x3a8]
movzx eax, word [ecx + 0xa8]
test ax, ax
je 0x4b7e2d
push eax
lea eax, [ecx + 2]
mov ecx, 0x6cb3b8
push eax
push 0x18e
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3a8]
cmp word [eax + 0xac], 0
je 0x4b817a
movzx eax, word [eax + 0xaa]
test ax, ax
je 0x4b817a
xorps xmm0, xmm0
mov byte [ebp - 0x34], 0
dec eax
movq qword [ebp - 0x23], xmm0
mov dword [ebp - 0x1b], 0
mov word [ebp - 0x17], 0
mov byte [ebp - 0x15], 0
movdqu xmmword [ebp - 0x33], xmm0
cmp eax, 0xa
ja case.default.0x4b7e7d
jmp dword [eax*4 + 0x4b8fc0]
push 0
push 0
push 0
push 0x87cefa
jmp 0x4b7dcd
test si, si
je 0x4b7efa
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7f53
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4b7efa
push eax
movzx eax, si
mov ecx, 0x6cb3b8
push eax
push 0x18d
call fcn.004d1140
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push 0x58f60c
push eax
call esi
add esp, 0x14
push 0
push 0
push 0
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, edi
push eax
call fcn.0043d260
jmp 0x4b7de1
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b7f53
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4b7f53
push eax
push 0x18d
mov ecx, 0x6cb3b8
call fcn.004d1140
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.0043d260
jmp 0x4b7de1
test si, si
je 0x4b7ddb
movzx eax, si
mov ecx, 0x6cb3b8
push eax
push 0x18d
call fcn.004d1140
mov esi, dword [sym.imp.MSVCR120.dll_sprintf]
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call esi
add esp, 0x10
jmp 0x4b7edc
push 0x196
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b7fa0
jmp case.default.0x4b7e7d
push 0x197
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b7fc6
jmp case.default.0x4b7e7d
push 0x198
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b7ff0
jmp case.default.0x4b7e7d
push 0x199
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b8016
jmp case.default.0x4b7e7d
push 0x19a
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b8040
jmp case.default.0x4b7e7d
push 0x19b
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b8066
jmp case.default.0x4b7e7d
push 0x19c
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b8090
jmp case.default.0x4b7e7d
push 0x19d
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b80b6
jmp case.default.0x4b7e7d
push 0x19e
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b80e0
jmp case.default.0x4b7e7d
push 0x19f
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b8103
jmp case.default.0x4b7e7d
push 0x1a0
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4b8126
mov eax, dword [ebp - 0x3a8]
mov ecx, 0x6cb3b8
movzx eax, word [eax + 0xac]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x1a1
call fcn.004d1140
push eax
lea eax, [ebp - 0x140]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x140]
mov ecx, edi
push 0
push 0
push 0
push 0x87cefa
push eax
call fcn.0043d260
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x4b87be
cmp dword [eax], 0
je 0x4b87be
push 0
push 0
push 0
push 0xffffff
push 0x585acc
mov ecx, edi
call fcn.0043d260
push dword [0x6c9390]
mov ecx, 0x6cb3b8
push dword [0x6c938c]
push 0xa6a
call fcn.004d1140
push eax
lea eax, [ebp - 0x3a0]
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x3a0]
mov ecx, edi
push 0
push 0
push 0
push 0xffffff
push eax
call fcn.0043d260
lea ecx, [ebp - 0x34]
call fcn.0042b130
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp - 4], 0
mov eax, dword [ecx + 8]
cmp eax, 1
jne 0x4b8241
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
push 0x93
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b8310
push 0
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c9390], 1
jmp 0x4b8310
jbe 0x4b8310
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx esi, ax
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b8310
cmp dword [eax], esi
je 0x4b8275
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b8265
jmp 0x4b8310
mov esi, dword [eax + 4]
test esi, esi
je 0x4b8310
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b82b2
push 0
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c938c], 1
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4b82ef
mov eax, dword [ebp - 0x3b0]
lea ecx, [ecx]
cmp dword [esi], eax
je 0x4b8359
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4b82e0
xor esi, esi
test esi, esi
je 0x4b8310
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.0043d260
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b82f5
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax + 0xc]
cmp eax, 1
jne 0x4b835e
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
push 0x93
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b843b
push 1
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c9390], 2
jmp 0x4b843b
mov esi, dword [esi + 4]
jmp 0x4b82f1
jbe 0x4b843b
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0xc]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b843b
lea esp, [esp]
cmp dword [eax], esi
je 0x4b83a0
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b8390
jmp 0x4b843b
mov esi, dword [eax + 4]
test esi, esi
je 0x4b843b
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b83dd
push 1
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c938c], 2
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4b8417
mov eax, dword [ebp - 0x3b0]
cmp dword [esi], eax
je 0x4b8484
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4b8408
xor esi, esi
test esi, esi
je 0x4b843b
lea ecx, [ecx]
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.0043d260
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b8420
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax + 0x10]
cmp eax, 1
jne 0x4b8489
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
push 0x93
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b855c
push 2
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c9390], 3
jmp 0x4b855c
mov esi, dword [esi + 4]
jmp 0x4b8419
jbe 0x4b855c
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0x10]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b855c
cmp dword [eax], esi
je 0x4b84c4
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b84b4
jmp 0x4b855c
mov esi, dword [eax + 4]
test esi, esi
je 0x4b855c
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b8501
push 2
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c938c], 3
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4b853b
mov eax, dword [ebp - 0x3b0]
lea esp, [esp]
cmp dword [esi], eax
je 0x4b85a3
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4b8530
xor esi, esi
test esi, esi
je 0x4b855c
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.0043d260
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b8541
mov esi, dword [ebp - 0x3bc]
cmp dword [esi + 0x14], 1
jne 0x4b85a8
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
push 0x93
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b8682
push 3
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c9390], 4
jmp 0x4b8682
mov esi, dword [esi + 4]
jmp 0x4b853d
cmp dword [esi + 8], 3
jbe 0x4b8682
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx esi, word [esi + 0x14]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b867c
cmp dword [eax], esi
je 0x4b85e1
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b85d1
jmp 0x4b867c
mov esi, dword [eax + 4]
test esi, esi
je 0x4b867c
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b861e
push 3
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c938c], 4
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4b865b
mov eax, dword [ebp - 0x3b0]
lea esp, [esp]
cmp dword [esi], eax
je 0x4b86c5
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4b8650
xor esi, esi
test esi, esi
je 0x4b867c
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.0043d260
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b8661
mov esi, dword [ebp - 0x3bc]
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x4b86ca
push 0
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
push 0x93
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b87a0
push 4
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c9390], 5
jmp 0x4b87a0
mov esi, dword [esi + 4]
jmp 0x4b865d
jbe 0x4b87a0
mov eax, dword [ebp - 0x3bc]
xor edx, edx
mov ecx, dword [ebp - 0x3b4]
movzx esi, word [eax + 0x18]
mov eax, esi
div dword [ecx + 0x30]
mov eax, dword [ecx + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b87a0
cmp dword [eax], esi
je 0x4b8705
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b86f5
jmp 0x4b87a0
mov esi, dword [eax + 4]
test esi, esi
je 0x4b87a0
push 1
lea eax, [ebp - 0x34]
mov ecx, 0x6c1cf8
push eax
movzx eax, word [esi + 0x26]
push eax
call fcn.00435580
cmp dword [ebp - 0x30], 0
je 0x4b8742
push 4
lea eax, [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0043d240
mov dword [0x6c938c], 5
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
movzx eax, word [esi + 0x24]
mov dword [ebp - 0x3b0], eax
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4b877f
mov eax, dword [ebp - 0x3b0]
lea ecx, [ecx]
cmp dword [esi], eax
je 0x4b8936
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4b8770
xor esi, esi
test esi, esi
je 0x4b87a0
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.0043d260
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b8785
lea ecx, [ebp - 0x3a0]
mov al, byte [ecx]
lea ecx, [ecx + 1]
test al, al
jne 0x4b87a6
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b140
mov esi, dword [ebp - 0x3a8]
mov eax, 0x100
test word [esi + 0x28], ax
je 0x4b87dc
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004a6190
cmp word [esi + 0xca], 0
je 0x4b87f3
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004a6080
mov ecx, 0x834
cmp word [esi + 0x28], cx
jne 0x4b8810
mov ecx, dword [ebp - 0x3b4]
push esi
push edi
call fcn.004a7660
mov ecx, 0x834
movzx eax, word [esi + 0x28]
mov edx, dword [ebp - 0x3a4]
test eax, 0x800
je 0x4b885c
cmp ax, cx
jae 0x4b885c
test edx, edx
je 0x4b8830
cmp dword [edx + 4], 0
jne 0x4b883f
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b885c
cmp dword [eax], 0
je 0x4b885c
push 0
push 0
push 0
push 0xffffff
push 0x585acc
mov ecx, edi
call fcn.0043d260
mov edx, dword [ebp - 0x3a4]
movzx ecx, word [esi + 0x28]
test ecx, 0x800
je 0x4b8ae6
mov eax, 0x834
cmp cx, ax
jae 0x4b8ae6
movzx eax, word [edi + 0xc]
mov esi, 0x88
cmp ax, si
je 0x4b8ae6
mov esi, 0x85
cmp ax, si
je 0x4b8ae6
cmp cx, word [ebp - 0x3c0]
je 0x4b8ae6
mov ecx, 0x80
cmp ax, cx
je 0x4b8ae6
test edx, edx
je 0x4b89c2
cmp dword [edx + 4], 0
je 0x4b89c2
push 0x9b4
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b88e0
sub eax, edx
add eax, 2
push eax
lea eax, [ebp - 0x170]
push str.
push eax
call fcn.00515be0
lea esi, [edi + 0x9e4]
add esp, 0xc
test esi, esi
je 0x4b89c2
mov ecx, str.monster
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4b893e
test dl, dl
je 0x4b8932
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4b893e
add eax, 2
add ecx, 2
test dl, dl
jne 0x4b8916
xor eax, eax
jmp 0x4b8943
mov esi, dword [esi + 4]
jmp 0x4b8781
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4b897d
push 0x9b3
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push 0x58f148
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xf83232
jmp 0x4b89a2
push esi
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push 0x58f148
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xffffff
push 0xffffff
lea eax, [ebp - 0x40]
mov ecx, 0x6cb3b8
push eax
push 0x9b4
call fcn.004d1140
push eax
mov ecx, edi
call fcn.0043d250
mov eax, dword [ebp - 0x3ac]
test eax, eax
je 0x4b8ae6
cmp dword [eax], 0
je 0x4b8ae6
push 0x9b5
mov ecx, 0x6cb3b8
call fcn.004d1140
lea edx, [eax + 1]
jmp 0x4b89f0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b89f0
sub eax, edx
add eax, 2
push eax
lea eax, [ebp - 0x170]
push str.
push eax
call fcn.00515be0
lea esi, [edi + 0x9f5]
add esp, 0xc
test esi, esi
je 0x4b8ae6
mov ecx, str.monster
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4b8a46
test dl, dl
je 0x4b8a42
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4b8a46
add eax, 2
add ecx, 2
test dl, dl
jne 0x4b8a26
xor eax, eax
jmp 0x4b8a4b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4b8a88
push 0x9b3
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1a0]
push 0x58f148
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xf83232
jmp 0x4b8ab0
push esi
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1a0]
push 0x58f148
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
add esp, 0x10
push 0
push 0
push 0
push 0xffffff
push 0xffffff
lea eax, [ebp - 0x1a0]
mov ecx, 0x6cb3b8
push eax
push 0x9b5
call fcn.004d1140
push eax
mov ecx, edi
call fcn.0043d250
push 0x2f
lea eax, [ebp - 0x1a0]
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x3a8]
mov ecx, edi
push 0
push 0
push 0
movzx esi, word [eax + 0x24]
push 0xffffff
push 0x585acc
call fcn.0043d260
mov ecx, dword [ebp - 0x3b4]
xor edx, edx
mov eax, esi
div dword [ecx + 0x188]
mov eax, dword [ecx + 0x18c]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b8b53
cmp dword [eax], esi
je 0x4b8b31
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b8b24
jmp 0x4b8b53
mov esi, dword [eax + 4]
test esi, esi
je 0x4b8b53
push 0
push 0
push 0
push 0xc8d7aa
push dword [esi]
mov ecx, edi
call fcn.0043d260
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b8b38
cmp dword [ebp + 0x1c], 0
jne 0x4b8d7e
mov ecx, dword [ebp - 0x3c4]
test ecx, ecx
je 0x4b8b73
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
movzx ecx, ax
jmp 0x4b8b84
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x4b8bba
movzx ecx, word [eax + 0x9c4]
cmp ecx, 0xffffffff
je 0x4b8bba
lea eax, [ecx - 0x50]
cmp eax, 9
ja 0x4b8bba
push ecx
mov ecx, dword [ebp - 0x3b4]
lea eax, [edi + 0x58]
push eax
mov dword [edi + 0x910], 0
mov dword [edi + 0x914], 0
call fcn.004b9480
jmp 0x4b8f21
mov eax, dword [ebp - 0x3a8]
mov esi, 0x801
xor ecx, ecx
xor edx, edx
movzx eax, word [eax + 0x28]
cmp ax, si
jne 0x4b8be8
mov ecx, dword [0x6b26b0]
push 0x51
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x807
cmp ax, si
jne 0x4b8c08
mov ecx, dword [0x6b26b0]
push 0x52
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x808
cmp ax, si
jne 0x4b8c28
mov ecx, dword [0x6b26b0]
push 0x50
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x809
cmp ax, si
jne 0x4b8c48
mov ecx, dword [0x6b26b0]
push 0x53
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x80b
cmp ax, si
jne 0x4b8c68
mov ecx, dword [0x6b26b0]
push 0x56
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x80d
cmp ax, si
jne 0x4b8c88
mov ecx, dword [0x6b26b0]
push 0x57
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x80a
cmp ax, si
jne 0x4b8ca8
mov ecx, dword [0x6b26b0]
push 0x58
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x80c
cmp ax, si
jne 0x4b8cc8
mov ecx, dword [0x6b26b0]
push 0x59
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x816
cmp ax, si
jne 0x4b8ce5
mov ecx, dword [0x6b26b0]
push 0x5a
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x80e
cmp ax, si
jne 0x4b8d00
mov ecx, dword [0x6b26b0]
push 0x54
call fcn.0044f640
push 0x55
jmp 0x4b8d36
mov esi, 0x80f
cmp ax, si
jne 0x4b8d1d
mov ecx, dword [0x6b26b0]
push 0x5b
call fcn.0044f640
mov esi, eax
xor ecx, ecx
jmp 0x4b8d45
mov esi, 0x810
cmp ax, si
jne 0x4b8d5b
mov ecx, dword [0x6b26b0]
push 0x5c
call fcn.0044f640
push 0x5d
mov ecx, dword [0x6b26b0]
mov esi, eax
call fcn.0044f640
mov ecx, eax
test esi, esi
je 0x4b8d59
lea eax, [esi + 0x58]
mov edx, 1
mov dword [edi + 0x910], eax
jmp 0x4b8d65
xor edx, edx
mov dword [edi + 0x910], 0
test ecx, ecx
je 0x4b8d77
lea eax, [ecx + 0x58]
mov dword [edi + 0x914], eax
jmp 0x4b8ee8
test edx, edx
jmp 0x4b8edc
mov eax, dword [ebp - 0x3a8]
mov esi, 0x801
xor edx, edx
xor ecx, ecx
movzx eax, word [eax + 0x28]
cmp ax, si
jne 0x4b8dac
mov ecx, dword [0x6b26b0]
push 0x51
call fcn.0044f640
mov esi, eax
xor edx, edx
jmp 0x4b8eab
mov esi, 0x807
cmp ax, si
jne 0x4b8dcc
mov ecx, dword [0x6b26b0]
push 0x52
call fcn.0044f640
mov esi, eax
xor edx, edx
jmp 0x4b8eab
mov esi, 0x808
cmp ax, si
jne 0x4b8dec
mov ecx, dword [0x6b26b0]
push 0x50
call fcn.0044f640
mov esi, eax
xor edx, edx
jmp 0x4b8eab
mov esi, 0x809
cmp ax, si
jne 0x4b8e0c
mov ecx, dword [0x6b26b0]
push 0x53
call fcn.0044f640
mov esi, eax
xor edx, edx
jmp 0x4b8eab
mov esi, 0x80b
cmp ax, si
jne 0x4b8e2c
mov ecx, dword [0x6b26b0]
push 0x56
call fcn.0044f640
mov esi, eax
xor edx, edx
jmp 0x4b8eab
mov esi, 0x80d
cmp ax, si
jne 0x4b8e49
mov ecx, dword [0x6b26b0]
push 0x57
call fcn.0044f640
mov esi, eax
xor edx, edx
jmp 0x4b8eab
mov esi, 0x80a
cmp ax, si
jne 0x4b8e66
mov ecx, dword [0x6b26b0]
push 0x58
call fcn.0044f640
mov esi, eax
xor edx, edx
jmp 0x4b8eab
mov esi, 0x80c
cmp ax, si
jne 0x4b8e83
mov ecx, dword [0x6b26b0]
push 0x59
call fcn.0044f640
mov esi, eax
xor edx, edx
jmp 0x4b8eab
mov esi, 0x80e
cmp ax, si
jne 0x4b8ec1
mov ecx, dword [0x6b26b0]
push 0x54
call fcn.0044f640
mov ecx, dword [0x6b26b0]
mov esi, eax
push 0x55
call fcn.0044f640
mov edx, eax
test esi, esi
je 0x4b8ebf
lea ecx, [esi + 0x58]
mov dword [edi + 0x910], ecx
mov ecx, 1
jmp 0x4b8ecb
xor ecx, ecx
mov dword [edi + 0x910], 0
test edx, edx
je 0x4b8eda
lea eax, [edx + 0x58]
mov dword [edi + 0x914], eax
jmp 0x4b8ee8
test ecx, ecx
mov dword [edi + 0x914], 0
je 0x4b8f21
push 0
push 0
push 0
push 0xffffff
push 0x585acc
mov ecx, edi
call fcn.0043d260
push 0
push 0
push 0
push 0xff00
push 0xa7c
mov ecx, 0x6cb3b8
call fcn.004d1140
push eax
mov ecx, edi
call fcn.0043d260
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00575b90
mov esp, ebp
pop ebp
ret 0x18