Function at 0x4b0f2f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x3c0
mov eax, 0x556155
call fcn.00550118
mov dword [ebp - 0x3b4], ecx
mov eax, dword [ebp + 0x14]
xor ecx, ecx
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x3c8], ecx
mov ecx, esi
mov dword [ebp - 0x3a4], ebx
mov dword [ebp - 0x3b0], edi
mov dword [ebp - 0x3bc], eax
call fcn.0051419c
mov edx, 0x88
cmp ax, dx
je 0x4b0fbf
mov ecx, esi
call fcn.0051419c
mov ecx, 0x85
cmp ax, cx
je 0x4b0fbf
mov eax, 0x12c
cmp word [ebx + 0x28], ax
je 0x4b0fbf
mov ecx, esi
call fcn.0051419c
mov ecx, 0x8e
cmp ax, cx
je 0x4b0fbf
mov dword [ebp - 0x3c8], esi
jmp 0x4b0fc5
mov dword [ebp - 0x3cc], esi
mov ecx, ebx
mov edx, 0x6ab460
mov ebx, 0x80b
movzx eax, word [ecx + 0x28]
cmp eax, ebx
mov ebx, dword [sym.imp.MSVCR120.dll_sprintf]
jg 0x4b1135
cmp eax, 0x80b
je 0x4b1129
sub eax, 0x801
je 0x4b1043
sub eax, 6
je 0x4b1034
dec eax
je 0x4b1025
dec eax
je 0x4b1016
dec eax
jne 0x4b1199
movzx eax, word [ecx + 0x6c]
push eax
push 0x878
jmp 0x4b1175
movzx eax, word [ecx + 0x6c]
push eax
push 0x873
jmp 0x4b1175
movzx eax, word [ecx + 0x6c]
push eax
push 0x872
jmp 0x4b1175
movzx eax, word [ecx + 0x6c]
push eax
push 0x871
jmp 0x4b1175
movzx eax, word [ecx + 0x38]
cmp eax, 7
ja case.default.0x4b104c
jmp dword [eax*4 + 0x4b35b7]
push 0x197
jmp 0x4b107b
push 0x198
jmp 0x4b107b
push 0x199
jmp 0x4b107b
push 0x19a
jmp 0x4b107b
push 0x19b
jmp 0x4b107b
push 0x196
mov ecx, edx
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x2a0]
push eax
call ebx
pop ecx
pop ecx
mov ecx, dword [ebp - 0x3a4]
mov edx, 0x6ab460
mov eax, 0xc54d
cmp word [ecx], ax
jne 0x4b10c1
push 0x9f4
mov ecx, edx
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x2a0]
push eax
call ebx
pop ecx
pop ecx
mov ecx, dword [ebp - 0x3a4]
mov eax, 0xc54c
cmp word [ecx], ax
jne 0x4b10ec
push 0x9f5
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x2a0]
push eax
call ebx
pop ecx
pop ecx
mov ecx, dword [ebp - 0x3a4]
movzx eax, word [ecx + 0x78]
xor ecx, ecx
sub eax, ecx
je 0x4b111b
dec eax
jne 0x4b1199
lea eax, [ebp - 0x2a0]
push eax
push 0x111
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
push str.___________s___s
jmp 0x4b118d
lea eax, [ebp - 0x2a0]
push eax
push 0x110
jmp 0x4b1109
movzx eax, word [ecx + 0x6c]
push eax
push 0x876
jmp 0x4b1175
sub eax, 0x80c
je 0x4b116b
dec eax
je 0x4b115f
dec eax
je 0x4b1153
sub eax, 0x26
jne 0x4b1199
movzx eax, word [ecx + 0x6c]
push eax
push 0x87a
jmp 0x4b1175
movzx eax, word [ecx + 0x6c]
push eax
push 0x874
jmp 0x4b1175
movzx eax, word [ecx + 0x6c]
push eax
push 0x875
jmp 0x4b1175
movzx eax, word [ecx + 0x6c]
push eax
push 0x877
mov ecx, edx
call fcn.004c8ae8
push eax
push 0x86c
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0x10
push 1
xor eax, eax
mov ecx, esi
push eax
push eax
push 0xffffc8
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
push dword [ebp - 0x3a4]
mov ecx, dword [ebp - 0x3b4]
xorps xmm0, xmm0
push esi
movss dword [ebp - 0x3c0], xmm0
call fcn.004b3d31
mov ecx, dword [ebp - 0x3a4]
movzx eax, word [ecx + 0x6a]
mov ecx, 0xf83232
dec eax
je 0x4b11ef
dec eax
jne 0x4b120c
push eax
push eax
push eax
push ecx
push 0xed
jmp 0x4b11fa
xor eax, eax
push eax
push eax
push eax
push ecx
push 0xec
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
mov ecx, esi
call fcn.00444882
mov eax, dword [ebp - 0x3a4]
movzx eax, word [eax + 0x6c]
test ax, ax
je 0x4b127d
push eax
push 0xee
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0xc
mov ecx, 0x6a7278
call fcn.004bfa90
mov ecx, eax
call fcn.0041a1a0
mov ecx, dword [ebp - 0x3a4]
mov ax, word [eax + 0x30]
cmp ax, word [ecx + 0x6c]
mov ecx, esi
jae 0x4b1267
xor eax, eax
push eax
push eax
push eax
push 0xf83232
jmp 0x4b1271
xor eax, eax
push eax
push eax
push eax
push 0xffffff
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
xor eax, eax
mov ecx, esi
push eax
push eax
push eax
push 0xffffff
push str.
call fcn.00444882
mov eax, dword [ebp - 0x3a4]
movzx eax, word [eax + 0x6e]
test ax, ax
je 0x4b1303
push eax
push 0xef
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0xc
mov ecx, 0x6a7278
call fcn.004bfa90
mov ecx, eax
call fcn.00421d03
mov ecx, dword [ebp - 0x3a4]
mov ax, word [eax]
cmp ax, word [ecx + 0x6e]
mov ecx, esi
jae 0x4b12ed
xor eax, eax
push eax
push eax
push eax
push 0xe61414
jmp 0x4b12f7
xor eax, eax
push eax
push eax
push eax
push 0xffffff
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a4]
movzx eax, word [eax + 0x70]
test ax, ax
je 0x4b1374
push eax
push 0xf0
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0xc
mov ecx, 0x6a7278
call fcn.004bfa90
mov ecx, eax
call fcn.00421d03
mov ecx, dword [ebp - 0x3a4]
mov ax, word [eax + 2]
cmp ax, word [ecx + 0x70]
mov ecx, esi
jae 0x4b135e
xor eax, eax
push eax
push eax
push eax
push 0xe61414
jmp 0x4b1368
xor eax, eax
push eax
push eax
push eax
push 0xffffff
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a4]
movzx eax, word [eax + 0x72]
test ax, ax
je 0x4b13e5
push eax
push 0xf1
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0xc
mov ecx, 0x6a7278
call fcn.004bfa90
mov ecx, eax
call fcn.00421d03
mov ecx, dword [ebp - 0x3a4]
mov ax, word [eax + 4]
cmp ax, word [ecx + 0x72]
mov ecx, esi
jae 0x4b13cf
xor eax, eax
push eax
push eax
push eax
push 0xe61414
jmp 0x4b13d9
xor eax, eax
push eax
push eax
push eax
push 0xffffff
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a4]
movzx eax, word [eax + 0x74]
test ax, ax
je 0x4b1456
push eax
push 0xf2
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0xc
mov ecx, 0x6a7278
call fcn.004bfa90
mov ecx, eax
call fcn.00421d03
mov ecx, dword [ebp - 0x3a4]
mov ax, word [eax + 6]
cmp ax, word [ecx + 0x74]
mov ecx, esi
jae 0x4b1440
xor eax, eax
push eax
push eax
push eax
push 0xe61414
jmp 0x4b144a
xor eax, eax
push eax
push eax
push eax
push 0xffffff
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
xor eax, eax
mov ecx, esi
push eax
push eax
push eax
push 0xffffff
push 0x564710
call fcn.00444882
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1483
movzx eax, word [eax + 8]
test ax, ax
je 0x4b1483
mov ecx, eax
jmp 0x4b1485
xor ecx, ecx
mov eax, dword [ebp - 0x3a4]
movzx edx, word [eax + 0x3a]
test dx, dx
je 0x4b1519
test edi, edi
je 0x4b14cd
movzx eax, word [edi + 8]
test ax, ax
je 0x4b14cd
push eax
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x17e
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b14f2
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x17e
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7b4
push eax
call ebx
add esp, 0x10
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b150c
cmp word [eax + 8], cx
je 0x4b150c
push ecx
push ecx
push ecx
jmp 0x4b15bf
push ecx
push ecx
push ecx
push 0x87cefa
jmp 0x4b15c4
test ecx, ecx
je 0x4b154f
test edi, edi
je 0x4b1585
movzx eax, word [edi + 8]
test ax, ax
je 0x4b154f
push eax
push ecx
push 0x17e
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b15ba
test edi, edi
je 0x4b1585
movzx eax, word [edi + 8]
test ax, ax
je 0x4b1585
push eax
push 0x17e
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
jmp 0x4b150f
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b15e5
movzx eax, word [eax + 8]
test ax, ax
je 0x4b15d2
push eax
push 0x17e
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b15e5
movzx eax, word [eax + 0xa]
test ax, ax
jne 0x4b15e7
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x3a4]
movzx edx, word [eax + 0x3c]
test dx, dx
je 0x4b167d
test edi, edi
je 0x4b1631
movzx eax, word [edi + 0xa]
test ax, ax
je 0x4b1631
push eax
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x17f
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b1656
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x17f
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7b4
push eax
call ebx
add esp, 0x10
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b1670
cmp word [eax + 0xa], cx
je 0x4b1670
push ecx
push ecx
push ecx
jmp 0x4b1723
push ecx
push ecx
push ecx
push 0x87cefa
jmp 0x4b1728
test ecx, ecx
je 0x4b16b3
test edi, edi
je 0x4b16e9
movzx eax, word [edi + 0xa]
test ax, ax
je 0x4b16b3
push eax
push ecx
push 0x17f
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b171e
test edi, edi
je 0x4b16e9
movzx eax, word [edi + 0xa]
test ax, ax
je 0x4b16e9
push eax
push 0x17f
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
jmp 0x4b1673
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1749
movzx eax, word [eax + 0xa]
test ax, ax
je 0x4b1736
push eax
push 0x17f
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1749
movzx eax, word [eax + 0xc]
test ax, ax
jne 0x4b174b
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x3a4]
movzx edx, word [eax + 0x3e]
test dx, dx
je 0x4b17e1
test edi, edi
je 0x4b1795
movzx eax, word [edi + 0xc]
test ax, ax
je 0x4b1795
push eax
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x180
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b17ba
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x180
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7b4
push eax
call ebx
add esp, 0x10
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b17d4
cmp word [eax + 0xc], cx
je 0x4b17d4
push ecx
push ecx
push ecx
jmp 0x4b1887
push ecx
push ecx
push ecx
push 0x87cefa
jmp 0x4b188c
test ecx, ecx
je 0x4b1817
test edi, edi
je 0x4b184d
movzx eax, word [edi + 0xc]
test ax, ax
je 0x4b1817
push eax
push ecx
push 0x180
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b1882
test edi, edi
je 0x4b184d
movzx eax, word [edi + 0xc]
test ax, ax
je 0x4b184d
push eax
push 0x180
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
jmp 0x4b17d7
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b18ad
movzx eax, word [eax + 0xc]
test ax, ax
je 0x4b189a
push eax
push 0x180
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b18ad
movzx eax, word [eax + 0xe]
test ax, ax
jne 0x4b18af
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x3a4]
movzx edx, word [eax + 0x40]
test dx, dx
je 0x4b1945
test edi, edi
je 0x4b18f9
movzx eax, word [edi + 0xe]
test ax, ax
je 0x4b18f9
push eax
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x181
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b191e
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x181
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7b4
push eax
call ebx
add esp, 0x10
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b1938
cmp word [eax + 0xe], cx
je 0x4b1938
push ecx
push ecx
push ecx
jmp 0x4b19eb
push ecx
push ecx
push ecx
push 0x87cefa
jmp 0x4b19f0
test ecx, ecx
je 0x4b197b
test edi, edi
je 0x4b19b1
movzx eax, word [edi + 0xe]
test ax, ax
je 0x4b197b
push eax
push ecx
push 0x181
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b19e6
test edi, edi
je 0x4b19b1
movzx eax, word [edi + 0xe]
test ax, ax
je 0x4b19b1
push eax
push 0x181
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
jmp 0x4b193b
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1a0f
movzx eax, word [eax + 0xe]
test ax, ax
je 0x4b19fe
push eax
push 0x181
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1a0f
mov eax, dword [eax + 0x10]
test eax, eax
jne 0x4b1a11
xor eax, eax
mov edx, dword [ebp - 0x3a4]
mov ecx, dword [edx + 0x44]
test ecx, ecx
je 0x4b1a9b
test edi, edi
je 0x4b1a51
cmp dword [edi + 0x10], 0
je 0x4b1a51
push dword [edi + 0x10]
add eax, ecx
mov ecx, 0x6ab460
push eax
push 0x182
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b1a75
add eax, ecx
mov ecx, 0x6ab460
push eax
push 0x182
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7b4
push eax
call ebx
add esp, 0x10
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b1a8e
cmp dword [eax + 0x10], ecx
je 0x4b1a8e
push ecx
push ecx
push ecx
jmp 0x4b1b40
push ecx
push ecx
push ecx
push 0x87cefa
jmp 0x4b1b45
test eax, eax
je 0x4b1ad0
test edi, edi
je 0x4b1b05
cmp dword [edi + 0x10], 0
je 0x4b1ad0
push dword [edi + 0x10]
mov ecx, 0x6ab460
push eax
push 0x182
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b1b3b
test edi, edi
je 0x4b1b05
cmp dword [edi + 0x10], 0
je 0x4b1b05
push dword [edi + 0x10]
mov ecx, 0x6ab460
push 0x182
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
jmp 0x4b1a91
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1b6c
cmp dword [eax + 0x10], 0
je 0x4b1b5f
mov edx, eax
mov ecx, 0x6ab460
push dword [edx + 0x10]
push 0x182
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov edx, dword [ebp - 0x3a4]
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1b6c
movzx eax, word [eax + 0x14]
test ax, ax
jne 0x4b1b6e
xor eax, eax
movzx edx, word [edx + 0x4c]
mov ecx, eax
test dx, dx
je 0x4b1bfe
test edi, edi
je 0x4b1bb2
movzx eax, word [edi + 0x14]
test ax, ax
je 0x4b1bb2
push eax
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x183
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b1bd7
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x183
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7b4
push eax
call ebx
add esp, 0x10
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b1bf1
cmp word [eax + 0x14], cx
je 0x4b1bf1
push ecx
push ecx
push ecx
jmp 0x4b1ca4
push ecx
push ecx
push ecx
push 0x87cefa
jmp 0x4b1ca9
test ecx, ecx
je 0x4b1c34
test edi, edi
je 0x4b1c6a
movzx eax, word [edi + 0x14]
test ax, ax
je 0x4b1c34
push eax
push ecx
push 0x183
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b1c9f
test edi, edi
je 0x4b1c6a
movzx eax, word [edi + 0x14]
test ax, ax
je 0x4b1c6a
push eax
push 0x183
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
jmp 0x4b1bf4
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1cc8
movzx eax, word [eax + 0x14]
test ax, ax
je 0x4b1cb7
push eax
push 0x183
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1cc8
mov eax, dword [eax + 0x16]
test eax, eax
jne 0x4b1cca
xor eax, eax
mov ecx, dword [ebp - 0x3a4]
mov ecx, dword [ecx + 0x48]
test ecx, ecx
je 0x4b1d54
test edi, edi
je 0x4b1d0a
cmp dword [edi + 0x16], 0
je 0x4b1d0a
push dword [edi + 0x16]
add eax, ecx
mov ecx, 0x6ab460
push eax
push 0x184
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b1d2e
add eax, ecx
mov ecx, 0x6ab460
push eax
push 0x184
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7b4
push eax
call ebx
add esp, 0x10
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b1d47
cmp dword [eax + 0x16], ecx
je 0x4b1d47
push ecx
push ecx
push ecx
jmp 0x4b1df7
push ecx
push ecx
push ecx
push 0x87cefa
jmp 0x4b1dfc
test eax, eax
je 0x4b1d89
test edi, edi
je 0x4b1dbe
cmp dword [edi + 0x16], 0
je 0x4b1d89
push dword [edi + 0x16]
mov ecx, 0x6ab460
push eax
push 0x184
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b1df2
test edi, edi
je 0x4b1dbe
cmp dword [edi + 0x16], 0
je 0x4b1dbe
push dword [edi + 0x16]
mov ecx, 0x6ab460
push 0x184
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
jmp 0x4b1d4a
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b1e0a
cmp dword [eax + 0x16], 0
je 0x4b1e0a
push dword [eax + 0x16]
mov ecx, 0x6ab460
push 0x184
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov ecx, dword [ebp - 0x3a4]
mov edi, 0x109
add ecx, 0x50
mov dword [ebp - 0x3c4], ecx
lea eax, [edi - 0x108]
push eax
call fcn.004549d5
fmul dword [0x565ddc]
mov ecx, dword [ebp - 0x3b0]
fstp dword [ebp - 0x3b8]
test ecx, ecx
je 0x4b1e6b
lea eax, [edi - 0x108]
add ecx, 0x1a
push eax
call fcn.004549d5
fmul dword [0x565ddc]
fstp dword [ebp - 0x3ac]
movss xmm0, dword [ebp - 0x3ac]
movss dword [ebp - 0x3c0], xmm0
mov ecx, dword [ebp - 0x3a8]
test ecx, ecx
je 0x4b1e9d
lea eax, [edi - 0x108]
add ecx, 0x1e
push eax
call fcn.004549d5
fmul dword [0x565ddc]
xorps xmm1, xmm1
fstp dword [ebp - 0x3ac]
movss xmm0, dword [ebp - 0x3ac]
jmp 0x4b1ea3
xorps xmm1, xmm1
movaps xmm0, xmm1
cvttss2si eax, dword [ebp - 0x3b8]
movss dword [ebp - 0x3ac], xmm0
test eax, eax
je 0x4b1f46
cvttss2si eax, dword [ebp - 0x3c0]
mov ecx, 0x6ab460
addss xmm0, dword [ebp - 0x3b8]
test eax, eax
je 0x4b1ef4
push eax
cvttss2si eax, xmm0
push eax
push edi
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call ebx
add esp, 0x14
jmp 0x4b1f11
cvttss2si eax, xmm0
push eax
push edi
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7bc
push eax
call ebx
add esp, 0x10
cmp dword [ebp - 0x3a8], 0
je 0x4b1fe2
movss xmm0, dword [ebp - 0x3ac]
ucomiss xmm0, dword [0x565dd4]
lahf
test ah, 0x44
jnp 0x4b1fe2
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
jmp 0x4b1fec
cvttss2si ecx, dword [ebp - 0x3c0]
test ecx, ecx
je 0x4b1f8e
ucomiss xmm0, xmm1
push ecx
mov ecx, 0x6ab460
lahf
test ah, 0x44
jnp 0x4b1f80
cvttss2si eax, xmm0
push eax
push edi
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call ebx
add esp, 0x14
jmp 0x4b1fb9
push edi
call fcn.004c8ae8
push eax
push str._s___d___
jmp 0x4b1fad
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4b1fd1
cvttss2si eax, xmm0
mov ecx, 0x6ab460
push eax
push edi
call fcn.004c8ae8
push eax
push 0x56a7bc
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0x10
movss xmm0, dword [ebp - 0x3ac]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x4b1f37
movss xmm0, dword [ebp - 0x3c0]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4b1ffa
xor eax, eax
push eax
push eax
push eax
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov ecx, dword [ebp - 0x3c4]
inc edi
lea eax, [edi - 0x108]
cmp eax, 5
jle 0x4b1e1e
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b2027
movzx eax, word [eax + 0x1a]
test ax, ax
je 0x4b2027
mov ecx, eax
jmp 0x4b202b
xor edi, edi
mov ecx, edi
mov eax, dword [ebp - 0x3a4]
push 0
mov dword [ebp - 0x3b8], ecx
pop edi
movzx edx, word [eax + 0x80]
test dx, dx
jne 0x4b2053
cmp word [eax + 0x82], di
je 0x4b2231
mov edi, 0x80a
cmp word [eax + 0x28], di
push 0
pop edi
je 0x4b2169
movzx edi, word [eax + 0x82]
mov eax, dword [ebp - 0x3b0]
cmp dx, di
jne 0x4b20da
test eax, eax
je 0x4b20ab
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b20ab
push eax
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x185
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
push str._s__d___d_
jmp 0x4b2136
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x185
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7c8
push eax
call ebx
add esp, 0x10
jmp 0x4b2142
test eax, eax
je 0x4b2116
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b2116
movzx ecx, cx
push eax
lea eax, [ecx + edi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x185
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d___d___d_
push eax
call ebx
add esp, 0x18
jmp 0x4b2142
movzx ecx, cx
lea eax, [ecx + edi]
push eax
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x185
call fcn.004c8ae8
push eax
push str._s__d___d
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0x14
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b2161
cmp word [eax + 0x1a], cx
je 0x4b2161
push ecx
push ecx
push ecx
push 0x55fc55
jmp 0x4b2223
push ecx
push ecx
push ecx
jmp 0x4b221e
movzx ecx, word [eax + 0x82]
mov eax, dword [ebp - 0x3b0]
cmp dx, cx
jne 0x4b21c5
test eax, eax
je 0x4b21a1
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b21a1
push eax
push edx
push 0x185
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
push str._s__d_____d_
jmp 0x4b220f
push edx
push 0x185
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d__
push eax
call ebx
add esp, 0x10
jmp 0x4b221b
test eax, eax
je 0x4b21f8
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b21f8
push eax
push ecx
push edx
push 0x185
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d_____d_
push eax
call ebx
add esp, 0x18
jmp 0x4b221b
push ecx
push edx
push 0x185
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
push str._s__d_____d__
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0x14
push edi
push edi
push edi
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov edi, dword [ebp - 0x3b0]
test edi, edi
je 0x4b227e
movzx eax, word [edi + 0x34]
test ax, ax
je 0x4b227e
push eax
push 0x186
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
mov ecx, esi
push eax
push eax
push eax
push 0x87cefa
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a4]
movzx edx, word [eax + 0x84]
test dx, dx
jne 0x4b229f
xor ecx, ecx
cmp word [eax + 0x86], cx
je 0x4b24a4
mov ecx, 0x80a
cmp word [eax + 0x28], cx
je 0x4b23da
movzx edi, word [eax + 0x86]
cmp dx, di
jne 0x4b232f
mov edi, dword [ebp - 0x3b0]
test edi, edi
je 0x4b22fd
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b22fd
push eax
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x187
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d___d_
push eax
call ebx
jmp 0x4b23b0
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add ecx, edx
push ecx
push 0x187
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7c8
push eax
call ebx
add esp, 0x10
jmp 0x4b23b3
mov eax, dword [ebp - 0x3b0]
test eax, eax
je 0x4b237c
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b237c
mov ecx, dword [ebp - 0x3b8]
movzx ecx, cx
push eax
add edi, ecx
push edi
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x187
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d___d___d_
push eax
call ebx
mov edi, dword [ebp - 0x3b0]
add esp, 0x18
jmp 0x4b23b3
mov eax, dword [ebp - 0x3b8]
movzx ecx, ax
add edi, ecx
push edi
lea eax, [ecx + edx]
mov ecx, 0x6ab460
push eax
push 0x187
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d___d
push eax
call ebx
mov edi, dword [ebp - 0x3b0]
add esp, 0x14
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b23d2
cmp word [eax + 0x1a], cx
je 0x4b23d2
push ecx
push ecx
push ecx
push 0x55fc55
jmp 0x4b2490
push ecx
push ecx
push ecx
jmp 0x4b248b
movzx ecx, word [eax + 0x86]
cmp dx, cx
jne 0x4b2430
test edi, edi
je 0x4b240c
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b240c
push eax
push ecx
push 0x187
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
push str._s__d_____d_
jmp 0x4b247a
push ecx
push 0x187
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d__
push eax
call ebx
add esp, 0x10
jmp 0x4b2486
test edi, edi
je 0x4b2463
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b2463
push eax
push ecx
push edx
push 0x187
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d_____d_
push eax
call ebx
add esp, 0x18
jmp 0x4b2486
push ecx
push edx
push 0x187
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
push str._s__d_____d__
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0x14
xor eax, eax
push eax
push eax
push eax
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a4]
xor edx, edx
cmp word [eax + 0x80], dx
jne 0x4b25a7
cmp word [eax + 0x82], dx
jne 0x4b25a7
cmp word [eax + 0x84], dx
jne 0x4b25a7
cmp word [eax + 0x86], dx
jne 0x4b25a7
mov edx, dword [ebp - 0x3a8]
test edx, edx
je 0x4b251f
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x4b251f
test edi, edi
je 0x4b255a
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b251f
push eax
push ecx
push 0x2a9
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d__d_
push eax
call ebx
add esp, 0x14
jmp 0x4b2589
test edi, edi
je 0x4b255a
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b255a
push eax
push 0x2a9
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x87cefa
jmp 0x4b2593
test edx, edx
je 0x4b25a1
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x4b25a1
push eax
push 0x2a9
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov eax, dword [ebp - 0x3a4]
lea ecx, [eax + 0x8c]
mov edi, 0x188
mov dword [ebp - 0x3c4], ecx
lea eax, [edi - 0x187]
push eax
call fcn.004549d5
fmul dword [0x565ddc]
mov ecx, dword [ebp - 0x3b0]
fstp dword [ebp - 0x3b8]
test ecx, ecx
je 0x4b2605
lea eax, [edi - 0x187]
add ecx, 0x36
push eax
call fcn.004549d5
fmul dword [0x565ddc]
fstp dword [ebp - 0x3ac]
movss xmm0, dword [ebp - 0x3ac]
movss dword [ebp - 0x3c0], xmm0
mov ecx, dword [ebp - 0x3a8]
test ecx, ecx
je 0x4b2637
lea eax, [edi - 0x187]
add ecx, 0x36
push eax
call fcn.004549d5
fmul dword [0x565ddc]
xorps xmm1, xmm1
fstp dword [ebp - 0x3ac]
movss xmm0, dword [ebp - 0x3ac]
jmp 0x4b263d
xorps xmm1, xmm1
movaps xmm0, xmm1
cvttss2si eax, dword [ebp - 0x3b8]
movss dword [ebp - 0x3ac], xmm0
test eax, eax
je 0x4b26e0
cvttss2si eax, dword [ebp - 0x3c0]
mov ecx, 0x6ab460
addss xmm0, dword [ebp - 0x3b8]
test eax, eax
je 0x4b268e
push eax
cvttss2si eax, xmm0
push eax
push edi
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call ebx
add esp, 0x14
jmp 0x4b26ab
cvttss2si eax, xmm0
push eax
push edi
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7bc
push eax
call ebx
add esp, 0x10
cmp dword [ebp - 0x3a8], 0
je 0x4b277c
movss xmm0, dword [ebp - 0x3ac]
ucomiss xmm0, dword [0x565dd4]
lahf
test ah, 0x44
jnp 0x4b277c
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
jmp 0x4b2786
cvttss2si ecx, dword [ebp - 0x3c0]
test ecx, ecx
je 0x4b2728
ucomiss xmm0, xmm1
push ecx
mov ecx, 0x6ab460
lahf
test ah, 0x44
jnp 0x4b271a
cvttss2si eax, xmm0
push eax
push edi
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d_____d___
push eax
call ebx
add esp, 0x14
jmp 0x4b2753
push edi
call fcn.004c8ae8
push eax
push str._s___d___
jmp 0x4b2747
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4b276b
cvttss2si eax, xmm0
mov ecx, 0x6ab460
push eax
push edi
call fcn.004c8ae8
push eax
push 0x56a7bc
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0x10
movss xmm0, dword [ebp - 0x3ac]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x4b26d1
movss xmm0, dword [ebp - 0x3c0]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x4b2794
xor eax, eax
push eax
push eax
push eax
push 0x87cefa
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov ecx, dword [ebp - 0x3c4]
inc edi
lea eax, [edi - 0x187]
cmp eax, 5
jle 0x4b25b8
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x4b27bd
movzx eax, word [eax + 0x1c]
test ax, ax
jne 0x4b27bf
xor eax, eax
mov edi, eax
mov eax, dword [ebp - 0x3a4]
movzx ecx, word [eax + 0xa4]
test cx, cx
je 0x4b285c
mov eax, dword [ebp - 0x3b0]
test eax, eax
je 0x4b2814
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4b2814
push eax
movzx eax, di
add ecx, eax
push ecx
push 0x18d
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b283b
movzx eax, di
add ecx, eax
push ecx
push 0x18d
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56a7b4
push eax
call ebx
add esp, 0x10
cmp dword [ebp - 0x3a8], 0
je 0x4b284d
test di, di
jne 0x4b2900
xor eax, eax
push eax
push eax
push eax
push 0x87cefa
jmp 0x4b290a
test di, di
je 0x4b289c
mov eax, dword [ebp - 0x3b0]
test eax, eax
je 0x4b28d6
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4b289c
push eax
movzx eax, di
mov ecx, 0x6ab460
push eax
push 0x18d
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push 0x56e2ac
push eax
call ebx
add esp, 0x14
jmp 0x4b2900
mov eax, dword [ebp - 0x3b0]
test eax, eax
je 0x4b28d6
movzx eax, word [eax + 0x4e]
test ax, ax
je 0x4b28d6
push eax
push 0x18d
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s___d_
push eax
call ebx
add esp, 0x10
jmp 0x4b284d
test di, di
je 0x4b2918
movzx eax, di
mov ecx, 0x6ab460
push eax
push 0x18d
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push str._s__d
push eax
call ebx
add esp, 0x10
xor eax, eax
push eax
push eax
push eax
push 0x55fc55
lea eax, [ebp - 0x140]
mov ecx, esi
push eax
call fcn.00444882
mov edi, dword [ebp - 0x3a4]
movzx eax, word [edi + 0xa8]
test ax, ax
je 0x4b2963
push eax
lea eax, [edi + 2]
mov ecx, 0x6ab460
push eax
push 0x18e
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0x10
xor eax, eax
mov ecx, esi
push eax
push eax
push eax
push 0x87cefa
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
xor eax, eax
cmp word [edi + 0xac], ax
je 0x4b2b5b
movzx edx, word [edi + 0xaa]
test dx, dx
je 0x4b2b5b
mov byte [ebp - 0x34], al
lea edi, [ebp - 0x33]
push 7
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [edx - 1]
cmp eax, 0xa
ja case.default.0x4b299c
jmp dword [eax*4 + 0x4b35d7]
push 0x196
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b29b7
jmp case.default.0x4b299c
push 0x197
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b29da
jmp case.default.0x4b299c
push 0x198
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b29fd
jmp case.default.0x4b299c
push 0x199
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b2a20
jmp case.default.0x4b299c
push 0x19a
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b2a43
jmp case.default.0x4b299c
push 0x19b
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b2a66
jmp case.default.0x4b299c
push 0x19c
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b2a89
jmp case.default.0x4b299c
push 0x19d
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b2aa9
jmp case.default.0x4b299c
push 0x19e
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b2ac9
jmp case.default.0x4b299c
push 0x19f
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b2ae9
jmp case.default.0x4b299c
push 0x1a0
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [ebp - 0x34]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b2b09
mov eax, dword [ebp - 0x3a4]
mov ecx, 0x6ab460
movzx eax, word [eax + 0xac]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x1a1
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x140]
push eax
call ebx
add esp, 0x10
xor eax, eax
mov ecx, esi
push eax
push eax
push eax
push 0x87cefa
lea eax, [ebp - 0x140]
push eax
call fcn.00444882
xor eax, eax
mov edi, dword [ebp - 0x3bc]
test edi, edi
je 0x4b301d
cmp dword [edi], eax
je 0x4b301d
push eax
push eax
push eax
push 0xffffff
push 0x564710
mov ecx, esi
call fcn.00444882
push dword [0x6a82f0]
mov ecx, 0x6ab460
push dword [0x6a82ec]
push 0xa6a
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x3a0]
push eax
call ebx
add esp, 0x10
xor eax, eax
mov ecx, esi
push eax
push eax
push eax
push 0xffffff
lea eax, [ebp - 0x3a0]
push eax
call fcn.00444882
lea ecx, [ebp - 0x34]
call fcn.00434c27
xor eax, eax
cmp dword [edi + 8], 1
mov dword [ebp - 4], eax
jne 0x4b2c17
push eax
lea eax, [ebp - 0x34]
mov ecx, 0x6a08e0
push eax
push 0x93
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2ca6
push eax
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82f0], 1
jmp 0x4b2ca6
jbe 0x4b2ca8
movzx eax, word [edi + 8]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a574d
mov edi, eax
test edi, edi
je 0x4b2ca0
movzx ecx, word [edi + 0x26]
lea eax, [ebp - 0x34]
push 1
push eax
push ecx
mov ecx, 0x6a08e0
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2c6a
push eax
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82ec], 1
movzx eax, word [edi + 0x24]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a5a91
mov edi, eax
test edi, edi
je 0x4b2ca0
xor ebx, ebx
push ebx
push ebx
push ebx
push 0xc8d7aa
push dword [edi]
mov ecx, esi
call fcn.00444882
mov edi, dword [edi + 4]
test edi, edi
jne 0x4b2c82
mov ebx, dword [sym.imp.MSVCR120.dll_sprintf]
mov edi, dword [ebp - 0x3bc]
xor eax, eax
cmp dword [edi + 0xc], 1
jne 0x4b2cee
push eax
lea eax, [ebp - 0x34]
mov ecx, 0x6a08e0
push eax
push 0x93
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2d7e
push 1
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82f0], 2
jmp 0x4b2d7e
jbe 0x4b2d7e
movzx eax, word [edi + 0xc]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a574d
mov edi, eax
test edi, edi
je 0x4b2d78
movzx ecx, word [edi + 0x26]
lea eax, [ebp - 0x34]
push 1
push eax
push ecx
mov ecx, 0x6a08e0
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2d42
push 1
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82ec], 2
movzx eax, word [edi + 0x24]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a5a91
mov edi, eax
test edi, edi
je 0x4b2d78
xor ebx, ebx
push ebx
push ebx
push ebx
push 0xc8d7aa
push dword [edi]
mov ecx, esi
call fcn.00444882
mov edi, dword [edi + 4]
test edi, edi
jne 0x4b2d5a
mov ebx, dword [sym.imp.MSVCR120.dll_sprintf]
mov edi, dword [ebp - 0x3bc]
cmp dword [edi + 0x10], 1
jne 0x4b2dc6
xor eax, eax
mov ecx, 0x6a08e0
push eax
lea eax, [ebp - 0x34]
push eax
push 0x93
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2e56
push 2
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82f0], 3
jmp 0x4b2e56
jbe 0x4b2e56
movzx eax, word [edi + 0x10]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a574d
mov edi, eax
test edi, edi
je 0x4b2e50
movzx ecx, word [edi + 0x26]
lea eax, [ebp - 0x34]
push 1
push eax
push ecx
mov ecx, 0x6a08e0
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2e1a
push 2
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82ec], 3
movzx eax, word [edi + 0x24]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a5a91
mov edi, eax
test edi, edi
je 0x4b2e50
xor ebx, ebx
push ebx
push ebx
push ebx
push 0xc8d7aa
push dword [edi]
mov ecx, esi
call fcn.00444882
mov edi, dword [edi + 4]
test edi, edi
jne 0x4b2e32
mov ebx, dword [sym.imp.MSVCR120.dll_sprintf]
mov edi, dword [ebp - 0x3bc]
cmp dword [edi + 0x14], 1
jne 0x4b2e9e
xor eax, eax
mov ecx, 0x6a08e0
push eax
lea eax, [ebp - 0x34]
push eax
push 0x93
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2f32
push 3
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82f0], 4
jmp 0x4b2f32
cmp dword [edi + 8], 3
jbe 0x4b2f32
movzx eax, word [edi + 0x14]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a574d
mov edi, eax
test edi, edi
je 0x4b2f2c
movzx ecx, word [edi + 0x26]
lea eax, [ebp - 0x34]
push 1
push eax
push ecx
mov ecx, 0x6a08e0
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2ef6
push 3
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82ec], 4
movzx eax, word [edi + 0x24]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a5a91
mov edi, eax
test edi, edi
je 0x4b2f2c
xor ebx, ebx
push ebx
push ebx
push ebx
push 0xc8d7aa
push dword [edi]
mov ecx, esi
call fcn.00444882
mov edi, dword [edi + 4]
test edi, edi
jne 0x4b2f0e
mov ebx, dword [sym.imp.MSVCR120.dll_sprintf]
mov edi, dword [ebp - 0x3bc]
cmp dword [edi + 0x18], 1
jne 0x4b2f7a
xor eax, eax
mov ecx, 0x6a08e0
push eax
lea eax, [ebp - 0x34]
push eax
push 0x93
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b3004
push 4
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82f0], 5
jmp 0x4b3004
jbe 0x4b3004
movzx eax, word [edi + 0x18]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a574d
mov edi, eax
test edi, edi
je 0x4b3004
movzx ecx, word [edi + 0x26]
lea eax, [ebp - 0x34]
push 1
push eax
push ecx
mov ecx, 0x6a08e0
call fcn.0043d9e8
lea ecx, [ebp - 0x34]
call fcn.0042d0e0
test eax, eax
jne 0x4b2fce
push 4
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0044486a
mov dword [0x6a82ec], 5
movzx eax, word [edi + 0x24]
mov ecx, dword [ebp - 0x3b4]
push eax
call fcn.004a5a91
mov edi, eax
test edi, edi
je 0x4b3004
xor ebx, ebx
push ebx
push ebx
push ebx
push 0xc8d7aa
push dword [edi]
mov ecx, esi
call fcn.00444882
mov edi, dword [edi + 4]
test edi, edi
jne 0x4b2fe6
mov ebx, dword [sym.imp.MSVCR120.dll_sprintf]
lea ecx, [ebp - 0x3a0]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b300a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.00434c46
mov edi, dword [ebp - 0x3a4]
mov eax, 0x100
test word [edi + 0x28], ax
je 0x4b303b
mov ecx, dword [ebp - 0x3b4]
push edi
push esi
call fcn.004a2758
xor eax, eax
cmp word [edi + 0xca], ax
je 0x4b3053
mov ecx, dword [ebp - 0x3b4]
push edi
push esi
call fcn.004a2664
mov ecx, 0x834
cmp word [edi + 0x28], cx
jne 0x4b3070
mov ecx, dword [ebp - 0x3b4]
push edi
push esi
call fcn.004a3b9d
mov ecx, 0x834
movzx eax, word [edi + 0x28]
test eax, 0x800
je 0x4b30b3
cmp ax, cx
jae 0x4b30b3
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b3091
cmp dword [eax + 4], ecx
jne 0x4b309f
mov eax, dword [ebp - 0x3b0]
test eax, eax
je 0x4b30b3
cmp dword [eax], ecx
je 0x4b30b3
push ecx
push ecx
push ecx
push 0xffffff
push 0x564710
mov ecx, esi
call fcn.00444882
movzx edi, word [edi + 0x28]
test edi, 0x800
je 0x4b330e
mov eax, 0x834
cmp di, ax
jae 0x4b330e
mov ecx, esi
call fcn.0051419c
mov ecx, 0x88
cmp ax, cx
je 0x4b330e
mov ecx, esi
call fcn.0051419c
mov ecx, 0x85
cmp ax, cx
je 0x4b330e
mov eax, 0x12c
cmp di, ax
je 0x4b330e
mov ecx, esi
call fcn.00413d64
mov edi, eax
mov ecx, esi
mov dword [ebp - 0x3ac], edi
call fcn.0051419c
mov ecx, 0x80
cmp ax, cx
je 0x4b330e
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
test eax, eax
je 0x4b31ec
cmp dword [eax + 4], ecx
je 0x4b31ec
push 0x9b4
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b3158
sub eax, edx
add eax, 2
push eax
lea eax, [ebp - 0x170]
push str.
push eax
call fcn.005032d6
add esp, 0xc
add edi, 0x20
je 0x4b31e4
push 8
push str.monster
push edi
call fcn.00550232
add esp, 0xc
test eax, eax
jne 0x4b328b
mov edi, 0x6ab460
push 0x9b3
mov ecx, edi
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push 0x56de00
push eax
call ebx
add esp, 0x10
mov ecx, edi
xor eax, eax
push eax
push eax
push eax
push 0xf83232
push 0xffffff
lea eax, [ebp - 0x40]
push eax
push 0x9b4
call fcn.004c8ae8
push eax
mov ecx, esi
call fcn.00444876
mov edi, dword [ebp - 0x3ac]
xor ecx, ecx
mov eax, dword [ebp - 0x3b0]
test eax, eax
je 0x4b330e
cmp dword [eax], ecx
je 0x4b330e
push 0x9b5
mov ecx, 0x6ab460
call fcn.004c8ae8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b3214
sub eax, edx
add eax, 2
push eax
lea eax, [ebp - 0x170]
push str.
push eax
call fcn.005032d6
add esp, 0xc
add edi, 0x31
je 0x4b330e
push 8
push str.monster
push edi
call fcn.00550232
add esp, 0xc
test eax, eax
jne 0x4b32b7
push 0x9b3
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1a0]
push 0x56de00
push eax
call ebx
add esp, 0x10
xor edi, edi
push edi
push edi
push edi
push 0xf83232
push 0xffffff
jmp 0x4b32dc
push edi
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x40]
push 0x56de00
push eax
call ebx
add esp, 0x10
mov ecx, 0x6ab460
xor eax, eax
push eax
push eax
push eax
mov eax, 0xffffff
push eax
push eax
jmp 0x4b31ce
push edi
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x1a0]
push 0x56de00
push eax
call ebx
add esp, 0x10
mov eax, 0xffffff
xor edi, edi
push edi
push edi
push edi
push eax
push eax
lea eax, [ebp - 0x1a0]
mov ecx, 0x6ab460
push eax
push 0x9b5
call fcn.004c8ae8
push eax
mov ecx, esi
call fcn.00444876
push 0x2f
lea eax, [ebp - 0x1a0]
push edi
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
jmp 0x4b3310
xor edi, edi
mov eax, dword [ebp - 0x3a4]
mov ebx, dword [ebp - 0x3b4]
mov ecx, ebx
push 1
push 0xc8d7aa
movzx eax, word [eax + 0x24]
push eax
push esi
call fcn.004a2523
cmp dword [ebp + 0x1c], 0
jne 0x4b3467
mov ecx, dword [ebp - 0x3c8]
test ecx, ecx
je 0x4b334b
mov eax, dword [ecx]
call dword [eax + 0x7c]
jmp 0x4b335c
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x4b3395
mov ecx, eax
call fcn.0046eede
movzx edi, ax
cmp edi, 0xffffffff
je 0x4b3395
lea eax, [edi - 0x50]
cmp eax, 9
ja 0x4b3395
xor eax, eax
mov ecx, esi
push eax
call fcn.00434c17
xor eax, eax
mov ecx, esi
push eax
call fcn.00434c07
push edi
mov ecx, esi
call fcn.004e25f3
push eax
mov ecx, ebx
call fcn.004b39b1
jmp 0x4b35af
xor eax, eax
mov ecx, 0x801
mov edi, eax
mov ebx, eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3c4], edi
movzx eax, word [eax + 0x28]
cmp ax, cx
je 0x4b3483
add ecx, 6
cmp ax, cx
je 0x4b3491
mov ecx, 0x808
cmp ax, cx
je 0x4b349f
inc ecx
cmp ax, cx
je 0x4b34ad
mov ecx, 0x80b
cmp ax, cx
je 0x4b34bb
add ecx, 2
cmp ax, cx
je 0x4b34c9
mov ecx, 0x80a
cmp ax, cx
je 0x4b34d7
add ecx, 2
cmp ax, cx
je 0x4b34e5
mov ecx, 0x816
cmp ax, cx
jne 0x4b3422
push 0x5a
jmp 0x4b34e7
mov ecx, 0x80e
cmp ax, cx
je 0x4b3506
inc ecx
cmp ax, cx
jne 0x4b343d
push 0x5b
jmp 0x4b34e7
mov ecx, 0x810
cmp ax, cx
jne 0x4b354d
mov ebx, 0x691150
push 0x5c
mov ecx, ebx
call fcn.00415526
mov ecx, eax
call fcn.00456f51
push 0x5d
jmp 0x4b351d
mov eax, dword [ebp - 0x3a4]
mov ecx, 0x801
mov ebx, edi
mov dword [ebp - 0x3c4], edi
movzx eax, word [eax + 0x28]
cmp ax, cx
jne 0x4b3487
push 0x51
jmp 0x4b34e7
mov ecx, 0x807
cmp ax, cx
jne 0x4b3495
push 0x52
jmp 0x4b34e7
mov ecx, 0x808
cmp ax, cx
jne 0x4b34a3
push 0x50
jmp 0x4b34e7
mov ecx, 0x809
cmp ax, cx
jne 0x4b34b1
push 0x53
jmp 0x4b34e7
mov ecx, 0x80b
cmp ax, cx
jne 0x4b34bf
push 0x56
jmp 0x4b34e7
mov ecx, 0x80d
cmp ax, cx
jne 0x4b34cd
push 0x57
jmp 0x4b34e7
mov ecx, 0x80a
cmp ax, cx
jne 0x4b34db
push 0x58
jmp 0x4b34e7
mov ecx, 0x80c
cmp ax, cx
jne 0x4b34fc
push 0x59
mov ecx, 0x691150
call fcn.00415526
mov ecx, eax
call fcn.00456f51
mov edi, eax
jmp 0x4b352f
mov ecx, 0x80e
cmp ax, cx
jne 0x4b354d
mov ebx, 0x691150
push 0x54
mov ecx, ebx
call fcn.00415526
mov ecx, eax
call fcn.00456f51
push 0x55
mov ecx, ebx
mov edi, eax
call fcn.00415526
mov ecx, eax
call fcn.00456f51
mov ebx, eax
test edi, edi
je 0x4b3547
mov ecx, edi
call fcn.004e25f3
push eax
mov ecx, esi
call fcn.00434c17
xor edi, edi
inc edi
jmp 0x4b3557
mov edi, dword [ebp - 0x3c4]
xor eax, eax
mov ecx, esi
push eax
call fcn.00434c17
test ebx, ebx
je 0x4b356e
mov ecx, ebx
call fcn.004e25f3
push eax
mov ecx, esi
call fcn.00434c07
xor ebx, ebx
jmp 0x4b357c
xor ebx, ebx
mov ecx, esi
push ebx
call fcn.00434c07
test edi, edi
je 0x4b35af
push ebx
push ebx
push ebx
push 0xffffff
push 0x564710
mov ecx, esi
call fcn.00444882
push ebx
push ebx
push ebx
push 0xff00
push 0xa7c
mov ecx, 0x6ab460
call fcn.004c8ae8
push eax
mov ecx, esi
call fcn.00444882
call fcn.005500d6
ret 0x18