Function at 0x4bd3a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x4bf818
sub esp, 0x110
mov eax, dword [esp + 0x128]
test eax, eax
jle 0x4bf79c
mov ecx, dword [esp + 0x120]
test ecx, ecx
jne 0x4bf6d0
mov edx, dword [esp + 0x114]
mov dword [edx + 0xc], 0
mov ebx, dword [0xcc2260]
lea ebp, [edx + 0x10]
test ebx, ebx
jne 0x4bf6a6
mov dword [edx + 0x10], 0
mov dword [edx + 0x1c], ecx
mov ebx, dword [0xcc2260]
lea ebp, [edx + 0x14]
lea esi, [edx + 0x18]
test ebx, ebx
jne 0x4bf64a
mov ebx, dword [esp + 0x118]
mov dword [edx + 0x14], ebx
mov ebp, dword [esp + 0x11c]
mov dword [edx + 0x18], ebp
mov esi, ecx
and ecx, 0x1f
cmp ecx, 0x10
jbe 0x4bf279
cmp ecx, 0x15
ja 0x4be982
cmp ecx, 0x13
ja 0x4bdeb2
cmp ecx, 0x11
jne 0x4bde6d
mov dword [esp + 0x88], ecx
mov edi, dword [esp + 0x124]
cmp edi, 0x71
jg 0x4bde56
cmp edi, 0x58
jne 0x4bde48
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004ad6c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [eax + 0x28]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
cmp eax, 8
jne 0x4bd6df
mov eax, dword [esp + 0x88]
cmp eax, 0x17
je 0x4bd6a9
mov eax, dword [esp + 0x120]
test eax, 0x100
jne 0x4bd629
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004ab200
mov eax, dword [esp + 0xc]
lea ecx, [0x7d0160]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00439eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x68], edx
xor ebx, ebx
jmp 0x4bd553
mov ebp, dword [esp + 0xa8]
mov byte [ebp + ecx], al
lea ebx, [ecx + 1]
mov eax, ebp
mov ecx, dword [esp + 0x6c]
cmp ebx, edx
jge 0x4bd5b5
mov dword [esp + 0x54], ebx
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.004aaaa0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004ad840
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x68]
cmp ecx, edx
jb 0x4bd53f
jmp 0x4bf7bd
mov dword [esp + 0xa8], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ecx
mov ebx, dword [esp + 0x8c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x114]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x124]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
call fcn.004bb640
add esp, 0x110
ret
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004ab200
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x120]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.004ad010
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004a8780
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
jmp 0x4bd5b5
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.004a8780
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
jmp 0x4bd5b5
mov eax, dword [esp + 0x114]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x4bd989
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4bd90e
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x5b
xor ecx, ecx
jmp 0x4bd783
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004aaaa0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x128]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004bd3a0
mov eax, dword [esp + 0x58]
lea ecx, [eax + 1]
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
call fcn.004ab200
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x58]
cmp ecx, eax
jge 0x4bd86c
test ecx, ecx
jle 0x4bd713
mov eax, dword [esp + 0x114]
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
mov ebp, dword [eax]
lea esi, [ebx + 1]
cmp esi, edx
jg 0x4bd7ea
lea edx, [ebx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ebx], 0x20
jmp 0x4bd713
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bd83b
mov dword [ebx], eax
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x58]
jmp 0x4bd7da
mov dword [esp + 0xd8], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
jmp 0x4bd82a
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4bd893
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x5d
add esp, 0x110
ret
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bd8dd
mov dword [ebx], eax
mov edx, ecx
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x4bd882
mov dword [esp + 0xd4], eax
mov dword [esp + 0x80], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x114]
jmp 0x4bd8d3
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bd95e
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x114]
jmp 0x4bd705
mov dword [esp + 0xd0], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x114]
jmp 0x4bd94e
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.004ad6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4bddeb
cmp ebp, edi
ja 0x4bf7b6
mov dword [esp + 0x80], edi
mov dword [esp + 0xcc], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044e470
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 8], eax
mov eax, dword [0xcc2260]
test eax, eax
jne 0x4bddcc
mov eax, dword [esp + 0xcc]
mov dword [ecx], eax
mov eax, dword [esp + 0x88]
cmp eax, 0x17
je 0x4bdce8
mov eax, dword [ecx + 8]
mov edx, dword [ecx + 4]
mov ebx, dword [ecx]
lea ebp, [edx + 1]
cmp ebp, eax
jg 0x4bdc6d
lea eax, [edx + 1]
mov dword [ecx + 4], eax
mov byte [ebx + edx], 0x7b
xor eax, eax
jmp 0x4bdae4
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004aaaa0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x128]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004bd3a0
mov eax, dword [esp + 0x64]
inc eax
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
call fcn.004ab200
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x64]
cmp ecx, eax
jge 0x4bdbd3
test ecx, ecx
jle 0x4bda76
mov eax, dword [esp + 0x114]
mov edx, dword [eax + 4]
lea ebx, [edx + 2]
mov ebp, dword [eax + 8]
mov esi, dword [eax]
cmp ebx, ebp
ja 0x4bdb81
cmp ebx, ebp
ja 0x4bf7a8
movzx edi, word [0x844740]
mov word [esi + edx], di
mov dword [eax + 4], ebx
mov dword [eax + 8], ebp
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bdb65
mov dword [eax], esi
jmp 0x4bda76
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.0040f360
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x64]
jmp 0x4bda76
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ebx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a030
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x80]
jmp 0x4bdb3b
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4bdbf8
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x7d
jmp 0x4bd88c
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bdc42
mov dword [ebx], eax
mov edx, ecx
mov ebp, eax
mov eax, ebx
mov ebx, ebp
jmp 0x4bdbe9
mov dword [esp + 0xd4], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x114]
jmp 0x4bdc38
lea ecx, [0x7d0160]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bdcbd
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov ecx, dword [esp + 0x114]
jmp 0x4bda68
mov dword [esp + 0xd0], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x114]
jmp 0x4bdcad
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.004ab090
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bdd22
mov ecx, dword [esp + 0x114]
jmp 0x4bda55
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4bdd7e
cmp edx, ebx
ja 0x4bf7af
mov esi, dword [0x845561]
movzx edi, byte [0x845565]
mov dword [ebp + ecx], esi
xchg edi, eax
mov byte [ebp + ecx + 4], al
xchg edi, eax
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov ecx, dword [0xcc2260]
test ecx, ecx
jne 0x4bdd70
mov dword [eax], ebp
add esp, 0x110
ret
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040f360
jmp 0x4bdd69
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], edx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043a030
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
jmp 0x4bdd38
mov dword [esp], ecx
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.0040f360
mov ecx, dword [esp + 0x114]
jmp 0x4bda45
mov dword [esp + 0x80], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x94], ecx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
jmp 0x4bd9ea
cmp edi, 0x71
je 0x4bd47b
jmp 0x4bd6df
cmp edi, 0x73
je 0x4bd47b
cmp edi, 0x78
je 0x4bd47b
jmp 0x4bd6df
lea eax, [ecx - 0x12]
cmp eax, 1
ja 0x4bde99
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004bbe90
jmp 0x4bd88c
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004ba480
jmp 0x4bd88c
cmp ecx, 0x14
je 0x4be68e
movzx ecx, byte [edx + 0x2c]
test cl, cl
jne 0x4be3fe
mov ecx, dword [edx + 4]
lea edi, [ecx + 4]
mov eax, dword [edx + 8]
mov esi, dword [edx]
cmp edi, eax
ja 0x4be3a8
cmp edi, eax
ja 0x4bf7f5
mov ebp, dword [0x845278]
mov dword [esi + ecx], ebp
mov dword [edx + 4], edi
mov dword [edx + 8], eax
mov eax, dword [0xcc2260]
test eax, eax
jne 0x4be389
mov dword [edx], esi
mov dword [esp], ebx
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x120]
mov dword [esp + 8], ecx
call fcn.004ab500
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], ecx
xor edx, edx
jmp 0x4bdfd4
lea edx, [ebx + 1]
mov dword [eax + 4], edx
mov byte [ecx + ebx], 0x3a
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x120]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0xc4]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x14], ebp
call fcn.004ab350
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x14], ecx
call fcn.004bd3a0
mov eax, dword [esp + 0xc8]
add eax, 0xc
mov ecx, dword [esp + 0x5c]
lea edx, [ecx + 1]
mov ecx, dword [esp + 0x50]
cmp edx, ecx
jge 0x4be256
mov dword [esp + 0x5c], edx
mov dword [esp + 0xc8], eax
mov ebx, dword [eax + 8]
mov dword [esp + 0x88], ebx
mov ebp, dword [eax + 4]
mov dword [esp + 0xc4], ebp
mov esi, dword [eax]
mov dword [esp + 0xc0], esi
test edx, edx
jle 0x4be24a
mov edi, dword [esp + 0x114]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4be1ad
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov eax, dword [edi]
mov ebx, dword [edi + 8]
cmp edx, ebx
ja 0x4be157
cmp edx, ebx
ja 0x4bf7ee
movzx ebp, word [0x844740]
mov word [eax + ecx], bp
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0xcc2260]
test ecx, ecx
jne 0x4be138
mov dword [edi], eax
mov dword [esp], edi
mov dword [esp + 4], esi
mov eax, dword [esp + 0xc4]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x124]
mov dword [esp + 0x10], edx
mov ebx, dword [esp + 0x128]
lea ebp, [ebx + 1]
mov dword [esp + 0x84], ebp
mov dword [esp + 0x14], ebp
call fcn.004bd3a0
mov eax, dword [esp + 0x114]
mov ecx, dword [eax]
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
lea ebp, [ebx + 1]
cmp ebp, edx
jle 0x4bdf32
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4be107
mov dword [ebx], eax
mov ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x114]
jmp 0x4bdf32
mov dword [esp + 0xd8], eax
mov dword [esp + 0x80], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x114]
jmp 0x4be0f7
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040f360
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0x114]
jmp 0x4be05b
mov dword [esp + 0x84], edx
mov dword [esp + 0x7c], ecx
lea ebp, [0x7d0160]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043a030
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0x114]
jmp 0x4be032
mov ecx, dword [edi + 8]
mov edx, dword [edi + 4]
mov eax, dword [edi]
lea ebx, [edx + 1]
cmp ebx, ecx
jg 0x4be1cb
lea ecx, [edx + 1]
mov dword [edi + 4], ecx
mov byte [eax + edx], 0x20
jmp 0x4be05b
lea ebp, [0x7d0160]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4be21f
mov dword [ebx], eax
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
mov edi, ebx
mov edx, ecx
jmp 0x4be1bc
mov dword [esp + 0xd4], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x114]
jmp 0x4be20b
mov edi, dword [esp + 0x114]
jmp 0x4be05b
mov eax, dword [esp + 0x114]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4be2f8
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov ebx, dword [eax + 8]
lea ebp, [ecx + 1]
cmp ebp, ebx
jg 0x4be287
lea ebx, [ecx + 1]
mov dword [eax + 4], ebx
mov byte [edx + ecx], 0x7d
jmp 0x4bd88c
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4be2cd
mov dword [ebx], eax
mov edx, eax
mov eax, ebx
jmp 0x4be278
mov dword [esp + 0xd0], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x114]
jmp 0x4be2c7
mov ecx, dword [eax + 8]
mov edx, dword [eax]
mov ebx, dword [eax + 4]
lea ebp, [ebx + 1]
cmp ebp, ecx
jg 0x4be316
lea ecx, [ebx + 1]
mov dword [eax + 4], ecx
mov byte [edx + ebx], 0x5d
jmp 0x4bd88c
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4be35e
mov dword [ebx], eax
mov edx, eax
mov eax, ebx
mov ebx, ecx
jmp 0x4be307
mov dword [esp + 0xd0], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x114]
jmp 0x4be356
mov dword [esp], edx
mov dword [esp + 4], esi
call fcn.0040f360
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
jmp 0x4bdf01
mov dword [esp + 0x84], edi
mov dword [esp + 0x7c], ecx
lea edx, [0x7d0160]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.0043a030
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov edi, dword [esp + 0x84]
jmp 0x4bdeda
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004ad6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [ebx + ecx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4be637
cmp ebp, edi
ja 0x4bf803
mov dword [esp + 0x7c], edi
mov dword [esp + 0xbc], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044e470
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [ecx + 8], eax
mov eax, dword [0xcc2260]
test eax, eax
jne 0x4be61f
mov eax, dword [esp + 0xbc]
mov dword [ecx], eax
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.004ab090
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4be575
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [edx + 1]
cmp ebp, ecx
jg 0x4be4fd
lea ecx, [edx + 1]
mov dword [eax + 4], ecx
mov byte [ebx + edx], 0x7b
mov ebx, dword [esp + 0x118]
jmp 0x4bdf01
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4be54a
mov dword [ebx], eax
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x114]
jmp 0x4be4e7
mov dword [esp + 0xb8], eax
mov dword [esp + 0x70], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x114]
jmp 0x4be53d
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4be5d1
cmp edx, ebx
ja 0x4bf7fc
mov esi, dword [0x845561]
movzx edi, byte [0x845565]
mov dword [ebp + ecx], esi
xchg edi, eax
mov byte [ebp + ecx + 4], al
xchg edi, eax
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov ecx, dword [0xcc2260]
test ecx, ecx
jne 0x4be5c3
mov dword [eax], ebp
add esp, 0x110
ret
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040f360
jmp 0x4be5bc
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], edx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043a030
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
jmp 0x4be58b
mov dword [esp], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.0040f360
jmp 0x4be49f
mov dword [esp + 0x9c], eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x7c], ebx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x84]
jmp 0x4be44a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004aa320
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x4be94b
mov eax, dword [esp + 0x114]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x4be769
mov ecx, dword [eax + 4]
lea edx, [ecx + 5]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
ja 0x4be71b
cmp edx, ebx
ja 0x4bf7c4
movzx esi, byte [0x8455c4]
mov edi, dword [0x8455c0]
mov dword [ebp + ecx], edi
xchg esi, eax
mov byte [ebp + ecx + 4], al
xchg esi, eax
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov ecx, dword [0xcc2260]
test ecx, ecx
jne 0x4be70a
mov dword [eax], ebp
jmp 0x4bd88c
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040f360
jmp 0x4bd88c
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ecx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043a030
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
jmp 0x4be6d4
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.004ad6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4be8ee
cmp ebp, edi
ja 0x4bf7d2
mov dword [esp + 0xcc], esi
mov dword [esp + 0x80], edi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044e470
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 8], eax
mov eax, dword [0xcc2260]
test eax, eax
jne 0x4be8c8
mov eax, dword [esp + 0xcc]
mov dword [ecx], eax
mov edx, dword [ecx + 4]
lea ebx, [edx + 5]
mov ebp, dword [ecx + 8]
cmp ebx, ebp
ja 0x4be87a
cmp ebx, ebp
ja 0x4bf7cb
mov esi, dword [0x845561]
movzx edi, byte [0x845565]
mov dword [eax + edx], esi
xchg edi, ebx
mov byte [eax + edx + 4], bl
xchg edi, ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebp
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4be869
mov dword [ecx], eax
jmp 0x4bd88c
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f360
jmp 0x4bd88c
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], edx
lea ecx, [0x7d0160]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a030
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x84]
jmp 0x4be832
mov dword [esp], ecx
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x114]
jmp 0x4be825
mov dword [esp + 0x80], ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x98], ecx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
jmp 0x4be7ca
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x128]
inc eax
mov dword [esp + 0x14], eax
call fcn.004bd3a0
jmp 0x4bd88c
cmp ecx, 0x17
ja 0x4beb53
cmp ecx, 0x16
jne 0x4bd45b
test eax, eax
jne 0x4bde75
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004ac070
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4be9d5
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x120]
jmp 0x4bde75
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.004aa320
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, eax
and eax, 0x1f
cmp eax, 0x15
ja 0x4beb3f
cmp eax, 0x11
jne 0x4beb15
mov dword [esp + 0x88], ebx
mov eax, dword [esp + 0x114]
mov ebp, dword [eax + 8]
mov esi, dword [eax + 4]
mov edi, dword [eax]
lea ebx, [esi + 1]
cmp ebx, ebp
jg 0x4bea7d
lea ebx, [esi + 1]
mov dword [eax + 4], ebx
mov byte [edi + esi], 0x26
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x88]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x128]
inc eax
mov dword [esp + 0x14], eax
call fcn.004bd3a0
add esp, 0x110
ret
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc0], edx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4beae4
mov dword [ebx], eax
mov edx, dword [esp + 0xc0]
mov esi, ecx
mov edi, eax
mov eax, ebx
mov ecx, dword [esp + 0xc4]
jmp 0x4bea3a
mov dword [esp + 0xd8], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
jmp 0x4beacb
cmp eax, 0x15
je 0x4bea1d
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x120]
jmp 0x4bde75
cmp eax, 0x17
je 0x4bea1d
cmp eax, 0x19
je 0x4bea1d
jmp 0x4beb1e
cmp ecx, 0x18
je 0x4bf23a
cmp ecx, 0x19
jne 0x4bf22c
movzx ecx, byte [edx + 0x2c]
test cl, cl
jne 0x4bf0f9
mov ecx, dword [edx + 4]
mov edi, dword [edx]
mov eax, dword [edx + 8]
lea esi, [ecx + 1]
cmp esi, eax
jg 0x4bf071
lea eax, [ecx + 1]
mov dword [edx + 4], eax
mov byte [edi + ecx], 0x7b
lea eax, [esp + 8]
mov dword [esp + 0xb4], eax
xor ecx, ecx
jmp 0x4bec22
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0xc], ebx
call fcn.004ba2f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x128]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004bd3a0
mov eax, dword [esp + 0x60]
lea ecx, [eax + 1]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov dword [esp + 0x60], ecx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x120]
mov dword [esp + 8], eax
call fcn.004abb80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x60]
cmp ecx, eax
jge 0x4befd9
test ecx, ecx
jle 0x4befcd
mov eax, dword [esp + 0x114]
movzx edx, byte [eax + 0x2c]
test dl, dl
je 0x4bef32
mov edx, dword [eax + 4]
lea ebx, [edx + 2]
mov ebp, dword [eax + 8]
mov esi, dword [eax]
cmp ebx, ebp
ja 0x4beee0
cmp ebx, ebp
ja 0x4bf7e0
movzx edi, word [0x844740]
mov word [esi + edx], di
mov dword [eax + 4], ebx
mov dword [eax + 8], ebp
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4beec4
mov dword [eax], esi
movzx edx, byte [eax + 0x2b]
test dl, dl
je 0x4beeb3
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.004ad6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x2c]
mov edx, dword [esp + 0x60]
mov dword [esp + 4], edx
mov dword [esp], ecx
call eax
lea edi, [esp + 0xdc]
mov esi, dword [esp + 0xb4]
call fcn.0044e1fe
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xdc]
test eax, eax
je 0x4beea7
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [eax + ebx]
mov dword [esp + 0x84], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4bee4a
cmp ebp, edi
ja 0x4bf7d9
mov dword [esp + 0x80], edi
mov dword [esp + 0xcc], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044e470
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 8], eax
mov eax, dword [0xcc2260]
test eax, eax
jne 0x4bee24
mov eax, dword [esp + 0xcc]
mov dword [ecx], eax
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
lea ebp, [ebx + 1]
cmp ebp, edx
jg 0x4bedae
lea edx, [ebx + 1]
mov dword [ecx + 4], edx
mov byte [eax + ebx], 0x3a
jmp 0x4beba0
lea ecx, [0x7d0160]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bedf9
mov dword [ebx], eax
mov ebx, ecx
mov ecx, dword [esp + 0x114]
jmp 0x4bed9f
mov dword [esp + 0xd4], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x114]
jmp 0x4bedee
mov dword [esp], ecx
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x114]
jmp 0x4bed92
mov dword [esp + 0x80], ebx
mov dword [esp + 0x40], eax
mov dword [esp + 0xa0], ecx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
jmp 0x4bed37
mov ecx, dword [esp + 0x114]
jmp 0x4beba0
movzx edx, byte [eax + 0x2c]
test dl, dl
jne 0x4becb0
jmp 0x4beba0
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.0040f360
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x60]
jmp 0x4beca4
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ebx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a030
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x80]
jmp 0x4bec7b
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
mov ebp, dword [eax]
lea esi, [ebx + 1]
cmp esi, edx
jg 0x4bef51
lea edx, [ebx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ebx], 0x20
jmp 0x4beca4
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4befa2
mov dword [ebx], eax
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x60]
jmp 0x4bef41
mov dword [esp + 0xd0], eax
mov dword [esp + 0x78], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x114]
jmp 0x4bef91
mov eax, dword [esp + 0x114]
jmp 0x4beca4
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 8]
mov edx, dword [eax]
mov ebx, dword [eax + 4]
lea ebp, [ebx + 1]
cmp ebp, ecx
jg 0x4beffe
lea ecx, [ebx + 1]
mov dword [eax + 4], ecx
mov byte [edx + ebx], 0x7d
jmp 0x4bd88c
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bf046
mov dword [ebx], eax
mov edx, eax
mov eax, ebx
mov ebx, ecx
jmp 0x4befef
mov dword [esp + 0xb8], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x114]
jmp 0x4bf03e
lea edx, [0x7d0160]
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
call fcn.0043a030
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 8], edx
mov edx, dword [0xcc2260]
test edx, edx
jne 0x4bf0c8
mov dword [ebx], eax
mov edx, ebx
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov edi, eax
jmp 0x4beb84
mov dword [esp + 0xd8], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
jmp 0x4bf0b1
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004ad6c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x114]
mov ebx, dword [edx + 4]
lea ebp, [ebx + eax]
mov dword [esp + 0x80], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp ebp, esi
ja 0x4bf1d5
cmp ebp, esi
ja 0x4bf7e7
mov dword [esp + 0x70], esi
mov dword [esp + 0xb0], edi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044e470
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x70]
mov dword [ecx + 8], eax
mov eax, dword [0xcc2260]
test eax, eax
jne 0x4bf1b9
mov eax, dword [esp + 0xb0]
mov dword [ecx], eax
mov eax, dword [esp + 0x128]
mov edx, ecx
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x120]
jmp 0x4beb71
mov dword [esp], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.0040f360
mov ecx, dword [esp + 0x114]
jmp 0x4bf196
mov dword [esp + 0x3c], eax
mov dword [esp + 0x70], ebx
mov dword [esp + 0xa4], ecx
lea eax, [0x7d0160]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043a030
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x80]
jmp 0x4bf145
cmp ecx, 0x1a
je 0x4bde75
jmp 0x4bde99
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004ad4b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x114]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x124]
mov dword [esp + 0xc], eax
call fcn.004bb4d0
jmp 0x4bd88c
cmp ecx, 0xc
ja 0x4bf513
cmp ecx, 1
ja 0x4bf477
test esi, 0x1f
jne 0x4bf43f
test eax, eax
jne 0x4bf379
mov eax, dword [edx + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x84], ecx
mov ebx, dword [edx + 8]
mov ebp, dword [edx]
cmp ecx, ebx
ja 0x4bf332
cmp ecx, ebx
ja 0x4bf811
mov dword [esp + 0xcc], ebp
mov dword [esp + 0x80], ebx
add eax, ebp
mov dword [esp], eax
lea eax, [0x852fac]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.0044e470
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x114]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x80]
mov dword [ecx + 8], eax
mov eax, dword [0xcc2260]
test eax, eax
jne 0x4bf31a
mov eax, dword [esp + 0xcc]
mov dword [ecx], eax
jmp 0x4bd88c
mov dword [esp], ecx
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call fcn.0040f360
jmp 0x4bd88c
mov dword [esp + 0x80], eax
lea edx, [0x7d0160]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0043a030
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x114]
jmp 0x4bf2b5
mov eax, dword [esp + 0x124]
cmp eax, 0x76
jne 0x4bf42e
mov eax, dword [edx + 4]
lea ecx, [eax + 5]
mov ebx, dword [edx]
mov ebp, dword [edx + 8]
cmp ecx, ebp
ja 0x4bf3e0
cmp ecx, ebp
ja 0x4bf80a
mov esi, dword [0x8455c0]
movzx edi, byte [0x8455c4]
mov dword [ebx + eax], esi
xchg edi, ecx
mov byte [ebx + eax + 4], cl
xchg edi, ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ebp
mov eax, dword [0xcc2260]
test eax, eax
jne 0x4bf3cf
mov dword [edx], ebx
jmp 0x4bd88c
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.0040f360
jmp 0x4bd88c
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], eax
lea edx, [0x7d0160]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.0043a030
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x114]
jmp 0x4bf398
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004ba760
jmp 0x4bd88c
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004a8740
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x114]
mov dword [esp], ecx
mov byte [esp + 4], al
mov eax, dword [esp + 0x124]
mov dword [esp + 8], eax
call fcn.004bad70
jmp 0x4bd88c
lea eax, [ecx - 2]
cmp eax, 4
jbe 0x4bf4cf
lea eax, [ecx - 7]
cmp eax, 5
ja 0x4bde99
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004ad840
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x114]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004bae50
jmp 0x4bd88c
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004aac80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x114]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004bae50
jmp 0x4bd88c
cmp ecx, 0xe
ja 0x4bf5a7
cmp ecx, 0xd
jne 0x4bf564
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004aa9d0
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004bb170
jmp 0x4bd88c
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004aa9d0
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
call fcn.004bb170
jmp 0x4bd88c
cmp ecx, 0xf
jne 0x4bf5fb
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004aa240
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov dword [esp], eax
movsd qword [esp + 4], xmm0
movsd qword [esp + 0xc], xmm1
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0x124]
mov dword [esp + 0x18], eax
call fcn.004bb2d0
jmp 0x4bd88c
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004aa240
movsd xmm0, qword [esp + 0x14]
movsd xmm1, qword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [esp], eax
movsd qword [esp + 4], xmm1
movsd qword [esp + 0xc], xmm0
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0x124]
mov dword [esp + 0x18], eax
call fcn.004bb2d0
jmp 0x4bd88c
mov dword [esp + 0xac], esi
mov dword [esp], ebp
mov eax, dword [esp + 0x118]
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 4], eax
call fcn.0040f360
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x114]
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x11c]
jmp 0x4bd432
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040f360
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x114]
jmp 0x4bd407
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov edx, dword [esp + 0x11c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004aada0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bf70a
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
jmp 0x4bd3e1
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x120]
mov dword [esp + 8], edx
call fcn.004aae40
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x114]
mov dword [edx + 0xc], ecx
mov ecx, dword [0xcc2260]
lea ebx, [edx + 0x10]
test ecx, ecx
jne 0x4bf787
mov dword [edx + 0x10], eax
mov dword [esp], edx
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
call fcn.004bc720
movzx eax, byte [esp + 8]
test al, al
jne 0x4bf780
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
jmp 0x4bd3e1
add esp, 0x110
ret
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f360
mov edx, dword [esp + 0x114]
jmp 0x4bf751
mov ecx, dword [esp + 0x120]
jmp 0x4bd3e1
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426a70
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.00426ad0
ud2
call fcn.0044c200
jmp fcn.004bd3a0