Function at 0x4b83a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
xor edx, edx
xor eax, eax
push edi
fldz
xor ecx, ecx
push esi
xor ebp, ebp
xor esi, esi
push ebx
sub esp, 0xfc
xor ebx, ebx
mov dword [esp + 0xec], edx
mov edx, dword [esp + 0x118]
mov edi, dword [esp + 0x110]
mov dword [esp + 0x84], eax
mov eax, dword [edx]
mov dword [esp + 0xf4], ecx
mov ecx, edi
mov dword [esp + 0x80], ebp
mov dword [esp + 0x74], esi
mov dword [esp + 0xa4], ebx
fstp qword [esp + 0xd8]
mov dword [esp + 0x90], eax
mov dword [esp + 0xf0], edi
movsx eax, byte [ecx]
cmp eax, 0x2d
ja case.0x4b8412.1
jmp dword [eax*4 + 0x665a30]
mov ebx, 1
mov dword [esp + 0x74], ebx
mov esi, ecx
inc ecx
mov dword [esp + 0xf0], ecx
cmp byte [esi + 1], 0
jne case.0x4b8412.1
xor ecx, ecx
mov dword [esp + 0x74], ecx
mov dword [esp + 0xf0], edi
mov ebx, 6
mov dword [esp + 0xec], ebx
mov edx, dword [esp + 0xf4]
mov eax, dword [esp + 0x114]
test eax, eax
je 0x4b846d
mov ecx, dword [esp + 0xf0]
mov esi, dword [esp + 0x114]
mov dword [esi], ecx
mov edi, dword [esp + 0x74]
test edi, edi
je 0x4b847d
or dword [esp + 0xec], 8
test edx, edx
jne 0x4b8710
mov eax, dword [esp + 0xec]
add esp, 0xfc
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [ecx], 0x30
je 0x4b9029
mov dword [esp + 0x6c], ecx
mov eax, dword [esp + 0x118]
xor ebx, ebx
mov dword [esp + 0x5c], ebx
xor esi, esi
xor edx, edx
mov dword [esp + 0x58], esi
mov ebp, dword [eax + 0x10]
xor eax, eax
mov dword [esp + 0x88], edx
mov dword [esp + 0x70], ebp
xor ebp, ebp
mov dword [esp + 0xa8], eax
movsx ebx, byte [ecx]
cmp ebx, 0x2f
jle 0x4b8520
lea esi, [esi]
cmp ebx, 0x39
jg 0x4b8520
cmp ebp, 8
jg 0x4b86f0
mov eax, dword [esp + 0x5c]
lea esi, [eax + eax*4]
lea edx, [ebx + esi*2 - 0x30]
mov dword [esp + 0x5c], edx
mov edx, ecx
inc ecx
inc ebp
mov dword [esp + 0xf0], ecx
movsx ebx, byte [edx + 1]
cmp ebx, 0x2f
jg 0x4b84e0
jmp 0x4b8520
mov dword [esp + 0x8c], ebp
cmp ebx, 0x2e
je 0x4b906f
xor esi, esi
cmp ebx, 0x65
sete al
cmp ebx, 0x45
sete dl
or eax, edx
test al, 1
je 0x4b8630
mov ebx, dword [esp + 0x84]
or ebx, ebp
or ebx, dword [esp + 0x80]
je 0x4b8438
mov edi, ecx
lea eax, [edi + 1]
xor ecx, ecx
mov dword [esp + 0x9c], ecx
mov edx, eax
mov dword [esp + 0xf0], eax
movsx ebx, byte [edi + 1]
cmp ebx, 0x2b
je 0x4b96ee
cmp ebx, 0x2d
je 0x4b96e2
lea eax, [ebx - 0x30]
cmp eax, 9
ja 0x4b9192
cmp ebx, 0x30
jne 0x4b85af
mov esi, edx
inc edx
mov dword [esp + 0xf0], edx
movsx ebx, byte [esi + 1]
cmp ebx, 0x30
je 0x4b859c
lea ecx, [ebx - 0x31]
xor esi, esi
cmp ecx, 8
ja 0x4b8630
lea eax, [edx + 1]
mov esi, edx
lea ecx, [ebx - 0x30]
mov dword [esp + 0xf0], eax
movsx ebx, byte [edx + 1]
cmp ebx, 0x2f
jle 0x4b85fa
cmp ebx, 0x39
jg 0x4b85fa
lea edx, [edx + 2]
mov dword [esp + 0xf0], edx
lea eax, [ecx + ecx*4]
lea ecx, [ebx + eax*2 - 0x30]
mov eax, edx
lea edx, [edx + 1]
movsx ebx, byte [edx - 1]
cmp ebx, 0x2f
jle 0x4b85fa
cmp ebx, 0x39
jle 0x4b85d9
sub eax, esi
cmp eax, 8
mov esi, 0x4e1f
setg al
cmp ecx, 0x4e1f
setg dl
or eax, edx
test al, 1
jne 0x4b8618
mov esi, ecx
mov ecx, dword [esp + 0x9c]
test ecx, ecx
je 0x4b8630
neg esi
lea esi, [esi]
lea edi, [edi]
test ebp, ebp
jne 0x4b874f
mov ebp, dword [esp + 0x84]
or ebp, dword [esp + 0x80]
jne 0x4b844b
mov esi, dword [esp + 0xa8]
test esi, esi
jne 0x4b8438
cmp ebx, 0x4e
je 0x4b91d5
jg 0x4b91c3
cmp ebx, 0x49
jne 0x4b8438
mov ebx, 0x665a0c
mov dword [esp + 4], ebx
lea ebx, [esp + 0xf0]
mov dword [esp], ebx
call fcn.004bbad0
test eax, eax
je 0x4b8438
dec dword [esp + 0xf0]
mov eax, 0x665a0f
mov edi, 3
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.004bbad0
mov dword [esp + 0xec], edi
mov edx, dword [esp + 0xf0]
cmp eax, 1
mov edi, dword [esp + 0x118]
adc edx, 0
mov dword [esp + 0xf0], edx
mov edx, dword [edi + 8]
jmp 0x4b9228
inc ecx
mov dword [esp + 0xf0], ecx
jmp 0x4b8406
cmp ebp, 0xf
jg 0x4b84fd
mov esi, dword [esp + 0x58]
lea eax, [esi + esi*4]
lea edx, [ebx + eax*2 - 0x30]
mov dword [esp + 0x58], edx
jmp 0x4b84fd
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x120]
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.004bbb20
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
call fcn.004ba150
mov eax, dword [esp + 0xec]
add esp, 0xfc
pop ebx
pop esi
pop edi
pop ebp
ret
mov edi, dword [esp + 0x118]
mov ecx, 1
xor eax, eax
mov dword [esp + 0xec], ecx
mov edx, dword [esp + 0x88]
mov dword [esp + 0x7c], eax
mov eax, dword [edi + 0xc]
sub esi, edx
mov dword [esp + 0x3c], esi
and eax, 3
cmp eax, 2
je 0x4b970d
jg 0x4b919e
test eax, eax
je 0x4b91b5
mov eax, dword [esp + 0x8c]
test eax, eax
jne 0x4b87a4
mov dword [esp + 0x8c], ebp
cmp ebp, 0x10
mov ebx, ebp
jle 0x4b87b0
mov ebx, 0x10
mov ecx, dword [esp + 0x5c]
xor edx, edx
push edx
push ecx
fild qword [esp]
add esp, 8
cmp ebx, 9
jle 0x4b87da
fmul qword [ebx*8 + 0x665aa8]
xor eax, eax
mov edi, dword [esp + 0x58]
push eax
push edi
fild qword [esp]
add esp, 8
faddp st(1)
cmp dword [esp + 0x90], 0x35
setle cl
xor edx, edx
cmp ebp, 0xf
setle dl
test ecx, edx
je 0x4b96a8
cmp dword [esp + 0x3c], 0
je 0x4b98ab
jle 0x4b99a5
cmp dword [esp + 0x3c], 0x16
jg 0x4b98f7
fst qword [esp + 0xe0]
mov eax, dword [esp + 0xe0]
test eax, eax
je 0x4b99fe
bsf eax, eax
mov edx, 0x35
mov edi, dword [esp + 0x3c]
sub edx, eax
mov eax, dword [esp + 0x7c]
lea esi, [esp + 0xec]
mov dword [esp + 0x1c], esi
mov ecx, dword [edi*4 + 0x6659b0]
fmul qword [edi*8 + 0x665af0]
mov edi, dword [esp + 0x120]
add edx, ecx
mov dword [esp + 0x18], eax
cmp edx, 0x35
setle dl
mov dword [esp + 0x10], edi
movzx ecx, dl
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x118]
fst qword [esp + 0xd8]
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
fstp qword [esp]
xor esi, esi
call fcn.004b7ed0
test eax, eax
jne 0x4b844b
mov eax, ebp
sub eax, ebx
lea eax, [esi + eax]
xor esi, esi
test eax, eax
jle 0x4b97d6
mov edx, eax
and edx, 0xf
je 0x4b88cc
fld qword [edx*8 + 0x665af0]
fmul qword [esp + 0xd8]
fstp qword [esp + 0xd8]
and eax, 0xfffffff0
je 0x4b96b4
mov ecx, eax
lea ebx, [esp + 0xd8]
sar ecx, 4
cmp ecx, 0xf
jle 0x4b892e
fld qword [0x665c10]
lea esi, [esi]
mov edi, dword [ebx + 4]
sub ecx, 0x10
mov edx, edi
and edi, 0x800fffff
and edx, 0x7ff00000
or edi, 0x3ff00000
mov dword [ebx + 4], edi
shr edx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xd8]
lea esi, [edx + esi - 0x3ff]
fmul st(1)
fstp qword [esp + 0xd8]
jg 0x4b88f0
fstp st(0)
mov edi, dword [ebx + 4]
mov eax, edi
and eax, 0x7ff00000
shr eax, 0x14
and edi, 0x800fffff
or edi, 0x3ff00000
mov dword [ebx + 4], edi
lea esi, [eax + esi - 0x3ff]
xor eax, eax
test ecx, ecx
jle 0x4b96b4
fld qword [esp + 0xd8]
lea esi, [esi]
lea edi, [edi]
test cl, 1
je 0x4b8983
fmul qword [eax*8 + 0x665bf0]
fst qword [esp + 0xd8]
sar ecx, 1
inc eax
test ecx, ecx
jg 0x4b8970
fstp qword [esp]
lea ecx, [esp + 0xd4]
lea ebx, [esp + 0xd0]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ebx
call fcn.004bb570
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0xd4]
mov edi, dword [esp + 0x90]
mov edx, dword [esp + 0xd0]
mov ebx, ecx
sub ebx, edi
add edx, esi
test ebx, ebx
mov esi, edx
jle 0x4b8a03
mov dword [esp + 0xd0], edx
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004bb6c0
mov edx, dword [esp + 0xd0]
mov esi, dword [esp + 0x90]
mov ecx, dword [esp + 0x90]
add edx, ebx
mov dword [esp + 0xd4], esi
mov esi, edx
mov edi, dword [esp + 0x90]
xor ebx, ebx
mov dword [esp + 0xb8], ebx
lea ebx, [esi + ecx]
sub ebx, edi
mov edi, dword [esp + 0x118]
mov eax, dword [edi + 8]
inc eax
cmp eax, ebx
jl 0x4b9776
mov dword [esp + 0x78], ebx
mov eax, dword [edi + 4]
cmp eax, ebx
mov dword [esp + 0xa0], eax
jle 0x4b9701
sub esi, eax
mov edi, 1
test esi, esi
mov dword [esp + 0xa4], edi
jle 0x4b996c
mov dword [esp + 0xd0], edx
mov edx, dword [esp + 0xf4]
mov dword [esp + 4], esi
mov dword [esp], edx
call fcn.004bafc0
add dword [esp + 0xd4], esi
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0x70]
mov esi, dword [esp + 0xa0]
test ecx, ecx
mov dword [esp + 0x78], esi
mov dword [esp + 0xd0], esi
je 0x4b8aa4
lea eax, [ebx + 1]
cmp eax, esi
jl 0x4b9caa
mov dword [esp + 8], ebp
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x8c]
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.004bb980
mov dword [esp + 0x4c], eax
add eax, 0xc
mov dword [esp + 0x40], eax
lea esi, [esi]
lea edi, [edi]
mov ebx, dword [esp + 0x4c]
mov eax, dword [ebx + 4]
mov dword [esp], eax
call fcn.004b9f70
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x40]
mov edi, dword [edx + 0x10]
add eax, 0xc
lea edx, [edi*4]
lea ecx, [edx + 8]
cmp ecx, 7
jbe 0x4b8b40
test al, 4
je 0x4b8b40
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x50]
mov ecx, dword [ebp + 0xc]
mov eax, esi
add eax, 0x10
mov dword [esi + 0xc], ecx
mov esi, ebp
lea ecx, [edx + 4]
add esi, 0x10
lea esi, [esi]
lea edi, [edi]
cld
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0xf4]
mov edx, dword [eax + 4]
mov dword [esp], edx
call fcn.004b9f70
mov dword [esp + 0x54], eax
mov edx, dword [esp + 0xf4]
mov eax, dword [esp + 0x54]
mov edi, dword [edx + 0x10]
lea esi, [edx + 0xc]
add eax, 0xc
lea ebx, [edi*4]
lea ecx, [ebx + 8]
cmp ecx, 7
jbe 0x4b8ba0
test al, 4
je 0x4b8ba0
mov ebp, dword [esp + 0x54]
lea ecx, [ebx + 4]
mov esi, dword [edx + 0xc]
mov eax, ebp
add eax, 0x10
mov dword [ebp + 0xc], esi
lea esi, [edx + 0x10]
lea esi, [esi]
cld
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov dword [esp], 1
mov edi, dword [esp + 0xb8]
mov ebx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd0]
sub ebx, edi
mov dword [esp + 0xac], ebx
mov ebx, edi
add ebx, edx
call fcn.004ba500
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x3c]
test ecx, ecx
js 0x4b95b7
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov dword [esp + 0xb4], eax
xor eax, eax
mov dword [esp + 0xb0], ecx
test ebx, ebx
js 0x4b95b0
add eax, ebx
mov edx, dword [esp + 0xac]
mov edi, eax
mov ebp, dword [esp + 0xac]
mov eax, dword [esp + 0x90]
sub eax, edx
lea edx, [ebx + ebp]
mov ebx, dword [esp + 0x90]
inc eax
sub edx, ebx
cmp edx, dword [esp + 0xa0]
jge 0x4b8c40
mov esi, dword [esp + 0xa0]
sub edx, esi
add eax, edx
lea esi, [edi + eax]
lea ebp, [ecx + eax]
cmp ebp, esi
mov eax, ebp
jle 0x4b8c4e
mov eax, esi
cmp eax, edi
jle 0x4b8c54
mov eax, edi
test eax, eax
jle 0x4b8c5e
sub esi, eax
sub ebp, eax
sub edi, eax
mov ecx, dword [esp + 0xb4]
test ecx, ecx
jle 0x4b8ca6
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0xb4]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.004ba6b0
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x54]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004ba530
mov ebx, eax
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.004ba150
mov dword [esp + 0x54], ebx
mov eax, esi
mov esi, dword [esp + 0xb8]
sub eax, esi
test eax, eax
jle 0x4b94e2
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.004bafc0
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0xb0]
test ecx, ecx
jle 0x4b8cf3
mov esi, dword [esp + 0xb0]
mov ebx, dword [esp + 0x50]
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004ba6b0
mov dword [esp + 0x50], eax
test ebp, ebp
jle 0x4b8d0b
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp], ebp
call fcn.004bafc0
mov dword [esp + 0x50], eax
test edi, edi
jle 0x4b8d23
mov dword [esp + 4], edi
mov edi, dword [esp + 0x48]
mov dword [esp], edi
call fcn.004bafc0
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x50]
mov ecx, 0x20
mov ebx, 1
mov dword [esp + 0xbc], ebx
mov eax, dword [esp + 0x54]
mov dword [esp + 0x94], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004bb280
cmp dword [eax + 0x10], 1
mov ebp, eax
jle 0x4b93f4
mov ecx, dword [esp + 0x48]
xor eax, eax
xor esi, esi
mov dword [esp + 0x98], eax
mov edi, dword [ebp + 0xc]
mov dword [ebp + 0xc], 0
mov dword [esp + 0x2c], esi
mov dword [esp + 4], ecx
mov dword [esp], ebp
call fcn.004bb230
mov ebx, dword [esp + 0x7c]
mov ecx, eax
test ebx, ebx
setne al
xor edx, edx
test ecx, ecx
setle dl
test eax, edx
je 0x4b9270
mov edx, dword [esp + 0x7c]
mov ebx, 1
mov dword [esp + 0xec], ebx
and edx, 1
xor edx, edi
mov dword [esp + 0x98], edx
je 0x4b9c38
test edi, edi
jne 0x4b95d6
mov esi, dword [esp + 0xa0]
mov eax, 0x11
cmp dword [esp + 0x78], esi
mov dword [esp + 0xec], eax
je 0x4b8e40
mov ebx, dword [esp + 0x90]
xor eax, eax
cmp ebx, 0x1f
jle 0x4b965b
mov esi, dword [esp + 0xf4]
lea esi, [esi]
mov edx, dword [esi + eax*4 + 0x14]
test edx, edx
jne 0x4b8e40
sub ebx, 0x20
inc eax
cmp ebx, 0x1f
jg 0x4b8e00
cmp ebx, 1
jle 0x4b9c48
lea edx, [esi + eax*4]
mov eax, dword [edx + 0x14]
bsf ecx, eax
shr eax, cl
mov dword [edx + 0x14], eax
lea eax, [ebx - 1]
cmp ecx, eax
jge 0x4b9c48
lea esi, [esi]
lea edi, [edi]
mov ebx, 0x10
test edi, edi
mov dword [esp + 0x94], ebx
je 0x4b9500
xor esi, esi
mov edi, 0x20
mov dword [esp + 0xbc], esi
mov dword [esp + 0x94], edi
fld1
fst qword [esp + 0x60]
fstp qword [esp + 0x30]
mov eax, dword [esp + 0xd4]
mov edi, dword [esp + 0xd0]
mov ecx, dword [esp + 0xa4]
add edi, eax
test ecx, ecx
jne 0x4b8e9b
cmp eax, dword [esp + 0x90]
jl 0x4b95e7
fld qword [esp + 0x30]
lea ecx, [esp + 0xcc]
lea edx, [esp + 0xc8]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
fstp qword [esp]
call fcn.004bb570
mov esi, eax
mov eax, dword [esp + 0xc8]
test eax, eax
jl 0x4b9667
jle 0x4b8ede
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004bafc0
mov esi, eax
mov eax, dword [esp + 0xbc]
mov ebx, dword [esp + 0xf4]
test eax, eax
je 0x4b9385
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004bb280
mov dword [esp + 0xf4], eax
mov ecx, eax
mov edx, dword [esp + 0xa4]
mov eax, dword [ebx + 0x10]
dec eax
test edx, edx
jne 0x4b8f60
cmp dword [ecx + 0x10], eax
jle 0x4b8f31
bsr edx, dword [ecx + eax*4 + 0x14]
xor edx, 0x1f
bsr eax, dword [ebx + eax*4 + 0x14]
xor eax, 0x1f
cmp edx, eax
jle 0x4b8f60
mov eax, dword [esp + 0xa0]
cmp dword [esp + 0x78], eax
jne 0x4b967a
dec dword [esp + 0xd4]
mov ecx, 1
mov dword [esp + 0xa4], ecx
lea esi, [esi]
lea edi, [edi]
mov dword [esp], esi
call fcn.004ba150
mov dword [esp], ebx
call fcn.004ba150
mov ebx, dword [esp + 0x98]
test ebx, ebx
jne 0x4b93ff
mov esi, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd0]
add esi, ecx
cmp edi, esi
sete dl
xor eax, eax
cmp dword [esp + 0x2c], 0
setne al
test edx, eax
je 0x4b8fe0
fld qword [esp + 0x30]
fmul qword [0x665a28]
fld qword [esp + 0x60]
fsub dword [0x665a1c]
fld st(1)
fchs
fucomp st(1)
fnstsw ax
sahf
jbe 0x4b9577
fstp st(0)
fld qword [esp + 0x60]
fucompp
fnstsw ax
sahf
ja 0x4b9cff
lea esi, [esi]
lea edi, [edi]
mov ebx, dword [esp + 0xa4]
xor edx, edx
mov dword [esp + 0xb8], edx
test ebx, ebx
je 0x4b9550
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.004ba150
mov edi, dword [esp + 0x50]
mov dword [esp], edi
call fcn.004ba150
mov ecx, dword [esp + 0x48]
mov dword [esp], ecx
call fcn.004ba150
mov dword [esp], ebp
call fcn.004ba150
jmp 0x4b8ae0
movsx eax, byte [ecx + 1]
cmp eax, 0x58
je 0x4b971c
mov ebp, 1
cmp eax, 0x78
mov dword [esp + 0x80], ebp
je 0x4b971c
nop
lea esi, [esi]
mov ebp, ecx
inc ecx
mov dword [esp + 0xf0], ecx
movzx eax, byte [ebp + 1]
cmp al, 0x30
je 0x4b9050
test al, al
jne 0x4b84a0
jmp 0x4b844b
mov ebx, 1
mov eax, ecx
inc ecx
mov dword [esp + 0xa8], ebx
test ebp, ebp
mov dword [esp + 0xf0], ecx
movsx ebx, byte [eax + 1]
jne 0x4b9109
cmp ebx, 0x30
jne 0x4b90ac
inc dword [esp + 0x84]
mov esi, ecx
inc ecx
mov dword [esp + 0xf0], ecx
movsx ebx, byte [esi + 1]
cmp ebx, 0x30
je 0x4b9092
lea edx, [ebx - 0x31]
cmp edx, 8
ja 0x4b8530
mov dword [esp + 0x6c], ecx
mov esi, dword [esp + 0x84]
xor eax, eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], esi
lea esi, [ebx - 0x30]
jmp 0x4b9115
mov edx, ebp
inc ebp
cmp edx, 8
jg 0x4b9176
mov edx, dword [esp + 0x5c]
lea ebx, [edx + edx*4]
lea eax, [esi + ebx*2]
mov dword [esp + 0x5c], eax
xor esi, esi
mov dword [esp + 0x84], esi
mov eax, ecx
inc ecx
mov dword [esp + 0xf0], ecx
movsx ebx, byte [eax + 1]
lea esi, [ebx - 0x30]
cmp esi, 9
ja 0x4b8530
inc dword [esp + 0x84]
test esi, esi
je 0x4b90fb
mov ebx, dword [esp + 0x84]
mov edx, 1
add dword [esp + 0x88], ebx
lea esi, [esi]
lea edi, [edi]
cmp edx, dword [esp + 0x84]
jge 0x4b90d8
mov eax, ebp
inc ebp
cmp eax, 8
jg 0x4b9161
mov ebx, dword [esp + 0x5c]
lea eax, [ebx + ebx*4]
add eax, eax
mov dword [esp + 0x5c], eax
inc edx
jmp 0x4b9140
cmp ebp, 0x10
jg 0x4b915e
mov ebx, dword [esp + 0x58]
inc edx
lea eax, [ebx + ebx*4]
add eax, eax
mov dword [esp + 0x58], eax
jmp 0x4b9140
cmp ebp, 0x10
jg 0x4b90f2
mov ebx, dword [esp + 0x58]
lea edx, [ebx + ebx*4]
lea eax, [esi + edx*2]
mov dword [esp + 0x58], eax
jmp 0x4b90f2
mov dword [esp + 0xf0], edi
jmp 0x4b8630
cmp eax, 3
jne 0x4b8792
mov edi, dword [esp + 0x74]
inc edi
mov dword [esp + 0x7c], edi
jmp 0x4b8792
mov eax, 1
mov dword [esp + 0x7c], eax
jmp 0x4b8792
cmp ebx, 0x69
je 0x4b8673
cmp ebx, 0x6e
jne 0x4b8438
mov ecx, 0x665a15
lea ebx, [esp + 0xf0]
mov dword [esp + 4], ecx
mov dword [esp], ebx
call fcn.004bbad0
test eax, eax
je 0x4b8438
mov eax, dword [esp + 0x118]
mov edx, 4
mov esi, dword [esp + 0x11c]
mov dword [esp + 0xec], edx
mov ebp, dword [esp + 0xf0]
mov edx, dword [eax + 8]
lea edi, [edx + 1]
mov dword [esi], edi
cmp byte [ebp], 0x28
je 0x4b9e6b
lea esi, [edx + 1]
mov edx, dword [esp + 0x11c]
mov dword [edx], esi
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xf4]
test ecx, ecx
je 0x4b8452
mov edi, dword [esp + 0x70]
test edi, edi
je 0x4b97a4
mov dword [edx + 0x10], 0
mov ebp, 0x50
mov dword [esp + 0xec], ebp
jmp 0x4b8452
test ecx, ecx
jl 0x4b9b27
je 0x4b9a18
mov dword [esp], ebp
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
call fcn.004bba50
fld dword [0x665a18]
fucomp st(1)
fnstsw ax
sahf
jae 0x4b9570
fld dword [0x665a1c]
test edi, edi
fmul st(1), st(0)
fxch st(1)
fst qword [esp + 0x60]
fstp qword [esp + 0x30]
je 0x4b92ca
xor esi, esi
mov edi, 0x10
mov dword [esp + 0xbc], esi
mov dword [esp + 0x94], edi
fld qword [0x665a20]
fld qword [esp + 0x60]
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jbe 0x4b9624
fnstcw word [esp + 0xc6]
movzx edx, word [esp + 0xc6]
fld qword [esp + 0x60]
fxch st(1)
or dx, 0xc00
mov word [esp + 0xc4], dx
fldcw word [esp + 0xc4]
fistp dword [esp + 0x2c]
fldcw word [esp + 0xc6]
cmp dword [esp + 0x7c], 1
fild dword [esp + 0x2c]
fsub st(1), st(0)
fxch st(1)
fstp qword [esp + 0x60]
je 0x4b96c0
jle 0x4b9782
fstp st(1)
cmp dword [esp + 0x7c], 2
jne 0x4b8e6f
mov edi, dword [esp + 0xbc]
test edi, edi
jne 0x4b8e6f
fld qword [esp + 0x60]
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x4b8e6f
fstp st(0)
inc dword [esp + 0x2c]
mov edx, 0x30
mov esi, dword [esp + 0x94]
fild dword [esp + 0x2c]
sub edx, esi
mov dword [esp + 0x94], edx
jmp 0x4b8e6f
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004bb7d0
mov dword [esp + 0xf4], eax
mov ecx, eax
mov eax, dword [eax + 0x10]
dec eax
cmp dword [ebx + 0x10], eax
jle 0x4b93bb
bsr edx, dword [ecx + eax*4 + 0x14]
xor edx, 0x1f
bsr eax, dword [ebx + eax*4 + 0x14]
xor eax, 0x1f
cmp edx, eax
jge 0x4b8f60
mov eax, dword [esp + 0xa4]
test eax, eax
je 0x4b9634
mov ecx, dword [esp + 0xd4]
inc ecx
cmp ecx, dword [esp + 0x90]
mov dword [esp + 0xd4], ecx
jne 0x4b8f60
xor edx, edx
mov dword [esp + 0xa4], edx
jmp 0x4b8f60
mov esi, dword [eax + 0x14]
test esi, esi
jne 0x4b8d5b
mov ebx, dword [esp + 0xa4]
test ebx, ebx
jne 0x4b96d6
mov ebx, dword [esp + 0x90]
mov edx, dword [esp + 0xd4]
sub ebx, edx
test ebx, ebx
je 0x4b96d6
jle 0x4b9d12
mov dword [esp + 4], ebx
mov esi, dword [esp + 0xf4]
mov dword [esp], esi
call fcn.004bafc0
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0xd0]
sub eax, ebx
mov dword [esp + 0xd0], eax
mov edi, dword [esp + 0x11c]
mov ecx, dword [esp + 0x54]
mov dword [edi], eax
mov dword [esp], ecx
call fcn.004ba150
mov esi, dword [esp + 0x50]
mov dword [esp], esi
call fcn.004ba150
mov edx, dword [esp + 0x48]
mov dword [esp], edx
call fcn.004ba150
mov ebx, dword [esp + 0x4c]
mov dword [esp], ebx
call fcn.004ba150
mov dword [esp], ebp
call fcn.004ba150
mov eax, dword [esp + 0x118]
mov ebp, dword [esp + 0xd0]
cmp dword [eax + 8], ebp
jge 0x4b9234
mov ebx, dword [esp + 0xf4]
mov eax, 0xa3
mov dword [ebx + 0x10], 0
mov dword [esp + 0xec], eax
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov ebp, dword [esp + 0x118]
mov edx, dword [ebp + 8]
jmp 0x4b9228
jge 0x4b8ccd
mov edx, dword [esp + 0x54]
neg eax
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.004bb6c0
jmp 0x4b8ccd
mov ecx, dword [esp + 0xa4]
test ecx, ecx
setne al
xor edx, edx
cmp dword [esp + 0xac], 1
setle dl
test eax, edx
je 0x4b8e69
mov ebx, dword [esp + 0xf4]
mov dword [ebx + 0x10], 0
mov ebx, dword [esp + 0xa0]
mov eax, 0x50
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xec], eax
jmp 0x4b93ff
mov esi, dword [esp + 0xf4]
mov dword [esp], esi
call fcn.004bb780
mov dword [esp + 0xb8], eax
jmp 0x4b8ff8
fstp st(0)
jmp 0x4b8e40
fucomp st(1)
fnstsw ax
sahf
jbe 0x4b962d
fld1
fsubrp st(1)
fld qword [esp + 0x60]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x4b8fe0
mov ebx, dword [esp + 0x94]
or dword [esp + 0xec], ebx
jmp 0x4b93ff
sub ecx, ebx
jmp 0x4b8c06
mov esi, dword [esp + 0x3c]
xor ebp, ebp
xor ecx, ecx
mov dword [esp + 0xb0], ebp
neg esi
mov eax, esi
mov dword [esp + 0xb4], esi
jmp 0x4b8bfc
mov ecx, 0x21
mov dword [esp + 0xec], ecx
jmp 0x4b8e40
mov esi, dword [esp + 0x90]
sub esi, eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.004bafc0
sub dword [esp + 0xd0], esi
mov ebx, dword [esp + 0x90]
mov dword [esp + 0xf4], eax
mov dword [esp + 0xd4], ebx
jmp 0x4b8e9b
fstp st(0)
fstp st(0)
jmp 0x4b8e73
fstp st(0)
jmp 0x4b8fe0
mov dword [esp], ecx
mov eax, 1
mov dword [esp + 4], eax
call fcn.004bb6c0
inc dword [esp + 0xd0]
inc dword [esp + 0x78]
xor ecx, ecx
mov dword [esp + 0x2c], ecx
jmp 0x4b8f60
mov esi, dword [esp + 0xf4]
jmp 0x4b8e11
mov dword [esp], esi
neg eax
mov dword [esp + 4], eax
call fcn.004bb6c0
jmp 0x4b8ede
mov dword [esp], ecx
mov eax, 1
mov dword [esp + 4], eax
call fcn.004bafc0
dec dword [esp + 0xd0]
xor edx, edx
dec dword [esp + 0x78]
mov dword [esp + 0xf4], eax
mov dword [esp + 0x98], edx
jmp 0x4b9650
fstp qword [esp + 0xd8]
jmp 0x4b889f
fld qword [esp + 0xd8]
jmp 0x4b898a
fstp st(1)
mov ebx, dword [esp + 0xbc]
test ebx, ebx
jne 0x4b934e
jmp 0x4b8e6f
mov eax, dword [esp + 0xd0]
jmp 0x4b9456
mov edx, 1
mov dword [esp + 0x9c], edx
lea edx, [edi + 2]
mov dword [esp + 0xf0], edx
movsx ebx, byte [eax + 1]
jmp 0x4b858b
mov dword [esp + 0xd0], edx
jmp 0x4b8aa4
mov ebx, dword [esp + 0x74]
sub eax, ebx
mov dword [esp + 0x7c], eax
jmp 0x4b8792
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0xf0]
mov ebx, dword [esp + 0x11c]
mov dword [esp], eax
mov edx, dword [esp + 0x118]
lea esi, [esp + 0xf4]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
call fcn.004bbec0
mov dword [esp + 0xec], eax
cmp eax, 6
jne 0x4b844b
mov dword [esp + 0xf0], edi
xor edi, edi
mov dword [esp + 0x74], edi
jmp 0x4b844b
mov dword [esp + 0xd0], edx
jmp 0x4b94ae
mov ecx, dword [esp + 0x7c]
test ecx, ecx
jne 0x4b9965
fld qword [esp + 0x60]
fucomp st(2)
fnstsw ax
fstp st(1)
sahf
jb 0x4b8e6f
jmp 0x4b9361
mov eax, dword [esp + 0xec]
mov ebx, dword [edx + 0x10]
and eax, 0xfffffff8
test ebx, ebx
jle 0x4b97b8
or eax, 2
mov dword [esp + 0xec], eax
test al, 0x30
je 0x4b8452
or eax, 0x40
mov dword [esp + 0xec], eax
jmp 0x4b8452
jge 0x4b96b4
neg eax
mov edx, eax
and edx, 0xf
je 0x4b97fa
fld qword [edx*8 + 0x665af0]
fdivr qword [esp + 0xd8]
fstp qword [esp + 0xd8]
and eax, 0xfffffff0
je 0x4b96b4
mov ecx, eax
lea ebx, [esp + 0xd8]
sar ecx, 4
cmp ecx, 0xf
jle 0x4b9858
fld qword [0x665bd0]
mov edi, dword [ebx + 4]
sub ecx, 0x10
mov edx, edi
and edi, 0x800fffff
and edx, 0x7ff00000
or edi, 0x3ff00000
mov dword [ebx + 4], edi
shr edx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xd8]
lea esi, [edx + esi - 0x3ff]
fmul st(1)
fstp qword [esp + 0xd8]
jg 0x4b981a
fstp st(0)
mov edi, dword [ebx + 4]
mov eax, edi
and eax, 0x7ff00000
shr eax, 0x14
and edi, 0x800fffff
or edi, 0x3ff00000
mov dword [ebx + 4], edi
lea esi, [eax + esi - 0x3ff]
xor eax, eax
test ecx, ecx
jle 0x4b96b4
fld qword [esp + 0xd8]
test cl, 1
je 0x4b989f
fmul qword [eax*8 + 0x665bb0]
fst qword [esp + 0xd8]
sar ecx, 1
inc eax
test ecx, ecx
jg 0x4b988c
jmp 0x4b898a
fst qword [esp + 0xd8]
mov edi, dword [esp + 0x7c]
mov edx, 1
mov dword [esp + 0x14], edx
lea eax, [esp + 0xec]
mov ecx, dword [esp + 0x120]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x118]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
fstp qword [esp]
jmp 0x4b8892
mov edx, 0xf
sub edx, ebp
lea eax, [edx + 0x16]
cmp eax, dword [esp + 0x3c]
jl 0x4b96a8
mov edi, dword [esp + 0x3c]
xor ecx, ecx
fmul qword [edx*8 + 0x665af0]
mov dword [esp + 0x14], ecx
lea esi, [esp + 0xec]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x1c], esi
sub edi, edx
mov esi, dword [esp + 0x118]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x120]
fmul qword [edi*8 + 0x665af0]
mov edi, dword [esp + 0x11c]
mov dword [esp + 0x10], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
fst qword [esp + 0xd8]
jmp 0x4b888d
fstp st(1)
jmp 0x4b8e6f
jge 0x4b8a7f
mov dword [esp + 0xd0], edx
lea eax, [ecx + esi]
test eax, eax
mov dword [esp + 0xd4], eax
jle 0x4b9db3
mov edx, dword [esp + 0xf4]
neg esi
mov dword [esp + 4], esi
mov dword [esp], edx
call fcn.004bb6c0
jmp 0x4b8a7f
cmp dword [esp + 0x3c], 0xffffffea
jl 0x4b96a8
mov ecx, dword [esp + 0x3c]
xor esi, esi
mov dword [esp + 0x14], esi
lea edx, [esp + 0xec]
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0x120]
shl ecx, 3
mov dword [esp + 0x18], edi
neg ecx
mov edx, dword [esp + 0x118]
fdiv qword [ecx + 0x665af0]
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0x10], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
jmp 0x4b9959
mov esi, dword [esp + 0xe4]
mov edx, 0x15
or esi, 0x100000
bsf eax, esi
jmp 0x4b882f
test edi, edi
je 0x4b9ce0
mov eax, dword [esp + 0xa4]
test eax, eax
je 0x4b9a54
mov ecx, dword [esp + 0xd4]
mov esi, dword [esp + 0xf4]
mov eax, ecx
lea edx, [esi + 0x14]
sar eax, 5
lea ebx, [edx + eax*4]
cmp edx, ebx
jae 0x4b9d45
mov eax, dword [edx]
add edx, 4
inc eax
je 0x4b9a44
mov edx, 0x11
mov dword [esp + 0xec], edx
mov esi, dword [esp + 0x90]
cmp dword [esp + 0xac], esi
setl al
xor edx, edx
cmp dword [esp + 0xa4], 0
sete dl
test eax, edx
jne 0x4b93ff
mov ebx, dword [esp + 0xf4]
test byte [ebx + 0x14], 1
je 0x4b93ff
test edi, edi
je 0x4b9de0
mov edi, dword [ebx + 0x10]
lea edx, [ebx + 0x14]
mov ecx, ebx
lea esi, [edx + edi*4]
mov eax, dword [edx]
cmp eax, 0xffffffff
jne 0x4b9efe
mov dword [edx], 0
add edx, 4
cmp edx, esi
jb 0x4b9aaa
cmp edi, dword [ebx + 8]
jge 0x4b9e98
mov ebx, dword [ecx + 0x10]
mov edx, 1
mov dword [ecx + ebx*4 + 0x14], edx
inc ebx
mov dword [ecx + 0x10], ebx
mov dword [esp + 0xf4], ecx
mov ebx, dword [esp + 0xd4]
mov edx, ebx
and edx, 0x1f
je 0x4b9af9
mov esi, 0x20
sub esi, edx
mov edx, esi
mov edi, dword [ecx + 0x10]
dec edi
sar edi, 5
bsr eax, dword [ecx + edi*4 + 0x14]
xor eax, 0x1f
cmp eax, edx
je 0x4b9b16
lea ecx, [ebx + 1]
mov dword [esp + 0xd4], ecx
mov ebx, 0x21
mov dword [esp + 0xec], ebx
jmp 0x4b93ff
cmp edi, 1
sbb esi, esi
and esi, 0x10
add esi, 0x11
test edi, edi
setne dl
cmp dword [esp + 0xac], 1
mov dword [esp + 0xec], esi
setg al
or eax, edx
test al, 1
jne 0x4b93ff
mov ecx, dword [esp + 0xa4]
mov edi, dword [esp + 0xa0]
test ecx, ecx
setne al
cmp dword [esp + 0x78], edi
sete bl
or eax, ebx
test al, 1
jne 0x4b93ff
mov dword [esp], ebp
mov esi, 1
mov dword [esp + 4], esi
call fcn.004bafc0
mov dword [esp], eax
mov edx, dword [esp + 0x48]
mov ebp, eax
mov dword [esp + 4], edx
call fcn.004bb230
test eax, eax
mov edx, 0x11
jle 0x4b93ff
mov edi, dword [esp + 0xa0]
cmp dword [esp + 0x78], edi
je 0x4b9e1f
mov dword [esp + 0xec], edx
mov ecx, dword [esp + 0x90]
mov esi, dword [esp + 0xf4]
sub dword [esp + 0xd0], ecx
mov ebx, ecx
add ebx, 0x1f
mov dword [esp + 0xd4], ecx
sar ebx, 5
cmp dword [esi + 4], ebx
jl 0x4b9e54
mov ebx, dword [esp + 0x90]
lea edx, [esi + 0x14]
mov edi, dword [esp + 0x90]
and ebx, 0x1f
sar edi, 5
cmp ebx, 1
sbb edi, 0xffffffff
lea eax, [edx + edi*4]
mov dword [esi + 0x10], edi
jmp 0x4b9c1a
mov dword [edx], 0xffffffff
add edx, 4
cmp edx, eax
jb 0x4b9c11
test ebx, ebx
je 0x4b9c2c
mov ecx, 0x20
sub ecx, ebx
shr dword [edx - 4], cl
mov dword [esp + 0xf4], esi
jmp 0x4b93ff
cmp edi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
jmp 0x4b9542
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0x90]
dec ebx
mov dword [esp + 0xd0], ebx
mov ebx, edi
add ebx, 0x1f
mov dword [esp + 0xd4], edi
sar ebx, 5
cmp dword [esi + 4], ebx
jl 0x4b9d2e
mov ebx, dword [esp + 0x90]
lea edx, [esi + 0x14]
mov ecx, dword [esp + 0x90]
and ebx, 0x1f
sar ecx, 5
cmp ebx, 1
sbb ecx, 0xffffffff
lea eax, [edx + ecx*4]
mov dword [esi + 0x10], ecx
jmp 0x4b9ca1
mov dword [edx], 0xffffffff
add edx, 4
cmp edx, eax
jb 0x4b9c98
jmp 0x4b9c1e
mov edx, dword [esp + 0xf4]
mov ebp, 0x50
mov ecx, dword [esp + 0xa0]
mov esi, dword [esp + 0x11c]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [esp + 0xec], ebp
mov dword [esi], ecx
jmp 0x4b924a
cmp dword [esp + 0xac], 1
je 0x4b9da9
mov ebx, 0x21
mov dword [esp + 0xec], ebx
jmp 0x4b9a60
mov edi, dword [esp + 0x94]
or dword [esp + 0xec], edi
jmp 0x4b93ff
mov ecx, dword [esp + 0xf4]
mov edi, ebx
neg edi
mov dword [esp + 4], edi
mov dword [esp], ecx
call fcn.004bb6c0
jmp 0x4b9446
mov dword [esp], esi
call fcn.004ba150
mov dword [esp], ebx
call fcn.004b9f70
mov esi, eax
jmp 0x4b9c73
and ecx, 0x1f
je 0x4b9d5c
mov ebx, 0xffffffff
shl ebx, cl
mov ecx, dword [edx]
or ebx, ecx
inc ebx
jne 0x4b9a54
mov dword [esi + 0x10], 1
mov edi, dword [esp + 0xa0]
mov eax, 1
mov dword [esi + 0x14], 1
mov edx, dword [esp + 0x90]
mov esi, 0x21
mov dword [esp + 0xd4], eax
xor ebx, ebx
mov dword [esp + 0xec], esi
lea ecx, [edi + edx - 1]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xa4], ebx
jmp 0x4b940e
mov edx, 1
jmp 0x4b9ba7
inc eax
jl 0x4b9caa
mov eax, dword [esp + 0xf4]
mov edi, 1
mov dword [esp + 0xd4], edi
mov dword [eax + 0x14], 1
mov dword [eax + 0x10], 1
jmp 0x4b8a7f
cmp dword [esp + 0xac], 1
je 0x4b9528
mov esi, dword [ebx + 0x10]
lea edx, [ebx + 0x14]
lea ecx, [edx + esi*4]
mov eax, dword [edx]
test eax, eax
jne 0x4b9ef6
mov dword [edx], 0xffffffff
add edx, 4
cmp edx, ecx
jb 0x4b9df7
mov edx, 0x11
mov dword [esp + 0xec], edx
jmp 0x4b93ff
mov eax, dword [esp + 0xf4]
mov esi, 0x21
mov dword [esp + 0xec], esi
cmp dword [eax + 0x10], 1
jne 0x4b93ff
cmp dword [eax + 0x14], 1
jne 0x4b93ff
mov eax, 1
mov dword [esp + 0x70], eax
jmp 0x4b93ff
mov dword [esp], esi
call fcn.004ba150
mov dword [esp], ebx
call fcn.004b9f70
mov esi, eax
jmp 0x4b9bec
mov dword [esp], ebx
mov edi, dword [esp + 0x118]
mov ecx, dword [esp + 0x120]
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
call fcn.004bbc00
mov dword [esp + 0xec], eax
mov edx, dword [edi + 8]
jmp 0x4b9228
mov ecx, dword [ebx + 4]
lea esi, [ebx + 0xc]
inc ecx
mov dword [esp], ecx
call fcn.004b9f70
mov dword [esp + 0x44], eax
mov edi, dword [ebx + 0x10]
mov eax, dword [esp + 0x44]
lea edx, [edi*4]
lea ecx, [edx + 8]
add eax, 0xc
cmp ecx, 7
jbe 0x4b9edd
test al, 4
je 0x4b9edd
mov esi, dword [esp + 0x44]
lea ecx, [edx + 4]
mov eax, dword [ebx + 0xc]
mov dword [esi + 0xc], eax
mov eax, esi
add eax, 0x10
lea esi, [ebx + 0x10]
cld
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov dword [esp], ebx
call fcn.004ba150
mov ecx, dword [esp + 0x44]
jmp 0x4b9acb
dec eax
mov dword [edx], eax
jmp 0x4b9e0e
inc eax
mov dword [edx], eax
jmp 0x4b9adb