Function at 0x4af050
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x4b08ae
sub esp, 0xac
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x4b01e5
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x4b01e1
test eax, 0x200
jne 0x4af0a4
lea edx, [0x70c3b8]
mov ebx, dword [esp + 0xb0]
jmp 0x4af0dc
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004b8ad0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
test ecx, 0x200
jne 0x4af0f3
lea ebp, [0x70c3b8]
mov esi, dword [esp + 0xbc]
jmp 0x4af13b
mov dword [esp + 0x74], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b8ad0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x74]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
cmp edx, ebp
jne 0x4af158
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00403790
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4af167
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [0x6b7304]
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb8]
mov dword [esp + 8], ebp
mov esi, dword [esp + 0xbc]
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0xc4]
mov dword [esp + 0x14], esi
lea edx, [0x6b7304]
call eax
movzx eax, byte [esp + 0x18]
test al, al
je 0x4af3a9
nop
mov eax, dword [esp + 0xb8]
mov ecx, eax
and eax, 0x1f
add eax, 0xffffffeb
nop
cmp eax, 1
ja 0x4af212
mov eax, dword [esp + 0xb0]
cmp dword [eax], 4
jne 0x4b0895
mov edx, dword [eax + 4]
test edx, edx
je 0x4b0895
test ecx, 0x80
je 0x4af207
mov edx, dword [esp + 0xb4]
mov ebx, dword [edx]
jmp 0x4af222
mov edx, dword [esp + 0xb4]
mov ebx, edx
jmp 0x4af222
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov ebx, edx
nop
mov ebp, dword [esp + 0xc4]
mov esi, ebp
and ebp, 0x1f
add ebp, 0xffffffeb
nop
cmp ebp, 1
ja 0x4af272
mov ebp, dword [esp + 0xbc]
cmp dword [ebp], 4
jne 0x4b087d
mov edi, dword [ebp + 4]
test edi, edi
je 0x4b087d
test esi, 0x80
je 0x4af267
mov edi, dword [esp + 0xc0]
mov ebp, dword [edi]
jmp 0x4af27b
mov edi, dword [esp + 0xc0]
mov ebp, edi
jmp 0x4af27b
mov edi, dword [esp + 0xc0]
mov ebp, edi
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebp
cmp ebp, ebx
jae 0x4af29d
test ecx, 0x200
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x78]
jmp 0x4af2ae
test ecx, 0x200
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], ebp
jne 0x4af2cf
mov dword [esp + 0x60], eax
lea eax, [0x70c3b8]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x60]
jmp 0x4af2f8
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b8ad0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x30], eax
mov eax, ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], eax
lea edx, [0x665140]
mov dword [esp], edx
mov esi, dword [esp + 0xc8]
mov dword [esp + 4], esi
lea edi, [esp + 0x9c]
mov dword [esp + 8], edi
call fcn.0040c670
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
jne 0x4b01d2
mov eax, dword [esp + 0x80]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xa8], eax
lea eax, [0x665140]
mov dword [esp], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
lea ecx, [esp + 0x9c]
mov dword [esp + 8], ecx
call fcn.0040cbc0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
nop
mov eax, dword [esp + 0xb8]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x4af780
cmp eax, 0xc
jbe 0x4af4f3
cmp eax, 0xe
jbe 0x4af483
lea edx, [eax - 0xf]
cmp edx, 1
jbe 0x4af3e9
cmp eax, 0x11
jne 0x4b0130
xor eax, eax
jmp 0x4b0769
cmp eax, 0xf
jne 0x4af408
mov eax, dword [esp + 0xb4]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
movss xmm1, dword [eax + 4]
cvtss2sd xmm1, xmm1
jmp 0x4af418
mov eax, dword [esp + 0xb4]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0xc4]
and eax, 0x1f
cmp eax, 0xf
jne 0x4af442
mov eax, dword [esp + 0xc0]
movss xmm2, dword [eax]
cvtss2sd xmm2, xmm2
movss xmm3, dword [eax + 4]
cvtss2sd xmm3, xmm3
jmp 0x4af45b
cmp eax, 0x10
jne 0x4b071d
mov eax, dword [esp + 0xc0]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm2
sete cl
setnp al
and ecx, eax
ucomisd xmm1, xmm3
sete dl
setnp al
and edx, eax
and ecx, edx
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 0xd
jne 0x4af499
mov eax, dword [esp + 0xb4]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x4af4a4
mov eax, dword [esp + 0xb4]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0xc4]
and eax, 0x1f
cmp eax, 0xd
jne 0x4af4c5
mov eax, dword [esp + 0xc0]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x4af4d9
cmp eax, 0xe
jne 0x4b06df
mov eax, dword [esp + 0xc0]
movsd xmm1, qword [eax]
ucomisd xmm1, xmm0
sete cl
setnp al
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 1
jne 0x4af554
mov eax, dword [esp + 0xb4]
movzx eax, byte [eax]
mov ecx, dword [esp + 0xc4]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x4af53a
mov byte [esp + 0x27], al
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004b5980
movzx eax, byte [esp + 0x27]
mov ecx, dword [esp + 0xc0]
cmp byte [ecx], al
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
lea edx, [eax - 2]
cmp edx, 4
ja 0x4af66b
cmp eax, 3
ja 0x4af58b
cmp eax, 2
jne 0x4af57a
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4af5c8
mov ecx, dword [esp + 0xb4]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4af5c8
cmp eax, 4
jne 0x4af5a1
mov ecx, dword [esp + 0xb4]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4af5c8
cmp eax, 5
jne 0x4af5b6
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4af5c8
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0xc4]
and edx, 0x1f
mov dword [esp + 0x5c], edx
cmp edx, 3
ja 0x4af60b
cmp edx, 2
jne 0x4af5f1
mov edx, dword [esp + 0xc0]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4af651
cmp edx, 3
jne 0x4b06a5
mov ebx, dword [esp + 0xc0]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4af651
cmp edx, 4
jne 0x4af621
mov ebx, dword [esp + 0xc0]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4af651
cmp edx, 5
jne 0x4af636
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4af651
cmp edx, 6
jne 0x4b06a5
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 7
jb 0x4b0130
cmp eax, 9
ja 0x4af6ac
cmp eax, 7
jne 0x4af68b
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4af6dc
cmp eax, 8
jne 0x4af69e
mov ecx, dword [esp + 0xb4]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4af6dc
mov ecx, dword [esp + 0xb4]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4af6dc
cmp eax, 0xa
jne 0x4af6be
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4af6dc
cmp eax, 0xb
jne 0x4af6d1
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4af6dc
mov edx, dword [esp + 0xb4]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0xc4]
and edx, 0x1f
mov dword [esp + 0x5c], edx
cmp edx, 9
ja 0x4af72c
cmp edx, 7
jne 0x4af702
mov edx, dword [esp + 0xc0]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4af766
cmp edx, 8
jne 0x4af715
mov ebx, dword [esp + 0xc0]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4af766
cmp edx, 9
jne 0x4b066b
mov ebx, dword [esp + 0xc0]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4af766
cmp edx, 0xa
jne 0x4af73e
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4af766
cmp edx, 0xb
jne 0x4af751
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4af766
cmp edx, 0xc
jne 0x4b066b
mov ebp, dword [esp + 0xc0]
mov edx, dword [ebp]
xor ebx, ebx
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 0x15
jbe 0x4afc33
cmp eax, 0x17
jbe 0x4af859
cmp eax, 0x18
je 0x4af7cd
cmp eax, 0x19
jne 0x4b0130
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b7eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
xor ecx, ecx
jmp 0x4b057b
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [esp + 0xc4]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x4af7f8
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4af82e
mov dword [esp + 0x68], eax
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004b89f0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x28]
cmp edx, ecx
je 0x4af836
xor eax, eax
jmp 0x4af84b
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x16
je 0x4afb21
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4af89b
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4af891
test ebp, 0x200
jmp 0x4af8d3
cmp ebx, 0x14
je 0x4af8ad
jmp 0x4b0536
cmp ebx, 0x16
ja 0x4af8a8
test ebp, 0x200
jmp 0x4af8d3
cmp ebx, 0x17
jne 0x4af8c4
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4af908
cmp ebx, 0x1a
jne 0x4b0536
test ebp, 0x200
je 0x4af8e0
mov esi, dword [esp + 0xc0]
xor edi, edi
jmp 0x4af908
test ebp, 0x80
je 0x4af8f3
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
jmp 0x4af8fc
mov esi, dword [esp + 0xc0]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
test edx, edx
setne dl
xor edx, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4afb12
mov edx, dword [eax + 4]
cmp ebx, 0x17
jne 0x4af927
mov ebx, dword [esi + 4]
jmp 0x4af966
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.004b73e0
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
cmp ebx, edx
jne 0x4afb03
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b8c20
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b8c20
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
je 0x4afaf4
mov eax, dword [esp + 0xb8]
test eax, 0x200
jne 0x4af9e3
lea ecx, [0x70c3b8]
mov edx, dword [esp + 0xb0]
jmp 0x4afa0d
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004b8ad0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4afa33
xor eax, eax
jmp 0x4b0445
mov eax, dword [esp + 0xb0]
cmp dword [0x8bc168], eax
jne 0x4afa50
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4afa76
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.004b5a20
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xbc]
cmp dword [0x8bc168], edx
jne 0x4afa93
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4afac9
mov dword [esp + 0x2c], eax
mov dword [esp + 0x6c], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 8], eax
call fcn.004b5a20
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x6c]
cmp eax, edx
je 0x4afad1
xor eax, eax
jmp 0x4afae6
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b8c20
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b8c20
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
jne 0x4afb8b
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.004b6940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b6940
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004af050
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x13
jne 0x4afd1c
test ecx, 0x200
jne 0x4afd0d
test ecx, 0x80
je 0x4afc5b
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
jmp 0x4afc62
mov eax, dword [esp + 0xb4]
test eax, eax
setne al
xor eax, 1
test al, al
je 0x4afd0d
nop
mov eax, dword [esp + 0xc4]
mov ecx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
cmp eax, 0x14
ja 0x4afca2
lea edx, [eax - 0x12]
cmp edx, 1
ja 0x4afc98
test ecx, 0x200
jmp 0x4afcd6
cmp eax, 0x14
je 0x4afcb4
jmp 0x4b0404
cmp eax, 0x16
ja 0x4afcaf
test ecx, 0x200
jmp 0x4afcd6
cmp eax, 0x17
jne 0x4afcc7
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
test eax, eax
setne al
xor eax, 1
jmp 0x4afcfa
cmp eax, 0x1a
jne 0x4b0404
test ecx, 0x200
jne 0x4afd0d
test ecx, 0x80
je 0x4afceb
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
jmp 0x4afcf2
mov eax, dword [esp + 0xc0]
test eax, eax
setne al
xor eax, 1
test al, al
je 0x4afd0d
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
cmp eax, 0x14
jne 0x4aff0a
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
test edx, edx
setne dl
xor edx, 1
test dl, dl
je 0x4afd4d
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc4]
jmp 0x4afded
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4afd7d
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4afd73
test ebp, 0x200
jmp 0x4afdb5
cmp ebx, 0x14
je 0x4afd8f
jmp 0x4b03ca
cmp ebx, 0x16
ja 0x4afd8a
test ebp, 0x200
jmp 0x4afdb5
cmp ebx, 0x17
jne 0x4afda6
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
jmp 0x4afde3
cmp ebx, 0x1a
jne 0x4b03ca
test ebp, 0x200
jne 0x4afe70
test ebp, 0x80
je 0x4afdce
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
jmp 0x4afdd7
mov ebx, dword [esp + 0xc0]
mov esi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4afe70
test byte [eax], al
nop
mov eax, ebp
and ebp, 0x1f
mov dword [esp + 0x5c], ebp
cmp ebp, 0x14
ja 0x4afe17
lea ecx, [ebp - 0x12]
cmp ecx, 1
ja 0x4afe0d
test eax, 0x200
jmp 0x4afe42
cmp ebp, 0x14
je 0x4afe28
jmp 0x4b0390
cmp ebp, 0x16
ja 0x4afe23
test eax, 0x200
jmp 0x4afe42
cmp ebp, 0x17
jne 0x4afe34
mov eax, dword [ebx]
test eax, eax
setne al
xor eax, 1
jmp 0x4afe5d
cmp ebp, 0x1a
jne 0x4b0390
test eax, 0x200
je 0x4afe48
xor eax, eax
jmp 0x4afe5d
test eax, 0x80
je 0x4afe53
mov eax, dword [ebx]
jmp 0x4afe55
mov eax, ebx
test eax, eax
setne al
xor eax, 1
cmp al, dl
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b6940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b6940
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004af050
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x15
jne 0x4b0130
test ecx, 0x200
je 0x4aff26
mov eax, dword [esp + 0xb4]
xor edx, edx
jmp 0x4aff4a
test ecx, 0x80
je 0x4aff39
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
jmp 0x4aff42
mov eax, dword [esp + 0xb4]
mov edx, eax
test edx, edx
setne dl
xor edx, 1
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4aff7a
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4aff70
test ebp, 0x200
jmp 0x4affb2
cmp ebx, 0x14
je 0x4aff8c
jmp 0x4b0356
cmp ebx, 0x16
ja 0x4aff87
test ebp, 0x200
jmp 0x4affb2
cmp ebx, 0x17
jne 0x4affa3
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4affe7
cmp ebx, 0x1a
jne 0x4b0356
test ebp, 0x200
je 0x4affbf
mov esi, dword [esp + 0xc0]
xor edi, edi
jmp 0x4affe7
test ebp, 0x80
je 0x4affd2
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
jmp 0x4affdb
mov esi, dword [esp + 0xc0]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4b0121
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b73e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
cmp ecx, 0x17
jne 0x4b0021
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 4]
jmp 0x4b0059
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
call fcn.004b73e0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xc0]
cmp edx, eax
jne 0x4b0112
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.004b8c20
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b8c20
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
je 0x4b0103
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.004b7800
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4b0207
mov dword [esp + 0x58], eax
xor edx, edx
jmp 0x4b0224
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
call fcn.004b71f0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0
call fcn.004b71f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x90]
cmp dword [esp + 0x10], ecx
je 0x4b01a8
xor eax, eax
jmp 0x4b01c4
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004036b0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
test eax, eax
jmp 0x4b01ec
mov ecx, dword [esp + 0xc4]
setne al
test ecx, ecx
setne cl
cmp cl, al
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov ebx, dword [esp + 0x8c]
add ebx, 0xc
mov ecx, ebx
mov edx, eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x54], edx
mov eax, dword [ecx + 4]
mov dword [esp + 0x98], eax
mov ebx, dword [ecx + 8]
mov dword [esp + 0x5c], ebx
mov ebp, dword [ecx]
mov dword [esp + 0x94], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp], esi
mov edi, dword [esp + 0xb4]
mov dword [esp + 4], edi
mov edi, dword [esp + 0xb8]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.004b75a0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x94]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x98]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x14], edi
call fcn.004b75a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x4b0347
test ecx, ecx
je 0x4b0347
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004af050
movzx eax, byte [esp + 0x1c]
test al, al
je 0x4b0347
mov eax, dword [esp + 0x54]
inc eax
mov ecx, dword [esp + 0x58]
cmp ecx, eax
jg 0x4b0216
jmp 0x4b0207
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6a1191]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6a1191]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6a1191]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6a1191]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov ecx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xb4]
cmp dword [ecx + 4], eax
jle 0x4b0527
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004b7040
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0xc], edi
call fcn.004b7040
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004af050
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b043e
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6a1191]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov edx, dword [esp + 0x44]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x4b065c
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004b6af0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x44]
mov dword [esp + 0xc], edi
call fcn.004b6af0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004af050
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b0570
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6a06f4]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x69fe1f]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov dword [esp + 0x5c], eax
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6a116b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov dword [esp + 0x5c], eax
lea eax, [0x673a40]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6a2458]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x66a560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436d20
mov edx, dword [esp + 0x4c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004b73e0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0xc], eax
jle 0x4b086e
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004b7040
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
call fcn.004b7040
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004af050
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4b075b
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x662ba0]
mov dword [esp], eax
lea eax, [0x70a5a4]
mov dword [esp + 4], eax
call fcn.00436d20
lea eax, [0x662ba0]
mov dword [esp], eax
lea eax, [0x70a5a4]
mov dword [esp + 4], eax
call fcn.00436d20
nop
call fcn.00461660
jmp fcn.004af050