Function at 0x4b0280
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x70]
cmp eax, dword [ecx + 8]
jbe 0x4b221d
sub esp, 0xf0
mov ecx, dword [esp + 0x108]
test ecx, ecx
jle 0x4b0349
mov edx, dword [esp + 0x100]
test edx, edx
je 0x4b0350
test edx, 0x60
jne 0x4b0350
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.00481250
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf4]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b030e
mov dword [edx + 0x10], eax
jmp 0x4b0316
lea edi, [edx + 0x10]
call fcn.00460010
mov dword [esp], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
call fcn.004af320
movzx eax, byte [esp + 8]
test al, al
jne 0x4b0342
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x100]
jmp 0x4b0350
add esp, 0xf0
ret
mov edx, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
mov dword [edi + 0xc], 0
mov ebx, dword [0x61b8e0]
test ebx, ebx
jne 0x4b0371
mov dword [edi + 0x10], 0
jmp 0x4b0381
lea ebx, [edi + 0x10]
xor eax, eax
mov ebp, edi
mov edi, ebx
call fcn.00460010
mov edi, ebp
mov dword [edi + 0x1c], edx
mov ebx, dword [0x61b8e0]
test ebx, ebx
jne 0x4b03a4
mov ebx, dword [esp + 0xf8]
mov dword [edi + 0x14], ebx
mov ebp, dword [esp + 0xfc]
mov dword [edi + 0x18], ebp
jmp 0x4b03d1
lea ebx, [edi + 0x14]
mov eax, dword [esp + 0xf8]
mov ebp, edi
mov edi, ebx
call fcn.00460010
lea edi, [ebp + 0x18]
mov ebx, eax
mov eax, dword [esp + 0xfc]
call fcn.00460010
mov ebp, eax
mov edi, dword [esp + 0xf4]
nop
mov esi, edx
and edx, 0x1f
cmp edx, 0x10
jbe 0x4b1244
cmp edx, 0x15
ja 0x4b09c3
cmp edx, 0x13
ja 0x4b03fc
cmp edx, 0x11
je 0x4b09d5
jmp 0x4b11e1
cmp edx, 0x14
je 0x4b0733
movzx edx, byte [edi + 0x2c]
test dl, dl
je 0x4b0665
test esi, 0x200
jne 0x4b0421
lea eax, [0x549800]
jmp 0x4b043b
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00482040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov eax, dword [eax + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [eax + edx]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b04b2
mov dword [esp + 0xa0], ebp
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00460910
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b0507
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
mov ebx, dword [esp + 0x100]
test ebx, 0x200
jmp 0x4b052b
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00460010
mov ebx, dword [esp + 0x100]
test ebx, 0x200
mov eax, edx
mov edx, dword [esp + 0xb8]
je 0x4b0536
mov ebp, dword [esp + 0xfc]
jmp 0x4b0565
test ebx, 0x80
je 0x4b054a
mov ebp, dword [esp + 0xfc]
mov esi, dword [ebp]
jmp 0x4b0553
mov ebp, dword [esp + 0xfc]
mov esi, ebp
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4b05e0
mov esi, dword [esp + 0x80]
mov ebx, dword [esp + 0x50]
lea ebx, [ebx + esi + 1]
cmp ecx, ebx
jae 0x4b05ca
lea ebp, [0x4fdae0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b05ba
mov dword [edi], eax
jmp 0x4b05bf
call fcn.00460010
mov ebp, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
mov ebx, dword [esp + 0xf8]
jmp 0x4b06ef
nop
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x50]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4b0637
mov dword [esp + 0x80], ebx
lea ebp, [0x4fdae0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b0657
mov dword [edi], edx
jmp 0x4b065e
mov eax, edx
call fcn.00460010
add esp, 0xf0
ret
nop
mov edx, dword [edi + 4]
mov eax, ecx
lea ecx, [edx + 4]
mov esi, dword [edi + 8]
mov ebp, dword [edi]
cmp esi, ecx
jae 0x4b06c8
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.00449cd0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0xf8]
mov edi, dword [esp + 0xf4]
mov dword [ebp + edx], 0x5b70616d
mov dword [edi + 4], ecx
mov dword [edi + 8], esi
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b06e4
mov dword [edi], ebp
jmp 0x4b06ef
mov ecx, eax
mov eax, ebp
call fcn.00460010
mov eax, ecx
mov dword [esp], ebx
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004a9230
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
je 0x4b1eb4
mov dword [esp + 0x80], ecx
mov dword [esp + 0x90], eax
xor ebx, ebx
jmp 0x4b1faa
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00480e00
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test ecx, ecx
jne 0x4b098c
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b0909
mov eax, dword [esp + 0x100]
test eax, 0x200
jne 0x4b0787
lea eax, [0x549800]
mov ecx, dword [esp + 0xf8]
jmp 0x4b07ad
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00482040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [eax + edx]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b0824
mov dword [esp + 0x98], ebp
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00460910
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x61b8e0]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x48]
lea ebx, [ebp + ebx + 5]
test edx, edx
jne 0x4b087b
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4b0892
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00460010
mov eax, edx
mov edx, dword [esp + 0xb8]
nop
cmp ecx, ebx
jae 0x4b08da
mov dword [esp + 0x80], ebx
lea ebp, [0x4fdae0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b08fd
mov dword [edi], edx
jmp 0x4b1586
mov eax, edx
call fcn.00460010
jmp 0x4b1586
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b095c
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], edx
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b0980
mov dword [edi], ebp
jmp 0x4b1586
mov eax, ebp
call fcn.00460010
jmp 0x4b1586
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x14], eax
call fcn.004b0280
jmp 0x4b1586
cmp edx, 0x17
ja 0x4b1032
cmp edx, 0x16
je 0x4b0ebe
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x104]
cmp eax, 0x71
jg 0x4b09f4
cmp eax, 0x58
je 0x4b0a02
cmp eax, 0x71
je 0x4b0a02
jmp 0x4b0be7
cmp eax, 0x73
je 0x4b0a02
cmp eax, 0x78
jne 0x4b0be7
test esi, 0x200
jne 0x4b0a1d
mov dword [esp + 0x84], eax
lea eax, [0x549800]
mov dword [esp + 0x3c], eax
jmp 0x4b0a3b
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00482040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ebx, ecx
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x28]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4b0bb9
mov eax, dword [esp + 0x74]
cmp eax, 0x17
je 0x4b0b67
mov eax, dword [esp + 0x100]
test eax, 0x100
jne 0x4b0ad2
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00481440
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
lea ecx, [0x4fdae0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00449b90
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb4], eax
xor ecx, ecx
jmp 0x4b1da0
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00481440
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.00481cb0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
cmp dword [0x5f487c], edx
jne 0x4b0b46
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
jmp 0x4b1d1e
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0047fee0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x4b1d1e
mov eax, dword [esp + 0xf8]
cmp dword [0x5f487c], eax
jne 0x4b0b8a
mov eax, dword [esp + 0xfc]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
jmp 0x4b1d1e
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.0047fee0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x4b1d1e
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b0e3c
test esi, 0x200
jne 0x4b0c03
lea ecx, [0x549800]
jmp 0x4b0c1f
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00482040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [edx + eax]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b0c96
mov dword [esp + 0x94], ebp
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x94]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00460910
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b0cde
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4b0cf5
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00460010
mov eax, edx
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x74]
cmp ebx, 0x17
jne 0x4b0da7
mov ebp, dword [esp + 0xfc]
mov esi, dword [ebp]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4b0dae
nop
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x44]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4b0d79
mov dword [esp + 0x80], ebx
lea ebp, [0x4fdae0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b0d99
mov dword [edi], edx
jmp 0x4b0da0
mov eax, edx
call fcn.00460010
add esp, 0xf0
ret
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x44]
lea ebp, [ebp + esi + 1]
cmp ecx, ebp
jae 0x4b0e10
lea ebx, [0x4fdae0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b0e03
mov dword [edi], eax
jmp 0x4b0e08
call fcn.00460010
mov ebx, dword [esp + 0x74]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
cmp ebx, 0x17
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov eax, 0
jmp 0x4b1bcc
mov ecx, dword [edi + 4]
lea eax, [ecx + 1]
mov esi, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, eax
jae 0x4b0e9f
lea edx, [0x4fdae0]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b0e8d
mov dword [edi], eax
jmp 0x4b0e92
call fcn.00460010
mov edx, dword [esp + 0x74]
mov ebp, dword [esp + 0xfc]
mov esi, eax
lea eax, [ecx + 1]
mov dword [edi + 4], eax
mov byte [esi + ecx], 0x5b
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xf8]
xor ebx, ebx
jmp 0x4b1a01
test ecx, ecx
je 0x4b0ec6
xor eax, eax
jmp 0x4b0f02
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00481b00
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
test al, al
je 0x4b11e1
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00480e00
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x15
ja 0x4b0f3f
cmp edx, 0x11
je 0x4b0f4d
cmp edx, 0x15
je 0x4b0f4d
jmp 0x4b1011
cmp edx, 0x17
je 0x4b0f4d
cmp edx, 0x19
jne 0x4b1011
mov dword [esp + 0x74], ebx
nop
mov edx, dword [esp + 0xf4]
mov ebp, dword [edx + 4]
lea esi, [ebp + 1]
mov edi, dword [edx]
mov ebx, dword [edx + 8]
cmp ebx, esi
jae 0x4b0fd1
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b0fb8
mov dword [edi], eax
jmp 0x4b0fbd
call fcn.00460010
mov edx, edi
mov ebp, ecx
mov edi, eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
lea ebx, [ebp + 1]
mov dword [edx + 4], ebx
mov byte [edi + ebp], 0x26
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x14], eax
call fcn.004b0280
add esp, 0xf0
ret
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
jmp 0x4b11e1
cmp edx, 0x18
je 0x4b121e
cmp edx, 0x19
jne 0x4b11dc
movzx eax, byte [edi + 0x2c]
test al, al
je 0x4b1161
test esi, 0x200
jne 0x4b1060
lea eax, [0x549800]
jmp 0x4b107a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00482040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov eax, dword [eax + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
lea ebx, [edx + eax]
mov dword [esp + 0x80], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4b10ee
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x4c], eax
mov dword [esp + 0x7c], edx
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x9c]
mov dword [esp + 0x7c], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00460910
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x61b8e0]
test eax, eax
jne 0x4b1139
mov eax, dword [esp + 0xb8]
mov dword [edi], eax
jmp 0x4b1145
mov eax, dword [esp + 0xb8]
call fcn.00460010
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov eax, dword [edi + 4]
lea edx, [eax + 1]
mov ecx, dword [edi]
mov esi, dword [edi + 8]
cmp esi, edx
jae 0x4b11cb
lea ebx, [0x4fdae0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b11b2
mov dword [edi], eax
jmp 0x4b11b7
call fcn.00460010
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
mov ecx, edx
lea edx, [eax + 1]
mov dword [edi + 4], edx
mov byte [ecx + eax], 0x7b
xor eax, eax
jmp 0x4b1609
cmp edx, 0x1a
jne 0x4b1205
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004aea30
jmp 0x4b1586
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004ad350
jmp 0x4b1586
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0xc], eax
call fcn.004ae1e0
jmp 0x4b1586
cmp edx, 0xc
ja 0x4b14b4
cmp edx, 1
ja 0x4b13d7
test edx, edx
jne 0x4b13b7
test ecx, ecx
jne 0x4b1313
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x80], ecx
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp edx, ecx
jae 0x4b12ab
mov dword [esp + 0x7c], eax
lea ebp, [0x4fdae0]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00449cd0
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov dword [esp + 0xb8], ebx
add eax, ebx
mov dword [esp], eax
lea eax, [0x5174d4]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.00460910
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x61b8e0]
test eax, eax
jne 0x4b1302
mov eax, dword [esp + 0xb8]
mov dword [edi], eax
jmp 0x4b1586
mov eax, dword [esp + 0xb8]
call fcn.00460010
jmp 0x4b1586
mov ecx, dword [esp + 0x104]
cmp ecx, 0x76
jne 0x4b13a6
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b1376
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b139a
mov dword [edi], ebp
jmp 0x4b1586
mov eax, ebp
call fcn.00460010
jmp 0x4b1586
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.004ad5c0
jmp 0x4b1586
movzx eax, byte [ebp]
mov dword [esp], edi
mov byte [esp + 4], al
mov eax, dword [esp + 0x104]
mov dword [esp + 8], eax
call fcn.004adab0
jmp 0x4b1586
cmp edx, 6
ja 0x4b144b
cmp edx, 3
ja 0x4b13fb
cmp edx, 2
jne 0x4b13f0
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b1426
movsx eax, byte [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b1426
cmp edx, 4
jne 0x4b140b
movsx eax, word [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b1426
cmp edx, 5
jne 0x4b141a
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4b1426
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004adba0
jmp 0x4b1586
cmp edx, 9
ja 0x4b1471
cmp edx, 7
jne 0x4b145c
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4b148f
cmp edx, 8
jne 0x4b1469
movzx eax, byte [ebp]
xor ecx, ecx
jmp 0x4b148f
movzx eax, word [ebp]
xor ecx, ecx
jmp 0x4b148f
cmp edx, 0xa
jne 0x4b147d
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4b148f
cmp edx, 0xb
jne 0x4b148a
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
jmp 0x4b148f
mov eax, dword [ebp]
xor ecx, ecx
mov dword [esp], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004adba0
jmp 0x4b1586
cmp edx, 0xe
ja 0x4b1515
cmp edx, 0xd
jne 0x4b14ed
movss xmm0, dword [ebp]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004adec0
jmp 0x4b1586
movsd xmm0, qword [ebp]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004adec0
jmp 0x4b1586
cmp edx, 0xf
jne 0x4b1555
movss xmm0, dword [ebp]
movss xmm1, dword [ebp + 4]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
cvtss2sd xmm0, xmm1
movsd qword [esp + 0xc], xmm0
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0x104]
mov dword [esp + 0x18], eax
call fcn.004ae020
jmp 0x4b1586
movsd xmm0, qword [ebp]
movsd xmm1, qword [ebp + 8]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
movsd qword [esp + 0xc], xmm1
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0x104]
mov dword [esp + 0x18], eax
call fcn.004ae020
add esp, 0xf0
ret
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004ad2b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b0280
mov eax, dword [esp + 0x64]
inc eax
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov dword [esp + 0x64], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
call fcn.00481a50
mov eax, dword [esp + 0x64]
cmp dword [esp + 0xc], eax
jle 0x4b1907
test eax, eax
jle 0x4b1730
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b16c8
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4b16a0
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov word [ebp + ecx], 0x202c
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b16bb
mov dword [edi], ebp
jmp 0x4b1737
mov ecx, eax
mov eax, ebp
call fcn.00460010
mov eax, ecx
jmp 0x4b1737
mov ecx, dword [edi + 4]
lea edx, [ecx + 1]
mov ebx, dword [edi]
mov ebp, dword [edi + 8]
cmp ebp, edx
jae 0x4b1724
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b1719
mov dword [edi], eax
jmp 0x4b171e
call fcn.00460010
mov ebx, eax
mov eax, dword [esp + 0x64]
lea edx, [ecx + 1]
mov dword [edi + 4], edx
mov byte [ebx + ecx], 0x20
jmp 0x4b1737
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2b]
test cl, cl
jne 0x4b174b
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4b158d
mov ecx, dword [esp + 0x100]
test ecx, 0x200
jne 0x4b1769
lea edx, [0x549800]
mov ebx, dword [esp + 0xf8]
jmp 0x4b1797
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00482040
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0x64]
mov ecx, dword [edx + 0x2c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0xbc]
lea esi, [esp + 8]
call fcn.004606ae
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
test eax, eax
je 0x4b18f7
mov dword [esp + 0x54], eax
nop
mov edx, dword [esp + 0xf4]
mov ebx, dword [edx + 4]
mov dword [esp + 0x80], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x7c], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp esi, ebp
jae 0x4b182e
mov dword [esp + 0xa4], ecx
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00449cd0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00460910
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x61b8e0]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x54]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4b1885
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4b189c
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00460010
mov eax, edx
mov edx, dword [esp + 0xb8]
cmp ecx, ebx
jae 0x4b18eb
lea ebp, [0x4fdae0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b18e2
mov dword [edi], eax
jmp 0x4b18e7
call fcn.00460010
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
jmp 0x4b18fe
mov edi, dword [esp + 0xf4]
mov eax, dword [esp + 0x64]
jmp 0x4b158d
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b1968
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b195f
mov dword [edi], eax
jmp 0x4b1964
call fcn.00460010
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b1586
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
call fcn.004810a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b0280
mov eax, dword [esp + 0x58]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
mov eax, edx
mov ecx, esi
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x58], ebx
cmp edx, 0x17
jne 0x4b1a0f
mov esi, dword [ebp + 4]
jmp 0x4b1a47
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00481440
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xfc]
mov edi, dword [esp + 0xf4]
cmp esi, ebx
jle 0x4b1ad9
test ebx, ebx
jle 0x4b1977
mov esi, dword [edi + 4]
lea edx, [esi + 1]
mov ebx, dword [edi]
mov eax, dword [edi + 8]
cmp eax, edx
jae 0x4b1abf
lea ecx, [0x4fdae0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b1aa8
mov dword [edi], eax
jmp 0x4b1aad
call fcn.00460010
mov ebp, dword [esp + 0xfc]
mov esi, ecx
mov ebx, eax
mov ecx, dword [esp + 0xf8]
lea eax, [esi + 1]
mov dword [edi + 4], eax
mov byte [ebx + esi], 0x20
mov eax, dword [esp + 0x100]
mov ebx, dword [esp + 0x58]
jmp 0x4b1977
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 1]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, ecx
jae 0x4b1b34
lea ebp, [0x4fdae0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b1b2b
mov dword [edi], eax
jmp 0x4b1b30
call fcn.00460010
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x5d
jmp 0x4b1586
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004810a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004b0280
mov eax, dword [esp + 0x5c]
inc eax
mov ebx, dword [esp + 0x74]
cmp ebx, 0x17
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
mov ecx, edx
mov edx, ebp
mov ebp, esi
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x5c], eax
jne 0x4b1bd7
mov esi, dword [edx + 4]
jmp 0x4b1c0f
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00481440
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0xf8]
mov edi, dword [esp + 0xf4]
cmp esi, eax
jle 0x4b1cb4
test eax, eax
jle 0x4b1b43
mov esi, dword [edi + 4]
lea ebx, [esi + 2]
mov ecx, dword [edi + 8]
mov edx, dword [edi]
cmp ecx, ebx
jae 0x4b1c7c
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00449cd0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov word [edx + esi], 0x202c
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x61b8e0]
test ecx, ecx
jne 0x4b1c96
mov dword [edi], edx
jmp 0x4b1ca1
mov ecx, eax
mov eax, edx
call fcn.00460010
mov eax, ecx
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
jmp 0x4b1b43
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 1]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, ecx
jae 0x4b1d0f
lea ebp, [0x4fdae0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b1d06
mov dword [edi], eax
jmp 0x4b1d0b
call fcn.00460010
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7d
jmp 0x4b1586
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], edx
mov dword [esp + 0xa8], ecx
mov ebx, dword [esp + 0x3c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x8c]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x104]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.004ae380
add esp, 0xf0
ret
mov ebx, dword [esp + 0xb4]
mov byte [ebx + eax], dl
lea edx, [eax + 1]
mov eax, ebx
mov ecx, edx
mov edx, dword [esp + 0x40]
cmp ecx, edx
jge 0x4b1e67
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004810a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
and eax, 0x1f
mov dword [esp + 0x74], eax
cmp eax, 9
ja 0x4b1e28
cmp eax, 7
jne 0x4b1e00
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4b1e5f
cmp eax, 8
jne 0x4b1e14
movzx edx, byte [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4b1e5f
cmp eax, 9
jne 0x4b1e7a
movzx edx, word [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4b1e5f
cmp eax, 0xa
jne 0x4b1e3b
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4b1e5f
cmp eax, 0xb
jne 0x4b1e4e
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4b1e5f
cmp eax, 0xc
jne 0x4b1e7a
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jb 0x4b1d8f
jmp 0x4b1e75
mov eax, edx
mov ecx, dword [esp + 0xb4]
jmp 0x4b1d1e
call fcn.00460090
lea eax, [0x502f40]
mov dword [esp], eax
call fcn.0040b420
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x5159f3]
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
lea ecx, [0x4ff720]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435810
mov eax, dword [esp + 0xf4]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4b1f2d
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b1f1e
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b1f15
mov dword [edi], eax
jmp 0x4b1f1a
call fcn.00460010
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4b1586
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b1f88
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b1f7f
mov dword [edi], eax
jmp 0x4b1f84
call fcn.00460010
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
jmp 0x4b1586
mov ebp, dword [esp + 0xac]
lea edx, [ebp + 0xc]
mov ebx, eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xac], edx
mov dword [esp + 0x68], ebx
mov ebp, dword [edx + 4]
mov esi, dword [edx + 8]
mov edi, edx
mov edx, dword [edx]
test ebx, ebx
jle 0x4b210d
mov dword [esp + 0x74], esi
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb0], edx
mov ecx, dword [esp + 0xf4]
movzx ebx, byte [ecx + 0x2c]
test bl, bl
je 0x4b207a
nop
mov ebx, dword [ecx + 4]
lea esi, [ebx + 2]
mov ebp, dword [ecx + 8]
mov edx, dword [ecx]
cmp ebp, esi
jae 0x4b2047
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], esi
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00449cd0
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x7c]
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0xac]
mov word [edx + ebx], 0x202c
mov dword [ecx + 4], esi
mov dword [ecx + 8], ebp
mov ebx, dword [0x61b8e0]
test ebx, ebx
jne 0x4b2064
mov dword [ecx], edx
jmp 0x4b20fb
mov ebx, edi
mov edi, ecx
mov ebp, eax
mov eax, edx
call fcn.00460010
mov eax, ebp
mov edi, ebx
jmp 0x4b20fb
nop
mov ebx, dword [ecx + 4]
lea edi, [ebx + 1]
mov eax, dword [ecx]
mov esi, dword [ecx + 8]
cmp esi, edi
jae 0x4b20e3
lea ecx, [0x4fdae0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b20cc
mov dword [edi], eax
jmp 0x4b20d1
call fcn.00460010
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov ebx, ecx
mov ecx, edi
lea esi, [ebx + 1]
mov dword [ecx + 4], esi
mov byte [eax + ebx], 0x20
mov eax, dword [esp + 0x90]
mov edi, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x108]
lea ebx, [edx + 1]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x14], ebx
call fcn.004b0280
nop
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4b21a7
lea eax, [0x4fdae0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00449cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x61b8e0]
test edx, edx
jne 0x4b219e
mov dword [edi], eax
jmp 0x4b21a3
call fcn.00460010
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x3a
mov edx, dword [esp + 0x90]
mov ebx, dword [edx + 0xc]
mov ecx, dword [edx + 0x10]
mov ebp, dword [esp + 0x68]
cmp ebp, ecx
jae 0x4b2215
lea ecx, [ebp + ebp*2]
mov edx, dword [ebx + ecx*4]
mov esi, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4 + 8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x14], edx
call fcn.004b0280
mov eax, dword [esp + 0x68]
inc eax
mov ecx, dword [esp + 0x80]
cmp ecx, eax
jg 0x4b1f97
jmp 0x4b1eb4
mov eax, ebp
call fcn.00460090
nop
call fcn.0045ec00
jmp fcn.004b0280