Function at 0x4ca16f
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb0
push esi
mov esi, dword [ebp + 8]
push edi
mov eax, dword [esi + 0x130]
test eax, eax
je 0x4c8da9
dec eax
cmp eax, 5
ja case.default.0x4c8ca9
jmp dword [eax*4 + 0x4ca274]
mov edx, dword [esi - 0x128]
cmp dword [esi - 0x11c], 0xfffffffe
sbb ecx, ecx
mov eax, dword [edx]
inc ecx
and eax, 1
xor ecx, eax
push ecx
push edx
push esi
call fcn.004cbb60
add esp, 0xc
cmp dword [esi - 0x11c], 0xfffffffe
jb 0x4c8d02
xor byte [esi + 0x7d], 1
cmp dword [esi + 0x130], 3
jne 0x4c8d02
movzx eax, word [esi + 6]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x1c]
movzx ecx, byte [eax + edx*4 - 2]
add ecx, dword [eax + edx*4 - 0xc]
mov eax, dword [esi + 0x20]
dec dword [eax + ecx*4 - 4]
mov ecx, esi
call fcn.004e3930
cmp dword [esi - 0x11c], 0xfffffffe
jb case.default.0x4c8ca9
mov eax, dword [esi + 0x54]
mov edi, dword [esi + 0x6c]
mov ecx, dword [eax + 0x10]
xor eax, eax
test edi, edi
je case.default.0x4c8ca9
mov edx, dword [esi + 0x64]
add ecx, 4
nop dword [eax + eax]
cmp dword [edx + eax*4], 0x2007ffd
jne 0x4c8d3e
cmp dword [ecx], 0xfffffffe
je 0x4c8d48
inc eax
add ecx, 8
cmp eax, edi
jb 0x4c8d30
jmp case.default.0x4c8ca9
mov dword [edx + eax*4], 0x1007ffe
jmp case.default.0x4c8ca9
mov eax, dword [esi + 0x54]
xor edi, edi
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x18], ecx
cmp dword [esi + 0x6c], edi
jbe case.default.0x4c8ca9
mov eax, dword [esi + 0x64]
cmp dword [eax + edi*4], 0x7fff
jne 0x4c8d88
cmp dword [ecx + 4], 0xffffffff
je 0x4c8d88
push ecx
push esi
call fcn.004c8520
mov ecx, dword [esi + 0x64]
add esp, 8
mov dword [ecx + edi*4], eax
mov ecx, dword [esp + 0x18]
inc edi
add ecx, 8
mov dword [esp + 0x18], ecx
cmp edi, dword [esi + 0x6c]
jb 0x4c8d62
jmp case.default.0x4c8ca9
mov eax, dword [esi + 0x58]
cmp byte [eax], 0x61
jae 0x4c8ddb
mov dword [esi + 0x130], 0
cmp byte [esi + 0x75], 0
je 0x4c8dcf
cmp dword [esi + 0x60], 0
mov byte [esi + 0x75], 0
je 0x4c8dc2
push esi
call fcn.004c6390
add esp, 4
push esi
call fcn.004c6220
add esp, 4
mov byte [esi + 0x74], 1
mov al, byte [esi + 0x77]
test al, al
je 0x4c8de1
dec al
mov byte [esi + 0x77], al
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0xb8], 0
mov edi, dword [esi + 0x58]
mov dword [esp + 0x1c], edi
jne 0x4c8e05
mov eax, edi
sub eax, dword [esi + 0xa0]
cmp eax, dword [esi + 0xa4]
jae 0x4ca234
mov eax, dword [esi + 0x960]
test eax, eax
je 0x4c8e77
mov ecx, dword [esi + 0x60]
test ecx, ecx
je 0x4c8e77
mov edx, dword [esi + 0x958]
mov dword [esi + 0x958], ecx
cmp ecx, edx
je 0x4c8e36
test edx, edx
je 0x4c8e36
mov dword [esi + 0x95c], 0xffffffff
jmp 0x4c8e5a
cmp eax, 0x6c
jne 0x4c8e77
mov edx, edi
sub edx, ecx
sub edx, 0x40
sar edx, 2
call fcn.004a9f70
mov ecx, dword [esi + 0x95c]
mov dword [esi + 0x95c], eax
cmp ecx, eax
je 0x4c8e77
xor eax, eax
mov dword [esi + 0x7a], 0x15800000
mov ecx, esi
mov word [esi + 0x78], ax
call fcn.004e3930
push esi
call fcn.004c6220
add esp, 4
mov eax, dword [esi + 0x54]
mov edx, dword [edi]
movzx ecx, dl
mov dword [esp + 0x20], ecx
mov eax, dword [eax + 0x10]
mov dword [esp + 0x18], eax
mov eax, edx
shr eax, 8
movzx eax, al
mov edi, eax
mov dword [esp + 0x28], eax
lea eax, [ecx*2 + 0x591e90]
mov dword [esp + 0x24], edx
mov dword [esp + 0x74], eax
movzx eax, word [eax]
mov ecx, eax
mov dword [esp + 8], edi
mov dword [esp + 0x10], ecx
and al, 7
movzx ecx, cx
mov dword [esp + 0x60], 0
mov dword [esp + 0x14], ecx
cmp al, 3
jne 0x4c8f17
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + edi*8]
mov ecx, dword [ecx + edi*8 + 4]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x64]
mov dword [esp + 0x44], ecx
mov eax, dword [eax + edi*4]
test eax, eax
je 0x4c8ef1
mov edi, eax
mov eax, dword [esp + 0x10]
movzx eax, ax
jmp 0x4c8f08
push edi
push esi
call fcn.004cd910
mov edx, dword [esp + 0x2c]
mov edi, eax
mov eax, dword [esp + 0x7c]
add esp, 8
movzx eax, word [eax]
movzx ecx, ax
mov dword [esp + 8], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x14], ecx
mov edi, edx
movzx eax, cx
shr edx, 0x10
mov ecx, eax
shr edi, 0x18
mov dword [esp + 0x24], edx
movzx edx, dl
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], edx
test cl, 0x78
je 0x4c8f97
and ecx, 0x78
cmp cl, 0x18
jne 0x4c8fa7
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + edi*8]
mov ecx, dword [ecx + edi*8 + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x64]
mov dword [esp + 0x34], ecx
mov eax, dword [eax + edi*4]
test eax, eax
je 0x4c8f73
mov ecx, dword [esp + 0x14]
mov edi, eax
movzx eax, cx
mov dword [esp + 0x10], edi
mov dword [esp + 0x58], edi
movzx eax, ax
jmp 0x4c8fa7
push edi
push esi
call fcn.004cd910
mov edx, dword [esp + 0x14]
mov edi, eax
mov dword [esp + 0x18], eax
add esp, 8
mov eax, dword [esp + 0x74]
mov dword [esp + 0x58], edi
movzx eax, word [eax]
movzx eax, ax
jmp 0x4c8fa7
mov edx, dword [esp + 0x24]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
shr eax, 7
and eax, 0xf
add eax, 0xfffffffd
cmp eax, 7
ja case.0x4c8fb5.4
jmp dword [eax*4 + 0x4ca28c]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + edx*8]
mov ecx, dword [ecx + edx*8 + 4]
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x64]
mov dword [esp + 0x3c], ecx
mov edi, dword [eax + edx*4]
test edi, edi
jne 0x4c8fe5
push edx
push esi
call fcn.004cd910
add esp, 8
mov edi, eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x5c], edi
jmp 0x4c900f
mov eax, edx
imul edx, edx, 0xffffff
not eax
mov dword [esp + 0x3c], eax
add edx, 0x7fff
mov dword [esp + 0xc], edx
mov dword [esp + 0x5c], edx
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
cmp ecx, 0x60
ja case.0x4c9023.95
movzx eax, byte [ecx + 0x4ca37c]
jmp dword [eax*4 + 0x4ca2ac]
mov eax, dword [esi + 0x60]
mov edi, dword [eax + 0x10]
mov eax, dword [edi + edx*8]
mov ecx, dword [edi + edx*8 + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
cmp dword [edi + edx*8 + 4], 0xfffe7fff
jne 0x4c9064
xor edx, edx
mov ecx, esi
call fcn.004e0160
mov edi, eax
or edi, 0x100000
mov dword [esp + 0xc], edi
mov dword [esp + 0x5c], edi
jmp 0x4c900f
movsd xmm0, qword [edi + edx*8]
sub esp, 8
movsd qword [esp], xmm0
push esi
call fcn.004e06c0
mov edi, eax
add esp, 0xc
mov dword [esp + 0xc], edi
mov dword [esp + 0x5c], edi
jmp 0x4c900f
mov eax, dword [esi + 0x60]
not edx
push 4
mov eax, dword [eax + 0x10]
mov eax, dword [eax + edx*4]
push eax
push esi
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], 0xfffffffb
call fcn.004e0580
mov edi, eax
add esp, 0xc
mov dword [esp + 0xc], edi
mov dword [esp + 0x5c], edi
jmp 0x4c900f
mov edx, dword [esp + 8]
mov eax, edx
and eax, 0x1f000000
mov dword [esp + 0x14], eax
cmp eax, 0xa000000
je 0x4c9349
mov eax, edi
and eax, 0x1f000000
mov dword [esp + 0x18], eax
cmp eax, 0xa000000
je 0x4c9349
movzx eax, dx
mov ecx, 0x8000
mov dword [esp + 0x24], eax
movzx eax, di
mov dword [esp + 0x1c], eax
mov eax, edi
or eax, edx
cmp ax, cx
jae 0x4c9140
mov eax, edx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x4c911e
cmp dword [esp + 0x14], 0x4000000
jne 0x4c9140
mov eax, edi
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x4c9cf6
cmp dword [esp + 0x18], 0x4000000
je 0x4c9cf6
mov ecx, edx
mov dword [esp + 0x14], 0x13
shr ecx, 0x18
and ecx, 0x1f
lea eax, [ecx - 0xf]
cmp eax, 4
mov eax, edi
cmovbe ecx, dword [esp + 0x14]
shr eax, 0x18
and eax, 0x1f
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], eax
add eax, 0xfffffff1
cmp eax, 4
mov eax, dword [esp + 0x18]
cmovbe eax, dword [esp + 0x14]
cmp ecx, eax
je 0x4c920b
cmp ecx, 0x13
jne 0x4c91b4
cmp eax, 0xe
jne 0x4c9cf1
mov eax, dword [esp + 0x24]
mov ecx, esi
mov dword [esi + 0x7a], 0x5b0e01d3
mov word [esi + 0x78], ax
call fcn.004e3930
mov dword [esp + 8], eax
mov dword [esp + 0x10], 0xe
jmp 0x4c91da
cmp ecx, 0xe
jne 0x4c91ef
cmp eax, 0x13
jne 0x4c9cf1
mov eax, dword [esp + 0x1c]
mov ecx, esi
mov dword [esi + 0x7a], 0x5b0e01d3
mov word [esi + 0x78], ax
call fcn.004e3930
mov edi, eax
push esi
call fcn.004cbbd0
mov ecx, dword [esp + 0x24]
add esp, 4
mov eax, ecx
mov dword [esp + 0xc], eax
jmp 0x4c9227
cmp ecx, 1
je 0x4c91fd
cmp ecx, 2
jne 0x4c9cf1
cmp eax, 1
je 0x4c920b
cmp eax, 2
jne 0x4c9cf1
push esi
call fcn.004cbbd0
mov ecx, dword [esp + 0x24]
add esp, 4
mov edx, dword [esp + 0x10]
mov eax, ecx
mov dword [esp + 0xc], eax
cmp edx, 0xe
jne 0x4c9270
test cl, 1
je 0x4c9235
mov eax, ecx
xor eax, 4
mov dword [esp + 0xc], eax
movsd xmm0, qword [esp + 0x38]
push eax
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x54]
movsd qword [esp], xmm0
call fcn.004e09d0
add esp, 0x14
test eax, eax
mov eax, dword [esp + 0xc]
jne 0x4c92fc
xor eax, 5
mov dword [esp + 0xc], eax
jmp 0x4c92fc
push ecx
cmp edx, 0x13
jne 0x4c92a9
movsd xmm0, qword [esp + 0x3c]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x54]
movsd qword [esp], xmm0
call fcn.004e09d0
add esp, 0x14
test eax, eax
jne 0x4c92f8
mov eax, dword [esp + 0x20]
xor eax, 1
mov dword [esp + 0xc], eax
jmp 0x4c92fc
cmp edx, 4
jne 0x4c9339
push dword [esp + 0x3c]
push dword [esp + 0x48]
call fcn.004e0ae0
add esp, 0xc
test eax, eax
jne 0x4c92d1
mov eax, dword [esp + 0x20]
xor eax, 1
mov dword [esp + 0xc], eax
push edi
push dword [esp + 0xc]
push 0
push esi
call fcn.004e02e0
add esp, 0x10
mov dword [esp + 8], eax
xor edx, edx
mov ecx, esi
call fcn.004e0160
mov edi, eax
mov dword [esp + 0x10], 0x13
mov eax, dword [esp + 0xc]
shl eax, 8
mov ecx, esi
or eax, dword [esp + 0x10]
or eax, 0x80
mov word [esi + 0x7a], di
mov word [esi + 0x7c], ax
mov eax, dword [esp + 8]
mov word [esi + 0x78], ax
call fcn.004e3930
mov eax, dword [esp + 0xc]
xor eax, dword [esp + 0x20]
and eax, 1
push eax
push dword [esi + 0x58]
push esi
call fcn.004cbb60
jmp 0x4c9cea
lea eax, [esp + 0x34]
push eax
push esi
call fcn.004ccc80
jmp 0x4c9cea
mov eax, ecx
and eax, 2
or eax, 0xc
shr eax, 1
push eax
push ecx
lea eax, [esp + 0x38]
push eax
push esi
call fcn.004ccde0
add esp, 0x10
jmp case.0x4c9023.39
mov edx, dword [esp + 8]
mov eax, edx
and eax, 0x1f000000
mov dword [esp + 0x14], eax
cmp eax, 0xa000000
je 0x4c953b
mov eax, edi
and eax, 0x1f000000
cmp eax, 0xa000000
je 0x4c953b
mov eax, edi
mov ecx, 0x8000
or eax, edx
cmp ax, cx
jae 0x4c93b8
mov eax, dword [esp + 0x14]
cmp eax, 0xb000000
je 0x4c93b8
cmp eax, 0xc000000
jne 0x4c9cf6
push esi
call fcn.004cbbd0
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x48]
push eax
push edi
push dword [esp + 0x18]
push esi
call fcn.004ca880
mov ecx, eax
add esp, 0x18
cmp ecx, 2
je 0x4c951c
mov eax, dword [esp + 0x14]
cmp eax, 0xb000000
je 0x4c93f7
cmp eax, 0xc000000
jne 0x4c951c
cmp ecx, 1
jne case.0x4c9023.39
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
push 4
push eax
push esi
mov dword [esp + 0x40], ecx
call fcn.004ca3e0
add esp, 0xc
test eax, eax
je case.0x4c9023.39
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x28], eax
cmp edx, 0xfffffff4
jne 0x4c9467
mov eax, dword [ecx + 0x10]
cmp eax, dword [esp + 0x50]
jne 0x4c94bd
mov dword [esi + 0x7a], 0x450b0005
jmp 0x4c947c
cmp edx, 0xfffffff3
jne 0x4c94bd
mov eax, dword [ecx + 0x10]
cmp eax, dword [esp + 0x50]
jne 0x4c94bd
mov dword [esi + 0x7a], 0x450b000b
movzx eax, word [esp + 0x5c]
mov ecx, esi
mov word [esi + 0x78], ax
call fcn.004e3930
mov ecx, 0x88b
mov word [esi + 0x78], ax
movzx eax, word [esp + 0x64]
mov word [esi + 0x7c], cx
mov ecx, esi
mov word [esi + 0x7a], ax
call fcn.004e3930
push dword [esp + 0x20]
lea eax, [esp + 0x34]
push eax
push esi
call fcn.004ccbd0
jmp 0x4c9cea
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
lea eax, [esp + 0x30]
push 4
push eax
push esi
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], edx
call fcn.004ca3e0
add esp, 0xc
test eax, eax
je case.0x4c9023.39
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x2c]
push eax
push dword [esp + 0x70]
push dword [esp + 0x20]
push esi
call fcn.004ca880
add esp, 0x14
test eax, eax
jne case.0x4c9023.39
push dword [esp + 0x20]
lea eax, [esp + 0x34]
push eax
push esi
call fcn.004ccbd0
jmp 0x4c9cea
xor eax, eax
test ecx, ecx
mov ecx, dword [esp + 0x20]
setne al
and ecx, 1
xor eax, ecx
push eax
push dword [esi + 0x58]
push esi
call fcn.004cbb60
jmp 0x4c9cea
push 4
push ecx
lea eax, [esp + 0x38]
push eax
push esi
call fcn.004ccde0
add esp, 0x10
jmp case.0x4c9023.39
mov eax, edi
mov edx, 0x1000000
and eax, 0x1f000000
cmp edx, eax
sbb eax, eax
and ecx, 1
neg eax
xor edx, edx
cmp ecx, eax
cmove edi, edx
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 8]
movzx eax, byte [ecx + 5]
mov ecx, 0x8000
cmp eax, dword [esi + 0x6c]
jae 0x4c9cf6
mov dword [esi + 0x6c], eax
jmp 0x4c9cf6
mov edx, dword [esp + 8]
cmp edi, 0xf
jne 0x4c95b0
mov ecx, esi
call fcn.004e01e0
mov ecx, dword [esp + 0x28]
mov edx, eax
mov eax, dword [esi + 0x64]
mov dword [eax + ecx*4], edx
jmp 0x4c9cf1
cmp edi, 5
jne 0x4c95be
mov ecx, esi
call fcn.004e0280
mov edx, eax
mov eax, dword [esi + 0x64]
mov ecx, dword [esp + 0x28]
mov dword [eax + ecx*4], edx
jmp 0x4c9cf1
and edi, 0x1f000000
mov eax, 0x1000000
cmp eax, edi
sbb edi, edi
and edi, 0xff000001
add edi, 0x2007ffd
jmp case.0x4c9023.39
mov eax, edi
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x4c9614
mov ecx, esi
mov dword [esi + 0x7a], 0x45130000
mov word [esi + 0x78], di
call fcn.004e3930
mov edi, eax
jmp case.0x4c9023.39
cmp eax, 0xb000000
jne 0x4c9634
mov ecx, esi
mov dword [esi + 0x7a], 0x49137fff
mov word [esi + 0x78], di
call fcn.004e3930
mov edi, eax
jmp case.0x4c9023.39
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x78]
push 5
push eax
push esi
mov dword [esp + 0xac], edi
mov dword [esp + 0x88], ecx
call fcn.004ca3e0
add esp, 0xc
test eax, eax
je 0x4ca23c
push 0x402cbb
push esi
call fcn.004cce40
mov esi, dword [esi + 0x64]
mov dword [esp + 0x18], eax
push 2
lea edi, [eax*4]
mov eax, dword [esp + 0xbc]
add esi, edi
mov dword [esp + 0x34], edi
mov edi, dword [ebp + 8]
mov ecx, dword [edi + 0x54]
mov edi, dword [esp + 0x1c]
mov edx, dword [ecx + 0x10]
mov ecx, dword [esp + 0xa0]
mov dword [esi], eax
mov eax, dword [esp + 0x9c]
mov dword [edx + edi*8], eax
mov eax, edi
mov dword [edx + eax*8 + 4], ecx
mov eax, dword [esp + 0x18]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov dword [edx + edi*8 + 8], eax
mov eax, edi
push eax
mov dword [edx + eax*8 + 0xc], ecx
mov dword [esi + 8], 0x7fff
mov esi, dword [ebp + 8]
push esi
mov dword [edx + eax*8 + 0x14], 0xffffffff
call fcn.004cb600
mov eax, dword [esp + 0x3c]
add esp, 0x14
inc dword [esi + 0xb8]
add eax, 4
add dword [esi + 0x64], eax
mov eax, edi
inc eax
add dword [esi + 0x70], eax
mov eax, dword [esi + 0x6c]
add eax, dword [esi + 0x70]
cmp eax, 0xfa
jae 0x4ca26c
xor edi, edi
jmp case.0x4c9023.39
mov eax, edi
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x4c975d
mov eax, edi
and eax, 0x1f000000
cmp eax, 0x4000000
je 0x4c975d
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x30]
push 0x10
push eax
push esi
mov dword [esp + 0x64], edi
mov dword [esp + 0x40], ecx
call fcn.004ccad0
mov edi, eax
jmp 0x4c9cea
lea eax, [esp + 0x38]
push eax
push edi
push esi
call fcn.004e5f00
mov edi, eax
jmp 0x4c9cea
cmp dword [esp + 0x20], 0x1f
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov dword [esp + 0x58], eax
mov eax, ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], esi
mov dword [esp + 0x38], edx
mov edx, edi
mov dword [esp + 0x3c], esi
mov esi, dword [ebp + 8]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
je 0x4c9845
jmp 0x4c97c4
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x74]
movzx edi, word [eax]
mov eax, edx
shr eax, 0x18
and eax, 0x1f
shr edi, 0xb
sub eax, 0xe
cmp eax, 5
jbe 0x4c97ec
mov eax, edx
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x4c980e
mov ecx, dword [esp + 0xc]
mov eax, ecx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x4c9821
mov eax, ecx
and eax, 0x1f000000
cmp eax, 0x4000000
je 0x4c9821
push edi
lea eax, [esp + 0x34]
push eax
push esi
call fcn.004ccad0
mov edi, eax
jmp 0x4c9cea
lea eax, [edi + 0x1f]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x38]
push eax
push ecx
push edx
push esi
call fcn.004e5b50
add esp, 0x18
mov edi, eax
jmp case.0x4c9023.39
mov edx, dword [esp + 0x10]
mov eax, edx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x4c9863
mov eax, edx
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x4c9885
mov ecx, dword [esp + 0xc]
mov eax, ecx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x4c9899
mov eax, ecx
and eax, 0x1f000000
cmp eax, 0x4000000
je 0x4c9899
push 0xe
lea eax, [esp + 0x34]
push eax
push esi
call fcn.004ccad0
mov edi, eax
jmp 0x4c9cea
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x34]
push eax
push ecx
push edx
push esi
call fcn.004e5d80
add esp, 0x14
mov edi, eax
jmp case.0x4c9023.39
mov ecx, dword [esp + 0x10]
mov eax, ecx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x4c98d7
mov eax, ecx
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x4c98f5
mov eax, edi
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x4c9909
mov eax, edi
and eax, 0x1f000000
cmp eax, 0x4000000
je 0x4c9909
push 0xf
lea eax, [esp + 0x34]
push eax
push esi
call fcn.004ccad0
mov edi, eax
jmp 0x4c9cea
push 0x2e
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x38]
push eax
push edi
push ecx
push esi
call fcn.004e5b50
add esp, 0x18
mov edi, eax
jmp case.0x4c9023.39
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.004cb890
mov edi, eax
jmp 0x4c9cea
mov edx, dword [esp + 8]
mov ecx, 0x8000
cmp edx, dword [esi + 0x6c]
jbe 0x4c9cf6
mov eax, dword [esi + 0x64]
mov dword [eax + edx*4 - 4], 0
jmp 0x4c9cf6
movsx edx, di
mov ecx, esi
call fcn.004e0160
mov edi, eax
jmp case.0x4c9023.39
mov edx, dword [esp + 8]
cmp edx, edi
ja 0x4c9984
mov eax, dword [esi + 0x64]
mov dword [eax + edx*4], 0x7fff
inc edx
cmp edx, edi
jbe 0x4c9975
mov ecx, 0x8000
cmp edi, dword [esi + 0x6c]
jb 0x4c9cf6
lea eax, [edi + 1]
mov dword [esi + 0x6c], eax
jmp 0x4c9cf6
mov eax, dword [esi + 0x60]
not edi
push 0xa
mov eax, dword [eax + 0x10]
push dword [eax + edi*4]
push esi
call fcn.004e0580
mov edi, eax
jmp 0x4c9cea
push 0
push edi
push esi
call fcn.004cceb0
mov edi, eax
jmp 0x4c9cea
push edi
push dword [esp + 0xc]
push esi
call fcn.004cceb0
jmp 0x4c9cea
mov eax, dword [esi + 0x5c]
push esi
mov eax, dword [eax + 8]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], 0xfffffff4
call fcn.004c84a0
add esp, 4
movzx eax, ax
mov ecx, esi
mov dword [esi + 0x7a], 0x450b0001
mov word [esi + 0x78], ax
call fcn.004e3930
mov dword [esp + 0x58], eax
lea eax, [esp + 0x30]
mov dword [esp + 0x6c], 0x64
push eax
push esi
call fcn.004c85a0
add esp, 8
mov edi, eax
jmp case.0x4c9023.39
movd xmm0, edi
mov edx, edi
cvtdq2pd xmm0, xmm0
mov ecx, esi
movsd qword [esp + 0x38], xmm0
call fcn.004e0160
mov dword [esp + 0x5c], eax
jmp case.0x4c9023.56
lea eax, [esp + 0x30]
mov dword [esp + 0x6c], 0
push eax
push esi
call fcn.004c85a0
add esp, 8
mov edi, eax
jmp case.0x4c9023.39
mov eax, dword [esi + 0x54]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x18], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
sub eax, edx
mov dword [esp + 0x14], edx
mov edx, dword [esp + 8]
sar eax, 3
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], edx
mov eax, dword [eax + edx*8 - 8]
mov dword [esp + 0x78], eax
mov eax, dword [esi + 0x64]
mov dword [esp + 0x7c], 0xfffffff4
mov eax, dword [eax + edx*4 - 4]
test eax, eax
jne 0x4c9abc
lea eax, [edx - 1]
push eax
push esi
call fcn.004cd910
mov edx, dword [esp + 0x10]
add esp, 8
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xb4], 0
cmp edx, dword [esp + 0x10]
jae 0x4c9bbb
mov edi, dword [esp + 0x28]
nop dword [eax]
movd xmm0, ecx
mov edx, ecx
cvtdq2pd xmm0, xmm0
mov ecx, esi
movsd qword [esp + 0x80], xmm0
call fcn.004e0160
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xa4], eax
mov eax, dword [ecx + edi*8]
mov ecx, dword [ecx + edi*8 + 4]
mov dword [esp + 0x88], eax
mov eax, dword [esi + 0x64]
mov dword [esp + 0x8c], ecx
mov eax, dword [eax + edi*4]
test eax, eax
je 0x4c9b2d
mov dword [esp + 0xa8], eax
jmp 0x4c9b91
mov eax, dword [esi + 0x54]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + edi*8 + 4]
cmp eax, 0xfffffff2
jae 0x4c9b43
mov eax, 0xe
jmp 0x4c9b45
not eax
mov dword [esp + 0x24], eax
mov ecx, esi
or eax, 0x4780
mov word [esi + 0x7c], ax
mov ax, word [esi + 0x70]
add ax, di
mov word [esi + 0x78], ax
mov eax, 4
mov word [esi + 0x7a], ax
call fcn.004e0060
mov ecx, dword [esp + 0x24]
mov edx, eax
cmp ecx, 2
ja 0x4c9b84
imul edx, ecx, 0xffffff
add edx, 0x7fff
mov eax, dword [esi + 0x64]
mov dword [eax + edi*4], edx
mov dword [esp + 0xa8], edx
lea eax, [esp + 0x78]
push eax
push esi
call fcn.004c85a0
mov ecx, dword [esp + 0x20]
inc edi
inc ecx
add esp, 8
mov dword [esp + 0x18], ecx
cmp edi, dword [esp + 0x10]
jb 0x4c9ae0
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esi + 0x6c], edx
jmp 0x4c9cf1
mov eax, edi
mov ecx, 0x801
and eax, 0x7ff
shr edi, 0xb
cmp eax, 0x7ff
mov word [esi + 0x7a], di
cmove eax, ecx
mov ecx, 0x518b
mov word [esi + 0x7c], cx
mov ecx, esi
mov word [esi + 0x78], ax
call fcn.004e3930
mov edi, eax
jmp case.0x4c9023.39
mov eax, dword [esi + 0x60]
not edi
push 0xb
mov eax, dword [eax + 0x10]
push dword [eax + edi*4]
push esi
call fcn.004e0580
add esp, 0xc
movzx eax, ax
mov ecx, esi
mov dword [esi + 0x7a], 0x528b0000
mov word [esi + 0x78], ax
call fcn.004e3930
mov edi, eax
jmp case.0x4c9023.39
mov ecx, dword [esp + 8]
mov edx, dword [esi + 0x64]
lea edi, [ecx - 3]
mov eax, dword [edx + edi*4]
test eax, eax
jne 0x4c9c4d
push edi
push esi
call fcn.004cd910
mov edx, dword [esi + 0x64]
add esp, 8
mov ecx, dword [esp + 8]
mov dword [edx + ecx*4], eax
lea edi, [ecx - 2]
mov edx, dword [esi + 0x64]
mov eax, dword [edx + edi*4]
test eax, eax
jne 0x4c9c6e
push edi
push esi
call fcn.004cd910
mov edx, dword [esi + 0x64]
add esp, 8
mov ecx, dword [esp + 8]
mov dword [edx + ecx*4 + 4], eax
mov edx, dword [esi + 0x64]
mov eax, dword [edx + ecx*4 - 4]
test eax, eax
jne 0x4c9c91
lea eax, [ecx - 1]
push eax
push esi
call fcn.004cd910
mov edx, dword [esi + 0x64]
add esp, 8
mov ecx, dword [esp + 8]
mov edi, dword [esp + 8]
mov dword [edx + ecx*4 + 8], eax
mov eax, dword [esi + 0x54]
mov edx, dword [eax + 0x10]
mov eax, dword [edx + ecx*8 - 0x18]
mov ecx, dword [edx + ecx*8 - 0x14]
mov dword [edx + edi*8], eax
mov eax, edi
mov dword [edx + eax*8 + 4], ecx
mov ecx, edi
mov eax, dword [edx + eax*8 - 0x10]
mov dword [edx + edi*8 + 8], eax
mov eax, edi
mov ecx, dword [edx + ecx*8 - 0xc]
mov dword [edx + eax*8 + 0xc], ecx
mov ecx, edi
mov eax, dword [edx + eax*8 - 8]
mov dword [edx + edi*8 + 0x10], eax
mov eax, edi
mov edi, dword [esp + 0xc]
mov ecx, dword [edx + ecx*8 - 4]
mov dword [edx + eax*8 + 0x14], ecx
lea eax, [edi - 1]
push eax
push dword [esp + 0xc]
push esi
call fcn.004c84d0
add esp, 0xc
mov edx, dword [esp + 8]
mov ecx, 0x8000
mov eax, dword [esp + 0x74]
mov al, byte [eax]
and al, 7
cmp al, 1
jne 0x4c9d17
test edi, edi
je 0x4c9d17
mov eax, dword [esi + 0x64]
mov dword [eax + edx*4], edi
cmp edx, dword [esi + 0x6c]
jb 0x4c9d17
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x610]
add eax, 0x8001
cmp dword [esi + 8], eax
ja 0x4ca244
sub ecx, dword [esi + 0x614]
cmp dword [esi + 0x14], ecx
jb 0x4ca244
jmp 0x4c8ddb
mov eax, dword [esi + 0x54]
mov edi, dword [eax + 0x14]
sub edi, dword [eax + 0x10]
sar edi, 3
sub edi, dword [esp + 8]
jmp case.0x4c9023.66
mov eax, dword [esi + 0x54]
mov ecx, dword [esp + 8]
mov edi, dword [eax + 0x14]
sub edi, dword [eax + 0x10]
sar edi, 3
sub edi, ecx
jmp 0x4c9d69
mov ecx, dword [esp + 8]
lea eax, [edi - 1]
mov dword [esp + 0x14], ecx
push eax
push ecx
push esi
call fcn.004cb600
mov eax, dword [esi + 0x54]
add esp, 0xc
mov eax, dword [eax + 0x10]
mov ecx, dword [eax - 4]
mov eax, ecx
and eax, 7
cmp al, 3
jne 0x4c9db4
sar ecx, 3
add dword [esi + 0xb8], 0xffffffff
js 0x4ca24c
sub dword [esi + 0x70], ecx
mov eax, ecx
neg eax
shl eax, 2
add dword [esi + 0x64], eax
mov eax, dword [esp + 8]
add eax, ecx
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x6c]
mov ecx, dword [esi + 0x64]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [esp + 0x18]
lea eax, [ecx + eax*4]
push eax
lea eax, [ecx - 4]
push eax
call fcn.0050d110
inc dword [esi + 0xb4]
add esp, 0xc
mov eax, dword [esi + 0xb4]
cmp eax, dword [esi + 0xb0]
jg 0x4ca254
jmp case.0x4c9023.39
mov eax, dword [esp + 0x10]
dec eax
push eax
push dword [esp + 0xc]
push esi
call fcn.004cd290
jmp 0x4c9cea
mov eax, dword [esi + 0x54]
mov edi, dword [eax + 0x14]
sub edi, dword [eax + 0x10]
sar edi, 3
sub edi, dword [esp + 8]
inc edi
cmp dword [esi + 0x960], 0x66
jne 0x4c9e49
xor eax, eax
mov dword [esi + 0x7a], 0x15800000
mov ecx, esi
mov word [esi + 0x78], ax
call fcn.004e3930
push esi
mov dword [esi + 0x958], 0
call fcn.004c6220
add esp, 4
lea eax, [edi - 1]
push eax
push dword [esp + 0xc]
push esi
call fcn.004ca970
jmp 0x4c9cea
mov ecx, dword [esp + 0x1c]
push 0
push ecx
push esi
call fcn.004cbc10
mov edx, dword [esp + 0x14]
add esp, 0xc
mov ecx, 0x8000
test eax, eax
je 0x4c9cf6
mov eax, dword [esi + 8]
mov dword [esi + 0x11c], eax
jmp 0x4c9cf6
mov ecx, dword [esp + 0x1c]
push 0
push ecx
push esi
call fcn.004cbc10
add esp, 0xc
test eax, eax
je case.0x4c9023.39
mov eax, dword [esp + 0x1c]
movzx eax, word [eax + edi*4 - 0x1fffe]
push eax
push 1
push esi
call fcn.004cb460
jmp 0x4c9cea
mov eax, dword [esp + 0x1c]
push 1
lea eax, [eax + edi*4]
add eax, 0xfffe0000
push eax
push esi
call fcn.004cbc10
push eax
push dword [esp + 0x2c]
push esi
call fcn.004cc930
add esp, 0x18
jmp case.0x4c9023.39
mov eax, dword [esp + 0x1c]
push dword [eax]
push esi
call fcn.004cc700
push eax
push dword [esp + 0x28]
push esi
call fcn.004cc930
add esp, 0x14
jmp case.0x4c9023.39
mov ecx, dword [esp + 0x10]
push ecx
push dword [esp + 0xc]
push esi
call fcn.004cc770
push eax
push dword [esp + 0x2c]
push esi
call fcn.004cc930
add esp, 0x18
jmp case.0x4c9023.39
push 1
push dword [esp + 0xc]
push esi
call fcn.004cc910
push eax
push dword [esp + 0x2c]
push esi
call fcn.004cc930
add esp, 0x18
jmp case.0x4c9023.39
mov eax, dword [esi + 0x138]
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffe0000
push 1
mov eax, dword [eax + edi*4]
movzx eax, word [eax + 0x2e]
lea eax, [ecx + eax*4]
push eax
push esi
call fcn.004cbc10
push eax
push edi
push esi
call fcn.004cca50
add esp, 0x18
jmp case.0x4c9023.39
mov eax, dword [esi + 0x138]
mov eax, dword [eax + edi*4]
push dword [eax + 0x2c]
push esi
call fcn.004cc700
push eax
push edi
push esi
call fcn.004cca50
add esp, 0x14
jmp case.0x4c9023.39
mov eax, dword [esi + 0x138]
mov eax, dword [eax + edi*4]
mov eax, dword [eax + 0x2c]
and eax, 0xff
cmp eax, 0x49
je 0x4c9fcb
cmp eax, 0x4a
je 0x4c9fcb
cmp eax, 0x4b
je 0x4c9fcb
cmp eax, 0x4c
je 0x4c9fcb
cmp eax, 0x46
je 0x4c9fcb
mov eax, 1
jmp 0x4c9fcd
xor eax, eax
push eax
push dword [esp + 0xc]
push esi
call fcn.004cc910
push eax
push edi
push esi
call fcn.004cca50
add esp, 0x18
jmp case.0x4c9023.39
mov edx, dword [esp + 8]
mov ecx, 0x8000
cmp edx, dword [esi + 0x6c]
jae 0x4c9cf6
mov dword [esi + 0x6c], edx
jmp 0x4c9cf6
mov eax, dword [esi + 0x54]
mov ecx, dword [esp + 8]
add ecx, 0xfffffffd
mov edx, dword [eax + 0x10]
cmp dword [edx + ecx*8 + 4], 0xfffffff7
jne 0x4ca264
mov eax, dword [edx + ecx*8]
cmp byte [eax + 6], 4
jne 0x4ca264
cmp dword [edx + ecx*8 + 0xc], 0xfffffff4
jne 0x4ca264
cmp dword [edx + ecx*8 + 0x14], 0xffffffff
jne 0x4ca264
mov eax, dword [esi + 0x64]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x4ca051
push ecx
push esi
call fcn.004cd910
add esp, 8
mov ecx, esi
mov dword [esi + 0x7a], 0x45100003
mov word [esi + 0x78], ax
call fcn.004e3930
mov edi, dword [ebp + 8]
mov edx, 4
mov ecx, edi
mov esi, eax
call fcn.004e0160
mov word [edi + 0x78], si
mov esi, edi
movzx ecx, ax
mov eax, 0x893
mov word [edi + 0x7c], ax
mov word [esi + 0x7a], cx
mov ecx, esi
call fcn.004e3930
mov edi, dword [esp + 8]
mov eax, dword [esi + 0x64]
lea ecx, [edi - 2]
cmp dword [eax + ecx*4], 0
jne 0x4ca0ae
push ecx
push esi
call fcn.004cd910
mov eax, dword [esi + 0x64]
add esp, 8
cmp dword [eax + edi*4 - 4], 0
jne 0x4ca0c2
lea eax, [edi - 1]
push eax
push esi
call fcn.004cd910
add esp, 8
xor edx, edx
mov ecx, esi
call fcn.004e0160
mov edx, dword [esp + 8]
or eax, 0x100000
mov ecx, dword [esi + 0x64]
mov edi, dword [esp + 0xc]
mov dword [ecx + edx*4 - 4], eax
mov dword [esi + 0x6c], edx
jmp 0x4c9cf1
push esi
call fcn.004cc200
mov eax, dword [esi + 0x138]
add esp, 4
mov eax, dword [eax + edi*4]
mov dword [esp + 0x28], eax
cmp byte [eax + 0x4c], 7
jne 0x4ca12c
push edi
push esi
call fcn.004c81c0
mov ecx, dword [esi + 0x58]
add esp, 8
mov eax, dword [ecx]
mov dword [esi + 0x934], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x930], ecx
mov eax, dword [eax + 0x2c]
mov dword [ecx], eax
jmp case.0x4c9023.39
mov eax, dword [esi + 0x58]
mov dword [esi + 0xac], 0
cmp eax, dword [esi + 0x920]
jne 0x4ca161
mov eax, dword [esi + 0xbc]
add eax, dword [esi + 0xb8]
jne 0x4ca161
movzx eax, word [esi + 0x40]
push eax
push 3
push esi
call fcn.004cb460
jmp 0x4c9cea
push edi
push 1
push esi
call fcn.004cb460
jmp 0x4c9cea
mov eax, dword [esi + 0x60]
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x28], eax
inc edx
mov dword [esp + 0x18], edx
movzx eax, byte [eax + 7]
add eax, dword [esi + 0x70]
add eax, edx
cmp eax, 0xfa
jae 0x4ca26c
mov ecx, dword [esi + 0x64]
shl edx, 2
mov dword [esp + 0x14], edx
mov eax, dword [ecx - 4]
mov dword [ecx + edx - 4], eax
mov eax, dword [esp + 0x28]
movzx ecx, byte [eax + 6]
cmp ecx, dword [esi + 0x6c]
cmovae ecx, dword [esi + 0x6c]
xor edx, edx
mov dword [esp + 0x28], ecx
test ecx, ecx
je 0x4ca1e4
mov edi, dword [esp + 0x14]
mov ecx, dword [esi + 0x64]
lea edi, [edi + 4]
mov eax, dword [ecx + edx*4]
mov dword [ecx + edi - 4], eax
mov eax, dword [esi + 0x64]
mov ecx, dword [esp + 0x28]
mov dword [eax + edx*4], 0x7fff
inc edx
cmp edx, ecx
jb 0x4ca1c0
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
add dword [esi + 0x64], eax
inc dword [esi + 0xb8]
mov eax, dword [esp + 0x18]
add dword [esi + 0x70], eax
mov dword [esi + 0x6c], ecx
push esi
call fcn.004cc200
push 0
push esi
call fcn.004c81c0
jmp 0x4c9cea
push esi
call fcn.004e99f0
add esp, 4
jmp case.0x4c9023.39
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
push 7
push esi
movsd qword [esi + 0x950], xmm0
call fcn.004a52f0
push 8
push esi
call fcn.004a52b0
push 0x12
push esi
call fcn.004a52b0
push 2
push esi
call fcn.004a52b0
push 0x10
push esi
call fcn.004a52b0
push 0xa
push esi
call fcn.004a52b0
push 5
push esi
call fcn.004a52b0
push 0
push esi
call fcn.004a52b0
push 3
push esi
call fcn.004a52b0
mov al, 0x8c
dec esp
add dl, dl
mov word [eax + eax - 0x2e], cs
mov word [eax + eax + 9], cs
lea ecx, [eax + eax + 0x51]
lea ecx, [eax + eax - 0x69]
lea ecx, [eax + eax - 0x44]
invalid