Function at 0x4df0c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
push ebx
push esi
push edi
mov edi, dword [ebp + 0x14]
mov ebx, ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ebx
mov al, byte [edi]
mov esi, dword [ebx + 8]
mov byte [esp + 0xf], al
movzx eax, al
mov dword [esp + 0x38], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x34], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 0
test ecx, ecx
je 0x4df109
movzx ecx, byte [ecx + 1]
jmp 0x4df10b
xor ecx, ecx
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x30], ecx
test eax, eax
je 0x4df120
cmp dword [eax], 0
jne 0x4df178
xor eax, eax
mov dword [ebp + 0xc], eax
test ecx, ecx
jne 0x4df178
mov edx, dword [edx + 0xc]
test edx, edx
jle 0x4df178
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4df14a
push 1
push dword [ebp + 0x18]
mov ecx, esi
push edx
mov edx, 0x31
call fcn.00491e40
add esp, 0xc
jmp 0x4df178
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp + 0x18]
mov dword [eax + ecx*4], 0x31
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 1
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x18]
mov edi, dword [edi + 0xc]
mov dword [esp + 0x20], edi
mov eax, dword [edx + 0x1c]
mov edx, dword [eax]
mov dword [esp + 0x10], edx
test edi, edi
jne 0x4df1c7
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x4df1ac
mov eax, dword [ecx]
test byte [ecx + 0x20], 1
mov eax, dword [eax]
lea edi, [eax + 1]
cmovne edi, eax
add dword [ebx + 0x2c], edi
mov dword [esp + 0x24], edi
mov eax, dword [ebx + 0x2c]
mov esi, dword [ebp + 0x14]
lea edi, [eax + 1]
add eax, edx
mov dword [esi + 0xc], edi
mov esi, dword [esp + 0x34]
mov dword [esp + 0x20], edi
mov dword [ebx + 0x2c], eax
jmp 0x4df1de
mov ecx, dword [ebx + 0x2c]
lea eax, [edi + edx]
cmp eax, ecx
jle 0x4df1db
lea eax, [ecx + edx]
mov dword [esp + 0x20], edi
mov dword [ebx + 0x2c], eax
mov ecx, dword [ebp + 0xc]
cmp dword [ebp + 8], 0
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x28], edi
mov dword [eax + 0x10], edx
jl 0x4df259
test edx, edx
jle 0x4df38b
xor ebx, ebx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4df21d
lea eax, [edi + ebx]
mov edx, 0x5d
push eax
push ebx
push dword [ebp + 8]
mov ecx, esi
call fcn.00491e40
mov edx, dword [esp + 0x1c]
add esp, 0xc
jmp 0x4df24b
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x5d
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0x10], 0
lea ecx, [eax + ecx*4]
mov eax, dword [ebp + 8]
mov dword [ecx + 4], eax
lea eax, [edi + ebx]
mov dword [ecx + 0xc], eax
inc ebx
cmp ebx, edx
jl 0x4df1f8
mov ebx, dword [esp + 0x1c]
jmp 0x4df38b
mov ah, byte [esp + 0xf]
cmp ah, 3
je 0x4df38b
cmp ah, 0xa
je 0x4df279
cmp ah, 9
je 0x4df279
cmp ah, 0xd
je 0x4df279
xor al, al
jmp 0x4df27b
mov al, 1
mov byte [esp + 0x2c], al
test ecx, ecx
je 0x4df342
cmp dword [esp + 0x30], 0
jne 0x4df342
cmp ah, 0xc
je 0x4df342
cmp ah, 0xe
je 0x4df342
or al, 0xc
mov byte [esp + 0x2c], al
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x40], eax
cmp eax, dword [ecx]
jge 0x4df2fd
mov edi, dword [ebp + 0xc]
mov ebx, eax
lea esi, [ebx + ebx*4]
shl esi, 2
movzx eax, word [esi + ecx + 0x18]
test eax, eax
je 0x4df2e3
lea ecx, [eax + eax*4]
mov dx, bx
mov eax, dword [esp + 0x18]
sub dx, word [edi + 4]
inc dx
mov eax, dword [eax + 0x1c]
mov word [eax + ecx*4 + 4], dx
mov ecx, dword [edi]
inc ebx
add esi, 0x14
cmp ebx, dword [ecx]
jl 0x4df2c2
mov esi, dword [esp + 0x34]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x1c]
mov eax, dword [ecx]
mov dword [esp + 0x3c], eax
test eax, eax
jle 0x4df342
lea esi, [ecx + 0x18]
mov ebx, edi
movzx ecx, word [esi]
lea esi, [esi + 0x14]
xor eax, eax
test cx, cx
cmove eax, ebx
mov ebx, eax
lea eax, [edx - 1]
cmove eax, edx
sub dword [esp + 0x3c], 1
mov edx, eax
jne 0x4df313
mov esi, dword [esp + 0x34]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x18]
mov al, byte [esp + 0x2c]
mov dword [esp + 0x48], edi
mov byte [esp + 0x4c], al
cmp dword [ecx + 8], 0
je 0x4df377
test al, 8
je 0x4df377
cmp dword [esp + 0x24], 0
jle 0x4df377
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x48]
mov dword [esp + 0x28], 0
mov dword [eax + 0x24], edx
jmp 0x4df38f
push dword [esp + 0x2c]
mov edx, dword [ecx + 0x1c]
mov ecx, ebx
push 0
push edi
call fcn.004b1490
add esp, 0xc
mov ecx, dword [esp + 0x18]
cmp dword [esp + 0x30], 0
je 0x4df3f7
push dword [esp + 0x20]
mov eax, dword [ebp + 0x10]
push dword [ecx + 0x1c]
mov ecx, ebx
push dword [ebp + 0x18]
movzx edi, byte [eax + 1]
push dword [eax + 4]
mov edx, edi
call fcn.004dec30
mov ecx, dword [ebp + 0x10]
mov edx, edi
push dword [ecx + 8]
mov ecx, ebx
push eax
call fcn.004defd0
mov eax, dword [ebp + 0xc]
add esp, 0x18
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x4df44b
mov edi, dword [edx + 0xc]
test edi, edi
jle 0x4df44b
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4df413
push 1
push dword [ebp + 0x18]
lea edx, [eax + 0x31]
mov ecx, esi
push edi
call fcn.00491e40
mov edi, dword [esp + 0x2c]
add esp, 0xc
mov edx, dword [esp + 0x18]
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x38]
dec ecx
cmp ecx, 0xe
ja case.0x4df40c.4
jmp dword [ecx*4 + 0x4e00ec]
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp + 0x18]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x31
mov dword [eax + ecx*4 + 0xc], 1
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4df3fb
mov edi, dword [esp + 0x20]
jmp 0x4df3fe
mov al, byte [ebx + 0x13]
test al, al
jne 0x4df460
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x4df46f
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x2c], eax
cmp dword [esi + 0x78], ecx
jg 0x4df496
push eax
push dword [esp + 0x14]
mov edx, 0x60
mov ecx, esi
push edi
call fcn.00491e40
mov edx, dword [esp + 0x38]
add esp, 0xc
jmp 0x4df4c5
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x40], ecx
cmp dword [esi + 0x78], ecx
jg 0x4df4ea
push edi
push edx
push dword [esp + 0x1c]
mov edx, 0x89
mov ecx, esi
call fcn.00491e40
add esp, 0xc
mov ecx, eax
jmp 0x4df51d
mov ebx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4df538
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x10]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je case.0x4df40c.4
mov al, byte [ebx + 0x13]
cmp al, 8
jae case.0x4df40c.4
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ecx
inc byte [ebx + 0x13]
jmp case.0x4df40c.4
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4df586
push dword [esp + 0x10]
mov edx, 0x8b
mov ecx, esi
push edi
push dword [esp + 0x1c]
call fcn.00491e40
add esp, 0xc
jmp case.0x4df40c.4
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x8b
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp case.0x4df40c.4
mov edx, dword [esp + 0x24]
inc edx
cmp edx, 1
jne 0x4df5ec
mov al, byte [ebx + 0x13]
test al, al
jne 0x4df5d7
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x20], eax
jmp 0x4df612
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov dword [esp + 0x20], eax
jmp 0x4df612
mov ecx, dword [ebx + 0x20]
mov dword [esp + 0x20], ecx
cmp edx, dword [ebx + 0x1c]
jg 0x4df603
sub dword [ebx + 0x1c], edx
lea eax, [edx + ecx]
mov dword [ebx + 0x20], eax
jmp 0x4df612
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x20], ecx
mov dword [ebx + 0x2c], eax
mov eax, dword [esp + 0x20]
add eax, dword [esp + 0x24]
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x34], eax
cmp dword [esi + 0x78], ecx
jg 0x4df63d
push eax
push dword [esp + 0x14]
mov edx, 0x60
mov ecx, esi
push edi
call fcn.00491e40
add esp, 0xc
jmp 0x4df66c
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0xf], 5
jne 0x4df775
mov ecx, dword [esi + 0x74]
mov edx, dword [esp + 0x14]
inc edx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x38], edx
lea eax, [ecx + 4]
mov dword [esp + 0x3c], eax
cmp dword [esi + 0x78], ecx
jg 0x4df6b0
push dword [esp + 0x20]
mov ecx, esi
push eax
push edx
mov edx, 0x1f
call fcn.00491e40
mov edx, dword [esp + 0x2c]
add esp, 0xc
mov ecx, eax
jmp 0x4df6e7
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4df702
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x40], ecx
cmp dword [esi + 0x78], ecx
jg 0x4df727
push edi
push edx
push dword [esp + 0x40]
mov edx, 0x89
mov ecx, esi
call fcn.00491e40
add esp, 0xc
mov ecx, eax
jmp 0x4df75a
mov ebx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4df775
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x10]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4df79f
push dword [esp + 0x24]
mov edx, eax
mov ecx, ebx
push 1
push dword [esp + 0x30]
push dword [esp + 0x40]
push dword [esp + 0x28]
call fcn.004de3e0
add esp, 0x14
jmp 0x4df88d
mov al, byte [ebx + 0x13]
test al, al
jne 0x4df7ae
inc dword [ebx + 0x2c]
mov edi, dword [ebx + 0x2c]
jmp 0x4df7bd
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov edi, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4df7e1
push 0
push edi
push dword [esp + 0x1c]
mov edx, 0x7e
mov ecx, esi
call fcn.00491e40
mov edx, dword [esp + 0x20]
add esp, 0xc
jmp 0x4df810
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x7e
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4df82f
push edi
push dword [esp + 0x24]
mov ecx, esi
push edx
mov edx, 0x7f
call fcn.00491e40
add esp, 0xc
jmp 0x4df85e
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x7f
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4df875
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
test edi, edi
je 0x4df88d
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4df88d
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edi
inc byte [ebx + 0x13]
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jne 0x4df8a0
mov ecx, dword [esp + 0x20]
jmp 0x4df53c
cmp eax, dword [ebx + 0x1c]
jle case.0x4df40c.4
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x20]
mov dword [ebx + 0x20], eax
jmp case.0x4df40c.4
test eax, eax
jne 0x4dfba5
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
mov dword [esp + 0x34], eax
mov al, byte [ebx + 0x13]
test al, al
jne 0x4df8d9
inc dword [ebx + 0x2c]
mov ebx, dword [ebx + 0x2c]
jmp 0x4df8e8
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov ebx, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4df907
push 0
push dword [ebp + 0x1c]
mov edx, 0x32
mov ecx, esi
push edi
call fcn.00491e40
add esp, 0xc
jmp 0x4df935
mov edx, dword [ebp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x10]
mov ecx, dword [esi + 0x74]
shr eax, 0x1f
sub edx, eax
add eax, edi
mov dword [esp + 0x40], eax
cmp dword [esi + 0x78], ecx
jg 0x4df964
push ebx
push edx
push eax
mov edx, 0x60
mov ecx, esi
call fcn.00491e40
add esp, 0xc
jmp 0x4df993
mov edi, dword [esp + 0x40]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x34], 0
mov edx, dword [esi + 0x74]
mov eax, dword [esi + 0x78]
jge 0x4df9ee
cmp eax, edx
jg 0x4df9be
push edi
push ebx
push dword [esp + 0x1c]
mov edx, 0x7f
mov ecx, esi
call fcn.00491e40
add esp, 0xc
jmp 0x4e0086
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x7f
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4e0086
cmp eax, edx
jg 0x4dfa0b
push edi
push ebx
push dword [esp + 0x1c]
mov edx, 0x89
mov ecx, esi
call fcn.00491e40
add esp, 0xc
mov edx, eax
jmp 0x4dfa3a
mov edi, dword [esp + 0x14]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4e0086
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x34]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x4e0086
test eax, eax
jne 0x4dfba5
mov al, byte [ebx + 0x13]
test al, al
jne 0x4dfa75
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
jmp 0x4dfa84
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov ecx, dword [ebx + eax*4 + 0x98]
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x10]
push eax
mov dword [esp + 0x30], ecx
push dword [edx + 0x14]
mov edx, 0x60
push ecx
push eax
push edi
mov ecx, esi
call fcn.004921e0
mov edx, dword [esi + 0x74]
add esp, 0x14
cmp dword [esi + 0x78], edx
jg 0x4dfaca
push edi
mov edi, dword [esp + 0x30]
mov edx, 0x89
push edi
push dword [esp + 0x1c]
mov ecx, esi
call fcn.00491e40
add esp, 0xc
mov edx, eax
jmp 0x4dfb01
mov ebx, dword [esp + 0x14]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4dfb1c
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x10]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
test edi, edi
je 0x4e0086
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4e0086
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edi
inc byte [ebx + 0x13]
jmp 0x4e0086
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4dfb65
push 0
push dword [esp + 0x18]
mov edx, 0x47
mov ecx, esi
push 1
call fcn.00491e40
add esp, 0xc
jmp case.0x4df40c.4
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp case.0x4df40c.4
test eax, eax
je 0x4e0086
push dword [esp + 0x24]
mov ecx, ebx
push dword [esp + 0x14]
push dword [esp + 0x30]
push edi
push edx
mov edx, eax
call fcn.004de3e0
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test eax, eax
jne 0x4dfba5
cmp byte [esp + 0xf], 0xd
mov ecx, dword [esi + 0x74]
mov eax, dword [esi + 0x78]
jne 0x4dfc2e
mov edx, dword [ebp + 0x14]
mov edx, dword [edx + 4]
cmp eax, ecx
jg 0x4dfbfa
push 0
push 0
push edx
mov edx, 0xe
mov ecx, esi
call fcn.00491e40
add esp, 0xc
jmp 0x4e0086
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4e0086
cmp eax, ecx
jg 0x4dfc4d
push 0
push dword [esp + 0x14]
mov edx, 0x53
mov ecx, esi
push edi
call fcn.00491e40
add esp, 0xc
jmp 0x4e0086
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x53
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
jmp 0x4dfc19
mov eax, dword [ebp + 0x14]
mov cl, byte [ebx + 0x13]
mov dword [esp + 0x3c], 0
mov eax, dword [eax + 0x18]
mov dword [esp + 0x44], eax
mov edx, dword [eax]
mov dword [esp + 0x30], edx
test cl, cl
jne 0x4dfc96
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebx + 0x2c], eax
jmp 0x4dfca5
dec cl
movzx eax, cl
mov byte [ebx + 0x13], cl
mov eax, dword [ebx + eax*4 + 0x98]
add edx, 2
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], edx
cmp edx, 1
jne 0x4dfcda
test cl, cl
jne 0x4dfcc5
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x24], eax
jmp 0x4dfd00
dec cl
movzx eax, cl
mov byte [ebx + 0x13], cl
mov eax, dword [ebx + eax*4 + 0x98]
mov dword [esp + 0x24], eax
jmp 0x4dfd00
mov ecx, dword [ebx + 0x20]
mov dword [esp + 0x24], ecx
cmp edx, dword [ebx + 0x1c]
jg 0x4dfcf1
sub dword [ebx + 0x1c], edx
lea eax, [edx + ecx]
mov dword [ebx + 0x20], eax
jmp 0x4dfd00
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x24], ecx
mov dword [ebx + 0x2c], eax
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x30]
mov dword [esp + 0x40], eax
lea ecx, [eax + 1]
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x2c], ecx
cmp byte [esp + 0xf], 6
mov dword [esp + 0x38], eax
jne 0x4dfd9c
mov edx, dword [esi + 0x74]
mov dword [esp + 0x3c], edx
cmp dword [esi + 0x78], edx
jg 0x4dfd4a
push edi
push 0
push eax
mov edx, 0x1f
mov ecx, esi
call fcn.00491e40
mov edx, eax
add esp, 0xc
mov dword [esp + 0x3c], edx
jmp 0x4dfd7d
mov ebx, dword [esp + 0x38]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4dfd98
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x10]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4dfdbf
push ecx
push dword [esp + 0x14]
mov edx, 0x60
mov ecx, esi
push edi
call fcn.00491e40
mov edx, dword [esp + 0x38]
add esp, 0xc
jmp 0x4dfdee
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0xf], 6
jne 0x4dfe5f
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4dfe15
push 0
push edx
push dword [esp + 0x40]
mov edx, 0x89
mov ecx, esi
call fcn.00491e40
add esp, 0xc
jmp 0x4dfe48
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4dfe5f
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
cmp dword [esp + 0x30], 0
jle 0x4dfee0
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x24]
add eax, 0x18
mov dword [esp + 0x38], eax
movzx eax, word [eax]
lea edx, [edi - 1]
mov ecx, dword [esi + 0x74]
add edx, eax
cmp dword [esi + 0x78], ecx
jg 0x4dfe9a
push 0
push ebx
push edx
mov edx, 0x50
mov ecx, esi
call fcn.00491e40
add esp, 0xc
jmp 0x4dfec9
mov edi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x50
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x38]
inc ebx
add eax, 0x14
sub dword [esp + 0x30], 1
mov dword [esp + 0x38], eax
jne 0x4dfe75
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esi + 0x74]
mov edx, dword [esp + 0x40]
mov edi, dword [esp + 0x14]
cmp dword [esi + 0x78], ecx
jg 0x4dff05
push 0
push edx
push edi
mov edx, 0x7d
mov ecx, esi
call fcn.00491e40
add esp, 0xc
jmp 0x4dff30
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x7d
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4dff59
push dword [esp + 0x28]
mov edx, 0x60
mov ecx, esi
push dword [esp + 0x38]
push dword [esp + 0x2c]
call fcn.00491e40
mov edx, dword [esp + 0x30]
add esp, 0xc
jmp 0x4dff90
mov ebx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov edx, dword [esp + 0x24]
lea ecx, [ecx + ecx*4]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x28]
mov dword [eax + ecx*4 + 0xc], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x44], ecx
cmp dword [esi + 0x78], ecx
jg 0x4dffb9
push edx
push dword [esp + 0x2c]
mov edx, 0x89
mov ecx, esi
push edi
call fcn.00491e40
mov edx, dword [esp + 0x30]
add esp, 0xc
mov ecx, eax
jmp 0x4dffec
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x44]
mov eax, dword [esi]
mov edi, dword [esp + 0x34]
cmp byte [eax + 0x57], 0
jne 0x4e0007
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x4e003a
mov eax, dword [esi + 0x74]
mov dword [esp + 0x44], eax
jns 0x4e001b
lea ecx, [eax - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4e002a
mov eax, 0x5cdb30
jmp 0x4e0033
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x4e0056
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4e0056
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ecx
inc byte [ebx + 0x13]
cmp edi, 1
jne 0x4e0075
test edx, edx
je case.0x4df40c.4
mov al, byte [ebx + 0x13]
cmp al, 8
jae case.0x4df40c.4
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edx
inc byte [ebx + 0x13]
jmp case.0x4df40c.4
cmp edi, dword [ebx + 0x1c]
jle case.0x4df40c.4
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x20], edx
cmp dword [ebp + 0xc], 0
jne 0x4e00e3
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 8]
test edx, edx
je 0x4e00e3
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4e00b5
push 0
push dword [ebp + 0x1c]
mov ecx, esi
push edx
mov edx, 0x3c
call fcn.00491e40
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp + 0x1c]
mov dword [eax + ecx*4], 0x3c
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret