Function at 0x4caaf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
push ebx
mov ebx, dword [esp + 0x78]
push ebp
mov ebp, dword [esp + 0x78]
push esi
push edi
mov edi, dword [ebx + 0x44]
mov esi, dword [ebp + 8]
mov dword [esp + 0x30], edi
mov eax, dword [edi + 0xc]
mov dword [esp + 0x1c], eax
test esi, esi
jne 0x4cab31
cmp dword [ebp + 0x74], esi
jne 0x4cab26
mov eax, dword [ebp]
test byte [eax + 0x4c], 8
jne 0x4cab26
mov byte [ebp + 0x17], 1
push ebp
call fcn.004b9430
add esp, 4
mov esi, eax
mov ecx, dword [ebx + 0x20]
push 0x34
push 0
mov eax, dword [ecx + 0x34]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x4c], eax
xor eax, eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
movsx ebx, word [ecx + 0x2a]
dec dword [ebp + 0x38]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x38]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x50]
push eax
mov dword [esp + 0x44], ebx
call sub.MSVCRT.dll_memset
mov ecx, dword [edi + 0x30]
add esp, 0xc
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x54], eax
lea edx, [ecx + 1]
lea eax, [ecx + 2]
mov dword [esp + 0x48], ebp
mov dword [esp + 0x64], eax
lea eax, [ecx + 3]
mov dword [esp + 0x74], eax
mov al, byte [edi + 0x11]
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], esi
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x34], edx
cmp al, 0x56
je 0x4cac0f
cmp al, 0x5a
je 0x4cabdc
mov dword [esp + 0x60], 2
jmp 0x4cac2d
push edi
call fcn.004dda10
add esp, 4
test eax, eax
jne 0x4cac2d
cmp byte [edi + 0x12], 0x58
jne 0x4cac25
cmp byte [edi + 0x10], 0x59
je 0x4cac2d
push dword [edi + 0x1c]
push ebp
call fcn.004de470
add esp, 8
test eax, eax
je 0x4cac2d
mov dword [esp + 0x60], 3
jmp 0x4cac2d
cmp byte [edi + 0x10], 0x59
je 0x4cac2d
push dword [edi + 0x18]
push ebp
call fcn.004de470
add esp, 8
test eax, eax
je 0x4cac2d
mov dword [esp + 0x60], 1
mov eax, dword [ebp + 0x2c]
lea edx, [eax + 1]
inc eax
add eax, ebx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
lea ecx, [eax + 1]
mov dword [ebp + 0x2c], ecx
mov al, byte [edi + 0x11]
mov dword [esp + 0x90], ecx
cmp al, 0x58
je 0x4cac56
cmp al, 0x56
jne 0x4cac63
lea eax, [ecx + 1]
mov dword [esp + 0x84], eax
mov dword [ebp + 0x2c], eax
mov al, byte [edi + 0x12]
cmp al, 0x58
je 0x4cac6e
cmp al, 0x56
jne 0x4cac78
inc dword [ebp + 0x2c]
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x10], eax
cmp byte [edi + 0x10], 0x4c
je 0x4caccc
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4cac8a
mov ecx, dword [eax]
jmp 0x4cac8c
xor ecx, ecx
mov ebx, dword [edi + 0x4c]
mov eax, dword [edi + 8]
add ebx, edx
mov dword [esp + 0x24], ebx
test eax, eax
je 0x4caca2
add ebx, dword [eax]
mov dword [esp + 0x24], ebx
mov eax, dword [ebp + 0x2c]
lea ebx, [eax + 1]
add eax, ecx
mov dword [esp + 0x14], ebx
lea ebx, [eax + 1]
add eax, ecx
mov dword [esp + 0x68], ebx
lea ebx, [eax + 1]
add eax, ecx
mov dword [esp + 0x70], ebx
lea ebx, [eax + 1]
add eax, ecx
mov dword [esp + 0x78], ebx
mov dword [ebp + 0x2c], eax
mov eax, dword [esp + 0x38]
xor ebx, ebx
test eax, eax
jle 0x4cad3e
mov edi, dword [esp + 0x44]
mov ebp, edx
lea esp, [esp]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cacfb
lea eax, [ebx + ebp]
push eax
push ebx
push edi
push 0x59
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cad26
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x59
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], ebx
lea ecx, [eax + ecx*4]
lea eax, [ebx + ebp]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x38]
inc ebx
cmp ebx, eax
jl 0x4cace0
mov edi, dword [esp + 0x30]
mov ebp, dword [esp + 0x80]
mov edx, dword [esp + 0x28]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cad5d
push dword [esp + 0x2c]
push eax
push edx
push 0x5b
push esi
call fcn.004752f0
mov edx, dword [esp + 0x3c]
add esp, 0x14
jmp 0x4cad8c
mov ebx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x5b
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 8]
test eax, eax
je 0x4caf3d
mov ecx, dword [eax]
push 0
mov dword [esp + 0x3c], ecx
mov ecx, dword [edi + 0x4c]
push 0
push eax
add ecx, edx
push ebp
mov dword [esp + 0x38], ecx
call fcn.004a5dc0
inc dword [ebp + 0x2c]
add esp, 0x10
mov ebx, dword [esi + 0x6c]
mov edx, dword [edi + 0x44]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x18], eax
cmp dword [esi + 0x70], ebx
jg 0x4cade5
push dword [esp + 0x38]
push edx
push dword [esp + 0x30]
push 0x56
push esi
call fcn.004752f0
add esp, 0x14
mov ebx, eax
jmp 0x4cae1b
mov ebp, dword [esp + 0x28]
lea eax, [ebx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x80]
mov dword [eax + ecx*4], 0x56
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edx, dword [esp + 0x3c]
cmp byte [eax + 0x51], 0
je 0x4cae35
push edx
push 0xfffffffffffffff7
push eax
call fcn.00462150
add esp, 0xc
jmp 0x4cae47
mov eax, dword [esi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov ecx, dword [esi + 0x6c]
lea edx, [ebx + 2]
add ebx, 4
cmp dword [esi + 0x70], ecx
jg 0x4cae65
push edx
push ebx
push edx
push 0x10
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cae90
mov edi, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x10
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
mov dword [esp + 0x3c], ecx
cmp dword [esi + 0x70], ecx
jg 0x4caeb5
push 0
push 0
push dword [esp + 0x20]
push 0xc
push esi
call fcn.004752f0
add esp, 0x14
mov dword [esp + 0x3c], eax
jmp 0x4caee8
mov edx, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x38]
mov ecx, dword [esi + 0x6c]
dec edx
mov ebx, dword [edi + 0x44]
cmp dword [esi + 0x70], ecx
jg 0x4caf0b
push edx
push ebx
push dword [esp + 0x30]
push 0x4d
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4caf3d
mov ebp, dword [esp + 0x28]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x80]
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4caf68
mov ebx, dword [esp + 0x90]
push 0
push ebx
mov ebx, dword [esp + 0x3c]
push ebx
push 0x78
push esi
call fcn.004752f0
mov edx, dword [esp + 0xa4]
add esp, 0x14
jmp 0x4caf9e
mov ebx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov edx, dword [esp + 0x90]
lea ecx, [ecx + ecx*4]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x78
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cafb9
push edx
push dword [esp + 0x30]
push ebx
push 0x79
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cafeb
mov ebp, dword [esp + 0x80]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ebx, dword [esi + 0x6c]
mov edx, dword [edi + 0x54]
mov dword [esp + 0x38], ebx
cmp dword [esi + 0x70], ebx
jg 0x4cb016
mov ebx, dword [esp + 0x90]
push ebx
push 0
push edx
push 0x34
push esi
call fcn.004752f0
add esp, 0x14
mov dword [esp + 0x38], eax
jmp 0x4cb048
lea eax, [ebx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [esi + 0x68]
mov ebx, dword [esp + 0x90]
mov dword [eax + ecx*4], 0x34
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
push edi
push ebp
call fcn.004ded40
mov ebx, dword [esp + 0x8c]
add esp, 8
mov dword [esp + 0x5c], eax
test ebx, ebx
je 0x4cb083
push ebx
push dword [edi + 0x18]
push ebp
call fcn.00494800
xor eax, eax
cmp byte [edi + 0x10], 0x59
setne al
dec eax
and eax, 3
push eax
push ebx
push ebp
call fcn.004dda60
add esp, 0x18
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4cb0b6
push ecx
push dword [edi + 0x1c]
push ebp
call fcn.00494800
mov edx, dword [esp + 0x1c]
xor eax, eax
cmp byte [edi + 0x10], 0x59
setne al
dec eax
and eax, 3
inc eax
push eax
push edx
push ebp
call fcn.004dda60
mov ecx, dword [esp + 0x28]
add esp, 0x18
cmp byte [edi + 0x10], 0x59
je 0x4cb287
mov al, byte [edi + 0x11]
cmp al, byte [edi + 0x12]
jne 0x4cb287
test ebx, ebx
je 0x4cb287
mov ebx, dword [esi + 0x6c]
xor edx, edx
cmp al, 0x56
sete dl
lea edx, [edx*2 + 0x37]
cmp dword [esi + 0x70], ebx
jg 0x4cb102
push ecx
push 0
push dword [esp + 0x8c]
push edx
push esi
call fcn.004752f0
add esp, 0x14
mov ebx, eax
jmp 0x4cb140
lea eax, [ebx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [esi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [esp + 0x84]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [esp + 0x48]
push 0
push eax
call fcn.004dcec0
mov ecx, dword [esi + 0x6c]
add esp, 8
cmp dword [esi + 0x70], ecx
jg 0x4cb16f
push 0
push 1
push dword [esp + 0x94]
push 0x25
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb1a5
mov edx, dword [esp + 0x8c]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 1
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [esp + 0x48]
push eax
call fcn.004df0a0
mov ecx, dword [esi + 0x6c]
add esp, 4
cmp dword [esi + 0x70], ecx
jg 0x4cb1d5
push 0
push 0
push dword [esp + 0x94]
push 0x8a
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb20b
mov edx, dword [esp + 0x8c]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x8a
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cb228
push 0
push dword [esp + 0x24]
push 0
push 0xb
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb25b
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x6c]
test ebx, ebx
jns 0x4cb265
lea ebx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cb274
mov eax, 0x50e22c
jmp 0x4cb27d
mov eax, dword [esi + 0x68]
lea ecx, [ebx + ebx*4]
lea eax, [eax + ecx*4]
mov ebx, dword [esp + 0x84]
mov dword [eax + 8], edx
cmp byte [edi + 0x11], 0x56
jne 0x4cb2e1
cmp byte [edi + 0x10], 0x59
je 0x4cb2e1
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4cb2e1
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cb2b3
push ebx
push edx
push ebx
push 0x6a
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb2e1
mov ebp, dword [esp + 0x80]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x6a
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [edi + 0x11], 0x5a
je 0x4cb341
mov edx, dword [esp + 0x8c]
mov ecx, dword [esi + 0x6c]
add edx, 2
cmp dword [esi + 0x70], ecx
jg 0x4cb30b
push 0
push 1
push edx
push 0x25
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb341
mov ebp, dword [esp + 0x80]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 1
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cb368
push 0
push 1
push dword [esp + 0x94]
push 0x25
push esi
call fcn.004752f0
mov edx, dword [esp + 0xa0]
add esp, 0x14
jmp 0x4cb39e
mov edx, dword [esp + 0x8c]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 1
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cb3bb
push 0
push 1
lea eax, [edx + 3]
push eax
push 0x25
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb3f8
mov edx, dword [esp + 0x8c]
lea eax, [ecx + 1]
mov edi, dword [esp + 0x30]
lea ecx, [ecx + ecx*4]
mov dword [esi + 0x6c], eax
add edx, 3
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 1
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4cb572
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x4cb572
mov edx, dword [ecx]
mov ecx, dword [esi + 0x6c]
dec edx
cmp dword [esi + 0x70], ecx
jg 0x4cb42e
push edx
push eax
push dword [esp + 0x2c]
push 0x4d
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb464
mov ebp, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], ebp
mov ebp, dword [esp + 0x80]
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esi + 0x6c]
mov edx, dword [edx]
dec edx
cmp dword [esi + 0x70], ecx
jg 0x4cb489
push edx
push dword [esp + 0x6c]
push dword [esp + 0x1c]
push 0x4d
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb4bf
mov ebx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x68]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x84]
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi + 0x6c]
mov edx, dword [eax]
dec edx
cmp dword [esi + 0x70], ecx
jg 0x4cb4e4
push edx
push dword [esp + 0x74]
push dword [esp + 0x1c]
push 0x4d
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb517
mov edi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x70]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi + 0x6c]
mov edx, dword [eax]
dec edx
cmp dword [esi + 0x70], ecx
jg 0x4cb53c
push edx
push dword [esp + 0x7c]
push dword [esp + 0x1c]
push 0x4d
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb572
mov ebp, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x78]
mov dword [eax + ecx*4 + 8], ebp
mov ebp, dword [esp + 0x80]
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cb58f
push 0
push dword [esp + 0x24]
push 0
push 0xb
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb5c2
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x38]
mov edx, dword [esi + 0x6c]
test ecx, ecx
jns 0x4cb5d0
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cb5df
mov eax, 0x50e22c
jmp 0x4cb5e8
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4cb609
push dword [esp + 0x20]
push eax
push dword [esp + 0x2c]
push dword [esp + 0x28]
push ebp
call fcn.004deb90
add esp, 0x14
mov al, byte [edi + 0x11]
cmp al, 0x56
jne 0x4cb747
push 0
push 0
lea eax, [esp + 0x50]
push 3
push eax
call fcn.004ddcd0
add esp, 0x10
cmp byte [edi + 0x12], 0x5a
je 0x4cb6ea
cmp byte [edi + 0x10], 0x59
jne 0x4cb721
mov ecx, dword [esp + 0x8c]
dec dword [ebp + 0x38]
mov ebx, dword [ebp + 0x38]
mov ebp, dword [esi + 0x6c]
push ebx
lea eax, [ecx + 3]
push eax
push dword [esp + 0x18]
lea eax, [esp + 0x54]
push ecx
push 0x39
push eax
call fcn.004de070
push 0
push dword [esp + 0xa0]
lea eax, [esp + 0x68]
push 2
push eax
call fcn.004ddcd0
push 0
push 0
lea eax, [esp + 0x78]
push 1
push eax
call fcn.004ddcd0
mov ecx, dword [esi + 0x6c]
add esp, 0x38
cmp dword [esi + 0x70], ecx
jg 0x4cb6a3
push 0
push ebp
push 0
push 0xb
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cb6d2
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
not ebx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4cb716
push ebx
push esi
push ecx
call fcn.00483c50
add esp, 0xc
mov ebp, dword [esp + 0x84]
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x20]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4cb911
push edx
push esi
push ecx
call fcn.00483c50
add esp, 0xc
jmp 0x4cb91a
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + ebx*4], eax
jmp 0x4cb6ea
push 0
push dword [esp + 0x14]
lea eax, [esp + 0x50]
push 1
push eax
call fcn.004ddcd0
push 0
push ebx
lea eax, [esp + 0x60]
push 2
push eax
call fcn.004ddcd0
add esp, 0x20
jmp 0x4cb6ea
cmp byte [edi + 0x12], 0x58
jne 0x4cb7c3
cmp al, 0x58
jne 0x4cb75e
cmp byte [edi + 0x10], 0x59
jne 0x4cb75e
mov ebx, 1
jmp 0x4cb760
xor ebx, ebx
push 0
push dword [esp + 0x14]
lea eax, [esp + 0x50]
push 3
push eax
call fcn.004ddcd0
mov ebp, dword [esp + 0x94]
add esp, 0x10
test ebx, ebx
je 0x4cb792
push 0
push ebp
lea eax, [esp + 0x50]
push 2
push eax
call fcn.004ddcd0
add esp, 0x10
push 0
push 0
lea eax, [esp + 0x50]
push 1
push eax
call fcn.004ddcd0
add esp, 0x10
test ebx, ebx
jne 0x4cb6ea
push ebx
push ebp
lea eax, [esp + 0x50]
push 2
push eax
call fcn.004ddcd0
add esp, 0x10
jmp 0x4cb6ea
xor ebx, ebx
lea eax, [esp + 0x48]
push ebx
push ebx
push 3
push eax
call fcn.004ddcd0
add esp, 0x10
cmp byte [edi + 0x12], 0x5a
je 0x4cb6ea
cmp byte [edi + 0x10], 0x59
jne 0x4cb892
mov eax, dword [esi + 0x6c]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4cb81f
mov edx, dword [esp + 0x8c]
dec dword [ebp + 0x38]
mov ebx, dword [ebp + 0x38]
push ebx
lea ecx, [edx + 3]
push ecx
push eax
push edx
lea eax, [esp + 0x58]
push 0x39
push eax
call fcn.004de070
add esp, 0x18
push 0
push 0
lea eax, [esp + 0x50]
push 1
push eax
call fcn.004ddcd0
mov ebp, dword [esp + 0x94]
lea eax, [esp + 0x58]
push 0
push ebp
push 2
push eax
call fcn.004ddcd0
add esp, 0x20
cmp dword [esp + 0x10], 0
je 0x4cb6f1
push dword [esp + 0x80]
push 0
push 0xb
push esi
call fcn.004b89e0
mov ecx, dword [esi + 0xc]
add esp, 0x10
not ebx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4cb884
push ebx
push esi
push ecx
call fcn.00483c50
add esp, 0xc
jmp 0x4cb6f1
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + ebx*4], eax
jmp 0x4cb6f1
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4cb8ac
push 1
push 0
push eax
push 0x30
push esi
call fcn.004b8a40
add esp, 0x14
mov ebx, eax
push 0
push 0
lea eax, [esp + 0x50]
push 1
push eax
call fcn.004ddcd0
mov ebp, dword [esp + 0x94]
lea eax, [esp + 0x58]
push 0
push ebp
push 2
push eax
call fcn.004ddcd0
add esp, 0x20
cmp dword [esp + 0x10], 0
je 0x4cb6f1
mov edx, dword [esi + 0x6c]
test ebx, ebx
jns 0x4cb8ea
lea ebx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cb8ff
mov eax, 0x50e22c
mov dword [eax + 8], edx
jmp 0x4cb6f1
mov eax, dword [esi + 0x68]
lea ecx, [ebx + ebx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x4cb6f1
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edx*4], eax
push dword [esp + 0x88]
call fcn.004c9130
add esp, 4
cmp dword [edi + 8], 0
je 0x4cb9b4
mov ebx, dword [esi + 0x6c]
mov dword [esp + 0x40], ebx
cmp dword [esi + 0x70], ebx
jg 0x4cb958
push 0
push dword [esp + 0x1c]
push 0
push 0x45
push esi
call fcn.004752f0
add esp, 0x14
mov dword [esp + 0x40], eax
jmp 0x4cb98b
mov edx, dword [esp + 0x18]
lea eax, [ebx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x3c]
mov edx, dword [esi + 0x6c]
test ecx, ecx
jns 0x4cb999
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cb9a8
mov eax, 0x50e22c
jmp 0x4cb9b1
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ebx, dword [esi + 0x6c]
mov edx, dword [esp + 0x34]
cmp dword [esi + 0x70], ebx
jg 0x4cb9d4
push 0
push 0
push edx
push 0x25
push esi
call fcn.004752f0
add esp, 0x14
mov ebx, eax
jmp 0x4cba03
lea eax, [ebx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [edi + 0x12], 0x58
jne 0x4cba67
cmp byte [edi + 0x11], 0x58
jne 0x4cba1c
cmp byte [edi + 0x10], 0x59
jne 0x4cba1c
mov ebp, 1
jmp 0x4cba1e
xor ebp, ebp
push 0
push dword [esp + 0x14]
lea eax, [esp + 0x50]
push 3
push eax
call fcn.004ddcd0
add esp, 0x10
test ebp, ebp
je 0x4cba4f
push 0
push dword [esp + 0x88]
lea eax, [esp + 0x50]
push 2
push eax
call fcn.004ddcd0
add esp, 0x10
push 0
push 0
lea eax, [esp + 0x50]
push 1
push eax
call fcn.004ddcd0
add esp, 0x10
jmp 0x4cbce4
cmp byte [edi + 0x11], 0x56
lea eax, [esp + 0x48]
push 0
push 0
push 3
push eax
jne 0x4cbc30
call fcn.004ddcd0
mov eax, dword [esi + 0x6c]
add esp, 0x10
cmp byte [edi + 0x10], 0x59
mov dword [esp + 0x80], eax
lea eax, [esp + 0x48]
push 1
jne 0x4cbabe
push ebp
push 2
push eax
call fcn.004ddcd0
push 1
push 0
mov ebp, eax
lea eax, [esp + 0x60]
push 1
push eax
call fcn.004ddcd0
mov dword [esp + 0xa4], eax
jmp 0x4cbaf7
cmp byte [edi + 0x12], 0x5a
jne 0x4cbad3
push ebp
push 1
push eax
call fcn.004ddcd0
push 1
push 0
jmp 0x4cbae2
push dword [esp + 0x14]
push 1
push eax
call fcn.004ddcd0
push 1
push ebp
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x60]
push 2
push eax
call fcn.004ddcd0
mov ebp, eax
mov ecx, dword [esi + 0x6c]
add esp, 0x20
mov edx, dword [esp + 0x80]
cmp dword [esi + 0x70], ecx
jg 0x4cbb1b
push 0
push edx
push 0
push 0xb
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cbb4a
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x6c]
test ebp, ebp
jns 0x4cbb54
lea ebp, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cbb63
mov eax, 0x50e22c
jmp 0x4cbb72
mov eax, dword [esi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
push 1
mov dword [eax + 8], edx
mov eax, dword [esi + 0x6c]
push 0
mov dword [esp + 0x88], eax
lea eax, [esp + 0x50]
push 1
push eax
call fcn.004ddcd0
mov ecx, dword [esi + 0x6c]
add esp, 0x10
mov ebp, eax
mov edx, dword [esp + 0x80]
cmp dword [esi + 0x70], ecx
jg 0x4cbbb5
push 0
push edx
push 0
push 0xb
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cbbe4
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x84]
mov edx, dword [esi + 0x6c]
test ecx, ecx
jns 0x4cbbf5
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cbc04
mov eax, 0x50e22c
jmp 0x4cbc0d
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esi + 0x6c]
test ebp, ebp
jns 0x4cbc1a
lea ebp, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cbcd2
mov eax, 0x50e22c
jmp 0x4cbce1
call fcn.004ddcd0
mov eax, dword [esi + 0x6c]
push 1
push 0
mov dword [esp + 0x98], eax
lea eax, [esp + 0x60]
push 1
push eax
call fcn.004ddcd0
push 0
push dword [esp + 0xa8]
mov ebp, eax
lea eax, [esp + 0x70]
push 2
push eax
call fcn.004ddcd0
mov ecx, dword [esi + 0x6c]
add esp, 0x30
mov edx, dword [esp + 0x80]
cmp dword [esi + 0x70], ecx
jg 0x4cbc8a
push 0
push edx
push 0
push 0xb
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cbcb9
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x6c]
test ebp, ebp
jns 0x4cbcc3
lea ebp, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cbcd2
mov eax, 0x50e22c
jmp 0x4cbce1
mov eax, dword [esi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esi + 0x6c]
test ebx, ebx
jns 0x4cbcee
lea ebx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cbcfd
mov eax, 0x50e22c
jmp 0x4cbd06
mov eax, dword [esi + 0x68]
lea ecx, [ebx + ebx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cbd2c
push 0
push 0
push dword [esp + 0x94]
push 0x8a
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cbd62
mov edx, dword [esp + 0x8c]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x8a
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [edi + 8], 0
je 0x4cbe8b
mov edx, dword [edi + 0x58]
test edx, edx
je 0x4cbe0c
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cbd91
push 0
push edx
push 1
push 0x45
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cbdc0
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
mov edx, dword [edi + 0x5c]
cmp dword [esi + 0x70], ecx
jg 0x4cbddd
push 0
push edx
push 0
push 0x45
push esi
call fcn.004752f0
add esp, 0x14
jmp 0x4cbe0c
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov edx, dword [esi + 0x6c]
test ecx, ecx
jns 0x4cbe1a
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x4cbe29
mov eax, 0x50e22c
jmp 0x4cbe32
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x4cbe58
push 0
push 0
push dword [esp + 0x20]
push 0x41
push esi
call fcn.004752f0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret
mov edx, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x41
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret