Function at 0x4dbe50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4f82c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x8c
mov eax, dword [ecx]
push edi
xor edi, edi
mov dword [esp + 0x34], ecx
cmp eax, edi
jne 0x4dbe7f
xor eax, eax
jmp 0x4dccd9
push edi
push edi
lea ecx, [esp + 0xc]
call fcn.004dcf90
mov dword [esp + 4], 0x5020a4
mov dword [esp + 0x10], edi
mov dword [esp + 8], edi
mov al, byte [0x57c760]
mov dword [esp + 0x98], edi
test al, 1
jne 0x4dbefa
or al, 1
mov ecx, 0x57c780
mov byte [0x57c760], al
call fcn.004dce10
push str.___:____d_.__
lea ecx, [esp + 0x68]
mov byte [esp + 0x9c], 1
call fcn.004dcdd0
mov eax, dword [eax + 8]
push edi
push eax
push str.___:____d_.__
mov ecx, 0x57c780
mov byte [esp + 0xa4], 2
call fcn.004dbaa0
push 0x4dcf20
call fcn.004e8f96
add esp, 4
push ebp
push esi
lea ecx, [esp + 0x88]
call fcn.004dbca0
mov ebp, dword [esp + 0xc4]
mov byte [esp + 0xa0], 3
cmp ebp, edi
jne 0x4dbf22
lea ebp, [esp + 0x88]
mov ecx, dword [0x57c780]
mov eax, dword [esp + 0xc8]
mov esi, dword [esp + 0xb4]
cmp ecx, edi
jne 0x4dbf40
mov dword [esp + 0x38], edi
jmp 0x4dbfaa
cmp eax, edi
jne 0x4dbf71
push 0x4c
call fcn.004e765b
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, edi
mov byte [esp + 0xa0], 4
je 0x4dbf67
mov ecx, eax
call fcn.004dcf30
jmp 0x4dbf69
xor eax, eax
mov byte [esp + 0xa0], 3
mov ecx, dword [esp + 0xb0]
mov dword [eax + 0x3c], edi
mov dword [eax + 0x38], 0xffffffff
mov dword [eax + 0x44], ecx
mov dword [eax + 0x48], esi
mov dword [eax + 0x40], 0x64
test byte [0x57c784], 0x10
je 0x4dbfa0
mov dword [eax + 0x34], esi
mov dword [eax + 0x30], esi
jmp 0x4dbfa6
mov dword [eax + 0x34], edi
mov dword [eax + 0x30], edi
mov dword [esp + 0x38], eax
push ebx
xor ebx, ebx
mov dword [esp + 0x24], ebx
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x7c]
push edx
push eax
mov ecx, 0x57c780
call fcn.004dd790
mov esi, eax
push edi
mov ecx, ebp
mov byte [esp + 0xa8], 5
call fcn.004ddb10
mov dword [ebp + 8], edi
mov eax, dword [esi + 8]
cmp eax, edi
jle 0x4dbff9
mov esi, dword [esi + 4]
cmp esi, edi
mov ecx, esi
jne 0x4dbfef
mov ecx, 0x5020b0
push edi
push eax
push ecx
mov ecx, ebp
call fcn.004ddbd0
push edi
push edi
mov ecx, ebp
call fcn.004dcdb0
lea ecx, [esp + 0x7c]
mov esi, eax
mov byte [esp + 0xa4], 3
call fcn.004e5b10
cmp esi, edi
je 0x4dc54d
push 0xffffffffffffffff
push 2
mov ecx, ebp
call fcn.004dcdb0
mov esi, eax
sub esi, ebx
cmp esi, edi
jle 0x4dc0c4
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jl 0x4dc06a
lea edi, [eax + eax]
cmp edi, 8
jge 0x4dc04d
mov edi, 8
mov edx, dword [esp + 0x14]
lea ecx, [edi*4]
push ecx
push edx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [eax + ecx*4], ebx
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
cmp ecx, eax
mov dword [esp + 0x18], ecx
jl 0x4dc0b0
lea edi, [eax + eax]
cmp edi, 8
jge 0x4dc093
mov edi, 8
mov eax, dword [esp + 0x14]
lea edx, [edi*4]
push edx
push eax
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [ecx + edx*4], esi
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
push 0xffffffffffffffff
push 2
mov ecx, ebp
call fcn.004dcdb0
mov esi, eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x24], esi
mov ebx, 2
lea edi, [eax + esi*2 + 2]
xor eax, eax
mov ax, word [edi]
add eax, 0xffffffdc
cmp eax, 0x57
ja case.0x4dc0fe.39
xor ecx, ecx
mov cl, byte [eax + 0x4dcd04]
jmp dword [ecx*4 + 0x4dccf4]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jl 0x4dc13b
lea edi, [eax + eax]
cmp edi, 8
jge 0x4dc11e
mov edi, 8
mov eax, dword [esp + 0x14]
lea edx, [edi*4]
push edx
push eax
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [ecx + edx*4], esi
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
cmp ecx, eax
mov dword [esp + 0x18], ecx
jl 0x4dc492
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc475
jmp 0x4dc470
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jl 0x4dc1a2
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc185
mov esi, 8
mov edx, dword [esp + 0x14]
lea ecx, [esi*4]
push ecx
push edx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
xor esi, esi
mov dword [eax + ecx*4], 0xffffffff
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
mov dword [esp + 0x18], ecx
mov si, word [edi]
cmp ecx, eax
jl 0x4dc526
lea edi, [eax + eax]
cmp edi, 8
jge 0x4dc509
jmp 0x4dc504
push 0xffffffffffffffff
push 2
mov ecx, ebp
call fcn.004dcdb0
push 0xffffffffffffffff
push 3
mov ecx, ebp
mov esi, eax
call fcn.004dcdb0
mov ecx, dword [esp + 0x24]
mov ebx, eax
mov eax, dword [esp + 0xb4]
sub ebx, esi
mov dword [esp + 0x70], 0x50209c
lea edx, [eax + ecx*2 + 4]
lea eax, [ebx - 3]
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], eax
mov edi, dword [esp + 0x40]
xor esi, esi
mov byte [esp + 0xa4], 6
mov eax, dword [edi + 0x4c]
test eax, eax
jle 0x4dc257
mov edx, dword [edi + 0x48]
lea ecx, [esp + 0x70]
push ecx
mov eax, dword [edx + esi*4]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx]
add ecx, 0xc
call fcn.004dcfd0
test eax, eax
je 0x4dc30d
mov eax, dword [edi + 0x4c]
inc esi
cmp esi, eax
jl 0x4dc22f
mov esi, 0xfffffffd
test esi, esi
mov byte [esp + 0xa4], 3
mov dword [esp + 0x70], 0x50209c
jle 0x4dc320
cmp esi, dword [edi + 8]
jg 0x4dc320
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jl 0x4dc2b3
lea edi, [eax + eax]
cmp edi, 8
jge 0x4dc296
mov edi, 8
mov ecx, dword [esp + 0x14]
lea eax, [edi*4]
push eax
push ecx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edi
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov dword [edx + eax*4], 0xfffffffe
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
cmp ecx, eax
mov dword [esp + 0x18], ecx
jl 0x4dc2fd
lea edi, [eax + eax]
cmp edi, 8
jge 0x4dc2e0
mov edi, 8
mov edx, dword [esp + 0x14]
lea ecx, [edi*4]
push ecx
push edx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [eax + ecx*4], esi
jmp 0x4dc531
mov edx, dword [edi + 0x48]
mov eax, dword [edx + esi*4]
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov esi, dword [edx + 4]
jmp 0x4dc25c
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jl 0x4dc356
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc339
mov esi, 8
mov eax, dword [esp + 0x14]
lea edx, [esi*4]
push edx
push eax
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], esi
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
mov dword [edx + eax*4], ecx
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
cmp ecx, eax
mov dword [esp + 0x18], ecx
jl 0x4dc3a0
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc383
mov esi, 8
mov edx, dword [esp + 0x14]
lea ecx, [esi*4]
push ecx
push edx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [eax + ecx*4], ebx
jmp 0x4dc531
xor esi, esi
mov ebx, 1
mov ax, word [edi]
cmp ax, 0x30
jb 0x4dc3db
cmp ax, 0x39
ja 0x4dc3db
and eax, 0xffff
lea edx, [esi + esi*4]
inc ebx
add edi, 2
cmp ebx, 3
lea esi, [eax + edx*2 - 0x30]
jle 0x4dc3b7
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 8]
cmp esi, ecx
jle 0x4dc409
mov eax, 0x66666667
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
dec ebx
mov esi, edx
cmp esi, ecx
jg 0x4dc3e6
test esi, esi
jne 0x4dc409
mov ebx, 1
jmp 0x4dc412
cmp ebx, 1
jne 0x4dc4a6
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jl 0x4dc448
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc42b
mov esi, 8
mov edx, dword [esp + 0x14]
lea ecx, [esi*4]
push ecx
push edx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
mov dword [eax + ecx*4], edx
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
cmp ecx, eax
mov dword [esp + 0x18], ecx
jl 0x4dc492
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc475
mov esi, 8
mov ecx, dword [esp + 0x14]
lea eax, [esi*4]
push eax
push ecx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], esi
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov dword [edx + eax*4], 1
jmp 0x4dc531
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jl 0x4dc4dc
lea edi, [eax + eax]
cmp edi, 8
jge 0x4dc4bf
mov edi, 8
mov edx, dword [esp + 0x14]
lea ecx, [edi*4]
push ecx
push edx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0xfffffffe
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
cmp ecx, eax
mov dword [esp + 0x18], ecx
jl 0x4dc526
lea edi, [eax + eax]
cmp edi, 8
jge 0x4dc509
mov edi, 8
mov eax, dword [esp + 0x14]
lea edx, [edi*4]
push edx
push eax
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [ecx + edx*4], esi
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
add eax, ebx
xor edi, edi
mov dword [esp + 0x24], eax
mov ebx, eax
jmp 0x4dbfb1
mov ecx, dword [esp + 0xb8]
cmp ebx, ecx
jge 0x4dc5fc
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
cmp edx, eax
jl 0x4dc599
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc575
mov esi, 8
mov ecx, dword [esp + 0x14]
lea eax, [esi*4]
push eax
push ecx
call fcn.004e7f21
mov ecx, dword [esp + 0xc0]
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], esi
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov dword [edx + eax*4], ebx
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc edx
cmp edx, eax
mov dword [esp + 0x18], edx
jl 0x4dc5e6
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc5c2
mov esi, 8
mov edx, dword [esp + 0x14]
lea ecx, [esi*4]
push ecx
push edx
call fcn.004e7f21
mov ecx, dword [esp + 0xc0]
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub ecx, ebx
mov dword [eax + edx*4], ecx
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x40]
mov eax, dword [eax + 4]
and eax, 0x10
mov dword [esp + 0x44], eax
je 0x4dc621
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], 0xfffffffe
add ecx, 0xfffffffe
mov dword [esp + 0x58], ecx
jmp 0x4dc62d
mov edx, dword [esp + 0x18]
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0x44]
lea ecx, [esp + 0x2c]
mov eax, ebx
mov esi, ebx
neg eax
sbb eax, eax
and al, 0xfc
add eax, 2
neg esi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xb0]
sbb esi, esi
and esi, eax
neg ebx
sbb ebx, ebx
xor edi, edi
not ebx
and ebx, eax
push edi
push edi
mov dword [esp + 0x64], ebx
mov dword [esp + 0x54], edi
mov dword [esp + 0x30], edi
call fcn.004de050
mov dword [esp + 0x2c], 0x5020ac
mov dword [esp + 0x38], edi
mov dword [esp + 0x30], edi
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0xc0]
mov byte [esp + 0xa4], 7
cmp dword [ecx], 0
jne 0x4dc6a9
mov dword [esp + 0x3c], 0
jmp 0x4dc748
mov ecx, dword [esp + 0x3c]
xor edx, edx
cmp ecx, edx
jne 0x4dc6e6
push 0x4c
call fcn.004e765b
add esp, 4
mov dword [esp + 0x50], eax
test eax, eax
mov byte [esp + 0xa4], 8
je 0x4dc6d6
mov ecx, eax
call fcn.004dcf30
jmp 0x4dc6d8
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov byte [esp + 0xa4], 7
xor edx, edx
mov ecx, dword [esp + 0xac]
cmp edi, edx
mov dword [eax + 0x44], ecx
mov ecx, dword [esp + 0xb0]
mov dword [eax + 0x3c], edx
mov dword [eax + 0x38], 0xffffffff
mov dword [eax + 0x48], ecx
mov dword [eax + 0x40], 0x64
jge 0x4dc729
mov edi, dword [esp + 0x40]
test byte [edi + 4], 0x10
je 0x4dc721
mov dword [eax + 0x34], ecx
mov dword [eax + 0x30], ecx
jmp 0x4dc744
mov dword [eax + 0x34], edx
mov dword [eax + 0x30], edx
jmp 0x4dc744
cmp edi, ecx
jle 0x4dc73e
mov edx, dword [esp + 0x40]
mov edi, dword [edx + 4]
not edi
shr edi, 4
and edi, 1
add edi, ecx
mov dword [eax + 0x34], edi
mov dword [eax + 0x30], edi
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xc4]
mov edi, esi
mov dword [esp + 0x48], 0
test eax, eax
jl 0x4dc767
cmp dword [esp + 0x48], eax
jge 0x4dcace
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x7c]
push eax
push ecx
mov ecx, dword [esp + 0x48]
call fcn.004dd790
mov esi, eax
push 0
mov ecx, ebp
mov byte [esp + 0xa8], 9
call fcn.004ddb10
mov dword [ebp + 8], 0
mov eax, dword [esi + 8]
test eax, eax
jle 0x4dc7b4
mov esi, dword [esi + 4]
test esi, esi
mov ecx, esi
jne 0x4dc7a9
mov ecx, 0x5020b0
push 0
push eax
push ecx
mov ecx, ebp
call fcn.004ddbd0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xa4], 7
call fcn.004e5b10
push 0
push 0
mov ecx, ebp
call fcn.004dcdb0
test eax, eax
je 0x4dcace
mov eax, dword [esp + 0x44]
push 0xffffffffffffffff
test eax, eax
je 0x4dc8ae
push 3
mov ecx, ebp
call fcn.004dcdb0
sub edi, eax
mov ebx, edi
je 0x4dc8a8
push 0xffffffffffffffff
push 3
mov ecx, ebp
call fcn.004dcdb0
mov edx, dword [esp + 0xac]
mov ecx, dword [esp + 0x34]
lea edi, [edx + eax*2]
mov eax, dword [esp + 0x38]
cmp ecx, eax
jl 0x4dc844
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc827
mov esi, 8
mov ecx, dword [esp + 0x30]
lea eax, [esi*4]
push eax
push ecx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], esi
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov dword [edx + eax*4], edi
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
inc ecx
cmp ecx, eax
mov dword [esp + 0x34], ecx
jl 0x4dc88a
lea esi, [eax + eax]
cmp esi, 8
jge 0x4dc86d
mov esi, 8
mov edx, dword [esp + 0x30]
lea ecx, [esi*4]
push ecx
push edx
call fcn.004e7f21
add esp, 8
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], esi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [eax + ecx*4], ebx
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
inc ecx
sub eax, ebx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x28], eax
push 0xffffffffffffffff
push 2
jmp 0x4dc8e3
push 2
mov ecx, ebp
call fcn.004dcdb0
mov esi, eax
sub esi, edi
je 0x4dc8df
mov edx, dword [esp + 0xac]
lea ecx, [esp + 0x2c]
lea eax, [edx + edi*2]
push eax
call fcn.004e0e50
push esi
lea ecx, [esp + 0x30]
call fcn.004e0e50
add dword [esp + 0x28], esi
push 0xffffffffffffffff
push 3
mov ecx, ebp
call fcn.004dcdb0
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x54]
mov edx, eax
cmp eax, ecx
mov dword [esp + 0x50], edx
je 0x4dcab1
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + edx*4]
mov esi, dword [ecx + edx*4 + 4]
mov edx, dword [esp + 0xb4]
cmp eax, 0xffffffff
lea edi, [edx + eax*2]
jne 0x4dca3a
mov eax, esi
and eax, 0xffff
add eax, 0xffffffda
cmp eax, 0x3a
ja case.0x4dc945.43
xor ecx, ecx
mov cl, byte [eax + 0x4dcd74]
jmp dword [ecx*4 + 0x4dcd5c]
push 0xffffffffffffffff
push 2
mov ecx, ebp
call fcn.004dcdb0
mov edx, dword [esp + 0xac]
push 0xffffffffffffffff
push 2
mov ecx, ebp
lea edi, [edx + eax*2]
call fcn.004dcdb0
push 0xffffffffffffffff
push 3
mov ecx, ebp
mov ebx, eax
call fcn.004dcdb0
mov esi, eax
sub esi, ebx
jmp case.0x4dc945.43
mov edi, dword [esp + 0xac]
push 0xffffffffffffffff
push 2
mov ecx, ebp
call fcn.004dcdb0
jmp 0x4dca6d
push 0xffffffffffffffff
push 3
mov ecx, ebp
call fcn.004dcdb0
mov ecx, dword [esp + 0xac]
push 0xffffffffffffffff
push 3
lea edi, [ecx + eax*2]
mov ecx, ebp
call fcn.004dcdb0
mov esi, dword [esp + 0xb0]
sub esi, eax
jmp case.0x4dc945.43
push 0
push 1
mov ecx, ebp
call fcn.004dcdb0
mov esi, eax
test esi, esi
jl 0x4dc9f2
lea edi, [esi + esi + 2]
push 0xffffffffffffffff
push edi
mov ecx, ebp
call fcn.004dcdb0
test eax, eax
jge 0x4dc9f2
dec esi
sub edi, 2
test esi, esi
jge 0x4dc9dc
lea ebx, [esi + esi + 2]
push 0xffffffffffffffff
push ebx
mov ecx, ebp
call fcn.004dcdb0
mov edx, dword [esp + 0xac]
push 0xffffffffffffffff
push ebx
mov ecx, ebp
lea edi, [edx + eax*2]
call fcn.004dcdb0
mov ebx, eax
lea eax, [esi + esi + 3]
push 0xffffffffffffffff
push eax
mov ecx, ebp
call fcn.004dcdb0
mov esi, eax
sub esi, ebx
jmp case.0x4dc945.43
mov edi, dword [esp + 0xac]
mov esi, dword [esp + 0xb0]
jmp case.0x4dc945.43
cmp eax, 0xfffffffe
jne case.0x4dc945.43
lea ebx, [esi + esi + 2]
push 0xffffffffffffffff
push ebx
mov ecx, ebp
call fcn.004dcdb0
mov ecx, dword [esp + 0xac]
push 0xffffffffffffffff
push ebx
lea edi, [ecx + eax*2]
mov ecx, ebp
call fcn.004dcdb0
push esi
mov ecx, ebp
mov ebx, eax
call fcn.004dda60
sub eax, ebx
mov esi, eax
push edi
lea ecx, [esp + 0x30]
call fcn.004e0e50
push esi
lea ecx, [esp + 0x30]
call fcn.004e0e50
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4dca8d
neg esi
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x54]
add edx, esi
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x50]
add edx, ecx
cmp edx, eax
mov dword [esp + 0x50], edx
jne 0x4dc90c
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x5c]
mov edi, dword [esp + 0x24]
inc eax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xc4]
jmp 0x4dc759
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4dcaf3
cmp ebx, edi
jge 0x4dcb17
mov edx, dword [esp + 0xac]
lea ecx, [esp + 0x2c]
lea eax, [edx + ebx*2]
push eax
call fcn.004e0e50
sub edi, ebx
push edi
jmp 0x4dcb0e
cmp edi, ebx
jge 0x4dcb17
mov ecx, dword [esp + 0xac]
lea edx, [ecx + edi*2]
lea ecx, [esp + 0x2c]
push edx
call fcn.004e0e50
sub ebx, edi
push ebx
lea ecx, [esp + 0x30]
call fcn.004e0e50
mov eax, dword [esp + 0xcc]
test eax, eax
jne 0x4dcb2f
mov eax, dword [esp + 0x3c]
push eax
call fcn.004dda40
add esp, 4
mov edi, dword [esp + 0xbc]
mov ecx, dword [esp + 0x34]
xor esi, esi
cmp ecx, esi
mov dword [edi], esi
jle 0x4dcb5a
mov edx, dword [esp + 0x30]
inc ecx
shr ecx, 1
lea eax, [edx + 4]
mov edx, dword [eax]
mov ebx, dword [edi]
add ebx, edx
add eax, 8
dec ecx
mov dword [edi], ebx
jne 0x4dcb4c
lea ecx, [esp + 0x60]
call fcn.004dd560
mov eax, dword [edi]
push esi
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0xac], 0xa
call fcn.004dd630
push esi
lea ecx, [esp + 0x64]
call fcn.004ddb70
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x68], esi
cmp ebx, esi
je 0x4dcbb8
mov ecx, dword [esp + 0x34]
lea esi, [ecx - 2]
test esi, esi
jl 0x4dcbe3
mov eax, dword [esp + 0x30]
push 0
lea ecx, [esp + 0x64]
mov edx, dword [eax + esi*4 + 4]
mov eax, dword [eax + esi*4]
push edx
push eax
call fcn.004dd580
sub esi, 2
jns 0x4dcb99
jmp 0x4dcbe3
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x4dcbe3
mov eax, dword [esp + 0x30]
push 0
mov ecx, dword [eax + esi*4 + 4]
mov edx, dword [eax + esi*4]
push ecx
push edx
lea ecx, [esp + 0x6c]
call fcn.004dd580
mov eax, dword [esp + 0x34]
add esi, 2
cmp esi, eax
jl 0x4dcbc0
push 0
lea eax, [esp + 0x24]
push 1
push eax
lea ecx, [esp + 0x6c]
mov dword [esp + 0x2c], 0
call fcn.004dd580
mov ecx, dword [edi]
push 3
lea edx, [esp + 0x24]
mov dword [esp + 0x24], ecx
push 1
push edx
mov ecx, ebp
call fcn.004ddbd0
mov eax, dword [esp + 0x48]
push 0
lea ecx, [esp + 0x24]
push 1
push ecx
mov ecx, ebp
mov dword [esp + 0x2c], eax
call fcn.004ddbd0
test ebx, ebx
pop ebx
je 0x4dcc63
mov edx, dword [edi]
mov esi, dword [esp + 0x24]
push 0
lea eax, [esp + 0x20]
sub edx, esi
push 1
push eax
mov ecx, ebp
mov dword [esp + 0x28], edx
call fcn.004ddbd0
mov ecx, dword [edi]
mov esi, dword [esp + 0x48]
sub ecx, esi
push 0
lea edx, [esp + 0x20]
push 1
mov dword [esp + 0x24], ecx
push edx
jmp 0x4dcc8c
mov eax, dword [esp + 0x48]
push 0
lea ecx, [esp + 0x20]
push 1
push ecx
mov ecx, ebp
mov dword [esp + 0x28], eax
call fcn.004ddbd0
mov edx, dword [esp + 0x24]
push 0
lea eax, [esp + 0x20]
push 1
mov dword [esp + 0x24], edx
push eax
mov ecx, ebp
call fcn.004ddbd0
lea ecx, [esp + 0x5c]
call fcn.004dd620
lea ecx, [esp + 0x5c]
mov esi, eax
mov byte [esp + 0xa0], 7
call fcn.004dd6c0
lea ecx, [esp + 0x28]
mov byte [esp + 0xa0], 3
call fcn.004dda80
lea ecx, [esp + 0x88]
call fcn.004e5b10
lea ecx, [esp + 0xc]
call fcn.004e5b10
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0x90]
pop edi
mov dword fs:[0], ecx
add esp, 0x98
ret 0x24