Function at 0x4f8fe0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x68
push ebp
mov ebp, dword [esp + 0x70]
xor ecx, ecx
push edi
mov dword [esp + 0x48], ecx
mov dword [esp + 0x40], ecx
mov edi, dword [ebp + 8]
mov byte [esp + 0xb], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], edi
mov ecx, dword [edi + 0x74]
mov dword [esp + 0x50], ecx
cmp dword [edi + 0x78], ecx
jg 0x4f902a
push 0
push 0
push 0
push 0x11
push edi
call fcn.00515850
add esp, 0x14
mov dword [esp + 0x50], eax
jmp 0x4f905d
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4], 0x11
mov dword [eax + ecx*4 + 4], FlushViewOfFile
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + UnregisterWaitx10], 0
mov edx, dword [esp + 0x7c]
xor ecx, ecx
push ebx
push esi
mov dword [esp + 0x14], ecx
mov eax, dword [edx + 0x10]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x54], 3
mov esi, dword [eax + 0x18]
mov eax, dword [eax + 0xc]
lea ebx, [eax + eax*2]
mov eax, dword [esp + 0x90]
shl ebx, 4
add ebx, esi
mov dword [esp + 0x44], ebx
mov eax, dword [eax + 0x4c]
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x18], eax
cmp esi, ebx
jae 0x4f92a1
test byte [esi + 0xa], 2
mov ebx, dword [esi]
jne 0x4f9134
test byte [edx + 0x24], 8
je LoadIconW
test byte [ebx + 4], 1
je 0x4f9134
mov eax, dword [esp + 0x54]
mov word [esp + 0x70], ax
mov eax, dword [edx + 0x2c]
mov dword [esp + 0x60], 0x4ff1f0
mov dword [esp + 0x64], 0x55ae30
mov dword [esp + 0x74], eax
test ebx, ebx
je 0x4f9115
lea eax, [esp + 0x5c]
push ebx
push eax
call fcn.00580c50
add esp, 8
cmp word [esp + 0x70], 0
je CreatePopupMenu
test ebx, ebx
je 0x4f9115
push 0
push 0
push ebx
push dword [ebp]
call fcn.004fe730
add esp, 0x10
jmp 0x4f9117
xor eax, eax
push eax
push dword [esp + 0x30]
push ebp
call fcn.0053a460
add esp, 0xc
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x84]
mov ecx, dword [esi + 0x14]
cmp ecx, dword [edx + 0x2c]
jne reloc.USER32.dll_SetParent
movzx ecx, word [esi + 0xc]
test cl, 0x82
je reloc.USER32.dll_SetParent
test byte [edx + 0x24], 8
je 0x4f9163
mov eax, dword [esi]
test byte [eax + 4], 1
jne 0x4f9163
test cl, cl
js SetParent
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x24]
and ecx, dword [esp + 0x88]
and eax, dword [esp + 0x8c]
or ecx, eax
jne IntersectRect
mov ecx, dword [esi + 0x18]
test ecx, ecx
js SetParent
mov eax, dword [edx + 0x10]
add ecx, ecx
push dword [esi]
mov eax, dword [eax + 4]
mov bl, byte [eax + ecx*8 + 8]
call fcn.004f8840
add esp, 4
cmp al, 0x42
jl 0x4f91c0
jne reloc.USER32.dll_EnumChildWindows
xor eax, eax
cmp bl, 0x42
sete al
jmp 0x4f91b8
xor eax, eax
cmp bl, 0x43
setge al
test eax, eax
je 0x4f9285
mov ebx, dword [esi + 0x18]
cmp ebx, 0x40
jl reloc.USER32.dll_GetClientRect
xor ebp, ebp
mov dword [esp + 0x40], closesocket
jmp 0x4f91e8
mov eax, 1
xor edx, edx
mov ecx, ebx
call fcn.0042e9b0
mov ebp, eax
mov dword [esp + 0x40], edx
cmp byte [esp + 0x13], 0
jne 0x4f9214
mov eax, dword [esp + 0x38]
add ebx, ebx
mov ecx, dword [eax + 4]
push dword [ecx + ebx*8]
push dword [eax]
push str.automatic_index_on__s__s_
push SystemParametersInfoW
call fcn.004e9df0
add esp, 0x10
mov byte [esp + 0x13], 1
mov ebx, dword [esp + 0x40]
mov ecx, ebp
and ecx, dword [esp + 0x20]
mov eax, ebx
and eax, dword [esp + 0x18]
or ecx, eax
jne 0x4f9281
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
inc eax
push eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x80]
push edx
push dword [eax]
call fcn.005840a0
add esp, 0xc
test eax, eax
jne GetSysColorBrush
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
or dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x7c]
mov eax, dword [eax + 0x38]
mov edx, dword [esp + 0x84]
mov dword [eax + ecx*4], esi
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x4c]
or eax, ebx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
jmp 0x4f9294
mov ebp, dword [esp + 0x7c]
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
add esi, 0x30
cmp esi, dword [esp + 0x44]
jb CallWindowProcW
mov ebx, dword [esp + 0x24]
not eax
or eax, 0x80000000
xor esi, esi
mov word [ebx + 0x30], cx
mov word [ebx + 0x18], cx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x2c], 0x4241
not ecx
mov ebx, dword [edx + 0x3c]
and eax, ebx
and ecx, dword [edx + 0x38]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x4c], ebx
movzx ecx, word [eax + 0x22]
mov eax, 0x3f
mov dword [esp + 0x40], ecx
cmp ax, cx
jge 0x4f92f3
mov dword [esp + 0x34], eax
jmp 0x4f92fe
movsx eax, cx
mov dword [esp + 0x34], eax
test eax, eax
jle 0x4f9342
mov edi, dword [esp + 0x34]
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
lea ebx, [ebx]
mov eax, 1
xor edx, edx
mov ecx, esi
call fcn.0042e9b0
and eax, dword [esp + 0x20]
and edx, ebx
or eax, edx
je 0x4f9329
inc ebp
inc esi
cmp esi, edi
jl 0x4f9310
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x7c]
and ebx, 0x80000000
xor eax, eax
or eax, ebx
je 0x4f9360
movsx eax, cx
mov ecx, dword [esp + 0x14]
add ecx, 0xffffffc1
add ecx, eax
mov dword [esp + 0x14], ecx
jmp 0x4f9364
mov ecx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov ecx, dword [ebp]
movzx eax, ax
movsx ebx, ax
mov dword [esp + 0x3c], eax
lea edx, [ebx*4 + 7]
and edx, 0xfffffff8
lea eax, [ebx*4 + 9]
add eax, ebx
mov dword [esp + 0x4c], edx
and eax, 0xfffffff8
add edx, 0x48
add eax, edx
cdq
mov esi, eax
test ecx, ecx
je 0x4f93a7
push edx
push esi
push ecx
call fcn.00537860
add esp, 0xc
jmp 0x4f940c
mov eax, esi
or eax, edx
je 0x4f940a
test edx, edx
ja 0x4f940a
jb GetScrollPos
cmp esi, 0x7fffff00
jae 0x4f940a
cmp dword [0x8f4e18], 0
je SetActiveWindow
mov eax, dword [0x973ba0]
test eax, eax
je 0x4f93d7
push eax
call dword [0x8f4e68]
add esp, 4
lea eax, [esp + 0x40]
push eax
push esi
call fcn.0051b7d0
mov eax, dword [0x973ba0]
add esp, 8
test eax, eax
je 0x4f93f8
push eax
call dword [0x8f4e70]
add esp, 4
mov eax, dword [esp + 0x40]
jmp CreateAcceleratorTableW
push esi
call dword [0x8f4e38]
add esp, 4
jmp 0x4f940c
xor eax, eax
mov dword [esp + 0x1c], eax
test eax, eax
je IsZoomed
push esi
mov esi, eax
push 0
push esi
call sub.MSVCRT.dll_memset
lea eax, [esi + 0x48]
add esp, 0xc
mov dword [esi + 0x20], eax
add eax, dword [esp + 0x4c]
mov dword [esi + 8], eax
lea eax, [eax + ebx*2]
add eax, 2
mov dword [esi + 4], eax
lea eax, [eax + ebx*2]
xor ebx, ebx
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x3c]
mov word [esi + 0x34], ax
dec eax
mov word [esi + 0x32], ax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [eax + 0x20], esi
mov eax, dword [esp + 0x38]
mov dword [esi], str.auto_index
mov dword [esi + 0xc], eax
mov esi, dword [esp + 0x80]
mov esi, dword [esi + 0x18]
mov dword [esp + 0x30], esi
cmp esi, dword [esp + 0x44]
jae reloc.USER32.dll_CharUpperW
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x84]
mov eax, dword [esi + 0x14]
cmp eax, dword [edx + 0x2c]
jne MsgWaitForMultipleObjects
movzx ecx, word [esi + 0xc]
test cl, 0x82
je 0x4f95e5
test byte [edx + 0x24], 8
je GetActiveWindow
mov eax, dword [esi]
test byte [eax + 4], 1
jne GetActiveWindow
test cl, cl
js 0x4f95e5
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x24]
and ecx, dword [esp + 0x88]
and eax, dword [esp + 0x8c]
or ecx, eax
jne 0x4f95e5
mov ecx, dword [esi + 0x18]
test ecx, ecx
js 0x4f95e5
mov eax, dword [edx + 0x10]
add ecx, ecx
push dword [esi]
mov eax, dword [eax + 4]
mov al, byte [eax + ecx*8 + 8]
mov byte [esp + 0x17], al
call fcn.004f8840
add esp, 4
cmp al, 0x42
jl 0x4f9524
jne reloc.USER32.dll_DefFrameProcW
xor eax, eax
cmp byte [esp + 0x13], 0x42
sete al
jmp 0x4f951c
xor eax, eax
cmp byte [esp + 0x13], 0x43
setge al
test eax, eax
je IsChild
mov ecx, dword [esi + 0x18]
cmp ecx, 0x40
jl 0x4f9539
mov ecx, 0x80000000
xor eax, eax
mov dword [esp + 0x4c], ecx
jmp 0x4f954b
mov eax, 1
xor edx, edx
call fcn.0042e9b0
mov ecx, edx
mov dword [esp + 0x4c], edx
and ecx, dword [esp + 0x40]
mov esi, eax
and esi, dword [esp + 0x3c]
or esi, ecx
mov esi, dword [esp + 0x30]
jne OpenClipboard
or dword [esp + 0x3c], eax
mov eax, dword [esp + 0x40]
or eax, dword [esp + 0x4c]
mov edx, dword [esi]
mov ecx, dword [edi + 4]
mov dword [esp + 0x40], eax
mov ax, word [esi + 0x18]
mov word [ecx + ebx*2], ax
test dword [edx + 4], 0x200
je 0x4f958f
mov esi, dword [edx + 0xc]
mov eax, dword [edx + 0x10]
jmp 0x4f9595
mov esi, dword [edx + 0x10]
mov eax, dword [edx + 0xc]
test dword [eax + 4], 0x100
je 0x4f95a1
push eax
jmp 0x4f95bd
test esi, esi
je GetClipboardData
test dword [esi + 4], 0x100
jne 0x4f95bc
push eax
push ebp
call fcn.0053d030
add esp, 8
test eax, eax
jne 0x4f95ca
push esi
push ebp
call fcn.0053d030
add esp, 8
test eax, eax
je 0x4f95ce
mov ecx, dword [eax]
jmp 0x4f95d3
mov ecx, 0x5c0384
mov eax, dword [edi + 0x20]
mov esi, dword [esp + 0x30]
mov dword [eax + ebx*4], ecx
inc ebx
mov edx, dword [esp + 0x84]
add esi, 0x30
mov dword [esp + 0x30], esi
cmp esi, dword [esp + 0x44]
jb 0x4f9490
mov edi, dword [esp + 0x28]
xor esi, esi
cmp dword [esp + 0x34], esi
jle 0x4f9649
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
lea ebx, [ebx]
mov eax, 1
xor edx, edx
mov ecx, esi
call fcn.0042e9b0
and eax, dword [esp + 0x20]
and edx, dword [esp + 0x18]
or eax, edx
je DeleteObject
mov eax, dword [ebp + 4]
mov word [eax + ebx*2], si
mov eax, dword [ebp + 0x20]
mov dword [eax + ebx*4], 0x5c0384
inc ebx
inc esi
cmp esi, edi
jl 0x4f9610
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x7c]
mov ecx, dword [esp + 0x84]
xor eax, eax
mov edx, dword [esp + 0x1c]
mov ecx, dword [ecx + 0x3c]
and ecx, 0x80000000
or eax, ecx
je 0x4f968f
mov esi, dword [esp + 0x38]
mov eax, 0x3f
cmp ax, word [esi + 0x22]
jge 0x4f968f
mov ecx, eax
mov eax, dword [edx + 4]
mov word [eax + ebx*2], cx
inc ecx
mov eax, dword [edx + 0x20]
mov dword [eax + ebx*4], 0x5c0384
inc ebx
movsx eax, word [esi + 0x22]
cmp ecx, eax
jl 0x4f9674
mov eax, dword [edx + 4]
or ecx, 0xffffffff
mov word [eax + ebx*2], cx
mov eax, dword [edx + 0x20]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x14]
inc edx
mov dword [eax + ebx*4], 0x5c0384
mov eax, dword [ebp + 0x28]
mov dword [ecx + 8], eax
inc dword [ebp + 0x28]
mov esi, dword [ecx + 8]
mov ecx, dword [edi + 0x74]
cmp dword [edi + 0x78], ecx
jg 0x4f96d4
push 0
push edx
push esi
push 0x73
push edi
call fcn.00515850
add esp, 0x14
jmp 0x4f9703
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x70]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + CreatePenxc], 0
mov dword [eax + ecx*4 + MoveToExx10], 0
push dword [esp + 0x1c]
mov esi, dword [ebp + 8]
push ebp
call fcn.0054caa0
mov edx, eax
add esp, 8
test edx, edx
je 0x4f9741
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f972f
push edx
push 0xfffffffffffffff7
push eax
call fcn.00502620
add esp, 0xc
jmp 0x4f9741
mov eax, dword [esi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov eax, dword [ebp]
test dword [eax + 0x50], 0x80000
jne 0x4f97aa
mov edx, dword [ebp + 0x2c]
mov eax, dword [esp + 0x90]
inc edx
mov dword [ebp + 0x2c], edx
mov dword [eax + 0x34], edx
mov ecx, dword [edi + 0x74]
cmp dword [edi + 0x78], ecx
jg 0x4f977b
push 0
push edx
push 0x2710
push 0x4c
push edi
call fcn.00515850
add esp, 0x14
jmp 0x4f97aa
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4], 0x4c
mov dword [eax + ecx*4 + 4], 0x2710
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + GetDIBitsx10], 0
mov edx, dword [esp + 0x90]
movzx eax, byte [edx + 0x38]
lea esi, [eax + eax*8]
mov eax, dword [esp + 0x80]
lea esi, [esi + 1]
mov eax, dword [eax]
mov eax, dword [eax + 4]
test byte [eax + esi*8 + 0x28], 0x10
lea esi, [eax + esi*8]
mov dword [esp + 0x4c], esi
je StretchBlt
mov ecx, dword [edi + 0x74]
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x84], edx
mov dword [esp + 0x48], ecx
cmp dword [edi + 0x78], ecx
jg 0x4f980d
push 0
push 0
push 0
push SetPixel
push edi
call fcn.00515850
mov edx, dword [esp + 0x98]
add esp, 0x14
mov dword [esp + 0x48], eax
jmp 0x4f9844
mov ebp, dword [esp + 0x7c]
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], GetOpenFileNameW
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x74]
mov esi, dword [esi + 0x18]
cmp dword [edi + 0x78], ecx
jg 0x4f9867
push esi
push 0
push edx
push 0xd
push edi
call fcn.00515850
mov edx, dword [esp + 0x98]
add esp, 0x14
jmp reloc.COMCTL32.dll_ImageList_ReplaceIcon
mov ebp, dword [esp + 0x7c]
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ImageList_Add
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [edi + 0x74]
cmp dword [edi + 0x78], esi
jg 0x4f98b2
push 0
push 0
push edx
push 0xe
push edi
call fcn.00515850
add esp, 0x14
mov esi, eax
jmp 0x4f991d
mov ebp, dword [esp + 0x7c]
lea eax, [esi + 1]
mov dword [edi + 0x74], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4], 0xe
jmp 0x4f9901
mov esi, dword [edi + 0x74]
mov edx, dword [edx + 4]
cmp dword [edi + 0x78], esi
jg 0x4f98ea
push 0
push 0
push edx
push 0x26
push edi
call fcn.00515850
add esp, 0x14
mov esi, eax
jmp 0x4f991d
lea eax, [esi + 1]
mov dword [edi + 0x74], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x70]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x26
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 4], edx
mov eax, dword [esp + 0x2c]
test eax, eax
je DrawIconEx
dec dword [ebp + 0x38]
mov ecx, dword [ebp + 0x38]
push fmod
push ecx
push eax
push ebp
mov dword [esp + 0x60], ecx
call fcn.0053d910
mov eax, dword [esp + 0x34]
add esp, 0x10
or dword [eax + 0x2c], 0x20000
mov al, byte [ebp + 0x13]
test al, al
jne reloc.GDI32.dll_SetTextAlign
inc dword [ebp + 0x2c]
mov eax, dword [ebp + 0x2c]
jmp GetTextMetricsW
dec al
mov byte [ebp + 0x13], al
movzx eax, al
mov eax, dword [ebp + eax*4 + 0x98]
push 0
push 0
push 0
push 0
push eax
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xa4]
push dword [eax + 4]
push dword [esp + 0x34]
push ebp
call fcn.00548d30
mov ecx, eax
add esp, 0x20
mov eax, dword [esp + 0x90]
mov dword [esp + 0x80], ecx
mov eax, dword [eax + 0x34]
mov dword [esp + 0x44], eax
test eax, eax
je 0x4f9a26
mov edx, dword [esp + 0x24]
movzx edx, word [edx + 0x18]
mov dword [esp + 0x40], edx
mov edx, dword [edi + 0x74]
cmp dword [edi + 0x78], edx
jg 0x4f99d1
push ecx
push 0
push eax
push 0xb2
push edi
call fcn.00515850
add esp, 0x14
mov edx, eax
jmp 0x4f9a0b
mov ebp, dword [esp + 0x44]
lea eax, [edx + 1]
mov dword [edi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x80]
mov dword [eax + ecx*4 + 0xc], ebp
mov ebp, dword [esp + 0x7c]
mov dword [eax + ecx*4], 0xb2
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
jne 0x4f9a26
mov eax, dword [edi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x40]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov eax, dword [esp + 0x90]
mov ecx, dword [edi + 0x74]
mov eax, dword [eax + 8]
mov dword [esp + 0x44], eax
cmp dword [edi + 0x78], ecx
jg 0x4f9a57
mov edx, dword [esp + 0x84]
push 0
push edx
push eax
push 0x89
push edi
call fcn.00515850
add esp, 0x14
jmp 0x4f9a8d
mov edx, dword [esp + 0x44]
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x84]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0x74]
test eax, eax
jle 0x4f9aa4
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
cmp dword [esp + 0x2c], 0
je 0x4f9ad2
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x50]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4f9ac9
push edx
push edi
push ecx
call fcn.005278f0
add esp, 0xc
jmp 0x4f9ad2
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x74]
mov dword [ecx + edx*4], eax
mov eax, dword [esp + 0x4c]
test byte [eax + 0x28], 0x10
je 0x4f9b84
mov ecx, dword [esp + 0x48]
test ecx, ecx
jns 0x4f9aec
mov ecx, dword [edi + 0x74]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4f9afb
mov ecx, 0x973ecc
jmp 0x4f9b04
mov eax, dword [edi + 0x70]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x80]
add eax, ebx
mov ebx, dword [esp + 0x4c]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x90]
push dword [eax + 8]
push dword [ebx + 0x20]
push dword [eax + 4]
push esi
push ebp
call fcn.005785b0
mov ecx, dword [edi + 0x74]
add esp, 0x14
cmp dword [edi + 0x78], ecx
jg 0x4f9b4f
push 0
push esi
push 0
push 0xb
push edi
call fcn.00515850
add esp, 0x14
and dword [ebx + 0x28], 0xffffffef
jmp 0x4f9bef
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
and dword [ebx + 0x28], 0xffffffef
jmp 0x4f9bef
mov eax, dword [esp + 0x90]
lea edx, [esi + 1]
mov ecx, dword [edi + 0x74]
mov ebx, dword [eax + 4]
cmp dword [edi + 0x78], ecx
jg 0x4f9baa
push 0
push edx
push ebx
push 5
push edi
call fcn.00515850
add esp, 0x14
jmp 0x4f9bd9
mov ebp, dword [esp + 0x7c]
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x70]
mov dword [eax + ecx*4], 5
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0x74]
test eax, eax
jle 0x4f9bef
mov edx, dword [esp + 0x54]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [edi + 0x74]
test esi, esi
jns 0x4f9bf9
lea esi, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4f9c08
mov eax, 0x973ecc
jmp 0x4f9c11
mov eax, dword [edi + 0x70]
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x84]
mov dword [eax + 8], edx
test ecx, ecx
je 0x4f9c33
mov al, byte [ebp + 0x13]
cmp al, 8
jae 0x4f9c33
movzx eax, al
mov dword [ebp + eax*4 + 0x98], ecx
inc byte [ebp + 0x13]
mov ecx, dword [esp + 0x58]
mov edx, dword [edi + 0x74]
test ecx, ecx
jns 0x4f9c41
lea ecx, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4f9c53
mov eax, 0x973ecc
mov dword [eax + 8], edx
jmp 0x4f9c66
mov eax, dword [edi + 0x70]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x4f9c66
mov ebp, dword [esp + 0x7c]
mov eax, dword [esp + 0x2c]
pop esi
pop ebx
test eax, eax
je 0x4f9c7c
push eax
push dword [ebp]
call fcn.0053d5f0
add esp, 8
pop edi
pop ebp
add esp, 0x68
ret