Function at 0x4f1540
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
push ebx
push esi
mov esi, ecx
mov dword [esp + 0x50], edx
xor eax, eax
mov dword [esp + 0x10], esi
push edi
xor ecx, ecx
mov byte [esp + 0x13], 0
mov ebx, dword [esi + 8]
mov dword [esp + 0x28], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x58], ecx
mov edi, dword [ebx + 0x74]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x5c], edi
cmp dword [ebx + 0x78], edi
jg 0x4f1598
push ecx
push ecx
push ecx
lea edx, [eax + 0x11]
mov ecx, ebx
call fcn.004845f0
mov edx, dword [esp + 0x60]
add esp, 0xc
mov dword [esp + 0x5c], eax
jmp 0x4f15cb
lea eax, [edi + 1]
mov dword [ebx + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [ebx + 0x70]
mov dword [eax + ecx*4], 0x11
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 8]
xorps xmm0, xmm0
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x34], ecx
mov eax, dword [eax + 0x10]
mov dword [esp + 0x40], eax
mov eax, dword [edx + 0xc]
mov edx, dword [ebp + 0x14]
movlpd qword [esp + 0x60], xmm0
lea eax, [eax + eax*2]
mov edx, dword [edx + 0x4c]
shl eax, 4
add eax, ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x4c], eax
cmp ecx, eax
jae 0x4f1991
mov eax, dword [esp + 0x64]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x44], 1
mov dword [esp + 0x30], eax
nop word [eax + eax]
test byte [ecx + 0xa], 2
mov edi, dword [ecx]
jne 0x4f1838
mov ecx, dword [ebp + 8]
test byte [ecx + 0x24], 8
je 0x4f164f
test byte [edi + 4], 1
je 0x4f1838
mov dword [esp + 0x70], fcn.0049dbe0
mov eax, 3
mov word [esp + 0x80], ax
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x74], 0x49dac0
mov dword [esp + 0x84], eax
test edi, edi
je 0x4f16a8
mov edx, edi
lea ecx, [esp + 0x6c]
call fcn.00497e80
cmp word [esp + 0x80], 0
je 0x4f1838
mov ecx, dword [esi]
mov edx, edi
push 0
push 0
call fcn.0049ca30
add esp, 8
mov ebx, eax
jmp 0x4f16aa
xor ebx, ebx
mov edx, dword [esp + 0x28]
mov edi, dword [esi]
mov dword [esp + 0x48], edi
test edx, edx
jne 0x4f16c1
mov dword [esp + 0x28], ebx
jmp 0x4f1838
test ebx, ebx
je 0x4f1838
mov eax, dword [edx + 4]
lea ecx, [ebx + 4]
and eax, 0x20000001
cmp eax, 0x20000000
je 0x4f16f1
mov eax, dword [ecx]
and eax, 0x20000001
mov dword [esp + 0x50], ecx
cmp eax, 0x20000000
jne 0x4f17a7
cmp byte [esi + 0xd0], 2
mov dword [esp + 0x50], ecx
jae 0x4f17a7
mov ecx, esi
call fcn.0049c8a0
mov edx, ebx
mov ecx, esi
call fcn.0049c8a0
xor edi, edi
lea edx, [esp + 0x50]
mov ecx, 0x587a10
mov dword [esp + 0x50], edi
call fcn.00463ff0
mov ecx, dword [esp + 0x48]
test eax, eax
mov eax, 2
cmove edi, eax
push 0
lea eax, [edi + 0x34]
push eax
call fcn.004600a0
mov ebx, eax
add esp, 8
mov dword [esp + 0x28], ebx
test ebx, ebx
je 0x4f1838
push 0x34
push 0
push ebx
call fcn.00533fc0
or eax, 0xffffffff
mov byte [ebx], 0x9b
add esp, 0xc
mov word [ebx + 0x22], ax
test edi, edi
jne 0x4f1790
mov eax, dword [esp + 0x50]
mov ecx, 0x20800400
test eax, eax
mov dword [ebx + 8], eax
mov edx, 0x10800400
mov dword [ebx + 0x18], 1
cmovne ecx, edx
or dword [ebx + 4], ecx
jmp 0x4f1838
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov word [eax], 0x30
mov dword [ebx + 0x18], 1
jmp 0x4f1838
push 0
push 0x34
mov ecx, edi
call fcn.004600a0
mov edi, eax
add esp, 8
test edi, edi
je 0x4f1820
push 0x34
push 0
push edi
call fcn.00533fc0
mov ecx, dword [esp + 0x5c]
or eax, 0xffffffff
mov word [edi + 0x22], ax
add esp, 0xc
mov eax, dword [esp + 0x28]
mov byte [edi], 0x2c
mov dword [edi + 0x10], ebx
mov ecx, dword [ecx]
and ecx, 0x200104
mov dword [edi + 0xc], eax
or ecx, dword [edi + 4]
mov dword [edi + 4], ecx
mov eax, dword [eax + 4]
and eax, 0x200104
or eax, ecx
mov ecx, edi
mov dword [edi + 4], eax
call fcn.0049bb60
mov eax, dword [esi]
mov eax, dword [eax + 0x84]
cmp dword [edi + 0x18], eax
jle 0x4f1834
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push esi
call fcn.004633a0
add esp, 0xc
jmp 0x4f1834
mov edx, dword [esp + 0x28]
mov ecx, dword [esi]
call fcn.0049c740
mov ecx, dword [esi]
mov edx, ebx
call fcn.0049c740
mov dword [esp + 0x28], edi
push dword [ebp + 0x10]
mov edi, dword [esp + 0x38]
mov ecx, edi
push dword [ebp + 0xc]
mov edx, dword [ebp + 8]
call fcn.004f1450
add esp, 8
test eax, eax
je 0x4f196e
mov ecx, dword [edi + 0x18]
xor edi, edi
cmp ecx, 0x40
jl 0x4f1868
mov ebx, SysReAllocString
jmp 0x4f187d
mov eax, ecx
xor ebx, ebx
bts edi, eax
cmp eax, 0x20
cmovae ebx, edi
xor edi, ebx
cmp eax, 0x40
cmovae ebx, edi
cmp byte [esp + 0x13], 0
jne 0x4f18a9
mov edx, dword [esp + 0x40]
add ecx, ecx
mov eax, dword [edx + 4]
push dword [eax + ecx*8]
push dword [edx]
push str.automatic_index_on__s__s_
push 0x11c
call fcn.00462980
add esp, 0x10
mov byte [esp + 0x13], 1
mov ecx, edi
mov eax, ebx
and ecx, dword [esp + 0x30]
and eax, dword [esp + 0x2c]
or ecx, eax
jne 0x4f196e
mov edx, dword [esp + 0x24]
mov ecx, dword [esi]
mov dword [esp + 0x50], ecx
movzx eax, word [edx + 0x34]
mov edx, dword [esp + 0x44]
cmp eax, edx
jge 0x4f193f
lea eax, [edx + 7]
and eax, 0xfffffff8
mov dword [esp + 0x3c], eax
shl eax, 2
push 0
push eax
call fcn.004600a0
add esp, 8
mov dword [esp + 0x48], eax
test eax, eax
je 0x4f2352
mov edx, dword [esp + 0x24]
movzx ecx, word [edx + 0x34]
shl ecx, 2
push ecx
push dword [edx + 0x38]
push eax
call fcn.00533a40
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov edx, dword [ecx + 0x38]
lea eax, [ecx + 0x40]
cmp edx, eax
je 0x4f192a
mov ecx, dword [esp + 0x50]
call fcn.0045fcb0
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov dword [ecx + 0x38], eax
mov eax, dword [esp + 0x3c]
mov word [ecx + 0x34], ax
jmp 0x4f1943
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
inc edx
mov eax, dword [ecx + 0x38]
or dword [esp + 0x30], edi
mov edi, dword [esp + 0x2c]
inc dword [esp + 0x1c]
or edi, ebx
mov ecx, dword [esp + 0x34]
mov dword [eax + esi*4], ecx
mov esi, dword [esp + 0x14]
mov dword [esp + 0x44], edx
mov dword [esp + 0x2c], edi
jmp 0x4f1976
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
add ecx, 0x30
mov dword [esp + 0x34], ecx
cmp ecx, dword [esp + 0x4c]
jb 0x4f1630
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
jmp 0x4f1999
mov edi, dword [esp + 0x64]
mov ebx, dword [esp + 0x60]
mov eax, dword [esp + 0x1c]
not edi
movzx eax, ax
or edi, 0x80000000
mov word [edx + 0x30], ax
not ebx
mov word [edx + 0x18], ax
mov eax, dword [ebp + 8]
mov dword [edx + 0x2c], 0x4241
mov edx, 0x3f
and edi, dword [eax + 0x3c]
mov ecx, dword [eax + 0x38]
and ebx, ecx
mov eax, dword [esp + 0x40]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], edi
xor edi, edi
mov dword [esp + 0x48], ecx
movzx eax, word [eax + 0x22]
movsx ebx, ax
mov dword [esp + 0x50], ebx
cmp dx, ax
jge 0x4f19f1
mov dword [esp + 0x34], edx
jmp 0x4f19ff
mov eax, ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x34], eax
test eax, eax
jle 0x4f1a3d
mov esi, dword [esp + 0x34]
mov ebx, dword [esp + 0x2c]
xor edx, edx
xor ecx, ecx
mov eax, edi
bts edx, eax
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, dword [esp + 0x30]
and ecx, ebx
or edx, ecx
je 0x4f1a2c
inc dword [esp + 0x1c]
inc edi
cmp edi, esi
jl 0x4f1a07
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
mov eax, dword [ebp + 8]
cmp dword [eax + 0x3c], 0
jg 0x4f1a5b
jl 0x4f1a4c
test ecx, ecx
jae 0x4f1a5b
mov eax, dword [esp + 0x1c]
add eax, 0xffffffc1
add eax, ebx
mov dword [esp + 0x1c], eax
jmp 0x4f1a5f
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi]
movzx eax, ax
inc eax
movzx eax, ax
movsx edi, ax
mov dword [esp + 0x48], eax
lea eax, [edi*4 + 9]
add eax, edi
lea ebx, [edi*4 + 7]
and eax, 0xfffffff8
and ebx, 0xfffffff8
add eax, 0x48
add eax, ebx
mov dword [esp + 0x50], eax
cdq
push edx
push eax
test ecx, ecx
je 0x4f1a9c
call fcn.004600a0
jmp 0x4f1aa1
call fcn.0045f9d0
add esp, 8
mov dword [esp + 0x20], eax
test eax, eax
je 0x4f2352
push dword [esp + 0x50]
push 0
push eax
call fcn.00533fc0
mov edx, dword [esp + 0x2c]
add esp, 0xc
xorps xmm0, xmm0
movlpd qword [esp + 0x60], xmm0
lea eax, [edx + 0x48]
mov dword [edx + 0x20], eax
lea ecx, [edx + 4]
add eax, ebx
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x1c]
xor ebx, ebx
mov dword [edx + 8], eax
mov dword [esp + 0x44], ebx
lea eax, [eax + edi*2]
add eax, 2
mov dword [edx + 4], eax
lea eax, [eax + edi*2]
mov dword [edx + 0x1c], eax
mov eax, dword [esp + 0x48]
mov word [edx + 0x34], ax
movzx eax, cx
mov ecx, dword [esp + 0x54]
mov word [edx + 0x32], ax
mov eax, dword [esp + 0x24]
mov dword [eax + 0x20], edx
mov eax, dword [esp + 0x40]
mov dword [edx], str.auto_index
mov dword [edx + 0xc], eax
mov ecx, dword [ecx + 0x18]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x48], edx
cmp ecx, dword [esp + 0x4c]
jae 0x4f1c57
mov eax, dword [esp + 0x34]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x44], eax
nop
push dword [ebp + 0x10]
mov edx, dword [ebp + 8]
push dword [ebp + 0xc]
call fcn.004f1450
add esp, 8
test eax, eax
je 0x4f1c2f
mov eax, dword [esp + 0x3c]
xor edx, edx
mov eax, dword [eax + 0x18]
movzx ecx, ax
mov dword [esp + 0x60], ecx
cmp eax, 0x40
jl 0x4f1b85
mov edi, SysReAllocString
jmp 0x4f1b98
xor edi, edi
bts edx, eax
cmp eax, 0x20
cmovae edi, edx
xor edx, edi
cmp eax, 0x40
cmovae edi, edx
mov ecx, edx
mov eax, edi
and ecx, dword [esp + 0x44]
and eax, dword [esp + 0x48]
or ecx, eax
jne 0x4f1c2f
mov eax, dword [esp + 0x3c]
or dword [esp + 0x44], edx
mov edx, dword [esp + 0x60]
or dword [esp + 0x48], edi
mov ecx, dword [eax]
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 4]
mov word [eax + ebx*2], dx
test dword [ecx + 4], 0x200
je 0x4f1bda
mov edi, dword [ecx + 0xc]
mov edx, dword [ecx + 0x10]
jmp 0x4f1be0
mov edi, dword [ecx + 0x10]
mov edx, dword [ecx + 0xc]
test dword [edx + 4], 0x100
jne 0x4f1c03
test edi, edi
je 0x4f1bf6
test dword [edi + 4], 0x100
jne 0x4f1c01
mov ecx, esi
call fcn.0049b030
test eax, eax
jne 0x4f1c0e
mov edx, edi
mov ecx, esi
call fcn.0049b030
test eax, eax
je 0x4f1c1d
mov edx, dword [esp + 0x20]
mov ecx, dword [eax]
mov eax, dword [edx + 0x20]
mov dword [eax + ebx*4], ecx
inc ebx
jmp 0x4f1c33
mov edx, dword [esp + 0x20]
mov ecx, 0x57a63c
mov eax, dword [edx + 0x20]
mov dword [eax + ebx*4], ecx
inc ebx
jmp 0x4f1c33
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x3c]
add ecx, 0x30
mov dword [esp + 0x3c], ecx
cmp ecx, dword [esp + 0x4c]
jb 0x4f1b50
lea eax, [edx + 4]
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
xor edi, edi
cmp dword [esp + 0x34], edi
jle 0x4f1cb0
mov esi, dword [esp + 0x48]
xor edx, edx
xor ecx, ecx
mov eax, edi
bts edx, eax
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, dword [esp + 0x30]
and ecx, dword [esp + 0x2c]
or edx, ecx
je 0x4f1c9b
mov eax, dword [esi]
mov word [eax + ebx*2], di
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x20]
mov dword [eax + ebx*4], 0x57a63c
inc ebx
mov edx, dword [esp + 0x50]
inc edi
mov esi, edx
cmp edi, dword [esp + 0x34]
jl 0x4f1c63
mov esi, dword [esp + 0x14]
mov dword [esp + 0x44], ebx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x3c], 0
jg 0x4f1cf8
jl 0x4f1cc1
cmp dword [eax + 0x38], 0
jae 0x4f1cf8
mov edi, dword [esp + 0x40]
mov eax, 0x3f
cmp ax, word [edi + 0x22]
jge 0x4f1cf8
mov esi, dword [esp + 0x20]
mov ecx, eax
mov eax, dword [edx]
mov word [eax + ebx*2], cx
inc ecx
mov eax, dword [esi + 0x20]
mov dword [eax + ebx*4], 0x57a63c
inc ebx
movsx eax, word [edi + 0x22]
cmp ecx, eax
jl 0x4f1cd6
mov esi, dword [esp + 0x14]
mov dword [esp + 0x44], ebx
mov eax, dword [edx]
or ecx, 0xffffffff
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
inc edx
mov word [eax + ebx*2], cx
mov eax, dword [esp + 0x20]
mov ecx, dword [ebp + 0x14]
mov eax, dword [eax + 0x20]
mov dword [eax + ebx*4], 0x57a63c
mov eax, dword [esi + 0x28]
mov dword [ecx + 8], eax
inc dword [esi + 0x28]
mov eax, dword [ecx + 8]
mov ecx, dword [edi + 0x74]
mov dword [esp + 0x60], eax
cmp dword [edi + 0x78], ecx
jg 0x4f1d4b
push 0
push edx
push eax
mov edx, 0x73
mov ecx, edi
call fcn.004845f0
add esp, 0xc
lea ebx, [edi + 0x70]
jmp 0x4f1d80
mov esi, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ebx, [edi + 0x70]
mov eax, dword [ebx]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 8]
mov ecx, esi
mov edx, dword [esp + 0x20]
mov dword [esp + 0x60], eax
call fcn.004b6e90
mov dword [esp + 0x50], eax
test eax, eax
je 0x4f1dcf
mov edx, dword [esp + 0x60]
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
je 0x4f1db9
push eax
mov edx, 0xfffffff7
call fcn.00485100
add esp, 4
lea ebx, [edi + 0x70]
jmp 0x4f1dcf
mov eax, dword [edx + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x70]
mov edx, dword [esp + 0x50]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov eax, dword [esi]
test dword [eax + 0x50], 0x80000
jne 0x4f1e3a
mov edx, dword [esi + 0x2c]
mov eax, dword [ebp + 0x14]
inc edx
mov dword [esi + 0x2c], edx
mov dword [eax + 0x34], edx
mov ecx, dword [edi + 0x74]
cmp dword [edi + 0x78], ecx
jg 0x4f1e08
push 0
push edx
push 0x2710
mov edx, 0x4c
mov ecx, edi
call fcn.004845f0
add esp, 0xc
jmp 0x4f1e3a
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4], 0x4c
mov dword [eax + ecx*4 + 4], 0x2710
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 0x14]
movzx eax, byte [edx + 0x38]
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0x54]
mov eax, dword [eax]
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 0x30], 0x10
lea eax, [eax + ecx*8]
mov dword [esp + 0x40], eax
je 0x4f1f5b
mov ecx, dword [edi + 0x74]
mov edx, dword [eax + 0x24]
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], ecx
cmp dword [edi + 0x78], ecx
jg 0x4f1e91
push 0
push 0
push 0
mov edx, 0x47
mov ecx, edi
call fcn.004845f0
mov edx, dword [esp + 0x60]
add esp, 0xc
mov dword [esp + 0x58], eax
jmp 0x4f1ec7
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x40]
mov ecx, dword [edi + 0x74]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x60], eax
cmp dword [edi + 0x78], ecx
jg 0x4f1ef3
push eax
push 0
push edx
mov edx, 0xd
mov ecx, edi
call fcn.004845f0
mov edx, dword [esp + 0x60]
add esp, 0xc
jmp 0x4f1f25
mov esi, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x18]
mov edi, dword [edi + 0x74]
cmp dword [ecx + 0x78], edi
jg 0x4f1f47
push 0
push 0
push edx
mov edx, 0xe
call fcn.004845f0
add esp, 0xc
mov edi, eax
jmp 0x4f1fb2
lea eax, [edi + 1]
mov dword [ecx + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4], 0xe
jmp 0x4f1f92
mov ecx, dword [esp + 0x18]
mov edi, dword [edi + 0x74]
mov edx, dword [edx + 4]
cmp dword [ecx + 0x78], edi
jg 0x4f1f80
push 0
push 0
push edx
mov edx, 0x26
call fcn.004845f0
add esp, 0xc
mov edi, eax
jmp 0x4f1fb2
lea eax, [edi + 1]
mov dword [ecx + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4], 0x26
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 4], edx
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4f1fdc
dec dword [esi + 0x38]
mov ecx, dword [esi + 0x38]
push 0x10
push ecx
push eax
push esi
mov dword [esp + 0x48], ecx
call fcn.004a4220
mov eax, dword [esp + 0x34]
add esp, 0x10
or dword [eax + 0x2c], 0x20000
mov al, byte [esi + 0x13]
test al, al
jne 0x4f1feb
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x4f1ffa
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x98]
mov edx, dword [esp + 0x20]
mov ecx, esi
push 0
push 0
push 0
push 0
push eax
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x14]
push dword [eax + 4]
call fcn.004b98e0
mov dword [esp + 0x6c], eax
add esp, 0x18
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x60], eax
test eax, eax
je 0x4f20c7
mov edx, dword [esp + 0x24]
movzx ecx, word [edx + 0x18]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x4c], ecx
mov ecx, dword [edx + 0x74]
mov dword [esp + 0x50], ecx
cmp dword [edx + 0x78], ecx
jg 0x4f206d
push dword [esp + 0x54]
mov ecx, dword [esp + 0x1c]
mov edx, 0xb2
push 0
push eax
call fcn.004845f0
mov edx, dword [esp + 0x24]
add esp, 0xc
mov ecx, eax
jmp 0x4f20a7
mov esi, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0xb2
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x50]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
jne 0x4f20cb
mov eax, dword [ebx]
lea ecx, [ecx + ecx*4]
mov esi, dword [esp + 0x4c]
mov dword [eax + ecx*4 + 0x10], esi
mov esi, dword [esp + 0x14]
mov byte [eax + ecx*4 + 1], 0xfd
jmp 0x4f20cb
mov edx, dword [esp + 0x18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [edx + 0x74]
mov eax, dword [eax + 8]
mov dword [esp + 0x60], eax
cmp dword [edx + 0x78], ecx
jg 0x4f20fb
mov ecx, dword [esp + 0x18]
mov edx, 0x89
push 0
push dword [esp + 0x40]
push eax
call fcn.004845f0
mov edx, dword [esp + 0x24]
add esp, 0xc
jmp 0x4f2131
mov esi, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edx + 0x74]
test ecx, ecx
jle 0x4f214e
mov eax, dword [ebx]
lea ecx, [ecx + ecx*4]
mov esi, 0x10
mov word [eax + ecx*4 - 0x12], si
mov ecx, dword [edx + 0x74]
mov esi, dword [esp + 0x14]
cmp dword [esp + 0x28], 0
je 0x4f2196
mov eax, dword [edx + 0xc]
mov esi, dword [edx + 0xc]
not dword [esp + 0x38]
mov dword [esp + 0x60], eax
mov eax, dword [eax + 0x3c]
add eax, dword [esi + 0x38]
mov esi, dword [esp + 0x14]
jns 0x4f2185
push dword [esp + 0x38]
mov ecx, dword [esp + 0x64]
call fcn.00484e10
mov edx, dword [esp + 0x1c]
add esp, 4
jmp 0x4f2196
mov eax, dword [edx + 0xc]
mov esi, dword [esp + 0x38]
mov eax, dword [eax + 0x40]
mov dword [eax + esi*4], ecx
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
test byte [eax + 0x30], 0x10
je 0x4f2260
mov ecx, dword [esp + 0x58]
test ecx, ecx
jns 0x4f21b0
mov ecx, dword [edx + 0x74]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4f21bf
mov ecx, 0x5abde4
jmp 0x4f21c7
mov eax, dword [ebx]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x44]
mov edx, edi
add eax, dword [esp + 0x54]
mov dword [ecx + 8], eax
mov ecx, dword [ebp + 0x14]
mov eax, dword [esp + 0x40]
push dword [ecx + 8]
push dword [eax + 0x28]
push dword [ecx + 4]
mov ecx, esi
call fcn.004f13c0
mov edx, dword [esp + 0x24]
add esp, 0xc
mov ecx, dword [edx + 0x74]
cmp dword [edx + 0x78], ecx
jg 0x4f2221
mov ecx, dword [esp + 0x18]
mov edx, 0xb
push 0
push edi
push 0
call fcn.004845f0
mov eax, dword [esp + 0x4c]
add esp, 0xc
mov edx, dword [esp + 0x18]
and dword [eax + 0x30], 0xffffffef
jmp 0x4f22e2
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x40]
and dword [eax + 0x30], 0xffffffef
jmp 0x4f22e2
mov ecx, dword [ebp + 0x14]
lea eax, [edi + 1]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x58], ecx
mov ecx, dword [edx + 0x74]
cmp dword [edx + 0x78], ecx
jg 0x4f2293
mov ecx, dword [esp + 0x18]
mov edx, 5
push 0
push eax
push dword [esp + 0x60]
call fcn.004845f0
mov edx, dword [esp + 0x24]
add esp, 0xc
jmp 0x4f22c8
mov esi, dword [esp + 0x58]
lea eax, [ecx + 1]
mov dword [edx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx]
mov dword [eax + ecx*4 + 4], esi
lea esi, [edi + 1]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 5
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx + 0x74]
test eax, eax
jle 0x4f22e2
lea ecx, [eax + eax*4]
mov esi, 3
mov eax, dword [ebx]
mov word [eax + ecx*4 - 0x12], si
mov esi, dword [esp + 0x14]
mov eax, dword [edx + 0x74]
mov dword [esp + 0x60], eax
test edi, edi
jns 0x4f22f0
lea edi, [eax - 1]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4f22ff
mov eax, 0x5abde4
jmp 0x4f2307
mov eax, dword [ebx]
lea ecx, [edi + edi*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x4f232a
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x4f232a
movzx eax, al
mov dword [esi + eax*4 + 0x98], ecx
inc byte [esi + 0x13]
mov ecx, dword [esp + 0x5c]
mov edi, dword [edx + 0x74]
test ecx, ecx
jns 0x4f2338
lea ecx, [edi - 1]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4f2347
mov eax, 0x5abde4
jmp 0x4f234f
mov eax, dword [ebx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edi
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4f2363
mov ecx, dword [esi]
mov edx, eax
call fcn.0049c740
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret