Function at 0x4de5b0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x148
mov eax, dword [0x704034]
xor eax, esp
mov dword [esp + 0x144], eax
push esi
mov esi, ecx
mov dword [esp + 0x64], 1
mov ecx, dword [ebp + 8]
mov eax, edx
push edi
mov dword [esp + 0x78], ecx
mov edi, dword [esi + 8]
mov ecx, dword [esi]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x88], 0
mov dword [esp + 0x38], ecx
mov dword [esp + 0x48], edi
test edi, edi
jne 0x4de627
cmp dword [esi + 0x74], edi
jne 0x4de612
test byte [ecx + 0x4c], 8
jne 0x4de612
mov byte [esi + 0x17], 1
mov ecx, esi
call fcn.00499460
mov ecx, dword [esp + 0x38]
mov edi, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x48], edi
test eax, eax
je 0x4e0b18
cmp byte [ecx + 0x51], 0
jne 0x4e0b18
cmp dword [esi + 0x24], 0
jne 0x4e0b18
push 0
push 0
push 0
mov edx, 0x15
mov ecx, esi
call fcn.004bcbb0
add esp, 0xc
test eax, eax
jne 0x4e0b18
push 0x30
push eax
lea eax, [esp + 0x98]
push eax
call fcn.00639370
mov eax, dword [esp + 0x84]
add esp, 0xc
cmp byte [eax], 8
mov eax, dword [esp + 0x18]
ja 0x4de6a2
mov edx, dword [eax + 0x30]
test edx, edx
je 0x4de697
mov ecx, dword [esp + 0x38]
call fcn.004b15f0
mov eax, dword [esp + 0x18]
and dword [eax + 8], 0xfffffffe
mov dword [eax + 0x30], 0
push 0
mov edx, eax
mov ecx, esi
call fcn.004ddcb0
mov ecx, dword [esp + 0x3c]
add esp, 4
cmp dword [esi + 0x24], 0
jne 0x4e094f
cmp byte [ecx + 0x51], 0
jne 0x4e094f
mov eax, dword [esp + 0x78]
cmp byte [eax], 9
jne 0x4de6dc
mov edx, dword [esp + 0x18]
mov ecx, esi
call fcn.004d86c0
mov edx, dword [esp + 0x18]
mov ecx, esi
call fcn.004f6140
test eax, eax
jne 0x4e094b
mov edx, dword [esp + 0x18]
xorps xmm0, xmm0
movaps xmmword [esp + 0xe0], xmm0
movaps xmmword [esp + 0xf0], xmm0
movq qword [esp + 0x100], xmm0
mov eax, dword [edx + 8]
mov ecx, dword [edx + 0x20]
shr eax, 3
and eax, 1
mov dword [esp + 0x40], ecx
mov dword [esp + 0x34], eax
mov eax, dword [edx + 0x30]
mov dword [esp + 0x20], eax
mov dword [esp + 0xe0], eax
xor eax, eax
mov dword [esp + 0x64], eax
cmp dword [edx + 0x34], eax
jne 0x4de87b
mov dword [esp + 0x10], 0x2000
cmp eax, dword [ecx]
jge 0x4de87b
lea eax, [eax + eax*8]
lea eax, [eax + 1]
test byte [ecx + eax*8 + 0x24], 8
lea eax, [ecx + eax*8]
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x6c], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x50], eax
mov dword [esp + 0x3c], ecx
je 0x4de7b2
mov edx, dword [eax + 0x2c]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x24]
call fcn.004b74f0
test eax, eax
je 0x4de7aa
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x10]
test word [eax + 0x4c], cx
jne 0x4de7aa
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x18]
and byte [edx + 0x24], 0xd7
mov edx, dword [edx + 0x2c]
mov ecx, dword [eax + 0x24]
call fcn.004d63f0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4de864
mov eax, dword [eax]
movsx ecx, word [ecx + 0x2a]
cmp ecx, dword [eax]
jne 0x4de8b8
mov eax, dword [esp + 0x6c]
test byte [eax + 8], 8
jne 0x4de864
cmp dword [eax + 0x30], 0
mov eax, dword [esp + 0x64]
je 0x4de800
test eax, eax
jne 0x4de800
test dword [edx + 8], 0x40000
je 0x4de800
mov ecx, dword [esp + 0x40]
cmp dword [ecx], 1
je 0x4de86c
test byte [ecx + 0x74], 0xa
jne 0x4de86c
push dword [esp + 0x34]
mov ecx, esi
push eax
call fcn.004dbd80
add esp, 8
test eax, eax
je 0x4de822
cmp dword [esi + 0x24], 0
jne 0x4e094b
or eax, 0xffffffff
jmp 0x4de826
mov eax, dword [esp + 0x64]
mov edi, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
cmp byte [edi + 0x51], 0
mov ecx, dword [edx + 0x20]
mov edi, dword [esp + 0x48]
mov dword [esp + 0x40], ecx
jne 0x4e094b
mov esi, dword [esp + 0x78]
cmp byte [esi], 8
mov esi, dword [esp + 0x14]
jbe 0x4de86c
mov edi, dword [edx + 0x30]
mov dword [esp + 0x20], edi
mov dword [esp + 0xe0], edi
mov edi, dword [esp + 0x48]
jmp 0x4de86c
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x64]
inc eax
cmp dword [edx + 0x34], 0
mov dword [esp + 0x64], eax
je 0x4de748
cmp dword [edx + 0x34], 0
je 0x4de8de
push dword [esp + 0x78]
mov ecx, esi
call fcn.004d9960
mov edi, eax
add esp, 4
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x38], 0
jne 0x4de8a2
mov ecx, esi
call fcn.00499cf0
mov eax, edi
pop edi
pop esi
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.0062063b
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x6c]
mov eax, dword [ecx]
push dword [eax]
mov eax, dword [esp + 0x40]
push dword [eax]
movsx eax, word [eax + 0x2a]
push eax
push 0x709b5c
push esi
call fcn.0047b1c0
add esp, 0x14
jmp 0x4e094b
cmp dword [ecx], 1
jle 0x4de8f9
mov eax, dword [esp + 0x38]
cmp word [eax + 0x4c], 0
jl 0x4de8f9
mov ecx, esi
call fcn.004dc5f0
mov ecx, dword [esp + 0x40]
xor eax, eax
mov dword [esp + 0x6c], eax
cmp dword [ecx], eax
jle 0x4dec0e
lea eax, [eax + eax*8]
lea ecx, [ecx + eax*8]
mov eax, dword [ecx + 0x40]
add ecx, 8
mov dword [esp + 0x1c], ecx
or eax, dword [ecx + 0x3c]
jne 0x4de93f
mov eax, dword [ecx + 8]
test eax, eax
je 0x4de93f
push dword [ecx + 4]
mov edx, 0x14
mov ecx, esi
push 0x716a6b
push eax
call fcn.004bcbb0
mov ecx, dword [esp + 0x28]
add esp, 0xc
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x54], eax
test eax, eax
je 0x4debf9
mov ecx, dword [esp + 0x18]
call fcn.004afe00
add dword [esi + 0xd0], eax
mov ecx, 0x1000
mov eax, dword [esp + 0x38]
test word [eax + 0x4c], cx
jne 0x4de993
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x54]
movzx eax, byte [ecx + 0x24]
shr eax, 5
and eax, 1
push eax
mov eax, dword [esp + 0x1c]
push dword [ecx + 0x2c]
mov ecx, esi
push dword [eax + 0x24]
call fcn.004dc700
add esp, 0xc
cmp dword [esp + 0x6c], 0
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 0xf0]
mov dword [esp + 0x3c], eax
mov eax, dword [edx + 8]
mov dword [esi + 0xf0], eax
jne 0x4dea94
mov eax, dword [esp + 0x40]
cmp dword [eax], 1
je 0x4de9c8
test byte [eax + 0x74], 0xa
je 0x4dea94
mov ecx, dword [esp + 0x14]
mov esi, dword [edi + 0x6c]
inc esi
push esi
mov eax, dword [ecx + 0x2c]
inc eax
mov dword [ecx + 0x2c], eax
mov ecx, edi
mov dword [edx + 0x1c], eax
mov edx, 0xd
push 0
push eax
call fcn.004997a0
mov eax, dword [esp + 0x28]
add esp, 0xc
mov byte [esp + 0x134], 0xd
mov dword [esp + 0x144], 0
mov dword [esp + 0x13c], 0
mov dword [eax + 0x18], esi
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x140], 0
push dword [eax + 0x14]
push 0x709b94
push 1
push dword [esp + 0x20]
call fcn.00499c90
mov edx, dword [esp + 0x64]
lea eax, [esp + 0x144]
mov ecx, dword [esp + 0x24]
push eax
call fcn.004de5b0
mov edx, dword [esp + 0x30]
add esp, 0x14
mov eax, dword [esp + 0x54]
mov ecx, dword [edx + 0x10]
mov ax, word [eax + 6]
mov word [ecx + 0x2c], ax
mov ecx, edi
mov eax, dword [esp + 0x13c]
or dword [edx + 0x28], 0x10
mov dword [edx + 0x20], eax
mov edx, dword [edx + 0x1c]
call fcn.00499ed0
lea edx, [esi - 1]
mov ecx, edi
call fcn.0049a2c0
mov esi, dword [esp + 0x14]
jmp 0x4debc7
xor eax, eax
mov ecx, edi
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x2c]
inc eax
mov dword [esi + 0x2c], eax
push eax
mov dword [edx + 0x1c], eax
mov edx, 0x46
push 0
call fcn.004998d0
mov ecx, dword [esp + 0x24]
add esp, 8
mov dword [esp + 0x5c], eax
inc eax
test byte [ecx + 0x28], 8
mov dword [ecx + 0x18], eax
jne 0x4deadc
mov edx, 0x11
mov ecx, edi
call fcn.00499810
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
mov edx, ecx
mov ecx, dword [esp + 0x40]
call fcn.004de510
mov dword [esp + 0x50], eax
test eax, eax
je 0x4deb1d
push dword [eax + 0x2c]
mov eax, dword [esp + 0x20]
mov edx, 0x6d
mov ecx, edi
push dword [eax + 0x2c]
call fcn.004998d0
mov eax, dword [esp + 0x58]
add esp, 8
mov ecx, dword [esp + 0x54]
mov eax, dword [eax + 0x14]
mov ax, word [eax + 6]
mov word [ecx + 6], ax
jmp 0x4deb7e
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x134], 0xc
mov dword [esp + 0x144], 0
mov dword [esp + 0x13c], 0
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x140], 0
push dword [eax + 0x14]
push 0x709b84
push 1
push esi
call fcn.00499c90
mov edx, dword [esp + 0x64]
lea eax, [esp + 0x144]
push eax
mov ecx, esi
call fcn.004de5b0
add esp, 0x14
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x10]
mov eax, dword [esp + 0x54]
mov ax, word [eax + 6]
mov word [ecx + 0x2c], ax
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4deba2
mov edx, eax
mov ecx, edi
call fcn.0049a2c0
mov eax, dword [esp + 0x1c]
mov edx, 0x42
mov ecx, edi
push dword [eax + 0x1c]
call fcn.00499870
mov edx, dword [esp + 0x60]
add esp, 4
mov ecx, edi
push eax
call fcn.0049a220
add esp, 4
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x1c], 0
mov byte [esi + 0x13], 0
cmp byte [ecx + 0x51], 0
jne 0x4e094f
mov ecx, dword [esp + 0x18]
call fcn.004afe00
sub dword [esi + 0xd0], eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0xf0], eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x40]
inc eax
mov dword [esp + 0x6c], eax
cmp eax, dword [ecx]
jl 0x4de907
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x24]
mov edx, dword [eax]
mov dword [esp + 0x5c], ecx
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x4c], ecx
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x6c], ecx
mov cl, byte [eax + 8]
mov eax, dword [eax + 8]
and cl, 1
and al, 9
mov dword [esp + 0x64], edx
mov byte [esp + 0x63], cl
mov byte [esp + 0x134], cl
cmp al, 1
jne 0x4dec84
mov ecx, dword [esp + 0x20]
push 0xffffffffffffffff
call fcn.004b7040
mov edx, dword [esp + 0x68]
add esp, 4
test eax, eax
jne 0x4dec84
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x38]
push 0
and dword [eax + 8], 0xfffffffe
call fcn.004b0ac0
mov edx, dword [esp + 0x68]
mov ecx, eax
mov dword [esp + 0x50], eax
add esp, 4
mov eax, dword [esp + 0x18]
mov dword [eax + 0x28], ecx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4decd9
push dword [edx]
mov edx, eax
mov ecx, esi
push 0
call fcn.004d7b40
mov edx, dword [esi + 0x28]
mov ecx, eax
push 0xfffffffffffffff7
push ecx
push 0
lea eax, [edx + 1]
mov dword [esp + 0xfc], edx
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
mov eax, dword [esp + 0x78]
inc ecx
mov eax, dword [eax]
add eax, ecx
mov ecx, edi
push eax
push edx
mov edx, 0x70
call fcn.00499c10
add esp, 0x1c
mov dword [esp + 0xf4], eax
jmp 0x4dece4
mov dword [esp + 0xf4], 0xffffffff
mov ecx, dword [esp + 0x78]
cmp byte [ecx], 0xc
jne 0x4ded05
mov eax, dword [esp + 0x64]
mov edx, 0x70
push dword [eax]
push dword [ecx + 4]
mov ecx, edi
call fcn.004998d0
add esp, 8
mov eax, dword [esp + 0x18]
dec dword [esi + 0x38]
mov ecx, dword [esi + 0x38]
mov dword [esp + 0x8c], ecx
test dword [eax + 8], 0x4000
jne 0x4ded28
mov edx, 0x140
mov word [eax + 6], dx
push ecx
mov edx, eax
mov ecx, esi
call fcn.004d8f30
mov edx, dword [esp + 0x1c]
add esp, 4
cmp dword [edx + 0xc], 0
jne 0x4ded64
mov eax, dword [esp + 0xf4]
test eax, eax
js 0x4ded64
push 0x72
mov edx, eax
mov ecx, edi
call fcn.0049a1e0
mov edx, dword [esp + 0x1c]
add esp, 4
or byte [esp + 0x100], 1
test byte [edx + 8], 1
je 0x4dedd4
mov esi, dword [esi + 0x28]
mov ecx, dword [esp + 0x14]
push 0xfffffffffffffff7
push ecx
lea eax, [esi + 1]
mov dword [esp + 0x140], esi
mov dword [ecx + 0x28], eax
mov edx, dword [edx]
push 0
push 0
call fcn.004d7b40
add esp, 0xc
mov edx, 0x70
mov ecx, edi
push eax
push 0
push 0
push esi
call fcn.00499c10
mov dword [esp + 0x150], eax
add esp, 0x14
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4dedc2
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov byte [esp + 0x135], 3
jmp 0x4deddc
mov byte [esp + 0x135], 0
cmp dword [esp + 0x34], 0
mov ecx, dword [esp + 0x4c]
jne 0x4deff6
test ecx, ecx
jne 0x4deff6
cmp byte [esp + 0x63], cl
mov eax, 0x100
mov dword [esp + 0x10], 0x4000
cmovne ecx, eax
mov ax, word [edx + 8]
and ax, word [esp + 0x10]
or cx, ax
movzx eax, cx
mov dword [esp + 0x10], eax
mov eax, dword [edx + 0x44]
mov dword [esp + 0x34], eax
test eax, eax
je 0x4dee32
mov edx, eax
mov ecx, esi
call fcn.004f6ea0
mov edx, dword [esp + 0x18]
movsx eax, word [edx + 6]
mov ecx, esi
push eax
push dword [esp + 0x14]
push dword [edx]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x2c]
push dword [esp + 0x6c]
call fcn.004f3d30
mov ecx, eax
add esp, 0x14
mov dword [esp + 0x3c], ecx
test ecx, ecx
je 0x4e094b
mov eax, dword [esp + 0x18]
movzx edx, word [ecx + 0x48]
cmp dx, word [eax + 6]
jge 0x4dee73
mov word [eax + 6], dx
cmp byte [esp + 0x63], 0
je 0x4dee98
mov cl, byte [ecx + 0x33]
movzx edx, byte [esp + 0x135]
test cl, cl
movzx eax, cl
mov ecx, dword [esp + 0x3c]
cmovne edx, eax
mov byte [esp + 0x135], dl
mov edx, dword [esp + 0x20]
test edx, edx
je 0x4deee0
cmp byte [ecx + 0x34], 0
movsx eax, byte [ecx + 0x2f]
mov dword [esp + 0xe4], eax
jne 0x4deeb6
mov eax, dword [ecx + 0x20]
jmp 0x4deec4
movzx eax, byte [ecx + 0x2e]
imul eax, eax, 0x58
mov eax, dword [eax + ecx + 0x2a8]
mov dword [esp + 0xfc], eax
xor ecx, ecx
mov eax, dword [esp + 0xe4]
cmp eax, dword [edx]
cmove edx, ecx
mov dword [esp + 0xe0], edx
mov eax, dword [esp + 0xf4]
test eax, eax
js 0x4deef8
test edx, edx
jne 0x4deef8
mov edx, eax
mov ecx, edi
call fcn.0049a5b0
cmp dword [esp + 0x34], 0
mov edx, dword [esp + 0x18]
je 0x4defbb
mov eax, dword [esi + 0x38]
mov ecx, dword [esp + 0x14]
lea esi, [eax - 1]
sub eax, 2
inc dword [ecx + 0x2c]
mov edi, dword [ecx + 0x2c]
push esi
mov dword [esp + 0x38], eax
dec eax
push edi
push dword [esp + 0x44]
mov dword [esp + 0x1c], eax
mov dword [ecx + 0x38], eax
call fcn.004fa1d0
mov ecx, dword [esp + 0x54]
add esp, 0xc
mov edx, 0xb
push dword [esp + 0x10]
push 0
call fcn.004998d0
mov ecx, dword [esp + 0x50]
mov edx, esi
call fcn.00499f90
push dword [esp + 0x18]
mov esi, dword [esp + 0x40]
lea eax, [esp + 0x140]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
push esi
push dword [esp + 0x88]
mov dword [esp + 0x110], 0
push eax
lea eax, [esp + 0xf8]
push eax
push 0xffffffffffffffff
call fcn.004d6d60
mov ecx, dword [esp + 0x68]
mov edx, esi
call fcn.00499f90
push edi
mov edi, dword [esp + 0x6c]
mov edx, 0x42
mov ecx, edi
call fcn.00499870
add esp, 0x24
lea edx, [esi - 1]
mov ecx, edi
call fcn.00499f90
jmp 0x4e088c
mov eax, dword [esp + 0x3c]
mov ecx, esi
push dword [eax + 0x24]
push dword [eax + 0x20]
lea eax, [esp + 0x13c]
push dword [esp + 0x80]
push eax
lea eax, [esp + 0xf0]
push eax
push 0xffffffffffffffff
call fcn.004d6d60
mov ecx, dword [esp + 0x54]
add esp, 0x18
call fcn.004f4870
jmp 0x4e088c
mov dword [esp + 0x58], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x50], 0
test ecx, ecx
je 0x4df0bf
mov ecx, dword [edx]
mov eax, dword [ecx]
test eax, eax
jle 0x4df033
add ecx, 0x1a
xor edi, edi
lea ecx, [ecx + 0x18]
dec eax
mov word [ecx - 0x18], di
test eax, eax
jg 0x4df021
mov edi, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov eax, dword [ecx]
test eax, eax
jle 0x4df056
add ecx, 0x1a
xor esi, esi
lea ecx, [ecx + 0x18]
dec eax
mov word [ecx - 0x18], si
test eax, eax
jg 0x4df040
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x4c]
cmp word [edx + 6], 0x42
jle 0x4df066
mov eax, 0x42
mov word [edx + 6], ax
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4df0c5
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jne 0x4df0c5
xor edx, edx
test ecx, ecx
jle 0x4df0a1
mov esi, dword [esp + 0x4c]
mov edi, eax
sub edi, esi
lea ecx, [esi + 0x10]
mov al, byte [edi + ecx]
lea ecx, [ecx + 0x18]
and al, 1
inc edx
mov byte [ecx - 0x18], al
cmp edx, dword [esi]
jl 0x4df085
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x4c]
mov edx, eax
push 0xffffffffffffffff
call fcn.004b7040
add esp, 4
test eax, eax
jne 0x4df0c5
mov dword [esp + 0x50], 1
jmp 0x4df0c5
xor eax, eax
mov word [edx + 6], ax
dec dword [esi + 0x38]
xorps xmm0, xmm0
mov eax, dword [esi + 0x38]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x90]
movaps xmmword [esp + 0x110], xmm0
mov dword [esp + 0x118], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x114], ecx
inc eax
mov ecx, dword [esp + 0x4c]
movaps xmmword [esp + 0x120], xmm0
mov dword [esp + 0x110], esi
mov dword [esp + 0xa0], eax
test ecx, ecx
je 0x4df120
mov eax, dword [ecx]
mov dword [esp + 0x9c], eax
jmp 0x4df12b
mov dword [esp + 0x9c], 0
mov edx, dword [esp + 0x64]
mov dword [esp + 0xa8], ecx
lea ecx, [esp + 0x110]
call fcn.004b79e0
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x110]
call fcn.004b79e0
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x4df216
cmp dword [esp + 0x4c], 0
je 0x4df1c3
mov eax, dword [esp + 0x18]
xorps xmm0, xmm0
movaps xmmword [esp + 0xc0], xmm0
mov dword [esp + 0xd8], 0
movq qword [esp + 0xd0], xmm0
mov edx, dword [eax + 0x2c]
mov dword [esp + 0xc0], esi
mov dword [esp + 0xc4], 0x4de3d0
mov dword [esp + 0xd8], eax
test edx, edx
je 0x4df1bc
lea ecx, [esp + 0xc0]
call fcn.004aca70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x6c]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x110]
mov dword [esp + 0xc4], 0x4b7740
mov edx, ecx
mov dword [esp + 0xc8], 0x4b79c0
lea ecx, [esp + 0xc0]
mov dword [esp + 0xcc], 0x4b79d0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd8], eax
mov dword [esp + 0xc0], 0
call fcn.004aca70
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0xbc]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x28], 0
jne 0x4df26a
cmp dword [eax + 0x2c], 0
jne 0x4df26a
cmp edx, 1
jne 0x4df26a
mov edx, dword [esp + 0xb8]
lea eax, [esp + 0x88]
mov ecx, dword [esp + 0x38]
push eax
mov edx, dword [edx]
call fcn.004dc850
mov edx, dword [esp + 0xc0]
add esp, 4
mov byte [esp + 0x73], al
jmp 0x4df26f
mov byte [esp + 0x73], 0
test edx, edx
jle 0x4df33d
mov ecx, dword [esp + 0x128]
xor edi, edi
xor esi, esi
mov eax, dword [esp + 0xb8]
or ecx, 8
mov eax, dword [edi + eax]
mov dword [esp + 0x128], ecx
lea ecx, [esp + 0x110]
mov dword [esp + 0x10], eax
mov edx, dword [eax + 0x14]
call fcn.004b79e0
mov eax, dword [esp + 0x10]
test dword [eax + 4], 0x1000000
je 0x4df311
mov eax, dword [eax + 0x2c]
mov dword [esp + 0xc4], 0x4b7740
mov dword [esp + 0xc8], 0x4b79c0
mov dword [esp + 0xcc], 0x4b79d0
mov edx, dword [eax + 0x28]
lea eax, [esp + 0x110]
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd8], eax
mov dword [esp + 0xc0], 0
test edx, edx
je 0x4df311
lea ecx, [esp + 0xc0]
call fcn.004aca70
mov ecx, dword [esp + 0x128]
inc esi
mov edx, dword [esp + 0xbc]
and ecx, 0xfffffff7
add edi, 0x10
mov dword [esp + 0x128], ecx
cmp esi, edx
jl 0x4df282
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x38]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0xa4], eax
cmp byte [ecx + 0x51], 0
jne 0x4e0939
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x4e029c
mov eax, dword [esi + 0x28]
mov edx, ecx
push dword [esp + 0xb0]
mov dword [esp + 0x98], eax
mov ecx, esi
inc eax
push 0
mov dword [esi + 0x28], eax
call fcn.004d7b40
mov ecx, dword [edi + 0x6c]
add esp, 8
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x34], eax
mov dword [esp + 0x10], ecx
cmp dword [edi + 0x70], ecx
jg 0x4df3c1
push 0
push edx
push eax
mov edx, 0x72
mov ecx, edi
call fcn.00499760
mov edx, eax
add esp, 0xc
mov dword [esp + 0x10], edx
jmp 0x4df3f8
mov esi, dword [esp + 0x34]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x72
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x51], 0
je 0x4df416
mov edx, dword [esp + 0x7c]
push edx
mov edx, 0xfffffff7
call fcn.0049a470
add esp, 4
jmp 0x4df44e
test edx, edx
jns 0x4df41e
mov eax, dword [edi + 0x6c]
dec eax
mov edx, dword [esp + 0x7c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x4df443
push 0xfffffffffffffff7
push edx
mov edx, eax
mov ecx, edi
call fcn.0049a600
add esp, 8
jmp 0x4df44e
test edx, edx
je 0x4df44e
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf7
mov eax, dword [esi + 0x2c]
mov edx, dword [esp + 0x4c]
inc eax
mov dword [esp + 0x80], eax
inc eax
mov dword [esp + 0x20], eax
lea ecx, [eax + 2]
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x2c], ecx
mov dword [esp + 0x74], eax
dec eax
mov dword [esi + 0x38], eax
mov dword [esp + 0x1c], ecx
add ecx, dword [edx]
mov dword [esp + 0x3c], eax
mov dword [esi + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x84], eax
mov eax, dword [edx]
add eax, ecx
mov dword [esi + 0x2c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4df4b7
push 0
push dword [esp + 0x24]
mov edx, 0x46
mov ecx, edi
push 0
call fcn.00499760
mov edx, dword [esp + 0x58]
add esp, 0xc
jmp 0x4df4ee
mov esi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx]
mov edx, dword [esp + 0x1c]
mov ecx, dword [edi + 0x6c]
add edx, eax
cmp dword [edi + 0x70], ecx
jg 0x4df518
mov eax, dword [esp + 0x1c]
mov ecx, edi
push edx
inc eax
mov edx, 0x49
push eax
push 0
call fcn.00499760
add esp, 0xc
jmp 0x4df550
mov esi, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
inc esi
mov edi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x49
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4df573
push 0
push dword [esp + 0x40]
mov edx, 0xc
mov ecx, edi
push dword [esp + 0x24]
call fcn.00499760
add esp, 0xc
jmp 0x4df5a6
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x50], 0
mov ecx, 0x240
mov edx, dword [esp + 0x40]
mov eax, 0x40
cmovne eax, ecx
mov ecx, esi
push 0
movzx eax, ax
push eax
push 0
push dword [esp + 0x58]
push dword [esp + 0x6c]
call fcn.004f3d30
mov edx, eax
add esp, 0x14
mov dword [esp + 0x34], edx
test edx, edx
je 0x4e0935
mov ecx, dword [esp + 0x4c]
movsx eax, byte [edx + 0x2f]
cmp eax, dword [ecx]
jne 0x4df5fb
xor eax, eax
mov dword [esp + 0x5c], eax
jmp 0x4df964
cmp byte [esp + 0x63], 0
je 0x4df611
mov eax, dword [esp + 0x18]
test byte [eax + 8], 1
mov eax, 0x709bb0
je 0x4df616
mov eax, 0x709ba4
push eax
push 0x70970c
push 0
push esi
call fcn.00499c90
mov eax, dword [esp + 0x5c]
add esp, 0x10
mov dword [esp + 0x5c], 1
mov ecx, dword [eax]
mov edx, ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x58], eax
test eax, eax
jle 0x4df66c
mov eax, dword [esp + 0xac]
add eax, 0xc
cmp dword [eax], ecx
jl 0x4df65e
inc edx
inc ecx
add eax, 0x18
sub dword [esp + 0x58], 1
jne 0x4df658
mov dword [esp + 0x68], edx
cmp edx, 1
jne 0x4df699
mov al, byte [esi + 0x13]
test al, al
jne 0x4df684
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x40], eax
jmp 0x4df6c4
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
mov dword [esp + 0x40], eax
jmp 0x4df6c4
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x40], ecx
cmp edx, dword [esi + 0x1c]
jg 0x4df6b5
lea eax, [ecx + edx]
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x1c]
sub eax, edx
mov dword [esi + 0x1c], eax
jmp 0x4df6c4
mov eax, dword [esi + 0x2c]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x40], ecx
mov dword [esi + 0x2c], eax
mov edx, dword [esp + 0x4c]
mov ecx, esi
push 0
push 0
push dword [esp + 0x48]
call fcn.004b61b0
add esp, 0xc
cmp dword [esp + 0xb0], 0
jle 0x4df73b
xor ecx, ecx
xor esi, esi
mov dword [esp + 0x58], ecx
nop dword [eax]
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0x44]
add edx, ecx
cmp dword [edx + 0xc], eax
jl 0x4df726
add eax, dword [esp + 0x40]
mov ecx, edi
push eax
push dword [edx + 8]
push dword [edx + 4]
mov edx, dword [edx]
call fcn.004b4a80
mov eax, dword [esp + 0x50]
add esp, 0xc
mov ecx, dword [esp + 0x58]
inc eax
mov dword [esp + 0x44], eax
inc esi
add ecx, 0x18
mov dword [esp + 0x58], ecx
cmp esi, dword [esp + 0xb0]
jl 0x4df6f0
mov esi, dword [esp + 0x14]
mov al, byte [esi + 0x13]
test al, al
jne 0x4df74a
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x4df759
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x44], eax
cmp dword [edi + 0x70], ecx
jg 0x4df784
mov edx, dword [esp + 0x68]
mov ecx, edi
push eax
push edx
push dword [esp + 0x48]
mov edx, 0x5c
call fcn.00499760
mov edx, dword [esp + 0x50]
add esp, 0xc
jmp 0x4df7b7
mov edx, dword [esp + 0x40]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0x5c
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov eax, dword [esp + 0x94]
mov dword [esp + 0x58], eax
cmp dword [edi + 0x70], ecx
jg 0x4df7e3
push 0
push edx
push eax
mov edx, 0x83
mov ecx, edi
call fcn.00499760
mov edx, dword [esp + 0x50]
add esp, 0xc
jmp 0x4df816
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x48]
mov dword [eax + ecx*4], 0x83
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test edx, edx
je 0x4df82e
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x4df82e
movzx eax, al
mov dword [esi + eax*4 + 0x94], edx
inc byte [esi + 0x13]
mov eax, dword [esp + 0x68]
cmp eax, 1
jne 0x4df855
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x4df864
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x4df864
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
jmp 0x4df864
cmp eax, dword [esi + 0x1c]
jle 0x4df864
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x40]
mov dword [esi + 0x20], eax
mov ecx, dword [esp + 0x34]
call fcn.004f4870
mov edx, dword [esi + 0x28]
mov dword [esp + 0x58], edx
mov dword [esp + 0x98], edx
lea eax, [edx + 1]
mov dword [esi + 0x28], eax
mov al, byte [esi + 0x13]
test al, al
jne 0x4df890
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x4df89f
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x44], eax
cmp dword [edi + 0x70], ecx
jg 0x4df8c6
mov edx, dword [esp + 0x68]
mov ecx, edi
push edx
push eax
push dword [esp + 0x60]
mov edx, 0x74
call fcn.00499760
add esp, 0xc
jmp 0x4df8f9
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x68]
mov dword [eax + ecx*4], 0x74
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [esp + 0x94]
cmp dword [edi + 0x70], ecx
jg 0x4df920
push 0
push dword [esp + 0x58]
mov ecx, edi
push edx
mov edx, 0x22
call fcn.00499760
add esp, 0xc
jmp 0x4df953
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4], 0x22
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x34]
mov eax, 1
mov byte [esp + 0x91], 1
cmp dword [esp + 0x50], 0
je 0x4df9c1
mov ecx, dword [esp + 0x38]
test byte [ecx + 0x4c], 4
jne 0x4df9c1
test eax, eax
jne 0x4df97e
cmp byte [edx + 0x30], al
je 0x4df9c1
mov ecx, dword [edi]
mov dword [esp + 0xe0], 0
cmp byte [ecx + 0x51], 0
jne 0x4df9c1
mov eax, dword [esp + 0xf4]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + edx*4 + 0x10]
lea esi, [eax + edx*4]
movsx edx, byte [esi + 1]
call fcn.0049a470
mov word [esi], 0xaa
add esp, 4
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0x14]
cmp dword [esp + 0x5c], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x68], ecx
je 0x4dfa28
mov edx, dword [esp + 0x94]
cmp dword [edi + 0x70], ecx
jg 0x4df9f5
push dword [esp + 0x58]
mov ecx, edi
push dword [esp + 0x48]
push edx
mov edx, 0x7e
call fcn.00499760
add esp, 0xc
jmp 0x4dfa28
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4], 0x7e
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x4c]
xor edx, edx
mov dword [esp + 0x50], edx
cmp dword [eax], edx
jle 0x4dfae5
lea ecx, [eax + 4]
mov dword [esp + 0x44], ecx
cmp dword [esp + 0x5c], 0
je 0x4dfaa7
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4dfa70
mov eax, dword [esp + 0x84]
mov ecx, edi
add eax, edx
push eax
push edx
push dword [esp + 0x60]
mov edx, 0x5a
call fcn.00499760
add esp, 0xc
jmp 0x4dfac5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0x10], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x58]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x84]
add eax, edx
mov dword [ecx + 0xc], eax
jmp 0x4dfac9
mov eax, dword [esp + 0x84]
add eax, edx
mov byte [esp + 0x90], 1
mov edx, dword [ecx]
mov ecx, esi
push eax
call fcn.004b5ff0
add esp, 4
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x4c]
inc edx
mov ecx, dword [esp + 0x44]
add ecx, 0x18
mov dword [esp + 0x50], edx
mov dword [esp + 0x44], ecx
cmp edx, dword [eax]
jl 0x4dfa41
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x4dfaef
inc dword [ecx]
mov edx, dword [edi + 0x6c]
mov eax, dword [eax]
mov dword [esp + 0x50], eax
cmp dword [edi + 0x70], edx
jg 0x4dfb1e
push eax
mov eax, dword [esp + 0x20]
mov edx, 0x57
push dword [esp + 0x88]
inc eax
mov ecx, edi
push eax
call fcn.00499760
add esp, 0xc
mov edx, eax
jmp 0x4dfb5d
mov esi, dword [esp + 0x1c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
inc esi
mov edi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x84]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x57
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
cmp byte [ecx + 0x51], 0
je 0x4dfb79
mov edx, dword [esp + 0x7c]
push edx
mov edx, 0xfffffff7
call fcn.0049a470
add esp, 4
jmp 0x4dfbb1
test edx, edx
jns 0x4dfb81
mov edx, dword [edi + 0x6c]
dec edx
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov edx, dword [esp + 0x7c]
je 0x4dfba6
push 0xfffffffffffffff7
push edx
mov edx, eax
mov ecx, edi
call fcn.0049a600
add esp, 8
jmp 0x4dfbb1
test edx, edx
je 0x4dfbb1
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf7
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x58], ecx
lea edx, [ecx + 1]
cmp dword [edi + 0x70], ecx
jg 0x4dfbd5
push edx
push 0
push edx
mov edx, 0x10
mov ecx, edi
call fcn.00499760
add esp, 0xc
jmp 0x4dfc04
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x10
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 8]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x50], ecx
mov edx, dword [ecx + 0x6c]
mov eax, dword [eax]
mov dword [esp + 0x44], eax
cmp dword [ecx + 0x70], edx
jg 0x4dfc3a
push eax
mov eax, dword [esp + 0x20]
mov edx, 0x4d
inc eax
push eax
push dword [esp + 0x8c]
call fcn.00499760
add esp, 0xc
jmp 0x4dfc79
mov edi, dword [esp + 0x48]
lea eax, [edx + 1]
mov dword [ecx + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x84]
mov eax, dword [eax + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
inc edx
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4dfc9e
mov eax, dword [esp + 0x20]
mov edx, 0xc
push 0
push dword [esp + 0x78]
inc eax
mov ecx, edi
push eax
call fcn.00499760
add esp, 0xc
jmp 0x4dfcd6
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x14]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x74]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4dfcf9
push 0
push dword [esp + 0x58]
mov edx, 0x2f
mov ecx, edi
push dword [esp + 0x28]
call fcn.00499760
add esp, 0xc
jmp 0x4dfd2c
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4], 0x2f
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4dfd4f
push 0
push dword [esp + 0x40]
mov edx, 0xc
mov ecx, edi
push dword [esp + 0x24]
call fcn.00499760
add esp, 0xc
jmp 0x4dfd82
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x58]
mov edx, dword [edi + 0x6c]
test ecx, ecx
jns 0x4dfd90
lea ecx, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x4dfd9f
mov eax, 0x716eec
jmp 0x4dfda8
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, esi
mov edx, dword [esp + 0x80]
lea eax, [esp + 0x90]
push eax
call fcn.004ddf10
mov ecx, dword [edi + 0x6c]
add esp, 4
cmp dword [edi + 0x70], ecx
jg 0x4dfde8
push 0
push dword [esp + 0x84]
mov edx, 0x46
mov ecx, edi
push 1
call fcn.00499760
add esp, 0xc
jmp 0x4dfe1e
mov edx, dword [esp + 0x80]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x5c], 0
je 0x4dfe80
mov ecx, dword [edi + 0x6c]
mov edx, dword [esp + 0x94]
cmp dword [edi + 0x70], ecx
jg 0x4dfe4f
push 0
push dword [esp + 0x6c]
mov ecx, edi
push edx
mov edx, 3
call fcn.00499760
add esp, 0xc
jmp 0x4dfebe
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov dword [eax + ecx*4], 3
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4dfeba
mov ecx, dword [esp + 0x34]
call fcn.004f4870
mov ecx, dword [edi]
cmp byte [ecx + 0x51], 0
jne 0x4dfebe
mov eax, dword [esp + 0x10]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + edx*4 + 0x10]
lea esi, [eax + edx*4]
movsx edx, byte [esi + 1]
call fcn.0049a470
add esp, 4
mov word [esi], 0xaa
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0x14]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4dfee3
mov eax, dword [esp + 0x20]
mov edx, 0xc
push 0
push dword [esp + 0x78]
inc eax
mov ecx, edi
push eax
call fcn.00499760
add esp, 0xc
jmp 0x4dff1b
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x14]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x74]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4dff3c
push 0
push dword [esp + 0x58]
mov edx, 0xb
mov ecx, edi
push 0
call fcn.00499760
add esp, 0xc
jmp 0x4dff6f
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x34], ecx
cmp dword [edi + 0x70], ecx
jg 0x4dff98
push 0
push dword [esp + 0x24]
mov edx, 0x46
mov ecx, edi
push 1
call fcn.00499760
mov edx, dword [esp + 0x2c]
add esp, 0xc
jmp 0x4dffcb
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4dffec
push 0
lea eax, [edx + 1]
mov ecx, edi
push 0
push eax
mov edx, 0x42
call fcn.00499760
add esp, 0xc
jmp 0x4e0024
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x14]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x42
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x74]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4e0042
push edx
mov edx, edi
call fcn.00499f40
add esp, 4
jmp 0x4e004b
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x10], ecx
lea edx, [ecx + 2]
cmp dword [edi + 0x70], ecx
jg 0x4e0075
push 0
push edx
push dword [esp + 0x88]
mov edx, 0x2f
mov ecx, edi
call fcn.00499760
add esp, 0xc
jmp 0x4e00ab
mov esi, dword [esp + 0x80]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x2f
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4e00ce
mov eax, dword [esp + 0x20]
mov edx, 0x42
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.00499760
add esp, 0xc
jmp 0x4e0106
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x14]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x42
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea edx, [esp + 0x90]
mov ecx, esi
call fcn.004dde30
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x6c]
inc esi
push 0x10
push esi
push ecx
push dword [esp + 0x20]
call fcn.004b68d0
push dword [esp + 0x44]
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x148]
push esi
push dword [esp + 0x90]
mov esi, dword [esp + 0x30]
mov ecx, esi
push eax
lea eax, [esp + 0x100]
push eax
push 0xffffffffffffffff
call fcn.004d6d60
mov ecx, dword [edi + 0x6c]
add esp, 0x28
cmp dword [edi + 0x70], ecx
jg 0x4e017d
mov eax, dword [esp + 0x20]
mov edx, 0x42
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.00499760
add esp, 0xc
jmp 0x4e01b1
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
inc edx
mov dword [eax + ecx*4], 0x42
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x3c]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4e01cf
push edx
mov edx, edi
call fcn.00499f40
add esp, 4
jmp 0x4e01d8
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
lea edx, [esp + 0x90]
mov ecx, esi
call fcn.004ddd40
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4e020a
push 0
push dword [esp + 0x84]
mov edx, 0x46
mov ecx, edi
push 0
call fcn.00499760
add esp, 0xc
jmp 0x4e0240
mov edx, dword [esp + 0x80]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4e0264
push 0
push 0
push dword [esp + 0x24]
mov edx, 0x42
mov ecx, edi
call fcn.00499760
add esp, 0xc
jmp 0x4e0865
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x42
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4e0865
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xb8]
cmp dword [eax + 0x24], 0
jne 0x4e0655
mov edi, dword [eax]
mov dword [esp + 0x10], edi
cmp dword [edi], 1
mov edi, dword [esp + 0x48]
jne 0x4e0655
mov eax, dword [eax + 0x20]
cmp dword [eax], 1
jne 0x4e0655
cmp dword [eax + 0x1c], 0
jne 0x4e0655
mov edi, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x1c], eax
mov edi, dword [edi + 4]
cmp dword [eax + 0x38], 0
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x48]
jne 0x4e0655
mov eax, dword [esp + 0x10]
cmp byte [eax], 0xa3
jne 0x4e0655
test edx, edx
je 0x4e0655
mov eax, dword [ecx + 4]
test dword [eax + 4], 0x100
je 0x4e0655
mov eax, dword [esp + 0x10]
test dword [eax + 4], 0x1000002
jne 0x4e0655
mov eax, dword [esp + 0x1c]
mov edx, 0xfff0bdc0
mov dword [esp + 0x3c], edx
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x4e0362
mov eax, dword [esi]
xor edx, edx
mov dword [esp + 0x3c], edx
mov eax, dword [eax + 0x10]
add eax, 0xc
cmp dword [eax], ecx
je 0x4e0362
lea eax, [eax + 0x10]
inc edx
cmp dword [eax], ecx
jne 0x4e0356
mov dword [esp + 0x3c], edx
mov eax, dword [esi + 0x28]
xor ecx, ecx
mov dword [esp + 0x74], eax
inc eax
mov dword [esi + 0x28], eax
xor eax, eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x5c], ecx
mov ecx, esi
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x74]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x44], ecx
mov eax, dword [ecx + 0x54]
mov ecx, edx
mov dword [esp + 0x34], eax
mov eax, 1
shl eax, cl
test dword [esp + 0x34], eax
jne 0x4e03c4
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x34]
bts eax, edx
mov dword [ecx + 0x54], eax
cmp edx, 1
jne 0x4e03c4
call fcn.004c3690
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x1c]
mov ecx, esi
push dword [eax]
push 0
push dword [eax + 0x1c]
call fcn.004bcc40
mov eax, dword [esp + 0x28]
add esp, 0xc
test byte [eax + 0x24], 0x20
je 0x4e040a
mov ecx, dword [eax + 8]
mov dword [esp + 0x5c], ecx
test ecx, ecx
je 0x4e040c
nop
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x4e0400
mov ecx, dword [ecx + 0x14]
test ecx, ecx
jne 0x4e03f0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x5c], ecx
jmp 0x4e040c
xor ecx, ecx
mov eax, dword [eax + 8]
test eax, eax
je 0x4e0448
mov edi, dword [esp + 0x1c]
test byte [eax + 0x38], 4
jne 0x4e0439
movzx edx, word [eax + 0x30]
cmp dx, word [edi + 0x2e]
jge 0x4e0439
cmp dword [eax + 0x24], 0
jne 0x4e0439
test ecx, ecx
je 0x4e0437
cmp dx, word [ecx + 0x30]
jge 0x4e0439
mov ecx, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x4e0417
mov edi, dword [esp + 0x48]
mov dword [esp + 0x5c], ecx
test ecx, ecx
je 0x4e0460
mov eax, dword [ecx + 0x2c]
mov edx, ecx
mov ecx, esi
mov dword [esp + 0x10], eax
call fcn.004c4030
mov dword [esp + 0x50], eax
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x34], ecx
cmp dword [edi + 0x70], ecx
jg 0x4e048e
mov edx, dword [esp + 0x3c]
mov ecx, edi
push edx
mov edx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x7c]
push edx
mov edx, 0x61
call fcn.00499760
add esp, 0xc
mov ecx, eax
jmp 0x4e04c5
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x34]
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
jne 0x4e04e0
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 1
mov edx, dword [esp + 0x50]
test edx, edx
je 0x4e052c
mov ecx, dword [edi]
cmp byte [ecx + 0x51], 0
je 0x4e0500
push edx
mov edx, 0xfffffff7
call fcn.0049a470
add esp, 4
jmp 0x4e052c
mov eax, dword [edi + 0x6c]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x4e0525
push 0xfffffffffffffff7
push edx
mov edx, eax
mov ecx, edi
call fcn.0049a600
add esp, 8
jmp 0x4e052c
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf7
mov eax, dword [esp + 0xb8]
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 8]
mov dword [esp + 0x10], eax
cmp dword [edi + 0x70], ecx
jg 0x4e0561
push 0
push eax
push dword [esp + 0x7c]
mov edx, 0x5d
mov ecx, edi
call fcn.00499760
mov edx, dword [esp + 0x80]
add esp, 0xc
jmp 0x4e0598
mov esi, dword [esp + 0x10]
lea eax, [ecx + 1]
mov edx, dword [esp + 0x74]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x5d
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4e05b6
push 0
push 0
push edx
mov edx, 0x75
mov ecx, edi
call fcn.00499760
add esp, 0xc
jmp 0x4e05e9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x48]
mov dword [eax + ecx*4], 0x75
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esi + 0xc7], 2
jne 0x4e0828
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x1c]
test ecx, ecx
je 0x4e061d
test byte [edx + 0x24], 0x20
je 0x4e0611
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x4e061d
mov eax, dword [ecx]
mov dword [esp + 0x10], 1
jmp 0x4e062a
mov dword [esp + 0x10], 0
mov eax, 0x716a69
cmp dword [esp + 0x10], 0
mov ecx, 0x716a6a
push eax
mov eax, 0x709b2c
cmove eax, ecx
push eax
push dword [edx]
push 0x709b48
push 0
push esi
call fcn.00499c90
add esp, 0x18
jmp 0x4e0828
cmp dword [esp + 0xb4], 0
mov dword [esp + 0x10], 0
je 0x4e06fb
xor eax, eax
test edx, edx
jle 0x4e069b
xor edi, edi
mov eax, dword [ecx]
test dword [eax + 4], 0x1000000
jne 0x4e0687
mov eax, dword [ecx + 4]
test byte [eax + 4], 0x20
jne 0x4e068f
inc edi
add ecx, 0x10
cmp edi, edx
jl 0x4e0673
mov dword [esp + 0x34], edi
mov edi, dword [esp + 0x48]
mov eax, dword [esp + 0x34]
cmp eax, edx
jne 0x4e06fb
mov edx, dword [esi + 0x2c]
inc edx
mov dword [esi + 0x2c], edx
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x10], edx
cmp dword [edi + 0x70], ecx
jg 0x4e06c8
push 0
push edx
push 0
mov edx, 0x46
mov ecx, edi
call fcn.00499760
add esp, 0xc
jmp 0x4e06fb
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x48]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea edx, [esp + 0x90]
mov ecx, esi
call fcn.004ddd40
mov al, byte [esp + 0x73]
mov ecx, esi
mov edx, dword [esp + 0x40]
push 0
movzx eax, al
push eax
push 0
push dword [esp + 0x94]
push dword [esp + 0x6c]
call fcn.004f3d30
add esp, 0x14
mov dword [esp + 0x34], eax
test eax, eax
je 0x4e0935
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x90]
push eax
mov ecx, esi
call fcn.004ddf10
mov edx, dword [esp + 0x14]
add esp, 4
test edx, edx
je 0x4e07a9
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4e0776
push 0
push edx
push 1
mov edx, 0x46
mov ecx, edi
call fcn.00499760
add esp, 0xc
jmp 0x4e07a9
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x34]
cmp byte [edx + 0x2f], 0
jle 0x4e0813
mov ecx, dword [edi + 0x6c]
mov eax, dword [edx + 0x24]
mov dword [esp + 0x10], eax
cmp dword [edi + 0x70], ecx
jg 0x4e07dc
push 0
push eax
push 0
mov edx, 0xb
mov ecx, edi
call fcn.00499760
mov edx, dword [esp + 0x40]
add esp, 0xc
jmp 0x4e0813
mov esi, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, edx
call fcn.004f4870
lea edx, [esp + 0x90]
mov ecx, esi
call fcn.004dde30
mov ecx, dword [esp + 0x6c]
push 0x10
push dword [esp + 0x58]
mov dword [esp + 0xe8], 0
push ecx
push esi
call fcn.004b68d0
mov eax, dword [esp + 0x64]
mov ecx, esi
mov edx, dword [esp + 0x28]
push eax
push eax
push dword [esp + 0x90]
push 0
push 0
push 0xffffffffffffffff
call fcn.004d6d60
add esp, 0x28
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x54]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4e0883
push edx
mov edx, edi
call fcn.00499f40
add esp, 4
jmp 0x4e088c
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
cmp byte [esp + 0x135], 3
mov esi, dword [esp + 0x14]
jne 0x4e08af
push 0x709bd4
push 0x70970c
push 0
push esi
call fcn.00499c90
add esp, 0x10
cmp dword [esp + 0xe0], 0
je 0x4e08ff
cmp dword [esp + 0xe4], 0
mov ecx, 0x709be4
mov eax, 0x709bbc
cmovle eax, ecx
push eax
push 0x70970c
push 0
push esi
call fcn.00499c90
mov eax, dword [esp + 0x74]
mov ecx, esi
push dword [esp + 0x88]
mov edx, dword [esp + 0x2c]
push dword [eax]
lea eax, [esp + 0xf8]
push eax
call fcn.004d7bf0
add esp, 0x1c
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x8c]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4e0920
push edx
mov edx, edi
call fcn.00499f40
add esp, 4
jmp 0x4e0929
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
xor eax, eax
cmp dword [esi + 0x24], eax
setg al
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x88]
test eax, eax
je 0x4e094f
mov edx, eax
call fcn.004b15f0
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0xac]
test edi, edi
je 0x4e09eb
cmp dword [ecx + 0x1e8], 0
je 0x4e0973
mov edx, edi
call fcn.00477ca0
jmp 0x4e09eb
cmp edi, dword [ecx + 0x138]
jb 0x4e0993
cmp edi, dword [ecx + 0x13c]
jae 0x4e0993
mov eax, dword [ecx + 0x134]
mov dword [edi], eax
mov dword [ecx + 0x134], edi
jmp 0x4e09eb
cmp dword [0x70b848], 0
je 0x4e09e1
mov eax, dword [0x716a80]
test eax, eax
je 0x4e09af
push eax
call dword [0x70b898]
add esp, 4
push edi
call dword [0x70b874]
sub dword [0x716ab8], eax
add esp, 4
dec dword [0x716adc]
push edi
call dword [0x70b86c]
mov eax, dword [0x716a80]
add esp, 4
test eax, eax
je 0x4e09eb
push eax
call dword [0x70b8a0]
jmp 0x4e09e8
push edi
call dword [0x70b86c]
add esp, 4
mov edi, dword [esp + 0xb8]
test edi, edi
je 0x4e0a8b
mov ecx, dword [esp + 0x38]
cmp dword [ecx + 0x1e8], 0
je 0x4e0a13
mov edx, edi
call fcn.00477ca0
jmp 0x4e0a8b
cmp edi, dword [ecx + 0x138]
jb 0x4e0a33
cmp edi, dword [ecx + 0x13c]
jae 0x4e0a33
mov eax, dword [ecx + 0x134]
mov dword [edi], eax
mov dword [ecx + 0x134], edi
jmp 0x4e0a8b
cmp dword [0x70b848], 0
je 0x4e0a81
mov eax, dword [0x716a80]
test eax, eax
je 0x4e0a4f
push eax
call dword [0x70b898]
add esp, 4
push edi
call dword [0x70b874]
sub dword [0x716ab8], eax
add esp, 4
dec dword [0x716adc]
push edi
call dword [0x70b86c]
mov eax, dword [0x716a80]
add esp, 4
test eax, eax
je 0x4e0a8b
push eax
call dword [0x70b8a0]
jmp 0x4e0a88
push edi
call dword [0x70b86c]
add esp, 4
mov ecx, dword [esi + 0xd4]
test ecx, ecx
jne 0x4e0ab5
xor eax, eax
mov dword [esi + 0xd4], eax
mov eax, dword [esp + 0x68]
pop edi
pop esi
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.0062063b
mov esp, ebp
pop ebp
ret
mov edi, dword [esi + 8]
test ecx, ecx
jns 0x4e0ac0
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x4e0aee
mov eax, 0x716eec
mov eax, dword [eax + 8]
mov dword [esi + 0xd4], eax
mov eax, dword [esp + 0x68]
pop edi
pop esi
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.0062063b
mov esp, ebp
pop ebp
ret
lea edx, [ecx + ecx*4]
mov ecx, dword [edi + 0x68]
lea eax, [ecx + edx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xd4], eax
mov eax, dword [esp + 0x68]
pop edi
pop esi
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.0062063b
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x14c]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.0062063b
mov esp, ebp
pop ebp
ret