Function at 0x48f500
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, eax
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov edx, dword [edi + 0x14]
push eax
mov eax, dword [edi + 0x10]
push ecx
mov ecx, dword [edi + 0xc]
push edx
mov edx, dword [edi + 8]
push eax
mov eax, dword [edi + 4]
push ecx
push edx
push eax
mov eax, dword [edi]
mov esi, ebx
call fcn.0046bf00
mov ecx, dword [edi + 0x44]
mov edx, dword [edi + 0x40]
mov eax, dword [edi + 0x3c]
push ecx
mov ecx, dword [edi + 0x38]
push edx
mov edx, dword [edi + 0x34]
push eax
mov eax, dword [edi + 0x30]
push ecx
mov ecx, dword [edi + 0x2c]
push edx
push eax
mov eax, dword [edi + 0x28]
push ecx
lea esi, [ebx + 0x28]
call fcn.0046bf00
mov edx, dword [edi + 0x6c]
mov eax, dword [edi + 0x68]
mov ecx, dword [edi + 0x64]
push edx
mov edx, dword [edi + 0x60]
push eax
mov eax, dword [edi + 0x5c]
push ecx
mov ecx, dword [edi + 0x58]
push edx
mov edx, dword [edi + 0x54]
push eax
mov eax, dword [edi + 0x50]
push ecx
push edx
lea esi, [ebx + 0x50]
call fcn.0046bf00
mov eax, dword [edi + 0x94]
mov ecx, dword [edi + 0x90]
mov edx, dword [edi + 0x8c]
push eax
mov eax, dword [edi + 0x88]
push ecx
mov ecx, dword [edi + 0x84]
push edx
mov edx, dword [edi + 0x80]
push eax
mov eax, dword [edi + 0x7c]
push ecx
push edx
push eax
mov eax, dword [edi + 0x78]
lea esi, [ebx + 0x78]
call fcn.0046bf00
mov ecx, dword [edi + 0xbc]
mov edx, dword [edi + 0xb8]
mov eax, dword [edi + 0xb4]
push ecx
mov ecx, dword [edi + 0xb0]
push edx
push eax
push ecx
mov edx, dword [edi + 0xac]
mov eax, dword [edi + 0xa8]
mov ecx, dword [edi + 0xa4]
push edx
push eax
mov eax, dword [edi + 0xa0]
push ecx
lea esi, [ebx + 0xa0]
call fcn.0046bf00
mov edx, dword [edi + 0xcc]
mov ecx, dword [edi + 0xc8]
mov dword [esp + 0x14], edx
xor edx, edx
mov eax, dword [edi + 0xd4]
mov esi, dword [edi + 0xd0]
test ecx, ecx
setle dl
sub edx, 1
and edx, ecx
mov dword [ebx + 0xc8], edx
mov ecx, dword [esp + 0x14]
xor edx, edx
test ecx, ecx
setle dl
sub edx, 1
and edx, ecx
xor ecx, ecx
mov dword [ebx + 0xcc], edx
test esi, esi
setle cl
xor edx, edx
sub ecx, 1
and ecx, esi
test eax, eax
setle dl
mov dword [ebx + 0xd0], ecx
sub edx, 1
and edx, eax
mov dword [ebx + 0xd4], edx
mov ecx, dword [edi + 0xdc]
mov eax, dword [edi + 0xe4]
mov esi, dword [edi + 0xe0]
xor edx, edx
mov dword [esp + 0x14], ecx
mov ecx, dword [edi + 0xd8]
test ecx, ecx
setle dl
sub edx, 1
and edx, ecx
mov ecx, dword [esp + 0x14]
mov dword [ebx + 0xd8], edx
xor edx, edx
test ecx, ecx
setle dl
sub edx, 1
and edx, ecx
xor ecx, ecx
test esi, esi
setle cl
mov dword [ebx + 0xdc], edx
xor edx, edx
sub ecx, 1
and ecx, esi
test eax, eax
setle dl
mov dword [ebx + 0xe0], ecx
sub edx, 1
and edx, eax
mov dword [ebx + 0xe4], edx
mov ecx, dword [edi + 0xec]
mov eax, dword [edi + 0xf4]
mov esi, dword [edi + 0xf0]
xor edx, edx
mov dword [esp + 0x14], ecx
mov ecx, dword [edi + 0xe8]
test ecx, ecx
setle dl
sub edx, 1
and edx, ecx
mov dword [ebx + 0xe8], edx
xor edx, edx
mov ecx, dword [esp + 0x14]
test ecx, ecx
setle dl
sub edx, 1
and edx, ecx
xor ecx, ecx
mov dword [ebx + 0xec], edx
test esi, esi
setle cl
xor edx, edx
sub ecx, 1
and ecx, esi
test eax, eax
setle dl
mov dword [ebx + 0xf0], ecx
sub edx, 1
and edx, eax
mov dword [ebx + 0xf4], edx
mov ecx, dword [edi + 0xfc]
mov esi, dword [edi + 0x100]
mov eax, dword [edi + 0x104]
xor edx, edx
mov dword [esp + 0x14], ecx
mov ecx, dword [edi + 0xf8]
test ecx, ecx
setle dl
sub edx, 1
and edx, ecx
mov ecx, dword [esp + 0x14]
mov dword [ebx + 0xf8], edx
xor edx, edx
test ecx, ecx
setle dl
sub edx, 1
and edx, ecx
xor ecx, ecx
test esi, esi
setle cl
mov dword [ebx + 0xfc], edx
xor edx, edx
sub ecx, 1
and ecx, esi
test eax, eax
setle dl
mov dword [ebx + 0x100], ecx
add ebx, 0x108
sub edx, 1
and edx, eax
mov dword [ebx - 4], edx
mov esi, dword [ebx + 8]
cmp dword [ebx + 4], esi
jbe 0x48f7af
call fcn.00500ad0
mov eax, dword [ebx + 4]
cmp eax, dword [ebx + 8]
mov dword [esp + 0x14], eax
jbe 0x48f7c4
call fcn.00500ad0
mov eax, dword [esp + 0x14]
push esi
push ebx
push eax
push ebx
lea eax, [esp + 0x30]
push eax
call fcn.004a1950
mov eax, ebx
lea esi, [edi + 0x108]
call fcn.0046bc10
mov eax, esi
mov dword [esp + 0x10], 0
call fcn.00488e80
test eax, eax
jle 0x48f969
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48f80b
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x10], eax
jb 0x48f810
call fcn.00500ad0
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x10]
cmp dword [ecx + edx*4], 0
je 0x48f8f2
push 0x10
call fcn.00500104
add esp, 4
test eax, eax
je 0x48f841
xor ecx, ecx
mov dword [eax], ecx
mov byte [eax + 4], 0xff
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov esi, eax
jmp 0x48f843
xor esi, esi
mov ecx, dword [edi + 0x10c]
test ecx, ecx
mov dword [esp + 0x14], esi
je 0x48f862
mov eax, dword [edi + 0x110]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x10], eax
jb 0x48f867
call fcn.00500ad0
mov eax, dword [edi + 0x10c]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + ecx*4]
mov cl, byte [eax + 4]
mov edx, dword [eax]
mov eax, dword [esi + 8]
test eax, eax
mov dword [esi], edx
mov byte [esi + 4], cl
je 0x48f893
push eax
call dword [0x5310c4]
mov dword [esi + 8], 0
mov eax, dword [esi + 0xc]
test eax, eax
je 0x48f8a8
push eax
call dword [0x5310c4]
mov dword [esi + 0xc], 0
mov edx, dword [ebx + 4]
test edx, edx
jne 0x48f8b3
xor ecx, ecx
jmp 0x48f8bb
mov ecx, dword [ebx + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x48f8d8
mov eax, dword [ebx + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x48f8d8
mov eax, dword [ebx + 8]
mov dword [eax], esi
add eax, 4
mov dword [ebx + 8], eax
jmp 0x48f94d
mov esi, dword [ebx + 8]
cmp edx, esi
jbe 0x48f8e4
call fcn.00500ad0
push esi
push ebx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
push ecx
jmp 0x48f946
mov edx, dword [ebx + 4]
test edx, edx
mov dword [esp + 0x14], 0
jne 0x48f905
xor ecx, ecx
jmp 0x48f90d
mov ecx, dword [ebx + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x48f92e
mov eax, dword [ebx + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x48f92e
mov eax, dword [ebx + 8]
mov dword [eax], 0
add eax, 4
mov dword [ebx + 8], eax
jmp 0x48f94d
mov esi, dword [ebx + 8]
cmp edx, esi
jbe 0x48f93a
call fcn.00500ad0
push esi
push ebx
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x24]
push eax
mov eax, ebx
call fcn.00488f00
add dword [esp + 0x10], 1
lea esi, [edi + 0x108]
mov eax, esi
call fcn.00488e80
cmp dword [esp + 0x10], eax
jl 0x48f7f6
mov al, byte [edi + 0x11c]
mov esi, dword [ebp + 8]
mov ecx, dword [edi + 0x118]
mov ebx, dword [0x5310c4]
mov byte [esi + 0x11c], al
mov eax, dword [esi + 0x120]
test eax, eax
mov dword [esi + 0x118], ecx
je 0x48f9a1
push eax
call ebx
mov dword [esi + 0x120], 0
mov eax, dword [esi + 0x124]
test eax, eax
je 0x48f9b8
push eax
call ebx
mov dword [esi + 0x124], 0
mov al, byte [edi + 0x12c]
mov edx, dword [edi + 0x128]
mov byte [esi + 0x12c], al
mov eax, dword [esi + 0x130]
test eax, eax
mov dword [esi + 0x128], edx
je 0x48f9e7
push eax
call ebx
mov dword [esi + 0x130], 0
mov eax, dword [esi + 0x134]
test eax, eax
je 0x48f9fe
push eax
call ebx
mov dword [esi + 0x134], 0
mov ebx, dword [edi + 0x138]
mov eax, dword [edi + 0x144]
mov ecx, dword [edi + 0x140]
mov edx, dword [edi + 0x13c]
mov dword [esi + 0x138], ebx
lea ebx, [esi + 0x148]
mov dword [esi + 0x13c], edx
mov dword [esi + 0x140], ecx
mov dword [esi + 0x144], eax
mov eax, dword [ebx + 8]
cmp dword [ebx + 4], eax
mov dword [esp + 0x14], eax
jbe 0x48fa45
call fcn.00500ad0
mov eax, dword [ebx + 4]
cmp eax, dword [ebx + 8]
mov dword [esp + 0x10], eax
jbe 0x48fa56
call fcn.00500ad0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push eax
push ebx
push ecx
push ebx
lea edx, [esp + 0x30]
push edx
call fcn.004a1950
mov eax, ebx
call fcn.0046bc10
lea eax, [edi + 0x148]
mov dword [esp + 0x14], 0
call fcn.00488e80
test eax, eax
jle 0x48fc39
mov ecx, dword [edi + 0x14c]
test ecx, ecx
je 0x48faa9
mov eax, dword [edi + 0x150]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x14], eax
jb 0x48faae
call fcn.00500ad0
mov eax, dword [edi + 0x14c]
mov ecx, dword [esp + 0x14]
cmp dword [eax + ecx*4], 0
je 0x48fbbc
push 0x10
call fcn.00500104
add esp, 4
test eax, eax
je 0x48fae4
xor ecx, ecx
mov dword [eax], ecx
mov byte [eax + 4], 0xff
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [esp + 0x10], eax
jmp 0x48faf0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
mov edx, dword [edi + 0x14c]
test edx, edx
mov dword [esp + 0x18], eax
je 0x48fb0f
mov ecx, dword [edi + 0x150]
sub ecx, edx
sar ecx, 2
cmp dword [esp + 0x14], ecx
jb 0x48fb18
call fcn.00500ad0
mov eax, dword [esp + 0x10]
mov edx, dword [edi + 0x14c]
mov ecx, dword [esp + 0x14]
mov ecx, dword [edx + ecx*4]
mov dl, byte [ecx + 4]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov ecx, dword [eax + 8]
test ecx, ecx
mov byte [eax + 4], dl
je 0x48fb4a
push ecx
call dword [0x5310c4]
mov edx, dword [esp + 0x10]
mov dword [edx + 8], 0
mov eax, edx
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x48fb63
push ecx
call dword [0x5310c4]
mov eax, dword [esp + 0x10]
mov dword [eax + 0xc], 0
mov edx, dword [ebx + 4]
test edx, edx
jne 0x48fb70
mov dword [esp + 0x10], edx
jmp 0x48fb7c
mov ecx, dword [ebx + 8]
sub ecx, edx
sar ecx, 2
mov dword [esp + 0x10], ecx
test edx, edx
je 0x48fb9e
mov ecx, dword [ebx + 0xc]
sub ecx, edx
sar ecx, 2
cmp dword [esp + 0x10], ecx
jae 0x48fb9e
mov ecx, dword [ebx + 8]
mov dword [ecx], eax
add ecx, 4
mov dword [ebx + 8], ecx
jmp 0x48fc1f
mov eax, dword [ebx + 8]
cmp edx, eax
mov dword [esp + 0x10], eax
jbe 0x48fbae
call fcn.00500ad0
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
lea eax, [esp + 0x20]
jmp 0x48fc14
mov edx, dword [ebx + 4]
test edx, edx
mov dword [esp + 0x10], 0
jne 0x48fbcf
xor ecx, ecx
jmp 0x48fbd7
mov ecx, dword [ebx + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x48fbf8
mov eax, dword [ebx + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x48fbf8
mov eax, dword [ebx + 8]
mov dword [eax], 0
add eax, 4
mov dword [ebx + 8], eax
jmp 0x48fc1f
mov eax, dword [ebx + 8]
cmp edx, eax
mov dword [esp + 0x18], eax
jbe 0x48fc08
call fcn.00500ad0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x10]
lea eax, [esp + 0x28]
push ecx
push ebx
push edx
push eax
mov eax, ebx
call fcn.00488f00
add dword [esp + 0x14], 1
lea eax, [edi + 0x148]
call fcn.00488e80
cmp dword [esp + 0x14], eax
jl 0x48fa8e
mov ebx, dword [edi + 0x158]
mov eax, dword [edi + 0x164]
mov ecx, dword [edi + 0x160]
mov edx, dword [edi + 0x15c]
mov dword [esi + 0x158], ebx
lea ebx, [esi + 0x168]
mov dword [esi + 0x15c], edx
mov dword [esi + 0x160], ecx
mov dword [esi + 0x164], eax
mov eax, dword [ebx + 8]
cmp dword [ebx + 4], eax
mov dword [esp + 0x18], eax
jbe 0x48fc80
call fcn.00500ad0
mov eax, dword [ebx + 4]
cmp eax, dword [ebx + 8]
mov dword [esp + 0x14], eax
jbe 0x48fc91
call fcn.00500ad0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push ecx
push ebx
push edx
push ebx
lea eax, [esp + 0x38]
push eax
call fcn.004a1950
mov eax, ebx
call fcn.0046bc10
lea eax, [edi + 0x168]
mov dword [esp + 0x10], 0
call fcn.00488e80
test eax, eax
jle 0x48fe74
mov ecx, dword [edi + 0x16c]
test ecx, ecx
je 0x48fce4
mov eax, dword [edi + 0x170]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x10], eax
jb 0x48fce9
call fcn.00500ad0
mov ecx, dword [edi + 0x16c]
mov edx, dword [esp + 0x10]
cmp dword [ecx + edx*4], 0
je 0x48fdf7
push 0x10
call fcn.00500104
add esp, 4
test eax, eax
je 0x48fd1f
xor ecx, ecx
mov dword [eax], ecx
mov byte [eax + 4], 0xff
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [esp + 0x14], eax
jmp 0x48fd2b
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
mov edx, dword [edi + 0x16c]
test edx, edx
mov dword [esp + 0x20], eax
je 0x48fd4a
mov ecx, dword [edi + 0x170]
sub ecx, edx
sar ecx, 2
cmp dword [esp + 0x10], ecx
jb 0x48fd53
call fcn.00500ad0
mov eax, dword [esp + 0x14]
mov ecx, dword [edi + 0x16c]
mov edx, dword [esp + 0x10]
mov ecx, dword [ecx + edx*4]
mov dl, byte [ecx + 4]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov ecx, dword [eax + 8]
test ecx, ecx
mov byte [eax + 4], dl
je 0x48fd85
push ecx
call dword [0x5310c4]
mov edx, dword [esp + 0x14]
mov dword [edx + 8], 0
mov eax, edx
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x48fd9e
push ecx
call dword [0x5310c4]
mov eax, dword [esp + 0x14]
mov dword [eax + 0xc], 0
mov edx, dword [ebx + 4]
test edx, edx
jne 0x48fdab
mov dword [esp + 0x14], edx
jmp 0x48fdb7
mov ecx, dword [ebx + 8]
sub ecx, edx
sar ecx, 2
mov dword [esp + 0x14], ecx
test edx, edx
je 0x48fdd9
mov ecx, dword [ebx + 0xc]
sub ecx, edx
sar ecx, 2
cmp dword [esp + 0x14], ecx
jae 0x48fdd9
mov ecx, dword [ebx + 8]
mov dword [ecx], eax
add ecx, 4
mov dword [ebx + 8], ecx
jmp 0x48fe5a
mov eax, dword [ebx + 8]
cmp edx, eax
mov dword [esp + 0x18], eax
jbe 0x48fde9
call fcn.00500ad0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x20]
lea eax, [esp + 0x28]
jmp 0x48fe4f
mov edx, dword [ebx + 4]
test edx, edx
mov dword [esp + 0x18], 0
jne 0x48fe0a
xor ecx, ecx
jmp 0x48fe12
mov ecx, dword [ebx + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x48fe33
mov eax, dword [ebx + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x48fe33
mov eax, dword [ebx + 8]
mov dword [eax], 0
add eax, 4
mov dword [ebx + 8], eax
jmp 0x48fe5a
mov eax, dword [ebx + 8]
cmp edx, eax
mov dword [esp + 0x20], eax
jbe 0x48fe43
call fcn.00500ad0
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x18]
lea eax, [esp + 0x30]
push ecx
push ebx
push edx
push eax
mov eax, ebx
call fcn.00488f00
add dword [esp + 0x10], 1
lea eax, [edi + 0x168]
call fcn.00488e80
cmp dword [esp + 0x10], eax
jl 0x48fcc9
lea ecx, [edi + 0x178]
lea eax, [esi + 0x178]
call fcn.0048ee40
mov eax, dword [esi + 0x198]
cmp dword [esi + 0x194], eax
lea ebx, [esi + 0x190]
mov dword [esp + 0x20], eax
jbe 0x48fea2
call fcn.00500ad0
mov eax, dword [ebx + 4]
cmp eax, dword [ebx + 8]
mov dword [esp + 0x18], eax
jbe 0x48feb3
call fcn.00500ad0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
push ecx
push ebx
push edx
push ebx
lea eax, [esp + 0x40]
push eax
call fcn.004a1950
mov eax, ebx
call fcn.0046bc10
lea eax, [edi + 0x190]
mov dword [esp + 0x10], 0
call fcn.00488e80
test eax, eax
jle 0x49008b
mov ecx, dword [edi + 0x194]
test ecx, ecx
je 0x48ff06
mov eax, dword [edi + 0x198]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x10], eax
jb 0x48ff0b
call fcn.00500ad0
mov ecx, dword [edi + 0x194]
mov edx, dword [esp + 0x10]
cmp dword [ecx + edx*4], 0
je 0x49000e
push 0x10
call fcn.00500104
add esp, 4
test eax, eax
je 0x48ff41
xor ecx, ecx
mov dword [eax], ecx
mov byte [eax + 4], 0xff
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [esp + 0x14], eax
jmp 0x48ff4d
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
mov edx, dword [edi + 0x194]
test edx, edx
mov dword [esp + 0x18], eax
je 0x48ff6c
mov ecx, dword [edi + 0x198]
sub ecx, edx
sar ecx, 2
cmp dword [esp + 0x10], ecx
jb 0x48ff75
call fcn.00500ad0
mov eax, dword [esp + 0x14]
mov ecx, dword [edi + 0x194]
mov edx, dword [esp + 0x10]
mov ecx, dword [ecx + edx*4]
mov dl, byte [ecx + 4]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov ecx, dword [eax + 8]
test ecx, ecx
mov byte [eax + 4], dl
je 0x48ffa7
push ecx
call dword [0x5310c4]
mov edx, dword [esp + 0x14]
mov dword [edx + 8], 0
mov eax, edx
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x48ffc0
push ecx
call dword [0x5310c4]
mov eax, dword [esp + 0x14]
mov dword [eax + 0xc], 0
mov edx, dword [ebx + 4]
test edx, edx
jne 0x48ffcd
mov dword [esp + 0x14], edx
jmp 0x48ffd9
mov ecx, dword [ebx + 8]
sub ecx, edx
sar ecx, 2
mov dword [esp + 0x14], ecx
test edx, edx
je 0x48fff8
mov ecx, dword [ebx + 0xc]
sub ecx, edx
sar ecx, 2
cmp dword [esp + 0x14], ecx
jae 0x48fff8
mov ecx, dword [ebx + 8]
mov dword [ecx], eax
add ecx, 4
mov dword [ebx + 8], ecx
jmp 0x490071
mov eax, dword [ebx + 8]
cmp edx, eax
mov dword [esp + 0x20], eax
jbe 0x490008
call fcn.00500ad0
lea eax, [esp + 0x30]
jmp 0x49005e
mov edx, dword [ebx + 4]
test edx, edx
mov dword [esp + 0x18], 0
jne 0x490021
xor ecx, ecx
jmp 0x490029
mov ecx, dword [ebx + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49004a
mov eax, dword [ebx + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49004a
mov eax, dword [ebx + 8]
mov dword [eax], 0
add eax, 4
mov dword [ebx + 8], eax
jmp 0x490071
mov eax, dword [ebx + 8]
cmp edx, eax
mov dword [esp + 0x20], eax
jbe 0x49005a
call fcn.00500ad0
lea eax, [esp + 0x28]
mov ecx, dword [esp + 0x20]
push ecx
push ebx
lea edx, [esp + 0x20]
push edx
push eax
mov eax, ebx
call fcn.00488f00
add dword [esp + 0x10], 1
lea eax, [edi + 0x190]
call fcn.00488e80
cmp dword [esp + 0x10], eax
jl 0x48feeb
mov eax, dword [edi + 0x1a4]
mov ecx, dword [edi + 0x1a0]
xor ebx, ebx
mov dword [esi + 0x1a0], ecx
mov dword [esi + 0x1a4], eax
mov edx, dword [edi + 0x1ac]
mov eax, dword [edi + 0x1b4]
mov ecx, dword [edi + 0x1b0]
mov dword [esp + 0x20], edx
mov edx, dword [edi + 0x1a8]
test edx, edx
setle bl
sub ebx, 1
and ebx, edx
mov edx, dword [esp + 0x20]
mov dword [esi + 0x1a8], ebx
xor ebx, ebx
test edx, edx
setle bl
sub ebx, 1
and ebx, edx
xor edx, edx
test ecx, ecx
setle dl
mov dword [esi + 0x1ac], ebx
sub edx, 1
and edx, ecx
xor ecx, ecx
test eax, eax
setle cl
mov dword [esi + 0x1b0], edx
xor ebx, ebx
sub ecx, 1
and ecx, eax
mov dword [esi + 0x1b4], ecx
mov edx, dword [edi + 0x1bc]
mov eax, dword [edi + 0x1c4]
mov ecx, dword [edi + 0x1c0]
mov dword [esp + 0x20], edx
mov edx, dword [edi + 0x1b8]
test edx, edx
setle bl
sub ebx, 1
and ebx, edx
mov edx, dword [esp + 0x20]
mov dword [esi + 0x1b8], ebx
xor ebx, ebx
test edx, edx
setle bl
sub ebx, 1
and ebx, edx
xor edx, edx
test ecx, ecx
setle dl
mov dword [esi + 0x1bc], ebx
sub edx, 1
and edx, ecx
xor ecx, ecx
test eax, eax
setle cl
mov dword [esi + 0x1c0], edx
xor ebx, ebx
sub ecx, 1
and ecx, eax
mov dword [esi + 0x1c4], ecx
mov edx, dword [edi + 0x1cc]
mov eax, dword [edi + 0x1d4]
mov ecx, dword [edi + 0x1d0]
mov dword [esp + 0x20], edx
mov edx, dword [edi + 0x1c8]
test edx, edx
setle bl
sub ebx, 1
and ebx, edx
mov edx, dword [esp + 0x20]
mov dword [esi + 0x1c8], ebx
xor ebx, ebx
test edx, edx
setle bl
sub ebx, 1
and ebx, edx
xor edx, edx
test ecx, ecx
setle dl
mov dword [esi + 0x1cc], ebx
sub edx, 1
and edx, ecx
xor ecx, ecx
test eax, eax
setle cl
mov dword [esi + 0x1d0], edx
xor ebx, ebx
sub ecx, 1
and ecx, eax
mov dword [esi + 0x1d4], ecx
mov ecx, dword [edi + 0x1e0]
mov edx, dword [edi + 0x1dc]
mov eax, dword [edi + 0x1e4]
mov edi, dword [edi + 0x1d8]
test edi, edi
setle bl
sub ebx, 1
and ebx, edi
mov dword [esi + 0x1d8], ebx
xor ebx, ebx
test edx, edx
setle bl
pop edi
sub ebx, 1
and ebx, edx
xor edx, edx
test ecx, ecx
setle dl
mov dword [esi + 0x1dc], ebx
sub edx, 1
and edx, ecx
xor ecx, ecx
test eax, eax
setle cl
mov dword [esi + 0x1e0], edx
sub ecx, 1
and ecx, eax
mov dword [esi + 0x1e4], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4