Function at 0x4d8970
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x408]
cmp eax, dword [ecx + 8]
jbe 0x4d9c4d
sub esp, 0x488
lea edi, [esp + 0x3ec]
xor eax, eax
call fcn.0045e1ee
mov ecx, dword [esp + 0x48c]
mov dword [esp + 0x424], ecx
mov edx, dword [esp + 0x490]
mov dword [esp + 0x428], edx
lea edi, [esp + 0x114]
call fcn.0045e1f9
lea edi, [esp + 0x434]
call fcn.0045e1eb
lea ecx, [esp + 0x434]
mov dword [esp + 0x120], ecx
call fcn.00449280
mov ecx, dword [esp]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
lea edi, [esp + 0x100]
xor eax, eax
call fcn.0045e1fb
mov ecx, 1
lea edx, [esp + 0x3ec]
mov ebx, 1
xor ebp, ebp
lea esi, [esp + 0x3c]
xor edi, edi
jmp 0x4d8af7
mov esi, eax
mov eax, dword [esp + 0xd8]
add eax, 0x48
mov ebp, ecx
mov ecx, eax
mov edi, edx
mov edx, ebx
mov ebx, esi
mov esi, edi
mov dword [esp + 0x98], edx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x94], ebp
mov dword [esp + 0xb0], esi
lea edi, [esp + 0x2cc]
mov esi, ecx
call fcn.0045e65c
lea ecx, [0x5bfd00]
mov dword [esp], ecx
lea ecx, [esp + 0x114]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x304]
mov dword [esp + 8], ecx
call fcn.0040c7c0
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4d8b4d
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0x98]
inc ebx
mov ebp, dword [esp + 0x50]
cmp ebp, ebx
jg 0x4d8a3f
mov ebx, eax
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xe0]
mov edi, dword [esp + 0xdc]
xor eax, eax
test ecx, ecx
jle 0x4d95b3
mov dword [esp + 0x54], ebp
mov dword [esp + 0xb0], esi
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x50], ecx
mov dword [esp + 0xe0], edx
mov dword [esp + 0xac], edi
call fcn.0040c3c0
mov eax, dword [esp]
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0xe0]
xor edx, edx
mov ebx, dword [esp + 0x54]
xor ebp, ebp
mov esi, dword [esp + 0xb0]
jmp 0x4d8a57
lea eax, [0x5bfd00]
mov dword [esp], eax
lea ecx, [esp + 0x114]
mov dword [esp + 4], ecx
lea edx, [esp + 0x304]
mov dword [esp + 8], edx
call fcn.0040cd70
mov eax, dword [esp + 0xc]
mov byte [eax], 1
xor eax, eax
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0xb0]
jmp 0x4d8b99
mov ebp, dword [esp + 0x74]
inc ebp
mov ebx, edx
mov edx, eax
mov eax, ebp
mov dword [esp + 0x74], eax
mov dword [esp + 0x54], edx
mov dword [esp + 0x94], ecx
mov dword [esp + 0xb0], ebx
mov ebp, dword [esp + 0x304]
mov esi, dword [esp + 0x308]
mov ebp, dword [ebp + 0x64]
mov dword [esp], esi
call ebp
mov eax, dword [esp + 0x74]
cmp dword [esp + 4], eax
jle 0x4d959c
mov ecx, dword [esp + 0x304]
mov edx, dword [esp + 0x308]
mov ecx, dword [ecx + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0x130]
lea esi, [esp + 8]
call fcn.0045e68e
mov eax, dword [esp + 0x13c]
movzx ecx, byte [esp + 0x160]
test eax, eax
test cl, cl
jne 0x4d94fe
test eax, eax
je 0x4d8c31
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xb0]
jmp 0x4d8b8e
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x14c]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x5eb7bb]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.0047e150
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
cmp ecx, 1
jne 0x4d8c86
cmp byte [eax], 0x2d
jne 0x4d8c86
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xb0]
jmp 0x4d8b8e
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004de9b0
mov eax, dword [esp + 8]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x4c], ebx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004d7a60
movzx eax, byte [esp + 8]
test al, al
je 0x4d94f5
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x58], eax
mov dword [esp + 0xbc], ecx
mov edx, dword [esp + 0x2fc]
lea ebx, [0x5be280]
mov dword [esp], ebx
inc edx
mov dword [esp + 0x64], edx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.00444f30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2fc]
mov ebx, dword [esp + 0x64]
cmp ebx, edx
jle 0x4d94ee
mov dword [esp + 0xd4], eax
cmp eax, ecx
je 0x4d8d45
mov dword [esp], eax
mov dword [esp + 4], ecx
shl edx, 2
mov dword [esp + 8], edx
call fcn.0045e900
mov eax, dword [esp + 0x2fc]
mov ecx, dword [esp + 0x64]
cmp ecx, eax
jbe 0x4d9c47
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xd4]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x140]
mov dword [esp + 0x78], eax
mov ebx, dword [esp + 0x144]
mov dword [esp + 0xc4], ebx
mov ebp, dword [eax + 0x60]
mov dword [esp], ebx
call ebp
mov eax, dword [esp + 8]
test eax, eax
je 0x4d94b0
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x78], eax
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
lea ebp, [0x5ebd77]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 6
call fcn.004dea70
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4d947b
xor eax, eax
mov byte [esp + 0x3d], al
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x4d943c
mov edx, 1
test dl, dl
je 0x4d924a
test ecx, ecx
jne 0x4d923c
mov edx, dword [esp + 0x130]
mov ebx, dword [esp + 0x134]
mov dword [esp + 0x90], ebx
mov dword [esp + 0xbc], edx
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
lea eax, [0x5ec904]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 9
call fcn.004dea70
movzx eax, byte [esp + 0x10]
mov byte [esp + 0x3f], al
lea edi, [esp + 0x23c]
xor eax, eax
call fcn.0045e1ee
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x23c], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x240], ecx
mov ecx, dword [esp + 0x58]
test ecx, ecx
setne cl
mov byte [esp + 0x264], cl
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0x268], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x26c], ecx
mov dword [esp + 0x270], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x274], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x278], ecx
movzx ecx, byte [esp + 0x3f]
mov byte [esp + 0x27c], cl
movzx ecx, byte [esp + 0x3d]
mov byte [esp + 0x27d], cl
mov ecx, dword [esp + 0x23c]
mov edx, dword [esp + 0x240]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004486d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x244], eax
mov dword [esp + 0x248], ecx
mov dword [esp + 0x24c], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d9e40
mov eax, dword [esp + 0xc]
mov dword [esp + 0x250], eax
nop
mov dword [esp + 0x104], 0
mov dword [esp + 0x10c], 0
mov byte [esp + 0x110], 0
lea eax, [esp + 0x100]
mov dword [esp], eax
lea ecx, [0x5eb2cf]
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
call fcn.004ca7d0
mov eax, dword [esp + 0x244]
mov ecx, dword [esp + 0x248]
mov edx, dword [esp + 0x24c]
lea ebx, [esp + 0x100]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004d3410
lea eax, [esp + 0x100]
mov dword [esp], eax
lea ecx, [0x5eb37f]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004ca7d0
mov ecx, dword [esp + 0x104]
mov eax, dword [esp + 0x100]
mov edx, dword [esp + 0x108]
mov ebx, dword [esp + 0x10c]
cmp ecx, ebx
jb 0x4d9c40
mov dword [esp], 0
sub edx, ebx
neg edx
sar edx, 0x1f
and edx, ebx
add eax, edx
mov dword [esp + 4], eax
sub ecx, ebx
mov dword [esp + 8], ecx
call fcn.00448580
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x25c], eax
mov dword [esp + 0x260], ecx
mov eax, dword [esp + 0x23c]
mov ecx, dword [esp + 0x240]
mov dword [esp], 0
lea edx, [0x5eb2cf]
mov dword [esp + 4], edx
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x5eb37f]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 2
call fcn.00448460
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x254], eax
mov dword [esp + 0x258], ecx
mov eax, dword [esp + 0xf8]
lea ecx, [eax + 1]
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0xfc]
cmp ebx, ecx
jb 0x4d91ff
lea ecx, [eax + 1]
mov dword [esp + 0xf8], ecx
mov ecx, dword [0x770e60]
lea eax, [eax + eax*8]
lea edi, [edx + eax*8]
test ecx, ecx
jne 0x4d91dd
lea esi, [esp + 0x23c]
call fcn.0045e65c
lea eax, [0x5bfd40]
mov dword [esp], eax
mov ecx, dword [esp + 0xac]
mov dword [esp + 4], ecx
lea edx, [esp + 0x304]
mov dword [esp + 8], edx
call fcn.0040c7c0
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
jle 0x4d916a
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xf4]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4d9c3b
lea eax, [ecx + ecx*8]
lea esi, [edx + eax*8 - 0x48]
lea edi, [esp + 0x3a4]
call fcn.0045e65c
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0xfc]
lea ebx, [eax + 1]
cmp ebx, edx
ja 0x4d91a0
lea edx, [eax + 1]
mov dword [esp + 0xf8], edx
mov edx, dword [0x770e60]
lea eax, [eax + eax*8]
lea edi, [ecx + eax*8]
test edx, edx
jne 0x4d9181
lea esi, [esp + 0x3a4]
call fcn.0045e65c
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xb0]
jmp 0x4d8b8e
lea eax, [0x5de120]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x3a4]
mov dword [esp + 8], eax
call fcn.004106b0
jmp 0x4d916a
lea ebp, [0x5de120]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.004450a0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xfc], edx
mov dword [esp + 0xf4], ecx
jmp 0x4d9144
lea eax, [0x5de120]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x23c]
mov dword [esp + 8], eax
call fcn.004106b0
jmp 0x4d90cf
lea ebp, [0x5de120]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004450a0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xf4], edx
jmp 0x4d90a5
mov ebx, ecx
mov edx, dword [esp + 0xbc]
jmp 0x4d8e14
mov eax, dword [esp + 0x78]
mov dword [esp + 0xec], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xf0], ecx
lea edx, [0x5bfd40]
mov dword [esp], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xec]
mov dword [esp + 8], ebp
call fcn.0040cd70
mov eax, dword [esp + 0xc]
inc dword [eax]
mov eax, dword [esp + 0x78]
mov dword [esp + 0xec], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xf0], ecx
lea edx, [0x5bfd40]
mov dword [esp], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xec]
mov dword [esp + 8], ebp
call fcn.0040c7c0
mov eax, dword [esp + 0xc]
cmp dword [eax], 1
je 0x4d92f0
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xb0]
mov ebx, eax
mov eax, ecx
mov ecx, ebx
jmp 0x4d8b8e
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x60]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x90], ecx
lea edi, [esp + 0x35c]
mov edx, eax
xor eax, eax
call fcn.0045e1ee
mov dword [esp + 0x35c], edx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x360], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0x388], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x38c], ecx
mov dword [esp + 0x390], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x394], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x398], ecx
mov ecx, dword [esp + 0x94]
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x54]
cmp ebx, edx
jb 0x4d93fa
mov ebp, dword [esp + 0xb0]
mov eax, dword [0x770e60]
lea ecx, [ecx + ecx*8]
lea edi, [ebp + ecx*8]
test eax, eax
jne 0x4d93b1
lea esi, [esp + 0x35c]
call fcn.0045e65c
mov eax, edx
mov ecx, ebx
mov edx, ebp
jmp 0x4d92e5
mov dword [esp + 0xd0], ebp
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], ebx
lea eax, [0x5de120]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x35c]
mov dword [esp + 8], eax
call fcn.004106b0
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0xd0]
jmp 0x4d93a6
lea eax, [0x5de120]
mov dword [esp], eax
mov ebp, dword [esp + 0xb0]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.004450a0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0x94]
jmp 0x4d9389
movzx edx, byte [esp + 0x160]
test dl, dl
jne 0x4d9452
mov edx, 1
jmp 0x4d8df6
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x19
setne dl
movzx eax, byte [esp + 0x3d]
mov ecx, dword [esp + 0x58]
jmp 0x4d8df6
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
lea ecx, [eax - 1]
cmp ecx, 0xd
ja 0x4d94a4
mov eax, 1
jmp 0x4d8de1
cmp eax, 0x18
je 0x4d949a
xor eax, eax
jmp 0x4d8de1
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x50]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
cmp dword [esp + 4], 0x16
jne 0x4d8d93
mov eax, dword [esp + 0x78]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xc4]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
jmp 0x4d8d9e
mov edx, ebx
jmp 0x4d8d27
xor eax, eax
xor ecx, ecx
jmp 0x4d8cdc
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x144]
mov dword [esp + 0xa0], ecx
mov edx, dword [eax + 0x50]
mov dword [esp], ecx
call edx
cmp dword [esp + 4], 0x16
je 0x4d9576
mov edx, dword [esp + 0x90]
test edx, edx
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa0]
jne 0x4d9564
xor eax, eax
test al, al
je 0x4d8c31
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xb0]
jmp 0x4d8b8e
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 0x19
setne al
jmp 0x4d9545
mov eax, dword [esp + 0x40]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x90]
test edx, edx
jmp 0x4d9541
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xb0]
jmp 0x4d8aca
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004091c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea ecx, [0x4ded30]
mov dword [esp + 0xe4], ecx
lea ecx, [esp + 0xf4]
mov dword [esp + 0xe8], ecx
lea ecx, [0x5b6760]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0xe4]
mov dword [esp + 8], eax
call fcn.0048d910
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xfc]
xor edx, edx
xor ebx, ebx
jmp 0x4d9755
mov eax, dword [esp + 0x7c]
lea esi, [eax + 1]
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x60]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0xa4]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x7c], esi
lea ebp, [esi + edx]
mov dword [esp + 0x94], ebp
mov ebx, dword [esp + 0xf8]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0xe0], ebx
mov ebx, dword [esp + 0x90]
cmp ebx, ebp
jle 0x4d96f7
jbe 0x4d9c29
lea ebx, [ebp + ebp*8]
mov ebp, dword [esp + 0xe0]
lea ebx, [ebp + ebx*8]
lea edi, [esp + 0x1ac]
mov esi, ebx
call fcn.0045e65c
mov ecx, dword [esp + 0x1b0]
mov ebx, dword [esp + 0x1ac]
mov ebp, dword [esp + 0x60]
cmp ebp, ecx
jne 0x4d96f7
mov dword [esp], ebx
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402890
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4d9641
mov ebx, dword [esp + 0x7c]
cmp ebx, 1
jne 0x4d9853
mov ecx, dword [esp + 0x9c]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x48]
cmp ebx, ebp
ja 0x4d9813
mov eax, dword [esp + 0xa4]
mov edx, ebx
mov ebx, dword [0x770e60]
lea ecx, [ecx + ecx*8]
lea edi, [eax + ecx*8]
test ebx, ebx
jne 0x4d97c7
lea esi, [esp + 0x284]
call fcn.0045e65c
mov ecx, dword [esp + 0x94]
mov ebx, edx
mov ecx, ebp
mov edx, dword [esp + 0x94]
mov ebp, dword [esp + 0xf8]
mov esi, ebx
mov ebx, dword [esp + 0xf4]
cmp edx, ebp
jge 0x4d99f2
jae 0x4d9c32
mov dword [esp + 0x70], edx
mov dword [esp + 0xa4], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x9c], esi
lea ebp, [edx + edx*8]
mov dword [esp + 0x98], ebp
lea ebx, [ebx + ebp*8]
lea edi, [esp + 0x284]
mov esi, ebx
call fcn.0045e65c
mov ecx, dword [esp + 0x284]
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0x288]
mov dword [esp + 0x60], ebx
mov esi, 1
jmp 0x4d9665
mov dword [esp + 0xcc], eax
mov dword [esp + 0x9c], edx
mov dword [esp + 0x84], ebp
lea eax, [0x5de120]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x284]
mov dword [esp + 8], eax
call fcn.004106b0
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x84]
jmp 0x4d9743
lea eax, [0x5de120]
mov dword [esp], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004450a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x9c]
jmp 0x4d9721
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf4]
mov ecx, dword [esp + 0x94]
cmp ecx, edx
ja 0x4d9c24
mov eax, dword [esp + 0x70]
cmp eax, ecx
ja 0x4d9c1f
lea edi, [esp + 0x164]
mov esi, eax
xor eax, eax
call fcn.0045e1ee
mov ecx, dword [esp + 0x98]
shl ecx, 3
sub edx, esi
neg edx
sar edx, 0x1f
and ecx, edx
lea esi, [ebp + ecx]
cmp ebx, 1
jle 0x4d99ee
mov edx, ebx
mov ebx, dword [ebp + ecx + 0x78]
cmp dword [esi + 0x30], ebx
jne 0x4d99d0
lea ebx, [ebp + ecx + 0x28]
movzx ebp, byte [ebp + ecx + 0x70]
xchg ebp, eax
cmp byte [ebx], al
xchg ebp, eax
jne 0x4d99d0
xor ecx, ecx
mov byte [esp + 0x3e], cl
lea edi, [esp + 0x314]
lea esi, [esp + 0x164]
call fcn.0045e65c
movzx ecx, byte [esp + 0x3e]
test cl, cl
je 0x4d99b9
mov ecx, dword [esp + 0x9c]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x48]
cmp ebx, ebp
ja 0x4d9977
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x44], ebx
mov ebx, dword [0x770e60]
lea ecx, [ecx + ecx*8]
lea edi, [edx + ecx*8]
test ebx, ebx
jne 0x4d993a
lea esi, [esp + 0x314]
call fcn.0045e65c
mov ecx, dword [esp + 0x44]
mov eax, edx
mov edx, ecx
jmp 0x4d9743
mov dword [esp + 0xc8], edx
mov dword [esp + 0x80], ebp
lea eax, [0x5de120]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x314]
mov dword [esp + 8], eax
call fcn.004106b0
xor eax, eax
mov edx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x80]
jmp 0x4d992d
lea eax, [0x5de120]
mov dword [esp], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004450a0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0x9c]
jmp 0x4d990d
mov ebp, dword [esp + 0x48]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xa4]
jmp 0x4d9931
test edx, edx
jbe 0x4d9c16
lea edi, [esp + 0x164]
call fcn.0045e65c
mov ecx, 1
jmp 0x4d98d0
mov edx, ebx
jmp 0x4d99d0
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], esi
mov dword [esp + 0xfc], ecx
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call fcn.004091c0
mov eax, dword [esp + 0xc]
lea ecx, [0x63b2ec]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0048e400
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x48c]
mov edx, dword [esp + 0x490]
xor ebx, ebx
jmp 0x4d9a69
mov ebp, dword [esp + 0x6c]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x48c]
mov edx, dword [esp + 0x490]
cmp ebx, eax
jge 0x4d9b19
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
cmp esi, ebx
jbe 0x4d9c0d
mov dword [esp + 0xe0], ebp
mov dword [esp + 0x6c], ebx
lea eax, [ebx + ebx*8]
mov dword [esp + 0x98], eax
lea esi, [ebp + eax*8]
lea edi, [ebp + eax*8 + 0x2c]
mov edi, dword [edi]
mov ebx, dword [esi + 0x30]
mov esi, dword [esi + 0x34]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.004d7ba0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004d3ea0
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xe0]
lea edi, [ecx + eax*8 + 0x44]
mov eax, dword [0x770e60]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4d9b0d
mov dword [edi], ecx
jmp 0x4d9a4d
mov eax, ecx
call fcn.0045df70
jmp 0x4d9a4d
mov eax, dword [esp + 0xf8]
lea ecx, [0x5c0080]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.0040c440
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xf4]
test ecx, ecx
jle 0x4d9bce
mov dword [esp + 0x9c], ecx
xor ebx, ebx
jmp 0x4d9b75
mov ebp, dword [esp + 0xe0]
lea edx, [ebp + 0x48]
mov ebx, eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x68], ebx
mov dword [esp + 0xe0], edx
lea edi, [esp + 0x1f4]
mov esi, edx
call fcn.0045e65c
mov ecx, dword [esp + 0x1f4]
mov ebp, dword [esp + 0x1f8]
lea edx, [0x5c0080]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
call fcn.0040fbc0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x68]
mov dword [eax], ecx
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x9c]
cmp eax, ecx
jl 0x4d9b62
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x494], eax
mov dword [esp + 0x498], ecx
mov dword [esp + 0x49c], edx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x4a0], eax
add esp, 0x488
ret
mov eax, ebx
mov ecx, esi
call fcn.0045dff0
xor eax, eax
mov ecx, edx
call fcn.0045dff0
call fcn.0045e050
call fcn.0045e030
mov eax, ebp
mov ecx, ebx
call fcn.0045dff0
mov eax, edx
mov ecx, ebp
call fcn.0045dff0
call fcn.0045dff0
mov eax, ebx
call fcn.0045e050
call fcn.0045dff0
nop
call fcn.0045ca10
jmp fcn.004d8970