Function at 0x48fde0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ebx
push esi
xor esi, esi
push edi
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x13], 0
mov dword [esp + 0x1c], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x34], ecx
call fcn.00459e90
mov edx, dword [ebp + 0x10]
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x44], eax
mov eax, dword [edx + 0x10]
mov edx, dword [ebp + 0x1c]
lea ecx, [ecx + ecx*2]
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 0x14]
mov edi, dword [edx + 0x40]
shl ecx, 4
add ecx, eax
xor edx, edx
mov ebx, eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], edx
cmp ebx, ecx
jae 0x490065
mov dword [esp + 0x20], 1
mov eax, dword [edi]
or eax, dword [edi + 4]
mov esi, dword [ebx]
jne 0x48fee6
test byte [ebx + 0x14], 2
jne 0x48fee6
test byte [esi + 4], 1
jne 0x48fee6
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x5c]
push esi
push eax
mov byte [esp + 0x78], 3
mov dword [esp + 0x64], 0x459a00
mov dword [esp + 0x68], 0x459b10
mov dword [esp + 0x7c], edx
call fcn.00455ab0
add esp, 8
cmp byte [esp + 0x70], 0
je 0x48fee6
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
push 0
push 0
push esi
push eax
call fcn.00458c00
mov edx, dword [esp + 0x2c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
push edx
call fcn.00458710
add esp, 0x14
mov dword [esp + 0x1c], eax
mov edx, dword [ebx + 8]
mov eax, dword [ebp + 0x10]
cmp edx, dword [eax + 0x30]
jne 0x490050
test byte [ebx + 0x12], 0x82
je 0x490050
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x24]
and eax, dword [ebp + 0x14]
and ecx, dword [ebp + 0x18]
or eax, ecx
jne 0x490050
mov eax, dword [ebx + 0xc]
test eax, eax
js 0x490050
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x10]
mov ecx, dword [edx + 4]
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov dl, byte [ecx + eax*8 + 0x15]
mov byte [esp + 0x18], dl
mov eax, dword [esp + 0x18]
push eax
call fcn.00458030
add esp, 4
test eax, eax
je 0x490050
cmp dword [ebx + 0xc], 0x40
jl 0x48ff5b
xor esi, esi
mov dword [esp + 0x54], 0x80000000
jmp 0x48ff70
mov ecx, dword [ebx + 0xc]
mov eax, 1
xor edx, edx
call fcn.004f24f0
mov esi, eax
mov dword [esp + 0x54], edx
cmp byte [esp + 0x13], 0
mov dword [esp + 0x50], esi
jne 0x48ffa6
mov eax, dword [ebx + 0xc]
lea ecx, [eax + eax*2]
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 4]
mov ecx, dword [edx + ecx*8]
mov edx, dword [eax]
push ecx
push edx
push 0x50a8d8
push 0x11c
call fcn.00428770
add esp, 0x10
mov byte [esp + 0x13], 1
mov ecx, dword [esp + 0x54]
and ecx, dword [esp + 0x4c]
mov eax, esi
and eax, dword [esp + 0x48]
or eax, ecx
jne 0x490050
movzx edx, word [edi + 0x2c]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dword [esp + 0x28], ecx
cmp edx, dword [esp + 0x20]
jge 0x490031
mov eax, dword [esp + 0x20]
add eax, 7
and eax, 0xfffffff8
mov dword [esp + 0x40], eax
add eax, eax
add eax, eax
push 0
push eax
mov esi, ecx
call fcn.00426a60
mov esi, eax
add esp, 8
test esi, esi
je 0x490b20
movzx ecx, word [edi + 0x2c]
mov edx, dword [edi + 0x30]
add ecx, ecx
add ecx, ecx
push ecx
push edx
push esi
call fcn.004d5420
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x38]
add esp, 0xc
cmp eax, ecx
je 0x490021
mov ecx, dword [esp + 0x28]
call fcn.004267e0
mov dx, word [esp + 0x40]
mov dword [edi + 0x30], esi
mov esi, dword [esp + 0x50]
mov word [edi + 0x2c], dx
mov eax, dword [esp + 0x14]
mov ecx, dword [edi + 0x30]
mov edx, dword [esp + 0x54]
inc dword [esp + 0x20]
or dword [esp + 0x48], esi
mov dword [ecx + eax*4], ebx
inc eax
or dword [esp + 0x4c], edx
mov dword [esp + 0x14], eax
add ebx, 0x30
cmp ebx, dword [esp + 0x30]
jb 0x48fe57
mov edx, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 0x10]
mov word [edi + 0x28], ax
mov word [edi + 0x18], ax
mov eax, dword [esp + 0x2c]
mov dword [edi + 0x24], 0x4241
movzx eax, word [eax + 0x22]
mov edi, dword [ecx + 0x44]
not edx
not esi
and esi, dword [ecx + 0x40]
or edx, 0x80000000
and edx, edi
mov ecx, 0x3f
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], edx
mov dword [esp + 0x40], eax
cmp cx, ax
jge 0x4900af
mov eax, ecx
jmp 0x4900b0
cwde
xor ebx, ebx
mov dword [esp + 0x28], eax
test eax, eax
jle 0x4900e3
lea ebx, [ebx]
mov eax, 1
xor edx, edx
mov ecx, ebx
call fcn.004f24f0
and edx, dword [esp + 0x54]
and eax, esi
or eax, edx
je 0x4900dc
inc dword [esp + 0x14]
inc ebx
cmp ebx, dword [esp + 0x28]
jl 0x4900c0
and edi, 0x80000000
xor eax, eax
or eax, edi
je 0x490100
movsx edx, word [esp + 0x40]
mov eax, dword [esp + 0x14]
lea ecx, [eax + edx - 0x3f]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 8]
mov esi, dword [eax]
inc edx
movzx edi, dx
movsx ebx, di
lea eax, [ebx*4 + 7]
and eax, 0xfffffff8
lea ecx, [ebx + ebx*4 + 9]
mov dword [esp + 0x40], eax
and ecx, 0xfffffff8
lea eax, [ecx + eax + 0x38]
cdq
push edx
push eax
mov dword [esp + 0x28], eax
call fcn.00426a60
add esp, 8
mov dword [esp + 0x18], eax
test eax, eax
je 0x490b20
mov edx, dword [esp + 0x20]
push edx
mov esi, eax
push 0
push esi
call fcn.004d6340
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x38]
lea eax, [esi + 0x38]
mov dword [esi + 0x20], eax
add eax, dword [esp + 0x4c]
mov word [esi + 0x30], di
mov dword [esi + 8], eax
lea eax, [eax + ebx*2 + 2]
mov dword [esi + 4], eax
lea eax, [eax + ebx*2]
mov dword [esi + 0x1c], eax
xor eax, eax
dec edi
mov word [esi + 0x2e], di
mov dword [ecx + 0x1c], esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0xc]
mov dword [esi], 0x50a8f4
mov dword [esi + 0xc], edx
mov edi, dword [eax + 0x14]
add esp, 0xc
cmp edi, dword [esp + 0x30]
jae 0x49032b
jmp 0x4901b0
mov ecx, dword [edi + 8]
mov edx, dword [ebp + 0x10]
cmp ecx, dword [edx + 0x30]
jne 0x49031e
test byte [edi + 0x12], 0x82
je 0x49031e
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x24]
and eax, dword [ebp + 0x14]
and ecx, dword [ebp + 0x18]
or eax, ecx
jne 0x49031e
mov eax, dword [edi + 0xc]
test eax, eax
js 0x49031e
mov esi, dword [edi]
mov ecx, edx
mov edx, dword [ecx + 0x10]
mov ecx, dword [edx + 4]
lea eax, [eax + eax*2]
mov dl, byte [ecx + eax*8 + 0x15]
mov eax, dword [esi + 0xc]
mov byte [esp + 0x13], dl
call fcn.00457cc0
mov bl, al
mov eax, dword [esi + 0x10]
test eax, eax
je 0x490228
call fcn.00457cc0
test al, al
je 0x49023d
test bl, bl
je 0x490241
cmp al, 0x43
jge 0x490224
cmp bl, 0x43
jl 0x490249
mov bl, 0x43
jmp 0x49024b
test dword [esi + 4], 0x800
je 0x490245
mov eax, dword [esi + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [edx]
jmp 0x49020e
test bl, bl
je 0x490249
add bl, al
jmp 0x49024b
test bl, bl
jne 0x49024b
mov bl, 0x41
movsx eax, bl
sub eax, 0x41
je 0x490274
dec eax
je 0x490262
xor eax, eax
cmp byte [esp + 0x13], 0x43
setge al
jmp 0x49026c
xor eax, eax
cmp byte [esp + 0x13], 0x42
sete al
test eax, eax
je 0x49031e
mov ecx, dword [edi + 0xc]
cmp ecx, 0x40
jl 0x490285
xor eax, eax
mov edx, 0x80000000
jmp 0x490291
mov eax, 1
xor edx, edx
call fcn.004f24f0
mov ecx, eax
and ecx, dword [esp + 0x48]
mov esi, edx
and esi, dword [esp + 0x4c]
or ecx, esi
jne 0x49031e
or dword [esp + 0x48], eax
mov eax, dword [esp + 0x18]
or dword [esp + 0x4c], edx
mov edx, dword [eax + 4]
mov ecx, dword [edi]
mov ax, word [edi + 0xc]
mov esi, dword [esp + 0x20]
mov word [edx + esi*2], ax
mov esi, dword [ecx + 0x10]
mov ecx, dword [ecx + 0xc]
mov eax, 0x100
test dword [ecx + 4], eax
je 0x4902d4
mov edx, dword [ebp + 8]
push edx
jmp 0x4902f6
test esi, esi
je 0x4902e3
test dword [esi + 4], eax
je 0x4902e3
mov eax, dword [ebp + 8]
push eax
jmp 0x4902f4
mov ebx, dword [ebp + 8]
push ebx
call fcn.00457e70
add esp, 4
test eax, eax
jne 0x490302
push ebx
mov ecx, esi
call fcn.00457e70
add esp, 4
test eax, eax
je 0x490306
mov eax, dword [eax]
jmp 0x49030b
mov eax, 0x507ad0
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0x20]
mov ecx, dword [esp + 0x20]
mov dword [edx + ecx*4], eax
inc ecx
mov dword [esp + 0x20], ecx
add edi, 0x30
cmp edi, dword [esp + 0x30]
jb 0x4901b0
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
xor ebx, ebx
cmp dword [esp + 0x28], ebx
jle 0x490373
jmp 0x490340
mov eax, 1
xor edx, edx
mov ecx, ebx
call fcn.004f24f0
and eax, dword [esp + 0x50]
and edx, dword [esp + 0x54]
or eax, edx
je 0x49036c
mov eax, dword [esi + 4]
mov word [eax + edi*2], bx
mov ecx, dword [esi + 0x20]
mov dword [ecx + edi*4], 0x507ad0
inc edi
inc ebx
cmp ebx, dword [esp + 0x28]
jl 0x490340
mov edx, dword [ebp + 0x10]
mov ecx, dword [edx + 0x44]
and ecx, 0x80000000
xor eax, eax
or eax, ecx
je 0x4903af
mov ecx, dword [esp + 0x2c]
mov eax, 0x3f
cmp ax, word [ecx + 0x22]
jge 0x4903af
mov edx, dword [esi + 4]
mov word [edx + edi*2], ax
mov edx, dword [esi + 0x20]
mov dword [edx + edi*4], 0x507ad0
movsx edx, word [ecx + 0x22]
inc eax
inc edi
cmp eax, edx
jl 0x490394
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 4]
or edx, 0xffffffff
mov word [ecx + edi*2], dx
mov eax, dword [eax + 0x20]
mov ecx, dword [ebp + 0x1c]
mov dword [eax + edi*4], 0x507ad0
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x44]
mov edi, dword [esp + 0x34]
mov dword [ecx + 8], edx
inc dword [eax + 0x44]
mov eax, dword [ecx + 8]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [edi + 0x20]
mov dword [esp + 0x40], eax
cmp dword [esi + 0x54], eax
jg 0x49045c
mov eax, dword [esi + 0x54]
test eax, eax
je 0x4903fb
add eax, eax
jmp 0x490400
mov eax, 0x33
mov ebx, dword [edi + 4]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
add ecx, ecx
add ecx, ecx
push 0
push ecx
call fcn.00426b00
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x490488
mov eax, dword [esi]
test eax, eax
je 0x49043c
cmp ebx, dword [eax + 0x114]
jb 0x49043c
cmp ebx, dword [eax + 0x118]
jae 0x49043c
movzx ecx, word [eax + 0xf8]
jmp 0x490448
push ebx
call dword [0x5129b8]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x40]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
inc dword [edi + 0x20]
mov ecx, dword [esp + 0x30]
lea edx, [eax + eax*4]
mov eax, dword [edi + 4]
lea eax, [eax + edx*4]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x14]
inc ecx
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x38
mov edx, dword [esp + 0x18]
mov esi, dword [ebp + 8]
mov ebx, dword [esi + 8]
push edx
push esi
call fcn.004683d0
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
add esp, 8
mov dword [esp + 0x30], eax
test ecx, ecx
je 0x4904ed
cmp byte [edx + 0x41], 0
jne 0x4904ed
mov eax, dword [ebx + 0x20]
lea eax, [eax + eax*4 - 5]
lea ebx, [ecx + eax*4]
movsx eax, byte [ebx + 1]
mov ecx, dword [ebx + 0x10]
call fcn.004459d0
cmp dword [esp + 0x30], 0
mov dword [ebx + 0x10], 0
jne 0x4904e0
mov dword [ebx + 0x10], 0
mov byte [ebx + 1], 0
jmp 0x4904fb
mov ecx, dword [esp + 0x30]
mov dword [ebx + 0x10], ecx
mov byte [ebx + 1], 0xfa
jmp 0x4904fb
mov ecx, dword [esp + 0x30]
mov eax, 0xfffffffa
call fcn.004459d0
inc dword [esi + 0x64]
mov ecx, dword [ebp + 0x1c]
movzx eax, byte [ecx + 0x2c]
mov esi, dword [edi + 0x18]
lea edx, [eax + eax*4]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
add edx, edx
test byte [eax + edx*8 + 0x30], 4
lea eax, [eax + edx*8 + 8]
mov dword [esp + 0x28], eax
je 0x490696
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
mov eax, dword [edi + 0x20]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x40], eax
cmp dword [esi + 0x54], eax
jg 0x4905ae
mov eax, dword [esi + 0x54]
test eax, eax
je 0x49054d
add eax, eax
jmp 0x490552
mov eax, 0x33
mov ebx, dword [edi + 4]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push 0
push eax
mov eax, dword [esi]
call fcn.00426b00
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4905d9
mov eax, dword [esi]
test eax, eax
je 0x49058e
cmp ebx, dword [eax + 0x114]
jb 0x49058e
cmp ebx, dword [eax + 0x118]
jae 0x49058e
movzx ecx, word [eax + 0xf8]
jmp 0x49059a
push ebx
call dword [0x5129b8]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x40]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ecx
mov word [eax], 0x11
mov ecx, dword [edi + 0x18]
mov esi, dword [edi + 0x20]
mov dword [esp + 0x30], ecx
cmp dword [ecx + 0x54], esi
jg 0x490658
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x4905f3
add eax, eax
jmp 0x4905f8
mov eax, 0x33
mov ebx, dword [edi + 4]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push 0
push eax
mov eax, dword [ecx]
call fcn.00426b00
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x490688
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx]
test eax, eax
je 0x490638
cmp ebx, dword [eax + 0x114]
jb 0x490638
cmp ebx, dword [eax + 0x118]
jae 0x490638
movzx ecx, word [eax + 0xf8]
jmp 0x490644
push ebx
call dword [0x5129b8]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x30]
shr edx, 4
mov dword [eax + 0x54], edx
mov dword [edi + 4], ebx
mov edx, dword [edi + 4]
inc dword [edi + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x14
mov dword [esp + 0x14], esi
jmp 0x490744
mov esi, 1
mov dword [esp + 0x14], esi
jmp 0x490744
mov edx, dword [ecx + 4]
mov ecx, dword [edi + 0x20]
mov dword [esp + 0x30], edx
mov dword [esp + 0x40], ecx
cmp dword [esi + 0x54], ecx
jg 0x490719
mov eax, dword [esi + 0x54]
test eax, eax
je 0x4906b4
add eax, eax
jmp 0x4906b9
mov eax, 0x33
mov ebx, dword [edi + 4]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push 0
push eax
mov eax, dword [esi]
call fcn.00426b00
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4907b7
mov eax, dword [esi]
test eax, eax
je 0x4906f9
cmp ebx, dword [eax + 0x114]
jb 0x4906f9
cmp ebx, dword [eax + 0x118]
jae 0x4906f9
movzx ecx, word [eax + 0xf8]
jmp 0x490705
push ebx
call dword [0x5129b8]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov ecx, dword [esp + 0x40]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
mov eax, dword [edi + 4]
inc dword [edi + 0x20]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x30]
mov dword [eax + 4], edx
xor edx, edx
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov word [eax], 0x6d
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x1c], 0
je 0x490887
mov eax, dword [edi + 0x18]
mov ecx, dword [eax + 0x6c]
lea edx, [ecx + 1]
mov dword [eax + 0x6c], edx
lea edx, [ecx - 1]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ecx
test ecx, edx
jne 0x49084f
mov ebx, dword [eax + 0x70]
mov esi, dword [eax]
mov eax, ecx
lea ecx, [eax*8 + 4]
push 0
push ecx
mov eax, esi
call fcn.00426b00
add esp, 8
mov dword [esp + 0x40], eax
test eax, eax
jne 0x49083c
test ebx, ebx
je 0x49083c
test esi, esi
je 0x4907e4
cmp dword [esi + 0x208], eax
je 0x4907be
mov eax, ebx
mov ecx, esi
call fcn.004267a0
jmp 0x49083c
mov ecx, 1
jmp 0x490740
cmp ebx, dword [esi + 0x114]
jb 0x4907e4
cmp ebx, dword [esi + 0x118]
jae 0x4907e4
mov edx, dword [esi + 0x110]
mov dword [ebx], edx
dec dword [esi + 0xfc]
mov dword [esi + 0x110], ebx
jmp 0x49083c
cmp dword [0x512988], 0
je 0x490832
mov eax, dword [0x515ee8]
test eax, eax
je 0x490800
push eax
call dword [0x5129dc]
add esp, 4
push ebx
call dword [0x5129b8]
sub dword [0x515d30], eax
dec dword [0x515d54]
add esp, 4
push ebx
call dword [0x5129b0]
mov eax, dword [0x515ee8]
add esp, 4
test eax, eax
je 0x49083c
push eax
call dword [0x5129e4]
jmp 0x490839
push ebx
call dword [0x5129b0]
add esp, 4
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x30]
mov dword [ecx + 0x70], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x70]
test eax, eax
je 0x49085d
mov dword [eax + ecx*4], 0xffffffff
mov edx, dword [esp + 0x1c]
mov esi, dword [ebp + 8]
or eax, 0xffffffff
sub eax, ecx
push 0x10
push eax
push edx
push esi
mov dword [esp + 0x4c], eax
call fcn.0045d190
mov eax, dword [esp + 0x48]
add esp, 0x10
or dword [eax + 0x24], 0x20000
jmp 0x49088a
mov esi, dword [ebp + 8]
mov al, byte [esi + 0x13]
test al, al
jne 0x49089d
inc dword [esi + 0x48]
mov eax, dword [esi + 0x48]
mov dword [esp + 0x2c], eax
jmp 0x4908ad
dec al
movzx ecx, al
mov byte [esi + 0x13], al
mov edx, dword [esi + ecx*4 + 0x18]
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x2c]
mov esi, dword [ebp + 0x1c]
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x18]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
call fcn.0046a370
mov ecx, dword [esi + 8]
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
add esp, 0x20
mov dword [esp + 0x38], ecx
mov dword [esp + 0x40], eax
cmp dword [esi + 0x54], eax
jg 0x490954
mov eax, dword [esi + 0x54]
test eax, eax
je 0x4908f3
add eax, eax
jmp 0x4908f8
mov eax, 0x33
mov ebx, dword [edi + 4]
lea edx, [eax + eax*4]
mov eax, dword [esi]
add edx, edx
add edx, edx
push 0
push edx
call fcn.00426b00
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x49097f
mov eax, dword [esi]
test eax, eax
je 0x490934
cmp ebx, dword [eax + 0x114]
jb 0x490934
cmp ebx, dword [eax + 0x118]
jae 0x490934
movzx ecx, word [eax + 0xf8]
jmp 0x490940
push ebx
call dword [0x5129b8]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x40]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
mov ecx, dword [edi + 4]
inc dword [edi + 0x20]
mov edx, dword [esp + 0x38]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x2c]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x6f
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x490991
mov eax, dword [edi + 0x20]
lea edx, [eax + eax*4]
mov byte [ecx + edx*4 - 0x11], 0x10
cmp dword [esp + 0x1c], 0
je 0x4909b8
mov ecx, dword [edi + 0x18]
or eax, 0xffffffff
sub eax, dword [esp + 0x3c]
js 0x4909b1
mov edx, dword [ecx + 0x70]
test edx, edx
je 0x4909b1
mov esi, dword [edi + 0x20]
mov dword [edx + eax*4], esi
mov eax, dword [edi + 0x20]
dec eax
mov dword [ecx + 0x58], eax
mov ecx, dword [esp + 0x28]
test byte [ecx + 0x28], 4
je 0x490b90
mov esi, dword [esp + 0x34]
mov edx, ecx
mov eax, dword [edx + 0x20]
mov ecx, dword [ebp + 0x1c]
mov edi, dword [ecx + 4]
mov edx, dword [esp + 0x14]
push eax
mov ecx, esi
call fcn.0048fd10
mov eax, dword [esi + 0x20]
mov edi, dword [esi + 0x18]
add esp, 4
mov dword [esp + 0x40], eax
cmp dword [edi + 0x54], eax
jg 0x490a5f
mov eax, dword [edi + 0x54]
test eax, eax
je 0x4909fe
add eax, eax
jmp 0x490a03
mov eax, 0x33
mov ebx, dword [esi + 4]
lea edx, [eax + eax*4]
mov eax, dword [edi]
add edx, edx
add edx, edx
push 0
push edx
call fcn.00426b00
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x490a86
mov eax, dword [edi]
test eax, eax
je 0x490a3f
cmp ebx, dword [eax + 0x114]
jb 0x490a3f
cmp ebx, dword [eax + 0x118]
jae 0x490a3f
movzx ecx, word [eax + 0xf8]
jmp 0x490a4b
push ebx
call dword [0x5129b8]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x40]
shr edx, 4
mov dword [edi + 0x54], edx
mov dword [esi + 4], ebx
mov ecx, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x14]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0xe
mov eax, dword [esp + 0x28]
and dword [eax + 0x28], 0xfffffffb
mov edi, esi
mov ecx, dword [esp + 0x14]
mov edx, dword [edi + 4]
test edx, edx
je 0x490aa6
mov eax, dword [edi + 0x20]
lea eax, [eax + eax*4]
mov byte [edx + eax*4 - 0x11], 3
mov eax, dword [edi + 0x20]
cmp eax, ecx
jbe 0x490ab7
mov edx, dword [edi + 4]
lea ecx, [ecx + ecx*4]
mov dword [edx + ecx*4 + 8], eax
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x18]
mov esi, dword [esp + 0x2c]
dec eax
mov dword [ecx + 0x58], eax
mov eax, dword [ebp + 8]
test esi, esi
je 0x490afc
mov bl, byte [eax + 0x13]
cmp bl, 8
jae 0x490afc
xor ecx, ecx
lea edx, [eax + 0x74]
lea esp, [esp]
cmp dword [edx + 0xc], esi
je 0x490c4c
inc ecx
add edx, 0x14
cmp ecx, 0xa
jl 0x490ae0
movzx edx, bl
mov dword [eax + edx*4 + 0x18], esi
inc byte [eax + 0x13]
call fcn.0045b380
mov eax, dword [edi + 0x20]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jbe 0x490b16
mov edx, dword [edi + 4]
lea ecx, [ecx + ecx*4]
mov dword [edx + ecx*4 + 8], eax
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x18]
dec eax
mov dword [ecx + 0x58], eax
mov esi, dword [esp + 0x1c]
mov edx, dword [ebp + 8]
mov edi, dword [edx]
test esi, esi
je 0x490daf
test dword [esi + 4], 0x4000
jne 0x490cfa
mov eax, dword [esi + 0xc]
push eax
push edi
call fcn.00458ac0
mov ecx, dword [esi + 0x10]
push ecx
push edi
call fcn.00458ac0
add esp, 0x10
test dword [esi + 4], 0x10000
je 0x490cd3
mov ebx, dword [esi + 8]
test ebx, ebx
je 0x490cd3
test edi, edi
je 0x490c7b
cmp dword [edi + 0x208], 0
je 0x490c55
mov eax, ebx
mov ecx, edi
call fcn.004267a0
jmp 0x490cd3
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax + 4]
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x18]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
cmp dword [esi + 0x54], eax
jg 0x490c19
mov eax, dword [esi + 0x54]
test eax, eax
je 0x490bb4
add eax, eax
jmp 0x490bb9
mov eax, 0x33
mov ebx, dword [edi + 4]
lea edx, [eax + eax*4]
mov eax, dword [esi]
add edx, edx
add edx, edx
push 0
push edx
call fcn.00426b00
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x490a90
mov eax, dword [esi]
test eax, eax
je 0x490bf9
cmp ebx, dword [eax + 0x114]
jb 0x490bf9
cmp ebx, dword [eax + 0x118]
jae 0x490bf9
movzx ecx, word [eax + 0xf8]
jmp 0x490c05
push ebx
call dword [0x5129b8]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x40]
shr edx, 4
mov dword [esi + 0x54], edx
mov dword [edi + 4], ebx
mov ecx, dword [edi + 4]
inc dword [edi + 0x20]
mov edx, dword [esp + 0x3c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x14]
mov dword [eax + 4], edx
lea edx, [ecx + 1]
mov dword [eax + 8], edx
xor edx, edx
mov byte [eax + 3], 0
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov word [eax], 8
jmp 0x490a94
mov byte [edx + 6], 1
jmp 0x490afc
cmp ebx, dword [edi + 0x114]
jb 0x490c7b
cmp ebx, dword [edi + 0x118]
jae 0x490c7b
mov edx, dword [edi + 0x110]
mov dword [ebx], edx
dec dword [edi + 0xfc]
mov dword [edi + 0x110], ebx
jmp 0x490cd3
cmp dword [0x512988], 0
je 0x490cc9
mov eax, dword [0x515ee8]
test eax, eax
je 0x490c97
push eax
call dword [0x5129dc]
add esp, 4
push ebx
call dword [0x5129b8]
sub dword [0x515d30], eax
dec dword [0x515d54]
add esp, 4
push ebx
call dword [0x5129b0]
mov eax, dword [0x515ee8]
add esp, 4
test eax, eax
je 0x490cd3
push eax
call dword [0x5129e4]
jmp 0x490cd0
push ebx
call dword [0x5129b0]
add esp, 4
test dword [esi + 4], 0x800
je 0x490ced
mov eax, dword [esi + 0x14]
push 1
push eax
push edi
call fcn.00479bf0
add esp, 0xc
jmp 0x490cfa
mov ecx, dword [esi + 0x14]
push ecx
push edi
call fcn.00459850
add esp, 8
test dword [esi + 4], 0x8000
jne 0x490daf
test edi, edi
je 0x490d4f
cmp dword [edi + 0x208], 0
je 0x490d24
mov eax, esi
mov ecx, edi
call fcn.004267a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, dword [edi + 0x114]
jb 0x490d4f
cmp esi, dword [edi + 0x118]
jae 0x490d4f
mov edx, dword [edi + 0x110]
mov dword [esi], edx
dec dword [edi + 0xfc]
mov dword [edi + 0x110], esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x512988], 0
je 0x490da5
mov eax, dword [0x515ee8]
test eax, eax
je 0x490d6b
push eax
call dword [0x5129dc]
add esp, 4
push esi
call dword [0x5129b8]
sub dword [0x515d30], eax
dec dword [0x515d54]
add esp, 4
push esi
call dword [0x5129b0]
mov eax, dword [0x515ee8]
add esp, 4
test eax, eax
je 0x490daf
push eax
call dword [0x5129e4]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call dword [0x5129b0]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret