Function at 0x4d1ac70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x120
mov eax, dword [0x4e7fde0]
xor eax, esp
mov dword [esp + 0x11c], eax
mov eax, dword [0x4e83f4c]
test eax, eax
push esi
mov esi, ecx
jne 0x4d1acad
mov eax, 1
pop esi
mov ecx, dword [esp + 0x11c]
xor ecx, esp
call fcn.04df7d7a
add esp, 0x120
ret 0xc
cmp byte [esi + 0x80], 0
je 0x4d1ac90
cmp eax, 9
je 0x4d1ac90
cmp eax, 0xb
je 0x4d1ac90
cmp eax, 0xd
jne 0x4d1ad20
movsx eax, word [0x4e84052]
add eax, dword [esp + 0x128]
movsx ecx, word [0x4e84050]
mov edx, dword [esi + 0x14]
push 0
push 0
push 0
push 0
push 0
push eax
push ecx
push 0xff
push 0xff
push 0xff
push 0xff
push edx
call fcn.04d46710
add esp, 0x30
xor eax, eax
pop esi
mov ecx, dword [esp + 0x11c]
xor ecx, esp
call fcn.04df7d7a
add esp, 0x120
ret 0xc
push ebx
push ebp
mov ebp, dword [0x4e83f6c]
movzx eax, byte [ebp + 0xfbcc]
imul eax, eax, 0x1c0
add ebp, 0x4de0
movzx ebx, byte [eax + ebp + 0xadf5]
jne 0x4d1ad4d
lea eax, [ebp + 1]
jmp 0x4d1bf7b
push edi
lea ecx, [esp + 0x1c]
push ecx
push 0
mov ecx, 0x4ea5a58
mov dword [esp + 0x24], 0
call fcn.04c50a90
call fcn.04b77750
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x1c]
cmp dword [eax], 1
mov dword [esp + 0x18], edx
je 0x4d1b694
mov cx, word [0x4e8407e]
add cx, word [0x4e84052]
mov edi, dword [esp + 0x134]
mov eax, dword [0x4e8407c]
push 0
push 0
push 0
push 0
movsx edx, cx
mov ecx, dword [0x4e84050]
push 0
add edx, edi
push edx
add eax, ecx
test ebx, ebx
movsx edx, ax
push edx
push 0xff
push 0xff
push 0xff
push 0xff
jne 0x4d1add3
mov eax, dword [esi + 0x1c]
jmp 0x4d1add6
mov eax, dword [esi + 0x20]
push eax
call fcn.04d46710
mov edx, dword [esp + 0x4c]
xor ecx, ecx
add esp, 0x30
cmp ebx, 1
setne cl
cmp dword [edx], 2
mov dword [esp + 0x10], ecx
jne 0x4d1af19
mov eax, dword [esp + 0x18]
add eax, 0x7c
lea edx, [esp + 0xa0]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
test cl, cl
jne 0x4d1ae08
mov eax, dword [esp + 0x18]
add eax, 0xc2
lea edx, [esp + 0xe6]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
test cl, cl
jne 0x4d1ae26
mov eax, ebx
imul eax, eax, 0x46
push 0x55
lea ecx, [esp + eax + 0xa4]
push ecx
mov ecx, dword [0x55d5800]
lea edx, [esp + 0x28]
push edx
call fcn.04d5fd80
movzx eax, word [0x4e84082]
add ax, word [0x4e84052]
mov ecx, dword [0x4e84050]
mov edx, dword [0x4e84080]
add edx, ecx
push 0
movzx eax, ax
movzx ecx, dx
push 0
movsx edx, ax
push 0
push 0xffffffffffffffff
add edx, edi
push edx
lea eax, [esp + 0x34]
mov dword [esp + 0x28], ecx
mov ecx, dword [0x55d5800]
push eax
call fcn.04d605b0
movsx ecx, word [esp + 0x28]
add ecx, dword [esp + 0x14c]
lea edx, [esp + 0x34]
sub ecx, eax
push ecx
mov ecx, dword [0x55d5800]
push edx
call fcn.04d610e0
mov eax, dword [esp + 0x10]
imul eax, eax, 0x46
push 0x55
lea ecx, [esp + eax + 0xa4]
push ecx
mov ecx, dword [0x55d5800]
lea edx, [esp + 0x28]
push edx
call fcn.04d5fd80
movzx eax, word [0x4e84086]
add ax, word [0x4e84052]
mov edx, dword [0x4e84050]
push 0
push 0
movsx ecx, ax
mov eax, dword [0x4e84084]
push 0
add ecx, edi
push 0xffffffffffffffff
push ecx
add eax, edx
movsx ecx, ax
add ecx, dword [esp + 0x150]
lea edx, [esp + 0x34]
push ecx
mov ecx, dword [0x55d5800]
push edx
call fcn.04d610e0
mov eax, dword [ebp + ebx*4 + 0x1398]
movzx ecx, word [0x4e84062]
push 0xff
push 0xff
push 0xff
push 0xff
push 0x12
push 0xfffffffffffffffe
push eax
mov ax, word [0x4e84052]
add cx, ax
movsx edx, cx
mov ecx, dword [0x4e84050]
add edx, edi
push edx
mov edx, dword [0x4e84060]
add edx, ecx
movsx edx, dx
add edx, dword [esp + 0x158]
push edx
movzx edx, word [0x4e8405e]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e8405c]
add eax, edi
push eax
add edx, ecx
movsx eax, dx
add eax, dword [esp + 0x160]
lea ecx, [esi + 0x30]
push eax
call fcn.04d48050
mov ecx, dword [esp + 0x10]
mov edx, dword [ebp + ecx*4 + 0x1398]
movzx ecx, word [0x4e8406a]
mov ax, word [0x4e84052]
push 0xff
push 0xb4
push 0xb4
push 0xb4
push 0x12
add cx, ax
push 0xfffffffffffffffe
push edx
movsx edx, cx
mov ecx, dword [0x4e84050]
add edx, edi
push edx
mov edx, dword [0x4e84068]
add edx, ecx
movsx edx, dx
add edx, dword [esp + 0x15c]
push edx
movzx edx, word [0x4e84066]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84064]
add eax, edi
push eax
add edx, ecx
movsx eax, dx
add eax, dword [esp + 0x164]
lea ecx, [esi + 0x3c]
push eax
call fcn.04d48050
mov ecx, dword [esp + 0x18]
cmp byte [ecx + 0x108], 0
jne 0x4d1b034
mov edx, ecx
mov eax, dword [edx + 0x148]
cmp eax, 5
je 0x4d1b034
cmp eax, 0xb
jne 0x4d1b12c
mov eax, dword [esi + 0x9c]
mov cx, word [0x4e8408e]
push 0xff
push 0xff
push 0xff
push 0xff
push 0x12
push 0xfffffffffffffffe
push eax
mov ax, word [0x4e84052]
add cx, ax
movsx edx, cx
mov ecx, dword [0x4e84050]
add edx, edi
push edx
mov edx, dword [0x4e8408c]
add edx, ecx
movsx edx, dx
add edx, dword [esp + 0x158]
push edx
movzx edx, word [0x4e8408a]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84088]
add eax, edi
push eax
add edx, ecx
movsx eax, dx
add eax, dword [esp + 0x160]
lea ecx, [esi + 0x84]
push eax
call fcn.04d48050
movzx edx, word [0x4e84096]
mov ax, word [0x4e84052]
mov ecx, dword [esi + 0xa0]
push 0xff
push 0xb4
push 0xb4
add dx, ax
push 0xb4
push 0x12
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84094]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
add edx, dword [esp + 0x15c]
push edx
movzx edx, word [0x4e84092]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84090]
add eax, edi
push eax
add edx, ecx
movsx eax, dx
add eax, dword [esp + 0x164]
lea ecx, [esi + 0x90]
push eax
call fcn.04d48050
mov eax, dword [0x4e83f4c]
cmp eax, 2
je 0x4d1b14c
cmp eax, 6
jne 0x4d1b1eb
cmp dword [0x4e83f48], 0
je 0x4d1b1eb
mov ecx, dword [0x4e83f44]
sub ecx, dword [ebp + ebx*4 + 0x1398]
cmp ecx, 0xa
jne 0x4d1b187
cmp byte [esi + 0x2c], 0
jne 0x4d1b18d
mov byte [esi + 0x2c], 1
nop
call 0x74e847a0
push 0
push 0
push 0
mov dword [esi + 0x28], eax
mov ecx, dword [0x55cdb88]
push 0x4e32124
call fcn.04cfefb0
cmp byte [esi + 0x2c], 0
je 0x4d1b1eb
nop
call 0x74e847a0
sub eax, dword [esi + 0x28]
cmp eax, 0xbb8
jae 0x4d1b1eb
mov dx, word [0x4e840ac]
add dx, word [0x4e84052]
mov cx, word [0x4e840aa]
add cx, word [0x4e84050]
push 0
push 0
push 0
push 0
push 0
movsx eax, dx
push eax
mov eax, dword [esi + 0x24]
movsx edx, cx
push edx
push 0xff
push 0xff
push 0xff
push 0xff
push eax
call fcn.04d46710
add esp, 0x30
mov eax, dword [0x4e83f4c]
add eax, 0xffffffff
cmp eax, 7
ja case.0x4d1b1fc.3
jmp dword [eax*4 + 0x4d1bf98]
mov edx, dword [ebp + ebx*4 + 0x1398]
mov eax, dword [esp + 0x10]
add edx, dword [ebp + eax*4 + 0x1398]
mov ax, word [0x4e84052]
push 0xff
push 0xc0
mov ebp, dword [0x4e84058]
push 0xbd
push 0x97
push 0x12
push 0xfffffffffffffffe
push edx
movzx edx, word [0x4e8405a]
add dx, ax
movsx edx, dx
add edx, edi
push edx
mov edx, dword [0x4e84050]
add ebp, edx
movsx ebp, bp
add ebp, dword [esp + 0x158]
lea ecx, [esi + 0x48]
push ebp
mov bp, word [0x4e84056]
add bp, ax
movsx eax, bp
add eax, edi
push eax
mov eax, dword [0x4e84054]
add eax, edx
movsx edx, ax
add edx, dword [esp + 0x160]
push edx
call fcn.04d48050
mov ax, word [0x4e84052]
mov cx, word [0x4e8405a]
push 0xc0
push 0xbd
push 0x97
add cx, ax
push 0x12
push 0xfffffffffffffffe
movsx edx, cx
mov ecx, dword [0x4e84050]
add edx, edi
push 0xb
push edx
mov edx, dword [0x4e84058]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
lea ebp, [esi + 0x48]
push eax
mov ecx, ebp
call fcn.04d481d0
movzx edx, word [0x4e8405a]
mov ecx, dword [0x4e83f44]
mov ax, word [0x4e84052]
push 0xff
push 0xc0
push 0xbd
push 0x97
push 0x12
add dx, ax
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84058]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
add edx, dword [esp + 0x15c]
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
add eax, dword [esp + 0x164]
mov ecx, ebp
jmp 0x4d1b521
cmp dword [0x4e83f48], 0
jne case.0x4d1b1fc.1
mov edx, dword [ebp + ebx*4 + 0x1398]
mov eax, dword [esp + 0x10]
add edx, dword [ebp + eax*4 + 0x1398]
mov ax, word [0x4e84052]
push 0xff
push 0xc0
mov ebp, dword [0x4e84058]
push 0xbd
push 0x97
push 0x12
push 0xfffffffffffffffe
push edx
movzx edx, word [0x4e8405a]
add dx, ax
movsx edx, dx
add edx, edi
push edx
mov edx, dword [0x4e84050]
add ebp, edx
movsx ebp, bp
sub ebp, 0xc
push ebp
mov bp, word [0x4e84056]
add bp, ax
movsx eax, bp
add eax, edi
push eax
mov eax, dword [0x4e84054]
add eax, edx
movsx edx, ax
sub edx, 0xc
lea ecx, [esi + 0x48]
push edx
call fcn.04d48050
mov ax, word [0x4e84052]
mov cx, word [0x4e8405a]
push 0xc0
push 0xbd
push 0x97
add cx, ax
push 0x12
push 0xfffffffffffffffe
movsx edx, cx
mov ecx, dword [0x4e84050]
add edx, edi
push 0xb
push edx
mov edx, dword [0x4e84058]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
lea ebp, [esi + 0x48]
push eax
mov ecx, ebp
call fcn.04d481d0
movzx edx, word [0x4e8405a]
mov ecx, dword [0x4e83f44]
mov ax, word [0x4e84052]
push 0xff
push 0xc0
push 0xbd
push 0x97
push 0x12
add dx, ax
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84058]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
add edx, 0xc
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
add eax, 0xc
mov ecx, ebp
jmp 0x4d1b521
movzx edx, word [0x4e8405a]
mov ax, word [0x4e84052]
mov ecx, dword [0x4e83f44]
push 0xff
push 0xc0
push 0xbd
add dx, ax
push 0x97
push 0x12
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84058]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
lea ecx, [esi + 0x48]
add eax, 5
push eax
call fcn.04d48050
mov eax, dword [0x4e83f4c]
cmp eax, 2
je case.0x4d1b761.8
cmp eax, 6
jne 0x4d1b547
cmp dword [0x4e83f48], 0
jne case.0x4d1b761.8
xor ebp, ebp
cmp dword [esi + 0x70], ebp
mov dword [esp + 0x14], ebp
jle 0x4d1b5ed
sub ebx, 1
neg ebx
sbb ebx, ebx
and ebx, 9
add ebx, 9
mov dword [esp + 0x18], ebx
mov ebx, ebp
lea esp, [esp]
mov ecx, dword [esi + 0x70]
sub ecx, dword [esi + 0x74]
mov ax, word [0x4e8406e]
xor edx, edx
cmp ecx, ebp
setle dl
add ax, word [0x4e84052]
push 0
push 8
push 8
push 0xaf
movsx ecx, ax
mov eax, dword [0x4e8406c]
sub edx, 1
and edx, dword [esp + 0x28]
add ecx, edi
add edx, 0x89
push edx
mov edx, dword [0x4e84050]
push ecx
add eax, edx
mov edx, dword [esi]
movsx ecx, ax
sub ecx, ebx
add ecx, dword [esp + 0x150]
push ecx
push 0xff
push 0xff
push 0xff
push 0xff
push edx
call fcn.04d46710
add ebp, 1
add esp, 0x30
add ebx, 8
cmp ebp, dword [esi + 0x70]
jl 0x4d1b570
xor ebx, ebx
xor ebp, ebp
cmp dword [esi + 0x78], ebx
jle case.0x4d1b761.8
mov eax, dword [esp + 0x10]
sub eax, 1
neg eax
sbb eax, eax
and eax, 9
add eax, 9
mov dword [esp + 0x14], eax
nop
mov eax, dword [esi + 0x78]
sub eax, dword [esi + 0x7c]
mov dx, word [0x4e84072]
xor ecx, ecx
cmp eax, ebx
setle cl
add dx, word [0x4e84052]
push 0
push 8
push 8
push 0xaf
movsx eax, dx
mov edx, dword [0x4e84070]
sub ecx, 1
and ecx, dword [esp + 0x24]
add eax, edi
add ecx, 0x89
push ecx
mov ecx, dword [0x4e84050]
push eax
add edx, ecx
mov ecx, dword [esi]
movsx eax, dx
add eax, ebp
add eax, dword [esp + 0x154]
push eax
push 0xff
push 0xff
push 0xff
push 0xff
push ecx
call fcn.04d46710
add ebx, 1
add esp, 0x30
add ebp, 8
cmp ebx, dword [esi + 0x78]
jl 0x4d1b610
jmp case.0x4d1b761.8
mov eax, dword [0x4e83f4c]
cmp eax, 4
jne 0x4d1b6aa
movsx eax, word [0x4e84050]
mov ecx, dword [esi + 0xc]
jmp 0x4d1b710
cmp eax, 5
je 0x4d1b703
cmp eax, 0xc
je 0x4d1b703
cmp eax, 0xa
movsx eax, word [0x4e84050]
jne 0x4d1b6c5
mov ecx, dword [esi + 0x10]
jmp 0x4d1b710
movsx edx, word [0x4e84052]
mov edi, dword [esp + 0x134]
push 0
push 0
push 0
push 0
push 0
add edx, edi
test ebx, ebx
push edx
push eax
push 0xff
push 0xff
push 0xff
push 0xff
jne 0x4d1b6fe
mov ecx, dword [esi + 4]
jmp 0x4d1b740
mov ecx, dword [esi + 8]
jmp 0x4d1b740
movsx eax, word [0x4e84050]
mov ecx, dword [esi + 0x18]
sub eax, 0x19
movsx edx, word [0x4e84052]
mov edi, dword [esp + 0x134]
push 0
push 0
push 0
push 0
push 0
add edx, edi
push edx
push eax
push 0xff
push 0xff
push 0xff
push 0xff
push ecx
call fcn.04d46710
mov eax, dword [0x4e83f4c]
add eax, 0xffffffff
add esp, 0x30
cmp eax, 0xb
ja case.0x4d1b761.8
movzx edx, byte [eax + 0x4d1bfc8]
jmp dword [edx*4 + 0x4d1bfb8]
movzx edx, word [0x4e84062]
mov ecx, dword [ebp + ebx*4 + 0x1398]
xor eax, eax
push 0xff
push 0xff
push 0xff
cmp ebx, 1
setne al
push 0xff
push 0x12
push 0xfffffffffffffffe
push ecx
mov dword [esp + 0x2c], eax
mov ax, word [0x4e84052]
add dx, ax
movsx ecx, dx
mov edx, dword [0x4e84060]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e8405e]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e8405c]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
push eax
lea ecx, [esi + 0x30]
call fcn.04d48050
mov ecx, dword [esp + 0x10]
mov edx, dword [ebp + ecx*4 + 0x1398]
mov ax, word [0x4e84052]
mov cx, word [0x4e8406a]
push 0xff
push 0xb4
push 0xb4
push 0xb4
push 0x12
push 0xfffffffffffffffe
push edx
add cx, ax
movsx edx, cx
mov ecx, dword [0x4e84050]
add edx, edi
push edx
mov edx, dword [0x4e84068]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84066]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84064]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
push eax
lea ecx, [esi + 0x3c]
call fcn.04d48050
mov eax, dword [0x4e83f4c]
cmp eax, 2
je 0x4d1b85f
cmp eax, 6
jne 0x4d1b86c
cmp dword [0x4e83f48], 2
je case.0x4d1b761.8
movzx edx, word [0x4e8405a]
mov ax, word [0x4e84052]
mov ecx, dword [0x4e83f44]
push 0xff
push 0xc0
push 0xbd
push 0x97
add dx, ax
push 0x12
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84058]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
push eax
lea ecx, [esi + 0x48]
call fcn.04d48050
mov eax, dword [0x4e83f4c]
cmp eax, 2
je 0x4d1ba3d
cmp eax, 6
jne 0x4d1b8f7
cmp dword [0x4e83f48], 0
jne 0x4d1ba3d
xor ebp, ebp
cmp dword [esi + 0x70], ebp
jle 0x4d1b996
sub ebx, 1
neg ebx
sbb ebx, ebx
and ebx, 9
add ebx, 9
mov dword [esp + 0x18], ebx
mov ebx, ebp
jmp 0x4d1b920
mov ecx, dword [esi + 0x70]
sub ecx, dword [esi + 0x74]
mov ax, word [0x4e8406e]
xor edx, edx
cmp ecx, ebp
setle dl
add ax, word [0x4e84052]
push 0
push 8
push 8
push 0xaf
movsx ecx, ax
mov eax, dword [0x4e8406c]
sub edx, 1
and edx, dword [esp + 0x28]
add ecx, edi
add edx, 0x89
push edx
mov edx, dword [0x4e84050]
push ecx
add eax, edx
mov edx, dword [esi]
movsx ecx, ax
sub ecx, ebx
push ecx
push 0xff
push 0xff
push 0xff
push 0xff
push edx
call fcn.04d46710
add ebp, 1
add esp, 0x30
add ebx, 8
cmp ebp, dword [esi + 0x70]
jl 0x4d1b920
xor ebx, ebx
xor ebp, ebp
cmp dword [esi + 0x78], ebx
jle case.0x4d1b761.8
mov eax, dword [esp + 0x10]
sub eax, 1
neg eax
sbb eax, eax
and eax, 9
add eax, 9
mov dword [esp + 0x14], eax
jmp 0x4d1b9c0
mov eax, dword [esi + 0x78]
sub eax, dword [esi + 0x7c]
mov dx, word [0x4e84072]
xor ecx, ecx
cmp eax, ebx
setle cl
add dx, word [0x4e84052]
push 0
push 8
push 8
push 0xaf
movsx eax, dx
mov edx, dword [0x4e84070]
sub ecx, 1
and ecx, dword [esp + 0x24]
add eax, edi
add ecx, 0x89
push ecx
mov ecx, dword [0x4e84050]
push eax
add edx, ecx
mov ecx, dword [esi]
movsx eax, dx
add eax, ebp
push eax
push 0xff
push 0xff
push 0xff
push 0xff
push ecx
call fcn.04d46710
add ebx, 1
add esp, 0x30
add ebp, 8
cmp ebx, dword [esi + 0x78]
jl 0x4d1b9c0
jmp case.0x4d1b761.8
mov edx, dword [0x4e83f44]
sub edx, dword [ebp + ebx*4 + 0x1398]
mov edi, dword [0x4e0c4bc]
cmp edx, 0xa
jne 0x4d1ba7a
cmp byte [esi + 0x2c], 0
jne 0x4d1ba84
mov byte [esi + 0x2c], 1
call edi
push 0
push 0
push 0
mov dword [esi + 0x28], eax
mov ecx, dword [0x55cdb88]
push 0x4e32124
call fcn.04cfefb0
cmp byte [esi + 0x2c], 0
je case.0x4d1b761.8
call edi
sub eax, dword [esi + 0x28]
cmp eax, 0xbb8
jae case.0x4d1b761.8
mov ax, word [0x4e840ac]
add ax, word [0x4e84052]
mov dx, word [0x4e840aa]
add dx, word [0x4e84050]
push 0
push 0
push 0
push 0
push 0
movsx ecx, ax
push ecx
mov ecx, dword [esi + 0x24]
movsx eax, dx
push eax
push 0xff
push 0xff
push 0xff
push 0xff
push ecx
call fcn.04d46710
add esp, 0x30
jmp case.0x4d1b761.8
movsx edx, word [ebp + 0x13a8]
imul edx, edx, 0xa8
mov eax, dword [edx + ebp + 0x974]
lea ecx, [edx + ebp]
mov edx, 0xfffffffe
cmp eax, edx
jne 0x4d1bb31
cmp dword [ecx + 0x978], edx
jne 0x4d1bb31
cmp dword [ecx + 0x980], edx
jne 0x4d1bb31
push 0xff
push 0xff
push 0xff
push 0xff
push 0x12
push edx
push 0
jmp 0x4d1bb4a
push 0xff
push 0xff
push 0xff
push 0xff
push 0x12
push 0xfffffffffffffffe
push eax
mov ax, word [0x4e84052]
mov cx, word [0x4e84062]
add cx, ax
movsx edx, cx
mov ecx, dword [0x4e84050]
add edx, edi
push edx
mov edx, dword [0x4e84060]
add edx, ecx
movsx edx, dx
push edx
mov dx, word [0x4e8405e]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e8405c]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
push eax
lea ecx, [esi + 0x30]
call fcn.04d48050
movzx edx, word [0x4e8406a]
mov ax, word [0x4e84052]
mov ecx, dword [ebp + 0x13d4]
push 0xff
push 0xb4
push 0xb4
push 0xb4
add dx, ax
push 0x12
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84068]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84066]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84064]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
push eax
lea ecx, [esi + 0x3c]
call fcn.04d48050
cmp dword [0x4e83f48], 1
jne case.0x4d1b761.8
movzx edx, word [0x4e8405a]
mov ax, word [0x4e84052]
mov ecx, dword [0x4e83f44]
push 0xff
push 0xc0
push 0xbd
push 0x97
add dx, ax
push 0x12
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84058]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
add edx, ecx
push eax
movsx eax, dx
push eax
lea ecx, [esi + 0x48]
call fcn.04d48050
jmp case.0x4d1b761.8
mov ecx, dword [ebp + 0x1398]
mov eax, dword [ebp + 0x139c]
lea ebx, [ecx + eax + 1]
mov ecx, dword [0x4e83f44]
cmp ebx, ecx
jle 0x4d1bc9a
mov ebx, ecx
movzx edx, word [0x4e84062]
push 0xff
push 0xff
push 0xff
push 0xff
push 0x12
push 0xfffffffffffffffe
push eax
mov ax, word [0x4e84052]
add dx, ax
movsx ecx, dx
mov edx, dword [0x4e84060]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e8405e]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e8405c]
add eax, edi
push eax
add edx, ecx
movsx eax, dx
sub eax, 0xe
push eax
lea ecx, [esi + 0x30]
call fcn.04d48050
movzx edx, word [0x4e8406a]
mov ax, word [0x4e84052]
mov ecx, dword [ebp + 0x1398]
push 0xff
push 0xb4
push 0xb4
push 0xb4
add dx, ax
push 0x12
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84068]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84066]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84064]
add eax, edi
push eax
add edx, ecx
movsx eax, dx
add eax, 0xe
push eax
lea ecx, [esi + 0x3c]
call fcn.04d48050
movzx edx, word [0x4e8405a]
mov ecx, dword [0x4e83f44]
mov ax, word [0x4e84052]
push 0xff
push 0xc0
push 0xbd
push 0x97
push 0x12
add dx, ax
push 0xfffffffffffffffe
push ecx
movsx ecx, dx
mov edx, dword [0x4e84058]
add ecx, edi
push ecx
mov ecx, dword [0x4e84050]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
push eax
add edx, ecx
movsx eax, dx
add eax, 0x1e
push eax
lea ecx, [esi + 0x48]
call fcn.04d48050
mov ax, word [0x4e84052]
mov cx, word [0x4e8405a]
push 0xff
push 0xc0
push 0xbd
push 0x97
add cx, ax
push 0x12
push 0xfffffffffffffffe
movsx edx, cx
mov ecx, dword [0x4e84050]
add edx, edi
push ebx
push edx
mov edx, dword [0x4e84058]
add edx, ecx
movsx edx, dx
push edx
movzx edx, word [0x4e84056]
add dx, ax
movsx eax, dx
mov edx, dword [0x4e84054]
add eax, edi
push eax
add edx, ecx
movsx eax, dx
sub eax, 0x1e
push eax
lea ecx, [esi + 0x54]
call fcn.04d48050
xor ebx, ebx
xor ebp, ebp
cmp dword [esi + 0x60], ebp
mov dword [esp + 0x10], ebx
jle 0x4d1bee0
mov ecx, dword [esi + 0x60]
sub ecx, dword [esi + 0x68]
xor eax, eax
cmp ecx, ebx
setle al
sub eax, 1
and eax, 0x12
add eax, 0x89
cmp ebx, 8
jne 0x4d1be7a
xor ebp, ebp
mov dword [esp + 0x10], ebx
mov dx, word [0x4e84072]
add dx, word [0x4e84052]
mov ecx, dword [0x4e84050]
push 0
push 8
push 8
push 0xaf
push eax
movsx eax, dx
add eax, dword [esp + 0x24]
mov edx, dword [0x4e84070]
add eax, edi
push eax
add edx, ecx
mov ecx, dword [esi]
movsx eax, dx
add eax, ebp
push eax
push 0xff
push 0xff
push 0xff
push 0xff
push ecx
call fcn.04d46710
add ebx, 1
add esp, 0x30
add ebp, 8
cmp ebx, dword [esi + 0x60]
jl 0x4d1be57
xor ebx, ebx
xor ebp, ebp
cmp dword [esi + 0x64], ebx
mov dword [esp + 0x10], ebx
jle case.0x4d1b761.8
mov edx, dword [esi + 0x64]
sub edx, dword [esi + 0x6c]
xor eax, eax
cmp edx, ebx
setle al
sub eax, 1
and eax, 9
add eax, 0x89
cmp ebx, 8
jne 0x4d1bf14
xor ebp, ebp
mov dword [esp + 0x10], ebx
mov edx, dword [0x4e84050]
push 0
push 8
push 8
push 0xaf
push eax
mov ax, word [0x4e8406e]
add ax, word [0x4e84052]
movsx ecx, ax
add ecx, dword [esp + 0x24]
mov eax, dword [0x4e8406c]
add ecx, edi
push ecx
add eax, edx
mov edx, dword [esi]
movsx ecx, ax
sub ecx, ebp
push ecx
push 0xff
push 0xff
push 0xff
push 0xff
push edx
call fcn.04d46710
add ebx, 1
add esp, 0x30
add ebp, 8
cmp ebx, dword [esi + 0x64]
jl 0x4d1bef1
xor eax, eax
pop edi
mov ecx, dword [esp + 0x128]
pop ebp
pop ebx
pop esi
xor ecx, esp
call fcn.04df7d7a
add esp, 0x120
ret 0xc