Function at 0x4dad2c
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x804
mov eax, dword [0x10033000]
xor eax, esp
mov dword [esp + 0x800], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, ecx
lea ecx, [esp + 0x60]
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x784]
mov dword [esp + 0x20], eax
mov dword [esp + 0x60], eax
lea edx, [esp + 0x704]
mov dword [esp + 0x6d4], eax
mov dword [esp + 0x6d8], eax
mov eax, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x18], 1
mov edi, 0x10016850
mov dword [esp + 0x6c8], edx
mov dword [esp + 0x6d0], ecx
mov dword [esp + 0x6cc], edx
mov dword [esp + 0x6d4], eax
mov dword [esp + 0x6e0], 0x20
test ebx, 0x4000
je 0x4dadd3
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], edx
push 0x4f0
lea eax, [esp + 0x1dc]
push 0
push eax
call fcn.004cd91c
add esp, 0xc
call fcn.004e15cc
mov dword [esp + 0x674], eax
mov eax, ebx
and eax, 0x4000000
mov byte [0x10028590], 0
mov dword [esp + 0x28], eax
je 0x4dae1e
mov esi, dword [esp + 0x14]
mov ecx, 0xb
lea edi, [esp + 0x38]
rep movsd dword es:[edi], dword [esi]
jmp 0x4daf2f
test ebx, 0x2000000
je 0x4dae2f
mov eax, dword [esi + 0x20]
test eax, eax
je 0x4dae2f
mov edi, eax
test edi, edi
jne 0x4dae54
push 0x1003751c
call fcn.004d8b6c
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x800]
xor ecx, esp
call fcn.004cd7bc
mov esp, ebp
pop ebp
ret
push 0x120
lea ecx, [esp + 0x36c]
push 0
push ecx
call fcn.004cd91c
add esp, 0xc
mov dword [esp + 0x39c], 0x1000f1b0
mov dword [esp + 0x3a4], 0x1000f1c0
call fcn.004d8c9c
test bl, 0x20
je 0x4dae9e
mov edx, dword [esi]
mov eax, dword [esi + 4]
mov dword [esp + 0x298], edx
mov dword [esp + 0x29c], eax
push 0x6dc
push 0x10037504
mov esi, 0x10028490
call fcn.004d88fc
mov ecx, dword [esp + 0x1c]
add esp, 8
push ebx
push ecx
lea edx, [esp + 0x370]
push edx
call edi
push esi
mov ecx, 0x10037504
test eax, eax
jne 0x4daf0a
mov edx, 0x6ea
call fcn.004d8adc
add esp, 4
cmp byte [0x10028590], 0
jne 0x4dc28c
push 0x1003753c
call fcn.004d8b6c
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x800]
xor ecx, esp
call fcn.004cd7bc
mov esp, ebp
pop ebp
ret
mov edx, 0x6f3
call fcn.004d8adc
add esp, 4
push 0x2c
lea eax, [esp + 0x3c]
push eax
push 0
lea ecx, [esp + 0x374]
push ecx
call dword [esp + 0x378]
mov eax, dword [esp + 0x38]
cmp eax, 0x664b4942
je 0x4daf4f
cmp eax, 0x674b4942
je 0x4daf4f
cmp eax, 0x684b4942
je 0x4daf4f
cmp eax, 0x694b4942
jne 0x4daf5a
mov edx, dword [esp + 0x3a8]
test edx, edx
je 0x4daf64
push 0x10037550
jmp 0x4dc246
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x4daf76
push 0x10037564
jmp 0x4dc246
mov ecx, dword [esp + 0x48]
cmp ecx, eax
jb 0x4dc241
cmp ecx, 0xf4240
ja 0x4dc241
mov eax, dword [esp + 0x3c]
cmp dword [esp + 0x44], eax
ja 0x4dc241
mov edx, dword [esp + 0x60]
cmp edx, 0x100
ja 0x4dc241
inc edx
imul edx, ecx
add edx, edx
add edx, edx
cmp eax, edx
jb 0x4dc241
mov edi, dword [esp + 0x4c]
cmp edi, 0x7fff
ja 0x4dc241
mov ebx, dword [esp + 0x50]
cmp ebx, 0x7fff
ja 0x4dc23e
cmp dword [esp + 0x54], 0
je 0x4dc23e
cmp dword [esp + 0x58], 0
je 0x4dc23e
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x6b4], eax
mov eax, ecx
and eax, 0x20000
or eax, dword [ebp + 0xc]
lea esi, [edi + 0xf]
shr esi, 4
add esi, 0xf
and esi, 0xfffffff0
and eax, 0x8fffffff
mov dword [esp + 0x1d8], edi
mov dword [esp + 0x1dc], ebx
mov dword [esp + 0x340], edi
mov dword [esp + 0x344], ebx
mov dword [esp + 0x1fc], ecx
mov dword [esp + 0x2c8], esi
mov dword [esp + 0x1f8], eax
test ecx, 0x100000
jne 0x4db061
and eax, 0xffefffff
mov dword [esp + 0x1f8], eax
mov edx, dword [ebp + 0xc]
and edx, 0x70000000
cmp edx, 0x70000000
je 0x4db0e7
test edx, edx
je 0x4db07a
or eax, edx
jmp 0x4db082
and ecx, 0x70000000
or eax, ecx
mov ecx, eax
and ecx, 0x70000000
mov dword [esp + 0x1f8], eax
cmp ecx, 0x30000000
ja 0x4db0c3
je 0x4db0b7
cmp ecx, 0x10000000
je 0x4db0ab
cmp ecx, 0x20000000
jne 0x4db0e7
lea ecx, [ebx + ebx]
mov dword [esp + 0x1dc], ecx
jmp 0x4db0e7
lea edx, [edi + edi]
mov dword [esp + 0x1d8], edx
jmp 0x4db0e7
cmp ecx, 0x40000000
je 0x4db0d3
cmp ecx, 0x50000000
jne 0x4db0e7
lea ecx, [edi + edi]
lea edx, [ebx + ebx]
mov dword [esp + 0x1d8], ecx
mov dword [esp + 0x1dc], edx
mov ecx, dword [esp + 0x38]
cmp ecx, 0x664b4942
je 0x4db10a
cmp ecx, 0x674b4942
je 0x4db10a
cmp ecx, 0x684b4942
jne 0x4db116
or eax, 0x8000
jmp 0x4db10f
or eax, 0x18000
mov dword [esp + 0x1f8], eax
test dword [ebp + 0xc], 0x1000
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x2d4], ecx
je 0x4db14d
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 8]
cmp eax, 0xffffffff
je 0x4db14d
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x1f0], edx
jmp 0x4db15c
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x1ec], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x200], eax
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x210], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x2d0], eax
mov eax, dword [esp + 0x1dc]
add eax, 0xf
shr eax, 4
imul eax, esi
mov dword [esp + 0x2cc], eax
mov eax, ecx
shr eax, 1
add eax, edx
mov dword [esp + 0x678], edx
xor edx, edx
div ecx
mov dword [esp + 0x67c], ecx
mov dword [esp + 0x628], eax
test eax, eax
jne 0x4db1d2
mov eax, 1
mov dword [esp + 0x628], eax
lea edx, [esp + 0x60c]
lea ecx, [eax*4]
push edx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov ecx, dword [esp + 0x628]
lea eax, [esp + 0x610]
add ecx, ecx
push eax
add ecx, ecx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov ecx, dword [esp + 0x628]
add ecx, ecx
lea edx, [esp + 0x614]
add ecx, ecx
push edx
call fcn.004e9e6c
mov ecx, dword [esp + 0x628]
lea eax, [esp + 0x618]
add ecx, ecx
push eax
add ecx, ecx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov ecx, dword [esp + 0x628]
add ecx, ecx
lea edx, [esp + 0x61c]
add ecx, ecx
push edx
call fcn.004e9e6c
mov ecx, dword [esp + 0x628]
lea eax, [esp + 0x620]
add ecx, ecx
push eax
add ecx, ecx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov ecx, dword [esp + 0x628]
add ecx, ecx
lea edx, [esp + 0x624]
add ecx, ecx
push edx
call fcn.004e9e6c
mov esi, dword [esp + 0x18]
mov eax, esi
test esi, esi
jne 0x4db2a1
mov eax, 1
lea ecx, [eax + eax*2]
lea eax, [esp + 0x32c]
push eax
shl ecx, 7
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
lea edx, [esp + 0x2c4]
lea ecx, [esi*4]
push edx
call fcn.004e9e6c
mov ecx, dword [esp + 0x1d8]
add ecx, 0xf
and ecx, 0xfffffff0
lea eax, [esp + 0x308]
call fcn.004e609c
cmp dword [esp + 0x28], 0
jne 0x4db31d
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x2d4]
lea ecx, [ecx + eax*2]
add ecx, eax
lea edx, [esp + 0x348]
lea ecx, [ecx*4 + 0x104]
push edx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov edx, 0x4f0
lea esi, [esp + 0x1d8]
lea eax, [esp + 0x6c8]
call fcn.004d8b3c
mov ebx, eax
test ebx, ebx
je 0x4db9e1
cmp dword [esp + 0x28], 0
mov ecx, 0x13c
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x438]
mov dword [ebx + 0x1ac], ebx
mov dword [eax], 0
mov ecx, dword [ebx + 0x43c]
mov dword [ecx], 0
mov edx, dword [ebx + 0x440]
mov dword [edx], 0
mov eax, dword [ebx + 0x444]
mov dword [eax], 0
mov ecx, dword [ebx + 0x448]
mov dword [ecx], 0
mov edx, dword [ebx + 0x44c]
mov dword [edx], 0
je 0x4db413
mov eax, dword [esp + 0x14]
lea ecx, [eax + 0x2c]
mov dword [ebx + 0x170], ecx
mov ecx, dword [ebx + 0x38]
lea edx, [eax + ecx*4 + 0x2c]
mov dword [ebx + 0x174], edx
lea edx, [eax + ecx*8 + 0x2c]
lea ecx, [ecx + ecx*2]
mov dword [ebx + 0x178], edx
lea edx, [eax + ecx*4 + 0x2c]
mov dword [ebx + 0x158], edx
mov ecx, dword [ebx + 0x450]
mov edi, dword [ebx + 0x158]
lea edx, [ebx + 0x4d4]
push edx
mov edx, dword [ebx + 8]
lea eax, [ebx + 0xcc]
push eax
push ecx
push edx
call fcn.004d9f8c
add esp, 0x10
mov dword [ebx + 0xc8], eax
cmp eax, 0xffffffff
jne 0x4db4aa
push 0x100375d4
call fcn.004d8b6c
jmp 0x4db9db
mov eax, dword [ebx + 0x170]
add eax, 0x100
and eax, 0xffffff80
add eax, 0xffffffac
mov dword [ebx + 0x170], eax
mov edx, dword [esp + 0x210]
mov esi, dword [esp + 0x2d4]
lea esi, [esi + edx*2]
add esi, edx
lea edx, [esi*4 + 4]
push edx
push eax
mov eax, dword [ebx + 0x190]
lea ecx, [ebx + 0x190]
push 0xffffffffffffffff
push ecx
call eax
mov edx, dword [esp + 0x210]
mov ecx, dword [ebx + 0x170]
lea eax, [ecx + edx*4]
mov dword [ebx + 0x174], eax
mov ecx, dword [esp + 0x210]
lea eax, [eax + ecx*4]
mov ecx, dword [ebx + 0x1d0]
mov dword [ebx + 0x178], eax
mov edx, dword [esp + 0x210]
lea eax, [eax + edx*4]
mov dword [ebx + 0x158], eax
test ecx, ecx
je 0x4db3ce
push 0x100375b8
call fcn.004d8b6c
jmp 0x4db9db
mov eax, dword [ebp + 0xc]
and eax, 0x400
mov dword [esp + 0xc], eax
je 0x4db4c8
cmp dword [ebx + 0x4dc], 0x6132424b
jne 0x4db808
lea eax, [esp + 0xe0]
push eax
push ebx
call fcn.004dac4c
cmp dword [ebx + 0x4dc], 0x6132424b
jne 0x4db532
mov eax, dword [ebx + 4]
mov ecx, 0x1e
lea esi, [esp + 0xe0]
lea edi, [esp + 0x68]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx]
add ecx, 0xff
add eax, 0xff
shr ecx, 8
shl ecx, 5
shr eax, 8
shl eax, 5
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
shr ecx, 1
shr eax, 1
add ecx, 0xf
and ecx, 0xfffffff0
add eax, 0xf
and eax, 0xfffffff0
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
jmp 0x4db543
push 0x78
lea ecx, [esp + 0x6c]
push 0
push ecx
call fcn.004cd91c
add esp, 0xc
xor edx, edx
xor eax, eax
xor ecx, ecx
cmp dword [esp + 0xe0], edx
mov dword [esp + 0x1c], eax
jle 0x4db757
xor esi, esi
mov edi, dword [esp + 0xec]
add edi, 0xf
lea eax, [esp + esi + 0xfc]
and edi, 0xfffffff0
cmp dword [eax - 4], edx
je 0x4db5e0
cmp dword [esp + 0xc], edx
jne 0x4db597
mov ecx, dword [esp + 0xe8]
imul ecx, dword [esp + 0xe4]
push eax
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
cmp dword [ebx + 0x4dc], 0x6132424b
jne 0x4db5c0
mov ecx, dword [esp + 0x70]
imul ecx, dword [esp + 0x6c]
lea edx, [esp + esi + 0x84]
push edx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0xe4]
mov dword [esp + esi + 0x88], ecx
mov dword [esp + esi + 0x100], eax
mov ecx, 1
xor edx, edx
cmp dword [esp + esi + 0x104], edx
je 0x4db64f
cmp dword [esp + 0xc], edx
jne 0x4db60d
mov ecx, dword [esp + 0xf0]
imul ecx, edi
lea edx, [esp + esi + 0x108]
push edx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
cmp dword [ebx + 0x4dc], 0x6132424b
jne 0x4db636
mov ecx, dword [esp + 0x78]
imul ecx, dword [esp + 0x74]
lea eax, [esp + esi + 0x90]
push eax
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov ecx, dword [esp + 0x74]
mov dword [esp + esi + 0x94], ecx
mov dword [esp + esi + 0x10c], edi
mov ecx, 1
xor edx, edx
cmp dword [esp + esi + 0x110], edx
je 0x4db6be
cmp dword [esp + 0xc], edx
jne 0x4db67c
mov ecx, dword [esp + 0xf0]
imul ecx, edi
lea edx, [esp + esi + 0x114]
push edx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
cmp dword [ebx + 0x4dc], 0x6132424b
jne 0x4db6a5
mov ecx, dword [esp + 0x78]
imul ecx, dword [esp + 0x74]
lea eax, [esp + esi + 0x9c]
push eax
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov ecx, dword [esp + 0x74]
mov dword [esp + esi + 0xa0], ecx
mov dword [esp + esi + 0x118], edi
mov ecx, 1
xor edx, edx
cmp dword [esp + esi + 0x11c], edx
je 0x4db739
cmp dword [esp + 0xc], edx
jne 0x4db6f0
mov ecx, dword [esp + 0xe8]
imul ecx, dword [esp + 0xe4]
lea edx, [esp + esi + 0x120]
push edx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
cmp dword [ebx + 0x4dc], 0x6132424b
jne 0x4db719
mov ecx, dword [esp + 0x70]
imul ecx, dword [esp + 0x6c]
lea eax, [esp + esi + 0xa8]
push eax
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0x6c]
mov dword [esp + esi + 0x124], ecx
mov dword [esp + esi + 0xac], edx
mov ecx, 1
xor edx, edx
mov eax, dword [esp + 0x1c]
inc eax
add esi, 0x30
cmp eax, dword [esp + 0xe0]
mov dword [esp + 0x1c], eax
jl 0x4db55c
cmp eax, 2
jge 0x4db78f
lea eax, [eax + eax*2]
shl eax, 4
mov dword [esp + eax + 0x108], edx
mov dword [esp + eax + 0x114], edx
mov dword [esp + eax + 0xfc], edx
mov dword [esp + eax + 0x90], edx
mov dword [esp + eax + 0x9c], edx
mov dword [esp + eax + 0x84], edx
add eax, 0x30
cmp eax, 0x60
jl 0x4db75d
cmp ecx, edx
je 0x4db808
mov edx, dword [esp + 0xc]
neg edx
sbb edx, edx
and edx, 0xffffff88
add edx, 0xf0
mov esi, ebx
lea eax, [esp + 0x6c8]
call fcn.004d8b3c
mov dword [ebx + 0x4e4], eax
test eax, eax
je 0x4db9db
cmp dword [esp + 0xc], 0
jne 0x4db7de
lea edi, [eax + 0x78]
mov ecx, 0x1e
lea esi, [esp + 0xe0]
mov dword [ebx + 0xd0], edi
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x4e4]
mov dword [eax + 0x14], 0
cmp dword [ebx + 0x4dc], 0x6132424b
jne 0x4db808
mov edi, dword [ebx + 0x4e4]
mov ecx, 0x1e
lea esi, [esp + 0x68]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0xc]
test ecx, 0x1000000
je 0x4db823
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x10]
cmp eax, 0xffffffff
je 0x4db823
test eax, eax
jne 0x4db829
mov eax, dword [ebx + 0xc8]
mov dword [ebx + 0x458], eax
test ecx, 0x400000
je 0x4db847
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x14]
cmp eax, 0xffffffff
je 0x4db847
test eax, eax
jne 0x4db849
xor eax, eax
cmp dword [esp + 0x28], 0
mov dword [esp + 0x10], eax
mov dword [ebx + 0x180], eax
je 0x4db87b
mov edx, dword [ebx + 0x158]
mov eax, dword [edx]
and eax, 0xfffffffe
add eax, dword [esp + 0x14]
or dword [ebx + 0x20], 0x8000000
mov dword [ebx + 0x17c], eax
jmp 0x4dba10
mov ecx, dword [ebx + 0x458]
mov edx, dword [ebx + 0x198]
push ecx
lea edi, [ebx + 0x190]
push edi
call edx
mov ecx, dword [ebx + 0x28]
mov esi, eax
lea eax, [esi + 0x20000]
mov dword [ebx + 0x458], esi
cmp eax, ecx
jb 0x4db8b6
or dword [ebp + 0xc], 0x2000
or dword [ebx + 0x20], 0x8002000
jmp 0x4db8d0
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea edx, [edx + edx*8]
cmp esi, edx
jb 0x4db8d0
lea eax, [ecx + 0x10]
mov dword [ebx + 0x458], eax
test dword [ebp + 0xc], 0x2000
je 0x4db995
mov edx, dword [ebx + 0x158]
mov eax, dword [edx]
and eax, 0xfffffffe
sub ecx, eax
add ecx, 8
lea edx, [ecx + 0x400]
mov esi, ebx
lea eax, [esp + 0x6c8]
mov dword [esp + 0x1c], ecx
call fcn.004d8b3c
mov dword [ebx + 0x17c], eax
test eax, eax
je 0x4db9cb
mov ecx, dword [esp + 0x10]
mov edx, dword [ebx + 0x28]
mov eax, dword [ebx + 0x19c]
or dword [ebx + 0x20], 0x8000000
push ecx
add edx, 8
push edx
push 0
push 0
push edi
call eax
mov ecx, dword [esp + 0x1c]
mov eax, dword [ebx + 0x158]
mov edx, dword [ebx + 0x17c]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [ebx + 0x194]
and ecx, 0xfffffffe
push ecx
push 0
push edi
call edx
push 0x85f
push 0x10037504
mov esi, 0x10028490
call fcn.004d88fc
mov eax, dword [ebx + 0x1a4]
add esp, 8
push edi
call eax
push esi
mov edx, 0x865
mov ecx, 0x10037504
call fcn.004d8adc
add esp, 4
mov dword [ebx + 0x1e4], 0
jmp 0x4dba10
mov ecx, dword [ebx + 0xf8]
lea edx, [ebx + 0x4e0]
add ecx, 0x500
push edx
lea eax, [esp + 0x6cc]
call fcn.004e9e6c
mov edx, dword [ebx + 0x458]
mov esi, ebx
call fcn.004d8b3c
mov dword [ebx + 0x430], eax
test eax, eax
jne 0x4db9f3
mov eax, dword [ebx + 0xd0]
test eax, eax
je 0x4db9db
push eax
call fcn.004ccb6c
push ebx
call fcn.004ccb6c
push 0x10037164
call fcn.004d8b6c
mov ebx, dword [ebp + 0xc]
jmp 0x4dc24b
mov ecx, dword [esp + 0x10]
mov edx, dword [ebx + 0x28]
push ecx
mov ecx, dword [ebx + 0x458]
add edx, 8
push edx
mov edx, dword [ebx + 0x19c]
push ecx
push eax
push edi
call edx
mov eax, dword [ebx + 0x14]
xor esi, esi
mov dword [ebx + 0xc], 0xffffffff
cmp eax, esi
je 0x4dba44
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x28], eax
mov eax, 0x7d0
mov ecx, dword [esp + 0x28]
mul ecx
mov ecx, dword [esp + 0x1c]
div ecx
mov dword [ebx + 0x47c], eax
jmp 0x4dba4e
mov dword [ebx + 0x47c], 0x7d0
mov dword [ebx + 0x114], 1
call fcn.004e15cc
sub eax, dword [ebx + 0x49c]
mov ecx, dword [ebx + 0x154]
mov dword [ebx + 0x49c], eax
mov dword [ecx + 0x3c], 0x10000
mov dword [esp + 0x14], esi
mov dword [ebx + 0x124], esi
cmp dword [ebx + 0x38], esi
je 0x4dbb96
mov edi, dword [esp + 0x18]
cmp edi, esi
je 0x4dbb96
xor ecx, ecx
mov dword [esp + 0xc], ecx
cmp edi, esi
jbe 0x4dbb96
jmp 0x4dbaac
xor esi, esi
cmp dword [ebx + 0x38], esi
jle 0x4dbb5c
mov edx, dword [esp + 0x20]
mov edx, dword [edx + ecx*4]
mov eax, dword [ebx + 0x178]
cmp dword [eax], edx
je 0x4dbad6
inc esi
add eax, 4
cmp esi, dword [ebx + 0x38]
jl 0x4dbac4
jmp 0x4dbb5c
mov edi, dword [ebx + 0x124]
mov ecx, dword [ebx + 0xec]
lea eax, [edi + 1]
mov dword [ebx + 0x124], eax
mov dword [ecx + edi*4], esi
mov edx, dword [ebx + 0x174]
mov ecx, dword [edx + esi*4]
lea eax, [edx + esi*4]
test ecx, ecx
js 0x4dbb0d
test ecx, 0x10000000
je 0x4dbb0d
mov ecx, 1
jmp 0x4dbb0f
xor ecx, ecx
mov eax, dword [eax]
push ecx
mov ecx, eax
shr ecx, 0x1d
and ecx, 1
inc ecx
movzx eax, ax
push ecx
call fcn.004e440c
mov edx, dword [ebx + 0x170]
mov esi, dword [edx + esi*4]
mov edx, dword [esp + 0x14]
lea ecx, [esi + esi*4]
shr ecx, 2
add ecx, 0xff
and ecx, 0xffffff00
add ecx, eax
mov dword [esp + edi*4 + 0x158], eax
mov edi, dword [esp + 0x18]
lea eax, [edx + ecx + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x14], eax
inc ecx
mov dword [esp + 0xc], ecx
cmp ecx, edi
jb 0x4dbaac
cmp dword [esp + 0x14], 0
je 0x4dbb96
mov edx, dword [esp + 0x14]
mov esi, ebx
lea eax, [esp + 0x6c8]
call fcn.004d8b3c
mov dword [esp + 0x24], eax
mov dword [ebx + 0x15c], eax
test eax, eax
jne 0x4dbb96
mov dword [ebx + 0x124], eax
xor eax, eax
mov dword [0x1003fe20], eax
mov dword [0x1003fe1c], 1
mov dword [esp + 0xc], eax
cmp dword [ebx + 0x124], eax
jbe 0x4dbf73
xor edi, edi
lea ecx, [ecx]
mov ecx, dword [ebx + 0x154]
mov eax, dword [esp + 0xc]
mov dword [ecx + edi + 0xc], 0
mov edx, dword [ebx + 0xec]
mov ecx, dword [edx + eax*4]
lea eax, [edx + eax*4]
mov edx, dword [ebx + 0x174]
mov ecx, dword [edx + ecx*4]
test ecx, 0x90000000
je 0x4dbf09
cmp dword [0x1003fdf0], 0
je 0x4dbf09
movzx esi, cx
mov dword [esp + 0x20], esi
cmp esi, 0x3e800
ja 0x4dbf09
mov eax, dword [eax]
mov ecx, dword [ebx + 0x170]
add eax, eax
add eax, eax
mov ecx, dword [eax + ecx]
mov eax, dword [edx + eax]
mov edx, eax
shr eax, 0x1d
lea ecx, [ecx + ecx*4]
and eax, 1
shr ecx, 2
shr edx, 0x1b
inc eax
add ecx, 0xff
and edx, 8
and ecx, 0xffffff00
add edx, 8
cmp dword [esp + 0x1ec], 0
mov dword [esp + 0x10], eax
mov eax, esi
mov dword [esp + 0x34], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
je 0x4dbcb3
cmp dword [esp + 0x1f0], 0
je 0x4dbcb3
fild dword [esp + 0x20]
fnstcw word [esp + 0x14]
fimul dword [esp + 0x67c]
movzx eax, word [esp + 0x14]
or eax, 0xc00
mov dword [esp + 0x28], eax
fimul dword [esp + 0x1ec]
fild dword [esp + 0x678]
fimul dword [esp + 0x1f0]
fdivp st(1)
fldcw word [esp + 0x28]
fistp qword [esp + 0x28]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
fldcw word [esp + 0x14]
cmp eax, 0x3e800
jbe 0x4dbcc2
mov dword [esp + 0x18], 0x3e800
mov eax, dword [esp + 0x10]
imul eax, edx
imul eax, esi
add eax, eax
shr eax, 3
cmp ecx, eax
ja 0x4dbf09
push 0x8e8
push 0x10037368
mov esi, 0x10028240
call fcn.004d88fc
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x24]
add esp, 8
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [ebx + 0x154]
push eax
push ecx
add edx, edi
push edx
call dword [0x1003fdf0]
push 0x10028240
mov edx, 0x8f0
mov ecx, 0x10037368
mov esi, eax
call fcn.004d8adc
add esp, 4
test esi, esi
je 0x4dbf09
mov eax, dword [ebx + 0x154]
mov ecx, dword [esp + 0x20]
mov dword [eax + edi + 0x1c], ecx
mov edx, dword [ebx + 0x154]
cmp dword [edx + edi + 0x30], 0
lea eax, [edx + edi + 0x30]
jne 0x4dbd59
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x34]
mov ecx, dword [ebx + 0x154]
add eax, 0x10
mov dword [ecx + edi + 8], eax
mov ecx, dword [esp + 0x24]
mov edx, dword [ebx + 0x154]
mov dword [edx + edi + 0xc], ecx
mov eax, dword [ebx + 0x154]
add ecx, dword [eax + edi + 8]
add eax, edi
mov dword [esp + 0x24], ecx
mov ecx, 0x2ee
sub ecx, dword [eax + 0x38]
mov dword [esp + 0x20], ecx
jns 0x4dbd9e
mov dword [esp + 0x20], 0
xor edx, edx
cmp dword [esp + 0x1c], 8
sete dl
mov dword [eax + 0x54], edx
mov eax, dword [ebx + 0x154]
mov ecx, dword [eax + edi + 0xc]
add ecx, dword [eax + edi + 8]
add eax, edi
mov dword [eax + 0x10], ecx
mov edx, dword [ebx + 0x154]
mov ecx, dword [edx + edi + 0xc]
lea eax, [edx + edi]
mov dword [eax], ecx
mov edx, dword [ebx + 0x154]
mov ecx, dword [edx + edi + 0xc]
lea eax, [edx + edi]
mov dword [eax + 0x18], ecx
mov eax, dword [esp + 0x18]
imul eax, dword [esp + 0x10]
add eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x20]
mul ecx
mov ecx, 0x3e8
div ecx
mov edx, dword [ebx + 0x154]
and eax, 0xfffffffc
mov dword [edx + edi + 0x48], eax
mov eax, dword [ebx + 0x154]
mov ecx, dword [eax + edi + 8]
add eax, edi
mov edx, ecx
sub edx, dword [eax + 0x48]
cmp edx, 0x10
jge 0x4dbe26
add ecx, 0xfffffff0
mov dword [eax + 0x48], ecx
mov eax, dword [ebx + 0xec]
mov ecx, dword [esp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [ebx + 0x174]
mov eax, dword [eax + edx*4]
test eax, eax
js 0x4dbe4e
test eax, 0x10000000
je 0x4dbe4e
mov ecx, 1
jmp 0x4dbe50
xor ecx, ecx
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x14]
push ecx
movzx eax, ax
push edx
call fcn.004e446c
mov ecx, dword [ebx + 0x154]
push 0x919
push 0x10037368
mov esi, 0x10028240
mov dword [ecx + edi + 0x14], eax
call fcn.004d88fc
mov edx, dword [ebx + 0x154]
lea eax, [edx + edi]
add esp, 8
cmp dword [eax + 0x14], 0
jne 0x4dbeaa
push eax
mov eax, dword [eax + 0x178]
call eax
mov ecx, dword [ebx + 0x154]
mov dword [ecx + edi + 0xc], 0
push 0x10028240
mov edx, 0x924
mov ecx, 0x10037368
call fcn.004d8adc
mov edx, dword [esp + 0x10]
mov eax, dword [esp + edx*4 + 0x15c]
add dword [esp + 0x28], eax
mov ecx, dword [ebx + 0x154]
mov edx, dword [ecx + edi + 0x14]
lea eax, [ecx + edi]
mov ecx, dword [edx + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [ebx + 0x4a4]
mov eax, dword [ebx + 0x4a0]
add ecx, ecx
xor edx, edx
add ecx, ecx
lea eax, [eax + eax*2]
div ecx
mov edx, dword [ebx + 8]
add esp, 4
sub edx, eax
mov eax, dword [ebx + 0x154]
mov dword [eax + edi + 0x40], edx
mov ecx, dword [ebx + 0x154]
cmp dword [ecx + edi + 0x3c], 0
lea eax, [ecx + edi + 0x3c]
jne 0x4dbf20
mov dword [eax], 0x10000
mov edx, dword [ebx + 0x154]
cmp dword [edx + edi + 0xc], 0
mov esi, dword [esp + 0xc]
jne 0x4dbf5c
dec dword [ebx + 0x124]
mov eax, dword [ebx + 0x124]
mov ecx, dword [ebx + 0xec]
sub eax, esi
add eax, eax
lea ecx, [ecx + esi*4]
add eax, eax
push eax
lea edx, [ecx + 4]
push edx
push ecx
call fcn.004cda4c
add esp, 0xc
jmp 0x4dbf67
inc esi
mov dword [esp + 0xc], esi
add edi, 0x180
cmp esi, dword [ebx + 0x124]
jb 0x4dbbbc
cmp dword [ebx + 0x124], 0
je 0x4dc0b2
push 0x948
mov edi, 1
push 0x10037368
mov esi, 0x10028240
mov dword [ebx + 0x110], edi
call fcn.004d88fc
mov eax, dword [ebx + 0x124]
add dword [0x1003fdf4], eax
push esi
mov edx, 0x94e
mov ecx, 0x10037368
call fcn.004d8adc
mov ecx, dword [ebx + 0x154]
mov eax, dword [ecx + 0x4c]
add esp, 0xc
test eax, eax
jg 0x4dc06c
lea esi, [ebx + 0x3b0]
push edi
mov eax, esi
call fcn.004f301c
test eax, eax
je 0x4dc061
mov eax, dword [0x10036aec]
test eax, eax
je 0x4dc002
mov edx, dword [eax + 0x5c]
push 0x100373b0
push 0x10028820
push esi
push eax
call edx
add esp, 0x10
mov eax, dword [0x1003fde4]
test eax, eax
jne 0x4dc015
mov dword [0x1003fe04], 0xd
call fcn.004d950c
test eax, eax
jne 0x4dc030
mov eax, esi
call fcn.004f315c
mov ecx, dword [ebx + 0x154]
mov dword [ecx + 0x4c], edi
jmp 0x4dc041
mov edi, ebx
call fcn.004d8efc
mov dword [ebx + 0x160], 1
mov edx, dword [ebx + 0x154]
mov eax, dword [edx + 0x4c]
test eax, eax
jge 0x4dc0b2
mov ecx, dword [0x1003fe04]
neg eax
cmp eax, ecx
jae 0x4dc0b2
mov dword [0x1003fe04], eax
jmp 0x4dc0b2
mov edx, dword [ebx + 0x154]
mov dword [edx + 0x4c], edi
jmp 0x4dc0b2
cmp eax, 2
jne 0x4dc0b2
lea esi, [ebx + 0x3b0]
push 1
mov eax, esi
call fcn.004f301c
test eax, eax
je 0x4dc0a1
mov eax, dword [0x10036aec]
test eax, eax
je 0x4dc0a1
push 0x100373b0
push 0x1002845c
push esi
push eax
mov eax, dword [eax + 0x5c]
call eax
add esp, 0x10
mov edi, ebx
call fcn.004d8efc
mov dword [ebx + 0x160], 1
mov edi, 0x8000000
mov dword [ebx + 0x1b4], 0x1000f040
mov dword [ebx + 0x1c0], 0x1000f100
mov dword [ebx + 0x1b0], 0x1000f010
mov dword [ebx + 0x1b8], 0x1000f080
mov dword [ebx + 0x1bc], 0x1000f0b0
test dword [ebx + 0x20], edi
jne 0x4dc137
cmp dword [ebx + 0x17c], 0
jne 0x4dc137
lea esi, [ebx + 0x330]
push 2
mov eax, esi
call fcn.004f301c
test eax, eax
je 0x4dc11e
call fcn.004da86c
test eax, eax
jne 0x4dc218
mov eax, esi
call fcn.004f315c
or dword [ebx + 0x20], edi
test dword [ebx + 0x20], edi
jne 0x4dc137
mov edi, ebx
call fcn.004d8efc
mov dword [ebx + 0x160], 1
lea esi, [ebx + 0x2b0]
push 2
mov eax, esi
call fcn.004f301c
test eax, eax
jne 0x4dc14b
int3
mov eax, dword [0x10036aec]
test eax, eax
je 0x4dc168
mov edx, dword [eax + 0x5c]
push 0x10037428
push 0x1002846c
push esi
push eax
call edx
add esp, 0x10
cmp dword [ebx + 0x17c], 0
jne 0x4dc1a5
test dword [ebp + 0xc], 0x200000
jne 0x4dc1a0
mov eax, dword [ebx + 0x1a0]
lea esi, [ebx + 0x190]
push esi
call eax
test eax, eax
je 0x4dc1a0
mov dword [0x1003feac], ebx
mov ecx, dword [ebx + 0x1a0]
push esi
call ecx
test eax, eax
jne 0x4dc193
call fcn.004daa5c
mov eax, 1
mov ecx, ebx
mov dword [ebx + 0x4d8], 0xf0000000
call fcn.004d9b8c
cmp dword [ebx + 0x124], 0
je 0x4dc1ed
mov edx, dword [0x1003fdf8]
test edx, edx
je 0x4dc1ed
mov eax, dword [ebx + 0x154]
cmp dword [eax + 0x4c], 0
jg 0x4dc1ed
mov ecx, dword [0x10028404]
mov edx, dword [ecx]
push 0
push 1
push edx
call dword [0x1003103c]
mov eax, 1
mov ecx, 0x1003fddc
lock xadd dword [ecx], eax
mov dword [ebx + 0x12c], eax
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x800]
xor ecx, esp
call fcn.004cd7bc
mov esp, ebp
pop ebp
ret
mov eax, dword [0x10036aec]
test eax, eax
je 0x4dc121
mov ecx, dword [eax + 0x5c]
push 0x100374ec
push 0x10028450
push esi
push eax
call ecx
add esp, 0x10
jmp 0x4dc121
mov ebx, dword [ebp + 0xc]
push 0x10037598
call fcn.004d8b6c
test ebx, 0x4000000
jne 0x4dc28c
push 0x704
push 0x10037504
mov esi, 0x10028490
call fcn.004d88fc
add esp, 8
lea edx, [esp + 0x368]
push edx
call dword [esp + 0x380]
push esi
mov edx, 0x70a
mov ecx, 0x10037504
call fcn.004d8adc
add esp, 4
mov ecx, dword [esp + 0x80c]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.004cd7bc
mov esp, ebp
pop ebp
ret