Function at 0x48be60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8c
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx + ecx*4]
add ecx, ecx
push ebx
push esi
lea esi, [eax + ecx*8 + 0x2e0]
movzx ecx, byte [esi + 0x2c]
lea edx, [eax + 0x148]
mov dword [esp + 0x74], edx
push edi
mov edi, dword [eax]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
mov dword [esp + 0x70], edx
mov edx, dword [esi + 0x40]
lea ecx, [ecx + ecx*4]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 4]
add ecx, ecx
lea ecx, [edx + ecx*8 + 8]
mov edx, dword [eax + 0x44]
mov dword [esp + 0x28], ecx
mov ecx, dword [ecx + 0x30]
mov dword [esp + 0x20], edi
mov dword [esp + 0x80], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x18], 0
test edx, edx
jle 0x48bef2
add eax, 0x48
mov ecx, dword [esp + 0x40]
cmp dword [eax], ecx
je 0x48c0f9
inc dword [esp + 0x18]
add eax, 4
cmp dword [esp + 0x18], edx
jl 0x48bed9
xor eax, eax
xor edx, edx
mov ecx, dword [ebp + 8]
not eax
and eax, dword [ebp + 0x10]
not edx
and edx, dword [ebp + 0x14]
mov dword [esi + 0x48], eax
mov dword [esi + 0x4c], edx
mov eax, dword [ecx + 0x18]
mov edx, dword [ecx + 0x1c]
mov ecx, dword [ebp + 0xc]
call fcn.004ee450
mov edx, dword [esp + 0x38]
and eax, 1
test byte [edx + 0x24], 0x40
mov dword [esp + 0x3c], eax
je 0x48bf39
mov eax, dword [ebp + 8]
test byte [eax + 0x22], 0x20
mov dword [esp + 0x58], 1
je 0x48bf41
mov dword [esp + 0x58], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [eax + 0x6c]
lea edx, [ecx + 1]
mov dword [eax + 0x6c], edx
lea edx, [ecx - 1]
mov dword [esp + 0x60], eax
mov dword [esp + 0x34], ecx
test ecx, edx
jne 0x48bf8a
mov eax, ecx
lea ecx, [eax*8 + 4]
push 0
push ecx
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 0x70]
mov esi, dword [ecx]
call fcn.00426bd0
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x3c]
mov dword [edx + 0x70], eax
add esp, 8
mov eax, edx
mov eax, dword [eax + 0x70]
test eax, eax
je 0x48bf98
mov dword [eax + ecx*4], 0xffffffff
or eax, 0xffffffff
sub eax, ecx
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [ecx + 0x6c]
lea edx, [eax + 1]
mov dword [ecx + 0x6c], edx
lea edx, [eax - 1]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x34], eax
test eax, edx
jne 0x48bfee
lea ecx, [eax*8 + 4]
push 0
push ecx
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 0x70]
mov esi, dword [ecx]
call fcn.00426bd0
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x18]
mov dword [edx + 0x70], eax
mov eax, dword [esp + 0x3c]
add esp, 8
mov ecx, edx
mov ecx, dword [ecx + 0x70]
test ecx, ecx
je 0x48bffc
mov dword [ecx + eax*4], 0xffffffff
or ecx, 0xffffffff
sub ecx, eax
cmp byte [esi + 0x2c], 0
mov dword [esp + 0x60], ecx
mov dword [esi + 0x18], ecx
jbe 0x48c06c
mov eax, dword [esp + 0x28]
test byte [eax + 0x24], 8
je 0x48c06c
mov ecx, dword [edi + 0x48]
inc ecx
mov dword [edi + 0x48], ecx
mov dword [esi], ecx
mov eax, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x4c], eax
cmp dword [edx + 0x54], eax
jg 0x48c049
push ebx
call fcn.00445210
add esp, 4
test eax, eax
jne 0x48c06c
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
xor edx, edx
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov word [eax], 0x17
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x74], eax
test al, 4
je 0x48c145
mov eax, dword [ecx + 0x1c]
mov edi, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x34], eax
mov dword [esp + 0x4c], ecx
cmp dword [edx + 0x54], edi
jg 0x48c0a5
push ebx
call fcn.00445210
add esp, 4
test eax, eax
jne 0x48c0d0
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x20]
mov edx, dword [esp + 0x34]
lea eax, [edi + edi*4]
lea eax, [ecx + eax*4]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x4c]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ecx
mov word [eax], 0x11
mov edi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], edi
jg 0x48c10e
push ebx
call fcn.00445210
add esp, 4
test eax, eax
je 0x48c10e
mov edi, 1
mov dword [esi + 0x34], edi
mov byte [esi + 0x2d], 0xe
jmp 0x48d3a3
mov ecx, dword [esp + 0x18]
mov eax, 1
xor edx, edx
call fcn.004f24f0
jmp 0x48bef6
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [edi + edi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x14
mov dword [esi + 0x34], edi
mov byte [esi + 0x2d], 0xe
jmp 0x48d3a3
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x24]
test edx, 0x400
je 0x48c37a
movzx eax, word [ecx + 0x28]
inc dword [edi + 0x64]
mov edx, dword [edi + 0x3c]
mov dword [esp + 0x18], eax
add eax, 2
mov dword [esp + 0x7c], eax
mov dword [esp + 0x1c], edx
cmp eax, dword [edi + 0x38]
jg 0x48c185
add edx, eax
mov dword [edi + 0x3c], edx
mov edx, dword [edi + 0x38]
sub edx, eax
mov dword [edi + 0x38], edx
jmp 0x48c193
mov edx, dword [edi + 0x48]
inc edx
add eax, dword [edi + 0x48]
mov dword [esp + 0x1c], edx
mov dword [edi + 0x48], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0x34], eax
xor eax, eax
mov dword [esp + 0x14], eax
cmp dword [esp + 0x18], eax
jle 0x48c205
mov edx, dword [ecx + 0x30]
mov eax, dword [edx + eax*4]
test eax, eax
je 0x48c1f6
test byte [eax + 0x12], 1
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
je 0x48c1de
lea edx, [edx + ecx + 2]
push edx
mov edx, dword [esp + 0x40]
push edx
push ecx
push eax
push edi
mov eax, esi
call fcn.0048b7f0
mov eax, dword [esi + 0x10]
add esp, 0x14
mov dword [esp + 0x34], eax
jmp 0x48c1f2
lea ecx, [edx + ecx + 2]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
push ecx
push eax
push edi
call fcn.0045c910
add esp, 0xc
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, dword [esp + 0x18]
jl 0x48c1a6
mov edi, dword [ecx + 0x18]
mov esi, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
cmp dword [ecx + 0x54], esi
jg 0x48c220
push ebx
call fcn.00445210
add esp, 4
test eax, eax
jne 0x48c247
mov eax, dword [ebx + 4]
inc dword [ebx + 0x20]
mov ecx, dword [esp + 0x1c]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov esi, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
cmp dword [edx + 0x54], esi
jg 0x48c25f
push ebx
call fcn.00445210
add esp, 4
test eax, eax
jne 0x48c28b
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x20]
mov edx, dword [esp + 0x18]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x1c]
inc ecx
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov eax, dword [esp + 0x38]
movzx esi, byte [eax + 0x1c]
mov edx, dword [eax + 0x20]
mov edi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
neg esi
sbb esi, esi
and esi, 0xfffffff7
mov dword [esp + 0x4c], edx
cmp dword [eax + 0x54], edi
jg 0x48c2c0
push ebx
call fcn.00445210
add esp, 4
test eax, eax
je 0x48c2c0
mov eax, 1
jmp 0x48c2f3
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [edi + edi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x34]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x1c]
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], 0
mov word [eax], 0xc
mov eax, edi
mov edi, dword [esp + 0x4c]
push ebx
lea ecx, [esi - 2]
call fcn.00445c20
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
xor esi, esi
add esp, 4
mov byte [eax + 0x1c], 0
cmp dword [esp + 0x18], esi
jle 0x48c341
cmp esi, 0x10
jge 0x48c341
mov dx, word [eax + 0x1e]
mov cx, si
shr dx, cl
test dl, 1
je 0x48c33a
mov eax, dword [eax + 0x30]
mov eax, dword [eax + esi*4]
call fcn.0048b700
mov eax, dword [esp + 0x38]
inc esi
cmp esi, dword [esp + 0x18]
jl 0x48c317
mov ecx, dword [esp + 0x40]
mov esi, dword [esp + 0x7c]
mov eax, dword [esp + 0x20]
mov dword [edi + 0x30], ecx
mov byte [edi + 0x2d], 0x9a
mov edx, dword [ebx + 0x20]
mov dword [edi + 0x34], edx
mov edi, dword [esp + 0x1c]
mov ecx, esi
call fcn.0045b280
cmp esi, dword [eax + 0x38]
jle 0x48c370
mov dword [eax + 0x38], esi
mov dword [eax + 0x3c], edi
call fcn.0045b380
jmp 0x48d3a3
mov eax, edx
and eax, 0x100
je 0x48c428
test dl, 5
je 0x48c428
mov edx, dword [esp + 0x3c]
mov eax, ecx
mov ecx, dword [eax + 0x30]
mov eax, dword [ecx]
inc dword [edi + 0x48]
mov ecx, dword [edi + 0x48]
push ecx
push edx
push 0
push eax
push edi
mov eax, esi
mov dword [esp + 0x30], ecx
call fcn.0048b7f0
add esp, 0x14
mov dword [esp + 0x2c], eax
cmp eax, dword [esp + 0x1c]
je 0x48c3ca
mov esi, dword [esp + 0x1c]
mov edx, edi
call fcn.0045dd00
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x10]
mov edi, dword [esp + 0x2c]
push eax
push edi
push 0x26
mov esi, ebx
mov dword [esp + 0x3c], eax
call fcn.004453b0
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x4c]
add esp, 0xc
push edi
push ecx
push edx
push 0x49
call fcn.004452a0
mov eax, dword [esp + 0x30]
mov ecx, 1
call fcn.0045b280
mov edx, dword [esp + 0x50]
mov ecx, edi
push ecx
push 0xffffffffffffffff
push edx
mov edx, eax
call fcn.0045b170
mov eax, dword [esp + 0x2c]
add esp, 0x1c
mov byte [eax + 0x2d], 0x9f
jmp 0x48d3a3
test eax, eax
je 0x48c61a
test dl, 2
je 0x48c61a
xor eax, eax
xor esi, esi
mov dword [esp + 0x50], 0x9f
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x2c], esi
test dl, 0x20
je 0x48c464
mov eax, dword [ecx + 0x30]
mov esi, dword [eax]
mov dword [esp + 0x2c], esi
mov eax, 1
test dl, 0x10
je 0x48c473
mov ecx, dword [ecx + 0x30]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x18], edx
cmp dword [esp + 0x3c], 0
je 0x48c488
mov eax, esi
mov esi, dword [esp + 0x18]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x18], eax
test esi, esi
je 0x48c500
mov eax, dword [esp + 0x2c]
mov edi, dword [eax]
mov eax, dword [edi + 0x10]
mov esi, dword [esp + 0x20]
lea ecx, [esp + 0x7c]
push ecx
mov dword [esp + 0x2c], 0x413f4042
call fcn.0045c770
movzx ecx, byte [edi]
mov edx, dword [esp + 0x34]
add esp, 4
push eax
push edx
movzx edx, byte [esp + ecx - 0x20]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x48]
push eax
push edx
mov esi, ebx
call fcn.004452a0
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x30]
add esp, 0x10
mov ecx, 1
call fcn.0045b280
mov esi, dword [esp + 0x7c]
mov edx, eax
call fcn.0045dd00
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x10]
call fcn.0048b700
mov edi, dword [esp + 0x20]
jmp 0x48c523
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x40]
neg edx
sbb edx, edx
push eax
and edx, 0xfffffffd
push ecx
add edx, 0x6d
push edx
mov esi, ebx
call fcn.004453b0
add esp, 0xc
mov eax, dword [esp + 0x18]
test eax, eax
je 0x48c588
mov esi, dword [eax]
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x10]
push eax
push edi
call fcn.0045c910
mov al, byte [esi]
add esp, 0xc
cmp al, 0x52
je 0x48c562
cmp al, 0x50
je 0x48c562
xor ecx, ecx
cmp dword [esp + 0x3c], ecx
setne cl
lea ecx, [ecx + ecx + 0x50]
mov dword [esp + 0x50], ecx
jmp 0x48c573
xor edx, edx
cmp dword [esp + 0x3c], edx
sete dl
lea edx, [edx + edx + 0x51]
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x10]
call fcn.0048b700
mov eax, edi
mov edi, dword [esp + 0x20]
jmp 0x48c58c
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x3c], 0
mov esi, dword [ebx + 0x20]
mov edx, dword [esp + 0x40]
sete cl
add cl, 7
cmp dword [esp + 0x50], 0x9f
mov byte [eax + 0x2d], cl
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], esi
je 0x48d3a3
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
mov dword [esp + 0x20], eax
mov eax, edx
push eax
push 0x68
mov esi, ebx
call fcn.004453b0
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x4c]
add esp, 0xc
push esi
push 0xffffffffffffffff
push ecx
mov edx, edi
call fcn.0045b170
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x5c]
add esp, 0xc
push esi
push edx
push eax
push ecx
mov esi, ebx
call fcn.004452a0
mov eax, dword [ebx + 4]
add esp, 0x10
test eax, eax
je 0x48d3a3
mov ecx, dword [ebx + 0x20]
lea edx, [ecx + ecx*4]
mov byte [eax + edx*4 - 0x11], 0x53
jmp 0x48d3a3
test edx, 0x200
je 0x48cbe4
mov edx, dword [ecx + 0x1c]
movzx eax, word [ecx + 0x18]
mov dword [esp + 0x28], edx
mov edx, dword [esi + 8]
mov dword [esp + 0x18], edx
mov edx, dword [ebp + 8]
mov dword [esp + 0x14], eax
xor eax, eax
test byte [edx + 0x22], 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x5c], eax
mov byte [esp + 0x4b], al
mov byte [esp + 0x27], al
mov byte [esp + 0x6b], al
je 0x48c683
cmp byte [edx + 0x24], al
jle 0x48c683
mov eax, dword [esp + 0x28]
mov dx, word [eax + 0x2e]
cmp dx, word [esp + 0x14]
jbe 0x48c67f
mov byte [esp + 0x27], 1
mov eax, 1
jmp 0x48c683
mov eax, dword [esp + 0x5c]
test byte [ecx + 0x24], 0x20
movzx edx, word [esp + 0x14]
mov dword [esp + 0x54], edx
je 0x48c6a2
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + edx*4]
mov dword [esp + 0x44], eax
inc edx
mov eax, 1
test byte [ecx + 0x24], 0x10
je 0x48c741
mov ecx, dword [ecx + 0x30]
mov edx, dword [ecx + edx*4]
mov ecx, 0x100
mov eax, 1
mov dword [esp + 0x1c], edx
mov dword [esp + 0x5c], eax
test word [edx + 0x14], cx
je 0x48c70e
mov eax, dword [edi + 0x48]
mov edx, dword [esp + 0x10]
inc eax
mov dword [edi + 0x48], eax
mov dword [edx + 0x24], eax
push eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [esp + 0x58]
xor edx, edx
cmp byte [eax + ecx], 1
mov esi, ebx
sete dl
xor edx, dword [esp + 0x40]
push edx
push 0x17
call fcn.004453b0
mov edx, dword [esp + 0x1c]
mov ecx, dword [ebx + 0x20]
mov eax, dword [esp + 0x68]
add esp, 0xc
mov dword [edx + 0x28], ecx
mov esi, edx
cmp dword [esp + 0x44], 0
jne 0x48c741
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 4]
mov ecx, dword [esp + 0x54]
movsx ecx, word [edx + ecx*2]
test ecx, ecx
js 0x48c741
mov edx, dword [esp + 0x28]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + 4]
lea ecx, [ecx + ecx*2]
cmp byte [edx + ecx*8 + 0x14], 0
jne 0x48c741
mov byte [esp + 0x27], 1
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x50]
push ecx
push eax
push edx
push esi
push edi
call fcn.0048b9a0
add esp, 0x14
cmp dword [esp + 0x50], 0
mov dword [esp + 0x2c], eax
je 0x48c770
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov dl, byte [ecx + eax]
mov byte [esp + 0x4b], dl
mov eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x30], eax
movzx eax, word [ecx + 0x2e]
mov dword [esp + 0x4c], eax
cmp word [esp + 0x14], ax
jae 0x48c7a3
mov ecx, dword [ecx + 0x1c]
mov eax, dword [esp + 0x54]
xor edx, edx
cmp byte [eax + ecx], dl
sete dl
cmp dword [esp + 0x3c], edx
je 0x48c7b1
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0x3c], 0
je 0x48c7ce
cmp ax, word [esp + 0x14]
jne 0x48c7ce
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x44], eax
mov al, byte [esp + 0x27]
mov dword [esp + 0x1c], ecx
mov byte [esp + 0x27], 0
mov byte [esp + 0x6b], al
mov eax, dword [esp + 0x44]
mov cl, 0x28
test eax, eax
je 0x48c7e5
mov dword [esp + 0x5c], 0
test byte [eax + 0x12], cl
je 0x48c7ed
mov dword [esp + 0x5c], 1
cmp dword [esp + 0x1c], 0
je 0x48c805
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x64], 0
test byte [edx + 0x12], cl
je 0x48c80d
mov dword [esp + 0x64], 1
test eax, eax
jne 0x48c81c
mov dword [esp + 0x6c], eax
cmp word [esp + 0x14], ax
jbe 0x48c824
mov dword [esp + 0x6c], 1
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x14], ecx
test eax, eax
je 0x48c8df
mov edx, dword [esp + 0x44]
add ecx, dword [esp + 0x2c]
mov eax, dword [edx]
mov eax, dword [eax + 0x10]
push ecx
push eax
push edi
mov dword [esp + 0x40], eax
mov dword [esp + 0x58], ecx
call fcn.0045c910
mov ecx, dword [esp + 0x50]
mov eax, 0x100
add esp, 0xc
test word [ecx + 0x14], ax
je 0x48c86e
push esi
mov ecx, ebx
call fcn.0048be20
add esp, 4
mov edi, dword [esp + 0x34]
mov eax, edi
call fcn.00459c90
test eax, eax
je 0x48c893
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x4c]
push edx
push eax
push 0x4c
mov esi, ebx
call fcn.004453b0
add esp, 0xc
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
test eax, eax
je 0x48c8d5
mov bl, byte [esi + eax]
mov eax, edi
call fcn.00458000
cmp al, 0x41
jne 0x48c8b4
mov ecx, dword [esp + 0x50]
mov byte [esi + ecx], al
mov edx, dword [esp + 0x50]
mov dl, byte [esi + edx]
mov ecx, edi
call fcn.00459d40
mov ebx, dword [esp + 0x80]
test eax, eax
je 0x48c8d5
mov eax, dword [esp + 0x50]
mov byte [esi + eax], 0x41
inc dword [esp + 0x14]
mov edi, dword [esp + 0x20]
jmp 0x48c90e
cmp byte [esp + 0x27], 0
je 0x48c912
add ecx, dword [esp + 0x2c]
mov esi, ebx
push ecx
push 0
push 0x1a
call fcn.004453b0
mov eax, 1
add esp, 0xc
add dword [esp + 0x14], eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x6c], eax
mov esi, dword [esp + 0x10]
movzx eax, byte [esp + 0x27]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
push edx
sub ecx, eax
mov eax, dword [esp + 0x54]
push edi
call fcn.0048b770
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x6c]
push edx
mov edx, dword [esp + 0x80]
push eax
lea eax, [ecx + edx*2]
mov ecx, dword [esp + 0x54]
movzx edx, byte [ecx + eax*2 + 0x502a40]
push edx
mov eax, ebx
call fcn.004455f0
mov edi, dword [esp + 0x70]
add esp, 0x1c
cmp dword [esp + 0x1c], 0
mov dword [esp + 0x14], edi
je 0x48ca27
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov esi, dword [ecx + 0x10]
add edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
mov ecx, 1
mov dword [esp + 0x4c], esi
call fcn.0045b280
push edi
push esi
push eax
call fcn.0045c910
mov edx, dword [esp + 0x28]
mov ecx, 0x100
add esp, 0xc
test word [edx + 0x14], cx
je 0x48c9c0
mov eax, dword [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0048be20
add esp, 4
mov eax, esi
call fcn.00459c90
test eax, eax
je 0x48c9dd
mov ecx, dword [esp + 0x30]
push ecx
push edi
push 0x4c
mov esi, ebx
call fcn.004453b0
add esp, 0xc
mov esi, dword [esp + 0x4c]
mov bl, byte [esp + 0x4b]
mov eax, esi
call fcn.00458000
cmp al, 0x41
je 0x48ca16
mov dl, byte [esp + 0x4b]
mov ecx, esi
call fcn.00459d40
test eax, eax
jne 0x48ca16
mov edx, dword [esp + 0x20]
push edi
push edx
lea eax, [esp + 0x53]
mov ecx, 1
call fcn.0048b770
add esp, 8
inc dword [esp + 0x14]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x80]
jmp 0x48ca4c
cmp byte [esp + 0x6b], 0
je 0x48ca50
mov eax, edi
add eax, dword [esp + 0x2c]
mov esi, ebx
push eax
push 0
push 0x1a
call fcn.004453b0
add esp, 0xc
mov dword [esp + 0x64], 0
inc edi
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x70]
call fcn.004267e0
mov edx, dword [ebx + 0x20]
mov dword [esi + 0x34], edx
test edi, edi
je 0x48ca92
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
push edi
push eax
mov eax, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x48]
push edx
movzx edx, byte [eax + ecx*2 + 0x502a48]
push edx
mov eax, ebx
call fcn.004455f0
add esp, 0x14
mov eax, dword [esp + 0x44]
mov edi, dword [esp + 0x10]
call fcn.0048b700
mov eax, dword [esp + 0x1c]
call fcn.0048b700
cmp dword [esp + 0x58], 0
jne 0x48cba4
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0xc]
test byte [eax + 0x2a], 0x20
jne 0x48cb03
mov eax, dword [esp + 0x20]
inc dword [eax + 0x48]
mov edi, dword [eax + 0x48]
mov ecx, dword [esp + 0x18]
push edi
push ecx
push 0x71
mov esi, ebx
call fcn.004453b0
mov esi, dword [esp + 0x4c]
mov edx, dword [esp + 0x2c]
add esp, 0xc
push edi
push 0xffffffffffffffff
push esi
call fcn.0045b170
add esp, 0xc
push edi
push esi
push 0x43
mov esi, ebx
call fcn.004453b0
add esp, 0xc
jmp 0x48cba0
mov edx, dword [esp + 0x40]
cmp edx, dword [esp + 0x18]
je 0x48cba4
call fcn.00462d90
movzx esi, word [eax + 0x2e]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x30], eax
call fcn.0045dd30
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
xor eax, eax
xor edi, edi
cmp ax, word [ecx + 0x2e]
jae 0x48cb7c
lea esp, [esp]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
lea eax, [edi + edx]
mov edx, dword [ecx + 4]
mov si, word [edx + edi*2]
mov edx, dword [esp + 0x28]
push eax
call fcn.00462db0
mov ecx, dword [esp + 0x1c]
cwde
push eax
push ecx
push 0x2f
mov esi, ebx
call fcn.004452a0
mov edx, dword [esp + 0x40]
movzx eax, word [edx + 0x2e]
inc edi
add esp, 0x10
cmp edi, eax
jl 0x48cb40
mov ecx, dword [esp + 0x30]
movzx edx, word [ecx + 0x2e]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x60]
push edx
mov edx, dword [esp + 0x44]
push eax
push ecx
push edx
push 0x45
mov eax, ebx
call fcn.004455f0
add esp, 0x14
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
test dword [eax + 0x24], 0x1000
je 0x48cbb7
mov byte [edi + 0x2d], 0x9f
jmp 0x48cbc5
cmp dword [esp + 0x3c], 0
sete cl
add cl, 7
mov byte [edi + 0x2d], cl
mov edx, dword [esp + 0x18]
mov dword [edi + 0x30], edx
mov cl, byte [eax + 0x26]
and cl, 1
mov byte [edi + 0x2e], cl
test byte [eax + 0x24], 0xf
jne 0x48d3a3
jmp 0x48d39f
test edx, 0x2000
je 0x48d35e
mov eax, dword [edi + 0x44]
inc dword [edi + 0x48]
mov dword [esp + 0x90], eax
inc eax
xor ecx, ecx
mov dword [edi + 0x44], eax
mov edi, dword [edi + 0x48]
mov eax, ebx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x30], ecx
mov dword [esp + 0x88], ecx
call fcn.004456a0
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x7c], eax
xor eax, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x44], eax
mov eax, dword [edx + 0x10]
mov edx, dword [ecx + 0x30]
mov ecx, dword [ebp + 8]
mov dword [esp + 0x18], eax
mov eax, dword [edx]
mov dword [esp + 0x38], eax
mov eax, dword [eax + 0xc]
mov dword [esp + 0x34], eax
mov byte [esi + 0x2d], 0x10
mov dword [esi + 0x30], edi
mov al, byte [ecx + 0x29]
cmp al, 1
jbe 0x48cd13
mov esi, dword [esp + 0x70]
movzx eax, al
sub eax, dword [ebp + 0xc]
push 0
dec eax
lea edx, [eax + eax*4]
shl edx, 4
add edx, 0x58
push edx
mov dword [esp + 0x6c], eax
call fcn.00426a60
add esp, 8
mov dword [esp + 0x2c], eax
test eax, eax
jne 0x48cc9a
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [esp + 0x64]
mov esi, dword [esp + 0x28]
inc al
movzx ecx, al
mov eax, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov dword [eax], ecx
lea edi, [eax + 8]
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
add edx, 8
cmp dword [esp + 0x64], 1
jl 0x48cd1a
mov ecx, dword [esp + 0x64]
add eax, 0x58
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x10]
add eax, 0x7c
mov dword [esp + 0x6c], eax
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x6c]
movzx eax, byte [eax]
mov edi, dword [esp + 0x28]
lea esi, [eax + eax*4]
shl esi, 4
mov eax, 0x50
add dword [esp + 0x6c], eax
add dword [esp + 0x28], eax
add esi, edx
dec dword [esp + 0x58]
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
jne 0x48cce4
jmp 0x48cd1a
mov edx, dword [ecx + 4]
mov dword [esp + 0x2c], edx
mov eax, dword [ebp + 8]
test byte [eax + 0x22], 8
jne 0x48cd94
mov ecx, dword [esp + 0x18]
test byte [ecx + 0x2a], 0x20
jne 0x48cd4c
mov edi, dword [esp + 0x20]
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
push 0
push 0x1a
mov esi, ebx
mov dword [esp + 0x3c], eax
call fcn.004453b0
add esp, 0xc
jmp 0x48cd87
mov eax, ecx
call fcn.00462d90
mov edi, dword [esp + 0x20]
mov ecx, eax
mov eax, dword [edi + 0x44]
lea edx, [eax + 1]
mov dword [esp + 0x58], ecx
mov dword [edi + 0x44], edx
movzx ecx, word [ecx + 0x2e]
push ecx
push eax
push 0x39
mov esi, ebx
mov dword [esp + 0x3c], eax
call fcn.004453b0
mov ecx, dword [esp + 0x64]
add esp, 0xc
mov eax, edi
call fcn.00445d00
inc dword [edi + 0x48]
mov edx, dword [edi + 0x48]
mov dword [esp + 0x88], edx
mov eax, dword [esp + 0x1c]
push eax
push 0
push 0x17
mov esi, ebx
call fcn.004453b0
mov edi, dword [esp + 0x84]
mov dword [esp + 0x80], eax
mov eax, dword [edi + 0xc]
add esp, 0xc
cmp eax, 1
jle 0x48ced5
xor esi, esi
mov dword [esp + 0x58], esi
cmp eax, esi
jle 0x48ced5
nop
mov eax, dword [edi + 0x14]
mov ecx, dword [eax + esi]
add eax, esi
cmp eax, dword [esp + 0x38]
je 0x48ce21
test byte [ecx + 4], 1
jne 0x48ce21
mov eax, dword [edi + 0x14]
test byte [eax + esi + 0x14], 2
jne 0x48ce21
mov edx, 0x1fff
test word [eax + esi + 0x12], dx
je 0x48ce21
mov eax, dword [esp + 0x70]
push 0
push 0
push ecx
push eax
call fcn.00458c00
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x84]
call fcn.00458710
add esp, 0x14
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x58]
inc eax
add esi, 0x30
mov dword [esp + 0x58], eax
cmp eax, dword [edi + 0xc]
jl 0x48cdd0
cmp dword [esp + 0x44], 0
je 0x48ced5
mov edi, dword [esp + 0x20]
mov esi, dword [edi]
push 0
push 0x30
call fcn.00426a60
mov esi, eax
add esp, 8
test esi, esi
je 0x48ce73
push 0x30
push 0
push esi
call fcn.004d6340
add esp, 0xc
or edx, 0xffffffff
mov byte [esi], 0x48
mov word [esi + 0x22], dx
mov dword [esi + 0x18], 1
mov eax, dword [edi]
mov dword [esp + 0x58], eax
test esi, esi
jne 0x48ce9e
mov ecx, eax
push esi
push ecx
call fcn.00458ac0
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x60]
push edx
push eax
call fcn.00458ac0
add esp, 0x10
mov dword [esp + 0x44], esi
jmp 0x48ced9
mov eax, dword [esp + 0x44]
mov dword [esi + 0x10], eax
mov ecx, dword [eax + 4]
and ecx, 0x200100
or dword [esi + 4], ecx
call fcn.00458360
mov edx, dword [edi]
mov eax, dword [edx + 0x64]
cmp dword [esi + 0x18], eax
jle 0x48cecf
push eax
push 0x508314
push edi
call fcn.00429330
add esp, 0xc
mov dword [esp + 0x44], esi
jmp 0x48ced9
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x34]
xor ecx, ecx
mov dword [esp + 0x84], 0xf0
mov dword [esp + 0x3c], ecx
cmp dword [eax + 0xc], ecx
jle 0x48d244
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x58], ecx
nop
mov eax, dword [eax + 0x14]
add eax, dword [esp + 0x58]
mov ecx, dword [eax + 8]
cmp ecx, dword [esp + 0x40]
je 0x48cf1f
mov edx, 0x400
test word [eax + 0x12], dx
je 0x48d229
mov ecx, dword [esp + 0x44]
mov eax, dword [eax]
mov dword [esp + 0x6c], 0
test ecx, ecx
je 0x48cf3c
test byte [eax + 4], 1
jne 0x48cf3c
mov dword [ecx + 0xc], eax
mov eax, ecx
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x84]
push ecx
push edx
push 0
push 0
push eax
push esi
push edi
call fcn.00494310
add esp, 0x1c
mov dword [esp + 0x8c], eax
test eax, eax
je 0x48d229
mov ecx, dword [esp + 0x10]
movzx edx, byte [ecx + 0x2c]
mov ecx, dword [ebp + 0xc]
push 0
push edx
push ecx
lea edx, [eax + 0x2e0]
push esi
mov ecx, edi
call fcn.0048b440
mov edx, dword [ebp + 8]
add esp, 0x10
test byte [edx + 0x22], 8
jne 0x48d14b
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x3c]
dec ecx
mov dword [esp + 0x14], 0xffffffff
cmp eax, ecx
je 0x48cfb3
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
test byte [eax + 0x2a], 0x20
jne 0x48d004
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
push 0
push edx
push eax
push 0xffffffffffffffff
push ecx
call fcn.0045b610
mov edx, dword [esp + 0x28]
add esp, 0x14
push edx
push eax
mov eax, dword [esp + 0x38]
push 0
push eax
push 0x83
mov eax, ebx
call fcn.004455f0
add esp, 0x14
mov dword [esp + 0x6c], eax
jmp 0x48d14b
call fcn.00462d90
movzx ecx, word [eax + 0x2e]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x20]
mov edx, dword [eax + 0x38]
mov esi, dword [eax + 0x3c]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x28], esi
cmp ecx, edx
jg 0x48d036
add esi, ecx
sub edx, ecx
mov dword [eax + 0x3c], esi
mov dword [eax + 0x38], edx
jmp 0x48d045
mov edx, dword [eax + 0x48]
lea esi, [edx + 1]
add edx, ecx
mov dword [esp + 0x28], esi
mov dword [eax + 0x48], edx
mov dword [esp + 0x64], 0
test ecx, ecx
jle 0x48d0ba
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x50], ecx
mov esi, ecx
jmp 0x48d060
mov edx, dword [esp + 0x94]
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x64]
movsx eax, word [eax + ecx*2]
mov edx, dword [esp + 0x40]
mov edi, dword [esp + 0x20]
push 0
push esi
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.0045b610
add esp, 0x14
cmp eax, esi
je 0x48d0a6
mov ecx, dword [esp + 0x50]
push ecx
push eax
push 0x20
mov esi, ebx
call fcn.004453b0
mov esi, dword [esp + 0x5c]
add esp, 0xc
mov eax, dword [esp + 0x64]
inc eax
inc esi
mov dword [esp + 0x64], eax
mov dword [esp + 0x50], esi
cmp eax, dword [esp + 0x54]
jl 0x48d060
mov esi, dword [esp + 0x14]
test esi, esi
je 0x48d0e5
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
push edx
push eax
push 0
push ecx
push 0x46
mov eax, ebx
call fcn.004455f0
add esp, 0x14
mov dword [esp + 0x6c], eax
test esi, esi
js 0x48d12d
mov edi, dword [esp + 0x88]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x28]
push edi
push edx
push eax
push 0x31
mov esi, ebx
call fcn.004452a0
mov ecx, dword [esp + 0x40]
push 0
push edi
push ecx
push 0x6f
call fcn.004452a0
add esp, 0x20
cmp dword [esp + 0x14], 0
je 0x48d12d
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x48d12d
mov eax, dword [ebx + 0x20]
lea edx, [eax + eax*4]
mov byte [ecx + edx*4 - 0x11], 0x10
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
mov ecx, esi
call fcn.0045b280
cmp esi, dword [eax + 0x38]
jle 0x48d14b
mov dword [eax + 0x38], esi
mov dword [eax + 0x3c], edi
mov esi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], esi
jg 0x48d163
push ebx
call fcn.00445210
add esp, 4
test eax, eax
jne 0x48d190
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x7c]
xor edi, edi
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov word [eax], 0xf
jmp 0x48d192
xor edi, edi
mov eax, dword [esp + 0x6c]
cmp eax, edi
je 0x48d1b5
mov ecx, dword [ebx + 0x20]
cmp ecx, eax
jbe 0x48d1ab
mov edx, dword [ebx + 4]
lea eax, [eax + eax*4]
mov dword [edx + eax*4 + 8], ecx
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
dec eax
mov dword [ecx + 0x58], eax
mov eax, dword [esp + 0x8c]
cmp byte [eax + 0x27], 0
je 0x48d1ca
mov dword [esp + 0x4c], 1
mov esi, dword [eax + 0x320]
test dword [esi + 0x24], 0x200
je 0x48d214
cmp dword [esp + 0x3c], edi
je 0x48d1e8
mov edx, dword [esp + 0x5c]
cmp dword [esi + 0x1c], edx
jne 0x48d214
mov ecx, dword [esp + 0x18]
test byte [ecx + 0x2a], 0x20
je 0x48d200
mov edx, dword [esi + 0x1c]
mov ecx, dword [edx + 0x34]
and cl, 3
cmp cl, 2
je 0x48d214
mov edx, dword [esi + 0x1c]
or dword [esp + 0x84], 0x1000
mov dword [esp + 0x5c], edx
jmp 0x48d218
mov dword [esp + 0x5c], edi
push eax
call fcn.00494d30
mov edi, dword [esp + 0x24]
mov esi, dword [esp + 0x30]
add esp, 4
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
add dword [esp + 0x58], 0x30
inc ecx
mov dword [esp + 0x3c], ecx
cmp ecx, dword [eax + 0xc]
jl 0x48cf00
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x10]
mov dword [esi + 0x38], eax
test eax, eax
je 0x48d25d
mov eax, dword [esp + 0x90]
mov dword [esi + 8], eax
cmp dword [esp + 0x44], 0
je 0x48d27d
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x70]
push eax
push ecx
mov dword [eax + 0xc], 0
call fcn.00458ac0
add esp, 8
mov eax, dword [ebx + 0x20]
mov ecx, dword [esp + 0x74]
cmp eax, ecx
jbe 0x48d292
lea edx, [ecx + ecx*4]
mov ecx, dword [ebx + 4]
mov dword [ecx + edx*4 + 4], eax
mov edi, dword [esi + 0xc]
mov esi, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
cmp dword [edx + 0x54], esi
jg 0x48d2ad
push ebx
call fcn.00445210
add esp, 4
test eax, eax
jne 0x48d2d0
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0xe
mov ecx, dword [ebx + 0x18]
or eax, 0xffffffff
sub eax, dword [esp + 0x7c]
js 0x48d2e9
mov edx, dword [ecx + 0x70]
test edx, edx
je 0x48d2e9
mov esi, dword [ebx + 0x20]
mov dword [edx + eax*4], esi
mov edx, dword [ebx + 0x20]
mov eax, dword [ebp + 8]
dec edx
mov dword [ecx + 0x58], edx
cmp byte [eax + 0x29], 1
jbe 0x48d348
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x48d348
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x48d33f
cmp dword [ecx + 0x208], 0
je 0x48d319
call fcn.004267a0
jmp 0x48d348
cmp eax, dword [ecx + 0x114]
jb 0x48d33f
cmp eax, dword [ecx + 0x118]
jae 0x48d33f
mov edx, dword [ecx + 0x110]
mov dword [eax], edx
dec dword [ecx + 0xfc]
mov dword [ecx + 0x110], eax
jmp 0x48d348
push eax
call fcn.00426730
add esp, 4
cmp dword [esp + 0x4c], 0
jne 0x48d3a3
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x10]
call fcn.0048b700
jmp 0x48d3a3
test byte [esp + 0x74], 8
je 0x48d36b
mov byte [esi + 0x2d], 0x9f
jmp 0x48d3a3
mov eax, dword [esp + 0x3c]
mov cl, byte [eax + 0x502a4c]
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x30]
mov byte [edi + 0x2d], cl
mov ecx, dword [esp + 0x40]
mov dword [edi + 0x30], ecx
movzx eax, byte [eax + 0x502a50]
push edx
push ecx
push eax
mov esi, ebx
call fcn.004453b0
add esp, 0xc
inc eax
mov dword [edi + 0x34], eax
mov byte [edi + 0x2f], 1
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + 0xc]
mov edi, dword [ecx + 0x14]
mov dword [esp + 0x38], edi
mov dword [esp + 0x14], eax
test eax, eax
jle 0x48d4b0
lea ecx, [ecx]
movzx eax, word [edi + 0x14]
xor esi, esi
test al, 6
jne 0x48d494
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x28]
mov ecx, dword [edi + 0x2c]
and eax, dword [edx + 0x48]
and ecx, dword [edx + 0x4c]
or eax, ecx
je 0x48d3ee
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x27], 1
jmp 0x48d494
mov eax, dword [edi]
mov dword [esp + 0x74], eax
cmp dword [edx], esi
je 0x48d402
test byte [eax + 4], 1
je 0x48d494
movzx ecx, word [edi + 0x14]
test ecx, 0x200
je 0x48d45b
mov esi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
mov edi, dword [edx + 0x24]
cmp dword [eax + 0x54], esi
jg 0x48d430
push ebx
call fcn.00445210
add esp, 4
test eax, eax
je 0x48d430
mov esi, 1
jmp 0x48d453
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x2e
mov edi, dword [esp + 0x38]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x20]
push 0x10
push ecx
push eax
push edx
call fcn.0045d190
add esp, 0x10
test esi, esi
je 0x48d48f
mov eax, dword [ebx + 0x20]
cmp eax, esi
jbe 0x48d485
mov edx, dword [ebx + 4]
lea ecx, [esi + esi*4]
mov dword [edx + ecx*4 + 8], eax
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
dec eax
mov dword [ecx + 0x58], eax
or word [edi + 0x14], 4
mov eax, dword [esp + 0x14]
dec eax
add edi, 0x30
mov dword [esp + 0x14], eax
mov dword [esp + 0x38], edi
test eax, eax
jg 0x48d3c0
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x48d5f4
test byte [eax + 0x14], 6
jne 0x48d5d8
movzx ecx, word [eax + 0x12]
test cl, 0x82
je 0x48d5d8
test ecx, 0x800
je 0x48d5d8
mov edx, dword [eax + 8]
cmp edx, dword [esp + 0x40]
jne 0x48d5d8
mov eax, dword [esp + 0x10]
cmp dword [eax], 0
jne 0x48d5d8
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x14]
push 0x83
push edx
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x80]
mov dword [esp + 0x7c], ecx
mov ecx, dword [ebp + 0x10]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
push eax
xor edx, edx
call fcn.0048faa0
mov edi, eax
add esp, 0x14
test edi, edi
je 0x48d5d8
test byte [edi + 0x14], 4
jne 0x48d5d8
mov esi, dword [esp + 0x70]
push 0
push 0x30
call fcn.00426a60
add esp, 8
mov dword [esp + 0x5c], eax
test eax, eax
je 0x48d5d8
mov esi, dword [edi]
mov edi, eax
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [esp + 0x60]
push 0x10
push ecx
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x28]
push eax
push edx
call fcn.0045d190
mov eax, dword [esp + 0x6c]
add esp, 0x10
cmp dword [esp + 0x70], 0
je 0x48d5cf
mov ecx, dword [esp + 0x70]
cmp dword [ecx + 0x208], 0
je 0x48d5a9
call fcn.004267a0
jmp 0x48d5d8
cmp eax, dword [ecx + 0x114]
jb 0x48d5cf
cmp eax, dword [ecx + 0x118]
jae 0x48d5cf
mov edx, dword [ecx + 0x110]
mov dword [eax], edx
dec dword [ecx + 0xfc]
mov dword [ecx + 0x110], eax
jmp 0x48d5d8
push eax
call fcn.00426730
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x38]
dec ecx
add eax, 0x30
mov dword [esp + 0x14], ecx
mov dword [esp + 0x38], eax
test ecx, ecx
jg 0x48d4c6
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x8c], eax
test eax, eax
je 0x48d71f
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x10]
mov dword [edx + 0x1c], ecx
mov eax, dword [ebx + 0x20]
mov edi, dword [ebx + 0x18]
mov dword [esp + 0x74], eax
cmp dword [edi + 0x54], eax
jg 0x48d697
mov eax, dword [edi + 0x54]
test eax, eax
je 0x48d62d
add eax, eax
jmp 0x48d632
mov eax, 0x33
mov ebx, dword [ebx + 4]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push 0
push eax
mov eax, dword [edi]
call fcn.00426b00
mov esi, eax
add esp, 8
test esi, esi
je 0x48d6c6
mov eax, dword [edi]
test eax, eax
je 0x48d66e
cmp esi, dword [eax + 0x114]
jb 0x48d66e
cmp esi, dword [eax + 0x118]
jae 0x48d66e
movzx ecx, word [eax + 0xf8]
jmp 0x48d67a
push esi
call dword [0x5129b8]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x74]
shr edx, 4
mov dword [edi + 0x54], edx
mov dword [ecx + 4], esi
mov ebx, ecx
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov ecx, 1
add dword [ebx + 0x20], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x78]
call fcn.0045b6b0
mov esi, dword [ebx + 0x14]
xor edi, edi
cmp dword [ebx + 0xc], edi
jle 0x48d71f
lea ecx, [ecx]
test byte [esi + 0x14], 6
jne 0x48d716
mov edx, dword [esp + 0x10]
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x2c]
and eax, dword [edx + 0x48]
and ecx, dword [edx + 0x4c]
or eax, ecx
jne 0x48d716
mov edx, dword [esp + 0x60]
mov eax, dword [esi]
mov ecx, dword [esp + 0x20]
push 0x10
push edx
push eax
push ecx
call fcn.0045d190
add esp, 0x10
or word [esi + 0x14], 4
inc edi
add esi, 0x30
cmp edi, dword [ebx + 0xc]
jl 0x48d6e0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x48]
mov edx, dword [ecx + 0x4c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret