Function at 0x4d71d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xa8
push ebx
mov ebx, dword [esp + 0xb0]
push ebp
mov ebp, dword [esp + 0xc4]
push esi
mov esi, dword [esp + 0xc0]
push edi
mov dword [esp + 0x54], 0
lea eax, [esi + 0x50]
mov dword [esp + 0x64], eax
mov eax, dword [ebx]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0x50]
mov dword [esp + 0x20], eax
movzx eax, byte [ebp + 0x3c]
lea ecx, [eax + eax*8]
mov eax, dword [esi + 4]
lea eax, [eax + ecx*8]
add eax, 8
lea ecx, [esi + 0x1f0]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], ecx
mov eax, dword [eax + 0x2c]
push eax
push ecx
mov dword [esp + 0x2c], eax
call fcn.004dae60
not eax
not edx
and eax, dword [esp + 0xd8]
add esp, 8
and edx, dword [esp + 0xd4]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], edx
mov eax, dword [esi + 0x48]
mov edx, dword [esi + 0x4c]
mov esi, dword [esp + 0xc8]
mov ecx, esi
call fcn.004fc0c0
mov edi, dword [esp + 0xc0]
and eax, 1
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
mov dword [ebp + 0x10], eax
mov dword [ebp + 0xc], eax
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
cmp byte [ebp + 0x3c], 0
mov dword [esp + 0x80], eax
mov dword [ebp + 0x18], eax
jbe 0x4d72c2
test byte [edx + 0x24], 8
je 0x4d72c2
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 0
push 0x47
mov dword [ebx + 0x2c], eax
push edi
mov dword [ebp], eax
call fcn.004c6d90
mov edx, dword [esp + 0x7c]
add esp, 0x10
mov ebp, dword [esp + 0xc4]
mov ecx, esi
test esi, esi
jle 0x4d72f3
lea eax, [esi + esi*2]
shl eax, 5
add eax, 0x330
add eax, ebp
nop dword [eax]
cmp dword [eax - 0x38], 0
jne 0x4d72f3
cmp dword [eax], 0
jne 0x4d72f3
dec ecx
sub eax, 0x60
test ecx, ecx
jg 0x4d72e0
mov ebx, dword [edx + 0x28]
lea eax, [ecx + ecx*2]
shl eax, 5
mov ebp, dword [eax + ebp + 0x304]
test bl, 0x20
je 0x4d73c4
mov ecx, dword [edi + 0x6c]
mov esi, dword [edx + 0x1c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x4d732b
push edx
push 0
push esi
push 0xb
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4d7356
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
mov ebp, dword [esp + 0x34]
cmp dword [edi + 0x70], edx
jg 0x4d7386
push 0
push ebp
push esi
push 0xc
push edi
call fcn.00475980
mov ebp, dword [esp + 0xe0]
mov edx, eax
add esp, 0x14
mov dword [ebp + 0x44], edx
mov byte [ebp + 0x3d], 9
jmp 0x4d7ab4
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], ebp
mov ebp, dword [esp + 0xcc]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [ebp + 0x44], edx
mov byte [ebp + 0x3d], 9
jmp 0x4d7ab4
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx + 0x2c]
test edx, 0x400
je 0x4d79d3
mov ebp, ecx
movzx ebx, word [ebp + 0x30]
mov dword [esp + 0x34], ebx
lea ecx, [ebx + 2]
cmp ecx, 1
jne 0x4d7418
mov edx, dword [esp + 0xbc]
mov al, byte [edx + 0x13]
test al, al
jne 0x4d7403
inc dword [edx + 0x2c]
mov eax, dword [edx + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4d7451
dec al
mov byte [edx + 0x13], al
movzx eax, al
mov eax, dword [edx + eax*4 + 0xa4]
mov dword [esp + 0x18], eax
jmp 0x4d7451
mov esi, dword [esp + 0xbc]
mov edx, dword [esi + 0x1c]
mov ebx, dword [esi + 0x20]
mov dword [esp + 0x18], ebx
cmp ecx, edx
jg 0x4d743c
sub edx, ecx
lea eax, [ecx + ebx]
mov dword [esi + 0x1c], edx
mov edx, esi
mov dword [esi + 0x20], eax
jmp 0x4d744d
mov eax, dword [esi + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [esp + 0x18], edx
mov edx, esi
mov dword [edx + 0x2c], eax
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0xcc]
xor esi, esi
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x28], eax
test ebx, ebx
je 0x4d75e0
nop dword [eax]
mov eax, dword [ebp + 0x38]
mov ebx, dword [eax + esi*4]
test ebx, ebx
je 0x4d75cc
test byte [ebx + 0xc], 1
je 0x4d7549
cmp esi, 0x1f
ja 0x4d749f
mov ecx, esi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0xcc]
jmp 0x4d74a1
xor eax, eax
test dword [ebp + 0x28], eax
je 0x4d751c
mov ebp, dword [edx + 0x28]
inc dword [edx + 0x2c]
push ebp
lea eax, [ebp + 1]
mov dword [edx + 0x28], eax
push dword [ebx]
mov eax, dword [edx + 0x2c]
push edx
mov dword [esp + 0x44], eax
call fcn.00499820
mov ebx, dword [esp + 0x24]
add esp, 0xc
mov ecx, dword [edi + 0x6c]
add ebx, 2
mov edx, dword [esp + 0x38]
add ebx, esi
cmp dword [edi + 0x70], ecx
jg 0x4d74f4
push edx
push ebx
push ebp
push 0xaf
push edi
call fcn.00475980
mov ebp, dword [esp + 0x34]
add esp, 0x14
jmp 0x4d75c5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x20]
mov dword [eax + ecx*4], 0xaf
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
jmp 0x4d75bd
mov eax, dword [esp + 0x18]
add eax, 2
add eax, esi
push eax
push dword [esp + 0x18]
push esi
push ecx
push ebx
push edx
call fcn.00465490
mov ecx, dword [esp + 0xe4]
add esp, 0x18
mov eax, dword [ecx + 0x10]
mov dword [esp + 0x28], eax
jmp 0x4d75cc
mov eax, dword [esp + 0x18]
add eax, 2
push 1
add eax, esi
push eax
mov eax, dword [ebx]
push dword [eax + 0x10]
push edx
call fcn.00465ba0
add esp, 0x10
cmp byte [ebx + 0xf], 0x4a
jne 0x4d75c5
test byte [ebp + 0x1c], 2
je 0x4d75c5
mov eax, dword [esp + 0xc4]
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x4d7596
push 0
push edx
push 0
push 0x47
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4d75c5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x34]
inc esi
mov edx, dword [esp + 0xbc]
cmp esi, ebx
jl 0x4d7470
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 0x18]
mov ebp, dword [esp + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x4d7600
push 0
push ebp
push edx
push 0x47
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4d762b
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
lea edx, [ebp + 1]
cmp dword [edi + 0x70], ecx
jg 0x4d7647
push 0
push edx
push ebx
push 0x47
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4d7672
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x20]
mov ebx, 0xffffffff
mov edx, dword [edi + 0x6c]
mov ecx, 0xfffffffa
test byte [eax + 0x1c], 1
mov esi, dword [eax + 0x24]
cmovne ebx, ecx
cmp dword [edi + 0x70], edx
jg 0x4d76ab
push ebp
push dword [esp + 0x2c]
mov ebp, dword [esp + 0x2c]
push ebp
push 6
push edi
call fcn.00475980
add esp, 0x14
mov edx, eax
jmp 0x4d76e2
mov ebp, dword [esp + 0x24]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x28]
mov dword [eax + ecx*4 + 8], ebp
mov ebp, dword [esp + 0x18]
mov dword [eax + ecx*4 + 0xc], ebp
mov ebp, dword [esp + 0x24]
mov dword [eax + ecx*4], 6
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4d76f7
push esi
push ebx
push eax
call fcn.00472cc0
add esp, 0xc
jmp 0x4d7727
test edx, edx
jns 0x4d76ff
mov edx, dword [edi + 0x6c]
dec edx
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
jne 0x4d771b
test esi, esi
je 0x4d7727
mov dword [eax + 0x10], esi
mov byte [eax + 1], bl
jmp 0x4d7727
push ebx
push esi
push eax
push edi
call fcn.004e2d50
add esp, 0x10
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x4c]
and dword [edx + 0x1c], 0xfffffffe
cmp byte [eax + 0x57], 0
je 0x4d7740
mov dword [edx + 0x24], 0
mov esi, dword [esp + 0xcc]
mov eax, 0x3f
mov ecx, dword [esp + 0xc4]
mov ebx, 0xbb
mov dword [esi + 0x40], ebp
cmp byte [ecx + 0x2e], 0
cmovne eax, ebx
xor ebp, ebp
mov byte [esi + 0x3d], al
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x44], eax
cmp dword [esp + 0x34], ebp
jbe 0x4d9243
mov eax, dword [esp + 0x18]
add eax, 2
mov dword [esp + 0x5c], eax
mov eax, dword [edx + 0x38]
mov ebx, dword [eax + ebp*4]
mov dword [esp + 0x28], ebx
cmp ebp, 0x10
jae 0x4d77ae
mov ax, word [edx + 0x22]
mov cx, bp
shr ax, cl
test al, 1
je 0x4d77ae
push ebx
push esi
call fcn.0046a690
add esp, 8
jmp 0x4d79b8
test byte [ebx + 0xc], 1
je 0x4d79bc
cmp ebp, 0x1f
ja 0x4d77c8
mov eax, 1
mov ecx, ebp
shl eax, cl
jmp 0x4d77ca
xor eax, eax
test dword [edx + 0x28], eax
jne 0x4d79bc
mov eax, dword [esp + 0x4c]
cmp byte [eax + 0x57], 0
jne 0x4d79bc
mov ecx, dword [esp + 0xcc]
xor esi, esi
cmp dword [ecx + 0x48], esi
jle 0x4d78ad
mov eax, dword [edi]
xor ebx, ebx
mov dh, byte [eax + 0x57]
nop word [eax + eax]
test dh, dh
je 0x4d780b
mov ecx, 0x5751d0
jmp 0x4d781b
mov eax, dword [ecx + 0x4c]
mov eax, dword [eax + ebx + 4]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea ecx, [eax + ecx*4]
mov dl, byte [ecx]
cmp dl, 0x5e
jne 0x4d782d
mov eax, dword [esp + 0x5c]
add eax, ebp
cmp dword [ecx + 0xc], eax
jmp 0x4d783b
cmp dl, 0x87
jne 0x4d783d
mov eax, dword [esp + 0x5c]
add eax, ebp
cmp dword [ecx + 8], eax
je 0x4d784f
mov ecx, dword [esp + 0xcc]
inc esi
add ebx, 0x14
cmp esi, dword [ecx + 0x48]
jl 0x4d7800
jmp 0x4d78a9
mov eax, dword [ecx + 4]
mov esi, dword [ecx + 0xc]
mov ebx, dword [ecx + 8]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x2c], eax
cmp dword [edi + 0x70], ecx
jg 0x4d7876
push esi
push ebx
push eax
movzx eax, dl
push eax
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4d78a9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
mov ebx, dword [esp + 0x28]
mov eax, dword [esp + 0xbc]
push 0
push 0x34
push dword [eax]
call fcn.0049db10
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4d7909
push 0x34
push 0
push esi
call fcn.004fd610
mov ecx, dword [esp + 0xc8]
or eax, 0xffffffff
mov byte [esi], 0x35
add esp, 0xc
mov word [esi + 0x22], ax
mov dword [esi + 0x18], 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp eax, 1
jge 0x4d7909
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.0049fe60
add esp, 0xc
mov eax, dword [esp + 0x4c]
cmp byte [eax + 0x57], 0
jne 0x4d79a3
mov eax, dword [ebx]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [eax + 0xc]
test ecx, ecx
jle 0x4d792d
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*4]
mov edx, dword [eax + ecx*4 - 0xc]
mov eax, dword [esp + 0x4c]
push 0
push 0x35
push eax
mov dword [esi + 0xc], edx
call fcn.0049db10
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x4d7995
push 0x34
push 0
push ebx
call fcn.004fd610
mov ecx, dword [esp + 0xd8]
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [ebx], 0xb0
mov byte [eax], 0
mov eax, dword [esp + 0x68]
mov dword [ebx + 0x18], 1
add eax, ebp
mov dword [esi + 0x10], ebx
push 0x10
mov dword [ebx + 0x1c], eax
push dword [ecx + 0x18]
push esi
push dword [esp + 0xd4]
call fcn.004a4050
add esp, 0x1c
jmp 0x4d7998
mov dword [esi + 0x10], ebx
mov eax, dword [esp + 0x4c]
mov dword [esi + 0xc], 0
test esi, esi
je 0x4d79b1
push esi
push eax
call fcn.004a3d70
add esp, 8
mov esi, dword [esp + 0xcc]
mov edx, dword [esp + 0x20]
inc ebp
cmp ebp, dword [esp + 0x34]
jl 0x4d7782
mov ebp, dword [esp + 0xcc]
jmp 0x4d7ab4
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x4d7b43
mov eax, dword [esp + 0x20]
mov ebp, dword [esp + 0xbc]
mov ecx, dword [esp + 0x14]
mov eax, dword [eax + 0x38]
mov eax, dword [eax]
inc dword [ebp + 0x2c]
mov esi, dword [ebp + 0x2c]
push esi
push ecx
mov ecx, dword [esp + 0xd4]
push 0
push ecx
push eax
push ebp
call fcn.00465490
mov ebx, eax
add esp, 0x18
cmp ebx, esi
je 0x4d7a36
test esi, esi
je 0x4d7a36
mov al, byte [ebp + 0x13]
cmp al, 8
jae 0x4d7a36
movzx eax, al
mov dword [ebp + eax*4 + 0xa4], esi
inc byte [ebp + 0x13]
mov eax, dword [esp + 0xcc]
cmp dword [eax + 0x34], 0
mov esi, dword [eax + 0x10]
je 0x4d7a8c
push esi
push ebx
push 0xd
push edi
call fcn.004c6d90
mov ecx, dword [esp + 0xdc]
push 1
push ebx
push esi
push dword [ecx + 0x34]
push 0x40
push edi
call fcn.004c6ed0
push dword [esp + 0xfc]
push dword [esp + 0xfc]
push esi
push dword [esp + 0xfc]
push dword [esp + 0xfc]
push ebp
call fcn.0046eeb0
add esp, 0x40
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d7b13
push ebx
push esi
push dword [esp + 0x2c]
push 0x1e
push edi
call fcn.00475980
add esp, 0x14
mov ebp, dword [esp + 0xcc]
mov byte [ebp + 0x3d], 0xbb
xor ecx, ecx
mov edx, dword [esp + 0x64]
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [esp + 0x58], ecx
mov ecx, dword [edx + 0xc]
xor eax, eax
mov esi, dword [edx + 0x18]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], ecx
test ecx, ecx
jle 0x4d9430
nop dword [eax]
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x4d940e
mov ecx, dword [ebp + 0x58]
mov eax, dword [esi + 0x2c]
and ecx, dword [esi + 0x28]
and eax, dword [ebp + 0x5c]
or ecx, eax
je 0x4d9253
mov eax, dword [esp + 0xc4]
or dword [eax + 0x30], 2
jmp 0x4d940a
mov edx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d7aa9
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x4d7d8e
xor ebx, ebx
mov dword [esp + 0x28], 0xbb
xor esi, esi
mov dword [esp + 0x38], 0
test dl, 0x20
je 0x4d7b7c
mov eax, dword [esp + 0x20]
lea ecx, [ebx + 4]
mov eax, dword [eax + 0x38]
mov esi, dword [eax]
jmp 0x4d7b7e
xor ecx, ecx
test dl, 0x10
je 0x4d7b8d
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x38]
mov ebx, dword [ecx + eax]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4d7b9f
mov eax, esi
mov esi, ebx
mov ebx, eax
mov eax, dword [esp + 0x14]
test esi, esi
je 0x4d7c77
mov ebp, dword [esi]
mov dword [esp + 0x3c], 0x17151618
mov edx, dword [ebp + 0x10]
push edx
call fcn.004a4b40
add esp, 4
test eax, eax
je 0x4d7c08
mov ecx, dword [esp + 0xbc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4d7bd7
inc dword [ecx + 0x2c]
mov esi, dword [ecx + 0x2c]
jmp 0x4d7be6
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov esi, dword [ecx + eax*4 + 0xa4]
push 1
push esi
push dword [ebp + 0x10]
push ecx
call fcn.00465ba0
movzx eax, byte [ebp]
add esp, 0x10
inc eax
mov ecx, esi
and eax, 2
or eax, 1
mov al, byte [esp + eax + 0x3c]
jmp 0x4d7c3f
lea eax, [esp + 0x2c]
push eax
push edx
push dword [esp + 0xc4]
call fcn.004a3520
mov ecx, dword [esp + 0xd8]
push esi
push ecx
mov dword [esp + 0x6c], eax
call fcn.0046a690
movzx ecx, byte [ebp]
add esp, 0x14
mov esi, dword [esp + 0x2c]
mov al, byte [esp + ecx + 6]
mov ecx, dword [esp + 0x58]
mov ebp, dword [esp + 0x34]
push ecx
push ebp
push dword [esp + 0x2c]
movzx eax, al
push eax
push edi
call fcn.004c6df0
mov ecx, dword [esp + 0xd0]
add esp, 0x14
test esi, esi
je 0x4d7c97
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4d7c97
movzx eax, al
mov dword [ecx + eax*4 + 0xa4], esi
inc byte [ecx + 0x13]
jmp 0x4d7c97
xor eax, 1
push ebp
push dword [esp + 0x28]
lea eax, [eax*4 + 0x20]
push eax
push edi
call fcn.004c6d90
mov ecx, dword [esp + 0xcc]
add esp, 0x10
test ebx, ebx
je 0x4d7d10
mov esi, dword [ebx]
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
push 1
push eax
push dword [esi + 0x10]
mov dword [esp + 0x44], eax
push ecx
call fcn.00465ba0
mov ebp, dword [esi + 0x10]
push ebp
call fcn.004a4b40
add esp, 0x14
test eax, eax
jne 0x4d7ce1
mov al, byte [esi]
cmp al, 0x38
je 0x4d7ccd
cmp al, 0x36
jne 0x4d7ce1
mov eax, dword [esp + 0x14]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [esp + 0x28], edx
jmp 0x4d7cf0
mov eax, dword [esp + 0x14]
lea eax, [eax*2 + 0x36]
mov dword [esp + 0x28], eax
push ebp
call fcn.004a4b40
mov ebp, dword [esp + 0xd0]
add esp, 4
test eax, eax
jne 0x4d7d17
push ebx
push ebp
call fcn.0046a690
add esp, 8
jmp 0x4d7d17
mov ebp, dword [esp + 0xcc]
cmp dword [esp + 0x14], 0
mov ecx, dword [edi + 0x6c]
mov ebx, dword [esp + 0x28]
sete al
mov edx, dword [esp + 0x24]
add al, 0x26
mov byte [ebp + 0x3d], al
mov dword [ebp + 0x40], edx
mov dword [ebp + 0x44], ecx
cmp ebx, 0xbb
je 0x4d7ab4
mov eax, dword [esp + 0xbc]
inc dword [eax + 0x2c]
mov esi, dword [eax + 0x2c]
push esi
push edx
push 0x87
push edi
call fcn.004c6d90
push esi
push dword [esp + 0x48]
push dword [esp + 0x50]
push ebx
push edi
call fcn.004c6df0
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x4d7ab4
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x4d7ab4
test edx, 0x200
je 0x4d8846
mov ebp, dword [esp + 0x20]
xor esi, esi
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0
movzx ebx, word [ebp + 0x1a]
movzx eax, word [ebp + 0x18]
mov ecx, ebx
movzx ebp, word [ebp + 0x1c]
mov dword [esp + 0x70], ecx
mov ecx, ebp
mov dword [esp + 0x34], ecx
xor ecx, ecx
mov dword [esp + 0x3c], ecx
mov byte [esp + 0x13], cl
mov byte [esp + 0x63], cl
mov dword [esp + 0x44], ecx
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x2c], eax
movzx eax, ax
mov dword [esp + 0x30], eax
mov ecx, dword [ecx + 0x20]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x58], eax
mov ecx, dword [ecx + 8]
mov dword [esp + 0x1c], ecx
mov ecx, eax
test dl, 0x20
je 0x4d7e1e
mov eax, dword [esp + 0x20]
mov esi, ebx
mov eax, dword [eax + 0x38]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [esp + 0x48], eax
test dl, 0x10
je 0x4d7eef
mov eax, dword [esp + 0x20]
mov ebx, ebp
cmp esi, ebx
cmova ebx, esi
mov eax, dword [eax + 0x38]
mov ecx, dword [eax + ecx*4]
mov eax, edx
mov edx, 0x100
mov dword [esp + 0x40], ecx
mov dword [esp + 0x28], eax
test word [ecx + 0xa], dx
je 0x4d7ea4
mov ecx, dword [esp + 0xbc]
mov esi, dword [esp + 0xcc]
mov eax, dword [ecx + 0x2c]
inc eax
push eax
push 1
push 0x47
mov dword [ecx + 0x2c], eax
push edi
mov dword [esi + 0x2c], eax
call fcn.004c6d90
mov ecx, dword [esp + 0x64]
add esp, 0x10
mov eax, dword [edi + 0x6c]
shl dword [esi + 0x2c], 1
mov ebp, dword [esp + 0x30]
mov dword [esi + 0x30], eax
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
cmp byte [eax + ebp], 1
mov eax, dword [esp + 0x20]
sete cl
xor ecx, dword [esp + 0x14]
or dword [esi + 0x2c], ecx
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x28], eax
jmp 0x4d7ea8
mov ebp, dword [esp + 0x30]
cmp dword [esp + 0x48], 0
mov edx, eax
mov esi, ebx
jne 0x4d7eef
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 4]
movsx ebp, word [eax + ebp*2]
test ebp, ebp
js 0x4d7ed3
mov eax, dword [ecx + 0xc]
mov ecx, ebp
add ecx, ecx
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 4], 0xf
je 0x4d7ee2
mov eax, dword [esp + 0x28]
mov edx, eax
mov esi, ebx
cmp ebp, 0xfffffffe
jne 0x4d7eef
jmp 0x4d7ee6
mov eax, dword [esp + 0x28]
mov byte [esp + 0x13], 1
mov edx, eax
mov esi, ebx
test dl, 0x30
jne 0x4d7f47
test edx, 0x80000
je 0x4d7f47
mov ebp, dword [esp + 0xbc]
mov bl, 1
mov ecx, dword [esp + 0xcc]
mov esi, 1
mov byte [esp + 0x13], bl
inc dword [ebp + 0x2c]
cmp dword [ecx], 0
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x44], eax
mov dword [ecx + 0x24], eax
je 0x4d7f3c
push eax
push 0
push 0x47
push edi
call fcn.004c6d90
mov ecx, dword [esp + 0xdc]
add esp, 0x10
dec dword [ebp + 0x38]
mov eax, dword [ebp + 0x38]
mov dword [ecx + 0x28], eax
jmp 0x4d7f4b
mov bl, byte [esp + 0x13]
mov eax, dword [esp + 0x54]
mov ebp, dword [esp + 0x2c]
cmp bp, word [eax + 0x34]
jae 0x4d7f9f
mov eax, dword [eax + 0x1c]
xor ecx, ecx
mov edx, dword [esp + 0x30]
cmp byte [edx + eax], cl
sete cl
cmp dword [esp + 0x14], ecx
jne 0x4d7f9f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x70]
mov byte [esp + 0x63], bl
movzx ecx, cx
movzx ebx, al
mov byte [esp + 0x13], 0
mov dword [esp + 0x70], ecx
mov dword [esp + 0x34], ebx
jmp 0x4d7fa3
mov ebx, dword [esp + 0x34]
cmp dword [esp + 0xc8], 0
jle 0x4d7fcc
mov eax, dword [esp + 0x20]
test dword [eax + 0x2c], 0x100000
je 0x4d7fcc
push dword [esp + 0x1c]
push 0x88
push edi
call fcn.004c6d30
add esp, 0xc
lea eax, [esp + 0x5c]
push eax
push esi
push dword [esp + 0x1c]
mov esi, dword [esp + 0xd8]
push esi
push dword [esp + 0xcc]
call fcn.00464930
mov edx, dword [esp + 0x44]
add esp, 0x14
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4d805e
test bx, bx
je 0x4d805e
lea ebx, [edx + eax]
test ebx, ebx
jne 0x4d8011
xor eax, eax
mov dword [esp + 0x3c], eax
jmp 0x4d805e
mov ecx, ebx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4d8016
mov eax, dword [esp + 0x4c]
sub ecx, edx
push 0
lea esi, [ecx + 1]
push esi
test eax, eax
je 0x4d8038
push eax
call fcn.0049db10
add esp, 0xc
jmp 0x4d8040
call fcn.004b17f0
add esp, 8
mov dword [esp + 0x3c], eax
test eax, eax
je 0x4d8053
push esi
push ebx
push eax
call fcn.004fd090
add esp, 0xc
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0xcc]
cmp dword [esp + 0x44], 0
je 0x4d806a
mov eax, dword [esi + 0x28]
jmp 0x4d806d
mov eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x50], eax
test ecx, ecx
je 0x4d8087
test byte [ecx + 0xc], 0x28
mov dword [esp + 0x68], 0
je 0x4d808f
mov dword [esp + 0x68], 1
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4d80a5
test byte [eax + 0xc], 0x28
mov dword [esp + 0x28], 0
je 0x4d80ad
mov dword [esp + 0x28], 1
test ecx, ecx
jne 0x4d80fb
test bp, bp
jne 0x4d80fb
xor eax, eax
movzx edx, bp
mov dword [esp + 0x2c], eax
cmp byte [esp + 0x13], 0
mov ebx, edx
mov esi, dword [esp + 0x58]
je 0x4d81d5
mov dword [esp + 0x68], 0
mov eax, dword [esp + 0x18]
add eax, esi
push eax
push 0
push 0x4b
push edi
call fcn.004c6d90
add esp, 0x10
mov dword [esp + 0x30], esi
mov ebp, 1
inc ebx
jmp 0x4d81e8
mov dword [esp + 0x2c], 1
mov dword [esp + 0x78], edx
test ecx, ecx
je 0x4d80bf
mov eax, dword [ecx]
mov ebp, dword [esp + 0x18]
add ebp, edx
mov esi, dword [eax + 0x10]
mov eax, dword [esp + 0x70]
movzx ebx, ax
push ebx
push ebp
push esi
push dword [esp + 0xc8]
call fcn.00465ba0
push dword [esp + 0x58]
push dword [esp + 0xe0]
push edi
call fcn.004ebb70
mov eax, dword [esp + 0x64]
add esp, 0x1c
test byte [eax + 0xa], 0x80
jne 0x4d8167
push esi
call fcn.004a0b90
add esp, 4
test eax, eax
je 0x4d8167
push dword [esp + 0x50]
push ebp
push 0x32
push edi
call fcn.004c6d90
add esp, 0x10
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4d817e
add eax, dword [esp + 0x30]
push eax
push ebx
push esi
call fcn.004e1a20
add esp, 0xc
add dword [esp + 0x78], ebx
push esi
call fcn.004a4b40
add esp, 4
test eax, eax
jne 0x4d81b9
push dword [esp + 0x48]
push dword [esp + 0xd0]
call fcn.0046a690
mov ebx, dword [esp + 0x80]
add esp, 8
mov esi, dword [esp + 0x30]
mov ebp, 1
mov byte [esp + 0x13], 0
jmp 0x4d81e8
mov ebx, dword [esp + 0x78]
mov ebp, 1
mov esi, dword [esp + 0x30]
mov dword [esp + 0x68], 1
mov byte [esp + 0x13], 0
jmp 0x4d81e8
cmp dword [esp + 0x44], 0
mov dword [esp + 0x30], esi
jne 0x4d80d8
mov ebp, dword [esp + 0x2c]
movzx edx, byte [esp + 0x13]
mov eax, ebx
mov ecx, dword [esp + 0x5c]
sub eax, edx
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x18]
test ecx, ecx
je 0x4d8241
test eax, eax
jle 0x4d8211
cmp byte [ecx], 0x41
jg 0x4d8211
dec eax
inc edx
inc ecx
test eax, eax
jg 0x4d8205
cmp eax, 1
jle 0x4d8223
cmp byte [ecx + eax - 1], 0x41
jg 0x4d8227
dec eax
cmp eax, 1
jg 0x4d8216
test eax, eax
jle 0x4d8241
push eax
push ecx
push 0
push eax
mov eax, dword [esp + 0xcc]
push edx
push 0x60
push dword [eax + 8]
call fcn.004c6e50
add esp, 0x1c
mov eax, dword [esp + 0x20]
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4d8256
cmp ebx, eax
je 0x4d83ab
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4d826c
push eax
push 1
push 0x47
push edi
call fcn.004c6d90
add esp, 0x10
mov eax, dword [esp + 0xcc]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x4d82b9
push esi
push dword [esp + 0x1c]
mov esi, dword [esp + 0x58]
push esi
push eax
push 0x40
push edi
call fcn.004c6ed0
push dword [esp + 0xec]
push dword [esp + 0xec]
push esi
push dword [esp + 0xec]
push dword [esp + 0xec]
push dword [esp + 0xe8]
call fcn.0046eeb0
add esp, 0x30
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x14]
lea eax, [eax + ebp*2]
mov ebp, 1
movzx esi, byte [ecx + eax*2 + 0x52d9e0]
mov eax, dword [esp + 0x20]
test dword [eax + 0x2c], 0x100000
je 0x4d8348
cmp esi, 0x17
jne 0x4d8348
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 8]
movsx ecx, word [eax]
mov eax, 0x66666667
add ecx, 9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push 0x7c
push edi
call fcn.004c6d30
add esp, 0xc
mov edx, eax
cmp dword [esp + 0x48], 0
mov dword [esp + 0x38], edx
jne 0x4d8321
cmp dword [esp + 0x40], 0
je 0x4d8348
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4d8336
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], bp
mov eax, dword [edi + 0x6c]
inc eax
push eax
push edx
push edi
call fcn.004c71d0
add esp, 0xc
xor ecx, ecx
mov dword [esp + 0x38], ecx
mov ebp, dword [esp + 0x50]
push ebx
push dword [esp + 0x1c]
push ebp
push dword [esp + 0x28]
push esi
push edi
call fcn.004c6ed0
mov ecx, dword [esp + 0x5c]
add esp, 0x18
test ecx, ecx
je 0x4d83af
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push 0
push 9
push edi
call fcn.004c6d90
mov ecx, dword [esp + 0x24]
mov eax, ebx
sub eax, dword [esp + 0x78]
push eax
push dword [esp + 0x2c]
mov eax, 1
cmp eax, ebx
push ebp
push dword [esp + 0x38]
sbb eax, eax
and eax, 4
movzx eax, byte [eax + ecx + 0x52d9e2]
push eax
push edi
call fcn.004c6ed0
add esp, 0x28
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
mov ebp, dword [esp + 0x30]
mov esi, ebp
test eax, eax
je 0x4d84b5
mov ecx, dword [esp + 0x34]
mov eax, dword [eax]
add esi, dword [esp + 0x18]
movzx ebx, cx
push ebx
mov ebp, dword [eax + 0x10]
push esi
push ebp
push dword [esp + 0xc8]
call fcn.00465ba0
push dword [esp + 0x50]
push dword [esp + 0xe0]
push edi
call fcn.004ebb70
mov eax, dword [esp + 0x5c]
add esp, 0x1c
test byte [eax + 0xa], 0x80
jne 0x4d841b
push ebp
call fcn.004a0b90
add esp, 4
test eax, eax
je 0x4d841b
push dword [esp + 0x50]
push esi
push 0x32
push edi
call fcn.004c6d90
add esp, 0x10
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4d847b
push eax
push ebx
push ebp
call fcn.004e1a20
mov ecx, dword [esp + 0x48]
add esp, 0xc
mov eax, ebx
test ebx, ebx
je 0x4d8444
cmp byte [ecx], 0x41
jg 0x4d8444
dec eax
inc esi
inc ecx
test eax, eax
jg 0x4d8438
cmp eax, 1
jle 0x4d845d
nop dword [eax]
cmp byte [ecx + eax - 1], 0x41
jg 0x4d8461
dec eax
cmp eax, 1
jg 0x4d8450
test eax, eax
jle 0x4d847b
push eax
push ecx
push 0
push eax
mov eax, dword [esp + 0xcc]
push esi
push 0x60
push dword [eax + 8]
call fcn.004c6e50
add esp, 0x1c
mov esi, dword [esp + 0x30]
push ebp
add esi, ebx
call fcn.004a4b40
add esp, 4
test eax, eax
jne 0x4d84a7
push dword [esp + 0x40]
push dword [esp + 0xd0]
call fcn.0046a690
mov ebp, dword [esp + 0x38]
add esp, 8
jmp 0x4d84dc
mov ebp, dword [esp + 0x30]
mov dword [esp + 0x28], 1
jmp 0x4d84dc
cmp byte [esp + 0x63], 0
je 0x4d84dc
test ecx, ecx
jne 0x4d84db
mov eax, dword [esp + 0x18]
add eax, ebp
push eax
push ecx
push 0x4b
push edi
call fcn.004c6d90
add esp, 0x10
mov dword [esp + 0x28], 0
inc esi
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4d84f2
push eax
mov eax, dword [esp + 0x50]
push eax
call fcn.0049dc30
add esp, 8
mov ebx, dword [esp + 0x3c]
test ebx, ebx
je 0x4d85a7
mov ecx, dword [esp + 0x4c]
cmp ebx, dword [ecx + 0x164]
jae 0x4d853d
cmp ebx, dword [ecx + 0x15c]
jb 0x4d8525
mov eax, dword [ecx + 0x158]
mov dword [ebx], eax
mov dword [ecx + 0x158], ebx
jmp 0x4d85a7
cmp ebx, dword [ecx + 0x160]
jb 0x4d853d
mov eax, dword [ecx + 0x150]
mov dword [ebx], eax
mov dword [ecx + 0x150], ebx
jmp 0x4d85a7
cmp dword [ecx + 0x210], 0
je 0x4d8552
push ebx
push ecx
call fcn.0047fe10
add esp, 8
jmp 0x4d85a7
cmp dword [0x56f0f8], 0
je 0x4d859d
mov eax, dword [0x574ff8]
test eax, eax
je 0x4d856e
push eax
call dword [0x56f148]
add esp, 4
push ebx
call dword [0x56f124]
sub dword [0x574f98], eax
dec dword [0x574fbc]
push ebx
call dword [0x56f11c]
mov eax, dword [0x574ff8]
add esp, 8
test eax, eax
je 0x4d85a7
push eax
call dword [0x56f150]
jmp 0x4d85a4
push ebx
call dword [0x56f11c]
add esp, 4
mov ecx, dword [esp + 0xcc]
mov eax, dword [edi + 0x6c]
mov dword [ecx + 0x44], eax
test esi, esi
je 0x4d8627
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x4d85d3
mov eax, dword [edi + 0x6c]
add eax, 3
push eax
push ecx
push 0x11
push edi
call fcn.004c6d90
add esp, 0x10
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0x50]
push esi
push dword [esp + 0x1c]
movzx eax, byte [eax + ecx*2 + 0x52d9e8]
push ebx
push dword [esp + 0x28]
push eax
push edi
call fcn.004c6ed0
mov ecx, dword [esp + 0x50]
add esp, 0x18
test ecx, ecx
je 0x4d862b
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4d8618
mov eax, 0x5751d0
mov dword [eax + 8], edx
jmp 0x4d862b
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x4d862b
mov ebx, dword [esp + 0x50]
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x4d866d
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push ecx
push 0x10
push edi
call fcn.004c6d90
mov ecx, dword [esp + 0x3c]
lea eax, [ecx + esi]
mov esi, dword [esp + 0x2c]
push eax
push dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
push ebx
push esi
movzx eax, byte [ecx + eax*2 + 0x52d9e8]
push eax
push edi
call fcn.004c6ed0
add esp, 0x28
jmp 0x4d8671
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov eax, dword [ebx + 0x2c]
test eax, 0x40000
je 0x4d8690
push ebp
push ebp
push esi
push 0x7d
push edi
call fcn.004c6df0
mov eax, dword [ebx + 0x2c]
add esp, 0x14
mov ecx, dword [esp + 0xc4]
test al, 0x40
je 0x4d86ef
mov eax, 0x1020
test word [ecx + 0x28], ax
jne 0x4d86ef
mov edx, dword [esp + 0x54]
mov ebx, 1
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0xcc]
cmp dword [ebp], 0
jne 0x4d86d5
mov eax, dword [edx + 0x24]
test eax, eax
je 0x4d86d5
push dword [esp + 0x64]
push esi
push eax
call fcn.004eb270
add esp, 0xc
mov ecx, dword [esp + 0x20]
test dword [ecx + 0x2c], 0x1000
je 0x4d880d
mov byte [ebp + 0x3d], 0xbb
jmp 0x4d881a
mov edx, dword [esp + 0x54]
xor ebx, ebx
mov eax, dword [edx + 0xc]
test byte [eax + 0x1c], 0x80
jne 0x4d8714
push esi
mov esi, dword [esp + 0x28]
push esi
push edx
push ecx
call fcn.004650a0
mov edx, dword [esp + 0x64]
add esp, 0x10
jmp 0x4d86b3
cmp dword [esp + 0x24], esi
je 0x4d86af
push eax
call fcn.004b9e00
mov esi, eax
mov dword [esp + 0x5c], esi
movzx ecx, word [esi + 0x32]
push ecx
push dword [esp + 0xc4]
call fcn.004ac8c0
movzx ecx, word [esi + 0x32]
add esp, 0xc
xor ebp, ebp
mov dword [esp + 0x38], eax
mov dword [esp + 0x2c], ebx
mov edx, ecx
cmp bx, cx
jae 0x4d87e5
mov ebx, eax
mov eax, dword [esp + 0x54]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x4d877e
mov eax, dword [esi + 4]
movzx esi, word [eax + ebp*2]
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 4]
cmp si, word [eax]
je 0x4d879f
inc ecx
add eax, 2
cmp ecx, edx
jl 0x4d8771
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x4d87a4
push ebx
push edx
push dword [esp + 0x24]
push 0x5e
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4d87cf
movzx eax, cx
jmp 0x4d8781
mov esi, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [esp + 0x58]
inc ebp
inc ebx
movzx ecx, word [esi + 0x32]
cmp ebp, ecx
jl 0x4d8755
mov edx, ecx
xor ebx, ebx
mov esi, dword [esp + 0x24]
movzx eax, dx
push eax
push dword [esp + 0x3c]
push dword [esp + 0x88]
push esi
push 0x1c
push edi
call fcn.004c6ed0
mov edx, dword [esp + 0x6c]
add esp, 0x18
jmp 0x4d86b3
cmp dword [esp + 0x14], 0
sete al
add al, 0x26
mov byte [ebp + 0x3d], al
mov eax, dword [esp + 0x1c]
mov dword [ebp + 0x40], eax
mov al, byte [ecx + 0x2e]
and al, 1
mov byte [ebp + 0x3e], al
test byte [ecx + 0x2c], 0xf
jne 0x4d8833
mov byte [ebp + 0x3f], 1
test ebx, ebx
je 0x4d924a
xor ecx, ecx
mov dword [esp + 0x54], ecx
jmp 0x4d7ab6
test edx, 0x2000
je 0x4d91f8
mov ebp, dword [esp + 0xbc]
xor ecx, ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov eax, dword [ebp + 0x28]
dec dword [ebp + 0x38]
inc dword [ebp + 0x2c]
mov dword [esp + 0x2c], eax
inc eax
mov dword [ebp + 0x28], eax
mov eax, dword [ebp + 0x38]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x6c]
mov edx, dword [ebp + 0x2c]
mov dword [esp + 0x78], edx
mov dword [esp + 0x50], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x68], ecx
mov eax, dword [eax + 0x38]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xcc]
mov byte [eax + 0x3d], 0x43
mov dword [eax + 0x40], edx
mov eax, dword [esp + 0xc4]
mov al, byte [eax + 0x2c]
cmp al, 1
jbe 0x4d89e8
movzx ebx, al
sub ebx, esi
dec ebx
push 0
lea eax, [ebx + ebx*8]
lea eax, [eax*8 + 0x50]
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.0049db10
mov edx, eax
add esp, 0xc
mov dword [esp + 0x28], edx
test edx, edx
jne 0x4d8920
mov eax, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa8
ret
mov ecx, dword [esp + 0xc4]
lea eax, [ebx + 1]
movzx eax, al
mov dword [edx + 4], eax
mov dword [edx], eax
mov eax, dword [esp + 0x6c]
movups xmm0, xmmword [eax]
movups xmmword [edx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [edx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [edx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [edx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
movq qword [edx + 0x48], xmm0
mov esi, dword [ecx + 4]
cmp ebx, 1
jl 0x4d89b7
lea ecx, [edx + 0x50]
mov edx, dword [esp + 0xcc]
add edx, 0x9c
movzx eax, byte [edx]
lea edx, [edx + 0x60]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [esi + eax*8 + 8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x18]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x28]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x38]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [esi + eax*8 + 0x48]
movq qword [ecx - 8], xmm0
sub ebx, 1
jne 0x4d8977
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0xc4]
test byte [eax + 0x28], 0x10
jne 0x4d8a2f
test byte [ecx + 0x1c], 0x80
jne 0x4d89f8
inc dword [ebp + 0x2c]
mov eax, dword [ebp + 0x2c]
push eax
push 0
push 0x4b
push edi
mov dword [esp + 0x2c], eax
call fcn.004c6d90
add esp, 0x10
jmp 0x4d8a25
mov eax, dword [esp + 0xc4]
mov eax, dword [eax + 4]
mov dword [esp + 0x28], eax
jmp 0x4d89bb
push ecx
call fcn.004b9e00
mov ebx, dword [ebp + 0x28]
mov esi, eax
mov dword [esp + 0x20], ebx
lea ecx, [ebx + 1]
mov dword [ebp + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push ebx
push 0x76
push edi
call fcn.004c6d90
push esi
push ebp
call fcn.004d3a20
add esp, 0x1c
inc dword [ebp + 0x2c]
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x50], eax
push dword [esp + 0x78]
push 0
push 0x47
push edi
call fcn.004c6d90
mov dword [esp + 0x30], eax
add esp, 0x10
mov eax, dword [esp + 0x64]
cmp dword [eax + 0xc], 1
jle 0x4d8b19
mov edx, dword [esp + 0x30]
xor ebx, ebx
xor esi, esi
xor edi, edi
nop dword [eax]
mov eax, dword [eax + 0x18]
add eax, esi
mov ecx, dword [eax]
cmp eax, edx
je 0x4d8ab8
mov ebp, 0x8006
test word [eax + 0xa], bp
mov ebp, dword [esp + 0xbc]
jne 0x4d8ab8
mov edi, 0x3fff
test word [eax + 0xc], di
mov edi, dword [esp + 0x40]
je 0x4d8ab8
test dword [ecx + 4], 0x400000
jne 0x4d8ab8
push 0
push 0
push ecx
push dword [esp + 0x58]
call fcn.0046d670
push eax
push edi
push ebp
call fcn.004a0760
mov edx, dword [esp + 0x4c]
mov edi, eax
add esp, 0x1c
mov dword [esp + 0x40], edi
mov eax, dword [esp + 0x64]
inc ebx
add esi, 0x30
cmp ebx, dword [eax + 0xc]
jl 0x4d8a60
test edi, edi
mov edi, dword [esp + 0xc0]
je 0x4d8b19
mov ecx, dword [ebp]
mov eax, 0x34
cmp ax, word [ecx + 0x134]
jbe 0x4d8b8b
cmp dword [ecx + 0x130], 0
jne 0x4d8af9
inc dword [ecx + 0x144]
jmp 0x4d8bf9
cmp byte [ecx + 0x57], 0
je 0x4d8bf9
xor esi, esi
mov ecx, dword [esp + 0x40]
push ecx
push dword [ebp]
call fcn.004a3d70
add esp, 8
mov dword [esp + 0x40], esi
push str.MULTI_INDEX_OR
push 1
push ebp
call fcn.004d0870
mov edx, dword [esp + 0x54]
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x14], ecx
cmp dword [edx + 0xc], ecx
jle 0x4d90fe
mov ebx, dword [esp + 0x24]
mov esi, 0x400
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [edx + 0x18]
cmp dword [eax + 0x14], ebx
je 0x4d8b5d
test word [eax + 0xc], si
je 0x4d90f0
mov eax, dword [eax]
xor ebx, ebx
mov dword [esp + 0x44], ebx
test eax, eax
je 0x4d8c65
push ebx
push ebx
push eax
push dword [esp + 0x58]
call fcn.0046d670
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov edx, dword [esp + 0x48]
mov esi, eax
jmp 0x4d8c67
mov esi, dword [ecx + 0x158]
test esi, esi
je 0x4d8ba5
mov eax, dword [esi]
mov dword [ecx + 0x158], eax
inc dword [ecx + 0x140]
jmp 0x4d8c10
mov esi, dword [ecx + 0x154]
test esi, esi
je 0x4d8bbf
mov eax, dword [esi]
mov dword [ecx + 0x154], eax
inc dword [ecx + 0x140]
jmp 0x4d8c10
mov esi, dword [ecx + 0x150]
test esi, esi
je 0x4d8bd9
mov eax, dword [esi]
mov dword [ecx + 0x150], eax
inc dword [ecx + 0x140]
jmp 0x4d8c10
mov esi, dword [ecx + 0x14c]
test esi, esi
je 0x4d8bf3
mov eax, dword [esi]
inc dword [ecx + 0x140]
mov dword [ecx + 0x14c], eax
jmp 0x4d8c10
inc dword [ecx + 0x148]
push 0
push 0x34
push ecx
call fcn.004699a0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4d8b05
push 0x34
push 0
push esi
call fcn.004fd610
mov ecx, dword [esp + 0x4c]
or eax, 0xffffffff
mov word [esi + 0x22], ax
add esp, 0xc
mov dword [esi + 0x10], ecx
mov byte [esi], 0x2c
mov eax, dword [ecx + 4]
and eax, 0x400208
or dword [esi + 4], eax
mov ecx, dword [ecx + 0x18]
inc ecx
mov dword [esi + 0x18], ecx
mov eax, dword [ebp]
mov eax, dword [eax + 0x84]
cmp ecx, eax
jle 0x4d8b15
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ebp
call fcn.0049fe60
add esp, 0xc
jmp 0x4d8b15
xor esi, esi
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x58], esi
cmp byte [eax + 0x57], bl
je 0x4d8c83
test esi, esi
je 0x4d90e7
push esi
push eax
jmp 0x4d90d7
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4d8c90
mov dword [eax + 0xc], esi
mov esi, eax
lea eax, [ecx + 1]
push eax
push str.INDEX__d
push 1
push ebp
call fcn.004d0870
push dword [esp + 0x3c]
push 0x20
push 0
push 0
push 0
push esi
mov esi, dword [esp + 0x50]
push esi
push ebp
call fcn.004d61c0
mov ebp, eax
add esp, 0x30
mov dword [esp + 0x3c], ebp
test ebp, ebp
je 0x4d90c3
push 0
lea ecx, [ebp + 0x2f8]
push ecx
push esi
push dword [esp + 0xc8]
call fcn.004da8c0
mov eax, dword [esp + 0xd4]
add esp, 0x10
mov esi, dword [esp + 0x14]
test byte [eax + 0x28], 0x10
jne 0x4d8f89
mov eax, dword [esp + 0x48]
mov edx, esi
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove edx, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], edx
test byte [eax + 0x1c], 0x80
jne 0x4d8dd0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d8d44
push 0
push dword [esp + 0x54]
push dword [esp + 0x2c]
push 0x87
push edi
call fcn.00475980
mov edx, dword [esp + 0x4c]
add esp, 0x14
jmp 0x4d8d77
mov ebx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x50]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ebx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ebx
jg 0x4d8d9c
push edx
push dword [esp + 0x54]
push 0
push dword [esp + 0x28]
push 0x2f
push edi
call fcn.0045bf40
add esp, 0x18
mov ebx, eax
jmp 0x4d8f89
mov ebp, dword [esp + 0x1c]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x50]
mov dword [eax + ecx*4], 0xfd2f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], ebp
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x4d8f85
mov esi, dword [eax + 8]
test esi, esi
je 0x4d8de7
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4d8de7
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4d8dd7
movzx ebp, word [esi + 0x32]
push ebp
push dword [esp + 0xc0]
call fcn.004ac8c0
add esp, 8
mov edx, eax
xor ebx, ebx
mov dword [esp + 0x34], edx
test ebp, ebp
je 0x4d8e2d
mov eax, dword [esi + 4]
lea ecx, [ebx + edx]
push ecx
movsx eax, word [eax + ebx*2]
push eax
push dword [esp + 0x2c]
push dword [esp + 0x74]
push edi
call fcn.004a1100
mov edx, dword [esp + 0x48]
inc ebx
add esp, 0x14
cmp ebx, ebp
jl 0x4d8e07
mov esi, dword [esp + 0x38]
test esi, esi
je 0x4d8e91
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x44], ecx
cmp dword [edi + 0x70], ecx
jg 0x4d8e5e
push ebp
push edx
push 0
push dword [esp + 0x28]
push 0x1d
push edi
call fcn.0045bf40
mov edx, dword [esp + 0x4c]
add esp, 0x18
mov dword [esp + 0x44], eax
jmp 0x4d8e89
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xfd1d
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], ebp
test esi, esi
js 0x4d8f41
mov ecx, dword [edi + 0x6c]
mov ebx, dword [esp + 0x50]
cmp dword [edi + 0x70], ecx
jg 0x4d8eb1
push ebx
push ebp
push edx
push 0x61
push edi
call fcn.00475980
mov edx, dword [esp + 0x48]
add esp, 0x14
jmp 0x4d8ed8
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d8efb
push ebp
push edx
push ebx
push dword [esp + 0x28]
push 0x8a
push edi
call fcn.0045bf40
mov edx, dword [esp + 0x4c]
add esp, 0x18
jmp 0x4d8f26
mov esi, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0xfd8a
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], ebp
test esi, esi
je 0x4d8f41
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4d8f41
lea ecx, [eax + eax*4]
mov ebx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], bx
mov ebx, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
cmp ebp, 1
jne 0x4d8f73
mov ebp, dword [esp + 0x3c]
test edx, edx
je 0x4d8f89
mov ecx, dword [esp + 0xbc]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4d8f89
movzx eax, al
mov dword [ecx + eax*4 + 0xa4], edx
inc byte [ecx + 0x13]
jmp 0x4d8f89
mov eax, dword [esp + 0xbc]
cmp ebp, dword [eax + 0x1c]
jle 0x4d8f85
mov dword [eax + 0x1c], ebp
mov dword [eax + 0x20], edx
mov ebp, dword [esp + 0x3c]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d8fab
push 0
push dword [esp + 0x74]
push dword [esp + 0x80]
push 0xa
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4d8fde
mov edx, dword [esp + 0x78]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x70]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test ebx, ebx
je 0x4d9000
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4d8ff4
mov eax, 0x5751d0
jmp 0x4d8ffd
mov eax, dword [edi + 0x68]
lea ecx, [ebx + ebx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [ebp + 0x30]
mov edx, 1
mov ecx, dword [esp + 0x5c]
test al, 2
cmovne ecx, edx
mov edx, dword [ebp + 0x348]
mov dword [esp + 0x5c], ecx
mov ecx, eax
test dword [edx + 0x2c], 0x200
je 0x4d904d
test esi, esi
je 0x4d9033
mov esi, dword [esp + 0x18]
cmp dword [edx + 0x20], esi
jne 0x4d904d
mov ebx, dword [esp + 0x68]
test byte [ebx + 0x1c], 0x80
je 0x4d9089
mov edx, dword [edx + 0x20]
mov dword [esp + 0x18], edx
mov eax, dword [edx + 0x38]
and al, 3
cmp al, 2
jne 0x4d9055
mov dword [esp + 0x18], 0
test cl, 1
je 0x4d9065
mov eax, dword [esp + 0xc4]
or dword [eax + 0x30], 1
push ebp
call fcn.004d98d0
mov ebp, dword [esp + 0xc0]
add esp, 4
mov ecx, dword [ebp + 0xe8]
test ecx, ecx
jne 0x4d9094
xor eax, eax
mov dword [ebp + 0xe8], eax
jmp 0x4d90ca
mov ecx, eax
mov eax, dword [edx + 0x20]
mov dword [esp + 0x18], eax
jmp 0x4d9055
mov edx, dword [ebp + 8]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4d90af
mov eax, 0x5751d0
mov eax, dword [eax + 8]
mov dword [ebp + 0xe8], eax
jmp 0x4d90ca
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebp + 0xe8], eax
jmp 0x4d90ca
mov ebp, dword [esp + 0xbc]
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4d90df
push eax
push dword [esp + 0x50]
call fcn.004a3d70
add esp, 8
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x24]
mov esi, 0x400
inc ecx
mov dword [esp + 0x14], ecx
cmp ecx, dword [edx + 0xc]
jl 0x4d8b45
mov ecx, dword [ebp + 0xe8]
test ecx, ecx
jne 0x4d910c
xor eax, eax
jmp 0x4d912a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4d911e
mov eax, 0x5751d0
jmp 0x4d9127
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebp + 0xe8], eax
mov ebp, dword [esp + 0xcc]
mov eax, dword [esp + 0x18]
mov dword [ebp + 0x48], eax
test eax, eax
je 0x4d9149
mov eax, dword [esp + 0x2c]
mov dword [ebp + 8], eax
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0x4c]
test eax, eax
je 0x4d9166
push eax
push ebx
mov dword [eax + 0xc], 0
call fcn.004a3d70
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4d9178
mov eax, 0x5751d0
jmp 0x4d9185
mov eax, dword [esp + 0x20]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
push dword [ebp + 0xc]
push edi
call fcn.004d0c00
mov ecx, dword [edi + 0xc]
add esp, 8
mov edx, dword [esp + 0x70]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4d91b2
push edx
push edi
push ecx
call fcn.0048b850
add esp, 0xc
jmp 0x4d91bb
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [edi + 0x6c]
mov dword [ebp + 0x44], eax
mov eax, dword [esp + 0xc4]
cmp byte [eax + 0x2c], 1
jbe 0x4d91db
push dword [esp + 0x28]
push ebx
call fcn.0049da00
add esp, 8
cmp dword [esp + 0x5c], 0
jne 0x4d7ab4
push dword [esp + 0x30]
push ebp
call fcn.0046a690
add esp, 8
jmp 0x4d7ab4
test bl, 0x40
jne 0x4d7aa9
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xcc]
mov esi, dword [esp + 0x24]
push ebp
mov al, byte [ecx + 0x52d9ec]
mov byte [edx + 0x3d], al
movzx eax, byte [ecx + 0x52da3c]
push esi
push eax
push edi
mov dword [edx + 0x40], esi
call fcn.004c6d90
mov ebp, dword [esp + 0xdc]
add esp, 0x10
inc eax
mov dword [ebp + 0x44], eax
mov byte [ebp + 0x3f], 1
jmp 0x4d7ab4
mov ebp, esi
jmp 0x4d7ab4
mov ecx, dword [esp + 0x54]
jmp 0x4d7ab6
mov eax, dword [esp + 0x6c]
mov ebp, dword [esi]
mov al, byte [eax + 0x24]
test al, 0x58
je 0x4d92a3
mov ecx, dword [ebp + 4]
test cl, 3
je 0x4d940a
test al, 8
je 0x4d9279
test cl, 1
je 0x4d940a
push dword [ebp + 0x24]
push dword [esp + 0x78]
call fcn.004dae60
mov ecx, dword [esp + 0xd4]
add esp, 8
and eax, dword [ecx + 0x58]
and edx, dword [ecx + 0x5c]
or eax, edx
jne 0x4d940a
movzx edx, word [esi + 0xa]
jmp 0x4d92aa
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0x58]
cmp eax, 1
jne 0x4d932c
mov eax, dword [ecx + 4]
xorps xmm0, xmm0
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x84], ebx
movlpd qword [esp + 0x8c], xmm0
movlpd qword [esp + 0x94], xmm0
mov dword [esp + 0x88], 0x46da40
mov dword [esp + 0x9c], eax
test ebp, ebp
je 0x4d9314
lea eax, [esp + 0x84]
push ebp
push eax
call fcn.004d5e10
mov ecx, dword [esp + 0xd4]
add esp, 8
cmp word [esp + 0x98], bx
je 0x4d9331
mov eax, 2
mov dword [esp + 0x1c], eax
jmp 0x4d940e
cmp eax, 3
jge 0x4d9357
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x4d9357
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x4d940e
mov eax, 3
mov dword [esp + 0x1c], eax
jmp 0x4d940e
test edx, 0x200
je 0x4d93ca
mov edx, dword [ecx + 0x2c]
test edx, edx
je 0x4d93ca
mov ebx, dword [edi + 0x6c]
mov eax, edx
and edx, 1
shr eax, 1
or edx, 0x10
mov dword [esp + 0x38], eax
cmp dword [edi + 0x70], ebx
jg 0x4d938f
push 0
push 0
push eax
push edx
push edi
call fcn.00475980
add esp, 0x14
mov ebx, eax
jmp 0x4d93ca
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [esp + 0x84]
push ebp
push dword [esp + 0xc8]
call fcn.004a4050
add esp, 0x10
test ebx, ebx
je 0x4d9405
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4d93f9
mov eax, 0x5751d0
jmp 0x4d9402
mov eax, dword [edi + 0x68]
lea ecx, [ebx + ebx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x2c]
add esi, 0x30
mov ebp, dword [esp + 0xcc]
dec edx
mov dword [esp + 0x2c], edx
test edx, edx
jg 0x4d7ae0
mov edx, dword [esp + 0x64]
mov esi, dword [edx + 0x18]
mov ebp, dword [esp + 0xcc]
mov dword [esp + 0x58], eax
test eax, eax
jg 0x4d7ac5
mov ebp, dword [edx + 0x14]
test ebp, ebp
jle 0x4d9570
mov edi, dword [esp + 0xbc]
lea ebx, [esi + 0xc]
mov esi, 0xb
nop dword [eax]
test byte [ebx - 2], 6
jne 0x4d955d
movzx eax, word [ebx]
test al, 0x82
setne cl
bt ax, si
setb al
test al, cl
je 0x4d955d
mov ecx, dword [esp + 0x24]
cmp dword [ebx + 8], ecx
jne 0x4d955d
mov eax, dword [esp + 0x6c]
test byte [eax + 0x24], 0x58
jne 0x4d955d
mov eax, dword [ebx - 0xc]
push 0
push 0x83
push dword [esp + 0xdc]
mov dword [esp + 0x80], eax
push dword [esp + 0xdc]
push dword [ebx + 0xc]
push ecx
push edx
call fcn.004dadc0
mov esi, eax
add esp, 0x1c
test esi, esi
je 0x4d9554
test byte [esi + 0xa], 4
jne 0x4d9554
test byte [esi + 0xc], 1
je 0x4d94f8
mov eax, dword [esi]
test dword [eax + 4], 0x1000
je 0x4d94f8
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4d9554
mov eax, dword [esi]
push 0x10
push dword [esp + 0x84]
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x8c], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esp + 0x9c], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esp + 0xac], xmm0
mov eax, dword [eax + 0x30]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x7c]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x8c]
push eax
push edi
call fcn.004a4050
add esp, 0x10
or word [esi + 0xa], 4
mov edx, dword [esp + 0x64]
mov esi, 0xb
dec ebp
add ebx, 0x30
test ebp, ebp
jg 0x4d9460
mov edi, dword [esp + 0xc0]
mov ebx, dword [esp + 0xcc]
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x38], eax
test eax, eax
je 0x4d9807
movzx eax, byte [ebx + 0x3c]
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0xc4]
mov eax, dword [eax + 4]
mov ecx, dword [eax + ecx*8 + 0x18]
mov dword [esp + 0x74], ecx
test byte [ecx + 0x1c], 0x80
jne 0x4d95f2
mov esi, dword [esp + 0xbc]
mov edx, dword [esi + 0x1c]
mov ebx, dword [esi + 0x20]
cmp edx, 2
jl 0x4d95c5
lea eax, [ebx + 2]
mov dword [esi + 0x20], eax
lea eax, [edx - 2]
mov dword [esi + 0x1c], eax
jmp 0x4d95d1
mov eax, dword [esi + 0x2c]
lea ebx, [eax + 1]
add eax, 2
mov dword [esi + 0x2c], eax
lea eax, [ebx + 1]
push eax
mov eax, dword [esp + 0xd0]
push 0xffffffffffffffff
push dword [eax + 4]
push ecx
push edi
call fcn.004a1100
add esp, 0x14
mov ebp, 1
jmp 0x4d9662
mov esi, dword [ecx + 8]
test esi, esi
je 0x4d9610
nop dword [eax]
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4d9610
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4d9600
movzx ebp, word [esi + 0x32]
lea eax, [ebp + 1]
push eax
push dword [esp + 0xc0]
call fcn.004ac8c0
add esp, 8
mov dword [esp + 0x2c], eax
xor ebx, ebx
test ebp, ebp
je 0x4d965e
inc eax
mov dword [esp + 0x58], eax
add eax, ebx
push eax
mov eax, dword [esi + 4]
movsx eax, word [eax + ebx*2]
push eax
push dword [esp + 0x2c]
push dword [esp + 0x80]
push edi
call fcn.004a1100
mov eax, dword [esp + 0x6c]
inc ebx
add esp, 0x14
cmp ebx, ebp
jl 0x4d9636
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
lea esi, [ebx + 1]
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x2c], edx
mov eax, dword [eax]
mov dword [esp + 0x74], eax
cmp dword [edi + 0x70], edx
jg 0x4d9691
push ebp
push esi
push 0
push eax
push 0x1d
push edi
call fcn.0045bf40
add esp, 0x18
mov dword [esp + 0x2c], eax
jmp 0x4d96bc
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edx, dword [esp + 0x74]
mov dword [eax + ecx*4], 0xfd1d
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], ebp
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d96d4
push ebx
push ebp
push esi
push 0x61
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4d96fb
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x38]
mov ecx, dword [edi + 0x6c]
mov edx, dword [eax]
cmp dword [edi + 0x70], ecx
jg 0x4d971d
push ebp
push esi
push ebx
push edx
push 0x8a
push edi
call fcn.0045bf40
add esp, 0x18
jmp 0x4d9743
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
lea esi, [ebx + 1]
mov dword [eax + ecx*4], 0xfd8a
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], ebp
mov eax, dword [esp + 0x38]
mov ecx, dword [edi + 0x6c]
mov edx, dword [eax + 4]
cmp dword [edi + 0x70], ecx
jg 0x4d9767
push ebp
push esi
push 0
push edx
push 0xb7
push edi
call fcn.0045bf40
add esp, 0x18
jmp 0x4d9791
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
lea esi, [ebx + 1]
mov dword [eax + ecx*4], 0xfdb7
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], ebp
mov edx, dword [edi + 0x6c]
test edx, edx
jle 0x4d97ab
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
mov edx, 0x10
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [edi + 0x6c]
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4d97ba
mov eax, 0x5751d0
jmp 0x4d97c7
mov eax, dword [esp + 0x2c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
inc ebp
mov dword [eax + 8], edx
cmp ebp, 1
jne 0x4d97f1
mov ebp, dword [esp + 0xbc]
test ebx, ebx
je 0x4d9812
mov al, byte [ebp + 0x13]
cmp al, 8
jae 0x4d9812
movzx eax, al
mov dword [ebp + eax*4 + 0xa4], ebx
inc byte [ebp + 0x13]
jmp 0x4d9812
mov eax, dword [esp + 0xbc]
cmp ebp, dword [eax + 0x1c]
jle 0x4d9810
mov dword [eax + 0x1c], ebp
mov ebp, eax
mov dword [ebp + 0x20], ebx
jmp 0x4d9812
mov ebp, dword [esp + 0xbc]
jmp 0x4d9819
mov ebp, eax
mov ebx, dword [esp + 0xcc]
mov ecx, dword [ebx]
test ecx, ecx
je 0x4d983e
mov eax, dword [edi + 0x6c]
push ecx
push 1
push 0x47
push edi
mov dword [ebx + 0x1c], eax
call fcn.004c6d90
add esp, 0x10
cmp dword [ebx + 0x38], 0
je 0x4d985e
mov esi, dword [ebx + 0x38]
jmp 0x4d9845
mov esi, dword [ebx + 0x38]
test esi, esi
je 0x4d98b6
push dword [esi + 8]
push 0
push 0x4a
push edi
call fcn.004c6d90
mov eax, dword [edi + 0x6c]
add esp, 0x10
mov dword [esi + 0xc], eax
inc byte [ebp + 0x1a]
mov edx, dword [esp + 0x64]
xor edi, edi
mov esi, dword [edx + 0x18]
cmp dword [edx + 0x14], edi
jle 0x4d98b6
nop dword [eax]
test byte [esi + 0xa], 6
jne 0x4d98ad
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x58]
and eax, dword [ebx + 0x5c]
or ecx, eax
jne 0x4d98ad
mov eax, dword [esp + 0x6c]
test byte [eax + 0x24], 0x40
jne 0x4d98ad
push 0x10
push dword [esp + 0x84]
push dword [esi]
push ebp
call fcn.004a4050
mov edx, dword [esp + 0x74]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0x14]
jl 0x4d9870
mov eax, dword [ebx + 0x58]
mov edx, dword [ebx + 0x5c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa8
ret