Function at 0x4d1550
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
push ebx
push esi
push edi
mov edi, dword [ebp + 0x14]
mov ebx, ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ebx
mov al, byte [edi]
mov esi, dword [ebx + 8]
mov byte [esp + 0xf], al
movzx eax, al
mov dword [esp + 0x38], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x34], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 0
test ecx, ecx
je 0x4d1599
movzx ecx, byte [ecx + 1]
jmp 0x4d159b
xor ecx, ecx
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x30], ecx
test eax, eax
je 0x4d15b0
cmp dword [eax], 0
jne 0x4d1608
xor eax, eax
mov dword [ebp + 0xc], eax
test ecx, ecx
jne 0x4d1608
mov edx, dword [edx + 0xc]
test edx, edx
jle 0x4d1608
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d15da
push 1
push dword [ebp + 0x18]
mov ecx, esi
push edx
mov edx, 0x31
call fcn.004845f0
add esp, 0xc
jmp 0x4d1608
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp + 0x18]
mov dword [eax + ecx*4], 0x31
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 1
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x18]
mov edi, dword [edi + 0xc]
mov dword [esp + 0x20], edi
mov eax, dword [edx + 0x1c]
mov edx, dword [eax]
mov dword [esp + 0x10], edx
test edi, edi
jne 0x4d1657
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x4d163c
mov eax, dword [ecx]
test byte [ecx + 0x20], 1
mov eax, dword [eax]
lea edi, [eax + 1]
cmovne edi, eax
add dword [ebx + 0x2c], edi
mov dword [esp + 0x24], edi
mov eax, dword [ebx + 0x2c]
mov esi, dword [ebp + 0x14]
lea edi, [eax + 1]
add eax, edx
mov dword [esi + 0xc], edi
mov esi, dword [esp + 0x34]
mov dword [esp + 0x20], edi
mov dword [ebx + 0x2c], eax
jmp 0x4d166e
mov ecx, dword [ebx + 0x2c]
lea eax, [edi + edx]
cmp eax, ecx
jle 0x4d166b
lea eax, [ecx + edx]
mov dword [esp + 0x20], edi
mov dword [ebx + 0x2c], eax
mov ecx, dword [ebp + 0xc]
cmp dword [ebp + 8], 0
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x28], edi
mov dword [eax + 0x10], edx
jl 0x4d16e9
test edx, edx
jle 0x4d181b
xor ebx, ebx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d16ad
lea eax, [edi + ebx]
mov edx, 0x5d
push eax
push ebx
push dword [ebp + 8]
mov ecx, esi
call fcn.004845f0
mov edx, dword [esp + 0x1c]
add esp, 0xc
jmp 0x4d16db
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x5d
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0x10], 0
lea ecx, [eax + ecx*4]
mov eax, dword [ebp + 8]
mov dword [ecx + 4], eax
lea eax, [edi + ebx]
mov dword [ecx + 0xc], eax
inc ebx
cmp ebx, edx
jl 0x4d1688
mov ebx, dword [esp + 0x1c]
jmp 0x4d181b
mov ah, byte [esp + 0xf]
cmp ah, 3
je 0x4d181b
cmp ah, 0xa
je 0x4d1709
cmp ah, 9
je 0x4d1709
cmp ah, 0xd
je 0x4d1709
xor al, al
jmp 0x4d170b
mov al, 1
mov byte [esp + 0x2c], al
test ecx, ecx
je 0x4d17d2
cmp dword [esp + 0x30], 0
jne 0x4d17d2
cmp ah, 0xc
je 0x4d17d2
cmp ah, 0xe
je 0x4d17d2
or al, 0xc
mov byte [esp + 0x2c], al
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x40], eax
cmp eax, dword [ecx]
jge 0x4d178d
mov edi, dword [ebp + 0xc]
mov ebx, eax
lea esi, [ebx + ebx*4]
shl esi, 2
movzx eax, word [esi + ecx + 0x18]
test eax, eax
je 0x4d1773
lea ecx, [eax + eax*4]
mov dx, bx
mov eax, dword [esp + 0x18]
sub dx, word [edi + 4]
inc dx
mov eax, dword [eax + 0x1c]
mov word [eax + ecx*4 + 4], dx
mov ecx, dword [edi]
inc ebx
add esi, 0x14
cmp ebx, dword [ecx]
jl 0x4d1752
mov esi, dword [esp + 0x34]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x1c]
mov eax, dword [ecx]
mov dword [esp + 0x3c], eax
test eax, eax
jle 0x4d17d2
lea esi, [ecx + 0x18]
mov ebx, edi
movzx ecx, word [esi]
lea esi, [esi + 0x14]
xor eax, eax
test cx, cx
cmove eax, ebx
mov ebx, eax
lea eax, [edx - 1]
cmove eax, edx
sub dword [esp + 0x3c], 1
mov edx, eax
jne 0x4d17a3
mov esi, dword [esp + 0x34]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x18]
mov al, byte [esp + 0x2c]
mov dword [esp + 0x48], edi
mov byte [esp + 0x4c], al
cmp dword [ecx + 8], 0
je 0x4d1807
test al, 8
je 0x4d1807
cmp dword [esp + 0x24], 0
jle 0x4d1807
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x48]
mov dword [esp + 0x28], 0
mov dword [eax + 0x24], edx
jmp 0x4d181f
push dword [esp + 0x2c]
mov edx, dword [ecx + 0x1c]
mov ecx, ebx
push 0
push edi
call fcn.004a3980
add esp, 0xc
mov ecx, dword [esp + 0x18]
cmp dword [esp + 0x30], 0
je 0x4d1887
push dword [esp + 0x20]
mov eax, dword [ebp + 0x10]
push dword [ecx + 0x1c]
mov ecx, ebx
push dword [ebp + 0x18]
movzx edi, byte [eax + 1]
push dword [eax + 4]
mov edx, edi
call fcn.004d10c0
mov ecx, dword [ebp + 0x10]
mov edx, edi
push dword [ecx + 8]
mov ecx, ebx
push eax
call fcn.004d1460
mov eax, dword [ebp + 0xc]
add esp, 0x18
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x4d18db
mov edi, dword [edx + 0xc]
test edi, edi
jle 0x4d18db
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d18a3
push 1
push dword [ebp + 0x18]
lea edx, [eax + 0x31]
mov ecx, esi
push edi
call fcn.004845f0
mov edi, dword [esp + 0x2c]
add esp, 0xc
mov edx, dword [esp + 0x18]
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x38]
dec ecx
cmp ecx, 0xe
ja case.0x4d189c.4
jmp dword [ecx*4 + 0x4d257c]
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp + 0x18]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x31
mov dword [eax + ecx*4 + 0xc], 1
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d188b
mov edi, dword [esp + 0x20]
jmp 0x4d188e
mov al, byte [ebx + 0x13]
test al, al
jne 0x4d18f0
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x4d18ff
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x2c], eax
cmp dword [esi + 0x78], ecx
jg 0x4d1926
push eax
push dword [esp + 0x14]
mov edx, 0x60
mov ecx, esi
push edi
call fcn.004845f0
mov edx, dword [esp + 0x38]
add esp, 0xc
jmp 0x4d1955
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x40], ecx
cmp dword [esi + 0x78], ecx
jg 0x4d197a
push edi
push edx
push dword [esp + 0x1c]
mov edx, 0x89
mov ecx, esi
call fcn.004845f0
add esp, 0xc
mov ecx, eax
jmp 0x4d19ad
mov ebx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4d19c8
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x10]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je case.0x4d189c.4
mov al, byte [ebx + 0x13]
cmp al, 8
jae case.0x4d189c.4
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ecx
inc byte [ebx + 0x13]
jmp case.0x4d189c.4
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1a16
push dword [esp + 0x10]
mov edx, 0x8b
mov ecx, esi
push edi
push dword [esp + 0x1c]
call fcn.004845f0
add esp, 0xc
jmp case.0x4d189c.4
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x8b
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp case.0x4d189c.4
mov edx, dword [esp + 0x24]
inc edx
cmp edx, 1
jne 0x4d1a7c
mov al, byte [ebx + 0x13]
test al, al
jne 0x4d1a67
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x20], eax
jmp 0x4d1aa2
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov dword [esp + 0x20], eax
jmp 0x4d1aa2
mov ecx, dword [ebx + 0x20]
mov dword [esp + 0x20], ecx
cmp edx, dword [ebx + 0x1c]
jg 0x4d1a93
sub dword [ebx + 0x1c], edx
lea eax, [edx + ecx]
mov dword [ebx + 0x20], eax
jmp 0x4d1aa2
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x20], ecx
mov dword [ebx + 0x2c], eax
mov eax, dword [esp + 0x20]
add eax, dword [esp + 0x24]
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x34], eax
cmp dword [esi + 0x78], ecx
jg 0x4d1acd
push eax
push dword [esp + 0x14]
mov edx, 0x60
mov ecx, esi
push edi
call fcn.004845f0
add esp, 0xc
jmp 0x4d1afc
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0xf], 5
jne 0x4d1c05
mov ecx, dword [esi + 0x74]
mov edx, dword [esp + 0x14]
inc edx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x38], edx
lea eax, [ecx + 4]
mov dword [esp + 0x3c], eax
cmp dword [esi + 0x78], ecx
jg 0x4d1b40
push dword [esp + 0x20]
mov ecx, esi
push eax
push edx
mov edx, 0x1f
call fcn.004845f0
mov edx, dword [esp + 0x2c]
add esp, 0xc
mov ecx, eax
jmp 0x4d1b77
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4d1b92
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x40], ecx
cmp dword [esi + 0x78], ecx
jg 0x4d1bb7
push edi
push edx
push dword [esp + 0x40]
mov edx, 0x89
mov ecx, esi
call fcn.004845f0
add esp, 0xc
mov ecx, eax
jmp 0x4d1bea
mov ebx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4d1c05
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x10]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4d1c2f
push dword [esp + 0x24]
mov edx, eax
mov ecx, ebx
push 1
push dword [esp + 0x30]
push dword [esp + 0x40]
push dword [esp + 0x28]
call fcn.004d0870
add esp, 0x14
jmp 0x4d1d1d
mov al, byte [ebx + 0x13]
test al, al
jne 0x4d1c3e
inc dword [ebx + 0x2c]
mov edi, dword [ebx + 0x2c]
jmp 0x4d1c4d
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov edi, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1c71
push 0
push edi
push dword [esp + 0x1c]
mov edx, 0x7e
mov ecx, esi
call fcn.004845f0
mov edx, dword [esp + 0x20]
add esp, 0xc
jmp 0x4d1ca0
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x7e
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1cbf
push edi
push dword [esp + 0x24]
mov ecx, esi
push edx
mov edx, 0x7f
call fcn.004845f0
add esp, 0xc
jmp 0x4d1cee
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x7f
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4d1d05
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
test edi, edi
je 0x4d1d1d
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4d1d1d
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edi
inc byte [ebx + 0x13]
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jne 0x4d1d30
mov ecx, dword [esp + 0x20]
jmp 0x4d19cc
cmp eax, dword [ebx + 0x1c]
jle case.0x4d189c.4
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x20]
mov dword [ebx + 0x20], eax
jmp case.0x4d189c.4
test eax, eax
jne 0x4d2035
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
mov dword [esp + 0x34], eax
mov al, byte [ebx + 0x13]
test al, al
jne 0x4d1d69
inc dword [ebx + 0x2c]
mov ebx, dword [ebx + 0x2c]
jmp 0x4d1d78
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov ebx, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1d97
push 0
push dword [ebp + 0x1c]
mov edx, 0x32
mov ecx, esi
push edi
call fcn.004845f0
add esp, 0xc
jmp 0x4d1dc5
mov edx, dword [ebp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x10]
mov ecx, dword [esi + 0x74]
shr eax, 0x1f
sub edx, eax
add eax, edi
mov dword [esp + 0x40], eax
cmp dword [esi + 0x78], ecx
jg 0x4d1df4
push ebx
push edx
push eax
mov edx, 0x60
mov ecx, esi
call fcn.004845f0
add esp, 0xc
jmp 0x4d1e23
mov edi, dword [esp + 0x40]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x34], 0
mov edx, dword [esi + 0x74]
mov eax, dword [esi + 0x78]
jge 0x4d1e7e
cmp eax, edx
jg 0x4d1e4e
push edi
push ebx
push dword [esp + 0x1c]
mov edx, 0x7f
mov ecx, esi
call fcn.004845f0
add esp, 0xc
jmp 0x4d2516
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x7f
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d2516
cmp eax, edx
jg 0x4d1e9b
push edi
push ebx
push dword [esp + 0x1c]
mov edx, 0x89
mov ecx, esi
call fcn.004845f0
add esp, 0xc
mov edx, eax
jmp 0x4d1eca
mov edi, dword [esp + 0x14]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4d2516
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x34]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x4d2516
test eax, eax
jne 0x4d2035
mov al, byte [ebx + 0x13]
test al, al
jne 0x4d1f05
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
jmp 0x4d1f14
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov ecx, dword [ebx + eax*4 + 0x98]
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x10]
push eax
mov dword [esp + 0x30], ecx
push dword [edx + 0x14]
mov edx, 0x60
push ecx
push eax
push edi
mov ecx, esi
call fcn.00484990
mov edx, dword [esi + 0x74]
add esp, 0x14
cmp dword [esi + 0x78], edx
jg 0x4d1f5a
push edi
mov edi, dword [esp + 0x30]
mov edx, 0x89
push edi
push dword [esp + 0x1c]
mov ecx, esi
call fcn.004845f0
add esp, 0xc
mov edx, eax
jmp 0x4d1f91
mov ebx, dword [esp + 0x14]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4d1fac
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x10]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
test edi, edi
je 0x4d2516
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4d2516
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edi
inc byte [ebx + 0x13]
jmp 0x4d2516
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1ff5
push 0
push dword [esp + 0x18]
mov edx, 0x47
mov ecx, esi
push 1
call fcn.004845f0
add esp, 0xc
jmp case.0x4d189c.4
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp case.0x4d189c.4
test eax, eax
je 0x4d2516
push dword [esp + 0x24]
mov ecx, ebx
push dword [esp + 0x14]
push dword [esp + 0x30]
push edi
push edx
mov edx, eax
call fcn.004d0870
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test eax, eax
jne 0x4d2035
cmp byte [esp + 0xf], 0xd
mov ecx, dword [esi + 0x74]
mov eax, dword [esi + 0x78]
jne 0x4d20be
mov edx, dword [ebp + 0x14]
mov edx, dword [edx + 4]
cmp eax, ecx
jg 0x4d208a
push 0
push 0
push edx
mov edx, 0xe
mov ecx, esi
call fcn.004845f0
add esp, 0xc
jmp 0x4d2516
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d2516
cmp eax, ecx
jg 0x4d20dd
push 0
push dword [esp + 0x14]
mov edx, 0x53
mov ecx, esi
push edi
call fcn.004845f0
add esp, 0xc
jmp 0x4d2516
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x53
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
jmp 0x4d20a9
mov eax, dword [ebp + 0x14]
mov cl, byte [ebx + 0x13]
mov dword [esp + 0x3c], 0
mov eax, dword [eax + 0x18]
mov dword [esp + 0x44], eax
mov edx, dword [eax]
mov dword [esp + 0x30], edx
test cl, cl
jne 0x4d2126
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebx + 0x2c], eax
jmp 0x4d2135
dec cl
movzx eax, cl
mov byte [ebx + 0x13], cl
mov eax, dword [ebx + eax*4 + 0x98]
add edx, 2
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], edx
cmp edx, 1
jne 0x4d216a
test cl, cl
jne 0x4d2155
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x24], eax
jmp 0x4d2190
dec cl
movzx eax, cl
mov byte [ebx + 0x13], cl
mov eax, dword [ebx + eax*4 + 0x98]
mov dword [esp + 0x24], eax
jmp 0x4d2190
mov ecx, dword [ebx + 0x20]
mov dword [esp + 0x24], ecx
cmp edx, dword [ebx + 0x1c]
jg 0x4d2181
sub dword [ebx + 0x1c], edx
lea eax, [edx + ecx]
mov dword [ebx + 0x20], eax
jmp 0x4d2190
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x24], ecx
mov dword [ebx + 0x2c], eax
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x30]
mov dword [esp + 0x40], eax
lea ecx, [eax + 1]
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x2c], ecx
cmp byte [esp + 0xf], 6
mov dword [esp + 0x38], eax
jne 0x4d222c
mov edx, dword [esi + 0x74]
mov dword [esp + 0x3c], edx
cmp dword [esi + 0x78], edx
jg 0x4d21da
push edi
push 0
push eax
mov edx, 0x1f
mov ecx, esi
call fcn.004845f0
mov edx, eax
add esp, 0xc
mov dword [esp + 0x3c], edx
jmp 0x4d220d
mov ebx, dword [esp + 0x38]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4d2228
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x10]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4d224f
push ecx
push dword [esp + 0x14]
mov edx, 0x60
mov ecx, esi
push edi
call fcn.004845f0
mov edx, dword [esp + 0x38]
add esp, 0xc
jmp 0x4d227e
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0xf], 6
jne 0x4d22ef
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d22a5
push 0
push edx
push dword [esp + 0x40]
mov edx, 0x89
mov ecx, esi
call fcn.004845f0
add esp, 0xc
jmp 0x4d22d8
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4d22ef
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
cmp dword [esp + 0x30], 0
jle 0x4d2370
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x24]
add eax, 0x18
mov dword [esp + 0x38], eax
movzx eax, word [eax]
lea edx, [edi - 1]
mov ecx, dword [esi + 0x74]
add edx, eax
cmp dword [esi + 0x78], ecx
jg 0x4d232a
push 0
push ebx
push edx
mov edx, 0x50
mov ecx, esi
call fcn.004845f0
add esp, 0xc
jmp 0x4d2359
mov edi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x50
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x38]
inc ebx
add eax, 0x14
sub dword [esp + 0x30], 1
mov dword [esp + 0x38], eax
jne 0x4d2305
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esi + 0x74]
mov edx, dword [esp + 0x40]
mov edi, dword [esp + 0x14]
cmp dword [esi + 0x78], ecx
jg 0x4d2395
push 0
push edx
push edi
mov edx, 0x7d
mov ecx, esi
call fcn.004845f0
add esp, 0xc
jmp 0x4d23c0
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x7d
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d23e9
push dword [esp + 0x28]
mov edx, 0x60
mov ecx, esi
push dword [esp + 0x38]
push dword [esp + 0x2c]
call fcn.004845f0
mov edx, dword [esp + 0x30]
add esp, 0xc
jmp 0x4d2420
mov ebx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov edx, dword [esp + 0x24]
lea ecx, [ecx + ecx*4]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x28]
mov dword [eax + ecx*4 + 0xc], ebx
mov ebx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x44], ecx
cmp dword [esi + 0x78], ecx
jg 0x4d2449
push edx
push dword [esp + 0x2c]
mov edx, 0x89
mov ecx, esi
push edi
call fcn.004845f0
mov edx, dword [esp + 0x30]
add esp, 0xc
mov ecx, eax
jmp 0x4d247c
mov ebx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x44]
mov eax, dword [esi]
mov edi, dword [esp + 0x34]
cmp byte [eax + 0x57], 0
jne 0x4d2497
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x4d24ca
mov eax, dword [esi + 0x74]
mov dword [esp + 0x44], eax
jns 0x4d24ab
lea ecx, [eax - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4d24ba
mov eax, 0x5abde4
jmp 0x4d24c3
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x4d24e6
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4d24e6
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ecx
inc byte [ebx + 0x13]
cmp edi, 1
jne 0x4d2505
test edx, edx
je case.0x4d189c.4
mov al, byte [ebx + 0x13]
cmp al, 8
jae case.0x4d189c.4
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edx
inc byte [ebx + 0x13]
jmp case.0x4d189c.4
cmp edi, dword [ebx + 0x1c]
jle case.0x4d189c.4
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x20], edx
cmp dword [ebp + 0xc], 0
jne 0x4d2573
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 8]
test edx, edx
je 0x4d2573
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d2545
push 0
push dword [ebp + 0x1c]
mov ecx, esi
push edx
mov edx, 0x3c
call fcn.004845f0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp + 0x1c]
mov dword [eax + ecx*4], 0x3c
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret