Function at 0x4ca500
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8c
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x70], 0
mov dword [esp + 0x28], 0
mov esi, dword [edi + 0xc]
mov ecx, esi
mov ebx, dword [edi]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x3c], esi
call fcn.004a0600
mov ecx, esi
mov dword [esp + 0x58], eax
call fcn.004a0600
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x6c], eax
mov al, byte [ecx + 4]
mov byte [esp + 0x13], al
cmp byte [esp + 0x13], 0x70
mov eax, dword [ecx + 0x1c]
mov dword [esp + 0x48], eax
mov eax, dword [ecx + 0x18]
mov dword [esp + 0x30], eax
mov edx, dword [eax]
mov dword [esp + 0x40], edx
je 0x4ca654
cmp byte [ebx + 0x1e], 0
mov edi, 1
jne 0x4ca650
lea eax, [edx + edx*4]
shl eax, 2
mov dword [esp + 0x24], eax
nop
mov eax, dword [ecx]
cmp edi, dword [eax]
jg 0x4ca650
mov eax, dword [esp + 0x30]
xor ecx, ecx
mov eax, dword [eax + 0xc]
test edx, edx
jle 0x4ca5c7
mov ebx, dword [esp + 0x40]
lea edx, [eax + 0xe]
mov edi, edi
movzx eax, word [edx]
cmp eax, edi
je 0x4ca5bf
inc ecx
add edx, 0x14
cmp ecx, ebx
jl 0x4ca5b0
mov ebx, dword [esp + 0x60]
mov edx, dword [esp + 0x40]
cmp ecx, edx
jne 0x4ca634
lea eax, [esp + 0x64]
mov dword [esp + 0x64], 0
push 0
push eax
mov edx, 0x81
mov dword [esp + 0x70], 0
mov ecx, ebx
call fcn.004ac420
add esp, 8
test eax, eax
je 0x4ca644
mov edx, dword [esp + 0x30]
mov ecx, 0x800
or word [eax + 2], cx
mov ecx, dword [esp + 0x2c]
push eax
mov dword [eax + 4], edi
call fcn.004ad8a0
mov edx, dword [esp + 0x44]
mov ecx, eax
mov dword [esp + 0x34], ecx
inc edx
add esp, 4
mov dword [esp + 0x40], edx
mov eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x24]
mov word [eax + ecx + 0xe], di
add ecx, 0x14
mov dword [esp + 0x24], ecx
inc edi
cmp byte [ebx + 0x1e], 0
jne 0x4ca650
mov ecx, dword [esp + 0x20]
jmp 0x4ca590
mov eax, 7
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [esp + 0x2c]
lea ecx, [edx*4]
test ebx, ebx
je 0x4ca6f8
cmp byte [ebx + 0x1e], 0
je 0x4ca6b1
mov dword [esp + 0x5c], 0
mov dword [esp + 0x54], 0
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
mov edx, eax
push 0
mov dword [ecx + 0x18], eax
mov ecx, dword [edi]
call fcn.004ad110
mov ecx, dword [esp + 0x4c]
add esp, 4
cmp byte [esp + 0x13], 0x70
mov dword [ecx + 0x18], eax
jne 0x4ca8d0
mov dword [esp + 0x44], 0
jmp 0x4cab0b
cmp byte [ebx + 0xe2], 0
je 0x4ca6f8
movzx eax, word [ebx + 0xe0]
cmp ecx, eax
jg 0x4ca6f8
mov eax, dword [ebx + 0xec]
mov dword [esp + 0x5c], eax
test eax, eax
je 0x4ca6f8
mov eax, dword [eax]
mov dword [ebx + 0xec], eax
mov eax, dword [ebx + 0xe4]
inc eax
mov dword [ebx + 0xe4], eax
cmp eax, dword [ebx + 0xe8]
jle 0x4ca71d
mov dword [ebx + 0xe8], eax
jmp 0x4ca71d
push ecx
call fcn.004900b0
add esp, 4
mov dword [esp + 0x5c], eax
test eax, eax
jne 0x4ca719
test ebx, ebx
je 0x4ca711
mov byte [ebx + 0x1e], 1
test eax, eax
je 0x4ca671
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x30]
xor ecx, ecx
mov eax, dword [eax + 0xc]
test edx, edx
jle 0x4ca748
mov esi, dword [esp + 0x5c]
lea edi, [eax + 0xe]
movzx eax, word [edi]
lea edi, [edi + 0x14]
dec eax
mov dword [esi + ecx*4], eax
inc ecx
cmp ecx, edx
jl 0x4ca731
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x2c]
lea ecx, [edx + 4]
lea ecx, [edx + ecx*4]
test ebx, ebx
je 0x4ca7a5
cmp byte [ebx + 0x1e], 0
jne 0x4ca671
cmp byte [ebx + 0xe2], 0
je 0x4ca7a5
movzx eax, word [ebx + 0xe0]
cmp ecx, eax
jg 0x4ca7a5
mov eax, dword [ebx + 0xec]
mov dword [esp + 0x54], eax
test eax, eax
je 0x4ca7a5
mov ecx, eax
mov eax, dword [ecx]
mov dword [ebx + 0xec], eax
mov eax, dword [ebx + 0xe4]
inc eax
mov dword [ebx + 0xe4], eax
cmp eax, dword [ebx + 0xe8]
jle 0x4ca7cc
mov dword [ebx + 0xe8], eax
jmp 0x4ca7cc
push ecx
call fcn.004900b0
mov ecx, eax
add esp, 4
mov dword [esp + 0x54], ecx
test ecx, ecx
jne 0x4ca7c8
test ebx, ebx
je 0x4ca7c0
mov byte [ebx + 0x1e], 1
test ecx, ecx
je 0x4ca679
mov edx, dword [esp + 0x40]
lea eax, [edx + 3]
mov word [ecx + 6], dx
lea eax, [ecx + eax*4]
mov dword [ecx + 8], eax
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0xc]
mov al, byte [eax + 0x49]
mov byte [ecx + 4], al
xor ecx, ecx
mov dword [esp + 0x14], ecx
test edx, edx
jle 0x4ca679
mov eax, dword [esp + 0x54]
xor esi, esi
mov ebx, dword [esp + 0x30]
add eax, 0xc
mov dword [esp + 0x1c], esi
mov dword [esp + 0x38], eax
jmp 0x4ca810
mov eax, dword [ebx + 0xc]
mov edi, 0x100
mov eax, dword [esi + eax]
mov dword [esp + 0x24], eax
test word [eax + 2], di
mov edi, dword [esp + 0x2c]
je 0x4ca82e
mov eax, dword [eax + 0x14]
jmp 0x4ca889
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x5c]
mov edx, dword [esi + 0x1c]
mov ecx, dword [eax + ecx*4]
mov dword [esp + 0x18], ecx
test edx, edx
je 0x4ca859
push ecx
mov ecx, edi
call fcn.004c8470
add esp, 4
test eax, eax
jne 0x4ca871
mov ecx, dword [esp + 0x18]
jmp 0x4ca85b
xor eax, eax
mov edx, dword [esi]
cmp ecx, dword [edx]
jge 0x4ca871
mov edx, dword [edx + 0xc]
lea eax, [ecx + ecx*4]
mov ecx, edi
mov edx, dword [edx + eax*4]
call fcn.004ac000
mov ecx, dword [esp + 0x24]
mov edx, 0x100
mov esi, dword [esp + 0x1c]
or word [ecx + 2], dx
mov edx, dword [esp + 0x40]
mov dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x38]
add dword [esp + 0x38], 4
mov dword [ecx], eax
mov eax, dword [ebx + 0xc]
mov ecx, dword [esp + 0x54]
mov al, byte [esi + eax + 0xc]
mov esi, dword [esp + 0x14]
mov ecx, dword [ecx + 8]
mov byte [esi + ecx], al
mov ecx, esi
mov esi, dword [esp + 0x1c]
inc ecx
add esi, 0x14
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], esi
cmp ecx, edx
jl 0x4ca810
mov esi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x60]
jmp 0x4ca679
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [esp + 0x38], eax
lea ecx, [eax + 1]
mov eax, dword [edi + 0x3c]
mov dword [esp + 0x44], eax
mov eax, dword [edi + 0x38]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], eax
cmp ecx, eax
jg 0x4ca944
xor edx, edx
lea ecx, [edi + 0x70]
lea ebx, [ebx]
mov ebx, dword [esp + 0x44]
cmp dword [ecx], ebx
mov ebx, dword [esp + 0x60]
jl 0x4ca91f
mov esi, dword [esp + 0x44]
dec esi
add eax, esi
mov esi, dword [esp + 0x3c]
cmp dword [ecx], eax
jle 0x4ca940
mov eax, dword [esp + 0x24]
inc edx
add ecx, 0x18
cmp edx, 0xa
jl 0x4ca900
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x14]
mov dword [edi + 0x3c], eax
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x14]
mov dword [edi + 0x38], eax
jmp 0x4ca953
mov ecx, dword [esp + 0x14]
mov eax, dword [edi + 0x48]
lea edx, [eax + 1]
add eax, ecx
mov dword [esp + 0x44], edx
mov dword [edi + 0x48], eax
mov ecx, dword [esi + 0xc]
mov eax, ecx
mov dword [esp + 0x18], ecx
cmp dword [esi + 0x10], ecx
jg 0x4ca973
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4ca9ac
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x44]
lea ecx, [ecx + ecx*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 7
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov eax, dword [esp + 0x38]
lea edx, [eax + 4]
lea edx, [eax + edx*4]
mov dword [esp + 0x18], edx
test ebx, ebx
je 0x4caa1c
cmp byte [ebx + 0x1e], 0
je 0x4ca9d1
mov dword [esp + 0x28], 0
jmp 0x4cab07
cmp byte [ebx + 0xe2], 0
je 0x4caa1c
movzx eax, word [ebx + 0xe0]
cmp edx, eax
jg 0x4caa1c
mov ecx, dword [ebx + 0xec]
mov dword [esp + 0x1c], ecx
test ecx, ecx
je 0x4caa1c
mov eax, dword [ecx]
mov dword [ebx + 0xec], eax
mov eax, dword [ebx + 0xe4]
inc eax
mov dword [ebx + 0xe4], eax
cmp eax, dword [ebx + 0xe8]
jle 0x4caa16
mov dword [ebx + 0xe8], eax
mov dword [esp + 0x28], ecx
jmp 0x4caa47
push edx
call fcn.004900b0
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
jne 0x4caa35
test ebx, ebx
je 0x4caa35
mov byte [ebx + 0x1e], 1
mov dword [esp + 0x1c], eax
mov ecx, eax
test eax, eax
je 0x4cab03
mov edx, dword [esp + 0x18]
push edx
push 0
push ecx
call fcn.004e14f0
mov edx, dword [esp + 0x44]
add esp, 0xc
mov ecx, dword [esp + 0x1c]
lea eax, [edx + 3]
mov word [ecx + 6], dx
lea eax, [ecx + eax*4]
mov dword [ecx + 8], eax
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0xc]
mov al, byte [eax + 0x49]
mov byte [ecx + 4], al
test edx, edx
jle 0x4cab07
mov esi, dword [esp + 0x20]
lea eax, [ecx + 0xc]
mov dword [esp + 0x24], eax
xor ebx, ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], 0
mov dword [esp + 0x28], eax
lea esp, [esp]
mov edx, dword [esi + 0x1c]
test edx, edx
je 0x4caabc
push ebx
mov ecx, edi
call fcn.004c8470
mov ecx, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x4caad9
jmp 0x4caabe
xor eax, eax
mov edx, dword [esi]
cmp ebx, dword [edx]
jge 0x4caad9
mov edx, dword [edx + 0xc]
mov ecx, edi
mov eax, dword [esp + 0x14]
mov edx, dword [edx + eax]
call fcn.004ac000
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
add dword [esp + 0x14], 0x14
mov dword [edx], eax
add edx, 4
mov eax, dword [ecx + 8]
mov dword [esp + 0x24], edx
mov byte [ebx + eax], 0
inc ebx
cmp ebx, dword [esp + 0x38]
jl 0x4caaa0
mov esi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x60]
jmp 0x4cab07
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x20]
mov edx, eax
push str.ORDER
mov dword [eax + 0x1c], 0
mov dword [ecx + 0x24], 0
mov ecx, edi
push dword [eax + 0x18]
call fcn.004ab870
mov eax, dword [esp + 0x50]
add esp, 8
cmp dword [eax + 0x1c], 0
jne 0x4cab4f
push str.ORDER
push dword [eax + 0x18]
mov edx, eax
mov ecx, edi
call fcn.004ab870
add esp, 8
mov edx, dword [esp + 0x20]
cmp dword [edx + 0x30], 0
jne 0x4caf25
mov ecx, edi
call fcn.004af620
cmp dword [edx + 0x28], 0
je 0x4caf25
mov ecx, dword [edi + 0x48]
mov eax, dword [esp + 0x2c]
inc ecx
mov dword [edi + 0x48], ecx
mov dword [edx + 0x30], ecx
mov edi, dword [edi + 0xc]
mov dword [esp + 0x34], ecx
test edi, edi
jne 0x4caba7
mov ecx, dword [eax]
call fcn.004a03e0
mov edx, dword [esp + 0x20]
mov edi, eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
mov dword [eax + 0xc], edi
test edi, edi
je 0x4caf15
mov edx, dword [edx + 0x28]
push ecx
mov ecx, eax
call fcn.004b1890
mov ecx, dword [edi + 0xc]
add esp, 4
mov eax, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x10], ecx
jg 0x4cabd9
mov ecx, edi
call fcn.004a04a0
test eax, eax
jne 0x4cad29
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
lea ecx, [ecx + ecx*4]
inc eax
mov dword [edi + 0xc], eax
mov eax, dword [edi + 0x14]
mov word [eax + ecx*4], 0x15
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [edi + 0x6e]
mov byte [eax], 0
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x10], ecx
jg 0x4cac33
mov ecx, edi
mov dword [esp + 0x14], eax
call fcn.004a04a0
test eax, eax
jne 0x4cac71
mov ecx, dword [esp + 0x18]
mov eax, dword [edi + 0x14]
lea ecx, [ecx + ecx*4]
inc dword [edi + 0xc]
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x58]
mov word [eax + ecx*4], 0x72
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [edi + 0x6e]
mov dword [esp + 0x14], eax
mov byte [eax], 0
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0x2c], 0
je 0x4caf1f
mov eax, dword [esp + 0x2c]
inc dword [eax + 0x48]
mov edx, dword [eax + 0x48]
mov dword [ecx + 0x34], edx
inc dword [eax + 0x48]
mov dword [esp + 0x1c], edx
push edx
mov edx, dword [ecx + 0x2c]
mov ecx, eax
call fcn.004b1890
mov ecx, dword [edi + 0xc]
add esp, 4
mov edx, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x10], ecx
jg 0x4cacc8
mov ecx, edi
call fcn.004a04a0
test eax, eax
jne 0x4cad06
mov edx, dword [edi + 0xc]
lea eax, [edi + 0x6e]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], eax
lea eax, [edx + 1]
mov edx, dword [esp + 0x1c]
mov dword [edi + 0xc], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x14]
mov word [eax + ecx*4], 0x15
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x14]
mov byte [eax], 0
mov edx, dword [edi + 0xc]
mov eax, edx
mov dword [esp + 0x14], edx
cmp dword [edi + 0x10], edx
jg 0x4cad38
mov ecx, edi
call fcn.004a04a0
test eax, eax
je 0x4cad31
mov dword [esp + 0x14], 1
jmp 0x4cad71
lea eax, [edi + 0x6e]
jmp 0x4cac14
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x14]
inc eax
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x1c]
mov dword [edi + 0xc], eax
mov eax, dword [edi + 0x14]
mov word [eax + ecx*4], 0x70
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [edi + 0x6e], 0
mov ecx, dword [edi + 0xc]
mov eax, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x10], ecx
jg 0x4cad91
mov ecx, edi
call fcn.004a04a0
test eax, eax
jne 0x4cadca
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*4]
inc eax
mov dword [edi + 0xc], eax
mov eax, dword [edi + 0x14]
mov word [eax + ecx*4], 7
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [edi + 0x6e], 0
mov edx, dword [edi + 0xc]
mov eax, dword [esp + 0x14]
cmp edx, eax
jle 0x4caddf
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov ecx, dword [edi + 0xc]
mov eax, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x10], ecx
jg 0x4cadff
mov ecx, edi
call fcn.004a04a0
test eax, eax
jne 0x4cae5c
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
lea ecx, [ecx + ecx*4]
inc eax
mov dword [edi + 0xc], eax
mov eax, dword [edi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 8], edx
inc edx
mov word [eax + ecx*4], 0x56
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov dword [esp + 0x24], edx
mov byte [edi + 0x6e], 0
mov edx, dword [edi + 0xc]
mov eax, edx
mov dword [esp + 0x14], edx
cmp dword [edi + 0x10], edx
jg 0x4cae6e
mov ecx, edi
call fcn.004a04a0
test eax, eax
je 0x4cae67
mov dword [esp + 0x14], 1
jmp 0x4caea7
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x24], eax
jmp 0x4cae39
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x14]
inc eax
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x34]
mov dword [edi + 0xc], eax
mov eax, dword [edi + 0x14]
mov word [eax + ecx*4], 0x70
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [edi + 0x6e], 0
mov ecx, dword [edi + 0xc]
mov eax, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x10], ecx
jg 0x4caec7
mov ecx, edi
call fcn.004a04a0
test eax, eax
jne 0x4caf00
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
lea ecx, [ecx + ecx*4]
inc eax
mov dword [edi + 0xc], eax
mov eax, dword [edi + 0x14]
mov word [eax + ecx*4], 7
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0xffffffff
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [edi + 0x6e], 0
mov edx, dword [edi + 0xc]
mov eax, dword [esp + 0x14]
cmp edx, eax
jle 0x4caf15
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
jmp 0x4caf27
mov edi, dword [esp + 0x2c]
jmp 0x4caf27
mov ecx, edx
cmp dword [ecx + 0x30], 0
je 0x4cb064
cmp byte [esp + 0x13], 0x70
jne 0x4cb064
mov eax, dword [edi + 0x48]
inc eax
mov dword [esp + 0x1c], eax
inc eax
mov dword [edi + 0x48], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x4caf60
lea edx, [ecx + 1]
mov dword [esp + 0x24], edx
jmp 0x4caf67
mov eax, dword [eax + 0x30]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0xc]
mov eax, ecx
mov dword [esp + 0x18], ecx
cmp dword [esi + 0x10], ecx
jg 0x4caf87
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cafc0
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
lea ecx, [ecx + ecx*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
mov word [eax + ecx*4], 0xe
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov ecx, dword [esi + 0xc]
mov eax, ecx
mov dword [esp + 0x18], ecx
cmp dword [esi + 0x10], ecx
jg 0x4cafe0
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb019
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov word [eax + ecx*4], 0xe
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx + 0x28]
mov dword [esp + 0x18], edx
test edx, edx
je 0x4cb083
mov ecx, ebx
call fcn.004acbf0
mov ecx, dword [esp + 0x18]
cmp word [ecx + 2], 0
jl 0x4cb07f
test ebx, ebx
je 0x4cb076
cmp ecx, dword [ebx + 0xf0]
jb 0x4cb076
cmp ecx, dword [ebx + 0xf4]
jae 0x4cb076
mov eax, dword [ebx + 0xec]
mov dword [ecx], eax
dec dword [ebx + 0xe4]
mov dword [ebx + 0xec], ecx
jmp 0x4cb07f
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], 0
jmp 0x4cb01d
push ecx
call fcn.00490120
add esp, 4
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx + 0x2c]
mov dword [ecx + 0x28], 0
mov dword [esp + 0x18], edx
test edx, edx
je 0x4cb0da
mov ecx, ebx
call fcn.004acbf0
mov ecx, dword [esp + 0x18]
cmp word [ecx + 2], 0
jl 0x4cb0da
test ebx, ebx
je 0x4cb0d1
cmp ecx, dword [ebx + 0xf0]
jb 0x4cb0d1
cmp ecx, dword [ebx + 0xf4]
jae 0x4cb0d1
mov eax, dword [ebx + 0xec]
mov dword [ecx], eax
dec dword [ebx + 0xe4]
mov dword [ebx + 0xec], ecx
jmp 0x4cb0da
push ecx
call fcn.00490120
add esp, 4
mov ebx, dword [esp + 0x20]
mov word [esp + 0x88], 0xa
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov dword [ebx + 0x2c], 0
mov ecx, dword [edi + 0x48]
inc ecx
mov word [esp + 0x78], 0xa
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
lea eax, [ecx + 1]
mov dword [esp + 0x3c], ecx
lea edx, [eax + 1]
mov dword [esp + 0x34], eax
lea eax, [edx + 1]
mov dword [esp + 0x7c], edx
mov dword [esp + 0x4c], eax
add eax, 2
mov dword [edi + 0x48], eax
mov ebx, dword [esi + 0xc]
mov dword [esp + 0x24], eax
mov eax, ebx
mov dword [esp + 0x38], edx
mov dword [esp + 0x18], ebx
cmp dword [esi + 0x10], ebx
jg 0x4cb17a
mov ecx, esi
call fcn.004a04a0
test eax, eax
je 0x4cb177
mov dword [esp + 0x18], 1
jmp 0x4cb1b3
mov eax, dword [esi + 0xc]
inc eax
lea ecx, [ebx + ebx*4]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 1
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov ecx, dword [esp + 0x48]
mov edx, ecx
mov eax, dword [esi + 0xc]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x1c]
mov dword [ecx + 0x30], eax
lea eax, [esp + 0x88]
push eax
mov ecx, edi
call fcn.004cda80
mov edi, dword [esi + 0xc]
add esp, 4
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb1f1
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb22a
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x34]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 7
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb242
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb27b
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x3c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 4
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x20]
mov edx, eax
mov ebx, dword [eax + 0x30]
mov edi, dword [eax + 0x34]
mov dword [eax + 0x30], ecx
lea ecx, [esp + 0x78]
push ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 0x34], 0
call fcn.004cda80
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [eax + 0x30], ebx
mov dword [eax + 0x34], edi
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb2cf
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb30a
mov eax, dword [esi + 0xc]
mov ebx, dword [esp + 0x4c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 7
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
jmp 0x4cb30e
mov ebx, dword [esp + 0x4c]
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb326
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb35f
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x38]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 4
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
push dword [esp + 0x58]
mov edi, dword [esp + 0x24]
lea eax, [ebx + 1]
mov ebx, dword [esp + 0x30]
mov edx, edi
push 0xfffffffffffffff0
push dword [esp + 0x30]
mov ecx, ebx
push dword [esp + 0x50]
push eax
push dword [ebp + 8]
lea eax, [esp + 0xa0]
push eax
call fcn.004c9c00
mov dword [esp + 0x30], eax
add esp, 0x1c
mov al, byte [esp + 0x13]
cmp al, 0x70
je 0x4cb3a0
cmp al, 0x6f
jne 0x4cb3d1
push dword [esp + 0x58]
lea eax, [esp + 0x7c]
mov edx, edi
push 0xffffffffffffffef
push dword [esp + 0x30]
mov ecx, ebx
push dword [esp + 0x50]
push dword [esp + 0x34]
push dword [ebp + 8]
push eax
call fcn.004c9c00
mov dword [esp + 0x8c], eax
add esp, 0x1c
mov al, byte [esp + 0x13]
cmp al, 0x71
je 0x4cb565
cmp al, 0x72
je 0x4cb565
mov edx, dword [esi + 0xc]
mov eax, edx
mov dword [esp + 0x28], edx
cmp dword [esi + 0x10], edx
jg 0x4cb40b
mov ecx, esi
call fcn.004a04a0
test eax, eax
je 0x4cb404
mov dword [esp + 0x28], 1
jmp 0x4cb444
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x28]
inc eax
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x4c]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x58]
mov word [eax + ecx*4], 0x1a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb45c
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb495
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x24]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x70]
mov word [eax + ecx*4], 2
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb4ad
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb4e6
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x38]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 4
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb4fe
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb537
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x28]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 1
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edx, dword [esi + 0xc]
mov eax, edx
mov dword [esp + 0x1c], edx
cmp dword [esi + 0x10], edx
jg 0x4cb5e4
mov ecx, esi
call fcn.004a04a0
test eax, eax
je 0x4cb5dd
mov dword [esp + 0x1c], 1
jmp 0x4cb61d
mov edi, dword [esi + 0xc]
mov eax, edi
mov dword [esp + 0x28], edi
cmp dword [esi + 0x10], edi
jg 0x4cb58c
mov ecx, esi
call fcn.004a04a0
test eax, eax
je 0x4cb589
mov edi, 1
mov dword [esp + 0x28], edi
jmp 0x4cb5c5
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x58]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 1
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
cmp byte [esp + 0x13], 0x72
jne 0x4cb537
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], edi
jmp 0x4cb711
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x1c]
inc eax
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x34]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x58]
mov word [eax + ecx*4], 0x1a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb635
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb66f
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x4c]
lea ecx, [edi + edi*4]
inc eax
inc edx
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov word [eax + ecx*4], 2
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb687
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb6c0
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x3c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 4
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb6d8
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb711
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x1c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 1
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edx, dword [esi + 0xc]
mov eax, edx
mov dword [esp + 0x50], edx
cmp dword [esi + 0x10], edx
jg 0x4cb73b
mov ecx, esi
call fcn.004a04a0
test eax, eax
je 0x4cb734
mov dword [esp + 0x50], 1
jmp 0x4cb775
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x50]
lea ecx, [edx + edx*4]
inc eax
mov edx, dword [esp + 0x4c]
mov dword [esi + 0xc], eax
inc edx
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov word [eax + ecx*4], 2
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb78d
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb7c6
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x3c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 4
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb7de
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb817
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x34]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x28]
mov word [eax + ecx*4], 0x1a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb82f
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb868
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x6c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 1
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov al, byte [esp + 0x13]
cmp al, 0x70
jne 0x4cb884
mov eax, dword [esp + 0x50]
mov edi, dword [esi + 0xc]
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], edi
jmp 0x4cb9b8
cmp al, 0x72
jne 0x4cb8a1
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x30], ecx
inc ecx
mov dword [esp + 0x50], ecx
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x14], ecx
jmp 0x4cba06
mov edx, dword [esi + 0xc]
mov eax, edx
mov dword [esp + 0x30], edx
cmp dword [esi + 0x10], edx
jg 0x4cb8cb
mov ecx, esi
call fcn.004a04a0
test eax, eax
je 0x4cb8c4
mov dword [esp + 0x30], 1
jmp 0x4cb904
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x30]
inc eax
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x3c]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 4
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb91c
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cb955
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x34]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x28]
mov word [eax + ecx*4], 0x1a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb971
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbd29
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x6c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 1
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
cmp byte [esp + 0x13], 0x6f
mov edi, dword [esi + 0xc]
mov dword [esp + 0x14], edi
jne 0x4cba06
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cb9cd
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cba06
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x24]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x70]
mov word [eax + ecx*4], 2
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cba1e
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cba57
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x38]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 4
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cba6f
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbaa8
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x4c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
mov word [eax + ecx*4], 0x1a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cbac0
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbaf9
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x6c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 1
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edx, dword [esi + 0xc]
mov eax, dword [esp + 0x18]
cmp edx, eax
jle 0x4cbb0e
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cbb26
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbb5f
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x34]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 7
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cbb77
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbbb0
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x4c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 7
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cbbc8
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbc01
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x3c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x74]
mov word [eax + ecx*4], 2
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cbc19
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbc52
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x38]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x64]
mov word [eax + ecx*4], 2
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cbc6a
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbca3
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x34]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x28]
mov word [eax + ecx*4], 0x1a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cbcbb
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbcf4
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x4c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
mov word [eax + ecx*4], 0x1a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x4cbd0d
mov eax, dword [esp + 0x6c]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [esi + 0xc]
mov dword [ecx], eax
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0x4cbd41
mov ecx, esi
call fcn.004a04a0
test eax, eax
je 0x4cbd3e
mov edi, 1
jmp 0x4cbd7a
mov eax, dword [esp + 0x50]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x30], eax
jmp 0x4cb9aa
mov eax, dword [esi + 0xc]
inc eax
lea ecx, [edi + edi*4]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 0x17
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
push 0xfffffffffffffff1
push dword [esp + 0x60]
mov edx, edi
mov ecx, esi
call fcn.004a0b00
mov edx, dword [esi + 0xc]
add esp, 8
mov eax, dword [esp + 0x90]
mov edi, dword [esp + 0x80]
mov dword [esp + 0x74], eax
mov eax, edx
mov dword [esp + 0x64], edx
cmp dword [esi + 0x10], edx
jg 0x4cbdc9
mov ecx, esi
call fcn.004a04a0
test eax, eax
je 0x4cbdc2
mov edi, dword [esp + 0x40]
mov edx, 1
jmp 0x4cbe02
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x74]
lea ecx, [edx + edx*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x40]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x2c]
mov word [eax + ecx*4], 0x18
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
push 0xfffffffffffffff0
push dword [esp + 0x58]
mov ecx, esi
call fcn.004a0b00
mov eax, dword [esi + 0xc]
add esp, 8
mov dword [esp + 0x64], eax
cmp dword [esi + 0x10], eax
jg 0x4cbe2d
mov ecx, esi
call fcn.004a04a0
test eax, eax
jne 0x4cbe65
mov eax, dword [esp + 0x64]
inc dword [esi + 0xc]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x14]
mov edx, dword [esp + 0x50]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x14]
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4cbe79
inc edi
cmp edi, dword [ebx + 0x38]
jle 0x4cbe79
mov dword [ebx + 0x38], edi
mov dword [ebx + 0x3c], eax
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x4cbe92
mov eax, dword [esp + 0x58]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [esi + 0xc]
mov dword [ecx], eax
mov eax, dword [ebp + 8]
cmp byte [eax], 5
jne 0x4cbebe
mov eax, dword [esp + 0x48]
mov ecx, eax
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x4cbeb0
mov ecx, eax
mov eax, dword [ecx + 0x1c]
test eax, eax
jne 0x4cbea7
push dword [ecx]
xor edx, edx
mov ecx, ebx
call fcn.004c7600
add esp, 4
mov ebx, dword [esp + 0x20]
mov edi, dword [ebx + 0x1c]
test edi, edi
je 0x4cbf17
mov esi, dword [esp + 0x60]
mov edx, edi
mov ecx, esi
call fcn.004c5690
test esi, esi
je 0x4cbf0e
cmp edi, dword [esi + 0xf0]
jb 0x4cbf0e
cmp edi, dword [esi + 0xf4]
jae 0x4cbf0e
mov eax, dword [esi + 0xec]
mov dword [edi], eax
dec dword [esi + 0xe4]
mov eax, dword [esp + 0x48]
mov dword [esi + 0xec], edi
mov dword [ebx + 0x1c], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push edi
call fcn.00490120
add esp, 4
mov eax, dword [esp + 0x48]
pop edi
mov dword [ebx + 0x1c], eax
xor eax, eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret