Function at 0x4d0d40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, ecx
xor ecx, ecx
push ebx
push esi
push edi
mov ebx, edx
mov edi, dword [eax]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x30], ecx
cmp dword [eax + 0x108], ecx
jne 0x4d1154
mov eax, dword [ebp + 8]
cmp dword [eax + 0x40], ecx
jne 0x4d1154
cmp byte [ebx + 0x2b], 1
je 0x4d1154
cmp dword [ebp + 0xc], 0xb
jne 0x4d0dad
cmp word [ebx + 0x20], cx
jl 0x4d0da6
movzx ecx, byte [ebx + 0x2a]
mov dword [ebp + 0xc], ecx
cmp ecx, 0xb
jne 0x4d0dad
mov dword [ebp + 0xc], 2
mov esi, dword [eax + 0x20]
cmp dword [esi], 1
jne 0x4d1154
cmp dword [esi + 0x1c], 0
jne 0x4d1154
cmp dword [eax + 0x24], 0
jne 0x4d1154
cmp dword [eax + 0x30], 0
jne 0x4d1154
cmp dword [eax + 0x28], 0
jne 0x4d1154
cmp dword [eax + 0x3c], 0
jne 0x4d1154
cmp dword [eax + 0x34], 0
jne 0x4d1154
test byte [eax + 4], 1
jne 0x4d1154
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jne 0x4d1154
mov eax, dword [eax + 8]
cmp byte [eax], 0xb4
jne 0x4d1154
mov edx, dword [esi + 8]
test edx, edx
je 0x4d0e3f
mov edi, dword [edi + 0x10]
xor ecx, ecx
cmp dword [edi + 0xc], edx
lea eax, [edi + 0xc]
je 0x4d0e38
nop dword [eax + eax]
lea eax, [eax + 0x10]
inc ecx
cmp dword [eax], edx
jne 0x4d0e30
add ecx, ecx
mov eax, dword [edi + ecx*8]
jmp 0x4d0e42
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x1c]
xor edx, edx
push eax
push dword [esi + 0x10]
call fcn.004b86f0
mov edi, eax
add esp, 8
mov dword [esp + 0x14], edi
test edi, edi
je 0x4d1154
mov eax, dword [edi + 0x14]
cmp eax, dword [ebx + 0x14]
jne 0x4d0e76
mov eax, dword [edi + 0x3c]
cmp eax, dword [ebx + 0x3c]
je 0x4d1154
mov esi, dword [edi + 0x1c]
mov ecx, esi
mov edx, dword [ebx + 0x1c]
mov eax, edx
shr ecx, 7
shr eax, 7
not ecx
not eax
xor ecx, eax
test cl, 1
jne 0x4d1154
cmp byte [edi + 0x2b], 0
jne 0x4d1154
movzx ecx, word [ebx + 0x22]
cmp cx, word [edi + 0x22]
jne 0x4d1154
mov ax, word [ebx + 0x20]
cmp ax, word [edi + 0x20]
jne 0x4d1154
test edx, 0x10000
je 0x4d0ecf
test esi, 0x10000
je 0x4d1154
xor eax, eax
mov dword [esp + 0x28], 0
cmp ax, cx
jge 0x4d110f
xor ecx, ecx
mov dword [esp + 0x34], ecx
jmp 0x4d0ef4
mov edi, dword [esp + 0x14]
mov esi, dword [ebx + 4]
mov edi, dword [edi + 4]
add esi, ecx
add edi, ecx
mov cx, word [esi + 0xe]
mov ax, word [edi + 0xe]
and cx, 0x60
and ax, 0x60
cmp cx, ax
jne 0x4d1154
test cx, cx
je 0x4d0f93
movzx eax, word [edi + 0xc]
test ax, ax
jne 0x4d0f29
xor edx, edx
jmp 0x4d0f4d
mov ecx, dword [esp + 0x14]
cmp byte [ecx + 0x2b], 0
je 0x4d0f37
xor edx, edx
jmp 0x4d0f4d
mov edx, dword [ecx + 0x34]
test edx, edx
je 0x4d0f4d
cmp dword [edx], eax
jge 0x4d0f46
xor edx, edx
jmp 0x4d0f4d
lea eax, [eax + eax*4]
mov edx, dword [edx + eax*4 - 0xc]
movzx eax, word [esi + 0xc]
test ax, ax
jne 0x4d0f5a
xor eax, eax
jmp 0x4d0f7e
cmp byte [ebx + 0x2b], 0
je 0x4d0f64
xor eax, eax
jmp 0x4d0f7e
mov ecx, dword [ebx + 0x34]
test ecx, ecx
jne 0x4d0f6f
xor eax, eax
jmp 0x4d0f7e
cmp dword [ecx], eax
jge 0x4d0f77
xor eax, eax
jmp 0x4d0f7e
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 - 0xc]
push 0xffffffffffffffff
push eax
xor ecx, ecx
call fcn.004aeea0
add esp, 8
test eax, eax
jne 0x4d1154
mov al, byte [esi + 8]
cmp al, byte [edi + 8]
jne 0x4d1154
movzx ecx, word [edi + 0xe]
test ecx, 0x200
jne 0x4d0faf
xor ecx, ecx
jmp 0x4d0fca
mov eax, dword [edi]
cmp byte [eax], 0
je 0x4d0fbc
inc eax
cmp byte [eax], 0
jne 0x4d0fb6
test cl, 4
je 0x4d0fc7
inc eax
cmp byte [eax], 0
jne 0x4d0fc1
lea ecx, [eax + 1]
movzx ebx, word [esi + 0xe]
test ebx, 0x200
je 0x4d1010
mov eax, dword [esi]
cmp byte [eax], 0
je 0x4d0fe6
nop dword [eax]
inc eax
cmp byte [eax], 0
jne 0x4d0fe0
test bl, 4
je 0x4d0ff6
nop dword [eax + eax]
inc eax
cmp byte [eax], 0
jne 0x4d0ff0
add eax, 1
je 0x4d1010
test ecx, ecx
je 0x4d1154
mov edx, ecx
mov ecx, eax
call fcn.0046d9a0
mov ecx, eax
jmp 0x4d1014
neg ecx
sbb ecx, ecx
test ecx, ecx
jne 0x4d1154
test byte [esi + 4], 0xf
je 0x4d102c
test byte [edi + 4], 0xf
je 0x4d1154
test bl, 0x60
jne 0x4d10eb
cmp dword [esp + 0x28], 0
jle 0x4d10eb
movzx eax, word [esi + 0xc]
test ax, ax
jne 0x4d104d
xor edx, edx
jmp 0x4d1071
mov ecx, dword [esp + 0x20]
cmp byte [ecx + 0x2b], 0
je 0x4d105b
xor edx, edx
jmp 0x4d1071
mov edx, dword [ecx + 0x34]
test edx, edx
je 0x4d1071
cmp dword [edx], eax
jge 0x4d106a
xor edx, edx
jmp 0x4d1071
lea eax, [eax + eax*4]
mov edx, dword [edx + eax*4 - 0xc]
movzx eax, word [edi + 0xc]
test ax, ax
jne 0x4d107e
xor esi, esi
jmp 0x4d10a2
mov ecx, dword [esp + 0x14]
cmp byte [ecx + 0x2b], 0
je 0x4d108c
xor esi, esi
jmp 0x4d10a2
mov esi, dword [ecx + 0x34]
test esi, esi
je 0x4d10a2
cmp dword [esi], eax
jge 0x4d109b
xor esi, esi
jmp 0x4d10a2
lea eax, [eax + eax*4]
mov esi, dword [esi + eax*4 - 0xc]
xor ecx, ecx
test esi, esi
sete cl
xor eax, eax
test edx, edx
sete al
cmp eax, ecx
jne 0x4d1154
test edx, edx
je 0x4d10eb
mov ecx, dword [esi + 8]
mov eax, dword [edx + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4d10e2
test dl, dl
je 0x4d10de
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4d10e2
add eax, 2
add ecx, 2
test dl, dl
jne 0x4d10c2
xor eax, eax
jmp 0x4d10e7
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4d1154
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x34]
inc esi
add ecx, 0x10
mov dword [esp + 0x28], esi
movsx eax, word [ebx + 0x22]
mov dword [esp + 0x34], ecx
cmp esi, eax
jl 0x4d0ef0
mov edi, dword [ebx + 8]
mov ecx, 1
test edi, edi
je 0x4d1194
nop dword [eax + eax]
cmp byte [edi + 0x36], 0
mov eax, dword [esp + 0x30]
cmovne eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
mov esi, dword [eax + 8]
test esi, esi
je 0x4d1154
nop word [eax + eax]
mov edx, esi
mov ecx, edi
call fcn.004d0c50
test eax, eax
jne 0x4d115d
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4d1140
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x2c]
cmp eax, dword [edi + 0x2c]
jne 0x4d1188
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x3c]
cmp eax, dword [ebx + 0x3c]
jne 0x4d1188
mov eax, dword [0x5b3d20]
test eax, eax
je 0x4d1154
push 0x19b
call eax
add esp, 4
test eax, eax
je 0x4d1154
mov edi, dword [edi + 0x14]
mov ecx, 1
test edi, edi
jne 0x4d1120
mov ecx, dword [ebx + 0x10]
mov esi, dword [esp + 0x14]
test ecx, ecx
je 0x4d11fd
mov eax, dword [esi + 0x10]
mov dword [esp + 0x44], eax
test eax, eax
je 0x4d1154
mov edx, dword [eax]
cmp edx, dword [ecx]
jne 0x4d1154
xor edi, edi
test edx, edx
jle 0x4d11fd
lea ebx, [eax + 8]
sub eax, ecx
lea esi, [ecx + 0x10]
mov dword [esp + 0x40], eax
mov al, byte [eax + esi]
cmp al, byte [esi]
jne 0x4d1154
mov edx, dword [ebx]
xor ecx, ecx
push 0xffffffffffffffff
push dword [esi - 8]
call fcn.004aeea0
add esp, 8
test eax, eax
jne 0x4d1154
mov eax, dword [esp + 0x44]
inc edi
add esi, 0x14
add ebx, 0x14
cmp edi, dword [eax]
mov eax, dword [esp + 0x40]
jl 0x4d11c2
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x2c]
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x24]
and eax, 0x4000
or eax, 0
je 0x4d121b
cmp dword [ebx + 0x30], 0
jne 0x4d1154
and ecx, 1
xor eax, eax
or eax, ecx
jne 0x4d1154
mov ecx, dword [esi + 0x3c]
mov dword [esp + 0x28], 0xffff8000
test ecx, ecx
je 0x4d1253
mov eax, dword [edi + 0x10]
xor edx, edx
add eax, 0xc
mov dword [esp + 0x28], edx
cmp dword [eax], ecx
je 0x4d1253
lea eax, [eax + 0x10]
inc edx
cmp dword [eax], ecx
jne 0x4d1247
mov dword [esp + 0x28], edx
mov edi, dword [esp + 0x1c]
mov esi, dword [edi + 8]
mov dword [esp + 0x40], esi
test esi, esi
jne 0x4d1280
cmp dword [edi + 0x74], esi
jne 0x4d1273
mov eax, dword [edi]
test byte [eax + 0x50], 8
jne 0x4d1273
mov byte [edi + 0x17], 1
mov ecx, edi
call fcn.0048e850
mov esi, eax
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x74]
mov edx, edi
mov ecx, dword [esp + 0x28]
test eax, eax
cmovne edx, eax
mov eax, 1
shl eax, cl
mov edi, dword [edx + 0x54]
test edi, eax
jne 0x4d12ae
bts edi, ecx
mov dword [edx + 0x54], edi
cmp ecx, 1
jne 0x4d12ae
mov ecx, edx
call fcn.004c0d30
mov ecx, dword [esp + 0x1c]
mov edx, dword [ebp + 0x10]
push ebx
mov edi, dword [ecx + 0x28]
mov dword [esp + 0x14], edi
lea eax, [edi + 1]
mov dword [esp + 0x10], eax
inc eax
mov dword [ecx + 0x28], eax
call fcn.004cc2f0
mov ecx, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x44], eax
mov al, byte [ecx + 0x13]
test al, al
jne 0x4d12e8
mov edx, dword [ecx + 0x2c]
inc edx
mov dword [ecx + 0x2c], edx
jmp 0x4d12f7
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x24], edx
cmp dword [esi + 0x78], ecx
jg 0x4d1319
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1348
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4d135b
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
jmp 0x4d136a
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0x98]
push 0x70
push ebx
push dword [ebp + 0x10]
lea edx, [edi + 1]
mov dword [esp + 0x24], eax
call fcn.004cbc10
mov eax, dword [esp + 0x38]
add esp, 0xc
test byte [eax + 0x18], 4
jne 0x4d1490
cmp word [ebx + 0x20], 0
jge 0x4d139a
cmp dword [ebx + 8], 0
jne 0x4d13b6
cmp dword [esp + 0x30], 0
jne 0x4d13b6
mov eax, dword [ebp + 0xc]
cmp eax, 2
je 0x4d1490
cmp eax, 1
je 0x4d1490
mov edi, dword [esi + 0x74]
cmp dword [esi + 0x78], edi
jg 0x4d13d9
push 0
push 0
push dword [esp + 0x14]
mov edx, 0x26
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
mov edi, eax
jmp 0x4d140c
mov edx, dword [esp + 0xc]
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x26
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x3c], ecx
cmp dword [esi + 0x78], ecx
jg 0x4d1433
push 0
push 0
push 0
mov edx, 0xb
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
mov dword [esp + 0x3c], eax
jmp 0x4d1466
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4d1478
mov eax, 0x5c24f8
jmp 0x4d1489
test edi, edi
lea eax, [edx - 1]
cmovns eax, edi
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov edi, dword [esp + 0x10]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x14]
test byte [eax + 0x1c], 0x80
jne 0x4d19bc
mov ecx, dword [esp + 0x1c]
mov edx, edi
push 0x65
push eax
push dword [esp + 0x30]
call fcn.004cbc10
mov edx, dword [esi + 0x74]
add esp, 0xc
mov dword [esp + 0x38], edx
cmp dword [esi + 0x78], edx
jg 0x4d14d9
push 0
push 0
push edi
mov edx, 0x26
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
mov dword [esp + 0x38], eax
jmp 0x4d1508
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x26
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp word [ebx + 0x20], 0
jl 0x4d1621
mov edi, dword [esi + 0x74]
mov edx, dword [esp + 0x18]
cmp dword [esi + 0x78], edi
jg 0x4d153d
push 0
push edx
push dword [esp + 0x18]
mov edx, 0x86
mov ecx, esi
call fcn.0048eaa0
mov edx, dword [esp + 0x24]
add esp, 0xc
mov edi, eax
jmp 0x4d156c
mov ebx, dword [esp + 0x10]
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 4
jne 0x4d1608
mov ebx, dword [esi + 0x74]
cmp dword [esi + 0x78], ebx
jg 0x4d159c
push edx
push 0
push dword [esp + 0x14]
mov edx, 0x21
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
mov ebx, eax
jmp 0x4d15cf
mov edx, dword [esp + 0xc]
lea eax, [ebx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x21
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push dword [esp + 0x20]
mov edx, dword [ebp + 0xc]
mov ecx, dword [esp + 0x20]
call fcn.004c1170
mov eax, dword [esi]
add esp, 4
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4d15f4
mov eax, 0x5c24f8
jmp 0x4d1605
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
push dword [esp + 0x18]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x20]
call fcn.004cc410
add esp, 4
jmp 0x4d16cb
cmp dword [ebx + 8], 0
jne 0x4d1673
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 8
jne 0x4d1673
mov edi, dword [esi + 0x74]
cmp dword [esi + 0x78], edi
jg 0x4d1656
push 0
push dword [esp + 0x1c]
mov edx, 0x7e
mov ecx, esi
push dword [esp + 0x14]
call fcn.0048eaa0
add esp, 0xc
mov edi, eax
jmp 0x4d16cb
mov edx, dword [esp + 0xc]
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x7e
mov dword [eax + ecx*4 + 4], edx
jmp 0x4d16b3
mov edi, dword [esi + 0x74]
cmp dword [esi + 0x78], edi
jg 0x4d1698
push 0
push dword [esp + 0x1c]
mov edx, 0x86
mov ecx, esi
push dword [esp + 0x18]
call fcn.0048eaa0
add esp, 0xc
mov edi, eax
jmp 0x4d16cb
mov ebx, dword [esp + 0x10]
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 4], ebx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 4
je 0x4d1735
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d16fb
push 0
push 0
push dword [esp + 0x14]
mov edx, 0x88
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
mov ebx, 0x98
jmp 0x4d173a
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov ebx, 0x98
mov dword [eax + ecx*4], 0x88
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d173a
mov ebx, 0xa9
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1763
push dword [esp + 0x18]
mov edx, 0x80
mov ecx, esi
push dword [esp + 0x14]
push dword [esp + 0x14]
call fcn.0048eaa0
mov edx, dword [esp + 0x24]
add esp, 0xc
jmp 0x4d1796
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x80
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d17b8
push edx
push dword [esp + 0x28]
mov edx, 0x7f
mov ecx, esi
push dword [esp + 0x14]
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d17eb
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x24]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x7f
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 4
jne 0x4d1840
mov ecx, dword [esi]
cmp byte [ecx + 0x57], 0
je 0x4d1810
push dword [esp + 0x20]
mov edx, 0xfffffffa
call fcn.0048f5b0
add esp, 4
jmp 0x4d1840
mov eax, dword [esi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
cmp byte [eax + ecx*4 - 0x13], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x20]
je 0x4d1839
push 0xfffffffffffffffa
push ecx
lea edx, [eax - 0x14]
mov ecx, esi
call fcn.0048f800
add esp, 8
jmp 0x4d1840
mov dword [eax - 4], ecx
mov byte [eax - 0x13], 0xfa
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4d1852
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], bx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1873
push 0
push edi
mov edi, dword [esp + 0x18]
mov edx, 5
push edi
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d18a4
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edi
mov edi, edx
mov dword [eax + ecx*4], 5
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d18c2
push 0
push 0
push edi
mov edx, 0x79
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d18f1
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1984
push 0
push 0
push dword [esp + 0x14]
mov edx, 0x79
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
mov ebx, dword [esp + 0x20]
mov edi, dword [esp + 0x14]
mov eax, dword [ebx + 8]
mov dword [esp + 0x20], eax
test eax, eax
je 0x4d1eb7
nop dword [eax + eax]
mov edi, dword [edi + 8]
mov byte [esp + 0x30], 0
test edi, edi
je 0x4d1958
mov esi, dword [esp + 0x20]
mov edx, edi
mov ecx, esi
call fcn.004d0c50
test eax, eax
jne 0x4d1954
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4d1940
mov esi, dword [esp + 0x40]
mov ecx, dword [esi + 0x74]
mov edx, dword [edi + 0x2c]
cmp dword [esi + 0x78], ecx
jg 0x4d1a2c
push dword [esp + 0x28]
mov ecx, esi
push edx
push dword [esp + 0x18]
mov edx, 0x65
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1a5b
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d1914
mov edx, dword [ebp + 0x10]
mov edi, dword [esp + 0x1c]
cmp edx, 1
je 0x4d19ec
mov eax, dword [edi]
mov ecx, edx
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x4d19ec
push dword [ebx]
mov ecx, edi
push 1
push dword [ebx + 0x14]
call fcn.004b77a0
add esp, 0xc
mov edx, dword [esp + 0x28]
cmp edx, 1
je 0x4d1918
mov eax, dword [edi]
mov ecx, edx
mov edi, dword [esp + 0x14]
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x4d191c
push dword [edi]
mov ecx, dword [esp + 0x20]
push 0
push dword [edi + 0x14]
call fcn.004b77a0
add esp, 0xc
jmp 0x4d191c
mov ebx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x65
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x1c]
mov edx, edi
mov ecx, eax
mov ebx, dword [eax + 8]
call fcn.004c16c0
mov edx, eax
test edx, edx
je 0x4d1a9b
mov ecx, dword [ebx]
cmp byte [ecx + 0x57], 0
je 0x4d1a89
push edx
mov edx, 0xfffffff7
call fcn.0048f5b0
add esp, 4
jmp 0x4d1a9b
mov eax, dword [ebx + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x70]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov edx, dword [esp + 0x20]
mov ecx, dword [esi + 0x74]
mov edx, dword [edx + 0x2c]
cmp dword [esi + 0x78], ecx
jg 0x4d1ac3
push dword [ebp + 0x10]
mov ecx, esi
push edx
push dword [esp + 0x14]
mov edx, 0x70
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1af1
mov ebx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebp + 0x10]
mov dword [eax + ecx*4], 0x70
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x1c]
mov ecx, eax
mov edx, dword [esp + 0x20]
mov ebx, dword [eax + 8]
call fcn.004c16c0
mov edx, eax
test edx, edx
je 0x4d1b33
mov ecx, dword [ebx]
cmp byte [ecx + 0x57], 0
je 0x4d1b21
push edx
mov edx, 0xfffffff7
call fcn.0048f5b0
add esp, 4
jmp 0x4d1b33
mov eax, dword [ebx + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x70]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4d1b4a
lea ecx, [eax + eax*4]
mov edx, 1
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esi + 0x74]
mov dword [esp + 0x34], edx
cmp dword [esi + 0x78], edx
jg 0x4d1b73
push 0
push 0
push dword [esp + 0x18]
mov edx, 0x26
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
mov dword [esp + 0x34], eax
jmp 0x4d1ba6
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x26
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 4
je 0x4d1c9b
movzx eax, word [edi + 0x34]
xor ebx, ebx
mov dword [esp + 0x44], eax
test eax, eax
je 0x4d1be5
mov edi, dword [edi + 0x20]
mov edx, dword [edi]
test edx, edx
je 0x4d1be5
mov ecx, 0x58cb68
call fcn.0046d9a0
test eax, eax
mov eax, dword [esp + 0x44]
jne 0x4d1be5
inc ebx
add edi, 4
cmp ebx, eax
jl 0x4d1bc5
cmp ebx, eax
jne 0x4d1cc1
mov ecx, dword [esi + 0x74]
mov bl, 0x90
cmp dword [esi + 0x78], ecx
jg 0x4d1c14
push 0
push 0
push dword [esp + 0x14]
mov edx, 0x88
mov ecx, esi
call fcn.0048eaa0
mov edx, dword [esp + 0x18]
add esp, 0xc
jmp 0x4d1c47
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x88
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov edi, dword [esp + 0x10]
cmp dword [esi + 0x78], ecx
jg 0x4d1c6b
push 0
push edi
push edx
mov edx, 0x80
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1d18
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x80
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d1d1b
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x30]
test byte [eax + 0x1c], 0x80
je 0x4d1cc5
mov eax, dword [esp + 0x20]
movzx ebx, bl
mov al, byte [eax + 0x38]
and al, 3
cmp al, 2
mov eax, 1
cmove ebx, eax
jmp 0x4d1cc5
mov ebx, dword [esp + 0x30]
mov ecx, dword [esi + 0x74]
mov edi, dword [esp + 0x10]
cmp dword [esi + 0x78], ecx
jg 0x4d1ce9
push 1
push dword [esp + 0x28]
mov edx, 0x85
mov ecx, esi
push edi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1d18
mov edx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x85
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 1
mov dword [eax + ecx*4 + 0x10], 0
lea edx, [edi + 1]
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1d3b
push 0
push dword [esp + 0x28]
mov ecx, esi
push edx
mov edx, 0x89
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1d6e
mov edi, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x24]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4d1d86
lea ecx, [eax + eax*4]
or bl, 8
mov eax, dword [esi + 0x70]
movzx edx, bl
mov word [eax + ecx*4 - 0x12], dx
mov ebx, dword [esp + 0x34]
mov ecx, dword [esi + 0x74]
lea edx, [ebx + 1]
cmp dword [esi + 0x78], ecx
jg 0x4d1daa
push 0
push edx
push edi
mov edx, 5
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1dd9
mov ebx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 5
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4d1deb
mov eax, 0x5c24f8
jmp 0x4d1dfc
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1e1d
push 0
push 0
push edi
mov edx, 0x79
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1e4c
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1e6d
push 0
push 0
push dword [esp + 0x14]
mov edx, 0x79
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1ea0
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x14]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x20], eax
test eax, eax
jne 0x4d1930
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x4d1ee5
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4d1ed1
mov eax, 0x5c24f8
jmp 0x4d1ee2
test ecx, ecx
lea eax, [edx - 1]
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test ecx, ecx
je 0x4d1f05
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x4d1f05
movzx eax, al
mov dword [edx + eax*4 + 0x98], ecx
inc byte [edx + 0x13]
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x4d1f21
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x4d1f21
movzx eax, al
mov dword [edx + eax*4 + 0x98], ecx
inc byte [edx + 0x13]
mov ebx, dword [esp + 0x3c]
test ebx, ebx
je 0x4d2016
cmp dword [edx + 0x70], 0
je 0x4d1f3a
mov ecx, edx
call fcn.004cc480
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1f59
push 0
push 0
push 0
mov edx, 0x46
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4d1f8c
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4d1f9e
mov eax, 0x5c24f8
jmp 0x4d1faf
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4d1fda
push 0
push 0
push dword [esp + 0x14]
mov edx, 0x79
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret