Function at 0x4998c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8c
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 0x14]
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x50], eax
xor ecx, ecx
mov dword [esp + 0x18], edi
mov esi, edx
mov dword [esp + 0x68], ecx
mov edx, dword [ebp + 8]
mov ebx, dword [edi + 8]
mov dword [esp + 0x5c], esi
mov dword [esp + 0x24], edx
mov byte [esp + 0x23], 0
mov ecx, dword [ebx + 0x74]
mov dword [esp + 0x34], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x44], ebx
mov dword [esp + 0x74], ecx
cmp dword [ebx + 0x78], ecx
jg 0x499944
push 0
push 0
push 0
mov edx, 0x11
mov ecx, ebx
call fcn.0042a9a0
mov edx, dword [esp + 0x30]
add esp, 0xc
mov dword [esp + 0x74], eax
jmp 0x499977
lea eax, [ecx + 1]
mov dword [ebx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x70]
mov dword [eax + ecx*4], 0x11
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx + 0x10]
xorps xmm0, xmm0
mov esi, dword [esi + 0x14]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x2c], 0
movlpd qword [esp + 0x38], xmm0
mov dword [esp + 0x70], 3
mov eax, dword [eax + 0xc]
mov dword [esp + 0x60], 0xffffffff
lea ecx, [eax + eax*2]
mov eax, dword [esp + 0x50]
shl ecx, 4
add ecx, esi
mov dword [esp + 0x28], ecx
mov eax, dword [eax + 0x48]
mov dword [esp + 0x30], eax
cmp esi, ecx
jae 0x499d45
mov ebx, dword [esp + 0x3c]
lea ecx, [edx + 0x2c]
mov edx, ecx
mov dword [esp + 0x4c], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x1c], 1
mov dword [esp + 0x40], ebx
jmp 0x4999f4
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x30]
mov eax, dword [eax]
mov ebx, dword [esi]
or eax, dword [edi + 4]
mov edi, dword [esp + 0x18]
jne 0x499ba6
test byte [esi + 0xa], 2
jne 0x499ba6
test byte [ebx + 4], 1
jne 0x499ba6
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0x78]
mov word [esp + 0x8c], ax
mov eax, dword [edx]
mov edx, ebx
mov dword [esp + 0x7c], fcn.00444ae0
mov dword [esp + 0x80], 0x444980
mov dword [esp + 0x90], eax
call fcn.0043ee30
cmp word [esp + 0x8c], 0
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], ecx
je 0x499ba6
mov ecx, dword [edi]
mov edx, ebx
push 0
push 0
call fcn.00443850
mov edx, dword [esp + 0x3c]
add esp, 8
mov ecx, dword [edi]
mov ebx, eax
mov dword [esp + 0x48], ecx
test edx, edx
jne 0x499a90
mov dword [esp + 0x34], ebx
jmp 0x499b9e
test ebx, ebx
jne 0x499a9d
mov dword [esp + 0x34], edx
jmp 0x499b9e
mov eax, dword [edx + 4]
and eax, 0x20000001
cmp eax, 0x20000000
je 0x499abb
mov eax, dword [ebx + 4]
and eax, 0x20000001
cmp eax, 0x20000000
jne 0x499b05
cmp byte [edi + 0xcc], 2
jae 0x499b05
mov ecx, edi
call fcn.004436a0
mov edx, ebx
mov ecx, edi
call fcn.004436a0
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x38]
push 0
push eax
mov edx, 0x9a
mov dword [esp + 0x40], 0x4dd340
mov dword [esp + 0x44], 1
call fcn.00442b90
add esp, 8
mov dword [esp + 0x34], eax
jmp 0x499b9e
push 0
push 0x34
call fcn.00404a90
mov edi, eax
add esp, 8
test edi, edi
je 0x499b7e
push 0x34
push 0
push edi
call fcn.004c0cc0
mov eax, dword [esp + 0x6c]
add esp, 0xc
mov word [edi + 0x22], ax
mov eax, dword [esp + 0x34]
mov byte [edi], 0x2c
mov dword [edi + 0x10], ebx
mov ecx, dword [ebx + 4]
and ecx, 0x200104
mov dword [edi + 0xc], eax
or ecx, dword [edi + 4]
mov dword [edi + 4], ecx
mov eax, dword [eax + 4]
and eax, 0x200104
or eax, ecx
mov ecx, edi
mov dword [edi + 4], eax
call fcn.00442aa0
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp dword [edi + 0x18], eax
jle 0x499b9a
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.00407e90
add esp, 0xc
jmp 0x499b9a
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
mov ecx, dword [ecx]
call fcn.00443540
mov eax, dword [esp + 0x18]
mov edx, ebx
mov ecx, dword [eax]
call fcn.00443540
mov dword [esp + 0x34], edi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], ecx
mov eax, dword [esi + 0x14]
cmp eax, dword [ecx]
jne 0x499d22
movzx ecx, word [esi + 0xc]
test cl, 0x82
je 0x499d1e
mov ebx, dword [esp + 0x24]
test byte [ebx + 0x24], 8
je 0x499bd8
mov eax, dword [esi]
test byte [eax + 4], 1
jne 0x499bd8
test cl, cl
js 0x499d1e
mov ecx, dword [ebp + 0xc]
mov eax, dword [esi + 0x24]
and ecx, dword [esi + 0x20]
and eax, dword [ebp + 0x10]
or ecx, eax
jne 0x499d1e
mov edx, dword [esi + 0x18]
test edx, edx
js 0x499d1e
mov eax, dword [ebx + 0x10]
add edx, edx
mov ecx, dword [esi]
mov eax, dword [eax + 4]
mov dl, byte [eax + edx*8 + 8]
call fcn.00442070
test eax, eax
je 0x499d1e
mov ecx, dword [esi + 0x18]
xor edi, edi
cmp ecx, 0x40
jl 0x499c23
mov ebx, 0x80000000
jmp 0x499c38
mov eax, ecx
xor ebx, ebx
bts edi, eax
cmp eax, 0x20
cmovae ebx, edi
xor edi, ebx
cmp eax, 0x40
cmovae ebx, edi
cmp byte [esp + 0x23], 0
jne 0x499c64
mov edx, dword [esp + 0x64]
add ecx, ecx
mov eax, dword [edx + 4]
push dword [eax + ecx*8]
push dword [edx]
push str.automatic_index_on__s__s_
push 0x11c
call fcn.004072e0
add esp, 0x10
mov byte [esp + 0x23], 1
mov ecx, edi
mov eax, ebx
and ecx, dword [esp + 0x40]
and eax, dword [esp + 0x4c]
or ecx, eax
jne 0x499d1e
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, dword [eax]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x48], ecx
movzx eax, word [eax + 0x2c]
cmp eax, edx
jge 0x499cfe
lea eax, [edx + 7]
and eax, 0xfffffff8
mov dword [esp + 0x54], eax
shl eax, 2
push 0
push eax
call fcn.00404a90
add esp, 8
mov dword [esp + 0x58], eax
test eax, eax
je 0x49a5f3
mov edx, dword [esp + 0x30]
movzx ecx, word [edx + 0x2c]
shl ecx, 2
push ecx
push dword [edx + 0x30]
push eax
call fcn.004c2130
mov ecx, dword [esp + 0x3c]
add esp, 0xc
mov edx, dword [ecx + 0x30]
lea eax, [ecx + 0x38]
cmp edx, eax
je 0x499ce9
mov ecx, dword [esp + 0x48]
call fcn.00404680
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x1c]
mov dword [ecx + 0x30], eax
mov eax, dword [esp + 0x54]
mov word [ecx + 0x2c], ax
jmp 0x499d02
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx + 0x30]
inc edx
mov ecx, dword [esp + 0x2c]
or dword [esp + 0x40], edi
mov dword [esp + 0x1c], edx
mov dword [eax + ecx*4], esi
inc ecx
or dword [esp + 0x4c], ebx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
add esi, 0x30
cmp esi, dword [esp + 0x28]
jb 0x4999f0
mov ebx, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x4c]
jmp 0x499d51
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x2c]
not esi
movzx eax, cx
or esi, 0x80000000
mov ecx, dword [esp + 0x30]
mov word [ecx + 0x28], ax
mov word [ecx + 0x18], ax
mov eax, dword [esp + 0x40]
mov dword [ecx + 0x24], 0x4241
not eax
and eax, dword [edx + 0x38]
and esi, dword [edx + 0x3c]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], esi
mov esi, 0x3f
movzx eax, word [ecx + 0x22]
cmp si, ax
jge 0x499da1
mov dword [esp + 0x14], esi
xor esi, esi
jmp 0x499dac
cwde
xor esi, esi
mov dword [esp + 0x14], eax
test eax, eax
jle 0x499dee
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x4c]
xor edx, edx
xor ecx, ecx
mov eax, esi
bts edx, eax
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, dword [esp + 0x40]
and ecx, edi
or edx, ecx
je 0x499dd9
inc dword [esp + 0x2c]
inc esi
cmp esi, ebx
jl 0x499db4
mov ebx, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x64]
cmp dword [edx + 0x3c], 0
jg 0x499e0d
jl 0x499dfc
cmp dword [edx + 0x38], 0
jae 0x499e0d
movsx eax, word [ecx + 0x22]
mov ecx, dword [esp + 0x2c]
add ecx, 0xffffffc1
add ecx, eax
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x2c]
mov ecx, dword [edi]
movzx eax, ax
inc eax
movzx eax, ax
movsx esi, ax
mov dword [esp + 0x54], eax
lea edx, [esi*4 + 7]
and edx, 0xfffffff8
lea eax, [esi*4 + 9]
add eax, esi
mov dword [esp + 0x58], edx
and eax, 0xfffffff8
add edx, 0x48
add eax, edx
mov dword [esp + 0x48], eax
cdq
push edx
push eax
test ecx, ecx
je 0x499e52
call fcn.00404a90
jmp 0x499e57
call fcn.004043b0
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x49a5f7
push dword [esp + 0x48]
mov edi, eax
push 0
push edi
call fcn.004c0cc0
mov ecx, dword [esp + 0x38]
lea eax, [edi + 0x48]
mov dword [edi + 0x20], eax
add esp, 0xc
add eax, dword [esp + 0x58]
xorps xmm0, xmm0
mov dword [edi + 8], eax
movlpd qword [esp + 0x38], xmm0
lea eax, [eax + esi*2]
add eax, 2
mov dword [edi + 4], eax
lea eax, [eax + esi*2]
mov dword [edi + 0x1c], eax
mov eax, dword [esp + 0x54]
mov word [edi + 0x34], ax
movzx eax, cx
mov word [edi + 0x32], ax
mov eax, dword [esp + 0x30]
mov dword [eax + 0x20], edi
mov eax, dword [esp + 0x64]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x5c]
mov dword [edi], str.auto_index
xor edi, edi
mov esi, dword [eax + 0x14]
mov dword [esp + 0x1c], esi
cmp esi, dword [esp + 0x28]
jae 0x49a06d
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], eax
nop
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x14]
cmp eax, dword [edx + 0x2c]
jne 0x49a044
movzx ecx, word [esi + 0xc]
test cl, 0x82
je 0x49a03e
test byte [edx + 0x24], 8
je 0x499f33
mov eax, dword [esi]
test byte [eax + 4], 1
jne 0x499f33
test cl, cl
js 0x49a03e
mov ecx, dword [ebp + 0xc]
mov eax, dword [esi + 0x24]
and ecx, dword [esi + 0x20]
and eax, dword [ebp + 0x10]
or ecx, eax
jne 0x49a03e
mov edx, dword [esi + 0x18]
test edx, edx
js 0x49a038
mov eax, dword [esp + 0x24]
add edx, edx
mov ecx, dword [esi]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 4]
mov dl, byte [eax + edx*8 + 8]
call fcn.00442070
test eax, eax
je 0x49a038
mov eax, dword [esi + 0x18]
xor edx, edx
movzx ecx, ax
mov dword [esp + 0x38], ecx
cmp eax, 0x40
jl 0x499f89
mov esi, 0x80000000
jmp 0x499f9c
xor esi, esi
bts edx, eax
cmp eax, 0x20
cmovae esi, edx
xor edx, esi
cmp eax, 0x40
cmovae esi, edx
mov eax, dword [esp + 0x48]
mov ecx, edx
and ecx, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, esi
and eax, dword [esp + 0x58]
or ecx, eax
jne 0x49a04a
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
or dword [esp + 0x54], edx
mov edx, dword [esp + 0x38]
mov eax, dword [eax + 4]
mov ecx, dword [ecx]
or dword [esp + 0x58], esi
mov word [eax + edi*2], dx
test dword [ecx + 4], 0x200
je 0x499fe6
mov esi, dword [ecx + 0xc]
mov edx, dword [ecx + 0x10]
jmp 0x499fec
mov esi, dword [ecx + 0x10]
mov edx, dword [ecx + 0xc]
test dword [edx + 4], 0x100
jne 0x49a00f
test esi, esi
je 0x49a002
test dword [esi + 4], 0x100
jne 0x49a00d
mov ecx, ebx
call fcn.00441ed0
test eax, eax
jne 0x49a01a
mov edx, esi
mov ecx, ebx
call fcn.00441ed0
test eax, eax
je 0x49a01e
mov ecx, dword [eax]
jmp 0x49a023
mov ecx, str.BINARY
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x20]
mov dword [eax + edi*4], ecx
inc edi
mov eax, dword [esp + 0x48]
mov dword [esp + 0x14], eax
jmp 0x49a04e
mov eax, dword [esp + 0x14]
jmp 0x49a052
mov eax, dword [esp + 0x14]
jmp 0x49a056
mov eax, dword [esp + 0x14]
jmp 0x49a05a
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
add esi, 0x30
mov dword [esp + 0x1c], esi
cmp esi, ecx
jb 0x499f00
mov ebx, dword [esp + 0x44]
xor esi, esi
cmp dword [esp + 0x14], esi
jle 0x49a0c2
mov ebx, dword [esp + 0x14]
nop dword [eax]
xor edx, edx
xor ecx, ecx
mov eax, esi
bts edx, eax
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, dword [esp + 0x40]
and ecx, dword [esp + 0x4c]
or edx, ecx
je 0x49a0b9
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 4]
mov word [eax + edi*2], si
mov eax, dword [ecx + 0x20]
mov dword [eax + edi*4], str.BINARY
inc edi
inc esi
cmp esi, ebx
jl 0x49a080
mov ebx, dword [esp + 0x44]
mov eax, dword [esp + 0x24]
cmp dword [eax + 0x3c], 0
jg 0x49a10d
jl 0x49a0d4
cmp dword [eax + 0x38], 0
jae 0x49a10d
mov esi, dword [esp + 0x64]
mov eax, 0x3f
mov edx, dword [esp + 0x10]
cmp ax, word [esi + 0x22]
jge 0x49a111
mov ecx, eax
nop dword [eax]
mov eax, dword [edx + 4]
mov word [eax + edi*2], cx
inc ecx
mov eax, dword [edx + 0x20]
mov dword [eax + edi*4], str.BINARY
inc edi
movsx eax, word [esi + 0x22]
cmp ecx, eax
jl 0x49a0f0
jmp 0x49a111
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x18]
mov word [eax + edi*2], cx
mov eax, dword [edx + 0x20]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x2c]
inc edx
mov dword [eax + edi*4], str.BINARY
mov eax, dword [esi + 0x28]
mov dword [ecx + 8], eax
inc dword [esi + 0x28]
mov eax, dword [ecx + 8]
mov ecx, dword [ebx + 0x74]
mov dword [esp + 0x38], eax
cmp dword [ebx + 0x78], ecx
jg 0x49a160
push 0
push edx
push eax
mov edx, 0x72
mov ecx, ebx
call fcn.0042a9a0
add esp, 0xc
jmp 0x49a193
lea eax, [ecx + 1]
mov dword [ebx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x70]
mov ebx, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0x72
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 8]
mov ecx, esi
mov edx, dword [esp + 0x10]
mov dword [esp + 0x38], eax
call fcn.0045ec90
mov esi, eax
test esi, esi
je 0x49a1d9
mov edx, dword [esp + 0x38]
mov ecx, dword [edx]
cmp byte [ecx + 0x53], 0
je 0x49a1c7
push esi
mov edx, 0xfffffff7
call fcn.0042b470
add esp, 4
jmp 0x49a1d9
mov eax, dword [edx + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x70]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], esi
mov edx, dword [esp + 0x50]
movzx eax, byte [edx + 0x34]
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 0x30], 0x10
lea esi, [eax + ecx*8]
mov dword [esp + 0x5c], esi
je 0x49a2ec
mov ecx, dword [ebx + 0x74]
mov edx, dword [esi + 0x24]
mov dword [esp + 0x60], edx
mov dword [esp + 0x68], ecx
cmp dword [ebx + 0x78], ecx
jg 0x49a231
push 0
push 0
push 0
mov edx, 0x46
mov ecx, ebx
call fcn.0042a9a0
mov edx, dword [esp + 0x6c]
add esp, 0xc
mov dword [esp + 0x68], eax
jmp 0x49a264
lea eax, [ecx + 1]
mov dword [ebx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x70]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebx + 0x74]
mov esi, dword [esi + 0x20]
cmp dword [ebx + 0x78], ecx
jg 0x49a288
push esi
push 0
push edx
mov edx, 0xd
mov ecx, ebx
call fcn.0042a9a0
mov edx, dword [esp + 0x6c]
add esp, 0xc
jmp 0x49a2b7
lea eax, [ecx + 1]
mov dword [ebx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x70]
mov ebx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [ebx + 0x74]
cmp dword [ebx + 0x78], esi
jg 0x49a2d7
push 0
push 0
push edx
mov edx, 0xe
mov ecx, ebx
call fcn.0042a9a0
add esp, 0xc
mov esi, eax
jmp 0x49a342
lea eax, [esi + 1]
mov dword [ebx + 0x74], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 0x70]
mov dword [eax + ecx*4], 0xe
jmp 0x49a322
mov esi, dword [ebx + 0x74]
mov edx, dword [edx + 4]
cmp dword [ebx + 0x78], esi
jg 0x49a30f
push 0
push 0
push edx
mov edx, 0x26
mov ecx, ebx
call fcn.0042a9a0
add esp, 0xc
mov esi, eax
jmp 0x49a342
lea eax, [esi + 1]
mov dword [ebx + 0x74], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 0x70]
mov dword [eax + ecx*4], 0x26
mov ebx, dword [esp + 0x44]
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 4], edx
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x49a370
mov eax, dword [esp + 0x18]
push 0x10
dec dword [eax + 0x38]
mov edx, dword [eax + 0x38]
push edx
push ecx
push eax
mov dword [esp + 0x7c], edx
call fcn.0044b490
mov ecx, dword [esp + 0x40]
add esp, 0x10
or dword [ecx + 0x24], 0x20000
mov ecx, dword [esp + 0x18]
mov al, byte [ecx + 0x13]
test al, al
jne 0x49a383
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
jmp 0x49a392
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0x98]
mov edx, dword [esp + 0x10]
push 0
push 0
push 0
push 0
push eax
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x64]
push dword [eax + 4]
call fcn.00461630
mov ecx, dword [ebx + 0x74]
add esp, 0x18
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 8]
mov dword [esp + 0x38], eax
cmp dword [ebx + 0x78], ecx
jg 0x49a3e2
mov edx, dword [esp + 0x1c]
mov ecx, ebx
push 0
push edx
push eax
mov edx, 0x88
call fcn.0042a9a0
add esp, 0xc
jmp 0x49a415
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [ebx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x88
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x74]
test eax, eax
jle 0x49a42c
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [ebx + 0x70]
mov word [eax + ecx*4 - 0x12], dx
cmp dword [esp + 0x34], 0
je 0x49a45a
mov ecx, dword [ebx + 0xc]
mov edx, dword [esp + 0x6c]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49a451
push edx
mov edx, ebx
call fcn.0042b160
add esp, 4
jmp 0x49a45a
mov ecx, dword [ecx + 0x40]
mov eax, dword [ebx + 0x74]
mov dword [ecx + edx*4], eax
mov edx, dword [esp + 0x5c]
test byte [edx + 0x30], 0x10
je 0x49a514
mov ecx, dword [esp + 0x68]
test ecx, ecx
jns 0x49a474
mov ecx, dword [ebx + 0x74]
dec ecx
mov eax, dword [ebx]
cmp byte [eax + 0x53], 0
je 0x49a483
mov ecx, 0x4edf68
jmp 0x49a48c
mov eax, dword [ebx + 0x70]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x60]
add eax, edi
mov edi, dword [esp + 0x18]
mov dword [ecx + 8], eax
mov ecx, edi
mov eax, dword [esp + 0x50]
push dword [eax + 8]
push dword [edx + 0x28]
mov edx, esi
push dword [eax + 4]
call fcn.00499830
mov ecx, dword [ebx + 0x74]
add esp, 0xc
cmp dword [ebx + 0x78], ecx
jg 0x49a4db
push 0
push esi
push 0
mov edx, 0xb
mov ecx, ebx
call fcn.0042a9a0
mov ecx, dword [esp + 0x68]
add esp, 0xc
and dword [ecx + 0x30], 0xffffffef
jmp 0x49a583
lea eax, [ecx + 1]
mov dword [ebx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x5c]
and dword [ecx + 0x30], 0xffffffef
jmp 0x49a583
mov eax, dword [esp + 0x50]
lea edx, [esi + 1]
mov ecx, dword [ebx + 0x74]
mov edi, dword [eax + 4]
cmp dword [ebx + 0x78], ecx
jg 0x49a53b
push 0
push edx
push edi
mov edx, 5
mov ecx, ebx
call fcn.0042a9a0
add esp, 0xc
jmp 0x49a569
lea eax, [ecx + 1]
mov dword [ebx + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x70]
lea edx, [esi + 1]
mov dword [eax + ecx*4], 5
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x74]
mov edi, dword [esp + 0x18]
test eax, eax
jle 0x49a583
mov edx, dword [esp + 0x70]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x70]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [ebx + 0x74]
test esi, esi
jns 0x49a58d
lea esi, [edx - 1]
mov eax, dword [ebx]
cmp byte [eax + 0x53], 0
je 0x49a59c
mov eax, 0x4edf68
jmp 0x49a5a5
mov eax, dword [ebx + 0x70]
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x1c]
mov dword [eax + 8], edx
test ecx, ecx
je 0x49a5c4
mov al, byte [edi + 0x13]
cmp al, 8
jae 0x49a5c4
movzx eax, al
mov dword [edi + eax*4 + 0x98], ecx
inc byte [edi + 0x13]
mov ecx, dword [esp + 0x74]
mov edx, dword [ebx + 0x74]
test ecx, ecx
jns 0x49a5d2
lea ecx, [edx - 1]
mov eax, dword [ebx]
cmp byte [eax + 0x53], 0
je 0x49a5e4
mov eax, 0x4edf68
mov dword [eax + 8], edx
jmp 0x49a5f7
mov eax, dword [ebx + 0x70]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x49a5f7
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x34]
test eax, eax
je 0x49a608
mov ecx, dword [edi]
mov edx, eax
call fcn.00443540
mov ecx, dword [esp + 0x94]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004bf1a3
mov esp, ebp
pop ebp
ret