Function at 0x4a7400
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8c
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx + ecx*4]
add ecx, ecx
push ebx
push esi
lea esi, [eax + ecx*8 + 0x2e0]
movzx ecx, byte [esi + 0x2c]
lea edx, [eax + 0x148]
mov dword [esp + 0x74], edx
push edi
mov edi, dword [eax]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
mov dword [esp + 0x70], edx
mov edx, dword [esi + 0x40]
lea ecx, [ecx + ecx*4]
mov dword [esp + 0x5c], edx
mov edx, dword [eax + 4]
add ecx, ecx
lea ecx, [edx + ecx*8 + 8]
mov edx, dword [eax + 0x44]
mov dword [esp + 0x14], ecx
mov ecx, dword [ecx + 0x30]
mov dword [esp + 0x24], edi
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x1c], 0
test edx, edx
jle 0x4a748f
add eax, 0x48
mov ecx, dword [esp + 0x40]
cmp dword [eax], ecx
je 0x4a7663
inc dword [esp + 0x1c]
add eax, 4
cmp dword [esp + 0x1c], edx
jl 0x4a7476
xor eax, eax
xor edx, edx
mov ecx, dword [ebp + 8]
not eax
and eax, dword [ebp + 0x10]
not edx
and edx, dword [ebp + 0x14]
mov dword [esi + 0x48], eax
mov dword [esi + 0x4c], edx
mov eax, dword [ecx + 0x18]
mov edx, dword [ecx + 0x1c]
mov ecx, dword [ebp + 0xc]
call fcn.005fa290
mov edx, dword [esp + 0x5c]
and eax, 1
test byte [edx + 0x24], 0x40
mov dword [esp + 0x34], eax
je 0x4a74d6
mov eax, dword [ebp + 8]
test byte [eax + 0x22], 0x20
mov dword [esp + 0x54], 1
je 0x4a74de
mov dword [esp + 0x54], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [eax + 0x6c]
lea edx, [ecx + 1]
mov dword [eax + 0x6c], edx
lea edx, [ecx - 1]
mov dword [esp + 0x60], eax
mov dword [esp + 0x30], ecx
test ecx, edx
jne 0x4a7527
mov eax, ecx
lea ecx, [eax*8 + 4]
push 0
push ecx
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 0x70]
mov esi, dword [ecx]
call fcn.00445c60
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x38]
mov dword [edx + 0x70], eax
add esp, 8
mov eax, edx
mov eax, dword [eax + 0x70]
test eax, eax
je 0x4a7535
mov dword [eax + ecx*4], 0xffffffff
or eax, 0xffffffff
sub eax, ecx
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x2c], eax
mov eax, dword [ecx + 0x6c]
lea edx, [eax + 1]
mov dword [ecx + 0x6c], edx
lea edx, [eax - 1]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x30], eax
test eax, edx
jne 0x4a758b
lea ecx, [eax*8 + 4]
push 0
push ecx
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 0x70]
mov esi, dword [ecx]
call fcn.00445c60
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x18]
mov dword [edx + 0x70], eax
mov eax, dword [esp + 0x38]
add esp, 8
mov ecx, edx
mov ecx, dword [ecx + 0x70]
test ecx, ecx
je 0x4a7599
mov dword [ecx + eax*4], 0xffffffff
or ecx, 0xffffffff
sub ecx, eax
cmp byte [esi + 0x2c], 0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x60], ecx
mov dword [esi + 0x18], ecx
jbe 0x4a75d9
test byte [eax + 0x24], 8
je 0x4a75d9
mov eax, dword [edi + 0x48]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push 0
mov dword [edi + 0x48], eax
push 0x17
mov esi, ebx
mov dword [ecx], eax
call fcn.00463f20
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x74], ecx
test cl, 4
je 0x4a76af
mov edx, dword [eax + 0x1c]
mov edi, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x30], edx
mov dword [esp + 0x58], eax
cmp dword [ecx + 0x54], edi
jg 0x4a760f
push ebx
call fcn.00463d80
add esp, 4
test eax, eax
jne 0x4a763a
mov eax, dword [ebx + 4]
inc dword [ebx + 0x20]
mov ecx, dword [esp + 0x30]
lea edx, [edi + edi*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x58]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ecx
mov word [eax], 0x11
mov edi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], edi
jg 0x4a7678
push ebx
call fcn.00463d80
add esp, 4
test eax, eax
je 0x4a7678
mov edi, 1
mov dword [esi + 0x34], edi
mov byte [esi + 0x2d], 0xe
jmp 0x4a8909
mov ecx, dword [esp + 0x1c]
mov eax, 1
xor edx, edx
call fcn.005e62f0
jmp 0x4a7493
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [edi + edi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x14
mov dword [esi + 0x34], edi
mov byte [esi + 0x2d], 0xe
jmp 0x4a8909
mov ecx, dword [esp + 0x5c]
mov edx, dword [ecx + 0x24]
test edx, 0x400
je 0x4a78ea
movzx eax, word [ecx + 0x28]
inc dword [edi + 0x64]
mov edx, dword [edi + 0x3c]
mov dword [esp + 0x1c], eax
add eax, 2
mov dword [esp + 0x80], eax
mov dword [esp + 0x20], edx
cmp eax, dword [edi + 0x38]
jg 0x4a76f2
add edx, eax
mov dword [edi + 0x3c], edx
mov edx, dword [edi + 0x38]
sub edx, eax
mov dword [edi + 0x38], edx
jmp 0x4a7700
mov edx, dword [edi + 0x48]
inc edx
add eax, dword [edi + 0x48]
mov dword [esp + 0x20], edx
mov dword [edi + 0x48], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0x30], eax
xor eax, eax
mov dword [esp + 0x18], eax
cmp dword [esp + 0x1c], eax
jle 0x4a7772
mov edx, dword [ecx + 0x30]
mov eax, dword [edx + eax*4]
test eax, eax
je 0x4a7763
test byte [eax + 0x12], 1
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
je 0x4a774b
lea edx, [edx + ecx + 2]
push edx
mov edx, dword [esp + 0x38]
push edx
push ecx
push eax
push edi
mov eax, esi
call fcn.004a6e60
mov eax, dword [esi + 0x10]
add esp, 0x14
mov dword [esp + 0x30], eax
jmp 0x4a775f
lea ecx, [edx + ecx + 2]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
push ecx
push eax
push edi
call fcn.0047b050
add esp, 0xc
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x1c]
jl 0x4a7713
mov edi, dword [ecx + 0x18]
mov esi, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
cmp dword [ecx + 0x54], esi
jg 0x4a778d
push ebx
call fcn.00463d80
add esp, 4
test eax, eax
jne 0x4a77b4
mov eax, dword [ebx + 4]
inc dword [ebx + 0x20]
mov ecx, dword [esp + 0x20]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov esi, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
cmp dword [edx + 0x54], esi
jg 0x4a77cc
push ebx
call fcn.00463d80
add esp, 4
test eax, eax
jne 0x4a77f8
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x20]
mov edx, dword [esp + 0x1c]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x20]
inc ecx
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov eax, dword [esp + 0x5c]
movzx esi, byte [eax + 0x1c]
mov edx, dword [eax + 0x20]
mov edi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
neg esi
sbb esi, esi
and esi, 0xfffffff7
mov dword [esp + 0x58], edx
cmp dword [eax + 0x54], edi
jg 0x4a782d
push ebx
call fcn.00463d80
add esp, 4
test eax, eax
je 0x4a782d
mov eax, 1
jmp 0x4a7860
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [edi + edi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x20]
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], 0
mov word [eax], 0xc
mov eax, edi
mov edi, dword [esp + 0x58]
push ebx
lea ecx, [esi - 2]
call fcn.004646a0
mov eax, dword [esp + 0x60]
mov edi, dword [esp + 0x14]
xor esi, esi
add esp, 4
mov byte [eax + 0x1c], 0
cmp dword [esp + 0x1c], esi
jle 0x4a78ae
cmp esi, 0x10
jge 0x4a78ae
mov dx, word [eax + 0x1e]
mov cx, si
shr dx, cl
test dl, 1
je 0x4a78a7
mov eax, dword [eax + 0x30]
mov eax, dword [eax + esi*4]
call fcn.004a6d70
mov eax, dword [esp + 0x5c]
inc esi
cmp esi, dword [esp + 0x1c]
jl 0x4a7884
mov ecx, dword [esp + 0x40]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x24]
mov dword [edi + 0x30], ecx
mov byte [edi + 0x2d], 0x9a
mov edx, dword [ebx + 0x20]
mov dword [edi + 0x34], edx
mov edi, dword [esp + 0x20]
mov ecx, esi
call fcn.00479a80
cmp esi, dword [eax + 0x38]
jle 0x4a78e0
mov dword [eax + 0x38], esi
mov dword [eax + 0x3c], edi
call fcn.00479b80
jmp 0x4a8909
mov eax, edx
and eax, 0x100
je 0x4a7998
test dl, 5
je 0x4a7998
mov edx, dword [esp + 0x34]
mov eax, ecx
mov ecx, dword [eax + 0x30]
mov eax, dword [ecx]
inc dword [edi + 0x48]
mov ecx, dword [edi + 0x48]
push ecx
push edx
push 0
push eax
push edi
mov eax, esi
mov dword [esp + 0x4c], ecx
call fcn.004a6e60
add esp, 0x14
mov dword [esp + 0x2c], eax
cmp eax, dword [esp + 0x38]
je 0x4a793a
mov esi, dword [esp + 0x38]
mov edx, edi
call fcn.0047c390
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x10]
mov edi, dword [esp + 0x2c]
push eax
push edi
push 0x26
mov esi, ebx
mov dword [esp + 0x20], eax
call fcn.00463f20
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x4c]
add esp, 0xc
push edi
push ecx
push edx
push 0x49
call fcn.00463e10
mov eax, dword [esp + 0x34]
mov ecx, 1
call fcn.00479a80
mov edx, dword [esp + 0x50]
mov ecx, edi
push ecx
push 0xffffffffffffffff
push edx
mov edx, eax
call fcn.00479970
mov eax, dword [esp + 0x2c]
add esp, 0x1c
mov byte [eax + 0x2d], 0x9f
jmp 0x4a8909
test eax, eax
je 0x4a7b7e
test dl, 2
je 0x4a7b7e
xor eax, eax
xor esi, esi
mov dword [esp + 0x44], 0x9f
mov dword [esp + 0x30], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x38], esi
test dl, 0x20
je 0x4a79d4
mov eax, dword [ecx + 0x30]
mov esi, dword [eax]
mov dword [esp + 0x38], esi
mov eax, 1
test dl, 0x10
je 0x4a79e3
mov ecx, dword [ecx + 0x30]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x1c], edx
cmp dword [esp + 0x34], 0
je 0x4a79f8
mov eax, esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x38], esi
mov dword [esp + 0x1c], eax
test esi, esi
je 0x4a7a68
mov eax, dword [esp + 0x38]
mov esi, dword [eax]
mov eax, dword [esi + 0x10]
lea ecx, [esp + 0x58]
push ecx
mov ecx, edi
mov dword [esp + 0x18], 0x413f4042
call fcn.0047af00
movzx ecx, byte [esi]
mov edx, dword [esp + 0x30]
add esp, 4
mov edi, eax
mov eax, dword [esp + 0x40]
push edi
push edx
movzx edx, byte [esp + ecx - 0x34]
push eax
push edx
mov esi, ebx
call fcn.00463e10
mov eax, dword [esp + 0x34]
add esp, 0x10
mov ecx, 1
call fcn.00479a80
mov esi, dword [esp + 0x58]
mov edx, eax
call fcn.0047c390
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x10]
call fcn.004a6d70
mov edi, dword [esp + 0x24]
jmp 0x4a7a8b
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x40]
neg edx
sbb edx, edx
push eax
and edx, 0xfffffffd
push ecx
add edx, 0x6d
push edx
mov esi, ebx
call fcn.00463f20
add esp, 0xc
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4a7aec
mov esi, dword [eax]
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
mov dword [esp + 0x34], eax
mov eax, dword [esi + 0x10]
push eax
push edi
call fcn.0047b050
mov al, byte [esi]
add esp, 0xc
cmp al, 0x52
je 0x4a7aca
cmp al, 0x50
je 0x4a7aca
xor ecx, ecx
cmp dword [esp + 0x34], ecx
setne cl
lea ecx, [ecx + ecx + 0x50]
mov dword [esp + 0x44], ecx
jmp 0x4a7adb
xor edx, edx
cmp dword [esp + 0x34], edx
sete dl
lea edx, [edx + edx + 0x51]
mov dword [esp + 0x44], edx
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x10]
call fcn.004a6d70
mov edi, dword [esp + 0x24]
cmp dword [esp + 0x34], 0
mov eax, dword [esp + 0x10]
mov esi, dword [ebx + 0x20]
mov edx, dword [esp + 0x40]
sete cl
add cl, 7
cmp dword [esp + 0x44], 0x9f
mov byte [eax + 0x2d], cl
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], esi
je 0x4a8909
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
mov dword [esp + 0x3c], eax
mov eax, edx
push eax
push 0x68
mov esi, ebx
call fcn.00463f20
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x4c]
add esp, 0xc
push esi
push 0xffffffffffffffff
push ecx
mov edx, edi
call fcn.00479970
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x50]
add esp, 0xc
push esi
push edx
push eax
push ecx
mov esi, ebx
call fcn.00463e10
mov eax, dword [ebx + 4]
add esp, 0x10
test eax, eax
je 0x4a8909
mov ecx, dword [ebx + 0x20]
lea edx, [ecx + ecx*4]
mov byte [eax + edx*4 - 0x11], 0x53
jmp 0x4a8909
test edx, 0x200
je 0x4a8138
mov edx, dword [ecx + 0x1c]
movzx eax, word [ecx + 0x18]
mov dword [esp + 0x38], edx
mov edx, dword [esi + 8]
mov dword [esp + 0x1c], edx
mov edx, dword [ebp + 8]
mov dword [esp + 0x18], eax
xor eax, eax
test byte [edx + 0x22], 1
mov dword [esp + 0x3c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
mov byte [esp + 0x4b], al
mov byte [esp + 0x2b], al
mov byte [esp + 0x67], al
je 0x4a7be7
cmp byte [edx + 0x24], al
jle 0x4a7be7
mov eax, dword [esp + 0x38]
mov dx, word [eax + 0x2e]
cmp dx, word [esp + 0x18]
jbe 0x4a7be3
mov byte [esp + 0x2b], 1
mov eax, 1
jmp 0x4a7be7
mov eax, dword [esp + 0x50]
test byte [ecx + 0x24], 0x20
movzx edx, word [esp + 0x18]
mov dword [esp + 0x4c], edx
je 0x4a7c06
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + edx*4]
mov dword [esp + 0x3c], eax
inc edx
mov eax, 1
test byte [ecx + 0x24], 0x10
je 0x4a7ca5
mov ecx, dword [ecx + 0x30]
mov edx, dword [ecx + edx*4]
mov ecx, 0x100
mov eax, 1
mov dword [esp + 0x20], edx
mov dword [esp + 0x50], eax
test word [edx + 0x14], cx
je 0x4a7c72
mov eax, dword [edi + 0x48]
mov edx, dword [esp + 0x10]
inc eax
mov dword [edi + 0x48], eax
mov dword [edx + 0x24], eax
push eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [esp + 0x50]
xor edx, edx
cmp byte [eax + ecx], 1
mov esi, ebx
sete dl
xor edx, dword [esp + 0x38]
push edx
push 0x17
call fcn.00463f20
mov edx, dword [esp + 0x1c]
mov ecx, dword [ebx + 0x20]
mov eax, dword [esp + 0x5c]
add esp, 0xc
mov dword [edx + 0x28], ecx
mov esi, edx
cmp dword [esp + 0x3c], 0
jne 0x4a7ca5
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 4]
mov ecx, dword [esp + 0x4c]
movsx ecx, word [edx + ecx*2]
test ecx, ecx
js 0x4a7ca5
mov edx, dword [esp + 0x38]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + 4]
lea ecx, [ecx + ecx*2]
cmp byte [edx + ecx*8 + 0x14], 0
jne 0x4a7ca5
mov byte [esp + 0x2b], 1
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0x44]
push ecx
push eax
push edx
push esi
push edi
call fcn.004a7010
add esp, 0x14
cmp dword [esp + 0x44], 0
mov dword [esp + 0x2c], eax
je 0x4a7cd4
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x4c]
mov dl, byte [ecx + eax]
mov byte [esp + 0x4b], dl
mov eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x14], eax
movzx eax, word [ecx + 0x2e]
mov dword [esp + 0x58], eax
cmp word [esp + 0x18], ax
jae 0x4a7d07
mov ecx, dword [ecx + 0x1c]
mov eax, dword [esp + 0x4c]
xor edx, edx
cmp byte [eax + ecx], dl
sete dl
cmp dword [esp + 0x34], edx
je 0x4a7d15
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x34], 0
je 0x4a7d32
cmp ax, word [esp + 0x18]
jne 0x4a7d32
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x3c], eax
mov al, byte [esp + 0x2b]
mov dword [esp + 0x20], ecx
mov byte [esp + 0x2b], 0
mov byte [esp + 0x67], al
mov eax, dword [esp + 0x3c]
mov cl, 0x28
test eax, eax
je 0x4a7d49
mov dword [esp + 0x50], 0
test byte [eax + 0x12], cl
je 0x4a7d51
mov dword [esp + 0x50], 1
cmp dword [esp + 0x20], 0
je 0x4a7d69
mov edx, dword [esp + 0x20]
mov dword [esp + 0x6c], 0
test byte [edx + 0x12], cl
je 0x4a7d71
mov dword [esp + 0x6c], 1
test eax, eax
jne 0x4a7d80
mov dword [esp + 0x68], eax
cmp word [esp + 0x18], ax
jbe 0x4a7d88
mov dword [esp + 0x68], 1
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x18], ecx
test eax, eax
je 0x4a7e40
mov edx, dword [esp + 0x3c]
add ecx, dword [esp + 0x2c]
mov eax, dword [edx]
mov eax, dword [eax + 0x10]
push ecx
push eax
push edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x64], ecx
call fcn.0047b050
mov ecx, dword [esp + 0x48]
mov eax, 0x100
add esp, 0xc
test word [ecx + 0x14], ax
je 0x4a7dd2
push esi
mov ecx, ebx
call fcn.004a73c0
add esp, 4
mov edi, dword [esp + 0x30]
mov eax, edi
call fcn.004783d0
test eax, eax
je 0x4a7df7
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x58]
push edx
push eax
push 0x4c
mov esi, ebx
call fcn.00463f20
add esp, 0xc
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x4c]
test eax, eax
je 0x4a7e36
mov bl, byte [esi + eax]
mov eax, edi
call fcn.00476770
cmp al, 0x41
jne 0x4a7e18
mov ecx, dword [esp + 0x44]
mov byte [esi + ecx], al
mov edx, dword [esp + 0x44]
mov dl, byte [esi + edx]
mov ecx, edi
call fcn.00478480
mov ebx, dword [esp + 0x7c]
test eax, eax
je 0x4a7e36
mov eax, dword [esp + 0x44]
mov byte [esi + eax], 0x41
inc dword [esp + 0x18]
mov edi, dword [esp + 0x24]
jmp 0x4a7e6f
cmp byte [esp + 0x2b], 0
je 0x4a7e73
add ecx, dword [esp + 0x2c]
mov esi, ebx
push ecx
push 0
push 0x1a
call fcn.00463f20
mov eax, 1
add esp, 0xc
add dword [esp + 0x18], eax
mov dword [esp + 0x50], 0
mov dword [esp + 0x68], eax
mov esi, dword [esp + 0x10]
movzx eax, byte [esp + 0x2b]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
push edx
sub ecx, eax
mov eax, dword [esp + 0x48]
push edi
call fcn.004a6de0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x60]
push edx
mov edx, dword [esp + 0x7c]
push eax
lea eax, [ecx + edx*2]
mov ecx, dword [esp + 0x4c]
movzx edx, byte [ecx + eax*2 + 0x689b50]
push edx
mov eax, ebx
call fcn.004640d0
mov edi, dword [esp + 0x68]
add esp, 0x1c
cmp dword [esp + 0x20], 0
mov dword [esp + 0x18], edi
je 0x4a7f82
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov esi, dword [ecx + 0x10]
add edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
mov ecx, 1
mov dword [esp + 0x58], esi
call fcn.00479a80
push edi
push esi
push eax
call fcn.0047b050
mov edx, dword [esp + 0x2c]
mov ecx, 0x100
add esp, 0xc
test word [edx + 0x14], cx
je 0x4a7f1e
mov eax, dword [esp + 0x10]
push eax
mov ecx, ebx
call fcn.004a73c0
add esp, 4
mov eax, esi
call fcn.004783d0
test eax, eax
je 0x4a7f3b
mov ecx, dword [esp + 0x14]
push ecx
push edi
push 0x4c
mov esi, ebx
call fcn.00463f20
add esp, 0xc
mov esi, dword [esp + 0x58]
mov bl, byte [esp + 0x4b]
mov eax, esi
call fcn.00476770
cmp al, 0x41
je 0x4a7f74
mov dl, byte [esp + 0x4b]
mov ecx, esi
call fcn.00478480
test eax, eax
jne 0x4a7f74
mov edx, dword [esp + 0x24]
push edi
push edx
lea eax, [esp + 0x53]
mov ecx, 1
call fcn.004a6de0
add esp, 8
inc dword [esp + 0x18]
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x7c]
jmp 0x4a7fa7
cmp byte [esp + 0x67], 0
je 0x4a7fab
mov eax, edi
add eax, dword [esp + 0x2c]
mov esi, ebx
push eax
push 0
push 0x1a
call fcn.00463f20
add esp, 0xc
mov dword [esp + 0x6c], 0
inc edi
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x70]
call fcn.00445870
mov edx, dword [ebx + 0x20]
mov dword [esi + 0x34], edx
test edi, edi
je 0x4a7fed
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push edi
push eax
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x78]
push edx
movzx edx, byte [ecx + eax*2 + 0x689b58]
push edx
mov eax, ebx
call fcn.004640d0
add esp, 0x14
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x10]
call fcn.004a6d70
mov eax, dword [esp + 0x20]
call fcn.004a6d70
cmp dword [esp + 0x54], 0
jne 0x4a80f8
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0xc]
test byte [eax + 0x2a], 0x20
jne 0x4a805e
mov eax, dword [esp + 0x24]
inc dword [eax + 0x48]
mov edi, dword [eax + 0x48]
mov ecx, dword [esp + 0x1c]
push edi
push ecx
push 0x71
mov esi, ebx
call fcn.00463f20
mov esi, dword [esp + 0x4c]
mov edx, dword [esp + 0x30]
add esp, 0xc
push edi
push 0xffffffffffffffff
push esi
call fcn.00479970
add esp, 0xc
push edi
push esi
push 0x43
mov esi, ebx
call fcn.00463f20
add esp, 0xc
jmp 0x4a80f4
mov edx, dword [esp + 0x40]
cmp edx, dword [esp + 0x1c]
je 0x4a80f8
call fcn.00481230
movzx esi, word [eax + 0x2e]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x14], eax
call fcn.0047c3c0
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
xor eax, eax
xor edi, edi
cmp ax, word [ecx + 0x2e]
jae 0x4a80d0
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
lea eax, [edi + edx]
mov edx, dword [ecx + 4]
mov si, word [edx + edi*2]
mov edx, dword [esp + 0x38]
push eax
call fcn.00481250
mov ecx, dword [esp + 0x20]
cwde
push eax
push ecx
push 0x2f
mov esi, ebx
call fcn.00463e10
mov edx, dword [esp + 0x24]
movzx eax, word [edx + 0x2e]
inc edi
add esp, 0x10
cmp edi, eax
jl 0x4a8094
mov ecx, dword [esp + 0x14]
movzx edx, word [ecx + 0x2e]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x60]
push edx
mov edx, dword [esp + 0x44]
push eax
push ecx
push edx
push 0x45
mov eax, ebx
call fcn.004640d0
add esp, 0x14
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x5c]
test dword [eax + 0x24], 0x1000
je 0x4a810b
mov byte [edi + 0x2d], 0x9f
jmp 0x4a8119
cmp dword [esp + 0x34], 0
sete cl
add cl, 7
mov byte [edi + 0x2d], cl
mov edx, dword [esp + 0x1c]
mov dword [edi + 0x30], edx
mov cl, byte [eax + 0x26]
and cl, 1
mov byte [edi + 0x2e], cl
test byte [eax + 0x24], 0xf
jne 0x4a8909
jmp 0x4a8905
test edx, 0x2000
je 0x4a88c4
mov eax, dword [edi + 0x44]
inc dword [edi + 0x48]
mov dword [esp + 0x90], eax
inc eax
xor ecx, ecx
mov dword [edi + 0x44], eax
mov edi, dword [edi + 0x48]
mov eax, ebx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x38], edi
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x88], ecx
call fcn.00464180
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x80], eax
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x20], eax
mov eax, dword [edx + 0x10]
mov edx, dword [ecx + 0x30]
mov ecx, dword [ebp + 8]
mov dword [esp + 0x1c], eax
mov eax, dword [edx]
mov dword [esp + 0x3c], eax
mov eax, dword [eax + 0xc]
mov dword [esp + 0x30], eax
mov byte [esi + 0x2d], 0x10
mov dword [esi + 0x30], edi
mov al, byte [ecx + 0x29]
cmp al, 1
jbe 0x4a826f
mov esi, dword [esp + 0x70]
movzx eax, al
sub eax, dword [ebp + 0xc]
push 0
dec eax
lea edx, [eax + eax*4]
shl edx, 4
add edx, 0x58
push edx
mov dword [esp + 0x74], eax
call fcn.00445af0
add esp, 8
mov dword [esp + 0x44], eax
test eax, eax
jne 0x4a81f1
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [esp + 0x6c]
mov esi, dword [esp + 0x14]
inc al
movzx ecx, al
mov eax, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov dword [eax], ecx
lea edi, [eax + 8]
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
add edx, 8
cmp dword [esp + 0x6c], 1
jl 0x4a8276
mov ecx, dword [esp + 0x6c]
add eax, 0x58
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x10]
add eax, 0x7c
mov dword [esp + 0x68], eax
mov dword [esp + 0x54], ecx
jmp 0x4a8240
mov eax, dword [esp + 0x68]
movzx eax, byte [eax]
mov edi, dword [esp + 0x14]
lea esi, [eax + eax*4]
shl esi, 4
mov eax, 0x50
add dword [esp + 0x68], eax
add dword [esp + 0x14], eax
add esi, edx
dec dword [esp + 0x54]
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
jne 0x4a8240
jmp 0x4a8276
mov edx, dword [ecx + 4]
mov dword [esp + 0x44], edx
mov eax, dword [ebp + 8]
test byte [eax + 0x22], 8
jne 0x4a82f0
mov ecx, dword [esp + 0x1c]
test byte [ecx + 0x2a], 0x20
jne 0x4a82a8
mov edi, dword [esp + 0x24]
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
push 0
push 0x1a
mov esi, ebx
mov dword [esp + 0x38], eax
call fcn.00463f20
add esp, 0xc
jmp 0x4a82e3
mov eax, ecx
call fcn.00481230
mov edi, dword [esp + 0x24]
mov ecx, eax
mov eax, dword [edi + 0x44]
lea edx, [eax + 1]
mov dword [esp + 0x54], ecx
mov dword [edi + 0x44], edx
movzx ecx, word [ecx + 0x2e]
push ecx
push eax
push 0x39
mov esi, ebx
mov dword [esp + 0x38], eax
call fcn.00463f20
mov ecx, dword [esp + 0x60]
add esp, 0xc
mov eax, edi
call fcn.00464780
inc dword [edi + 0x48]
mov edx, dword [edi + 0x48]
mov dword [esp + 0x88], edx
mov eax, dword [esp + 0x38]
push eax
push 0
push 0x17
mov esi, ebx
call fcn.00463f20
mov edi, dword [esp + 0x84]
mov dword [esp + 0x80], eax
mov eax, dword [edi + 0xc]
add esp, 0xc
cmp eax, 1
jle 0x4a8437
xor esi, esi
mov dword [esp + 0x54], esi
cmp eax, esi
jle 0x4a8437
jmp 0x4a8330
mov ecx, dword [edi + 0x14]
lea eax, [esi + ecx]
mov ecx, dword [eax]
cmp eax, dword [esp + 0x3c]
je 0x4a8383
test byte [ecx + 4], 1
jne 0x4a8383
mov edx, dword [edi + 0x14]
test byte [esi + edx + 0x14], 2
lea eax, [esi + edx]
jne 0x4a8383
mov edx, 0x1fff
test word [eax + 0x12], dx
je 0x4a8383
mov eax, dword [esp + 0x70]
push 0
push 0
push ecx
push eax
call fcn.00477340
mov ecx, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x84]
call fcn.00476e80
add esp, 0x14
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x54]
inc eax
add esi, 0x30
mov dword [esp + 0x54], eax
cmp eax, dword [edi + 0xc]
jl 0x4a8330
cmp dword [esp + 0x20], 0
je 0x4a8437
mov edi, dword [esp + 0x24]
mov esi, dword [edi]
push 0
push 0x30
call fcn.00445af0
mov esi, eax
add esp, 8
test esi, esi
je 0x4a83d5
push 0x30
push 0
push esi
call fcn.005de050
add esp, 0xc
or edx, 0xffffffff
mov byte [esi], 0x48
mov word [esi + 0x22], dx
mov dword [esi + 0x18], 1
mov eax, dword [edi]
mov dword [esp + 0x54], eax
test esi, esi
jne 0x4a8400
mov ecx, eax
push esi
push ecx
call fcn.00477200
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x5c]
push edx
push eax
call fcn.00477200
add esp, 0x10
mov dword [esp + 0x20], esi
jmp 0x4a843b
mov eax, dword [esp + 0x20]
mov dword [esi + 0x10], eax
mov ecx, dword [eax + 4]
and ecx, 0x200100
or dword [esi + 4], ecx
call fcn.00476ad0
mov edx, dword [edi]
mov eax, dword [edx + 0x64]
cmp dword [esi + 0x18], eax
jle 0x4a8431
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push edi
call fcn.004483c0
add esp, 0xc
mov dword [esp + 0x20], esi
jmp 0x4a843b
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
xor ecx, ecx
mov dword [esp + 0x84], 0xf0
mov dword [esp + 0x34], ecx
cmp dword [eax + 0xc], ecx
jle 0x4a87a7
mov esi, dword [esp + 0x44]
mov dword [esp + 0x54], ecx
mov eax, dword [eax + 0x14]
add eax, dword [esp + 0x54]
mov ecx, dword [eax + 8]
cmp ecx, dword [esp + 0x40]
je 0x4a8480
mov edx, 0x400
test word [eax + 0x12], dx
je 0x4a878c
mov ecx, dword [esp + 0x20]
mov eax, dword [eax]
mov dword [esp + 0x68], 0
test ecx, ecx
je 0x4a849d
test byte [eax + 4], 1
jne 0x4a849d
mov dword [ecx + 0xc], eax
mov eax, ecx
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x84]
push ecx
push edx
push 0
push 0
push eax
push esi
push edi
call fcn.004af6d0
add esp, 0x1c
mov dword [esp + 0x8c], eax
test eax, eax
je 0x4a878c
mov ecx, dword [esp + 0x10]
movzx edx, byte [ecx + 0x2c]
mov ecx, dword [ebp + 0xc]
push 0
push edx
push ecx
lea edx, [eax + 0x2e0]
push esi
mov ecx, edi
call fcn.004a6ab0
mov edx, dword [ebp + 8]
add esp, 0x10
test byte [edx + 0x22], 8
jne 0x4a86ab
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x34]
dec ecx
mov dword [esp + 0x18], 0xffffffff
cmp eax, ecx
je 0x4a8514
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
test byte [eax + 0x2a], 0x20
jne 0x4a8565
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x24]
push 0
push edx
push eax
push 0xffffffffffffffff
push ecx
call fcn.00479de0
mov edx, dword [esp + 0x2c]
add esp, 0x14
push edx
push eax
mov eax, dword [esp + 0x34]
push 0
push eax
push 0x83
mov eax, ebx
call fcn.004640d0
add esp, 0x14
mov dword [esp + 0x68], eax
jmp 0x4a86ab
call fcn.00481230
movzx ecx, word [eax + 0x2e]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x24]
mov edx, dword [eax + 0x38]
mov esi, dword [eax + 0x3c]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x14], esi
cmp ecx, edx
jg 0x4a8597
add esi, ecx
sub edx, ecx
mov dword [eax + 0x3c], esi
mov dword [eax + 0x38], edx
jmp 0x4a85a6
mov edx, dword [eax + 0x48]
lea esi, [edx + 1]
add edx, ecx
mov dword [esp + 0x14], esi
mov dword [eax + 0x48], edx
mov dword [esp + 0x6c], 0
test ecx, ecx
jle 0x4a861a
mov eax, dword [esp + 0x14]
mov dword [esp + 0x5c], eax
mov esi, eax
lea esp, [esp]
mov ecx, dword [esp + 0x94]
mov edx, dword [ecx + 4]
mov eax, dword [esp + 0x6c]
movsx eax, word [edx + eax*2]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x24]
push 0
push esi
push ecx
push eax
push edx
call fcn.00479de0
add esp, 0x14
cmp eax, esi
je 0x4a8606
mov ecx, dword [esp + 0x5c]
push ecx
push eax
push 0x20
mov esi, ebx
call fcn.00463f20
mov esi, dword [esp + 0x68]
add esp, 0xc
mov eax, dword [esp + 0x6c]
inc eax
inc esi
mov dword [esp + 0x6c], eax
mov dword [esp + 0x5c], esi
cmp eax, dword [esp + 0x4c]
jl 0x4a85c0
mov esi, dword [esp + 0x18]
test esi, esi
je 0x4a8645
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
push edx
push eax
push 0
push ecx
push 0x46
mov eax, ebx
call fcn.004640d0
add esp, 0x14
mov dword [esp + 0x68], eax
test esi, esi
js 0x4a868d
mov edi, dword [esp + 0x88]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x14]
push edi
push edx
push eax
push 0x31
mov esi, ebx
call fcn.00463e10
mov ecx, dword [esp + 0x3c]
push 0
push edi
push ecx
push 0x6f
call fcn.00463e10
add esp, 0x20
cmp dword [esp + 0x18], 0
je 0x4a868d
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x4a868d
mov eax, dword [ebx + 0x20]
lea edx, [eax + eax*4]
mov byte [ecx + edx*4 - 0x11], 0x10
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
mov ecx, esi
call fcn.00479a80
cmp esi, dword [eax + 0x38]
jle 0x4a86ab
mov dword [eax + 0x38], esi
mov dword [eax + 0x3c], edi
mov esi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], esi
jg 0x4a86c3
push ebx
call fcn.00463d80
add esp, 4
test eax, eax
jne 0x4a86f3
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x80]
xor edi, edi
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov word [eax], 0xf
jmp 0x4a86f5
xor edi, edi
mov eax, dword [esp + 0x68]
cmp eax, edi
je 0x4a8718
mov ecx, dword [ebx + 0x20]
cmp ecx, eax
jbe 0x4a870e
mov edx, dword [ebx + 4]
lea eax, [eax + eax*4]
mov dword [edx + eax*4 + 8], ecx
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
dec eax
mov dword [ecx + 0x58], eax
mov eax, dword [esp + 0x8c]
cmp byte [eax + 0x27], 0
je 0x4a872d
mov dword [esp + 0x58], 1
mov esi, dword [eax + 0x320]
test dword [esi + 0x24], 0x200
je 0x4a8777
cmp dword [esp + 0x34], edi
je 0x4a874b
mov edx, dword [esp + 0x50]
cmp dword [esi + 0x1c], edx
jne 0x4a8777
mov ecx, dword [esp + 0x1c]
test byte [ecx + 0x2a], 0x20
je 0x4a8763
mov edx, dword [esi + 0x1c]
mov ecx, dword [edx + 0x34]
and cl, 3
cmp cl, 2
je 0x4a8777
mov edx, dword [esi + 0x1c]
or dword [esp + 0x84], 0x1000
mov dword [esp + 0x50], edx
jmp 0x4a877b
mov dword [esp + 0x50], edi
push eax
call fcn.004b0010
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x48]
add esp, 4
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
add dword [esp + 0x54], 0x30
inc ecx
mov dword [esp + 0x34], ecx
cmp ecx, dword [eax + 0xc]
jl 0x4a8461
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x10]
mov dword [esi + 0x38], eax
test eax, eax
je 0x4a87c0
mov eax, dword [esp + 0x90]
mov dword [esi + 8], eax
cmp dword [esp + 0x20], 0
je 0x4a87e0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x70]
push eax
push ecx
mov dword [eax + 0xc], 0
call fcn.00477200
add esp, 8
mov eax, dword [ebx + 0x20]
mov ecx, dword [esp + 0x74]
cmp eax, ecx
jbe 0x4a87f5
lea edx, [ecx + ecx*4]
mov ecx, dword [ebx + 4]
mov dword [ecx + edx*4 + 4], eax
mov edi, dword [esi + 0xc]
mov esi, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
cmp dword [edx + 0x54], esi
jg 0x4a8810
push ebx
call fcn.00463d80
add esp, 4
test eax, eax
jne 0x4a8833
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0xe
mov ecx, dword [ebx + 0x18]
or eax, 0xffffffff
sub eax, dword [esp + 0x80]
js 0x4a884f
mov edx, dword [ecx + 0x70]
test edx, edx
je 0x4a884f
mov esi, dword [ebx + 0x20]
mov dword [edx + eax*4], esi
mov edx, dword [ebx + 0x20]
mov eax, dword [ebp + 8]
dec edx
mov dword [ecx + 0x58], edx
cmp byte [eax + 0x29], 1
jbe 0x4a88ae
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4a88ae
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x4a88a5
cmp dword [ecx + 0x208], 0
je 0x4a887f
call fcn.00445830
jmp 0x4a88ae
cmp eax, dword [ecx + 0x114]
jb 0x4a88a5
cmp eax, dword [ecx + 0x118]
jae 0x4a88a5
mov edx, dword [ecx + 0x110]
mov dword [eax], edx
dec dword [ecx + 0xfc]
mov dword [ecx + 0x110], eax
jmp 0x4a88ae
push eax
call fcn.004457c0
add esp, 4
cmp dword [esp + 0x58], 0
jne 0x4a8909
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x10]
call fcn.004a6d70
jmp 0x4a8909
test byte [esp + 0x74], 8
je 0x4a88d1
mov byte [esi + 0x2d], 0x9f
jmp 0x4a8909
mov eax, dword [esp + 0x34]
mov cl, byte [eax + 0x689b5c]
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
mov byte [edi + 0x2d], cl
mov ecx, dword [esp + 0x40]
mov dword [edi + 0x30], ecx
movzx eax, byte [eax + 0x689b60]
push edx
push ecx
push eax
mov esi, ebx
call fcn.00463f20
add esp, 0xc
inc eax
mov dword [edi + 0x34], eax
mov byte [edi + 0x2f], 1
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + 0xc]
mov edi, dword [ecx + 0x14]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x18], eax
test eax, eax
jle 0x4a8a13
movzx eax, word [edi + 0x14]
xor esi, esi
test al, 6
jne 0x4a89f7
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x28]
mov ecx, dword [edi + 0x2c]
and eax, dword [edx + 0x48]
and ecx, dword [edx + 0x4c]
or eax, ecx
je 0x4a8951
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x27], 1
jmp 0x4a89f7
mov eax, dword [edi]
mov dword [esp + 0x74], eax
cmp dword [edx], esi
je 0x4a8965
test byte [eax + 4], 1
je 0x4a89f7
movzx ecx, word [edi + 0x14]
test ecx, 0x200
je 0x4a89be
mov esi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
mov edi, dword [edx + 0x24]
cmp dword [eax + 0x54], esi
jg 0x4a8993
push ebx
call fcn.00463d80
add esp, 4
test eax, eax
je 0x4a8993
mov esi, 1
jmp 0x4a89b6
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x2e
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x24]
push 0x10
push ecx
push eax
push edx
call fcn.0047b8a0
add esp, 0x10
test esi, esi
je 0x4a89f2
mov eax, dword [ebx + 0x20]
cmp eax, esi
jbe 0x4a89e8
mov edx, dword [ebx + 4]
lea ecx, [esi + esi*4]
mov dword [edx + ecx*4 + 8], eax
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
dec eax
mov dword [ecx + 0x58], eax
or word [edi + 0x14], 4
mov eax, dword [esp + 0x18]
dec eax
add edi, 0x30
mov dword [esp + 0x18], eax
mov dword [esp + 0x3c], edi
test eax, eax
jg 0x4a8923
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x18], ecx
test ecx, ecx
jle 0x4a8b57
test byte [eax + 0x14], 6
jne 0x4a8b3b
movzx ecx, word [eax + 0x12]
test cl, 0x82
je 0x4a8b3b
test ecx, 0x800
je 0x4a8b3b
mov edx, dword [eax + 8]
cmp edx, dword [esp + 0x40]
jne 0x4a8b3b
mov eax, dword [esp + 0x10]
cmp dword [eax], 0
jne 0x4a8b3b
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x14]
push 0x83
push edx
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x80]
mov dword [esp + 0x7c], ecx
mov ecx, dword [ebp + 0x10]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
push eax
xor edx, edx
call fcn.004aae60
mov edi, eax
add esp, 0x14
test edi, edi
je 0x4a8b3b
test byte [edi + 0x14], 4
jne 0x4a8b3b
mov esi, dword [esp + 0x70]
push 0
push 0x30
call fcn.00445af0
add esp, 8
mov dword [esp + 0x50], eax
test eax, eax
je 0x4a8b3b
mov esi, dword [edi]
mov edi, eax
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [esp + 0x60]
push 0x10
push ecx
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x2c]
push eax
push edx
call fcn.0047b8a0
mov eax, dword [esp + 0x60]
add esp, 0x10
cmp dword [esp + 0x70], 0
je 0x4a8b32
mov ecx, dword [esp + 0x70]
cmp dword [ecx + 0x208], 0
je 0x4a8b0c
call fcn.00445830
jmp 0x4a8b3b
cmp eax, dword [ecx + 0x114]
jb 0x4a8b32
cmp eax, dword [ecx + 0x118]
jae 0x4a8b32
mov edx, dword [ecx + 0x110]
mov dword [eax], edx
dec dword [ecx + 0xfc]
mov dword [ecx + 0x110], eax
jmp 0x4a8b3b
push eax
call fcn.004457c0
add esp, 4
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x3c]
dec ecx
add eax, 0x30
mov dword [esp + 0x18], ecx
mov dword [esp + 0x3c], eax
test ecx, ecx
jg 0x4a8a29
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x8c], eax
test eax, eax
je 0x4a8c7f
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x10]
mov dword [edx + 0x1c], ecx
mov eax, dword [ebx + 0x20]
mov edi, dword [ebx + 0x18]
mov dword [esp + 0x74], eax
cmp dword [edi + 0x54], eax
jg 0x4a8bf7
mov eax, dword [edi + 0x54]
test eax, eax
je 0x4a8b90
add eax, eax
jmp 0x4a8b95
mov eax, 0x33
mov ebx, dword [ebx + 4]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push 0
push eax
mov eax, dword [edi]
call fcn.00445b90
mov esi, eax
add esp, 8
test esi, esi
je 0x4a8c26
mov eax, dword [edi]
test eax, eax
je 0x4a8bd1
cmp esi, dword [eax + 0x114]
jb 0x4a8bd1
cmp esi, dword [eax + 0x118]
jae 0x4a8bd1
movzx ecx, word [eax + 0xf8]
jmp 0x4a8bdd
push esi
call dword [0x6c5360]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x74]
shr edx, 4
mov dword [edi + 0x54], edx
mov dword [ecx + 4], esi
mov ebx, ecx
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov ecx, 1
add dword [ebx + 0x20], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x78]
call fcn.00479e80
mov esi, dword [ebx + 0x14]
xor edi, edi
cmp dword [ebx + 0xc], edi
jle 0x4a8c7f
lea ecx, [ecx]
test byte [esi + 0x14], 6
jne 0x4a8c76
mov edx, dword [esp + 0x10]
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x2c]
and eax, dword [edx + 0x48]
and ecx, dword [edx + 0x4c]
or eax, ecx
jne 0x4a8c76
mov edx, dword [esp + 0x60]
mov eax, dword [esi]
mov ecx, dword [esp + 0x24]
push 0x10
push edx
push eax
push ecx
call fcn.0047b8a0
add esp, 0x10
or word [esi + 0x14], 4
inc edi
add esi, 0x30
cmp edi, dword [ebx + 0xc]
jl 0x4a8c40
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x48]
mov edx, dword [ecx + 0x4c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret