Function at 0x4d95a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xbc
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx + ecx*4]
push ebx
shl ecx, 4
push esi
mov esi, dword [eax]
mov ebx, dword [esi + 8]
lea edx, [eax + 0x50]
mov dword [esp + 0x74], edx
mov edx, dword [esi]
push edi
lea edi, [ecx + eax + 0x2f0]
movzx ecx, byte [edi + 0x2c]
mov dword [esp + 0x60], edx
mov edx, dword [edi + 0x40]
mov dword [esp + 0x4c], edx
mov edx, dword [eax + 4]
lea ecx, [ecx + ecx*8]
lea ecx, [edx + ecx*8 + 8]
mov edx, dword [eax + 0x1ec]
mov dword [esp + 0x7c], ecx
mov ecx, dword [ecx + 0x2c]
mov dword [esp + 0x68], 0
mov dword [esp + 0x2c], esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x30], 0
test edx, edx
jle 0x4d9638
add eax, 0x1f0
mov ecx, dword [esp + 0x44]
cmp dword [eax], ecx
je 0x4d9743
inc dword [esp + 0x30]
add eax, 4
cmp dword [esp + 0x30], edx
jl 0x4d961f
xor eax, eax
xor edx, edx
mov ecx, dword [ebp + 8]
not eax
and eax, dword [ebp + 0x10]
not edx
and edx, dword [ebp + 0x14]
mov dword [edi + 0x48], eax
mov dword [edi + 0x4c], edx
mov eax, dword [ecx + 0x40]
mov edx, dword [ecx + 0x44]
mov ecx, dword [ebp + 0xc]
call fcn.004f0c60
mov edx, dword [esp + 0x4c]
and eax, 1
test byte [edx + 0x24], 0x40
mov dword [esp + 0x1c], eax
je 0x4d967f
mov eax, dword [ebp + 8]
test byte [eax + 0x2c], 0x20
mov dword [esp + 0x28], 1
je 0x4d9687
mov dword [esp + 0x28], 0
mov eax, ebx
call fcn.004944a0
mov dword [esp + 0x50], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0xc], eax
mov eax, ebx
call fcn.004944a0
cmp byte [edi + 0x2c], 0
mov dword [esp + 0x84], eax
mov dword [edi + 0x18], eax
jbe 0x4d96d1
mov ecx, dword [esp + 0x7c]
test byte [ecx + 0x24], 8
je 0x4d96d1
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
push 0
push eax
push 0
push 0x46
push ebx
mov dword [edi], eax
call fcn.00493fe0
add esp, 0x14
mov eax, dword [ebp + 0xc]
test eax, eax
jle 0x4d96ed
mov ecx, edi
lea ebx, [ebx]
cmp dword [ecx], 0
jne 0x4d96ed
dec eax
sub ecx, 0x50
test eax, eax
jg 0x4d96e0
lea edx, [eax + eax*4]
mov eax, dword [ebp + 8]
shl edx, 4
mov ecx, dword [edx + eax + 0x2fc]
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x20], ecx
mov ecx, dword [edx + 0x28]
test cl, 0x10
je 0x4d9758
mov eax, edx
mov esi, dword [eax + 0x1c]
mov eax, dword [eax + 0x18]
push eax
push 0
push esi
push 0xd
push ebx
call fcn.00493fe0
mov ecx, dword [esp + 0x64]
add esp, 0x14
push 0
push ecx
push esi
push 0xe
push ebx
call fcn.00493fe0
add esp, 0x14
mov dword [edi + 0x34], eax
mov byte [edi + 0x2d], 0xb
jmp 0x4daf3d
mov ecx, dword [esp + 0x30]
mov eax, 1
xor edx, edx
call fcn.004f07e0
jmp 0x4d963c
mov eax, dword [esp + 0x4c]
mov edx, dword [eax + 0x24]
mov dword [esp + 0x10], edx
test edx, 0x400
je 0x4d9ba4
movzx edx, word [eax + 0x28]
lea ecx, [edx + 2]
mov dword [esp + 0x10], edx
cmp ecx, 1
jne 0x4d979f
mov cl, byte [esi + 0x13]
test cl, cl
jne 0x4d978e
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
jmp 0x4d97d8
dec cl
mov byte [esi + 0x13], cl
movzx ecx, cl
mov ecx, dword [esi + ecx*4 + 0x90]
jmp 0x4d97d8
mov edx, dword [esi + 0x20]
mov dword [esp + 0x18], edx
mov edx, dword [esi + 0x1c]
cmp ecx, edx
jg 0x4d97c0
mov edx, dword [esp + 0x18]
add edx, ecx
mov dword [esi + 0x20], edx
mov edx, dword [esi + 0x1c]
sub edx, ecx
mov dword [esi + 0x1c], edx
jmp 0x4d97d0
mov edx, dword [esi + 0x2c]
inc edx
mov dword [esp + 0x18], edx
mov edx, dword [esi + 0x2c]
add edx, ecx
mov dword [esi + 0x2c], edx
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], 0
test edx, edx
jle 0x4d986a
mov edx, dword [esp + 0x3c]
add edx, 2
mov dword [esp + 0x30], edx
mov ecx, dword [eax + 0x30]
mov edx, dword [esp + 0x14]
mov ecx, dword [ecx + edx*4]
test ecx, ecx
je 0x4d9857
test byte [ecx + 0xc], 1
je 0x4d9831
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x18]
push edx
push eax
push edi
push ecx
push esi
call fcn.004d8bf0
mov ecx, dword [edi + 0x10]
add esp, 0x18
mov dword [esp + 0x18], ecx
jmp 0x4d9853
mov edx, dword [esp + 0x30]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
push 1
push edx
mov ebx, esi
call fcn.004d9400
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x34]
mov ebx, dword [esp + 0x3c]
add esp, 8
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
inc dword [esp + 0x30]
inc ecx
cmp ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
jl 0x4d97fa
mov ecx, dword [eax + 0x18]
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x28], ecx
mov ecx, dword [ebx + 0x88]
cmp dword [edx + 0x30], ecx
jg 0x4d989d
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x28]
push 0
push eax
push ecx
push 0x46
mov eax, ebx
call fcn.00493fa0
mov eax, dword [esp + 0x5c]
add esp, 0x10
jmp 0x4d98d1
lea edx, [ecx + 1]
mov dword [ebx + 0x88], edx
mov edx, dword [ebx + 0x58]
lea ecx, [ecx + ecx*4]
lea ecx, [edx + ecx*4]
xor edx, edx
mov word [ecx + 2], dx
mov edx, dword [esp + 0x28]
mov dword [ecx + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [ecx + 8], edx
xor edx, edx
mov byte [ecx], 0x46
mov dword [ecx + 0xc], edx
mov dword [ecx + 0x10], edx
mov byte [ecx + 1], dl
mov ecx, dword [esp + 0x3c]
mov edx, dword [ebx + 0xc]
inc ecx
mov dword [esp + 0x28], ecx
mov ecx, dword [ebx + 0x88]
cmp dword [edx + 0x30], ecx
jg 0x4d9906
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
push 0x46
mov eax, ebx
call fcn.00493fa0
mov eax, dword [esp + 0x5c]
add esp, 0x10
jmp 0x4d993a
lea edx, [ecx + 1]
mov dword [ebx + 0x88], edx
mov edx, dword [ebx + 0x58]
lea ecx, [ecx + ecx*4]
lea ecx, [edx + ecx*4]
xor edx, edx
mov word [ecx + 2], dx
mov edx, dword [esp + 0x10]
mov dword [ecx + 4], edx
mov edx, dword [esp + 0x28]
mov dword [ecx + 8], edx
xor edx, edx
mov byte [ecx], 0x46
mov dword [ecx + 0xc], edx
mov dword [ecx + 0x10], edx
mov byte [ecx + 1], dl
movzx ecx, byte [eax + 0x1c]
mov edx, dword [ebx + 0xc]
mov eax, dword [eax + 0x20]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffa
dec ecx
mov dword [esp + 0x28], ecx
mov ecx, dword [ebx + 0x88]
cmp dword [edx + 0x30], ecx
mov dword [esp + 0x20], eax
jg 0x4d997c
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x44]
push eax
push ecx
push edx
push 9
mov eax, ebx
call fcn.00493fa0
add esp, 0x10
jmp 0x4d99b9
lea eax, [ecx + 1]
mov dword [ebx + 0x88], eax
mov eax, dword [ebx + 0x58]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
xor edx, edx
mov word [eax + 2], dx
mov edx, dword [esp + 0x44]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x18]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x3c]
mov byte [eax], 9
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
mov eax, ecx
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
push ecx
push edx
push eax
push ebx
call fcn.00494be0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x54]
mov edx, dword [ebp + 8]
mov byte [eax + 0x1c], 0
mov dword [edi + 0x30], ecx
mov al, byte [edx + 0x31]
add esp, 0x10
neg al
sbb al, al
and al, 0x6f
add al, 0x3c
mov byte [edi + 0x2d], al
mov ecx, dword [ebx + 0x88]
mov eax, dword [edi + 0x38]
mov dword [edi + 0x34], ecx
mov ecx, dword [esp + 0x10]
add ecx, 0xffffffff
mov dword [esp + 0x14], ecx
js 0x4daf3d
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
cmp ecx, 0x10
mov eax, dword [edx + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x1c], eax
jge 0x4d9a44
mov dx, word [edx + 0x1e]
shr dx, cl
test dl, 1
je 0x4d9a44
mov esi, edi
call fcn.004d88c0
jmp 0x4d9b90
test byte [eax + 0xc], 1
je 0x4d9b94
mov eax, dword [esp + 0x60]
cmp byte [eax + 0x49], 0
jne 0x4d9aa6
mov eax, dword [esp + 0x28]
mov ecx, dword [edi + 0x3c]
sub eax, 0x14
mov dword [esp + 0x28], eax
mov eax, dword [ecx + eax + 4]
test eax, eax
jge 0x4d9a75
mov eax, dword [ebx + 0x88]
dec eax
mov edx, dword [ebx]
cmp byte [edx + 0x49], 0
je 0x4d9a84
mov eax, 0x539e70
jmp 0x4d9a8d
mov ecx, dword [ebx + 0x58]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov edx, dword [eax + 0xc]
mov ecx, dword [eax + 8]
push edx
mov edx, dword [eax + 4]
movzx eax, byte [eax]
push ecx
push edx
push eax
push ebx
call fcn.00493fe0
add esp, 0x14
mov eax, dword [esi]
push 0
push 0x34
call fcn.004754b0
add esp, 8
mov dword [esp + 0x18], eax
test eax, eax
je 0x4d9b94
push 0x34
mov ebx, eax
push 0
push ebx
call fcn.004f0a6a
or ecx, 0xffffffff
add esp, 0xc
mov byte [ebx], 0x35
mov word [ebx + 0x22], cx
call fcn.004a7900
mov esi, dword [esp + 0x2c]
mov edx, dword [esi]
mov eax, dword [edx + 0x70]
cmp dword [ebx + 0x18], eax
jle 0x4d9afa
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
call fcn.00478120
add esp, 8
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov esi, dword [esp + 0x60]
push 0
push 0x35
mov eax, esi
mov dword [ebx + 0xc], edx
call fcn.004754b0
mov edi, eax
add esp, 8
test edi, edi
je 0x4d9b45
push 0x34
push 0
push edi
call fcn.004f0a6a
add esp, 0xc
or eax, 0xffffffff
mov word [edi + 0x22], ax
lea eax, [edi + 0x34]
mov byte [edi], 0xa4
mov dword [edi + 8], eax
mov byte [eax], 0
mov dword [edi + 0x18], 1
mov dword [ebx + 0x10], edi
test edi, edi
je 0x4d9b73
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
lea eax, [edx + ecx + 2]
mov ecx, dword [esp + 0x38]
mov dword [edi + 0x1c], eax
mov edx, dword [ecx + 0x18]
mov eax, dword [esp + 0x2c]
push 0
push edx
push ebx
push eax
call fcn.004ace40
add esp, 0x10
mov eax, dword [esp + 0x18]
push eax
push esi
mov dword [eax + 0xc], 0
call fcn.004a7fb0
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
add esp, 8
mov esi, dword [esp + 0x2c]
sub dword [esp + 0x14], 1
jns 0x4d9a15
jmp 0x4daf3d
mov edx, dword [esp + 0x10]
and edx, 0x100
je 0x4d9c1c
test byte [esp + 0x10], 5
je 0x4d9c1c
mov ecx, eax
mov edx, dword [ecx + 0x30]
mov eax, dword [edx]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push ecx
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x20]
push ecx
push 0
push edi
push eax
push esi
call fcn.004d8bf0
add esp, 0x18
cmp eax, dword [esp + 0x40]
je 0x4d9bfe
mov edx, dword [esp + 0x40]
test edx, edx
je 0x4d9bfe
mov cl, byte [esi + 0x13]
cmp cl, 8
jae 0x4d9bfe
movzx ecx, cl
mov dword [esi + ecx*4 + 0x90], edx
inc byte [esi + 0x13]
mov edx, dword [edi + 0x10]
push eax
mov eax, dword [esp + 0x48]
push edx
push eax
push 0x1e
push ebx
call fcn.00493fe0
add esp, 0x14
mov byte [edi + 0x2d], 0xab
jmp 0x4daf3d
test edx, edx
mov edx, dword [esp + 0x10]
je 0x4d9ea6
test dl, 2
je 0x4d9ea6
xor ecx, ecx
mov dword [esp + 0x18], 0xab
mov dword [esp + 0x70], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x30], ecx
test dl, 0x20
je 0x4d9c61
mov ecx, dword [eax + 0x30]
mov ecx, dword [ecx]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x14], 1
test dl, 0x10
je 0x4d9c74
mov edx, dword [eax + 0x30]
mov eax, dword [esp + 0x14]
mov edx, dword [edx + eax*4]
mov dword [esp + 0x40], edx
cmp dword [esp + 0x1c], 0
je 0x4d9c89
mov eax, ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x40], eax
test ecx, ecx
je 0x4d9d79
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
mov eax, dword [eax + 0x10]
mov ecx, eax
mov byte [esp + 0x10], 0x19
mov byte [esp + 0x11], 0x17
mov byte [esp + 0x12], 0x16
mov byte [esp + 0x13], 0x18
mov dword [esp + 0x20], eax
call fcn.004a7330
test eax, eax
je 0x4d9d10
mov al, byte [esi + 0x13]
test al, al
jne 0x4d9cd0
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x4d9cdf
dec al
movzx ecx, al
mov byte [esi + 0x13], al
mov eax, dword [esi + ecx*4 + 0x90]
mov edi, dword [esp + 0x28]
push 1
mov dword [esp + 0x68], eax
mov dword [esp + 0x24], eax
push eax
mov eax, dword [edi + 0x10]
mov ebx, esi
call fcn.004d9400
movzx edx, byte [edi]
mov ebx, dword [esp + 0x3c]
inc edx
and edx, 2
add esp, 8
or edx, 1
movzx eax, byte [esp + edx + 0x10]
jmp 0x4d9d42
lea eax, [esp + 0x64]
push eax
mov eax, dword [esp + 0x24]
mov ecx, esi
call fcn.004ac680
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x34]
add esp, 4
mov esi, edi
call fcn.004d88c0
mov ecx, dword [esp + 0x28]
movzx edx, byte [ecx]
movzx eax, byte [esp + edx - 0x26]
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x48]
push edx
push ecx
push eax
push ebx
call fcn.00493fe0
mov ecx, dword [esp + 0x78]
add esp, 0x14
test ecx, ecx
je 0x4d9d9f
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x4d9d9f
movzx edx, al
mov dword [esi + edx*4 + 0x90], ecx
inc byte [esi + 0x13]
jmp 0x4d9d9f
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x44]
xor edx, edx
cmp dword [esp + 0x1c], edx
push 0
sete dl
push eax
push ecx
lea edx, [edx*4 + 0x20]
push edx
push ebx
call fcn.00493fe0
add esp, 0x14
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4d9e1d
mov esi, dword [eax]
mov ebx, dword [esp + 0x2c]
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
push 1
mov dword [esp + 0x74], eax
push eax
mov eax, dword [esi + 0x10]
call fcn.004d9400
mov edi, dword [esi + 0x10]
add esp, 8
mov ecx, edi
call fcn.004a7330
test eax, eax
jne 0x4d9df0
mov al, byte [esi]
cmp al, 0x38
je 0x4d9ddd
cmp al, 0x36
jne 0x4d9df0
xor eax, eax
cmp dword [esp + 0x1c], eax
sete al
lea eax, [eax + eax + 0x37]
mov dword [esp + 0x18], eax
jmp 0x4d9e01
xor ecx, ecx
cmp dword [esp + 0x1c], ecx
setne cl
lea ecx, [ecx + ecx + 0x36]
mov dword [esp + 0x18], ecx
mov ecx, edi
call fcn.004a7330
test eax, eax
jne 0x4d9e19
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x38]
call fcn.004d88c0
mov ebx, dword [esp + 0x34]
cmp dword [esp + 0x1c], 0
mov esi, dword [ebx + 0x88]
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
sete dl
add dl, 4
mov byte [eax + 0x2d], dl
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], esi
cmp edi, 0xab
je 0x4daf3d
mov eax, dword [esp + 0x2c]
inc dword [eax + 0x2c]
mov esi, dword [eax + 0x2c]
push 0
push esi
push ecx
push 0x81
push ebx
call fcn.00493fe0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x84]
add esp, 0x14
push esi
push eax
push ecx
push edi
push ebx
call fcn.00493fe0
mov eax, dword [ebx + 0x88]
add esp, 0x14
test eax, eax
jle 0x4daf3d
lea edx, [eax + eax*4]
mov eax, dword [ebx + 0x58]
mov ecx, 0x53
mov word [eax + edx*4 - 0x12], cx
jmp 0x4daf3d
test edx, 0x200
je 0x4da72a
movzx ecx, word [eax + 0x1a]
movzx edx, word [eax + 0x18]
mov dword [esp + 0x74], ecx
movzx ecx, word [eax + 0x1c]
mov dword [esp + 0x58], edx
movzx edx, cx
mov dword [esp + 0x20], ecx
xor ecx, ecx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x30], ecx
mov byte [esp + 0x27], cl
mov byte [esp + 0x6f], cl
mov ecx, dword [edi + 8]
mov dword [esp + 0x3c], ecx
mov ecx, dword [ebp + 8]
test byte [ecx + 0x2c], 1
mov dword [esp + 0x64], edx
mov edx, dword [eax + 0x20]
mov dword [esp + 0x68], edx
je 0x4d9f20
cmp byte [ecx + 0x2f], 0
jle 0x4d9f20
mov dx, word [edx + 0x32]
cmp dx, word [esp + 0x58]
jbe 0x4d9f20
mov byte [esp + 0x27], 1
mov dword [esp + 0x10], 1
test byte [eax + 0x24], 0x20
movzx ecx, word [esp + 0x58]
mov dword [esp + 0x5c], ecx
je 0x4d9f50
mov edx, dword [eax + 0x30]
mov edx, dword [edx + ecx*4]
inc ecx
mov dword [esp + 0x14], ecx
movzx ecx, word [eax + 0x1a]
cmp dword [esp + 0x10], ecx
mov dword [esp + 0x54], edx
jg 0x4d9f4c
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x14]
test byte [eax + 0x24], 0x10
je 0x4d9ff7
mov eax, dword [eax + 0x30]
mov ecx, dword [eax + ecx*4]
movzx eax, word [esp + 0x20]
cmp dword [esp + 0x10], eax
mov dword [esp + 0x48], ecx
jg 0x4d9f73
mov dword [esp + 0x10], eax
mov edx, 0x100
test word [ecx + 0xa], dx
je 0x4d9fc1
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
push 0
push eax
push 1
push 0x46
push ebx
mov dword [edi + 0x24], eax
call fcn.00493fe0
mov eax, dword [ebx + 0x88]
shl dword [edi + 0x24], 1
mov ecx, dword [esp + 0x7c]
mov dword [edi + 0x28], eax
mov edx, dword [ecx + 0x1c]
mov ecx, dword [esp + 0x70]
xor eax, eax
add esp, 0x14
cmp byte [ecx + edx], 1
sete al
xor eax, dword [esp + 0x1c]
or eax, dword [edi + 0x24]
mov dword [edi + 0x24], eax
cmp dword [esp + 0x54], 0
jne 0x4d9ff7
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + 4]
mov eax, dword [esp + 0x5c]
movsx eax, word [edx + eax*2]
test eax, eax
jl 0x4d9fed
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
mov edx, eax
shl edx, 4
cmp byte [ecx + edx + 0xc], 0
je 0x4d9ff2
cmp eax, 0xfffffffe
jne 0x4d9ff7
mov byte [esp + 0x27], 1
mov ecx, dword [esp + 0x68]
movzx eax, word [ecx + 0x32]
cmp word [esp + 0x58], ax
jae 0x4da01b
mov edx, dword [ecx + 0x1c]
mov ecx, dword [esp + 0x5c]
xor eax, eax
cmp byte [ecx + edx], al
sete al
cmp dword [esp + 0x1c], eax
je 0x4da031
cmp dword [esp + 0x1c], 0
je 0x4da066
mov edx, dword [esp + 0x68]
movzx eax, word [edx + 0x32]
cmp ax, word [esp + 0x58]
jne 0x4da066
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
movzx edx, word [esp + 0x64]
mov dword [esp + 0x54], eax
mov al, byte [esp + 0x27]
mov byte [esp + 0x6f], al
mov al, byte [esp + 0x74]
movzx ax, al
mov dword [esp + 0x48], ecx
movzx ecx, ax
mov byte [esp + 0x27], 0
mov dword [esp + 0x74], edx
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x40]
push edx
push eax
push ecx
push edi
push esi
call fcn.004d9050
add esp, 0x14
cmp dword [esp + 0x40], 0
mov dword [esp + 0x10], eax
je 0x4da0ae
cmp word [esp + 0x64], 0
je 0x4da0ae
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x5c]
lea ebx, [edx + eax]
mov eax, dword [esp + 0x60]
call fcn.004756d0
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x30], eax
mov ecx, dword [edi + 0x10]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x54]
mov dl, 0x28
test ecx, ecx
je 0x4da0cc
mov dword [esp + 0x70], 0
test byte [ecx + 0xc], dl
je 0x4da0d4
mov dword [esp + 0x70], 1
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4da0e9
mov dword [esp + 0x50], 0
test byte [eax + 0xc], dl
je 0x4da0f1
mov dword [esp + 0x50], 1
test ecx, ecx
jne 0x4da100
mov dword [esp + 0x20], ecx
cmp word [esp + 0x58], cx
jbe 0x4da108
mov dword [esp + 0x20], 1
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x14], edx
test ecx, ecx
je 0x4da21f
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edi, dword [ecx + 0x10]
movzx eax, word [esp + 0x74]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x5c]
add ecx, edx
push eax
push ecx
mov eax, edi
mov ebx, esi
mov dword [esp + 0x60], ecx
call fcn.004d9400
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x3c]
mov edx, 0x100
add esp, 8
test word [eax + 0xa], dx
je 0x4da190
mov eax, dword [ebx + 0x88]
mov ecx, dword [ebx]
dec eax
cmp byte [ecx + 0x49], 0
je 0x4da16b
mov eax, 0x539e70
jmp 0x4da174
lea edx, [eax + eax*4]
mov eax, dword [ebx + 0x58]
lea eax, [eax + edx*4]
mov esi, dword [esp + 0x38]
mov ecx, dword [esi + 0x24]
shr ecx, 1
mov dword [eax + 0xc], ecx
mov dl, byte [esi + 0x24]
and dl, 1
movzx cx, dl
mov word [eax + 2], cx
jmp 0x4da194
mov esi, dword [esp + 0x38]
mov eax, edi
call fcn.004a9270
test eax, eax
je 0x4da1b6
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x58]
push 0
push edx
push eax
push 0x32
push ebx
call fcn.00493fe0
add esp, 0x14
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4da1d4
mov ecx, dword [esp + 0x5c]
add eax, ecx
push eax
movzx eax, word [esp + 0x78]
push eax
push edi
call fcn.004d89a0
add esp, 0xc
movzx eax, word [esp + 0x74]
add dword [esp + 0x14], eax
mov ecx, edi
call fcn.004a7330
test eax, eax
jne 0x4da204
mov eax, dword [esp + 0x54]
call fcn.004d88c0
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x38]
mov byte [esp + 0x27], 0
jmp 0x4da255
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x38]
mov dword [esp + 0x70], 1
mov byte [esp + 0x27], 0
jmp 0x4da255
cmp byte [esp + 0x27], 0
je 0x4da255
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x10]
push 0
add edx, eax
push edx
push 0
push 0x49
push ebx
call fcn.00493fe0
mov eax, 1
add esp, 0x14
add dword [esp + 0x14], eax
mov dword [esp + 0x70], 0
mov dword [esp + 0x20], eax
movzx ecx, byte [esp + 0x27]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
sub edx, ecx
push edx
mov edx, dword [esp + 0x44]
mov ecx, esi
call fcn.004d8930
mov eax, dword [esp + 0x50]
movzx eax, word [eax + 0x2a]
add esp, 4
test ax, ax
jbe 0x4da289
movzx ecx, ax
cmp dword [esp + 0x14], ecx
je 0x4da2f6
mov edx, dword [esp + 0x4c]
test dword [edx + 0x24], 0x40000
je 0x4da2aa
mov eax, dword [esp + 0x3c]
push 0
push 0
push eax
push 0x77
push ebx
call fcn.00493fe0
add esp, 0x14
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x20]
lea eax, [ecx + edx*2]
mov ecx, dword [esp + 0x1c]
movzx eax, byte [ecx + eax*2 + 0x50bb68]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x40]
push ecx
push edx
push eax
push ebx
call fcn.00493fe0
mov ecx, dword [ebx]
add esp, 0x14
cmp byte [ecx + 0x49], 0
jne 0x4da2f6
mov ecx, dword [esp + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ebx + 0x58]
lea eax, [eax + edx*4]
mov byte [eax + 1], 0xfd
mov dword [eax + 0x10], ecx
cmp dword [esp + 0x48], 0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x14], edx
je 0x4da413
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x10]
movzx edi, word [esp + 0x64]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x5c]
add ecx, edx
push edi
push ecx
mov ebx, esi
mov dword [esp + 0x28], eax
mov dword [esp + 0x60], ecx
call fcn.004d9400
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x3c]
mov edx, 0x100
add esp, 8
test word [eax + 0xa], dx
je 0x4da383
mov eax, dword [ebx + 0x88]
mov ecx, dword [ebx]
dec eax
cmp byte [ecx + 0x49], 0
je 0x4da35e
mov eax, 0x539e70
jmp 0x4da367
lea edx, [eax + eax*4]
mov eax, dword [ebx + 0x58]
lea eax, [eax + edx*4]
mov esi, dword [esp + 0x38]
mov ecx, dword [esi + 0x24]
shr ecx, 1
mov dword [eax + 0xc], ecx
mov dl, byte [esi + 0x24]
and dl, 1
movzx cx, dl
mov word [eax + 2], cx
jmp 0x4da387
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x20]
call fcn.004a9270
test eax, eax
je 0x4da3ab
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x58]
push 0
push edx
push eax
push 0x32
push ebx
call fcn.00493fe0
add esp, 0x14
mov ebx, dword [esp + 0x30]
test ebx, ebx
je 0x4da3d5
mov ecx, dword [esp + 0x20]
push ebx
push edi
push ecx
call fcn.004d89a0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x38]
add esp, 0xc
push edi
mov edx, ebx
call fcn.004d8930
add esp, 4
mov ecx, dword [esp + 0x20]
add dword [esp + 0x14], edi
call fcn.004a7330
test eax, eax
jne 0x4da3fd
mov eax, dword [esp + 0x48]
call fcn.004d88c0
mov ebx, dword [esp + 0x34]
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x2c]
jmp 0x4da440
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x38]
mov dword [esp + 0x50], 1
jmp 0x4da440
cmp byte [esp + 0x6f], 0
je 0x4da440
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x10]
push 0
add edx, eax
push edx
push 0
push 0x49
push ebx
call fcn.00493fe0
add esp, 0x14
inc dword [esp + 0x14]
mov dword [esp + 0x50], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x60]
test ecx, ecx
je 0x4da497
test eax, eax
je 0x4da486
cmp dword [eax + 0x1d8], 0
je 0x4da466
mov eax, ecx
mov ecx, dword [esp + 0x60]
call fcn.00475120
jmp 0x4da493
cmp ecx, dword [eax + 0x128]
jb 0x4da486
cmp ecx, dword [eax + 0x12c]
jae 0x4da486
mov edx, dword [eax + 0x124]
mov dword [ecx], edx
mov dword [eax + 0x124], ecx
jmp 0x4da497
mov eax, dword [esp + 0x40]
push eax
call fcn.004750b0
add esp, 4
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x4da4e6
test eax, eax
je 0x4da4d9
cmp dword [eax + 0x1d8], 0
je 0x4da4b9
mov eax, ecx
mov ecx, dword [esp + 0x60]
call fcn.00475120
jmp 0x4da4e6
cmp ecx, dword [eax + 0x128]
jb 0x4da4d9
cmp ecx, dword [eax + 0x12c]
jae 0x4da4d9
mov edx, dword [eax + 0x124]
mov dword [ecx], edx
mov dword [eax + 0x124], ecx
jmp 0x4da4e6
mov eax, dword [esp + 0x30]
push eax
call fcn.004750b0
add esp, 4
cmp dword [esp + 0x14], 0
mov ecx, dword [ebx + 0x88]
mov dword [edi + 0x34], ecx
je 0x4da53b
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x1c]
movzx eax, byte [edx + eax*2 + 0x50bb70]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x40]
push edx
push ecx
push eax
push ebx
call fcn.00493fe0
mov edx, dword [ebx]
add esp, 0x14
cmp byte [edx + 0x49], 0
jne 0x4da53b
mov ecx, dword [ebx + 0x58]
mov edx, dword [esp + 0x14]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax + 1], 0xfd
mov dword [eax + 0x10], edx
mov eax, dword [esp + 0x4c]
test dword [eax + 0x24], 0x40000
je 0x4da55c
mov ecx, dword [esp + 0x3c]
push 0
push 1
push ecx
push 0x77
push ebx
call fcn.00493fe0
add esp, 0x14
cmp dword [esp + 0x28], 0
jne 0x4da6b0
mov edx, dword [esp + 0x68]
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x20
jne 0x4da5e0
mov ecx, dword [ebp + 8]
movzx eax, word [ecx + 0x2c]
test eax, 0x400
jne 0x4da5ac
test eax, 0x1000
je 0x4da58f
cmp byte [ecx + 0x31], 1
je 0x4da5ac
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x68]
mov eax, dword [ebp + 8]
call fcn.004d9300
mov edi, dword [esp + 0x38]
jmp 0x4da6b0
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
mov eax, dword [esp + 0x3c]
push 0
push esi
push eax
push 0x88
push ebx
call fcn.00493fe0
mov ecx, dword [esp + 0x58]
add esp, 0x14
push esi
push 0
push ecx
push 0x1f
push ebx
call fcn.00493fe0
add esp, 0x14
jmp 0x4da6b0
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x44], edx
je 0x4da6b0
call fcn.004b36a0
movzx esi, word [eax + 0x32]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x18], eax
call fcn.004adca0
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x20], eax
xor eax, eax
xor esi, esi
cmp ax, word [ecx + 0x32]
jae 0x4da673
mov ecx, dword [esp + 0x68]
movzx edx, word [ecx + 0x34]
xor eax, eax
mov dword [esp + 0x50], edx
test edx, edx
jle 0x4da649
mov edx, dword [esp + 0x18]
mov edx, dword [edx + 4]
movzx edx, word [edx + esi*2]
mov ecx, dword [ecx + 4]
cmp dx, word [ecx]
je 0x4da6e2
inc eax
add ecx, 2
cmp eax, dword [esp + 0x50]
jl 0x4da636
or eax, 0xffffffff
mov ecx, dword [esp + 0x20]
lea edx, [esi + ecx]
mov ecx, dword [esp + 0x3c]
push edx
cwde
push eax
push ecx
push 0x5a
push ebx
call fcn.00493fe0
mov edx, dword [esp + 0x2c]
movzx eax, word [edx + 0x32]
inc esi
add esp, 0x14
cmp esi, eax
jl 0x4da616
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x84]
movzx esi, word [ecx + 0x32]
mov ecx, dword [esp + 0x44]
push edx
push eax
push ecx
push 0x1c
push ebx
call fcn.00493fe0
mov edx, dword [ebx]
add esp, 0x14
cmp byte [edx + 0x49], 0
jne 0x4da6b0
mov ecx, dword [ebx + 0x58]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax + 1], 0xfd
mov dword [eax + 0x10], esi
cmp dword [edi], 0
jne 0x4da6cf
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x68]
push edx
mov edx, dword [esp + 0x48]
push eax
push ecx
call fcn.004d94e0
add esp, 0xc
mov eax, dword [esp + 0x4c]
test dword [eax + 0x24], 0x1000
je 0x4da6ea
mov byte [edi + 0x2d], 0xab
jmp 0x4da6f8
movzx eax, ax
jmp 0x4da64c
cmp dword [esp + 0x1c], 0
sete dl
add dl, 4
mov byte [edi + 0x2d], dl
mov ecx, dword [esp + 0x3c]
mov dword [edi + 0x30], ecx
mov dl, byte [eax + 0x26]
and dl, 1
mov byte [edi + 0x2e], dl
test byte [eax + 0x24], 0xf
jne 0x4da712
mov byte [edi + 0x2f], 1
cmp dword [esp + 0x28], 0
je 0x4daf3d
mov dword [esp + 0x68], 0
jmp 0x4daf3d
test dword [esp + 0x10], 0x2000
je 0x4daef9
mov eax, dword [esi + 0x28]
inc dword [esi + 0x2c]
mov dword [esp + 0x5c], eax
inc eax
xor ecx, ecx
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x2c]
mov eax, ebx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x40], esi
mov dword [esp + 0x30], ecx
mov dword [esp + 0x18], ecx
call fcn.004944a0
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax + 0x10]
mov eax, dword [edx + 0x30]
mov eax, dword [eax]
mov edx, dword [ebp + 8]
mov dword [esp + 0x54], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x1c], eax
mov byte [edi + 0x2d], 0x42
mov dword [edi + 0x30], esi
mov al, byte [edx + 0x2e]
mov dword [esp + 0x70], ecx
cmp al, 1
jbe 0x4da84c
movzx eax, al
sub eax, dword [ebp + 0xc]
push 0
dec eax
mov dword [esp + 0x24], eax
lea eax, [eax + eax*8]
lea ecx, [eax*8 + 0x50]
mov eax, dword [esp + 0x64]
push ecx
call fcn.00475470
add esp, 8
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x4da7dd
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x7c]
mov cl, dl
inc cl
movzx ecx, cl
mov dword [eax + 4], ecx
mov dword [eax], ecx
lea edi, [eax + 8]
mov ecx, 0x12
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
add ecx, 8
cmp edx, 1
mov dword [esp + 0x64], ecx
jl 0x4da855
mov edx, dword [esp + 0x38]
add eax, 0x50
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x20]
add edx, 0x7c
mov dword [esp + 0x20], eax
movzx eax, byte [edx]
mov edi, dword [esp + 0x28]
add dword [esp + 0x28], 0x48
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0x64]
lea esi, [eax + ecx*8]
mov ecx, 0x12
add edx, 0x50
sub dword [esp + 0x20], 1
rep movsd dword es:[edi], dword [esi]
jne 0x4da823
jmp 0x4da855
mov ecx, edx
mov edx, dword [ecx + 4]
mov dword [esp + 0x3c], edx
mov eax, dword [ebp + 8]
test byte [eax + 0x2c], 0x10
jne 0x4da8d6
mov ecx, dword [esp + 0x54]
test byte [ecx + 0x24], 0x20
jne 0x4da88c
mov esi, dword [esp + 0x2c]
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
push 0
push eax
push 0
push 0x49
push ebx
mov dword [esp + 0x44], eax
call fcn.00493fe0
add esp, 0x14
jmp 0x4da8cc
mov eax, ecx
call fcn.004b36a0
mov ecx, dword [esp + 0x2c]
mov esi, eax
mov eax, dword [ecx + 0x28]
lea edx, [eax + 1]
mov dword [ecx + 0x28], edx
movzx ecx, word [esi + 0x32]
push 0
push ecx
push eax
push 0x71
push ebx
mov dword [esp + 0x44], eax
call fcn.00493fe0
mov eax, dword [esp + 0x40]
add esp, 0x14
mov ebx, esi
call fcn.00494ca0
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x2c]
inc dword [esi + 0x2c]
mov edx, dword [esi + 0x2c]
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x40]
push 0
push eax
push 0
push 0x46
push ebx
call fcn.00493fe0
mov ebx, dword [esp + 0x8c]
mov dword [esp + 0x94], eax
mov eax, dword [ebx + 0xc]
add esp, 0x14
cmp eax, 1
jle 0x4da9de
xor edi, edi
test eax, eax
jle 0x4da9de
xor esi, esi
mov ecx, dword [ebx + 0x14]
lea eax, [esi + ecx]
mov ecx, dword [eax]
cmp eax, dword [esp + 0x1c]
je 0x4da965
mov edx, dword [ebx + 0x14]
test byte [esi + edx + 0xa], 6
lea eax, [esi + edx]
jne 0x4da965
mov edx, 0x1fff
test word [eax + 0xc], dx
je 0x4da965
test ecx, ecx
je 0x4da94e
mov eax, dword [esp + 0x60]
push 0
push 0
push ecx
push eax
call fcn.004a81b0
add esp, 0x10
jmp 0x4da950
xor eax, eax
mov ecx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x64]
call fcn.004a7cd0
add esp, 4
mov dword [esp + 0x48], eax
inc edi
add esi, 0x30
cmp edi, dword [ebx + 0xc]
jl 0x4da910
cmp dword [esp + 0x48], 0
je 0x4da9de
mov esi, dword [esp + 0x2c]
mov eax, dword [esi]
push 0
push 0x34
call fcn.004754b0
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4dab21
push 0x34
push 0
push ebx
call fcn.004f0a6a
mov eax, dword [esp + 0x54]
or edx, 0xffffffff
mov word [ebx + 0x22], dx
mov byte [ebx], 0x2c
mov dword [ebx + 0x10], eax
mov edx, dword [eax + 4]
and edx, 0x200104
or dword [ebx + 4], edx
add esp, 0xc
call fcn.004a7900
mov eax, esi
mov ecx, dword [eax]
mov eax, dword [ecx + 0x70]
cmp dword [ebx + 0x18], eax
jle 0x4da9da
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
call fcn.00478120
add esp, 8
mov dword [esp + 0x48], ebx
mov edx, dword [ebp + 8]
mov ax, word [edx + 0x2c]
mov ebx, dword [esp + 0x2c]
mov ecx, 0x400
and ax, cx
or ax, 0x20
movzx edx, ax
push str.MULTI_INDEX_OR
push 1
mov dword [esp + 0x54], edx
call fcn.00494270
mov eax, dword [esp + 0x78]
xor esi, esi
add esp, 8
cmp dword [eax + 0xc], esi
mov dword [esp + 0x20], esi
jle 0x4dad81
mov dword [esp + 0x64], esi
mov eax, dword [eax + 0x14]
add eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x14]
cmp ecx, dword [esp + 0x44]
je 0x4daa41
mov edx, 0x400
test word [eax + 0xc], dx
je 0x4dad6a
mov ecx, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0x28], 0
test ecx, ecx
je 0x4daa58
mov dword [ecx + 0xc], eax
mov eax, ecx
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x4c]
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x2c]
push ecx
push edx
push 0
push 0
push eax
push edi
push ebx
call fcn.004e28a0
add esp, 0x1c
mov dword [esp + 0x88], eax
test eax, eax
je 0x4dad6a
mov edx, edi
push 0
lea ecx, [eax + 0x2f0]
mov edi, ebx
call fcn.004d8580
mov eax, dword [ebp + 8]
add esp, 4
test byte [eax + 0x2c], 0x10
jne 0x4dac5d
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + 0xc]
dec edx
mov dword [esp + 0x74], 0xffffffff
cmp esi, edx
je 0x4daac1
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x54]
test byte [eax + 0x24], 0x20
jne 0x4dab33
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x34]
push 0
push edi
push ecx
push 0x81
push esi
call fcn.00493fe0
mov edx, dword [esp + 0x44]
add esp, 0x14
push edi
push 0
push edx
push 0x2a
push esi
call fcn.00493fe0
mov ecx, dword [esi]
add esp, 0x14
cmp byte [ecx + 0x49], 0
jne 0x4dab18
mov ecx, dword [esi + 0x58]
lea edx, [eax + eax*4]
lea ecx, [ecx + edx*4]
mov edx, dword [esp + 0x74]
mov byte [ecx + 1], 0xfd
mov dword [ecx + 0x10], edx
mov dword [esp + 0x28], eax
jmp 0x4dac61
mov eax, dword [esp + 0x48]
mov ecx, dword [esi]
push eax
push ecx
call fcn.004a7fb0
jmp 0x4da9d7
call fcn.004b36a0
movzx edi, word [eax + 0x32]
mov esi, edi
mov ecx, ebx
mov dword [esp + 0x90], eax
call fcn.004adca0
xor esi, esi
mov dword [esp + 0x10], eax
test edi, edi
jle 0x4dab8b
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x54]
lea ecx, [esi + eax]
mov eax, dword [edx + 4]
mov edx, dword [esp + 0x34]
movsx eax, word [eax + esi*2]
push ecx
mov ecx, dword [esp + 0x48]
push ecx
push edx
call fcn.004ab540
inc esi
add esp, 0xc
cmp esi, edi
jl 0x4dab56
mov ebx, dword [esp + 0x2c]
cmp dword [esp + 0x74], 0
mov esi, dword [esp + 0x34]
je 0x4dabd0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x30]
push eax
push 0
push ecx
push 0x1d
push esi
call fcn.00493fe0
mov edx, dword [esi]
add esp, 0x14
cmp byte [edx + 0x49], 0
jne 0x4dabc5
mov edx, dword [esi + 0x58]
lea ecx, [eax + eax*4]
lea ecx, [edx + ecx*4]
mov byte [ecx + 1], 0xfd
mov dword [ecx + 0x10], edi
cmp dword [esp + 0x74], 0
mov dword [esp + 0x28], eax
jl 0x4dac3c
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push eax
push edi
push ecx
push 0x66
push esi
call fcn.00493fe0
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
add esp, 0x14
push edx
push eax
push ecx
push 0x85
push esi
call fcn.00493fe0
mov edx, dword [esi]
add esp, 0x14
cmp byte [edx + 0x49], 0
jne 0x4dac1b
mov ecx, dword [esi + 0x58]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax + 1], 0xfd
mov dword [eax + 0x10], edi
cmp dword [esp + 0x74], 0
je 0x4dac3c
mov eax, dword [esi + 0x88]
test eax, eax
jle 0x4dac3c
lea edx, [eax + eax*4]
mov eax, dword [esi + 0x58]
mov ecx, 0x10
mov word [eax + edx*4 - 0x12], cx
cmp edi, 1
jne 0x4dac89
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4dac5d
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4dac5d
movzx edx, al
mov dword [ebx + edx*4 + 0x90], ecx
inc byte [ebx + 0x13]
mov esi, dword [esp + 0x34]
mov eax, dword [esi + 0x88]
mov ecx, dword [esi + 0xc]
cmp dword [ecx + 0x30], eax
jg 0x4dac9e
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x40]
push 0
push edx
push eax
push 0xc
mov eax, esi
call fcn.00493fa0
add esp, 0x10
jmp 0x4dacd2
cmp edi, dword [ebx + 0x1c]
mov esi, dword [esp + 0x34]
jle 0x4dac61
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x20], eax
jmp 0x4dac61
lea ecx, [eax + 1]
mov dword [esi + 0x88], ecx
lea edx, [eax + eax*4]
mov eax, dword [esi + 0x58]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x40]
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x58]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax], 0xc
mov dword [eax + 4], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4dad00
mov ecx, dword [esi + 0x88]
jge 0x4dace5
lea eax, [ecx - 1]
mov edx, dword [esi]
cmp byte [edx + 0x49], 0
je 0x4dacf4
mov eax, 0x539e70
jmp 0x4dacfd
mov edx, dword [esi + 0x58]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x88]
cmp byte [ecx + 0x32], 0
je 0x4dad15
mov dword [esp + 0x14], 1
mov eax, dword [ecx + 0x330]
test dword [eax + 0x24], 0x200
je 0x4dad55
cmp dword [esp + 0x20], 0
je 0x4dad34
mov edx, dword [esp + 0x50]
cmp dword [eax + 0x20], edx
jne 0x4dad55
mov edx, dword [esp + 0x54]
test byte [edx + 0x24], 0x20
je 0x4dad4c
mov edx, dword [eax + 0x20]
mov edx, dword [edx + 0x38]
and dl, 3
cmp dl, 2
je 0x4dad55
mov eax, dword [eax + 0x20]
mov dword [esp + 0x50], eax
jmp 0x4dad5d
mov dword [esp + 0x50], 0
push ecx
call fcn.004e32a0
mov esi, dword [esp + 0x24]
add esp, 4
mov eax, dword [esp + 0x70]
add dword [esp + 0x64], 0x30
inc esi
cmp esi, dword [eax + 0xc]
mov dword [esp + 0x20], esi
jl 0x4daa22
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 0xd0]
test eax, eax
je 0x4dadb8
mov ecx, dword [edx + 8]
test eax, eax
jge 0x4dad9d
mov eax, dword [ecx + 0x88]
dec eax
mov esi, dword [ecx]
cmp byte [esi + 0x49], 0
je 0x4dadac
mov eax, 0x539e70
jmp 0x4dadb5
mov ecx, dword [ecx + 0x58]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov eax, dword [eax + 8]
mov edi, dword [esp + 0x38]
mov dword [edx + 0xd0], eax
mov eax, dword [esp + 0x50]
mov dword [edi + 0x38], eax
test eax, eax
je 0x4dadd4
mov edx, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x60]
test eax, eax
je 0x4dadf1
push eax
push ebx
mov dword [eax + 0xc], 0
call fcn.004a7fb0
add esp, 8
mov eax, dword [esp + 0x80]
mov esi, dword [esp + 0x34]
mov ecx, dword [esi + 0x88]
test eax, eax
jge 0x4dae09
lea eax, [ecx - 1]
mov edx, dword [esi]
cmp byte [edx + 0x49], 0
je 0x4dae18
mov eax, 0x539e70
jmp 0x4dae21
mov edx, dword [esi + 0x58]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
mov dword [eax + 4], ecx
mov eax, dword [esi + 0x88]
mov edx, dword [esi + 0xc]
cmp dword [edx + 0x30], eax
mov ecx, dword [edi + 0xc]
jg 0x4dae48
push 0
push ecx
push 0
push 0xb
mov eax, esi
call fcn.00493fa0
add esp, 0x10
jmp 0x4dae72
lea edx, [eax + 1]
mov dword [esi + 0x88], edx
mov edx, dword [esi + 0x58]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
xor edx, edx
mov byte [eax], 0xb
mov word [eax + 2], dx
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov byte [eax + 1], dl
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 0x40]
test eax, eax
je 0x4dae91
mov ecx, dword [esp + 0x58]
lea edx, [ecx*4 + 4]
mov ecx, dword [esi + 0x88]
sub eax, edx
mov dword [eax], ecx
mov edx, dword [ebp + 8]
cmp byte [edx + 0x2e], 1
jbe 0x4daee1
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4daee1
test ebx, ebx
je 0x4daed8
cmp dword [ebx + 0x1d8], 0
je 0x4daeb8
mov ecx, ebx
call fcn.00475120
jmp 0x4daee1
cmp eax, dword [ebx + 0x128]
jb 0x4daed8
cmp eax, dword [ebx + 0x12c]
jae 0x4daed8
mov ecx, dword [ebx + 0x124]
mov dword [eax], ecx
mov dword [ebx + 0x124], eax
jmp 0x4daee1
push eax
call fcn.004750b0
add esp, 4
cmp dword [esp + 0x14], 0
jne 0x4daf3b
mov eax, dword [esp + 0x1c]
mov esi, edi
call fcn.004d88c0
mov ebx, dword [esp + 0x34]
jmp 0x4daf3d
test cl, 0x20
je 0x4daf04
mov byte [edi + 0x2d], 0xab
jmp 0x4daf3d
mov eax, dword [esp + 0x1c]
mov dl, byte [eax + 0x50bb74]
mov ecx, dword [esp + 0x44]
mov byte [edi + 0x2d], dl
mov edx, dword [esp + 0x20]
push 0
push edx
mov dword [edi + 0x30], ecx
movzx eax, byte [eax + 0x50bb78]
push ecx
push eax
push ebx
call fcn.00493fe0
add esp, 0x14
inc eax
mov dword [edi + 0x34], eax
mov byte [edi + 0x2f], 1
jmp 0x4daf3d
mov ebx, esi
mov eax, dword [esp + 0x68]
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x28], eax
lea esp, [esp]
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], eax
test eax, eax
jle 0x4db171
mov edx, dword [esp + 0x1c]
movzx edx, word [edx + 0xa]
xor esi, esi
test dl, 6
jne 0x4db15b
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x28]
mov edi, dword [esp + 0x38]
mov ecx, dword [ecx + 0x2c]
and eax, dword [edi + 0x48]
and ecx, dword [edi + 0x4c]
or eax, ecx
je 0x4dafa9
mov eax, dword [ebp + 8]
mov byte [eax + 0x32], 1
jmp 0x4db15b
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
test byte [eax + 0x24], 8
mov edi, dword [ecx]
mov dword [esp + 0x80], edi
je 0x4dafca
test byte [edi + 4], 1
je 0x4db15b
mov eax, dword [esp + 0x28]
cmp eax, 1
jne 0x4db068
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 4]
xor eax, eax
mov dword [esp + 0x98], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x88]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], eax
mov dword [esp + 0x98], 0x4ad7f0
mov dword [esp + 0xac], ecx
test edi, edi
je 0x4db051
lea edx, [esp + 0x94]
push edi
push edx
call fcn.004a4a70
add esp, 8
cmp byte [esp + 0xa8], 0
je 0x4db06d
mov dword [esp + 0x18], 2
jmp 0x4db15b
cmp eax, 3
jge 0x4db095
mov eax, dword [esp + 0x1c]
movzx edx, word [eax + 0xa]
test edx, 0x1000
je 0x4db095
cmp dword [esp + 0x18], 0
jne 0x4db15b
mov dword [esp + 0x18], 3
jmp 0x4db15b
test edx, 0x200
je 0x4db10e
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x24]
test eax, eax
jbe 0x4db10e
mov ecx, dword [ebx + 0x88]
mov esi, eax
shr esi, 1
test al, 1
mov eax, dword [ebx + 0xc]
mov edx, 0
setne dl
cmp dword [eax + 0x30], ecx
lea edx, [edx + edx + 0x12]
jg 0x4db0da
push 0
push 0
push esi
push edx
mov eax, ebx
call fcn.00493fa0
add esp, 0x10
jmp 0x4db10c
mov edi, dword [ebx + 0x58]
lea eax, [ecx + 1]
mov dword [ebx + 0x88], eax
lea eax, [ecx + ecx*4]
lea eax, [edi + eax*4]
mov edi, dword [esp + 0x80]
mov byte [eax], dl
xor edx, edx
mov word [eax + 2], dx
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov byte [eax + 1], dl
mov eax, ecx
mov esi, eax
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x2c]
push 0x10
push eax
push edi
push ecx
call fcn.004ace40
add esp, 0x10
test esi, esi
je 0x4db152
mov ecx, dword [ebx + 0x88]
mov eax, esi
jge 0x4db137
lea eax, [ecx - 1]
mov edx, dword [ebx]
cmp byte [edx + 0x49], 0
je 0x4db146
mov eax, 0x539e70
jmp 0x4db14f
mov edx, dword [ebx + 0x58]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0x1c]
or word [eax + 0xa], 4
mov eax, dword [esp + 0x14]
add dword [esp + 0x1c], 0x30
dec eax
mov dword [esp + 0x14], eax
test eax, eax
jg 0x4daf72
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], eax
test eax, eax
jg 0x4daf50
mov eax, dword [esp + 0x78]
mov edi, dword [eax + 0xc]
mov esi, dword [eax + 0x14]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], edi
test edi, edi
jle 0x4db28b
jmp 0x4db1a0
test byte [esi + 0xa], 6
jne 0x4db277
movzx eax, word [esi + 0xc]
test al, 0x82
je 0x4db277
test eax, 0x800
je 0x4db277
mov eax, dword [esp + 0x44]
cmp dword [esi + 0x14], eax
jne 0x4db277
mov ecx, dword [esp + 0x38]
cmp dword [ecx], 0
jne 0x4db277
mov edx, dword [esi]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
push 0
push 0x83
push eax
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0x50]
push ecx
mov ecx, dword [esi + 0x1c]
push edx
mov edx, dword [esp + 0x8c]
call fcn.004dd8c0
add esp, 0x14
test eax, eax
je 0x4db277
test byte [eax + 0xa], 4
jne 0x4db277
test byte [eax + 0xc], 1
je 0x4db22f
mov ecx, dword [eax]
test dword [ecx + 4], 0x800
je 0x4db22f
mov ecx, dword [ecx + 0x14]
mov edx, dword [ecx]
cmp dword [edx], 1
jg 0x4db277
mov esi, dword [eax]
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov ecx, 0xd
lea edi, [esp + 0x94]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax + 0xc]
push 0x10
push edx
lea eax, [esp + 0x9c]
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0x34]
push eax
push ecx
call fcn.004ace40
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
add esp, 0x10
dec edi
add esi, 0x30
mov dword [esp + 0x14], edi
mov dword [esp + 0x1c], esi
test edi, edi
jg 0x4db1a0
mov edx, dword [esp + 0x38]
cmp dword [edx], 0
je 0x4db34d
mov ecx, dword [ebx + 0x88]
mov eax, edx
mov dword [eax + 0x1c], ecx
mov ecx, dword [eax]
mov eax, dword [ebx + 0x88]
mov edx, dword [ebx + 0xc]
cmp dword [edx + 0x30], eax
jg 0x4db2c6
push 0
push ecx
push 1
push 0x46
mov eax, ebx
call fcn.00493fa0
add esp, 0x10
jmp 0x4db2f6
lea edx, [eax + 1]
mov dword [ebx + 0x88], edx
mov edx, dword [ebx + 0x58]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
xor edx, edx
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax], 0x46
mov word [eax + 2], dx
mov dword [eax + 4], 1
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov edx, dword [esp + 0x78]
mov esi, dword [edx + 0x14]
xor edi, edi
cmp dword [edx + 0xc], edi
jle 0x4db34d
mov ebx, dword [esp + 0x38]
test byte [esi + 0xa], 6
jne 0x4db344
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x2c]
and eax, dword [ebx + 0x48]
and ecx, dword [ebx + 0x4c]
or eax, ecx
jne 0x4db344
mov eax, dword [esp + 0x84]
mov ecx, dword [esi]
mov edx, dword [esp + 0x2c]
push 0x10
push eax
push ecx
push edx
call fcn.004ace40
mov edx, dword [esp + 0x88]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x4db308
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x48]
mov edx, dword [ecx + 0x4c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret