Function at 0x4f0da0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb0]
cmp eax, dword [ecx + 8]
jbe 0x4f228e
sub esp, 0x130
xor eax, eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x48], 0
xor ecx, ecx
mov byte [eax + 0x7c], cl
xor ecx, ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jge 0x4f0f9b
mov edx, 1
mov byte [eax + 0x7d], dl
mov esi, ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jge 0x4f0e3c
mov ebp, dword [esp + 0x13c]
cmp ecx, ebp
jae 0x4f2287
mov ebp, dword [esp + 0x138]
add ebp, ecx
movzx ebx, byte [ebp]
cmp bl, 0x25
je 0x4f0e3c
inc ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jl 0x4f0e12
cmp ecx, esi
jle 0x4f0f8f
mov ebp, eax
cmp eax, 0
je 0x4f2280
mov dword [esp + 0x28], ecx
mov ebx, dword [esp + 0x13c]
cmp ecx, ebx
ja 0x4f2279
cmp esi, ecx
ja 0x4f2279
sub ecx, esi
mov eax, dword [esp + 0x138]
cmp ecx, 0
je 0x4f0e7a
add eax, esi
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov ebx, ebp
mov dword [esp + 0x68], ebp
cmp ebp, 0
je 0x4f2271
mov esi, dword [ebp]
mov ebp, dword [ebp + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [ebx + 8]
mov dword [esp + 0x10c], esi
mov edx, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xc4]
mov edi, edx
add edi, ebx
cmp edi, eax
jbe 0x4f0f10
mov dword [esp], 0x5bd220
mov dword [esp + 0x100], esi
mov dword [esp + 4], esi
mov dword [esp + 0x104], edx
mov dword [esp + 8], edx
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x10], edi
call fcn.0043b580
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp edi, eax
ja 0x4f226a
mov dword [esp + 0x104], edi
mov eax, dword [esp + 0xc4]
mov ebx, dword [esp + 0x110]
mov ebp, esi
mov dword [esp + 0x100], esi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00452750
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f224e
mov dword [ebx], ebp
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jl 0x4f17c0
movzx ebx, byte [eax + 0x7c]
cmp bl, 0
jne 0x4f141a
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jge 0x4f141a
mov ebx, eax
add ebx, 0x20
cmp ebx, 0
je 0x4f17b9
add ebx, 4
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov byte [ebx + 8], 0
mov ebx, 0x5ef467
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], 9
mov dword [esp + 0x64], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0xb4]
mov edx, esi
add edx, ebx
cmp edx, eax
jbe 0x4f1070
mov dword [esp], 0x5bd220
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10], edx
call fcn.0043b580
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp edx, eax
ja 0x4f17b2
mov dword [esp + 0x110], edx
mov eax, dword [esp + 0xb4]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00452750
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x6cfdd8], 0
jne 0x4f17a1
mov dword [ebx], ebp
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
cmp eax, ecx
ja 0x4f179a
mov ebp, ecx
sub ebp, eax
sub edx, eax
mov ecx, dword [esp + 0x140]
cmp edx, 0
je 0x4f1115
imul eax, eax, 8
add ecx, eax
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], ebp
mov dword [esp + 0x12c], edx
mov dword [esp + 0x120], edx
xor eax, eax
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x118], ecx
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
jge 0x4f13e2
mov dword [esp + 0x78], ecx
cmp ecx, 0
je 0x4f1793
mov edx, dword [ecx]
mov ebp, dword [ecx + 4]
mov dword [esp + 0x34], eax
mov dword [esp + 0xe8], edx
mov dword [esp + 0xf8], edx
mov dword [esp + 0xec], ebp
mov dword [esp + 0xfc], ebp
cmp eax, 0
jle 0x4f12a3
mov eax, dword [esp + 0x134]
cmp eax, 0
je 0x4f178c
mov ebx, 0x5ee2a6
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x6c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xbc]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f122f
mov dword [esp], 0x5bd220
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b580
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x4f1785
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0xbc]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xb8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00452750
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f1774
mov dword [ebx], ebp
mov ebx, dword [esp + 0xf8]
cmp ebx, 0
jne 0x4f14b0
mov eax, dword [esp + 0x134]
cmp eax, 0
je 0x4f14a9
mov ebx, 0x5ee8c9
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 5
mov dword [esp + 0x60], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0xa4]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f1356
mov dword [esp], 0x5bd220
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b580
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp ecx, eax
ja 0x4f14a2
mov dword [esp + 0x110], ecx
mov eax, dword [esp + 0xa4]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xa0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00452750
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x6cfdd8], 0
jne 0x4f1491
mov dword [ebx], ebp
mov ecx, dword [esp + 0x78]
add ecx, 8
mov eax, dword [esp + 0x34]
inc eax
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
jl 0x4f1151
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4f148a
mov byte [esp + 0x26], 0x29
mov dword [esp + 0x70], ebx
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov ebp, eax
inc ebp
cmp ebp, edx
ja 0x4f1421
mov dword [ebx + 4], ebp
mov ebx, ecx
add ebx, eax
movzx ebp, byte [esp + 0x26]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
add esp, 0x130
ret
mov dword [esp], 0x5bd220
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043b580
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x70]
cmp ebx, 0
je 0x4f1486
mov ebp, eax
mov dword [esp + 0x40], eax
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], edx
mov dword [esp + 0x7c], ecx
cmp byte [0x6cfdd8], 0
jne 0x4f1470
mov dword [ebx], ecx
jmp 0x4f140d
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0040e4e0
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x40]
jmp 0x4f140d
mov dword [ebx], eax
jmp 0x4f1452
mov dword [ebx], eax
jmp 0x4f13f2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
jmp 0x4f13ca
call fcn.00427a00
ud2
mov dword [eax], eax
jmp 0x4f12c3
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4f176d
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 0xd0], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 0xd4], ebx
xor ebx, ebx
xor ebx, ebx
lea ebx, [esp + 0xd0]
cmp ebx, 0
je 0x4f1766
mov eax, dword [ebx]
mov ebp, dword [ebx + 4]
mov dword [esp + 0xdc], ebp
mov dword [esp + 0xd8], eax
xor ebx, ebx
xor ebp, ebp
cmp eax, ebp
jne 0x4f175a
xor eax, eax
mov ecx, eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0xe4], ecx
mov dword [esp], ecx
mov dword [esp + 0xe0], eax
mov ebx, dword [eax + 0x84]
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov ebx, dword [esp + 0x50]
cmp ebx, 0
je 0x4f1753
mov edi, dword [ebx]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [ebx + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0x94]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f15e7
mov dword [esp], 0x5bd220
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b580
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x4f174c
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0x94]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0x90]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00452750
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f173b
mov dword [ebx], ebp
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4f1734
mov byte [esp + 0x24], 0x3d
mov dword [esp + 0x58], ebx
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov ebp, eax
inc ebp
cmp ebp, edx
ja 0x4f16c5
mov dword [ebx + 4], ebp
mov ebx, ecx
add ebx, eax
movzx ebp, byte [esp + 0x24]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov ebx, dword [esp + 0x134]
mov dword [esp], ebx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x76
call fcn.004ec670
jmp 0x4f13ca
mov dword [esp], 0x5bd220
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043b580
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x58]
cmp ebx, 0
je 0x4f1730
mov ebp, eax
mov dword [esp + 0x40], eax
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], edx
mov dword [esp + 0x7c], ecx
cmp byte [0x6cfdd8], 0
jne 0x4f1717
mov dword [ebx], ecx
jmp 0x4f1686
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0040e4e0
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x40]
jmp 0x4f1686
mov dword [ebx], eax
jmp 0x4f16f6
mov dword [ebx], eax
jmp 0x4f166b
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
jmp 0x4f165b
call fcn.00427a00
ud2
mov dword [ebx], eax
jmp 0x4f156f
mov ecx, eax
mov eax, 0x6aaea0
jmp 0x4f1517
mov dword [ebx], eax
jmp 0x4f14f4
mov dword [ebx], eax
jmp 0x4f14c0
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
jmp 0x4f12a3
call fcn.00427a00
ud2
mov dword [eax], eax
jmp 0x4f119c
mov dword [ecx], eax
jmp 0x4f115e
call fcn.00427a00
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
jmp 0x4f10e4
call fcn.00427a00
ud2
mov dword [ebx], eax
jmp 0x4f0fc9
mov esi, ecx
inc esi
mov ebx, eax
cmp eax, 0
je 0x4f2247
add ebx, 0x20
cmp ebx, 0
je 0x4f2240
add ebx, 4
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov byte [ebx + 8], 0
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jge 0x4f183b
mov dword [esp + 0x28], esi
mov ebp, dword [esp + 0x13c]
cmp esi, ebp
jae 0x4f2239
mov ebp, dword [esp + 0x138]
add ebp, esi
movzx ebx, byte [ebp]
mov edx, ebx
cmp bl, 0x23
ja 0x4f21ed
cmp bl, 0x20
jne 0x4f2136
mov ecx, 1
mov byte [eax + 0x29], cl
inc esi
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jl 0x4f17f6
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.004f0800
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x48], esi
mov eax, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov byte [esp + 0x27], bl
cmp eax, edi
jge 0x4f20d5
mov ebp, dword [esp + 0x13c]
cmp eax, ebp
jae 0x4f212f
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x2a
jne 0x4f20d5
mov ebx, eax
inc ebx
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x148]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
call fcn.004f04d0
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x30], ecx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x24], bl
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
movzx ebx, byte [eax + 0x24]
cmp bl, 0
jne 0x4f1a29
mov ebx, 0x5f0023
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], 0xc
mov dword [esp + 0x4c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xac]
mov edx, esi
add edx, ebx
cmp edx, eax
jbe 0x4f19aa
mov dword [esp], 0x5bd220
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10], edx
call fcn.0043b580
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp edx, eax
ja 0x4f20ce
mov dword [esp + 0x104], edx
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xa8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00452750
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f20b2
mov dword [ebx], ebp
mov ebp, dword [eax + 0x30]
cmp ebp, 0
jge 0x4f1a46
mov ecx, dword [eax + 0x30]
neg ecx
mov dword [eax + 0x30], ecx
mov ecx, 1
mov byte [eax + 0x26], cl
xor ecx, ecx
mov byte [eax + 0x2a], cl
xor ecx, ecx
mov edx, esi
inc edx
mov ebx, dword [esp + 0x2c]
cmp edx, ebx
jge 0x4f1c8b
mov ebp, dword [esp + 0x13c]
cmp esi, ebp
jae 0x4f20ab
mov ebp, dword [esp + 0x138]
add ebp, esi
movzx ebx, byte [ebp]
cmp bl, 0x2e
jne 0x4f1c8b
mov edx, esi
inc edx
cmp cl, 0
je 0x4f1a89
xor ecx, ecx
mov byte [eax + 0x7d], cl
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.004f0800
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x48], esi
mov eax, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov byte [esp + 0x27], bl
cmp eax, edi
jge 0x4f204b
mov ebp, dword [esp + 0x13c]
cmp eax, ebp
jae 0x4f20a4
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x2a
jne 0x4f204b
mov ebx, eax
inc ebx
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x148]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
call fcn.004f04d0
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x34], ecx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x25], bl
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
mov ebp, dword [eax + 0x34]
cmp ebp, 0
jge 0x4f1b6a
xor ecx, ecx
mov dword [eax + 0x34], ecx
xor ecx, ecx
mov byte [eax + 0x25], cl
movzx ebx, byte [eax + 0x25]
cmp bl, 0
jne 0x4f1c89
mov ebx, 0x5efbac
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], 0xb
mov dword [esp + 0x5c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0x9c]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f1c0a
mov dword [esp], 0x5bd220
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b580
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp ecx, eax
ja 0x4f2044
mov dword [esp + 0x110], ecx
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00452750
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x6cfdd8], 0
jne 0x4f2028
mov dword [ebx], ebp
xor ecx, ecx
cmp cl, 0
jne 0x4f1cdd
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.004f0800
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
mov esi, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jl 0x4f1e27
cmp eax, 0
je 0x4f1e20
mov ebx, 0x5ef7df
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 0xa
mov dword [esp + 0x74], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xcc]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f1d85
mov dword [esp], 0x5bd220
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b580
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x4f1e19
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0xcc]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xc8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00452750
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f1e01
mov dword [ebx], ebp
jmp 0x4f0f9b
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov eax, dword [esp + 0x134]
jmp 0x4f0f9b
call fcn.00427a00
ud2
mov dword [eax], eax
jmp 0x4f1cf2
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x13c]
cmp esi, eax
ja 0x4f2021
mov edx, eax
sub edx, esi
mov eax, dword [esp + 0x138]
cmp edx, 0
je 0x4f1e4c
add eax, esi
mov dword [esp + 0xf0], eax
mov dword [esp], eax
mov dword [esp + 0xf4], edx
mov dword [esp + 4], edx
call fcn.00588040
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 0x28]
add ebx, ecx
mov ecx, ebx
mov dword [esp + 0x28], ebx
cmp edx, 0x25
jne 0x4f1f55
cmp eax, 0
je 0x4f1f4e
mov byte [esp + 0x25], 0x25
mov dword [esp + 0x54], eax
mov edi, dword [eax]
mov edx, dword [eax + 4]
mov ebp, dword [eax + 8]
mov dword [esp + 0x38], ebp
mov ebp, edx
inc ebp
mov esi, dword [esp + 0x38]
cmp ebp, esi
ja 0x4f1ec8
mov dword [eax + 4], ebp
mov ebx, edi
add ebx, edx
movzx ebp, byte [esp + 0x25]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
jmp 0x4f0df4
mov dword [esp], 0x5bd220
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.0043b580
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x54]
cmp ebx, 0
je 0x4f1f4a
mov ebp, edx
mov dword [esp + 0x40], edx
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], esi
mov dword [esp + 0x7c], edi
cmp byte [0x6cfdd8], 0
jne 0x4f1f26
mov dword [ebx], edi
jmp 0x4f1eb6
mov dword [esp], ebx
mov dword [esp + 4], edi
call fcn.0040e4e0
mov edi, dword [esp + 0x7c]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f1eb6
mov dword [ebx], eax
jmp 0x4f1f08
mov dword [eax], eax
jmp 0x4f1e93
movzx ebx, byte [eax + 0x7d]
cmp bl, 0
jne 0x4f1f7a
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004f0900
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f0df4
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jl 0x4f1fa5
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004f0b50
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f0df4
cmp edx, 0x76
jne 0x4f1fca
movzx ebp, byte [eax + 0x28]
xchg ebp, ebx
mov byte [eax + 0x2c], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x28], cl
movzx ebp, byte [eax + 0x27]
xchg ebp, ebx
mov byte [eax + 0x2b], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x27], cl
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x144]
cmp ebx, ebp
jae 0x4f201a
mov ebp, dword [esp + 0x140]
shl ebx, 3
add ebp, ebx
lea edi, [esp + 4]
cld
mov ecx, dword [ebp]
mov dword [edi], ecx
mov ecx, dword [ebp + 4]
mov dword [edi + 4], ecx
mov dword [esp + 0xc], edx
call fcn.004ec670
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x48]
inc ebx
mov dword [esp + 0x48], ebx
jmp 0x4f0df4
call fcn.00427990
ud2
call fcn.00427a00
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f1c89
call fcn.00427a00
ud2
mov dword [esp], edx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
call fcn.004e9160
movzx ecx, byte [esp + 0x27]
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0x10]
mov dword [eax + 0x34], edx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x25], bl
mov esi, dword [esp + 0x18]
movzx ebx, byte [eax + 0x25]
cmp bl, 0
jne 0x4f1c8b
xor edx, edx
mov dword [eax + 0x34], edx
mov edx, 1
mov byte [eax + 0x25], dl
jmp 0x4f1c8b
call fcn.00427990
ud2
call fcn.00427990
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f1a29
call fcn.00427a00
ud2
mov dword [esp], edx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
call fcn.004e9160
movzx ecx, byte [esp + 0x27]
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0x10]
mov dword [eax + 0x30], edx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x24], bl
mov esi, dword [esp + 0x18]
cmp cl, 0
je 0x4f1a48
movzx ebx, byte [eax + 0x24]
cmp bl, 0
je 0x4f1a48
xor edx, edx
mov byte [eax + 0x7d], dl
jmp 0x4f1a48
call fcn.00427990
ud2
cmp bl, 0x23
jne 0x4f2148
mov ecx, 1
mov byte [eax + 0x28], cl
jmp 0x4f1832
cmp dl, 0x61
jb 0x4f183b
cmp dl, 0x7a
ja 0x4f183b
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jge 0x4f183b
cmp dl, 0x76
jne 0x4f2192
movzx ebp, byte [eax + 0x28]
xchg ebp, ebx
mov byte [eax + 0x2c], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x28], cl
movzx ebp, byte [eax + 0x27]
xchg ebp, ebx
mov byte [eax + 0x2b], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x27], cl
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x144]
cmp ebx, ebp
jae 0x4f21e6
mov ebp, dword [esp + 0x140]
shl ebx, 3
add ebp, ebx
lea edi, [esp + 4]
cld
mov ecx, dword [ebp]
mov dword [edi], ecx
mov ecx, dword [ebp + 4]
mov dword [edi + 4], ecx
movzx ebx, dl
mov dword [esp + 0xc], ebx
call fcn.004ec670
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x48]
inc ebx
mov dword [esp + 0x48], ebx
mov ecx, dword [esp + 0x28]
inc ecx
jmp 0x4f0df4
call fcn.00427990
ud2
cmp bl, 0x2b
jne 0x4f21ff
mov ecx, 1
mov byte [eax + 0x27], cl
jmp 0x4f1832
cmp bl, 0x2d
jne 0x4f2216
mov ecx, 1
mov byte [eax + 0x26], cl
xor ecx, ecx
mov byte [eax + 0x2a], cl
jmp 0x4f1832
cmp bl, 0x30
jne 0x4f2148
movzx ebx, byte [eax + 0x26]
cmp bl, 0
je 0x4f2232
xor ecx, ecx
mov byte [eax + 0x2a], cl
jmp 0x4f1832
mov ecx, 1
jmp 0x4f222a
call fcn.00427990
ud2
mov dword [ebx], eax
jmp 0x4f17da
mov dword [eax], eax
jmp 0x4f17ce
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e4e0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f0f8f
call fcn.00427a00
ud2
mov dword [ebp], eax
jmp 0x4f0e97
call fcn.00427a00
ud2
mov dword [eax], eax
jmp 0x4f0e4f
call fcn.00427990
ud2
call fcn.0044ff60
jmp fcn.004f0da0