Function at 0x4f62e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xd8
push esi
mov esi, edx
mov dword [esp + 0x70], 0
mov edx, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [esp + 0x34], esi
mov dword [esp + 0xc], edi
lea eax, [edx + 0x58]
mov dword [esp + 0x9c], eax
mov eax, dword [edi]
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x4c]
movzx eax, byte [eax + 0x38]
mov dword [esp + 0x20], ecx
lea ecx, [eax + eax*8]
mov eax, dword [edx + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [esp + 0x80], eax
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x30], eax
cmp dword [edx + 0x200], eax
jne 0x4f634e
mov ecx, 1
xor edx, edx
jmp 0x4f6398
mov edx, dword [edx + 0x1fc]
mov eax, 1
cmp edx, eax
jle 0x4f637e
mov ecx, dword [ebp + 8]
add ecx, 0x204
mov esi, dword [esp + 0x30]
cmp dword [ecx], esi
mov esi, dword [esp + 0x34]
je 0x4f6422
inc eax
add ecx, 4
cmp eax, edx
jl 0x4f6366
xorps xmm0, xmm0
movlpd qword [esp + 0x90], xmm0
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
mov eax, dword [ebp + 0x10]
not ecx
and ecx, dword [ebp + 0x14]
not edx
and edx, dword [ebp + 0x18]
mov dword [eax + 0x50], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0x54], edx
mov eax, dword [ecx + 0x50]
mov edx, dword [ecx + 0x54]
mov ecx, dword [ebp + 0xc]
call fcn.00570620
mov ecx, dword [ebp + 0x10]
and eax, 1
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x38]
dec eax
mov dword [edi + 0x38], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0xc], eax
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x38]
dec eax
mov dword [edi + 0x38], eax
cmp byte [ecx + 0x38], 0
mov dword [esp + 0x84], eax
mov dword [ecx + 0x18], eax
jbe 0x4f646b
mov eax, dword [esp + 0x80]
test byte [eax + 0x24], 8
je 0x4f646b
mov edx, dword [edi + 0x2c]
inc edx
mov dword [edi + 0x2c], edx
mov dword [ecx], edx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f643c
push 0
push edx
push 0
mov edx, 0x47
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f646b
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4f6398
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0xc]
mov ecx, eax
test eax, eax
jle 0x4f648f
mov edx, dword [ebp + 8]
imul eax, eax, 0x58
add edx, 0x300
add eax, edx
cmp dword [eax], 0
jne 0x4f648f
dec ecx
sub eax, 0x58
test ecx, ecx
jg 0x4f6482
imul eax, ecx, 0x58
mov ecx, dword [ebp + 8]
mov edi, dword [eax + ecx + 0x30c]
mov eax, dword [esp + 0x80]
mov dword [esp + 0x64], edi
test byte [eax + 0x28], 0x10
je 0x4f6574
mov ecx, dword [esi + 0x74]
mov edi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [esi + 0x78], ecx
jg 0x4f64d4
push edx
push 0
push edi
mov edx, 0xd
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f6503
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4f6532
push 0
push dword [esp + 0x3c]
mov edx, 0xe
mov ecx, esi
push edi
call fcn.0048fdb0
mov edi, dword [ebp + 0x10]
mov edx, eax
add esp, 0xc
mov dword [edi + 0x40], edx
mov byte [edi + 0x39], 0xb
jmp 0x4f6c8c
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [ebp + 0x10]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [edi + 0x40], edx
mov byte [edi + 0x39], 0xb
jmp 0x4f6c8c
mov eax, dword [esp + 0x20]
mov edx, dword [eax + 0x2c]
test edx, 0x400
je 0x4f6b63
movzx eax, word [eax + 0x30]
mov dword [esp + 0x38], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x4f65c1
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4f65b0
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov edx, eax
mov dword [esp + 0x18], eax
jmp 0x4f65fb
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0x98]
jmp 0x4f65f7
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x1c]
mov edi, dword [eax + 0x20]
mov dword [esp + 0x18], edi
cmp ecx, edx
jg 0x4f65e8
lea eax, [edi + ecx]
sub edx, ecx
mov edi, dword [esp + 0xc]
mov dword [edi + 0x1c], edx
mov edx, dword [esp + 0x18]
mov dword [edi + 0x20], eax
jmp 0x4f65fb
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x2c], eax
mov dword [esp + 0x18], edx
mov eax, dword [ebp + 0x10]
xor edi, edi
mov eax, dword [eax + 0xc]
mov dword [esp + 0x58], eax
cmp dword [esp + 0x38], edi
jbe 0x4f66d0
mov eax, dword [esp + 0x20]
add edx, 2
mov dword [esp + 0x2c], edx
nop dword [eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [eax + edi*4]
mov dword [esp + 0x28], ecx
test ecx, ecx
je 0x4f66c1
test byte [ecx + 0xc], 1
je 0x4f675f
cmp edi, 0x1f
ja 0x4f6650
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x28]
jmp 0x4f6652
xor eax, eax
mov esi, dword [esp + 0x20]
test dword [esi + 0x28], eax
mov esi, dword [esp + 0x34]
je 0x4f6736
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0xc]
mov edx, dword [eax + 0x28]
mov dword [esp + 0x28], edx
push edx
lea eax, [edx + 1]
mov dword [esi + 0x28], eax
mov eax, esi
inc dword [eax + 0x2c]
mov edx, dword [ecx]
mov ecx, esi
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
call fcn.004aa710
mov esi, dword [esp + 0x38]
add esp, 4
mov eax, dword [esp + 0x2c]
add eax, edi
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f66ff
mov edx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x2c]
push eax
push edx
mov edx, 0xad
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
inc edi
cmp edi, dword [esp + 0x38]
jl 0x4f6620
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0x74]
mov edi, dword [esp + 0x18]
mov edx, dword [eax + 0x18]
cmp dword [esi + 0x78], ecx
jg 0x4f67eb
push 0
push edi
push edx
mov edx, 0x47
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f6816
mov edx, dword [esp + 0x28]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x2c]
add edx, edi
mov dword [eax + ecx*4], 0xad
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4f66bd
lea eax, [edx + edi]
mov edx, ecx
mov ecx, dword [esp + 0xc]
push eax
push dword [esp + 0x44]
push edi
push dword [ebp + 0x10]
call fcn.004f4ea0
mov eax, dword [ebp + 0x10]
add esp, 0x10
mov eax, dword [eax + 0x10]
mov dword [esp + 0x58], eax
jmp 0x4f66bd
lea eax, [edx + edi]
mov edx, dword [ecx]
mov ecx, dword [esp + 0xc]
push 1
push eax
mov edx, dword [edx + 0x10]
call fcn.004f5b80
mov eax, dword [esp + 0x30]
add esp, 8
cmp byte [eax + 0xf], 0x4a
mov eax, dword [esp + 0x20]
jne 0x4f67e2
test byte [eax + 0x1c], 2
je 0x4f67e2
mov eax, dword [ebp + 8]
mov ecx, dword [esi + 0x74]
mov eax, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
cmp dword [esi + 0x78], ecx
jg 0x4f67aa
push 0
push edx
push 0
mov edx, 0x47
jmp 0x4f66b3
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4f66bd
mov edx, dword [esp + 0x2c]
jmp 0x4f66c5
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
lea edx, [edi + 1]
cmp dword [esi + 0x78], ecx
jg 0x4f6839
push 0
push edx
push dword [esp + 0x40]
mov edx, 0x47
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f686c
mov edi, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x20]
mov edx, 0xfffffff9
mov eax, 0xffffffff
test byte [ecx + 0x1c], 1
cmovne eax, edx
mov edx, 9
push eax
push dword [ecx + 0x24]
mov ecx, esi
push edi
push dword [esp + 0x64]
push dword [esp + 0x40]
call fcn.00490150
mov eax, dword [esp + 0x34]
add esp, 0x14
mov ecx, dword [esp + 0x68]
and dword [eax + 0x1c], 0xfffffffe
cmp byte [ecx + 0x57], 0
je 0x4f68b6
mov dword [eax + 0x24], 0
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x30]
mov dword [edx + 0x3c], eax
mov eax, 0x3e
cmp byte [ecx + 0x32], 0
mov ecx, 0xb6
cmovne eax, ecx
xor ecx, ecx
mov byte [edx + 0x39], al
mov eax, dword [esi + 0x74]
mov dword [edx + 0x40], eax
mov dword [esp + 0x18], ecx
cmp dword [esp + 0x38], ecx
jbe 0x4f6c8c
lea eax, [edi + 2]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x14], eax
nop dword [eax + eax]
mov eax, dword [edi + 0x38]
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x78], edx
cmp ecx, 0x10
jae 0x4f692b
mov ax, word [edi + 0x22]
shr ax, cl
test al, 1
je 0x4f6927
mov ecx, dword [ebp + 0x10]
call fcn.004f4b00
jmp 0x4f6b4b
mov ecx, dword [esp + 0x18]
test byte [edx + 0xc], 1
je 0x4f6b4f
cmp ecx, 0x1f
ja 0x4f6943
mov eax, 1
shl eax, cl
jmp 0x4f6945
xor eax, eax
test dword [edi + 0x28], eax
jne 0x4f6b4f
mov eax, dword [esp + 0x68]
cmp byte [eax + 0x57], 0
jne 0x4f6b4f
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x28], 0
cmp dword [ecx + 0x44], 0
jle 0x4f6a43
mov eax, dword [esi]
mov edi, dword [ecx + 0x48]
add edi, 4
mov dh, byte [eax + 0x57]
nop dword [eax]
mov eax, dword [edi]
test eax, eax
jns 0x4f698a
mov eax, dword [esi + 0x74]
dec eax
test dh, dh
je 0x4f6995
mov ecx, 0x5c4868
jmp 0x4f699e
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea ecx, [eax + ecx*4]
mov dl, byte [ecx]
cmp dl, 0x5d
jne 0x4f69b2
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x14]
cmp dword [ecx + 0xc], eax
jmp 0x4f69c2
cmp dl, 0x86
jne 0x4f69c8
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x14]
cmp dword [ecx + 8], eax
mov esi, dword [esp + 0x34]
je 0x4f69de
mov ecx, dword [esp + 0x28]
add edi, 0x14
mov eax, dword [ebp + 0x10]
inc ecx
mov dword [esp + 0x28], ecx
cmp ecx, dword [eax + 0x44]
jl 0x4f6980
jmp 0x4f6a43
mov eax, dword [ecx + 8]
mov edi, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x28], ecx
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x50], eax
cmp dword [esi + 0x78], ecx
jg 0x4f6a0d
mov ecx, dword [esp + 0x28]
push edi
push eax
push ecx
movzx edx, dl
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f6a43
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0xc]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.0046b920
mov edi, eax
add esp, 8
test edi, edi
je 0x4f6a99
push 0x34
push 0
push edi
call fcn.00548d40
add esp, 0xc
mov byte [edi], 0x35
or eax, 0xffffffff
mov ecx, edi
mov word [edi + 0x22], ax
call fcn.004a75d0
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp dword [edi + 0x18], eax
jle 0x4f6a99
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.0046eb10
add esp, 0xc
mov eax, dword [esp + 0x68]
cmp byte [eax + 0x57], 0
jne 0x4f6b3a
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
test ecx, ecx
jle 0x4f6ac1
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*4]
mov edx, dword [eax + ecx*4 - 0xc]
mov ecx, dword [esp + 0x68]
push 0
push 0x35
mov dword [edi + 0xc], edx
call fcn.0046b920
add esp, 8
mov dword [esp + 0x50], eax
test eax, eax
je 0x4f6b2c
push 0x34
push 0
push eax
call fcn.00548d40
mov ecx, dword [esp + 0x5c]
or eax, 0xffffffff
add esp, 0xc
mov word [ecx + 0x22], ax
lea eax, [ecx + 0x34]
mov dword [ecx + 8], eax
mov byte [ecx], 0xb0
mov byte [eax], 0
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x14]
mov dword [ecx + 0x18], 1
mov dword [edi + 0x10], ecx
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp + 0x10]
push 0x10
push dword [eax + 0x18]
push edi
push dword [esp + 0x18]
call fcn.004afc90
add esp, 0x10
jmp 0x4f6b2f
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x68]
mov dword [edi + 0xc], 0
test edi, edi
je 0x4f6b47
mov edx, edi
mov ecx, eax
call fcn.004a81b0
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, dword [esp + 0x38]
jl 0x4f6900
jmp 0x4f6c8c
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x4f6d36
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov edi, dword [eax + 0x2c]
push edi
push ecx
push 0
push dword [ebp + 0x10]
mov ecx, eax
call fcn.004f4ea0
mov ecx, eax
add esp, 0x10
mov dword [esp + 0x14], ecx
cmp ecx, edi
je 0x4f6bc6
test edi, edi
je 0x4f6bc6
mov edx, dword [esp + 0xc]
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x4f6bc6
movzx eax, al
mov dword [edx + eax*4 + 0x98], edi
inc byte [edx + 0x13]
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 0x10]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x50], eax
test eax, eax
je 0x4f6c64
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4f6bf9
push ecx
push edi
push eax
mov edx, 0x3f
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
mov edx, eax
jmp 0x4f6c2c
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f6c47
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 1
push dword [ebp + 0x18]
mov edx, dword [ebp + 8]
push dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push edi
push dword [ebp + 0xc]
call fcn.004f6050
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4f6d02
push ecx
push edi
push dword [esp + 0x38]
mov edx, 0x20
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
mov eax, dword [ebp + 0x10]
mov byte [eax + 0x39], 0xb6
xor eax, eax
neg eax
sbb ecx, ecx
add ecx, 2
mov dword [esp + 0x58], ecx
mov ecx, dword [ebp + 8]
nop dword [eax]
mov eax, dword [ecx + 0x64]
xor edx, edx
mov edi, dword [ecx + 0x70]
mov dword [esp + 0x14], edx
mov dword [esp + 0x50], eax
test eax, eax
jle 0x4f9131
nop dword [eax + eax]
xor eax, eax
mov dword [esp + 0x28], eax
movzx eax, word [edi + 0xa]
mov ecx, eax
mov dword [esp + 0x7c], ecx
test al, 6
jne 0x4f911a
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0x10]
mov ecx, dword [edi + 0x28]
and ecx, dword [eax + 0x50]
mov eax, dword [edi + 0x2c]
and eax, dword [esi + 0x54]
or ecx, eax
mov esi, dword [esp + 0x34]
je 0x4f8f55
mov ecx, dword [ebp + 8]
or dword [ecx + 0x34], 2
jmp 0x4f911d
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x20
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4f6c85
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x4f70ec
xor ecx, ecx
mov dword [esp + 0x58], 0
mov eax, 0xb6
mov dword [esp + 0x14], ecx
xor edi, edi
mov dword [esp + 0x60], eax
test dl, 0x20
je 0x4f6d79
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], 4
mov eax, dword [eax + 0x38]
mov edi, dword [eax]
jmp 0x4f6d7d
mov dword [esp + 0x28], ecx
test dl, 0x10
je 0x4f6d94
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov eax, dword [eax + 0x38]
mov ecx, dword [ecx + eax]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4f6da2
mov dword [esp + 0x14], edi
mov edi, ecx
test edi, edi
je 0x4f6ed4
mov ecx, dword [edi]
mov dword [esp + 0x4c], 0x1917181a
mov dword [esp + 0x28], ecx
mov edx, dword [ecx + 0x10]
mov al, byte [edx]
cmp al, 0xb0
jne 0x4f6dc4
mov al, byte [edx + 2]
cmp al, 0xb1
jne 0x4f6dcd
mov eax, dword [edx + 0x14]
jmp 0x4f6dd7
cmp al, 0x8a
jne 0x4f6e26
mov eax, dword [edx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4f6e26
mov edx, dword [esp + 0xc]
mov al, byte [edx + 0x13]
test al, al
jne 0x4f6def
inc dword [edx + 0x2c]
mov edi, dword [edx + 0x2c]
jmp 0x4f6dfe
dec al
mov byte [edx + 0x13], al
movzx eax, al
mov edi, dword [edx + eax*4 + 0x98]
mov edx, dword [ecx + 0x10]
mov ecx, dword [esp + 0xc]
push 1
push edi
call fcn.004f5b80
mov ecx, dword [esp + 0x30]
add esp, 8
mov edx, edi
movzx eax, byte [ecx]
inc eax
and eax, 2
or eax, 1
mov al, byte [esp + eax + 0x4c]
jmp 0x4f6e58
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x50]
push eax
call fcn.004af240
mov ecx, dword [ebp + 0x10]
add esp, 4
mov edx, edi
mov dword [esp + 0x78], eax
call fcn.004f4b00
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x78]
movzx eax, byte [ecx]
mov al, byte [esp + eax + 0x16]
mov ecx, dword [esi + 0x74]
mov byte [esp + 0x13], al
cmp dword [esi + 0x78], ecx
jg 0x4f6e7c
push edx
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x38]
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f6eb6
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x13]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
test edi, edi
je 0x4f6f3b
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4f6f3b
movzx eax, al
mov dword [ecx + eax*4 + 0x98], edi
inc byte [ecx + 0x13]
jmp 0x4f6f3b
mov ecx, dword [esi + 0x74]
xor eax, 1
lea edx, [eax*4 + 0x22]
cmp dword [esi + 0x78], ecx
jg 0x4f6efd
mov ecx, dword [esp + 0x64]
push 0
push ecx
push dword [esp + 0x38]
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f6f37
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0x14]
test edi, edi
je 0x4f6ff0
mov eax, dword [edi]
inc dword [ecx + 0x2c]
mov ecx, dword [ecx + 0x2c]
push 1
mov edx, dword [eax + 0x10]
mov dword [esp + 0x5c], ecx
push ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x30], eax
call fcn.004f5b80
mov ecx, dword [esp + 0x30]
add esp, 8
mov ecx, dword [ecx + 0x10]
mov dl, byte [ecx]
mov al, dl
cmp al, 0xb0
jne 0x4f6f7b
mov al, byte [ecx + 2]
cmp al, 0xb1
jne 0x4f6f84
mov eax, dword [ecx + 0x14]
jmp 0x4f6f8e
cmp al, 0x8a
jne 0x4f6f93
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4f6fa1
mov eax, dword [esp + 0x28]
mov al, byte [eax]
cmp al, 0x38
je 0x4f6fae
cmp al, 0x36
je 0x4f6fae
mov eax, dword [esp + 0x40]
lea eax, [eax*2 + 0x36]
jmp 0x4f6fbc
mov eax, dword [esp + 0x40]
xor eax, 1
lea eax, [eax*2 + 0x37]
mov dword [esp + 0x60], eax
cmp dl, 0xb0
jne 0x4f6fc8
mov dl, byte [ecx + 2]
cmp dl, 0xb1
jne 0x4f6fd2
mov eax, dword [ecx + 0x14]
jmp 0x4f6fdd
cmp dl, 0x8a
jne 0x4f6fe2
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4f6ff0
mov edx, edi
mov edi, dword [ebp + 0x10]
mov ecx, edi
call fcn.004f4b00
jmp 0x4f6ff3
mov edi, dword [ebp + 0x10]
cmp dword [esp + 0x40], 0
mov ecx, dword [esi + 0x74]
sete al
mov dword [edi + 0x40], ecx
add al, 4
cmp dword [esp + 0x60], 0xb6
mov byte [edi + 0x39], al
mov eax, dword [esp + 0x30]
mov dword [edi + 0x3c], eax
je 0x4f6c8c
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov ecx, dword [esi + 0x74]
mov edi, dword [eax + 0x2c]
cmp dword [esi + 0x78], ecx
jg 0x4f7045
push 0
push edi
push dword [esp + 0x38]
mov edx, 0x86
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f7074
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov edx, dword [esp + 0x60]
cmp dword [esi + 0x78], ecx
jg 0x4f7096
mov ecx, dword [esp + 0x58]
push edi
push dword [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f70cc
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4f6c8c
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x4f6c8c
test edx, 0x200
je 0x4f824f
mov edi, dword [esp + 0x20]
mov dword [esp + 0x60], 0
mov dword [esp + 0x18], 0
movzx eax, word [edi + 0x1a]
movzx ecx, word [edi + 0x18]
mov dword [esp + 0x70], eax
movzx eax, word [edi + 0x1c]
xor edi, edi
mov dword [esp + 0x38], eax
xor eax, eax
mov dword [esp + 0x4c], eax
mov byte [esp + 0x13], al
mov byte [esp + 0x1f], al
mov dword [esp + 0x48], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
mov esi, dword [eax + 0x20]
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x74], esi
mov eax, dword [eax + 8]
mov dword [esp + 0x54], eax
movzx eax, cx
mov dword [esp + 0x24], eax
mov ecx, eax
test dl, 0x20
je 0x4f7172
mov edi, dword [esp + 0x20]
mov eax, dword [edi + 0x38]
movzx edi, word [edi + 0x1a]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [esp + 0x60], eax
mov esi, dword [esp + 0x34]
test dl, 0x10
je 0x4f7279
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 0x38]
movzx edx, word [edx + 0x1c]
cmp edi, edx
mov ecx, dword [eax + ecx*4]
cmova edx, edi
mov eax, 0x100
mov dword [esp + 0x18], ecx
mov dword [esp + 0x50], edx
test word [ecx + 0xa], ax
je 0x4f7238
mov eax, dword [esp + 0xc]
mov edi, dword [ebp + 0x10]
inc dword [eax + 0x2c]
mov edx, dword [eax + 0x2c]
mov dword [edi + 0x2c], edx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f71d7
push 0
push edx
push 1
mov edx, 0x47
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f7206
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
xor ecx, ecx
mov edx, dword [edi + 0x2c]
mov dword [edi + 0x30], eax
add edx, edx
mov eax, dword [esp + 0x74]
mov dword [edi + 0x2c], edx
mov edi, dword [esp + 0x24]
mov eax, dword [eax + 0x1c]
cmp byte [edi + eax], 1
mov eax, dword [ebp + 0x10]
sete cl
xor ecx, dword [esp + 0x40]
or ecx, edx
mov edx, dword [esp + 0x50]
mov dword [eax + 0x2c], ecx
cmp dword [esp + 0x60], 0
mov edi, edx
jne 0x4f7279
mov edi, dword [esp + 0x74]
mov ecx, dword [esp + 0x24]
mov eax, dword [edi + 4]
movsx ecx, word [eax + ecx*2]
mov dword [esp + 0x50], ecx
test ecx, ecx
js 0x4f726b
mov eax, dword [edi + 0xc]
add ecx, ecx
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 4], 0xf
je 0x4f7272
mov ecx, dword [esp + 0x50]
mov edi, edx
cmp ecx, 0xfffffffe
jne 0x4f7279
mov byte [esp + 0x13], 1
mov edi, edx
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x2c]
test al, 0x30
jne 0x4f7319
test eax, 0x80000
je 0x4f7319
mov edx, dword [esp + 0xc]
mov edi, 1
mov ecx, dword [ebp + 0x10]
mov byte [esp + 0x13], 1
inc dword [edx + 0x2c]
cmp dword [ecx], 0
mov eax, dword [edx + 0x2c]
mov dword [esp + 0x48], eax
mov dword [ecx + 0x24], eax
je 0x4f7310
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f72d6
push 0
push eax
push 0
lea edx, [edi + 0x46]
mov ecx, esi
call fcn.0048fdb0
mov edx, dword [esp + 0x18]
add esp, 0xc
jmp 0x4f730d
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp + 0x10]
dec dword [edx + 0x38]
mov eax, dword [edx + 0x38]
mov dword [ecx + 0x28], eax
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x28]
cmp ax, word [ecx + 0x34]
jae 0x4f736f
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
mov edx, dword [esp + 0x24]
cmp byte [edx + eax], cl
sete cl
cmp dword [esp + 0x40], ecx
jne 0x4f736f
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x60], eax
mov al, byte [esp + 0x13]
mov byte [esp + 0x1f], al
mov eax, dword [esp + 0x70]
mov dword [esp + 0x18], ecx
movzx ecx, dx
movzx eax, al
mov byte [esp + 0x13], 0
mov dword [esp + 0x70], ecx
mov dword [esp + 0x38], eax
cmp dword [ebp + 0xc], 0
jle 0x4f73d6
mov eax, dword [esp + 0x20]
test dword [eax + 0x2c], 0x100000
je 0x4f73d6
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f73a3
push 0
push 0
push dword [esp + 0x5c]
mov edx, 0x87
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f73d6
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 0x10]
lea eax, [esp + 0x5c]
mov ecx, dword [esp + 0xc]
push eax
push edi
push dword [esp + 0x48]
call fcn.004f5500
mov edi, dword [esp + 0x30]
mov edx, eax
mov eax, dword [esp + 0x68]
add esp, 0xc
mov dword [esp + 0x3c], edx
test eax, eax
je 0x4f746b
cmp word [esp + 0x38], 0
je 0x4f746b
add eax, edi
jne 0x4f7413
mov dword [esp + 0x4c], eax
jmp 0x4f746b
mov ecx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7418
mov eax, dword [esp + 0x68]
sub ecx, edx
push 0
lea edi, [ecx + 1]
push edi
test eax, eax
je 0x4f7438
mov ecx, eax
call fcn.0046b920
jmp 0x4f743d
call fcn.0046b260
add esp, 8
mov dword [esp + 0x4c], eax
test eax, eax
je 0x4f7463
mov eax, dword [esp + 0x5c]
push edi
mov edi, dword [esp + 0x28]
add eax, edi
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.005487c0
add esp, 0xc
jmp 0x4f7467
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x48]
mov eax, dword [ebp + 0x10]
test ecx, ecx
je 0x4f7483
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x48]
jmp 0x4f748a
mov eax, dword [eax + 0x10]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x60]
test eax, eax
je 0x4f74a0
test byte [eax + 0xc], 0x28
mov dword [esp + 0x6c], 0
je 0x4f74a8
mov dword [esp + 0x6c], 1
cmp dword [esp + 0x18], 0
mov esi, dword [esp + 0x34]
je 0x4f74c9
mov edx, dword [esp + 0x18]
mov dword [esp + 0x58], 0
test byte [edx + 0xc], 0x28
mov edx, dword [esp + 0x3c]
je 0x4f74d1
mov dword [esp + 0x58], 1
test eax, eax
jne 0x4f751a
cmp word [esp + 0x28], ax
ja 0x4f751a
mov dword [esp + 0x64], eax
cmp byte [esp + 0x13], 0
je 0x4f775b
mov ecx, dword [esi + 0x74]
add edx, edi
mov dword [esp + 0x6c], 0
cmp dword [esi + 0x78], ecx
jg 0x4f767d
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f76b0
mov dword [esp + 0x64], 1
mov dword [esp + 0x2c], edi
test eax, eax
je 0x4f74e0
mov eax, dword [eax]
mov edi, dword [eax + 0x10]
mov eax, dword [esp + 0x70]
movzx ecx, ax
mov eax, dword [esp + 0x24]
add eax, edx
mov dword [esp + 0x50], edi
push ecx
mov ecx, dword [esp + 0x10]
mov edx, edi
push eax
call fcn.004f5b80
mov eax, dword [esp + 0x68]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x4f75a3
mov eax, dword [esi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
shl ecx, 2
cmp byte [eax + 0x57], 0
je 0x4f757c
mov ecx, 0x5c4874
mov edx, 0x5c486a
jmp 0x4f7587
mov eax, dword [esi + 0x70]
add eax, ecx
lea ecx, [eax - 8]
lea edx, [eax - 0x12]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [edx], ax
mov eax, dword [esp + 0x60]
test byte [eax + 0xa], 0x80
jne 0x4f760f
mov ecx, edi
call fcn.004a9930
test eax, eax
je 0x4f760f
mov edx, dword [esp + 0x24]
mov ecx, dword [esi + 0x74]
add edx, dword [esp + 0x3c]
cmp dword [esi + 0x78], ecx
jg 0x4f75dc
push 0
push dword [esp + 0x48]
mov ecx, esi
push edx
mov edx, 0x32
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f760f
mov edi, dword [esp + 0x50]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x4f762f
mov eax, dword [esp + 0x24]
add eax, ecx
mov ecx, edi
push eax
mov eax, dword [esp + 0x74]
movzx edx, ax
call fcn.004f4b70
add esp, 4
mov ecx, dword [esp + 0x70]
movzx eax, cx
add dword [esp + 0x2c], eax
mov al, byte [edi]
cmp al, 0xb0
jne 0x4f7643
mov al, byte [edi + 2]
cmp al, 0xb1
jne 0x4f764c
mov eax, dword [edi + 0x14]
jmp 0x4f7656
cmp al, 0x8a
jne 0x4f766a
mov eax, dword [edi + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4f766a
mov dword [esp + 0x6c], 1
mov byte [esp + 0x13], 0
jmp 0x4f76bf
mov edx, dword [esp + 0x60]
mov ecx, dword [ebp + 0x10]
call fcn.004f4b00
mov byte [esp + 0x13], 0
jmp 0x4f76bf
mov edi, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 4], 0
lea eax, [edi + 1]
mov dword [esp + 0x64], 1
mov dword [esp + 0x2c], eax
movzx ecx, byte [esp + 0x13]
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x5c]
sub eax, ecx
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0xc]
test edx, edx
je 0x4f771a
test eax, eax
jle 0x4f76ee
cmp byte [edx], 0x41
jg 0x4f76ee
dec eax
inc edi
inc edx
test eax, eax
jg 0x4f76e2
cmp eax, 1
jle 0x4f7700
cmp byte [edx + eax - 1], 0x41
jg 0x4f7704
dec eax
cmp eax, 1
jg 0x4f76f3
test eax, eax
jle 0x4f771a
mov ecx, dword [ecx + 8]
push eax
push edx
push 0
push eax
push edi
mov edx, 0x5f
call fcn.00490150
add esp, 0x14
mov eax, dword [esp + 0x20]
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4f7731
cmp dword [esp + 0x2c], eax
je 0x4f7a83
mov edx, dword [esp + 0x48]
test edx, edx
je 0x4f77bd
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f778e
push 0
push edx
push 1
mov edx, 0x47
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f77bd
mov dword [esp + 0x2c], edi
test ecx, ecx
je 0x4f76bf
mov ecx, dword [esi + 0x74]
add edx, edi
cmp dword [esi + 0x78], ecx
jg 0x4f7681
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f76b0
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 0x34]
test edi, edi
je 0x4f785a
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4f77ef
push dword [esp + 0x3c]
mov edx, 0x3f
mov ecx, esi
push dword [esp + 0x48]
push edi
call fcn.0048fdb0
add esp, 0xc
mov edx, eax
jmp 0x4f7822
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edi, dword [esp + 0x44]
cmp byte [eax + 0x57], 0
jne 0x4f7841
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x24]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
push dword [ebp + 0x18]
mov edx, dword [ebp + 8]
push dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push edi
push dword [ebp + 0xc]
call fcn.004f6050
add esp, 0x10
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x64]
lea eax, [ecx + eax*2]
mov ecx, dword [esp + 0x40]
mov dl, byte [ecx + eax*2 + 0x58eeec]
mov ecx, dword [esp + 0x20]
movzx eax, dl
mov byte [esp + 0x13], dl
mov dword [esp + 0x50], eax
test dword [ecx + 0x2c], 0x100000
je 0x4f790c
cmp eax, 0x19
jne 0x4f790c
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 8]
movsx ecx, word [eax]
mov eax, 0x66666667
add ecx, 9
imul ecx
sar edx, 2
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [esi + 0x74]
mov dword [esp + 0x14], edx
cmp dword [esi + 0x78], edx
jg 0x4f78d5
push 0
push 0
push edi
mov edx, 0x7b
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x4f7904
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x7b
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x50]
mov dl, byte [esp + 0x13]
mov edi, dword [esi + 0x74]
cmp dword [esi + 0x78], edi
jg 0x4f7930
push dword [esp + 0x3c]
mov edx, eax
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x5c]
call fcn.0048fdb0
add esp, 0xc
mov edi, eax
jmp 0x4f796a
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f7987
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
mov edi, dword [esp + 0x2c]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x4f798b
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f7a87
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 2]
cmp dword [esi + 0x78], ecx
jg 0x4f79b8
push 0
push edx
push 0
mov edx, 0xb
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f79eb
mov edi, dword [esp + 0x2c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov eax, 1
mov edx, dword [esi + 0x74]
cmp eax, edi
sbb eax, eax
and eax, 4
mov al, byte [eax + ecx + 0x58eeee]
mov byte [esp + 0x13], al
cmp dword [esi + 0x78], edx
jg 0x4f7a2b
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x5c]
call fcn.0048fdb0
add esp, 0xc
mov edx, eax
jmp 0x4f7a68
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x13]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f7a83
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
sub edi, dword [esp + 0x6c]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x24]
mov edi, edx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], edi
test ecx, ecx
je 0x4f7c51
cmp dword [esp + 0x14], 0
mov eax, dword [ecx]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x6c], ecx
je 0x4f7ab6
mov edi, dword [ebp + 0x10]
mov eax, dword [esi + 0x74]
mov dword [edi + 0x40], eax
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
movzx eax, ax
add edi, edx
push eax
mov edx, ecx
mov dword [esp + 0x68], edi
mov ecx, dword [esp + 0x10]
push edi
call fcn.004f5b80
mov eax, dword [esp + 0x20]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x4f7b2a
mov eax, dword [esi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
shl ecx, 2
cmp byte [eax + 0x57], 0
je 0x4f7b03
mov ecx, 0x5c4874
mov edx, 0x5c486a
jmp 0x4f7b0e
mov eax, dword [esi + 0x70]
add eax, ecx
lea ecx, [eax - 8]
lea edx, [eax - 0x12]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [edx], ax
mov eax, dword [esp + 0x18]
test byte [eax + 0xa], 0x80
jne 0x4f7b8c
mov ecx, dword [esp + 0x6c]
call fcn.004a9930
test eax, eax
je 0x4f7b8c
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f7b5d
push 0
push dword [esp + 0x48]
mov edx, 0x32
mov ecx, esi
push edi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f7b8c
mov edx, dword [esp + 0x44]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x4f7c07
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x6c]
push edi
movzx edx, ax
call fcn.004f4b70
mov ecx, dword [esp + 0x10]
add esp, 4
mov eax, dword [esp + 0x38]
movzx edx, ax
mov eax, edx
mov ecx, dword [ecx + 8]
mov dword [esp + 0x50], ecx
test edx, edx
je 0x4f7bd8
mov ecx, dword [esp + 0x64]
cmp byte [edi], 0x41
jg 0x4f7bd0
dec eax
inc ecx
inc edi
test eax, eax
jg 0x4f7bc4
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x50]
cmp eax, 1
jle 0x4f7bed
nop dword [eax]
cmp byte [eax + edi - 1], 0x41
jg 0x4f7bf1
dec eax
cmp eax, 1
jg 0x4f7be0
test eax, eax
jle 0x4f7c07
push eax
push edi
push 0
push eax
push dword [esp + 0x74]
mov edx, 0x5f
call fcn.00490150
add esp, 0x14
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x28]
movzx eax, cx
mov ecx, dword [esp + 0x6c]
add edi, eax
mov al, byte [ecx]
cmp al, 0xb0
jne 0x4f7c21
mov al, byte [ecx + 2]
cmp al, 0xb1
jne 0x4f7c2a
mov eax, dword [ecx + 0x14]
jmp 0x4f7c34
cmp al, 0x8a
jne 0x4f7c43
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4f7c43
mov dword [esp + 0x58], 1
jmp 0x4f7cb8
mov edx, dword [esp + 0x18]
mov ecx, dword [ebp + 0x10]
call fcn.004f4b00
jmp 0x4f7cb8
cmp byte [esp + 0x1f], 0
je 0x4f7cb8
test eax, eax
jne 0x4f7cb7
mov edi, dword [esp + 0x3c]
mov ecx, dword [esi + 0x74]
add edi, edx
cmp dword [esi + 0x78], ecx
jg 0x4f7c7c
push eax
push edi
push eax
lea edx, [eax + 0x4a]
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f7cab
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edi, dword [esp + 0x28]
mov dword [esp + 0x58], 0
inc edi
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4f7ccb
mov ecx, dword [esp + 0x68]
mov edx, eax
call fcn.0046b530
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4f7cde
mov ecx, dword [esp + 0x68]
mov edx, eax
call fcn.0046b530
mov ecx, dword [ebp + 0x10]
cmp dword [ecx + 0x40], 0
jne 0x4f7ced
mov eax, dword [esi + 0x74]
mov dword [ecx + 0x40], eax
test edi, edi
je 0x4f7e07
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f7d50
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 3]
cmp dword [esi + 0x78], ecx
jg 0x4f7d1d
push 0
push edx
push eax
mov edx, 0x14
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f7d50
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x14
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x40]
mov edx, dword [esi + 0x74]
mov al, byte [eax + ecx*2 + 0x5912d0]
mov byte [esp + 0x1f], al
cmp dword [esi + 0x78], edx
jg 0x4f7d88
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x5c]
call fcn.0048fdb0
add esp, 0xc
mov edx, eax
jmp 0x4f7dc5
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x1f]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f7ddc
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4f7e07
mov edx, dword [esi + 0x74]
jns 0x4f7dec
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f7dfb
mov eax, 0x5c4868
jmp 0x4f7e04
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f7efa
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 2]
cmp dword [esi + 0x78], ecx
jg 0x4f7e33
push 0
push edx
push eax
mov edx, 0x12
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f7e66
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x12
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x40]
mov edx, dword [esi + 0x74]
mov al, byte [eax + ecx*2 + 0x5912d0]
mov byte [esp + 0x1f], al
cmp dword [esi + 0x78], edx
jg 0x4f7e9e
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x5c]
call fcn.0048fdb0
add esp, 0xc
mov edx, eax
jmp 0x4f7edb
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x1f]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f7efa
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x70]
add eax, edi
mov dword [ecx + 0x10], eax
mov edi, dword [esp + 0x20]
test dword [edi + 0x2c], 0x40000
je 0x4f7f59
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f7f2a
mov eax, dword [esp + 0x24]
mov edx, 0x7c
push eax
push eax
push dword [esp + 0x5c]
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f7f59
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x24]
mov dword [eax + ecx*4], 0x7c
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
test byte [edi + 0x2c], 0x40
mov eax, dword [ebp + 8]
je 0x4f7fd2
test byte [eax + 0x2c], 0x20
jne 0x4f7fd2
mov dword [esp + 0x5c], 1
mov edi, dword [esp + 0x54]
mov edx, dword [esp + 0x30]
mov ecx, dword [ebp + 0x10]
cmp dword [ecx], 0
jne 0x4f7fb8
mov eax, dword [ebp + 8]
test byte [eax + 0x2c], 0x20
jne 0x4f7f97
mov ecx, dword [esp + 0x74]
push eax
push edi
call fcn.004f5dc0
add esp, 8
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x24]
test ecx, ecx
je 0x4f7fb5
push dword [esp + 0x9c]
mov edx, dword [esp + 0x34]
call fcn.004f5fd0
add esp, 4
mov ecx, dword [ebp + 0x10]
mov edx, dword [esp + 0x20]
test dword [edx + 0x2c], 0x1000
je 0x4f8214
mov byte [ecx + 0x39], 0xb6
jmp 0x4f8221
mov ecx, dword [esp + 0x74]
mov edi, dword [ecx + 0xc]
test byte [edi + 0x1c], 0x80
jne 0x4f8001
mov edi, dword [esp + 0x54]
mov edx, ecx
push edi
push dword [esp + 0x34]
mov ecx, eax
call fcn.004f5a10
add esp, 8
mov dword [esp + 0x5c], 0
jmp 0x4f7f74
mov edx, dword [esp + 0x30]
xor eax, eax
mov dword [esp + 0x5c], eax
cmp edx, dword [esp + 0x54]
je 0x4f820b
mov edi, dword [edi + 8]
mov dword [esp + 0x5c], eax
test edi, edi
je 0x4f8034
mov dword [esp + 0x5c], eax
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x4f8034
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4f8024
movzx ecx, word [edi + 0x32]
cmp ecx, 1
jne 0x4f8069
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4f8054
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x4c], eax
jmp 0x4f80a8
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0x98]
mov dword [esp + 0x4c], eax
jmp 0x4f80a8
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x20]
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x4c], eax
cmp ecx, edx
jg 0x4f8091
mov esi, dword [esp + 0xc]
add eax, ecx
sub edx, ecx
mov dword [esi + 0x20], eax
mov eax, esi
mov esi, dword [esp + 0x34]
mov dword [eax + 0x1c], edx
jmp 0x4f80a8
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x4c], edx
mov dword [ecx + 0x2c], eax
movzx eax, word [edi + 0x32]
xor edx, edx
mov dword [esp + 0x58], 0
mov ecx, eax
cmp dx, ax
jae 0x4f8184
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x14], eax
nop dword [eax]
mov eax, dword [esp + 0x74]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x4f8109
mov eax, dword [edi + 4]
mov esi, dword [esp + 0x58]
movzx eax, word [eax + esi*2]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 4]
mov esi, dword [esp + 0x50]
cmp si, word [eax]
mov esi, dword [esp + 0x34]
je 0x4f8131
inc ecx
add eax, 2
cmp ecx, edx
jl 0x4f80f4
or eax, 0xffffffff
mov ecx, dword [esi + 0x74]
movsx edx, ax
cmp dword [esi + 0x78], ecx
jg 0x4f8136
push dword [esp + 0x14]
mov ecx, esi
push edx
push dword [esp + 0x5c]
mov edx, 0x5d
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f8169
movzx eax, cx
jmp 0x4f810c
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x5d
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x58]
movzx edx, word [edi + 0x32]
inc ecx
inc dword [esp + 0x14]
mov dword [esp + 0x58], ecx
cmp ecx, edx
jl 0x4f80d0
mov ecx, edx
mov edx, dword [esi + 0x74]
movzx edi, cx
cmp dword [esi + 0x78], edx
jg 0x4f81b1
push dword [esp + 0x4c]
mov edx, 0x1e
mov ecx, esi
push dword [esp + 0x88]
push dword [esp + 0x38]
call fcn.0048fdb0
add esp, 0xc
mov edx, eax
jmp 0x4f81eb
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x84]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x4c]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f7f70
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x4f7f70
mov edi, dword [esp + 0x54]
jmp 0x4f7f78
cmp dword [esp + 0x40], 0
sete al
add al, 4
mov byte [ecx + 0x39], al
mov dword [ecx + 0x3c], edi
mov al, byte [edx + 0x2e]
mov edi, dword [ebp + 0x10]
and al, 1
mov byte [edi + 0x3a], al
test byte [edx + 0x2c], 0xf
jne 0x4f8239
mov byte [edi + 0x3b], 1
cmp dword [esp + 0x5c], 0
je 0x4f8f4c
xor eax, eax
mov dword [esp + 0x74], eax
jmp 0x4f6c8e
test edx, 0x2000
je 0x4f8e9d
mov ecx, dword [esp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x64], 0
mov dword [esp + 0x2c], 0
mov eax, dword [ecx + 0x28]
dec dword [ecx + 0x38]
mov dword [esp + 0x98], eax
inc eax
mov dword [ecx + 0x28], eax
mov eax, dword [ecx + 0x2c]
inc eax
mov dword [esp + 0x18], 0
mov dword [ecx + 0x2c], eax
mov dword [esp + 0x5c], eax
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], 0
mov dword [esp + 0x48], 0
mov edx, dword [eax + 0x10]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x70], edx
mov eax, dword [eax + 0x38]
mov eax, dword [eax]
mov dword [esp + 0x50], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x5c]
mov dword [edi + 0x3c], eax
mov eax, dword [ebp + 8]
mov byte [edi + 0x39], 0x43
mov al, byte [eax + 0x30]
cmp al, 1
jbe 0x4f843a
mov ecx, dword [esp + 0x68]
movzx eax, al
sub eax, dword [ebp + 0xc]
dec eax
mov dword [esp + 0x78], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x4f8315
call fcn.0046b920
mov ecx, eax
mov dword [esp + 0x54], ecx
jmp 0x4f8320
call fcn.0046b260
mov ecx, eax
mov dword [esp + 0x54], eax
add esp, 8
test ecx, ecx
jne 0x4f8333
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x18]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x78]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [esp + 0x80]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp + 8]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
cmp edx, 1
jl 0x4f83d3
add ecx, 0x50
mov esi, eax
add edi, 0x90
nop dword [eax + eax]
movzx eax, byte [edi]
lea edi, [edi + 0x58]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [esi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [esi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x4f8390
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0xc]
mov eax, dword [ebp + 8]
test byte [eax + 0x2c], 0x10
jne 0x4f8596
test byte [edx + 0x1c], 0x80
jne 0x4f848d
inc dword [ecx + 0x2c]
lea edi, [esi + 0x74]
mov edx, dword [ecx + 0x2c]
lea eax, [esi + 0x78]
mov ecx, dword [edi]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], eax
cmp dword [eax], ecx
jg 0x4f8446
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.0048fdb0
mov eax, dword [esp + 0x18]
lea ecx, [esi + 0x78]
add esp, 0xc
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4f85a4
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
jmp 0x4f83db
lea eax, [ecx + 1]
mov dword [edi], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xc]
lea edi, [esi + 0x74]
lea ecx, [esi + 0x78]
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4f85a4
mov edi, dword [edx + 8]
test edi, edi
je 0x4f84a4
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x4f84a4
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4f8494
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x2c], eax
inc eax
mov dword [ecx + 0x28], eax
lea eax, [esi + 0x74]
mov ecx, dword [eax]
movzx edx, word [edi + 0x32]
mov dword [esp + 0x24], eax
lea eax, [esi + 0x78]
mov dword [esp + 0x40], eax
cmp dword [eax], ecx
jg 0x4f84df
push 0
push edx
push dword [esp + 0x34]
mov edx, 0x74
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f8512
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x74
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0xc]
mov edx, edi
mov eax, dword [ecx + 8]
mov dword [esp + 0x78], eax
call fcn.004c29a0
mov edi, eax
test edi, edi
je 0x4f8474
mov edx, dword [esp + 0x78]
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
je 0x4f8566
push edi
mov edx, 0xfffffff7
call fcn.004908c0
mov eax, dword [esp + 0x10]
lea edi, [esi + 0x74]
add esp, 4
mov dword [esp + 0x24], edi
lea ecx, [esi + 0x78]
mov dword [esp + 0x40], ecx
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4f85a4
mov eax, dword [edx + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x70]
mov dword [eax + ecx*4 - 4], edi
lea edi, [esi + 0x74]
mov byte [eax + ecx*4 - 0x13], 0xf7
lea ecx, [esi + 0x78]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], ecx
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4f85a4
lea edi, [esi + 0x74]
lea ecx, [esi + 0x78]
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], ecx
mov edx, dword [edi]
mov dword [esp + 0x78], edx
cmp dword [ecx], edx
jg 0x4f85cb
push 0
push dword [esp + 0x60]
mov edx, 0x47
mov ecx, esi
push 0
call fcn.0048fdb0
add esp, 0xc
mov dword [esp + 0x78], eax
jmp 0x4f85fd
lea eax, [edx + 1]
mov dword [edi], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x5c]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x64], 1
jle 0x4f870a
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x14], ecx
mov eax, dword [edx + 0x70]
mov edx, dword [eax + edi]
add eax, edi
cmp eax, dword [esp + 0x50]
je 0x4f866d
mov esi, 0x8006
test word [eax + 0xa], si
mov esi, dword [esp + 0xc]
jne 0x4f866d
mov ecx, 0x1fff
test word [eax + 0xc], cx
mov ecx, dword [esp + 0x14]
je 0x4f866d
test dword [edx + 4], 0x200000
jne 0x4f866d
mov ecx, dword [esp + 0x68]
push 0
push 0
call fcn.004a84a0
mov edx, dword [esp + 0x50]
mov ecx, esi
push eax
call fcn.004a79d0
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov dword [esp + 0x48], eax
jmp 0x4f8671
mov eax, dword [esp + 0x48]
mov edx, dword [ebp + 8]
inc ecx
add edi, 0x30
mov dword [esp + 0x14], ecx
cmp ecx, dword [edx + 0x64]
jl 0x4f8612
mov esi, dword [esp + 0x34]
test eax, eax
je 0x4f870a
mov eax, dword [esp + 0xc]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.0046b920
mov edi, eax
add esp, 8
test edi, edi
je 0x4f86f7
push 0x34
push 0
push edi
call fcn.00548d40
or eax, 0xffffffff
mov byte [edi], 0x2c
mov word [edi + 0x22], ax
add esp, 0xc
mov eax, dword [esp + 0x48]
mov ecx, edi
mov dword [edi + 0x10], eax
mov eax, dword [eax + 4]
and eax, 0x200104
or dword [edi + 4], eax
call fcn.004a75d0
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp dword [edi + 0x18], eax
jle 0x4f8706
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.0046eb10
add esp, 0xc
jmp 0x4f8706
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x48]
mov ecx, dword [eax]
call fcn.004a81b0
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0xc]
push str.MULTI_INDEX_OR
push 1
push edi
call fcn.004903b0
mov edx, dword [esp + 0x64]
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x38], ecx
cmp dword [edx + 0xc], ecx
jle 0x4f87bc
mov dword [esp + 0x8c], 1
nop dword [eax]
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [edx + 0x18]
mov edx, dword [esp + 0x30]
cmp dword [eax + 0x14], edx
je 0x4f875d
mov edx, 0x400
test word [eax + 0xc], dx
je 0x4f87ac
mov edx, dword [eax]
mov dword [esp + 0x6c], 0
test edx, edx
je 0x4f8783
mov ecx, dword [esp + 0x68]
push 0
push 0
call fcn.004a84a0
mov ecx, dword [esp + 0x40]
add esp, 8
mov edi, eax
jmp 0x4f8785
xor edi, edi
mov eax, dword [esp + 0x68]
mov dword [esp + 0x7c], edi
cmp byte [eax + 0x57], 0
je 0x4f87d1
test edi, edi
je 0x4f8d4d
mov edx, edi
mov ecx, eax
call fcn.004a81b0
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x58]
inc ecx
mov dword [esp + 0x38], ecx
mov edx, eax
cmp ecx, dword [eax + 0xc]
jl 0x4f8740
mov ecx, dword [edi + 0xdc]
test ecx, ecx
jne 0x4f8d56
xor eax, eax
jmp 0x4f8d7c
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f87de
mov dword [eax + 0xc], edi
mov edi, eax
lea eax, [ecx + 1]
push eax
push str.INDEX__d
push 1
push dword [esp + 0x18]
call fcn.004903b0
push dword [esp + 0xa8]
mov edx, dword [esp + 0x60]
push 0x20
push 0
push 0
push 0
push edi
mov edi, dword [esp + 0x34]
mov ecx, edi
call fcn.00503aa0
add esp, 0x28
mov dword [esp + 0x60], eax
test eax, eax
je 0x4f8d31
mov edx, dword [esp + 0x4c]
lea ecx, [eax + 0x300]
push 0
push ecx
mov ecx, edi
call fcn.004f4520
mov eax, dword [ebp + 8]
add esp, 8
test byte [eax + 0x2c], 0x10
jne 0x4f8be1
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x38]
mov eax, dword [eax + 0xc]
dec eax
cmp ecx, eax
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x14], ecx
test byte [eax + 0x1c], 0x80
jne 0x4f8954
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
mov ecx, dword [edx]
cmp dword [eax], ecx
jg 0x4f8895
push 0
push dword [esp + 0x1c]
mov edx, 0x86
mov ecx, esi
push dword [esp + 0x38]
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f88c7
lea eax, [ecx + 1]
mov dword [edx], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
mov edx, dword [ecx]
mov dword [esp + 0x6c], edx
cmp dword [eax], edx
jg 0x4f88fa
push dword [esp + 0x18]
mov edx, 0x2e
mov ecx, esi
push 0
push dword [esp + 0x34]
call fcn.0048fdb0
mov edx, eax
add esp, 0xc
mov dword [esp + 0x6c], edx
jmp 0x4f8930
mov edi, dword [esp + 0x2c]
lea eax, [edx + 1]
mov dword [ecx], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x2e
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f8be1
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x14]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x4f8be1
mov ecx, eax
call fcn.004ba750
mov dword [esp + 0x88], eax
movzx ecx, word [eax + 0x32]
mov eax, ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x44], eax
cmp eax, 1
jne 0x4f89a1
mov al, byte [edi + 0x13]
test al, al
jne 0x4f898a
inc dword [edi + 0x2c]
mov edx, dword [edi + 0x2c]
xor edi, edi
mov dword [esp + 0x3c], edx
jmp 0x4f89e0
dec al
mov byte [edi + 0x13], al
movzx eax, al
mov edx, dword [edi + eax*4 + 0x98]
xor edi, edi
mov dword [esp + 0x3c], edx
jmp 0x4f89e0
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi + 0x20]
mov dword [esp + 0x3c], edx
cmp eax, ecx
jg 0x4f89bf
add eax, edx
mov dword [edi + 0x20], eax
mov eax, dword [esp + 0x44]
sub ecx, eax
mov dword [edi + 0x1c], ecx
jmp 0x4f89d4
mov eax, dword [edi + 0x2c]
lea edx, [eax + 1]
add eax, dword [esp + 0x44]
mov dword [edi + 0x2c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x3c], edx
xor ecx, ecx
xor edi, edi
cmp cx, word [esp + 0x20]
jae 0x4f8a12
nop
lea eax, [edi + edx]
mov ecx, esi
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x8c]
mov eax, dword [eax + 4]
movsx eax, word [eax + edi*2]
push eax
push dword [esp + 0x38]
call fcn.004ac9a0
mov eax, dword [esp + 0x50]
inc edi
mov edx, dword [esp + 0x48]
add esp, 0xc
cmp edi, eax
jl 0x4f89e0
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4f8aa5
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
mov edi, dword [ecx]
mov dword [esp + 0x6c], edi
cmp dword [eax], edi
jg 0x4f8a4e
push edx
push 0
push dword [esp + 0x34]
mov edx, 0x1f
mov ecx, esi
call fcn.0048fdb0
mov edi, eax
add esp, 0xc
mov dword [esp + 0x6c], edi
jmp 0x4f8a80
lea eax, [edi + 1]
mov dword [ecx], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f8a9b
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
mov edi, dword [esp + 0x44]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x14]
test ecx, ecx
mov eax, dword [esp + 0x44]
js 0x4f8ba0
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x40]
mov ecx, dword [edi]
cmp dword [edx], ecx
mov edx, dword [esp + 0x3c]
jg 0x4f8ad4
push dword [esp + 0x18]
mov ecx, esi
push eax
push edx
mov edx, 0x60
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f8b06
lea eax, [ecx + 1]
mov dword [edi], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov edi, dword [esp + 0x44]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x24]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x40]
mov edx, dword [edi]
cmp dword [eax], edx
jg 0x4f8b30
mov edi, dword [esp + 0x3c]
mov edx, 0x89
push edi
push dword [esp + 0x1c]
mov ecx, esi
push dword [esp + 0x34]
call fcn.0048fdb0
add esp, 0xc
mov edx, eax
jmp 0x4f8b62
lea eax, [edx + 1]
mov dword [edi], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f8b7d
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x44]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
cmp dword [esp + 0x14], 0
je 0x4f8ba4
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
test eax, eax
jle 0x4f8ba4
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x4f8ba4
mov edi, dword [esp + 0x3c]
cmp word [esp + 0x20], 1
jne 0x4f8bcc
test edi, edi
je 0x4f8c0e
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4f8c14
movzx eax, al
mov dword [ecx + eax*4 + 0x98], edi
mov edi, ecx
inc byte [edi + 0x13]
jmp 0x4f8be1
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x44]
cmp ecx, dword [eax + 0x1c]
jle 0x4f8bdf
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], edi
mov edi, eax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
mov ecx, dword [edx]
cmp dword [eax], ecx
jg 0x4f8c18
push 0
push dword [esp + 0x58]
mov edx, 0xc
mov ecx, esi
push dword [esp + 0x64]
call fcn.0048fdb0
mov edx, dword [esp + 0x30]
add esp, 0xc
jmp 0x4f8c4e
mov edi, dword [esp + 0xc]
jmp 0x4f8be1
mov edi, ecx
jmp 0x4f8be1
mov edi, dword [esp + 0x5c]
lea eax, [ecx + 1]
mov dword [edx], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x4f8c78
mov edx, dword [edx]
jns 0x4f8c5d
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f8c6c
mov eax, 0x5c4868
jmp 0x4f8c75
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x28]
mov edx, dword [eax + 0x34]
test dl, 2
cmovne ecx, dword [esp + 0x8c]
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 0x34c]
test dword [ecx + 0x2c], 0x200
je 0x4f8cdc
cmp dword [esp + 0x38], 0
je 0x4f8cb5
mov edi, dword [esp + 0x64]
cmp dword [ecx + 0x20], edi
mov edi, dword [esp + 0xc]
jne 0x4f8cdc
mov esi, dword [esp + 0x70]
test byte [esi + 0x1c], 0x80
mov esi, dword [esp + 0x34]
je 0x4f8cd3
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
mov eax, dword [esp + 0x60]
je 0x4f8cdc
mov ecx, dword [ecx + 0x20]
mov dword [esp + 0x64], ecx
jmp 0x4f8ce4
mov dword [esp + 0x64], 0
test dl, 1
je 0x4f8cf0
mov ecx, dword [ebp + 8]
or dword [ecx + 0x34], 1
mov ecx, eax
call fcn.005046f0
mov ecx, dword [edi + 0xdc]
test ecx, ecx
jne 0x4f8d05
xor eax, eax
jmp 0x4f8d2b
mov edx, dword [edi + 8]
test ecx, ecx
jns 0x4f8d10
mov ecx, dword [edx + 0x74]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4f8d1f
mov eax, 0x5c4868
jmp 0x4f8d28
mov eax, dword [edx + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [edi + 0xdc], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4f87a8
mov ecx, dword [esp + 0x68]
mov edx, eax
call fcn.004a81b0
jmp 0x4f87a8
mov edi, dword [esp + 0xc]
jmp 0x4f87ac
mov edx, dword [edi + 8]
test ecx, ecx
jns 0x4f8d61
mov ecx, dword [edx + 0x74]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4f8d70
mov eax, 0x5c4868
jmp 0x4f8d79
mov eax, dword [edx + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [edi + 0xdc], eax
mov edi, dword [ebp + 0x10]
mov eax, dword [esp + 0x64]
mov dword [edi + 0x44], eax
test eax, eax
je 0x4f8d9a
mov eax, dword [esp + 0x98]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f8db4
mov ecx, dword [esp + 0x68]
mov edx, eax
mov dword [eax + 0xc], 0
call fcn.004a81b0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x78]
mov edx, dword [eax]
test ecx, ecx
jns 0x4f8dc5
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f8dd4
mov eax, 0x5c4868
jmp 0x4f8ddd
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov eax, dword [esp + 0x24]
mov edx, dword [edi + 0xc]
mov ecx, dword [eax]
mov eax, dword [esp + 0x40]
cmp dword [eax], ecx
jg 0x4f8e07
push 0
push edx
push 0
mov edx, 0xb
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
jmp 0x4f8e3c
mov edi, dword [esp + 0x24]
lea eax, [ecx + 1]
lea ecx, [ecx + ecx*4]
mov dword [edi], eax
mov eax, dword [esi + 0x70]
mov edi, dword [ebp + 0x10]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x54]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4f8e5a
push edx
mov edx, esi
call fcn.004905d0
add esp, 4
jmp 0x4f8e66
mov eax, dword [esp + 0x24]
mov ecx, dword [ecx + 0x40]
mov eax, dword [eax]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp + 8]
cmp byte [eax + 0x30], 1
jbe 0x4f8e82
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4f8e82
mov ecx, dword [esp + 0x68]
mov edx, eax
call fcn.0046b530
cmp dword [esp + 0x28], 0
jne 0x4f6c8c
mov edx, dword [esp + 0x50]
mov ecx, edi
call fcn.004f4b00
jmp 0x4f6c8c
mov eax, dword [esp + 0x80]
test byte [eax + 0x28], 0x20
jne 0x4f6c85
mov edx, dword [esp + 0x40]
mov ecx, dword [ebp + 0x10]
movzx eax, byte [edx + 0x58bf64]
mov byte [ecx + 0x39], al
mov eax, dword [esp + 0x30]
mov dword [ecx + 0x3c], eax
mov al, byte [edx + 0x58d554]
mov edx, dword [esi + 0x74]
mov byte [esp + 0x1f], al
cmp dword [esi + 0x78], edx
jg 0x4f8f00
push 0
push edi
push dword [esp + 0x38]
movzx edx, al
mov ecx, esi
call fcn.0048fdb0
mov ecx, dword [ebp + 0x10]
mov edx, eax
add esp, 0xc
lea eax, [edx + 1]
mov byte [ecx + 0x3b], 1
mov dword [ecx + 0x40], eax
jmp 0x4f6c8c
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x1f]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
lea eax, [edx + 1]
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 0x40], eax
mov byte [ecx + 0x3b], 1
jmp 0x4f6c8c
mov eax, dword [esp + 0x74]
jmp 0x4f6c8e
mov eax, dword [esp + 0x80]
mov ecx, dword [edi]
mov dword [esp + 0x88], ecx
test byte [eax + 0x24], 8
je 0x4f8f75
test byte [ecx + 4], 1
je 0x4f911a
cmp dword [esp + 0x58], 1
jne 0x4f9000
mov eax, dword [ebp + 0x10]
xorps xmm0, xmm0
mov dword [esp + 0xa0], 0
movlpd qword [esp + 0xa8], xmm0
movlpd qword [esp + 0xb0], xmm0
mov eax, dword [eax + 4]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x90], eax
lea eax, [esp + 0x90]
mov dword [esp + 0xa4], 0x4b0a70
mov dword [esp + 0xb8], eax
test ecx, ecx
je 0x4f8fe7
mov edx, ecx
lea ecx, [esp + 0xa0]
call fcn.004a3860
mov edx, dword [esp + 0x14]
cmp word [esp + 0xb4], 0
je 0x4f900e
mov edx, 2
mov dword [esp + 0x14], edx
jmp 0x4f911a
cmp dword [esp + 0x58], 3
mov eax, dword [esp + 0x7c]
movzx ecx, ax
jge 0x4f9034
movzx eax, word [edi + 0xa]
mov ecx, eax
test eax, 0x1000
je 0x4f9034
mov ecx, dword [ebp + 8]
test edx, edx
jne 0x4f911d
mov edx, 3
mov dword [esp + 0x14], edx
jmp 0x4f911d
test ecx, 0x200
je 0x4f90c7
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x4f90c7
mov edx, dword [esi + 0x74]
mov ecx, eax
and eax, 1
shr ecx, 1
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x28], edx
lea eax, [eax*2 + 0x12]
mov dword [esp + 0x7c], eax
cmp dword [esi + 0x78], edx
jg 0x4f9086
push 0
push 0
push ecx
mov edx, eax
mov ecx, esi
call fcn.0048fdb0
add esp, 0xc
mov dword [esp + 0x28], eax
jmp 0x4f90c7
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x7c]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x8c]
mov dword [eax + 4], ecx
push 0x10
push dword [esp + 0x88]
push dword [esp + 0x90]
push dword [esp + 0x18]
call fcn.004afc90
mov ecx, dword [esp + 0x38]
add esp, 0x10
test ecx, ecx
je 0x4f9111
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4f90fd
mov eax, 0x5c4868
jmp 0x4f910e
test ecx, ecx
lea eax, [edx - 1]
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [edi + 0xa], 4
mov edx, dword [esp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x50]
add edi, 0x30
dec eax
mov dword [esp + 0x50], eax
test eax, eax
jg 0x4f6cc0
mov dword [esp + 0x58], edx
test edx, edx
jg 0x4f6ca0
mov edx, dword [ecx + 0x6c]
mov eax, dword [ecx + 0x70]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x5c], edx
test edx, edx
jle 0x4f926a
mov esi, eax
test byte [esi + 0xa], 6
jne 0x4f9256
movzx eax, word [esi + 0xc]
mov edi, 0xb
test al, 0x82
setne cl
bt ax, di
setb al
test al, cl
je 0x4f9256
mov ecx, dword [esp + 0x30]
cmp dword [esi + 0x14], ecx
jne 0x4f9256
mov eax, dword [esp + 0x80]
test byte [eax + 0x24], 8
jne 0x4f9256
mov eax, dword [esi]
mov edx, ecx
mov ecx, dword [esp + 0x9c]
push 0
push 0x83
push dword [ebp + 0x18]
mov dword [esp + 0x88], eax
push dword [ebp + 0x14]
push dword [esi + 0x18]
call fcn.004fce90
mov edi, eax
add esp, 0x14
test edi, edi
je 0x4f9252
test byte [edi + 0xa], 4
jne 0x4f9252
test byte [edi + 0xc], 1
je 0x4f91f0
mov eax, dword [edi]
test dword [eax + 4], 0x800
je 0x4f91f0
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4f9252
mov eax, dword [edi]
push 0x10
push dword [esp + 0x88]
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xa8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esp + 0xb8], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esp + 0xc8], xmm0
mov eax, dword [eax + 0x30]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x84]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xa8]
push eax
push dword [esp + 0x18]
call fcn.004afc90
add esp, 0x10
or word [edi + 0xa], 4
mov edx, dword [esp + 0x5c]
dec edx
add esi, 0x30
mov dword [esp + 0x5c], edx
test edx, edx
jg 0x4f9155
mov esi, dword [esp + 0x34]
mov edx, dword [ebp + 0x10]
mov edi, dword [edx]
test edi, edi
je 0x4f9321
mov eax, dword [esi + 0x74]
mov dword [edx + 0x1c], eax
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f929e
push 0
push edi
push 1
mov edx, 0x47
mov ecx, esi
call fcn.0048fdb0
mov edx, dword [ebp + 0x10]
add esp, 0xc
jmp 0x4f92cd
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 8]
xor edi, edi
mov esi, dword [eax + 0x70]
cmp dword [eax + 0x6c], edi
jle 0x4f9321
nop word [eax + eax]
test byte [esi + 0xa], 6
jne 0x4f9312
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [edx + 0x50]
and eax, dword [edx + 0x54]
or ecx, eax
jne 0x4f9312
push 0x10
push dword [esp + 0x88]
push dword [esi]
push dword [esp + 0x18]
call fcn.004afc90
add esp, 0x10
or word [esi + 0xa], 4
mov edx, dword [ebp + 8]
inc edi
add esi, 0x30
cmp edi, dword [edx + 0x6c]
mov edx, dword [ebp + 0x10]
jl 0x4f92e0
mov ecx, dword [ebp + 0x10]
pop edi
pop esi
mov eax, dword [ecx + 0x50]
mov edx, dword [ecx + 0x54]
mov esp, ebp
pop ebp
ret