Function at 0x4f5ed0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x284]
cmp eax, dword [ecx + 8]
jbe 0x4f91bf
sub esp, 0x304
mov edx, dword [esp + 0x308]
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x1c]
cmp dword [edx + 0x33c], 1
jne 0x4f5fe0
movzx esi, byte [esp + 0x318]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4f5fe8
mov edi, dword [0x707c18]
mov ecx, dword [0x707c1c]
mov eax, dword [esp + 0x314]
cmp eax, ecx
jae 0x4f91b9
shl eax, 4
mov ecx, dword [edi + eax]
mov esi, dword [edi + eax + 4]
mov edx, dword [edi + eax + 8]
mov edi, dword [edi + eax + 0xc]
sub ebx, edx
lea eax, [ecx + ebx - 1]
test ecx, ecx
je 0x4f91b4
cmp ecx, 0xffffffff
je 0x4f5f64
cdq
idiv ecx
jmp 0x4f5f66
neg eax
sub ebp, edi
lea ecx, [esi + ebp - 1]
test esi, esi
je 0x4f91af
mov dword [esp + 0xfc], eax
mov eax, ecx
cmp esi, 0xffffffff
je 0x4f5f87
cdq
idiv esi
jmp 0x4f5f89
neg eax
mov ecx, dword [esp + 0xfc]
test ecx, ecx
je 0x4f5f98
test eax, eax
jne 0x4f5fcb
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], 0
mov dword [esp + 0x328], 0
add esp, 0x304
ret
mov edx, dword [esp + 0x308]
movzx esi, byte [esp + 0x318]
mov ebx, ecx
mov ebp, eax
jmp 0x4f5fe8
movzx esi, byte [esp + 0x318]
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x110], ebp
mov ecx, dword [edx + 0x30]
cmp ecx, 0xa
jg 0x4f642b
cmp ecx, 5
jg 0x4f6227
lea edi, [ecx - 1]
cmp edi, 3
ja 0x4f615b
mov eax, dword [edx + 0x20]
mov dword [esp + 0x11c], eax
movzx ecx, byte [edx + 0x340]
test cl, cl
je 0x4f6090
nop
test ebx, ebx
jge 0x4f6037
mov ecx, ebx
xor edi, edi
jmp 0x4f603d
mov ecx, ebx
xor ebx, ebx
mov edi, ecx
test ebp, ebp
jge 0x4f6053
mov dword [esp + 0x2b4], eax
xor eax, eax
mov dword [esp + 0xd4], eax
jmp 0x4f6065
xor ebp, ebp
mov ebp, dword [esp + 0x110]
mov dword [esp + 0xd4], ebp
xor ebp, ebp
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xc], eax
call fcn.004f2d50
mov eax, dword [esp + 0x10]
lea ecx, [0x7cb3f8]
mov edx, eax
xor ebx, ebx
jmp 0x4f60f2
nop
test ebx, ebx
jge 0x4f609b
mov ecx, ebx
xor edi, edi
jmp 0x4f60a1
mov ecx, ebx
xor ebx, ebx
mov edi, ecx
test ebp, ebp
jge 0x4f60b7
mov dword [esp + 0x2ac], eax
xor eax, eax
mov dword [esp + 0xd0], eax
jmp 0x4f60c9
xor ebp, ebp
mov ebp, dword [esp + 0x110]
mov dword [esp + 0xd0], ebp
xor ebp, ebp
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xc], eax
call fcn.004f3870
mov eax, dword [esp + 0x10]
lea ecx, [0x7cb3dc]
xor edx, edx
mov ebx, eax
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x2cc], ebp
xor esi, esi
mov dword [esp + 0x2c4], esi
xor ebp, ebp
mov dword [esp + 0x2ec], ebp
xor ebp, ebp
mov dword [esp + 0x2d4], ebp
mov dword [esp + 0x100], ecx
mov dword [esp + 0x2d8], eax
mov eax, ebx
mov ecx, edx
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
jmp 0x4f68f1
cmp ecx, 5
jne 0x4f68aa
nop
test ebx, ebx
jge 0x4f616f
mov eax, ebx
xor ecx, ecx
jmp 0x4f6175
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f617d
xor edi, edi
jmp 0x4f6186
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f2d50
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
mov ecx, eax
xor edi, edi
xor eax, eax
mov dword [esp + 0x2cc], eax
xor edx, edx
mov dword [esp + 0x2c4], edx
xor ebx, ebx
mov dword [esp + 0x2ec], ebx
xor ebp, ebp
mov dword [esp + 0x2d4], ebp
lea esi, [0x7cb3f8]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2d8], ecx
mov eax, 0x10
mov dword [esp + 0x11c], eax
xor eax, eax
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
jmp 0x4f68f1
cmp ecx, 6
jne 0x4f633a
movzx eax, byte [edx + 0x340]
test al, al
je 0x4f6281
nop
test ebx, ebx
jge 0x4f6246
mov eax, ebx
xor ecx, ecx
jmp 0x4f624c
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f6254
xor edi, edi
jmp 0x4f625d
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f2d50
mov eax, dword [esp + 0x10]
lea ecx, [0x7cb3f8]
mov edx, eax
xor ebx, ebx
jmp 0x4f62c5
nop
test ebx, ebx
jge 0x4f628c
mov eax, ebx
xor ecx, ecx
jmp 0x4f6292
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f629a
xor edi, edi
jmp 0x4f62a3
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f21c0
mov eax, dword [esp + 0x10]
lea ecx, [0x7cb4bc]
xor edx, edx
mov ebx, eax
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0x2cc], ebx
xor ebp, ebp
mov dword [esp + 0x2c4], ebp
xor esi, esi
mov dword [esp + 0x2ec], esi
xor ebx, ebx
mov dword [esp + 0x2d4], ebx
mov dword [esp + 0x100], ecx
mov dword [esp + 0x2d8], eax
mov ebx, 0x18
mov dword [esp + 0x11c], ebx
mov ebx, dword [esp + 0xfc]
xor eax, eax
mov ecx, edx
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
mov edx, dword [esp + 0x308]
jmp 0x4f68f1
mov eax, dword [edx + 0x20]
test ebx, ebx
jge 0x4f6347
mov ecx, ebx
xor edi, edi
jmp 0x4f634d
mov ecx, ebx
xor ebx, ebx
mov edi, ecx
mov dword [esp + 0x11c], eax
test ebp, ebp
jge 0x4f636a
mov dword [esp + 0x2a4], eax
xor eax, eax
mov dword [esp + 0xcc], eax
jmp 0x4f637c
xor ebp, ebp
mov ebp, dword [esp + 0x110]
mov dword [esp + 0xcc], ebp
xor ebp, ebp
mov eax, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
mov esi, dword [edx + 0x2c]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov ebx, dword [esp + 0xcc]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], esi
call fcn.004f4260
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x2cc], eax
xor edx, edx
mov dword [esp + 0x2c4], edx
xor ebx, ebx
mov dword [esp + 0x2ec], ebx
xor ebp, ebp
mov dword [esp + 0x2d4], ebp
lea esi, [0x7cb414]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2d8], eax
xor eax, eax
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
jmp 0x4f68f1
cmp ecx, 0xc
jg 0x4f6606
cmp ecx, 0xb
jne 0x4f6500
nop
test ebx, ebx
jge 0x4f6448
mov eax, ebx
xor ecx, ecx
jmp 0x4f644e
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f6456
xor edi, edi
jmp 0x4f645f
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f2d50
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
mov ecx, eax
xor edi, edi
xor eax, eax
mov dword [esp + 0x2cc], eax
xor edx, edx
mov dword [esp + 0x2c4], edx
xor ebx, ebx
mov dword [esp + 0x2ec], ebx
xor ebp, ebp
mov dword [esp + 0x2d4], ebp
lea esi, [0x7cb3f8]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2d8], ecx
mov eax, 0x20
mov dword [esp + 0x11c], eax
xor eax, eax
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
jmp 0x4f68f1
movzx eax, byte [edx + 0x340]
test al, al
je 0x4f6551
nop
test ebx, ebx
jge 0x4f6516
mov eax, ebx
xor ecx, ecx
jmp 0x4f651c
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f6524
xor edi, edi
jmp 0x4f652d
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f3470
mov eax, dword [esp + 0x10]
lea ecx, [0x7cb468]
mov edx, eax
xor ebx, ebx
jmp 0x4f6595
nop
test ebx, ebx
jge 0x4f655c
mov eax, ebx
xor ecx, ecx
jmp 0x4f6562
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f656a
xor edi, edi
jmp 0x4f6573
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f3da0
mov eax, dword [esp + 0x10]
lea ecx, [0x7cb4d8]
xor edx, edx
mov ebx, eax
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x2cc], ebp
mov dword [esp + 0x2c4], ebx
xor esi, esi
mov dword [esp + 0x2ec], esi
mov dword [esp + 0x2d4], edx
mov dword [esp + 0x100], ecx
mov dword [esp + 0x2d8], eax
mov ebp, 0x10
mov dword [esp + 0x11c], ebp
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
xor eax, eax
xor ecx, ecx
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
jmp 0x4f68f1
cmp ecx, 0xd
jne 0x4f66d2
nop
test ebx, ebx
jge 0x4f661a
mov eax, ebx
xor ecx, ecx
jmp 0x4f6620
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f6628
xor edi, edi
jmp 0x4f6631
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f3470
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
xor ecx, ecx
xor edi, edi
xor edx, edx
mov dword [esp + 0x2cc], edx
xor ebx, ebx
mov dword [esp + 0x2c4], ebx
xor ebp, ebp
mov dword [esp + 0x2ec], ebp
mov dword [esp + 0x2d4], eax
lea esi, [0x7cb468]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2d8], eax
mov ecx, 0x20
mov dword [esp + 0x11c], ecx
xor eax, eax
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
xor ecx, ecx
jmp 0x4f68f1
cmp ecx, 0xe
jne 0x4f67e1
movzx eax, byte [edx + 0x340]
test al, al
je 0x4f672c
nop
test ebx, ebx
jge 0x4f66f1
mov eax, ebx
xor ecx, ecx
jmp 0x4f66f7
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f66ff
xor edi, edi
jmp 0x4f6708
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f3470
mov eax, dword [esp + 0x10]
lea ecx, [0x7cb468]
mov edx, eax
xor ebx, ebx
jmp 0x4f6770
nop
test ebx, ebx
jge 0x4f6737
mov eax, ebx
xor ecx, ecx
jmp 0x4f673d
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f6745
xor edi, edi
jmp 0x4f674e
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f26d0
mov eax, dword [esp + 0x10]
lea ecx, [0x7cb4f4]
xor edx, edx
mov ebx, eax
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x2cc], ebp
xor esi, esi
mov dword [esp + 0x2c4], esi
mov dword [esp + 0x2ec], ebx
mov dword [esp + 0x2d4], edx
mov dword [esp + 0x100], ecx
mov dword [esp + 0x2d8], eax
mov ebp, 0x30
mov dword [esp + 0x11c], ebp
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
xor eax, eax
xor ecx, ecx
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
jmp 0x4f68f1
cmp ecx, 0xf
jne 0x4f68aa
nop
test ebx, ebx
jge 0x4f67f5
mov eax, ebx
xor ecx, ecx
jmp 0x4f67fb
mov eax, ebx
xor ebx, ebx
mov ecx, eax
test ebp, ebp
jge 0x4f6803
xor edi, edi
jmp 0x4f680c
xor ebp, ebp
mov edi, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call fcn.004f3470
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
xor ecx, ecx
xor edi, edi
xor edx, edx
mov dword [esp + 0x2cc], edx
xor ebx, ebx
mov dword [esp + 0x2c4], ebx
xor ebp, ebp
mov dword [esp + 0x2ec], ebp
mov dword [esp + 0x2d4], eax
lea esi, [0x7cb468]
mov dword [esp + 0x100], esi
mov dword [esp + 0x2d8], eax
mov ecx, 0x40
mov dword [esp + 0x11c], ecx
xor eax, eax
mov edx, dword [esp + 0x308]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x110]
movzx esi, byte [esp + 0x318]
xor ecx, ecx
jmp 0x4f68f1
xor eax, eax
xor ecx, ecx
xor edi, edi
xor eax, eax
mov dword [esp + 0x2cc], eax
xor eax, eax
mov dword [esp + 0x2c4], eax
xor eax, eax
mov dword [esp + 0x2ec], eax
xor eax, eax
mov dword [esp + 0x2d4], eax
xor eax, eax
mov dword [esp + 0x100], eax
xor eax, eax
mov dword [esp + 0x2d8], eax
xor eax, eax
mov dword [esp + 0x11c], eax
xor eax, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4f6a49
mov dword [esp + 0x2c8], edi
mov esi, eax
mov eax, dword [esp + 0x11c]
mul ebx
mov edi, dword [esp + 0x11c]
sar edi, 0x1f
imul edi, ebx
add edx, edi
sar ebx, 0x1f
mov edi, dword [esp + 0x11c]
imul ebx, edi
add edx, ebx
mov ebx, eax
add eax, 7
mov eax, edx
adc edx, 0
sar edx, 0x1f
shr edx, 0x1d
add edx, ebx
adc eax, 0
add edx, 7
adc eax, 0
shr edx, 3
mov ebx, eax
shl eax, 0x1d
or edx, eax
sar ebx, 3
add edx, 1
adc ebx, 0
mov eax, esi
lea esi, [edi + 7]
sar esi, 0x1f
shr esi, 0x1d
lea esi, [edi + esi + 7]
mov edi, edx
sar edx, 0x1f
cmp edx, ebx
jne 0x4f6a12
mov dword [esp + 0x130], edi
mov dword [esp + 0x114], ebx
mov dword [esp + 0x2f0], ecx
mov dword [esp + 0x300], eax
mov dword [esp + 0x12c], esi
lea eax, [0x7347e0]
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edi
call fcn.00442760
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2fc], eax
lea ecx, [0x7347e0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x114]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x130]
mov dword [esp + 4], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
call fcn.00442760
mov eax, dword [esp + 0x12c]
sar eax, 3
mov dword [esp + 0x118], eax
mov ecx, dword [esp + 0x14]
xor edx, edx
mov ebx, dword [esp + 0x2fc]
xor ebp, ebp
jmp 0x4f6a9a
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0
lea eax, [0x7caaf0]
mov dword [esp + 0x324], eax
lea eax, [0x7c9f14]
mov dword [esp + 0x328], eax
add esp, 0x304
ret
mov eax, dword [esp + 0x100]
mov dword [esp + 0x31c], eax
mov eax, dword [esp + 0x2d8]
mov dword [esp + 0x320], eax
mov dword [esp + 0x324], 0
mov dword [esp + 0x328], 0
add esp, 0x304
ret
mov esi, dword [esp + 0x104]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x118]
mov ebx, dword [esp + 0x2d0]
mov esi, dword [esp + 0x110]
cmp ebp, esi
jge 0x4f72e4
mov dword [esp + 0x2d0], ecx
mov dword [esp + 0x2f8], ebx
mov dword [esp + 0x104], ebp
mov dword [esp + 0xac], edx
nop
mov eax, dword [esp + 0x30c]
mov dword [esp], eax
mov ecx, dword [esp + 0x310]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x130]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edx
call fcn.00467e90
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
test eax, eax
jne 0x4f71e6
mov ebx, dword [esp + 0x130]
cmp ebx, 1
jb 0x4f91a3
lea ecx, [ebx - 1]
mov ebp, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
mov esi, dword [esp + 0x2f8]
lea edi, [esi + ecx]
cmp ebx, 1
jb 0x4f9197
mov dword [esp + 0x12c], ebp
mov dword [esp + 0x2e8], edi
mov eax, ebx
mov ebx, dword [esp + 0x2d0]
mov edx, ebx
add ebx, ecx
mov ecx, esi
movzx esi, byte [esi]
xchg esi, eax
cmp al, 1
xchg esi, eax
ja 0x4f6b82
xchg esi, eax
test al, al
xchg esi, eax
je 0x4f6c16
mov ebx, dword [esp + 0x118]
mov esi, ebx
jmp 0x4f916a
mov dword [esp + 0x2e4], ebx
xchg esi, eax
cmp al, 2
xchg esi, eax
jne 0x4f6b97
xor esi, esi
jmp 0x4f912b
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x4f6bc1
mov esi, dword [esp + 0x118]
mov dword [esp + 0x134], eax
xor eax, eax
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x134]
jmp 0x4f9046
xchg esi, eax
cmp al, 4
xchg esi, eax
jne 0x4f71af
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ebp
mov eax, dword [esp + 0x118]
mov dword [esp + 0x18], eax
call fcn.004f4940
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2d0]
mov ebp, dword [esp + 0x12c]
mov edi, dword [esp + 0x2e8]
mov ebx, dword [esp + 0x308]
mov esi, dword [ebx + 0x30]
cmp esi, 7
jg 0x4f6f4a
cmp esi, 3
jg 0x4f6d50
cmp esi, 1
jne 0x4f6c90
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4f6c6d
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x27], al
xchg esi, eax
mov dword [esp + 0x154], eax
xor eax, eax
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x154]
jmp 0x4f8ec6
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x164], eax
xor eax, eax
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x164]
jmp 0x4f8d31
cmp esi, 2
jne 0x4f6cee
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4f6ccb
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x26], al
xchg esi, eax
mov dword [esp + 0x184], eax
xor eax, eax
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x184]
jmp 0x4f8bba
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x194], eax
xor eax, eax
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x194]
jmp 0x4f8a27
cmp esi, 3
jne 0x4f719c
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4f6d2d
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x25], al
xchg esi, eax
mov dword [esp + 0x1b4], eax
xor eax, eax
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x1b4]
jmp 0x4f8899
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x1c4], eax
xor eax, eax
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x1c4]
jmp 0x4f8706
cmp esi, 5
jg 0x4f6e32
cmp esi, 4
jne 0x4f6e0f
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4f6d98
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x24], al
xchg esi, eax
mov dword [esp + 0x1dc], eax
xor eax, eax
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x1dc]
jmp 0x4f8664
mov esi, dword [esp + 0x300]
mov ebx, dword [esi + 4]
mov edx, dword [esi]
mov esi, dword [esi + 8]
mov edi, dword [esp + 0xac]
cmp edi, ebx
ja 0x4f85c7
sub ebx, edi
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, edi
add edx, esi
cmp ebx, ebp
jg 0x4f6dcd
mov ebp, ebx
mov ebx, dword [esp + 0x2e8]
cmp edx, ebx
je 0x4f6dfd
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00457450
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x2f8]
mov edi, dword [esp + 0xac]
mov ebx, dword [esp + 0x300]
mov ebp, dword [ebx + 0xc]
lea edx, [edi + ebp]
jmp 0x4f85bb
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x1e4], eax
xor eax, eax
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x1e4]
jmp 0x4f856d
cmp esi, 6
jne 0x4f6f27
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4f6ecc
mov esi, dword [esp + 0x2f0]
mov edi, dword [esi + 4]
mov dword [esp + 0x10c], edi
mov esi, dword [esi]
mov dword [esp + 0x2e0], esi
movzx esi, byte [ebx + 0x342]
xchg esi, eax
mov byte [esp + 0x29], al
xchg esi, eax
movzx edi, byte [ebx + 0x344]
xchg edi, eax
mov byte [esp + 0x28], al
xchg edi, eax
movzx ebx, byte [ebx + 0x346]
mov byte [esp + 0x3e], bl
mov dword [esp + 0x204], eax
xor eax, eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0xbc], eax
mov dword [esp + 0x1fc], ecx
xor ecx, ecx
mov dword [esp + 0xb4], ecx
mov eax, dword [esp + 0x204]
mov ecx, dword [esp + 0x1fc]
jmp 0x4f8363
mov esi, dword [esp + 0x2c8]
mov ebx, dword [esi + 4]
mov dword [esp + 0x108], ebx
mov esi, dword [esi]
mov dword [esp + 0x2dc], esi
mov dword [esp + 0x214], eax
xor eax, eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0xb8], eax
mov dword [esp + 0x20c], ecx
xor ecx, ecx
mov dword [esp + 0xb0], ecx
mov eax, dword [esp + 0x214]
mov ecx, dword [esp + 0x20c]
jmp 0x4f8202
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x224], eax
xor eax, eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x224]
jmp 0x4f8012
cmp esi, 0xb
jg 0x4f7046
cmp esi, 9
jg 0x4f6f9d
cmp esi, 8
jne 0x4f6f7d
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x234], eax
xor eax, eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x234]
jmp 0x4f7e52
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x244], eax
xor eax, eax
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x244]
jmp 0x4f7c99
cmp esi, 0xa
jne 0x4f6fcf
mov esi, dword [esp + 0x2cc]
cmp dword [esi + 0x24], 0x100
je 0x4f7b72
mov dword [esp + 0x24c], eax
xor eax, eax
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x24c]
jmp 0x4f7c0f
mov esi, dword [esp + 0x2f0]
mov ebx, dword [esi + 4]
mov edx, dword [esi]
mov esi, dword [esi + 8]
mov edi, dword [esp + 0xac]
cmp edi, ebx
ja 0x4f7b69
sub ebx, edi
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, edi
add edx, esi
cmp ebx, ebp
jg 0x4f7004
mov ebp, ebx
mov ebx, dword [esp + 0x2e8]
cmp edx, ebx
je 0x4f7034
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00457450
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x2f8]
mov edi, dword [esp + 0xac]
mov ebx, dword [esp + 0x2f0]
mov ebp, dword [ebx + 0xc]
lea edx, [edi + ebp]
jmp 0x4f6a82
cmp esi, 0xd
jg 0x4f70d9
cmp esi, 0xc
jne 0x4f70b9
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4f7099
movzx esi, byte [ebx + 0x341]
shl esi, 8
movzx ebx, byte [ebx + 0x342]
or ebx, esi
mov word [esp + 0x40], bx
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x264], eax
xor eax, eax
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x264]
jmp 0x4f7aef
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x26c], eax
xor eax, eax
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x26c]
jmp 0x4f7a1a
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x274], eax
xor eax, eax
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x274]
jmp 0x4f78ff
cmp esi, 0xe
jne 0x4f7177
movzx esi, byte [ebx + 0x340]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4f7157
movzx esi, byte [ebx + 0x341]
shl esi, 8
movzx edx, byte [ebx + 0x342]
or edx, esi
mov word [esp + 0x44], dx
movzx esi, byte [ebx + 0x343]
shl esi, 8
movzx edx, byte [ebx + 0x344]
or edx, esi
mov word [esp + 0x42], dx
movzx esi, byte [ebx + 0x345]
shl esi, 8
movzx ebx, byte [ebx + 0x346]
or ebx, esi
mov word [esp + 0x5a], bx
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x28c], eax
xor eax, eax
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x28c]
jmp 0x4f76fd
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x294], eax
xor eax, eax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x294]
jmp 0x4f7585
cmp esi, 0xf
jne 0x4f719c
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x29c], eax
xor eax, eax
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x29c]
jmp 0x4f73c0
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0
lea eax, [0x7cab04]
mov dword [esp + 0x324], eax
lea eax, [0x7c9ed4]
mov dword [esp + 0x328], eax
add esp, 0x304
ret
mov dword [esp + 0x2f8], ebx
mov dword [esp + 0x2c0], ebp
mov eax, dword [0x7073fc]
cmp dword [0x7073f8], ecx
je 0x4f7206
xor eax, eax
jmp 0x4f7245
mov dword [esp + 0x2bc], edx
mov dword [esp + 0x2f4], ecx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00404110
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x2f4]
mov edx, dword [esp + 0x2bc]
mov ebx, dword [esp + 0x2f8]
mov ebp, dword [esp + 0x2c0]
test al, al
jne 0x4f7282
mov eax, dword [0x7073f4]
cmp dword [0x7073f0], ecx
je 0x4f725b
xor eax, eax
jmp 0x4f727e
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00404110
movzx eax, byte [esp + 0xc]
mov ebx, dword [esp + 0x2f8]
mov ebp, dword [esp + 0x2c0]
test al, al
je 0x4f72b9
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0
lea eax, [0x7cab04]
mov dword [esp + 0x324], eax
lea eax, [0x7c9ebc]
mov dword [esp + 0x328], eax
add esp, 0x304
ret
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0
mov dword [esp + 0x324], ebx
mov dword [esp + 0x328], ebp
add esp, 0x304
ret
mov eax, dword [esp + 0x100]
mov dword [esp + 0x31c], eax
mov eax, dword [esp + 0x2d8]
mov dword [esp + 0x320], eax
mov dword [esp + 0x324], 0
mov dword [esp + 0x328], 0
add esp, 0x304
ret
lea eax, [edi + edx*8 + 7]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2d4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ebp, dword [esp + 0x104]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x54]
mov word [esp + 0xc], si
movzx esi, word [esp + 0x48]
mov word [esp + 0xe], si
movzx esi, word [esp + 0x52]
mov word [esp + 0x10], si
shl ebx, 8
or eax, ebx
mov word [esp + 0x12], ax
call fcn.004f3390
mov eax, dword [esp + 0x5c]
inc eax
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x2d4]
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x2e8]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x308]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x5c]
cmp ebx, esi
jge 0x4f7486
shl ebx, 3
cmp ebx, ebp
jae 0x4f74d8
mov dword [esp + 0x128], ebx
mov edx, dword [esp + 0x5c]
lea esi, [edi + edx*8]
movzx esi, byte [esi]
inc ebx
cmp ebx, ebp
jae 0x4f74cf
shl esi, 8
lea ebx, [edi + edx*8 + 1]
movzx ebx, byte [ebx]
or ebx, esi
mov word [esp + 0x54], bx
mov esi, dword [esp + 0x128]
lea ebx, [esi + 2]
cmp ebx, ebp
jae 0x4f74c6
lea ebx, [edi + edx*8 + 2]
movzx ebx, byte [ebx]
add esi, 3
cmp esi, ebp
jae 0x4f74bd
shl ebx, 8
lea esi, [edi + edx*8 + 3]
movzx esi, byte [esi]
or esi, ebx
mov word [esp + 0x48], si
mov ebx, dword [esp + 0x128]
lea esi, [ebx + 4]
cmp esi, ebp
jae 0x4f74b4
lea esi, [edi + edx*8 + 4]
movzx esi, byte [esi]
add ebx, 5
cmp ebx, ebp
jae 0x4f74ab
shl esi, 8
lea ebx, [edi + edx*8 + 5]
movzx ebx, byte [ebx]
or ebx, esi
mov word [esp + 0x52], bx
mov esi, dword [esp + 0x128]
lea ebx, [esi + 6]
cmp ebx, ebp
jae 0x4f74a2
lea ebx, [edi + edx*8 + 6]
movzx ebx, byte [ebx]
add esi, 7
cmp esi, ebp
jb 0x4f731d
jmp 0x4f7499
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea eax, [edi + esi*2 + 5]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2ec]
mov dword [esp], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 4], edx
mov ebp, dword [esp + 0x104]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x56]
mov word [esp + 0xc], si
movzx esi, word [esp + 0x4a]
mov word [esp + 0xe], si
shl ebx, 8
or eax, ebx
mov word [esp + 0x10], ax
mov word [esp + 0x12], 0xffff
call fcn.004f25f0
mov eax, dword [esp + 0x60]
inc eax
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x2ec]
mov ebx, dword [esp + 0x2e8]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x104]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x308]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x60]
cmp ebx, esi
jge 0x4f7622
lea edx, [ebx + ebx*2]
mov dword [esp + 0x128], edx
shl edx, 1
cmp edx, ebp
jae 0x4f7662
mov dword [esp + 0x124], edx
mov esi, dword [esp + 0x128]
lea ebx, [edi + esi*2]
movzx ebx, byte [ebx]
inc edx
cmp edx, ebp
jae 0x4f7659
shl ebx, 8
lea edx, [edi + esi*2 + 1]
movzx edx, byte [edx]
or edx, ebx
mov word [esp + 0x56], dx
mov ebx, dword [esp + 0x124]
lea edx, [ebx + 2]
cmp edx, ebp
jae 0x4f7650
lea edx, [edi + esi*2 + 2]
movzx edx, byte [edx]
add ebx, 3
cmp ebx, ebp
jae 0x4f7647
shl edx, 8
lea ebx, [edi + esi*2 + 3]
movzx ebx, byte [ebx]
or ebx, edx
mov word [esp + 0x4a], bx
mov edx, dword [esp + 0x124]
lea ebx, [edx + 4]
cmp ebx, ebp
jae 0x4f763e
lea ebx, [edi + esi*2 + 4]
movzx ebx, byte [ebx]
add edx, 5
cmp edx, ebp
jb 0x4f74e1
jmp 0x4f7635
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov ecx, dword [esp + 0x2d4]
mov dword [esp], ecx
mov ebp, dword [esp + 0x64]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x104]
mov dword [esp + 8], esi
mov word [esp + 0xc], dx
mov word [esp + 0xe], ax
mov word [esp + 0x10], bx
movzx eax, word [esp + 0x4e]
mov word [esp + 0x12], ax
call fcn.004f3390
mov eax, dword [esp + 0x64]
inc eax
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x2d4]
movzx ebx, word [esp + 0x44]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x2e8]
mov edi, dword [esp + 0x104]
mov ecx, dword [esp + 0x2f8]
movzx edx, word [esp + 0x42]
movzx ebx, word [esp + 0x5a]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x64]
cmp ebx, esi
jge 0x4f7824
lea esi, [ebx + ebx*2]
mov dword [esp + 0x128], esi
shl esi, 1
cmp esi, ebp
jae 0x4f785d
mov dword [esp + 0x124], esi
mov ebx, dword [esp + 0x128]
lea edx, [edi + ebx*2]
movzx edx, byte [edx]
inc esi
cmp esi, ebp
jae 0x4f7854
shl edx, 8
lea esi, [edi + ebx*2 + 1]
movzx esi, byte [esi]
or esi, edx
mov word [esp + 0x58], si
mov edx, dword [esp + 0x124]
lea esi, [edx + 2]
cmp esi, ebp
jae 0x4f784b
lea esi, [edi + ebx*2 + 2]
movzx esi, byte [esi]
add edx, 3
cmp edx, ebp
jae 0x4f7842
shl esi, 8
lea edx, [edi + ebx*2 + 3]
movzx edx, byte [edx]
or edx, esi
mov word [esp + 0x4c], dx
mov esi, dword [esp + 0x124]
lea edx, [esi + 4]
cmp edx, ebp
jae 0x4f7839
lea edx, [edi + ebx*2 + 4]
movzx edx, byte [edx]
add esi, 5
cmp esi, ebp
jae 0x4f7830
shl edx, 8
lea ebx, [edi + ebx*2 + 5]
movzx ebx, byte [ebx]
or ebx, edx
movzx edx, word [esp + 0x58]
movzx esi, word [esp + 0x44]
cmp dx, si
jne 0x4f77fb
movzx eax, word [esp + 0x4c]
movzx ecx, word [esp + 0x42]
cmp ax, cx
jne 0x4f77f4
movzx ecx, word [esp + 0x5a]
cmp bx, cx
jne 0x4f7805
mov word [esp + 0x27c], ax
xor eax, eax
mov word [esp + 0x4e], ax
movzx eax, word [esp + 0x27c]
jmp 0x4f766b
movzx ecx, word [esp + 0x5a]
jmp 0x4f7805
movzx eax, word [esp + 0x4c]
movzx ecx, word [esp + 0x5a]
mov word [esp + 0x284], ax
mov eax, 0xffffffff
mov word [esp + 0x4e], ax
movzx eax, word [esp + 0x284]
jmp 0x4f766b
mov edx, dword [esp + 0x2d0]
jmp 0x4f7622
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
lea eax, [edi + edx*4 + 3]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2d4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ebp, dword [esp + 0x104]
mov dword [esp + 8], ebp
movzx esi, word [esp + 0x46]
mov word [esp + 0xc], si
mov word [esp + 0xe], si
mov word [esp + 0x10], si
shl ebx, 8
or eax, ebx
mov word [esp + 0x12], ax
call fcn.004f3390
mov eax, dword [esp + 0x68]
inc eax
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x2d4]
mov ebx, dword [esp + 0x2e8]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x104]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x308]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x68]
cmp ebx, esi
jge 0x4f7957
shl ebx, 2
cmp ebx, ebp
jae 0x4f7985
mov dword [esp + 0x128], ebx
mov edx, dword [esp + 0x68]
lea esi, [edi + edx*4]
movzx esi, byte [esi]
inc ebx
cmp ebx, ebp
jae 0x4f797c
shl esi, 8
lea ebx, [edi + edx*4 + 1]
movzx ebx, byte [ebx]
or ebx, esi
mov word [esp + 0x46], bx
mov esi, dword [esp + 0x128]
lea ebx, [esi + 2]
cmp ebx, ebp
jae 0x4f7973
lea ebx, [edi + edx*4 + 2]
movzx ebx, byte [ebx]
add esi, 3
cmp esi, ebp
jb 0x4f7866
jmp 0x4f796a
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea eax, [edi + edx*2 + 1]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2c4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x104]
mov dword [esp + 8], ebx
shl esi, 8
or eax, esi
mov word [esp + 0xc], ax
call fcn.004f3d00
mov eax, dword [esp + 0x6c]
inc eax
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x2c4]
mov ebx, dword [esp + 0x12c]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x2e8]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x308]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x6c]
cmp ebx, esi
jge 0x4f7a3d
shl ebx, 1
cmp ebx, ebp
jae 0x4f7a59
mov edx, dword [esp + 0x6c]
lea esi, [edi + edx*2]
movzx esi, byte [esi]
inc ebx
cmp ebx, ebp
jb 0x4f798e
jmp 0x4f7a50
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, dword [esp + 0x2d4]
mov dword [esp], eax
mov dword [esp + 4], esi
mov ecx, dword [esp + 0x104]
mov dword [esp + 8], ecx
mov word [esp + 0xc], dx
mov word [esp + 0xe], dx
mov word [esp + 0x10], dx
movzx edx, word [esp + 0x50]
mov word [esp + 0x12], dx
call fcn.004f3390
mov eax, dword [esp + 0x70]
inc eax
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x2d4]
movzx ebx, word [esp + 0x40]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x2e8]
mov edi, dword [esp + 0x12c]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2d0]
mov ebp, edi
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x130]
mov edx, dword [esp + 0x70]
cmp edx, esi
jge 0x4f7b4b
shl edx, 1
cmp edx, ebp
jae 0x4f7b60
mov esi, dword [esp + 0x70]
lea ebx, [edi + esi*2]
movzx ebx, byte [ebx]
inc edx
cmp edx, ebp
jae 0x4f7b57
shl ebx, 8
lea edx, [edi + esi*2 + 1]
movzx edx, byte [edx]
or edx, ebx
movzx ebx, word [esp + 0x40]
cmp dx, bx
jne 0x4f7b35
mov dword [esp + 0x254], eax
xor eax, eax
mov word [esp + 0x50], ax
jmp 0x4f7a62
mov dword [esp + 0x25c], eax
mov eax, 0xffffffff
mov word [esp + 0x50], ax
jmp 0x4f7a62
mov edx, dword [esp + 0x2d0]
jmp 0x4f7a3d
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, edi
mov ecx, ebx
call fcn.00456ba0
mov ebx, dword [esi + 4]
mov edx, dword [esi]
mov esi, dword [esi + 8]
mov edi, dword [esp + 0xac]
cmp edi, ebx
ja 0x4f7be5
sub ebx, edi
sub esi, edi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, edi
add edx, esi
cmp ebx, ebp
jg 0x4f7b9c
mov ebp, ebx
mov ebx, dword [esp + 0x2e8]
cmp edx, ebx
je 0x4f7bcc
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00457450
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x2f8]
mov edi, dword [esp + 0xac]
mov ebp, dword [esp + 0x2cc]
mov esi, dword [ebp + 0xc]
lea edx, [edi + esi]
mov ebx, dword [esp + 0x2f0]
jmp 0x4f6a82
mov eax, edi
mov ecx, ebx
call fcn.00456ba0
inc ebx
mov ebp, dword [esp + 0xfc]
mov edi, dword [esp + 0x2e8]
mov ebp, dword [esp + 0x12c]
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0x308]
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0xfc]
cmp ebx, edi
jge 0x4f7c51
mov edi, dword [esi + 0x28]
mov esi, dword [esi + 0x24]
cmp ebx, ebp
jae 0x4f7c6d
mov ebp, dword [esp + 0x2e8]
movzx ebp, byte [ebx + ebp]
cmp esi, ebp
jg 0x4f7c48
inc ebp
cmp edi, ebp
jb 0x4f7c64
mov esi, dword [esp + 0x2cc]
mov dword [esi + 0x24], ebp
jmp 0x4f7bee
mov esi, dword [esp + 0x2cc]
jmp 0x4f7bee
mov ebx, dword [esp + 0x308]
mov edi, dword [esp + 0x2e8]
jmp 0x4f7b72
mov ecx, ebp
mov edx, edi
call fcn.00456b80
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea ebx, [esi + 2]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2cc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x78], ebx
mov ebx, dword [esp + 0x308]
mov ebx, dword [esp + 0x78]
cmp ebx, esi
jge 0x4f7cde
shr ebx, 0x1f
mov esi, dword [esp + 0x78]
add ebx, esi
sar ebx, 1
cmp ebx, ebp
jae 0x4f7e26
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x23c], eax
xor eax, eax
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x23c]
jmp 0x4f7d1c
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x78]
jmp 0x4f7c76
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov ebx, dword [esp + 0xd8]
inc ebx
movzx ebp, byte [esp + 0x34]
shl ebp, 4
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xd8], ebx
mov ebx, ebp
mov ebp, dword [esp + 0x12c]
mov edi, dword [esp + 0xd8]
cmp edi, 2
jge 0x4f7c76
lea ebp, [edi + esi]
mov esi, dword [esp + 0xfc]
cmp esi, ebp
jle 0x4f7cd1
mov byte [esp + 0x34], bl
shr bl, 4
mov byte [esp + 0x30], bl
mov esi, dword [esp + 0x2cc]
mov edi, dword [esi + 0x28]
movzx ebx, bl
cmp dword [esi + 0x24], ebx
jg 0x4f7d63
inc ebx
cmp edi, ebx
jb 0x4f7e1d
mov dword [esi + 0x24], ebx
mov ebx, dword [esi + 0x10]
mov edi, dword [esi + 0x14]
mov dword [esp + 0x128], edi
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp ebx, ebp
jg 0x4f7e08
cmp edi, ebp
jle 0x4f7dfc
mov dword [esp + 0x124], ebx
mov edi, dword [esp + 0x104]
mov ebx, dword [esp + 0x128]
cmp edi, ebx
jl 0x4f7cf1
cmp edi, esi
jge 0x4f7cf1
mov dword [esp + 0x128], ebp
nop
mov esi, dword [esp + 0x2cc]
mov ebp, dword [esi + 4]
mov dword [esp + 0x120], ebp
mov ebp, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x128]
mov esi, dword [esp + 0x124]
sub ebx, esi
add ebx, edi
mov esi, dword [esp + 0x120]
cmp esi, ebx
jbe 0x4f7e14
movzx esi, byte [esp + 0x30]
xchg esi, eax
mov byte [ebp + ebx], al
xchg esi, eax
mov edi, dword [esp + 0x104]
jmp 0x4f7cf1
mov edi, dword [esp + 0x104]
jmp 0x4f7cf1
mov edi, dword [esp + 0x104]
jmp 0x4f7cf1
mov eax, ebx
mov ecx, esi
call fcn.00456b40
mov ecx, ebx
mov edx, edi
call fcn.00456b80
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea ebx, [esi + 4]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2cc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x7c], ebx
mov ebx, dword [esp + 0x308]
mov ebx, dword [esp + 0x7c]
cmp ebx, esi
jge 0x4f7e9b
sar ebx, 0x1f
shr ebx, 0x1e
mov esi, dword [esp + 0x7c]
add ebx, esi
sar ebx, 2
cmp ebx, ebp
jae 0x4f7fe3
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x22c], eax
xor eax, eax
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x22c]
jmp 0x4f7ed9
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x7c]
jmp 0x4f7e2f
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov ebx, dword [esp + 0xdc]
inc ebx
movzx ebp, byte [esp + 0x35]
shl ebp, 2
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xdc], ebx
mov ebx, ebp
mov ebp, dword [esp + 0x12c]
mov edi, dword [esp + 0xdc]
cmp edi, 4
jge 0x4f7e2f
lea ebp, [edi + esi]
mov esi, dword [esp + 0xfc]
cmp esi, ebp
jle 0x4f7e8e
mov byte [esp + 0x35], bl
shr bl, 6
mov byte [esp + 0x31], bl
mov esi, dword [esp + 0x2cc]
mov edi, dword [esi + 0x28]
movzx ebx, bl
cmp dword [esi + 0x24], ebx
jg 0x4f7f20
inc ebx
cmp edi, ebx
jb 0x4f7fda
mov dword [esi + 0x24], ebx
mov ebx, dword [esi + 0x10]
mov edi, dword [esi + 0x14]
mov dword [esp + 0x128], edi
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp ebx, ebp
jg 0x4f7fc5
cmp edi, ebp
jle 0x4f7fb9
mov dword [esp + 0x124], ebx
mov edi, dword [esp + 0x104]
mov ebx, dword [esp + 0x128]
cmp edi, ebx
jl 0x4f7eae
cmp edi, esi
jge 0x4f7eae
mov dword [esp + 0x128], ebp
nop
mov esi, dword [esp + 0x2cc]
mov ebp, dword [esi + 4]
mov dword [esp + 0x120], ebp
mov ebp, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x128]
mov esi, dword [esp + 0x124]
sub ebx, esi
add ebx, edi
mov esi, dword [esp + 0x120]
cmp esi, ebx
jbe 0x4f7fd1
movzx esi, byte [esp + 0x31]
xchg esi, eax
mov byte [ebp + ebx], al
xchg esi, eax
mov edi, dword [esp + 0x104]
jmp 0x4f7eae
mov edi, dword [esp + 0x104]
jmp 0x4f7eae
mov edi, dword [esp + 0x104]
jmp 0x4f7eae
mov eax, ebx
mov ecx, esi
call fcn.00456b40
mov ecx, ebx
mov edx, edi
call fcn.00456b80
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea ebx, [esi + 8]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2cc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x80], ebx
mov ebx, dword [esp + 0x308]
mov ebx, dword [esp + 0x80]
cmp ebx, esi
jge 0x4f8064
sar ebx, 0x1f
shr ebx, 0x1d
mov esi, dword [esp + 0x80]
add ebx, esi
sar ebx, 3
cmp ebx, ebp
jae 0x4f81ae
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x21c], eax
xor eax, eax
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x21c]
jmp 0x4f80a4
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x80]
jmp 0x4f7fec
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov ebx, dword [esp + 0xe0]
inc ebx
movzx ebp, byte [esp + 0x36]
shl ebp, 1
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xe0], ebx
mov ebx, ebp
mov ebp, dword [esp + 0x12c]
mov edi, dword [esp + 0xe0]
cmp edi, 8
jge 0x4f7fec
lea ebp, [edi + esi]
mov esi, dword [esp + 0xfc]
cmp esi, ebp
jle 0x4f8054
mov byte [esp + 0x36], bl
shr bl, 7
mov byte [esp + 0x32], bl
mov esi, dword [esp + 0x2cc]
mov edi, dword [esi + 0x28]
movzx ebx, bl
cmp dword [esi + 0x24], ebx
jg 0x4f80eb
inc ebx
cmp edi, ebx
jb 0x4f81a5
mov dword [esi + 0x24], ebx
mov ebx, dword [esi + 0x10]
mov edi, dword [esi + 0x14]
mov dword [esp + 0x128], edi
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp ebx, ebp
jg 0x4f8190
cmp edi, ebp
jle 0x4f8184
mov dword [esp + 0x124], ebx
mov edi, dword [esp + 0x104]
mov ebx, dword [esp + 0x128]
cmp edi, ebx
jl 0x4f8077
cmp edi, esi
jge 0x4f8077
mov dword [esp + 0x128], ebp
nop
mov esi, dword [esp + 0x2cc]
mov ebp, dword [esi + 4]
mov dword [esp + 0x120], ebp
mov ebp, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x128]
mov esi, dword [esp + 0x124]
sub ebx, esi
add ebx, edi
mov esi, dword [esp + 0x120]
cmp esi, ebx
jbe 0x4f819c
movzx esi, byte [esp + 0x32]
xchg esi, eax
mov byte [ebp + ebx], al
xchg esi, eax
mov edi, dword [esp + 0x104]
jmp 0x4f8077
mov edi, dword [esp + 0x104]
jmp 0x4f8077
mov edi, dword [esp + 0x104]
jmp 0x4f8077
mov eax, ebx
mov ecx, esi
call fcn.00456b40
mov ecx, ebx
mov edx, edi
call fcn.00456b80
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov byte [edi + ebp + 3], 0xff
mov ebx, dword [esp + 0x84]
inc ebx
add edi, 4
add edx, 3
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x2dc]
mov dword [esp + 0x84], ebx
mov dword [esp + 0xb8], edi
mov dword [esp + 0xb0], edx
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x108]
mov edi, dword [esp + 0x2e8]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0xfc]
cmp edx, esi
jge 0x4f82b3
mov esi, dword [esp + 0xb0]
cmp esi, ebp
jae 0x4f830a
movzx edx, byte [esi + edi]
mov edi, dword [esp + 0xb8]
cmp edi, ebx
jae 0x4f8301
mov ebx, dword [esp + 0x2dc]
mov byte [ebx + edi], dl
lea edx, [esi + 1]
cmp edx, ebp
jae 0x4f82f8
lea edx, [edi + 1]
mov ebp, dword [esp + 0x2e8]
movzx ebp, byte [esi + ebp + 1]
mov esi, dword [esp + 0x108]
cmp esi, edx
jbe 0x4f82ef
xchg ebp, eax
mov byte [edi + ebx + 1], al
xchg ebp, eax
mov edx, dword [esp + 0xb0]
lea ebp, [edx + 2]
mov ebx, dword [esp + 0x12c]
cmp ebp, ebx
jae 0x4f82e6
lea ebp, [edi + 2]
mov ebx, dword [esp + 0x2e8]
movzx ebx, byte [edx + ebx + 2]
cmp esi, ebp
jbe 0x4f82dd
mov ebp, dword [esp + 0x2dc]
mov byte [edi + ebp + 2], bl
lea ebx, [edi + 3]
cmp esi, ebx
ja 0x4f81b7
jmp 0x4f82d4
mov edx, dword [esp + 0x2c8]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0xac]
add ebx, ebp
mov edx, ebx
mov ebx, dword [esp + 0x2f0]
jmp 0x4f6a82
mov eax, ebx
mov ecx, esi
call fcn.00456b40
mov eax, ebp
mov ecx, esi
call fcn.00456b40
mov eax, ebp
mov ecx, ebx
call fcn.00456b40
mov eax, edx
mov ecx, esi
call fcn.00456b40
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, edi
mov ecx, ebx
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
movzx edx, byte [esp + 0x2f]
mov byte [ebp + esi + 3], dl
mov edx, dword [esp + 0x88]
inc edx
add ebp, 4
mov edi, dword [esp + 0xb4]
add edi, 3
movzx ebx, byte [esp + 0x3e]
movzx esi, byte [esp + 0x29]
mov dword [esp + 0x88], edx
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xb4], edi
mov edx, dword [esp + 0x2d0]
mov ebp, dword [esp + 0x12c]
movzx edi, byte [esp + 0x28]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0xfc]
cmp edx, ebx
jge 0x4f846d
mov ebx, dword [esp + 0xb4]
cmp ebx, ebp
jae 0x4f84c6
mov edx, dword [esp + 0x2e8]
movzx edi, byte [ebx + edx]
lea esi, [ebx + 1]
cmp esi, ebp
jae 0x4f84bd
movzx esi, byte [ebx + edx + 1]
xchg esi, eax
mov byte [esp + 0x33], al
xchg esi, eax
lea esi, [ebx + 2]
cmp esi, ebp
jae 0x4f84b4
movzx esi, byte [ebx + edx + 2]
movzx edx, byte [esp + 0x29]
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4f8400
movzx edx, byte [esp + 0x33]
movzx ebp, byte [esp + 0x28]
xchg ebp, eax
cmp dl, al
xchg ebp, eax
jne 0x4f83f9
movzx ebp, byte [esp + 0x3e]
xchg esi, eax
xchg ebp, ebx
cmp al, bl
xchg ebp, ebx
xchg esi, eax
jne 0x4f840a
mov dword [esp + 0x1ec], eax
xor eax, eax
mov byte [esp + 0x2f], al
mov eax, dword [esp + 0x1ec]
jmp 0x4f8421
movzx ebp, byte [esp + 0x3e]
jmp 0x4f840a
movzx edx, byte [esp + 0x33]
movzx ebp, byte [esp + 0x3e]
mov dword [esp + 0x1f4], eax
mov eax, 0xffffffff
mov byte [esp + 0x2f], al
mov eax, dword [esp + 0x1f4]
mov ebp, dword [esp + 0xbc]
mov ebx, dword [esp + 0x10c]
cmp ebp, ebx
jae 0x4f84ab
xchg esi, eax
mov byte [esp + 0x37], al
xchg esi, eax
mov esi, dword [esp + 0x2e0]
xchg edi, eax
mov byte [esi + ebp], al
xchg edi, eax
lea edi, [ebp + 1]
cmp ebx, edi
jbe 0x4f84a2
mov byte [ebp + esi + 1], dl
lea edx, [ebp + 2]
cmp ebx, edx
jbe 0x4f8499
movzx edx, byte [esp + 0x37]
mov byte [ebp + esi + 2], dl
lea edx, [ebp + 3]
cmp ebx, edx
ja 0x4f8313
jmp 0x4f8490
mov ebp, dword [esp + 0x2f0]
mov edi, dword [ebp + 0xc]
mov ebp, dword [esp + 0xac]
add ebp, edi
mov edx, dword [esp + 0x2c8]
mov esi, ebx
mov ebx, ebp
jmp 0x4f82c6
mov eax, edx
mov ecx, ebx
call fcn.00456b40
mov eax, edx
mov ecx, ebx
call fcn.00456b40
mov eax, edi
mov ecx, ebx
call fcn.00456b40
mov eax, ebp
mov ecx, ebx
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea eax, [edi + edx*2 + 1]
movzx eax, byte [eax]
mov ecx, dword [esp + 0x2f0]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x104]
mov dword [esp + 8], ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
xchg esi, eax
mov byte [esp + 0xd], al
xchg esi, eax
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
mov byte [esp + 0xf], al
call fcn.004f2ca0
mov eax, dword [esp + 0x8c]
inc eax
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x2f0]
mov ebx, dword [esp + 0x12c]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x2e8]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x308]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x8c]
cmp ebx, esi
jge 0x4f8596
shl ebx, 1
cmp ebx, ebp
jae 0x4f85b2
mov edx, dword [esp + 0x8c]
lea esi, [edi + edx*2]
movzx esi, byte [esi]
inc ebx
cmp ebx, ebp
jb 0x4f84cf
jmp 0x4f85a9
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov ebx, dword [esp + 0x2f0]
jmp 0x4f6a82
mov eax, edi
mov ecx, ebx
call fcn.00456ba0
mov ecx, dword [esp + 0x2f0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov edx, dword [esp + 0x104]
mov dword [esp + 8], edx
mov byte [esp + 0xc], al
mov byte [esp + 0xd], al
mov byte [esp + 0xe], al
movzx eax, byte [esp + 0x2b]
mov byte [esp + 0xf], al
call fcn.004f2ca0
mov eax, dword [esp + 0x90]
inc eax
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x2f0]
movzx ebx, byte [esp + 0x24]
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x2e8]
mov edi, dword [esp + 0x12c]
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x308]
mov ebp, edi
movzx esi, byte [esp + 0x24]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x90]
mov edx, dword [esp + 0xfc]
cmp ebx, edx
jge 0x4f86bd
cmp ebx, ebp
jae 0x4f86d0
movzx eax, byte [ebx + edi]
xchg esi, ebx
cmp al, bl
xchg esi, ebx
jne 0x4f86a0
mov byte [esp + 0x1cc], al
xor eax, eax
mov byte [esp + 0x2b], al
movzx eax, byte [esp + 0x1cc]
jmp 0x4f85d0
mov byte [esp + 0x1d4], al
mov eax, 0xffffffff
mov byte [esp + 0x2b], al
movzx eax, byte [esp + 0x1d4]
jmp 0x4f85d0
mov ebx, dword [esp + 0x300]
mov edx, dword [esp + 0xac]
jmp 0x4f85bb
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
add edx, 2
mov ebx, dword [esp + 0x300]
mov edi, dword [esp + 0x104]
mov ebx, dword [esp + 0x308]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x94], edx
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x94]
cmp ebx, esi
jge 0x4f874d
shr ebx, 0x1f
mov edx, dword [esp + 0x94]
add ebx, edx
sar ebx, 1
cmp ebx, ebp
jae 0x4f8863
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x1bc], eax
xor eax, eax
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x1bc]
jmp 0x4f879c
mov ebp, dword [esp + 0x12c]
jmp 0x4f86d9
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov edx, dword [esp + 0xe4]
inc edx
movzx ebx, byte [esp + 0x38]
shl ebx, 4
mov ebp, dword [esp + 0x94]
mov edi, dword [esp + 0xfc]
mov ebp, dword [esp + 0x12c]
mov esi, edi
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xe4], edx
mov edx, dword [esp + 0x94]
mov edi, dword [esp + 0xe4]
cmp edi, 2
jge 0x4f86d9
lea ebp, [edi + edx]
cmp esi, ebp
jle 0x4f8744
mov byte [esp + 0x38], bl
shr bl, 4
mov byte [esp + 0x3f], bl
shl ebx, 4
movzx esi, byte [esp + 0x3f]
add ebx, esi
mov byte [esp + 0x2a], bl
mov esi, dword [esp + 0x300]
mov ebx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp ebx, ebp
jg 0x4f8847
cmp edi, ebp
jle 0x4f883e
mov edi, dword [esp + 0x104]
cmp edi, edx
jl 0x4f884e
cmp edi, esi
jge 0x4f884e
mov dword [esp + 0x128], ebx
nop
mov esi, dword [esp + 0x300]
mov ebx, dword [esi + 4]
mov dword [esp + 0x124], ebx
mov ebx, dword [esi]
sub edi, edx
imul edi, dword [esi + 0xc]
mov edx, dword [esp + 0x128]
sub ebp, edx
lea edx, [ebp + edi]
mov ebp, dword [esp + 0x124]
cmp ebp, edx
jbe 0x4f885a
movzx ebp, byte [esp + 0x2a]
xchg ebp, eax
mov byte [ebx + edx], al
xchg ebp, eax
jmp 0x4f8760
mov edi, dword [esp + 0x104]
jmp 0x4f884e
mov edi, dword [esp + 0x104]
mov esi, dword [esp + 0x300]
jmp 0x4f8760
mov eax, edx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea ebx, [esi + 2]
mov esi, dword [esp + 0x2f0]
movzx edi, byte [esp + 0x25]
mov edx, dword [esp + 0x2d0]
mov esi, edi
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x98], ebx
mov ebx, dword [esp + 0x308]
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0xfc]
cmp ebx, edx
jge 0x4f88e1
shr ebx, 0x1f
mov esi, dword [esp + 0x98]
add ebx, esi
sar ebx, 1
cmp ebx, ebp
jae 0x4f89f1
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x1ac], eax
xor eax, eax
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x1ac]
jmp 0x4f8982
mov edx, dword [esp + 0x2d0]
mov esi, dword [esp + 0xfc]
jmp 0x4f874d
mov ecx, dword [esp + 0x2f0]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov edx, dword [esp + 0x104]
mov dword [esp + 8], edx
mov byte [esp + 0xc], al
mov byte [esp + 0xd], al
mov byte [esp + 0xe], al
movzx eax, byte [esp + 0x2c]
mov byte [esp + 0xf], al
call fcn.004f2ca0
mov eax, dword [esp + 0xe8]
inc eax
movzx ebx, byte [esp + 0x39]
shl ebx, 4
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x2f0]
movzx esi, byte [esp + 0x25]
mov edi, dword [esp + 0x104]
mov ecx, dword [esp + 0x2f8]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x130]
mov edi, dword [esp + 0xe8]
cmp edi, 2
jge 0x4f886c
add edi, esi
cmp edx, edi
jle 0x4f886c
mov byte [esp + 0x39], bl
shr bl, 4
mov byte [esp + 0x3f], bl
shl ebx, 4
movzx eax, byte [esp + 0x3f]
add eax, ebx
movzx ebx, byte [esp + 0x25]
cmp bl, al
jne 0x4f89d4
mov byte [esp + 0x19c], al
xor eax, eax
mov byte [esp + 0x2c], al
movzx eax, byte [esp + 0x19c]
jmp 0x4f88f4
mov byte [esp + 0x1a4], al
mov eax, 0xffffffff
mov byte [esp + 0x2c], al
movzx eax, byte [esp + 0x1a4]
jmp 0x4f88f4
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
add edx, 4
mov ebx, dword [esp + 0x300]
mov edi, dword [esp + 0x104]
mov ebx, dword [esp + 0x308]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0x9c], edx
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x9c]
cmp ebx, esi
jge 0x4f8a72
sar ebx, 0x1f
shr ebx, 0x1e
mov edx, dword [esp + 0x9c]
add ebx, edx
sar ebx, 2
cmp ebx, ebp
jae 0x4f8b84
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x18c], eax
xor eax, eax
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x18c]
jmp 0x4f8ac3
mov ebp, dword [esp + 0x12c]
jmp 0x4f89fa
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov edx, dword [esp + 0xec]
inc edx
shl edi, 2
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0xfc]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0xfc]
mov dword [esp + 0xec], edx
mov ebx, edi
mov edx, dword [esp + 0x9c]
mov edi, dword [esp + 0x2e8]
mov edi, dword [esp + 0xec]
cmp edi, 4
jge 0x4f89fa
lea ebp, [edi + edx]
cmp esi, ebp
jle 0x4f8a69
mov byte [esp + 0x3a], bl
mov esi, dword [esp + 0x300]
mov edx, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp edx, ebp
jg 0x4f8b63
cmp edi, ebp
jle 0x4f8b5a
mov edi, dword [esp + 0x104]
cmp edi, ebx
jl 0x4f8b6a
cmp edi, esi
jge 0x4f8b6a
mov dword [esp + 0x128], edx
nop
mov esi, dword [esp + 0x300]
mov edx, dword [esi + 4]
mov dword [esp + 0x124], edx
mov edx, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x128]
sub ebp, ebx
lea ebx, [ebp + edi]
mov ebp, dword [esp + 0x124]
cmp ebp, ebx
jbe 0x4f8b7b
movzx ebp, byte [esp + 0x3a]
mov edi, ebp
xchg ebp, eax
shr al, 6
xchg ebp, eax
imul ebp, ebp, 0x55
xchg ebp, eax
mov byte [edx + ebx], al
xchg ebp, eax
jmp 0x4f8a85
mov edi, dword [esp + 0x104]
jmp 0x4f8b6a
mov edi, dword [esp + 0x104]
mov esi, dword [esp + 0x300]
movzx edi, byte [esp + 0x3a]
jmp 0x4f8a85
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea ebx, [esi + 4]
mov esi, dword [esp + 0x2f0]
movzx edi, byte [esp + 0x26]
mov edx, dword [esp + 0x2d0]
mov esi, edi
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xa0], ebx
mov ebx, dword [esp + 0x308]
mov ebx, dword [esp + 0xa0]
mov edx, dword [esp + 0xfc]
cmp ebx, edx
jge 0x4f8c06
sar ebx, 0x1f
shr ebx, 0x1e
mov esi, dword [esp + 0xa0]
add ebx, esi
sar ebx, 2
cmp ebx, ebp
jae 0x4f8cfb
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x17c], eax
xor eax, eax
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x17c]
jmp 0x4f8ca7
mov edx, dword [esp + 0x2d0]
mov esi, dword [esp + 0xfc]
jmp 0x4f8a72
mov eax, dword [esp + 0x2f0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x104]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], bl
mov byte [esp + 0xd], bl
mov byte [esp + 0xe], bl
movzx edx, byte [esp + 0x2d]
mov byte [esp + 0xf], dl
call fcn.004f2ca0
mov eax, dword [esp + 0xf0]
inc eax
movzx ebx, byte [esp + 0x3b]
shl ebx, 2
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x2f0]
movzx esi, byte [esp + 0x26]
mov edi, dword [esp + 0x104]
mov ecx, dword [esp + 0x2f8]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x130]
mov edi, dword [esp + 0xf0]
cmp edi, 4
jge 0x4f8b8d
add edi, esi
cmp edx, edi
jle 0x4f8b8d
mov byte [esp + 0x3b], bl
shr bl, 6
imul ebx, ebx, 0x55
movzx eax, byte [esp + 0x26]
cmp al, bl
jne 0x4f8ce6
mov byte [esp + 0x16c], al
xor eax, eax
mov byte [esp + 0x2d], al
jmp 0x4f8c19
mov byte [esp + 0x174], al
mov eax, 0xffffffff
mov byte [esp + 0x2d], al
jmp 0x4f8c19
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
add edx, 8
mov ebx, dword [esp + 0x300]
mov edi, dword [esp + 0x104]
mov ebx, dword [esp + 0x308]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xa4], edx
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0xa4]
cmp ebx, esi
jge 0x4f8d7c
sar ebx, 0x1f
shr ebx, 0x1d
mov edx, dword [esp + 0xa4]
add ebx, edx
sar ebx, 3
cmp ebx, ebp
jae 0x4f8e90
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x15c], eax
xor eax, eax
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x15c]
jmp 0x4f8dcc
mov ebp, dword [esp + 0x12c]
jmp 0x4f8d04
mov ebx, dword [esp + 0x2f0]
mov edx, dword [esp + 0xac]
jmp 0x4f6a82
mov edx, dword [esp + 0xf4]
inc edx
shl edi, 1
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0xfc]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0xfc]
mov dword [esp + 0xf4], edx
mov ebx, edi
mov edx, dword [esp + 0xa4]
mov edi, dword [esp + 0x2e8]
mov edi, dword [esp + 0xf4]
cmp edi, 8
jge 0x4f8d04
lea ebp, [edi + edx]
cmp esi, ebp
jle 0x4f8d73
mov byte [esp + 0x3c], bl
mov esi, dword [esp + 0x300]
mov edx, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
mov edi, dword [esi + 0x18]
mov esi, dword [esi + 0x1c]
cmp edx, ebp
jg 0x4f8e6f
cmp edi, ebp
jle 0x4f8e66
mov edi, dword [esp + 0x104]
cmp edi, ebx
jl 0x4f8e76
cmp edi, esi
jge 0x4f8e76
mov dword [esp + 0x128], edx
nop
mov esi, dword [esp + 0x300]
mov edx, dword [esi + 4]
mov dword [esp + 0x124], edx
mov edx, dword [esi]
sub edi, ebx
imul edi, dword [esi + 0xc]
mov ebx, dword [esp + 0x128]
sub ebp, ebx
lea ebx, [ebp + edi]
mov ebp, dword [esp + 0x124]
cmp ebp, ebx
jbe 0x4f8e87
movzx ebp, byte [esp + 0x3c]
mov edi, ebp
xchg ebp, eax
shr al, 7
xchg ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
xchg ebp, eax
mov byte [edx + ebx], al
xchg ebp, eax
jmp 0x4f8d8f
mov edi, dword [esp + 0x104]
jmp 0x4f8e76
mov edi, dword [esp + 0x104]
mov esi, dword [esp + 0x300]
movzx edi, byte [esp + 0x3c]
jmp 0x4f8d8f
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
lea ebx, [esi + 8]
mov esi, dword [esp + 0x2f0]
movzx edi, byte [esp + 0x27]
mov edx, dword [esp + 0x2d0]
mov esi, edi
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xa8], ebx
mov ebx, dword [esp + 0x308]
mov ebx, dword [esp + 0xa8]
mov edx, dword [esp + 0xfc]
cmp ebx, edx
jge 0x4f8f12
sar ebx, 0x1f
shr ebx, 0x1d
mov esi, dword [esp + 0xa8]
add ebx, esi
sar ebx, 3
cmp ebx, ebp
jae 0x4f9005
movzx ebx, byte [ebx + edi]
mov dword [esp + 0x14c], eax
xor eax, eax
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x14c]
jmp 0x4f8fb2
mov edx, dword [esp + 0x2d0]
mov esi, dword [esp + 0xfc]
jmp 0x4f8d7c
mov eax, dword [esp + 0x2f0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x104]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], bl
mov byte [esp + 0xd], bl
mov byte [esp + 0xe], bl
movzx edx, byte [esp + 0x2e]
mov byte [esp + 0xf], dl
call fcn.004f2ca0
mov eax, dword [esp + 0xf8]
inc eax
movzx ebx, byte [esp + 0x3d]
shl ebx, 1
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0x2f0]
movzx esi, byte [esp + 0x27]
mov edi, dword [esp + 0x104]
mov ecx, dword [esp + 0x2f8]
mov ebp, dword [esp + 0x12c]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0x2e8]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x130]
mov edi, dword [esp + 0xf8]
cmp edi, 8
jge 0x4f8e99
add edi, esi
cmp edx, edi
jle 0x4f8e99
mov byte [esp + 0x3d], bl
shr bl, 7
neg ebx
movzx eax, byte [esp + 0x27]
cmp al, bl
jne 0x4f8ff0
mov byte [esp + 0x13c], al
xor eax, eax
mov byte [esp + 0x2e], al
jmp 0x4f8f25
mov byte [esp + 0x144], al
mov eax, 0xffffffff
mov byte [esp + 0x2e], al
jmp 0x4f8f25
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, dword [esp + 0x2e4]
movzx ecx, byte [ebx + eax]
shr cl, 1
add ecx, ebp
mov byte [edi + ebx], cl
lea ecx, [ebx + 1]
mov ebp, dword [esp + 0x12c]
mov eax, dword [esp + 0x130]
mov ebx, dword [esp + 0x2e4]
mov dword [esp + 0xc4], ecx
mov ecx, dword [esp + 0x2f8]
mov ebx, dword [esp + 0xc4]
cmp ebx, esi
jge 0x4f9064
cmp ebx, ebp
jae 0x4f910a
movzx ebp, byte [ebx + edi]
jb 0x4f900e
jmp 0x4f90fc
mov ebx, dword [esp + 0x2e4]
jmp 0x4f90ac
mov eax, dword [esp + 0x2e4]
movzx ecx, byte [ebx + eax]
add ecx, esi
mov esi, ecx
shr ecx, 0x1f
add ecx, esi
sar ecx, 1
movzx esi, byte [esp + 0x3f]
add ecx, esi
mov byte [edi + ebx], cl
lea esi, [ebx + 1]
mov ecx, dword [esp + 0x118]
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x2f8]
mov ebx, dword [esp + 0x2e4]
cmp esi, ebp
jge 0x4f6c16
jae 0x4f90f3
mov dword [esp + 0xc0], esi
movzx ebx, byte [esi + edi]
mov byte [esp + 0x3f], bl
mov ebx, dword [esp + 0x118]
sub esi, ebx
cmp esi, ebp
jae 0x4f90ea
movzx esi, byte [esi + edi]
mov ebx, dword [esp + 0xc0]
cmp ebx, ebp
jb 0x4f906d
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, dword [esp + 0x12c]
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
movzx eax, byte [esi + edi]
add eax, ebx
mov byte [edi + esi], al
inc esi
mov ebx, dword [esp + 0x2e4]
mov eax, dword [esp + 0x130]
cmp esi, ebp
jge 0x4f6c16
movzx ebx, byte [esi + ebx]
jb 0x4f9113
mov eax, esi
mov ecx, ebp
call fcn.00456b40
mov eax, dword [esp + 0x2e8]
movzx ebx, byte [ebx + eax]
add ebx, edi
mov edi, dword [esp + 0xc8]
mov byte [eax + edi], bl
lea ebx, [edi + 1]
mov eax, dword [esp + 0x130]
mov edi, dword [esp + 0x2e8]
cmp ebx, ebp
jge 0x4f6c16
jae 0x4f918e
mov dword [esp + 0xc8], ebx
movzx edi, byte [ebx + edi]
sub ebx, esi
cmp ebx, ebp
jb 0x4f9142
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, ebx
mov ecx, ebp
call fcn.00456b40
mov eax, 1
xor ecx, ecx
call fcn.00456ba0
mov eax, 1
xor ecx, ecx
call fcn.00456ba0
call fcn.0042f690
call fcn.0042f690
call fcn.00456b40
nop
call fcn.00455690
jmp fcn.004f5ed0