Function at 0x471b10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb0]
cmp eax, dword [ecx + 8]
jbe 0x472ffe
sub esp, 0x130
xor eax, eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x48], 0
xor ecx, ecx
mov byte [eax + 0x7c], cl
xor ecx, ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jge 0x471d0b
mov edx, 1
mov byte [eax + 0x7d], dl
mov esi, ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jge 0x471bac
mov ebp, dword [esp + 0x13c]
cmp ecx, ebp
jae 0x472ff7
mov ebp, dword [esp + 0x138]
add ebp, ecx
movzx ebx, byte [ebp]
cmp bl, 0x25
je 0x471bac
inc ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jl 0x471b82
cmp ecx, esi
jle 0x471cff
mov ebp, eax
cmp eax, 0
je 0x472ff0
mov dword [esp + 0x28], ecx
mov ebx, dword [esp + 0x13c]
cmp ecx, ebx
ja 0x472fe9
cmp esi, ecx
ja 0x472fe9
sub ecx, esi
mov eax, dword [esp + 0x138]
cmp ecx, 0
je 0x471bea
add eax, esi
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov ebx, ebp
mov dword [esp + 0x68], ebp
cmp ebp, 0
je 0x472fe1
mov esi, dword [ebp]
mov ebp, dword [ebp + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [ebx + 8]
mov dword [esp + 0x10c], esi
mov edx, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xc4]
mov edi, edx
add edi, ebx
cmp edi, eax
jbe 0x471c80
mov dword [esp], 0x70b300
mov dword [esp + 0x100], esi
mov dword [esp + 4], esi
mov dword [esp + 0x104], edx
mov dword [esp + 8], edx
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x10], edi
call fcn.00449ae0
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp edi, eax
ja 0x472fda
mov dword [esp + 0x104], edi
mov eax, dword [esp + 0xc4]
mov ebx, dword [esp + 0x110]
mov ebp, esi
mov dword [esp + 0x100], esi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00463ec0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x8f7eb8], 0
jne 0x472fbe
mov dword [ebx], ebp
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jl 0x472530
movzx ebx, byte [eax + 0x7c]
cmp bl, 0
jne 0x47218a
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jge 0x47218a
mov ebx, eax
add ebx, 0x20
cmp ebx, 0
je 0x472529
add ebx, 4
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov byte [ebx + 8], 0
mov ebx, 0x75c0f2
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], 9
mov dword [esp + 0x64], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0xb4]
mov edx, esi
add edx, ebx
cmp edx, eax
jbe 0x471de0
mov dword [esp], 0x70b300
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10], edx
call fcn.00449ae0
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp edx, eax
ja 0x472522
mov dword [esp + 0x110], edx
mov eax, dword [esp + 0xb4]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00463ec0
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x8f7eb8], 0
jne 0x472511
mov dword [ebx], ebp
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
cmp eax, ecx
ja 0x47250a
mov ebp, ecx
sub ebp, eax
sub edx, eax
mov ecx, dword [esp + 0x140]
cmp edx, 0
je 0x471e85
imul eax, eax, 8
add ecx, eax
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], ebp
mov dword [esp + 0x12c], edx
mov dword [esp + 0x120], edx
xor eax, eax
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x118], ecx
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
jge 0x472152
mov dword [esp + 0x78], ecx
cmp ecx, 0
je 0x472503
mov edx, dword [ecx]
mov ebp, dword [ecx + 4]
mov dword [esp + 0x34], eax
mov dword [esp + 0xe8], edx
mov dword [esp + 0xf8], edx
mov dword [esp + 0xec], ebp
mov dword [esp + 0xfc], ebp
cmp eax, 0
jle 0x472013
mov eax, dword [esp + 0x134]
cmp eax, 0
je 0x4724fc
mov ebx, 0x7577e7
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x6c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xbc]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x471f9f
mov dword [esp], 0x70b300
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.00449ae0
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x4724f5
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0xbc]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xb8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00463ec0
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x8f7eb8], 0
jne 0x4724e4
mov dword [ebx], ebp
mov ebx, dword [esp + 0xf8]
cmp ebx, 0
jne 0x472220
mov eax, dword [esp + 0x134]
cmp eax, 0
je 0x472219
mov ebx, 0x758905
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 5
mov dword [esp + 0x60], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0xa4]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4720c6
mov dword [esp], 0x70b300
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.00449ae0
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp ecx, eax
ja 0x472212
mov dword [esp + 0x110], ecx
mov eax, dword [esp + 0xa4]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xa0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00463ec0
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x8f7eb8], 0
jne 0x472201
mov dword [ebx], ebp
mov ecx, dword [esp + 0x78]
add ecx, 8
mov eax, dword [esp + 0x34]
inc eax
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
jl 0x471ec1
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4721fa
mov byte [esp + 0x26], 0x29
mov dword [esp + 0x70], ebx
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov ebp, eax
inc ebp
cmp ebp, edx
ja 0x472191
mov dword [ebx + 4], ebp
mov ebx, ecx
add ebx, eax
movzx ebp, byte [esp + 0x26]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
add esp, 0x130
ret
mov dword [esp], 0x70b300
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00449ae0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x70]
cmp ebx, 0
je 0x4721f6
mov ebp, eax
mov dword [esp + 0x40], eax
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], edx
mov dword [esp + 0x7c], ecx
cmp byte [0x8f7eb8], 0
jne 0x4721e0
mov dword [ebx], ecx
jmp 0x47217d
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0041b160
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x40]
jmp 0x47217d
mov dword [ebx], eax
jmp 0x4721c2
mov dword [ebx], eax
jmp 0x472162
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0041b160
jmp 0x47213a
call fcn.004359e0
ud2
mov dword [eax], eax
jmp 0x472033
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4724dd
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 0xd0], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 0xd4], ebx
xor ebx, ebx
xor ebx, ebx
lea ebx, [esp + 0xd0]
cmp ebx, 0
je 0x4724d6
mov eax, dword [ebx]
mov ebp, dword [ebx + 4]
mov dword [esp + 0xdc], ebp
mov dword [esp + 0xd8], eax
xor ebx, ebx
xor ebp, ebp
cmp eax, ebp
jne 0x4724ca
xor eax, eax
mov ecx, eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0xe4], ecx
mov dword [esp], ecx
mov dword [esp + 0xe0], eax
mov ebx, dword [eax + 0x84]
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov ebx, dword [esp + 0x50]
cmp ebx, 0
je 0x4724c3
mov edi, dword [ebx]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [ebx + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0x94]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x472357
mov dword [esp], 0x70b300
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.00449ae0
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x4724bc
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0x94]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0x90]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00463ec0
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x8f7eb8], 0
jne 0x4724ab
mov dword [ebx], ebp
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4724a4
mov byte [esp + 0x24], 0x3d
mov dword [esp + 0x58], ebx
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov ebp, eax
inc ebp
cmp ebp, edx
ja 0x472435
mov dword [ebx + 4], ebp
mov ebx, ecx
add ebx, eax
movzx ebp, byte [esp + 0x24]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov ebx, dword [esp + 0x134]
mov dword [esp], ebx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x76
call fcn.0046d3e0
jmp 0x47213a
mov dword [esp], 0x70b300
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00449ae0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x58]
cmp ebx, 0
je 0x4724a0
mov ebp, eax
mov dword [esp + 0x40], eax
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], edx
mov dword [esp + 0x7c], ecx
cmp byte [0x8f7eb8], 0
jne 0x472487
mov dword [ebx], ecx
jmp 0x4723f6
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0041b160
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x40]
jmp 0x4723f6
mov dword [ebx], eax
jmp 0x472466
mov dword [ebx], eax
jmp 0x4723db
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0041b160
jmp 0x4723cb
call fcn.004359e0
ud2
mov dword [ebx], eax
jmp 0x4722df
mov ecx, eax
mov eax, 0x8c8960
jmp 0x472287
mov dword [ebx], eax
jmp 0x472264
mov dword [ebx], eax
jmp 0x472230
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0041b160
jmp 0x472013
call fcn.004359e0
ud2
mov dword [eax], eax
jmp 0x471f0c
mov dword [ecx], eax
jmp 0x471ece
call fcn.004359e0
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0041b160
jmp 0x471e54
call fcn.004359e0
ud2
mov dword [ebx], eax
jmp 0x471d39
mov esi, ecx
inc esi
mov ebx, eax
cmp eax, 0
je 0x472fb7
add ebx, 0x20
cmp ebx, 0
je 0x472fb0
add ebx, 4
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov byte [ebx + 8], 0
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jge 0x4725ab
mov dword [esp + 0x28], esi
mov ebp, dword [esp + 0x13c]
cmp esi, ebp
jae 0x472fa9
mov ebp, dword [esp + 0x138]
add ebp, esi
movzx ebx, byte [ebp]
mov edx, ebx
cmp bl, 0x23
ja 0x472f5d
cmp bl, 0x20
jne 0x472ea6
mov ecx, 1
mov byte [eax + 0x29], cl
inc esi
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jl 0x472566
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.00471570
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x48], esi
mov eax, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov byte [esp + 0x27], bl
cmp eax, edi
jge 0x472e45
mov ebp, dword [esp + 0x13c]
cmp eax, ebp
jae 0x472e9f
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x2a
jne 0x472e45
mov ebx, eax
inc ebx
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x148]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
call fcn.00471240
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x30], ecx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x24], bl
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
movzx ebx, byte [eax + 0x24]
cmp bl, 0
jne 0x472799
mov ebx, 0x75da42
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], 0xc
mov dword [esp + 0x4c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xac]
mov edx, esi
add edx, ebx
cmp edx, eax
jbe 0x47271a
mov dword [esp], 0x70b300
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10], edx
call fcn.00449ae0
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp edx, eax
ja 0x472e3e
mov dword [esp + 0x104], edx
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xa8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00463ec0
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x8f7eb8], 0
jne 0x472e22
mov dword [ebx], ebp
mov ebp, dword [eax + 0x30]
cmp ebp, 0
jge 0x4727b6
mov ecx, dword [eax + 0x30]
neg ecx
mov dword [eax + 0x30], ecx
mov ecx, 1
mov byte [eax + 0x26], cl
xor ecx, ecx
mov byte [eax + 0x2a], cl
xor ecx, ecx
mov edx, esi
inc edx
mov ebx, dword [esp + 0x2c]
cmp edx, ebx
jge 0x4729fb
mov ebp, dword [esp + 0x13c]
cmp esi, ebp
jae 0x472e1b
mov ebp, dword [esp + 0x138]
add ebp, esi
movzx ebx, byte [ebp]
cmp bl, 0x2e
jne 0x4729fb
mov edx, esi
inc edx
cmp cl, 0
je 0x4727f9
xor ecx, ecx
mov byte [eax + 0x7d], cl
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.00471570
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x48], esi
mov eax, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov byte [esp + 0x27], bl
cmp eax, edi
jge 0x472dbb
mov ebp, dword [esp + 0x13c]
cmp eax, ebp
jae 0x472e14
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x2a
jne 0x472dbb
mov ebx, eax
inc ebx
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x148]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
call fcn.00471240
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x34], ecx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x25], bl
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
mov ebp, dword [eax + 0x34]
cmp ebp, 0
jge 0x4728da
xor ecx, ecx
mov dword [eax + 0x34], ecx
xor ecx, ecx
mov byte [eax + 0x25], cl
movzx ebx, byte [eax + 0x25]
cmp bl, 0
jne 0x4729f9
mov ebx, 0x75d202
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], 0xb
mov dword [esp + 0x5c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0x9c]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x47297a
mov dword [esp], 0x70b300
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x10], ecx
call fcn.00449ae0
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp ecx, eax
ja 0x472db4
mov dword [esp + 0x110], ecx
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00463ec0
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x8f7eb8], 0
jne 0x472d98
mov dword [ebx], ebp
xor ecx, ecx
cmp cl, 0
jne 0x472a4d
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.00471570
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
mov esi, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jl 0x472b97
cmp eax, 0
je 0x472b90
mov ebx, 0x75c9e7
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 0xa
mov dword [esp + 0x74], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xcc]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x472af5
mov dword [esp], 0x70b300
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x10], ecx
call fcn.00449ae0
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x472b89
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0xcc]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xc8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00463ec0
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x8f7eb8], 0
jne 0x472b71
mov dword [ebx], ebp
jmp 0x471d0b
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0041b160
mov eax, dword [esp + 0x134]
jmp 0x471d0b
call fcn.004359e0
ud2
mov dword [eax], eax
jmp 0x472a62
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x13c]
cmp esi, eax
ja 0x472d91
mov edx, eax
sub edx, esi
mov eax, dword [esp + 0x138]
cmp edx, 0
je 0x472bbc
add eax, esi
mov dword [esp + 0xf0], eax
mov dword [esp], eax
mov dword [esp + 0xf4], edx
mov dword [esp + 4], edx
call fcn.005d8ed0
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 0x28]
add ebx, ecx
mov ecx, ebx
mov dword [esp + 0x28], ebx
cmp edx, 0x25
jne 0x472cc5
cmp eax, 0
je 0x472cbe
mov byte [esp + 0x25], 0x25
mov dword [esp + 0x54], eax
mov edi, dword [eax]
mov edx, dword [eax + 4]
mov ebp, dword [eax + 8]
mov dword [esp + 0x38], ebp
mov ebp, edx
inc ebp
mov esi, dword [esp + 0x38]
cmp ebp, esi
ja 0x472c38
mov dword [eax + 4], ebp
mov ebx, edi
add ebx, edx
movzx ebp, byte [esp + 0x25]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
jmp 0x471b64
mov dword [esp], 0x70b300
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00449ae0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x54]
cmp ebx, 0
je 0x472cba
mov ebp, edx
mov dword [esp + 0x40], edx
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], esi
mov dword [esp + 0x7c], edi
cmp byte [0x8f7eb8], 0
jne 0x472c96
mov dword [ebx], edi
jmp 0x472c26
mov dword [esp], ebx
mov dword [esp + 4], edi
call fcn.0041b160
mov edi, dword [esp + 0x7c]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x472c26
mov dword [ebx], eax
jmp 0x472c78
mov dword [eax], eax
jmp 0x472c03
movzx ebx, byte [eax + 0x7d]
cmp bl, 0
jne 0x472cea
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00471670
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x471b64
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jl 0x472d15
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004718c0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x471b64
cmp edx, 0x76
jne 0x472d3a
movzx ebp, byte [eax + 0x28]
xchg ebp, ebx
mov byte [eax + 0x2c], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x28], cl
movzx ebp, byte [eax + 0x27]
xchg ebp, ebx
mov byte [eax + 0x2b], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x27], cl
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x144]
cmp ebx, ebp
jae 0x472d8a
mov ebp, dword [esp + 0x140]
shl ebx, 3
add ebp, ebx
lea edi, [esp + 4]
cld
mov ecx, dword [ebp]
mov dword [edi], ecx
mov ecx, dword [ebp + 4]
mov dword [edi + 4], ecx
mov dword [esp + 0xc], edx
call fcn.0046d3e0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x48]
inc ebx
mov dword [esp + 0x48], ebx
jmp 0x471b64
call fcn.00435970
ud2
call fcn.004359e0
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0041b160
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4729f9
call fcn.004359e0
ud2
mov dword [esp], edx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
call fcn.00469ed0
movzx ecx, byte [esp + 0x27]
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0x10]
mov dword [eax + 0x34], edx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x25], bl
mov esi, dword [esp + 0x18]
movzx ebx, byte [eax + 0x25]
cmp bl, 0
jne 0x4729fb
xor edx, edx
mov dword [eax + 0x34], edx
mov edx, 1
mov byte [eax + 0x25], dl
jmp 0x4729fb
call fcn.00435970
ud2
call fcn.00435970
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0041b160
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x472799
call fcn.004359e0
ud2
mov dword [esp], edx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
call fcn.00469ed0
movzx ecx, byte [esp + 0x27]
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0x10]
mov dword [eax + 0x30], edx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x24], bl
mov esi, dword [esp + 0x18]
cmp cl, 0
je 0x4727b8
movzx ebx, byte [eax + 0x24]
cmp bl, 0
je 0x4727b8
xor edx, edx
mov byte [eax + 0x7d], dl
jmp 0x4727b8
call fcn.00435970
ud2
cmp bl, 0x23
jne 0x472eb8
mov ecx, 1
mov byte [eax + 0x28], cl
jmp 0x4725a2
cmp dl, 0x61
jb 0x4725ab
cmp dl, 0x7a
ja 0x4725ab
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jge 0x4725ab
cmp dl, 0x76
jne 0x472f02
movzx ebp, byte [eax + 0x28]
xchg ebp, ebx
mov byte [eax + 0x2c], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x28], cl
movzx ebp, byte [eax + 0x27]
xchg ebp, ebx
mov byte [eax + 0x2b], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x27], cl
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x144]
cmp ebx, ebp
jae 0x472f56
mov ebp, dword [esp + 0x140]
shl ebx, 3
add ebp, ebx
lea edi, [esp + 4]
cld
mov ecx, dword [ebp]
mov dword [edi], ecx
mov ecx, dword [ebp + 4]
mov dword [edi + 4], ecx
movzx ebx, dl
mov dword [esp + 0xc], ebx
call fcn.0046d3e0
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x48]
inc ebx
mov dword [esp + 0x48], ebx
mov ecx, dword [esp + 0x28]
inc ecx
jmp 0x471b64
call fcn.00435970
ud2
cmp bl, 0x2b
jne 0x472f6f
mov ecx, 1
mov byte [eax + 0x27], cl
jmp 0x4725a2
cmp bl, 0x2d
jne 0x472f86
mov ecx, 1
mov byte [eax + 0x26], cl
xor ecx, ecx
mov byte [eax + 0x2a], cl
jmp 0x4725a2
cmp bl, 0x30
jne 0x472eb8
movzx ebx, byte [eax + 0x26]
cmp bl, 0
je 0x472fa2
xor ecx, ecx
mov byte [eax + 0x2a], cl
jmp 0x4725a2
mov ecx, 1
jmp 0x472f9a
call fcn.00435970
ud2
mov dword [ebx], eax
jmp 0x47254a
mov dword [eax], eax
jmp 0x47253e
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0041b160
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x471cff
call fcn.004359e0
ud2
mov dword [ebp], eax
jmp 0x471c07
call fcn.004359e0
ud2
mov dword [eax], eax
jmp 0x471bbf
call fcn.00435970
ud2
call fcn.004616d0
jmp fcn.00471b10