Function at 0x4f4a50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xd8
push esi
mov esi, edx
mov dword [esp + 0x70], 0
mov edx, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [esp + 0x34], esi
mov dword [esp + 0xc], edi
lea eax, [edx + 0x58]
mov dword [esp + 0x9c], eax
mov eax, dword [edi]
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x4c]
movzx eax, byte [eax + 0x38]
mov dword [esp + 0x20], ecx
lea ecx, [eax + eax*8]
mov eax, dword [edx + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [esp + 0x80], eax
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x30], eax
cmp dword [edx + 0x200], eax
jne 0x4f4abe
mov ecx, 1
xor edx, edx
jmp 0x4f4b08
mov edx, dword [edx + 0x1fc]
mov eax, 1
cmp edx, eax
jle 0x4f4aee
mov ecx, dword [ebp + 8]
add ecx, 0x204
mov esi, dword [esp + 0x30]
cmp dword [ecx], esi
mov esi, dword [esp + 0x34]
je 0x4f4b92
inc eax
add ecx, 4
cmp eax, edx
jl 0x4f4ad6
xorps xmm0, xmm0
movlpd qword [esp + 0x90], xmm0
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
mov eax, dword [ebp + 0x10]
not ecx
and ecx, dword [ebp + 0x14]
not edx
and edx, dword [ebp + 0x18]
mov dword [eax + 0x50], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0x54], edx
mov eax, dword [ecx + 0x50]
mov edx, dword [ecx + 0x54]
mov ecx, dword [ebp + 0xc]
call fcn.0056eab0
mov ecx, dword [ebp + 0x10]
and eax, 1
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x38]
dec eax
mov dword [edi + 0x38], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0xc], eax
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x38]
dec eax
mov dword [edi + 0x38], eax
cmp byte [ecx + 0x38], 0
mov dword [esp + 0x84], eax
mov dword [ecx + 0x18], eax
jbe 0x4f4bdb
mov eax, dword [esp + 0x80]
test byte [eax + 0x24], 8
je 0x4f4bdb
mov edx, dword [edi + 0x2c]
inc edx
mov dword [edi + 0x2c], edx
mov dword [ecx], edx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f4bac
push 0
push edx
push 0
mov edx, 0x47
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f4bdb
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4f4b08
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0xc]
mov ecx, eax
test eax, eax
jle 0x4f4bff
mov edx, dword [ebp + 8]
imul eax, eax, 0x58
add edx, 0x300
add eax, edx
cmp dword [eax], 0
jne 0x4f4bff
dec ecx
sub eax, 0x58
test ecx, ecx
jg 0x4f4bf2
imul eax, ecx, 0x58
mov ecx, dword [ebp + 8]
mov edi, dword [eax + ecx + 0x30c]
mov eax, dword [esp + 0x80]
mov dword [esp + 0x64], edi
test byte [eax + 0x28], 0x10
je 0x4f4ce4
mov ecx, dword [esi + 0x74]
mov edi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [esi + 0x78], ecx
jg 0x4f4c44
push edx
push 0
push edi
mov edx, 0xd
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f4c73
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4f4ca2
push 0
push dword [esp + 0x3c]
mov edx, 0xe
mov ecx, esi
push edi
call fcn.0048e530
mov edi, dword [ebp + 0x10]
mov edx, eax
add esp, 0xc
mov dword [edi + 0x40], edx
mov byte [edi + 0x39], 0xb
jmp 0x4f53fc
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [ebp + 0x10]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [edi + 0x40], edx
mov byte [edi + 0x39], 0xb
jmp 0x4f53fc
mov eax, dword [esp + 0x20]
mov edx, dword [eax + 0x2c]
test edx, 0x400
je 0x4f52d3
movzx eax, word [eax + 0x30]
mov dword [esp + 0x38], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x4f4d31
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4f4d20
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov edx, eax
mov dword [esp + 0x18], eax
jmp 0x4f4d6b
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0x98]
jmp 0x4f4d67
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x1c]
mov edi, dword [eax + 0x20]
mov dword [esp + 0x18], edi
cmp ecx, edx
jg 0x4f4d58
lea eax, [edi + ecx]
sub edx, ecx
mov edi, dword [esp + 0xc]
mov dword [edi + 0x1c], edx
mov edx, dword [esp + 0x18]
mov dword [edi + 0x20], eax
jmp 0x4f4d6b
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x2c], eax
mov dword [esp + 0x18], edx
mov eax, dword [ebp + 0x10]
xor edi, edi
mov eax, dword [eax + 0xc]
mov dword [esp + 0x58], eax
cmp dword [esp + 0x38], edi
jbe 0x4f4e40
mov eax, dword [esp + 0x20]
add edx, 2
mov dword [esp + 0x2c], edx
nop dword [eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [eax + edi*4]
mov dword [esp + 0x28], ecx
test ecx, ecx
je 0x4f4e31
test byte [ecx + 0xc], 1
je 0x4f4ecf
cmp edi, 0x1f
ja 0x4f4dc0
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x28]
jmp 0x4f4dc2
xor eax, eax
mov esi, dword [esp + 0x20]
test dword [esi + 0x28], eax
mov esi, dword [esp + 0x34]
je 0x4f4ea6
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0xc]
mov edx, dword [eax + 0x28]
mov dword [esp + 0x28], edx
push edx
lea eax, [edx + 1]
mov dword [esi + 0x28], eax
mov eax, esi
inc dword [eax + 0x2c]
mov edx, dword [ecx]
mov ecx, esi
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
call fcn.004a8e90
mov esi, dword [esp + 0x38]
add esp, 4
mov eax, dword [esp + 0x2c]
add eax, edi
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f4e6f
mov edx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x2c]
push eax
push edx
mov edx, 0xad
mov ecx, esi
call fcn.0048e530
add esp, 0xc
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
inc edi
cmp edi, dword [esp + 0x38]
jl 0x4f4d90
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0x74]
mov edi, dword [esp + 0x18]
mov edx, dword [eax + 0x18]
cmp dword [esi + 0x78], ecx
jg 0x4f4f5b
push 0
push edi
push edx
mov edx, 0x47
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f4f86
mov edx, dword [esp + 0x28]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x2c]
add edx, edi
mov dword [eax + ecx*4], 0xad
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4f4e2d
lea eax, [edx + edi]
mov edx, ecx
mov ecx, dword [esp + 0xc]
push eax
push dword [esp + 0x44]
push edi
push dword [ebp + 0x10]
call fcn.004f3610
mov eax, dword [ebp + 0x10]
add esp, 0x10
mov eax, dword [eax + 0x10]
mov dword [esp + 0x58], eax
jmp 0x4f4e2d
lea eax, [edx + edi]
mov edx, dword [ecx]
mov ecx, dword [esp + 0xc]
push 1
push eax
mov edx, dword [edx + 0x10]
call fcn.004f42f0
mov eax, dword [esp + 0x30]
add esp, 8
cmp byte [eax + 0xf], 0x4a
mov eax, dword [esp + 0x20]
jne 0x4f4f52
test byte [eax + 0x1c], 2
je 0x4f4f52
mov eax, dword [ebp + 8]
mov ecx, dword [esi + 0x74]
mov eax, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
cmp dword [esi + 0x78], ecx
jg 0x4f4f1a
push 0
push edx
push 0
mov edx, 0x47
jmp 0x4f4e23
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4f4e2d
mov edx, dword [esp + 0x2c]
jmp 0x4f4e35
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
lea edx, [edi + 1]
cmp dword [esi + 0x78], ecx
jg 0x4f4fa9
push 0
push edx
push dword [esp + 0x40]
mov edx, 0x47
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f4fdc
mov edi, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x20]
mov edx, 0xfffffff9
mov eax, 0xffffffff
test byte [ecx + 0x1c], 1
cmovne eax, edx
mov edx, 9
push eax
push dword [ecx + 0x24]
mov ecx, esi
push edi
push dword [esp + 0x64]
push dword [esp + 0x40]
call fcn.0048e8d0
mov eax, dword [esp + 0x34]
add esp, 0x14
mov ecx, dword [esp + 0x68]
and dword [eax + 0x1c], 0xfffffffe
cmp byte [ecx + 0x57], 0
je 0x4f5026
mov dword [eax + 0x24], 0
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x30]
mov dword [edx + 0x3c], eax
mov eax, 0x3e
cmp byte [ecx + 0x32], 0
mov ecx, 0xb6
cmovne eax, ecx
xor ecx, ecx
mov byte [edx + 0x39], al
mov eax, dword [esi + 0x74]
mov dword [edx + 0x40], eax
mov dword [esp + 0x18], ecx
cmp dword [esp + 0x38], ecx
jbe 0x4f53fc
lea eax, [edi + 2]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x14], eax
nop dword [eax + eax]
mov eax, dword [edi + 0x38]
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x78], edx
cmp ecx, 0x10
jae 0x4f509b
mov ax, word [edi + 0x22]
shr ax, cl
test al, 1
je 0x4f5097
mov ecx, dword [ebp + 0x10]
call fcn.004f3270
jmp 0x4f52bb
mov ecx, dword [esp + 0x18]
test byte [edx + 0xc], 1
je 0x4f52bf
cmp ecx, 0x1f
ja 0x4f50b3
mov eax, 1
shl eax, cl
jmp 0x4f50b5
xor eax, eax
test dword [edi + 0x28], eax
jne 0x4f52bf
mov eax, dword [esp + 0x68]
cmp byte [eax + 0x57], 0
jne 0x4f52bf
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x28], 0
cmp dword [ecx + 0x44], 0
jle 0x4f51b3
mov eax, dword [esi]
mov edi, dword [ecx + 0x48]
add edi, 4
mov dh, byte [eax + 0x57]
nop dword [eax]
mov eax, dword [edi]
test eax, eax
jns 0x4f50fa
mov eax, dword [esi + 0x74]
dec eax
test dh, dh
je 0x4f5105
mov ecx, 0x5c24f8
jmp 0x4f510e
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea ecx, [eax + ecx*4]
mov dl, byte [ecx]
cmp dl, 0x5d
jne 0x4f5122
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x14]
cmp dword [ecx + 0xc], eax
jmp 0x4f5132
cmp dl, 0x86
jne 0x4f5138
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x14]
cmp dword [ecx + 8], eax
mov esi, dword [esp + 0x34]
je 0x4f514e
mov ecx, dword [esp + 0x28]
add edi, 0x14
mov eax, dword [ebp + 0x10]
inc ecx
mov dword [esp + 0x28], ecx
cmp ecx, dword [eax + 0x44]
jl 0x4f50f0
jmp 0x4f51b3
mov eax, dword [ecx + 8]
mov edi, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x28], ecx
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x50], eax
cmp dword [esi + 0x78], ecx
jg 0x4f517d
mov ecx, dword [esp + 0x28]
push edi
push eax
push ecx
movzx edx, dl
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f51b3
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0xc]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.0046a0b0
mov edi, eax
add esp, 8
test edi, edi
je 0x4f5209
push 0x34
push 0
push edi
call fcn.005471c0
add esp, 0xc
mov byte [edi], 0x35
or eax, 0xffffffff
mov ecx, edi
mov word [edi + 0x22], ax
call fcn.004a5d50
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp dword [edi + 0x18], eax
jle 0x4f5209
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.0046d2a0
add esp, 0xc
mov eax, dword [esp + 0x68]
cmp byte [eax + 0x57], 0
jne 0x4f52aa
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
test ecx, ecx
jle 0x4f5231
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*4]
mov edx, dword [eax + ecx*4 - 0xc]
mov ecx, dword [esp + 0x68]
push 0
push 0x35
mov dword [edi + 0xc], edx
call fcn.0046a0b0
add esp, 8
mov dword [esp + 0x50], eax
test eax, eax
je 0x4f529c
push 0x34
push 0
push eax
call fcn.005471c0
mov ecx, dword [esp + 0x5c]
or eax, 0xffffffff
add esp, 0xc
mov word [ecx + 0x22], ax
lea eax, [ecx + 0x34]
mov dword [ecx + 8], eax
mov byte [ecx], 0xb0
mov byte [eax], 0
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x14]
mov dword [ecx + 0x18], 1
mov dword [edi + 0x10], ecx
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp + 0x10]
push 0x10
push dword [eax + 0x18]
push edi
push dword [esp + 0x18]
call fcn.004ae410
add esp, 0x10
jmp 0x4f529f
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x68]
mov dword [edi + 0xc], 0
test edi, edi
je 0x4f52b7
mov edx, edi
mov ecx, eax
call fcn.004a6930
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, dword [esp + 0x38]
jl 0x4f5070
jmp 0x4f53fc
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x4f54a6
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov edi, dword [eax + 0x2c]
push edi
push ecx
push 0
push dword [ebp + 0x10]
mov ecx, eax
call fcn.004f3610
mov ecx, eax
add esp, 0x10
mov dword [esp + 0x14], ecx
cmp ecx, edi
je 0x4f5336
test edi, edi
je 0x4f5336
mov edx, dword [esp + 0xc]
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x4f5336
movzx eax, al
mov dword [edx + eax*4 + 0x98], edi
inc byte [edx + 0x13]
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 0x10]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x50], eax
test eax, eax
je 0x4f53d4
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4f5369
push ecx
push edi
push eax
mov edx, 0x3f
mov ecx, esi
call fcn.0048e530
add esp, 0xc
mov edx, eax
jmp 0x4f539c
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f53b7
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 1
push dword [ebp + 0x18]
mov edx, dword [ebp + 8]
push dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push edi
push dword [ebp + 0xc]
call fcn.004f47c0
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4f5472
push ecx
push edi
push dword [esp + 0x38]
mov edx, 0x20
mov ecx, esi
call fcn.0048e530
add esp, 0xc
mov eax, dword [ebp + 0x10]
mov byte [eax + 0x39], 0xb6
xor eax, eax
neg eax
sbb ecx, ecx
add ecx, 2
mov dword [esp + 0x58], ecx
mov ecx, dword [ebp + 8]
nop dword [eax]
mov eax, dword [ecx + 0x64]
xor edx, edx
mov edi, dword [ecx + 0x70]
mov dword [esp + 0x14], edx
mov dword [esp + 0x50], eax
test eax, eax
jle 0x4f78a1
nop dword [eax + eax]
xor eax, eax
mov dword [esp + 0x28], eax
movzx eax, word [edi + 0xa]
mov ecx, eax
mov dword [esp + 0x7c], ecx
test al, 6
jne 0x4f788a
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0x10]
mov ecx, dword [edi + 0x28]
and ecx, dword [eax + 0x50]
mov eax, dword [edi + 0x2c]
and eax, dword [esi + 0x54]
or ecx, eax
mov esi, dword [esp + 0x34]
je 0x4f76c5
mov ecx, dword [ebp + 8]
or dword [ecx + 0x34], 2
jmp 0x4f788d
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x20
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4f53f5
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x4f585c
xor ecx, ecx
mov dword [esp + 0x58], 0
mov eax, 0xb6
mov dword [esp + 0x14], ecx
xor edi, edi
mov dword [esp + 0x60], eax
test dl, 0x20
je 0x4f54e9
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], 4
mov eax, dword [eax + 0x38]
mov edi, dword [eax]
jmp 0x4f54ed
mov dword [esp + 0x28], ecx
test dl, 0x10
je 0x4f5504
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov eax, dword [eax + 0x38]
mov ecx, dword [ecx + eax]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4f5512
mov dword [esp + 0x14], edi
mov edi, ecx
test edi, edi
je 0x4f5644
mov ecx, dword [edi]
mov dword [esp + 0x4c], 0x1917181a
mov dword [esp + 0x28], ecx
mov edx, dword [ecx + 0x10]
mov al, byte [edx]
cmp al, 0xb0
jne 0x4f5534
mov al, byte [edx + 2]
cmp al, 0xb1
jne 0x4f553d
mov eax, dword [edx + 0x14]
jmp 0x4f5547
cmp al, 0x8a
jne 0x4f5596
mov eax, dword [edx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4f5596
mov edx, dword [esp + 0xc]
mov al, byte [edx + 0x13]
test al, al
jne 0x4f555f
inc dword [edx + 0x2c]
mov edi, dword [edx + 0x2c]
jmp 0x4f556e
dec al
mov byte [edx + 0x13], al
movzx eax, al
mov edi, dword [edx + eax*4 + 0x98]
mov edx, dword [ecx + 0x10]
mov ecx, dword [esp + 0xc]
push 1
push edi
call fcn.004f42f0
mov ecx, dword [esp + 0x30]
add esp, 8
mov edx, edi
movzx eax, byte [ecx]
inc eax
and eax, 2
or eax, 1
mov al, byte [esp + eax + 0x4c]
jmp 0x4f55c8
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x50]
push eax
call fcn.004ad9c0
mov ecx, dword [ebp + 0x10]
add esp, 4
mov edx, edi
mov dword [esp + 0x78], eax
call fcn.004f3270
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x78]
movzx eax, byte [ecx]
mov al, byte [esp + eax + 0x16]
mov ecx, dword [esi + 0x74]
mov byte [esp + 0x13], al
cmp dword [esi + 0x78], ecx
jg 0x4f55ec
push edx
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x38]
call fcn.0048e530
add esp, 0xc
jmp 0x4f5626
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x13]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
test edi, edi
je 0x4f56ab
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4f56ab
movzx eax, al
mov dword [ecx + eax*4 + 0x98], edi
inc byte [ecx + 0x13]
jmp 0x4f56ab
mov ecx, dword [esi + 0x74]
xor eax, 1
lea edx, [eax*4 + 0x22]
cmp dword [esi + 0x78], ecx
jg 0x4f566d
mov ecx, dword [esp + 0x64]
push 0
push ecx
push dword [esp + 0x38]
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f56a7
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0x14]
test edi, edi
je 0x4f5760
mov eax, dword [edi]
inc dword [ecx + 0x2c]
mov ecx, dword [ecx + 0x2c]
push 1
mov edx, dword [eax + 0x10]
mov dword [esp + 0x5c], ecx
push ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x30], eax
call fcn.004f42f0
mov ecx, dword [esp + 0x30]
add esp, 8
mov ecx, dword [ecx + 0x10]
mov dl, byte [ecx]
mov al, dl
cmp al, 0xb0
jne 0x4f56eb
mov al, byte [ecx + 2]
cmp al, 0xb1
jne 0x4f56f4
mov eax, dword [ecx + 0x14]
jmp 0x4f56fe
cmp al, 0x8a
jne 0x4f5703
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4f5711
mov eax, dword [esp + 0x28]
mov al, byte [eax]
cmp al, 0x38
je 0x4f571e
cmp al, 0x36
je 0x4f571e
mov eax, dword [esp + 0x40]
lea eax, [eax*2 + 0x36]
jmp 0x4f572c
mov eax, dword [esp + 0x40]
xor eax, 1
lea eax, [eax*2 + 0x37]
mov dword [esp + 0x60], eax
cmp dl, 0xb0
jne 0x4f5738
mov dl, byte [ecx + 2]
cmp dl, 0xb1
jne 0x4f5742
mov eax, dword [ecx + 0x14]
jmp 0x4f574d
cmp dl, 0x8a
jne 0x4f5752
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4f5760
mov edx, edi
mov edi, dword [ebp + 0x10]
mov ecx, edi
call fcn.004f3270
jmp 0x4f5763
mov edi, dword [ebp + 0x10]
cmp dword [esp + 0x40], 0
mov ecx, dword [esi + 0x74]
sete al
mov dword [edi + 0x40], ecx
add al, 4
cmp dword [esp + 0x60], 0xb6
mov byte [edi + 0x39], al
mov eax, dword [esp + 0x30]
mov dword [edi + 0x3c], eax
je 0x4f53fc
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov ecx, dword [esi + 0x74]
mov edi, dword [eax + 0x2c]
cmp dword [esi + 0x78], ecx
jg 0x4f57b5
push 0
push edi
push dword [esp + 0x38]
mov edx, 0x86
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f57e4
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov edx, dword [esp + 0x60]
cmp dword [esi + 0x78], ecx
jg 0x4f5806
mov ecx, dword [esp + 0x58]
push edi
push dword [esp + 0x3c]
push ecx
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f583c
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4f53fc
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x4f53fc
test edx, 0x200
je 0x4f69bf
mov edi, dword [esp + 0x20]
mov dword [esp + 0x60], 0
mov dword [esp + 0x18], 0
movzx eax, word [edi + 0x1a]
movzx ecx, word [edi + 0x18]
mov dword [esp + 0x70], eax
movzx eax, word [edi + 0x1c]
xor edi, edi
mov dword [esp + 0x38], eax
xor eax, eax
mov dword [esp + 0x4c], eax
mov byte [esp + 0x13], al
mov byte [esp + 0x1f], al
mov dword [esp + 0x48], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
mov esi, dword [eax + 0x20]
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x74], esi
mov eax, dword [eax + 8]
mov dword [esp + 0x54], eax
movzx eax, cx
mov dword [esp + 0x24], eax
mov ecx, eax
test dl, 0x20
je 0x4f58e2
mov edi, dword [esp + 0x20]
mov eax, dword [edi + 0x38]
movzx edi, word [edi + 0x1a]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [esp + 0x60], eax
mov esi, dword [esp + 0x34]
test dl, 0x10
je 0x4f59e9
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 0x38]
movzx edx, word [edx + 0x1c]
cmp edi, edx
mov ecx, dword [eax + ecx*4]
cmova edx, edi
mov eax, 0x100
mov dword [esp + 0x18], ecx
mov dword [esp + 0x50], edx
test word [ecx + 0xa], ax
je 0x4f59a8
mov eax, dword [esp + 0xc]
mov edi, dword [ebp + 0x10]
inc dword [eax + 0x2c]
mov edx, dword [eax + 0x2c]
mov dword [edi + 0x2c], edx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f5947
push 0
push edx
push 1
mov edx, 0x47
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f5976
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
xor ecx, ecx
mov edx, dword [edi + 0x2c]
mov dword [edi + 0x30], eax
add edx, edx
mov eax, dword [esp + 0x74]
mov dword [edi + 0x2c], edx
mov edi, dword [esp + 0x24]
mov eax, dword [eax + 0x1c]
cmp byte [edi + eax], 1
mov eax, dword [ebp + 0x10]
sete cl
xor ecx, dword [esp + 0x40]
or ecx, edx
mov edx, dword [esp + 0x50]
mov dword [eax + 0x2c], ecx
cmp dword [esp + 0x60], 0
mov edi, edx
jne 0x4f59e9
mov edi, dword [esp + 0x74]
mov ecx, dword [esp + 0x24]
mov eax, dword [edi + 4]
movsx ecx, word [eax + ecx*2]
mov dword [esp + 0x50], ecx
test ecx, ecx
js 0x4f59db
mov eax, dword [edi + 0xc]
add ecx, ecx
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 4], 0xf
je 0x4f59e2
mov ecx, dword [esp + 0x50]
mov edi, edx
cmp ecx, 0xfffffffe
jne 0x4f59e9
mov byte [esp + 0x13], 1
mov edi, edx
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x2c]
test al, 0x30
jne 0x4f5a89
test eax, 0x80000
je 0x4f5a89
mov edx, dword [esp + 0xc]
mov edi, 1
mov ecx, dword [ebp + 0x10]
mov byte [esp + 0x13], 1
inc dword [edx + 0x2c]
cmp dword [ecx], 0
mov eax, dword [edx + 0x2c]
mov dword [esp + 0x48], eax
mov dword [ecx + 0x24], eax
je 0x4f5a80
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f5a46
push 0
push eax
push 0
lea edx, [edi + 0x46]
mov ecx, esi
call fcn.0048e530
mov edx, dword [esp + 0x18]
add esp, 0xc
jmp 0x4f5a7d
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp + 0x10]
dec dword [edx + 0x38]
mov eax, dword [edx + 0x38]
mov dword [ecx + 0x28], eax
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x28]
cmp ax, word [ecx + 0x34]
jae 0x4f5adf
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
mov edx, dword [esp + 0x24]
cmp byte [edx + eax], cl
sete cl
cmp dword [esp + 0x40], ecx
jne 0x4f5adf
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x60], eax
mov al, byte [esp + 0x13]
mov byte [esp + 0x1f], al
mov eax, dword [esp + 0x70]
mov dword [esp + 0x18], ecx
movzx ecx, dx
movzx eax, al
mov byte [esp + 0x13], 0
mov dword [esp + 0x70], ecx
mov dword [esp + 0x38], eax
cmp dword [ebp + 0xc], 0
jle 0x4f5b46
mov eax, dword [esp + 0x20]
test dword [eax + 0x2c], 0x100000
je 0x4f5b46
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f5b13
push 0
push 0
push dword [esp + 0x5c]
mov edx, 0x87
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f5b46
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 0x10]
lea eax, [esp + 0x5c]
mov ecx, dword [esp + 0xc]
push eax
push edi
push dword [esp + 0x48]
call fcn.004f3c70
mov edi, dword [esp + 0x30]
mov edx, eax
mov eax, dword [esp + 0x68]
add esp, 0xc
mov dword [esp + 0x3c], edx
test eax, eax
je 0x4f5bdb
cmp word [esp + 0x38], 0
je 0x4f5bdb
add eax, edi
jne 0x4f5b83
mov dword [esp + 0x4c], eax
jmp 0x4f5bdb
mov ecx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5b88
mov eax, dword [esp + 0x68]
sub ecx, edx
push 0
lea edi, [ecx + 1]
push edi
test eax, eax
je 0x4f5ba8
mov ecx, eax
call fcn.0046a0b0
jmp 0x4f5bad
call fcn.004699f0
add esp, 8
mov dword [esp + 0x4c], eax
test eax, eax
je 0x4f5bd3
mov eax, dword [esp + 0x5c]
push edi
mov edi, dword [esp + 0x28]
add eax, edi
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00546c40
add esp, 0xc
jmp 0x4f5bd7
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x48]
mov eax, dword [ebp + 0x10]
test ecx, ecx
je 0x4f5bf3
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x48]
jmp 0x4f5bfa
mov eax, dword [eax + 0x10]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x60]
test eax, eax
je 0x4f5c10
test byte [eax + 0xc], 0x28
mov dword [esp + 0x6c], 0
je 0x4f5c18
mov dword [esp + 0x6c], 1
cmp dword [esp + 0x18], 0
mov esi, dword [esp + 0x34]
je 0x4f5c39
mov edx, dword [esp + 0x18]
mov dword [esp + 0x58], 0
test byte [edx + 0xc], 0x28
mov edx, dword [esp + 0x3c]
je 0x4f5c41
mov dword [esp + 0x58], 1
test eax, eax
jne 0x4f5c8a
cmp word [esp + 0x28], ax
ja 0x4f5c8a
mov dword [esp + 0x64], eax
cmp byte [esp + 0x13], 0
je 0x4f5ecb
mov ecx, dword [esi + 0x74]
add edx, edi
mov dword [esp + 0x6c], 0
cmp dword [esi + 0x78], ecx
jg 0x4f5ded
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f5e20
mov dword [esp + 0x64], 1
mov dword [esp + 0x2c], edi
test eax, eax
je 0x4f5c50
mov eax, dword [eax]
mov edi, dword [eax + 0x10]
mov eax, dword [esp + 0x70]
movzx ecx, ax
mov eax, dword [esp + 0x24]
add eax, edx
mov dword [esp + 0x50], edi
push ecx
mov ecx, dword [esp + 0x10]
mov edx, edi
push eax
call fcn.004f42f0
mov eax, dword [esp + 0x68]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x4f5d13
mov eax, dword [esi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
shl ecx, 2
cmp byte [eax + 0x57], 0
je 0x4f5cec
mov ecx, 0x5c2504
mov edx, 0x5c24fa
jmp 0x4f5cf7
mov eax, dword [esi + 0x70]
add eax, ecx
lea ecx, [eax - 8]
lea edx, [eax - 0x12]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [edx], ax
mov eax, dword [esp + 0x60]
test byte [eax + 0xa], 0x80
jne 0x4f5d7f
mov ecx, edi
call fcn.004a80b0
test eax, eax
je 0x4f5d7f
mov edx, dword [esp + 0x24]
mov ecx, dword [esi + 0x74]
add edx, dword [esp + 0x3c]
cmp dword [esi + 0x78], ecx
jg 0x4f5d4c
push 0
push dword [esp + 0x48]
mov ecx, esi
push edx
mov edx, 0x32
call fcn.0048e530
add esp, 0xc
jmp 0x4f5d7f
mov edi, dword [esp + 0x50]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x4f5d9f
mov eax, dword [esp + 0x24]
add eax, ecx
mov ecx, edi
push eax
mov eax, dword [esp + 0x74]
movzx edx, ax
call fcn.004f32e0
add esp, 4
mov ecx, dword [esp + 0x70]
movzx eax, cx
add dword [esp + 0x2c], eax
mov al, byte [edi]
cmp al, 0xb0
jne 0x4f5db3
mov al, byte [edi + 2]
cmp al, 0xb1
jne 0x4f5dbc
mov eax, dword [edi + 0x14]
jmp 0x4f5dc6
cmp al, 0x8a
jne 0x4f5dda
mov eax, dword [edi + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4f5dda
mov dword [esp + 0x6c], 1
mov byte [esp + 0x13], 0
jmp 0x4f5e2f
mov edx, dword [esp + 0x60]
mov ecx, dword [ebp + 0x10]
call fcn.004f3270
mov byte [esp + 0x13], 0
jmp 0x4f5e2f
mov edi, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 4], 0
lea eax, [edi + 1]
mov dword [esp + 0x64], 1
mov dword [esp + 0x2c], eax
movzx ecx, byte [esp + 0x13]
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x5c]
sub eax, ecx
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0xc]
test edx, edx
je 0x4f5e8a
test eax, eax
jle 0x4f5e5e
cmp byte [edx], 0x41
jg 0x4f5e5e
dec eax
inc edi
inc edx
test eax, eax
jg 0x4f5e52
cmp eax, 1
jle 0x4f5e70
cmp byte [edx + eax - 1], 0x41
jg 0x4f5e74
dec eax
cmp eax, 1
jg 0x4f5e63
test eax, eax
jle 0x4f5e8a
mov ecx, dword [ecx + 8]
push eax
push edx
push 0
push eax
push edi
mov edx, 0x5f
call fcn.0048e8d0
add esp, 0x14
mov eax, dword [esp + 0x20]
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4f5ea1
cmp dword [esp + 0x2c], eax
je 0x4f61f3
mov edx, dword [esp + 0x48]
test edx, edx
je 0x4f5f2d
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f5efe
push 0
push edx
push 1
mov edx, 0x47
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f5f2d
mov dword [esp + 0x2c], edi
test ecx, ecx
je 0x4f5e2f
mov ecx, dword [esi + 0x74]
add edx, edi
cmp dword [esi + 0x78], ecx
jg 0x4f5df1
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f5e20
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 0x34]
test edi, edi
je 0x4f5fca
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4f5f5f
push dword [esp + 0x3c]
mov edx, 0x3f
mov ecx, esi
push dword [esp + 0x48]
push edi
call fcn.0048e530
add esp, 0xc
mov edx, eax
jmp 0x4f5f92
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edi, dword [esp + 0x44]
cmp byte [eax + 0x57], 0
jne 0x4f5fb1
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x24]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
push dword [ebp + 0x18]
mov edx, dword [ebp + 8]
push dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push edi
push dword [ebp + 0xc]
call fcn.004f47c0
add esp, 0x10
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x64]
lea eax, [ecx + eax*2]
mov ecx, dword [esp + 0x40]
mov dl, byte [ecx + eax*2 + 0x58d9fc]
mov ecx, dword [esp + 0x20]
movzx eax, dl
mov byte [esp + 0x13], dl
mov dword [esp + 0x50], eax
test dword [ecx + 0x2c], 0x100000
je 0x4f607c
cmp eax, 0x19
jne 0x4f607c
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 8]
movsx ecx, word [eax]
mov eax, 0x66666667
add ecx, 9
imul ecx
sar edx, 2
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [esi + 0x74]
mov dword [esp + 0x14], edx
cmp dword [esi + 0x78], edx
jg 0x4f6045
push 0
push 0
push edi
mov edx, 0x7b
mov ecx, esi
call fcn.0048e530
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x4f6074
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x7b
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x50]
mov dl, byte [esp + 0x13]
mov edi, dword [esi + 0x74]
cmp dword [esi + 0x78], edi
jg 0x4f60a0
push dword [esp + 0x3c]
mov edx, eax
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x5c]
call fcn.0048e530
add esp, 0xc
mov edi, eax
jmp 0x4f60da
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f60f7
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
mov edi, dword [esp + 0x2c]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x4f60fb
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f61f7
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 2]
cmp dword [esi + 0x78], ecx
jg 0x4f6128
push 0
push edx
push 0
mov edx, 0xb
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f615b
mov edi, dword [esp + 0x2c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov eax, 1
mov edx, dword [esi + 0x74]
cmp eax, edi
sbb eax, eax
and eax, 4
mov al, byte [eax + ecx + 0x58d9fe]
mov byte [esp + 0x13], al
cmp dword [esi + 0x78], edx
jg 0x4f619b
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x5c]
call fcn.0048e530
add esp, 0xc
mov edx, eax
jmp 0x4f61d8
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x13]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f61f3
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
sub edi, dword [esp + 0x6c]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x24]
mov edi, edx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], edi
test ecx, ecx
je 0x4f63c1
cmp dword [esp + 0x14], 0
mov eax, dword [ecx]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x6c], ecx
je 0x4f6226
mov edi, dword [ebp + 0x10]
mov eax, dword [esi + 0x74]
mov dword [edi + 0x40], eax
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
movzx eax, ax
add edi, edx
push eax
mov edx, ecx
mov dword [esp + 0x68], edi
mov ecx, dword [esp + 0x10]
push edi
call fcn.004f42f0
mov eax, dword [esp + 0x20]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x4f629a
mov eax, dword [esi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
shl ecx, 2
cmp byte [eax + 0x57], 0
je 0x4f6273
mov ecx, 0x5c2504
mov edx, 0x5c24fa
jmp 0x4f627e
mov eax, dword [esi + 0x70]
add eax, ecx
lea ecx, [eax - 8]
lea edx, [eax - 0x12]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [edx], ax
mov eax, dword [esp + 0x18]
test byte [eax + 0xa], 0x80
jne 0x4f62fc
mov ecx, dword [esp + 0x6c]
call fcn.004a80b0
test eax, eax
je 0x4f62fc
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f62cd
push 0
push dword [esp + 0x48]
mov edx, 0x32
mov ecx, esi
push edi
call fcn.0048e530
add esp, 0xc
jmp 0x4f62fc
mov edx, dword [esp + 0x44]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x4f6377
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x6c]
push edi
movzx edx, ax
call fcn.004f32e0
mov ecx, dword [esp + 0x10]
add esp, 4
mov eax, dword [esp + 0x38]
movzx edx, ax
mov eax, edx
mov ecx, dword [ecx + 8]
mov dword [esp + 0x50], ecx
test edx, edx
je 0x4f6348
mov ecx, dword [esp + 0x64]
cmp byte [edi], 0x41
jg 0x4f6340
dec eax
inc ecx
inc edi
test eax, eax
jg 0x4f6334
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x50]
cmp eax, 1
jle 0x4f635d
nop dword [eax]
cmp byte [eax + edi - 1], 0x41
jg 0x4f6361
dec eax
cmp eax, 1
jg 0x4f6350
test eax, eax
jle 0x4f6377
push eax
push edi
push 0
push eax
push dword [esp + 0x74]
mov edx, 0x5f
call fcn.0048e8d0
add esp, 0x14
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x28]
movzx eax, cx
mov ecx, dword [esp + 0x6c]
add edi, eax
mov al, byte [ecx]
cmp al, 0xb0
jne 0x4f6391
mov al, byte [ecx + 2]
cmp al, 0xb1
jne 0x4f639a
mov eax, dword [ecx + 0x14]
jmp 0x4f63a4
cmp al, 0x8a
jne 0x4f63b3
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4f63b3
mov dword [esp + 0x58], 1
jmp 0x4f6428
mov edx, dword [esp + 0x18]
mov ecx, dword [ebp + 0x10]
call fcn.004f3270
jmp 0x4f6428
cmp byte [esp + 0x1f], 0
je 0x4f6428
test eax, eax
jne 0x4f6427
mov edi, dword [esp + 0x3c]
mov ecx, dword [esi + 0x74]
add edi, edx
cmp dword [esi + 0x78], ecx
jg 0x4f63ec
push eax
push edi
push eax
lea edx, [eax + 0x4a]
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f641b
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edi, dword [esp + 0x28]
mov dword [esp + 0x58], 0
inc edi
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4f643b
mov ecx, dword [esp + 0x68]
mov edx, eax
call fcn.00469cc0
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4f644e
mov ecx, dword [esp + 0x68]
mov edx, eax
call fcn.00469cc0
mov ecx, dword [ebp + 0x10]
cmp dword [ecx + 0x40], 0
jne 0x4f645d
mov eax, dword [esi + 0x74]
mov dword [ecx + 0x40], eax
test edi, edi
je 0x4f6577
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f64c0
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 3]
cmp dword [esi + 0x78], ecx
jg 0x4f648d
push 0
push edx
push eax
mov edx, 0x14
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f64c0
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x14
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x40]
mov edx, dword [esi + 0x74]
mov al, byte [eax + ecx*2 + 0x58fde0]
mov byte [esp + 0x1f], al
cmp dword [esi + 0x78], edx
jg 0x4f64f8
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x5c]
call fcn.0048e530
add esp, 0xc
mov edx, eax
jmp 0x4f6535
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x1f]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f654c
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4f6577
mov edx, dword [esi + 0x74]
jns 0x4f655c
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f656b
mov eax, 0x5c24f8
jmp 0x4f6574
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f666a
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 2]
cmp dword [esi + 0x78], ecx
jg 0x4f65a3
push 0
push edx
push eax
mov edx, 0x12
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f65d6
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x12
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x40]
mov edx, dword [esi + 0x74]
mov al, byte [eax + ecx*2 + 0x58fde0]
mov byte [esp + 0x1f], al
cmp dword [esi + 0x78], edx
jg 0x4f660e
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x5c]
call fcn.0048e530
add esp, 0xc
mov edx, eax
jmp 0x4f664b
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x1f]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f666a
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x70]
add eax, edi
mov dword [ecx + 0x10], eax
mov edi, dword [esp + 0x20]
test dword [edi + 0x2c], 0x40000
je 0x4f66c9
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f669a
mov eax, dword [esp + 0x24]
mov edx, 0x7c
push eax
push eax
push dword [esp + 0x5c]
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f66c9
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x24]
mov dword [eax + ecx*4], 0x7c
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
test byte [edi + 0x2c], 0x40
mov eax, dword [ebp + 8]
je 0x4f6742
test byte [eax + 0x2c], 0x20
jne 0x4f6742
mov dword [esp + 0x5c], 1
mov edi, dword [esp + 0x54]
mov edx, dword [esp + 0x30]
mov ecx, dword [ebp + 0x10]
cmp dword [ecx], 0
jne 0x4f6728
mov eax, dword [ebp + 8]
test byte [eax + 0x2c], 0x20
jne 0x4f6707
mov ecx, dword [esp + 0x74]
push eax
push edi
call fcn.004f4530
add esp, 8
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x24]
test ecx, ecx
je 0x4f6725
push dword [esp + 0x9c]
mov edx, dword [esp + 0x34]
call fcn.004f4740
add esp, 4
mov ecx, dword [ebp + 0x10]
mov edx, dword [esp + 0x20]
test dword [edx + 0x2c], 0x1000
je 0x4f6984
mov byte [ecx + 0x39], 0xb6
jmp 0x4f6991
mov ecx, dword [esp + 0x74]
mov edi, dword [ecx + 0xc]
test byte [edi + 0x1c], 0x80
jne 0x4f6771
mov edi, dword [esp + 0x54]
mov edx, ecx
push edi
push dword [esp + 0x34]
mov ecx, eax
call fcn.004f4180
add esp, 8
mov dword [esp + 0x5c], 0
jmp 0x4f66e4
mov edx, dword [esp + 0x30]
xor eax, eax
mov dword [esp + 0x5c], eax
cmp edx, dword [esp + 0x54]
je 0x4f697b
mov edi, dword [edi + 8]
mov dword [esp + 0x5c], eax
test edi, edi
je 0x4f67a4
mov dword [esp + 0x5c], eax
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x4f67a4
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4f6794
movzx ecx, word [edi + 0x32]
cmp ecx, 1
jne 0x4f67d9
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4f67c4
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x4c], eax
jmp 0x4f6818
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0x98]
mov dword [esp + 0x4c], eax
jmp 0x4f6818
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x20]
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x4c], eax
cmp ecx, edx
jg 0x4f6801
mov esi, dword [esp + 0xc]
add eax, ecx
sub edx, ecx
mov dword [esi + 0x20], eax
mov eax, esi
mov esi, dword [esp + 0x34]
mov dword [eax + 0x1c], edx
jmp 0x4f6818
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x4c], edx
mov dword [ecx + 0x2c], eax
movzx eax, word [edi + 0x32]
xor edx, edx
mov dword [esp + 0x58], 0
mov ecx, eax
cmp dx, ax
jae 0x4f68f4
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x14], eax
nop dword [eax]
mov eax, dword [esp + 0x74]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x4f6879
mov eax, dword [edi + 4]
mov esi, dword [esp + 0x58]
movzx eax, word [eax + esi*2]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 4]
mov esi, dword [esp + 0x50]
cmp si, word [eax]
mov esi, dword [esp + 0x34]
je 0x4f68a1
inc ecx
add eax, 2
cmp ecx, edx
jl 0x4f6864
or eax, 0xffffffff
mov ecx, dword [esi + 0x74]
movsx edx, ax
cmp dword [esi + 0x78], ecx
jg 0x4f68a6
push dword [esp + 0x14]
mov ecx, esi
push edx
push dword [esp + 0x5c]
mov edx, 0x5d
call fcn.0048e530
add esp, 0xc
jmp 0x4f68d9
movzx eax, cx
jmp 0x4f687c
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x5d
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x58]
movzx edx, word [edi + 0x32]
inc ecx
inc dword [esp + 0x14]
mov dword [esp + 0x58], ecx
cmp ecx, edx
jl 0x4f6840
mov ecx, edx
mov edx, dword [esi + 0x74]
movzx edi, cx
cmp dword [esi + 0x78], edx
jg 0x4f6921
push dword [esp + 0x4c]
mov edx, 0x1e
mov ecx, esi
push dword [esp + 0x88]
push dword [esp + 0x38]
call fcn.0048e530
add esp, 0xc
mov edx, eax
jmp 0x4f695b
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x84]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x4c]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f66e0
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x4f66e0
mov edi, dword [esp + 0x54]
jmp 0x4f66e8
cmp dword [esp + 0x40], 0
sete al
add al, 4
mov byte [ecx + 0x39], al
mov dword [ecx + 0x3c], edi
mov al, byte [edx + 0x2e]
mov edi, dword [ebp + 0x10]
and al, 1
mov byte [edi + 0x3a], al
test byte [edx + 0x2c], 0xf
jne 0x4f69a9
mov byte [edi + 0x3b], 1
cmp dword [esp + 0x5c], 0
je 0x4f76bc
xor eax, eax
mov dword [esp + 0x74], eax
jmp 0x4f53fe
test edx, 0x2000
je 0x4f760d
mov ecx, dword [esp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x64], 0
mov dword [esp + 0x2c], 0
mov eax, dword [ecx + 0x28]
dec dword [ecx + 0x38]
mov dword [esp + 0x98], eax
inc eax
mov dword [ecx + 0x28], eax
mov eax, dword [ecx + 0x2c]
inc eax
mov dword [esp + 0x18], 0
mov dword [ecx + 0x2c], eax
mov dword [esp + 0x5c], eax
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], 0
mov dword [esp + 0x48], 0
mov edx, dword [eax + 0x10]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x70], edx
mov eax, dword [eax + 0x38]
mov eax, dword [eax]
mov dword [esp + 0x50], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x5c]
mov dword [edi + 0x3c], eax
mov eax, dword [ebp + 8]
mov byte [edi + 0x39], 0x43
mov al, byte [eax + 0x30]
cmp al, 1
jbe 0x4f6baa
mov ecx, dword [esp + 0x68]
movzx eax, al
sub eax, dword [ebp + 0xc]
dec eax
mov dword [esp + 0x78], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x4f6a85
call fcn.0046a0b0
mov ecx, eax
mov dword [esp + 0x54], ecx
jmp 0x4f6a90
call fcn.004699f0
mov ecx, eax
mov dword [esp + 0x54], eax
add esp, 8
test ecx, ecx
jne 0x4f6aa3
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x18]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x78]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [esp + 0x80]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp + 8]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
cmp edx, 1
jl 0x4f6b43
add ecx, 0x50
mov esi, eax
add edi, 0x90
nop dword [eax + eax]
movzx eax, byte [edi]
lea edi, [edi + 0x58]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [esi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [esi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x4f6b00
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0xc]
mov eax, dword [ebp + 8]
test byte [eax + 0x2c], 0x10
jne 0x4f6d06
test byte [edx + 0x1c], 0x80
jne 0x4f6bfd
inc dword [ecx + 0x2c]
lea edi, [esi + 0x74]
mov edx, dword [ecx + 0x2c]
lea eax, [esi + 0x78]
mov ecx, dword [edi]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], eax
cmp dword [eax], ecx
jg 0x4f6bb6
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.0048e530
mov eax, dword [esp + 0x18]
lea ecx, [esi + 0x78]
add esp, 0xc
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4f6d14
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [esp + 0x4c], eax
jmp 0x4f6b4b
lea eax, [ecx + 1]
mov dword [edi], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xc]
lea edi, [esi + 0x74]
lea ecx, [esi + 0x78]
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4f6d14
mov edi, dword [edx + 8]
test edi, edi
je 0x4f6c14
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x4f6c14
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4f6c04
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x2c], eax
inc eax
mov dword [ecx + 0x28], eax
lea eax, [esi + 0x74]
mov ecx, dword [eax]
movzx edx, word [edi + 0x32]
mov dword [esp + 0x24], eax
lea eax, [esi + 0x78]
mov dword [esp + 0x40], eax
cmp dword [eax], ecx
jg 0x4f6c4f
push 0
push edx
push dword [esp + 0x34]
mov edx, 0x74
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f6c82
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x74
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0xc]
mov edx, edi
mov eax, dword [ecx + 8]
mov dword [esp + 0x78], eax
call fcn.004c1120
mov edi, eax
test edi, edi
je 0x4f6be4
mov edx, dword [esp + 0x78]
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
je 0x4f6cd6
push edi
mov edx, 0xfffffff7
call fcn.0048f040
mov eax, dword [esp + 0x10]
lea edi, [esi + 0x74]
add esp, 4
mov dword [esp + 0x24], edi
lea ecx, [esi + 0x78]
mov dword [esp + 0x40], ecx
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4f6d14
mov eax, dword [edx + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x70]
mov dword [eax + ecx*4 - 4], edi
lea edi, [esi + 0x74]
mov byte [eax + ecx*4 - 0x13], 0xf7
lea ecx, [esi + 0x78]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], ecx
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4f6d14
lea edi, [esi + 0x74]
lea ecx, [esi + 0x78]
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], ecx
mov edx, dword [edi]
mov dword [esp + 0x78], edx
cmp dword [ecx], edx
jg 0x4f6d3b
push 0
push dword [esp + 0x60]
mov edx, 0x47
mov ecx, esi
push 0
call fcn.0048e530
add esp, 0xc
mov dword [esp + 0x78], eax
jmp 0x4f6d6d
lea eax, [edx + 1]
mov dword [edi], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x5c]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x64], 1
jle 0x4f6e7a
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x14], ecx
mov eax, dword [edx + 0x70]
mov edx, dword [eax + edi]
add eax, edi
cmp eax, dword [esp + 0x50]
je 0x4f6ddd
mov esi, 0x8006
test word [eax + 0xa], si
mov esi, dword [esp + 0xc]
jne 0x4f6ddd
mov ecx, 0x1fff
test word [eax + 0xc], cx
mov ecx, dword [esp + 0x14]
je 0x4f6ddd
test dword [edx + 4], 0x200000
jne 0x4f6ddd
mov ecx, dword [esp + 0x68]
push 0
push 0
call fcn.004a6c20
mov edx, dword [esp + 0x50]
mov ecx, esi
push eax
call fcn.004a6150
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov dword [esp + 0x48], eax
jmp 0x4f6de1
mov eax, dword [esp + 0x48]
mov edx, dword [ebp + 8]
inc ecx
add edi, 0x30
mov dword [esp + 0x14], ecx
cmp ecx, dword [edx + 0x64]
jl 0x4f6d82
mov esi, dword [esp + 0x34]
test eax, eax
je 0x4f6e7a
mov eax, dword [esp + 0xc]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.0046a0b0
mov edi, eax
add esp, 8
test edi, edi
je 0x4f6e67
push 0x34
push 0
push edi
call fcn.005471c0
or eax, 0xffffffff
mov byte [edi], 0x2c
mov word [edi + 0x22], ax
add esp, 0xc
mov eax, dword [esp + 0x48]
mov ecx, edi
mov dword [edi + 0x10], eax
mov eax, dword [eax + 4]
and eax, 0x200104
or dword [edi + 4], eax
call fcn.004a5d50
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp dword [edi + 0x18], eax
jle 0x4f6e76
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.0046d2a0
add esp, 0xc
jmp 0x4f6e76
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x48]
mov ecx, dword [eax]
call fcn.004a6930
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0xc]
push str.MULTI_INDEX_OR
push 1
push edi
call fcn.0048eb30
mov edx, dword [esp + 0x64]
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x38], ecx
cmp dword [edx + 0xc], ecx
jle 0x4f6f2c
mov dword [esp + 0x8c], 1
nop dword [eax]
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [edx + 0x18]
mov edx, dword [esp + 0x30]
cmp dword [eax + 0x14], edx
je 0x4f6ecd
mov edx, 0x400
test word [eax + 0xc], dx
je 0x4f6f1c
mov edx, dword [eax]
mov dword [esp + 0x6c], 0
test edx, edx
je 0x4f6ef3
mov ecx, dword [esp + 0x68]
push 0
push 0
call fcn.004a6c20
mov ecx, dword [esp + 0x40]
add esp, 8
mov edi, eax
jmp 0x4f6ef5
xor edi, edi
mov eax, dword [esp + 0x68]
mov dword [esp + 0x7c], edi
cmp byte [eax + 0x57], 0
je 0x4f6f41
test edi, edi
je 0x4f74bd
mov edx, edi
mov ecx, eax
call fcn.004a6930
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x58]
inc ecx
mov dword [esp + 0x38], ecx
mov edx, eax
cmp ecx, dword [eax + 0xc]
jl 0x4f6eb0
mov ecx, dword [edi + 0xdc]
test ecx, ecx
jne 0x4f74c6
xor eax, eax
jmp 0x4f74ec
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f6f4e
mov dword [eax + 0xc], edi
mov edi, eax
lea eax, [ecx + 1]
push eax
push str.INDEX__d
push 1
push dword [esp + 0x18]
call fcn.0048eb30
push dword [esp + 0xa8]
mov edx, dword [esp + 0x60]
push 0x20
push 0
push 0
push 0
push edi
mov edi, dword [esp + 0x34]
mov ecx, edi
call fcn.00502210
add esp, 0x28
mov dword [esp + 0x60], eax
test eax, eax
je 0x4f74a1
mov edx, dword [esp + 0x4c]
lea ecx, [eax + 0x300]
push 0
push ecx
mov ecx, edi
call fcn.004f2c90
mov eax, dword [ebp + 8]
add esp, 8
test byte [eax + 0x2c], 0x10
jne 0x4f7351
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x38]
mov eax, dword [eax + 0xc]
dec eax
cmp ecx, eax
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x14], ecx
test byte [eax + 0x1c], 0x80
jne 0x4f70c4
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
mov ecx, dword [edx]
cmp dword [eax], ecx
jg 0x4f7005
push 0
push dword [esp + 0x1c]
mov edx, 0x86
mov ecx, esi
push dword [esp + 0x38]
call fcn.0048e530
add esp, 0xc
jmp 0x4f7037
lea eax, [ecx + 1]
mov dword [edx], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
mov edx, dword [ecx]
mov dword [esp + 0x6c], edx
cmp dword [eax], edx
jg 0x4f706a
push dword [esp + 0x18]
mov edx, 0x2e
mov ecx, esi
push 0
push dword [esp + 0x34]
call fcn.0048e530
mov edx, eax
add esp, 0xc
mov dword [esp + 0x6c], edx
jmp 0x4f70a0
mov edi, dword [esp + 0x2c]
lea eax, [edx + 1]
mov dword [ecx], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x2e
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f7351
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x14]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x4f7351
mov ecx, eax
call fcn.004b8ed0
mov dword [esp + 0x88], eax
movzx ecx, word [eax + 0x32]
mov eax, ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x44], eax
cmp eax, 1
jne 0x4f7111
mov al, byte [edi + 0x13]
test al, al
jne 0x4f70fa
inc dword [edi + 0x2c]
mov edx, dword [edi + 0x2c]
xor edi, edi
mov dword [esp + 0x3c], edx
jmp 0x4f7150
dec al
mov byte [edi + 0x13], al
movzx eax, al
mov edx, dword [edi + eax*4 + 0x98]
xor edi, edi
mov dword [esp + 0x3c], edx
jmp 0x4f7150
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi + 0x20]
mov dword [esp + 0x3c], edx
cmp eax, ecx
jg 0x4f712f
add eax, edx
mov dword [edi + 0x20], eax
mov eax, dword [esp + 0x44]
sub ecx, eax
mov dword [edi + 0x1c], ecx
jmp 0x4f7144
mov eax, dword [edi + 0x2c]
lea edx, [eax + 1]
add eax, dword [esp + 0x44]
mov dword [edi + 0x2c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x3c], edx
xor ecx, ecx
xor edi, edi
cmp cx, word [esp + 0x20]
jae 0x4f7182
nop
lea eax, [edi + edx]
mov ecx, esi
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x8c]
mov eax, dword [eax + 4]
movsx eax, word [eax + edi*2]
push eax
push dword [esp + 0x38]
call fcn.004ab120
mov eax, dword [esp + 0x50]
inc edi
mov edx, dword [esp + 0x48]
add esp, 0xc
cmp edi, eax
jl 0x4f7150
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4f7215
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
mov edi, dword [ecx]
mov dword [esp + 0x6c], edi
cmp dword [eax], edi
jg 0x4f71be
push edx
push 0
push dword [esp + 0x34]
mov edx, 0x1f
mov ecx, esi
call fcn.0048e530
mov edi, eax
add esp, 0xc
mov dword [esp + 0x6c], edi
jmp 0x4f71f0
lea eax, [edi + 1]
mov dword [ecx], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f720b
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
mov edi, dword [esp + 0x44]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x14]
test ecx, ecx
mov eax, dword [esp + 0x44]
js 0x4f7310
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x40]
mov ecx, dword [edi]
cmp dword [edx], ecx
mov edx, dword [esp + 0x3c]
jg 0x4f7244
push dword [esp + 0x18]
mov ecx, esi
push eax
push edx
mov edx, 0x60
call fcn.0048e530
add esp, 0xc
jmp 0x4f7276
lea eax, [ecx + 1]
mov dword [edi], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov edi, dword [esp + 0x44]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x24]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x40]
mov edx, dword [edi]
cmp dword [eax], edx
jg 0x4f72a0
mov edi, dword [esp + 0x3c]
mov edx, 0x89
push edi
push dword [esp + 0x1c]
mov ecx, esi
push dword [esp + 0x34]
call fcn.0048e530
add esp, 0xc
mov edx, eax
jmp 0x4f72d2
lea eax, [edx + 1]
mov dword [edi], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4f72ed
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x44]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
cmp dword [esp + 0x14], 0
je 0x4f7314
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
test eax, eax
jle 0x4f7314
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x4f7314
mov edi, dword [esp + 0x3c]
cmp word [esp + 0x20], 1
jne 0x4f733c
test edi, edi
je 0x4f737e
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4f7384
movzx eax, al
mov dword [ecx + eax*4 + 0x98], edi
mov edi, ecx
inc byte [edi + 0x13]
jmp 0x4f7351
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x44]
cmp ecx, dword [eax + 0x1c]
jle 0x4f734f
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], edi
mov edi, eax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
mov ecx, dword [edx]
cmp dword [eax], ecx
jg 0x4f7388
push 0
push dword [esp + 0x58]
mov edx, 0xc
mov ecx, esi
push dword [esp + 0x64]
call fcn.0048e530
mov edx, dword [esp + 0x30]
add esp, 0xc
jmp 0x4f73be
mov edi, dword [esp + 0xc]
jmp 0x4f7351
mov edi, ecx
jmp 0x4f7351
mov edi, dword [esp + 0x5c]
lea eax, [ecx + 1]
mov dword [edx], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x4f73e8
mov edx, dword [edx]
jns 0x4f73cd
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f73dc
mov eax, 0x5c24f8
jmp 0x4f73e5
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x28]
mov edx, dword [eax + 0x34]
test dl, 2
cmovne ecx, dword [esp + 0x8c]
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 0x34c]
test dword [ecx + 0x2c], 0x200
je 0x4f744c
cmp dword [esp + 0x38], 0
je 0x4f7425
mov edi, dword [esp + 0x64]
cmp dword [ecx + 0x20], edi
mov edi, dword [esp + 0xc]
jne 0x4f744c
mov esi, dword [esp + 0x70]
test byte [esi + 0x1c], 0x80
mov esi, dword [esp + 0x34]
je 0x4f7443
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
mov eax, dword [esp + 0x60]
je 0x4f744c
mov ecx, dword [ecx + 0x20]
mov dword [esp + 0x64], ecx
jmp 0x4f7454
mov dword [esp + 0x64], 0
test dl, 1
je 0x4f7460
mov ecx, dword [ebp + 8]
or dword [ecx + 0x34], 1
mov ecx, eax
call fcn.00502e60
mov ecx, dword [edi + 0xdc]
test ecx, ecx
jne 0x4f7475
xor eax, eax
jmp 0x4f749b
mov edx, dword [edi + 8]
test ecx, ecx
jns 0x4f7480
mov ecx, dword [edx + 0x74]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4f748f
mov eax, 0x5c24f8
jmp 0x4f7498
mov eax, dword [edx + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [edi + 0xdc], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4f6f18
mov ecx, dword [esp + 0x68]
mov edx, eax
call fcn.004a6930
jmp 0x4f6f18
mov edi, dword [esp + 0xc]
jmp 0x4f6f1c
mov edx, dword [edi + 8]
test ecx, ecx
jns 0x4f74d1
mov ecx, dword [edx + 0x74]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4f74e0
mov eax, 0x5c24f8
jmp 0x4f74e9
mov eax, dword [edx + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [edi + 0xdc], eax
mov edi, dword [ebp + 0x10]
mov eax, dword [esp + 0x64]
mov dword [edi + 0x44], eax
test eax, eax
je 0x4f750a
mov eax, dword [esp + 0x98]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4f7524
mov ecx, dword [esp + 0x68]
mov edx, eax
mov dword [eax + 0xc], 0
call fcn.004a6930
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x78]
mov edx, dword [eax]
test ecx, ecx
jns 0x4f7535
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4f7544
mov eax, 0x5c24f8
jmp 0x4f754d
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov eax, dword [esp + 0x24]
mov edx, dword [edi + 0xc]
mov ecx, dword [eax]
mov eax, dword [esp + 0x40]
cmp dword [eax], ecx
jg 0x4f7577
push 0
push edx
push 0
mov edx, 0xb
mov ecx, esi
call fcn.0048e530
add esp, 0xc
jmp 0x4f75ac
mov edi, dword [esp + 0x24]
lea eax, [ecx + 1]
lea ecx, [ecx + ecx*4]
mov dword [edi], eax
mov eax, dword [esi + 0x70]
mov edi, dword [ebp + 0x10]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x54]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4f75ca
push edx
mov edx, esi
call fcn.0048ed50
add esp, 4
jmp 0x4f75d6
mov eax, dword [esp + 0x24]
mov ecx, dword [ecx + 0x40]
mov eax, dword [eax]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp + 8]
cmp byte [eax + 0x30], 1
jbe 0x4f75f2
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4f75f2
mov ecx, dword [esp + 0x68]
mov edx, eax
call fcn.00469cc0
cmp dword [esp + 0x28], 0
jne 0x4f53fc
mov edx, dword [esp + 0x50]
mov ecx, edi
call fcn.004f3270
jmp 0x4f53fc
mov eax, dword [esp + 0x80]
test byte [eax + 0x28], 0x20
jne 0x4f53f5
mov edx, dword [esp + 0x40]
mov ecx, dword [ebp + 0x10]
movzx eax, byte [edx + 0x58aa74]
mov byte [ecx + 0x39], al
mov eax, dword [esp + 0x30]
mov dword [ecx + 0x3c], eax
mov al, byte [edx + 0x58c064]
mov edx, dword [esi + 0x74]
mov byte [esp + 0x1f], al
cmp dword [esi + 0x78], edx
jg 0x4f7670
push 0
push edi
push dword [esp + 0x38]
movzx edx, al
mov ecx, esi
call fcn.0048e530
mov ecx, dword [ebp + 0x10]
mov edx, eax
add esp, 0xc
lea eax, [edx + 1]
mov byte [ecx + 0x3b], 1
mov dword [ecx + 0x40], eax
jmp 0x4f53fc
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x1f]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
lea eax, [edx + 1]
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 0x40], eax
mov byte [ecx + 0x3b], 1
jmp 0x4f53fc
mov eax, dword [esp + 0x74]
jmp 0x4f53fe
mov eax, dword [esp + 0x80]
mov ecx, dword [edi]
mov dword [esp + 0x88], ecx
test byte [eax + 0x24], 8
je 0x4f76e5
test byte [ecx + 4], 1
je 0x4f788a
cmp dword [esp + 0x58], 1
jne 0x4f7770
mov eax, dword [ebp + 0x10]
xorps xmm0, xmm0
mov dword [esp + 0xa0], 0
movlpd qword [esp + 0xa8], xmm0
movlpd qword [esp + 0xb0], xmm0
mov eax, dword [eax + 4]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x90], eax
lea eax, [esp + 0x90]
mov dword [esp + 0xa4], 0x4af1f0
mov dword [esp + 0xb8], eax
test ecx, ecx
je 0x4f7757
mov edx, ecx
lea ecx, [esp + 0xa0]
call fcn.004a1fe0
mov edx, dword [esp + 0x14]
cmp word [esp + 0xb4], 0
je 0x4f777e
mov edx, 2
mov dword [esp + 0x14], edx
jmp 0x4f788a
cmp dword [esp + 0x58], 3
mov eax, dword [esp + 0x7c]
movzx ecx, ax
jge 0x4f77a4
movzx eax, word [edi + 0xa]
mov ecx, eax
test eax, 0x1000
je 0x4f77a4
mov ecx, dword [ebp + 8]
test edx, edx
jne 0x4f788d
mov edx, 3
mov dword [esp + 0x14], edx
jmp 0x4f788d
test ecx, 0x200
je 0x4f7837
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x4f7837
mov edx, dword [esi + 0x74]
mov ecx, eax
and eax, 1
shr ecx, 1
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x28], edx
lea eax, [eax*2 + 0x12]
mov dword [esp + 0x7c], eax
cmp dword [esi + 0x78], edx
jg 0x4f77f6
push 0
push 0
push ecx
mov edx, eax
mov ecx, esi
call fcn.0048e530
add esp, 0xc
mov dword [esp + 0x28], eax
jmp 0x4f7837
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x7c]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x8c]
mov dword [eax + 4], ecx
push 0x10
push dword [esp + 0x88]
push dword [esp + 0x90]
push dword [esp + 0x18]
call fcn.004ae410
mov ecx, dword [esp + 0x38]
add esp, 0x10
test ecx, ecx
je 0x4f7881
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4f786d
mov eax, 0x5c24f8
jmp 0x4f787e
test ecx, ecx
lea eax, [edx - 1]
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [edi + 0xa], 4
mov edx, dword [esp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x50]
add edi, 0x30
dec eax
mov dword [esp + 0x50], eax
test eax, eax
jg 0x4f5430
mov dword [esp + 0x58], edx
test edx, edx
jg 0x4f5410
mov edx, dword [ecx + 0x6c]
mov eax, dword [ecx + 0x70]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x5c], edx
test edx, edx
jle 0x4f79da
mov esi, eax
test byte [esi + 0xa], 6
jne 0x4f79c6
movzx eax, word [esi + 0xc]
mov edi, 0xb
test al, 0x82
setne cl
bt ax, di
setb al
test al, cl
je 0x4f79c6
mov ecx, dword [esp + 0x30]
cmp dword [esi + 0x14], ecx
jne 0x4f79c6
mov eax, dword [esp + 0x80]
test byte [eax + 0x24], 8
jne 0x4f79c6
mov eax, dword [esi]
mov edx, ecx
mov ecx, dword [esp + 0x9c]
push 0
push 0x83
push dword [ebp + 0x18]
mov dword [esp + 0x88], eax
push dword [ebp + 0x14]
push dword [esi + 0x18]
call fcn.004fb600
mov edi, eax
add esp, 0x14
test edi, edi
je 0x4f79c2
test byte [edi + 0xa], 4
jne 0x4f79c2
test byte [edi + 0xc], 1
je 0x4f7960
mov eax, dword [edi]
test dword [eax + 4], 0x800
je 0x4f7960
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4f79c2
mov eax, dword [edi]
push 0x10
push dword [esp + 0x88]
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xa8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esp + 0xb8], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esp + 0xc8], xmm0
mov eax, dword [eax + 0x30]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x84]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xa8]
push eax
push dword [esp + 0x18]
call fcn.004ae410
add esp, 0x10
or word [edi + 0xa], 4
mov edx, dword [esp + 0x5c]
dec edx
add esi, 0x30
mov dword [esp + 0x5c], edx
test edx, edx
jg 0x4f78c5
mov esi, dword [esp + 0x34]
mov edx, dword [ebp + 0x10]
mov edi, dword [edx]
test edi, edi
je 0x4f7a91
mov eax, dword [esi + 0x74]
mov dword [edx + 0x1c], eax
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4f7a0e
push 0
push edi
push 1
mov edx, 0x47
mov ecx, esi
call fcn.0048e530
mov edx, dword [ebp + 0x10]
add esp, 0xc
jmp 0x4f7a3d
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 8]
xor edi, edi
mov esi, dword [eax + 0x70]
cmp dword [eax + 0x6c], edi
jle 0x4f7a91
nop word [eax + eax]
test byte [esi + 0xa], 6
jne 0x4f7a82
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [edx + 0x50]
and eax, dword [edx + 0x54]
or ecx, eax
jne 0x4f7a82
push 0x10
push dword [esp + 0x88]
push dword [esi]
push dword [esp + 0x18]
call fcn.004ae410
add esp, 0x10
or word [esi + 0xa], 4
mov edx, dword [ebp + 8]
inc edi
add esi, 0x30
cmp edi, dword [edx + 0x6c]
mov edx, dword [ebp + 0x10]
jl 0x4f7a50
mov ecx, dword [ebp + 0x10]
pop edi
pop esi
mov eax, dword [ecx + 0x50]
mov edx, dword [ecx + 0x54]
mov esp, ebp
pop ebp
ret