Function at 0x4f1000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb0]
cmp eax, dword [ecx + 8]
jbe 0x4f24ee
sub esp, 0x130
xor eax, eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x48], 0
xor ecx, ecx
mov byte [eax + 0x7c], cl
xor ecx, ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jge 0x4f11fb
mov edx, 1
mov byte [eax + 0x7d], dl
mov esi, ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jge 0x4f109c
mov ebp, dword [esp + 0x13c]
cmp ecx, ebp
jae 0x4f24e7
mov ebp, dword [esp + 0x138]
add ebp, ecx
movzx ebx, byte [ebp]
cmp bl, 0x25
je 0x4f109c
inc ecx
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jl 0x4f1072
cmp ecx, esi
jle 0x4f11ef
mov ebp, eax
cmp eax, 0
je 0x4f24e0
mov dword [esp + 0x28], ecx
mov ebx, dword [esp + 0x13c]
cmp ecx, ebx
ja 0x4f24d9
cmp esi, ecx
ja 0x4f24d9
sub ecx, esi
mov eax, dword [esp + 0x138]
cmp ecx, 0
je 0x4f10da
add eax, esi
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov ebx, ebp
mov dword [esp + 0x68], ebp
cmp ebp, 0
je 0x4f24d1
mov esi, dword [ebp]
mov ebp, dword [ebp + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [ebx + 8]
mov dword [esp + 0x10c], esi
mov edx, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xc4]
mov edi, edx
add edi, ebx
cmp edi, eax
jbe 0x4f1170
mov dword [esp], 0x5bd4c0
mov dword [esp + 0x100], esi
mov dword [esp + 4], esi
mov dword [esp + 0x104], edx
mov dword [esp + 8], edx
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x10], edi
call fcn.0043b7e0
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp edi, eax
ja 0x4f24ca
mov dword [esp + 0x104], edi
mov eax, dword [esp + 0xc4]
mov ebx, dword [esp + 0x110]
mov ebp, esi
mov dword [esp + 0x100], esi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004529b0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f24ae
mov dword [ebx], ebp
mov ebp, dword [esp + 0x2c]
cmp ecx, ebp
jl 0x4f1a20
movzx ebx, byte [eax + 0x7c]
cmp bl, 0
jne 0x4f167a
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jge 0x4f167a
mov ebx, eax
add ebx, 0x20
cmp ebx, 0
je 0x4f1a19
add ebx, 4
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov byte [ebx + 8], 0
mov ebx, 0x5ef707
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], 9
mov dword [esp + 0x64], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0xb4]
mov edx, esi
add edx, ebx
cmp edx, eax
jbe 0x4f12d0
mov dword [esp], 0x5bd4c0
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10], edx
call fcn.0043b7e0
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp edx, eax
ja 0x4f1a12
mov dword [esp + 0x110], edx
mov eax, dword [esp + 0xb4]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004529b0
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x6cfdd8], 0
jne 0x4f1a01
mov dword [ebx], ebp
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
cmp eax, ecx
ja 0x4f19fa
mov ebp, ecx
sub ebp, eax
sub edx, eax
mov ecx, dword [esp + 0x140]
cmp edx, 0
je 0x4f1375
imul eax, eax, 8
add ecx, eax
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], ebp
mov dword [esp + 0x12c], edx
mov dword [esp + 0x120], edx
xor eax, eax
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x118], ecx
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
jge 0x4f1642
mov dword [esp + 0x78], ecx
cmp ecx, 0
je 0x4f19f3
mov edx, dword [ecx]
mov ebp, dword [ecx + 4]
mov dword [esp + 0x34], eax
mov dword [esp + 0xe8], edx
mov dword [esp + 0xf8], edx
mov dword [esp + 0xec], ebp
mov dword [esp + 0xfc], ebp
cmp eax, 0
jle 0x4f1503
mov eax, dword [esp + 0x134]
cmp eax, 0
je 0x4f19ec
mov ebx, 0x5ee546
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], 2
mov dword [esp + 0x6c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xbc]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f148f
mov dword [esp], 0x5bd4c0
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b7e0
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x4f19e5
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0xbc]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xb8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004529b0
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f19d4
mov dword [ebx], ebp
mov ebx, dword [esp + 0xf8]
cmp ebx, 0
jne 0x4f1710
mov eax, dword [esp + 0x134]
cmp eax, 0
je 0x4f1709
mov ebx, 0x5eeb69
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 5
mov dword [esp + 0x60], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0xa4]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f15b6
mov dword [esp], 0x5bd4c0
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b7e0
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp ecx, eax
ja 0x4f1702
mov dword [esp + 0x110], ecx
mov eax, dword [esp + 0xa4]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xa0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004529b0
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x6cfdd8], 0
jne 0x4f16f1
mov dword [ebx], ebp
mov ecx, dword [esp + 0x78]
add ecx, 8
mov eax, dword [esp + 0x34]
inc eax
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
jl 0x4f13b1
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4f16ea
mov byte [esp + 0x26], 0x29
mov dword [esp + 0x70], ebx
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov ebp, eax
inc ebp
cmp ebp, edx
ja 0x4f1681
mov dword [ebx + 4], ebp
mov ebx, ecx
add ebx, eax
movzx ebp, byte [esp + 0x26]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
add esp, 0x130
ret
mov dword [esp], 0x5bd4c0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043b7e0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x70]
cmp ebx, 0
je 0x4f16e6
mov ebp, eax
mov dword [esp + 0x40], eax
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], edx
mov dword [esp + 0x7c], ecx
cmp byte [0x6cfdd8], 0
jne 0x4f16d0
mov dword [ebx], ecx
jmp 0x4f166d
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0040e740
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x40]
jmp 0x4f166d
mov dword [ebx], eax
jmp 0x4f16b2
mov dword [ebx], eax
jmp 0x4f1652
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
jmp 0x4f162a
call fcn.00427c60
ud2
mov dword [eax], eax
jmp 0x4f1523
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4f19cd
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 0xd0], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 0xd4], ebx
xor ebx, ebx
xor ebx, ebx
lea ebx, [esp + 0xd0]
cmp ebx, 0
je 0x4f19c6
mov eax, dword [ebx]
mov ebp, dword [ebx + 4]
mov dword [esp + 0xdc], ebp
mov dword [esp + 0xd8], eax
xor ebx, ebx
xor ebp, ebp
cmp eax, ebp
jne 0x4f19ba
xor eax, eax
mov ecx, eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0xe4], ecx
mov dword [esp], ecx
mov dword [esp + 0xe0], eax
mov ebx, dword [eax + 0x84]
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov ebx, dword [esp + 0x50]
cmp ebx, 0
je 0x4f19b3
mov edi, dword [ebx]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [ebx + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0x94]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f1847
mov dword [esp], 0x5bd4c0
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b7e0
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x4f19ac
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0x94]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0x90]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004529b0
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f199b
mov dword [ebx], ebp
mov ebx, dword [esp + 0x134]
cmp ebx, 0
je 0x4f1994
mov byte [esp + 0x24], 0x3d
mov dword [esp + 0x58], ebx
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov ebp, eax
inc ebp
cmp ebp, edx
ja 0x4f1925
mov dword [ebx + 4], ebp
mov ebx, ecx
add ebx, eax
movzx ebp, byte [esp + 0x24]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov ebx, dword [esp + 0x134]
mov dword [esp], ebx
mov ebx, dword [esp + 0xf8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x76
call fcn.004ec8d0
jmp 0x4f162a
mov dword [esp], 0x5bd4c0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0043b7e0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x58]
cmp ebx, 0
je 0x4f1990
mov ebp, eax
mov dword [esp + 0x40], eax
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], edx
mov dword [esp + 0x7c], ecx
cmp byte [0x6cfdd8], 0
jne 0x4f1977
mov dword [ebx], ecx
jmp 0x4f18e6
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0040e740
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x40]
jmp 0x4f18e6
mov dword [ebx], eax
jmp 0x4f1956
mov dword [ebx], eax
jmp 0x4f18cb
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
jmp 0x4f18bb
call fcn.00427c60
ud2
mov dword [ebx], eax
jmp 0x4f17cf
mov ecx, eax
mov eax, 0x6aaea0
jmp 0x4f1777
mov dword [ebx], eax
jmp 0x4f1754
mov dword [ebx], eax
jmp 0x4f1720
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
jmp 0x4f1503
call fcn.00427c60
ud2
mov dword [eax], eax
jmp 0x4f13fc
mov dword [ecx], eax
jmp 0x4f13be
call fcn.00427c60
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
jmp 0x4f1344
call fcn.00427c60
ud2
mov dword [ebx], eax
jmp 0x4f1229
mov esi, ecx
inc esi
mov ebx, eax
cmp eax, 0
je 0x4f24a7
add ebx, 0x20
cmp ebx, 0
je 0x4f24a0
add ebx, 4
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov byte [ebx + 8], 0
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jge 0x4f1a9b
mov dword [esp + 0x28], esi
mov ebp, dword [esp + 0x13c]
cmp esi, ebp
jae 0x4f2499
mov ebp, dword [esp + 0x138]
add ebp, esi
movzx ebx, byte [ebp]
mov edx, ebx
cmp bl, 0x23
ja 0x4f244d
cmp bl, 0x20
jne 0x4f2396
mov ecx, 1
mov byte [eax + 0x29], cl
inc esi
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jl 0x4f1a56
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.004f0a60
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x48], esi
mov eax, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov byte [esp + 0x27], bl
cmp eax, edi
jge 0x4f2335
mov ebp, dword [esp + 0x13c]
cmp eax, ebp
jae 0x4f238f
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x2a
jne 0x4f2335
mov ebx, eax
inc ebx
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x148]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
call fcn.004f0730
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x30], ecx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x24], bl
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
movzx ebx, byte [eax + 0x24]
cmp bl, 0
jne 0x4f1c89
mov ebx, 0x5f02cd
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], 0xc
mov dword [esp + 0x4c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xac]
mov edx, esi
add edx, ebx
cmp edx, eax
jbe 0x4f1c0a
mov dword [esp], 0x5bd4c0
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10], edx
call fcn.0043b7e0
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp edx, eax
ja 0x4f232e
mov dword [esp + 0x104], edx
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xa8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004529b0
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f2312
mov dword [ebx], ebp
mov ebp, dword [eax + 0x30]
cmp ebp, 0
jge 0x4f1ca6
mov ecx, dword [eax + 0x30]
neg ecx
mov dword [eax + 0x30], ecx
mov ecx, 1
mov byte [eax + 0x26], cl
xor ecx, ecx
mov byte [eax + 0x2a], cl
xor ecx, ecx
mov edx, esi
inc edx
mov ebx, dword [esp + 0x2c]
cmp edx, ebx
jge 0x4f1eeb
mov ebp, dword [esp + 0x13c]
cmp esi, ebp
jae 0x4f230b
mov ebp, dword [esp + 0x138]
add ebp, esi
movzx ebx, byte [ebp]
cmp bl, 0x2e
jne 0x4f1eeb
mov edx, esi
inc edx
cmp cl, 0
je 0x4f1ce9
xor ecx, ecx
mov byte [eax + 0x7d], cl
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.004f0a60
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x138]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x48], esi
mov eax, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov byte [esp + 0x27], bl
cmp eax, edi
jge 0x4f22ab
mov ebp, dword [esp + 0x13c]
cmp eax, ebp
jae 0x4f2304
mov ebp, edx
add ebp, eax
movzx ebx, byte [ebp]
cmp bl, 0x2a
jne 0x4f22ab
mov ebx, eax
inc ebx
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp], ebx
mov ebx, dword [esp + 0x144]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x148]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
call fcn.004f0730
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x34], ecx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x25], bl
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
mov ebp, dword [eax + 0x34]
cmp ebp, 0
jge 0x4f1dca
xor ecx, ecx
mov dword [eax + 0x34], ecx
xor ecx, ecx
mov byte [eax + 0x25], cl
movzx ebx, byte [eax + 0x25]
cmp bl, 0
jne 0x4f1ee9
mov ebx, 0x5efe56
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], 0xb
mov dword [esp + 0x5c], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x104], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x100], edi
mov esi, dword [esp + 0x104]
mov dword [esp + 0x108], eax
mov ebx, dword [esp + 0x9c]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f1e6a
mov dword [esp], 0x5bd4c0
mov dword [esp + 0x10c], edi
mov dword [esp + 4], edi
mov dword [esp + 0x110], esi
mov dword [esp + 8], esi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b7e0
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
cmp ecx, eax
ja 0x4f22a4
mov dword [esp + 0x110], ecx
mov eax, dword [esp + 0x9c]
mov ebx, dword [esp + 0x104]
mov ebp, edi
mov dword [esp + 0x10c], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004529b0
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x110]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x114]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x10c]
cmp byte [0x6cfdd8], 0
jne 0x4f2288
mov dword [ebx], ebp
xor ecx, ecx
cmp cl, 0
jne 0x4f1f3d
mov ecx, dword [esp + 0x144]
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.004f0a60
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x48], ebx
mov esi, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov ebp, dword [esp + 0x2c]
cmp esi, ebp
jl 0x4f2087
cmp eax, 0
je 0x4f2080
mov ebx, 0x5efa7f
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 0xa
mov dword [esp + 0x74], eax
mov edi, dword [eax]
mov ebp, dword [eax + 4]
mov dword [esp + 0x110], ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x10c], edi
mov esi, dword [esp + 0x110]
mov dword [esp + 0x114], eax
mov ebx, dword [esp + 0xcc]
mov ecx, esi
add ecx, ebx
cmp ecx, eax
jbe 0x4f1fe5
mov dword [esp], 0x5bd4c0
mov dword [esp + 0x100], edi
mov dword [esp + 4], edi
mov dword [esp + 0x104], esi
mov dword [esp + 8], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x10], ecx
call fcn.0043b7e0
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x108], eax
cmp ecx, eax
ja 0x4f2079
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0xcc]
mov ebx, dword [esp + 0x110]
mov ebp, edi
mov dword [esp + 0x100], edi
add ebp, ebx
mov dword [esp], ebp
mov ebx, dword [esp + 0xc8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.004529b0
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x104]
mov dword [ebx + 4], ebp
mov ebp, dword [esp + 0x108]
mov dword [ebx + 8], ebp
mov ebp, dword [esp + 0x100]
cmp byte [0x6cfdd8], 0
jne 0x4f2061
mov dword [ebx], ebp
jmp 0x4f11fb
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
mov eax, dword [esp + 0x134]
jmp 0x4f11fb
call fcn.00427c60
ud2
mov dword [eax], eax
jmp 0x4f1f52
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x13c]
cmp esi, eax
ja 0x4f2281
mov edx, eax
sub edx, esi
mov eax, dword [esp + 0x138]
cmp edx, 0
je 0x4f20ac
add eax, esi
mov dword [esp + 0xf0], eax
mov dword [esp], eax
mov dword [esp + 0xf4], edx
mov dword [esp + 4], edx
call fcn.005882a0
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 0x28]
add ebx, ecx
mov ecx, ebx
mov dword [esp + 0x28], ebx
cmp edx, 0x25
jne 0x4f21b5
cmp eax, 0
je 0x4f21ae
mov byte [esp + 0x25], 0x25
mov dword [esp + 0x54], eax
mov edi, dword [eax]
mov edx, dword [eax + 4]
mov ebp, dword [eax + 8]
mov dword [esp + 0x38], ebp
mov ebp, edx
inc ebp
mov esi, dword [esp + 0x38]
cmp ebp, esi
ja 0x4f2128
mov dword [eax + 4], ebp
mov ebx, edi
add ebx, edx
movzx ebp, byte [esp + 0x25]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
jmp 0x4f1054
mov dword [esp], 0x5bd4c0
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.0043b7e0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x54]
cmp ebx, 0
je 0x4f21aa
mov ebp, edx
mov dword [esp + 0x40], edx
inc ebp
mov dword [ebx + 4], ebp
mov dword [ebx + 8], esi
mov dword [esp + 0x7c], edi
cmp byte [0x6cfdd8], 0
jne 0x4f2186
mov dword [ebx], edi
jmp 0x4f2116
mov dword [esp], ebx
mov dword [esp + 4], edi
call fcn.0040e740
mov edi, dword [esp + 0x7c]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f2116
mov dword [ebx], eax
jmp 0x4f2168
mov dword [eax], eax
jmp 0x4f20f3
movzx ebx, byte [eax + 0x7d]
cmp bl, 0
jne 0x4f21da
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004f0b60
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f1054
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jl 0x4f2205
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004f0db0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f1054
cmp edx, 0x76
jne 0x4f222a
movzx ebp, byte [eax + 0x28]
xchg ebp, ebx
mov byte [eax + 0x2c], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x28], cl
movzx ebp, byte [eax + 0x27]
xchg ebp, ebx
mov byte [eax + 0x2b], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x27], cl
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x144]
cmp ebx, ebp
jae 0x4f227a
mov ebp, dword [esp + 0x140]
shl ebx, 3
add ebp, ebx
lea edi, [esp + 4]
cld
mov ecx, dword [ebp]
mov dword [edi], ecx
mov ecx, dword [ebp + 4]
mov dword [edi + 4], ecx
mov dword [esp + 0xc], edx
call fcn.004ec8d0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x48]
inc ebx
mov dword [esp + 0x48], ebx
jmp 0x4f1054
call fcn.00427bf0
ud2
call fcn.00427c60
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f1ee9
call fcn.00427c60
ud2
mov dword [esp], edx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
call fcn.004e93c0
movzx ecx, byte [esp + 0x27]
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0x10]
mov dword [eax + 0x34], edx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x25], bl
mov esi, dword [esp + 0x18]
movzx ebx, byte [eax + 0x25]
cmp bl, 0
jne 0x4f1eeb
xor edx, edx
mov dword [eax + 0x34], edx
mov edx, 1
mov byte [eax + 0x25], dl
jmp 0x4f1eeb
call fcn.00427bf0
ud2
call fcn.00427bf0
ud2
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f1c89
call fcn.00427c60
ud2
mov dword [esp], edx
mov ebx, dword [esp + 0x13c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
call fcn.004e93c0
movzx ecx, byte [esp + 0x27]
mov eax, dword [esp + 0x134]
mov edx, dword [esp + 0x10]
mov dword [eax + 0x30], edx
movzx ebx, byte [esp + 0x14]
mov byte [eax + 0x24], bl
mov esi, dword [esp + 0x18]
cmp cl, 0
je 0x4f1ca8
movzx ebx, byte [eax + 0x24]
cmp bl, 0
je 0x4f1ca8
xor edx, edx
mov byte [eax + 0x7d], dl
jmp 0x4f1ca8
call fcn.00427bf0
ud2
cmp bl, 0x23
jne 0x4f23a8
mov ecx, 1
mov byte [eax + 0x28], cl
jmp 0x4f1a92
cmp dl, 0x61
jb 0x4f1a9b
cmp dl, 0x7a
ja 0x4f1a9b
mov ecx, dword [esp + 0x144]
mov ebx, dword [esp + 0x48]
cmp ebx, ecx
jge 0x4f1a9b
cmp dl, 0x76
jne 0x4f23f2
movzx ebp, byte [eax + 0x28]
xchg ebp, ebx
mov byte [eax + 0x2c], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x28], cl
movzx ebp, byte [eax + 0x27]
xchg ebp, ebx
mov byte [eax + 0x2b], bl
xchg ebp, ebx
xor ecx, ecx
mov byte [eax + 0x27], cl
mov dword [esp], eax
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x144]
cmp ebx, ebp
jae 0x4f2446
mov ebp, dword [esp + 0x140]
shl ebx, 3
add ebp, ebx
lea edi, [esp + 4]
cld
mov ecx, dword [ebp]
mov dword [edi], ecx
mov ecx, dword [ebp + 4]
mov dword [edi + 4], ecx
movzx ebx, dl
mov dword [esp + 0xc], ebx
call fcn.004ec8d0
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x48]
inc ebx
mov dword [esp + 0x48], ebx
mov ecx, dword [esp + 0x28]
inc ecx
jmp 0x4f1054
call fcn.00427bf0
ud2
cmp bl, 0x2b
jne 0x4f245f
mov ecx, 1
mov byte [eax + 0x27], cl
jmp 0x4f1a92
cmp bl, 0x2d
jne 0x4f2476
mov ecx, 1
mov byte [eax + 0x26], cl
xor ecx, ecx
mov byte [eax + 0x2a], cl
jmp 0x4f1a92
cmp bl, 0x30
jne 0x4f23a8
movzx ebx, byte [eax + 0x26]
cmp bl, 0
je 0x4f2492
xor ecx, ecx
mov byte [eax + 0x2a], cl
jmp 0x4f1a92
mov ecx, 1
jmp 0x4f248a
call fcn.00427bf0
ud2
mov dword [ebx], eax
jmp 0x4f1a3a
mov dword [eax], eax
jmp 0x4f1a2e
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040e740
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x134]
jmp 0x4f11ef
call fcn.00427c60
ud2
mov dword [ebp], eax
jmp 0x4f10f7
call fcn.00427c60
ud2
mov dword [eax], eax
jmp 0x4f10af
call fcn.00427bf0
ud2
call fcn.004501c0
jmp fcn.004f1000