Function at 0x4fb5f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc4]
cmp eax, dword [ecx + 8]
jbe 0x4fd4a5
sub esp, 0x144
mov eax, dword [esp + 0x148]
mov dword [esp], eax
mov ecx, dword [esp + 0x14c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x150]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x160]
mov dword [esp + 0xc], edx
mov ebx, dword [esp + 0x164]
mov dword [esp + 0x10], ebx
lea ebp, [esp + 0x168]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x170]
mov dword [esp + 0x18], ebp
mov esi, dword [esp + 0x174]
mov dword [esp + 0x1c], esi
lea edi, [esp + 0x178]
mov dword [esp + 0x20], edi
call fcn.004fb2d0
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x15c]
cmp edx, eax
jle 0x4fc8f6
cmp ebx, ecx
jle 0x4fc8f6
mov ebp, dword [esp + 0x148]
test ebp, ebp
je 0x4fc642
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x118], eax
mov dword [esp + 0x114], ebx
mov dword [esp + 0x110], edx
mov esi, dword [esp + 0x148]
lea edi, [0x7cb720]
cmp esi, edi
jne 0x4fc0e5
mov ebp, dword [esp + 0x180]
test ebp, ebp
jne 0x4fbcab
mov esi, dword [esp + 0x170]
test esi, esi
je 0x4fb9e0
mov edi, dword [esp + 0x170]
lea ebp, [0x7cb510]
cmp edi, ebp
jne 0x4fb71e
mov ebp, dword [esp + 0x174]
jmp 0x4fb723
mov ebp, 0
jne 0x4fb9d4
mov edi, dword [esp + 0x160]
test edi, edi
je 0x4fb9d4
mov edi, dword [esp + 0x160]
lea esi, [0x7cb44c]
cmp edi, esi
jne 0x4fb7a2
mov esi, dword [esp + 0x178]
mov edi, dword [esp + 0x17c]
mov dword [esp + 0x11c], edi
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x20], eax
call fcn.004fe690
add esp, 0x144
ret
mov dword [esp + 0x12c], ebp
lea esi, [0x7cb4bc]
cmp edi, esi
jne 0x4fb83b
mov esi, dword [esp + 0x168]
mov edi, dword [esp + 0x178]
mov dword [esp + 0x11c], edi
mov edi, dword [esp + 0x16c]
mov ebp, dword [esp + 0x17c]
mov dword [esp + 0x118], ebp
mov ebp, dword [esp + 0x14c]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], edi
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x28], eax
call fcn.004fed90
add esp, 0x144
ret
lea esi, [0x7cb3dc]
cmp edi, esi
jne 0x4fb8cd
mov esi, dword [esp + 0x178]
mov dword [esp + 0x11c], esi
mov edi, dword [esp + 0x168]
mov esi, dword [esp + 0x17c]
mov dword [esp + 0x118], esi
mov esi, dword [esp + 0x16c]
mov ebp, dword [esp + 0x14c]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x28], eax
call fcn.004fe950
add esp, 0x144
ret
lea eax, [0x745cc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x160]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x164]
mov dword [esp + 8], edx
call fcn.004092b0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4fb905
mov esi, dword [esp + 0x170]
jmp 0x4fb9d4
lea eax, [0x745cc0]
mov dword [esp], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 4], eax
call fcn.00409200
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x150]
mov ebx, dword [esp + 0x178]
mov dword [esp + 0x11c], ebx
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x16c]
mov dword [esp + 0x118], esi
mov edi, dword [esp + 0x17c]
mov dword [esp + 0x114], edi
mov edi, dword [esp + 0x158]
mov ebx, dword [esp + 0x15c]
mov esi, dword [esp + 0x14c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x118]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 0x2c], eax
call fcn.004ff3b0
add esp, 0x144
ret
mov ebp, dword [esp + 0x180]
jmp 0x4fc024
mov edi, dword [esp + 0x160]
test edi, edi
je 0x4fc024
mov edi, dword [esp + 0x160]
lea ebp, [0x7cb44c]
cmp edi, ebp
jne 0x4fbaee
mov eax, dword [esp + 0x164]
mov ecx, dword [eax]
nop
mov eax, dword [eax + 4]
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 4]
cmp edx, 0xffff
jne 0x4fba8a
mov edx, dword [esp + 0x150]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x158]
mov edi, dword [esp + 0x15c]
mov ecx, dword [esp + 0x14c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0xffff
call fcn.004fd660
jmp 0x4fbae7
mov dword [esp + 0xa8], edx
mov ebp, dword [esp + 0x150]
mov esi, dword [esp + 0x154]
mov edi, dword [esp + 0x158]
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 0x14c]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x20], eax
call fcn.004fd4b0
add esp, 0x144
ret
lea ebp, [0x7cb4bc]
cmp edi, ebp
jne 0x4fbb3f
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fd860
add esp, 0x144
ret
lea ebp, [0x7cb3f8]
cmp edi, ebp
jne 0x4fbb90
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fdcf0
add esp, 0x144
ret
lea ebp, [0x7cb430]
cmp edi, ebp
jne 0x4fbbfd
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fa870
movzx eax, byte [esp + 0x20]
test al, al
jne 0x4fbbf6
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x170]
jmp 0x4fc024
add esp, 0x144
ret
lea ebp, [0x7cb3dc]
cmp edi, ebp
jne 0x4fbc4e
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fe280
add esp, 0x144
ret
lea ebp, [0x7cb484]
cmp edi, ebp
jne 0x4fbc9f
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fe430
add esp, 0x144
ret
mov ebp, dword [esp + 0x180]
jmp 0x4fc024
mov esi, dword [esp + 0x170]
test esi, esi
jne 0x4fc024
mov edi, dword [esp + 0x160]
test edi, edi
je 0x4fc024
mov edi, dword [esp + 0x160]
lea ebp, [0x7cb44c]
cmp edi, ebp
jne 0x4fbd6b
mov eax, dword [esp + 0x164]
mov ecx, dword [eax]
nop
mov eax, dword [eax + 4]
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x15c]
mov ebp, dword [esp + 8]
mov esi, dword [esp + 0xc]
mov dword [esp + 0x4c], esi
mov edi, dword [esp + 0x10]
mov dword [esp + 0xa4], edi
mov edi, dword [esp + 4]
mov esi, dword [esp + 0x14c]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ebp
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x20], eax
call fcn.004fd660
add esp, 0x144
ret
lea ebp, [0x7cb4bc]
cmp edi, ebp
jne 0x4fbebd
nop
mov ebp, dword [esp + 0x168]
mov dword [esp + 0x7c], ebp
mov esi, dword [esp + 0x16c]
mov dword [esp + 0xc4], esi
mov edi, dword [esp + 0x14c]
mov ebx, dword [edi + 4]
mov edx, dword [edi]
mov dword [esp + 0x13c], edx
mov edx, dword [edi + 8]
mov dword [esp + 0x10c], edx
mov edx, dword [edi + 0x14]
sub ecx, edx
mov edx, dword [edi + 0xc]
imul ecx, edx
mov edi, dword [edi + 0x10]
sub eax, edi
lea eax, [ecx + eax*4]
mov edi, dword [esp + 0x164]
mov ecx, edx
mov edx, dword [edi + 0x14]
sub esi, edx
mov edx, dword [edi + 0xc]
mov dword [esp + 0x108], edx
imul esi, edx
mov edx, dword [edi + 0x10]
sub ebp, edx
lea edx, [esi + ebp*4]
cmp ebx, eax
jb 0x4fd49d
mov ebp, dword [esp + 0x10c]
sub ebp, eax
sub ebx, eax
mov dword [esp + 0x10c], ebx
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and eax, ebp
mov ebp, dword [esp + 0x13c]
add ebp, eax
mov eax, esi
mov esi, dword [edi + 4]
mov ebx, dword [edi]
mov edi, dword [edi + 8]
cmp esi, edx
jb 0x4fd494
nop
mov dword [esp], ebp
mov ebp, dword [esp + 0x10c]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x118]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x18], ecx
mov ebp, dword [esp + 0x114]
mov dword [esp + 0x1c], ebp
sub edi, edx
mov ebp, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, edx
add ebx, edi
mov dword [esp + 0x20], ebx
sub esi, edx
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], ebp
mov edx, dword [esp + 0x108]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x34], edx
sub ecx, eax
shl ecx, 2
mov dword [esp + 0x38], ecx
call fcn.004fdbc0
add esp, 0x144
ret
lea ebp, [0x7cb3f8]
cmp edi, ebp
jne 0x4fbf0e
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fe010
add esp, 0x144
ret
lea ebp, [0x7cb430]
cmp edi, ebp
jne 0x4fbf7b
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fa870
movzx eax, byte [esp + 0x20]
test al, al
jne 0x4fbf74
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x170]
jmp 0x4fc024
add esp, 0x144
ret
lea ebp, [0x7cb3dc]
cmp edi, ebp
jne 0x4fbfcc
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fe280
add esp, 0x144
ret
lea ebp, [0x7cb484]
cmp edi, ebp
jne 0x4fc01d
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x14c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x164]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call fcn.004fe430
add esp, 0x144
ret
mov ebp, dword [esp + 0x180]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x178]
mov dword [esp + 0x11c], ecx
mov edx, dword [esp + 0x150]
mov ebx, dword [esp + 0x154]
mov edi, dword [esp + 0x17c]
mov dword [esp + 0x118], edi
mov ebp, dword [esp + 0x16c]
mov edi, dword [esp + 0x158]
mov ecx, dword [esp + 0x15c]
mov esi, dword [esp + 0x14c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x160]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x170]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x180]
mov dword [esp + 0x34], eax
call fcn.004ff870
add esp, 0x144
ret
lea edi, [0x7cb6e0]
cmp esi, edi
jne 0x4fc2cd
mov eax, dword [esp + 0x180]
cmp eax, 1
jne 0x4fc2c1
mov ecx, dword [esp + 0x170]
test ecx, ecx
jne 0x4fc642
mov edx, dword [esp + 0x160]
lea ebx, [0x7cb44c]
cmp edx, ebx
jne 0x4fc12c
mov edx, dword [esp + 0x164]
jmp 0x4fc131
mov edx, 0
jne 0x4fc1a0
mov eax, dword [esp + 0x14c]
mov ecx, dword [eax + 0x20]
mov ebx, dword [eax + 0x24]
mov ebp, dword [eax + 0x28]
mov esi, dword [edx]
mov edx, dword [edx + 4]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.004f10a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x150]
mov ebx, dword [esp + 0x158]
mov ebp, dword [esp + 0x14c]
sub ecx, dword [ebp + 0x14]
imul ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov edi, edx
sub edx, esi
add ecx, edx
sub ebx, edi
mov dword [esp + 0x44], ebx
lea edx, [ecx + ebx]
mov esi, ecx
jmp 0x4fd37d
lea eax, [0x743500]
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.004091a0
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x154]
mov ebx, dword [esp + 0x16c]
mov ebp, dword [esp + 0x158]
mov esi, dword [esp + 0x15c]
mov edi, dword [esp + 8]
mov dword [esp], edi
mov edi, dword [esp + 0x14c]
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x160]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x164]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ebx
call fcn.004fb520
movzx eax, byte [esp + 0x28]
test al, al
je 0x4fc244
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x170]
mov ebp, dword [esp + 0x148]
jmp 0x4fc642
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0x158]
mov esi, dword [esp + 0x15c]
lea edi, [0x7cb6e0]
mov dword [esp], edi
mov edi, dword [esp + 0x14c]
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x160]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
mov byte [esp + 0x28], 0
call fcn.00500630
add esp, 0x144
ret
mov ecx, dword [esp + 0x170]
jmp 0x4fc642
lea edi, [0x7cb6c0]
cmp esi, edi
jne 0x4fc48a
mov esi, dword [esp + 0x180]
cmp esi, 1
jne 0x4fc47e
mov edi, dword [esp + 0x170]
test edi, edi
jne 0x4fc642
mov esi, dword [esp + 0x160]
lea edi, [0x7cb3f8]
cmp esi, edi
jne 0x4fc314
mov esi, dword [esp + 0x164]
jmp 0x4fc319
mov esi, 0
je 0x4fc32e
mov esi, dword [esp + 0x180]
mov edi, dword [esp + 0x170]
jmp 0x4fc642
nop
mov ebp, dword [esp + 0x168]
mov dword [esp + 0x78], ebp
mov edi, dword [esp + 0x16c]
mov ebx, dword [esp + 0x14c]
mov edx, dword [ebx + 4]
mov dword [esp + 0x10c], edx
mov edx, dword [ebx]
mov dword [esp + 0x13c], edx
mov edx, dword [ebx + 8]
mov dword [esp + 0x108], edx
mov edx, dword [ebx + 0x14]
sub ecx, edx
mov edx, dword [ebx + 0xc]
imul ecx, edx
mov ebx, dword [ebx + 0x10]
sub eax, ebx
lea eax, [ecx + eax*4]
mov ebx, dword [esi + 0x14]
mov ecx, edi
sub edi, ebx
mov ebx, dword [esi + 0xc]
mov dword [esp + 0x104], ebx
imul edi, ebx
mov ebx, dword [esi + 0x10]
sub ebp, ebx
lea ebx, [edi + ebp*4]
mov ebp, dword [esp + 0x10c]
cmp ebp, eax
jb 0x4fd36e
mov edi, dword [esp + 0x108]
sub edi, eax
mov dword [esp + 0x10c], edi
sub ebp, eax
mov dword [esp + 0x108], ebp
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and eax, edi
mov edi, dword [esp + 0x13c]
add edi, eax
mov eax, edx
mov edx, dword [esi + 4]
mov ebp, dword [esi]
mov esi, dword [esi + 8]
cmp edx, ebx
jb 0x4fd365
nop
mov dword [esp], edi
mov edi, dword [esp + 0x108]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x10c]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x10], eax
mov edi, dword [esp + 0x11c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x110]
mov dword [esp + 0x18], edi
mov eax, dword [esp + 0x114]
mov dword [esp + 0x1c], eax
sub esi, ebx
mov eax, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebx
add ebp, esi
mov dword [esp + 0x20], ebp
sub edx, ebx
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x118]
sub edi, eax
shl edi, 2
mov dword [esp + 0x38], edi
call fcn.004fdbc0
add esp, 0x144
ret
mov edi, dword [esp + 0x170]
jmp 0x4fc642
lea edi, [0x7cb700]
cmp esi, edi
jne 0x4fc642
mov esi, dword [esp + 0x180]
cmp esi, 1
jne 0x4fc63b
mov edi, dword [esp + 0x170]
test edi, edi
jne 0x4fc642
mov esi, dword [esp + 0x160]
lea edi, [0x7cb468]
cmp esi, edi
jne 0x4fc4d1
mov esi, dword [esp + 0x164]
jmp 0x4fc4d6
mov esi, 0
je 0x4fc4eb
mov esi, dword [esp + 0x180]
mov edi, dword [esp + 0x170]
jmp 0x4fc642
nop
mov ebp, dword [esp + 0x168]
mov dword [esp + 0x74], ebp
mov edi, dword [esp + 0x16c]
mov ebx, dword [esp + 0x14c]
mov edx, dword [ebx + 4]
mov dword [esp + 0x10c], edx
mov edx, dword [ebx]
mov dword [esp + 0x13c], edx
mov edx, dword [ebx + 8]
mov dword [esp + 0x108], edx
mov edx, dword [ebx + 0x14]
sub ecx, edx
mov edx, dword [ebx + 0xc]
imul ecx, edx
mov ebx, dword [ebx + 0x10]
sub eax, ebx
lea eax, [ecx + eax*8]
mov ebx, dword [esi + 0x14]
mov ecx, edi
sub edi, ebx
mov ebx, dword [esi + 0xc]
mov dword [esp + 0x104], ebx
imul edi, ebx
mov ebx, dword [esi + 0x10]
sub ebp, ebx
lea ebx, [edi + ebp*8]
mov ebp, dword [esp + 0x10c]
cmp ebp, eax
jb 0x4fd35e
mov edi, dword [esp + 0x108]
sub edi, eax
mov dword [esp + 0x10c], edi
sub ebp, eax
mov dword [esp + 0x108], ebp
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and eax, edi
mov edi, dword [esp + 0x13c]
add edi, eax
mov eax, edx
mov edx, dword [esi + 4]
mov ebp, dword [esi]
mov esi, dword [esi + 8]
cmp edx, ebx
jb 0x4fd355
nop
mov dword [esp], edi
mov edi, dword [esp + 0x108]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x10c]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x10], eax
mov edi, dword [esp + 0x11c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x110]
mov dword [esp + 0x18], edi
mov eax, dword [esp + 0x114]
mov dword [esp + 0x1c], eax
sub esi, ebx
mov eax, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebx
add ebp, esi
mov dword [esp + 0x20], ebp
sub edx, ebx
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x118]
sub edi, eax
shl edi, 3
mov dword [esp + 0x38], edi
call fcn.004fdbc0
add esp, 0x144
ret
mov edi, dword [esp + 0x170]
mov eax, dword [esp + 0x150]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x158]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x154]
mov dword [esp + 0xe4], edx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 0xbc], ebx
lea esi, [0x743500]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.004091a0
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x16c]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0x158]
mov esi, dword [esp + 0x15c]
mov edi, dword [esp + 8]
mov dword [esp], edi
mov edi, dword [esp + 0x14c]
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov ecx, dword [esp + 0x160]
mov dword [esp + 0x18], ecx
mov ebx, dword [esp + 0x164]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
call fcn.004fb520
movzx eax, byte [esp + 0x28]
test al, al
je 0x4fc733
mov ebp, dword [esp + 0x8c]
lea eax, [ebp - 1]
mov ebp, dword [esp + 0xc0]
lea ecx, [ebp - 1]
mov ebp, dword [esp + 0xbc]
lea edx, [ebp - 1]
mov ebp, dword [esp + 0xe4]
lea ebx, [ebp - 1]
mov ebp, 0xffffffff
jmp 0x4fc754
mov edx, dword [esp + 0xe4]
mov ebx, dword [esp + 0xbc]
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x8c]
mov ebp, 1
mov dword [esp + 0xe0], ebp
mov dword [esp + 0x8c], ecx
mov dword [esp + 0xc0], eax
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xe4], edx
lea esi, [0x74b060]
mov dword [esp], esi
mov esi, dword [esp + 0x148]
mov dword [esp + 4], esi
mov edi, dword [esp + 0x14c]
mov dword [esp + 8], edi
call fcn.004092b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4fc8a2
mov dword [esp + 0x138], ecx
mov dword [esp + 0xc8], eax
lea eax, [0x745cc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x160]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x164]
mov dword [esp + 8], edx
call fcn.004092b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4fc8a2
mov dword [esp + 0x134], ecx
mov dword [esp + 0x94], eax
mov edx, dword [esp + 0x170]
test edx, edx
jne 0x4fc837
mov ebx, dword [esp + 0x16c]
mov edx, dword [esp + 0xe4]
add ebx, edx
sub ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0x180]
mov edi, dword [esp + 0xc0]
jmp 0x4fd172
lea eax, [0x745cc0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov eax, dword [esp + 0x174]
mov dword [esp + 8], eax
call fcn.004092b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4fc8a2
mov dword [esp + 0x48], eax
mov dword [esp + 0x128], ecx
mov ebx, dword [esp + 0x16c]
mov edx, dword [esp + 0xe4]
add ebx, edx
mov ebp, dword [esp + 0x154]
sub ebx, ebp
mov esi, dword [esp + 0x17c]
add esi, edx
sub esi, ebp
mov ebp, dword [esp + 0x8c]
mov edi, dword [esp + 0xc0]
jmp 0x4fcda4
lea eax, [0x750a60]
mov dword [esp], eax
call fcn.0040b440
mov eax, dword [esp + 4]
mov dword [esp + 0x140], eax
mov ecx, dword [esp + 0x16c]
mov edx, dword [esp + 0xe4]
add ecx, edx
mov ebx, dword [esp + 0x154]
sub ecx, ebx
mov ebp, dword [esp + 0x17c]
add ebp, edx
sub ebp, ebx
mov ebx, dword [esp + 0xe0]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x8c]
jmp 0x4fc927
add esp, 0x144
ret
mov ecx, dword [esp + 0xac]
add ecx, edx
mov ebx, dword [esp + 0x54]
add ebx, edx
mov ebp, dword [esp + 0x9c]
add ebp, edx
mov eax, dword [esp + 0x140]
mov edx, ecx
mov ecx, ebx
mov ebx, dword [esp + 0xe0]
mov eax, dword [esp + 0xbc]
cmp eax, edx
je 0x4fc971
mov dword [esp + 0xac], edx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x9c], ebp
mov ebp, dword [esp + 0x168]
mov ecx, dword [esp + 0xc0]
add ebp, ecx
mov edx, dword [esp + 0x150]
sub ebp, edx
mov ebx, dword [esp + 0x178]
add ebx, ecx
sub ebx, edx
mov edx, dword [esp + 0xe0]
jmp 0x4fc985
add esp, 0x144
ret
add ecx, edx
add ebp, edx
add ebx, edx
mov eax, dword [esp + 0xbc]
cmp edi, ecx
je 0x4fc8fd
mov dword [esp + 0x60], ecx
mov dword [esp + 0xd4], ebp
mov dword [esp + 0x6c], ebx
test esi, esi
jne 0x4fc9bc
mov dword [esp + 0x120], eax
mov eax, 0xffff
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x120]
jmp 0x4fca20
mov eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x174]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
call eax
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0xe0]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x8c]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0xbc]
mov eax, dword [esp + 0x88]
test eax, eax
jne 0x4fcab9
mov eax, dword [esp + 0x180]
test eax, eax
je 0x4fc978
movzx eax, word [0x900a0c]
mov word [esp], ax
call fcn.00408f20
mov eax, dword [esp + 0x148]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 4]
mov ebx, dword [esp + 0x14c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x60]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xac]
mov dword [esp + 8], esi
lea edi, [0x7cabe0]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call ecx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0xe0]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x8c]
jmp 0x4fc978
cmp eax, 0xffff
jne 0x4fcb4b
mov esi, dword [esp + 0x180]
cmp esi, 1
jne 0x4fcb4b
mov eax, dword [esp + 0x160]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x164]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov ebx, dword [esp + 0x54]
mov dword [esp + 8], ebx
call ecx
mov eax, dword [esp + 0x148]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x14c]
mov dword [esp], edx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xac]
mov dword [esp + 8], ebp
call ecx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0xe0]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x8c]
jmp 0x4fc978
mov eax, dword [esp + 0x160]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x164]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov ebx, dword [esp + 0x54]
mov dword [esp + 8], ebx
call ecx
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x90], edx
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 0x180]
test ebp, ebp
je 0x4fcbfe
mov esi, dword [esp + 0x88]
imul ebx, esi
mov edi, eax
mov eax, 0x80008001
mul ebx
shr edx, 0xf
mov ebx, dword [esp + 0x140]
mov word [ebx], dx
imul edi, esi
mov eax, 0x80008001
mul edi
shr edx, 0xf
mov word [ebx + 2], dx
imul ecx, esi
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [ebx + 4], dx
mov ecx, dword [esp + 0x90]
imul ecx, esi
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [ebx + 6], dx
jmp 0x4fcd0a
mov dword [esp + 0x80], ebx
mov dword [esp + 0x98], eax
mov dword [esp + 0xcc], ecx
mov eax, dword [esp + 0x148]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x14c]
mov dword [esp], edx
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xac]
mov dword [esp + 8], ebp
call ecx
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x88]
imul ebp, esi
mov edi, eax
mov eax, 0x80008001
mul ebp
shr edx, 0xf
lea eax, [edx - 0xffff]
neg eax
imul ebx, eax
mov edx, dword [esp + 0x80]
imul edx, esi
add edx, ebx
mov ebx, eax
mov eax, 0x80008001
mul edx
shr edx, 0xf
mov eax, dword [esp + 0x140]
mov word [eax], dx
imul edi, ebx
mov edx, dword [esp + 0x98]
imul edx, esi
add edx, edi
mov edi, eax
mov eax, 0x80008001
mul edx
shr edx, 0xf
mov word [edi + 2], dx
imul ecx, ebx
mov eax, dword [esp + 0xcc]
imul eax, esi
add eax, ecx
mov ecx, eax
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [edi + 4], dx
mov eax, dword [esp + 0x84]
imul ebx, eax
lea eax, [ebx + ebp]
mov ecx, eax
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [edi + 6], dx
mov ebx, edi
mov eax, dword [esp + 0x148]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x14c]
mov dword [esp], edx
mov ebp, dword [esp + 0x60]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xac]
mov dword [esp + 8], esi
lea edi, [0x7ca80c]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
call ecx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0xe0]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x8c]
jmp 0x4fc978
mov ebx, dword [esp + 0xb0]
mov esi, dword [esp + 0xe0]
add ebx, esi
mov edi, dword [esp + 0x58]
add edi, esi
mov ecx, dword [esp + 0xa0]
add ecx, esi
mov edx, ebx
mov esi, ecx
mov ebx, edi
mov ecx, dword [esp + 0x128]
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0xbc]
cmp ebx, edx
je 0x4fcde2
mov dword [esp + 0xb0], edx
mov dword [esp + 0xa0], esi
mov ebx, dword [esp + 0x168]
add ebx, edi
mov edx, dword [esp + 0x150]
sub ebx, edx
mov esi, dword [esp + 0x178]
add esi, edi
sub esi, edx
mov edx, edi
jmp 0x4fce21
add esp, 0x144
ret
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xe0]
lea edi, [edx + ecx]
mov ecx, dword [esp + 0xd8]
lea ebx, [ecx + edx]
mov ecx, dword [esp + 0x70]
lea esi, [ecx + edx]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0xc0]
mov ebp, dword [esp + 0x8c]
cmp ebp, edi
je 0x4fcd71
mov dword [esp + 0x64], edi
mov dword [esp + 0xd8], ebx
mov dword [esp + 0x70], esi
mov edx, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov ebx, dword [esp + 0xa0]
mov dword [esp + 8], ebx
call edx
movzx eax, word [esp + 0x12]
test eax, eax
jne 0x4fcea8
mov eax, dword [esp + 0x180]
test eax, eax
je 0x4fcde9
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x138]
mov dword [esp], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb0]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call ecx
mov eax, dword [esp + 0x180]
jmp 0x4fcde9
mov dword [esp + 0x100], eax
cmp eax, 0xffff
jne 0x4fcf20
mov ecx, dword [esp + 0x180]
cmp ecx, 1
jne 0x4fcf20
mov eax, dword [esp + 0x94]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x134]
mov dword [esp], edx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x58]
mov dword [esp + 8], ebp
call ecx
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x138]
mov dword [esp], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb0]
mov dword [esp + 8], ebp
call ecx
mov eax, dword [esp + 0x180]
jmp 0x4fcde9
mov eax, dword [esp + 0x94]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x134]
mov dword [esp], edx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x58]
mov dword [esp + 8], ebp
call ecx
movzx eax, word [esp + 0x12]
mov dword [esp + 0xfc], eax
movzx ecx, word [esp + 0xc]
movzx edx, word [esp + 0xe]
mov dword [esp + 0xf8], edx
movzx ebx, word [esp + 0x10]
mov ebp, dword [esp + 0x180]
test ebp, ebp
jne 0x4fd0c8
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf0], ecx
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x138]
mov dword [esp], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb0]
mov dword [esp + 8], ebp
call ecx
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x24]
mov dword [esp + 0xec], ecx
movzx edx, word [esp + 0xc]
mov dword [esp + 0xe8], edx
movzx ebx, word [esp + 0xe]
movzx ebp, word [esp + 0x10]
movzx esi, word [esp + 0x12]
mov edi, dword [esp + 0x138]
mov dword [esp], edi
mov edi, dword [esp + 0x64]
mov dword [esp + 4], edi
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x100]
mov edi, dword [esp + 0xfc]
imul edi, eax
mov dword [esp + 0xfc], edi
mov eax, 0x80008001
mul edi
shr edx, 0xf
lea eax, [edx - 0xffff]
neg eax
mov edx, dword [esp + 0x100]
mov ecx, dword [esp + 0xf0]
imul ecx, edx
mov edi, dword [esp + 0xe8]
imul edi, eax
add ecx, edi
mov edi, eax
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [esp + 0xc], dx
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xf8]
imul ecx, eax
imul ebx, edi
add ecx, ebx
mov edx, eax
mov eax, 0x80008001
mov ebx, edx
mul ecx
shr edx, 0xf
mov word [esp + 0xe], dx
mov eax, dword [esp + 0xf4]
imul ebx, eax
imul ebp, edi
lea eax, [ebp + ebx]
mov ecx, eax
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [esp + 0x10], dx
imul esi, edi
mov eax, dword [esp + 0xfc]
add eax, esi
mov ecx, eax
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [esp + 0x12], dx
mov eax, dword [esp + 0xec]
call eax
jmp 0x4fd14e
mov ebp, dword [esp + 0xc8]
mov esi, dword [ebp + 0x24]
mov edi, dword [esp + 0x138]
mov dword [esp], edi
mov edi, dword [esp + 0x64]
mov dword [esp + 4], edi
mov ebp, dword [esp + 0xb0]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x100]
imul ecx, ebp
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [esp + 0xc], dx
mov ecx, dword [esp + 0xf8]
imul ecx, ebp
mov eax, 0x80008001
mul ecx
shr edx, 0xf
mov word [esp + 0xe], dx
imul ebx, ebp
mov eax, 0x80008001
mul ebx
shr edx, 0xf
mov word [esp + 0x10], dx
mov ecx, dword [esp + 0xfc]
imul ebp, ecx
mov eax, 0x80008001
mul ebp
shr edx, 0xf
mov word [esp + 0x12], dx
call esi
mov eax, dword [esp + 0x180]
jmp 0x4fcde9
mov ebx, dword [esp + 0xe0]
add edx, ebx
mov edi, dword [esp + 0x5c]
add edi, ebx
mov ebx, edi
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0xbc]
cmp ebx, edx
je 0x4fd19a
mov dword [esp + 0xb4], edx
mov ebx, dword [esp + 0x168]
add ebx, edi
sub ebx, dword [esp + 0x150]
jmp 0x4fd1dc
add esp, 0x144
ret
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0xe0]
lea edi, [ecx + eax]
mov eax, dword [esp + 0xdc]
lea ebx, [eax + ecx]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0x180]
cmp ebp, edi
je 0x4fd15a
mov dword [esp + 0x68], edi
mov dword [esp + 0xdc], ebx
cmp esi, 1
jne 0x4fd236
mov edx, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 8], ebp
call edx
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x138]
mov dword [esp], edx
mov ebx, dword [esp + 0x68]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb4]
mov dword [esp + 8], ebp
call ecx
jmp 0x4fd1a1
mov edx, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 8], ebp
call edx
movzx eax, word [esp + 0x12]
mov word [esp + 0x42], ax
mov ecx, dword [esp + 0xc8]
mov edx, dword [ecx + 0x1c]
movzx ebx, word [esp + 0xc]
mov word [esp + 0x40], bx
movzx ebp, word [esp + 0xe]
mov word [esp + 0x3e], bp
movzx esi, word [esp + 0x10]
mov word [esp + 0x3c], si
mov edi, dword [esp + 0x138]
mov dword [esp], edi
mov esi, dword [esp + 0x68]
mov dword [esp + 4], esi
mov ebp, dword [esp + 0xb4]
mov dword [esp + 8], ebp
call edx
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x24]
movzx edx, word [esp + 0xc]
movzx ebx, word [esp + 0xe]
movzx ebp, word [esp + 0x10]
movzx esi, word [esp + 0x12]
mov edi, dword [esp + 0x138]
mov dword [esp], edi
mov edi, dword [esp + 0x68]
mov dword [esp + 4], edi
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
movzx eax, word [esp + 0x42]
movzx edi, ax
add edi, 0xffff0001
xchg edi, ebx
neg ebx
xchg edi, ebx
imul edx, edi
mov eax, 0x80008001
mul edx
shr edx, 0xf
movzx eax, word [esp + 0x40]
add eax, edx
mov word [esp + 0xc], ax
imul ebx, edi
mov eax, 0x80008001
mul ebx
shr edx, 0xf
movzx eax, word [esp + 0x3e]
add eax, edx
mov word [esp + 0xe], ax
imul ebp, edi
mov eax, 0x80008001
mul ebp
shr edx, 0xf
movzx eax, word [esp + 0x3c]
add eax, edx
mov word [esp + 0x10], ax
imul esi, edi
mov eax, 0x80008001
mul esi
shr edx, 0xf
movzx eax, word [esp + 0x42]
add eax, edx
mov word [esp + 0x12], ax
call ecx
jmp 0x4fd1a1
mov eax, ebx
mov ecx, edx
call fcn.00456ba0
mov ecx, ebp
call fcn.00456ba0
mov eax, ebx
mov ecx, edx
call fcn.00456ba0
mov ecx, ebp
call fcn.00456ba0
mov byte [ebx + ecx], al
inc ecx
mov ebx, dword [esp + 0x44]
cmp ecx, edx
jge 0x4fd390
mov edi, dword [ebp + 4]
mov ebx, dword [ebp]
cmp ecx, edi
jb 0x4fd375
jmp 0x4fd48b
mov edi, dword [ebp + 8]
mov eax, ebx
mov ebx, dword [ebp]
cmp edi, edx
jb 0x4fd482
cmp esi, edx
ja 0x4fd479
sub edi, esi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, esi
add ebx, edi
mov dword [esp + 0x130], ebx
mov edi, dword [esp + 0x154]
inc edi
jmp 0x4fd3e2
lea edi, [ecx + 1]
mov ebp, dword [esp + 0x14c]
mov eax, dword [esp + 0xb8]
mov eax, edx
mov edx, dword [esp + 0xb8]
cmp dword [esp + 0x15c], edi
jle 0x4fd462
mov ecx, edi
mov edi, dword [ebp + 0xc]
add esi, edi
add edi, edx
mov edx, dword [ebp + 8]
mov ebp, dword [ebp]
cmp edx, edi
jb 0x4fd472
cmp edi, esi
jb 0x4fd469
mov dword [esp + 0xb8], edi
sub edi, esi
sub edx, esi
neg edx
sar edx, 0x1f
and edx, esi
add ebp, edx
cmp eax, edi
jge 0x4fd41e
mov edx, eax
jmp 0x4fd422
mov edx, eax
mov eax, edi
cmp ebp, ebx
je 0x4fd3c8
mov dword [esp + 0x11c], ecx
mov dword [esp + 0xd0], esi
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00457450
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x130]
mov esi, dword [esp + 0xd0]
jmp 0x4fd3c8
add esp, 0x144
ret
mov eax, esi
mov ecx, edi
call fcn.00456ba0
mov ecx, edi
call fcn.00456b80
mov eax, esi
mov ecx, edx
call fcn.00456ba0
mov ecx, edx
mov edx, edi
call fcn.00456b80
mov eax, ecx
mov ecx, edi
call fcn.00456b40
mov eax, edx
mov ecx, esi
call fcn.00456ba0
mov ecx, ebx
call fcn.00456ba0
nop
call fcn.00455690
jmp fcn.004fb5f0