Function at 0x4f7d80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xd0
mov eax, dword [ebp + 0x10]
movsd xmm0, qword [ebp + 8]
mov ecx, dword [0x5ff014]
xor ecx, ebp
mov dword [esp + 0xc8], ecx
cmp eax, 2
jae 0x4f8543
movsd qword [esp + 0x80], xmm0
mov ebx, dword [esp + 0x84]
xor edx, edx
xor ecx, ecx
add ecx, 0xffffffff
mov ecx, 0x100000
adc ecx, 0xffffffff
and ecx, ebx
mov edi, ecx
or edi, 0x100000
mov esi, ebx
shr esi, 0x14
and esi, 0x7ff
add esi, 0xfffffbcd
mov dword [esp + 0x2c], ebx
test ebx, 0x7ff00000
mov ebx, 0xfffffbce
cmovne ebx, esi
mov esi, ebx
mov dword [esp + 0x24], ecx
cmove edi, ecx
bt edi, 0x14
mov ebx, dword [esp + 0x80]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x18], esi
mov ecx, esi
jae 0x4f8d6f
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], ebx
shl ebx, 0xb
mov dword [esp + 0x30], ebx
movaps xmm1, xmmword [0x5d82c0]
movups xmmword [esp + 0xb8], xmm1
mov dword [esp + 0xc0], edx
movups xmmword [esp + 0xa8], xmm1
mov dword [esp + 0xb0], edx
test eax, eax
jne 0x4f8d86
mov eax, dword [esp + 0x18]
lea esi, [eax - 1]
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 4]
shld ebx, ecx, 1
lea eax, [ecx + ecx]
lea edi, [ecx + ecx]
inc edi
mov edx, ebx
mov dword [esp + 8], esi
mov ecx, edx
shld edx, edi, 0xa
shl edi, 0xa
add esi, 0xfffffff6
test ecx, 0xfffff000
je 0x4f7e83
test edx, edx
jns 0x4f8db6
mov ecx, dword [esp + 0x24]
or ecx, dword [esp + 4]
je 0x4f8b0b
add eax, 0xffffffff
adc ebx, 0xffffffff
mov ecx, dword [esp + 8]
sub ecx, esi
shld ebx, eax, cl
mov dword [esp + 4], ebx
shl eax, cl
xor ebx, ebx
test cl, 0x20
cmove ebx, eax
cmove eax, dword [esp + 4]
mov dword [esp + 0xa8], edi
mov dword [esp + 0xac], edx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xb0], esi
mov dword [esp + 0xc0], esi
lea ecx, [esp + 0x98]
movups xmmword [ecx], xmm1
xor eax, eax
mov dword [ecx + 8], eax
mov edi, ecx
lea eax, [esp + 0x94]
mov dword [eax], 0xffffffff
mov ecx, 0xffffff8f
mov esi, dword [esp + 0x20]
sub ecx, esi
mov edx, 0xffffffab
sub edx, esi
push eax
push edi
push edx
push ecx
call fcn.004b2980
add esp, 0x10
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
shld ecx, eax, 0xb
mov ebx, dword [edi + 4]
mov dword [esp + 0x24], ebx
mov eax, ebx
mul ecx
mov dword [esp + 4], eax
mov edi, edx
mov esi, dword [esp + 0x30]
and esi, 0xfffff800
mov eax, ebx
mul esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
lea eax, [esp + 0x98]
mov ebx, dword [eax]
mov eax, ebx
mov dword [esp + 0x30], ebx
mul ecx
mov ecx, edx
mov dword [esp + 0x18], eax
mov eax, ebx
mul esi
xor eax, eax
add edx, dword [esp + 0x18]
setb al
add edx, dword [esp + 0xc]
mov esi, 0
adc eax, esi
mov ebx, dword [esp + 0x20]
lea esi, [esp + 0x98]
add ebx, dword [esi + 8]
mov dword [esp + 0x20], ebx
add ecx, dword [esp + 4]
mov esi, 0
adc edi, esi
add ecx, dword [esp + 8]
adc edi, esi
xor esi, esi
mov ebx, SysReAllocString
add edx, ebx
adc ecx, eax
mov dword [esp + 0x50], ecx
adc edi, esi
mov dword [esp + 0x4c], edi
mov esi, dword [esp + 0xbc]
mov eax, esi
mov ecx, dword [esp + 0x24]
mul ecx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov edi, dword [esp + 0xb8]
mov eax, edi
mul ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x14], eax
mov eax, esi
mov ebx, dword [esp + 0x30]
mul ebx
mov dword [esp + 0x18], edx
mov esi, eax
mov eax, edi
mul ebx
xor eax, eax
add edx, esi
setb al
add edx, dword [esp + 0x14]
mov dword [esp + 0x14], edx
mov edx, 0
adc eax, edx
mov dword [esp + 0x1c], eax
mov edi, dword [esp + 0xac]
mov eax, edi
mul ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], edx
mov esi, dword [esp + 0xa8]
mov eax, esi
mul ecx
mov dword [esp + 0x24], edx
mov ecx, eax
mov eax, edi
mul ebx
mov edi, edx
mov dword [esp + 0x60], eax
mov eax, esi
mul ebx
xor eax, eax
add edx, dword [esp + 0x60]
setb al
add edx, ecx
mov ecx, 0
adc eax, ecx
add edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x40]
adc esi, ecx
add edi, dword [esp + 0x24]
adc esi, ecx
mov ebx, SysReAllocString
add edx, ebx
adc edi, eax
adc esi, ecx
add edi, 1
mov dword [esp + 0x5c], edi
adc esi, ecx
mov edx, esi
mov dword [esp + 0x40], esi
mov eax, dword [esp + 0x18]
add eax, dword [esp + 8]
mov ebx, dword [esp + 4]
adc ebx, ecx
add eax, dword [esp + 0xc]
adc ebx, ecx
mov esi, SysReAllocString
add dword [esp + 0x14], esi
adc eax, dword [esp + 0x1c]
adc ebx, ecx
xor ecx, ecx
sub edi, eax
sbb edx, ebx
add edi, 1
adc edx, ecx
mov ecx, 0xffffffcb
sub ecx, dword [esp + 0x20]
xor eax, eax
inc eax
xor esi, esi
shld esi, eax, cl
mov dword [esp + 0x30], eax
shl eax, cl
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x40]
shrd dword [esp + 4], ebx, cl
mov ebx, dword [esp + 0x40]
shr ebx, cl
mov dword [esp + 0x24], ecx
test cl, 0x20
cmove ebx, dword [esp + 4]
cmovne esi, eax
mov ecx, 0
cmovne eax, ecx
mov dword [esp + 0x68], eax
add eax, 0xffffffff
mov dword [esp + 0x6c], esi
adc esi, 0xffffffff
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x7c], esi
and ecx, esi
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x60], eax
and esi, eax
mov dword [esp + 4], esi
imul eax, dword [esp + 0x20], 0x4d1
add eax, 0x23856
sar eax, 0xc
mov dword [esp + 0x1c], ebx
cmp dword [eax*4 + 0x5f0580], ebx
lea ebx, [eax + 1]
cmova ebx, eax
mov eax, dword [ebp + 0x20]
xor esi, esi
mov dword [eax], esi
test ebx, ebx
mov eax, 0
cmovs eax, ebx
mov dword [esp + 0x64], eax
mov esi, dword [ebx*4 + 0x5f057c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], edi
mov dword [esp + 0x14], ecx
test ebx, ebx
jle 0x4f8256
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x1c]
xor edx, edx
div esi
add al, 0x30
mov ebx, dword [ebp + 0x20]
mov edi, ecx
mov ecx, dword [ebx]
mov dword [esp + 0x20], esi
mov esi, dword [ebp + 0x18]
mov byte [esi + ecx], al
mov esi, dword [ebx]
xor eax, eax
mov ecx, dword [esp + 0x24]
shld eax, edx, cl
mov dword [esp + 0x1c], edx
shl edx, cl
test cl, 0x20
cmovne eax, edx
mov ecx, 0
cmovne edx, ecx
mov dword [esp + 0x28], esi
lea ecx, [esi + 1]
mov esi, edx
add esi, dword [esp + 4]
adc eax, edi
mov dword [ebx], ecx
mov edx, dword [esp + 8]
cmp esi, edx
mov dword [esp + 0x2c], eax
sbb eax, dword [esp + 0xc]
jb 0x4f88c4
mov eax, dword [esp + 0x20]
mov ecx, 0xcccccccd
mul ecx
shr edx, 3
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x18]
dec ebx
mov edi, dword [esp + 8]
cmp esi, edi
mov edx, dword [esp + 0xc]
sbb dword [esp + 0x2c], edx
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
jae 0x4f8179
test byte [esp + 0x10], 1
je 0x4f8b04
sub ebx, dword [esp + 0x94]
mov eax, dword [ebp + 0x24]
mov ecx, dword [ebp + 0x20]
add ebx, dword [ecx]
mov dword [eax], ebx
mov eax, dword [ecx]
mov ecx, dword [ebp + 0x18]
mov byte [ecx + eax], 0
mov bl, 1
mov ecx, dword [esp + 0xc8]
xor ecx, ebp
call fcn.00504596
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x50]
sub dword [esp + 0x5c], eax
mov eax, dword [esp + 0x4c]
sbb dword [esp + 0x40], eax
mov dword [esp + 0x20], 0
mov ebx, dword [esp + 0x64]
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [esp + 8], edx
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 4]
mov edx, 0xa
mul edx
lea ecx, [ecx + ecx*4]
lea ebx, [edx + ecx*2]
mov dword [esp + 4], eax
mov esi, eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x14], ebx
shrd esi, ebx, cl
shr ebx, cl
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
mov edx, 0xa
mul edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
mov edx, 0xa
mul edx
mov dword [esp + 8], edx
test cl, 0x20
cmove ebx, esi
add bl, 0x30
mov edx, dword [ebp + 0x20]
mov ecx, dword [edx]
mov esi, dword [ebp + 0x18]
mov byte [esi + ecx], bl
lea ecx, [edi + edi*4]
mov esi, dword [esp + 8]
lea edi, [esi + ecx*2]
mov ecx, dword [edx]
mov dword [esp + 0x28], ecx
inc ecx
mov dword [edx], ecx
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 4]
and ecx, dword [esp + 0x7c]
and esi, dword [esp + 0x60]
mov edx, eax
cmp esi, eax
mov eax, ecx
mov dword [esp + 0xc], edi
sbb eax, edi
mov ebx, dword [esp + 0x20]
lea edi, [ebx + ebx*4]
mov eax, dword [esp + 0x1c]
lea eax, [eax + edi*2]
mov dword [esp + 0x20], eax
mov dword [esp + 4], esi
jb 0x4f8341
mov ebx, dword [esp + 0x18]
dec ebx
cmp esi, edx
mov eax, ecx
mov edi, dword [esp + 0xc]
sbb eax, edi
jae 0x4f827a
jmp 0x4f8217
mov dword [esp + 0x48], edi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x30]
mov eax, ebx
mov esi, dword [esp + 0x5c]
mov dword [esp + 8], edx
mul esi
mov ecx, ebx
imul ecx, dword [esp + 0x40]
add ecx, edx
mov edi, dword [esp + 0x20]
mov edx, edi
imul edx, esi
add edx, ecx
mov esi, eax
sub esi, ebx
mov ecx, edx
sbb ecx, edi
mov dword [esp + 0x10], ecx
add eax, ebx
mov dword [esp + 0x64], eax
adc edx, edi
mov dword [esp + 0x38], edx
mov eax, dword [esp + 8]
sub eax, dword [esp + 4]
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
sbb ebx, ecx
cmp eax, dword [esp + 0x68]
mov edi, ebx
sbb edi, dword [esp + 0x6c]
setb dl
mov dword [esp + 0x50], edx
mov edi, dword [esp + 4]
mov edx, edi
cmp edi, esi
mov edi, ecx
mov ecx, dword [esp + 0x10]
sbb edi, ecx
jae 0x4f84ab
mov dword [esp + 0x4c], esi
mov edi, dword [esp + 0x68]
cmp eax, edi
mov ecx, dword [esp + 0x6c]
sbb ebx, ecx
mov esi, edx
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 8]
jb 0x4f84b5
mov eax, edi
mov edi, esi
mov edx, dword [esp + 0x14]
mov dword [esp + 0x34], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x44], edx
mov edi, dword [esp + 0x1c]
add edi, eax
adc edx, ecx
mov dword [esp + 0x1c], edi
cmp edi, dword [esp + 0x4c]
mov eax, edx
sbb eax, dword [esp + 0x10]
jb 0x4f8444
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x10]
mov edi, ecx
sbb edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x1c]
sub ebx, dword [esp + 0x4c]
mov esi, edx
sbb edx, ecx
cmp eax, ebx
sbb edi, edx
mov edx, esi
mov esi, dword [esp + 4]
mov ebx, dword [esp + 8]
jb 0x4f8a7d
mov eax, dword [ebp + 0x18]
mov ecx, dword [esp + 0x28]
dec byte [eax + ecx]
mov eax, ebx
sub eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0xc]
sbb ebx, edx
mov ecx, dword [esp + 0x68]
mov edi, ecx
cmp eax, ecx
mov esi, edx
mov edx, ebx
mov ecx, dword [esp + 0x6c]
sbb edx, ecx
setb dl
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x1c]
cmp edx, dword [esp + 0x4c]
mov edx, esi
sbb edx, dword [esp + 0x10]
jae 0x4f8538
cmp eax, edi
sbb ebx, ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x34], eax
mov dword [esp + 0x44], esi
mov ebx, dword [esp + 8]
mov eax, edi
mov edx, esi
mov esi, dword [esp + 4]
jae 0x4f83fa
jmp 0x4f84b5
mov esi, edx
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x64]
cmp dword [esp + 0x1c], ebx
mov dword [esp + 0x28], edx
mov eax, edx
mov ecx, dword [esp + 0x38]
sbb eax, ecx
mov eax, dword [esp + 0x2c]
jae 0x4f84da
cmp byte [esp + 0x50], 0
je 0x4f8a2e
mov ebx, eax
mov ecx, 0x14
mul ecx
mov ecx, dword [esp + 0x48]
lea edx, [edx + ecx*4]
mov edi, dword [esp + 0x1c]
cmp edi, eax
mov eax, dword [esp + 0x28]
sbb eax, edx
setae byte [esp + 0x10]
mov eax, ebx
mov ecx, 0xffffffd8
mul ecx
sub edx, ebx
mov ecx, dword [esp + 0x3c]
shl ecx, 3
lea ecx, [ecx + ecx*4]
sub edx, ecx
mov ecx, dword [esp + 8]
add eax, ecx
adc edx, dword [esp + 0xc]
cmp eax, edi
sbb edx, dword [esp + 0x28]
mov edx, ecx
setae al
and al, byte [esp + 0x10]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x14]
jmp 0x4f8327
mov edx, esi
mov esi, dword [esp + 4]
jmp 0x4f84b5
jne 0x4f8dcb
movsd qword [esp + 0x88], xmm0
mov ecx, dword [esp + 0x8c]
xor edi, edi
xor eax, eax
add eax, 0xffffffff
mov edx, 0x100000
adc edx, 0xffffffff
and edx, ecx
mov eax, edx
or eax, 0x100000
mov esi, ecx
shr esi, 0x14
and esi, 0x7ff
add esi, 0xfffffbcd
test ecx, 0x7ff00000
cmove eax, edx
mov edx, 0xfffffbce
cmovne edx, esi
mov esi, dword [esp + 0x88]
bt eax, 0x14
jae 0x4f8dd0
mov dword [esp + 8], eax
mov eax, esi
shl eax, 0xb
mov dword [esp + 0xc], eax
movaps xmm0, xmmword [0x5d82c0]
lea eax, [esp + 0xb8]
movups xmmword [eax], xmm0
mov dword [eax + 8], edi
lea eax, [esp + 0xa8]
mov dword [eax], 0xffffffff
mov ecx, 0xffffff8f
sub ecx, edx
mov ebx, edx
mov dword [esp + 4], edx
mov edx, 0xffffffab
sub edx, ebx
push eax
lea ebx, [esp + 0xbc]
push ebx
push edx
push ecx
call fcn.004b2980
add esp, 0x10
mov ecx, dword [esp + 8]
shld ecx, esi, 0xb
mov esi, dword [ebx + 4]
mov eax, esi
mul ecx
mov ebx, edx
mov dword [esp + 0x20], eax
mov eax, esi
mul dword [esp + 0xc]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
lea eax, [esp + 0xb8]
mov esi, dword [eax]
mov eax, esi
mul ecx
mov dword [esp + 8], edx
mov ecx, eax
mov eax, esi
mul dword [esp + 0xc]
xor eax, eax
add edx, ecx
setb al
add edx, dword [esp + 0x14]
adc eax, edi
mov esi, dword [esp + 4]
lea ecx, [esp + 0xb8]
add esi, dword [ecx + 8]
mov ecx, dword [esp + 8]
add ecx, dword [esp + 0x20]
adc ebx, edi
add ecx, dword [esp + 0x18]
adc ebx, edi
add edx, 0x80000000
adc ecx, eax
mov dword [esp + 8], ecx
adc ebx, edi
mov ecx, 0xffffffcb
mov eax, esi
mov dword [esp + 4], esi
sub ecx, esi
xor eax, eax
inc eax
xor edx, edx
shld edx, eax, cl
shl eax, cl
mov esi, dword [esp + 8]
shrd esi, ebx, cl
mov dword [esp + 0xc], esi
mov esi, ebx
shr esi, cl
mov dword [esp + 0x30], ecx
test cl, 0x20
cmove esi, dword [esp + 0xc]
cmovne edx, eax
cmovne eax, edi
mov dword [esp + 0x14], eax
add eax, 0xffffffff
mov dword [esp + 0x24], edx
adc edx, 0xffffffff
mov dword [esp + 0x60], edx
and ebx, edx
mov dword [esp + 0xc], ebx
mov edx, esi
mov dword [esp + 0x2c], eax
and dword [esp + 8], eax
imul eax, dword [esp + 4], 0x4d1
add eax, 0x23856
sar eax, 0xc
cmp dword [eax*4 + 0x5f0580], esi
lea ecx, [eax + 1]
cmova ecx, eax
mov eax, dword [ebp + 0x20]
mov dword [eax], edi
mov esi, dword [ecx*4 + 0x5f057c]
mov dword [esp + 0x18], ecx
test ecx, ecx
jle 0x4f8cc8
xor edi, edi
mov ebx, dword [ebp + 0x14]
mov eax, edx
xor edx, edx
div esi
add al, 0x30
mov ecx, esi
mov esi, dword [ebp + 0x18]
mov byte [esi + edi], al
mov eax, dword [ebp + 0x20]
mov edi, dword [eax]
inc edi
mov dword [eax], edi
cmp ebx, 1
je 0x4f8a96
mov dword [esp + 4], edx
mov esi, edi
mov edi, dword [esp + 0x18]
dec edi
mov eax, ecx
mov ecx, 0xcccccccd
mul ecx
shr edx, 3
mov dword [esp + 0x18], edi
lea eax, [edi + 1]
mov edi, esi
mov esi, edx
mov edx, dword [esp + 4]
dec ebx
cmp eax, 1
jg 0x4f8702
mov dword [esp + 0x1c], ebx
test ebx, ebx
je 0x4f8e0a
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov ebx, 1
jle 0x4f8b04
cmp edx, 2
mov eax, esi
sbb eax, 0
jb 0x4f8b04
mov dword [esp + 4], 0
mov dword [esp + 0x20], ebx
mov eax, edx
mov ecx, 0xa
mul ecx
lea ebx, [esi + esi*4]
lea ebx, [edx + ebx*2]
mov esi, eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xc], ebx
shrd esi, ebx, cl
shr ebx, cl
mov eax, dword [esp + 0x20]
mov dword [esp + 0x7c], eax
mov edx, 0xa
mul edx
test cl, 0x20
cmove ebx, esi
add bl, 0x30
mov esi, dword [ebp + 0x18]
mov byte [esi + edi], bl
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 4]
lea ecx, [ecx + ecx*4]
mov dword [esp + 0x28], ecx
lea ecx, [edx + ecx*2]
mov dword [esp + 4], ecx
mov edx, dword [ebp + 0x20]
mov ecx, dword [edx]
lea edi, [ecx + 1]
mov dword [edx], edi
mov edx, dword [esp + 8]
and edx, dword [esp + 0x2c]
mov esi, dword [esp + 0xc]
and esi, dword [esp + 0x60]
dec dword [esp + 0x18]
mov dword [esp + 0x20], eax
cmp ebx, 2
lea eax, [ebx - 1]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x1c], eax
jl 0x4f881e
cmp ebx, edx
mov eax, dword [esp + 4]
sbb eax, esi
jb 0x4f8784
mov dword [esp + 0x30], ecx
cmp dword [esp + 0x1c], 0
jne 0x4f8b04
mov eax, dword [esp + 0x14]
sub eax, ebx
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 4]
sbb ecx, edi
cmp ebx, dword [esp + 0x14]
mov dword [esp + 8], edx
sbb edi, dword [esp + 0x24]
mov edx, dword [esp + 8]
jae 0x4f8b04
cmp ebx, eax
mov eax, dword [esp + 4]
sbb eax, ecx
jae 0x4f8b04
mov eax, dword [esp + 0x14]
sub eax, edx
mov edi, dword [esp + 0x24]
mov ecx, edi
sbb ecx, esi
cmp edx, eax
mov eax, esi
sbb eax, ecx
jae 0x4f8c64
mov eax, esi
shld eax, edx, 1
lea ecx, [edx + edx]
mov dword [esp + 0xc], esi
mov esi, dword [esp + 0x14]
sub esi, ecx
sbb edi, eax
mov edx, 0x14
mov eax, dword [esp + 0x7c]
mul edx
cmp esi, eax
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
lea eax, [edx + eax*4]
mov edx, dword [esp + 8]
sbb edi, eax
jb 0x4f8c64
mov ebx, dword [esp + 0x18]
sub ebx, dword [esp + 0xa8]
jmp 0x4f8229
xor eax, eax
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
shld eax, ebx, cl
shl ebx, cl
test cl, 0x20
cmovne eax, ebx
mov ecx, 0
cmovne ebx, ecx
mov ecx, dword [esp + 0x5c]
sub ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x40]
sbb edi, dword [esp + 0x4c]
mov dword [esp + 0x48], ecx
add dword [esp + 0x48], 0xffffffff
mov dword [esp + 0x3c], edi
adc dword [esp + 0x3c], 0xffffffff
add ecx, 1
mov dword [esp + 0x78], ecx
adc edi, 0
mov dword [esp + 0x74], edi
mov ecx, edx
sub ecx, esi
mov edx, dword [esp + 0xc]
mov edi, dword [esp + 0x2c]
sbb edx, edi
mov dword [esp + 0x10], ecx
cmp ecx, ebx
mov ecx, edx
mov dword [esp + 0x34], eax
sbb ecx, eax
mov eax, dword [esp + 0x48]
setb cl
mov dword [esp + 0x58], ecx
cmp esi, eax
mov eax, dword [esp + 0x3c]
sbb edi, eax
mov dword [esp + 0x44], ebx
jae 0x4f8bfa
cmp dword [esp + 0x10], ebx
mov eax, dword [esp + 0x34]
sbb edx, eax
mov edi, esi
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov ebx, dword [esp + 0x18]
jb 0x4f8c08
mov edi, esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x70], ecx
mov dword [esp + 0x10], ecx
add edi, dword [esp + 0x44]
mov dword [esp + 0x38], edi
mov edx, dword [esp + 0x10]
adc edx, eax
cmp edi, dword [esp + 0x48]
mov ecx, edx
sbb ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], edx
jb 0x4f89c6
mov eax, dword [esp + 0x48]
mov ecx, eax
sub ecx, dword [esp + 0x54]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x3c]
sbb ecx, dword [esp + 0x70]
mov edi, dword [esp + 0x38]
sub edi, eax
mov edx, dword [esp + 0x10]
mov eax, edx
sbb eax, dword [esp + 0x3c]
cmp dword [esp + 0x58], edi
sbb ecx, eax
jb 0x4f8d2f
mov ecx, dword [ebp + 0x18]
mov eax, edx
mov edi, dword [esp + 0x28]
dec byte [ecx + edi]
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 8]
sub ecx, edi
mov edx, dword [esp + 0xc]
sbb edx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x54], ecx
cmp ecx, eax
mov ecx, edx
sbb ecx, dword [esp + 0x34]
setb cl
mov dword [esp + 0x58], ecx
cmp edi, dword [esp + 0x48]
mov ecx, dword [esp + 0x10]
sbb ecx, dword [esp + 0x3c]
jae 0x4f8c08
cmp dword [esp + 0x54], eax
mov ecx, dword [esp + 0x34]
sbb edx, ecx
mov dword [esp + 0x54], edi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x70], eax
mov eax, ecx
jae 0x4f8976
jmp 0x4f8c08
mov edx, dword [esp + 0x1c]
add edx, dword [esp + 0x68]
mov edi, ecx
mov ecx, dword [esp + 0x28]
adc ecx, dword [esp + 0x6c]
cmp edx, ebx
mov esi, ecx
sbb esi, edi
jb 0x4f8df1
mov esi, ebx
sub esi, dword [esp + 0x1c]
mov ebx, edi
sbb edi, dword [esp + 0x28]
sub edx, dword [esp + 0x64]
sbb ecx, ebx
cmp edx, esi
sbb ecx, edi
mov esi, dword [esp + 4]
jae 0x4f84da
mov dword [esp + 0x10], 0
mov edx, dword [esp + 8]
jmp 0x4f852f
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x44]
jmp 0x4f84b5
dec dword [esp + 0x18]
mov dword [esp + 4], ecx
mov ebx, ecx
mov ecx, dword [esp + 0x30]
shl ebx, cl
mov dword [esp + 0x14], ebx
xor eax, eax
test cl, 0x20
cmovne ebx, eax
mov dword [esp + 0x20], ebx
xor ebx, ebx
mov esi, dword [esp + 4]
shld ebx, esi, cl
test cl, 0x20
cmovne ebx, dword [esp + 0x14]
mov esi, edx
shl esi, cl
mov dword [esp + 4], esi
test cl, 0x20
mov esi, dword [esp + 4]
cmovne esi, eax
shld eax, edx, cl
mov edx, ebx
test cl, 0x20
cmovne eax, dword [esp + 4]
mov ebx, dword [esp + 0x20]
add esi, dword [esp + 8]
mov dword [esp + 4], esi
adc eax, dword [esp + 0xc]
mov dword [esp + 8], eax
cmp ebx, 3
mov ecx, edx
sbb ecx, 0
jae 0x4f8b3a
xor ebx, ebx
jmp 0x4f823e
test dword [esp + 0x2c], 0x7fe00000
je 0x4f7ead
mov eax, dword [esp + 0x18]
add eax, 0xfffffffe
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 4]
shld ebx, ecx, 2
shl ecx, 2
mov dword [esp + 8], eax
mov eax, ecx
jmp 0x4f7ead
mov ecx, ebx
mov eax, dword [esp + 4]
sub ecx, eax
mov dword [esp + 0x14], edx
mov esi, dword [esp + 8]
sbb edx, esi
cmp eax, ecx
mov ecx, esi
mov esi, dword [esp + 0x14]
sbb ecx, edx
jae 0x4f8b8b
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
shld ecx, edx, 1
add edx, edx
mov eax, dword [esp + 0x20]
sub eax, edx
mov edx, esi
sbb edx, ecx
mov dword [esp + 0xc], 0
xor ecx, ecx
inc ecx
cmp ecx, eax
mov ebx, dword [esp + 0x20]
sbb dword [esp + 0xc], edx
jb 0x4f88b4
cmp dword [esp + 4], 2
mov ecx, dword [esp + 8]
sbb ecx, 0
jb 0x4f8b04
mov ecx, esi
mov esi, dword [esp + 4]
add esi, 0xffffffff
mov eax, dword [esp + 8]
adc eax, 0xffffffff
sub ebx, esi
sbb ecx, eax
cmp esi, ebx
sbb eax, ecx
jb 0x4f8b04
mov ecx, dword [ebp + 0x18]
mov al, byte [edi + ecx - 1]
inc al
mov byte [edi + ecx - 1], al
cmp edi, 2
mov ebx, dword [esp + 0x18]
jl 0x4f8cb0
cmp al, 0x3a
jne 0x4f8cb0
mov ecx, dword [ebp + 0x18]
mov byte [ecx + edi - 1], 0x30
mov al, byte [ecx + edi - 2]
inc al
mov byte [ecx + edi - 2], al
dec edi
cmp edi, 1
jg 0x4f8bd5
jmp 0x4f8cb0
mov edi, esi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x38], edi
cmp edi, ecx
mov eax, dword [esp + 0x10]
sbb eax, dword [esp + 0x74]
jae 0x4f8c27
cmp byte [esp + 0x58], 0
je 0x4f8cd0
xor eax, eax
inc eax
mov edi, dword [esp + 0x38]
cmp eax, edi
mov eax, 0
mov ecx, dword [esp + 0x10]
sbb eax, ecx
mov eax, ecx
setb byte [esp + 0x18]
mov ecx, dword [esp + 8]
add ecx, 0xfffffffc
mov edx, dword [esp + 0xc]
adc edx, 0xffffffff
cmp ecx, edi
sbb edx, eax
setae cl
and cl, byte [esp + 0x18]
mov dword [esp + 0x10], ecx
jmp 0x4f81fa
cmp ebx, edx
mov ecx, dword [esp + 4]
mov eax, ecx
sbb eax, esi
jae 0x4f8b04
sub edx, ebx
sbb esi, ecx
mov ecx, dword [esp + 0x14]
sub ecx, edx
mov eax, dword [esp + 0x24]
sbb eax, esi
cmp edx, ecx
sbb esi, eax
jb 0x4f8b04
mov ecx, dword [ebp + 0x18]
mov edx, dword [esp + 0x30]
mov al, byte [ecx + edx]
inc al
mov byte [ecx + edx], al
test edx, edx
mov ebx, dword [esp + 0x18]
jle 0x4f8cb0
mov ecx, edx
inc ecx
cmp al, 0x3a
je 0x4f8d48
mov eax, dword [ebp + 0x18]
cmp byte [eax], 0x3a
jne 0x4f88b8
mov eax, dword [ebp + 0x18]
mov byte [eax], 0x31
inc ebx
jmp 0x4f88b8
mov ebx, dword [ebp + 0x14]
jmp 0x4f874f
mov eax, ecx
mov edi, dword [esp + 0x44]
add edi, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
adc ecx, dword [esp + 0x10]
cmp edi, eax
mov eax, ecx
sbb eax, dword [esp + 0x74]
jb 0x4f8d22
mov eax, dword [esp + 0x78]
sub eax, dword [esp + 0x38]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x18], eax
mov edx, eax
mov eax, dword [esp + 0x18]
sbb eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
sub edi, dword [esp + 0x78]
sbb ecx, edx
cmp edi, dword [esp + 0x28]
sbb ecx, dword [esp + 0x18]
jae 0x4f8c27
mov dword [esp + 0x10], 0
jmp 0x4f81fa
mov dword [esp + 0x58], 0
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x10], eax
jmp 0x4f8c08
mov eax, dword [ebp + 0x18]
mov edx, ecx
mov ecx, eax
mov byte [eax + edx - 1], 0x30
mov al, byte [eax + edx - 2]
inc al
mov byte [ecx + edx - 2], al
mov ecx, edx
dec ecx
cmp ecx, 1
jg 0x4f8ca8
jmp 0x4f8cb0
mov esi, edi
shld edi, ebx, 1
add ebx, ebx
dec ecx
bt esi, 0x13
mov esi, edi
jb 0x4f7e23
jmp 0x4f8d71
cvtsd2ss xmm0, xmm0
lea ecx, [esp + 0x98]
movss dword [ecx], xmm0
lea eax, [esp + 0xa8]
lea edx, [esp + 0xb8]
push eax
push edx
call fcn.0057cbc0
movaps xmm1, xmmword [0x5d82c0]
jmp 0x4f7ef9
mov ecx, dword [esp + 0x24]
shld edx, edi, 1
add edi, edi
dec esi
test edx, edx
js 0x4f7ea3
jmp 0x4f8dba
call fcn.0056be00
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
shld ecx, esi, 1
add esi, esi
dec edx
bt eax, 0x13
mov dword [esp + 8], ecx
mov eax, ecx
jb 0x4f85a8
jmp 0x4f8dd4
mov dword [esp + 0x10], 0
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 4]
jmp 0x4f8327
mov ecx, esi
jmp 0x4f8a9a