Function at 0x4f6850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x9c
mov edx, dword [esp + 0xbc]
mov esi, dword [edx]
mov eax, esi
and eax, 0xffffffcf
mov dword [edx], eax
mov eax, esi
and eax, 7
cmp eax, 4
ja case.default.0x4f687a
jmp dword [eax*4 + 0x5a21c8]
movzx eax, byte [ecx - 1]
mov esi, ecx
jmp 0x4f68a3
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x4f68a3
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x4f68a3
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
cmp al, 0x39
lea ecx, [esi - 1]
jne 0x4f7c91
cmp ecx, ebx
jne 0x4f6881
add dword [esp + 0x74], 1
mov eax, 0x31
mov byte [ebx], 0x30
mov byte [ecx], al
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
mov dword [esp], ebp
call fcn.004f83f0
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc8]
mov byte [esi], 0
test eax, eax
mov dword [edx], ecx
je 0x4f6900
mov eax, dword [esp + 0xcc]
mov dword [eax], esi
mov edx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x24]
or dword [edx], ecx
lea esi, [esi]
add esp, 0x9c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0xb0]
xor edx, edx
mov edi, dword [eax]
cmp edi, 0x20
jle 0x4f693e
mov eax, 0x20
add eax, eax
add edx, 1
cmp edi, eax
jg 0x4f6935
mov dword [esp], edx
call fcn.004f8330
mov edx, dword [esp + 0xb8]
mov ebp, eax
lea eax, [edi - 1]
sar eax, 5
lea ebx, [edx + eax*4]
mov eax, dword [esp + 0xb8]
lea edx, [ebp + 0x14]
mov ecx, edx
mov dword [esp + 0x20], edx
mov edx, dword [eax]
add eax, 4
mov dword [ecx], edx
add ecx, 4
cmp ebx, eax
jae 0x4f6968
mov edx, dword [esp + 0x20]
sub ecx, edx
sar ecx, 2
nop
lea eax, [ecx - 1]
mov ebx, dword [ebp + eax*4 + 0x14]
test ebx, ebx
jne 0x4f6e60
test eax, eax
mov ecx, eax
jne 0x4f6980
mov dword [ebp + 0x10], 0
mov dword [esp + 0x40], 0
mov dword [esp], ebp
call fcn.004f9110
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x4c], ecx
test eax, eax
mov dword [esp + 0x8c], eax
jne 0x4f6e37
mov ecx, dword [ebp + 0x10]
test ecx, ecx
jne 0x4f6a90
mov dword [esp], ebp
call fcn.004f83f0
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 1
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], 0x5a21c5
call fcn.004f7ea0
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov dword [edx], 0xffff8000
mov dword [esp + 8], 3
mov dword [esp + 4], ecx
mov dword [esp], 0x5a21c1
call fcn.004f7ea0
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 0xffff8000
mov dword [esp + 8], 8
mov dword [esp + 4], eax
mov dword [esp], str.Infinity
call fcn.004f7ea0
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.004f8b00
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x40]
lea eax, [ecx + edx - 1]
fstp qword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, eax
mov dword [esp + 0x78], eax
sar edx, 0x1f
mov ebx, edx
xor ebx, eax
and ecx, 0xfffff
sub ebx, edx
or ecx, 0x3ff00000
sub ebx, 0x435
mov dword [esp + 0x3c], ecx
test ebx, ebx
fld qword [esp + 0x38]
fsub dword [0x5a21dc]
fmul qword [0x5a21e0]
fadd qword [0x5a21e8]
fild dword [esp + 0x78]
fmul qword [0x5a21f0]
faddp st(1)
jle 0x4f6b12
mov dword [esp + 0x78], ebx
fild dword [esp + 0x78]
fmul qword [0x5a21f8]
faddp st(1)
fnstcw word [esp + 0x7e]
movzx ebx, word [esp + 0x7e]
mov bh, 0xc
mov word [esp + 0x7c], bx
fldcw word [esp + 0x7c]
fist dword [esp + 0x20]
fldcw word [esp + 0x7e]
fldz
fucompi st(1)
ja 0x4f7293
fstp st(0)
mov ebx, eax
shl ebx, 0x14
add ebx, ecx
cmp dword [esp + 0x20], 0x16
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x60], 1
ja 0x4f6b7c
mov edx, dword [esp + 0x20]
fld qword [edx*8 + 0x5a2260]
fld qword [esp + 0x38]
fxch st(1)
fucompi st(1)
fstp st(0)
jbe 0x4f6f00
sub dword [esp + 0x20], 1
mov dword [esp + 0x60], 0
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x54], 0
sub ecx, eax
sub ecx, 1
mov dword [esp + 0x48], ecx
js 0x4f7280
mov edx, dword [esp + 0x20]
test edx, edx
js 0x4f72b0
mov ecx, dword [esp + 0x20]
add dword [esp + 0x48], ecx
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], ecx
cmp dword [esp + 0xc0], 9
ja 0x4f6e80
cmp dword [esp + 0xc0], 5
jle 0x4f6e8b
sub dword [esp + 0xc0], 4
xor eax, eax
cmp dword [esp + 0xc0], 3
je 0x4f7557
jg 0x4f6ea0
cmp dword [esp + 0xc0], 2
je 0x4f750c
mov dword [esp + 0x78], edi
xor edx, edx
fild dword [esp + 0x78]
fmul qword [0x5a2200]
mov dword [esp + 0x64], 1
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x50], 0xffffffff
mov dword [esp + 0xc4], 0
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x8c], eax
lea esi, [esi]
mov dword [esp], eax
mov byte [esp + 0x18], dl
call fcn.004f7e60
mov ecx, dword [esp + 0xb0]
movzx edx, byte [esp + 0x18]
mov ecx, dword [ecx + 0xc]
mov ebx, eax
sub ecx, 1
cmp ecx, 0
mov dword [esp + 0x44], ecx
je 0x4f6c97
mov eax, 2
cmovge eax, ecx
and esi, 8
mov dword [esp + 0x44], eax
je 0x4f6c97
mov eax, 3
sub eax, dword [esp + 0x44]
mov dword [esp + 0x44], eax
test dl, dl
je 0x4f6f60
mov edx, dword [esp + 0x44]
or edx, dword [esp + 0x20]
jne 0x4f6f60
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x8c], 0
fld qword [esp + 0x38]
test ecx, ecx
je 0x4f6cce
fld1
fucompi st(1)
ja 0x4f7bb8
fld st(0)
mov eax, dword [esp + 0x50]
fadd st(1)
fadd dword [0x5a2214]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
test eax, eax
je 0x4f6f23
mov edx, dword [esp + 0x50]
fld st(0)
mov dword [esp + 0x74], 0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4f785a
fld qword [esp + 0x68]
lea esi, [ebx + 1]
fld dword [0x5a221c]
fdiv qword [edx*8 + 0x5a2258]
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 0
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fsubrp st(1)
fxch st(1)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
add eax, 0x30
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [ebx], al
fucomi st(1)
ja 0x4f6e07
fld st(1)
fsubr dword [0x5a2208]
fxch st(1)
fucomi st(1)
fstp st(1)
ja 0x4f6889
mov eax, dword [esp + 0x8c]
add eax, 1
cmp eax, edx
mov dword [esp + 0x8c], eax
jge 0x4f6f49
fld dword [0x5a220c]
jmp 0x4f6dd1
fld st(1)
fsubr dword [0x5a2208]
fxch st(1)
fucomi st(1)
fstp st(1)
ja 0x4f6891
mov eax, dword [esp + 0x8c]
add eax, 1
cmp edx, eax
mov dword [esp + 0x8c], eax
jle 0x4f6f4f
fxch st(1)
fxch st(2)
fmul st(1), st(0)
fmul st(2), st(0)
fxch st(2)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
add eax, 0x30
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [esi], al
add esi, 1
fucomi st(1)
jbe 0x4f6da0
fstp st(0)
fstp st(1)
fstp st(1)
jmp 0x4f6e0b
fstp st(0)
fstp st(1)
fldz
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x4f7cde
jne 0x4f7cde
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x4f68d4
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.004f9000
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0xb4]
sub dword [esp + 0x40], eax
add edx, eax
mov dword [esp + 0x4c], edx
jmp 0x4f69c6
bsr eax, dword [ebp + ecx*4 + 0x10]
mov dword [ebp + 0x10], ecx
shl ecx, 5
xor eax, 0x1f
sub ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x4f69a4
mov dword [esp + 0xc0], 0
add eax, 0x3fe
cmp eax, 0x7f7
setbe al
jmp 0x4f6bdd
cmp dword [esp + 0xc0], 4
je 0x4f754d
cmp dword [esp + 0xc0], 5
jne 0x4f6bff
mov dword [esp + 0x64], 1
mov edx, dword [esp + 0xc4]
add edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
add edx, 1
test edx, edx
mov dword [esp + 0x50], edx
jle 0x4f77b0
cmp edx, 0xe
mov dword [esp + 0x8c], edx
setbe dl
and edx, eax
mov eax, dword [esp + 0x50]
jmp 0x4f6c50
mov dword [esp + 0x60], 0
jmp 0x4f6b7c
fld st(0)
fadd st(1)
fadd dword [0x5a2214]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
fld st(0)
fsub dword [0x5a2218]
fld qword [esp + 0x68]
fxch st(1)
fucomi st(1)
ja 0x4f783d
fxch st(1)
fchs
fucompi st(1)
fstp st(0)
ja 0x4f7252
jmp 0x4f6f59
fstp st(0)
fstp st(0)
jmp 0x4f6f59
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x4f6f59
fstp st(0)
fstp qword [esp + 0x38]
lea esi, [esi]
mov eax, dword [esp + 0x4c]
test eax, eax
js 0x4f7020
mov edx, dword [esp + 0xb0]
mov ecx, dword [esp + 0x20]
cmp ecx, dword [edx + 0x14]
jg 0x4f7020
mov eax, dword [esp + 0x50]
fld qword [ecx*8 + 0x5a2260]
test eax, eax
jg 0x4f7678
mov eax, dword [esp + 0xc4]
shr eax, 0x1f
test al, al
je 0x4f7678
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x4f7256
fmul dword [0x5a2218]
fld qword [esp + 0x38]
fxch st(1)
fucompi st(1)
fstp st(0)
jae 0x4f7258
add ecx, 2
xor edi, edi
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], 0
mov byte [ebx], 0x31
lea esi, [ebx + 1]
xor edx, edx
mov dword [esp + 0x24], 0x20
mov dword [esp], edi
mov dword [esp + 0x18], edx
call fcn.004f83f0
mov edx, dword [esp + 0x38]
test edx, edx
mov edx, dword [esp + 0x18]
je 0x4f68d4
cmp edx, dword [esp + 0x38]
jne 0x4f74f7
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.004f83f0
jmp 0x4f68d4
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x4f72d0
mov eax, dword [esp + 0xb0]
mov esi, dword [esp + 0x4c]
sub edi, dword [esp + 0x40]
mov ecx, dword [eax + 4]
sub esi, edi
lea eax, [edi + 1]
mov dword [esp + 0x8c], eax
cmp esi, ecx
jge 0x4f74a0
cmp dword [esp + 0xc0], 5
je 0x4f74a0
cmp dword [esp + 0xc0], 3
je 0x4f74a0
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
sub eax, ecx
add eax, 1
test edx, edx
mov dword [esp + 0x8c], eax
jle 0x4f77e4
cmp dword [esp + 0xc0], 1
jle 0x4f77e4
cmp dword [esp + 0x50], eax
jl 0x4f74ae
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x4c], ecx
nop
mov dword [esp], 1
add dword [esp + 0x54], eax
add dword [esp + 0x48], eax
call fcn.004f8540
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x48]
test eax, eax
jle 0x4f70fc
mov eax, dword [esp + 0x4c]
test eax, eax
jle 0x4f70fc
mov ecx, dword [esp + 0x4c]
cmp dword [esp + 0x48], ecx
mov eax, ecx
cmovle eax, dword [esp + 0x48]
sub dword [esp + 0x54], eax
sub dword [esp + 0x48], eax
sub ecx, eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x4c], ecx
mov edi, dword [esp + 0x58]
test edi, edi
jle 0x4f714c
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x4f7799
test esi, esi
jle 0x4f7140
mov eax, dword [esp + 0x38]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.004f86d0
mov dword [esp + 4], ebp
mov dword [esp], eax
mov dword [esp + 0x38], eax
call fcn.004f8570
mov dword [esp], ebp
mov edi, eax
call fcn.004f83f0
mov ebp, edi
mov eax, dword [esp + 0x58]
sub eax, esi
jne 0x4f77f5
mov dword [esp], 1
call fcn.004f8540
mov edx, dword [esp + 0x5c]
test edx, edx
mov edi, eax
jle 0x4f7174
mov ecx, dword [esp + 0x5c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004f86d0
mov edi, eax
cmp dword [esp + 0xc0], 1
mov dword [esp + 0x58], 0
jle 0x4f775d
mov eax, dword [esp + 0x5c]
mov esi, 0x1f
test eax, eax
je 0x4f71a2
mov eax, dword [edi + 0x10]
bsr esi, dword [edi + eax*4 + 0x10]
xor esi, 0x1f
sub esi, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
sub esi, 4
and esi, 0x1f
add ecx, esi
mov eax, esi
test ecx, ecx
mov dword [esp + 0x8c], esi
jle 0x4f71d4
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.004f87f0
mov ebp, eax
mov eax, dword [esp + 0x8c]
add eax, dword [esp + 0x48]
test eax, eax
jle 0x4f71ea
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004f87f0
mov edi, eax
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x4f7564
mov eax, dword [esp + 0x50]
test eax, eax
jg 0x4f72f0
cmp dword [esp + 0xc0], 2
jle 0x4f72f0
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x4f7262
mov dword [esp], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 5
call fcn.004f8440
mov dword [esp], ebp
mov dword [esp + 4], eax
mov edi, eax
call fcn.004f8900
test eax, eax
jle 0x4f7262
mov ecx, dword [esp + 0x20]
add ecx, 2
mov dword [esp + 0x28], ecx
jmp 0x4f6fd8
fstp st(0)
jmp 0x4f7258
fstp st(0)
xor edi, edi
mov dword [esp + 0x38], 0
mov eax, dword [esp + 0xc4]
mov esi, ebx
xor edx, edx
mov dword [esp + 0x24], 0x10
neg eax
mov dword [esp + 0x28], eax
jmp 0x4f6fe8
neg ecx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x48], 0
jmp 0x4f6b97
fild dword [esp + 0x20]
fucompi st(1)
fstp st(0)
jp 0x4f72a3
je 0x4f6b3a
sub dword [esp + 0x20], 1
jmp 0x4f6b3a
mov edx, dword [esp + 0x20]
sub dword [esp + 0x54], edx
mov dword [esp + 0x5c], 0
neg edx
mov dword [esp + 0x58], edx
jmp 0x4f6bb7
mov edx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x38], 0
mov dword [esp + 0x4c], edx
jmp 0x4f70c8
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4f75c0
add esi, dword [esp + 0x4c]
test esi, esi
jle 0x4f7318
mov eax, dword [esp + 0x38]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.004f87f0
mov dword [esp + 0x38], eax
mov esi, dword [esp + 0x58]
mov eax, dword [esp + 0x38]
test esi, esi
mov dword [esp + 0x48], eax
jne 0x4f7abe
mov edx, dword [esp + 0x38]
mov dword [esp + 0x30], edi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x8c], 1
mov ebx, edx
jmp 0x4f742f
mov dword [esp], edx
mov dword [esp + 0x18], eax
call fcn.004f83f0
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xc0]
or edx, eax
jne 0x4f7385
mov ecx, dword [esp + 0xb8]
test byte [ecx], 1
jne 0x4f7385
mov edx, dword [esp + 0x44]
test edx, edx
je 0x4f7d35
test esi, esi
js 0x4f7934
or esi, dword [esp + 0xc0]
jne 0x4f73a6
mov edx, dword [esp + 0xb8]
test byte [edx], 1
je 0x4f7934
test eax, eax
jg 0x4f7b08
mov ecx, dword [esp + 0x28]
movzx edx, byte [esp + 0x2c]
mov byte [ecx], dl
mov edx, dword [esp + 0x50]
add ecx, 1
cmp dword [esp + 0x8c], edx
mov dword [esp + 0x28], ecx
je 0x4f7b7c
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.004f8440
cmp ebx, edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
mov ebp, eax
je 0x4f7493
call fcn.004f8440
mov dword [esp], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov ebx, eax
call fcn.004f8440
mov edi, eax
add dword [esp + 0x8c], 1
mov eax, dword [esp + 0x30]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.004f7f10
mov dword [esp + 4], ebx
mov dword [esp], ebp
mov dword [esp + 0x40], eax
add eax, 0x30
mov dword [esp + 0x2c], eax
call fcn.004f8900
mov dword [esp + 4], edi
mov esi, eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.004f8970
mov edx, eax
mov eax, 1
mov ecx, dword [edx + 0xc]
test ecx, ecx
jne 0x4f7352
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x18], edx
call fcn.004f8900
mov edx, dword [esp + 0x18]
jmp 0x4f7352
call fcn.004f8440
mov ebx, eax
mov edi, eax
jmp 0x4f7427
cmp dword [esp + 0xc0], 1
jle 0x4f77e4
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x58]
sub eax, 1
sub esi, eax
cmp dword [esp + 0x58], eax
jge 0x4f74d1
mov ecx, eax
xor esi, esi
sub ecx, dword [esp + 0x58]
add dword [esp + 0x5c], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x50]
test eax, eax
js 0x4f7aa0
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x8c], ecx
mov eax, ecx
mov dword [esp + 0x4c], edx
jmp 0x4f70b0
test edx, edx
je 0x4f700e
mov dword [esp], edx
call fcn.004f83f0
jmp 0x4f700e
mov dword [esp + 0x64], 0
mov ebx, dword [esp + 0xc4]
test ebx, ebx
jle 0x4f77cf
cmp dword [esp + 0xc4], 0xe
setbe dl
mov ecx, dword [esp + 0xc4]
and edx, eax
mov dword [esp + 0x8c], ecx
mov eax, ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x50], ecx
jmp 0x4f6c50
mov dword [esp + 0x64], 1
jmp 0x4f7514
mov dword [esp + 0x64], 0
jmp 0x4f6ec4
mov dword [esp + 4], edi
mov dword [esp], ebp
call fcn.004f8900
test eax, eax
jns 0x4f71f6
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
sub dword [esp + 0x20], 1
call fcn.004f8440
mov ebp, eax
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x4f7d74
cmp dword [esp + 0x70], 0
mov edx, dword [esp + 0x70]
jg 0x4f75bc
cmp dword [esp + 0xc0], 2
jg 0x4f7e49
mov dword [esp + 0x50], edx
mov esi, ebx
mov dword [esp + 0x24], ebx
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x8c], 1
jmp 0x4f75f9
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.004f8440
add dword [esp + 0x8c], 1
mov ebp, eax
mov dword [esp + 4], edi
mov dword [esp], ebp
call fcn.004f7f10
add eax, 0x30
mov byte [esi], al
add esi, 1
cmp ebx, dword [esp + 0x8c]
jg 0x4f75d7
mov ebx, dword [esp + 0x24]
xor edx, edx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4f7a35
cmp dword [esp + 0x44], 2
je 0x4f7a71
cmp dword [ebp + 0x10], 1
jle 0x4f7c79
movzx ecx, byte [esi - 1]
jmp 0x4f764d
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x4f7b9b
cmp eax, ebx
jne 0x4f7647
mov ecx, dword [esp + 0x20]
mov byte [ebx], 0x31
mov dword [esp + 0x24], 0x20
add ecx, 2
mov dword [esp + 0x28], ecx
jmp 0x4f6fe8
fld qword [esp + 0x38]
lea esi, [ebx + 1]
fld st(0)
fdiv st(2)
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
lea ecx, [eax + 0x30]
fild dword [esp + 0x78]
fmul st(2)
mov byte [ebx], cl
fsubp st(1)
fldz
fxch st(1)
fucomi st(1)
fstp st(1)
jnp 0x4f7db2
mov ecx, dword [esp + 0x8c]
cmp dword [esp + 0x50], ecx
je 0x4f780a
fld dword [0x5a220c]
mov edi, dword [esp + 0x50]
jmp 0x4f76ff
mov ecx, dword [esp + 0x8c]
cmp edi, ecx
je 0x4f7808
add ecx, 1
fmul st(1), st(0)
mov dword [esp + 0x8c], ecx
fld st(1)
fdiv st(3)
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
lea edx, [eax + 0x30]
fild dword [esp + 0x78]
fmul st(3)
mov byte [esi], dl
add esi, 1
fsubp st(2)
fldz
fxch st(2)
fucomi st(2)
fstp st(2)
jp 0x4f76f0
jne 0x4f76f0
fstp st(0)
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x4f68d4
cmp dword [esp + 0x40], 1
jne 0x4f718a
mov edx, dword [esp + 0xb0]
mov eax, dword [edx + 4]
add eax, 1
cmp dword [esp + 0xb4], eax
jle 0x4f718a
add dword [esp + 0x54], 1
add dword [esp + 0x48], 1
mov dword [esp + 0x58], 1
jmp 0x4f718a
mov edx, dword [esp + 0x58]
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.004f86d0
mov ebp, eax
jmp 0x4f714c
cmp dword [esp + 0x50], 0xe
mov dword [esp + 0x8c], 1
setbe dl
and edx, eax
mov eax, 1
jmp 0x4f6c50
mov edx, 1
mov dword [esp + 0xc4], 1
jmp 0x4f752e
mov edx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x4c], edx
jmp 0x4f70b0
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.004f86d0
mov ebp, eax
jmp 0x4f714c
fstp st(0)
mov edi, dword [esp + 0x44]
test edi, edi
je 0x4f7b5d
fstp st(0)
fstp st(0)
cmp dword [esp + 0x44], 1
je 0x4f7d24
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x4f68d4
fstp st(0)
fstp st(0)
fstp st(0)
mov dword [esp + 0x28], 2
xor edi, edi
mov dword [esp + 0x38], 0
jmp 0x4f6fd8
fld qword [esp + 0x68]
mov esi, ebx
fnstcw word [esp + 0x7e]
fmul qword [edx*8 + 0x5a2258]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
fld qword [esp + 0x38]
mov ah, 0xc
fld dword [0x5a220c]
fxch st(3)
mov word [esp + 0x7c], ax
jmp 0x4f789e
fmul st(2)
add ecx, 1
mov dword [esp + 0x8c], ecx
fld st(0)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
test eax, eax
je 0x4f78c0
fstp st(1)
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fsubp st(1)
jmp 0x4f78c2
fstp st(0)
add eax, 0x30
mov byte [esi], al
mov ecx, dword [esp + 0x8c]
add esi, 1
cmp ecx, edx
jne 0x4f7890
fstp st(2)
fxch st(1)
fld dword [0x5a221c]
fld st(2)
fadd st(1)
fxch st(2)
fucomi st(2)
fstp st(2)
ja 0x4f689b
fsubrp st(2)
fxch st(1)
fucompi st(1)
jbe 0x4f6f57
fstp st(1)
fldz
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x4f790d
je 0x4f7cf6
mov dword [esp + 0x24], 0x10
jmp 0x4f791d
movzx eax, byte [edx - 1]
mov esi, edx
cmp al, 0x30
lea edx, [esi - 1]
je 0x4f7917
mov eax, dword [esp + 0x74]
add eax, 1
mov dword [esp + 0x28], eax
jmp 0x4f68d4
mov ecx, dword [esp + 0x44]
mov edx, ebx
mov dword [esp + 0x48], edi
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
test ecx, ecx
je 0x4f7c11
cmp dword [ebp + 0x10], 1
jle 0x4f7c07
cmp dword [esp + 0x44], 2
je 0x4f7c6c
mov dword [esp + 0x24], edi
mov edi, edx
mov dword [esp + 0x34], ebx
mov ebx, dword [esp + 0x48]
jmp 0x4f79d9
movzx ecx, byte [esp + 0x2c]
mov byte [esi], cl
add esi, 1
mov dword [esp], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.004f8440
cmp edi, ebx
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
cmove edi, eax
mov dword [esp + 0x18], eax
call fcn.004f8440
mov ebp, eax
mov eax, dword [esp + 0x24]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.004f7f10
mov edx, dword [esp + 0x18]
mov ebx, edx
add eax, 0x30
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004f8900
test eax, eax
jg 0x4f7977
cmp dword [esp + 0x2c], 0x39
mov edx, edi
mov dword [esp + 0x48], ebx
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x34]
je 0x4f7c99
add dword [esp + 0x2c], 1
mov dword [esp + 0x24], 0x20
movzx eax, byte [esp + 0x2c]
mov byte [esi], al
mov ecx, dword [esp + 0x20]
add esi, 1
mov eax, dword [esp + 0x48]
add ecx, 1
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], eax
jmp 0x4f6fe8
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 0x18], edx
call fcn.004f87f0
mov dword [esp + 4], edi
mov dword [esp], eax
mov ebp, eax
call fcn.004f8900
mov edx, dword [esp + 0x18]
cmp eax, 0
jg 0x4f7641
jne 0x4f7a71
test byte [esp + 0x2c], 1
jne 0x4f7641
cmp dword [ebp + 0x10], 1
jle 0x4f7e0c
mov dword [esp + 0x24], 0x10
jmp 0x4f7a87
mov esi, eax
cmp byte [esi - 1], 0x30
lea eax, [esi - 1]
je 0x4f7a85
mov ecx, dword [esp + 0x20]
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x4f6fe8
mov ecx, dword [esp + 0x54]
xor eax, eax
sub ecx, dword [esp + 0x50]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x4c], ecx
jmp 0x4f70b0
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.004f8330
mov ecx, dword [esp + 0x38]
lea edx, [eax + 0xc]
mov esi, eax
mov eax, dword [ecx + 0x10]
add ecx, 0xc
mov dword [esp + 4], ecx
mov dword [esp], edx
lea eax, [eax*4 + 8]
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcpy
mov dword [esp + 4], 1
mov dword [esp], esi
call fcn.004f87f0
mov dword [esp + 0x48], eax
jmp 0x4f732c
cmp dword [esp + 0x44], 2
je 0x4f73ae
cmp dword [esp + 0x2c], 0x39
mov edx, ebx
mov dword [esp + 0x48], edi
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
je 0x4f7c99
movzx eax, byte [esp + 0x2c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add eax, 1
mov byte [esi], al
mov eax, dword [esp + 0x48]
add ecx, 1
add esi, 1
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], eax
jmp 0x4f6fe8
fadd st(0)
fucomi st(1)
jbe 0x4f7cb1
fstp st(0)
fstp st(0)
mov ecx, dword [esp + 0x20]
movzx eax, byte [esi - 1]
mov dword [esp + 0x74], ecx
jmp 0x4f68a3
mov dword [esp + 0x48], edi
mov eax, dword [esp + 0x48]
mov edx, ebx
mov edi, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x28]
mov dword [esp + 0x38], eax
jmp 0x4f7620
add ecx, 1
mov byte [eax], cl
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x4f6fe8
mov edx, dword [esp + 0x50]
test edx, edx
je 0x4f6f0d
mov eax, dword [esp + 0x70]
test eax, eax
jle 0x4f6f59
fld st(0)
mov edx, dword [esp + 0x70]
fmul dword [0x5a220c]
mov dword [esp + 0x74], 0xffffffff
fst qword [esp + 0x38]
fld st(0)
fmul dword [0x5a2210]
fadd dword [0x5a2214]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
jmp 0x4f6cfe
cmp dword [ebp + 0x14], 0
jne 0x4f795c
test eax, eax
jle 0x4f7cd4
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 0x18], edx
call fcn.004f87f0
mov dword [esp + 4], edi
mov dword [esp], eax
mov ebp, eax
call fcn.004f8900
mov edx, dword [esp + 0x18]
cmp eax, 0
jle 0x4f7de5
cmp dword [esp + 0x2c], 0x39
je 0x4f7c99
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x24], 0x20
add ecx, 0x31
mov dword [esp + 0x2c], ecx
cmp dword [ebp + 0x10], 1
jle 0x4f7dc1
mov dword [esp + 0x24], 0x10
jmp 0x4f7a13
mov ecx, dword [ebp + 0x14]
test ecx, ecx
jne 0x4f7641
mov dword [esp + 0x24], 0
jmp 0x4f7a87
add eax, 1
jmp 0x4f68bf
mov eax, dword [esp + 0x48]
mov ecx, 0x39
mov byte [esi], 0x39
add esi, 1
mov dword [esp + 0x38], eax
jmp 0x4f764d
fxch st(1)
fucompi st(1)
fstp st(0)
jp 0x4f7cbb
je 0x4f7d03
mov edx, dword [esp + 0x20]
movzx eax, byte [esi - 1]
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x74], edx
jmp 0x4f791d
mov dword [esp + 0x24], 0
jmp 0x4f7c62
mov eax, dword [esp + 0x74]
mov dword [esp + 0x24], 0x10
add eax, 1
mov dword [esp + 0x28], eax
jmp 0x4f68d4
mov dword [esp + 0x24], 0
jmp 0x4f791d
test al, 1
movzx eax, byte [esi - 1]
jne 0x4f7dff
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x74], ecx
jmp 0x4f791d
mov edx, dword [esp + 0x20]
movzx eax, byte [esi - 1]
mov dword [esp + 0x74], edx
jmp 0x4f68a3
cmp dword [esp + 0x2c], 0x39
mov edx, ebx
mov dword [esp + 0x48], edi
mov ecx, esi
mov edi, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x28]
je 0x4f7c99
test ecx, ecx
jle 0x4f7e23
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x24], 0x20
add ecx, 0x31
mov dword [esp + 0x2c], ecx
jmp 0x4f7a13
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], eax
call fcn.004f8440
cmp dword [esp + 0x70], 0
mov dword [esp + 0x38], eax
jg 0x4f7da5
cmp dword [esp + 0xc0], 2
jg 0x4f7dd8
mov edx, dword [esp + 0x70]
mov dword [esp + 0x50], edx
jmp 0x4f72fc
jne 0x4f76cd
fstp st(0)
fstp st(0)
jmp 0x4f7745
cmp dword [ebp + 0x14], 0
mov eax, 0x10
cmove eax, dword [esp + 0x24]
mov dword [esp + 0x24], eax
jmp 0x4f7a13
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x50], ecx
jmp 0x4f7210
jne 0x4f7df2
test byte [esp + 0x2c], 1
jne 0x4f7c48
mov dword [esp + 0x24], 0x20
jmp 0x4f7c62
mov edx, dword [esp + 0x20]
mov dword [esp + 0x74], edx
jmp 0x4f68a3
cmp dword [ebp + 0x14], 0
mov dword [esp + 0x24], 0
jne 0x4f7a7b
jmp 0x4f7a87
cmp dword [ebp + 0x10], 1
mov dword [esp + 0x24], 0x10
jg 0x4f7a13
cmp dword [ebp + 0x14], 1
sbb eax, eax
not eax
and eax, 0x10
mov dword [esp + 0x24], eax
jmp 0x4f7a13
mov dword [esp + 0x50], edx
jmp 0x4f7210