Function at 0x41ca8d
Capabilities:
Authenticate hmac
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
mov dword [ebp - 0x124], ecx
mov ecx, dword [ecx]
push esi
mov esi, dword [eax]
mov eax, ecx
and eax, 0x800
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x5c], eax
push edi
push ebx
pop eax
setne al
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x78], eax
mov eax, ecx
shr eax, 9
and eax, 1
mov dword [ebp - 0x13c], edx
mov edx, dword [edx]
mov dword [ebp - 0xf8], eax
xor eax, 1
and ecx, dword [ebp - 0xc]
mov dword [ebp - 0xfc], eax
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x58], eax
mov eax, ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 4], esi
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], 0xff
mov dword [ebp - 0x110], 0xfc00
mov dword [ebp - 0x114], 0xdc00
mov dword [ebp - 0x12c], 0x7b
mov dword [ebp - 0x120], 0x3a
mov dword [ebp - 0x140], 0x87
mov dword [ebp - 0x90], 0x30
mov dword [ebp - 0xb4], 0x39
mov dword [ebp - 0x128], 0x27
mov dword [ebp - 0x118], 0x1e
mov dword [ebp - 0x11c], 0x82
mov dword [ebp - 0x138], 0x5d
jmp 0x41cd3a
mov eax, ebx
sub eax, 0x5b
je 0x41d13c
sub eax, 1
je 0x41d742
sub eax, 1
je 0x45b468
sub eax, 1
je 0x45b43d
sub eax, 0x1d
je 0x45a7ed
sub eax, 1
je 0x41cf26
cmp dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0xc]
mov edi, ecx
mov word [ebp - 0x10c], bx
je 0x41cc29
mov eax, 0xfc00
and ebx, eax
mov eax, 0xd800
cmp ebx, eax
je 0x45b48e
push 2
pop esi
mov ebx, dword [ebp + 0x28]
mov dword [ebp - 0x28], edx
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
je 0x41cc9b
test cl, al
je 0x41cc9b
movzx ecx, word [ebp - 0x10c]
mov edx, 0xfc00
mov eax, ecx
and eax, edx
mov edx, 0xd800
cmp eax, edx
je 0x45c71a
mov eax, ecx
mov ecx, 0x80
cdq
idiv ecx
movzx eax, byte [eax + 0x4c0f10]
shl eax, 7
add eax, edx
mov edx, dword [ebp - 8]
movzx eax, word [eax*2 + 0x4b2c10]
movzx eax, byte [eax*8 + 0x4b03b3]
test eax, eax
jne 0x41d112
mov eax, dword [ebp - 0x2c]
and eax, dword [ebp - 0xc]
push 0x1d
pop ecx
add eax, ecx
mov word [edx], ax
add edx, esi
xor eax, eax
mov dword [ebp - 8], edx
mov ecx, eax
test edi, edi
je 0x41ccc8
mov ax, word [ebp + ecx*2 - 0x10c]
mov word [edx], ax
add edx, esi
inc ecx
cmp ecx, edi
jb 0x41ccb3
mov dword [ebp - 8], edx
mov ax, word [ebp - 0x10c]
push 0xd
pop ecx
cmp ax, cx
je 0x45c746
push 0xa
pop ecx
cmp ax, cx
je 0x45c746
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
je 0x41d850
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x70], eax
cmp edi, dword [ebp - 0xc]
jne 0x45c77b
movzx eax, word [edx - 2]
mov dword [ebp - 0x60], eax
mov eax, dword [ebx + 0x68]
or eax, ecx
mov dword [ebp - 0x54], eax
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0x50]
movzx ebx, word [esi]
mov dword [ebp - 0x10], ebx
test ebx, ebx
je 0x41cf8d
cmp dword [ebp + 0x2c], 0
mov edi, dword [ebp + 0x28]
mov ecx, dword [edi + 0x3c]
mov eax, dword [edi + 0x10]
lea ecx, [eax + ecx*2]
je 0x41cf18
lea eax, [ecx - 0xc8]
cmp edx, eax
ja 0x45c8dd
mov eax, dword [ebp - 0xc0]
cmp edx, eax
jb 0x4599d3
mov ecx, edx
sub ecx, eax
mov eax, dword [ebp + 0x2c]
sar ecx, 1
mov edx, dword [eax]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0x45ca04
lea eax, [edx + ecx]
mov ecx, dword [ebp + 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ecx], eax
test edx, edx
je 0x41cf7f
mov ecx, dword [ebp - 0xb0]
cmp edx, ecx
jbe 0x41cde1
mov esi, dword [ebp - 8]
mov eax, esi
sub eax, edx
and eax, 0xfffffffe
push eax
push edx
push ecx
call fcn.00422b59
mov edx, dword [ebp - 0x28]
add esp, 0xc
mov ecx, dword [ebp - 0xb0]
sub edx, ecx
sar edx, 1
neg edx
mov dword [ebp - 0x28], ecx
lea esi, [esi + edx*2]
mov dword [ebp - 8], esi
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [ebp - 0xc0], edx
test ebx, ebx
je 0x41ce0b
push 0x5c
pop ecx
cmp ebx, ecx
je 0x41d3d7
cmp dword [ebp - 0x64], 0
jne 0x4599f2
cmp ebx, ecx
je 0x41d3ec
mov edi, dword [ebp - 0x2c]
and edi, 8
mov dword [ebp - 0x30], edi
jne 0x459a5f
push 0x28
pop eax
cmp ebx, eax
je 0x41cf9a
push 0x2a
pop eax
cmp ebx, eax
je 0x41d3fe
push 0x2b
pop eax
cmp ebx, eax
je 0x41d3fe
push 0x3f
pop eax
cmp ebx, eax
je 0x41d3fe
push 0x7b
pop eax
cmp ebx, eax
je 0x459ba7
mov edx, dword [ebp - 0x88]
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x50]
test edx, edx
jne 0x459bbf
test dword [ebp - 0x2c], 0x4000
jne 0x459c00
mov edx, dword [ebp - 8]
push 0x3f
pop eax
cmp ebx, eax
ja 0x41cbcb
je 0x45a7e1
mov eax, ebx
xor ecx, ecx
sub eax, ecx
je 0x41cf26
sub eax, 0x24
je 0x45a7cc
sub eax, 4
je 0x41cfb9
sub eax, 1
je 0x41cf26
sub eax, 1
je 0x41d409
sub eax, 1
je 0x459c4e
sub eax, 3
jne 0x41cc03
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0x41ced3
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov ebx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x54]
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
shr eax, 2
and eax, dword [ebp - 0xc]
mov dword [ebp - 0x68], ecx
or eax, 0xc
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x28], edx
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
jmp 0x41cd29
cmp dword [edi + 0x20], ecx
jbe 0x41cdea
jmp 0x45caae
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x34]
mov dword [eax], ecx
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x13c]
mov dword [eax], edx
mov eax, dword [ebp + 8]
mov dword [eax], esi
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x41cf77
sub edx, dword [ebp - 0xc0]
mov ebx, 0x7fffffeb
mov ecx, dword [eax]
sub ebx, ecx
sar edx, 1
cmp ebx, edx
jl 0x45ca04
add ecx, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
leave
ret
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 8], edx
jmp 0x41cde4
test eax, eax
je 0x41cd48
jmp 0x4599be
push 0x3f
pop eax
cmp word [esi + 2], ax
jne 0x41ce51
push 0x23
pop eax
cmp word [esi + 4], ax
jne 0x41ce51
jmp 0x459b62
add esi, 2
push 0x2a
mov dword [ebp - 4], esi
pop eax
movzx edx, word [esi]
cmp dx, ax
je 0x459c56
mov eax, dword [ebp - 0x2c]
mov ecx, 0x85
mov dword [ebp - 0x24], ecx
xor edi, edi
mov ecx, dword [ebp + 0x28]
mov ebx, edi
mov dword [ebp - 0x3c], eax
push 0x3f
mov dword [ebp - 0x18], ebx
mov eax, dword [ecx + 0x20]
sub eax, dword [ecx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
pop eax
mov dword [ebp - 0x30], edi
cmp dx, ax
jne 0x41d599
add esi, 2
mov dword [ebp - 4], esi
push 0x3a
pop edx
movzx ebx, word [esi]
mov eax, ebx
cmp eax, edx
jbe 0x459ed7
mov edx, esi
mov edi, ebx
mov dword [ebp - 0x1c], edx
sub eax, 0x3c
je 0x45a5b3
sub eax, 1
je 0x45a475
sub eax, 1
je 0x45a5a9
sub eax, 5
je 0x45a4ff
push 0xd
pop ebx
sub eax, ebx
je 0x45a4b6
push 2
pop ebx
sub eax, ebx
je 0x45a499
push 0x2a
pop ebx
sub eax, ebx
je 0x45a465
xor ecx, ecx
push 0x29
mov eax, ecx
mov dword [ebp - 0x30], ecx
pop ebx
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x30]
cmp di, bx
je 0x45b731
mov ebx, edx
movzx eax, di
cmp di, word [ebp - 0x120]
je 0x41d0bf
lea esi, [edx + 2]
movzx edi, di
push 0x69
pop edx
mov dword [ebp - 4], esi
cmp ax, dx
ja 0x45b701
jne 0x45b6b6
mov eax, dword [ebp - 0xc]
or dword [ecx], eax
movzx eax, word [esi]
mov ebx, esi
push 0x29
mov dword [ebp - 0x1c], ebx
mov edx, ebx
pop ebx
mov edi, eax
cmp ax, bx
jne 0x41d07b
mov ebx, esi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
or ecx, dword [ebp - 0x2c]
not eax
and ecx, eax
push 0x29
pop eax
mov dword [ebp - 0x3c], ecx
cmp word [esi], ax
jne 0x45a40c
mov edx, dword [ebp - 0xc]
mov eax, ecx
shr eax, 9
and eax, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xf8], eax
xor eax, edx
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x124]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, ecx
and eax, edx
mov dword [ebp - 0x94], eax
jmp 0x41cd2c
push 0x10
pop ecx
mov word [edx], cx
add edx, esi
push 9
pop ecx
mov word [edx], cx
add edx, esi
mov word [edx], ax
add edx, esi
cmp dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 8], edx
je 0x45c739
mov esi, dword [ebp - 4]
jmp 0x41cd2f
push 6
lea ecx, [esi + 2]
mov edx, 0x49e0cc
call fcn.0041d965
pop ecx
test eax, eax
je 0x45bda1
mov ecx, dword [ebp - 4]
mov edx, 0x49e0c4
push 6
lea ecx, [ecx + 2]
call fcn.0041d965
pop ecx
test eax, eax
je 0x45bda8
mov edx, dword [ebp + 0x28]
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 8]
push 0x3a
mov eax, dword [edx + 0x20]
sub eax, dword [edx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
movzx eax, word [ecx + 2]
pop edi
mov dword [ebp - 0x28], ebx
cmp ax, di
je 0x45bdc1
push 0x2e
pop edx
cmp ax, dx
je 0x45bdc1
push 0x3d
pop edx
cmp ax, dx
je 0x45bdc1
xor esi, esi
push 0x5c
mov eax, esi
pop edx
mov dword [ebp - 0x10], eax
add ecx, 2
mov dword [ebp - 4], ecx
movzx edi, word [ecx]
mov dword [ebp - 0x14], edi
cmp edi, edx
je 0x45bdd9
test eax, eax
jne 0x41d1d9
cmp edi, 0x5e
je 0x45be13
push 0x5d
pop ecx
cmp edi, ecx
je 0x45be1b
lea eax, [ebx + 6]
mov dword [ebp - 0x38], esi
push 0x20
mov dword [ebp - 0x18], eax
mov ebx, esi
mov dword [ebp - 0x20], eax
pop eax
push eax
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x70], esi
push esi
push eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x3c], esi
call fcn.00422779
mov esi, dword [ebp - 4]
add esp, 0xc
test edi, edi
je 0x45c621
mov edx, ebx
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x7c], ebx
mov ebx, edx
mov dword [ebp - 0x30], edx
je 0x41d241
mov eax, edi
mov ecx, 0xfc00
and eax, ecx
cmp eax, 0xd800
je 0x45be63
mov ecx, dword [ebp - 0x18]
cmp dword [ebp - 0x20], ecx
ja 0x45be9f
cmp dword [ebp + 0x2c], 0
je 0x41d25e
mov eax, dword [ebp - 0x20]
cmp eax, ecx
ja 0x45beaa
cmp dword [ebp - 0x64], 0
jne 0x45bebe
cmp edi, 0x5b
je 0x45bee6
push 0x5c
pop ecx
cmp edi, ecx
je 0x45c15a
xor edx, edx
mov ecx, dword [ebp + 0x28]
mov ebx, dword [ebp - 0x2c]
push 0x5c
pop eax
cmp word [esi + 2], ax
je 0x45c42a
push 0xd
pop eax
mov edx, esi
cmp edi, eax
je 0x45c453
push 0xa
pop eax
cmp edi, eax
je 0x45c453
mov ecx, dword [ebp - 0x64]
test ecx, ecx
jne 0x41d2bd
push 0x2d
pop eax
cmp word [esi + 2], ax
je 0x45c45f
mov eax, dword [ebp - 0x7c]
mov ebx, eax
push 2
pop edx
mov dword [ebp - 0x1c], eax
cmp eax, edx
jl 0x41d3cc
test ecx, ecx
jne 0x41d2e4
cmp dword [ebp - 0x3c], ecx
jne 0x41d2e4
mov ecx, dword [ebp - 0xc]
cmp ebx, ecx
je 0x41d83e
push edi
push edi
push dword [ebp + 0x28]
push dword [ebp - 0x2c]
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0xe0]
call fcn.0041d8d0
mov edx, eax
add esp, 0x10
add edx, dword [ebp - 0x30]
mov esi, dword [ebp - 4]
mov dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
push 2
pop edi
add esi, edi
mov dword [ebp - 4], esi
movzx edi, word [esi]
mov dword [ebp - 0x14], edi
test edi, edi
je 0x45c602
push 0x5d
pop eax
cmp edi, eax
jne 0x41d21f
cmp dword [ebp - 0x64], 0
jne 0x41d21f
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x20], ecx
ja 0x41d344
mov eax, dword [ebp - 0x70]
mov edi, dword [ebp - 0x34]
cmp edi, 0xfffffffe
jne 0x41d352
or edi, 0xffffffff
mov dword [ebp - 0x34], edi
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x80], edx
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x84], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x70], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x68], edi
test eax, eax
jne 0x45c788
mov ebx, dword [ebp + 0x2c]
test ebx, ebx
je 0x41d385
mov eax, dword [ebp - 0x20]
sub eax, ecx
sar eax, 1
add dword [ebx], eax
mov esi, dword [ebp - 0x10]
xor eax, eax
cmp esi, edx
mov edx, dword [ebp - 8]
push 0x6e
setne al
pop ecx
add eax, ecx
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
test ebx, ebx
jne 0x41d3c5
test esi, esi
jne 0x45c8c7
push 0x20
pop eax
push eax
lea eax, [ebp - 0xe0]
push eax
push edx
call fcn.00421259
mov edx, dword [ebp - 8]
add esp, 0xc
push 0x20
jmp 0x41cf0d
lea ebx, [eax + 1]
mov dword [ebp - 0x1c], ebx
jmp 0x41d2d0
push 0x45
pop ecx
cmp word [esi + 2], cx
push 0x5c
pop ecx
jne 0x41cdf9
jmp 0x4599dd
push 0x51
pop ecx
cmp word [esi + 2], cx
jne 0x41ce0b
jmp 0x4599e4
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x50]
jmp 0x41ce66
or eax, 0xffffffff
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x45c9cd
test ecx, ecx
jne 0x41d43f
mov ebx, dword [ebp - 0x80]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x60], ebx
mov ebx, dword [ebp - 0x70]
mov dword [ebp - 0x54], ebx
sub ecx, eax
mov dword [ebp - 0x48], edx
neg ecx
push 2
sbb ecx, ecx
xor ebx, ebx
pop eax
and ecx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x7c], ecx
test edi, edi
jne 0x45a824
push 0x23
pop eax
push 0x28
pop ecx
push 0x3f
pop edx
cmp word [esi + 2], cx
je 0x45a920
lea ecx, [esi + 2]
movzx eax, word [ecx]
push 0x2b
pop edi
cmp ax, di
je 0x45a975
cmp ax, dx
jne 0x45a980
mov ebx, dword [ebp - 0xfc]
mov esi, ecx
mov dword [ebp - 4], esi
mov edx, dword [ebp - 0x28]
push 0x75
pop eax
mov dword [ebp - 0x24], ebx
cmp word [edx], ax
je 0x45a98b
mov edi, dword [ebp - 8]
movzx ecx, word [edx]
push 0x1d
pop eax
cmp cx, ax
je 0x45b0ab
push 0x1e
pop eax
cmp cx, ax
je 0x45b0ab
push 0x1f
pop eax
cmp cx, ax
je 0x45b0ab
push 0x20
pop eax
cmp cx, ax
je 0x45b0ab
cmp ecx, 0x17
jae 0x45aa14
push 0x34
mov edi, ecx
pop ebx
mov dword [ebp - 0x18], edi
mov eax, ecx
push 0x10
pop ecx
cmp ax, cx
je 0x45b15a
push 0xf
pop ecx
cmp ax, cx
je 0x45b15a
or dword [ebp - 0x10], 0xffffffff
lea edi, [edx + 2]
or dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 8]
mov dword [ebp - 8], edx
test eax, eax
je 0x41d586
mov edx, dword [ebp - 0x24]
add edx, ebx
cmp dword [ebp - 0x4c], 0
mov dword [ebp - 0x30], edx
jne 0x45b1a1
mov ecx, dword [ebp - 0x44]
movzx eax, dx
cmp ecx, 0xffffffff
jne 0x45b16f
mov ecx, dword [ebp - 0x28]
add eax, 0x21
push 2
mov word [ecx], ax
pop ecx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
cmp dword [ebp - 0x5c], 0
je 0x41d566
test ebx, 0x10000000
jne 0x45b2ca
mov word [edi], bx
mov ebx, ecx
lea edx, [ebx + edi]
mov dword [ebp - 8], edx
test esi, esi
jns 0x45b095
mov esi, dword [ebp - 4]
cmp dword [ebp - 0x1c], 0
jne 0x45b2e8
mov ecx, dword [ebp + 0x28]
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x7c]
or dword [ecx + 0x68], eax
jmp 0x41cd2c
test dword [ebp - 0x2c], 0x1000
jne 0x45a7bc
mov edx, dword [ebp - 8]
inc dword [ecx + 0x40]
mov ax, word [ecx + 0x40]
mov ebx, dword [ebp - 0xc]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
mov ecx, dword [ecx + 0x58]
mov edi, dword [ebp + 0x28]
lea eax, [ecx + 1]
mov dword [edi + 0x58], eax
mov edi, dword [ebp - 0x24]
cmp ecx, 0xfa
jge 0x45ca20
mov eax, 0x80
cmp edi, eax
mov eax, dword [ebp + 0x28]
jbe 0x45b749
mov ecx, dword [eax + 0x20]
sub ecx, dword [eax + 0x10]
sar ecx, 1
mov dword [ebp - 0x40], ecx
xor ecx, ecx
mov dword [ebp - 0x28], edx
mov word [edx], di
mov edi, dword [eax + 0x68]
mov esi, dword [eax + 0x40]
mov eax, dword [ebp + 0x2c]
neg eax
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x48], edx
sbb eax, eax
mov dword [ebp - 0x7c], edi
and eax, ecx
xor edx, edx
mov ecx, dword [ebp - 0x24]
cmp ecx, 0x87
sete dl
cmp ecx, 0x7f
je 0x45b765
cmp ecx, 0x80
je 0x45b765
xor ecx, ecx
push eax
push dword [ebp + 0x28]
lea eax, [ebp - 0xa0]
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xe4]
push eax
mov eax, dword [ebp + 0x24]
add eax, edx
lea edx, [ebp - 0x48]
push eax
push ebx
push dword [ebp - 0x30]
lea eax, [ebp - 4]
push ecx
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0x3c]
push eax
call fcn.0041c826
add esp, 0x34
test eax, eax
je 0x45c5a7
mov ecx, dword [ebp + 0x28]
mov eax, 0x81
mov ebx, dword [ebp - 0x24]
dec dword [ecx + 0x58]
cmp ebx, eax
je 0x45b76d
mov eax, dword [ebp - 8]
mov edx, 0x80
cmp ebx, edx
jbe 0x45b786
mov ecx, 0x87
cmp ebx, ecx
je 0x45b78e
mov eax, dword [ebp - 0xa0]
mov esi, dword [ebp - 4]
push 0x29
pop edx
cmp word [esi], dx
jne 0x45ca12
cmp dword [ebp + 0x2c], 0
jne 0x41d88d
mov edx, dword [ebp - 0x48]
mov dword [ebp - 8], edx
cmp ebx, 0x91
je 0x41cd2f
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x80], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x68], ecx
xor ecx, ecx
mov dword [ebp - 0xa4], ecx
mov ecx, 0x81
cmp ebx, ecx
mov ecx, dword [ebp - 0x9c]
jb 0x45b842
cmp dword [ebp - 0x34], 0xfffffffe
je 0x45b7fb
test ecx, ecx
jns 0x45b823
test eax, eax
js 0x41cd2f
jmp 0x45b85a
mov ebx, dword [ebp + 0xc]
lea edx, [ebp - 0xbc]
xor eax, eax
mov dword [ebp - 0x74], esi
mov esi, dword [ebp + 0x28]
lea ecx, [ebp - 4]
push eax
push dword [ebp - 0x2c]
push dword [esi + 0x40]
push ebx
call fcn.0041dee1
xor edx, edx
add esp, 0x10
mov edi, eax
cmp dword [ebx], edx
jne 0x45c5a7
test edi, edi
je 0x45b4c1
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0x41d790
lea eax, [edi - 6]
cmp eax, 0x10
ja 0x41d790
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x70], eax
cmp edi, 0x1b
je 0x45b510
cmp edi, 0x1c
je 0x45b88a
test edi, edi
js 0x45bc5d
push 0xf
pop eax
cmp edi, eax
je 0x45bd1f
push 0x10
pop eax
cmp edi, eax
je 0x45bd1f
mov ecx, dword [ebp - 0xc]
cmp edi, 5
je 0x45bcd6
push 4
pop eax
cmp edi, eax
je 0x45bcd6
cmp edi, ecx
je 0x45bcd6
mov ebx, esi
push 0x1d
pop eax
cmp edi, eax
jge 0x45bce9
push 0x10
pop ecx
lea eax, [edi - 6]
cmp ecx, eax
mov ecx, dword [ebx + 0x20]
sbb edx, edx
sub ecx, dword [ebx + 0x10]
not edx
sar ecx, 1
and edx, dword [ebp - 8]
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x40], ecx
je 0x45bd0c
mov edx, dword [ebp - 8]
push 2
pop esi
mov word [edx], di
add edx, esi
mov dword [ebp - 8], edx
jmp 0x41d134
push 0x5d
pop eax
cmp word [esi + 2], ax
jne 0x41d2e4
jmp 0x45c62f
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0xc]
cmp edi, ecx
jne 0x45c752
movzx eax, ax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x34], eax
cmp edi, ecx
jne 0x45c76c
mov edx, dword [ebp - 8]
jmp 0x41d134
mov ebx, dword [ebp + 0x2c]
mov ecx, 0x7fffffeb
mov edi, dword [ebp - 0x8c]
mov edx, dword [ebx]
sub ecx, edx
lea eax, [edi - 4]
cmp ecx, eax
jl 0x45ca04
push 2
pop ecx
lea eax, [edi - 4]
add eax, edx
mov edx, dword [ebp - 8]
add edx, ecx
mov dword [ebx], eax
push 0x78
pop eax
mov word [edx], cx
add edx, ecx
mov word [edx], ax
add edx, ecx
mov word [edx], cx
add edx, ecx
jmp 0x41cf10
mov esi, eax
xor eax, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x50], eax
movzx ebx, word [esi]
mov dword [ebp - 0x10], ebx
jmp 0x41cd48
mov edx, eax
mov dword [ebp - 8], edx
jmp 0x41cd7a
xor ebx, ebx
mov dword [ebp - 0x64], ebx
jmp 0x4599ea
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x64], ecx
add esi, 2
jmp 0x41cd2f
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x459a1a
cmp dword [ebp + 0x2c], 0
jne 0x459a12
sub esi, dword [edi + 0x18]
sar esi, 1
sub si, word [eax + 4]
mov word [eax + 6], si
mov esi, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x88], eax
test dword [ebp - 0x2c], 0x4000
je 0x45b486
push 0x76
pop eax
mov word [edx], ax
mov ecx, 0xff
lea eax, [edx + 2]
mov dword [ebp - 0x88], edx
mov word [eax], cx
sub esi, dword [edi + 0x18]
push 2
pop ecx
add eax, ecx
sar esi, 1
xor ecx, ecx
lea edx, [eax + 4]
mov word [eax], si
mov word [eax + 2], cx
mov esi, dword [ebp - 4]
mov dword [ebp - 8], edx
jmp 0x41cc03
mov ecx, esi
mov edx, 0xff
mov dword [ebp - 0x3c], ecx
mov eax, ecx
cmp ebx, edx
ja 0x459a95
mov eax, dword [ebp + 0x28]
mov edx, dword [eax + 0xc]
test byte [edx + ebx], 1
mov eax, ecx
je 0x459a92
lea esi, [ecx + 2]
mov dword [ebp - 4], esi
mov ecx, esi
movzx ebx, word [esi]
mov eax, esi
cmp ebx, 0xff
jbe 0x459a75
mov dword [ebp - 0x10], ebx
push 0x23
pop ecx
cmp ebx, ecx
jne 0x459aec
lea esi, [eax + 2]
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0x459aec
mov edi, esi
mov ebx, eax
mov eax, dword [ebp + 0x28]
mov edx, dword [eax + 0x84]
mov ecx, dword [eax + 0x1c]
test edx, edx
je 0x459afd
cmp edi, ecx
jae 0x459b2a
push dword [ebp - 0x78]
lea edi, [eax + 0x88]
push edi
push ecx
mov ecx, esi
call fcn.0040b0ad
mov esi, dword [ebp - 4]
add esp, 0xc
test eax, eax
je 0x459b2a
mov edx, dword [edi]
lea esi, [esi + edx*2]
mov dword [ebp - 4], esi
mov edi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
cmp esi, dword [ebp - 0x3c]
ja 0x41cd37
jmp 0x41ce1a
mov edx, dword [eax + 0x88]
lea eax, [edx + edx]
sub ecx, eax
cmp edi, ecx
ja 0x459b2a
mov ecx, dword [ebp + 0x28]
cmp bx, word [ecx + 0x8c]
jne 0x459b2a
cmp edx, dword [ebp - 0xc]
je 0x459ae0
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x8e]
je 0x459ae0
add esi, 2
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 4], esi
mov edi, esi
je 0x459b55
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x459b55
add esi, 2
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
test ax, ax
je 0x459ae6
jmp 0x459aac
add esi, 6
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0x459b99
mov edx, esi
mov ecx, eax
push 0x29
pop eax
cmp cx, ax
je 0x459b8e
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
jne 0x459b74
xor eax, eax
cmp word [esi], ax
jne 0x41cd2c
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x12
jmp 0x45cab7
lea ecx, [esi + 2]
call fcn.0049b69a
mov esi, dword [ebp - 4]
test eax, eax
jne 0x41d3fe
jmp 0x41ce51
test eax, eax
jne 0x41ce66
mov eax, dword [ebp - 0xac]
dec dword [ebp - 0xac]
test eax, eax
jg 0x41d401
cmp dword [ebp + 0x2c], ecx
jne 0x459bf3
mov eax, dword [ebp + 0x28]
sub esi, dword [eax + 0x18]
sar esi, 1
sub si, word [edx + 4]
mov word [edx + 6], si
mov esi, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x88], eax
jmp 0x41d401
test ecx, ecx
jne 0x41ce73
test eax, eax
jne 0x41ce73
mov eax, dword [ebp - 8]
push 0x76
pop edx
mov dword [ebp - 0x88], eax
mov word [eax], dx
add eax, 2
mov edx, 0xff
push 2
mov word [eax], dx
pop edx
add eax, edx
mov edx, dword [ebp + 0x28]
sub esi, dword [edx + 0x18]
sar esi, 1
xor edx, edx
mov word [eax + 2], dx
lea edx, [eax + 4]
mov word [eax], si
mov esi, dword [ebp - 4]
mov dword [ebp - 8], edx
jmp 0x41ce76
mov ecx, dword [ebp - 0xc]
jmp 0x41d409
movzx eax, word [esi + 2]
push 0x3a
pop ecx
cmp ax, cx
je 0x459c84
mov ecx, 0xff
cmp ax, cx
ja 0x41cfce
mov edi, dword [ebp + 0x28]
mov ecx, eax
mov eax, dword [edi + 0xc]
test byte [ecx + eax], 2
je 0x41cfce
jmp 0x459c87
mov edi, dword [ebp + 0x28]
add esi, 2
mov dword [ebp - 0x3c], 0x4c5ee0
xor eax, eax
mov dword [ebp - 4], esi
mov ebx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], eax
mov edx, 0xff
movzx eax, word [esi]
mov ecx, esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], esi
cmp ax, dx
ja 0x459ce0
mov ebx, dword [edi + 0xc]
mov edx, eax
mov edi, esi
movzx eax, dx
mov ecx, edi
test byte [eax + ebx], 2
je 0x459cdd
lea esi, [edi + 2]
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
mov ecx, esi
mov edx, eax
cmp ax, word [ebp - 0x98]
jbe 0x459cba
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov edi, ecx
sub edi, eax
push 0x3a
sar edi, 1
pop edx
mov dword [ebp - 0x30], edi
cmp word [esi], dx
jne 0x459d43
lea edx, [ecx + 2]
mov esi, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 4], esi
mov ebx, edx
movzx eax, word [esi]
test ax, ax
je 0x459d2f
push 0x29
mov ecx, eax
pop edi
mov ebx, edx
cmp cx, di
je 0x459d29
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ebx, esi
mov ecx, eax
test ax, ax
jne 0x459d0e
mov edi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
sub ebx, edx
mov eax, 0xffff
sar ebx, 1
cmp ebx, eax
ja 0x45c90a
mov eax, dword [ebp - 0x38]
push 0x29
pop ecx
cmp word [esi], cx
jne 0x459ed0
xor ecx, ecx
mov esi, 0x4c5dc0
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x3c]
cmp edi, dword [esi]
jne 0x459d72
mov edx, ecx
mov ecx, eax
push edi
call fcn.0041d965
pop ecx
test eax, eax
je 0x459d8f
mov ecx, dword [ebp - 0x3c]
inc ecx
add ecx, dword [esi]
add esi, 0xc
inc dword [ebp - 0x10]
mov dword [ebp - 0x3c], ecx
cmp esi, 0x4c5e2c
jge 0x459ec1
mov eax, dword [ebp - 0x38]
jmp 0x459d5c
imul eax, dword [ebp - 0x10], 0xc
mov edi, 0x9e
mov ecx, dword [eax + 0x4c5dc4]
cmp ecx, edi
jne 0x459e13
test ebx, ebx
jne 0x45c926
mov esi, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov ecx, dword [esi + 0x24]
mov dword [esi + 0x6c], eax
test ecx, ecx
je 0x459dee
mov eax, dword [ebp + 0x2c]
push 2
pop esi
test eax, eax
je 0x459dc9
add dword [eax], 3
jmp 0x459de5
mov edx, dword [ebp - 8]
mov eax, 0xa0
mov word [edx], ax
add edx, esi
mov ax, word [ecx + 4]
mov word [edx], ax
add edx, esi
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 8], edx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x459dc0
mov esi, dword [ebp + 0x28]
mov ebx, dword [ebp - 8]
xor eax, eax
xor ecx, ecx
cmp dword [esi + 0x5c], ecx
setg al
add eax, edi
cmp dword [ebp - 0x34], 0xfffffffe
movzx eax, ax
mov ecx, eax
mov word [ebx], ax
jne 0x459e0f
or dword [ebp - 0x34], 0xffffffff
mov eax, ecx
jmp 0x459e85
test ebx, ebx
jne 0x459e2a
test ecx, ecx
js 0x45c918
mov ebx, dword [ebp - 8]
movzx eax, cx
mov word [ebx], ax
jmp 0x459e82
xor ecx, ecx
cmp dword [eax + 0x4c5dc8], ecx
jl 0x45c926
mov ecx, dword [ebp - 8]
movzx eax, word [eax + 0x4c5dc8]
mov edx, dword [ebp + 0x2c]
mov edi, eax
push 2
mov word [ecx], ax
pop eax
add ecx, eax
lea eax, [ecx + 2]
test edx, edx
je 0x459e61
add dword [edx], ebx
xor edx, edx
mov word [ecx], dx
mov ebx, eax
jmp 0x459e7b
lea esi, [ebx + ebx]
mov word [ecx], bx
push esi
push dword [ebp - 0x14]
mov ebx, eax
mov dword [ebp - 8], eax
push ebx
call fcn.00421259
add esp, 0xc
add ebx, esi
xor eax, eax
mov word [ebx], ax
mov eax, edi
mov esi, dword [ebp + 0x28]
add ebx, 2
movzx eax, ax
mov edx, 0x96
mov dword [ebp - 8], ebx
mov ecx, ebx
cmp ax, dx
jb 0x459ec1
add edx, 3
mov dword [ebp - 8], ecx
cmp ax, dx
jbe 0x459ebb
mov edx, 0x9b
cmp ax, dx
ja 0x459ec1
or dword [esi + 0x64], 0x1000
mov dword [ebp - 8], ecx
jmp 0x459ec1
mov eax, dword [ebp - 0xc]
mov dword [esi + 0x70], eax
mov esi, dword [ebp - 4]
push 9
pop eax
cmp dword [ebp - 0x10], eax
jl 0x41cd2c
push 0x3c
jmp 0x45ca88
je 0x45a46e
push 0x28
pop edx
cmp eax, edx
ja 0x45a42c
mov edx, esi
je 0x459f88
push 0x21
pop ecx
mov dword [ebp - 0x1c], esi
mov edi, ebx
sub eax, ecx
je 0x459f1a
sub eax, 5
je 0x459f0f
sub eax, 1
jne 0x45b6ae
jmp 0x45a5f4
push 0x29
pop eax
mov dword [ebp - 0x14], eax
jmp 0x45b564
lea ecx, [esi + 2]
mov esi, ecx
push 0x29
pop eax
mov dword [ebp - 4], esi
cmp word [esi], ax
jne 0x459f5d
movzx eax, word [esi + 2]
push 0x2a
pop ebx
cmp ax, bx
je 0x459f5d
push 0x2b
pop edx
cmp ax, dx
je 0x459f5d
push 0x3f
pop edx
cmp ax, dx
je 0x459f5d
push 0x7b
pop edx
cmp ax, dx
jne 0x459f6e
add ecx, 4
call fcn.0049b69a
test eax, eax
je 0x459f6e
mov esi, dword [ebp - 4]
mov ecx, dword [ebp + 0x28]
push 0x7e
pop edi
mov dword [ebp - 0x24], edi
inc dword [ecx + 0x5c]
jmp 0x45b73e
mov edx, dword [ebp - 8]
mov eax, 0x9d
push 2
mov word [edx], ax
pop eax
add edx, eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x41d836
push 0x3f
pop eax
mov edi, 0x87
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x24], edi
cmp word [esi + 2], ax
jne 0x459fe8
push 0x43
pop ebx
cmp word [esi + 4], bx
jne 0x459fe8
movzx eax, word [esi + 6]
push 3
pop ecx
push 0x30
pop ebx
jmp 0x459fbf
cmp ax, word [ebp - 0xb4]
ja 0x459fc4
inc ecx
movzx eax, word [esi + ecx*2]
cmp ax, bx
jae 0x459fb1
push 0x29
pop eax
cmp word [esi + ecx*2], ax
jne 0x459fd6
lea edx, [ecx + 1]
lea edx, [esi + edx*2]
mov dword [ebp - 0x74], edx
push 0x28
pop eax
cmp word [edx], ax
jne 0x45c934
mov ecx, dword [ebp + 0x28]
push 0x3f
pop eax
cmp word [edx + 2], ax
jne 0x45a02c
movzx eax, word [edx + 4]
push 0x3d
pop ebx
cmp ax, bx
je 0x45a01e
push 0x21
pop ebx
cmp ax, bx
je 0x45a01e
push 0x3c
pop ebx
cmp ax, bx
jne 0x45a02c
movzx eax, word [edx + 6]
push 0x3d
pop edx
cmp ax, dx
je 0x45a01e
push 0x21
pop edx
cmp ax, dx
jne 0x45a02c
mov eax, dword [ebp - 0xc]
mov dword [ecx + 0x80], eax
jmp 0x45b73e
mov edi, dword [ebp - 8]
mov eax, 0x8d
push 2
or ebx, 0xffffffff
or dword [ebp - 0x14], ebx
mov edx, ebx
mov word [edi + 4], ax
mov esi, dword [ebp - 4]
pop eax
add esi, 2
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x38], ebx
mov ebx, eax
mov dword [ebp - 0x10], eax
push 0x52
mov dword [ebp - 4], esi
movzx ecx, word [esi]
pop eax
mov dword [ebp - 0x28], ebx
cmp cx, ax
jne 0x45a163
push 0x26
pop eax
cmp word [esi + 2], ax
jne 0x45a163
or dword [ebp - 0x1c], edx
lea eax, [esi + 4]
mov dword [ebp - 4], eax
mov eax, 0x8f
mov word [edi + 4], ax
mov esi, dword [ebp - 4]
movzx eax, word [esi]
push 0x30
pop ecx
mov dword [ebp - 0x38], edx
cmp ax, cx
jb 0x45a0aa
push 0x39
pop ecx
mov dword [ebp - 0x38], edx
cmp ax, cx
jbe 0x45ca5b
mov edx, 0xff
cmp ax, dx
ja 0x45c934
mov ecx, dword [ebp + 0x28]
movzx eax, ax
push 0x10
mov ebx, dword [ecx + 0xc]
pop ecx
test byte [eax + ebx], cl
je 0x45c934
mov eax, esi
mov dword [ebp - 0x10], eax
lea esi, [eax + 2]
mov dword [ebp - 4], esi
mov ecx, esi
movzx eax, word [esi]
mov edi, esi
cmp ax, dx
ja 0x45a114
mov edx, ecx
mov ecx, eax
movzx eax, cx
push 0x10
pop ecx
mov dword [ebp - 0x14], edx
test byte [eax + ebx], cl
je 0x45a111
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
mov edx, esi
mov ecx, eax
mov dword [ebp - 0x14], esi
cmp ax, word [ebp - 0x98]
jbe 0x45a0e8
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
xor ebx, ebx
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp - 0x1c]
sar ecx, 1
test eax, eax
push 2
setne bl
mov dword [ebp - 0x14], ecx
pop eax
add ebx, eax
mov dword [ebp - 0x18], ebx
test edx, edx
jle 0x45a207
movzx eax, word [esi]
lea esi, [edi + 2]
mov dword [ebp - 4], esi
mov ecx, esi
mov dword [ebp - 0x18], ebx
mov edi, esi
cmp ax, dx
je 0x45a207
mov eax, dword [ebp + 0xc]
lea esi, [ecx - 2]
mov dword [eax], 0x1a
jmp 0x45cab7
push 0x3c
pop eax
cmp cx, ax
jne 0x45a17c
push 0x3e
pop eax
add esi, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], esi
jmp 0x45a08d
push 0x27
pop eax
cmp cx, ax
je 0x45a16e
push 0x2d
xor edi, edi
pop eax
mov dword [ebp - 0x1c], edi
cmp cx, ax
je 0x45a1b9
push 0x2b
pop eax
cmp cx, ax
je 0x45a1b9
mov eax, ecx
cmp cx, word [ebp - 0x90]
jb 0x45a0aa
push 0x39
pop eax
cmp cx, ax
ja 0x45a08d
mov dword [ebp - 0x38], edi
jmp 0x45a1c2
add esi, 2
mov dword [ebp - 0x38], ecx
mov dword [ebp - 4], esi
movzx eax, word [esi]
mov edi, esi
push 0x30
pop ecx
cmp ax, cx
jb 0x45a20a
mov edx, eax
push 0x39
pop eax
cmp dx, ax
ja 0x45a20a
cmp ebx, 0xccccccb
jg 0x45c942
imul ecx, ebx, 0xa
add esi, 2
movzx ebx, dx
mov edi, esi
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
add ecx, 0xffffffd0
mov edx, eax
add ebx, ecx
pop ecx
cmp ax, cx
jae 0x45a1d1
jmp 0x45a20a
mov ebx, dword [ebp - 0x28]
mov ax, word [esi]
lea esi, [edi + 2]
push 0x29
pop edx
mov dword [ebp - 4], esi
mov ecx, esi
cmp ax, dx
jne 0x45a152
cmp dword [ebp + 0x2c], 0
jne 0x45b73b
mov ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x45a283
test ebx, ebx
jle 0x45c976
test ecx, ecx
je 0x45a254
mov eax, dword [ebp + 0x28]
push 0x2d
pop edx
mov eax, dword [eax + 0x40]
cmp ecx, edx
jne 0x45a252
sub eax, ebx
lea ebx, [eax + 1]
jmp 0x45a254
add ebx, eax
test ebx, ebx
jle 0x45ca75
mov ecx, dword [ebp + 0x28]
cmp ebx, dword [ecx + 0x44]
jg 0x45ca75
mov edx, dword [ebp - 8]
mov word [edx + 6], bx
mov esi, dword [ebp - 4]
cmp ebx, dword [ecx + 0x4c]
jle 0x45b741
mov dword [ecx + 0x4c], ebx
jmp 0x45b741
mov edx, dword [ebp + 0x28]
xor ecx, ecx
mov ebx, dword [ebp - 0x14]
mov edi, ecx
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x58], eax
cmp dword [edx + 0x30], ecx
jle 0x45a2d6
mov ecx, dword [ebp - 0x10]
lea edx, [eax + 2]
push ebx
call fcn.0049bf98
pop ecx
test eax, eax
jne 0x45a2ba
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp word [eax + ebx*2 + 2], cx
jne 0x45a2ba
mov edx, dword [ebp + 0x28]
jmp 0x45a2d3
mov edx, dword [ebp + 0x28]
inc edi
mov ecx, dword [ebp - 0x58]
mov eax, dword [edx + 0x34]
lea ecx, [ecx + eax*2]
mov eax, ecx
mov dword [ebp - 0x58], ecx
cmp edi, dword [edx + 0x30]
jl 0x45a298
xor ecx, ecx
mov esi, dword [ebp - 4]
cmp edi, dword [edx + 0x30]
jge 0x45a35f
movzx eax, word [eax]
mov ecx, edi
mov esi, dword [ebp - 0xc]
inc edi
mov ebx, eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], ebx
cmp eax, dword [edx + 0x4c]
jle 0x45a2f8
mov dword [edx + 0x4c], eax
cmp edi, dword [edx + 0x30]
jge 0x45a337
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x58]
mov eax, dword [edx + 0x34]
push ebx
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x58], ecx
lea edx, [ecx + 2]
mov ecx, dword [ebp - 0x10]
call fcn.0049bf98
pop ecx
test eax, eax
jne 0x45a331
mov ecx, dword [ebp - 0x58]
cmp word [ecx + ebx*2 + 2], ax
jne 0x45a331
mov edx, dword [ebp + 0x28]
inc esi
inc edi
cmp edi, dword [edx + 0x30]
jl 0x45a303
mov ebx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 8]
cmp esi, dword [ebp - 0xc]
jle 0x45a350
mov ebx, dword [ebp - 0x18]
inc ebx
mov word [edx + 8], si
inc word [edx + 4]
movzx eax, cx
jmp 0x45a356
movzx eax, bx
mov ebx, dword [ebp - 0x18]
mov word [edx + 6], ax
jmp 0x45a407
cmp dword [ebp - 0x1c], 0
jne 0x45ca75
mov eax, dword [ebp - 0x10]
push 0x52
pop edx
cmp word [eax], dx
jne 0x45a3d9
mov edx, dword [ebp - 0xc]
cmp ebx, 1
jle 0x45a3b9
push 0x30
pop edi
movzx eax, word [eax + edx*2]
cmp ax, di
jb 0x45ca75
cmp ax, word [ebp - 0xb4]
ja 0x45ca75
cmp ecx, 0xccccccb
jg 0x45ca4b
imul ecx, ecx, 0xa
add eax, 0xffffffd0
add ecx, eax
mov eax, dword [ebp - 0x10]
inc edx
cmp edx, ebx
jl 0x45a37f
test ecx, ecx
jne 0x45a3be
mov ecx, 0xffff
mov edx, dword [ebp - 8]
mov eax, 0x8f
mov word [edx + 6], cx
mov ecx, dword [ebp + 0x28]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
jmp 0x45b741
cmp ebx, 6
jne 0x45ca75
push ebx
mov edx, 0x4c8f74
mov ecx, eax
call fcn.0041d965
pop ecx
test eax, eax
jne 0x45ca72
mov edx, dword [ebp - 8]
mov eax, 0x91
mov ebx, dword [ebp - 0xc]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
jmp 0x45a424
mov edx, dword [ebp - 8]
lea esi, [ebx + 2]
xor eax, eax
mov dword [ebp - 4], esi
mov edi, 0x83
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], edi
mov ebx, eax
mov ecx, dword [ebp + 0x28]
jmp 0x41d5ba
push 0x2b
pop ecx
cmp eax, ecx
je 0x45a458
push 0x2d
pop ecx
cmp eax, ecx
je 0x45a458
mov edx, esi
mov edi, ebx
mov dword [ebp - 0x1c], edx
cmp eax, 0x2f
jbe 0x41d062
push 0x39
pop ecx
mov dword [ebp - 0x1c], edx
cmp eax, ecx
ja 0x41d062
push 0x29
pop eax
mov dword [ebp - 0x14], eax
mov edx, esi
jmp 0x45b5af
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov dword [ecx + 0x7c], eax
mov edi, 0x83
jmp 0x45a47b
inc dword [ecx + 0x5c]
push 0x7d
pop edi
add esi, 2
jmp 0x45a48e
mov edi, 0x80
mov ecx, dword [ebp + 0x28]
inc dword [ecx + 0x5c]
add esi, 4
mov dword [ebp - 0x24], edi
mov dword [ebp - 4], esi
jmp 0x45b73e
xor eax, eax
add esi, 2
push 0x29
mov edi, eax
mov dword [ebp - 4], esi
pop eax
cmp word [esi], ax
jne 0x45ca53
mov ebx, ecx
jmp 0x45baa7
lea edx, [esi + 2]
mov esi, edx
push 0x3d
mov dword [ebp - 4], esi
pop ecx
movzx eax, word [esi]
cmp ax, cx
je 0x45a4e4
push 0x3e
pop ecx
cmp ax, cx
je 0x45a4e4
push 0x3c
pop ecx
cmp ax, cx
jne 0x45c97d
mov edi, eax
jmp 0x45a5f4
push 0x29
pop ecx
push 0x3e
mov dword [ebp - 0x14], ecx
mov esi, edx
xor edx, edx
pop ecx
cmp ax, cx
sete dl
mov dword [ebp - 0x10], edx
jmp 0x45b8de
mov edx, dword [ebp - 8]
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov ecx, ebx
push 0x76
mov dword [ebp - 0xac], eax
pop eax
mov word [edx], ax
mov esi, dword [ebp - 4]
push 2
pop eax
add esi, eax
mov dword [ebp - 0x88], edx
add edx, eax
mov dword [ebp - 4], esi
push 0x30
pop edi
movzx eax, word [esi]
mov dword [ebp - 8], edx
cmp ax, di
jb 0x45a566
mov edi, esi
mov edx, eax
push 0x39
pop eax
cmp dx, ax
ja 0x45a563
imul ecx, ecx, 0xa
lea esi, [edi + 2]
movzx eax, dx
mov edi, esi
add eax, 0xffffffd0
mov dword [ebp - 4], esi
add ecx, eax
movzx eax, word [esi]
mov edx, eax
cmp ax, word [ebp - 0x90]
jae 0x45a53a
mov edx, dword [ebp - 8]
push 0x29
pop eax
cmp word [esi], ax
jne 0x45c992
mov eax, 0xff
cmp ecx, eax
jg 0x45c984
mov word [edx], cx
mov ecx, dword [ebp + 0x28]
push 2
pop eax
add edx, eax
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 4]
sub eax, dword [ecx + 0x18]
sar eax, 1
inc eax
mov word [edx], ax
xor eax, eax
mov word [edx + 2], ax
push 4
pop eax
add edx, eax
jmp 0x41d836
mov edi, 0x81
jmp 0x45a47b
movzx eax, word [esi + 2]
push 0x21
mov ecx, eax
pop edx
cmp ecx, edx
je 0x45a480
push 0x3d
pop edx
cmp ax, dx
je 0x45a7b4
mov edx, 0xff
cmp ax, dx
ja 0x45c9bc
mov eax, dword [ebp + 0x28]
mov edi, ebx
push 0x10
pop ebx
mov edx, esi
mov eax, dword [eax + 0xc]
test byte [ecx + eax], bl
je 0x45c9bc
lea esi, [edx + 2]
movzx ebx, di
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
pop ecx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x38], esi
cmp ax, cx
jb 0x45a61a
push 0x39
pop ecx
cmp ax, cx
jbe 0x45ca5b
mov edx, 0xff
mov ecx, esi
cmp ax, dx
ja 0x45a65d
mov ecx, dword [ebp + 0x28]
mov edx, esi
push 0x10
pop ebx
mov edi, dword [ecx + 0xc]
mov ecx, eax
movzx eax, cx
mov dword [ebp - 0x10], edx
test byte [eax + edi], bl
je 0x45a657
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
mov dword [ebp - 0x10], esi
cmp ax, word [ebp - 0x98]
jbe 0x45a633
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x38]
sar ecx, 1
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x10], ecx
je 0x45a7a4
mov edx, dword [ebp + 0x28]
push 0x3c
pop edi
push 0x3e
mov eax, dword [edx + 0x40]
inc eax
mov dword [ebp - 0x14], eax
xor eax, eax
cmp bx, di
pop ebx
sete al
dec eax
and eax, 0xffffffe9
add eax, ebx
cmp word [esi], ax
jne 0x45ca6a
cmp dword [edx + 0x30], 0x2710
jge 0x45c9ae
lea eax, [ecx + 2]
cmp eax, dword [edx + 0x34]
jle 0x45a6b9
push 0x20
mov dword [edx + 0x34], eax
pop eax
cmp ecx, eax
jg 0x45ca66
mov edi, dword [edx + 0x28]
xor eax, eax
mov ebx, eax
cmp dword [edx + 0x30], eax
jle 0x45a725
cmp ecx, dword [edi + 4]
jne 0x45a709
mov edx, dword [edi]
push ecx
mov ecx, dword [ebp - 0x38]
call fcn.0049bf98
pop ecx
test eax, eax
jne 0x45a706
mov eax, dword [ebp - 0x14]
cmp dword [edi + 8], eax
je 0x45a71f
test dword [ebp - 0x2c], 0x80000
je 0x45c999
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov dword [edx + 0x78], eax
mov ecx, dword [ebp - 0x10]
inc ebx
add edi, 0xc
cmp ebx, dword [edx + 0x30]
jl 0x45a6c5
jmp 0x45a722
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x14]
cmp dword [edi + 8], eax
jne 0x45a6f8
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x41
jmp 0x45c5a7
mov edx, dword [ebp + 0x28]
mov esi, dword [ebp - 4]
mov eax, dword [edx + 0x30]
cmp ebx, eax
jl 0x45a7a4
mov ebx, dword [ebp + 0x28]
mov ecx, dword [ebx + 0x38]
cmp eax, ecx
jl 0x45a776
lea edi, [ecx + ecx]
imul eax, edi, 0xc
push eax
call fcn.0040afeb
mov esi, eax
pop ecx
test esi, esi
je 0x45c9a0
imul eax, dword [ebx + 0x38], 0xc
push eax
push dword [ebx + 0x28]
push esi
call fcn.00421259
add esp, 0xc
cmp dword [ebx + 0x38], 0x14
jle 0x45a76d
push dword [ebx + 0x28]
call fcn.0040aff4
pop ecx
mov eax, dword [ebx + 0x30]
mov dword [ebx + 0x28], esi
mov dword [ebx + 0x38], edi
mov edx, dword [ebp - 0x38]
imul ecx, eax, 0xc
mov eax, dword [ebx + 0x28]
mov dword [ecx + eax], edx
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x10]
mov dword [ecx + eax + 4], edx
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax + 8], edx
inc dword [ebx + 0x30]
mov esi, dword [ebp - 4]
mov ecx, dword [ebp + 0x28]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
jmp 0x41d5a6
push 0x7f
pop edi
jmp 0x45a485
mov edx, dword [ebp - 8]
mov edi, 0x83
mov dword [ebp - 0x24], edi
jmp 0x41d5ba
test byte [ebp - 0x2c], 2
push 0
pop eax
setne al
mov dword [ebp - 0x28], ecx
add eax, 0x19
jmp 0x41cf08
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0xc]
jmp 0x41d40c
test ecx, ecx
je 0x41cc03
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x44]
push ebx
push eax
lea ecx, [esi + 2]
lea edx, [ebp - 0x4c]
call fcn.0049b73e
mov esi, eax
xor eax, eax
pop ecx
pop ecx
mov dword [ebp - 4], esi
cmp dword [ebx], eax
jne 0x45cab7
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x4c]
jmp 0x41d415
add esi, 2
mov edx, 0xff
movzx eax, word [esi]
mov ebx, dword [ebp + 0x28]
mov ecx, eax
cmp ax, dx
ja 0x45a869
mov edi, dword [ebx + 0xc]
mov edx, eax
push 2
pop ebx
movzx eax, dx
movzx ecx, dx
mov edx, dword [ebp - 0xc]
test byte [eax + edi], dl
je 0x45a861
add esi, ebx
movzx eax, word [esi]
mov edx, eax
mov ecx, eax
cmp ax, word [ebp - 0x98]
jbe 0x45a841
mov ebx, dword [ebp + 0x28]
mov edx, 0xff
push 0x23
pop eax
cmp cx, ax
jne 0x45a913
push 2
pop eax
add esi, eax
movzx edi, word [esi]
test di, di
je 0x45a82c
mov edx, dword [ebx + 0x84]
mov ecx, dword [ebx + 0x1c]
test edx, edx
je 0x45a8b6
cmp esi, ecx
jae 0x45a8e0
push dword [ebp - 0x78]
lea edi, [ebx + 0x88]
push edi
push ecx
mov ecx, esi
call fcn.0040b0ad
add esp, 0xc
test eax, eax
je 0x45a8e0
mov edx, dword [edi]
lea esi, [esi + edx*2]
jmp 0x45a827
mov edx, dword [ebx + 0x88]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x45a8e0
cmp di, word [ebx + 0x8c]
jne 0x45a8e0
cmp edx, dword [ebp - 0xc]
je 0x45a8ae
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x8e]
je 0x45a8ae
push 2
pop ecx
add esi, ecx
cmp dword [ebp - 0x5c], 0
je 0x45a902
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x45a902
add esi, ecx
movzx edi, word [esi]
test di, di
jne 0x45a882
jmp 0x45a827
add esi, 0xfffffffe
xor ebx, ebx
mov dword [ebp - 4], esi
jmp 0x41d460
cmp word [esi + 4], dx
jne 0x41d470
cmp word [esi + 6], ax
jne 0x41d470
add esi, 8
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0x459b99
mov edx, esi
mov ecx, eax
push 0x29
pop eax
cmp cx, ax
je 0x45a964
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
jne 0x45a94a
cmp word [esi], bx
je 0x459b99
push 0x3f
pop edx
jmp 0x41d470
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
jmp 0x41d491
mov ebx, dword [ebp - 0xf8]
jmp 0x41d496
push 4
pop esi
push esi
push edx
lea eax, [edx + 4]
push eax
call fcn.00422b59
mov edx, dword [ebp - 0x28]
lea eax, [esi + 0x7d]
mov edi, dword [ebp - 8]
add esp, 0xc
add edi, 8
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 8], edi
mov word [edx], ax
push 0x78
pop eax
mov word [edx + 2], si
mov word [edx + 8], ax
mov word [edx + 0xa], si
mov dword [ebp - 0x8c], 6
jne 0x45aa0c
mov eax, dword [ebp + 0x28]
push 2
pop ecx
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x10]
add eax, ecx
cmp edx, eax
jb 0x45aa09
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp - 0x28]
movzx esi, word [edx - 2]
push 2
sub ecx, dword [eax + 0x14]
pop eax
add ecx, eax
sar ecx, 1
cmp esi, ecx
jne 0x45aa09
lea eax, [esi + 2]
mov word [edx - 2], ax
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 0x28]
jmp 0x41d4ab
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 4]
jmp 0x41d4ab
push 0x6e
pop eax
cmp cx, ax
je 0x45b02f
push 0x6f
pop eax
cmp cx, ax
je 0x45b02f
push 0x70
pop eax
cmp cx, ax
je 0x45b02f
push 0x71
pop eax
cmp cx, ax
je 0x45b02f
cmp ecx, 0x72
je 0x45b02f
push 0x73
pop eax
cmp cx, ax
je 0x45b02f
cmp ecx, 0x74
je 0x45b02f
push 0xa
lea eax, [ecx - 0x7d]
pop ebx
cmp ax, bx
ja 0x45b013
mov eax, dword [ebp - 0x40]
sub edi, edx
mov dword [ebp - 0x10], eax
mov ebx, edi
xor eax, eax
sar ebx, 1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], eax
mov eax, 0x87
mov dword [ebp - 0x38], ebx
cmp cx, ax
jne 0x45aa9f
add eax, 0xa
cmp word [edx + 4], ax
je 0x41d586
mov eax, 0x81
cmp cx, ax
mov ecx, dword [ebp - 0x4c]
jae 0x45aac8
test ecx, ecx
jg 0x41d586
mov eax, dword [ebp - 0x44]
test eax, eax
js 0x45aac0
cmp eax, 1
jle 0x45aacb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x44], eax
jmp 0x45aacb
mov eax, dword [ebp - 0x44]
test ecx, ecx
jne 0x45ab8f
push dword [ebp - 0x40]
lea esi, [edx + 2]
mov edx, dword [ebp - 0xc]
push dword [ebp + 0x28]
cmp eax, edx
mov eax, dword [ebp - 8]
push dword [ebp - 0x78]
mov word [eax], cx
jg 0x45ab33
mov edi, dword [ebp - 0x28]
mov ecx, edi
call fcn.0049aca3
add esp, 0xc
lea eax, [ebx + ebx]
push eax
push edi
push esi
call fcn.00422b59
add esp, 0xc
push 2
pop eax
add dword [ebp - 8], eax
cmp dword [ebp - 0x44], 0
jne 0x45ab20
mov eax, 0xa1
mov word [edi], ax
jmp 0x45b435
mov eax, dword [ebp - 0x24]
add eax, 0x92
mov dword [ebp - 0x3c], edi
mov word [edi], ax
mov dword [ebp - 0x28], esi
jmp 0x45ab83
mov ecx, dword [ebp - 0x28]
push 3
pop edx
call fcn.0049aca3
add esp, 0xc
and edi, 0xfffffffe
push edi
mov edi, dword [ebp - 0x28]
push edi
lea eax, [edi + 6]
push eax
call fcn.00422b59
mov eax, dword [ebp - 0x24]
add esp, 0xc
add dword [ebp - 8], 6
mov ecx, esi
add eax, 0x92
mov edx, 0x83
mov word [edi], ax
mov eax, ecx
push 2
mov word [ecx], dx
pop edx
add ecx, edx
xor edx, edx
add eax, 4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], eax
mov word [ecx], dx
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 4]
dec edx
jmp 0x45acce
mov eax, dword [ebp - 0xc]
cmp ecx, eax
jle 0x45acc5
cmp dword [ebp + 0x2c], 0
je 0x45abea
lea eax, [ecx - 1]
xor ecx, ecx
mov edi, eax
imul dword [ebp - 0x8c]
imul edi, dword [ebp - 0x8c]
cmp edx, ecx
jg 0x45ca04
jl 0x45abc9
cmp eax, 0x7fffffff
ja 0x45ca04
mov edx, dword [ebp + 0x2c]
mov eax, 0x7fffffeb
mov ecx, dword [edx]
sub eax, ecx
cmp eax, edi
jl 0x45ca04
lea eax, [ecx + edi]
mov ecx, dword [ebp - 0x4c]
mov dword [edx], eax
jmp 0x45acc5
cmp dword [ebp - 0xa4], 0
je 0x45ac08
cmp dword [ebp - 0x54], 0
jge 0x45ac08
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov ebx, eax
cmp ecx, eax
jle 0x45acc2
mov esi, dword [ebp + 0x28]
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
add edi, edi
mov dword [ebp - 0x18], edi
mov ecx, dword [esi + 0x10]
mov esi, dword [esi + 0x20]
push edi
push edx
sub esi, ecx
push eax
sar esi, 1
call fcn.00421259
add esp, 0xc
jmp 0x45ac4e
mov ecx, edx
call fcn.0049b02f
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0x45c5a7
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x10]
sub eax, esi
add eax, 0xffffff9c
add eax, dword [edx + 0x3c]
mov ecx, dword [edx + 0x10]
lea eax, [ecx + eax*2]
cmp dword [edx + 0x20], eax
ja 0x45ac3a
mov eax, dword [ebp - 0x10]
lea edx, [ecx + eax*2]
lea eax, [ecx + esi*2]
cmp edx, eax
jae 0x45ac9e
mov edi, dword [ebp - 0x38]
mov ebx, dword [ebp + 0x28]
mov cx, word [edx]
mov eax, dword [ebx + 0x20]
add cx, di
push 2
mov word [eax], cx
pop eax
add dword [ebx + 0x20], eax
add edx, eax
mov ecx, dword [ebx + 0x10]
lea eax, [ecx + esi*2]
cmp edx, eax
jb 0x45ac7a
mov edi, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x28]
add eax, edi
inc ebx
mov dword [ebp - 0x10], esi
mov esi, dword [ebp + 0x28]
mov dword [ebp - 8], eax
mov dword [ebp - 0x30], ebx
cmp ebx, dword [ebp - 0x4c]
jl 0x45ac26
mov esi, dword [ebp - 4]
mov ecx, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
test edx, edx
jle 0x45acd3
sub edx, ecx
mov dword [ebp - 0x44], edx
test edx, edx
js 0x45ae89
mov edi, dword [ebp + 0x2c]
test edi, edi
je 0x45ad2b
test edx, edx
jle 0x45ad2b
mov eax, dword [ebp - 0x8c]
add eax, 5
mov ecx, eax
imul ecx, edx
push 4
imul edx
pop ebx
sub ecx, ebx
xor ebx, ebx
cmp edx, ebx
jg 0x45ca04
jl 0x45ad10
cmp eax, 0x7fffffff
ja 0x45ca04
mov edx, dword [edi]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0x45ca04
lea eax, [edx + ecx]
mov dword [edi], eax
jmp 0x45ae37
lea eax, [edx - 1]
mov dword [ebp - 0x3c], eax
test eax, eax
js 0x45ae37
mov edx, dword [ebp + 0x28]
mov esi, dword [ebp - 0x24]
add esi, 0x92
mov dword [ebp - 0x30], esi
mov ecx, dword [edx + 0x20]
mov edi, dword [edx + 0x10]
lea edx, [ebx + ebx]
sub ecx, edi
mov edi, dword [ebp - 8]
push 2
sar ecx, 1
mov ebx, ecx
mov word [edi], si
pop esi
add edi, esi
mov dword [ebp - 8], edi
test eax, eax
je 0x45ad8f
mov ecx, dword [ebp - 0x14]
mov eax, 0x83
mov word [edi], ax
add edi, esi
test ecx, ecx
jne 0x45ad7e
xor eax, eax
jmp 0x45ad84
mov eax, edi
sub eax, ecx
sar eax, 1
mov dword [ebp - 0x14], edi
mov word [edi], ax
add edi, esi
mov dword [ebp - 8], edi
push edx
push dword [ebp - 0x28]
push edi
call fcn.00421259
mov esi, dword [ebp - 0x10]
add esp, 0xc
jmp 0x45adb5
mov ecx, edx
call fcn.0049b02f
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0x45c5a7
mov edx, dword [ebp + 0x28]
mov eax, esi
sub eax, ebx
add eax, 0xffffff9c
add eax, dword [edx + 0x3c]
mov edi, dword [edx + 0x10]
mov ecx, dword [edx + 0x20]
lea eax, [edi + eax*2]
cmp ecx, eax
ja 0x45ada1
lea esi, [edi + esi*2]
lea eax, [edi + ebx*2]
cmp esi, eax
jae 0x45ae16
xor eax, eax
cmp dword [ebp - 0x3c], eax
setne al
lea eax, [eax*2 + 1]
movzx edx, ax
mov edi, dword [ebp + 0x28]
mov cx, word [esi]
add cx, word [ebp - 0x38]
add cx, dx
mov eax, dword [edi + 0x20]
push 2
mov word [eax], cx
mov ecx, dword [edi + 0x20]
add ecx, 2
mov dword [edi + 0x20], ecx
mov edi, dword [edi + 0x10]
pop eax
add esi, eax
lea eax, [edi + ebx*2]
cmp esi, eax
jb 0x45adeb
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x10], ebx
lea edx, [eax + eax]
mov eax, dword [ebp - 0x3c]
add dword [ebp - 8], edx
sub eax, 1
mov dword [ebp - 0x3c], eax
jns 0x45ad51
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x45ae81
mov esi, dword [ebp - 8]
push 2
pop edi
mov ecx, esi
mov edx, esi
sub ecx, ebx
sar ecx, 1
inc ecx
lea eax, [ecx + ecx]
sub edx, eax
movzx eax, word [edx + 2]
test eax, eax
jne 0x45ae5e
mov ebx, eax
jmp 0x45ae63
neg eax
lea ebx, [ebx + eax*2]
push 0x78
pop eax
mov word [esi], ax
add esi, edi
movzx eax, cx
mov word [esi], ax
add esi, edi
mov word [edx + 2], ax
test ebx, ebx
jne 0x45ae44
mov dword [ebp - 8], esi
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
jmp 0x41d57c
mov edx, dword [ebp - 8]
mov esi, 0x81
lea ebx, [edx - 4]
movzx eax, word [ebx + 2]
mov edi, ebx
add eax, eax
sub edi, eax
movzx ecx, word [edi]
cmp cx, si
je 0x45aeb1
mov eax, ecx
cmp cx, word [ebp - 0x11c]
jne 0x45aec1
cmp dword [ebp - 0x1c], 0
mov eax, ecx
je 0x45aec1
mov eax, 0x83
mov word [edi], ax
cmp ax, si
je 0x45b005
mov ecx, 0x82
cmp ax, cx
je 0x45b005
cmp dword [ebp + 0x2c], 0
jne 0x45af11
mov esi, edi
xor eax, eax
mov edx, ebx
push eax
push dword [ebp + 0x28]
mov ecx, esi
push dword [ebp - 0x78]
call fcn.0041d98f
add esp, 0xc
test eax, eax
jne 0x45af0a
movzx eax, word [esi + 2]
push 0x77
lea esi, [esi + eax*2]
pop eax
cmp word [esi], ax
je 0x45aee0
jmp 0x45af0e
add word [edi], 5
mov edx, dword [ebp - 8]
movzx eax, word [edi]
mov esi, 0x87
mov ecx, eax
cmp ax, si
jne 0x45af3c
movzx eax, word [edi + 2]
mov ecx, esi
push 0x77
pop ebx
cmp word [edi + eax*2], bx
lea ebx, [edx - 4]
lea eax, [esi + 5]
je 0x45af41
mov word [edi], ax
mov ecx, eax
jmp 0x45af41
mov eax, 0x8c
cmp dword [ebp - 0x1c], 0
je 0x45aff7
cmp cx, si
je 0x45af66
cmp cx, ax
je 0x45af66
lea eax, [ecx + 1]
push 0x7b
mov word [edi], ax
pop eax
push 2
mov word [ebx], ax
pop ebx
jmp 0x45afd5
push dword [ebp - 0x40]
mov esi, edx
xor eax, eax
push dword [ebp + 0x28]
mov word [edx], ax
sub esi, edi
push dword [ebp - 0x78]
mov ecx, edi
sar esi, 1
push 2
pop ebx
mov edx, ebx
call fcn.0049aca3
add esp, 0xc
lea eax, [esi + esi]
push eax
lea eax, [edi + 4]
push edi
push eax
call fcn.00422b59
mov edx, dword [ebp - 8]
add esp, 0xc
xor ecx, ecx
push 4
pop eax
add edx, eax
movzx eax, word [edi]
cmp ax, word [ebp - 0x140]
push 0x7b
sete cl
dec ecx
and ecx, 5
add ecx, 0x84
mov word [edi], cx
pop eax
mov word [edx], ax
add edx, ebx
lea eax, [esi + 2]
mov word [edx], ax
add edx, ebx
mov dword [ebp - 8], edx
mov word [edi + 2], ax
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x45afe4
mov ecx, 0x94
mov word [eax], cx
cmp dword [ebp - 0x4c], ebx
jge 0x41d579
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x41d579
mov eax, dword [ebp - 0x24]
add eax, 0x79
mov word [ebx], ax
jmp 0x45b435
mov eax, dword [ebp - 0x24]
add eax, 0x79
mov word [ebx], ax
jmp 0x41d579
mov eax, 0x9d
cmp cx, ax
je 0x41d586
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xb
jmp 0x45cab7
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x45b03e
mov dword [ebp - 8], edx
jmp 0x41d586
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
jne 0x45b064
cmp eax, 0xffffffff
jne 0x45b05a
lea eax, [ebx + 0x62]
jmp 0x45b052
lea eax, [ebx + 0x64]
mov edx, dword [ebp - 8]
push 2
pop ecx
jmp 0x45b09e
cmp eax, dword [ebp - 0xc]
jne 0x45b06e
lea eax, [ebx + 0x66]
jmp 0x45b052
cmp ecx, dword [ebp - 0xc]
jne 0x45b06e
cmp eax, 0xffffffff
je 0x45b04f
mov edx, dword [ebp - 8]
lea eax, [ebx + 0x68]
push 2
pop ecx
mov word [edx], ax
add edx, ecx
mov ax, word [ebp - 0x4c]
mov word [edx], ax
add edx, ecx
mov eax, dword [ebp - 0x44]
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
jmp 0x45b09e
mov eax, dword [ebp - 0x10]
mov word [edx], si
add edx, 2
mov word [edx], ax
add edx, ecx
mov dword [ebp - 8], edx
jmp 0x41d579
push 0x1e
mov eax, ecx
pop ebx
sub eax, ebx
je 0x45b0cb
sub eax, 1
je 0x45b0c6
sub eax, 1
je 0x45b0c2
xor eax, eax
jmp 0x45b0ce
push 0x27
jmp 0x45b0cd
push 0x1a
pop ebx
jmp 0x45b0d0
push 0xd
pop eax
mov ebx, eax
cmp dword [ebp - 0x5c], 0
je 0x45b123
lea edx, [edi - 2]
mov ax, word [edx]
and ax, word [ebp - 0x110]
cmp ax, word [ebp - 0x114]
jne 0x45b120
push 2
pop eax
sub edx, eax
sub edi, edx
sar edi, 1
lea eax, [edi + edi]
push eax
push edx
lea eax, [ebp - 0x16c]
push eax
call fcn.00421259
mov edx, dword [ebp - 0x28]
add esp, 0xc
mov esi, dword [ebp - 4]
or edi, 0x10000000
mov dword [ebp - 0x18], edi
movzx eax, word [edx]
jmp 0x41d4f1
mov edx, dword [ebp - 0x28]
mov eax, ecx
movzx edi, word [edi - 2]
mov dword [ebp - 0x18], edi
cmp cx, word [ebp - 0x118]
ja 0x41d4f1
cmp dword [ebp - 0x4c], 1
jle 0x41d4f1
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x60], edi
mov eax, dword [eax + 0x68]
or eax, dword [ebp - 0x94]
mov dword [ebp - 0x54], eax
jmp 0x41d4ef
lea edi, [edx + 2]
movzx eax, word [edi]
mov dword [ebp - 0x14], eax
movzx eax, word [edx + 4]
mov dword [ebp - 0x10], eax
jmp 0x41d514
cmp ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
push 2
jne 0x45b187
add eax, 0x25
jmp 0x45b2c1
add eax, 0x27
jmp 0x45b18f
lea eax, [edx + 0x27]
mov word [ecx], ax
mov ax, word [ebp - 0x44]
pop ecx
mov word [edi], ax
add edi, ecx
jmp 0x41d554
cmp dword [ebp - 0x4c], 1
jne 0x45b1d5
cmp eax, 0xffffffff
jne 0x45b1b4
mov ecx, dword [ebp - 0x28]
lea eax, [edx + 0x23]
jmp 0x45b1cd
mov dword [ebp - 8], ecx
cmp eax, dword [ebp - 0xc]
je 0x41d586
lea eax, [edx + 0x27]
mov word [ecx], ax
add ecx, 2
mov eax, dword [ebp - 0x44]
dec eax
lea edi, [ecx + 2]
jmp 0x41d548
mov ecx, dword [ebp - 0x28]
lea eax, [ebx + 0x29]
push 2
mov word [ecx], ax
lea edi, [ecx + 2]
mov ax, word [ebp - 0x4c]
mov word [edi], ax
mov eax, dword [ebp - 0x44]
pop ecx
add edi, ecx
test eax, eax
jns 0x45b24d
cmp dword [ebp - 0x5c], 0
mov ebx, dword [ebp - 0x18]
je 0x45b227
test ebx, 0x10000000
je 0x45b227
mov esi, ebx
lea eax, [ebp - 0x16c]
and esi, 7
add esi, esi
push esi
push eax
push edi
call fcn.00421259
mov edx, dword [ebp - 0x30]
add esp, 0xc
add edi, esi
push 2
pop ecx
jmp 0x45b240
mov eax, dword [ebp - 0x14]
mov word [edi], bx
add edi, ecx
test eax, eax
js 0x45b240
mov word [edi], ax
add edi, ecx
mov eax, dword [ebp - 0x10]
mov word [edi], ax
add edi, ecx
lea eax, [edx + 0x21]
mov word [edi], ax
add edi, ecx
jmp 0x41d551
cmp eax, dword [ebp - 0x4c]
je 0x41d54e
cmp dword [ebp - 0x5c], 0
mov ebx, dword [ebp - 0x18]
je 0x45b284
test ebx, 0x10000000
je 0x45b284
mov esi, ebx
lea eax, [ebp - 0x16c]
and esi, 7
add esi, esi
push esi
push eax
push edi
call fcn.00421259
mov edx, dword [ebp - 0x30]
add esp, 0xc
jmp 0x45b289
mov word [edi], bx
mov esi, ecx
lea ecx, [esi + edi]
mov esi, dword [ebp - 0x14]
test esi, esi
js 0x45b2a4
mov eax, dword [ebp - 0x10]
mov word [ecx], si
add ecx, 2
push 2
mov word [ecx], ax
pop eax
add ecx, eax
mov eax, dword [ebp - 0x44]
lea edi, [ecx + 2]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
movzx edx, dx
push 2
cmp eax, 1
jne 0x45b18c
lea eax, [edx + 0x25]
mov word [ecx], ax
pop ecx
jmp 0x41d554
and ebx, 7
lea eax, [ebp - 0x16c]
add ebx, ebx
push ebx
push eax
push edi
call fcn.00421259
add esp, 0xc
push 2
pop ecx
jmp 0x41d56b
mov eax, dword [ebp - 0x48]
movzx ecx, word [eax]
mov eax, ecx
cmp eax, 0x50
ja 0x45b363
je 0x45b320
push 0x1d
pop ecx
cmp eax, ecx
jb 0x45b3a9
push 0x20
pop ecx
cmp eax, ecx
jbe 0x45b320
push 0x29
pop ecx
cmp eax, ecx
je 0x45b320
cmp eax, 0x36
je 0x45b320
push 0x43
pop ecx
cmp eax, ecx
jne 0x45b3a9
cmp dword [ebp - 0x5c], 0
movzx ecx, byte [eax + 0x4c3110]
mov eax, dword [ebp - 0x48]
lea ecx, [eax + ecx*2]
mov dword [ebp - 0x48], ecx
je 0x45b3a9
mov ax, word [ecx - 2]
mov ebx, 0xfc00
and ax, bx
mov ebx, 0xd800
cmp ax, bx
jne 0x45b3a9
lea eax, [ecx + 2]
jmp 0x45b35e
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
movzx ecx, word [ecx + 2]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x48], eax
jmp 0x45b3a9
push 0x5d
pop ebx
cmp eax, ebx
je 0x45b388
push 0x6d
pop ebx
cmp eax, ebx
jbe 0x45b3a9
push 0x6f
pop ebx
cmp eax, ebx
jbe 0x45b382
push 0x70
pop eax
cmp cx, ax
jne 0x45b3a9
jmp 0x45b351
add dword [ebp - 0x48], 0x22
jmp 0x45b3a9
mov eax, dword [ebp - 0x48]
push 0x10
pop ecx
movzx eax, word [eax + 4]
cmp ax, cx
je 0x45b3a3
push 0xf
pop ecx
cmp ax, cx
je 0x45b3a3
push 6
jmp 0x45b3a5
push 0xa
pop eax
add dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edi, edx
sub edi, ecx
mov ebx, edi
sar ebx, 1
test ebx, ebx
jle 0x41d586
movzx eax, word [ecx]
push 0x76
pop esi
cmp eax, esi
jae 0x45b3d8
mov al, byte [eax + 0x4c5be0]
test al, al
je 0x45b3d8
movzx eax, al
mov word [ecx], ax
jmp 0x45b435
push dword [ebp - 0x40]
xor eax, eax
push dword [ebp + 0x28]
mov word [edx], ax
push dword [ebp - 0x78]
mov ecx, dword [ebp - 0x48]
push 2
pop esi
mov edx, esi
call fcn.0049aca3
mov eax, dword [ebp - 0x48]
add esp, 0xc
and edi, 0xfffffffe
push edi
push eax
add eax, 4
push eax
call fcn.00422b59
mov edx, dword [ebp - 8]
lea ecx, [esi + 0x7f]
add esp, 0xc
push 4
pop eax
add edx, eax
mov eax, dword [ebp - 0x48]
push 0x78
mov word [eax], cx
lea ecx, [ebx + 2]
pop eax
mov word [edx], ax
add edx, esi
mov word [edx], cx
add edx, esi
mov eax, dword [ebp - 0x48]
mov dword [ebp - 8], edx
mov word [eax + 2], cx
mov esi, dword [ebp - 4]
jmp 0x41d586
xor eax, eax
test byte [ebp - 0x2c], 2
mov dword [ebp - 0x28], eax
je 0x45b45a
cmp dword [ebp - 0x34], 0xfffffffe
jne 0x45b456
or dword [ebp - 0x34], 0xffffffff
or dword [ebp - 0x68], 0xffffffff
push 0x1c
jmp 0x45b45c
push 0x1b
pop ecx
mov word [edx], cx
add edx, 2
jmp 0x41d836
mov eax, dword [ebp + 0x28]
test dword [eax + 0x60], 0x2000000
je 0x41cc03
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x40
jmp 0x45cab7
mov edx, dword [ebp - 8]
jmp 0x41cc03
add esi, 2
mov ebx, 0xfc00
push 2
mov ax, word [esi]
and ax, bx
mov ebx, 0xdc00
cmp ax, bx
jne 0x41cc2b
mov dword [ebp - 4], esi
mov ax, word [esi]
pop esi
mov word [ebp - 0x10a], ax
mov edi, esi
jmp 0x41cc2c
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x5c], edx
je 0x45b4f3
mov ecx, 0xffff
cmp eax, ecx
jbe 0x45b4f3
mov ecx, eax
jmp 0x45b4db
mov ecx, edi
lea edx, [ebp - 0x10c]
call fcn.0049bfc8
mov edx, dword [ebp - 8]
mov edi, eax
mov ecx, dword [ebp - 0xc]
jmp 0x41cc29
mov ecx, dword [ebp - 0xc]
mov word [ebp - 0x10c], ax
jmp 0x45b506
mov word [ebp - 0x10c], di
mov edx, dword [ebp - 8]
mov edi, ecx
jmp 0x41cc29
mov eax, dword [esi + 0x20]
xor ebx, ebx
sub eax, dword [esi + 0x10]
mov esi, dword [ebp - 4]
add esi, 2
sar eax, 1
push 0x3c
pop edi
mov dword [ebp - 4], esi
cmp word [esi], di
lea edx, [esi + 2]
push 0x3e
sete bl
mov dword [ebp - 0x40], eax
dec ebx
mov dword [ebp - 0x7c], edx
pop eax
and ebx, 0xffffffe9
add ebx, eax
movzx eax, word [edx]
push 0x2b
pop ecx
mov dword [ebp - 0x14], ebx
cmp ax, cx
je 0x45b56f
push 0x2d
pop ecx
cmp ax, cx
je 0x45b56f
push 0x30
pop ecx
cmp ax, cx
jb 0x45b564
push 0x39
pop ecx
cmp ax, cx
jbe 0x45b56f
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
jmp 0x45b8de
lea edi, [esi + 4]
movzx eax, word [edi]
mov ecx, eax
cmp ax, word [ebp - 0x90]
jb 0x45b5a1
push 2
pop ebx
push 0x39
pop edx
cmp cx, dx
ja 0x45b59b
add edi, ebx
movzx eax, word [edi]
mov ecx, eax
cmp ax, word [ebp - 0x90]
jae 0x45b586
mov edx, dword [ebp - 0x7c]
mov ebx, dword [ebp - 0x14]
cmp word [edi], bx
jne 0x45ca57
mov esi, edx
mov dword [ebp - 4], esi
movzx ecx, word [esi]
push 0x2b
pop eax
movzx ebx, cx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x3c], ebx
cmp cx, ax
jne 0x45b67c
lea esi, [edx + 2]
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
pop edx
cmp ax, dx
jb 0x45b5e0
push 0x39
pop edx
cmp ax, dx
jbe 0x45b5f3
mov eax, dword [ebp + 0xc]
push 0x3f
pop edx
mov dword [eax], edx
jmp 0x45cab7
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
xor eax, eax
mov edi, eax
movzx eax, word [esi]
cmp ax, word [ebp - 0x90]
jb 0x45b644
push 0x30
mov ebx, eax
pop ecx
push 0x39
pop eax
cmp bx, ax
ja 0x45b63e
cmp edi, 0xccccccb
jg 0x45ca24
imul ecx, edi, 0xa
lea esi, [edx + 2]
movzx edi, bx
mov edx, esi
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
add ecx, 0xffffffd0
mov ebx, eax
add edi, ecx
pop ecx
cmp ax, cx
jae 0x45b60a
mov ebx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
cmp word [esi], ax
jne 0x45ca53
push 0x2d
pop eax
cmp cx, ax
jne 0x45b86b
test edi, edi
je 0x45ca4f
mov ebx, dword [ebp + 0x28]
mov eax, dword [ebx + 0x40]
sub eax, edi
lea edi, [eax + 1]
test edi, edi
jg 0x45baa7
jmp 0x45ca75
push 0x2d
pop eax
cmp cx, ax
jne 0x45b5f5
movzx eax, word [esi + 2]
mov dword [ebp - 0x1c], edx
movzx edi, cx
cmp ax, word [ebp - 0x90]
jb 0x45b6ae
mov dword [ebp - 0x1c], edx
movzx edi, cx
cmp ax, word [ebp - 0xb4]
jbe 0x45b5ed
mov edx, dword [ebp - 0x1c]
jmp 0x41d062
push 0x2d
pop edx
cmp ax, dx
je 0x45b6f9
cmp eax, 0x4a
je 0x45b6e4
cmp eax, 0x55
je 0x45b6d9
cmp eax, 0x58
jne 0x45c9d7
or dword [ecx], 0x40
jmp 0x41d0a9
or dword [ecx], 0x200
jmp 0x41d0a9
mov eax, dword [ebp + 0x28]
or dword [ecx], 0x80000
or dword [eax + 0x64], 0x400
jmp 0x41d0a9
lea ecx, [ebp - 0x10]
jmp 0x41d0a9
push 0x6d
pop edx
cmp ax, dx
je 0x45b729
push 0x73
pop edx
cmp ax, dx
je 0x45b725
push 0x78
pop eax
cmp di, ax
jne 0x45c9d7
or dword [ecx], 8
jmp 0x41d0a9
push 4
jmp 0x45b72b
push 2
pop eax
jmp 0x41d0a7
mov ebx, dword [ebp - 0x1c]
mov ecx, eax
jmp 0x41d0c5
mov ecx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
mov ebx, dword [ebp - 0x18]
jmp 0x41d5ba
xor ecx, ecx
cmp dword [eax + 0x80], ecx
je 0x41d5e5
mov dword [ebp - 0x28], ecx
mov dword [eax + 0x80], ecx
jmp 0x41d5f5
mov ecx, dword [ebp - 0xc]
jmp 0x41d63e
cmp dword [ecx + 0x40], esi
ja 0x41d6bc
mov eax, dword [ebp - 8]
mov edx, 0x82
mov word [eax], dx
jmp 0x41d6a2
dec dword [ecx + 0x5c]
jmp 0x41d6af
cmp dword [ebp + 0x2c], 0
jne 0x41d6bc
mov ecx, eax
xor eax, eax
push 0x78
mov esi, eax
pop edi
movzx eax, word [ecx + 2]
mov edx, esi
inc esi
lea ecx, [ecx + eax*2]
cmp word [ecx], di
jne 0x45b7a1
mov eax, dword [ebp - 8]
mov ecx, 0x91
mov edi, dword [ebp - 0x7c]
cmp word [eax + 4], cx
jne 0x45b7d1
cmp edx, dword [ebp - 0xc]
jge 0x45c9e8
mov ebx, ecx
jmp 0x41d6bc
push 2
pop eax
cmp edx, eax
jge 0x45c9f6
cmp esi, dword [ebp - 0xc]
jne 0x41d6bc
or eax, 0xffffffff
or ecx, eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
jmp 0x41d6c2
test ecx, ecx
js 0x45b816
mov ebx, dword [ebp - 0xe4]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0xa4], ecx
jmp 0x45b81a
or dword [ebp - 0x34], 0xffffffff
or dword [ebp - 0x68], 0xffffffff
jmp 0x41d735
test eax, eax
jns 0x45b85a
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xb8], eax
mov eax, ecx
or eax, edi
mov dword [ebp - 0xa0], eax
jmp 0x41d735
cmp ebx, 0x7d
jne 0x41cd2f
test eax, eax
js 0x41cd2f
test ecx, ecx
jmp 0x41d737
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x54], eax
jmp 0x41cd2f
push 0x2b
pop eax
cmp bx, ax
jne 0x45baa4
test edi, edi
je 0x45ca4f
mov ebx, dword [ebp + 0x28]
add edi, dword [ebx + 0x40]
jmp 0x45baa7
mov esi, dword [ebp - 4]
push 0x3c
pop edi
lea ecx, [esi + 2]
movzx eax, word [ecx]
cmp ax, di
je 0x45b8b4
cmp ax, word [ebp - 0x128]
je 0x45b8b4
cmp ax, word [ebp - 0x12c]
je 0x45b8b4
push 0x45
jmp 0x45c9cf
mov dword [ebp - 4], ecx
mov esi, ecx
movzx eax, word [ecx]
mov dword [ebp - 0x10], edx
cmp ax, di
jne 0x45b8cc
push 0x3e
pop eax
mov dword [ebp - 0x14], eax
jmp 0x45b8de
push 0x27
pop ecx
mov dword [ebp - 0x14], ecx
cmp ax, cx
je 0x45b8de
mov dword [ebp - 0x14], 0x7d
add esi, 2
push 0x30
mov dword [ebp - 4], esi
mov ecx, esi
pop edx
movzx eax, word [esi]
mov dword [ebp - 0x30], ecx
cmp ax, dx
jb 0x45b900
push 0x39
pop edx
cmp ax, dx
jbe 0x45ca5b
mov edx, 0xff
mov ebx, esi
cmp ax, dx
ja 0x45b93e
mov ecx, dword [ebp + 0x28]
mov edx, esi
mov edi, dword [ecx + 0xc]
mov ecx, eax
movzx eax, cx
mov ebx, edx
push 0x10
pop ecx
test byte [eax + edi], cl
je 0x45b93b
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ebx, esi
mov ecx, eax
cmp ax, word [ebp - 0x98]
jbe 0x45b916
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp + 0x2c]
sub ebx, ecx
sar ebx, 1
test edx, edx
je 0x45b9fe
xor eax, eax
mov edi, eax
mov dword [ebp - 0x3c], edi
test ebx, ebx
je 0x45ca6e
mov eax, dword [ebp - 0x14]
cmp word [esi], ax
jne 0x45ca6a
push 0x20
pop eax
cmp ebx, eax
jg 0x45ca66
mov ecx, dword [ebp + 0x28]
cmp dword [ebp - 0x10], edi
jne 0x45b97e
inc dword [ecx + 0x54]
mov eax, dword [edx]
push 9
pop esi
add eax, esi
mov dword [edx], eax
cmp dword [ecx + 0x7c], edi
je 0x45b991
add eax, 8
mov dword [edx], eax
mov esi, dword [ecx + 0x28]
xor eax, eax
mov ecx, dword [ecx + 0x30]
mov edx, eax
mov dword [ebp - 0x40], edx
test ecx, ecx
jle 0x45b9f9
cmp ebx, dword [esi + 4]
jne 0x45b9e8
mov edx, dword [esi]
mov ecx, dword [ebp - 0x30]
push ebx
call fcn.0049bf98
pop ecx
test eax, eax
jne 0x45b9e5
mov edi, dword [esi + 8]
mov dword [ebp - 0x3c], edi
cmp dword [ebp - 0x10], eax
jne 0x45baa4
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax + 0x24]
jmp 0x45b9d8
movzx eax, word [ecx + 4]
cmp eax, edi
je 0x45b9de
mov ecx, dword [ecx]
test ecx, ecx
jne 0x45b9ce
jmp 0x45b9e5
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp + 0x28]
inc edx
add esi, 0xc
mov dword [ebp - 0x40], edx
mov ecx, dword [ecx + 0x30]
cmp edx, ecx
jl 0x45b9a2
mov ebx, dword [ebp + 0x28]
jmp 0x45ba64
mov edi, dword [ebp + 0x28]
xor edx, edx
mov dword [ebp - 0x40], edx
mov eax, dword [edi + 0x2c]
mov dword [ebp - 0x58], eax
cmp dword [edi + 0x30], edx
jle 0x45ba51
push ebx
lea edx, [eax + 2]
call fcn.0049bf98
pop ecx
test eax, eax
jne 0x45ba30
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp word [eax + ebx*2 + 2], cx
jne 0x45ba30
mov edx, dword [ebp - 0x40]
jmp 0x45ba4e
mov eax, dword [edi + 0x34]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x40]
inc edx
mov dword [ebp - 0x40], edx
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x58]
cmp edx, dword [edi + 0x30]
jl 0x45ba11
mov esi, dword [ebp - 4]
mov ebx, edi
mov ecx, dword [ebx + 0x30]
cmp edx, ecx
jge 0x45ca75
movzx edi, word [eax]
mov dword [ebp - 0x3c], edi
cmp dword [ebp - 0x10], 0
jne 0x45baa7
cmp dword [ebp + 0x2c], 0
jne 0x45bc5f
xor eax, eax
cmp dword [ebx + 0x78], eax
je 0x45bc5f
mov eax, dword [ebx + 0x34]
mov ebx, dword [ebp - 0x58]
mov esi, dword [ebp - 0xc]
mov dword [ebp - 0x7c], edx
inc edx
mov dword [ebp - 0x40], edx
lea eax, [ebx + eax*2]
mov dword [ebp - 0x10], eax
cmp edx, ecx
jge 0x45bc5f
mov edi, edx
jmp 0x45bb93
mov ebx, dword [ebp + 0x28]
mov ecx, dword [ebx + 0x20]
sub ecx, dword [ebx + 0x10]
mov eax, dword [ebp - 8]
mov esi, dword [ebx + 0x14]
sar ecx, 1
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x40], ecx
jne 0x45bb5f
xor ecx, ecx
mov word [eax], cx
test edi, edi
je 0x45bae0
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebx + 0x14]
push edi
call fcn.0049a9bb
mov esi, eax
mov eax, dword [ebp - 8]
pop ecx
test esi, esi
jne 0x45bb34
cmp edi, dword [ebx + 0x44]
jg 0x45ca72
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0x3c]
lea esi, [eax + edi*2]
mov eax, dword [ebx + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [ebx + 0x20], eax
jb 0x45bb1a
mov ecx, ebx
call fcn.0049b02f
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0x45c5a7
mov edx, dword [ebp - 8]
mov ecx, edx
sub ecx, dword [ebx + 0x14]
mov eax, dword [ebx + 0x20]
push 2
pop edi
add ecx, edi
sar ecx, 1
mov word [eax], cx
add dword [ebx + 0x20], edi
jmp 0x45bb62
xor ecx, ecx
cmp word [esi + 2], cx
jne 0x45bb5f
cmp dword [ebp + 0x24], ecx
jg 0x45bb5f
push ebx
push dword [ebp - 0x78]
mov edx, eax
mov ecx, esi
push dword [ebp + 0x20]
call fcn.0049aff1
add esp, 0xc
test eax, eax
je 0x45bb5f
push 0x28
jmp 0x45ca7b
mov edx, dword [ebp - 8]
push 0x75
pop eax
mov word [edx], ax
sub esi, dword [ebx + 0x14]
sar esi, 1
push 4
pop eax
mov word [edx + 2], si
add edx, eax
xor eax, eax
mov dword [ebp - 8], edx
cmp dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0xa4], eax
jne 0x41d134
jmp 0x45c73d
mov eax, dword [ebp - 0x10]
lea edx, [eax + 2]
lea ecx, [ebx + 2]
call fcn.0049bf6d
mov ecx, dword [ebp - 0x10]
test eax, eax
jne 0x45bbb8
mov edx, dword [ebp + 0x28]
inc esi
inc edi
mov eax, dword [edx + 0x34]
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x10], ecx
cmp edi, dword [edx + 0x30]
jl 0x45bb90
mov edi, dword [ebp - 0x3c]
cmp esi, dword [ebp - 0xc]
jle 0x45bc5f
cmp dword [ebp - 0x34], 0xfffffffe
jne 0x45bbce
or dword [ebp - 0x34], 0xffffffff
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
push 0x73
pop edi
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
and eax, 1
mov dword [ebp - 0x28], edx
add eax, edi
mov word [edx], ax
mov eax, dword [ebp - 0x7c]
push 2
pop edi
add edx, edi
mov word [edx], ax
add edx, edi
mov word [edx], si
add edx, edi
mov edi, dword [ebp - 0x58]
mov dword [ebp - 8], edx
cmp edi, ecx
jae 0x41d134
mov esi, dword [ebp - 0x10]
movzx edx, word [edi]
push 0x20
pop eax
cmp edx, eax
mov eax, dword [ebp - 0xc]
jae 0x45bc24
mov ecx, edx
shl eax, cl
or dword [ebx + 0x50], eax
cmp edx, dword [ebx + 0x4c]
jle 0x45bc2f
mov dword [ebx + 0x4c], edx
mov ecx, dword [ebx + 0x24]
jmp 0x45bc3e
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x45bc44
mov ecx, dword [ecx]
test ecx, ecx
jne 0x45bc34
jmp 0x45bc4b
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
mov eax, dword [ebx + 0x34]
lea edi, [edi + eax*2]
cmp edi, esi
jb 0x45bc13
mov dword [ebp - 0x58], edi
jmp 0x41cd29
neg edi
cmp dword [ebp - 0x34], 0xfffffffe
jne 0x45bc69
or dword [ebp - 0x34], 0xffffffff
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
push 0x71
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
and eax, ecx
mov dword [ebp - 0x28], edx
pop esi
add eax, esi
mov word [edx], ax
push 2
pop eax
add edx, eax
push 0x20
mov word [edx], di
add edx, eax
pop eax
cmp edi, eax
mov dword [ebp - 8], edx
mov eax, ecx
jge 0x45bca7
mov ecx, edi
shl eax, cl
or dword [ebx + 0x50], eax
cmp edi, dword [ebx + 0x4c]
jle 0x45bcb2
mov dword [ebx + 0x4c], edi
mov ecx, dword [ebx + 0x24]
jmp 0x45bcc1
movzx eax, word [ecx + 4]
cmp eax, edi
je 0x45bcca
mov ecx, dword [ecx]
test ecx, ecx
jne 0x45bcb7
jmp 0x41d134
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
jmp 0x41d134
mov ebx, esi
cmp dword [ebx + 0x48], edx
jne 0x41d7f9
mov dword [ebx + 0x48], ecx
jmp 0x41d7f9
cmp edi, 0x22
jg 0x41d804
mov eax, dword [ebp - 4]
mov esi, dword [edi*4 + 0x4c499c]
add eax, 2
push 2
pop edx
mov dword [ebp - 0x50], eax
sub esi, edx
jmp 0x41cd2c
cmp edi, 0xe
jne 0x41d82b
push 0xd
pop eax
mov edi, eax
jmp 0x41d82b
push ebx
lea eax, [ebp - 0xec]
mov dword [ebp - 0xe8], edx
push eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xec], edx
push eax
lea edx, [ebp - 0x130]
lea ecx, [ebp - 4]
call fcn.0049b586
add esp, 0xc
test eax, eax
je 0x45c5a7
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
mov edx, dword [ebp - 8]
sar eax, 1
push 0x10
pop ecx
mov dword [ebp - 0x40], eax
xor eax, eax
cmp edi, ecx
mov dword [ebp - 0x28], edx
push 0xf
sete al
xor ecx, ecx
cmp eax, dword [ebp - 0x130]
pop eax
setne cl
add ecx, eax
mov ax, word [ebp - 0xe8]
mov word [edx], cx
push 2
pop esi
add edx, esi
mov word [edx], ax
add edx, esi
mov ax, word [ebp - 0xec]
mov word [edx], ax
jmp 0x41d834
mov esi, 0x4c4bd4
jmp 0x45bdad
mov esi, 0x4c4ba0
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
add eax, 0xe
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], esi
jmp 0x41cd3a
lea edx, [ebp - 0x74]
call fcn.0049af5b
test eax, eax
jne 0x45c8eb
mov ecx, dword [ebp - 4]
jmp 0x41d1ae
push 0x45
pop edx
cmp word [ecx + 2], dx
push 0x5c
pop edx
jne 0x45bdea
add ecx, 2
jmp 0x45be0b
push 3
mov edx, 0x4c8f70
lea ecx, [ecx + 2]
call fcn.0041d965
pop ecx
test eax, eax
jne 0x41d1e4
mov ecx, dword [ebp - 4]
push 0x5c
add ecx, 6
pop edx
mov eax, dword [ebp - 0x10]
jmp 0x41d1b8
mov eax, dword [ebp - 0xc]
jmp 0x41d1b5
mov ecx, dword [ebp + 0x28]
test dword [ecx + 0x60], 0x2000000
je 0x41d1e4
mov edx, dword [ebp - 8]
neg eax
mov ecx, dword [ebp - 0x34]
sbb eax, eax
and eax, 0xffffff70
add eax, 0x9d
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
cmp ecx, 0xfffffffe
jne 0x45be55
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x68], ecx
jmp 0x41d134
movzx edi, word [esi]
mov eax, edi
mov dword [ebp - 0x14], edi
and eax, ecx
mov ecx, 0xd800
cmp eax, ecx
jne 0x41d241
add esi, 2
mov ecx, 0x3ff
and edi, ecx
shl edi, 0xa
movzx eax, word [esi]
and eax, ecx
mov dword [ebp - 4], esi
or edi, eax
add edi, 0x10000
mov dword [ebp - 0x14], edi
jmp 0x41d241
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x70], eax
jmp 0x41d24d
mov edi, dword [ebp + 0x2c]
sub eax, ecx
sar eax, 1
mov dword [ebp - 0x20], ecx
add dword [edi], eax
mov edi, dword [ebp - 0x14]
jmp 0x41d25e
push 0x5c
pop ebx
cmp edi, ebx
jne 0x41d27c
push 0x45
pop ebx
cmp word [esi + 2], bx
jne 0x41d27c
xor ebx, ebx
add esi, 2
mov dword [ebp - 0x64], ebx
mov ebx, dword [ebp - 0x1c]
jmp 0x41d30b
movzx eax, word [esi + 2]
push 0x3a
pop ecx
cmp ax, cx
je 0x45bf06
push 0x2e
pop ecx
cmp ax, cx
je 0x45bf06
push 0x3d
pop ecx
cmp ax, cx
jne 0x41d27c
lea edx, [ebp - 0x74]
mov ecx, esi
call fcn.0049af5b
mov esi, dword [ebp - 4]
test eax, eax
je 0x41d27c
xor eax, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x28]
push 0x3a
mov ebx, dword [eax + 8]
pop eax
cmp word [esi + 2], ax
jne 0x45ca86
lea ecx, [esi + 4]
push 0x5e
pop edx
mov dword [ebp - 4], ecx
mov eax, ecx
cmp word [ecx], dx
jne 0x45bf54
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], eax
lea eax, [ecx + 2]
mov ecx, eax
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x74]
sub edx, eax
sar edx, 1
call fcn.0049af10
mov edi, eax
test edi, edi
js 0x45ca79
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xc]
test cl, al
je 0x45bf81
push 2
pop ecx
cmp edi, ecx
jg 0x45bf81
xor ecx, ecx
mov edi, ecx
jmp 0x45bf83
xor ecx, ecx
test eax, 0x20000000
je 0x45c049
mov edx, ecx
mov ecx, dword [ebp - 0x30]
mov eax, ecx
neg eax
sbb eax, eax
and eax, 0xe
add eax, edi
mov esi, dword [eax*4 + 0x4c4a30]
test esi, esi
je 0x45bfdf
mov ecx, dword [ebp - 0x74]
add ecx, 2
add esi, 0xfffffffe
mov dword [ebp - 0x50], ecx
jmp 0x45bfd4
push 0x4c63a0
push ecx
push dword [ebp - 0x2c]
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0xe0]
call fcn.0049ac19
add esp, 0xc
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
jmp 0x41d308
mov eax, edi
sub eax, 8
je 0x45c0a2
sub eax, 1
je 0x45c094
sub eax, 1
je 0x45c097
test ecx, ecx
je 0x45c049
cmp dword [ebp - 0x70], 0
jne 0x45c012
mov eax, dword [ebp - 0x74]
push 0x5d
pop ecx
cmp word [eax + 4], cx
je 0x45c049
mov eax, dword [ebp - 0x20]
push 2
pop ecx
mov word [eax], cx
mov edx, dword [ebp - 0x20]
add edx, ecx
mov ecx, 0x100
mov dword [ebp - 0x20], edx
call fcn.0049bfc8
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + eax*2]
mov ecx, 0x10ffff
mov dword [ebp - 0x20], edx
call fcn.0049bfc8
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x20], eax
imul esi, edi, 0xc
push 0x20
pop edi
push edi
mov eax, dword [esi + 0x4c5c60]
add eax, ebx
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.00421259
mov eax, dword [esi + 0x4c5c64]
add esp, 0xc
mov esi, dword [esi + 0x4c5c68]
test eax, eax
js 0x45c0ef
lea edx, [ebx + eax]
xor ebx, ebx
mov ecx, ebx
test esi, esi
js 0x45c0dc
mov al, byte [edx + ecx]
or byte [ebp + ecx - 0x160], al
inc ecx
cmp ecx, edi
jb 0x45c083
jmp 0x45c0f1
push 0xc
pop edx
test edx, edx
jne 0x45c0a5
push 0xd
pop eax
mov edx, eax
jmp 0x45c0a5
push 0xb
pop edx
mov eax, dword [ebp - 0x20]
add ecx, 3
push 2
pop ebx
mov word [eax], cx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
add eax, ebx
mov dword [ebp - 0x20], eax
mov word [eax], dx
mov eax, dword [ebp - 0x20]
add eax, ebx
mov dword [ebp - 0x20], eax
mov word [eax], cx
mov esi, dword [ebp - 0x74]
add dword [ebp - 0x20], ebx
add esi, ebx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
jmp 0x45bfd4
mov al, byte [edx + ecx]
not al
and byte [ebp + ecx - 0x160], al
inc ecx
cmp ecx, edi
jb 0x45c0dc
jmp 0x45c0f1
xor ebx, ebx
test esi, esi
jns 0x45c0f7
neg esi
mov edx, dword [ebp - 0xc]
cmp esi, edx
jne 0x45c107
and byte [ebp - 0x15f], 0xc3
jmp 0x45c115
push 2
pop eax
cmp esi, eax
jne 0x45c115
and byte [ebp - 0x155], 0x7f
cmp dword [ebp - 0x30], 0
mov ecx, ebx
je 0x45c134
mov al, byte [ebp + ecx - 0x160]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edi
jb 0x45c11d
jmp 0x45c147
mov al, byte [ebp + ecx - 0x160]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edi
jb 0x45c134
mov esi, dword [ebp - 0x74]
push 2
pop eax
mov ebx, eax
add esi, 2
mov dword [ebp - 0x1c], ebx
jmp 0x41d305
push dword [ebp - 0xc]
mov eax, dword [ebp + 0x28]
lea edx, [ebp - 0xbc]
push dword [ebp - 0x2c]
lea ecx, [ebp - 4]
push dword [eax + 0x40]
push dword [ebp + 0xc]
call fcn.0041dee1
mov esi, eax
xor edx, edx
mov eax, dword [ebp + 0xc]
add esp, 0x10
cmp dword [eax], edx
jne 0x45c5a7
test esi, esi
jne 0x45c1a3
mov edi, dword [ebp - 0xbc]
jmp 0x45c198
push 8
pop edi
mov esi, dword [ebp - 4]
mov dword [ebp - 0x14], edi
jmp 0x41d27e
cmp esi, 5
je 0x45c195
cmp esi, 0xc
je 0x45ca98
cmp esi, 0x1a
jne 0x45c1de
mov esi, dword [ebp - 4]
push 0x5c
pop eax
cmp word [esi + 2], ax
jne 0x45c1d3
push 0x45
pop ecx
cmp word [esi + 4], cx
jne 0x45c1d3
add esi, 4
jmp 0x45bfd4
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
jmp 0x45bfd4
cmp esi, 0x19
je 0x45bfd1
mov ecx, dword [ebp + 0x28]
inc dword [ebp - 0x24]
add dword [ebp - 0x1c], 2
mov edi, dword [ecx + 8]
cmp esi, 0x10
jg 0x45c39e
cmp esi, 0xf
jge 0x45c310
sub esi, 6
je 0x45c2ec
sub esi, 1
je 0x45c2d0
sub esi, 1
je 0x45c2a4
sub esi, 1
je 0x45c280
sub esi, 1
je 0x45c25c
sub esi, 1
jne 0x45c3da
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0xa0]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0x45c23b
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
jmp 0x41d308
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0xa0]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0x45c269
jmp 0x45c24e
xor eax, eax
lea eax, [ebp - 0xe0]
sub edi, eax
lea ecx, [ebp - 0xe0]
add ecx, edx
push 0x20
mov al, byte [ecx + edi]
or byte [ecx], al
inc edx
pop eax
cmp edx, eax
jb 0x45c28a
jmp 0x45bfd1
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
xor eax, eax
lea eax, [ebp - 0xe0]
sub edi, eax
lea ecx, [ebp - 0xe0]
add ecx, edx
push 0x20
mov al, byte [ecx + edi]
not al
or byte [ecx], al
inc edx
pop eax
cmp edx, eax
jb 0x45c2b4
jmp 0x45bfd1
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0x40]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0x45c2d7
jmp 0x45c24e
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0x40]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0x45c2f9
jmp 0x45c24e
push eax
xor ecx, ecx
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf4], ecx
lea edx, [ebp - 0x134]
push eax
lea ecx, [ebp - 4]
call fcn.0049b586
add esp, 0xc
test eax, eax
je 0x45c5a7
xor eax, eax
push 0x10
pop ecx
cmp esi, ecx
push 2
sete al
xor ecx, ecx
cmp eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x20]
sete cl
add ecx, 3
pop edx
mov word [eax], cx
mov ecx, dword [ebp - 0x20]
mov ax, word [ebp - 0xf0]
add ecx, edx
mov dword [ebp - 0x20], ecx
mov word [ecx], ax
mov ecx, dword [ebp - 0x20]
mov ax, word [ebp - 0xf4]
add ecx, edx
mov dword [ebp - 0x20], ecx
mov word [ecx], ax
add dword [ebp - 0x20], edx
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
jmp 0x41d302
cmp esi, 0x12
je 0x45c420
cmp esi, 0x13
je 0x45c3ff
cmp esi, 0x14
je 0x45bfb7
cmp esi, 0x15
je 0x45c3f6
add esi, 0xffffffe3
cmp esi, 5
ja 0x45c3da
mov esi, dword [esi*4 + 0x4c4a10]
mov edx, ebx
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
push 2
pop eax
mov dword [ebp - 0x50], ecx
sub esi, eax
jmp 0x41d305
mov ebx, dword [ebp - 0x2c]
mov esi, dword [ebp - 4]
test bl, 0x40
jne 0x45ca90
movzx edi, word [esi]
xor edx, edx
mov dword [ebp - 0x14], edi
jmp 0x41d284
push 0xffffffffffffffff
push 0x4c63a0
jmp 0x45c406
push 0xffffffffffffffff
push 0x4c63c0
push ecx
push dword [ebp - 0x2c]
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0xe0]
call fcn.0049ab04
add esp, 0x10
jmp 0x45bfd1
push 0x4c63c0
jmp 0x45bfbc
push 0x5c
pop ebx
push 0x45
pop edi
cmp word [esi + 4], di
jne 0x45c445
add esi, 4
mov dword [ebp - 0x64], edx
mov dword [ebp - 4], esi
cmp word [esi + 2], bx
je 0x45c430
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp + 0x28]
mov ebx, dword [ebp - 0x2c]
jmp 0x41d291
or dword [ecx + 0x64], 0x800
jmp 0x41d2a9
push 0x5c
lea esi, [edx + 4]
pop ecx
mov dword [ebp - 4], esi
mov edi, esi
push 0x45
pop eax
cmp word [esi], cx
jne 0x45c4be
cmp word [esi + 2], ax
jne 0x45c485
add esi, 4
mov dword [ebp - 4], esi
mov edi, esi
cmp word [esi], cx
je 0x45c472
cmp word [esi], cx
jne 0x45c4be
push 0x51
pop eax
cmp word [esi + 2], ax
push 0x45
pop eax
jne 0x45c4be
lea esi, [edi + 4]
mov dword [ebp - 4], esi
cmp word [esi], cx
jne 0x45c4b6
cmp word [esi + 2], ax
jne 0x45c4b6
add esi, 4
mov dword [ebp - 4], esi
mov edi, esi
cmp word [esi], cx
je 0x45c48a
jmp 0x45c4bc
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov edi, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je 0x45c5f2
cmp dword [ebp - 0x64], 0
jne 0x45c4df
cmp ax, word [ebp - 0x138]
je 0x45c5f2
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0xa8], ecx
je 0x45c523
mov eax, ecx
mov edx, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x45c525
movzx eax, word [esi + 2]
mov edx, 0x3ff
and ecx, edx
lea esi, [edi + 2]
and eax, edx
shl ecx, 0xa
or ecx, eax
mov dword [ebp - 4], esi
add ecx, 0x10000
mov dword [ebp - 0xa8], ecx
mov edx, ecx
jmp 0x45c525
mov edx, eax
cmp dword [ebp - 0x64], 0
jne 0x45c5b8
push 0x5c
pop eax
cmp edx, eax
jne 0x45c56f
push dword [ebp - 0xc]
mov eax, dword [ebp + 0x28]
lea edx, [ebp - 0xa8]
push ebx
mov ebx, dword [ebp + 0xc]
lea ecx, [ebp - 4]
push dword [eax + 0x40]
push ebx
call fcn.0041dee1
xor ecx, ecx
add esp, 0x10
cmp dword [ebx], ecx
jne 0x45c5a7
test eax, eax
je 0x45c5af
cmp eax, 5
jne 0x45c5a1
push 8
pop ecx
mov dword [ebp - 0xa8], ecx
jmp 0x45c5b5
cmp edx, 0x5b
jne 0x45c5b8
movzx eax, word [esi + 2]
push 0x3a
pop edx
cmp ax, dx
je 0x45c590
push 0x2e
pop edx
cmp ax, dx
je 0x45c590
push 0x3d
pop edx
cmp ax, dx
jne 0x45c5b8
lea edx, [ebp - 0x74]
mov ecx, esi
call fcn.0049af5b
test eax, eax
je 0x45c5af
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x53
mov esi, dword [ebp - 4]
jmp 0x45cab7
mov ecx, dword [ebp - 0xa8]
mov esi, dword [ebp - 4]
mov edi, dword [ebp - 0x14]
cmp ecx, edi
jb 0x45caa3
je 0x45c5fa
push 2
pop eax
mov ebx, eax
push 0xd
pop eax
mov dword [ebp - 0x1c], ebx
cmp ecx, eax
je 0x45c5e0
push 0xa
pop eax
cmp ecx, eax
je 0x45c5e0
mov eax, dword [ebp + 0x28]
jmp 0x45c5ea
mov eax, dword [ebp + 0x28]
or dword [eax + 0x64], 0x800
push ecx
push edi
push eax
jmp 0x41d2e9
mov edi, dword [ebp - 0x14]
mov esi, edx
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 0x64]
jmp 0x41d2bd
cmp dword [ebp - 0x50], 0
je 0x45c621
xor esi, esi
mov dword [ebp - 0x50], esi
lea esi, [eax + 2]
mov dword [ebp - 4], esi
movzx edi, word [esi]
mov dword [ebp - 0x14], edi
test edi, edi
jne 0x41d324
mov eax, dword [ebp + 0xc]
mov dword [eax], 6
jmp 0x45cab7
mov eax, dword [ebp - 0x60]
add esi, edx
cmp dword [ebp - 0x10], 0
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], esi
mov dword [ebp - 0x70], eax
je 0x45c6fe
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0x45c65b
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov ebx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x80], eax
test ebx, ebx
je 0x45c6bf
mov eax, dword [ebp - 0xc]
test al, cl
je 0x45c6bf
mov eax, edi
mov esi, 0x80
cdq
idiv esi
movzx eax, byte [eax + 0x4c0f10]
shl eax, 7
add eax, edx
movzx eax, word [eax*2 + 0x4b2c10]
movzx eax, byte [eax*8 + 0x4b03b3]
test eax, eax
je 0x45c6bf
mov edx, dword [ebp - 8]
push 0xf
pop ecx
push 2
mov word [edx], cx
pop edi
add edx, edi
push 9
pop ecx
mov word [edx], cx
add edx, edi
mov word [edx], ax
add edx, edi
jmp 0x41d836
mov edx, dword [ebp - 8]
mov eax, ecx
and eax, dword [ebp - 0xc]
push 0x1f
pop ecx
add eax, ecx
push 2
pop ecx
mov word [edx], ax
add edx, ecx
mov dword [ebp - 8], edx
test ebx, ebx
je 0x45c6f6
mov eax, 0xffff
cmp edi, eax
jbe 0x45c6f6
mov ecx, edi
call fcn.0049bfc8
mov edx, dword [ebp - 8]
lea edx, [edx + eax*2]
jmp 0x41d836
mov word [edx], di
jmp 0x41d8c9
cmp dword [ebp - 0x5c], 0
je 0x45b4ff
mov eax, 0xffff
cmp edi, eax
jbe 0x45b4ff
jmp 0x45b4d9
mov eax, dword [ebp - 0x10a]
mov edx, 0x3ff
and ecx, edx
and eax, edx
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
jmp 0x41cc67
or dword [ebp - 0x68], 0xffffffff
or dword [ebp - 0x34], 0xffffffff
jmp 0x41d134
or dword [ebx + 0x64], 0x800
jmp 0x41cce7
cmp dword [ebp - 0x94], 0
je 0x41d86e
or dword [ebp - 0x54], 0xffffffff
or dword [ebp - 0x34], 0xffffffff
jmp 0x41cd29
movzx ecx, word [edx - 2]
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x60], ecx
jmp 0x41cd26
test ecx, ecx
jne 0x41cd29
jmp 0x41cd1a
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
jne 0x45c7a7
test edx, edx
je 0x45c81b
mov eax, dword [ebp - 0x2c]
and eax, 0x20000000
je 0x41d375
jmp 0x45c7af
mov eax, dword [ebp - 0x2c]
and eax, 0x20000000
mov esi, dword [ebp - 0x10]
test edx, edx
je 0x45c81e
test esi, esi
jne 0x45c81e
test eax, eax
jne 0x45c81e
mov eax, dword [ebp - 0x20]
push 2
pop ecx
mov word [eax], cx
mov eax, dword [ebp - 0x20]
add eax, ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x5c], esi
je 0x45c7fe
mov edx, eax
mov ecx, 0x100
call fcn.0049bfc8
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + eax*2]
mov ecx, 0x10ffff
mov dword [ebp - 0x20], edx
call fcn.0049bfc8
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x20], eax
jmp 0x45c81e
mov edx, 0x100
mov word [eax], dx
mov edx, 0xffff
mov eax, dword [ebp - 0x20]
add eax, ecx
mov dword [ebp - 0x20], eax
mov word [eax], dx
add dword [ebp - 0x20], ecx
jmp 0x45c81e
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov edi, dword [ebp - 8]
push 2
pop edx
mov word [eax], cx
add dword [ebp - 0x20], edx
push 0x70
pop eax
mov word [edi], ax
push 4
pop eax
add edi, eax
xor eax, eax
test esi, esi
setne al
movzx eax, ax
mov word [edi], ax
mov ecx, eax
test ebx, ebx
je 0x45c858
push 4
pop ecx
or eax, ecx
mov word [edi], ax
movzx ecx, ax
mov eax, dword [ebp - 0x24]
test eax, eax
jle 0x45c8b1
or ecx, edx
mov word [edi], cx
add edi, edx
mov eax, dword [ebp - 0x20]
sub eax, edi
and eax, 0xfffffffe
push eax
lea eax, [edi + 0x20]
push edi
push eax
call fcn.00422b59
add esp, 0xc
test esi, esi
je 0x45c895
test ebx, ebx
jne 0x45c895
push 0x20
xor eax, eax
pop ecx
not byte [ebp + eax - 0xe0]
inc eax
cmp eax, ecx
jb 0x45c889
push 0x20
pop eax
push eax
lea eax, [ebp - 0xe0]
push eax
push edi
call fcn.00421259
mov eax, dword [ebp - 0x20]
add esp, 0xc
add eax, 0x20
jmp 0x45c8b4
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 8], eax
sub eax, edx
sar eax, 1
mov word [edx + 2], ax
jmp 0x41cd29
push 0x20
xor eax, eax
pop ecx
not byte [ebp + eax - 0xe0]
inc eax
cmp eax, ecx
jb 0x45c8cc
jmp 0x41d3ae
cmp edx, ecx
push 0x23
sbb eax, eax
pop ecx
and eax, ecx
add eax, 0x34
jmp 0x45c900
mov esi, dword [ebp - 4]
xor eax, eax
push 0xd
pop ecx
cmp word [esi + 2], di
sete al
dec eax
and eax, 0x12
add eax, ecx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x45cab7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4b
jmp 0x45cab7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x42
jmp 0x45c5a7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x3b
jmp 0x45c5a7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1c
jmp 0x45cab7
movzx eax, word [esi]
cmp ax, cx
jb 0x45ca4b
push 0x30
mov ecx, eax
pop edx
push 0x39
pop eax
cmp cx, ax
ja 0x45ca4b
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
movzx eax, word [esi]
mov ecx, eax
cmp ax, dx
jae 0x45c953
jmp 0x45ca4b
push 0x23
jmp 0x45ca88
push 0x29
jmp 0x45ca88
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x26
jmp 0x45cab7
push 0x27
jmp 0x45ca88
push 0x2b
jmp 0x45ca7b
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x15
jmp 0x45c5a7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x31
jmp 0x45cab7
mov eax, dword [ebp + 0xc]
add esi, 2
mov dword [eax], 0x18
jmp 0x45cab7
push 9
pop eax
mov dword [ebx], eax
jmp 0x45cab7
mov eax, dword [ebp + 0xc]
add esi, 0xfffffffe
mov dword [eax], 0xc
jmp 0x45cab7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x36
jmp 0x45c5a7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1b
jmp 0x45c5a7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x14
jmp 0x45cab7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xe
jmp 0x45cab7
push 0x52
jmp 0x45ca88
movzx eax, word [esi]
cmp ax, cx
jb 0x45ca4b
push 0x30
mov ecx, eax
pop ebx
push 0x39
pop eax
cmp cx, ax
ja 0x45ca4b
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
cmp ax, bx
jae 0x45ca31
push 0x3d
jmp 0x45ca88
push 0x3a
jmp 0x45ca88
push 0x1d
jmp 0x45ca88
push 0x39
jmp 0x45ca88
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x54
jmp 0x45cab7
push 0x30
jmp 0x45ca88
push 0x2a
jmp 0x45ca88
push 0x3e
jmp 0x45ca88
mov esi, dword [ebp - 4]
push 0xf
jmp 0x45ca88
push 0x1e
mov eax, dword [ebp + 0xc]
pop ecx
mov dword [eax], ecx
jmp 0x45c5a7
push 0x1f
mov eax, dword [ebp + 0xc]
pop ecx
mov dword [eax], ecx
jmp 0x45cab7
mov dword [eax], 7
jmp 0x45cab7
mov dword [eax], 0x47
jmp 0x45c5a7
mov eax, dword [ebp + 0xc]
mov dword [eax], 8
jmp 0x45cab7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x34
mov eax, dword [ebp + 8]
mov dword [eax], esi
xor eax, eax
jmp 0x41cf7a