Function at 0x404cb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov ecx, dword [ebp + 0x1c]
xor eax, eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
lea eax, [ecx - 0x38]
push edi
mov edi, dword [ebp + 0x20]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x14], 0xfc00
mov dword [ebp - 0x18], 0xdc00
mov eax, dword [edi + 0x10]
mov esi, dword [edi + 0x84]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov dword [eax + 0x18], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x44], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [ecx + 0x38], eax
mov dword [ecx + 0x3c], eax
mov eax, ecx
mov ecx, dword [ebp + 0x20]
shr esi, 0x13
and esi, 1
mov dword [ebp - 0x44], 0xd800
mov dword [eax + 0x40], 0
xor edx, edx
mov dword [eax + 0x50], 0
mov dword [ebp - 8], esi
mov dword [eax + 0x4c], 0xffffffff
mov dword [ebp + 8], edx
mov dword [ebp - 0x40], 0xff
mov dword [ebp - 0x48], 0x2029
mov dword [ebp - 0x28], 0x180e
mov dword [ebp - 0x2c], 0x205f
mov dword [ebp - 0x30], 0x85
mov dword [ebp - 0x34], 0x2028
mov dword [ebp - 0x20], ecx
mov dword [eax + 0x1c], edx
mov dword [eax], ebx
mov ebx, dword [ebp + 0x1c]
mov dword [eax + 0x10], ebx
test edx, edx
je 0x404d98
sub eax, dword [edi + 0x10]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4c], eax
mov eax, edx
and eax, 0xffff0000
cmp eax, 0x40000
jne 0x404d93
movzx eax, dx
mov dword [ecx + 0x44], eax
xor edx, edx
mov dword [ebp + 8], edx
mov edx, dword [edi + 0x28]
lea eax, [edx + 1]
mov dword [edi + 0x28], eax
cmp edx, dword [edi + 0x20]
jae 0x40d05b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
cmp eax, dword [edi + 0x24]
jb 0x404dd1
pop edi
pop esi
mov eax, 0xffffffcb
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 0x20]
jmp 0x404dce
lea eax, [ecx + 4]
mov dword [ebx], eax
mov esi, dword [ebp - 8]
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov dl, byte [eax]
mov eax, dword [ebp - 4]
mov byte [eax + 0x31], dl
movzx eax, dl
cmp eax, 0xa4
ja case.0x40b244.15
movzx eax, byte [eax + 0x40d1c4]
jmp dword [eax*4 + 0x40d068]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x44], 0xffffffff
jne 0x404e72
mov eax, dword [eax]
mov ecx, dword [ebp + 0x20]
movzx edi, word [eax + 2]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
cmp eax, 0xffffffff
je case.0x40b244.15
mov ebx, dword [ecx + 0x10]
add ebx, eax
mov eax, edi
mov edx, ebx
mov dword [ebp - 0x10], ebx
sub edx, dword [ebp + 0x1c]
or eax, 0x10000
cmp dword [ebx + 0x1c], eax
je 0x404e39
mov eax, dword [edx + 0x4c]
jmp 0x404e12
mov eax, dword [ebp - 4]
lea esi, [edi + edi]
mov ebx, dword [ebp - 4]
lea ecx, [esi - 2]
mov dword [eax + 0x48], edi
mov edi, dword [ebp + 0x20]
mov eax, dword [edx + 0x38]
sub eax, dword [edi + 0x58]
sar eax, 1
mov dword [ebx + ecx*4 + 0x54], eax
mov eax, ebx
mov eax, dword [eax + 0x38]
sub eax, dword [edi + 0x58]
sar eax, 1
mov dword [ebx + ecx*4 + 0x58], eax
mov eax, ebx
cmp ecx, dword [eax + 0x50]
jb 0x404e6f
mov dword [eax + 0x50], esi
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
jmp 0x404dcb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x68]
jbe 0x404e99
mov dword [edi + 0x68], eax
mov eax, dword [ebp - 4]
mov esi, 0xfffffc19
mov dword [ebp - 0x20], eax
jmp 0x4067af
mov eax, dword [ebp - 4]
cmp dword [eax + 0x44], 0xffffffff
je 0x404efb
mov eax, dword [eax + 0x4c]
cmp eax, 0xffffffff
je case.0x40b244.15
mov edx, dword [edi + 0x10]
add edx, eax
mov ecx, edx
mov dword [ebp - 0x10], edx
sub ecx, ebx
mov eax, dword [edx + 0x1c]
and eax, 0xffff0000
cmp eax, 0x40000
je 0x404ede
mov eax, dword [ecx + 0x4c]
jmp 0x404eb5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov dword [ecx + 0x38], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov eax, dword [eax + 0x40]
mov dword [ecx + 0x40], eax
add dword [ecx], 4
jmp 0x404dd1
mov esi, dword [eax + 0x38]
mov edi, dword [eax + 0x3c]
cmp esi, edi
jne 0x404f2a
mov ebx, dword [ebp + 0x20]
mov eax, dword [ebx + 0x80]
test al, 4
jne 0x404f23
test al, 8
je 0x404f2a
mov ecx, dword [ebx + 0x40]
mov eax, dword [ebx + 0x58]
lea eax, [eax + ecx*2]
cmp edi, eax
jne 0x404f2a
mov edi, ebx
jmp case.0x404df3.160
mov eax, dword [ebp + 0x20]
cmp esi, dword [eax + 0x5c]
jae 0x40cf99
mov edi, dword [ebp + 0x20]
mov eax, dword [eax + 0x84]
or eax, dword [edi + 0x80]
test eax, 0x20000000
je 0x40cf97
test dl, dl
je case.0x404df3.160
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x20]
mov edi, eax
mov esi, dword [eax + 0x90]
test esi, esi
je 0x404f9b
mov eax, dword [ebp - 4]
mov edx, dword [edi + 0x5c]
mov ecx, dword [eax + 0x38]
cmp ecx, edx
jae 0x404fdc
push dword [ebp - 8]
lea eax, [edi + 0x94]
push eax
push edx
push esi
push ecx
call fcn.0041a550
add esp, 0x14
test eax, eax
je 0x404fd9
jmp case.0x404df3.160
mov esi, dword [eax + 0x94]
mov eax, dword [ebp - 4]
mov ecx, dword [edi + 0x5c]
mov edx, dword [eax + 0x38]
lea eax, [esi + esi]
sub ecx, eax
cmp edx, ecx
ja 0x404fd9
mov ax, word [edx]
cmp ax, word [edi + 0x98]
jne 0x404fd9
cmp esi, 1
je case.0x404df3.160
mov ax, word [edx + 2]
cmp ax, word [edi + 0x9a]
je case.0x404df3.160
mov eax, dword [ebp - 4]
cmp word [edi + 0x48], 0
je case.0x404df3.13
mov ecx, dword [eax + 0x38]
mov eax, dword [edi + 0x5c]
sub eax, 2
cmp ecx, eax
jne case.0x404df3.13
mov eax, dword [ebp + 0x20]
cmp dword [eax + 0x90], 0
jne 0x405028
cmp dword [eax + 0x94], 2
jne 0x405028
mov edi, dword [ebp + 0x20]
mov ax, word [ecx]
cmp ax, word [edi + 0x98]
jne case.0x404df3.13
mov eax, edi
mov dword [eax + 0x2c], 1
cmp word [eax + 0x48], 1
ja 0x405edb
mov edi, eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
cmp ecx, dword [edi + 0x5c]
jb 0x405060
mov eax, dword [ebp + 0x20]
cmp word [eax + 0x48], 0
je 0x405056
cmp ecx, dword [eax + 0x64]
jbe 0x405056
mov dword [eax + 0x2c], 1
cmp word [eax + 0x48], 1
ja 0x405edb
mov edi, dword [ebp + 0x20]
xor esi, esi
jmp 0x4067ac
mov esi, dword [ebp - 8]
add ecx, 2
mov dword [eax + 0x38], ecx
test esi, esi
je 0x4050e1
cmp ecx, dword [edi + 0x5c]
jae 0x4050e1
mov ax, word [ecx]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4050de
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x38], eax
mov eax, ecx
add dword [eax], 2
jmp 0x404dd1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x4050d5
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jbe case.0x404df3.160
mov eax, dword [ebp + 0x20]
mov dword [eax + 0x2c], 1
cmp word [eax + 0x48], 1
ja 0x405edb
mov edi, eax
jmp case.0x404df3.160
mov ecx, dword [ebp - 4]
add eax, 2
mov dword [ecx + 0x38], eax
mov eax, dword [ebp - 4]
add dword [eax], 2
jmp 0x404dd1
mov eax, dword [ebp - 4]
test esi, esi
je 0x405192
mov dword [eax + 0xc], 1
mov ecx, 0xfc00
add dword [eax], 2
mov eax, dword [eax]
mov ax, word [eax]
and ax, cx
mov ecx, 0xd800
cmp ax, cx
mov eax, dword [ebp - 4]
jne 0x405120
inc dword [eax + 0xc]
mov ecx, dword [eax + 0xc]
jmp 0x405126
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
mov esi, dword [edi + 0x5c]
mov eax, esi
sub eax, edx
sar eax, 1
cmp ecx, eax
jbe 0x405154
mov eax, dword [ebp + 0x20]
cmp word [eax + 0x48], 0
je 0x405056
cmp edx, esi
jb 0x405056
cmp edx, dword [eax + 0x64]
jmp 0x405042
mov esi, dword [ebp - 8]
test ecx, ecx
je 0x404dd1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
mov eax, dword [eax]
movzx edx, word [ecx]
movzx esi, word [eax]
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x38], eax
mov eax, ecx
add dword [eax], 2
cmp si, dx
jne case.0x404df3.160
add dword [eax + 0xc], 0xffffffff
jne 0x405162
mov esi, dword [ebp - 8]
jmp 0x404dd1
mov esi, dword [eax + 0x38]
mov eax, dword [edi + 0x5c]
sub eax, esi
and eax, 0xfffffffe
cmp eax, 2
jge 0x4051b8
mov eax, dword [ebp + 0x20]
cmp word [eax + 0x48], 0
je 0x405056
cmp esi, dword [eax + 0x64]
jmp 0x405042
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 4]
movzx ecx, word [esi]
mov eax, dword [eax]
movzx edx, word [eax + 2]
lea eax, [esi + 2]
mov dword [ebx + 0x38], eax
mov eax, ebx
cmp dx, cx
je 0x405488
xor esi, esi
jmp 0x4067af
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x38]
cmp esi, dword [edi + 0x5c]
jae 0x4051a2
cmp dword [ebp - 8], 0
je 0x4052f7
mov dword [eax + 0xc], 1
add dword [eax], 2
mov ecx, dword [eax]
movzx esi, word [ecx]
mov eax, esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x405233
movzx eax, word [ecx + 2]
and esi, 0x3ff
and eax, 0x3ff
shl esi, 0xa
or esi, eax
mov eax, dword [ebp - 4]
add esi, 0x10000
inc dword [eax + 0xc]
jmp 0x405236
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
movzx edx, word [ecx]
cmp esi, 0x80
jae 0x405274
mov eax, dword [edi + 0x34]
cmp edx, 0xff
ja 0x405253
movzx edx, byte [eax + edx]
movzx eax, byte [eax + esi]
cmp eax, edx
mov eax, dword [ebp - 4]
je 0x405265
xor esi, esi
jmp 0x4067af
add dword [eax], 2
add dword [eax + 0x38], 2
mov esi, dword [ebp - 8]
jmp 0x404dd1
add ecx, 2
mov dword [eax + 0x38], ecx
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4052aa
movzx eax, word [ecx]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
add edx, 0x10000
mov dword [ecx + 0x38], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 0xc]
add eax, eax
add dword [ecx], eax
cmp edx, esi
je 0x40a4bb
mov eax, esi
shr eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, esi
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea eax, [eax + eax*2]
mov eax, dword [eax*4 + 0x5ff484]
add eax, esi
cmp edx, eax
je 0x40a4bb
jmp case.0x404df3.160
mov eax, dword [eax]
mov ecx, 0xff
movzx eax, word [eax + 2]
cmp ax, cx
ja 0x405312
mov ecx, eax
mov eax, dword [edi + 0x34]
movzx edx, byte [eax + ecx]
jmp 0x405314
mov edx, eax
movzx eax, word [esi]
mov ecx, eax
cmp ax, word [ebp - 0x40]
ja 0x405326
mov eax, dword [edi + 0x34]
movzx ecx, byte [eax + ecx]
cmp edx, ecx
jne case.0x404df3.160
mov ecx, dword [ebp - 4]
lea eax, [esi + 2]
mov esi, dword [ebp - 8]
mov dword [ecx + 0x38], eax
mov eax, ecx
add dword [eax], 4
jmp 0x404dd1
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
cmp edx, dword [edi + 0x5c]
jb 0x405365
mov eax, dword [ebp + 0x20]
cmp word [eax + 0x48], 0
je 0x405056
cmp edx, dword [eax + 0x64]
jmp 0x405042
test esi, esi
je 0x40544d
add dword [eax], 2
mov eax, dword [eax]
movzx edx, word [eax]
lea ecx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax], ecx
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4053ac
movzx eax, word [ecx]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
add edx, 0x10000
mov dword [ecx], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
movzx esi, word [eax]
lea ecx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], ecx
mov eax, esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4053ee
movzx eax, word [ecx]
and esi, 0x3ff
and eax, 0x3ff
shl esi, 0xa
or esi, eax
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
add esi, 0x10000
mov dword [ecx + 0x38], eax
mov eax, dword [ebp - 4]
cmp edx, esi
jne 0x4053fc
xor esi, esi
jmp 0x4067af
cmp byte [eax + 0x31], 0x20
jne 0x40a4bb
cmp edx, 0x7f
jbe 0x405436
mov eax, edx
shr eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea eax, [eax + eax*2]
add edx, dword [eax*4 + 0x5ff484]
jmp 0x40543d
mov eax, dword [edi + 0x38]
movzx edx, byte [eax + edx]
cmp edx, esi
mov esi, dword [ebp - 8]
jne 0x404dd1
jmp case.0x404df3.160
mov eax, dword [eax]
mov ebx, dword [ebp - 4]
movzx esi, word [edx]
movzx ecx, word [eax + 2]
lea eax, [edx + 2]
mov dword [ebx + 0x38], eax
cmp ecx, esi
je case.0x404df3.160
mov eax, ebx
cmp byte [eax + 0x31], 0x20
jne 0x405488
cmp ecx, 0xff
ja 0x405480
mov eax, dword [edi + 0x38]
movzx ecx, byte [eax + ecx]
mov eax, ebx
cmp ecx, esi
je case.0x404df3.160
add dword [eax], 4
jmp 0x404dcb
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov dword [ecx + 0x20], eax
mov eax, ecx
add dword [eax], 4
jmp 0x40557d
mov dword [ebp - 0xc], 2
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov dword [eax + 0x20], 0
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov eax, ecx
add dword [eax], 4
jmp 0x40557a
mov dword [ebp - 0xc], 1
jmp 0x4054b3
mov dword [ebp - 0xc], 0
jmp 0x4054b3
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0xffffffff
add dword [eax], 2
jmp 0x40557a
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 1
mov dword [eax + 0x24], 0xffffffff
add dword [eax], 2
jmp 0x40557a
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 1
add dword [eax], 2
jmp 0x40557a
mov eax, dword [ebp - 4]
cmp dl, 0x2e
mov ecx, dword [eax]
sbb eax, eax
and eax, 0xfffffff3
add eax, 0x2e
movzx edx, word [ecx]
sub edx, eax
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
mov eax, dword [edx*4 + 0x5fdd30]
mov dword [ecx + 0x20], eax
mov eax, dword [edx*4 + 0x5fdd5c]
mov dword [ecx + 0x24], eax
mov eax, dword [edx*4 + 0x5fdd88]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
test esi, esi
je 0x40591c
mov dword [eax + 0xc], 1
mov eax, dword [eax]
mov dword [ecx + 8], eax
mov eax, ecx
mov ecx, dword [eax]
movzx edx, word [ecx]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4055cf
movzx eax, word [ecx + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov eax, dword [ebp - 4]
mov ecx, eax
add edx, 0x10000
inc dword [eax + 0xc]
mov ecx, dword [ecx]
jmp 0x4055d2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
mov eax, ecx
cmp dword [eax + 0xc], 1
jbe 0x405917
cmp byte [eax + 0x31], 0x2e
jb 0x405630
mov eax, edx
shr eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, edx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea eax, [eax + eax*2]
mov ecx, dword [eax*4 + 0x5ff484]
add ecx, edx
cmp ecx, edx
je 0x405630
mov eax, dword [ebp - 4]
add eax, 0x32
push eax
push ecx
call fcn.0041a6e0
add esp, 8
jmp 0x405632
xor eax, eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x24], 1
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
cmp eax, 1
jb 0x40576d
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x38]
jmp 0x405659
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0xc]
mov eax, dword [ebp + 0x20]
add edi, edi
mov ecx, dword [eax + 0x5c]
mov eax, ecx
sub eax, edi
mov dword [ebp - 0x1c], ecx
cmp ebx, eax
ja 0x4056da
mov eax, dword [ebp - 4]
mov esi, edi
mov ecx, ebx
mov edx, dword [eax + 8]
sub esi, 4
jb 0x405691
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40569a
add ecx, 4
add edx, 4
sub esi, 4
jae 0x405680
cmp esi, 0xfffffffc
je 0x40574d
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4056d7
cmp esi, 0xfffffffd
je 0x40574d
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4056d7
cmp esi, 0xfffffffe
je 0x40574d
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4056d7
cmp esi, 0xffffffff
je 0x40574d
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40574d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4057a6
lea edi, [eax + eax]
mov eax, ecx
sub eax, edi
cmp ebx, eax
ja 0x4057a6
mov edx, dword [ebp - 4]
mov esi, edi
add edx, 0x32
mov ecx, ebx
sub esi, 4
jb 0x405717
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40571c
add ecx, 4
add edx, 4
sub esi, 4
jae 0x405706
cmp esi, 0xfffffffc
je 0x40574d
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4057a6
cmp esi, 0xfffffffd
je 0x40574d
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4057a6
cmp esi, 0xfffffffe
je 0x40574d
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4057a6
cmp esi, 0xffffffff
je 0x40574d
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4057a6
mov eax, dword [ebp - 4]
add ebx, edi
mov edx, dword [ebp - 0x24]
inc edx
mov dword [ebp - 0x24], edx
mov dword [eax + 0x38], ebx
mov eax, dword [eax + 0x20]
cmp edx, eax
jbe 0x405656
mov edi, dword [ebp + 0x20]
mov esi, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp + 0x1c]
cmp eax, dword [ecx + 0x24]
je 0x404dd1
cmp dword [ebp - 0xc], 0
je 0x40ca9c
mov eax, ecx
mov eax, dword [eax + 0x38]
mov dword [ecx + 4], eax
mov eax, ecx
mov eax, dword [eax + 0x20]
cmp eax, dword [ecx + 0x24]
mov dword [ebp - 0x24], eax
mov eax, ecx
jae 0x4058fc
mov ebx, dword [eax + 0x38]
jmp 0x4057c8
mov eax, dword [ebp + 0x20]
cmp word [eax + 0x48], 0
je 0x405056
cmp ebx, dword [eax + 0x5c]
jb 0x405056
cmp ebx, dword [eax + 0x64]
jmp 0x405042
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0xc]
mov eax, dword [ebp + 0x20]
add edi, edi
mov ecx, dword [eax + 0x5c]
mov eax, ecx
sub eax, edi
mov dword [ebp - 0x1c], ecx
cmp ebx, eax
ja 0x40584a
mov eax, dword [ebp - 4]
mov esi, edi
mov ecx, ebx
mov edx, dword [eax + 8]
sub esi, 4
jb 0x405801
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40580a
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4057f0
cmp esi, 0xfffffffc
je 0x4058b9
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x405847
cmp esi, 0xfffffffd
je 0x4058b9
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x405847
cmp esi, 0xfffffffe
je 0x4058b9
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x405847
cmp esi, 0xffffffff
je 0x4058b9
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4058b9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4058d3
lea edi, [eax + eax]
mov eax, ecx
sub eax, edi
cmp ebx, eax
ja 0x4058d3
mov edx, dword [ebp - 4]
mov esi, edi
add edx, 0x32
mov ecx, ebx
sub esi, 4
jb 0x405887
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40588c
add ecx, 4
add edx, 4
sub esi, 4
jae 0x405876
cmp esi, 0xfffffffc
je 0x4058b9
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4058d3
cmp esi, 0xfffffffd
je 0x4058b9
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4058d3
cmp esi, 0xfffffffe
je 0x4058b9
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4058d3
cmp esi, 0xffffffff
je 0x4058b9
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4058d3
mov eax, dword [ebp - 4]
add ebx, edi
mov edx, dword [ebp - 0x24]
inc edx
mov dword [ebp - 0x24], edx
mov dword [eax + 0x38], ebx
cmp edx, dword [eax + 0x24]
jb 0x4057c5
jmp 0x4058fc
mov eax, dword [ebp + 0x20]
cmp word [eax + 0x48], 0
je 0x4058f9
cmp ebx, dword [eax + 0x5c]
jb 0x4058f9
cmp ebx, dword [eax + 0x64]
jbe 0x4058f9
mov dword [eax + 0x2c], 1
cmp word [eax + 0x48], 1
ja 0x405edb
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xc], 2
mov edi, dword [ebp + 0x20]
mov esi, dword [ebp - 8]
mov ebx, dword [ebp + 0x1c]
je 0x404dd1
mov ecx, dword [eax + 0x38]
jmp 0x40b864
mov dword [eax + 0x28], edx
jmp 0x40592a
mov eax, dword [eax]
movzx eax, word [eax]
mov dword [ecx + 0x28], eax
mov eax, dword [ebp - 4]
add dword [eax], 2
cmp byte [eax + 0x31], 0x2e
jb 0x405a6a
test esi, esi
je 0x40597d
mov edx, dword [eax + 0x28]
cmp edx, 0x7f
jbe 0x40597d
mov eax, edx
test eax, eax
jns 0x405949
add eax, 0x7f
sar eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, edx
shl ecx, 7
and eax, 0x8000007f
jns 0x405965
dec eax
or eax, 0xffffff80
inc eax
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea eax, [eax + eax*2]
mov ecx, dword [eax*4 + 0x5ff484]
add ecx, edx
jmp 0x40598f
mov ecx, dword [eax + 0x28]
cmp ecx, 0xff
ja 0x40598f
mov eax, dword [edi + 0x38]
movzx ecx, byte [eax + ecx]
mov eax, dword [ebp - 4]
mov edx, 1
mov dword [eax + 0x2c], ecx
mov eax, dword [eax + 0x20]
cmp eax, edx
jb 0x4059e4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
nop word [eax + eax]
mov eax, dword [ebp + 0x20]
cmp ecx, dword [eax + 0x5c]
jae 0x405038
mov ebx, dword [ebp - 4]
movzx eax, word [ecx]
cmp dword [ebx + 0x28], eax
je 0x4059d0
cmp dword [ebx + 0x2c], eax
jne 0x405056
mov eax, dword [ebp - 4]
add ecx, 2
inc edx
mov dword [eax + 0x38], ecx
mov eax, dword [eax + 0x20]
cmp edx, eax
jbe 0x4059b0
mov edi, dword [ebp + 0x20]
mov ebx, dword [ebp - 4]
cmp eax, dword [ebx + 0x24]
je 0x404dce
cmp dword [ebp - 0xc], 0
je 0x40afeb
mov eax, ebx
mov ecx, ebx
mov eax, dword [eax + 0x38]
mov dword [ecx + 4], eax
mov eax, ebx
mov edx, dword [eax + 0x20]
cmp edx, dword [eax + 0x24]
jae 0x405a52
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jae 0x405a31
movzx ecx, word [eax]
cmp dword [ebx + 0x28], ecx
je 0x405a23
cmp dword [ebx + 0x2c], ecx
jne 0x405a52
add eax, 2
inc edx
mov dword [ebx + 0x38], eax
cmp edx, dword [ebx + 0x24]
jb 0x405a11
jmp 0x405a52
cmp word [edi + 0x48], 0
je 0x405a52
cmp eax, dword [edi + 0x64]
jbe 0x405a52
mov eax, dword [ebp + 0x20]
mov dword [eax + 0x2c], 1
cmp word [eax + 0x48], 1
ja 0x405edb
cmp dword [ebp - 0xc], 2
mov edi, dword [ebp + 0x20]
mov ebx, dword [ebp + 0x1c]
je 0x404dd1
mov ebx, dword [ebp - 4]
jmp 0x40b008
mov eax, dword [eax + 0x20]
mov esi, 1
cmp eax, esi
jb 0x405aaa
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
nop dword [eax]
mov eax, dword [ebp + 0x20]
cmp edx, dword [eax + 0x5c]
jae 0x405352
mov ebx, dword [ebp - 4]
movzx eax, word [edx]
add edx, 2
mov dword [ebx + 0x38], edx
cmp dword [ebx + 0x28], eax
mov eax, ebx
jne 0x405b00
mov eax, dword [eax + 0x20]
inc esi
cmp esi, eax
jbe 0x405a80
mov edi, dword [ebp + 0x20]
mov ebx, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp eax, dword [ebx + 0x24]
je 0x404dce
mov esi, dword [ebp - 0xc]
test esi, esi
je 0x40b069
mov eax, ebx
mov ecx, ebx
mov eax, dword [eax + 0x38]
mov dword [ecx + 4], eax
mov eax, ebx
mov edx, dword [eax + 0x20]
cmp edx, dword [eax + 0x24]
jae 0x405b28
mov ecx, dword [eax + 0x38]
nop dword [eax + eax]
cmp ecx, dword [edi + 0x5c]
jae 0x405b0a
mov ebx, dword [ebp - 4]
movzx eax, word [ecx]
cmp dword [ebx + 0x28], eax
jne 0x405b2b
mov eax, ebx
add ecx, 2
inc edx
mov dword [eax + 0x38], ecx
cmp edx, dword [eax + 0x24]
jb 0x405ae0
jmp 0x405b28
mov edi, dword [ebp + 0x20]
xor esi, esi
jmp 0x4067af
cmp word [edi + 0x48], 0
je 0x405b28
cmp ecx, dword [edi + 0x64]
jbe 0x405b28
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
mov ebx, dword [ebp - 4]
cmp esi, 2
mov esi, dword [ebp - 8]
je 0x404dce
mov eax, dword [ebx + 0x38]
cmp eax, dword [ebx + 4]
jbe 0x404dcb
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x1c
jmp 0x40cec1
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov dword [ecx + 0x20], eax
mov eax, ecx
add dword [eax], 4
jmp 0x405c7c
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], 1
mov dword [eax + 0x20], 0
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov eax, ecx
add dword [eax], 4
jmp 0x405c7c
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], 0
mov dword [eax + 0x20], 0
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov eax, ecx
add dword [eax], 4
jmp 0x405c7c
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0xffffffff
add dword [eax], 2
jmp 0x405c7c
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 1
mov dword [eax + 0x24], 0xffffffff
add dword [eax], 2
jmp 0x405c7c
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 1
add dword [eax], 2
jmp 0x405c7c
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 0
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov eax, ecx
add dword [eax], 4
jmp 0x405c7c
mov eax, dword [ebp - 4]
cmp dl, 0x48
mov ecx, dword [eax]
sbb eax, eax
and eax, 0xfffffff3
add eax, 0x48
movzx edx, word [ecx]
sub edx, eax
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
mov eax, dword [edx*4 + 0x5fdd30]
mov dword [ecx + 0x20], eax
mov eax, dword [edx*4 + 0x5fdd5c]
mov dword [ecx + 0x24], eax
mov eax, dword [edx*4 + 0x5fdd88]
mov dword [ebp - 0xc], eax
mov eax, ecx
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
movzx eax, word [eax]
mov dword [ecx + 0x28], eax
mov eax, ecx
mov edx, dword [eax]
add edx, 2
mov dword [eax], edx
test esi, esi
je 0x405ccb
mov ecx, dword [eax + 0x28]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x405cc8
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or eax, ecx
mov ecx, dword [ebp - 4]
add eax, 0x10000
mov dword [ecx + 0x28], eax
mov eax, ecx
add dword [eax], 2
mov eax, dword [ebp - 4]
cmp byte [eax + 0x31], 0x48
jb 0x405f5d
test esi, esi
je 0x405d1e
mov edx, dword [eax + 0x28]
cmp edx, 0x7f
jbe 0x405d1e
mov eax, edx
test eax, eax
jns 0x405cea
add eax, 0x7f
sar eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, edx
shl ecx, 7
and eax, 0x8000007f
jns 0x405d06
dec eax
or eax, 0xffffff80
inc eax
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea eax, [eax + eax*2]
mov ecx, dword [eax*4 + 0x5ff484]
add ecx, edx
jmp 0x405d30
mov ecx, dword [eax + 0x28]
cmp ecx, 0xff
ja 0x405d30
mov eax, dword [edi + 0x38]
movzx ecx, byte [eax + ecx]
mov eax, dword [ebp - 4]
mov dword [eax + 0x2c], ecx
mov eax, dword [eax + 0x20]
test esi, esi
je 0x405dc9
mov esi, 1
cmp eax, esi
jb 0x405dc4
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
jmp 0x405d63
mov eax, dword [ebp - 4]
cmp edx, dword [edi + 0x5c]
jae 0x40710c
movzx ecx, word [edx]
add edx, 2
mov dword [eax + 0x38], edx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x405da7
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
add edx, 2
mov dword [eax + 0x38], edx
jmp 0x405daa
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], ecx
je case.0x404df3.160
cmp dword [eax + 0x2c], ecx
je case.0x404df3.160
mov eax, dword [eax + 0x20]
inc esi
cmp esi, eax
jbe 0x405d60
mov esi, dword [ebp - 8]
jmp 0x405e11
mov edx, 1
cmp eax, edx
jb 0x405e11
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
nop dword [eax + eax]
cmp ecx, dword [edi + 0x5c]
jae 0x408386
mov ebx, dword [ebp - 4]
movzx eax, word [ecx]
cmp dword [ebx + 0x28], eax
je case.0x404df3.160
cmp dword [ebx + 0x2c], eax
je case.0x404df3.160
mov eax, ebx
add ecx, 2
inc edx
mov dword [eax + 0x38], ecx
mov eax, dword [eax + 0x20]
cmp edx, eax
jbe 0x405de0
mov ebx, dword [ebp - 4]
cmp eax, dword [ebx + 0x24]
je 0x404dce
cmp dword [ebp - 0xc], 0
je 0x40c8f6
mov eax, ebx
mov ecx, ebx
mov eax, dword [eax + 0x38]
mov dword [ecx + 4], eax
mov eax, ebx
mov edi, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test esi, esi
je 0x405eec
cmp edi, eax
jae 0x405ee7
mov eax, ebx
mov edx, dword [eax + 0x38]
nop
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x405ec4
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x405e8d
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], ecx
je 0x405ea6
cmp dword [eax + 0x2c], ecx
je 0x405ea6
lea edx, [edx + esi*2]
inc edi
mov dword [eax + 0x38], edx
cmp edi, dword [eax + 0x24]
jb 0x405e50
mov edi, dword [ebp + 0x20]
mov esi, dword [ebp - 8]
cmp dword [ebp - 0xc], 2
mov ebx, dword [ebp + 0x1c]
je 0x404dd1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
jmp 0x40b92f
mov edi, eax
cmp word [edi + 0x48], 0
je 0x405ea9
cmp edx, dword [edi + 0x64]
jbe 0x405ea9
mov dword [edi + 0x2c], esi
cmp word [edi + 0x48], si
jbe 0x405ea9
pop edi
pop esi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 0x20]
jmp 0x405eac
cmp edi, eax
jae 0x405f21
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [eax + 0x38]
nop dword [eax]
mov ecx, dword [ebp + 0x20]
cmp eax, dword [ecx + 0x5c]
jae 0x405f3f
movzx ecx, word [eax]
cmp dword [edx + 0x28], ecx
je 0x405f21
cmp dword [edx + 0x2c], ecx
je 0x405f21
add eax, 2
inc edi
mov dword [edx + 0x38], eax
cmp edi, dword [edx + 0x24]
jb 0x405f00
mov edi, dword [ebp + 0x20]
cmp dword [ebp - 0xc], 2
mov ebx, dword [ebp + 0x1c]
je 0x404dd1
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 4]
mov eax, dword [eax + 0x38]
jmp 0x40b0fa
mov edi, ecx
cmp word [edi + 0x48], 0
je 0x405f24
cmp eax, dword [edi + 0x64]
jbe 0x405f24
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
jmp 0x405f24
mov eax, dword [eax + 0x20]
test esi, esi
mov esi, 1
je 0x405fdd
cmp eax, esi
jb 0x406018
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
jmp 0x405f83
mov eax, dword [ebp - 4]
cmp edx, dword [edi + 0x5c]
jae 0x40710c
movzx ecx, word [edx]
add edx, 2
mov dword [eax + 0x38], edx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x405fc7
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
add edx, 2
mov dword [eax + 0x38], edx
jmp 0x405fca
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], ecx
je case.0x404df3.160
mov eax, dword [eax + 0x20]
inc esi
cmp esi, eax
jbe 0x405f80
jmp 0x406018
cmp eax, 1
jb 0x406018
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
nop dword [eax + eax]
cmp edx, dword [edi + 0x5c]
jae 0x40710c
mov ebx, dword [ebp - 4]
movzx eax, word [edx]
add edx, 2
mov dword [ebx + 0x38], edx
cmp dword [ebx + 0x28], eax
mov eax, ebx
je 0x4051d8
mov eax, dword [eax + 0x20]
inc esi
cmp esi, eax
jbe 0x405ff0
mov ebx, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp eax, dword [ebx + 0x24]
je 0x404dce
cmp dword [ebp - 0xc], 0
je 0x40c90c
mov eax, ebx
mov ecx, ebx
mov eax, dword [eax + 0x38]
mov dword [ecx + 4], eax
mov eax, ebx
mov edi, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test esi, esi
je 0x4060f1
cmp edi, eax
jae 0x4060ec
mov eax, ebx
mov edx, dword [eax + 0x38]
nop dword [eax + eax]
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x4060cf
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40609d
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], ecx
je 0x4060b1
lea edx, [edx + esi*2]
inc edi
mov dword [eax + 0x38], edx
cmp edi, dword [eax + 0x24]
jb 0x406060
mov edi, dword [ebp + 0x20]
mov esi, dword [ebp - 8]
cmp dword [ebp - 0xc], 2
mov ebx, dword [ebp + 0x1c]
je 0x404dd1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
jmp 0x40b9f1
mov edi, eax
cmp word [edi + 0x48], 0
je 0x4060b4
cmp edx, dword [edi + 0x64]
jbe 0x4060b4
mov dword [edi + 0x2c], esi
cmp word [edi + 0x48], si
ja 0x405edb
jmp 0x4060b4
mov edi, dword [ebp + 0x20]
jmp 0x4060b7
cmp edi, eax
jae 0x406121
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x38]
nop dword [eax + eax]
mov eax, dword [ebp + 0x20]
cmp ecx, dword [eax + 0x5c]
jae 0x40613f
mov ebx, dword [ebp - 4]
movzx eax, word [ecx]
cmp dword [ebx + 0x28], eax
je 0x406121
mov eax, ebx
add ecx, 2
inc edi
mov dword [eax + 0x38], ecx
cmp edi, dword [eax + 0x24]
jb 0x406100
mov edi, dword [ebp + 0x20]
cmp dword [ebp - 0xc], 2
mov ebx, dword [ebp + 0x1c]
je 0x404dd1
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 4]
mov eax, dword [eax + 0x38]
jmp 0x40b178
mov edi, eax
cmp word [edi + 0x48], 0
je 0x406124
cmp ecx, dword [edi + 0x64]
jbe 0x406124
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
jmp 0x406124
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [eax]
add eax, 2
mov dword [ecx + 8], eax
mov eax, ecx
add dword [eax], 0x22
mov edx, dword [eax]
movzx ecx, word [edx]
lea eax, [ecx - 0x62]
cmp eax, 0xb
ja case.default.0x40618c
movzx eax, byte [eax + 0x40d274]
jmp dword [eax*4 + 0x40d26c]
lea eax, [edx + 2]
mov edx, dword [ebp - 4]
mov dword [edx], eax
mov eax, dword [ecx*4 + 0x5fdba8]
mov dword [edx + 0x20], eax
mov eax, dword [ecx*4 + 0x5fdbd4]
mov dword [edx + 0x24], eax
mov eax, dword [ebp - 4]
mov edx, dword [ecx*4 + 0x5fdc00]
mov dword [ebp - 0xc], edx
mov eax, dword [eax + 0x20]
jmp 0x406219
mov ecx, dword [ebp - 4]
movzx eax, word [edx + 2]
mov dword [ecx + 0x20], eax
mov eax, ecx
mov ecx, 0xffffffff
mov eax, dword [eax]
movzx eax, word [eax + 4]
test eax, eax
cmove eax, ecx
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x24], eax
mov eax, ecx
mov ecx, dword [eax]
movzx eax, word [ecx]
mov eax, dword [eax*4 + 0x5fdc00]
mov dword [ebp - 0xc], eax
lea eax, [ecx + 6]
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
mov eax, ecx
mov eax, dword [eax + 0x20]
jmp 0x406219
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 1
mov dword [eax + 0x20], 1
mov eax, 1
mov ebx, 1
test esi, esi
je 0x4062f9
cmp eax, ebx
jb 0x406357
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + 0x20]
mov edi, dword [eax + 0x38]
cmp edi, dword [ecx + 0x5c]
jae 0x4062c7
movzx esi, word [edi]
add edi, 2
mov dword [eax + 0x38], edi
mov eax, esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40627b
movzx eax, word [edi]
and esi, 0x3ff
and eax, 0x3ff
shl esi, 0xa
or esi, eax
mov eax, dword [ebp - 4]
add esi, 0x10000
add edi, 2
mov dword [eax + 0x38], edi
jmp 0x40627e
mov eax, dword [ebp - 4]
cmp esi, 0xff
jbe 0x406292
cmp byte [eax + 0x31], 0x6e
je 0x405056
jmp 0x4062b3
mov eax, dword [eax + 8]
mov ecx, esi
and ecx, 7
shr esi, 3
mov edx, 1
shl edx, cl
test byte [esi + eax], dl
mov eax, dword [ebp - 4]
je 0x405b00
mov ecx, dword [ebp + 0x20]
mov eax, dword [eax + 0x20]
inc ebx
cmp ebx, eax
ja 0x406357
mov eax, dword [ebp - 4]
jmp 0x406237
cmp word [ecx + 0x48], 0
je 0x4062f1
cmp edi, dword [ecx + 0x64]
mov edi, dword [ebp + 0x20]
jbe case.0x404df3.160
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
jmp case.0x404df3.160
mov edi, dword [ebp + 0x20]
jmp case.0x404df3.160
cmp eax, 1
jb 0x406357
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + 0x20]
mov edi, dword [eax + 0x38]
cmp edi, dword [ecx + 0x5c]
jae 0x4062c7
movzx esi, word [edi]
add edi, 2
mov dword [eax + 0x38], edi
cmp esi, 0xff
jbe 0x406329
cmp byte [eax + 0x31], 0x6e
je 0x405056
jmp 0x40634a
mov eax, dword [eax + 8]
mov ecx, esi
and ecx, 7
shr esi, 3
mov edx, 1
shl edx, cl
test byte [esi + eax], dl
mov eax, dword [ebp - 4]
je 0x405b00
mov ecx, dword [ebp + 0x20]
mov eax, dword [eax + 0x20]
inc ebx
cmp ebx, eax
ja 0x406357
mov eax, dword [ebp - 4]
jmp 0x406307
mov ebx, dword [ebp - 4]
mov esi, dword [ebp - 8]
cmp eax, dword [ebx + 0x24]
je 0x404dc1
cmp dword [ebp - 0xc], 0
je 0x40c922
mov eax, ebx
mov ecx, ebx
mov eax, dword [eax + 0x38]
mov dword [ecx + 4], eax
mov eax, ebx
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x1c], ecx
test esi, esi
je 0x406463
cmp ecx, eax
jae 0x40643e
mov eax, ebx
mov edi, dword [eax + 0x38]
nop word [eax + eax]
mov eax, dword [ebp + 0x20]
mov ebx, 1
cmp edi, dword [eax + 0x5c]
jae 0x406421
movzx esi, word [edi]
mov eax, esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4063dd
movzx eax, word [edi + 2]
and esi, 0x3ff
and eax, 0x3ff
shl esi, 0xa
or esi, eax
mov ebx, 2
add esi, 0x10000
mov eax, dword [ebp - 4]
cmp esi, 0xff
jbe 0x4063f0
cmp byte [eax + 0x31], 0x6e
je 0x40641c
jmp 0x40640d
mov eax, dword [eax + 8]
mov ecx, esi
and ecx, 7
shr esi, 3
mov edx, 1
shl edx, cl
test byte [esi + eax], dl
je 0x40641c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
lea edi, [edi + ebx*2]
inc ecx
mov dword [eax + 0x38], edi
mov dword [ebp - 0x1c], ecx
cmp ecx, dword [eax + 0x24]
jb 0x4063a0
mov edi, dword [ebp + 0x20]
jmp 0x406445
cmp word [eax + 0x48], 0
je 0x406443
cmp edi, dword [eax + 0x64]
mov edi, eax
jbe 0x406445
mov dword [edi + 0x2c], ebx
cmp word [edi + 0x48], bx
ja 0x405edb
jmp 0x406445
mov edi, dword [ebp + 0x20]
jmp 0x406448
mov edi, eax
mov esi, dword [ebp - 8]
cmp dword [ebp - 0xc], 2
je 0x404dce
mov ebx, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xc9
jmp 0x40cec1
cmp ecx, eax
jae 0x40650b
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0x20]
mov edi, dword [eax + 0x38]
cmp edi, dword [edx + 0x5c]
jae 0x4064e8
movzx esi, word [edi]
cmp esi, 0xff
jbe 0x4064b7
cmp byte [eax + 0x31], 0x6e
jne 0x4064d7
mov edi, dword [ebp + 0x20]
mov esi, dword [ebp - 8]
cmp dword [ebp - 0xc], 2
je 0x404dce
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
cmp eax, dword [ebx + 4]
jb case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x18
jmp 0x40cec1
mov eax, dword [eax + 8]
mov ecx, esi
and ecx, 7
shr esi, 3
mov edx, 1
shl edx, cl
test byte [esi + eax], dl
je 0x40648a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0x20]
add edi, 2
inc ecx
mov dword [eax + 0x38], edi
mov dword [ebp - 0x1c], ecx
cmp ecx, dword [eax + 0x24]
jb 0x406474
jmp 0x40648a
cmp word [edx + 0x48], 0
je 0x40648a
cmp edi, dword [edx + 0x64]
mov edi, dword [ebp + 0x20]
jbe 0x40648d
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
jmp 0x40648d
mov edi, dword [ebp + 0x20]
jmp 0x406490
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [eax]
add eax, 4
mov dword [ecx + 8], eax
mov eax, ecx
mov ecx, dword [eax]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov eax, dword [ebp - 4]
mov dword [eax], ecx
movzx edx, word [ecx]
lea eax, [edx - 0x62]
cmp eax, 0xb
ja case.default.0x406544
movzx eax, byte [eax + 0x40d288]
jmp dword [eax*4 + 0x40d280]
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
mov eax, dword [edx*4 + 0x5fdba8]
mov dword [ecx + 0x20], eax
mov eax, dword [edx*4 + 0x5fdbd4]
mov edx, dword [edx*4 + 0x5fdc00]
mov dword [ecx + 0x24], eax
mov eax, ecx
mov dword [ebp - 0xc], edx
mov eax, dword [eax + 0x20]
jmp 0x4065d0
movzx eax, word [ecx + 2]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x20], eax
mov eax, ecx
mov ecx, 0xffffffff
mov eax, dword [eax]
movzx eax, word [eax + 4]
test eax, eax
cmove eax, ecx
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x24], eax
mov eax, ecx
mov ecx, dword [eax]
movzx eax, word [ecx]
mov eax, dword [eax*4 + 0x5fdc00]
mov dword [ebp - 0xc], eax
lea eax, [ecx + 6]
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
mov eax, ecx
mov eax, dword [eax + 0x20]
jmp 0x4065d0
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 1
mov dword [eax + 0x20], 1
mov eax, 1
mov esi, 1
cmp eax, esi
jb 0x406656
nop dword [eax]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jae 0x406742
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
je 0x406634
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406631
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
push dword [ebp - 8]
push dword [eax + 8]
push ecx
call fcn.0041ae30
add esp, 0xc
test eax, eax
mov eax, dword [ebp - 4]
je 0x4051d8
mov eax, dword [eax + 0x20]
inc esi
cmp esi, eax
jbe 0x4065e0
mov ebx, dword [ebp - 4]
cmp eax, dword [ebx + 0x24]
je 0x404dcb
cmp dword [ebp - 0xc], 0
je 0x40b5b0
mov eax, ebx
mov ecx, ebx
mov eax, dword [eax + 0x38]
mov dword [ecx + 4], eax
mov eax, ebx
mov edi, dword [eax + 0x20]
cmp edi, dword [eax + 0x24]
jae 0x4066fc
mov edx, dword [eax + 0x38]
mov ebx, dword [ebp - 8]
jmp 0x406693
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [ecx + 0x5c]
jae 0x40671a
movzx ecx, word [edx]
test ebx, ebx
je 0x4066d7
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4066d4
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov eax, dword [ebp - 4]
push ebx
push dword [eax + 8]
push ecx
call fcn.0041ae30
add esp, 0xc
test eax, eax
je 0x4066fc
mov ecx, dword [ebp - 4]
lea eax, [esi + esi]
inc edi
add dword [ecx + 0x38], eax
mov eax, ecx
mov edx, dword [eax + 0x38]
cmp edi, dword [eax + 0x24]
jb 0x406690
mov edi, dword [ebp + 0x20]
cmp dword [ebp - 0xc], 2
je 0x404dcb
mov ebx, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x65
jmp 0x40cec1
mov edi, ecx
cmp word [edi + 0x48], 0
je 0x4066ff
cmp edx, dword [edi + 0x64]
jbe 0x4066ff
mov dword [edi + 0x2c], esi
cmp word [edi + 0x48], si
ja 0x405edb
jmp 0x4066ff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x406751
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x406791
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406791
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0xff
ja 0x406860
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 8
je 0x406860
xor esi, esi
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
cmp dword [eax + 0x18], 0
je 0x40d022
sub eax, dword [eax + 0x10]
mov dword [ebp - 4], eax
mov eax, dword [edi + 0xa0]
mov ebx, dword [ebp - 4]
or dword [eax + 0x3c], 2
movzx eax, byte [ebx + 0x30]
dec eax
cmp eax, 0xdd
ja case.0x40b244.15
movzx eax, byte [eax + 0x40d380]
jmp dword [eax*4 + 0x40d294]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x406807
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x406847
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406847
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0xff
ja case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 8
je case.0x404df3.160
mov eax, dword [ebp - 4]
add dword [eax], 2
jmp 0x404dce
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x406889
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x4068c9
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4068c9
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0xff
ja 0x406860
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
jmp 0x4067a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x4068fb
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x40693b
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40693b
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0xff
ja case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
je case.0x404df3.160
mov eax, dword [ebp - 4]
add dword [eax], 2
jmp 0x404dce
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40697d
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x4069bd
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4069bd
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0xff
ja 0x406860
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
jmp 0x4067a4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x4069f3
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x406a33
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406a33
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0xff
ja case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je case.0x404df3.160
mov eax, dword [ebp - 4]
add dword [eax], 2
jmp 0x404dce
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x38]
cmp esi, dword [edi + 0x5c]
jb 0x406a75
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp esi, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [esi]
add esi, 2
cmp dword [ebp - 8], 0
mov edx, esi
mov dword [eax + 0x38], esi
je 0x406ab6
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406ab6
movzx eax, word [esi]
lea edx, [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
mov dword [eax + 0x38], edx
cmp ecx, 0xd
ja 0x406b1e
je 0x406ad1
cmp ecx, 0xa
je 0x406b49
jbe case.0x404df3.160
cmp ecx, 0xc
jmp 0x406b38
cmp edx, dword [edi + 0x5c]
jb 0x406b02
cmp word [edi + 0x48], 0
je 0x406b49
cmp edx, dword [edi + 0x64]
jbe 0x406b49
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
add dword [eax], 2
jmp 0x404dd1
cmp word [edx], 0xa
jne 0x406b49
mov ecx, dword [ebp - 4]
lea eax, [edx + 2]
mov esi, dword [ebp - 8]
mov dword [ecx + 0x38], eax
mov eax, ecx
add dword [eax], 2
jmp 0x404dd1
cmp ecx, 0x85
je 0x406b3e
cmp ecx, 0x2027
jbe case.0x404df3.160
cmp ecx, 0x2029
ja case.0x404df3.160
cmp word [edi + 0x4a], 2
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 8]
add dword [eax], 2
jmp 0x404dd1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x406b75
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x406bb8
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406bb5
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
cmp ecx, 0x180e
ja 0x406c02
je case.0x404df3.160
cmp ecx, 0xa0
ja 0x406bee
je case.0x404df3.160
cmp ecx, 9
je case.0x404df3.160
cmp ecx, 0x20
je case.0x404df3.160
add dword [eax], 2
jmp 0x404dce
cmp ecx, 0x1680
je case.0x404df3.160
add dword [eax], 2
jmp 0x404dce
cmp ecx, 0x205f
ja 0x406c3c
je case.0x404df3.160
cmp ecx, 0x2000
jb 0x406863
cmp ecx, 0x200a
jbe case.0x404df3.160
cmp ecx, 0x202f
je case.0x404df3.160
add dword [eax], 2
jmp 0x404dce
cmp ecx, 0x3000
je case.0x404df3.160
add dword [eax], 2
jmp 0x404dce
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x406c6e
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x406cb1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406cae
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
cmp ecx, 0x180e
ja 0x406ce3
je 0x406863
cmp ecx, 0xa0
ja 0x406cdb
je 0x406863
cmp ecx, 9
je 0x406863
cmp ecx, 0x20
jmp 0x406d17
cmp ecx, 0x1680
jmp 0x406d17
cmp ecx, 0x205f
ja 0x406d11
je 0x406863
cmp ecx, 0x2000
jb case.0x404df3.160
cmp ecx, 0x200a
jbe 0x406863
cmp ecx, 0x202f
jmp 0x406d17
cmp ecx, 0x3000
je 0x406863
jmp case.0x404df3.160
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x406d40
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x406d80
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406d80
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0x85
ja 0x406dab
je case.0x404df3.160
cmp ecx, 0xa
jb 0x406860
cmp ecx, 0xd
jbe case.0x404df3.160
mov eax, dword [ebp - 4]
add dword [eax], 2
jmp 0x404dce
lea eax, [ecx - 0x2028]
cmp eax, 1
ja 0x406860
jmp case.0x404df3.160
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x406ddd
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
test esi, esi
je 0x406e1d
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406e1d
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0x85
ja 0x406e42
je 0x406860
cmp ecx, 0xa
jb case.0x404df3.160
cmp ecx, 0xd
jbe 0x406860
jmp case.0x404df3.160
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x404df3.160
mov eax, dword [ebp - 4]
add dword [eax], 2
jmp 0x404dce
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x406e7a
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx edx, word [eax]
lea ecx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], ecx
test esi, esi
je 0x406eba
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x406eba
movzx eax, word [ecx]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
add edx, 0x10000
mov dword [ecx + 0x38], eax
mov eax, edx
shr eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 4]
mov esi, dword [eax]
movzx eax, word [esi + 2]
cmp eax, 0xa
ja case.0x40b244.15
jmp dword [eax*4 + 0x40d460]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x31], 0xf
je case.0x404df3.160
add dword [eax], 6
jmp 0x404dcb
mov al, byte [ecx*4 + 0x5ff481]
cmp al, 9
je 0x406f21
cmp al, 5
je 0x406f21
cmp al, 8
je 0x406f21
xor ecx, ecx
jmp 0x406f26
mov ecx, 1
mov ebx, dword [ebp - 4]
xor eax, eax
cmp byte [ebx + 0x31], 0xf
sete al
cmp ecx, eax
mov eax, dword [ebp - 4]
jne 0x406f02
xor esi, esi
jmp 0x4067af
movzx ecx, byte [ecx*4 + 0x5ff481]
xor edx, edx
movzx eax, word [esi + 4]
cmp eax, dword [ecx*4 + 0x5fe568]
mov ecx, dword [ebp - 4]
setne dl
xor eax, eax
cmp byte [ecx + 0x31], 0x10
sete al
cmp edx, eax
mov eax, ecx
jne 0x406f02
xor esi, esi
jmp 0x4067af
movzx eax, byte [ecx*4 + 0x5ff481]
mov ebx, dword [ebp - 4]
xor ecx, ecx
cmp word [esi + 4], ax
setne cl
xor eax, eax
cmp byte [ebx + 0x31], 0x10
jmp 0x406f2f
movzx eax, byte [ecx*4 + 0x5ff480]
jmp 0x406f79
movzx eax, byte [ecx*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x406f21
cmp eax, 3
je 0x406f21
xor ecx, ecx
jmp 0x406f26
cmp edx, 0x180e
ja 0x406ff2
je case.0x40700e.8192
cmp edx, 0x85
ja 0x406fe2
je case.0x40700e.8192
cmp edx, 9
jb case.0x40700e.8203
cmp edx, 0xd
jbe case.0x40700e.8192
cmp edx, 0x20
jmp 0x407023
cmp edx, 0xa0
je case.0x40700e.8192
cmp edx, 0x1680
jmp 0x407023
cmp edx, 0x202f
ja 0x407015
je case.0x40700e.8192
add edx, 0xffffe000
cmp edx, 0x29
ja case.0x40700e.8203
movzx eax, byte [edx + 0x40d494]
jmp dword [eax*4 + 0x40d48c]
cmp edx, 0x205f
je case.0x40700e.8192
cmp edx, 0x3000
je case.0x40700e.8192
movzx eax, byte [ecx*4 + 0x5ff481]
xor ecx, ecx
cmp dword [eax*4 + 0x5fe568], 6
sete cl
jmp 0x406f26
mov eax, dword [ebp - 4]
cmp byte [eax + 0x31], 0xf
jmp 0x406f34
movzx eax, byte [ecx*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x406f21
cmp eax, 3
je 0x406f21
cmp edx, 0x5f
je 0x406f21
xor ecx, ecx
jmp 0x406f26
movzx eax, word [esi + 4]
mov ecx, dword [eax*4 + 0x5ff0c8]
lea eax, [eax*4 + 0x5ff0c8]
cmp edx, ecx
jb 0x40709f
lea eax, [eax + 4]
cmp edx, ecx
je 0x4070ab
mov ecx, dword [eax]
cmp edx, ecx
jae 0x407092
mov eax, dword [ebp - 4]
cmp byte [eax + 0x31], 0x10
jmp 0x406f34
mov eax, dword [ebp - 4]
cmp byte [eax + 0x31], 0x10
je 0x406f02
xor esi, esi
jmp 0x4067af
cmp edx, 0x24
je 0x406f21
cmp edx, 0x40
je 0x406f21
cmp edx, 0x60
je 0x406f21
cmp edx, 0xa0
jb 0x4070ee
cmp edx, 0xd7ff
jbe 0x406f21
cmp edx, 0xe000
jae 0x406f21
xor ecx, ecx
jmp 0x406f26
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
cmp edx, dword [edi + 0x5c]
jb 0x40711f
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp edx, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [edx]
add edx, 2
mov ebx, dword [ebp - 8]
mov esi, edx
mov dword [eax + 0x38], edx
test ebx, ebx
je 0x407161
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x407161
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
mov dword [eax + 0x38], esi
push 0
push ebx
push dword [edi + 0x5c]
push dword [edi + 0x58]
push esi
push ecx
call fcn.0041a370
mov ecx, dword [ebp - 4]
add esp, 0x18
mov dword [ecx + 0x38], eax
cmp word [edi + 0x48], 0
je 0x40719d
cmp eax, dword [edi + 0x5c]
jb 0x40719d
cmp eax, dword [edi + 0x64]
jbe 0x40719d
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
mov eax, dword [ebp - 4]
mov esi, ebx
add dword [eax], 2
jmp 0x404dce
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov dword [ecx + 0x20], eax
mov eax, ecx
add dword [eax], 4
jmp 0x4072a6
mov eax, dword [ebp - 4]
xor edx, edx
mov ecx, dword [ebp - 4]
mov ebx, ecx
mov dword [eax + 0x20], 0
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov eax, ecx
mov eax, dword [eax]
cmp word [eax], 0x5c
setne dl
add eax, 4
mov dword [ebp - 0xc], edx
mov dword [ebx], eax
jmp 0x4072ab
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0xffffffff
add dword [eax], 2
jmp 0x4072a6
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 1
mov dword [eax + 0x24], 0xffffffff
add dword [eax], 2
jmp 0x4072a6
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 1
add dword [eax], 2
jmp 0x4072a6
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], 2
mov dword [eax + 0x20], 0
mov eax, dword [eax]
movzx eax, word [eax + 2]
mov dword [ecx + 0x24], eax
mov eax, ecx
add dword [eax], 4
jmp 0x4072a6
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [eax]
movzx ecx, word [eax]
add eax, 2
mov dword [edx], eax
mov eax, dword [ecx*4 + 0x5fdbdc]
mov dword [edx + 0x20], eax
mov eax, dword [ecx*4 + 0x5fdc08]
mov dword [edx + 0x24], eax
mov eax, dword [ecx*4 + 0x5fdc34]
mov dword [ebp - 0xc], eax
mov eax, edx
mov ebx, dword [ebp - 4]
mov eax, dword [eax]
movzx eax, word [eax]
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
add ecx, 2
mov dword [eax], ecx
mov eax, dword [eax + 0x28]
cmp eax, 0x10
je 0x4072d0
cmp eax, 0xf
je 0x4072d0
mov eax, dword [ebp - 4]
or ebx, 0xffffffff
jmp 0x4072e6
movzx ebx, word [ecx]
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
movzx eax, word [eax]
mov dword [ecx + 0x2c], eax
mov eax, ecx
add dword [eax], 2
mov edx, dword [eax + 0x20]
mov dword [ebp - 0x1c], ebx
test edx, edx
je 0x407440
test ebx, ebx
js 0x407ac6
cmp ebx, 0xa
ja case.0x40b244.15
jmp dword [ebx*4 + 0x40d4c0]
cmp dword [eax + 0x28], 0xf
je case.0x404df3.160
mov ecx, dword [eax + 0x38]
mov esi, 1
mov ebx, dword [ebp - 8]
cmp ecx, dword [edi + 0x5c]
jae 0x40735f
movzx edx, word [ecx]
lea eax, [ecx + 2]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x38], eax
mov ecx, eax
test ebx, ebx
je 0x407351
and edx, 0xfc00
cmp edx, 0xd800
jne 0x407351
lea ecx, [eax + 2]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], ecx
jmp 0x407354
mov eax, dword [ebp - 4]
inc esi
cmp esi, dword [eax + 0x20]
jbe 0x407321
jmp 0x40743d
cmp word [edi + 0x48], 0
je 0x40737d
cmp ecx, dword [edi + 0x64]
jbe 0x40737d
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
mov eax, dword [ebp - 4]
xor esi, esi
mov edx, ebx
jmp 0x4067b2
mov esi, dword [eax + 0x38]
mov edi, 1
mov ecx, dword [ebp + 0x20]
cmp esi, dword [ecx + 0x5c]
jae 0x40747c
cmp dword [ebp - 8], 0
lea edx, [esi + 2]
movzx ecx, word [esi]
mov esi, edx
mov dword [eax + 0x38], edx
je 0x4073de
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4073de
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
mov dword [eax + 0x38], esi
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
mov al, byte [eax*4 + 0x5ff481]
cmp al, 9
je 0x407415
cmp al, 5
je 0x407415
cmp al, 8
je 0x407415
xor ecx, ecx
jmp 0x40741a
mov ecx, 1
mov ebx, dword [ebp - 4]
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, ebx
je 0x405b00
inc edi
cmp edi, dword [eax + 0x20]
jbe 0x407391
mov edi, dword [ebp + 0x20]
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 4]
mov eax, dword [eax + 0x20]
cmp eax, dword [ebx + 0x24]
je 0x404dcb
cmp dword [ebp - 0xc], 0
je 0x40c93b
mov eax, ebx
mov eax, dword [eax + 0x38]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 0x1c]
test eax, eax
js 0x40902d
cmp eax, 0xa
ja case.0x40b244.15
jmp dword [eax*4 + 0x40d4ec]
mov edi, ecx
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp esi, dword [edi + 0x64]
jmp 0x4062d4
mov esi, dword [eax + 0x38]
mov edi, 1
nop dword [eax]
mov ecx, dword [ebp + 0x20]
cmp esi, dword [ecx + 0x5c]
jae 0x40747c
cmp dword [ebp - 8], 0
lea edx, [esi + 2]
movzx ecx, word [esi]
mov esi, edx
mov dword [eax + 0x38], edx
je 0x4074e9
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4074e9
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
mov dword [eax + 0x38], esi
mov edx, dword [ebp - 4]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, dword [edx + 0x2c]
sete cl
xor eax, eax
cmp dword [edx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, edx
je 0x405b00
inc edi
cmp edi, dword [eax + 0x20]
jbe 0x4074a0
jmp 0x40743a
mov esi, dword [eax + 0x38]
mov edi, 1
nop dword [eax]
mov ecx, dword [ebp + 0x20]
cmp esi, dword [ecx + 0x5c]
jae 0x40747c
cmp dword [ebp - 8], 0
lea edx, [esi + 2]
movzx ecx, word [esi]
mov esi, edx
mov dword [eax + 0x38], edx
je 0x40759d
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40759d
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
mov dword [eax + 0x38], esi
mov edx, dword [ebp - 4]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
cmp eax, dword [edx + 0x2c]
sete cl
xor eax, eax
cmp dword [edx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, edx
je 0x405b00
inc edi
cmp edi, dword [eax + 0x20]
jbe 0x407550
jmp 0x40743a
mov esi, dword [eax + 0x38]
mov edi, 1
nop word [eax + eax]
mov ecx, dword [ebp + 0x20]
cmp esi, dword [ecx + 0x5c]
jae 0x40747c
cmp dword [ebp - 8], 0
lea edx, [esi + 2]
movzx ecx, word [esi]
mov esi, edx
mov dword [eax + 0x38], edx
je 0x40764d
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40764d
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
mov dword [eax + 0x38], esi
mov edx, dword [ebp - 4]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff480]
cmp eax, dword [edx + 0x2c]
sete cl
xor eax, eax
cmp dword [edx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, edx
je 0x405b00
inc edi
cmp edi, dword [eax + 0x20]
jbe 0x407600
jmp 0x40743a
mov esi, dword [eax + 0x38]
mov edi, 1
nop word [eax + eax]
mov ecx, dword [ebp + 0x20]
cmp esi, dword [ecx + 0x5c]
jae 0x40747c
cmp dword [ebp - 8], 0
lea edx, [esi + 2]
movzx ecx, word [esi]
mov esi, edx
mov dword [eax + 0x38], edx
je 0x4076fd
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4076fd
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
mov dword [eax + 0x38], esi
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x40773a
cmp eax, 3
je 0x40773a
xor ecx, ecx
jmp 0x40773f
mov ecx, 1
mov ebx, dword [ebp - 4]
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, ebx
je 0x405b00
inc edi
cmp edi, dword [eax + 0x20]
jbe 0x4076b0
jmp 0x40743a
mov esi, 1
nop dword [eax]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jae 0x406742
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
je 0x4077c0
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4077c0
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
mov edx, dword [ebp - 4]
add ecx, 0x10000
mov dword [edx + 0x38], eax
jmp 0x4077c3
mov edx, dword [ebp - 4]
cmp ecx, 0x180e
ja 0x407806
je case.0x407822.8192
cmp ecx, 0x85
ja 0x4077f2
je case.0x407822.8192
cmp ecx, 9
jb case.0x407822.8203
cmp ecx, 0xd
jbe case.0x407822.8192
cmp ecx, 0x20
jmp 0x407837
cmp ecx, 0xa0
je case.0x407822.8192
cmp ecx, 0x1680
jmp 0x407837
cmp ecx, 0x202f
ja 0x407829
je case.0x407822.8192
lea eax, [ecx - 0x2000]
cmp eax, 0x29
ja case.0x407822.8203
movzx eax, byte [eax + 0x40d520]
jmp dword [eax*4 + 0x40d518]
cmp ecx, 0x205f
je case.0x407822.8192
cmp ecx, 0x3000
je case.0x407822.8192
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
cmp dword [eax*4 + 0x5fe568], 6
sete cl
xor eax, eax
cmp dword [edx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, dword [ebp - 4]
je 0x4051d8
jmp 0x407891
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], 0xf
je case.0x404df3.160
inc esi
cmp esi, dword [eax + 0x20]
mov eax, dword [ebp - 4]
ja 0x407440
jmp 0x407770
mov esi, dword [eax + 0x38]
mov edi, 1
nop dword [eax + eax]
mov ecx, dword [ebp + 0x20]
cmp esi, dword [ecx + 0x5c]
jae 0x40747c
cmp dword [ebp - 8], 0
lea ecx, [esi + 2]
movzx edx, word [esi]
mov esi, ecx
mov dword [eax + 0x38], ecx
je 0x4078fd
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4078fd
movzx eax, word [ecx]
lea esi, [ecx + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov eax, dword [ebp - 4]
add edx, 0x10000
mov dword [eax + 0x38], esi
mov eax, edx
shr eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x407941
cmp eax, 3
je 0x407941
cmp edx, 0x5f
je 0x407941
xor ecx, ecx
jmp 0x407946
mov ecx, 1
mov ebx, dword [ebp - 4]
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, ebx
je 0x405b00
inc edi
cmp edi, dword [eax + 0x20]
jbe 0x4078b0
jmp 0x40743a
mov esi, 1
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jae 0x406742
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
je 0x4079c1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4079be
movzx eax, word [edx]
and ecx, 0x3ff
mov ebx, dword [ebp - 4]
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax*4 + 0x5ff0c8]
lea eax, [eax*4 + 0x5ff0c8]
cmp ecx, edx
jb 0x4079e3
lea eax, [eax + 4]
cmp ecx, edx
je 0x407a02
mov edx, dword [eax]
cmp ecx, edx
jae 0x4079d6
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], 0xf
jne 0x4051d8
inc esi
cmp esi, dword [eax + 0x20]
mov eax, dword [ebp - 4]
ja 0x407440
jmp 0x407970
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], 0xf
je case.0x404df3.160
jmp 0x4079f0
mov esi, 1
nop word [eax + eax]
mov eax, dword [eax + 0x38]
cmp eax, dword [edi + 0x5c]
jae 0x406742
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
je 0x407a70
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x407a70
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
mov edx, dword [ebp - 4]
add ecx, 0x10000
mov dword [edx + 0x38], eax
jmp 0x407a73
mov edx, dword [ebp - 4]
cmp ecx, 0x24
je 0x407a9e
cmp ecx, 0x40
je 0x407a9e
cmp ecx, 0x60
je 0x407a9e
cmp ecx, 0xa0
jb 0x407a92
cmp ecx, 0xd7ff
jbe 0x407a9e
cmp ecx, 0xe000
jae 0x407a9e
xor ecx, ecx
jmp 0x407aa3
mov ecx, 1
xor eax, eax
cmp dword [edx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, dword [ebp - 4]
je 0x4051d8
inc esi
cmp esi, dword [eax + 0x20]
jbe 0x407a20
jmp 0x40743d
mov eax, dword [eax + 0x28]
cmp eax, 0x16
jne 0x407b97
mov ebx, dword [ebp + 0x20]
lea edi, [eax - 0x15]
mov eax, dword [ebp - 4]
nop dword [eax + eax]
mov eax, dword [eax + 0x38]
cmp eax, dword [ebx + 0x5c]
jae 0x407b82
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov esi, edx
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
je 0x407b30
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x407b30
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, dword [ebp - 4]
add ecx, 0x10000
mov dword [eax + 0x38], esi
push 0
push dword [ebp - 8]
push dword [ebx + 0x5c]
push dword [ebx + 0x58]
push esi
push ecx
call fcn.0041a370
mov ecx, dword [ebp - 4]
add esp, 0x18
mov dword [ecx + 0x38], eax
cmp word [ebx + 0x48], 0
je 0x407b6e
cmp eax, dword [ebx + 0x5c]
jb 0x407b6e
cmp eax, dword [ebx + 0x64]
jbe 0x407b6e
mov dword [ebx + 0x2c], 1
cmp word [ebx + 0x48], 1
ja 0x405edb
mov eax, dword [ebp - 4]
inc edi
cmp edi, dword [eax + 0x20]
jbe 0x407ae0
mov edi, ebx
jmp 0x40743d
mov edi, ebx
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
add eax, 0xfffffffa
cmp eax, 0xf
ja case.0x40b244.15
test esi, esi
je 0x408289
jmp dword [eax*4 + 0x40d54c]
jmp dword [eax*4 + 0x40d58c]
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp ecx, dword [edi + 0x64]
jmp 0x4062d4
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x20]
cmp esi, dword [eax + 0x24]
jae 0x40891f
mov edx, dword [eax + 0x38]
mov ebx, dword [ebp - 8]
mov ecx, 1
cmp edx, dword [edi + 0x5c]
jae 0x408836
test ebx, ebx
je 0x40881b
mov eax, 0xfc00
and ax, word [edx]
cmp ax, word [ebp - 0x44]
mov eax, 2
cmove ecx, eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], 0xf
je 0x40891f
lea edx, [edx + ecx*2]
inc esi
mov dword [eax + 0x38], edx
cmp esi, dword [eax + 0x24]
jb 0x4087f6
jmp 0x40891f
cmp word [edi + 0x48], 0
je 0x40891f
cmp edx, dword [edi + 0x64]
jbe 0x40891f
mov dword [edi + 0x2c], ecx
cmp word [edi + 0x48], cx
ja 0x405edb
jmp 0x40891f
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x20]
cmp edi, dword [eax + 0x24]
jae 0x408919
mov edx, dword [eax + 0x38]
nop
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x408937
cmp dword [ebp - 8], 0
movzx ecx, word [edx]
je 0x4088b7
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4088b7
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
mov al, byte [eax*4 + 0x5ff481]
cmp al, 9
je 0x4088ee
cmp al, 5
je 0x4088ee
cmp al, 8
je 0x4088ee
xor ecx, ecx
jmp 0x4088f3
mov ecx, 1
mov ebx, dword [ebp - 4]
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, ebx
je 0x408d68
lea edx, [edx + esi*2]
inc edi
mov dword [eax + 0x38], edx
cmp edi, dword [eax + 0x24]
jb 0x408870
mov edi, dword [ebp + 0x20]
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xc], 2
mov esi, dword [ebp - 8]
mov ebx, dword [ebp + 0x1c]
je 0x404dd1
mov ecx, dword [eax + 0x38]
jmp 0x40c8ab
mov edi, eax
cmp word [edi + 0x48], 0
je 0x40891c
cmp edx, dword [edi + 0x64]
jbe 0x40891c
mov dword [edi + 0x2c], esi
cmp word [edi + 0x48], si
ja 0x405edb
jmp 0x40891c
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x20]
cmp edi, dword [eax + 0x24]
jae 0x408919
mov edx, dword [eax + 0x38]
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x408937
cmp dword [ebp - 8], 0
movzx ecx, word [edx]
je 0x4089a5
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4089a5
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov ebx, dword [ebp - 4]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, dword [ebx + 0x2c]
sete cl
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, ebx
je 0x408d68
lea edx, [edx + esi*2]
inc edi
mov dword [eax + 0x38], edx
cmp edi, dword [eax + 0x24]
jb 0x408962
jmp 0x408919
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x20]
cmp edi, dword [eax + 0x24]
jae 0x408919
mov edx, dword [eax + 0x38]
nop dword [eax]
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x408937
cmp dword [ebp - 8], 0
movzx ecx, word [edx]
je 0x408a67
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x408a67
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov ebx, dword [ebp - 4]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
cmp eax, dword [ebx + 0x2c]
sete cl
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, ebx
je 0x408d68
lea edx, [edx + esi*2]
inc edi
mov dword [eax + 0x38], edx
cmp edi, dword [eax + 0x24]
jb 0x408a20
jmp 0x408919
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x20]
cmp edi, dword [eax + 0x24]
jae 0x408919
mov edx, dword [eax + 0x38]
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x408937
cmp dword [ebp - 8], 0
movzx ecx, word [edx]
je 0x408b1b
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x408b1b
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov ebx, dword [ebp - 4]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff480]
cmp eax, dword [ebx + 0x2c]
sete cl
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, ebx
je 0x408d68
lea edx, [edx + esi*2]
inc edi
mov dword [eax + 0x38], edx
cmp edi, dword [eax + 0x24]
jb 0x408ad4
jmp 0x408919
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x20]
cmp edi, dword [eax + 0x24]
jae 0x408919
mov edx, dword [eax + 0x38]
nop dword [eax + eax]
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x408937
cmp dword [ebp - 8], 0
movzx ecx, word [edx]
je 0x408bd7
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x408bd7
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x408c14
cmp eax, 3
je 0x408c14
xor ecx, ecx
jmp 0x408c19
mov ecx, 1
mov ebx, dword [ebp - 4]
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, ebx
je 0x408d68
lea edx, [edx + esi*2]
inc edi
mov dword [eax + 0x38], edx
cmp edi, dword [eax + 0x24]
jb 0x408b90
jmp 0x408919
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x20]
cmp ebx, dword [eax + 0x24]
jae 0x40891c
mov edx, dword [eax + 0x38]
mov edi, edx
nop dword [eax + eax]
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x408937
cmp dword [ebp - 8], 0
movzx ecx, word [edx]
je 0x408ca7
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x408ca7
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
cmp ecx, 0x180e
ja 0x408cea
je case.0x408d0a.8192
cmp ecx, 0x85
ja 0x408cd6
je case.0x408d0a.8192
cmp ecx, 9
jb case.0x408d0a.8203
cmp ecx, 0xd
jbe case.0x408d0a.8192
cmp ecx, 0x20
jmp 0x408d1f
cmp ecx, 0xa0
je case.0x408d0a.8192
cmp ecx, 0x1680
jmp 0x408d1f
cmp ecx, 0x202f
ja 0x408d11
je case.0x408d0a.8192
lea eax, [ecx - 0x2000]
cmp eax, 0x29
ja case.0x408d0a.8203
movzx eax, byte [eax + 0x40d5d4]
jmp dword [eax*4 + 0x40d5cc]
cmp ecx, 0x205f
je case.0x408d0a.8192
cmp ecx, 0x3000
je case.0x408d0a.8192
mov edx, dword [ebp - 4]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
cmp dword [eax*4 + 0x5fe568], 6
sete cl
xor eax, eax
cmp dword [edx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, edx
jne 0x408d7f
mov edi, dword [ebp + 0x20]
jmp 0x40891f
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], 0xf
je 0x408919
mov edi, edx
lea edx, [edi + esi*2]
inc ebx
mov dword [eax + 0x38], edx
mov edi, edx
cmp ebx, dword [eax + 0x24]
jb 0x408c60
jmp 0x408919
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x20]
cmp ebx, dword [eax + 0x24]
jae 0x40891c
mov esi, dword [eax + 0x38]
nop dword [eax + eax]
mov eax, dword [ebp + 0x20]
mov edi, 1
cmp esi, dword [eax + 0x5c]
jae 0x408e6b
cmp dword [ebp - 8], 0
movzx edx, word [esi]
je 0x408df7
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x408df7
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x408e3b
cmp eax, 3
je 0x408e3b
cmp edx, 0x5f
je 0x408e3b
xor ecx, ecx
jmp 0x408e40
mov ecx, 1
mov edx, dword [ebp - 4]
xor eax, eax
cmp dword [edx + 0x28], 0xf
sete al
cmp ecx, eax
mov eax, edx
je 0x408d68
lea esi, [esi + edi*2]
inc ebx
mov dword [eax + 0x38], esi
cmp ebx, dword [eax + 0x24]
jb 0x408db0
jmp 0x408919
mov edi, eax
cmp word [edi + 0x48], 0
je 0x40891c
cmp esi, dword [edi + 0x64]
jbe 0x40891c
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
jmp 0x40891c
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x20]
cmp edi, dword [eax + 0x24]
jae 0x408919
mov edx, dword [eax + 0x38]
mov ebx, dword [ebp - 8]
nop dword [eax]
mov ecx, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [ecx + 0x5c]
jae 0x408f54
movzx ecx, word [edx]
test ebx, ebx
je 0x408ef8
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x408ef5
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax*4 + 0x5ff0c8]
lea eax, [eax*4 + 0x5ff0c8]
cmp ecx, edx
jb 0x408f1d
nop dword [eax]
lea eax, [eax + 4]
cmp ecx, edx
je 0x408f45
mov edx, dword [eax]
cmp ecx, edx
jae 0x408f10
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x28], 0xf
jne 0x408919
lea eax, [esi + esi]
inc edi
add dword [ecx + 0x38], eax
mov edx, dword [ecx + 0x38]
mov eax, dword [ebp - 4]
cmp edi, dword [ecx + 0x24]
jb 0x408eb0
jmp 0x408919
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x28], 0xf
je 0x408919
jmp 0x408f2a
mov edi, ecx
cmp word [edi + 0x48], 0
je 0x40891c
cmp edx, dword [edi + 0x64]
jbe 0x40891c
mov dword [edi + 0x2c], esi
cmp word [edi + 0x48], si
ja 0x405edb
jmp 0x40891c
mov edi, dword [ebx + 0x20]
cmp edi, dword [ebx + 0x24]
jae 0x408919
mov edx, dword [ebx + 0x38]
nop dword [eax + eax]
mov eax, dword [ebp + 0x20]
mov esi, 1
cmp edx, dword [eax + 0x5c]
jae 0x408937
cmp dword [ebp - 8], 0
movzx ecx, word [edx]
je 0x408fd7
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x408fd7
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov esi, 2
add ecx, 0x10000
cmp ecx, 0x24
je 0x409002
cmp ecx, 0x40
je 0x409002
cmp ecx, 0x60
je 0x409002
cmp ecx, 0xa0
jb 0x408ff6
cmp ecx, 0xd7ff
jbe 0x409002
cmp ecx, 0xe000
jae 0x409002
xor ecx, ecx
jmp 0x409007
mov ecx, 1
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je 0x408919
lea edx, [edx + esi*2]
inc edi
mov dword [ebx + 0x38], edx
cmp edi, dword [ebx + 0x24]
jb 0x408f90
jmp 0x408919
mov eax, dword [ebx + 0x28]
cmp eax, 0x16
jne 0x409124
mov edi, dword [ebx + 0x20]
cmp edi, dword [ebx + 0x24]
jae 0x40910c
mov ecx, dword [ebp + 0x20]
nop dword [eax + eax]
mov eax, dword [ebx + 0x38]
cmp eax, dword [ecx + 0x5c]
jae 0x4090e9
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov esi, edx
mov dword [ebx + 0x38], edx
je 0x40909a
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40909a
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
mov dword [ebx + 0x38], esi
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov eax, dword [ebp + 0x20]
push 0
push dword [ebp - 8]
push dword [eax + 0x5c]
push dword [eax + 0x58]
push esi
push ecx
call fcn.0041a370
mov ecx, dword [ebp + 0x20]
add esp, 0x18
mov dword [ebx + 0x38], eax
cmp word [ecx + 0x48], 0
je 0x4090db
cmp eax, dword [ecx + 0x5c]
jb 0x4090db
cmp eax, dword [ecx + 0x64]
jbe 0x4090db
mov dword [ecx + 0x2c], 1
cmp word [ecx + 0x48], 1
ja 0x405edb
inc edi
cmp edi, dword [ebx + 0x24]
jb 0x409050
mov edi, ecx
jmp 0x40910f
mov edi, dword [ebp + 0x20]
cmp word [edi + 0x48], 0
je 0x40910f
cmp eax, dword [edi + 0x64]
jbe 0x40910f
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
jmp 0x40910f
mov edi, dword [ebp + 0x20]
cmp dword [ebp - 0xc], 2
mov esi, dword [ebp - 8]
je 0x404dce
mov edx, dword [ebx + 4]
jmp 0x40c891
add eax, 0xfffffffa
cmp eax, 0xf
ja case.0x40b244.15
mov esi, dword [ebp - 8]
test esi, esi
je 0x409883
jmp dword [eax*4 + 0x40d600]
jmp dword [eax*4 + 0x40d640]
mov ebx, dword [ebp - 4]
xor eax, eax
cmp dl, 0x74
sete al
mov dword [ebx + 0x28], eax
mov edx, dword [ebx]
movzx eax, word [edi + 0x4e]
movzx ecx, word [edx + 2]
movzx esi, word [edx + 4]
imul ecx, eax
mov eax, dword [edi + 0x50]
lea ecx, [eax + ecx*2]
lea eax, [edx + 6]
mov dword [ebx], eax
test esi, esi
je 0x409ed8
nop dword [eax]
movzx eax, word [ecx]
dec esi
lea eax, [eax*2 - 2]
mov dword [ebx + 0x14], eax
cmp eax, dword [ebx + 0x50]
jae 0x409eaa
cmp dword [ebx + eax*4 + 0x54], 0xffffffff
jne 0x409ed8
movzx eax, word [edi + 0x4e]
lea ecx, [ecx + eax*2]
test esi, esi
jg 0x409e90
jmp 0x409ed8
mov ebx, dword [ebp - 4]
xor eax, eax
cmp dl, 0x72
sete al
mov dword [ebx + 0x28], eax
mov eax, dword [ebx]
movzx eax, word [eax + 2]
lea eax, [eax*2 - 2]
mov dword [ebx + 0x14], eax
add dword [ebx], 4
mov ecx, dword [ebx]
movzx edx, word [ecx]
lea eax, [edx - 0x62]
cmp eax, 7
ja case.default.0x409ef0
movzx eax, byte [eax + 0x40d688]
jmp dword [eax*4 + 0x40d680]
mov esi, dword [edx*4 + 0x5fdc00]
lea eax, [ecx + 2]
mov dword [ebx], eax
mov eax, dword [edx*4 + 0x5fdba8]
mov dword [ebx + 0x20], eax
mov eax, dword [edx*4 + 0x5fdbd4]
mov dword [ebx + 0x24], eax
mov dword [ebp - 0xc], esi
jmp 0x409f4b
movzx eax, word [ecx + 2]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx]
movzx ecx, word [eax + 4]
mov dword [ebx + 0x24], ecx
mov edx, dword [ebx]
movzx eax, word [edx]
mov eax, dword [eax*4 + 0x5fdc00]
mov dword [ebp - 0xc], eax
test ecx, ecx
jne 0x409f46
mov dword [ebx + 0x24], 0xffffffff
lea eax, [edx + 6]
mov dword [ebx], eax
mov eax, dword [ebx + 0x14]
cmp eax, dword [ebx + 0x50]
jae 0x409f6e
mov ecx, dword [ebx + eax*4 + 0x54]
cmp ecx, 0xffffffff
je 0x409f6e
mov esi, dword [ebp - 8]
cmp ecx, dword [ebx + eax*4 + 0x58]
je 0x404dce
mov eax, dword [ebx + 0x20]
jmp 0x409f8c
mov eax, dword [ebx + 0x20]
mov esi, dword [ebp - 8]
test eax, eax
je 0x404dce
test dword [edi + 0x84], 0x200
jne 0x404dce
mov esi, 1
cmp eax, esi
jb 0x409fc1
lea eax, [ebp - 0x4c]
push eax
push edi
push ebx
push dword [ebx + 0x28]
push dword [ebx + 0x14]
call fcn.0040d7d0
add esp, 0x14
test eax, eax
jne 0x40a032
mov eax, dword [ebp - 0x4c]
inc esi
add eax, eax
add dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x20]
cmp esi, eax
jbe 0x409f95
mov esi, dword [ebp - 8]
cmp eax, dword [ebx + 0x24]
je 0x404dce
cmp dword [ebp - 0xc], 0
je 0x40ca19
mov eax, dword [ebx + 0x38]
mov esi, 1
mov dword [ebx + 4], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [ebx + ecx*4 + 0x58]
sub eax, dword [ebx + ecx*4 + 0x54]
mov dword [ebx + 0xc], eax
mov edi, dword [ebx + 0x20]
cmp edi, dword [ebx + 0x24]
jae 0x40a087
nop dword [eax]
lea eax, [ebp - 0x50]
push eax
push dword [ebp + 0x20]
push ebx
push dword [ebx + 0x28]
push dword [ebx + 0x14]
call fcn.0040d7d0
add esp, 0x14
test eax, eax
jne 0x40a059
mov eax, dword [ebp - 0x50]
xor ecx, ecx
cmp eax, dword [ebx + 0xc]
cmovne esi, ecx
add eax, eax
add dword [ebx + 0x38], eax
inc edi
cmp edi, dword [ebx + 0x24]
jb 0x40a000
jmp 0x40a07f
jle 0x40a03a
mov eax, dword [edi + 0x5c]
mov dword [ebx + 0x38], eax
cmp word [edi + 0x48], 0
je case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
jle 0x40a07f
mov ecx, dword [ebp + 0x20]
cmp word [ecx + 0x48], 0
je 0x40a07f
mov eax, dword [ecx + 0x5c]
cmp eax, dword [ecx + 0x64]
jbe 0x40a07f
mov dword [ecx + 0x2c], 1
cmp word [ecx + 0x48], 1
ja 0x405edb
test esi, esi
je 0x40c974
mov edi, dword [ebp + 0x20]
jmp 0x40ae9d
lea eax, [ebp + 0xc]
push eax
push edi
push ebx
push dword [ebx + 0x28]
push dword [ebx + 0x14]
call fcn.0040d7d0
add esp, 0x14
test eax, eax
je 0x40a0ce
jle 0x40a0af
mov eax, dword [edi + 0x5c]
mov dword [ebx + 0x38], eax
cmp word [edi + 0x48], 0
je case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
mov eax, dword [ebp + 0xc]
add eax, eax
add dword [ebx + 0x38], eax
jmp 0x404dcb
mov edx, dword [ebp - 4]
add dword [edx], 2
mov ecx, dword [edx]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [edx], ecx
cmp word [ecx], 0x78
je 0x40a0e3
lea eax, [ecx + 4]
mov dword [edx], eax
jmp 0x404dd1
cmp dword [edi + 0x30], 0
mov ebx, dword [ebp - 4]
jne 0x40c988
cmp dword [ebx + 0x18], 0
je 0x40c988
mov ecx, dword [ebx]
jmp 0x40aab0
mov ebx, dword [ebp - 4]
lea eax, [ebp + 0xc]
push eax
push edi
push ebx
call fcn.00404bb0
mov esi, eax
add esp, 0xc
test esi, esi
jg case.0x404df3.160
js 0x4067ac
mov eax, dword [ebp + 0xc]
add eax, eax
add dword [ebx], eax
jmp 0x404dcb
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
movzx eax, word [eax + 2]
mov dword [ebx + 0xc], eax
mov ecx, dword [ebx]
cmp word [ecx + eax*2], 0x78
je 0x40a162
add eax, 0xfffffffe
mov dword [ebx + 0xc], eax
add ecx, 4
mov dword [ebx], ecx
movzx eax, word [ecx]
mov edx, eax
cmp eax, 0x76
je 0x40a176
cmp eax, 0x77
jne 0x40a1a4
lea eax, [ebp + 0xc]
push eax
push edi
push ebx
call fcn.00404bb0
mov esi, eax
add esp, 0xc
test esi, esi
jg case.0x404df3.160
js 0x4067ac
mov ecx, dword [ebp + 0xc]
lea eax, [ecx + ecx]
add dword [ebx], eax
sub dword [ebx + 0xc], ecx
mov ecx, dword [ebx]
movzx edx, word [ecx]
movzx eax, dx
add eax, 0xffffff72
movzx esi, dx
cmp eax, 0x12
ja case.0x40a1bf.148
movzx eax, byte [eax + 0x40d6ac]
jmp dword [eax*4 + 0x40d690]
mov edx, dword [ebx + 0x44]
cmp edx, 0xffffffff
je case.0x40a1bf.146
movzx eax, word [ecx + 2]
cmp eax, 0xffff
je case.0x40a1bf.147
cmp eax, edx
je case.0x40a1bf.147
jmp case.0x40a1bf.146
mov esi, dword [ebx + 0x44]
cmp esi, 0xffffffff
je case.0x40a1bf.146
movzx edx, word [ecx + 4]
movzx ecx, word [ecx + 2]
movzx edi, word [edi + 0x4e]
mov eax, dword [ebp + 0x20]
imul ecx, edi
mov eax, dword [eax + 0x50]
lea ecx, [eax + ecx*2]
test edx, edx
je 0x40a2b5
nop word [eax + eax]
movzx eax, word [ecx]
xor ebx, ebx
dec edx
cmp eax, esi
sete bl
je 0x40a234
lea ecx, [ecx + edi*2]
test edx, edx
jg 0x40a220
mov edi, dword [ebp + 0x20]
test ebx, ebx
mov ebx, dword [ebp - 4]
je case.0x40a1bf.146
mov ecx, dword [ebx]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
jmp 0x40a2bd
movzx eax, word [ecx + 2]
lea eax, [eax*2 - 2]
cmp eax, dword [ebx + 0x50]
jae case.0x40a1bf.146
cmp dword [ebx + eax*4 + 0x54], 0xffffffff
je case.0x40a1bf.146
mov ecx, dword [ebx]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
jmp 0x40a2bd
movzx edx, word [ecx + 4]
movzx ecx, word [ecx + 2]
movzx esi, word [edi + 0x4e]
mov eax, dword [edi + 0x50]
imul ecx, esi
lea ecx, [eax + ecx*2]
test edx, edx
je case.0x40a1bf.146
mov edi, dword [ebx + 0x50]
movzx eax, word [ecx]
dec edx
lea eax, [eax*2 - 2]
cmp eax, edi
jae 0x40a2ae
cmp dword [ebx + eax*4 + 0x54], 0xffffffff
jne 0x40c724
lea ecx, [ecx + esi*2]
test edx, edx
jg 0x40a294
mov edi, dword [ebp + 0x20]
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx]
lea ebx, [ecx + eax*2]
mov eax, dword [ebp - 4]
mov dword [eax], ebx
cmp byte [eax + 0x31], 0x8d
jne 0x404dcb
mov edx, 0x2008d
mov byte [eax + 0x30], 0x23
mov dword [ebp + 8], edx
jmp 0x40cec1
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
movzx edx, word [eax + 2]
test esi, esi
je 0x40a320
test edx, edx
je 0x40a31b
mov ecx, dword [ebx + 0x38]
dec edx
cmp ecx, dword [edi + 0x58]
jbe case.0x404df3.160
add ecx, 0xfffffffe
mov dword [ebx + 0x38], ecx
mov ax, word [ecx]
and ax, word [ebp - 0x14]
cmp ax, word [ebp - 0x18]
jne 0x40a317
add ecx, 0xfffffffe
mov dword [ebx + 0x38], ecx
test edx, edx
jne 0x40a2f4
mov ecx, dword [ebx + 0x38]
jmp 0x40a33a
mov ecx, dword [ebx + 0x38]
mov eax, ecx
sub eax, dword [edi + 0x58]
sar eax, 1
cmp edx, eax
jg case.0x404df3.160
lea eax, [edx + edx]
sub ecx, eax
mov dword [ebx + 0x38], ecx
cmp ecx, dword [edi + 0x64]
jae 0x40a342
mov dword [edi + 0x64], ecx
add dword [ebx], 4
jmp 0x404dce
mov edx, dword [ebp - 4]
mov ecx, dword [edx]
nop
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [edx], ecx
cmp word [ecx], 0x78
je 0x40a350
jmp 0x404dd1
mov edi, dword [ebp - 4]
mov ecx, 0x84
mov ebx, dword [edi]
movzx eax, word [ebx + 2]
add eax, eax
sub ebx, eax
movzx eax, word [ebx]
cmp ax, cx
je 0x40a3ec
mov ecx, 0x88
cmp ax, cx
je 0x40a3ec
mov ecx, dword [ebp + 0x20]
mov edx, dword [ecx + 0x10]
add edx, dword [edi + 0x4c]
mov esi, edx
mov dword [ebp - 0x10], edx
sub esi, dword [ebp + 0x1c]
mov eax, dword [esi + 0x4c]
mov dword [edi + 0x4c], eax
mov eax, dword [edx + 0x1c]
and eax, 0xffff0000
cmp eax, 0x30000
jne 0x40a3e7
mov eax, dword [edi + 0x50]
shl eax, 2
push eax
lea eax, [edi + 0x54]
push eax
lea eax, [esi + 0x54]
push eax
call fcn.0041fc60
mov eax, dword [edi + 0x50]
add esp, 0xc
mov dword [esi + 0x50], eax
mov eax, edi
sub eax, esi
mov dword [edi + 0x10], eax
mov edi, dword [ebp + 0x20]
mov esi, 1
jmp 0x4067ac
movzx eax, word [ebx]
jmp 0x40a3f4
mov ecx, dword [ebp + 0x20]
xor esi, esi
mov edx, dword [ebp - 0x10]
movzx eax, ax
add eax, 0xffffff82
cmp eax, 0xe
ja case.0x40a40a.132
movzx eax, byte [eax + 0x40d6d8]
jmp dword [eax*4 + 0x40d6c0]
mov eax, dword [edi + 0x38]
cmp eax, dword [ecx + 0x68]
jbe 0x40a41c
mov dword [ecx + 0x68], eax
mov eax, dword [esi + 0x38]
mov dword [edi + 0x38], eax
mov eax, edi
sub eax, esi
mov dword [edi + 0x10], eax
mov ecx, dword [esi]
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x78
lea ecx, [ecx + eax*2]
jne case.0x40a40a.132
nop dword [eax]
mov dword [esi], ecx
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x78
lea ecx, [ecx + eax*2]
je 0x40a440
jmp case.0x40a40a.132
push dword [ebp - 8]
push dword [edi + 0x38]
push dword [esi + 0x38]
call fcn.0041a730
add esp, 0xc
test eax, eax
jne case.0x40a40a.132
mov edi, dword [ebp + 0x20]
xor esi, esi
jmp 0x4067ac
movzx eax, word [ebx + 4]
cmp dword [edi + 0x44], eax
jne 0x40a4c3
mov ebx, dword [ebp + 0x1c]
mov esi, edx
sub esi, ebx
mov eax, dword [esi + 0x50]
shl eax, 2
push eax
lea eax, [esi + 0x54]
push eax
lea eax, [edi + 0x54]
push eax
call fcn.0041fc60
mov eax, dword [esi + 0x50]
add esp, 0xc
mov dword [edi + 0x50], eax
mov eax, dword [esi + 0x48]
mov dword [edi + 0x48], eax
mov eax, dword [esi + 0x44]
mov dword [edi + 0x44], eax
mov eax, dword [esi]
add eax, 4
mov dword [edi], eax
mov edi, dword [ebp + 0x20]
mov esi, dword [ebp - 8]
jmp 0x404dd1
lea edx, [eax + eax]
mov dword [edi + 0x48], eax
mov eax, dword [esi + 0x38]
lea ecx, [edx - 2]
mov dword [ebp - 0x38], edx
mov edx, dword [ebp + 0x20]
sub eax, dword [edx + 0x58]
sar eax, 1
mov dword [edi + ecx*4 + 0x54], eax
mov eax, dword [edi + 0x38]
sub eax, dword [edx + 0x58]
mov edx, dword [ebp - 0x38]
sar eax, 1
mov dword [edi + ecx*4 + 0x58], eax
cmp ecx, dword [edi + 0x50]
jb case.0x40a40a.132
mov dword [edi + 0x50], edx
mov edx, dword [edi]
cmp word [edx], 0x7c
jne 0x40a51d
push dword [ebp - 0x3c]
lea eax, [edi + 0x38]
push eax
lea eax, [esi + 0x38]
push eax
call fcn.0041fc60
mov edi, dword [ebp + 0x20]
add esp, 0xc
mov esi, 0xfffffc1a
jmp 0x4067ac
mov cl, byte [edi + 0x31]
cmp cl, 0x79
je 0x40a539
test esi, esi
je 0x40c9db
mov eax, dword [edi + 0x38]
cmp eax, dword [esi + 0x38]
jne 0x40c9db
mov edi, dword [ebp + 0x20]
mov ebx, dword [ebp - 4]
add dword [ebx], 4
jmp 0x404dcb
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x38]
cmp eax, dword [edi + 0x58]
jne case.0x404df3.160
test byte [edi + 0x80], 1
jne case.0x404df3.160
add dword [ecx], 2
jmp 0x404dd1
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x38]
cmp eax, dword [edi + 0x58]
je 0x40a563
jmp case.0x404df3.160
test byte [edi + 0x80], 2
jne case.0x404df3.160
test byte [edi + 0x84], 0x10
je case.0x404df3.23
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x38]
cmp eax, dword [edi + 0x5c]
jb case.0x404df3.160
cmp word [edi + 0x48], 0
je 0x40a563
cmp eax, dword [edi + 0x64]
jbe 0x40a563
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
add dword [ecx], 2
jmp 0x404dd1
mov edi, dword [ebp - 4]
mov ecx, dword [ebp + 0x20]
mov edx, dword [edi + 0x38]
mov esi, dword [ecx + 0x5c]
cmp edx, esi
jae 0x40a64b
mov eax, dword [ecx + 0x90]
lea ebx, [ecx + 0x94]
test eax, eax
je 0x40a611
push dword [ebp - 8]
push ebx
push esi
push eax
push edx
call fcn.0041a550
add esp, 0x14
test eax, eax
je 0x40a677
mov ecx, dword [ebp + 0x20]
mov eax, dword [ebp - 4]
mov edi, dword [ebx]
mov esi, dword [ecx + 0x5c]
mov edx, dword [eax + 0x38]
jmp 0x40a63f
mov edi, dword [ebx]
mov ecx, esi
lea eax, [edi + edi]
sub ecx, eax
cmp edx, ecx
ja 0x40a674
mov ecx, dword [ebp + 0x20]
mov ax, word [edx]
cmp ax, word [ecx + 0x98]
jne 0x40a674
cmp edi, 1
je 0x40a63f
mov ax, word [edx + 2]
cmp ax, word [ecx + 0x9a]
jne 0x40a674
lea eax, [edi + edi]
mov edi, dword [ebp - 4]
sub esi, eax
cmp edx, esi
jne 0x40a677
cmp word [ecx + 0x48], 0
je 0x40a669
cmp edx, dword [ecx + 0x64]
jbe 0x40a669
mov dword [ecx + 0x2c], 1
cmp word [ecx + 0x48], 1
ja 0x405edb
add dword [edi], 2
mov edi, dword [ebp + 0x20]
jmp 0x404dcb
mov edi, dword [ebp - 4]
mov eax, dword [ebp + 0x20]
cmp word [eax + 0x48], 0
je 0x4050ce
mov ecx, dword [edi + 0x38]
mov edi, dword [ebp + 0x20]
lea eax, [ecx + 2]
cmp eax, dword [edi + 0x5c]
jb case.0x404df3.160
cmp dword [edi + 0x90], 0
jne case.0x404df3.160
cmp dword [ebx], 2
jne case.0x404df3.160
mov ax, word [ecx]
cmp ax, word [edi + 0x98]
jne case.0x404df3.160
jmp 0x4062da
test byte [edi + 0x80], 1
mov ebx, dword [ebp - 4]
je 0x40a6da
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x58]
je case.0x404df3.160
mov ecx, dword [ebx + 0x38]
mov edx, dword [edi + 0x58]
cmp ecx, edx
je 0x40a85a
cmp ecx, dword [edi + 0x5c]
jne 0x40a6fd
test dword [edi + 0x84], 0x200000
je case.0x404df3.160
mov esi, dword [edi + 0x90]
test esi, esi
je 0x40a734
cmp ecx, edx
jbe case.0x404df3.160
push dword [ebp - 8]
lea eax, [edi + 0x94]
push eax
push edx
push esi
push ecx
call fcn.0041a600
add esp, 0x14
test eax, eax
je case.0x404df3.160
add dword [ebx], 2
jmp 0x404dcb
mov edi, dword [edi + 0x94]
lea esi, [edi + edi]
lea eax, [edx + esi]
cmp ecx, eax
jb 0x4062f1
mov edx, dword [ebp + 0x20]
sub ecx, esi
mov ax, word [ecx]
cmp ax, word [edx + 0x98]
jne 0x40a77a
cmp edi, 1
mov edi, edx
je 0x40a85a
mov ax, word [ecx + 2]
cmp ax, word [edi + 0x9a]
je 0x40a85a
jmp case.0x404df3.160
mov edi, edx
jmp case.0x404df3.160
mov ebx, dword [ebp - 4]
mov ecx, dword [edi + 0x5c]
mov edx, dword [ebx + 0x38]
cmp edx, ecx
jae 0x40a825
mov eax, dword [edi + 0x90]
add edi, 0x94
test eax, eax
je 0x40a7be
push esi
push edi
push ecx
push eax
push edx
call fcn.0041a550
add esp, 0x14
test eax, eax
je 0x40a7ee
mov edi, dword [ebp + 0x20]
add dword [ebx], 2
jmp 0x404dcb
mov esi, dword [edi]
lea eax, [esi + esi]
sub ecx, eax
cmp edx, ecx
ja 0x40a7ee
mov ecx, dword [ebp + 0x20]
mov ax, word [edx]
cmp ax, word [ecx + 0x98]
jne 0x40a7ee
cmp esi, 1
je 0x40a858
mov ax, word [edx + 2]
cmp ax, word [ecx + 0x9a]
je 0x40a858
mov eax, dword [ebp + 0x20]
cmp word [eax + 0x48], 0
je 0x4050ce
mov ecx, dword [ebx + 0x38]
mov ebx, dword [ebp + 0x20]
lea eax, [ecx + 2]
cmp eax, dword [ebx + 0x5c]
jb 0x404f23
cmp dword [ebx + 0x90], 0
jne 0x404f23
cmp dword [edi], 2
mov edi, ebx
jmp 0x40a6a7
test byte [edi + 0x80], 2
jne case.0x404df3.160
cmp word [edi + 0x48], 0
je 0x40a85a
cmp edx, dword [edi + 0x64]
jbe 0x40a85a
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
add dword [ebx], 2
jmp 0x404dcb
mov edi, ecx
add dword [ebx], 2
jmp 0x404dcb
mov ecx, dword [edi + 0x40]
mov eax, dword [edi + 0x58]
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x38], eax
je 0x40a563
jmp case.0x404df3.160
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x38]
mov dword [ecx + 0x3c], eax
add dword [ecx], 2
jmp 0x404dd1
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x38]
cmp esi, dword [edi + 0x58]
je 0x40a970
cmp dword [ebp - 8], 0
lea edx, [esi - 2]
je 0x40a913
movzx eax, word [edx]
mov ecx, eax
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x40a8c1
movzx ecx, word [edx - 2]
sub edx, 2
movzx ecx, cx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40a8ec
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov eax, dword [ebp - 4]
cmp edx, dword [edi + 0x64]
jae 0x40a8fa
mov dword [edi + 0x64], edx
mov esi, dword [eax + 0x38]
test dword [edi + 0x84], 0x20000
je 0x40a958
cmp ecx, 0x5f
jne 0x40a918
lea ebx, [ecx - 0x5e]
jmp 0x40a972
movzx ecx, word [edx]
jmp 0x40a8ef
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x40a951
cmp eax, 3
jne 0x40a970
mov ebx, 1
jmp 0x40a972
cmp ecx, 0xff
ja 0x40a970
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x40a970
mov ebx, 1
jmp 0x40a972
xor ebx, ebx
mov eax, dword [edi + 0x5c]
cmp esi, eax
jb 0x40a9c0
cmp word [edi + 0x48], 0
je 0x40a997
cmp esi, dword [edi + 0x64]
jbe 0x40a997
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
xor edx, edx
mov esi, dword [ebp - 4]
xor edx, ebx
mov eax, dword [esi]
movzx ecx, word [eax]
add eax, 2
mov dword [esi], eax
cmp ecx, 5
jne 0x40a9b0
xor edx, 1
mov ebx, dword [ebp + 0x1c]
test edx, edx
je 0x40a4bb
jmp case.0x404df3.160
cmp dword [ebp - 8], 0
lea edx, [esi + 2]
je 0x40aa12
cmp edx, eax
jae 0x40a9e5
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x40a9e5
add edx, 2
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40aa15
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
jmp 0x40aa15
movzx ecx, word [esi]
mov edi, dword [ebp + 0x20]
cmp edx, dword [edi + 0x68]
jbe 0x40aa20
mov dword [edi + 0x68], edx
test dword [edi + 0x84], 0x20000
je 0x40aa80
cmp ecx, 0x5f
jne 0x40aa39
lea edx, [ecx - 0x5e]
jmp 0x40a999
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x40aa76
cmp eax, 3
jne 0x40a997
mov edx, 1
jmp 0x40a999
cmp ecx, 0xff
ja 0x40a997
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x40a997
mov edx, 1
jmp 0x40a999
test esi, esi
jne case.0x4067e6.35
mov ecx, dword [ebx + 4]
mov dword [ebx], ecx
movzx eax, word [ecx + 2]
lea edx, [ecx + eax*2]
mov dword [ebx + 4], edx
cmp word [edx], 0x78
mov ecx, dword [ebx]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
lea ebx, [ecx + eax*2]
mov eax, dword [ebp - 4]
je 0x40c9fe
mov dword [eax], ebx
jmp 0x404dcb
cmp esi, 0xfffffc1f
jne 0x40ab03
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea eax, [ecx + eax*2]
cmp dword [edi + 0x74], eax
jae case.0x4067e6.35
cmp word [ecx], 0x78
je 0x40ab0b
cmp word [eax], 0x78
jmp 0x40ab05
test esi, esi
jne case.0x4067e6.35
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [ebx], ecx
cmp word [ecx], 0x78
je 0x40ccb2
mov eax, dword [ebp - 4]
xor esi, esi
jmp 0x4067b2
cmp esi, 0xfffffc19
je 0x40c669
test esi, esi
je 0x40ab46
cmp esi, 0xfffffc1f
jne case.0x4067e6.35
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [ebx], ecx
cmp word [ecx], 0x78
je 0x40cd74
mov eax, dword [ebp - 4]
xor esi, esi
jmp 0x4067b2
cmp esi, 0xfffffc1f
jg 0x40aba9
je 0x40c6a5
cmp esi, 0xfffffc19
je 0x40abc0
cmp esi, 0xfffffc1a
jle case.0x4067e6.35
cmp esi, 0xfffffc1d
jg case.0x4067e6.35
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [ebx], ecx
cmp word [ecx], 0x78
je 0x40ab95
jmp 0x404dc6
mov eax, esi
sub eax, 0
je 0x40c6a5
sub eax, 1
mov eax, dword [ebp - 4]
jne 0x4067b2
mov eax, dword [ebp - 4]
xor esi, esi
jmp 0x4067b2
cmp esi, 0xfffffc1f
jg 0x40ac04
je 0x40c6e7
cmp esi, 0xfffffc19
je 0x40c6bf
cmp esi, 0xfffffc1a
jle case.0x4067e6.35
cmp esi, 0xfffffc1d
jle 0x40c6fe
mov eax, dword [ebp - 4]
jmp 0x4067b2
mov eax, esi
sub eax, 0
je 0x40c6e7
sub eax, 1
je 0x40c6df
mov eax, dword [ebp - 4]
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
add eax, eax
sub ecx, eax
mov dword [ebx], ecx
jmp 0x404dcb
test esi, esi
je 0x40a53f
mov eax, dword [ebp - 4]
jmp 0x4067b2
cmp esi, 0xfffffc1a
jne 0x40ac77
mov dword [ebx + 0x24], 1
mov eax, dword [ebx + 0x38]
cmp eax, dword [ebx + 4]
jne 0x40ca07
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [ebx], ecx
cmp word [ecx], 0x78
je 0x40ac66
jmp 0x40acba
cmp esi, 0xfffffc1f
jne 0x40ac9d
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea eax, [ecx + eax*2]
cmp dword [edi + 0x74], eax
jae case.0x4067e6.35
cmp word [ecx], 0x78
je 0x40aca5
cmp word [eax], 0x78
jmp 0x40ac9f
test esi, esi
jne case.0x4067e6.35
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [ebx], ecx
cmp word [ecx], 0x78
je 0x40cc6b
cmp dword [ebx + 0x24], 0
jne 0x404dc6
cmp dword [ebx + 0x28], 0
jne 0x404dc6
mov eax, dword [ebp - 4]
xor esi, esi
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov ecx, dword [ebx + 4]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [ebx + 4], ecx
cmp word [ecx], 0x78
je 0x40ace3
jmp 0x404dc6
test esi, esi
je 0x40a85a
mov eax, dword [ebp - 4]
jmp 0x4067b2
mov edx, dword [ebx + 4]
movzx eax, word [edx + 2]
lea ecx, [edx + eax*2]
lea eax, [esi + 0x3e5]
cmp eax, 4
ja 0x40ad50
mov eax, dword [ebx + 0x20]
xor eax, 0x40000
cmp dword [edi + 0x7c], eax
jne 0x40ad50
cmp esi, 0xfffffc1f
jne case.0x404df3.160
cmp dword [edi + 0x74], ecx
jae case.0x404df3.160
cmp word [edx], 0x78
je 0x40ad5b
cmp word [ecx], 0x78
je 0x40ad5b
jmp case.0x404df3.160
mov edx, dword [ebp - 8]
test esi, esi
jne case.0x4067e6.35
mov dword [ebx + 4], ecx
cmp word [ecx], 0x78
je 0x40cd42
jmp case.0x404df3.160
cmp esi, 0xfffffc1e
jne case.0x4067e6.35
mov eax, dword [ebx]
push dword [edi + 0x78]
add eax, 4
push eax
call fcn.0041ac70
mov edx, dword [ebp - 8]
add esp, 8
test eax, eax
jne case.0x4067e6.35
mov eax, dword [ebx + 0x38]
mov esi, 0xfffffc1d
mov dword [edi + 0x78], eax
mov eax, dword [ebp - 4]
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov eax, dword [ebx + 0x44]
mov esi, 0xfffffc1b
mov dword [edi + 0x7c], eax
mov eax, dword [ebp - 4]
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov eax, dword [ebx + 0x44]
mov esi, 0xfffffc1c
mov dword [edi + 0x7c], eax
mov eax, dword [ebp - 4]
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov eax, dword [ebx + 0x38]
mov esi, 0xfffffc1d
mov dword [edi + 0x78], eax
mov eax, dword [ebx + 0x44]
mov dword [edi + 0x7c], eax
mov eax, dword [ebp - 4]
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov eax, dword [ebx]
mov esi, 0xfffffc1e
add eax, 4
mov dword [edi + 0x78], eax
mov eax, dword [ebx + 0x44]
mov dword [edi + 0x7c], eax
mov eax, dword [ebp - 4]
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov eax, dword [ebx]
mov esi, 0xfffffc1f
mov dword [edi + 0x74], eax
mov eax, dword [ebx + 0x44]
mov dword [edi + 0x7c], eax
mov eax, dword [ebp - 4]
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
lea eax, [ebp - 0x54]
push eax
push edi
push ebx
push dword [ebx + 0x28]
push dword [ebx + 0x14]
call fcn.0040d7d0
add esp, 0x14
test eax, eax
je 0x40ca11
jle 0x40ae70
mov eax, dword [edi + 0x5c]
mov dword [ebx + 0x38], eax
cmp word [edi + 0x48], 0
je case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
test esi, esi
jne case.0x4067e6.35
mov eax, dword [ebx + 0xc]
neg eax
add eax, eax
add dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x38]
cmp eax, dword [ebx + 4]
jb case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x15
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov eax, dword [ebx + 4]
cmp dword [ebx + 0x38], eax
je case.0x404df3.160
mov dword [ebx + 0x38], eax
dec dword [ebx + 0x24]
mov esi, dword [ebx + 0x20]
cmp esi, dword [ebx + 0x24]
jae 0x40af08
mov edi, dword [ebx + 0x38]
nop dword [eax]
lea eax, [ebp - 0x58]
push eax
push dword [ebp + 0x20]
push ebx
push dword [ebx + 0x28]
push dword [ebx + 0x14]
call fcn.0040d7d0
mov eax, dword [ebp - 0x58]
inc esi
add esp, 0x14
lea edi, [edi + eax*2]
mov dword [ebx + 0x38], edi
cmp esi, dword [ebx + 0x24]
jb 0x40aee0
mov edi, dword [ebp + 0x20]
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x16
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40af4a
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
add eax, 2
mov dword [ebx + 0x38], eax
cmp ecx, 0xff
jbe 0x40af73
cmp byte [ebx + 0x31], 0x6e
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x17
jmp 0x40cec1
mov edx, dword [ebx + 8]
mov esi, ecx
shr esi, 3
and ecx, 7
mov eax, 1
shl eax, cl
test byte [esi + edx], al
jne 0x40af65
jmp case.0x404df3.160
test esi, esi
jne case.0x4067e6.35
add dword [ebx + 0x38], 0xfffffffe
jmp 0x40649d
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov ecx, dword [ebx + 0x38]
cmp ecx, dword [edi + 0x5c]
jb 0x40afd4
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp ecx, dword [edi + 0x64]
jmp 0x4062d4
movzx eax, word [ecx]
cmp dword [ebx + 0x28], eax
je 0x40afe5
cmp dword [ebx + 0x2c], eax
jne case.0x404df3.160
lea eax, [ecx + 2]
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x19
jmp 0x40cec1
add dword [ebx + 0x38], 0xfffffffe
test esi, esi
jne case.0x4067e6.35
mov esi, dword [ebp - 8]
mov eax, dword [ebx + 0x38]
cmp eax, dword [ebx + 4]
je 0x404dce
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x1a
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov esi, dword [ebx + 0x38]
cmp esi, dword [edi + 0x5c]
jb 0x40b057
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp esi, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [esi]
lea eax, [esi + 2]
mov dword [ebx + 0x38], eax
cmp dword [ebx + 0x28], ecx
jne case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x1b
jmp 0x40cec1
add dword [ebx + 0x38], 0xfffffffe
test esi, esi
je 0x405b37
mov eax, dword [ebp - 4]
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov ecx, dword [ebx + 0x38]
cmp ecx, dword [edi + 0x5c]
jb 0x40b0bf
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp ecx, dword [edi + 0x64]
jmp 0x4062d4
movzx eax, word [ecx]
cmp dword [ebx + 0x28], eax
je case.0x404df3.160
cmp dword [ebx + 0x2c], eax
je case.0x404df3.160
lea eax, [ecx + 2]
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x1d
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
add dword [ebx + 0x38], 0xfffffffe
mov eax, dword [ebx + 0x38]
mov esi, dword [ebp - 8]
cmp eax, dword [ebx + 4]
je 0x404dce
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x1e
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov esi, dword [ebx + 0x38]
cmp esi, dword [edi + 0x5c]
jb 0x40b146
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp esi, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [esi]
lea eax, [esi + 2]
mov dword [ebx + 0x38], eax
cmp dword [ebx + 0x28], ecx
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x1f
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
add dword [ebx + 0x38], 0xfffffffe
mov eax, dword [ebx + 0x38]
mov esi, dword [ebp - 8]
cmp eax, dword [ebx + 4]
je 0x404dce
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x20
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov edx, dword [ebx + 0x38]
mov ecx, dword [edi + 0x5c]
cmp edx, ecx
jb 0x40b1c5
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp edx, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebx + 0x28], 0xc
jne 0x40b22c
mov eax, dword [edi + 0x90]
lea esi, [edi + 0x94]
test eax, eax
je 0x40b1fb
push dword [ebp - 8]
push esi
push ecx
push eax
push edx
call fcn.0041a550
add esp, 0x14
test eax, eax
jne case.0x404df3.160
mov edx, dword [ebx + 0x38]
jmp 0x40b22c
mov esi, dword [esi]
lea eax, [esi + esi]
sub ecx, eax
cmp edx, ecx
ja 0x40b22c
mov ax, word [edx]
cmp ax, word [edi + 0x98]
jne 0x40b22c
cmp esi, 1
je case.0x404df3.160
mov ax, word [edx + 2]
cmp ax, word [edi + 0x9a]
je case.0x404df3.160
movzx ecx, word [edx]
add edx, 2
mov dword [ebx + 0x38], edx
mov eax, dword [ebx + 0x28]
add eax, 0xfffffffa
cmp eax, 0xf
ja case.0x40b244.15
jmp dword [eax*4 + 0x40d6e8]
cmp ecx, 0xd
ja 0x40b26f
je 0x40ca27
cmp ecx, 0xa
je case.0x40b244.13
jbe case.0x404df3.160
cmp ecx, 0xc
jbe 0x40b28f
jmp case.0x404df3.160
cmp ecx, 0x85
je 0x40b28f
cmp ecx, 0x2027
jbe case.0x404df3.160
cmp ecx, 0x2029
ja case.0x404df3.160
cmp word [edi + 0x4a], 2
jne case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x180e
ja 0x40b2e3
je case.0x404df3.160
cmp ecx, 0xa0
ja 0x40b2d2
je case.0x404df3.160
cmp ecx, 9
je case.0x404df3.160
cmp ecx, 0x20
jne case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x1680
jne case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x205f
ja 0x40b31a
je case.0x404df3.160
cmp ecx, 0x2000
jb case.0x40b244.13
cmp ecx, 0x200a
jbe case.0x404df3.160
cmp ecx, 0x202f
jne case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x3000
jne case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x180e
ja 0x40b36f
je case.0x40b244.13
cmp ecx, 0xa0
ja 0x40b35e
je case.0x40b244.13
cmp ecx, 9
je case.0x40b244.13
cmp ecx, 0x20
je case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x1680
je case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x205f
ja 0x40b3a6
je case.0x40b244.13
cmp ecx, 0x2000
jb case.0x404df3.160
cmp ecx, 0x200a
jbe case.0x40b244.13
cmp ecx, 0x202f
je case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x3000
je case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x85
ja 0x40b3d6
je case.0x404df3.160
lea eax, [ecx - 0xa]
cmp eax, 3
ja case.0x40b244.13
jmp case.0x404df3.160
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x85
ja 0x40b40f
je case.0x40b244.13
cmp ecx, 0xa
jb case.0x404df3.160
cmp ecx, 0xd
jbe case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0x2028
jb case.0x404df3.160
cmp ecx, 0x2029
jbe case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0xff
ja case.0x40b244.13
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 8
je case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0xff
ja case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 8
jne case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0xff
ja case.0x40b244.13
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
je case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0xff
ja case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
jne case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0xff
ja case.0x40b244.13
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je case.0x40b244.13
jmp case.0x404df3.160
cmp ecx, 0xff
ja case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x40b244.13
jmp case.0x404df3.160
test esi, esi
jne case.0x4067e6.35
mov eax, dword [ebx + 0x38]
add eax, 0xfffffffe
mov dword [ebx + 0x38], eax
mov ecx, eax
cmp dword [ebx + 0x28], 0x11
jne 0x40b513
cmp eax, dword [ebx + 4]
jbe 0x40b513
cmp word [eax], 0xa
jne 0x40b513
cmp word [eax - 2], 0xd
lea edx, [eax - 2]
jne 0x40b513
mov dword [ebx + 0x38], edx
mov ecx, edx
cmp ecx, dword [ebx + 4]
je 0x404dcb
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x22
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40b55e
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
mov esi, dword [ebp - 8]
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
test esi, esi
je 0x40b59b
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40b59b
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
push esi
push dword [ebx + 8]
push ecx
call fcn.0041ae30
add esp, 0xc
test eax, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x64
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov ecx, dword [ebx + 0x38]
lea edx, [ecx - 2]
mov dword [ebx + 0x38], edx
cmp ecx, dword [ebx + 4]
jbe case.0x404df3.160
cmp dword [ebp - 8], esi
je 0x40670c
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x40670c
lea eax, [edx - 2]
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x65
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40b642
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, ecx
mov dword [ebx + 0x38], edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40b678
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0xff
jbe 0x40b698
cmp byte [ebx + 0x31], 0x6e
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xc8
jmp 0x40cec1
mov edx, dword [ebx + 8]
mov esi, ecx
shr esi, 3
and ecx, 7
mov eax, 1
shl eax, cl
test byte [esi + edx], al
jne 0x40b68a
jmp case.0x404df3.160
test esi, esi
jne case.0x4067e6.35
mov ecx, dword [ebx + 0x38]
lea edx, [ecx - 2]
mov dword [ebx + 0x38], edx
cmp ecx, dword [ebx + 4]
jbe case.0x404df3.160
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x406455
lea eax, [edx - 2]
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xc9
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebp + 0x20]
mov edi, dword [ebx + 0xc]
mov ebx, dword [ebx + 0x38]
mov ecx, dword [eax + 0x5c]
mov eax, ecx
lea esi, [edi + edi]
mov dword [ebp - 0x1c], ecx
sub eax, esi
cmp ebx, eax
ja 0x40b79a
mov eax, dword [ebp - 4]
mov ecx, ebx
mov edx, dword [eax + 8]
sub esi, 4
jb 0x40b751
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40b75a
add ecx, 4
add edx, 4
sub esi, 4
jae 0x40b740
cmp esi, 0xfffffffc
je 0x40ca93
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40b797
cmp esi, 0xfffffffd
je 0x40ca93
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40b797
cmp esi, 0xfffffffe
je 0x40ca93
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x40b797
cmp esi, 0xffffffff
je 0x40ca93
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40ca93
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 4]
mov edi, dword [edx + 0x14]
test edi, edi
je 0x40b818
lea esi, [edi + edi]
mov eax, ecx
sub eax, esi
cmp ebx, eax
ja 0x40b818
add edx, 0x32
mov ecx, ebx
sub esi, 4
jb 0x40b7d2
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40b7db
add ecx, 4
add edx, 4
sub esi, 4
jae 0x40b7c1
cmp esi, 0xfffffffc
je 0x40ca93
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40b818
cmp esi, 0xfffffffd
je 0x40ca93
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40b818
cmp esi, 0xfffffffe
je 0x40ca93
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x40b818
cmp esi, 0xffffffff
je 0x40ca93
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40ca93
mov edi, dword [ebp + 0x20]
cmp word [edi + 0x48], 0
je case.0x404df3.160
cmp ebx, dword [edi + 0x5c]
jb case.0x404df3.160
cmp ebx, dword [edi + 0x64]
jmp 0x4062d4
test esi, esi
jne case.0x4067e6.35
add dword [ebx + 0x38], 0xfffffffe
mov edx, 0xfc00
mov ecx, dword [ebx + 0x38]
mov ax, word [ecx]
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [ebp - 4]
jne 0x40b864
add ecx, 0xfffffffe
mov dword [ebx + 0x38], ecx
cmp ecx, dword [eax + 4]
jbe 0x404dcb
mov ebx, dword [eax]
mov byte [eax + 0x30], 0xcb
jmp 0x40cec4
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40b8ac
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, ecx
mov dword [ebx + 0x38], edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40b8e2
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp dword [ebx + 0x28], ecx
je case.0x404df3.160
cmp dword [ebx + 0x2c], ecx
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xcc
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
add dword [ebx + 0x38], 0xfffffffe
mov edx, 0xfc00
mov ecx, dword [ebx + 0x38]
mov ax, word [ecx]
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [ebp - 4]
jne 0x40b92f
add ecx, 0xfffffffe
mov dword [ebx + 0x38], ecx
cmp ecx, dword [eax + 4]
jbe 0x404dcb
mov ebx, dword [eax]
mov byte [eax + 0x30], 0xcd
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40b977
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
lea edx, [eax + 2]
mov eax, ecx
mov dword [ebx + 0x38], edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40b9ad
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp dword [ebx + 0x28], ecx
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xce
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
add dword [ebx + 0x38], 0xfffffffe
mov edx, 0xfc00
mov ecx, dword [ebx + 0x38]
mov ax, word [ecx]
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [ebp - 4]
jne 0x40b9f1
add ecx, 0xfffffffe
mov dword [ebx + 0x38], ecx
cmp ecx, dword [eax + 4]
jbe 0x404dcb
mov ebx, dword [eax]
mov byte [eax + 0x30], 0xcf
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40ba39
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
movzx ecx, word [eax]
add eax, 2
mov edx, dword [ebp - 8]
mov dword [ebx + 0x38], eax
test edx, edx
je 0x40ba5d
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x40ba5d
add eax, 2
mov dword [ebx + 0x38], eax
cmp dword [ebx + 0x28], 0xf
jne case.0x40c94b.0
mov eax, dword [ebp - 4]
xor esi, esi
jmp 0x4067b2
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40baa5
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
je 0x40bae1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40bae1
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
mov al, byte [eax*4 + 0x5ff481]
cmp al, 9
je 0x40bb18
cmp al, 5
je 0x40bb18
cmp al, 8
je 0x40bb18
xor ecx, ecx
jmp 0x40bb1d
mov ecx, 1
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd1
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40bb70
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
je 0x40bbac
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40bbac
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, dword [ebx + 0x2c]
sete cl
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd2
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40bc36
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
je 0x40bc72
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40bc72
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
cmp eax, dword [ebx + 0x2c]
sete cl
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd3
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40bcf5
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
je 0x40bd31
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40bd31
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff480]
cmp eax, dword [ebx + 0x2c]
sete cl
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd4
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40bdb4
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
je 0x40bdf0
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40bdf0
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x40be2d
cmp eax, 3
je 0x40be2d
xor ecx, ecx
jmp 0x40be32
mov ecx, 1
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd5
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40be85
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
je 0x40bec1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40bec1
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0x180e
ja 0x40bf08
je case.0x40bf28.8192
cmp ecx, 0x85
ja 0x40bef4
je case.0x40bf28.8192
cmp ecx, 9
jb case.0x40bf28.8203
cmp ecx, 0xd
jbe case.0x40bf28.8192
cmp ecx, 0x20
jmp 0x40bf41
cmp ecx, 0xa0
je case.0x40bf28.8192
cmp ecx, 0x1680
jmp 0x40bf41
cmp ecx, 0x202f
ja 0x40bf2f
je case.0x40bf28.8192
lea eax, [ecx - 0x2000]
cmp eax, 0x29
ja case.0x40bf28.8203
movzx eax, byte [eax + 0x40d730]
jmp dword [eax*4 + 0x40d728]
cmp ecx, 0x205f
je case.0x40bf28.8192
cmp ecx, 0x3000
je case.0x40bf28.8192
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
cmp dword [eax*4 + 0x5fe568], 6
sete cl
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd6
jmp 0x40cec1
cmp dword [ebx + 0x28], 0xf
jne case.0x40c94b.6
jmp case.0x404df3.160
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40bfda
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea ecx, [eax + 2]
movzx edx, word [eax]
mov dword [ebx + 0x38], ecx
je 0x40c016
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40c016
movzx eax, word [ecx]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
lea eax, [ecx + 2]
add edx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, edx
shr eax, 7
movzx ecx, word [eax*2 + 0x602000]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff481]
mov eax, dword [eax*4 + 0x5fe568]
cmp eax, 1
je 0x40c05a
cmp eax, 3
je 0x40c05a
cmp edx, 0x5f
je 0x40c05a
xor ecx, ecx
jmp 0x40c05f
mov ecx, 1
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd7
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40c0b2
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
je 0x40c0ee
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40c0ee
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x2c]
mov edx, dword [eax*4 + 0x5ff0c8]
lea eax, [eax*4 + 0x5ff0c8]
cmp ecx, edx
jb 0x40c110
lea eax, [eax + 4]
cmp ecx, edx
je 0x40c128
mov edx, dword [eax]
cmp ecx, edx
jae 0x40c103
cmp dword [ebx + 0x28], 0xf
jne case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd8
jmp 0x40cec1
cmp dword [ebx + 0x28], 0xf
jne case.0x40c94b.9
jmp case.0x404df3.160
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40c167
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov dword [ebx + 0x38], edx
je 0x40c1a3
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40c1a3
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
lea eax, [edx + 2]
add ecx, 0x10000
mov dword [ebx + 0x38], eax
cmp ecx, 0x24
je 0x40c1ce
cmp ecx, 0x40
je 0x40c1ce
cmp ecx, 0x60
je 0x40c1ce
cmp ecx, 0xa0
jb 0x40c1c2
cmp ecx, 0xd7ff
jbe 0x40c1ce
cmp ecx, 0xe000
jae 0x40c1ce
xor ecx, ecx
jmp 0x40c1d3
mov ecx, 1
xor eax, eax
cmp dword [ebx + 0x28], 0xf
sete al
cmp ecx, eax
je case.0x404df3.160
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd9
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov eax, dword [ebx + 0x38]
cmp eax, dword [edi + 0x5c]
jb 0x40cabb
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp eax, dword [edi + 0x64]
jmp 0x4062d4
test esi, esi
jne case.0x4067e6.35
mov edx, dword [ebx + 0x20]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
cmp edx, dword [ebx + 0x24]
jae case.0x404df3.160
mov edx, dword [ebx + 0x38]
mov ecx, dword [edi + 0x5c]
cmp edx, ecx
jb 0x40c260
cmp word [edi + 0x48], si
je case.0x404df3.160
cmp edx, dword [edi + 0x64]
jmp 0x4062d4
cmp dword [ebx + 0x28], 0xc
jne 0x40c2c7
mov eax, dword [edi + 0x90]
lea esi, [edi + 0x94]
test eax, eax
je 0x40c296
push dword [ebp - 8]
push esi
push ecx
push eax
push edx
call fcn.0041a550
add esp, 0x14
test eax, eax
jne case.0x404df3.160
mov edx, dword [ebx + 0x38]
jmp 0x40c2c7
mov esi, dword [esi]
lea eax, [esi + esi]
sub ecx, eax
cmp edx, ecx
ja 0x40c2c7
mov ax, word [edx]
cmp ax, word [edi + 0x98]
jne 0x40c2c7
cmp esi, 1
je case.0x404df3.160
mov ax, word [edx + 2]
cmp ax, word [edi + 0x9a]
je case.0x404df3.160
movzx ecx, word [edx]
add edx, 2
mov eax, ecx
mov dword [ebx + 0x38], edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40c2fd
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
mov dword [ebx + 0x38], edx
mov eax, dword [ebx + 0x28]
add eax, 0xfffffffa
cmp eax, 0xf
ja case.0x40b244.15
jmp dword [eax*4 + 0x40d75c]
cmp ecx, 0xd
ja 0x40c337
je 0x40cb42
cmp ecx, 0xa
je case.0x40c30c.13
jbe case.0x404df3.160
cmp ecx, 0xc
jbe 0x40c357
jmp case.0x404df3.160
cmp ecx, 0x85
je 0x40c357
cmp ecx, 0x2027
jbe case.0x404df3.160
cmp ecx, 0x2029
ja case.0x404df3.160
cmp word [edi + 0x4a], 2
jne case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x180e
ja 0x40c3ab
je case.0x404df3.160
cmp ecx, 0xa0
ja 0x40c39a
je case.0x404df3.160
cmp ecx, 9
je case.0x404df3.160
cmp ecx, 0x20
jne case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x1680
jne case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x205f
ja 0x40c3e2
je case.0x404df3.160
cmp ecx, 0x2000
jb case.0x40c30c.13
cmp ecx, 0x200a
jbe case.0x404df3.160
cmp ecx, 0x202f
jne case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x3000
jne case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x180e
ja 0x40c437
je case.0x40c30c.13
cmp ecx, 0xa0
ja 0x40c426
je case.0x40c30c.13
cmp ecx, 9
je case.0x40c30c.13
cmp ecx, 0x20
je case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x1680
je case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x205f
ja 0x40c46e
je case.0x40c30c.13
cmp ecx, 0x2000
jb case.0x404df3.160
cmp ecx, 0x200a
jbe case.0x40c30c.13
cmp ecx, 0x202f
je case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x3000
je case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x85
ja 0x40c49e
je case.0x404df3.160
lea eax, [ecx - 0xa]
cmp eax, 3
ja case.0x40c30c.13
jmp case.0x404df3.160
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x85
ja 0x40c4d7
je case.0x40c30c.13
cmp ecx, 0xa
jb case.0x404df3.160
cmp ecx, 0xd
jbe case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x2028
jb case.0x404df3.160
cmp ecx, 0x2029
jbe case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x100
jae case.0x40c30c.13
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 8
je case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x100
jae case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 8
jne case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x100
jae case.0x40c30c.13
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
je case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x100
jae case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
jne case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x100
jae case.0x40c30c.13
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je case.0x40c30c.13
jmp case.0x404df3.160
cmp ecx, 0x100
jae case.0x404df3.160
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x40c30c.13
jmp case.0x404df3.160
test esi, esi
jne case.0x4067e6.35
mov esi, dword [ebx + 0x38]
add esi, 0xfffffffe
mov dword [ebx + 0x38], esi
test edx, edx
jne 0x40c740
movzx ecx, word [esi]
jmp 0x40c789
test esi, esi
jne case.0x4067e6.35
add dword [ebx + 0x38], 0xfffffffe
mov edx, 0xfc00
mov ecx, dword [ebx + 0x38]
mov ax, word [ecx]
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x40c5f3
add ecx, 0xfffffffe
mov dword [ebx + 0x38], ecx
cmp dword [ebx + 0x28], 0x11
mov eax, ecx
jne 0x40c615
cmp ecx, dword [ebx + 4]
jbe 0x40c615
cmp word [ecx], 0xa
jne 0x40c615
cmp word [ecx - 2], 0xd
lea edx, [ecx - 2]
jne 0x40c615
mov dword [ebx + 0x38], edx
mov eax, edx
cmp eax, dword [ebx + 4]
jbe 0x404dcb
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xdd
jmp 0x40cec1
test esi, esi
jne case.0x4067e6.35
mov ecx, dword [ebx + 0x38]
mov esi, dword [ebp - 8]
add ecx, 0xfffffffe
mov dword [ebx + 0x38], ecx
mov edx, ecx
test esi, esi
je 0x40c8a8
mov ax, word [edx]
and ax, word [ebp - 0x14]
cmp ax, word [ebp - 0x18]
mov eax, dword [ebp - 4]
jne 0x40c8ab
lea ecx, [edx - 2]
mov dword [ebx + 0x38], ecx
jmp 0x40c8ab
mov esi, dword [ebp - 0x20]
mov eax, dword [esi + 0x50]
shl eax, 2
push eax
lea eax, [esi + 0x54]
push eax
lea eax, [ebx + 0x54]
push eax
call fcn.0041fc60
mov eax, dword [esi + 0x50]
add esp, 0xc
mov dword [ebx + 0x50], eax
mov eax, dword [esi + 0x40]
mov dword [ebx + 0x40], eax
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [ebx], ecx
cmp word [ecx], 0x78
je 0x40c691
jmp 0x404dc6
mov ecx, dword [ebx]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [ebx], ecx
cmp word [ecx], 0x78
je 0x40cda3
jmp 0x404dc6
mov esi, dword [ebp - 0x20]
mov eax, dword [esi + 0x50]
shl eax, 2
push eax
lea eax, [esi + 0x54]
push eax
lea eax, [ebx + 0x54]
push eax
call fcn.0041fc60
mov eax, dword [esi + 0x50]
add esp, 0xc
mov dword [ebx + 0x50], eax
mov ebx, dword [ebx + 0x20]
mov edx, dword [ebp - 4]
jmp 0x40c709
mov ecx, dword [ebx + 4]
movzx eax, word [ecx + 2]
lea eax, [ecx + eax*2]
mov dword [ebx + 4], eax
cmp word [eax], 0x78
je 0x40c9b1
mov edx, dword [ebp - 4]
xor ebx, ebx
cmp dword [edx + 0x20], ebx
sete bl
test ebx, ebx
je 0x40c738
mov ecx, dword [edx]
nop
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [edx], ecx
cmp word [ecx], 0x78
je 0x40c710
jmp 0x40a237
mov edi, dword [ebp + 0x20]
mov ecx, dword [ebx]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
jmp 0x40a2bd
mov ebx, dword [ebp - 4]
jmp case.0x40a1bf.146
movzx eax, word [esi]
mov edx, esi
mov ecx, eax
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x40c75c
lea edx, [esi - 2]
mov dword [ebx + 0x38], edx
movzx ecx, word [edx]
movzx ecx, cx
mov esi, edx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40c789
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov edx, dword [ebx + 4]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx eax, byte [eax*4 + 0x5ff482]
mov dword [ebp - 0x24], eax
cmp esi, edx
jbe 0x40c891
mov edi, edx
mov dword [ebp - 0x1c], edx
mov ebx, edx
mov dword [ebp - 0x38], edx
mov eax, edx
nop dword [eax + eax]
add esi, 0xfffffffe
mov edx, eax
cmp dword [ebp - 8], 0
movzx eax, word [esi]
mov ecx, eax
je 0x40c830
and eax, 0xfc00
mov edx, edi
cmp eax, 0xdc00
jne 0x40c800
movzx ecx, word [esi - 2]
sub esi, 2
mov edx, ebx
mov ebx, dword [ebp - 0x38]
jmp 0x40c803
mov ebx, dword [ebp - 0x1c]
movzx ecx, cx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40c830
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, ebx
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x602000]
shl eax, 7
add eax, ecx
mov ecx, dword [ebp - 0x24]
movzx eax, word [eax*2 + 0x606400]
lea eax, [eax + eax*2]
movzx edi, byte [eax*4 + 0x5ff482]
mov eax, 1
shl eax, cl
test dword [edi*4 + 0x5fe528], eax
je 0x40c88b
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], edi
mov dword [eax + 0x38], esi
mov edx, dword [eax + 4]
mov edi, edx
mov dword [ebp - 0x1c], edx
mov ebx, edx
mov dword [ebp - 0x38], edx
mov eax, edx
cmp esi, edx
ja 0x40c7d0
mov ebx, dword [ebp - 4]
mov edi, dword [ebp + 0x20]
cmp dword [ebx + 0x38], edx
jbe 0x404dcb
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xdc
jmp 0x40cec1
mov eax, dword [ebp - 4]
cmp ecx, dword [eax + 4]
jbe 0x404dce
mov ebx, dword [eax]
mov byte [eax + 0x30], 0xde
jmp 0x40cec1
inc dword [edi + 0x88]
mov eax, dword [edi + 0x88]
cmp eax, dword [edi + 0x8c]
ja 0x40cbae
mov ebx, dword [ebp - 4]
mov edx, dword [ebx]
movzx eax, word [edx]
movzx ecx, byte [eax + 0x5fe3c8]
movzx eax, word [edx + 2]
add ecx, eax
lea eax, [edx + ecx*2]
mov dword [ebx], eax
jmp 0x404dce
test esi, esi
jne 0x40b8f4
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x1d
jmp 0x40cec1
test esi, esi
jne 0x40b9b6
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x1f
jmp 0x40cec1
mov edi, dword [ebp + 0x20]
test esi, esi
jne 0x40b68a
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x17
jmp 0x40cec1
mov eax, dword [ebp - 0x1c]
test eax, eax
js 0x40c952
cmp eax, 0xa
ja case.0x40b244.15
jmp dword [eax*4 + 0x40d79c]
cmp dword [ebx + 0x28], 0x16
je 0x40cb34
cmp dword [ebp - 8], 0
jne case.0x40c30c.13
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x21
jmp 0x40cec1
mov eax, dword [ebp - 4]
mov dword [ebx + 0x24], edi
mov ebx, dword [ebx]
mov edi, dword [ebp + 0x20]
mov byte [eax + 0x30], 0x16
jmp 0x40cec1
xor eax, eax
jmp 0x40ccad
mov eax, esi
cmp eax, 0x7e
je 0x40c9a4
mov ecx, 0x80
cmp ax, cx
je 0x40c9a4
xor eax, eax
jmp 0x40c9a9
mov eax, 1
mov dword [ebx + 0x20], eax
mov eax, dword [ebx]
mov dword [ebx + 4], eax
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
movzx edx, word [eax]
movzx eax, word [ecx]
or edx, 0x30000
mov dword [ebp + 8], edx
movzx eax, byte [eax + 0x5fe3c8]
lea ebx, [ecx + eax*2]
mov eax, dword [ebp - 4]
mov byte [eax + 0x30], 5
jmp 0x40cec1
mov eax, dword [ebp - 4]
cmp cl, 0x7b
jne 0x40c9f2
mov byte [edi + 0x30], 6
lea ebx, [edx + 4]
mov edi, dword [ebp + 0x20]
jmp 0x40cec4
mov byte [edi + 0x30], 7
mov edi, dword [ebp + 0x20]
jmp 0x40cec4
mov byte [eax + 0x30], 1
jmp 0x40cec1
mov eax, dword [ebx + 8]
mov dword [ebx], eax
jmp 0x40cc6b
mov eax, dword [ebp - 0x54]
add eax, eax
add dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x14
jmp 0x40cec1
cmp edx, dword [edi + 0x5c]
jae case.0x40b244.13
cmp word [edx], 0xa
jne case.0x40b244.13
lea eax, [edx + 2]
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x21
jmp 0x40cec1
cmp word [edi + 0x48], 0
je case.0x40b244.13
cmp edx, dword [edi + 0x5c]
jb case.0x40b244.13
cmp dword [edi + 0x90], 0
jne case.0x40b244.13
cmp dword [edi + 0x94], 2
jne case.0x40b244.13
movzx eax, word [edi + 0x98]
cmp ecx, eax
jne case.0x40b244.13
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0x21
jmp 0x40cec1
mov ecx, dword [ebp - 4]
lea eax, [ebx + edi*2]
mov dword [ecx + 0x38], eax
mov eax, dword [ebp - 4]
mov edi, dword [ebp + 0x20]
mov ebx, dword [eax]
mov byte [eax + 0x30], 0xca
jmp 0x40cec1
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xd0
jmp 0x40cec1
cmp dword [ebp - 8], 0
lea edx, [eax + 2]
movzx ecx, word [eax]
mov esi, edx
mov dword [ebx + 0x38], edx
je 0x40caf9
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x40caf9
movzx eax, word [edx]
lea esi, [edx + 2]
and ecx, 0x3ff
mov dword [ebx + 0x38], esi
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
push 0
push dword [ebp - 8]
push dword [edi + 0x5c]
push dword [edi + 0x58]
push esi
push ecx
call fcn.0041a370
add esp, 0x18
mov dword [ebx + 0x38], eax
cmp word [edi + 0x48], 0
je 0x40cb34
cmp eax, dword [edi + 0x5c]
jb 0x40cb34
cmp eax, dword [edi + 0x64]
jbe 0x40cb34
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xda
jmp 0x40cec1
cmp edx, dword [edi + 0x5c]
jae case.0x40c30c.13
cmp word [edx], 0xa
jne case.0x40c30c.13
lea eax, [edx + 2]
mov dword [ebx + 0x38], eax
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xdb
jmp 0x40cec1
cmp word [edi + 0x48], 0
je case.0x40c30c.13
cmp edx, dword [edi + 0x5c]
jb case.0x40c30c.13
cmp dword [edi + 0x90], 0
jne case.0x40c30c.13
cmp dword [edi + 0x94], 2
jne case.0x40c30c.13
movzx eax, word [edi + 0x98]
cmp ecx, eax
jne case.0x40c30c.13
mov dword [edi + 0x2c], 1
cmp word [edi + 0x48], 1
ja 0x405edb
mov eax, dword [ebp - 4]
mov ebx, dword [ebx]
mov byte [eax + 0x30], 0xdb
jmp 0x40cec1
mov esi, dword [ebp - 4]
mov edx, dword [esi]
movzx eax, word [edx]
movzx ecx, byte [eax + 0x5fe3c8]
movzx eax, word [edx + 2]
mov byte [esi + 0x30], 0x11
jmp 0x40cebc
mov ecx, dword [ebp - 4]
mov ebx, dword [ecx]
add ebx, 2
mov dword [ecx + 4], ebx
mov byte [ecx + 0x30], 9
jmp 0x40cec1
mov edx, dword [ebp - 4]
mov ecx, dword [edx]
add ecx, 2
mov dword [edx + 4], ecx
nop dword [eax]
movzx eax, word [ecx + 2]
lea ecx, [ecx + eax*2]
mov dword [edx + 4], ecx
cmp word [ecx], 0x78
je 0x40cbf0
lea ebx, [ecx + 4]
mov byte [edx + 0x30], 0xa
jmp 0x40cec1
mov ebx, dword [ebp - 4]
mov edx, 0x87
mov dword [ebx + 0x28], 1
mov eax, dword [ebx]
add eax, 2
mov dword [ebx], eax
movzx ecx, word [eax]
cmp cx, dx
je 0x40cc53
mov edx, 0x8c
cmp cx, dx
jne 0x40cc40
jmp 0x40cc53
mov ebx, dword [ebp - 4]
mov dword [ebx + 0x28], 0
mov eax, 0x20000
jmp 0x40cc5c
mov ebx, dword [ebp - 4]
mov dword [ebx + 0x28], 0
mov eax, dword [ebx]
movzx eax, word [eax + 4]
or eax, 0x10000
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x24], 0
mov eax, dword [ebx]
mov dword [ebx + 8], eax
mov eax, dword [ebx + 0x38]
mov dword [ebx + 4], eax
mov ecx, dword [ebx]
mov edx, dword [ebx + 0x20]
mov dword [ebp + 8], edx
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
lea ebx, [ecx + eax*2]
mov eax, dword [ebp - 4]
mov byte [eax + 0x30], 8
jmp 0x40cec1
mov ebx, dword [ebp - 4]
mov eax, dword [ebx]
movzx eax, word [eax + 4]
or eax, 0x10000
jmp 0x40ccad
mov ebx, dword [ebp - 4]
movzx eax, dl
or eax, 0x20000
mov dword [ebx + 0x20], eax
mov ecx, dword [ebx]
movzx eax, word [ecx]
mov edx, dword [ebx + 0x20]
mov dword [ebp + 8], edx
movzx eax, byte [eax + 0x5fe3c8]
lea ebx, [ecx + eax*2]
mov eax, dword [ebp - 4]
mov byte [eax + 0x30], 2
jmp 0x40cec1
mov edx, dword [ebp - 4]
mov ecx, dword [edi + 0x54]
mov eax, dword [edx]
movzx eax, word [eax + 2]
lea ebx, [ecx + eax*2]
cmp ebx, ecx
jne 0x40cce8
xor edi, edi
jmp 0x40ccec
movzx edi, word [ebx + 4]
cmp dword [edx + 0x44], 0xffffffff
je 0x40cd30
mov eax, dword [edx + 0x4c]
cmp eax, 0xffffffff
je 0x40cd30
mov ecx, dword [ebp + 0x20]
mov edx, edi
or edx, 0x40000
mov esi, dword [ecx + 0x10]
add eax, esi
mov ecx, eax
sub ecx, dword [ebp + 0x1c]
cmp dword [eax + 0x1c], edx
je 0x40cd21
mov eax, dword [ecx + 0x4c]
cmp eax, 0xffffffff
jne 0x40cd08
mov edx, dword [ebp - 4]
jmp 0x40cd30
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x38]
cmp eax, dword [ecx + 0x38]
je 0x40d02b
mov dword [edx + 4], ebx
or edi, 0x40000
mov ebx, dword [ebp - 4]
mov dword [ebx + 0x20], edi
mov edi, dword [ebp + 0x20]
mov ecx, dword [ebx + 4]
mov edx, dword [ebx + 0x20]
mov dword [ebp + 8], edx
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
lea ebx, [ecx + eax*2]
mov eax, dword [ebp - 4]
mov byte [eax + 0x30], 0xb
jmp 0x40cec1
mov ebx, dword [ebp - 4]
movzx eax, dl
or eax, 0x20000
mov dword [ebx + 0x20], eax
mov ecx, dword [ebx]
movzx eax, word [ecx]
mov edx, dword [ebx + 0x20]
mov dword [ebp + 8], edx
movzx eax, byte [eax + 0x5fe3c8]
lea ebx, [ecx + eax*2]
mov eax, dword [ebp - 4]
mov byte [eax + 0x30], 3
jmp 0x40cec1
mov ebx, dword [ebp - 4]
movzx eax, dl
or eax, 0x20000
mov dword [ebx + 0x20], eax
mov ecx, dword [ebx]
movzx eax, word [ecx]
mov edx, dword [ebx + 0x20]
mov dword [ebp + 8], edx
movzx eax, byte [eax + 0x5fe3c8]
lea ebx, [ecx + eax*2]
mov eax, dword [ebp - 4]
mov byte [eax + 0x30], 4
jmp 0x40cec1
mov esi, dword [ebp - 4]
mov eax, dword [esi]
add eax, 4
mov dword [edi + 0x70], eax
mov dword [esi + 0x40], eax
mov edx, dword [esi]
movzx eax, word [edx]
movzx ecx, byte [eax + 0x5fe3c8]
movzx eax, word [edx + 2]
mov byte [esi + 0x30], 0xc
jmp 0x40cebc
mov edx, dword [ebp - 4]
mov ecx, dword [edx]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
mov byte [edx + 0x30], 0xd
lea ebx, [ecx + eax*2]
jmp 0x40cec1
mov esi, dword [ebp - 4]
mov eax, dword [esi]
add eax, 4
mov dword [edi + 0x70], eax
mov dword [esi + 0x40], eax
mov edx, dword [esi]
movzx eax, word [edx]
movzx ecx, byte [eax + 0x5fe3c8]
movzx eax, word [edx + 2]
mov byte [esi + 0x30], 0x24
jmp 0x40cebc
mov edx, dword [ebp - 4]
mov ecx, dword [edx]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
mov byte [edx + 0x30], 0xe
lea ebx, [ecx + eax*2]
jmp 0x40cec1
mov esi, dword [ebp - 4]
mov eax, dword [esi]
add eax, 4
mov dword [edi + 0x70], eax
mov dword [esi + 0x40], eax
mov edx, dword [esi]
movzx eax, word [edx]
movzx ecx, byte [eax + 0x5fe3c8]
movzx eax, word [edx + 2]
mov byte [esi + 0x30], 0xf
jmp 0x40cebc
mov edx, dword [ebp - 4]
mov ecx, dword [edx]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
mov byte [edx + 0x30], 0x10
lea ebx, [ecx + eax*2]
jmp 0x40cec1
mov edx, dword [ebp - 4]
mov ecx, dword [edx]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x5fe3c8]
mov byte [edx + 0x30], 0x12
lea ebx, [ecx + eax*2]
jmp 0x40cec1
mov esi, dword [ebp - 4]
mov eax, dword [esi]
add eax, 4
mov dword [edi + 0x70], eax
mov dword [esi + 0x40], eax
mov edx, dword [esi]
movzx eax, word [edx]
movzx ecx, byte [eax + 0x5fe3c8]
movzx eax, word [edx + 2]
mov byte [esi + 0x30], 0x13
add ecx, eax
lea ebx, [edx + ecx*2]
mov eax, dword [ebp - 4]
mov esi, dword [ebp + 0x1c]
add esi, eax
mov dword [ebp - 0x10], esi
cmp esi, dword [edi + 0x14]
jb 0x40cf6a
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 0x1c]
lea esi, [ecx + ecx]
mov eax, esi
shr eax, 0xa
cmp eax, edx
jbe 0x40cefd
mov esi, edx
xor edx, edx
shl esi, 0xa
mov eax, esi
div dword [ebp + 0x1c]
sub esi, edx
cmp ecx, esi
jae 0x40d037
push dword [edi + 8]
mov eax, dword [edi]
push esi
call eax
mov edi, eax
add esp, 8
test edi, edi
je 0x40d043
mov eax, dword [ebp + 0x20]
push dword [eax + 0xc]
push dword [eax + 0x10]
push edi
call fcn.0041fc60
mov eax, dword [ebp + 0x20]
add esp, 0xc
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov eax, edi
sub eax, ecx
add edx, eax
mov eax, dword [ebp + 0x1c]
add eax, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x20]
cmp ecx, dword [eax + 0x18]
je 0x40cf55
push dword [eax + 8]
mov eax, dword [eax + 4]
push ecx
call eax
mov eax, dword [ebp + 0x20]
add esp, 8
mov dword [eax + 0x10], edi
lea eax, [edi + esi]
mov edi, dword [ebp + 0x20]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 4]
mov dword [edi + 0xc], esi
mov esi, dword [ebp - 0x10]
push dword [ebp - 0x3c]
add eax, 0x38
push eax
lea eax, [esi + 0x38]
push eax
call fcn.0041fc60
mov eax, dword [ebp - 4]
add esp, 0xc
mov edx, dword [ebp + 8]
mov dword [ebp - 4], esi
mov eax, dword [eax + 0x18]
inc eax
mov dword [esi + 0x18], eax
mov eax, esi
mov esi, dword [ebp - 8]
jmp 0x404d67
mov eax, edi
mov ebx, dword [ebp - 4]
mov ecx, dword [ebp + 0x20]
mov dword [eax + 0x60], esi
mov eax, dword [ebx + 0x50]
mov dword [ecx + 0x44], eax
mov eax, dword [ebx + 0x40]
mov dword [ecx + 0x6c], eax
mov eax, dword [ebx + 0x38]
cmp eax, dword [ecx + 0x68]
jbe 0x40cfb9
mov dword [ecx + 0x68], eax
mov eax, dword [ebx + 0x3c]
sub eax, dword [ecx + 0x58]
mov edi, dword [ebp + 0x10]
movzx esi, word [ebp + 0x14]
sar eax, 1
mov dword [edi], eax
mov eax, dword [ebx + 0x38]
sub eax, dword [ecx + 0x58]
sar eax, 1
mov dword [edi + 4], eax
movzx eax, word [ebp + 0x18]
inc eax
cmp eax, esi
cmovbe esi, eax
add esi, esi
lea eax, [esi*4 - 8]
push eax
lea eax, [ebx + 0x54]
push eax
lea eax, [edi + 8]
push eax
call fcn.0041fc60
mov eax, dword [ebx + 0x50]
dec esi
add eax, 2
add esp, 0xc
cmp esi, eax
jb 0x40d016
mov dword [edi + esi*4], 0xffffffff
dec esi
mov ecx, dword [ebx + 0x50]
add ecx, 2
cmp esi, ecx
jae 0x40d004
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 0xffffffcc
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 0xffffffc1
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 0xffffffd0
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 0xffffffd4
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 0xffffffd1
pop ebx
mov esp, ebp
pop ebp
ret