Function at 0x4aa2b0
Capabilities:
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x274
mov eax, dword [0x70a034]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, ecx
mov dword [ebp - 0x174], 0
push ebx
push esi
push edi
mov ecx, dword [eax + 0x68]
xor ebx, ebx
mov edi, dword [eax]
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x16c], ecx
xor cl, cl
mov byte [ebp - 0x1cd], cl
mov cl, byte [edi + 0x4e]
mov byte [ebp - 0x1ac], cl
mov ecx, dword [eax + 0x58]
mov dword [ebp - 0x17c], ecx
mov ecx, eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1f0], ebx
call fcn.004a32a0
mov ecx, dword [ebp - 0x170]
cmp dword [edi + 0x148], ebx
je 0x4aa344
mov esi, dword [edi + 0x150]
xor edx, edx
mov eax, dword [ecx + 0xb4]
div esi
sub esi, edx
jmp 0x4aa347
or esi, 0xffffffff
cmp dword [ecx + 0x28], 7
mov dword [ebp - 0x178], esi
je 0x4ac7a9
mov dword [ecx + 0x38], ebx
mov dword [ecx + 0x3c], ebx
mov dword [ecx + 0x78], ebx
mov dword [edi + 0x19c], ebx
cmp dword [edi + 0x110], ebx
jne 0x4b0b55
mov eax, dword [ecx + 0x24]
mov edx, dword [ebp - 0x1a8]
lea eax, [eax + eax*4]
lea esi, [edx + eax*4]
mov dl, byte [esi]
inc ebx
mov dword [ebp - 0x1f0], ebx
movzx ebx, dl
mov dword [ebp - 0x16c], esi
mov byte [ebp - 0x1a1], dl
cmp ebx, 0xa8
ja case.0x4aa3a5.86
jmp dword [ebx*4 + 0x4b0d2c]
mov edx, dword [ebp - 0x16c]
mov ecx, edx
mov edi, dword [ebp - 0x17c]
sub ecx, dword [ebp - 0x1a8]
mov eax, dword [edx + 4]
lea esi, [eax + eax*4]
mov eax, 4
mov word [edi + esi*8 + 8], ax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cdq
mov dword [edi + esi*8], eax
mov dword [edi + esi*8 + 4], edx
mov ecx, dword [ebp - 0x170]
mov esi, dword [ebp - 0x16c]
mov esi, dword [esi + 8]
mov edx, dword [ebp - 0x1a8]
dec esi
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
add esi, 0x14
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1bc]
mov eax, dword [edx + 4]
mov edx, dword [ebp - 0x1a8]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + ecx*8]
lea eax, [eax + eax*4]
lea esi, [edx + eax*4]
mov eax, 0x80
mov word [ebx + ecx*8 + 8], ax
add esi, 0x14
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x17c]
mov esi, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0xc]
dec eax
cdq
mov dword [edi + ecx*8], eax
mov eax, 4
mov dword [edi + ecx*8 + 4], edx
mov word [edi + ecx*8 + 8], ax
cmp dword [esi + 8], 0
jne 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1a8]
mov eax, dword [edx + 4]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + ecx*8]
lea eax, [eax + eax*4]
mov eax, dword [edi + eax*4 + 8]
lea eax, [eax + eax*4]
lea eax, [eax - 5]
lea esi, [edi + eax*4]
mov edi, dword [ebp - 0x1bc]
mov eax, 0x80
add esi, 0x14
mov word [ebx + ecx*8 + 8], ax
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1a8]
mov eax, dword [edx + 4]
sub edx, edi
lea esi, [eax + eax*4]
mov eax, 4
mov ecx, dword [ebx + esi*8]
mov word [ebx + esi*8 + 8], ax
mov eax, 0x66666667
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cdq
mov dword [ebx + esi*8], eax
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x170]
mov dword [ebx + esi*8 + 4], edx
lea esi, [edi + eax*4]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 0xc]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [edx + eax*8 + 8], 1
je case.0x4aa3a5.86
mov ebx, dword [ebp - 0x170]
mov ecx, esi
sub ecx, dword [ebp - 0x1a8]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [ebp - 0x16c]
cmp dword [edx + 4], 0
jne 0x4b05e1
mov ecx, dword [ebx + 0xc8]
test ecx, ecx
je 0x4b05e1
mov eax, dword [ecx + 4]
dec dword [ebx + 0xd0]
mov dword [ebx + 0xc8], eax
mov eax, dword [ebx + 0x2c]
add dword [edi + 0x68], eax
mov dword [edi + 0x64], eax
call fcn.004a3f40
mov ecx, dword [ebp - 0x16c]
cmp dword [ecx + 8], 4
jne 0x4aa5e7
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x68]
mov eax, dword [eax + ecx*4 + 8]
dec eax
mov edi, dword [ebp - 0x1bc]
lea eax, [eax + eax*4]
mov ecx, ebx
mov ebx, dword [ebp - 0x1f0]
mov esi, dword [ecx + 0x68]
mov edx, dword [ecx + 0x58]
mov dword [ebp - 0x1a8], esi
mov dword [ebp - 0x17c], edx
lea esi, [esi + eax*4]
add esi, 0x14
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov ecx, eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 4]
cdq
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov edx, eax
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov ecx, eax
mov eax, 8
mov word [ecx + 8], ax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x10]
movsd xmm0, qword [eax]
movsd qword [ecx], xmm0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004aa280
mov ebx, dword [ebx + 0x10]
mov esi, eax
mov ecx, ebx
call fcn.004836f0
cmp byte [ebp - 0x1ac], 1
mov edx, dword [ebp - 0x16c]
mov dword [edx + 4], eax
je 0x4aa771
push 0
push 1
push 0xffffffffffffffff
mov edx, ebx
mov ecx, esi
call fcn.004a1160
add esp, 0xc
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4af7a8
movzx edx, byte [ebp - 0x1ac]
mov ecx, esi
call fcn.004a0400
test eax, eax
jne 0x4ac7a3
mov edx, dword [ebp - 0x16c]
mov dword [esi + 0x18], eax
mov eax, 0x800
or word [esi + 8], ax
cmp byte [edx + 1], 0xf9
jne 0x4aa761
mov edx, dword [edx + 0x10]
mov ecx, edi
call fcn.004803b0
mov edx, dword [ebp - 0x16c]
mov byte [edx + 1], 0xf9
mov eax, dword [esi + 0x10]
mov dword [edx + 0x10], eax
mov eax, dword [esi + 0xc]
mov dword [edx + 4], eax
mov eax, dword [edx + 4]
cmp eax, dword [edi + 0x6c]
jg 0x4af7a8
mov ecx, dword [ebp - 0x170]
mov byte [edx], 0x48
jmp 0x4aa78e
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov edx, dword [ebp - 0x16c]
mov ecx, eax
mov eax, 0xa02
mov word [ecx + 8], ax
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [edx + 4]
mov dword [ecx + 0xc], eax
mov al, byte [ebp - 0x1ac]
mov byte [ecx + 0xa], al
mov eax, edx
mov eax, dword [eax + 0xc]
test eax, eax
jle 0x4aa631
mov ebx, dword [ebp - 0x17c]
lea esi, [eax + eax*4]
mov eax, edx
movzx eax, word [eax + 2]
cdq
cmp dword [ebx + esi*8], eax
jne 0x4aa631
cmp dword [ebx + esi*8 + 4], edx
mov esi, dword [ebp - 0x16c]
jne 0x4aa637
mov edi, dword [ebp - 0x1bc]
mov eax, 0xa10
mov ebx, dword [ebp - 0x1f0]
add esi, 0x14
mov word [ecx + 8], ax
mov ecx, dword [ebp - 0x170]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004aa280
mov edi, dword [ebx + 0xc]
mov ecx, 1
sub edi, dword [ebx + 8]
mov edx, 0x101
cmp dword [ebx + 4], 0
lea esi, [eax + 0xc]
cmovne ecx, edx
mov dword [esi], 0
movzx ebx, cx
mov word [eax + 8], bx
test edi, edi
jle 0x4aa631
nop
lea esi, [esi + 0x28]
lea ecx, [esi - 0xc]
call fcn.004a0e90
dec edi
mov word [esi - 4], bx
mov dword [esi], 0
test edi, edi
jg 0x4aa850
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 4]
mov edx, 0xff41
mov ebx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1bc]
lea ecx, [eax + eax*4]
mov ax, word [ebx + ecx*8 + 8]
and ax, dx
or ax, 1
add esi, 0x14
mov word [ebx + ecx*8 + 8], ax
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov esi, eax
mov eax, dword [ebp - 0x16c]
push 0
push 0
mov ecx, esi
push dword [eax + 4]
mov edx, dword [eax + 0x10]
call fcn.004a1160
mov al, byte [ebp - 0x1ac]
add esp, 0xc
mov byte [esi + 0xa], al
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x64]
lea ebx, [eax + ecx*8]
lea ecx, [ebx - 0x28]
call fcn.004a0ff0
test eax, eax
jne 0x4af7a8
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [eax + 8]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov eax, 0x2400
test word [esi + 8], ax
je 0x4aa965
mov ecx, esi
call fcn.004a0e90
movups xmm0, xmmword [ebx - 0x28]
mov ecx, 0xebff
movups xmmword [esi], xmm0
mov eax, dword [ebx - 0x18]
mov dword [esi + 0x10], eax
mov ax, word [esi + 8]
and ax, cx
mov ecx, 0x840
or ax, cx
mov word [esi + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x190], eax
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov edx, ebx
mov ecx, esi
call fcn.004a1110
mov eax, 0x1000
test word [esi + 8], ax
je 0x4aa9f4
mov ecx, esi
call fcn.004a0610
test eax, eax
jne 0x4ac7a3
add ebx, 0x28
add esi, 0x28
sub dword [ebp - 0x190], 1
jne 0x4aa9d1
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x190], eax
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
nop word [eax + eax]
push 0x1000
mov edx, ebx
mov ecx, esi
call fcn.004a1050
mov eax, 0x1000
add esp, 4
test word [esi + 8], ax
je 0x4aaa7b
mov ecx, esi
call fcn.004a0610
test eax, eax
jne 0x4ac7a3
mov ecx, dword [ebp - 0x190]
mov eax, ecx
dec ecx
mov dword [ebp - 0x190], ecx
test eax, eax
je 0x4aa631
add esi, 0x28
add ebx, 0x28
jmp 0x4aaa50
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
push 0x1000
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea edx, [ebx + eax*8]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 8]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
call fcn.004a1050
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
push dword [edi + eax*8 + 4]
push dword [edi + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea ecx, [edi + eax*8]
call fcn.004a0ef0
add esp, 8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x180], ecx
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
mov eax, dword [edx + 0xc]
movzx edx, word [ecx + 8]
mov dword [ebp - 0x1b4], edx
lea eax, [eax + eax*4]
lea ebx, [ebx + eax*8]
mov al, byte [esi + 8]
or al, dl
test al, 1
je 0x4aab9c
mov ecx, ebx
call fcn.004a0e90
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
test dl, 0x12
jne 0x4aabd6
mov dl, byte [ebp - 0x1ac]
push 0
call fcn.004a06e0
add esp, 4
test eax, eax
jne 0x4ac7a3
mov eax, dword [ebp - 0x180]
mov ecx, 0xfffd
mov ax, word [eax + 8]
and ax, cx
movzx ecx, ax
mov dword [ebp - 0x1b4], ecx
jmp 0x4aac06
test edx, 0x4000
je 0x4aac06
call fcn.004a0660
test eax, eax
jne 0x4ac7a3
mov eax, dword [ebp - 0x180]
mov ecx, 0xfffd
mov ax, word [eax + 8]
and ax, cx
movzx eax, ax
mov dword [ebp - 0x1b4], eax
movzx eax, word [esi + 8]
mov dword [ebp - 0x18c], eax
test al, 0x12
jne 0x4aac28
mov dl, byte [ebp - 0x1ac]
mov ecx, esi
push 0
call fcn.004a06e0
add esp, 4
jmp 0x4aac36
test eax, 0x4000
je 0x4aac53
mov ecx, esi
call fcn.004a0660
test eax, eax
jne 0x4ac7a3
mov ax, word [esi + 8]
mov ecx, 0xfffd
and ax, cx
movzx eax, ax
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x180]
mov eax, dword [esi + 0xc]
add eax, dword [ecx + 0xc]
cdq
mov dword [ebp - 0x1c4], eax
mov ecx, edx
mov eax, dword [edi + 0x6c]
cdq
cmp ecx, edx
jg 0x4af7a8
mov edx, dword [ebp - 0x1c4]
jl 0x4aac84
cmp edx, eax
ja 0x4af7a8
xor eax, eax
mov ecx, ebx
cmp ebx, esi
sete al
add edx, 3
push eax
call fcn.004a0420
add esp, 4
test eax, eax
jne 0x4ac7a3
mov ax, word [ebx + 8]
mov ecx, 0x3e40
and ax, cx
or ax, 2
mov word [ebx + 8], ax
cmp ebx, esi
je 0x4aacd4
push dword [esi + 0xc]
push dword [esi + 0x10]
push dword [ebx + 0x10]
call fcn.0063d600
mov eax, dword [ebp - 0x18c]
add esp, 0xc
mov word [esi + 8], ax
mov edi, dword [ebp - 0x180]
mov eax, dword [esi + 0xc]
add eax, dword [ebx + 0x10]
push dword [edi + 0xc]
push dword [edi + 0x10]
push eax
call fcn.0063d600
mov eax, dword [ebp - 0x1b4]
add esp, 0xc
mov ecx, dword [ebp - 0x1c4]
mov word [edi + 8], ax
mov eax, dword [ebx + 0x10]
mov byte [ecx + eax], 0
mov eax, dword [ebx + 0x10]
mov byte [ecx + eax + 1], 0
mov eax, dword [ebx + 0x10]
mov byte [ecx + eax + 2], 0
mov eax, 0x200
or word [ebx + 8], ax
mov al, byte [ebp - 0x1ac]
mov dword [ebx + 0xc], ecx
mov byte [ebx + 0xa], al
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edi + 4]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov ecx, esi
mov dword [ebp - 0x180], esi
call fcn.004aa220
movzx ebx, ax
mov eax, dword [edi + 8]
mov edi, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea eax, [edi + eax*8]
mov ecx, eax
mov dword [ebp - 0x18c], eax
call fcn.004aa220
movzx ecx, ax
mov eax, dword [ebp - 0x16c]
and cl, bl
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea eax, [edi + eax*8]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x18c]
mov ax, word [eax + 8]
or ax, word [esi + 8]
movzx eax, ax
test cl, 4
je 0x4aaee7
mov eax, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x18c]
mov ecx, dword [esi]
mov edx, dword [esi + 4]
movzx eax, byte [eax]
mov esi, dword [ebx]
add eax, 0xffffff99
mov edi, dword [ebx + 4]
mov dword [ebp - 0x1e8], esi
mov dword [ebp - 0x1e4], edi
cmp eax, 3
ja case.default.0x4aadf1
jmp dword [eax*4 + 0x4b0fd0]
push edx
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.004849f0
add esp, 8
test eax, eax
je 0x4aae9c
mov esi, dword [ebp - 0x180]
jmp 0x4aaf1c
push edx
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.00484a90
add esp, 8
test eax, eax
jne 0x4aae10
jmp 0x4aae9c
push edx
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.00484ae0
add esp, 8
test eax, eax
jne 0x4aae10
jmp 0x4aae9c
mov eax, ecx
or eax, edx
je 0x4aaeeb
mov eax, ecx
and eax, edx
cmp eax, 0xffffffff
jne 0x4aae66
test esi, esi
jne 0x4aae66
cmp edi, 0x80000000
je 0x4aae10
push edx
push ecx
push edi
push esi
call fcn.00626170
jmp 0x4aae90
mov eax, ecx
or eax, edx
je 0x4aaeeb
mov eax, ecx
and eax, edx
cmp eax, 0xffffffff
jne 0x4aae87
mov ecx, 1
xor edx, edx
push edx
push ecx
push edi
push esi
call fcn.0066a670
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1e8], eax
mov ecx, dword [ebp - 0x1b4]
mov edx, 0x3e40
mov eax, dword [ebp - 0x1e8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ecx + 4], eax
mov ax, word [ecx + 8]
and ax, dx
or ax, 4
mov word [ecx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
test al, 1
je 0x4aaf16
mov ecx, dword [ebp - 0x1b4]
call fcn.004a0e90
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x18c]
mov ecx, esi
call fcn.004a0ad0
mov ecx, ebx
movsd qword [ebp - 0x198], xmm0
call fcn.004a0ad0
mov eax, dword [ebp - 0x16c]
movzx eax, byte [eax]
add eax, 0xffffff99
cmp eax, 3
ja case.default.0x4aaf43
jmp dword [eax*4 + 0x4b0fe0]
addsd xmm0, qword [ebp - 0x198]
jmp 0x4aafd1
subsd xmm0, qword [ebp - 0x198]
jmp 0x4aafd1
mulsd xmm0, qword [ebp - 0x198]
jmp 0x4aafd1
movsd xmm1, qword [ebp - 0x198]
xorps xmm2, xmm2
ucomisd xmm1, xmm2
lahf
test ah, 0x44
jnp 0x4aaeeb
divsd xmm0, xmm1
jmp 0x4aafd1
mov ecx, esi
call fcn.004a0a50
mov ecx, ebx
mov esi, eax
mov edi, edx
call fcn.004a0a50
mov ecx, eax
mov dword [ebp - 0x1e4], edx
mov eax, esi
mov dword [ebp - 0x1e8], ecx
or eax, edi
je 0x4aaeeb
mov eax, esi
and eax, edi
cmp eax, 0xffffffff
jne 0x4aafc1
mov esi, 1
xor edi, edi
push edi
push esi
push edx
push ecx
call fcn.0066a670
mov ecx, eax
call fcn.00626110
call fcn.004836b0
test eax, eax
jne 0x4aaeeb
mov ecx, dword [ebp - 0x1b4]
mov edx, 0x3e40
mov ax, word [ecx + 8]
and ax, dx
movsd qword [ecx], xmm0
or ax, 8
mov word [ecx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 4]
test eax, eax
je case.0x4aa3a5.86
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
push 0
push 0
lea ecx, [ecx + eax*8]
call fcn.004a0ef0
mov ecx, dword [ebp - 0x170]
add esp, 8
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ebx, [edi + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea ecx, [edi + eax*8]
mov eax, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea edx, [edi + eax*8]
mov al, byte [ecx + 8]
or al, byte [ebx + 8]
mov dword [ebp - 0x188], edx
test al, 1
je 0x4ab0b7
mov ecx, edx
call fcn.004a0e90
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
call fcn.004a0a50
mov edi, eax
mov esi, edx
mov ecx, ebx
mov dword [ebp - 0x240], edi
mov dword [ebp - 0x23c], esi
call fcn.004a0a50
mov ebx, eax
mov eax, dword [ebp - 0x16c]
mov cl, byte [eax]
cmp cl, 0x63
jne 0x4ab0eb
and edi, ebx
and esi, edx
jmp 0x4ab189
cmp cl, 0x64
jne 0x4ab0f9
or edi, ebx
or esi, edx
jmp 0x4ab189
mov eax, ebx
or eax, edx
je 0x4ab189
test edx, edx
jg 0x4ab131
jl 0x4ab10d
test ebx, ebx
jae 0x4ab126
mov al, 0xcb
sub al, cl
mov cl, al
cmp edx, 0xffffffff
jl 0x4ab131
jg 0x4ab11f
cmp ebx, 0xffffffc0
jbe 0x4ab131
neg ebx
adc edx, 0
neg edx
test edx, edx
jl 0x4ab160
jg 0x4ab131
cmp ebx, 0x40
jb 0x4ab160
test esi, esi
jg 0x4ab147
jl 0x4ab13b
test edi, edi
jae 0x4ab147
cmp cl, 0x65
je 0x4ab147
or edi, 0xffffffff
or esi, edi
jmp 0x4ab189
xorps xmm0, xmm0
movlpd qword [ebp - 0x198], xmm0
mov esi, dword [ebp - 0x194]
mov edi, dword [ebp - 0x198]
jmp 0x4ab189
movq xmm1, qword [ebp - 0x240]
movd xmm0, ebx
cmp cl, 0x65
jne 0x4ab1c8
psllq xmm1, xmm0
movq qword [ebp - 0x198], xmm1
mov edi, dword [ebp - 0x198]
mov esi, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x188]
mov edx, 0x3e40
mov ax, word [ecx + 8]
and ax, dx
mov dword [ecx], edi
or ax, 4
mov dword [ecx + 4], esi
mov word [ecx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
psrlq xmm1, xmm0
movq qword [ebp - 0x198], xmm1
test esi, esi
jg 0x4ab17d
jl 0x4ab1de
test edi, edi
jae 0x4ab17d
mov ecx, 0x40
or eax, 0xffffffff
sub ecx, ebx
or edx, 0xffffffff
call fcn.00625da0
mov edi, dword [ebp - 0x198]
mov esi, dword [ebp - 0x194]
or edi, eax
or esi, edx
jmp 0x4ab189
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov ecx, esi
call fcn.004a0bb0
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 8]
cdq
add dword [esi], eax
adc dword [esi + 4], edx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 4]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea esi, [edx + eax*8]
movzx eax, word [esi + 8]
test al, 4
jne 0x4ab2a9
test al, 8
jne 0x4ab27a
test al, 2
je 0x4ab287
mov edx, 1
mov ecx, esi
call fcn.004aa010
jmp 0x4ab281
mov ecx, esi
call fcn.004a0b50
mov ecx, dword [ebp - 0x170]
movzx eax, word [esi + 8]
test al, 4
jne 0x4ab2a9
mov esi, dword [ebp - 0x16c]
cmp dword [esi + 8], 0
jne 0x4aa3f5
mov eax, 0x14
jmp 0x4b06cf
and eax, 0x3e40
or eax, 4
mov word [esi + 8], ax
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [ecx + eax*8 + 8], 0x24
lea ecx, [ecx + eax*8]
je 0x4aa637
call fcn.004a0c20
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov eax, 0x4000
test word [esi + 8], ax
je 0x4ab337
mov ecx, esi
call fcn.004a0660
mov dword [ebp - 0x174], eax
jmp 0x4ab341
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x16c]
mov ecx, esi
push dword [ebp - 0x1ac]
mov dl, byte [eax + 8]
call fcn.004a0dc0
add esp, 4
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4b06d5
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov eax, dword [edx + 0xc]
lea eax, [eax + eax*4]
movzx edx, word [ecx + eax*8 + 8]
lea edi, [ecx + eax*8]
movzx eax, word [ebx + 8]
mov ecx, edx
or ecx, eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x184], edx
test cl, 1
je 0x4ab497
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax + 2]
test al, al
jns 0x4ab419
mov cl, dl
mov al, cl
and al, byte [ebp - 0x19c]
test al, 1
je 0x4ab402
test edx, 0x100
jne 0x4ab402
mov eax, dword [ebp - 0x16c]
xor ecx, ecx
movzx eax, byte [eax]
mov al, byte [eax + 0x6cca0c]
jmp 0x4ab521
test cl, 1
mov ecx, 0
sete cl
lea ecx, [ecx*2 - 1]
jmp 0x4ab673
test al, 0x20
je 0x4ab46f
mov eax, dword [ebp - 0x16c]
mov ebx, 0x3e40
mov edx, dword [ebp - 0x17c]
mov dword [ebp - 0x1dc], 1
mov eax, dword [eax + 8]
lea ecx, [eax + eax*4]
mov ax, word [edx + ecx*8 + 8]
and ax, bx
or ax, 1
mov word [edx + ecx*8 + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
test al, 0x10
jne 0x4aa3e9
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov esi, dword [ebp - 0x16c]
mov al, byte [esi + 2]
and al, 0x47
cmp al, 0x43
jb 0x4ab5ea
test cl, 2
je 0x4ab4e3
mov al, byte [ebp - 0x19c]
and al, 0x2e
cmp al, 2
jne 0x4ab4ce
xor edx, edx
mov ecx, ebx
call fcn.004aa010
movzx eax, word [edi + 8]
mov dword [ebp - 0x184], eax
mov al, byte [ebp - 0x184]
and al, 0x2e
cmp al, 2
jne 0x4ab4e3
xor edx, edx
mov ecx, edi
call fcn.004aa010
mov al, byte [edi + 8]
and al, byte [ebx + 8]
test al, 4
je 0x4ab662
mov esi, dword [edi + 4]
mov edx, dword [ebx + 4]
mov ecx, dword [edi]
mov eax, dword [ebx]
cmp esi, edx
jl 0x4ab5d3
jg 0x4ab50d
cmp ecx, eax
jbe 0x4ab5c1
mov ecx, 1
mov eax, dword [ebp - 0x16c]
movzx eax, byte [eax]
mov al, byte [eax + 0x6cbcb4]
movzx esi, al
movzx eax, word [ebp - 0x19c]
mov word [ebx + 8], ax
mov ebx, dword [ebp - 0x16c]
movzx eax, word [ebp - 0x184]
mov word [edi + 8], ax
movzx ebx, word [ebx + 2]
test bl, 0x20
je 0x4ab6a5
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1dc], ecx
mov eax, dword [eax + 8]
lea edx, [eax + eax*4]
test bl, 8
je 0x4ab57a
mov ecx, dword [ebp - 0x16c]
xor eax, eax
cmp byte [ecx], 0x35
sete al
cmp eax, esi
je 0x4aa631
mov edi, dword [ebp - 0x17c]
mov ecx, 0x3e40
mov ax, word [edi + edx*8 + 8]
and ax, cx
mov dword [edi + edx*8], esi
or ax, 4
mov dword [edi + edx*8 + 4], 0
mov word [edi + edx*8 + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
cmp esi, edx
jg 0x4ab3ec
jl 0x4ab5d3
cmp ecx, eax
jae 0x4ab3ec
mov eax, dword [ebp - 0x16c]
or ecx, 0xffffffff
movzx eax, byte [eax]
mov al, byte [eax + 0x6d0144]
jmp 0x4ab521
cmp al, 0x42
jne 0x4ab662
mov al, byte [ebp - 0x19c]
test al, 2
jne 0x4ab628
test al, 0x2c
je 0x4ab628
mov dl, byte [ebp - 0x1ac]
mov ecx, ebx
push 1
call fcn.004a06e0
mov ax, word [ebx + 8]
mov ecx, 0x3e40
xor ax, word [ebp - 0x19c]
add esp, 4
and ax, cx
xor word [ebp - 0x19c], ax
mov al, byte [ebp - 0x184]
test al, 2
jne 0x4ab662
test al, 0x2c
je 0x4ab662
mov dl, byte [ebp - 0x1ac]
mov ecx, edi
push 1
call fcn.004a06e0
mov ax, word [edi + 8]
mov ecx, 0x3e40
xor ax, word [ebp - 0x184]
add esp, 4
and ax, cx
xor word [ebp - 0x184], ax
push dword [esi + 0x10]
mov edx, ebx
mov ecx, edi
call fcn.004a5d80
add esp, 4
mov ecx, eax
test ecx, ecx
jns 0x4ab68b
mov eax, dword [ebp - 0x16c]
movzx eax, byte [eax]
mov al, byte [eax + 0x6d0144]
jmp 0x4ab521
jne 0x4ab512
mov eax, dword [ebp - 0x16c]
movzx eax, byte [eax]
mov al, byte [eax + 0x6cca0c]
jmp 0x4ab521
test esi, esi
mov esi, dword [ebp - 0x16c]
jne 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
cmp dword [ebp - 0x1dc], 0
jne 0x4aa3f5
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
test byte [ebx + 2], 1
jne 0x4ab6fe
xor eax, eax
jmp 0x4ab704
mov eax, dword [ebx - 4]
add eax, 4
mov ecx, dword [ebx + 0xc]
mov esi, dword [ebp - 0x16c]
mov edx, dword [ebx + 0x10]
mov ebx, dword [ebx + 4]
mov dword [ebp - 0x1b4], ebx
mov ebx, dword [esi + 8]
xor esi, esi
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x18c], edx
mov dword [ebp - 0x1c4], ebx
test ecx, ecx
jle 0x4aa631
lea ebx, [edx + 0x14]
test eax, eax
je 0x4ab74a
mov edi, dword [eax + esi*4]
jmp 0x4ab74c
mov edi, esi
mov eax, dword [edx + 0x10]
mov ecx, dword [ebp - 0x17c]
push dword [ebx]
movzx eax, byte [esi + eax]
and eax, 1
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1c4]
add eax, edi
lea eax, [eax + eax*4]
lea edx, [ecx + eax*8]
mov eax, dword [ebp - 0x1b4]
add eax, edi
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.004a5d80
mov ecx, eax
add esp, 4
mov dword [ebp - 0x1dc], ecx
test ecx, ecx
jne 0x4ab7cc
mov eax, dword [ebp - 0x190]
inc esi
mov edx, dword [ebp - 0x18c]
add ebx, 4
cmp esi, dword [ebp - 0x188]
jl 0x4ab741
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0x10]
test byte [esi + eax], 2
je 0x4ab80d
mov eax, dword [ebp - 0x1b4]
mov ebx, dword [ebp - 0x17c]
add eax, edi
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 1
jne 0x4ab805
mov eax, dword [ebp - 0x1c4]
add eax, edi
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 1
je 0x4ab80d
neg ecx
mov dword [ebp - 0x1dc], ecx
cmp dword [ebp - 0x1d4], 0
mov esi, dword [ebp - 0x16c]
je 0x4aa637
mov edi, dword [ebp - 0x1bc]
neg ecx
mov ebx, dword [ebp - 0x1f0]
add esi, 0x14
mov dword [ebp - 0x1dc], ecx
mov ecx, dword [ebp - 0x170]
jmp 0x4aa381
mov edi, dword [ebp - 0x1dc]
mov edx, dword [ebp - 0x16c]
test edi, edi
jns 0x4ab876
mov esi, dword [edx + 4]
mov edx, dword [ebp - 0x1a8]
dec esi
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
add esi, 0x14
jmp 0x4aa381
jne 0x4ab89c
mov esi, dword [edx + 8]
mov edx, dword [ebp - 0x1a8]
dec esi
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
add esi, 0x14
jmp 0x4aa381
mov esi, dword [edx + 0xc]
mov edx, dword [ebp - 0x1a8]
dec esi
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
add esi, 0x14
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov edx, 2
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebx + 4]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.004a0b00
mov ecx, dword [ebx + 8]
mov edx, 2
mov ebx, dword [ebp - 0x17c]
mov esi, eax
lea ecx, [ecx + ecx*4]
lea ecx, [ebx + ecx*8]
call fcn.004a0b00
mov ecx, dword [ebp - 0x16c]
lea eax, [eax + esi*2]
cmp byte [ecx], 0x2c
jne 0x4ab911
mov al, byte [esi + eax + 0x6cbd60]
jmp 0x4ab918
mov al, byte [esi + eax + 0x6cbcf8]
mov esi, dword [ebp - 0x16c]
movzx edx, al
mov eax, dword [ecx + 0xc]
lea ecx, [eax + eax*4]
mov ax, word [ebx + ecx*8 + 8]
cmp edx, 2
jne 0x4ab95c
mov edi, dword [ebp - 0x1bc]
mov edx, 0x3e40
and ax, dx
or ax, 1
add esi, 0x14
mov word [ebx + ecx*8 + 8], ax
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edi, dword [ebp - 0x1bc]
mov dword [ebx + ecx*8], edx
mov edx, 0x3e40
and ax, dx
mov dword [ebx + ecx*8 + 4], 0
or ax, 4
add esi, 0x14
mov word [ebx + ecx*8 + 8], ax
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
mov edx, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
call fcn.004a0b00
mov ecx, dword [ebp - 0x16c]
xor eax, dword [ecx + 0x10]
cdq
push edx
push eax
mov eax, dword [ecx + 8]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
call fcn.004a0ef0
add esp, 8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 1
lea ecx, [ebx + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
jne 0x4afeac
xor edx, edx
call fcn.004a0b00
neg eax
mov ecx, esi
push 0
sbb eax, eax
inc eax
push eax
call fcn.004a0ef0
add esp, 8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea edi, [ebx + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
mov ecx, esi
call fcn.004a0e90
test byte [edi + 8], 1
jne 0x4aa631
mov eax, 4
mov ecx, edi
mov word [esi + 8], ax
call fcn.004a0a50
not eax
not edx
mov dword [esi], eax
mov dword [esi + 4], edx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edi, dword [ecx + 0xc8]
test edi, edi
je 0x4abb2d
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov edi, dword [edi + 0x18]
sub ecx, dword [eax + 0x68]
mov eax, 0x66666667
imul ecx
mov eax, 1
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
and ecx, 7
shr esi, 3
shl eax, cl
movzx edx, byte [esi + edi]
test edx, eax
jne 0x4aa3e9
mov ebx, dword [ebp - 0x1f0]
bts edx, ecx
mov ecx, dword [ebp - 0x170]
mov byte [esi + edi], dl
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
mov eax, dword [ecx + 0x68]
mov eax, dword [eax + 4]
mov dword [esi + 4], eax
add esi, 0x14
jmp 0x4aa381
mov eax, dword [ecx + 0x68]
mov eax, dword [eax + 4]
cmp eax, dword [esi + 4]
je 0x4aa3f5
mov eax, dword [ecx + 0x68]
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
mov eax, dword [eax + 4]
mov dword [esi + 4], eax
add esi, 0x14
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
mov edx, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.004a0b00
mov esi, dword [ebp - 0x16c]
test eax, eax
jne 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 4]
xor edx, edx
mov ecx, dword [ebp - 0x17c]
cmp dword [esi + 0xc], edx
lea eax, [eax + eax*4]
sete dl
lea ecx, [ecx + eax*8]
call fcn.004a0b00
test eax, eax
je 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 4]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [edx + eax*8 + 8], 1
jne 0x4aa3f5
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 4]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [edx + eax*8 + 8], 1
je 0x4aa3f5
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
cmp byte [eax + 2], 0
je 0x4aa637
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.004a0e90
jmp 0x4aa3e9
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], eax
mov eax, dword [edx + 8]
lea edx, [ebp - 0x1d8]
mov dword [ebp - 0x1d8], eax
call fcn.004a54b0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov esi, dword [ebp - 0x1c0]
mov ebx, dword [ebp - 0x170]
mov eax, dword [eax + 0xc]
mov edx, dword [esi + 0x48]
mov dword [ebp - 0x19c], edx
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x184], ecx
cmp eax, dword [ebx + 0x20]
je 0x4abde1
cmp byte [esi + 2], 0
je 0x4abd3c
cmp byte [esi], 3
jne 0x4abd1b
mov eax, dword [esi + 0x20]
lea ebx, [esi + 0x54]
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + ecx*8 + 0xc]
mov dword [ebx], eax
mov dword [esi + 0x50], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + ecx*8 + 0x10]
mov dword [esi + 0x4c], eax
jmp 0x4abd79
call fcn.004a0e90
mov esi, dword [ebp - 0x16c]
mov ecx, ebx
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov esi, dword [esi + 0x28]
mov ecx, esi
call fcn.004982e0
mov ecx, dword [ebp - 0x1c0]
mov eax, dword [esi + 0x2c]
lea ebx, [ecx + 0x54]
mov dword [ecx + 0x50], eax
mov edx, ebx
mov ecx, esi
call fcn.00498910
mov esi, dword [ebp - 0x1c0]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x50]
cmp eax, dword [edi + 0x6c]
ja 0x4af7a8
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x20]
mov dword [esi + 0x1c], eax
mov ecx, dword [esi + 0x4c]
mov al, byte [ecx]
cmp al, 0x80
jae 0x4abd9a
movzx eax, al
mov dword [edx], eax
mov eax, 1
jmp 0x4abda8
call fcn.00484830
mov edx, dword [ebp - 0x19c]
movzx eax, al
movzx eax, al
mov dword [esi + 0x30], eax
xor eax, eax
mov word [esi + 0x3a], ax
mov eax, dword [ebx]
cmp eax, dword [edx]
jae 0x4abeca
mov dword [esi + 0x4c], 0
mov dword [ebx], 0
mov eax, dword [edx]
cmp eax, 0x18003
ja 0x4abff2
cmp eax, dword [esi + 0x50]
ja 0x4abff2
movzx eax, word [esi + 0x3a]
mov ebx, dword [ebp - 0x1d8]
cmp eax, ebx
jg 0x4ac080
mov eax, dword [esi + 0x30]
cmp eax, dword [edx]
jae 0x4ac026
mov ebx, dword [esi + 0x4c]
mov dword [ebp - 0x1c4], ebx
test ebx, ebx
jne 0x4abe5a
xorps xmm0, xmm0
lea eax, [ebp - 0x140]
movups xmmword [ebp - 0x140], xmm0
push eax
movups xmmword [ebp - 0x130], xmm0
movq qword [ebp - 0x120], xmm0
push dword [edx]
mov ecx, dword [esi + 0x28]
xor edx, edx
call fcn.004a1470
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov ebx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x19c]
mov dword [ebp - 0x1c4], ebx
movzx eax, word [esi + 0x3a]
mov esi, dword [esi + 0x30]
add esi, ebx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x180], 0
mov ecx, dword [edx + eax*4]
mov edx, dword [edx]
add edx, ebx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x1a0], edx
mov edx, dword [ebp - 0x1c0]
add edx, 0x58
lea eax, [edx + eax*4]
mov dword [ebp - 0x1b4], eax
nop dword [eax + eax]
movzx ebx, byte [esi]
mov dword [ebp - 0x1f8], ebx
mov dword [eax], ebx
cmp ebx, 0x80
jae 0x4abecf
movzx eax, byte [ebx + 0x6cd2b8]
cdq
add ecx, eax
adc dword [ebp - 0x180], edx
mov edx, 1
jmp 0x4abf03
mov ebx, dword [esi + 0x4c]
jmp 0x4abe54
lea edx, [ebp - 0x1f8]
mov ecx, esi
call fcn.00484830
mov ebx, dword [ebp - 0x1f8]
mov ecx, ebx
movzx edx, al
mov eax, dword [ebp - 0x1b4]
mov dword [eax], ebx
call fcn.004a5500
mov ecx, dword [ebp - 0x18c]
add ecx, eax
adc dword [ebp - 0x180], 0
mov edi, dword [ebp - 0x19c]
add esi, edx
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x1b4]
inc edx
add eax, 4
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x1b4], eax
mov dword [edi + edx*4], ecx
mov edi, dword [ebp - 0x1bc]
cmp edx, dword [ebp - 0x1d8]
jg 0x4abf52
cmp esi, dword [ebp - 0x1a0]
jb 0x4abea0
mov eax, dword [ebp - 0x1a0]
jmp 0x4abf5c
mov eax, dword [ebp - 0x1a0]
cmp esi, eax
jb 0x4abf77
cmp esi, eax
mov eax, dword [ebp - 0x1c0]
ja 0x4abfa6
cmp ecx, dword [eax + 0x50]
jne 0x4abfa6
mov eax, dword [ebp - 0x180]
test eax, eax
jne 0x4abfa0
jmp 0x4abf7d
mov eax, dword [ebp - 0x180]
mov edi, dword [ebp - 0x1c0]
mov edi, dword [edi + 0x50]
mov dword [ebp - 0x188], edi
mov edi, dword [ebp - 0x1bc]
test eax, eax
jb 0x4abfb9
ja 0x4abfa0
cmp ecx, dword [ebp - 0x188]
jbe 0x4abfb9
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x19c]
cmp dword [ecx], 0
jne 0x4abfe1
mov esi, dword [ebp - 0x1a0]
xor edx, edx
mov eax, dword [ebp - 0x1c0]
sub esi, dword [ebp - 0x1c4]
mov word [eax + 0x3a], dx
mov dword [eax + 0x30], esi
mov esi, eax
cmp dword [esi + 0x4c], 0
jne 0x4ac02e
lea ecx, [ebp - 0x140]
call fcn.004a09a0
jmp 0x4ac02e
cmp dword [eax + 0x4c], 0
jne 0x4abff2
lea ecx, [ebp - 0x140]
call fcn.004a09a0
mov ecx, dword [ebp - 0x1a8]
mov eax, dword [ecx + 0xc]
test eax, eax
jle 0x4b06b0
mov edi, dword [ebp - 0x1bc]
lea esi, [eax - 1]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [ecx + esi*4]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
jmp 0x4aa381
xor ebx, ebx
mov dword [ebp - 0x1f8], ebx
movzx eax, word [esi + 0x3a]
cmp eax, dword [ebp - 0x1d8]
jg 0x4ac08a
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x184]
cmp byte [eax + 1], 0xf5
jne 0x4aab77
mov edx, dword [eax + 0x10]
push 0x800
call fcn.004a1050
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [esi + ebx*4 + 0x58]
mov dword [ebp - 0x1f8], ebx
mov ecx, dword [ebp - 0x184]
mov eax, 0x2400
test word [ecx + 8], ax
je 0x4ac0a6
call fcn.004a0e90
mov ecx, dword [ebp - 0x184]
mov edi, dword [ebp - 0x1d8]
mov edx, dword [ebp - 0x19c]
mov eax, dword [esi + 0x54]
cmp eax, dword [edx + edi*4 + 4]
mov edi, dword [ebp - 0x1bc]
jb 0x4ac19b
mov eax, dword [esi + 0x4c]
mov esi, dword [ebp - 0x1d8]
add eax, dword [edx + esi*4]
mov dword [ebp - 0x188], eax
cmp ebx, 0xc
jae 0x4ac103
push ecx
mov edx, ebx
mov ecx, eax
call fcn.004a5670
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov al, byte [ebp - 0x1ac]
lea esi, [ebx - 0xc]
shr esi, 1
mov dword [ecx + 0xc], esi
mov byte [ecx + 0xa], al
lea edx, [esi + 2]
cmp dword [ecx + 0x18], edx
jge 0x4ac13f
mov eax, 1
push 0
mov word [ecx + 8], ax
call fcn.004a0420
add esp, 4
test eax, eax
jne 0x4ac7a3
mov ecx, dword [ebp - 0x184]
jmp 0x4ac145
mov eax, dword [ecx + 0x14]
mov dword [ecx + 0x10], eax
push esi
push dword [ebp - 0x188]
push dword [ecx + 0x10]
call fcn.0063d600
mov ecx, dword [ebp - 0x184]
add esp, 0xc
and ebx, 1
mov eax, dword [ecx + 0x10]
mov byte [esi + eax], 0
mov eax, dword [ecx + 0x10]
mov byte [esi + eax + 1], 0
mov ax, word [ebx*2 + 0x6cc0d0]
mov word [ecx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov al, byte [ebp - 0x1ac]
mov byte [ecx + 0xa], al
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax + 2]
test al, 0xc0
je 0x4ac1c0
cmp ebx, 0xc
jb 0x4ac1bc
test bl, 1
je 0x4ac1d1
test al, al
js 0x4ac1d1
mov ecx, ebx
call fcn.004a5500
test eax, eax
jne 0x4ac201
mov ecx, dword [ebp - 0x184]
push ecx
mov edx, ebx
mov ecx, 0x71d20c
call fcn.004a5670
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
push dword [ebp - 0x184]
mov ecx, dword [esi + 0x28]
push eax
mov eax, dword [ebp - 0x1d8]
mov edx, dword [edx + eax*4]
call fcn.004a1470
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov esi, dword [ebp - 0x184]
mov edx, ebx
push esi
mov ecx, dword [esi + 0x10]
call fcn.004a5670
mov eax, 0xefff
add esp, 4
and word [esi + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
mov edi, dword [edx + 0x10]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
nop
push dword [ebp - 0x1ac]
mov dl, byte [edi]
mov ecx, esi
call fcn.004aa0a0
add esp, 4
cmp byte [edi], 0x45
jne 0x4ac2e3
movzx ebx, word [esi + 8]
test bl, 4
je 0x4ac2e3
mov edx, dword [esi + 4]
mov ecx, dword [esi]
cmp edx, 0x7fff
jg 0x4ac2cd
jl 0x4ac2b4
cmp ecx, 0xffffffff
ja 0x4ac2cd
cmp edx, 0xffff8000
jl 0x4ac2cd
jg 0x4ac2c2
test ecx, ecx
jb 0x4ac2cd
and ebx, 0xfffb
or ebx, 0x20
jmp 0x4ac2df
call fcn.00626110
and ebx, 0xfffb
movsd qword [esi], xmm0
or ebx, 8
mov word [esi + 8], bx
inc edi
cmp byte [edi], 0
je 0x4aa631
add esi, 0x28
jmp 0x4ac280
mov edx, dword [ebp - 0x16c]
xorps xmm0, xmm0
mov esi, dword [ebp - 0x17c]
movlpd qword [ebp - 0x1b8], xmm0
mov dword [ebp - 0x1a0], 0
mov eax, dword [edx + 4]
mov ebx, dword [edx + 0x10]
movlpd qword [ebp - 0x1c8], xmm0
lea eax, [eax + eax*4]
lea ecx, [esi + eax*8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x18c], ecx
lea eax, [eax + eax*4]
lea eax, [eax - 5]
lea eax, [ecx + eax*8]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x170]
movzx eax, byte [eax + 0x93]
mov dword [ebp - 0x194], eax
mov eax, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea eax, [esi + eax*8]
mov dword [ebp - 0x190], eax
test ebx, ebx
je 0x4ac3a3
lea esi, [ecx + 8]
nop dword [eax + eax]
push dword [ebp - 0x1ac]
mov dl, byte [ebx]
lea ecx, [esi - 8]
call fcn.004aa0a0
add esp, 4
cmp byte [ebx], 0x45
jne 0x4ac39a
movzx eax, word [esi]
test al, 4
je 0x4ac39a
and eax, 0xfffb
or eax, 0x20
mov word [esi], ax
inc ebx
add esi, 0x28
cmp byte [ebx], 0
jne 0x4ac370
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x1b4]
mov esi, dword [ebp - 0x188]
mov edx, dword [ebp - 0x1b8]
add esi, 0x1c
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x1c4], eax
nop dword [eax]
movzx ebx, word [esi - 0x14]
test bl, 1
je 0x4ac404
and ebx, 0x4000
neg ebx
sbb ebx, ebx
and ebx, 0xa
mov dword [esi], ebx
mov ebx, dword [ebp - 0x1a0]
inc ebx
jmp 0x4ac6d9
test bl, 0x24
je 0x4ac5e9
cmp dword [esi - 0x18], 0
mov eax, dword [esi - 0x1c]
jg 0x4ac42b
jl 0x4ac41c
test eax, eax
jae 0x4ac42b
not eax
mov dword [ebp - 0x180], eax
mov eax, dword [esi - 0x18]
not eax
jmp 0x4ac434
mov dword [ebp - 0x180], eax
mov eax, dword [esi - 0x18]
inc dword [ebp - 0x1a0]
test eax, eax
ja 0x4ac552
jb 0x4ac44d
cmp dword [ebp - 0x180], 0x7f
ja 0x4ac4af
mov eax, dword [esi - 0x1c]
and eax, 1
mov dword [ebp - 0x1d4], 0
cmp eax, dword [esi - 0x1c]
jne 0x4ac48c
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [esi - 0x18]
jne 0x4ac48c
cmp dword [ebp - 0x194], 4
jb 0x4ac48c
mov eax, dword [ebp - 0x180]
mov ebx, dword [ebp - 0x1a0]
add eax, 8
mov dword [esi], eax
jmp 0x4ac6df
mov ebx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 1
mov dword [ebp - 0x184], ecx
jmp 0x4ac6df
test eax, eax
ja 0x4ac552
jb 0x4ac4c5
cmp dword [ebp - 0x180], 0x7fff
ja 0x4ac4e8
mov ebx, dword [ebp - 0x1a0]
add edx, 2
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 2
mov dword [ebp - 0x184], ecx
jmp 0x4ac6df
test eax, eax
ja 0x4ac552
jb 0x4ac4fa
cmp dword [ebp - 0x180], 0x7fffff
ja 0x4ac51d
mov ebx, dword [ebp - 0x1a0]
add edx, 3
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 3
mov dword [ebp - 0x184], ecx
jmp 0x4ac6df
test eax, eax
ja 0x4ac552
jb 0x4ac52f
cmp dword [ebp - 0x180], 0x7fffffff
ja 0x4ac552
mov ebx, dword [ebp - 0x1a0]
add edx, 4
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 4
mov dword [ebp - 0x184], ecx
jmp 0x4ac6df
cmp eax, 0x7fff
ja 0x4ac587
jb 0x4ac564
cmp dword [ebp - 0x180], 0xffffffff
ja 0x4ac587
mov ebx, dword [ebp - 0x1a0]
add edx, 6
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 5
mov dword [ebp - 0x184], ecx
jmp 0x4ac6df
add edx, 8
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [ebp - 0x184], ecx
test bl, 0x20
je 0x4ac5d8
mov edx, dword [esi - 0x18]
mov ecx, dword [esi - 0x1c]
call fcn.00626110
mov ecx, dword [ebp - 0x184]
and ebx, 0xffdf
mov edx, dword [ebp - 0x19c]
or ebx, 8
mov word [esi - 0x14], bx
mov ebx, dword [ebp - 0x1a0]
movsd qword [esi - 0x1c], xmm0
mov dword [esi], 7
jmp 0x4ac6df
mov ebx, dword [ebp - 0x1a0]
mov dword [esi], 6
jmp 0x4ac6df
test bl, 8
je 0x4ac612
mov ebx, dword [ebp - 0x1a0]
inc ebx
mov dword [esi], 7
add edx, 8
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [ebp - 0x184], ecx
jmp 0x4ac6d9
mov eax, dword [esi - 0x10]
mov dword [ebp - 0x180], eax
mov eax, ebx
mov edi, dword [ebp - 0x180]
shr eax, 1
and eax, 1
lea eax, [eax + edi*2]
mov edi, dword [ebp - 0x1bc]
add eax, 0xc
mov dword [ebp - 0x1d4], eax
test ebx, 0x4000
je 0x4ac69d
mov edi, dword [esi - 0x1c]
lea eax, [eax + edi*2]
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0x1d4], eax
mov eax, edx
or eax, ecx
je 0x4ac681
lea ecx, [esi - 0x1c]
call fcn.004a0660
test eax, eax
jne 0x4ac7a3
mov ecx, dword [ebp - 0x180]
add ecx, dword [esi - 0x1c]
mov dword [ebp - 0x180], ecx
mov ecx, dword [ebp - 0x184]
jmp 0x4ac691
mov eax, dword [esi - 0x1c]
cdq
add dword [ebp - 0x1c4], eax
adc dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0x1d4]
mov edx, dword [ebp - 0x19c]
add edx, dword [ebp - 0x180]
push 0
adc ecx, 0
mov dword [ebp - 0x19c], edx
push eax
mov dword [ebp - 0x184], ecx
call fcn.004848b0
mov ebx, dword [ebp - 0x1a0]
add esp, 8
mov ecx, dword [ebp - 0x184]
add ebx, eax
mov eax, dword [ebp - 0x1d4]
mov edx, dword [ebp - 0x19c]
mov dword [esi], eax
mov dword [ebp - 0x1a0], ebx
lea eax, [esi - 0x1c]
cmp eax, dword [ebp - 0x18c]
je 0x4ac6f2
sub esi, 0x28
jmp 0x4ac3e0
cmp ebx, 0x7e
jle 0x4ac71c
mov eax, ebx
cdq
push edx
push eax
call fcn.004848b0
mov esi, eax
add ebx, esi
mov eax, ebx
mov dword [ebp - 0x1a0], ebx
cdq
push edx
push eax
call fcn.004848b0
add esp, 0x10
cmp esi, eax
jge 0x4ac723
inc ebx
mov dword [ebp - 0x1a0], ebx
mov eax, ebx
cdq
mov ecx, eax
mov eax, edx
mov ebx, ecx
mov dword [ebp - 0x1d4], ecx
add ebx, dword [ebp - 0x19c]
mov ecx, eax
mov dword [ebp - 0x194], eax
mov esi, ebx
mov eax, dword [ebp - 0x190]
adc ecx, dword [ebp - 0x184]
add esi, dword [ebp - 0x1c4]
mov eax, dword [eax + 0x18]
adc ecx, dword [ebp - 0x1b4]
cdq
cmp ecx, edx
jg 0x4ac770
jl 0x4ac768
cmp esi, eax
ja 0x4ac770
mov esi, dword [ebp - 0x190]
jmp 0x4ac7d8
mov eax, dword [edi + 0x6c]
cdq
cmp ecx, edx
jg 0x4af7a8
jl 0x4ac786
cmp esi, eax
ja 0x4af7a8
mov esi, dword [ebp - 0x190]
cmp dword [esi + 0x18], ebx
jge 0x4ac7d3
push 0
mov edx, ebx
mov ecx, esi
call fcn.004a0420
add esp, 4
test eax, eax
je 0x4ac7de
mov esi, dword [ebp - 0x178]
mov ecx, edi
call fcn.00480b40
push 0x70db34
push dword [ebp - 0x170]
call fcn.004a1bd0
mov ecx, dword [ebp - 0x170]
add esp, 8
mov eax, 7
jmp 0x4b06db
and word [esi + 8], 0x2d
mov eax, dword [esi + 0x14]
mov dword [esi + 0x10], eax
mov ecx, dword [ebp - 0x1c4]
mov eax, 0x10
mov word [esi + 8], ax
mov eax, ecx
or eax, dword [ebp - 0x1b4]
mov dword [esi + 0xc], ebx
je 0x4ac805
mov eax, 0x4010
mov dword [esi], ecx
mov word [esi + 8], ax
mov eax, dword [ebp - 0x1a0]
mov esi, dword [esi + 0x10]
lea edi, [esi + eax]
cmp eax, 0x80
jae 0x4ac821
mov byte [esi], al
mov eax, 1
jmp 0x4ac837
push dword [ebp - 0x194]
mov ecx, esi
push dword [ebp - 0x1d4]
call fcn.00484620
add esp, 8
mov ebx, dword [ebp - 0x18c]
movzx eax, al
add esi, eax
mov ebx, dword [ebx + 0x1c]
cmp ebx, 0x80
jae 0x4ac856
mov byte [esi], bl
mov eax, 1
jmp 0x4ac863
push 0
push ebx
mov ecx, esi
call fcn.00484620
add esp, 8
push ebx
mov ebx, dword [ebp - 0x18c]
mov ecx, edi
movzx eax, al
mov edx, ebx
add esi, eax
call fcn.004a5520
add ebx, 0x28
add esp, 4
add edi, eax
mov dword [ebp - 0x18c], ebx
cmp ebx, dword [ebp - 0x188]
jbe 0x4ac842
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
xorps xmm0, xmm0
mov eax, dword [ebp - 0x170]
movlpd qword [ebp - 0x248], xmm0
mov ecx, dword [edx + 4]
lea edx, [ebp - 0x248]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
mov ecx, dword [eax + 0x28]
call fcn.0049e090
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06d5
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov ecx, dword [ebp - 0x248]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x244]
mov dword [eax + 4], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
mov esi, dword [edx + 0x10]
mov dword [ebp - 0x184], eax
test eax, eax
jne 0x4aca22
cmp dword [edi + 0xb8], eax
jg 0x4b06bc
mov ecx, esi
call fcn.004836f0
mov ecx, dword [edi + 0x1d0]
mov ebx, eax
add ecx, dword [edi + 0x1cc]
xor edx, edx
push ecx
mov ecx, edi
mov dword [ebp - 0x194], ebx
call fcn.004f01b0
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
lea eax, [ebx + 0x21]
mov ecx, edi
push 0
push eax
call fcn.00480700
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4aa631
mov ecx, dword [ebp - 0x194]
lea edx, [ebx + 0x20]
inc ecx
mov dword [ebx], edx
push ecx
push esi
push edx
call fcn.0063d600
add esp, 0xc
cmp byte [edi + 0x4f], 0
je 0x4ac9c9
mov byte [edi + 0x4f], 0
mov byte [edi + 0x57], 1
jmp 0x4ac9cf
inc dword [edi + 0x1cc]
mov eax, dword [edi + 0x1c4]
mov dword [ebx + 0x18], eax
mov eax, dword [edi + 0x1d8]
mov dword [edi + 0x1c4], ebx
mov dword [ebx + 8], eax
mov eax, dword [edi + 0x1dc]
mov dword [ebx + 0xc], eax
mov eax, dword [edi + 0x1e0]
mov dword [ebx + 0x10], eax
mov eax, dword [edi + 0x1e4]
mov dword [ebx + 0x14], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [edi + 0x1c4]
xor ecx, ecx
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x190], ebx
test ebx, ebx
je 0x4aca60
nop word [eax + eax]
mov ecx, dword [ebx]
mov edx, esi
call fcn.00483a20
test eax, eax
je 0x4aca7e
mov ebx, dword [ebx + 0x18]
inc dword [ebp - 0x180]
mov dword [ebp - 0x190], ebx
test ebx, ebx
jne 0x4aca40
push esi
push 0x70d8d0
push dword [ebp - 0x170]
call fcn.004a1bd0
add esp, 0xc
mov eax, 1
jmp 0x4b06cf
cmp dword [edi + 0xb8], 0
mov edx, dword [ebp - 0x184]
jle 0x4aca96
cmp edx, 1
je 0x4b074c
cmp dword [ebx + 0x18], 0
jne 0x4acafc
cmp byte [edi + 0x57], 0
je 0x4acafc
mov dword [ebp - 0x18c], 1
cmp edx, 1
jne 0x4acb06
mov ecx, dword [ebp - 0x170]
call fcn.004a4ba0
mov ecx, eax
mov dword [ebp - 0x174], ecx
test ecx, ecx
jne 0x4b0af6
mov ecx, dword [ebp - 0x170]
mov byte [edi + 0x4f], 1
call fcn.004a4c00
cmp eax, 5
je 0x4b075c
mov eax, dword [ebp - 0x170]
mov byte [edi + 0x57], 0
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x174], eax
jmp 0x4acbe9
mov dword [ebp - 0x18c], 0
mov eax, dword [edi + 0x1cc]
sub eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp edx, 2
jne 0x4acb80
mov ecx, dword [edi + 0x18]
xor ebx, ebx
and ecx, 1
mov dword [ebp - 0x188], ecx
cmp dword [edi + 0x14], ebx
jle 0x4acb8a
mov eax, ecx
xor eax, 1
xor esi, esi
mov dword [ebp - 0x194], eax
nop
mov ecx, dword [edi + 0x10]
mov edx, 0x204
push eax
mov ecx, dword [ecx + esi + 4]
call fcn.00497d10
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov eax, dword [ebp - 0x194]
inc ebx
add esi, 0x10
cmp ebx, dword [edi + 0x14]
jl 0x4acb40
mov eax, dword [ebp - 0x180]
mov edx, dword [ebp - 0x184]
jmp 0x4acb8a
mov dword [ebp - 0x188], 0
xor ebx, ebx
cmp dword [edi + 0x14], ebx
jle 0x4acbc6
xor esi, esi
mov ecx, dword [edi + 0x10]
push eax
mov ecx, dword [ecx + esi + 4]
call fcn.00498010
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov eax, dword [ebp - 0x180]
inc ebx
mov edx, dword [ebp - 0x184]
add esi, 0x10
cmp ebx, dword [edi + 0x14]
jl 0x4acb93
cmp dword [ebp - 0x188], 0
je 0x4acbe3
xor edx, edx
mov ecx, edi
call fcn.004a6d10
mov ecx, edi
call fcn.004c6310
or dword [edi + 0x18], 1
mov ebx, dword [ebp - 0x190]
cmp dword [edi + 0x1c4], ebx
je 0x4acc5a
nop dword [eax]
nop word [eax + eax]
cmp dword [edi + 0x1e8], 0
mov ecx, dword [edi + 0x1c4]
mov eax, dword [ecx + 0x18]
mov dword [edi + 0x1c4], eax
je 0x4acc23
mov edx, ecx
mov ecx, edi
call fcn.00480330
jmp 0x4acc4c
cmp ecx, dword [edi + 0x138]
jb 0x4acc43
cmp ecx, dword [edi + 0x13c]
jae 0x4acc43
mov eax, dword [edi + 0x134]
mov dword [ecx], eax
mov dword [edi + 0x134], ecx
jmp 0x4acc4c
push ecx
call fcn.004802c0
add esp, 4
dec dword [edi + 0x1cc]
cmp dword [edi + 0x1c4], ebx
jne 0x4acc00
mov esi, dword [ebp - 0x184]
cmp esi, 1
jne 0x4acc8c
mov eax, dword [ebx + 0x18]
mov edx, ebx
mov ecx, edi
mov dword [edi + 0x1c4], eax
call fcn.004803b0
cmp dword [ebp - 0x18c], 0
jne 0x4ab35a
dec dword [edi + 0x1cc]
jmp 0x4accc2
cmp dword [ebp - 0x18c], 0
mov eax, dword [ebx + 8]
mov dword [edi + 0x1d8], eax
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x1dc], eax
mov eax, dword [ebx + 0x10]
mov dword [edi + 0x1e0], eax
mov eax, dword [ebx + 0x14]
mov dword [edi + 0x1e4], eax
je 0x4accc2
cmp esi, 2
jne 0x4ab35a
mov ecx, dword [ebp - 0x180]
mov edx, esi
push ecx
mov ecx, edi
call fcn.004f01b0
add esp, 4
mov dword [ebp - 0x174], eax
jmp 0x4ab360
mov edx, dword [ebp - 0x16c]
mov dword [ebp - 0x200], 0
mov edx, dword [edx + 8]
test edx, edx
je 0x4acd08
mov eax, dword [edi + 0x20]
and eax, 0x100000
or eax, 0
jne 0x4b079d
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 4]
mov eax, dword [edi + 0x10]
add ecx, ecx
mov esi, dword [eax + ecx*8 + 4]
test esi, esi
je 0x4acded
lea eax, [ebp - 0x200]
mov ecx, esi
push eax
call fcn.00496e60
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b07a7
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x170]
cmp dword [ecx + 8], eax
je 0x4acdf9
test byte [edx + 0x98], 0x80
je 0x4acdf9
cmp byte [edi + 0x4f], al
je 0x4acd75
cmp dword [edi + 0xb4], 1
jle 0x4acdf9
cmp dword [edx + 0x30], 0
jne 0x4acd90
mov eax, dword [edi + 0x1cc]
inc dword [edi + 0x1d0]
add eax, dword [edi + 0x1d0]
mov dword [edx + 0x30], eax
mov eax, dword [edx + 0x30]
mov ecx, edi
dec eax
xor edx, edx
push eax
call fcn.004f01b0
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4acdc1
mov eax, dword [ebp - 0x170]
mov ecx, esi
mov edx, dword [eax + 0x30]
call fcn.00497fb0
mov dword [ebp - 0x174], eax
mov edx, dword [ebp - 0x170]
mov eax, dword [edi + 0x1d8]
mov dword [edx + 0x48], eax
mov eax, dword [edi + 0x1dc]
mov dword [edx + 0x4c], eax
mov eax, dword [edi + 0x1e0]
mov dword [edx + 0x50], eax
mov eax, dword [edi + 0x1e4]
mov dword [edx + 0x54], eax
jmp 0x4acdf3
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x174]
mov esi, dword [ebp - 0x16c]
cmp word [esi + 2], 0
je 0x4ace35
mov eax, dword [ebp - 0x200]
cmp eax, dword [esi + 0xc]
jne 0x4b07eb
mov eax, esi
mov ecx, dword [eax + 4]
mov eax, dword [edi + 0x10]
add ecx, ecx
mov eax, dword [eax + ecx*8 + 0xc]
mov eax, dword [eax + 4]
cmp eax, dword [esi + 0x10]
jne 0x4b07eb
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4b06d5
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x24c]
mov ecx, dword [edi + 0x10]
push eax
mov eax, dword [edx + 4]
mov edx, dword [edx + 0xc]
add eax, eax
mov ecx, dword [ecx + eax*8 + 4]
call fcn.0049df60
mov edx, dword [ebp - 0x16c]
add esp, 4
mov ecx, dword [ebp - 0x170]
call fcn.004aa280
mov ecx, eax
mov eax, dword [ebp - 0x24c]
jmp 0x4aa62b
mov edx, dword [ebp - 0x16c]
mov esi, dword [edx + 4]
push dword [edx + 0xc]
mov edx, dword [edx + 8]
shl esi, 4
add esi, dword [edi + 0x10]
mov ecx, dword [esi + 4]
call fcn.0049dfc0
mov edx, dword [ebp - 0x16c]
add esp, 4
mov dword [ebp - 0x174], eax
mov eax, dword [edx + 8]
cmp eax, 1
jne 0x4acedb
mov ecx, dword [esi + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ecx], eax
or dword [edi + 0x18], 1
jmp 0x4acee9
cmp eax, 2
jne 0x4acee9
mov ecx, dword [esi + 0xc]
mov al, byte [edx + 0xc]
mov byte [ecx + 0x4c], al
mov eax, dword [ebp - 0x16c]
cmp dword [eax + 4], 1
jne 0x4acf0d
xor edx, edx
mov ecx, edi
call fcn.004a6d10
mov ecx, dword [ebp - 0x170]
and dword [ecx + 0x98], 0xfffffffc
jmp 0x4acf13
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4b06cf
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
test esi, esi
je 0x4acf60
mov eax, dword [esi + 0x34]
cmp eax, dword [ebx + 8]
je 0x4ad0a7
mov ecx, dword [ebp - 0x170]
mov eax, dword [ecx + 0x98]
and al, 3
cmp al, 1
je 0x4b0857
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x190], 0
mov ecx, dword [eax + 8]
mov esi, dword [eax + 0xc]
mov eax, esi
shl eax, 4
add eax, dword [edi + 0x10]
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x194], esi
mov ebx, dword [eax + 4]
mov dword [ebp - 0x1b4], ebx
cmp dl, 0x62
jne 0x4acfe4
mov edx, dword [ebp - 0x16c]
mov eax, dword [eax + 0xc]
movzx ebx, word [edx + 2]
mov edx, dword [ebp - 0x170]
and ebx, 8
mov al, byte [eax + 0x4c]
or ebx, 4
cmp al, byte [edx + 0x93]
jae 0x4acfe6
mov byte [edx + 0x93], al
jmp 0x4acfe6
xor ebx, ebx
mov eax, dword [ebp - 0x16c]
test byte [eax + 2], 0x10
je 0x4ad013
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x17c]
lea esi, [ecx + eax*8]
mov ecx, esi
call fcn.004a0bb0
mov eax, dword [esi]
mov esi, dword [ebp - 0x194]
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x16c]
mov al, byte [ecx + 1]
cmp al, 0xf7
jne 0x4ad02f
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x190], eax
movzx eax, word [eax + 8]
jmp 0x4ad03e
cmp al, 0xfd
jne 0x4ad038
mov eax, dword [ecx + 0x10]
jmp 0x4ad03e
mov eax, dword [ebp - 0x18c]
mov edx, dword [ecx + 4]
mov ecx, dword [ebp - 0x170]
push 0
push esi
push eax
call fcn.004a9ea0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4ac7a3
push dword [esi + 0x28]
mov eax, dword [ebp - 0x188]
mov edx, eax
push dword [ebp - 0x190]
mov ecx, dword [ebp - 0x1b4]
or dword [esi + 8], 4
push ebx
mov byte [esi + 2], 1
mov dword [esi + 0x34], eax
call fcn.004981a0
mov dword [ebp - 0x174], eax
add esp, 0xc
mov eax, dword [ebp - 0x190]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x16c]
cmp byte [eax + 1], 0xf7
setne al
mov byte [esi + 4], al
mov eax, dword [ebp - 0x16c]
mov cl, byte [eax + 2]
mov eax, dword [esi + 0x28]
and cl, 3
mov byte [eax + 3], cl
jmp 0x4ab35a
mov edx, dword [ebp - 0x16c]
mov esi, dword [ebp - 0x170]
push 0
push 0xffffffffffffffff
mov ecx, dword [edx + 8]
mov eax, dword [esi + 0x60]
mov edx, dword [edx + 4]
mov ebx, dword [eax + ecx*4]
mov ecx, esi
movsx eax, word [ebx + 0x38]
push eax
call fcn.004a9ea0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4ac7a3
or dword [esi + 8], 1
push dword [esi + 0x28]
mov byte [esi + 2], 1
mov ecx, dword [ebx + 0x2c]
mov dword [esi + 0x2c], ecx
mov al, byte [ebx + 4]
mov byte [esi + 4], al
mov eax, dword [ebx + 0x34]
mov dword [esi + 0x34], eax
mov eax, dword [ebx + 8]
xor eax, dword [esi + 8]
mov edx, dword [esi + 0x34]
and eax, 4
xor dword [esi + 8], eax
push ecx
mov ecx, dword [ebx + 0xc]
push 4
call fcn.004981a0
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x174], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [ecx + 0x60]
mov edx, dword [edx + 4]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4ad1a0
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x1c], 0
test ecx, ecx
je 0x4ad2af
mov edx, dword [esi + 0x34]
push 0
call fcn.0049db70
add esp, 4
mov dword [ebp - 0x174], eax
jmp 0x4ad2b5
mov eax, dword [ebp - 0x16c]
push 0
push 0xffffffffffffffff
push dword [eax + 8]
call fcn.004a9ea0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4ac7a3
mov eax, dword [ebp - 0x16c]
lea ebx, [esi + 0xc]
or dword [esi + 8], 1
xor edx, edx
push 0x41e
movzx ecx, word [eax + 2]
or ecx, 5
push ecx
mov ecx, dword [edi]
push ebx
push edi
call fcn.00495de0
add esp, 0x10
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4ad28f
mov ecx, dword [ebx]
lea edx, [eax + 1]
push eax
call fcn.00496e60
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4ad28f
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebx]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x194], eax
mov dword [esi + 0x2c], eax
test eax, eax
je 0x4ad26a
movzx eax, word [edx + 2]
lea edx, [esi + 0x34]
or eax, 2
push eax
call fcn.0049d950
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4ad264
push dword [esi + 0x28]
mov edx, dword [esi + 0x34]
push dword [ebp - 0x194]
mov ecx, dword [ebx]
push 4
call fcn.004981a0
add esp, 0xc
mov dword [ebp - 0x174], eax
mov byte [esi + 4], 0
jmp 0x4ad28f
push dword [esi + 0x28]
mov edx, 1
mov dword [esi + 0x34], 1
push 0
push 4
call fcn.004981a0
add esp, 0xc
mov dword [ebp - 0x174], eax
mov byte [esi + 4], 1
mov eax, dword [ebp - 0x16c]
xor ecx, ecx
cmp word [eax + 2], 8
mov eax, 4
cmovne ecx, eax
mov eax, dword [esi + 8]
and eax, 0xfffffffb
or ecx, eax
mov dword [esi + 8], ecx
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4b06d5
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
mov byte [esi + 2], 1
mov esi, dword [ebp - 0x16c]
add esi, 0x14
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
push 1
push 0xffffffffffffffff
push dword [edx + 8]
mov edx, dword [edx + 4]
call fcn.004a9ea0
add esp, 0xc
test eax, eax
je 0x4ac7a3
mov edx, dword [ebp - 0x16c]
push eax
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x2c], ecx
mov ecx, edi
mov edx, dword [edx + 0xc]
call fcn.004b2470
add esp, 4
mov dword [ebp - 0x174], eax
jmp 0x4ab360
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov edx, dword [eax + ecx*4]
mov edi, dword [edx + 0x10]
mov ecx, edi
mov esi, dword [edx + 0x14]
add ecx, 1
mov eax, esi
mov dword [edx + 0x10], ecx
adc eax, 0
or edi, esi
mov esi, dword [ebp - 0x16c]
mov dword [edx + 0x14], eax
je 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
push 3
push 0xffffffffffffffff
push dword [edx + 0xc]
mov edx, dword [edx + 4]
call fcn.004a9ea0
add esp, 0xc
test eax, eax
je 0x4ac7a3
mov ecx, dword [ebp - 0x16c]
mov byte [eax + 2], 1
mov ecx, dword [ecx + 8]
mov dword [eax + 0x20], ecx
mov byte [eax + 4], 1
mov dword [eax + 0x28], 0x71cc49
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
mov edx, dword [ecx + 0x60]
mov edx, dword [edx + eax*4]
call fcn.004a3e60
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov dword [eax + ecx*4], 0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x18c], 0
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x17c]
cmp byte [esi + 4], 0
mov word [esi + 2], 0
mov dword [esi + 0x1c], 0
je 0x4ad572
mov eax, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
movzx eax, word [ecx + 8]
mov dword [ebp - 0x194], eax
and al, 0x2e
mov dword [ebp - 0x190], ecx
cmp al, 2
jne 0x4ad489
xor edx, edx
call fcn.004aa010
mov ecx, dword [ebp - 0x190]
call fcn.004a0a50
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1c4], edx
mov edx, dword [ebp - 0x194]
movzx ecx, word [eax + 8]
mov word [eax + 8], dx
test cl, 0x24
jne 0x4ad525
test cl, 8
jne 0x4ad4eb
test cl, 1
jne 0x4afe71
cmp ebx, 0x18
jae 0x4afe71
mov ecx, dword [esi + 0x28]
lea edx, [ebp - 0x1cc]
call fcn.00498cf0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
jmp 0x4ad6b8
mov edx, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x1b4]
call fcn.00626110
mov eax, dword [ebp - 0x190]
movsd xmm1, qword [eax]
comisd xmm0, xmm1
jbe 0x4ad519
test bl, 1
lea eax, [ebx - 1]
cmove eax, ebx
mov ebx, eax
jmp 0x4ad525
comisd xmm1, xmm0
jbe 0x4ad525
test bl, 1
jne 0x4ad525
inc ebx
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x1cc]
push eax
push 0
push dword [ebp - 0x1c4]
xor edx, edx
push dword [ebp - 0x1b4]
call fcn.00498d50
mov dword [ebp - 0x174], eax
add esp, 0x10
mov eax, dword [ebp - 0x1b4]
mov dword [esi + 0x40], eax
mov eax, dword [ebp - 0x1c4]
mov dword [esi + 0x44], eax
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4b06cf
jmp 0x4ad603
mov eax, dword [esi + 0x28]
mov al, byte [eax + 3]
and al, 2
mov byte [ebp - 0x1a1], al
mov eax, 0
setne al
test bl, 1
mov dword [ebp - 0x18c], eax
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x6c], eax
mov ax, word [edx + 0x10]
mov word [ebp - 0x64], ax
sete al
mov byte [ebp - 0x5e], 0
lea eax, [eax*2 - 1]
mov byte [ebp - 0x62], al
mov eax, dword [edx + 0xc]
lea edx, [ebp - 0x6c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x1cc]
mov ecx, dword [esi + 0x28]
push eax
push 0
push 0
push 0
call fcn.00498d50
add esp, 0x10
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
cmp byte [ebp - 0x1a1], al
je 0x4ad603
cmp byte [ebp - 0x5e], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x18c], eax
je 0x4ad6b8
mov eax, dword [ebp - 0x1cc]
cmp ebx, 0x18
jl 0x4ad69d
test eax, eax
js 0x4ad654
jne 0x4ad61d
cmp ebx, 0x19
je 0x4ad654
mov dword [ebp - 0x1cc], 0
mov ecx, dword [ebp - 0x16c]
cmp dword [ebp - 0x18c], 0
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [ecx + 0x14]
cmove esi, ecx
mov ecx, dword [ebp - 0x170]
add esi, 0x14
jmp 0x4aa381
push 0
push dword [esi + 0x28]
mov dword [ebp - 0x1cc], 0
call fcn.004993a0
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4ad627
mov ecx, dword [ebp - 0x170]
cmp eax, 0x65
jne 0x4b06d5
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x1cc], 1
jmp 0x4aa3ef
test eax, eax
jg 0x4ad6ca
jne 0x4ad6a8
cmp ebx, 0x16
je 0x4ad6ca
mov eax, dword [esi + 0x28]
xor ecx, ecx
cmp byte [eax], cl
setne cl
mov dword [ebp - 0x1cc], ecx
cmp dword [ebp - 0x1cc], 0
jne 0x4afe71
jmp 0x4ad627
push 0
push dword [esi + 0x28]
mov dword [ebp - 0x1cc], 0
call fcn.00499500
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4ad627
mov ecx, dword [ebp - 0x170]
cmp eax, 0x65
jne 0x4b06d5
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x1cc], 1
jmp 0x4aa3ef
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
mov eax, edx
mov eax, dword [eax + 8]
shl eax, 3
xor eax, dword [ecx + 8]
and eax, 8
xor dword [ecx + 8], eax
mov ecx, dword [ebp - 0x170]
mov esi, edx
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
test byte [eax + 8], 8
jne 0x4aa637
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov edx, dword [ebp - 0x17c]
mov eax, dword [eax + 0x60]
mov ebx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x188], ebx
cmp dword [ecx + 0x10], 0
mov eax, dword [ecx + 0xc]
lea eax, [eax + eax*4]
lea esi, [edx + eax*8]
jle 0x4ad7d2
mov eax, dword [ebx + 0x2c]
lea ebx, [ebp - 0xa4]
mov dword [ebp - 0xa4], eax
mov ax, word [ecx + 0x10]
mov word [ebp - 0x9c], ax
xor eax, eax
mov dword [ebp - 0xa0], esi
mov esi, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
jmp 0x4ad822
mov eax, 0x4000
test word [esi + 8], ax
je 0x4ad7ec
mov ecx, esi
call fcn.004a0660
test eax, eax
jne 0x4ac7a3
mov ecx, dword [ebx + 0x2c]
call fcn.004a5850
mov ebx, eax
mov dword [ebp - 0x190], ebx
test ebx, ebx
je 0x4ac7a3
mov edx, dword [esi + 0xc]
push ebx
push dword [esi + 0x10]
mov esi, dword [ebp - 0x188]
mov ecx, dword [esi + 0x2c]
call fcn.004a58a0
mov ecx, dword [ebp - 0x16c]
add esp, 8
mov byte [ebx + 0xa], 0
cmp byte [ecx], 0x1b
mov dword [ebp - 0x188], 0
jne 0x4ad85e
movzx edx, word [ebx + 8]
xor ecx, ecx
test edx, edx
je 0x4ad85e
mov eax, dword [ebx + 4]
add eax, 8
test byte [eax], 1
jne 0x4ad854
inc ecx
add eax, 0x28
cmp ecx, edx
jl 0x4ad845
jmp 0x4ad85e
mov dword [ebp - 0x188], 1
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x250]
push eax
push 0
push 0
push 0
mov edx, ebx
call fcn.00498d50
mov dword [ebp - 0x174], eax
add esp, 0x10
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x4ad891
mov edx, eax
mov ecx, edi
call fcn.00480370
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4b06cf
mov eax, dword [ebp - 0x250]
xor ecx, ecx
test eax, eax
mov dword [esi + 0x20], eax
mov al, 1
mov byte [esi + 3], 0
sete cl
mov dword [esi + 0x1c], 0
sub al, cl
mov byte [esi + 2], al
mov esi, dword [ebp - 0x16c]
cmp byte [esi], 0x1d
jne 0x4ad8ee
test ecx, ecx
jne 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
cmp dword [ebp - 0x188], 0
jne 0x4afe77
test ecx, ecx
je 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 0xc]
mov ebx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 0x24
jne 0x4ad999
movups xmm1, xmmword [ebx + eax*8]
movups xmm0, xmmword [ebx + eax*8 + 0x10]
movups xmmword [ebp - 0x58], xmm1
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [ebx + eax*8 + 0x20]
psrldq xmm1, 8
movd eax, xmm1
movq qword [ebp - 0x38], xmm0
test al, 4
jne 0x4ad98b
test al, 8
jne 0x4ad972
test al, 2
je 0x4ad983
mov eax, 1
lea ecx, [ebp - 0x58]
mov edx, eax
call fcn.004aa010
jmp 0x4ad97a
lea ecx, [ebp - 0x58]
call fcn.004a0b50
mov ecx, dword [ebp - 0x170]
mov al, byte [ebp - 0x50]
test al, 4
je 0x4aa3f5
mov ebx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x54]
jmp 0x4ad9ac
mov ebx, dword [ebp - 0x17c]
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
mov ebx, dword [ebx + eax*8]
mov edx, dword [ecx + eax*8 + 4]
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x214], 0
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
lea eax, [ebp - 0x214]
push eax
push 0
push edx
mov ecx, dword [esi + 0x28]
xor edx, edx
push ebx
call fcn.00498d50
mov dword [ebp - 0x174], eax
add esp, 0x10
mov eax, dword [ebp - 0x188]
mov dword [esi + 0x44], eax
mov eax, dword [ebp - 0x214]
mov dword [esi + 0x40], ebx
mov word [esi + 2], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], eax
mov esi, dword [ebp - 0x16c]
test eax, eax
je 0x4ace2f
cmp dword [esi + 8], 0
jne 0x4afe77
mov ecx, 0x159cf
call fcn.0050b250
mov dword [ebp - 0x174], eax
jmp 0x4ace35
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004aa280
mov edx, dword [ebx + 4]
mov ebx, dword [ebp - 0x170]
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
mov ecx, dword [ebx + 0x60]
mov edx, dword [ecx + edx*4]
mov ecx, dword [edx + 0x10]
mov dword [eax], ecx
mov ecx, dword [edx + 0x14]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 4]
mov eax, dword [ebx + 0x60]
mov eax, dword [eax + ecx*4]
mov ecx, ebx
mov ebx, dword [ebp - 0x1f0]
add dword [eax + 0x10], 1
adc dword [eax + 0x14], 0
add esi, 0x14
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
xorps xmm0, xmm0
mov edx, ebx
movlpd qword [ebp - 0x18], xmm0
mov dword [ebp - 0x1f4], 0
call fcn.004aa280
mov edx, dword [ebx + 4]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax + 0x60]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0x180], eax
test byte [eax + 8], 2
jne 0x4adb54
mov ecx, dword [eax + 0x28]
lea edx, [ebp - 0x1f4]
call fcn.00498cf0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
cmp dword [ebp - 0x1f4], eax
je 0x4adb0f
mov ebx, 1
xor esi, esi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
jmp 0x4adb5a
mov eax, dword [ebp - 0x180]
mov esi, dword [eax + 0x28]
mov ecx, esi
call fcn.004982e0
mov ebx, dword [esi + 0x20]
mov esi, dword [esi + 0x24]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
cmp esi, 0x7fffffff
jl 0x4adb46
jg 0x4adb3a
cmp ebx, 0xffffffff
jb 0x4adb46
mov eax, dword [ebp - 0x180]
or dword [eax + 8], 2
jmp 0x4adb5a
add ebx, 1
mov dword [ebp - 0x18], ebx
adc esi, 0
mov dword [ebp - 0x14], esi
jmp 0x4adb5a
mov esi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x4adbfe
mov eax, dword [ebp - 0x170]
mov edx, dword [eax + 0xc8]
test edx, edx
je 0x4adb96
mov eax, dword [edx + 4]
test eax, eax
je 0x4adb8b
mov edx, eax
mov eax, dword [edx + 4]
test eax, eax
jne 0x4adb82
mov eax, dword [edx + 0x10]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*8]
jmp 0x4adba2
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x17c]
lea ecx, [ecx + eax*8]
mov dword [ebp - 0x188], ecx
call fcn.004a0bb0
mov eax, dword [ebp - 0x188]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
cmp ecx, 0xffffffff
jne 0x4adbc9
cmp edx, 0x7fffffff
je 0x4adc81
mov edi, dword [ebp - 0x180]
test byte [edi + 8], 2
mov edi, dword [ebp - 0x1bc]
jne 0x4adc81
add ecx, 1
adc edx, 0
cmp esi, edx
jg 0x4adbf9
jl 0x4adbef
cmp ebx, ecx
jae 0x4adbf9
mov ebx, ecx
mov esi, edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
mov dword [eax], ebx
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x180]
test byte [eax + 8], 2
je 0x4adc91
mov dword [ebp - 0x188], 0
lea eax, [ebp - 0x18]
push eax
push 8
call fcn.00482c10
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x1f4]
mov ebx, dword [ebp - 0x18]
and esi, 0x3fffffff
push eax
mov eax, dword [ebp - 0x180]
add ebx, 1
push 0
adc esi, 0
mov dword [ebp - 0x18], ebx
push esi
mov ecx, dword [eax + 0x28]
xor edx, edx
push ebx
mov dword [ebp - 0x14], esi
call fcn.00498d50
add esp, 0x18
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
cmp dword [ebp - 0x1f4], eax
jne 0x4adc8b
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp eax, 0x64
jl 0x4adc18
mov eax, 0xd
jmp 0x4b06cf
mov eax, dword [ebp - 0x180]
mov byte [eax + 3], 0
mov dword [eax + 0x1c], 0
mov eax, dword [ebp - 0x194]
mov dword [eax], ebx
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x17c]
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov ecx, ebx
mov ebx, dword [ebp - 0x17c]
cmp byte [ecx + 1], 0xfa
mov eax, dword [ecx + 0xc]
lea eax, [eax + eax*4]
mov ebx, dword [ebx + eax*8]
mov eax, dword [edi + eax*8 + 4]
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0x194], eax
mov dword [ebp - 0xc4], eax
jne 0x4add4d
cmp dword [edi + 0xf0], 0
je 0x4add4d
movsx ecx, byte [esi + 1]
mov eax, dword [edi + 0x10]
add ecx, ecx
mov ecx, dword [eax + ecx*8]
mov dword [ebp - 0x190], ecx
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x194]
jmp 0x4add61
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x190], 0
test byte [ecx + 2], 1
je 0x4add76
mov edi, dword [ebp - 0x170]
inc dword [edi + 0x2c]
mov edi, dword [ebp - 0x1bc]
test byte [ecx + 2], 0x20
je 0x4add82
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], eax
mov ebx, dword [ebp - 0x17c]
movzx ecx, word [ecx + 2]
mov eax, dword [ebx + edx*8 + 0x10]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebx + edx*8 + 0xc]
mov dword [ebp - 0xb4], eax
test cl, 0x10
je 0x4addaa
mov ebx, dword [esi + 0x20]
jmp 0x4addac
xor ebx, ebx
mov eax, dword [ebp - 0x17c]
mov edi, 0x4000
test word [eax + edx*8 + 8], di
mov edi, dword [ebp - 0x1bc]
je 0x4addcf
mov eax, dword [eax + edx*8]
mov dword [ebp - 0xb0], eax
jmp 0x4addd9
mov dword [ebp - 0xb0], 0
and ecx, 0xa
mov dword [ebp - 0xd0], 0
push ebx
push ecx
mov ecx, dword [esi + 0x28]
lea edx, [ebp - 0xd0]
call fcn.0049ce50
add esp, 8
mov dword [ebp - 0x174], eax
mov byte [esi + 3], 0
mov dword [esi + 0x1c], 0
test eax, eax
jne 0x4b06cf
mov eax, dword [ebp - 0x188]
test eax, eax
je 0x4aa631
push dword [ebp - 0xc4]
mov ecx, 0x17
push dword [ebp - 0xc8]
push dword [eax]
mov eax, dword [ebp - 0x16c]
push dword [ebp - 0x190]
test byte [eax + 2], 4
mov eax, 0x12
cmovne eax, ecx
push eax
push dword [edi + 0xec]
mov eax, dword [edi + 0xf0]
call eax
add esp, 0x18
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
cmp byte [edx + 1], 0xfa
mov eax, dword [edx + 8]
mov ecx, dword [edx + 4]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov ebx, dword [eax + ecx*4]
jne 0x4adef5
cmp dword [edi + 0xf0], 0
je 0x4adef5
movsx ecx, byte [ebx + 1]
mov eax, dword [edi + 0x10]
add ecx, ecx
test byte [edx + 2], 2
mov esi, dword [edx + 0x10]
mov dword [ebp - 0x194], esi
mov eax, dword [eax + ecx*8]
mov dword [ebp - 0x188], eax
je 0x4adf01
cmp byte [ebx + 4], 0
je 0x4adf01
mov esi, dword [ebx + 0x28]
mov ecx, esi
call fcn.004982e0
mov eax, dword [esi + 0x20]
mov edx, dword [ebp - 0x16c]
mov dword [ebx + 0x40], eax
mov eax, dword [esi + 0x24]
mov esi, dword [ebp - 0x194]
mov dword [ebx + 0x44], eax
jmp 0x4adf01
mov dword [ebp - 0x188], 0
xor esi, esi
mov dl, byte [edx + 2]
mov ecx, dword [ebx + 0x28]
call fcn.0049d2a0
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x20], 0
test eax, eax
jne 0x4b06d5
test byte [ebp - 0x190], 1
je 0x4ab2b5
inc dword [ecx + 0x2c]
mov eax, dword [edi + 0xf0]
test eax, eax
je 0x4ab2b5
test byte [esi + 0x24], 0x20
jne 0x4ab2b5
push dword [ebx + 0x44]
push dword [ebx + 0x40]
push dword [esi]
push dword [ebp - 0x188]
push 9
push dword [edi + 0xec]
call eax
add esp, 0x18
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [ecx + 0x2c]
add dword [edi + 0x68], eax
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
mov dword [edi + 0x64], eax
mov edi, dword [ebp - 0x1bc]
mov dword [ecx + 0x2c], 0
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x21c], 0
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
mov eax, dword [edx + 0xc]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea edx, [edx + eax*8]
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [ebp - 0x16c]
push dword [eax + 0x10]
call fcn.004b49a0
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov esi, dword [ebp - 0x16c]
cmp dword [ebp - 0x21c], eax
jne 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebx + 8]
lea eax, [eax + eax*4]
lea edx, [ecx + eax*8]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
call fcn.004b4900
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov eax, ebx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x170]
mov esi, ebx
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004aa280
mov edx, dword [ebx + 4]
mov esi, eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax + 0x60]
mov ecx, dword [ecx + edx*4]
mov ebx, dword [ecx + 0x28]
mov ecx, ebx
call fcn.004982e0
mov eax, dword [ebx + 0x2c]
cmp eax, dword [edi + 0x6c]
ja 0x4af7a8
push esi
push eax
xor edx, edx
mov ecx, ebx
call fcn.004a1470
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov ecx, dword [ebp - 0x16c]
cmp dword [ecx + 0xc], eax
jne 0x4aa631
mov eax, 0x1000
test word [esi + 8], ax
je 0x4aa631
mov ecx, esi
call fcn.004a0610
test eax, eax
jne 0x4ac7a3
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov ecx, dword [ebp - 0x16c]
mov ebx, eax
mov eax, dword [ebp - 0x170]
mov edx, dword [ecx + 4]
mov ecx, dword [eax + 0x60]
mov esi, dword [ecx + edx*4]
cmp byte [esi + 2], 0
je 0x4ae18e
mov eax, 1
mov word [ebx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
cmp byte [esi + 3], 0
je 0x4ae1c8
mov ecx, dword [esi + 0x40]
mov dword [ebp - 0x20], ecx
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x1c], eax
mov dword [ebx], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
cmp byte [esi], 2
jne 0x4ae22d
mov ecx, dword [esi + 0x28]
lea edx, [ebp - 0x20]
push edx
push ecx
mov esi, dword [ecx]
mov eax, dword [esi]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [ebp - 0x170]
add esp, 8
mov edx, esi
mov dword [ebp - 0x174], eax
call fcn.004a6e00
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4b06cf
mov ecx, dword [ebp - 0x20]
mov dword [ebx], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 0x28]
cmp byte [eax], 0
je 0x4ae24c
mov ecx, esi
call fcn.004a5470
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
jmp 0x4ae254
xor ecx, ecx
mov dword [ebp - 0x174], ecx
cmp byte [esi + 2], 0
je 0x4ae283
mov eax, 1
mov word [ebx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov esi, dword [esi + 0x28]
mov ecx, esi
call fcn.004982e0
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x20], ecx
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x1c], eax
mov dword [ebx], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
cmp byte [ecx], 0
mov byte [ecx + 2], 1
mov dword [ecx + 0x1c], 0
jne 0x4aa637
mov ecx, dword [ecx + 0x28]
call fcn.004942f0
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x220], 0
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov ecx, dword [esi + 0x28]
cmp dl, 0x82
jne 0x4ae337
mov dword [esi + 0x20], 0xffffffff
cmp byte [ecx], 0
je 0x4aa631
lea edx, [ebp - 0x220]
call fcn.00498cf0
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x220]
mov byte [esi + 2], al
mov byte [esi + 3], 0
mov dword [esi + 0x1c], 0
test ecx, ecx
jne 0x4b08db
mov esi, dword [ebp - 0x16c]
cmp dword [esi + 8], ecx
jle 0x4aa637
test eax, eax
jne 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
lea edx, [ebp - 0x224]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
mov esi, dword [eax + 0x28]
mov ecx, esi
call fcn.00498cc0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
cmp dword [ebp - 0x224], eax
jne 0x4afe71
mov ecx, esi
call fcn.00499210
test edx, edx
jl 0x4aa631
jg 0x4ae3f3
test eax, eax
jb 0x4aa631
push edx
push eax
call fcn.00484c80
mov esi, dword [ebp - 0x16c]
add esp, 8
mov ecx, dword [ebp - 0x170]
cwde
cmp eax, dword [esi + 0xc]
jge case.0x4aa3a5.86
mov dword [ebp - 0x224], 1
jmp 0x4aa3f5
inc dword [ecx + 0xac]
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1fc], 1
mov ecx, dword [edx + 4]
lea edx, [ebp - 0x1fc]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
cmp byte [esi], 1
jne 0x4ae45b
mov ecx, esi
call fcn.004b4810
jmp 0x4ae46e
mov ecx, dword [esi + 0x28]
call fcn.00498cc0
mov byte [esi + 3], 0
mov dword [esi + 0x1c], 0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov eax, dword [ebp - 0x1fc]
mov byte [esi + 2], al
mov esi, dword [ebp - 0x16c]
test eax, eax
jne 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov edx, esi
mov ecx, edi
call fcn.004b4870
jmp 0x4ae4f0
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
push dword [edx + 0xc]
mov esi, dword [eax + ecx*4]
mov eax, dword [edx + 0x10]
push dword [esi + 0x28]
call eax
add esp, 8
mov dword [ebp - 0x174], eax
mov dword [esi + 0x1c], 0
test eax, eax
jne 0x4ae520
mov ecx, dword [ebp - 0x170]
mov byte [esi + 2], al
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax + 2]
inc dword [ecx + eax*4 + 0xa4]
jmp case.0x4aa3a5.11
cmp eax, 0x65
jne 0x4b06cf
xor ecx, ecx
mov byte [esi + 2], 1
mov dword [ebp - 0x174], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
cmp dword [edi + 0x110], 0
jne 0x4b0b4f
mov ebx, dword [ebp - 0x178]
cmp dword [ebp - 0x1f0], ebx
jb case.0x4aa3a5.86
mov eax, dword [edi + 0x148]
test eax, eax
je 0x4aa637
add ebx, dword [edi + 0x150]
push dword [edi + 0x14c]
mov dword [ebp - 0x178], ebx
call eax
add esp, 4
test eax, eax
jne 0x4b0ce9
cmp dword [ebp - 0x1f0], ebx
jae 0x4ae560
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov esi, dword [ebp - 0x17c]
mov ecx, dword [edx + 4]
mov edx, dword [ebp - 0x170]
mov eax, dword [edx + 0x60]
mov ebx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x16c]
test byte [ecx + 2], 1
mov eax, dword [ecx + 8]
lea eax, [eax + eax*4]
lea esi, [esi + eax*8]
je 0x4ae5e2
inc dword [edx + 0x2c]
mov eax, 0x4000
test word [esi + 8], ax
je 0x4ae602
mov ecx, esi
call fcn.004a0660
test eax, eax
jne 0x4b06cf
mov ecx, dword [ebp - 0x16c]
cmp byte [ecx], 0x83
jne 0x4ae61b
mov edx, esi
mov ecx, ebx
call fcn.004b3890
mov dword [ebp - 0x174], eax
jmp 0x4ab360
mov eax, dword [esi + 0xc]
cdq
mov dword [ebp - 0x160], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x168], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x15c], edx
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea eax, [edx + eax*8]
mov dword [ebp - 0x154], eax
mov ax, word [ecx + 0x10]
mov word [ebp - 0x150], ax
movzx eax, word [ecx + 2]
test al, 0x10
je 0x4ae661
mov ecx, dword [ebx + 0x20]
jmp 0x4ae663
xor ecx, ecx
push ecx
mov ecx, dword [ebx + 0x28]
lea edx, [ebp - 0x168]
and eax, 0xa
push eax
call fcn.0049ce50
add esp, 8
mov dword [ebx + 0x1c], 0
mov dword [ebp - 0x174], eax
jmp 0x4ab360
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [esi + 0x2c]
mov ebx, dword [esi + 0x28]
mov dword [ebp - 0x94], eax
mov ax, word [edx + 0xc]
mov word [ebp - 0x8c], ax
mov eax, dword [edx + 8]
lea edx, [ebp - 0x94]
mov byte [ebp - 0x8a], 0
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov ecx, ebx
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x254]
push eax
push 0
push 0
push 0
call fcn.00498d50
add esp, 0x10
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
cmp dword [ebp - 0x254], eax
jne 0x4ae71d
mov dl, 4
mov ecx, ebx
call fcn.0049d2a0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov eax, dword [esi + 0x28]
cmp byte [eax], 0
je 0x4ae785
mov ecx, esi
call fcn.004a5470
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov edx, dword [ebp - 0x16c]
jmp 0x4ae78d
xor ecx, ecx
mov dword [ebp - 0x174], ecx
cmp byte [esi + 2], 0
jne 0x4ae863
mov edx, dword [esi + 0x28]
lea eax, [ebp - 0x210]
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x210], xmm0
call fcn.004a6ad0
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06cf
mov eax, dword [ebp - 0x16c]
cmp byte [eax], 0x86
jne 0x4ae825
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x210]
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x20c]
mov dword [ecx + 0x44], eax
mov eax, dword [ebp - 0x16c]
mov word [ecx + 2], 0x100
mov eax, dword [eax + 0x10]
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x24], esi
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ecx, dword [ebp - 0x170]
mov edx, eax
call fcn.004aa280
mov ecx, dword [ebp - 0x210]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x20c]
mov dword [eax + 4], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.004a0e90
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
cmp byte [ebp - 0x1a1], 0x27
mov dword [ebp - 0x1ec], 0
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov edx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x16c]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x270], eax
mov ax, word [ecx + 0x10]
mov word [ebp - 0x268], ax
sbb al, al
mov byte [ebp - 0x266], al
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov ecx, edi
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x270]
push eax
call fcn.004a6c30
mov dword [ebp - 0x174], eax
add esp, 8
mov eax, dword [ebp - 0x16c]
test byte [eax], 1
mov eax, dword [ebp - 0x1ec]
je 0x4ae927
neg eax
jmp 0x4ae928
inc eax
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x1ec], eax
test ecx, ecx
jne 0x4b08db
mov esi, dword [ebp - 0x16c]
test eax, eax
jg 0x4afe77
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov esi, eax
mov eax, 1
mov word [esi + 8], ax
mov ecx, dword [edi + 0xc0]
inc ecx
cmp dword [edi + 0xb4], ecx
jg 0x4b0861
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x204]
mov ecx, dword [edi + 0x10]
push eax
mov dword [ebp - 0x204], 0
mov ebx, dword [edx + 0xc]
mov eax, ebx
mov edx, dword [edx + 4]
add eax, eax
mov ecx, dword [ecx + eax*8 + 4]
call fcn.0049df10
mov ecx, dword [ebp - 0x204]
add esp, 4
mov dword [ebp - 0x174], eax
mov eax, 4
mov word [esi + 8], ax
mov eax, ecx
cdq
mov dword [esi], eax
mov eax, dword [ebp - 0x174]
mov dword [esi + 4], edx
test eax, eax
jne 0x4b06cf
test ecx, ecx
je 0x4aa631
mov eax, dword [ebp - 0x16c]
mov edx, ebx
push dword [eax + 4]
push ecx
mov ecx, edi
call fcn.004c8fb0
lea ecx, [ebx + 1]
add esp, 8
mov byte [ebp - 0x1cd], cl
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x24], 0
cmp dword [edx + 0xc], ecx
cmove eax, ecx
mov ecx, dword [edi + 0x10]
push eax
mov eax, dword [edx + 8]
mov edx, dword [edx + 4]
add eax, eax
mov ecx, dword [ecx + eax*8 + 4]
call fcn.0049db70
mov esi, dword [ebp - 0x16c]
add esp, 4
mov dword [ebp - 0x174], eax
cmp dword [esi + 0xc], 0
je 0x4aea9b
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x24]
add dword [ecx + 0x2c], eax
mov ecx, dword [esi + 0xc]
test ecx, ecx
jle 0x4aea95
mov ebx, dword [ebp - 0x17c]
lea ecx, [ecx + ecx*4]
cdq
add dword [ebx + ecx*8], eax
adc dword [ebx + ecx*8 + 4], edx
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4b06d5
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
cmp byte [ecx], 1
jne 0x4aeb01
mov edx, dword [ecx + 0x28]
mov ecx, edi
call fcn.004b2ac0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ecx, dword [ecx + 0x28]
push 0
mov edx, dword [ecx + 0x40]
mov ecx, dword [ecx + 8]
call fcn.0049db70
add esp, 4
mov dword [ebp - 0x174], eax
jmp 0x4ab360
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov esi, eax
mov dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x16c]
lea edx, [ebp - 0x218]
mov ecx, dword [eax + 4]
push dword [eax + 0xc]
shl ecx, 4
add ecx, dword [edi + 0x10]
mov ecx, dword [ecx + 4]
call fcn.0049d950
mov ecx, dword [ebp - 0x170]
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4b06d5
mov eax, dword [ebp - 0x218]
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
mov esi, dword [ebp - 0x16c]
add esi, 0x14
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
inc byte [edi + 0x5a]
push 0
push 0
push 0
push dword [edx + 0x10]
push edi
call fcn.004d87a0
add esp, 0x14
mov dword [ebp - 0x174], eax
dec byte [edi + 0x5a]
jmp 0x4ab360
mov edx, dword [ebp - 0x16c]
mov ecx, dword [edx + 0x10]
mov esi, dword [edx + 4]
test ecx, ecx
jne 0x4aec17
mov eax, dword [edi + 0x10]
mov ecx, esi
add ecx, ecx
push dword [eax + ecx*8 + 0xc]
call fcn.004cd210
mov eax, dword [ebp - 0x170]
add esp, 4
and dword [edi + 0x18], 0xffffffef
add eax, 0x7c
mov edx, esi
mov ecx, edi
push 1
push eax
call fcn.004dd170
mov ecx, dword [ebp - 0x170]
add esp, 8
or dword [edi + 0x18], 1
mov dword [ebp - 0x174], eax
and dword [ecx + 0x98], 0xfffffffc
jmp 0x4aecce
mov eax, dword [ebp - 0x170]
add eax, 0x7c
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x80], eax
add esi, esi
mov eax, dword [edi + 0x10]
push ecx
push 0x70da5c
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x74], 0
push dword [eax + esi*8]
push 0x70da30
push edi
call fcn.00482940
mov esi, eax
add esp, 0x14
test esi, esi
je 0x4b0878
push 0
lea eax, [ebp - 0x84]
mov byte [edi + 0xa5], 1
push eax
push fcn.004dcf80
push esi
push edi
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x70], 0
call fcn.004d87a0
add esp, 0x14
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4aecb2
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4aecb2
cmp dword [ebp - 0x70], eax
jne 0x4aecb2
mov ecx, 0x15f51
call fcn.0050b250
mov dword [ebp - 0x174], eax
mov edx, esi
mov ecx, edi
call fcn.00480370
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
mov byte [edi + 0xa5], 0
test eax, eax
jne 0x4b0882
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, edi
mov edx, dword [edx + 4]
call fcn.004c4080
mov dword [ebp - 0x174], eax
jmp 0x4ab360
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push dword [edx + 0x10]
mov edx, dword [edx + 4]
call fcn.004c6690
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push dword [edx + 0x10]
mov edx, dword [edx + 4]
call fcn.004c5e20
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push dword [edx + 0x10]
mov edx, dword [edx + 4]
call fcn.004ea710
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 0x10]
add edx, 4
lea esi, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ecx + esi*8]
mov ecx, dword [edi + 0x10]
inc eax
push eax
mov eax, dword [ebp - 0x16c]
push dword [eax + 8]
movzx eax, word [eax + 2]
add eax, eax
mov ecx, dword [ecx + eax*8 + 4]
call fcn.0049eb50
add esp, 0xc
mov dword [ebp - 0x194], eax
mov ecx, ebx
call fcn.004a0e90
mov eax, dword [ebp - 0x234]
test eax, eax
je 0x4aee41
mov ecx, dword [ebp - 0x194]
test ecx, ecx
je 0x4ac7a3
mov edi, dword [ebp - 0x17c]
dec eax
cdq
push fcn.004802c0
push 1
sub dword [edi + esi*8], eax
push 0xffffffffffffffff
sbb dword [edi + esi*8 + 4], edx
mov edx, ecx
mov ecx, ebx
call fcn.004a1160
add esp, 0xc
movzx edx, byte [ebp - 0x1ac]
mov ecx, ebx
call fcn.004a0400
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
test byte [ecx + eax*8 + 8], 0x10
lea esi, [ecx + eax*8]
mov eax, dword [edx + 8]
lea ebx, [eax + eax*4]
jne 0x4aeea0
mov ecx, esi
call fcn.004a0fa0
test eax, eax
jne 0x4ac7a3
mov edi, dword [ebp - 0x17c]
push dword [edi + ebx*8 + 4]
mov ecx, dword [esi + 0x10]
push dword [edi + ebx*8]
call fcn.0048ad10
add esp, 8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 0x10
lea esi, [ebx + eax*8]
je 0x4aef2e
mov ecx, dword [esi + 0x10]
lea edx, [ebp - 0x260]
call fcn.0048b100
test eax, eax
je 0x4aef2e
mov eax, dword [ebp - 0x16c]
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
call fcn.004a0ef0
add esp, 8
jmp 0x4ae535
mov ecx, esi
call fcn.004a0e90
jmp 0x4b0026
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
test byte [ecx + eax*8 + 8], 0x10
lea esi, [ecx + eax*8]
mov eax, dword [edx + 0xc]
lea ebx, [eax + eax*4]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x188], eax
jne 0x4aef7a
mov ecx, esi
call fcn.004a0fa0
test eax, eax
jne 0x4ac7a3
mov eax, dword [ebp - 0x188]
mov edi, dword [ebp - 0x17c]
test eax, eax
je 0x4aefa8
push dword [edi + ebx*8 + 4]
mov ecx, dword [esi + 0x10]
mov edx, eax
push dword [edi + ebx*8]
call fcn.0048b160
add esp, 8
test eax, eax
jne 0x4afe71
mov eax, dword [ebp - 0x188]
test eax, eax
js 0x4aa631
jmp 0x4aeea6
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 0xc]
mov esi, dword [edx + 0x10]
mov dword [ebp - 0x1b4], esi
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
mov eax, edx
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x18c], ecx
cmp word [eax + 2], 0
je 0x4af009
mov eax, dword [edx + 0xc8]
mov ecx, dword [esi + 0x14]
test eax, eax
je 0x4af003
cmp dword [eax + 0x1c], ecx
je 0x4b05c5
mov eax, dword [eax + 4]
test eax, eax
jne 0x4aeff3
mov ecx, dword [ebp - 0x18c]
mov eax, dword [edx + 0xd0]
cmp eax, dword [edi + 0x94]
jge 0x4b08a9
test byte [ecx + 8], 0x10
jne 0x4af1eb
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 8]
add eax, ecx
test ecx, ecx
lea esi, [eax + 1]
cmovne esi, eax
lea eax, [esi + 2]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*2]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [eax + 4]
add eax, 7
mov eax, eax
test eax, eax
jns 0x4af053
add eax, 7
sar eax, 3
lea eax, [eax + ecx*4]
mov ecx, edi
mov dword [ebp - 0x194], eax
cdq
push edx
push eax
call fcn.00480600
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4ac7a3
mov ecx, dword [ebp - 0x18c]
call fcn.004a09a0
mov ecx, dword [ebp - 0x18c]
mov eax, 0x410
mov edx, dword [ebp - 0x16c]
sub edx, dword [ebp - 0x1a8]
mov word [ecx + 8], ax
mov eax, dword [ebp - 0x194]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x170]
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x24], 0x4a3490
mov ecx, dword [ebp - 0x1b4]
mov dword [ebx], eax
mov dword [ebx + 0x3c], esi
mov eax, dword [ecx + 0xc]
mov dword [ebx + 0x40], eax
mov eax, 0x66666667
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x170]
mov dword [ebx + 0x30], eax
mov eax, dword [edx + 0x58]
mov dword [ebx + 0x10], eax
mov eax, dword [edx + 0x18]
mov dword [ebx + 0x38], eax
mov eax, dword [edx + 0x60]
mov dword [ebx + 0x14], eax
mov eax, dword [edx + 0x1c]
mov dword [ebx + 0x2c], eax
mov eax, dword [edx + 0x68]
mov dword [ebx + 8], eax
mov eax, dword [edx + 0x6c]
mov dword [ebx + 0x34], eax
mov eax, dword [ecx + 0x14]
mov dword [ebx + 0x1c], eax
lea eax, [esi + 2]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
lea eax, [ebx + 0x50]
cmp eax, ecx
je 0x4af12e
mov esi, 0x80
nop
mov word [eax + 8], si
mov dword [eax + 0x20], edi
add eax, 0x28
cmp eax, ecx
jne 0x4af120
mov esi, dword [ebp - 0x1b4]
inc dword [edx + 0xd0]
lea ecx, [ebx + 0x50]
mov eax, dword [edx + 0xc8]
mov dword [ebx + 4], eax
mov eax, dword [edi + 0x28]
mov dword [ebx + 0x20], eax
mov eax, dword [edi + 0x2c]
mov dword [ebx + 0x24], eax
mov eax, dword [edx + 0x2c]
mov dword [ebx + 0x44], eax
mov eax, dword [edx]
mov dword [ebp - 0x17c], ecx
mov eax, dword [eax + 0x64]
mov dword [ebx + 0x48], eax
mov eax, dword [edx + 0xdc]
mov dword [ebx + 0x28], eax
mov dword [edx + 0x58], ecx
mov dword [edx + 0xdc], 0
mov dword [edx + 0x2c], 0
mov dword [edx + 0xc8], ebx
mov eax, dword [ebx + 0x3c]
mov dword [edx + 0x18], eax
movzx eax, word [ebx + 0x40]
mov dword [edx + 0x1c], eax
mov eax, dword [edx + 0x18]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
mov dword [edx + 0x60], ecx
mov eax, dword [esi + 0xc]
lea ecx, [ecx + eax*4]
mov dword [ebx + 0x18], ecx
mov eax, dword [esi + 4]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
push eax
push 0
push ecx
call fcn.0063e100
mov edx, dword [esi]
add esp, 0xc
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x1a8], edx
mov dword [ecx + 0x68], edx
mov eax, dword [esi + 4]
lea esi, [edx - 0x14]
mov dword [ecx + 0x6c], eax
mov dword [ebp - 0x16c], esi
jmp 0x4ae541
mov ebx, dword [ecx + 0x10]
jmp 0x4af134
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov esi, eax
mov eax, dword [ebp - 0x170]
push 0x1000
mov eax, dword [eax + 0xc8]
mov ecx, dword [eax + 0x30]
lea edx, [ecx + ecx*4]
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [ecx + edx*4 + 4]
mov edx, dword [ebp - 0x16c]
add ecx, dword [edx + 4]
lea ecx, [ecx + ecx*4]
lea edx, [eax + ecx*8]
mov ecx, esi
call fcn.004a1050
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [edi + 0x20]
and eax, 0x80000
or eax, 0
mov eax, dword [ebp - 0x16c]
mov esi, eax
je 0x4af293
mov eax, dword [eax + 8]
mov ebx, dword [ebp - 0x1f0]
cdq
add dword [edi + 0x1e0], eax
adc dword [edi + 0x1e4], edx
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
jmp 0x4aa381
cmp dword [eax + 4], 0
mov eax, dword [eax + 8]
cdq
je 0x4af2bd
add dword [edi + 0x1d8], eax
mov ebx, dword [ebp - 0x1f0]
adc dword [edi + 0x1dc], edx
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
jmp 0x4aa381
add dword [ecx + 0x40], eax
mov edi, dword [ebp - 0x1bc]
adc dword [ecx + 0x44], edx
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
cmp dword [esi + 4], 0
je 0x4af2eb
mov eax, dword [edi + 0x1d8]
or eax, dword [edi + 0x1dc]
jmp 0x4af2f1
mov eax, dword [ecx + 0x40]
or eax, dword [ecx + 0x44]
jne case.0x4aa3a5.86
mov eax, dword [edi + 0x1e0]
or eax, dword [edi + 0x1e4]
je 0x4aa3f5
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ecx + 0xc8]
test edx, edx
je 0x4af353
mov eax, dword [edx + 4]
test eax, eax
je 0x4af339
nop
mov edx, eax
mov eax, dword [edx + 4]
test eax, eax
jne 0x4af330
mov eax, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [eax + 4]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x10]
lea edi, [eax + ecx*8]
jmp 0x4af368
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea edi, [ebx + eax*8]
mov ecx, edi
call fcn.004a0bb0
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + 8]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
mov ecx, esi
call fcn.004a0bb0
mov ecx, dword [esi + 4]
mov eax, dword [esi]
cmp dword [edi + 4], ecx
jg 0x4aa631
jl 0x4af39d
cmp dword [edi], eax
jae 0x4aa631
mov dword [edi], eax
mov dword [edi + 4], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edi, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edi + 4]
lea esi, [eax + eax*4]
mov edi, dword [ebx + esi*8 + 4]
mov ecx, dword [ebx + esi*8]
test edi, edi
jl 0x4aa631
jg 0x4af3ed
test ecx, ecx
je 0x4aa631
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0xc]
cdq
sub ecx, eax
mov dword [ebx + esi*8], ecx
sbb edi, edx
mov dword [ebx + esi*8 + 4], edi
jmp 0x4aa3e9
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
lea esi, [eax + eax*4]
mov eax, dword [edx + 0xc]
lea ebx, [eax + eax*4]
call fcn.004aa280
mov edx, dword [ebp - 0x17c]
mov edi, eax
mov ecx, dword [edx + esi*8 + 4]
mov eax, dword [edx + esi*8]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
test ecx, ecx
jl 0x4af4b8
jg 0x4af44b
test eax, eax
je 0x4af4b8
mov ecx, dword [edx + ebx*8 + 4]
mov eax, dword [edx + ebx*8]
test ecx, ecx
jl 0x4af45c
jg 0x4af473
test eax, eax
jne 0x4af473
xorps xmm0, xmm0
movlpd qword [ebp - 0x198], xmm0
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x198]
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.004849f0
add esp, 8
test eax, eax
jne 0x4af4b8
mov eax, dword [ebp - 0x230]
mov dword [edi], eax
mov eax, dword [ebp - 0x22c]
mov dword [edi + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea esi, [eax + eax*4]
mov ecx, dword [ebx + esi*8]
mov eax, ecx
mov edx, dword [ebx + esi*8 + 4]
or eax, edx
je 0x4aa631
test edx, edx
jl 0x4aa3e9
jg 0x4af51a
test ecx, ecx
je 0x4aa3e9
sub ecx, 1
mov dword [ebx + esi*8], ecx
sbb edx, 0
mov dword [ebx + esi*8 + 4], edx
jmp 0x4aa3e9
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea ecx, [eax + eax*4]
mov edx, dword [ebx + ecx*8 + 4]
mov eax, dword [ebx + ecx*8]
cmp edx, 0x80000000
jl 0x4af560
jg 0x4af553
test eax, eax
je 0x4af560
sub eax, 1
mov dword [ebx + ecx*8], eax
sbb edx, 0
mov dword [ebx + ecx*8 + 4], edx
mov eax, dword [ebx + ecx*8]
or eax, dword [ebx + ecx*8 + 4]
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
je 0x4aa3f5
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push 0
movzx ebx, word [edx + 2]
lea eax, [ebx*4 + 0x44]
push eax
call fcn.00480700
mov esi, eax
add esp, 8
test esi, esi
je 0x4ac7a3
mov dword [esi + 8], 0
lea ecx, [ebx + 7]
lea ecx, [esi + ecx*4]
mov eax, 1
mov dword [esi], ecx
mov word [ecx + 8], ax
mov dword [ecx + 0x20], edi
mov dword [ecx + 0x18], 0
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + 0x10]
sub ecx, dword [ebp - 0x1a8]
mov dword [esi + 4], eax
mov eax, 0x66666667
imul ecx
mov byte [esi + 0x18], 0
sar edx, 3
mov eax, edx
mov dword [esi + 0x14], 0
shr eax, 0x1f
add eax, edx
mov byte [esi + 0x19], bl
mov edx, dword [ebp - 0x16c]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x170]
mov dword [esi + 0xc], eax
mov word [edx], 0xf09b
mov dword [edx + 0x10], esi
jmp 0x4af62a
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x17c]
mov esi, dword [edx + 0x10]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov dword [ebp - 0x194], ebx
cmp dword [esi + 8], ebx
je 0x4af68d
movzx ecx, byte [esi + 0x19]
sub ecx, 1
mov dword [esi + 8], ebx
js 0x4af68d
mov edi, dword [ebp - 0x16c]
lea edx, [ecx + 7]
mov ebx, dword [ebp - 0x17c]
lea edx, [esi + edx*4]
mov eax, dword [edi + 8]
lea edx, [edx - 4]
add eax, ecx
sub ecx, 1
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8]
mov dword [edx + 4], eax
jns 0x4af665
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebp - 0x16c]
inc dword [ebx + 0xc]
lea eax, [esi + 0x1c]
cmp dword [edx + 4], 0
mov ecx, dword [esi + 4]
push eax
movzx eax, byte [esi + 0x19]
push eax
push esi
je 0x4af6a8
mov eax, dword [ecx + 0x1c]
jmp 0x4af6ab
mov eax, dword [ecx + 0x10]
call eax
mov eax, dword [esi + 0x14]
add esp, 0xc
test eax, eax
je 0x4aa631
jle 0x4af6e4
push dword [esi]
call fcn.004a7460
add esp, 4
push eax
push 0x70da6c
push dword [ebp - 0x170]
call fcn.004a1bd0
mov eax, dword [esi + 0x14]
add esp, 0xc
mov dword [ebp - 0x174], eax
cmp byte [esi + 0x18], 0
je 0x4af713
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax - 0x10]
test eax, eax
je 0x4af70f
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
push 0
push 1
lea ecx, [ecx + eax*8]
call fcn.004a0ef0
add esp, 8
mov byte [esi + 0x18], 0
mov ecx, dword [esi]
call fcn.004a09a0
mov eax, dword [esi]
mov ecx, 1
mov word [eax + 8], cx
mov dword [esi + 0x14], 0
jmp 0x4ab35a
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
mov eax, dword [edx + 0xc]
mov ecx, esi
test eax, eax
je 0x4af773
push dword [edx + 0x10]
lea eax, [eax + eax*4]
lea edx, [ebx + eax*8]
call fcn.004a0860
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
jmp 0x4af77d
mov edx, dword [edx + 0x10]
call fcn.004a0780
mov ecx, eax
mov dword [ebp - 0x174], ecx
test ecx, ecx
jne 0x4b08be
movzx edx, byte [ebp - 0x1ac]
mov ecx, esi
call fcn.004a0400
mov ecx, esi
call fcn.004a0ff0
test eax, eax
je 0x4aa631
push 0x70db44
push dword [ebp - 0x170]
call fcn.004a1bd0
mov eax, 0x12
jmp 0x4b06cc
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x10], 0
push eax
push dword [edx + 8]
mov edx, dword [edx + 4]
mov ecx, edi
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0xc], 0xffffffff
call fcn.00509cc0
add esp, 0xc
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4af819
cmp eax, 5
jne 0x4b06cf
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x16c]
xor esi, esi
mov ecx, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea edi, [ecx + eax*8]
mov eax, dword [ebp + esi*4 - 0x10]
mov ecx, edi
cdq
push edx
push eax
call fcn.004a0ef0
inc esi
add esp, 8
add edi, 0x28
cmp esi, 3
jl 0x4af830
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004aa280
mov edx, dword [ebx + 4]
mov ecx, dword [edi + 0x10]
add edx, edx
mov esi, dword [ebx + 0xc]
cmp esi, 0xffffffff
mov dword [ebp - 0x188], eax
mov eax, dword [ecx + edx*8 + 4]
mov dword [ebp - 0x194], eax
mov ecx, dword [eax + 4]
mov ecx, dword [ecx]
mov dword [ebp - 0x184], ecx
movzx edx, byte [ecx + 5]
mov dword [ebp - 0x180], edx
cmove esi, edx
call fcn.004905d0
test eax, eax
mov ebx, edx
mov eax, 0x71ccf8
cmovne ebx, esi
cmp byte [ecx + 0xf], 0
jne 0x4af8ca
mov eax, dword [ecx + 0xa8]
cmp ebx, 5
jne 0x4af8fc
mov ecx, eax
call fcn.004836f0
test eax, eax
je 0x4af8e9
mov ecx, dword [ebp - 0x184]
call fcn.00490650
test eax, eax
jne 0x4af8f6
mov edx, dword [ebp - 0x180]
mov ebx, edx
jmp 0x4af9a6
mov edx, dword [ebp - 0x180]
cmp ebx, edx
je 0x4af992
cmp edx, 5
je 0x4af912
cmp ebx, 5
jne 0x4af9a0
cmp byte [edi + 0x4f], 0
je 0x4b08e6
cmp dword [edi + 0xb4], 1
jg 0x4b08e6
cmp edx, 5
jne 0x4af952
mov edx, edi
call fcn.004907c0
mov esi, dword [ebp - 0x184]
mov edx, eax
mov dword [ebp - 0x174], edx
test edx, edx
jne 0x4af998
mov edx, ebx
mov ecx, esi
call fcn.004904c0
jmp 0x4af970
cmp edx, 4
jne 0x4af961
mov edx, 2
call fcn.004904c0
cmp dword [ebp - 0x174], 0
jne 0x4af9a0
mov esi, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x194]
xor edx, edx
cmp ebx, 5
sete dl
inc edx
call fcn.0049f270
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x174], eax
jmp 0x4af9ac
mov esi, dword [ebp - 0x184]
mov edx, dword [ebp - 0x180]
jmp 0x4af9ac
mov edx, dword [ebp - 0x180]
mov esi, dword [ebp - 0x184]
cmp dword [ebp - 0x174], 0
mov ecx, esi
cmove edx, ebx
call fcn.004904c0
mov ebx, dword [ebp - 0x188]
mov ecx, 0xa02
mov word [ebx + 8], cx
mov ecx, eax
call fcn.004d9cc0
mov ecx, eax
mov dword [ebx + 0x10], eax
call fcn.004836f0
movzx edx, byte [ebp - 0x1ac]
mov ecx, ebx
mov dword [ebx + 0xc], eax
mov byte [ebx + 0xa], 1
call fcn.004a0400
jmp 0x4ab35a
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 8]
test eax, eax
je 0x4afa12
mov ebx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8]
jmp 0x4afa14
xor eax, eax
push eax
push dword [edx + 4]
add ecx, 0x7c
mov edx, edi
call fcn.004ee480
add esp, 8
mov dword [ebp - 0x174], eax
jmp 0x4ab360
mov edx, dword [ebp - 0x16c]
mov eax, dword [edi + 0x10]
mov ecx, dword [edx + 4]
add ecx, ecx
mov ecx, dword [eax + ecx*8 + 4]
call fcn.00497830
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4aa631
mov ecx, dword [ebp - 0x170]
cmp eax, 0x65
jne 0x4b06d5
mov dword [ebp - 0x174], 0
jmp 0x4aa3ef
cmp dword [esi + 4], 0
jne 0x4afa9d
mov edx, dword [esi + 8]
mov ecx, edi
call fcn.004a6d10
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov eax, dword [esi + 8]
mov edi, dword [ebp - 0x1bc]
inc eax
xor eax, dword [ecx + 0x98]
mov ebx, dword [ebp - 0x1f0]
and eax, 3
xor dword [ecx + 0x98], eax
add esi, 0x14
jmp 0x4aa381
mov al, byte [esi + 0xc]
mov byte [ebp - 0x238], al
test al, al
jne 0x4afaf2
mov eax, dword [edi + 0x20]
and eax, 0x400
mov dword [ebp - 0x198], eax
mov eax, 0
jne case.0x4aa3a5.86
test eax, eax
jne case.0x4aa3a5.86
mov eax, dword [ebp - 0x16c]
mov ecx, dword [edi + 0x10]
mov edx, dword [ebp - 0x16c]
push dword [ebp - 0x238]
mov eax, dword [eax + 4]
add eax, eax
mov edx, dword [edx + 8]
mov ecx, dword [ecx + eax*8 + 4]
call fcn.0049f180
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4aa631
cmp al, 6
jne 0x4b06cf
mov eax, dword [ebp - 0x16c]
push dword [eax + 0x10]
push 0x70dae4
push dword [ebp - 0x170]
call fcn.004a1bd0
mov eax, dword [ebp - 0x174]
add esp, 0xc
jmp 0x4b06cf
mov edx, dword [ebp - 0x16c]
mov ecx, edi
mov esi, dword [edx + 0x10]
mov edx, esi
call fcn.004f00e0
mov dword [ebp - 0x174], eax
test esi, esi
je 0x4ab360
mov edx, dword [esi + 8]
mov ecx, dword [ebp - 0x170]
call fcn.004a6e00
jmp 0x4ab35a
mov edx, dword [ebp - 0x16c]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x17c]
movq qword [ebp - 0xf8], xmm0
movups xmmword [ebp - 0x118], xmm0
mov eax, dword [edx + 8]
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf8], edi
lea eax, [eax + eax*4]
lea edx, [ecx + eax*8]
lea ecx, [ebp - 0x118]
call fcn.004a10a0
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x118]
push eax
call fcn.004a7460
add esp, 4
test eax, eax
je 0x4afc07
mov ecx, dword [ebp - 0x170]
add ecx, 0x7c
push ecx
push eax
mov eax, dword [ebp - 0x16c]
mov ecx, edi
mov edx, dword [eax + 4]
call fcn.004efb80
add esp, 8
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0x118]
call fcn.004a09a0
jmp 0x4ab35a
mov edx, dword [ebp - 0x16c]
mov ecx, edi
inc dword [edi + 0xc0]
push dword [edx + 0x10]
mov edx, dword [edx + 4]
call fcn.004efee0
add esp, 4
mov dword [ebp - 0x174], eax
dec dword [edi + 0xc0]
jmp 0x4ab360
mov edx, dword [ebp - 0x16c]
mov dword [ebp - 0x5c], 0
mov eax, dword [edx + 0x10]
mov esi, dword [eax + 8]
test esi, esi
je 0x4b0911
mov ebx, dword [esi]
test ebx, ebx
je 0x4b0911
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebx + 0x18]
push esi
call eax
mov ecx, dword [ebp - 0x170]
add esp, 8
mov edx, esi
mov dword [ebp - 0x174], eax
call fcn.004a6e00
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4b06d5
mov eax, dword [ebp - 0x5c]
push 2
push 0xffffffffffffffff
push 0
mov dword [eax], esi
mov eax, dword [ebp - 0x16c]
mov edx, dword [eax + 4]
call fcn.004a9ea0
add esp, 0xc
test eax, eax
je 0x4b0901
mov ecx, dword [ebp - 0x5c]
mov dword [eax + 0x28], ecx
inc dword [esi + 4]
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
add ebx, 0x28
mov eax, dword [edx + 0xc]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x16c]
mov esi, dword [ebx + edx*8]
lea ebx, [ebx + edx*8]
movd xmm0, ebx
mov dword [ebp - 0x194], ebx
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x170]
pshufd xmm3, xmm0, 0
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
xor ecx, ecx
mov dword [ebp - 0x1c4], eax
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x190], eax
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + edx*8]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x170]
mov edx, dword [eax + 0x5c]
test esi, esi
jle 0x4afe0b
cmp esi, 8
jb 0x4afded
cmp dword [0x71bcf4], 2
jl 0x4afded
movaps xmm2, xmmword [0x6e2800]
mov eax, esi
and eax, 0x80000007
jns 0x4afd95
dec eax
or eax, 0xfffffff8
inc eax
movaps xmm1, xmmword [0x6e2850]
mov ebx, esi
sub ebx, eax
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm0, xmm0, 0
paddd xmm0, xmm2
pmulld xmm0, xmm1
paddd xmm0, xmm3
paddd xmm0, xmm1
movups xmmword [edx + ecx*4], xmm0
movd xmm0, eax
pshufd xmm0, xmm0, 0
paddd xmm0, xmm2
pmulld xmm0, xmm1
paddd xmm0, xmm3
paddd xmm0, xmm1
movups xmmword [edx + ecx*4 + 0x10], xmm0
add ecx, 8
cmp ecx, ebx
jl 0x4afda0
mov ebx, dword [ebp - 0x194]
cmp ecx, esi
jge 0x4afe0b
lea eax, [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8]
nop word [eax + eax]
mov dword [edx + ecx*4], eax
inc ecx
add eax, 0x28
cmp ecx, esi
jl 0x4afe00
mov eax, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x18c]
push edx
push esi
push dword [eax + 0x10]
mov esi, dword [ebp - 0x190]
push dword [ebp - 0x188]
mov eax, dword [ebx + 0x20]
push esi
call eax
mov edx, dword [ebp - 0x1b4]
add esp, 0x14
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
call fcn.004a6e00
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4b06cf
mov eax, dword [ebx + 0x28]
push esi
call eax
mov ecx, dword [ebp - 0x1c4]
add esp, 4
mov byte [ecx + 2], 0
test eax, eax
je 0x4aa631
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
jmp 0x4aa3f5
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov ebx, dword [eax + ecx*4]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x17c]
cmp byte [ebx + 2], 0
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
je 0x4afed3
mov ecx, esi
call fcn.004a0e90
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
test byte [edx + 2], 1
xorps xmm0, xmm0
mov eax, dword [ebx + 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x188], eax
mov eax, dword [eax]
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0x194], eax
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xf0], esi
je 0x4aff1d
mov ecx, esi
call fcn.004a0e90
mov edx, dword [ebp - 0x16c]
mov eax, 0x4001
mov dword [esi], 0
jmp 0x4aff2d
mov ax, word [esi + 8]
mov ecx, 0x3e40
and ax, cx
or ax, 1
mov word [esi + 8], ax
lea eax, [ebp - 0xf0]
push dword [edx + 8]
push eax
mov eax, dword [ebp - 0x194]
push dword [ebx + 0x28]
mov eax, dword [eax + 0x2c]
call eax
mov edx, dword [ebp - 0x188]
add esp, 0xc
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
call fcn.004a6e00
cmp dword [ebp - 0xdc], 0
jle 0x4aff95
push esi
call fcn.004a7460
add esp, 4
push eax
push 0x70dae0
push dword [ebp - 0x170]
call fcn.004a1bd0
mov eax, dword [ebp - 0xdc]
add esp, 0xc
mov dword [ebp - 0x174], eax
movzx edx, byte [ebp - 0x1ac]
mov ecx, esi
call fcn.004a0400
mov ecx, esi
call fcn.004a0ff0
test eax, eax
jne 0x4af7a8
jmp 0x4ab35a
mov ebx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x60]
mov ebx, dword [eax + ecx*4]
cmp byte [ebx + 2], 0
jne 0x4aa631
mov eax, dword [ebx + 0x28]
push eax
mov esi, dword [eax]
mov ecx, dword [esi]
mov dword [ebp - 0x194], ecx
mov eax, dword [ecx + 0x24]
call eax
mov ecx, dword [ebp - 0x170]
add esp, 4
mov edx, esi
mov dword [ebp - 0x174], eax
call fcn.004a6e00
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4b06cf
mov eax, dword [ebp - 0x194]
push dword [ebx + 0x28]
mov eax, dword [eax + 0x28]
call eax
add esp, 4
test eax, eax
jne 0x4ae535
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x16c]
mov esi, dword [edx + 8]
mov edx, dword [ebp - 0x1a8]
dec esi
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
mov dword [ebp - 0x16c], esi
jmp 0x4ae541
mov edx, dword [ebp - 0x16c]
mov ebx, dword [edi + 0x20]
or dword [edi + 0x20], 0x4000000
and ebx, 0x4000000
mov eax, dword [edi + 0x24]
mov ecx, dword [ebp - 0x17c]
mov dword [edi + 0x24], eax
mov eax, dword [edx + 0x10]
mov esi, dword [eax + 8]
mov eax, dword [edx + 4]
mov edx, 1
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov ecx, eax
mov dword [ebp - 0x194], eax
call fcn.004a0400
test eax, eax
jne 0x4b06cf
mov ecx, dword [ebp - 0x194]
mov eax, dword [esi]
push dword [ecx + 0x10]
mov eax, dword [eax + 0x4c]
push esi
call eax
add esp, 8
mov dword [ebp - 0x174], eax
test ebx, ebx
jne 0x4b00c3
mov eax, dword [edi + 0x24]
and dword [edi + 0x20], 0xfbffffff
mov dword [edi + 0x24], eax
mov ecx, dword [ebp - 0x170]
mov edx, esi
call fcn.004a6e00
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x174]
and dword [ecx + 0x98], 0xfffffffc
jmp 0x4ab366
cmp byte [edi + 0x51], 0
jne 0x4ac7a3
mov ebx, dword [ebp - 0x16c]
mov eax, dword [ebx + 0x10]
mov ebx, dword [eax + 8]
test ebx, ebx
je 0x4b0911
mov eax, dword [ebx]
mov dword [ebp - 0x194], eax
test eax, eax
je 0x4b0911
cmp dword [eax + 0x34], 0
mov esi, dword [ebp - 0x16c]
mov esi, dword [esi + 8]
je 0x4ab2b5
mov al, byte [edi + 0x56]
mov edx, dword [ecx + 0x5c]
mov ecx, dword [ebp - 0x17c]
mov byte [ebp - 0x1a1], al
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
xor eax, eax
test esi, esi
jle 0x4b015b
mov dword [edx + eax*4], ecx
inc eax
add ecx, 0x28
cmp eax, esi
jl 0x4b0150
mov eax, dword [ebp - 0x16c]
mov al, byte [eax + 2]
mov byte [edi + 0x56], al
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x194]
push edx
push esi
push ebx
mov eax, dword [eax + 0x34]
call eax
mov ecx, dword [ebp - 0x170]
add esp, 0x10
mov dword [ebp - 0x174], eax
mov edx, ebx
mov al, byte [ebp - 0x1a1]
mov byte [edi + 0x56], al
call fcn.004a6e00
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x16c]
test eax, eax
jne 0x4b01bf
cmp dword [ecx + 4], eax
je 0x4b01bf
mov eax, dword [ebp - 0x30]
mov dword [edi + 0x28], eax
mov eax, dword [ebp - 0x2c]
mov dword [edi + 0x2c], eax
mov eax, dword [ebp - 0x174]
cmp al, 0x13
jne 0x4b021b
mov eax, dword [ecx + 0x10]
cmp byte [eax + 0x10], 0
je 0x4b021b
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax + 2]
cmp eax, 4
jne 0x4b0203
xor ecx, ecx
mov dword [ebp - 0x174], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
cmp eax, 5
jne 0x4b020d
mov eax, 2
mov ecx, dword [ebp - 0x170]
mov byte [ecx + 0x92], al
jmp 0x4b0224
mov ecx, dword [ebp - 0x170]
inc dword [ecx + 0x2c]
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4b06cf
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ecx + 4]
mov ecx, dword [edi + 0x10]
shl edx, 4
mov ecx, dword [edx + ecx + 4]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + 0x2c]
mov dword [eax], ecx
mov dword [eax + 4], 0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
call fcn.004aa280
mov ecx, dword [edi + 0x10]
mov ebx, eax
mov eax, dword [ebp - 0x16c]
mov edx, dword [eax + 4]
mov esi, dword [eax + 0xc]
add edx, edx
mov ecx, dword [ecx + edx*8 + 4]
xor edx, edx
test esi, esi
je 0x4b02cc
mov eax, dword [ecx + 4]
mov edx, dword [eax + 0x2c]
cmp edx, esi
cmovb edx, esi
call fcn.00496940
cdq
mov dword [ebx], eax
mov dword [ebx + 4], edx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push 0
movzx ebx, word [edx + 2]
lea eax, [ebx*4 + 0x1c]
push eax
call fcn.00480700
mov esi, eax
add esp, 8
test esi, esi
je 0x4ac7a3
mov eax, dword [ebp - 0x16c]
mov dword [esi], 0
mov ecx, dword [eax + 0x10]
mov dword [esi + 4], ecx
mov ecx, eax
sub ecx, dword [ebp - 0x1a8]
mov eax, 0x66666667
imul ecx
mov dword [esi + 0x14], 0
sar edx, 3
mov eax, edx
mov byte [esi + 0x19], bl
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x16c]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x170]
mov dword [esi + 0xc], eax
add byte [edx], 2
mov byte [edx + 1], 0xf0
mov dword [edx + 0x10], esi
jmp 0x4b0378
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x17c]
mov esi, dword [edx + 0x10]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov dword [ebp - 0x194], ebx
cmp dword [esi], ebx
je 0x4b03d2
movzx ecx, byte [esi + 0x19]
sub ecx, 1
mov dword [esi], ebx
js 0x4b03d2
mov edi, dword [ebp - 0x16c]
lea edx, [ecx + 7]
mov ebx, dword [ebp - 0x17c]
lea edx, [esi + edx*4]
mov eax, dword [edi + 8]
add eax, ecx
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8]
mov dword [edx], eax
sub edx, 4
sub ecx, 1
jns 0x4b03b1
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x194]
mov ax, word [ebx + 8]
mov ecx, 0x3e40
and ax, cx
or ax, 1
mov word [ebx + 8], ax
lea eax, [esi + 0x1c]
mov ecx, dword [esi + 4]
push eax
movzx eax, byte [esi + 0x19]
push eax
mov eax, dword [ecx + 0x10]
push esi
call eax
mov eax, dword [esi + 0x14]
add esp, 0xc
test eax, eax
je 0x4b0461
jle 0x4b042a
push ebx
call fcn.004a7460
add esp, 4
push eax
push 0x70db0c
push dword [ebp - 0x170]
call fcn.004a1bd0
mov eax, dword [esi + 0x14]
add esp, 0xc
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x16c]
mov ecx, edi
mov edx, dword [ebp - 0x170]
add edx, 0xdc
push dword [eax + 4]
push dword [esi + 0x10]
call fcn.004a50e0
mov eax, dword [ebp - 0x174]
add esp, 8
mov dword [esi + 0x14], 0
test eax, eax
jne 0x4b06cf
test byte [ebx + 8], 0x12
je 0x4aa631
movzx edx, byte [ebp - 0x1ac]
mov ecx, ebx
call fcn.004a0400
mov ecx, ebx
call fcn.004a0ff0
test eax, eax
jne 0x4af7a8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov cl, byte [edi + 0x58]
mov ebx, dword [ebp - 0x170]
test cl, 0x41
je 0x4b0566
test byte [ebx + 0x98], 0x10
jne 0x4b0566
mov eax, dword [esi + 0x10]
test eax, eax
jne 0x4b04dc
mov eax, dword [ebx + 0xc0]
test eax, eax
je 0x4b0566
test cl, 0x40
je 0x4b0512
mov edi, dword [edi + 0xcc]
mov edx, eax
mov ecx, ebx
call fcn.004a99d0
mov esi, eax
mov eax, dword [ebp - 0x1bc]
push esi
push dword [eax + 0xd0]
call edi
push esi
call fcn.004802c0
mov esi, dword [ebp - 0x16c]
add esp, 0xc
jmp 0x4b0566
cmp dword [edi + 0xbc], 1
push eax
jle 0x4b0552
push 0x70db04
push edi
call fcn.00482940
mov ecx, dword [edi + 0xcc]
add esp, 0xc
mov esi, eax
push esi
push ebx
push dword [edi + 0xd0]
push 1
call ecx
add esp, 0x10
mov edx, esi
mov ecx, edi
call fcn.004803b0
mov esi, dword [ebp - 0x16c]
jmp 0x4b0566
mov eax, dword [edi + 0xcc]
push ebx
push dword [edi + 0xd0]
push 1
call eax
add esp, 0x10
mov eax, dword [esi + 4]
cmp eax, dword [0x70b4b8]
jl 0x4b05b1
cmp byte [esi], 0xa8
je 0x4aa637
mov edx, 1
cmp dword [ebx + 0x6c], edx
jle 0x4b05aa
mov eax, 0x14
nop dword [eax]
mov ecx, dword [ebx + 0x68]
cmp byte [eax + ecx], 0x11
jne 0x4b05a1
mov dword [eax + ecx + 4], 0
inc edx
add eax, 0x14
cmp edx, dword [ebx + 0x6c]
jl 0x4b0590
mov dword [esi + 4], 0
mov ecx, dword [ebp - 0x170]
inc dword [esi + 4]
inc dword [ecx + 0xbc]
jmp 0x4aa3f5
mov esi, dword [ebp - 0x16c]
mov ecx, edx
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4aa381
mov ecx, dword [edx + 4]
mov dword [ebx + 0x28], ecx
mov al, byte [edx + 8]
mov byte [ebx + 0x92], al
mov dword [ebx + 0x24], esi
test ecx, ecx
je 0x4b066e
movzx eax, word [edx + 2]
test ax, ax
je 0x4b063d
push dword [eax*4 + 0x6cc594]
push 0x70d89c
push ebx
call fcn.004a1bd0
mov eax, dword [ebp - 0x16c]
add esp, 0xc
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4b064e
push eax
push dword [ebx + 0x7c]
push 0x70d894
push edi
call fcn.00482940
add esp, 0x10
mov dword [ebx + 0x7c], eax
jmp 0x4b064e
push dword [edx + 0x10]
push 0x70d8cc
push ebx
call fcn.004a1bd0
add esp, 0xc
push dword [ebx + 0x7c]
mov eax, dword [ebp - 0x16c]
push dword [ebx + 0xc0]
push esi
push 0x70d8b4
push dword [eax + 4]
call fcn.00482bd0
add esp, 0x14
mov ecx, ebx
call fcn.004a4c00
mov esi, dword [ebp - 0x178]
mov ecx, eax
mov dword [ebp - 0x174], ecx
cmp ecx, 5
jne 0x4b0692
mov dword [ebx + 0x28], eax
mov ebx, eax
jmp 0x4b0cc0
cmp dword [ebx + 0x28], 0
mov ecx, 0x65
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x174], ecx
mov ebx, ecx
jmp 0x4b0cc0
mov ecx, 0x152d5
call fcn.0050b250
jmp 0x4b06cf
push 0x70d8e8
push ecx
call fcn.004a1bd0
mov eax, 5
add esp, 8
mov ecx, dword [ebp - 0x170]
mov esi, dword [ebp - 0x178]
cmp byte [edi + 0x51], 0
mov edx, 7
cmovne eax, edx
cmp dword [ecx + 0x7c], 0
mov dword [ebp - 0x174], eax
jne 0x4b0bcc
cmp eax, 0xc0a
je 0x4b0bcc
mov ecx, 0x712300
sub eax, 0x64
je 0x4b0ba7
sub eax, 1
je 0x4b0ba0
sub eax, 0x19f
je 0x4b0b99
mov eax, dword [ebp - 0x174]
movzx eax, al
cmp eax, 0x1d
jae 0x4b0bac
mov eax, dword [eax*4 + 0x6cbc40]
test eax, eax
je 0x4b0bac
mov ecx, eax
jmp 0x4b0bac
push 0x70d954
push dword [ebp - 0x170]
jmp 0x4b06c2
mov ecx, dword [ebp - 0x16c]
mov eax, 0x66666667
sub ecx, dword [ebp - 0x1a8]
mov ebx, 5
mov esi, dword [ebp - 0x178]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x170]
mov dword [edx + 0x24], eax
mov byte [edi + 0x4f], 0
mov dword [edx + 0x28], 5
jmp 0x4b0cc0
mov eax, 8
jmp 0x4b06cf
mov esi, dword [ebp - 0x178]
cmp al, 5
jne 0x4b089e
mov ecx, dword [ebp - 0x16c]
mov eax, 0x66666667
sub ecx, dword [ebp - 0x1a8]
imul ecx
mov ecx, dword [ebp - 0x174]
mov ebx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x170]
mov dword [edx + 0x24], eax
mov dword [edx + 0x28], ecx
jmp 0x4b0cc0
mov edx, dword [edx + 0x7c]
mov ecx, edi
call fcn.004803b0
mov edx, 0x70d9e8
mov ecx, edi
call fcn.00480970
mov ecx, dword [ebp - 0x170]
mov dword [ecx + 0x7c], eax
mov eax, dword [ebp - 0x16c]
mov edx, dword [eax + 4]
mov ecx, edx
mov eax, dword [edi + 0x10]
add ecx, ecx
mov eax, dword [eax + ecx*8 + 0xc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x200]
je 0x4b082f
mov ecx, edi
call fcn.004c6010
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x170]
mov eax, dword [eax + 0x98]
and eax, 0xfffffffd
or eax, 1
mov dword [ecx + 0x98], eax
mov eax, 0x11
jmp 0x4b06d5
mov eax, 0x204
jmp 0x4b06cf
mov ecx, dword [ebp - 0x170]
mov eax, 6
mov byte [ecx + 0x92], 2
jmp 0x4b06d5
mov dword [ebp - 0x174], 7
mov ecx, edi
call fcn.004c6310
mov eax, dword [ebp - 0x174]
mov esi, dword [ebp - 0x178]
cmp eax, 7
je 0x4ac7a9
mov ecx, dword [ebp - 0x170]
jmp 0x4b06db
push 0x70da70
push edx
call fcn.004a1bd0
mov eax, 1
jmp 0x4b06cc
push esi
call fcn.004a7460
add esp, 4
push eax
push 0x70daa0
push dword [ebp - 0x170]
call fcn.004a1bd0
add esp, 0xc
mov eax, dword [ebp - 0x174]
jmp 0x4b06cf
cmp ebx, 5
mov eax, 0x70da98
mov ecx, 0x70dad8
cmovne eax, ecx
push eax
push 0x70daa4
jmp 0x4aca66
push dword [ebp - 0x5c]
mov eax, dword [ebx + 0x1c]
call eax
add esp, 4
jmp 0x4ac7a3
mov eax, 6
jmp 0x4b06cf
xor edx, edx
call fcn.004a4ba0
test eax, eax
jne 0x4b06cf
mov ebx, dword [ebp - 0x170]
mov eax, dword [ebx]
cmp dword [eax + 0x1d0], 0
je 0x4b094d
cmp dword [ebx + 0x30], 0
je 0x4b094d
mov edx, 1
mov ecx, ebx
call fcn.004a4a90
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebp - 0x16c]
add eax, 2
mov edx, dword [ebp - 0x17c]
or eax, 1
mov dword [ebx + 0x20], eax
mov eax, dword [ecx + 4]
lea eax, [eax + eax*4]
lea esi, [edx + eax*8]
mov dword [ebx + 0x78], esi
xor ebx, ebx
cmp dword [ecx + 8], ebx
jle 0x4b09b0
nop dword [eax + eax]
mov eax, 0x1000
test word [esi + 8], ax
je 0x4b099a
mov ecx, esi
call fcn.004a0610
test eax, eax
jne 0x4ac7a3
mov ecx, esi
call fcn.004a06c0
mov eax, dword [ebp - 0x16c]
inc ebx
add esi, 0x28
cmp ebx, dword [eax + 8]
jl 0x4b0980
cmp byte [edi + 0x51], 0
jne 0x4ac7a3
test byte [edi + 0x58], 4
je 0x4b09db
mov eax, dword [edi + 0xcc]
push 0
push dword [ebp - 0x170]
push dword [edi + 0xd0]
push 4
call eax
add esp, 0x10
mov ecx, dword [ebp - 0x16c]
mov eax, 0x66666667
sub ecx, dword [ebp - 0x1a8]
mov ebx, 0x64
mov esi, dword [ebp - 0x178]
imul ecx
mov ecx, dword [ebp - 0x170]
sar edx, 3
mov eax, edx
shr eax, 0x1f
inc eax
add eax, edx
mov dword [ecx + 0x24], eax
jmp 0x4b0cc0
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edi + 0x4f]
mov ebx, dword [edx + 4]
mov ecx, dword [edx + 8]
cmp ebx, eax
je 0x4b0b07
test ecx, ecx
je 0x4b0a45
mov edx, 0x204
mov ecx, edi
call fcn.00508fa0
mov byte [edi + 0x4f], 1
mov esi, 1
jmp 0x4b0a87
test ebx, ebx
je 0x4b0a62
cmp dword [edi + 0xb8], 0
jle 0x4b0a62
push 0x70d91c
push dword [ebp - 0x170]
jmp 0x4b06c2
mov ecx, dword [ebp - 0x170]
mov esi, 1
mov edx, esi
call fcn.004a4ba0
mov ecx, eax
mov dword [ebp - 0x174], ecx
test ecx, ecx
jne 0x4b0af6
mov byte [edi + 0x4f], bl
mov ecx, dword [ebp - 0x170]
call fcn.004a4c00
cmp eax, 5
jne 0x4b0ad7
mov ecx, dword [ebp - 0x16c]
mov eax, 0x66666667
sub ecx, dword [ebp - 0x1a8]
mov esi, dword [ebp - 0x178]
imul ecx
mov ecx, dword [ebp - 0x170]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ecx + 0x24], eax
mov al, 1
sub al, bl
mov ebx, 5
mov byte [edi + 0x4f], al
mov dword [ecx + 0x28], ebx
jmp 0x4b0cc0
mov ecx, edi
call fcn.005085e0
mov eax, dword [ebp - 0x170]
mov ecx, 0x65
cmp dword [eax + 0x28], 0
cmovne ecx, esi
mov dword [ebp - 0x174], ecx
mov ebx, dword [ebp - 0x174]
mov esi, dword [ebp - 0x178]
jmp 0x4b0cc0
test ebx, ebx
jne 0x4b0b27
mov eax, 0x70d9b8
push eax
push dword [ebp - 0x170]
call fcn.004a1bd0
add esp, 8
lea eax, [ebx + 1]
jmp 0x4b06cf
test ecx, ecx
mov edx, 0x70da04
mov eax, 0x70d98c
cmove eax, edx
push eax
push dword [ebp - 0x170]
call fcn.004a1bd0
add esp, 8
mov eax, 1
jmp 0x4b06cf
mov esi, dword [ebp - 0x178]
xor eax, eax
cmp byte [edi + 0x51], al
sete al
lea eax, [eax*2 + 7]
mov dword [ecx + 0x28], eax
mov ecx, eax
mov dword [ebp - 0x174], eax
call fcn.005090e0
push eax
push 0x70db64
push dword [ebp - 0x170]
call fcn.004a1bd0
mov eax, dword [ebp - 0x174]
add esp, 0xc
mov ecx, dword [ebp - 0x170]
jmp 0x4b06db
mov ecx, 0x7122e8
jmp 0x4b0bac
mov ecx, 0x712310
jmp 0x4b0bac
mov ecx, 0x712328
push ecx
push 0x70db30
push dword [ebp - 0x170]
call fcn.004a1bd0
mov eax, dword [ebp - 0x174]
add esp, 0xc
mov ecx, dword [ebp - 0x170]
mov dword [ecx + 0x28], eax
cmp eax, 0xc0a
je 0x4b0bfd
movzx eax, al
cmp eax, 0xe
je 0x4b0be3
cmp eax, 0xa
jne 0x4b0bfd
mov eax, dword [edi]
mov ecx, dword [eax + 0x44]
test ecx, ecx
je 0x4b0bf8
push 0
push 0
push eax
call ecx
add esp, 0xc
jmp 0x4b0bfa
xor eax, eax
mov dword [edi + 0x48], eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
sub ecx, dword [ebp - 0x1a8]
push dword [eax + 0x7c]
push dword [eax + 0xc0]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push 0x70db10
push dword [ebp - 0x174]
call fcn.00482bd0
mov ecx, dword [ebp - 0x170]
add esp, 0x14
call fcn.004a4c00
cmp dword [ebp - 0x174], 0xc0a
jne 0x4b0c8e
cmp byte [edi + 0x51], 0
jne 0x4b0c8e
cmp byte [edi + 0x52], 0
jne 0x4b0c8e
cmp dword [edi + 0xbc], 0
mov byte [edi + 0x51], 1
jle 0x4b0c77
mov dword [edi + 0x110], 1
inc dword [edi + 0x118]
mov eax, dword [edi + 0xf4]
test eax, eax
je 0x4b0c8e
mov dword [eax + 0xc], 7
mov al, byte [ebp - 0x1cd]
mov dword [ebp - 0x174], 1
test al, al
je 0x4b0cb5
movzx edx, al
mov ecx, edi
dec edx
call fcn.004c6010
mov ebx, dword [ebp - 0x174]
jmp 0x4b0cc0
mov ebx, 1
nop word [eax + eax]
mov ecx, dword [ebp - 0x1f0]
cmp ecx, esi
jb 0x4b0cfc
mov eax, dword [edi + 0x148]
test eax, eax
je 0x4b0cfc
push dword [edi + 0x14c]
add esi, dword [edi + 0x150]
call eax
add esp, 4
test eax, eax
je 0x4b0cc0
mov ecx, dword [ebp - 0x170]
or esi, 0xffffffff
mov eax, 9
jmp 0x4b06db
mov edx, dword [ebp - 0x170]
add dword [edx + 0xb4], ecx
cmp dword [edx + 0xa0], 0
je 0x4b0d18
mov ecx, edx
call fcn.004a3310
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00625325
mov esp, ebp
pop ebp
ret