Function at 0x4ae1e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x158
mov dword [esp], edx
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x10], esi
push edi
test edx, edx
jne 0x4ae23b
cmp dword [esp + 0x17c], edx
jne 0x4ae220
push 1
push edx
push edx
push edx
push edx
lea ecx, [esp + 0x190]
call fcn.004ae1e0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
lea eax, [esp + 0x17c]
sub eax, esi
cdq
xor eax, edx
sub eax, edx
neg eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x34], 0
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jae 0x4b389e
mov dword [esp + 0x64], 0xfc00
mov dword [esp + 0x68], 0xdc00
mov dword [esp + 0x44], SysReAllocString
mov dword [esp + 0x4c], 0xd800
nop dword [eax]
inc eax
mov dword [edi], eax
mov eax, dword [esp + 0x17c]
cmp eax, dword [edi + 8]
jae 0x4b5a11
cmp dword [edi + 0x9c], 2
jne 0x4ae2e0
mov eax, dword [esp + 0x178]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], esi
mov dword [esp + 0x178], eax
mov dword [edi + 0x9c], 0
jmp 0x4ae2e0
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
jmp 0x4ae2e7
je case.0x4ae319.151
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x170]
movzx ecx, word [edx]
mov dword [esp + 0x28], edx
mov ebp, ecx
mov edx, ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], edx
cmp edx, 0x9b
ja case.0x4ae319.98
movzx eax, byte [edx + 0x4b5b6c]
jmp dword [eax*4 + 0x4b5a24]
cmp dword [edi + 0x70], 0
movzx ecx, byte [edx + 0x4ce360]
je 0x4b396c
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
add ecx, eax
lea edx, [edx + ecx*2]
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edx, dword [esp + 0x10]
mov ebx, esi
mov edi, dword [edi + 0xb0]
mov ebp, edx
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
cmp eax, 1
je 0x4ae457
cmp eax, 0xfffffc20
jne 0x4ae3c8
mov edx, dword [esp + 0x10]
movzx ecx, word [edx + 2]
lea ecx, [edx + ecx*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], ecx
jae 0x4b38a6
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4ae3d4
cmp word [ecx], 0x71
jne 0x4b38a6
jmp 0x4ae3d4
test eax, eax
jne 0x4b38a6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea edx, [edx + eax*2]
mov eax, dword [esp + 0x174]
mov dword [esp + 0x10], edx
mov dword [eax + 0xb0], edi
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x71
je 0x4ae352
mov edi, dword [esp + 0x174]
movzx eax, cx
cmp eax, 0x7c
je 0x4ae412
cmp eax, 0x71
jne case.0x4ae319.151
movzx eax, word [edx + 2]
lea edx, [edx + eax*2]
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x71
je 0x4ae412
mov eax, dword [edi + 0x90]
mov esi, dword [edi + 0x84]
mov dword [esp + 0x10], edx
mov dword [esp + 0x170], eax
mov dword [esp + 0x14], esi
cmp ecx, 0x72
je 0x4ae44b
cmp esi, ebx
jne 0x4b35f0
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x80]
movzx ecx, word [edx]
mov dword [esp + 0x16c], eax
jmp 0x4ae401
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x28], ebp
jmp 0x4aefac
mov ebp, dword [esp + 0x10]
cmp word [ebp + 4], 0x70
movzx edi, word [ebp + 2]
jne 0x4ae57f
mov ecx, dword [0x4e82e8]
test ecx, ecx
je 0x4ae578
mov dword [esp + 0xb8], 2
movzx eax, word [ebp + 6]
mov ebp, dword [esp + 0x174]
mov dword [esp + 0xbc], eax
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc0], eax
mov eax, dword [ebp + 0x78]
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x7c]
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x16c]
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xcc], eax
mov eax, esi
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xd0], eax
movzx eax, word [edx + 8]
mov dword [esp + 0xe0], eax
movzx eax, word [edx + 0xa]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x170]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0xd4], eax
mov eax, dword [ebp + 0x94]
mov dword [esp + 0xd8], eax
mov eax, dword [ebp + 0xac]
mov dword [esp + 0xdc], eax
mov eax, dword [ebp + 0xb4]
mov dword [esp + 0xe8], eax
lea eax, [esp + 0xb8]
push eax
call ecx
add esp, 4
test eax, eax
jg case.0x4ae319.151
js 0x4b38a6
mov ebp, dword [esp + 0x10]
add ebp, 0xc
mov dword [esp + 0x10], ebp
movzx ecx, word [ebp + 4]
lea edx, [ebp + 4]
cmp ecx, 0x89
je 0x4ae753
cmp ecx, 0x8a
je 0x4ae753
cmp ecx, 0x87
je 0x4ae61c
cmp ecx, 0x88
je 0x4ae61c
cmp ecx, 0x8b
jne 0x4ae5c8
movzx eax, word [ebp + 2]
lea ecx, [eax*2]
add ecx, ebp
jmp 0x4ae8f6
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x9c], 1
mov eax, dword [esp + 0x17c]
inc eax
push eax
push 0
push ecx
push dword [esp + 0x17c]
mov ecx, esi
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
cmp eax, 1
je 0x4b3677
test eax, eax
je 0x4ae615
cmp eax, 0xfffffc20
jne 0x4b38a6
xor edx, edx
jmp 0x4ae8e3
movzx edi, word [ebp + 6]
mov ebp, dword [esp + 0x174]
lea edx, [edi + edi]
cmp edx, dword [esp + 0x170]
jge 0x4ae640
mov eax, dword [ebp + 0xc]
cmp dword [eax + edx*4], 0
jge 0x4ae8d5
cmp ecx, 0x88
jne 0x4ae744
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x28]
mov ebx, eax
test edx, edx
jle 0x4ae744
xor ecx, ecx
mov ebp, eax
mov esi, ecx
movzx eax, word [ebx]
cmp eax, edi
je 0x4ae685
mov eax, dword [esp + 0x174]
inc esi
mov ecx, esi
mov eax, dword [eax + 0x24]
lea ebx, [eax*2]
add ebx, ebp
mov ebp, ebx
cmp esi, edx
jl 0x4ae662
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x14]
cmp ecx, edx
jge 0x4ae744
mov eax, dword [esp + 0x174]
mov edi, ebx
cmp ebx, dword [eax + 0x28]
jbe 0x4ae6f2
mov eax, dword [eax + 0x24]
lea ecx, [ebx + 2]
neg eax
lea edi, [edi + eax*2]
lea edx, [edi + 2]
call fcn.004b6f10
test eax, eax
jne 0x4ae6eb
movzx eax, word [edi]
lea ecx, [eax + eax]
cmp ecx, dword [esp + 0x170]
jge 0x4ae6dd
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x4ae8d5
mov eax, dword [esp + 0x174]
cmp edi, dword [eax + 0x28]
ja 0x4ae6a3
jmp 0x4ae6f2
mov eax, dword [esp + 0x174]
mov ebp, dword [esp + 0x2c]
inc ebp
cmp ebp, dword [eax + 0x20]
jge 0x4ae744
lea edi, [ebx + 2]
nop
mov eax, dword [eax + 0x24]
mov ecx, edi
lea ebx, [ebx + eax*2]
lea edx, [ebx + 2]
call fcn.004b6f10
test eax, eax
jne 0x4ae744
movzx eax, word [ebx]
lea ecx, [eax + eax]
cmp ecx, dword [esp + 0x170]
jge 0x4ae737
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x4ae8d5
mov eax, dword [esp + 0x174]
inc ebp
cmp ebp, dword [eax + 0x20]
jl 0x4ae700
mov ebp, dword [esp + 0x10]
xor edx, edx
movzx edi, word [ebp + 2]
jmp 0x4ae8e3
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0xa8]
test eax, eax
jne 0x4ae776
movzx eax, word [ebp + 2]
lea ecx, [eax*2]
add ecx, ebp
jmp 0x4ae8fd
movzx edi, word [ebp + 6]
cmp edi, 0xffff
je 0x4ae8d5
cmp edi, dword [eax + 4]
je 0x4ae8d5
xor edx, edx
mov dword [esp + 0x24], edx
cmp ecx, 0x8a
jne 0x4ae8c1
mov eax, dword [esp + 0x174]
xor ebp, ebp
mov ecx, dword [eax + 0x28]
mov ebx, ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x20], edx
jle 0x4ae8bd
mov edx, ecx
mov esi, eax
xor ecx, ecx
nop dword [eax]
movzx eax, word [ebx]
cmp eax, edi
je 0x4ae7ec
mov eax, dword [esi + 0x24]
inc ebp
mov ecx, ebp
lea ebx, [edx + eax*2]
mov eax, dword [esp + 0x2c]
mov edx, ebx
cmp ebp, eax
jl 0x4ae7d0
jmp 0x4ae7f0
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebx
cmp ecx, eax
jge 0x4ae8bd
mov eax, dword [esp + 0x174]
mov edi, ebx
cmp ebx, dword [eax + 0x28]
jbe 0x4ae86b
lea ebp, [ebx + 2]
mov esi, eax
nop dword [eax + eax]
mov eax, dword [esi + 0x24]
mov ecx, ebp
neg eax
lea edi, [edi + eax*2]
lea edx, [edi + 2]
call fcn.004b6f10
test eax, eax
jne 0x4ae854
mov eax, dword [esi + 0xa8]
xor ebx, ebx
movzx ecx, word [edi]
mov eax, dword [eax + 4]
cmp ecx, eax
sete bl
mov dword [esp + 0x24], ebx
je 0x4ae854
cmp edi, dword [esi + 0x28]
ja 0x4ae820
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x174]
test edx, edx
jne 0x4ae8da
inc ebp
cmp ebp, dword [eax + 0x20]
jge 0x4ae8cb
mov esi, dword [esp + 0x174]
lea edi, [ebx + 2]
nop
mov eax, dword [esi + 0x24]
mov ecx, edi
lea ebx, [ebx + eax*2]
lea edx, [ebx + 2]
call fcn.004b6f10
test eax, eax
jne 0x4ae8b5
mov eax, dword [esi + 0xa8]
xor edx, edx
movzx ecx, word [ebx]
mov eax, dword [eax + 4]
cmp ecx, eax
sete dl
mov dword [esp + 0x24], edx
je 0x4ae8b9
inc ebp
cmp ebp, dword [esi + 0x20]
jl 0x4ae880
jmp 0x4ae8b9
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
test edx, edx
jne 0x4ae8da
movzx edi, word [ebp + 2]
jmp 0x4ae8e3
mov ebp, dword [esp + 0x10]
movzx edi, word [ebp + 2]
jmp 0x4ae8e3
mov edx, 1
mov ebp, dword [esp + 0x10]
mov edi, 2
lea ecx, [edi*2]
add ecx, ebp
mov eax, ecx
test edx, edx
jne 0x4b36b6
mov edi, dword [esp + 0x174]
cmp word [ecx], 0x71
mov eax, ecx
je 0x4b36bd
lea edx, [ecx + 4]
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x170]
movzx edi, word [eax + 2]
mov eax, dword [esp + 0x174]
lea edx, [edi + edi]
mov dword [eax + 0x94], edi
cmp edx, dword [eax + 0x14]
jl 0x4ae952
mov edx, dword [esp + 0x10]
mov edi, eax
add edx, 4
mov dword [esp + 0x10], edx
mov dword [edi + 0x40], 1
jmp 0x4ae2e7
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
sub eax, edi
mov edi, dword [esp + 0x174]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, esi
sub ecx, dword [edi + 0x78]
mov eax, dword [edi + 0xc]
sar ecx, 1
mov dword [eax + edx*4 + 4], ecx
cmp ebx, edx
jg 0x4ae983
lea ebx, [edx + 2]
mov dword [esp + 0x170], ebx
mov edx, dword [esp + 0x10]
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae2e7
mov ebp, dword [esp + 0x174]
mov edi, dword [edi + 0xb0]
cmp dword [ebp + 0x9c], 1
jne 0x4ae9ba
mov dword [ebp + 0x9c], 0
mov ebx, 1
jmp 0x4ae9bc
xor ebx, ebx
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push 0
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
cmp eax, 1
je 0x4aea25
cmp eax, 0xfffffc19
je 0x4aea25
test eax, eax
je 0x4aea02
cmp eax, 0xfffffc20
jne 0x4b38a6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
mov dword [ebp + 0xb0], edi
lea edx, [edx + eax*2]
movzx eax, word [edx]
mov dword [esp + 0x10], edx
mov ecx, eax
cmp eax, 0x71
je 0x4ae9c0
mov edi, ebp
jmp 0x4aea3b
mov edx, dword [esp + 0x10]
mov edi, ebp
mov eax, dword [edi + 0x80]
mov dword [esp + 0x16c], eax
movzx eax, word [edx]
cmp ax, 0x72
je case.0x4ae319.151
test ebx, ebx
jne 0x4b3a76
nop dword [eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4aea50
mov ebx, dword [edi + 0x90]
add edx, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x170], ebx
jmp 0x4ae2e7
mov ebp, dword [esp + 0x174]
mov edi, dword [edi + 0xb0]
cmp dword [ebp + 0x9c], 1
jne 0x4aea9e
mov dword [ebp + 0x9c], 0
mov ebx, 1
jmp 0x4aeaa0
xor ebx, ebx
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push 0
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
mov dword [ebp + 0xb0], edi
cmp eax, 1
je case.0x4ae319.151
cmp eax, 0xfffffc19
je case.0x4ae319.151
cmp eax, 0xfffffc1e
je 0x4aeb21
cmp eax, 0xfffffc1d
je 0x4aeb21
cmp eax, 0xfffffc1a
je 0x4aeb21
test eax, eax
je 0x4aeb09
cmp eax, 0xfffffc20
jne 0x4b38a6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
je 0x4aeaa4
jmp 0x4aeb3e
mov edx, dword [esp + 0x10]
nop word [eax + eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4aeb30
test ebx, ebx
jne 0x4b3a76
add edx, 4
mov edi, ebp
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edx, dword [esp + 0x10]
movzx ecx, word [edx + 2]
test ecx, ecx
je 0x4aeba2
mov edi, dword [edi + 0x78]
mov ebx, 0xdc00
mov ebp, 0xfc00
nop dword [eax]
lea eax, [esi - 2]
mov edx, esi
mov esi, eax
dec ecx
cmp esi, edi
jb case.0x4ae319.151
mov ax, word [eax]
and ax, bp
cmp ax, bx
cmovne esi, edx
sub esi, 2
mov dword [esp + 0x14], esi
test ecx, ecx
jg 0x4aeb70
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
cmp esi, dword [edi + 0x88]
jae 0x4aebb0
mov dword [edi + 0x88], esi
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov ecx, dword [0x4e82e8]
test ecx, ecx
je 0x4aec9d
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x80], 2
movzx eax, word [ebx + 2]
mov dword [esp + 0x84], eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x88], eax
mov eax, dword [edi + 0x78]
mov dword [esp + 0x8c], eax
mov eax, dword [edi + 0x7c]
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x16c]
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x94], eax
mov eax, esi
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x98], eax
movzx eax, word [ebx + 8]
mov dword [esp + 0xa8], eax
movzx eax, word [ebx + 0xa]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x170]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x9c], eax
mov eax, dword [edi + 0x94]
mov dword [esp + 0xa0], eax
mov eax, dword [edi + 0xac]
mov dword [esp + 0xa4], eax
mov eax, dword [edi + 0xb4]
mov dword [esp + 0xb0], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0x80]
push eax
call ecx
add esp, 4
test eax, eax
jg case.0x4ae319.151
js 0x4b38a6
mov edx, dword [esp + 0x10]
add edx, 0xc
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edx, dword [esp + 0x10]
mov ecx, dword [edi + 0x74]
movzx eax, word [edx + 2]
lea ebx, [ecx + eax*2]
cmp ebx, ecx
jne 0x4aecc3
xor ecx, ecx
jmp 0x4aecc7
movzx ecx, word [ebx + 4]
mov eax, dword [edi + 0xa8]
test eax, eax
je 0x4aece5
cmp ecx, dword [eax + 4]
jne 0x4aecdf
cmp esi, dword [eax + 0x10]
je 0x4b39d1
mov eax, dword [eax]
test eax, eax
jne 0x4aecd1
mov dword [esp + 0x54], ecx
add edx, 4
mov dword [esp + 0x60], esi
mov eax, dword [edi + 0xa8]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x50]
mov dword [edi + 0xa8], eax
mov ecx, dword [edi + 0x10]
mov dword [esp + 0x10], edx
mov dword [esp + 0x5c], ecx
cmp ecx, 0x1e
jg 0x4aed21
lea eax, [esp + 0xf0]
mov dword [esp + 0x58], eax
jmp 0x4aed42
lea eax, [ecx*4]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [esp + 0x58], eax
test eax, eax
je 0x4b3a07
mov ecx, dword [esp + 0x5c]
shl ecx, 2
push ecx
push dword [edi + 0xc]
push eax
call sub.VCRUNTIME140.dll_memcpy
movzx ebp, word [ebx]
add esp, 0xc
mov eax, 0x82
cmp bp, ax
jb 0x4aed69
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, word [ebx]
push edi
push dword [esp + 0x17c]
movzx eax, byte [eax + 0x4ce360]
push dword [esp + 0x17c]
lea edx, [ebx + eax*2]
call fcn.004ae1e0
mov ecx, dword [esp + 0x70]
add esp, 0x14
shl ecx, 2
mov edi, eax
mov eax, dword [esp + 0x174]
push ecx
push dword [esp + 0x5c]
push dword [eax + 0xc]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [esp + 0x180]
add esp, 0xc
mov eax, dword [esp + 0x50]
mov dword [ecx + 0xa8], eax
cmp edi, 1
je 0x4aee3b
cmp edi, 0xfffffc19
je 0x4aee3b
test edi, edi
je 0x4aeded
cmp edi, 0xfffffc20
jne 0x4b39e1
mov edi, ecx
lea eax, [esp + 0x50]
mov dword [edi + 0xa8], eax
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x71
lea ebx, [ebx + eax*2]
je 0x4aed55
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0xf0]
mov dword [edi + 0xa8], eax
mov eax, dword [esp + 0x58]
cmp eax, ecx
je case.0x4ae319.151
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xf0]
cmp eax, ecx
je 0x4aee54
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov edi, dword [esp + 0x174]
mov esi, dword [edi + 0x84]
mov eax, dword [edi + 0x80]
mov dword [esp + 0x14], esi
mov dword [esp + 0x16c], eax
jmp 0x4ae2dc
mov edx, dword [esp + 0x10]
nop dword [eax + eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4aee80
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
mov ebx, dword [esp + 0x170]
add edi, 2
push eax
push dword [esp + 0x17c]
mov edx, edi
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop dword [eax + eax]
movzx eax, word [edi + 2]
cmp word [edi + eax*2], 0x71
lea edi, [edi + eax*2]
je 0x4aeee0
lea edx, [edi + 4]
mov edi, dword [esp + 0x174]
mov dword [esp + 0x10], edx
jmp 0x4ae2e7
mov eax, dword [esp + 0x10]
add eax, 2
mov dword [esp + 0x10], eax
mov edx, eax
nop
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4aef10
mov eax, dword [esp + 0x17c]
add edx, 4
mov ebx, dword [esp + 0x170]
inc eax
push eax
push dword [esp + 0x17c]
mov ecx, esi
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov edx, dword [esp + 0x10]
jmp 0x4ae2e7
mov ecx, dword [esp + 0x10]
add ecx, 2
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
je 0x4aef63
lea edx, [ecx + 4]
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov eax, dword [esp + 0x10]
mov ebp, 1
add eax, 2
mov dword [esp + 0x28], ebp
mov dword [esp + 0x10], eax
movzx edx, word [eax]
mov dword [esp + 0x1c], edx
cmp edx, 0x80
je 0x4aefac
cmp edx, 0x85
jne 0x4af17d
movzx edx, word [eax + 4]
mov dword [esp + 0x2c], edx
lea eax, [edx + edx]
cmp eax, dword [edi + 0x14]
jge 0x4af173
mov ecx, dword [edi + 0xc]
xor ebp, ebp
mov ebx, dword [esp + 0x10]
sub ebx, dword [edi + 0x74]
shl eax, 2
mov dword [esp + 0x24], eax
sar ebx, 1
mov edi, dword [eax + ecx]
mov eax, dword [eax + ecx + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0x38], edi
mov eax, dword [eax + 0x10]
sub eax, edx
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x20], eax
mov edi, dword [ecx + 0x94]
mov eax, dword [esp + 0x174]
mov edx, esi
sub edx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x10]
sub ecx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
sar edx, 1
cmp dword [esp + 0x1c], 0x82
mov dword [eax + ecx*4], edx
jb 0x4af03a
mov eax, dword [esp + 0x174]
mov dword [eax + 0x9c], 2
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [ecx]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
movzx eax, byte [eax + 0x4ce360]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae1e0
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffc1b
jne 0x4af0b6
mov ecx, dword [esp + 0x174]
mov ebp, 1
mov eax, dword [ecx + 0x90]
mov esi, dword [ecx + 0x84]
mov dword [esp + 0x170], eax
mov eax, dword [ecx + 0x74]
mov dword [esp + 0x14], esi
lea eax, [eax + ebx*2]
mov dword [esp + 0x10], eax
jmp 0x4aeffe
cmp ecx, 0xfffffc20
jne 0x4af0f5
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], eax
jae 0x4af0e8
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4af0fd
cmp word [eax], 0x71
je 0x4af0fd
mov eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test ecx, ecx
jne 0x4af0e8
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x94], edi
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
je 0x4af004
mov edi, ecx
test ebp, ebp
jne 0x4af154
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
mov dword [ecx + eax], edx
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x30]
mov dword [ecx + eax + 4], edx
mov ecx, dword [edi + 0x10]
sub ecx, dword [esp + 0x2c]
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], edx
mov edx, dword [esp + 0x10]
cmp dword [esp + 0x28], 0
jne 0x4ae44b
test ebp, ebp
je case.0x4ae319.151
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov ecx, dword [esp + 0x174]
mov edi, eax
xor ebx, ebx
sub edi, dword [ecx + 0x74]
sar edi, 1
nop dword [eax]
cmp edx, 0x82
jb 0x4af1a2
mov dword [ecx + 0x9c], 2
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push ecx
mov ecx, dword [esp + 0x1c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x4ce360]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae1e0
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffc1b
jne 0x4af21c
mov ecx, dword [esp + 0x174]
mov ebx, 1
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x90]
mov esi, dword [ecx + 0x84]
mov dword [esp + 0x170], eax
mov eax, dword [ecx + 0x74]
mov dword [esp + 0x14], esi
lea eax, [eax + edi*2]
mov dword [esp + 0x10], eax
jmp 0x4af190
cmp ecx, 0xfffffc20
jne 0x4af252
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], eax
jae 0x4af0e8
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4af25a
cmp word [eax], 0x71
jmp 0x4af254
test ecx, ecx
jne 0x4af0e8
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x174]
je 0x4af190
test ebx, ebx
jne 0x4af28b
test ebp, ebp
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
mov edi, ecx
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edx, dword [esp + 0x10]
mov ebp, edx
movzx eax, word [edx + 2]
add eax, eax
sub ebp, eax
mov eax, 0x82
movzx ecx, word [ebp]
cmp cx, ax
jae 0x4af2c8
cmp ecx, 0x7b
je 0x4af2c8
mov dword [esp + 0x2c], 0
jmp 0x4af2e1
mov ebx, dword [esp + 0x178]
lea eax, [ebx + 4]
mov ebx, dword [ebx]
mov eax, dword [eax]
mov dword [esp + 0x178], ebx
mov dword [esp + 0x2c], eax
cmp ecx, 0x77
jb 0x4af2ef
cmp ecx, 0x7a
jbe 0x4b3a56
cmp ecx, 0x7c
je 0x4b3a56
cmp ecx, 0x7f
je 0x4af31b
mov eax, 0x84
cmp cx, ax
je 0x4af31b
mov eax, 0x80
cmp cx, ax
je 0x4af31b
mov eax, 0x85
cmp cx, ax
jne 0x4af34b
movzx ebx, word [ebp + 4]
mov eax, dword [edi + 0xa8]
lea edx, [ebx + ebx]
test eax, eax
je 0x4af335
cmp dword [eax + 4], ebx
je 0x4b3a17
mov dword [edi + 0x94], ebx
cmp edx, dword [edi + 0x14]
jl 0x4af3b9
mov edx, dword [esp + 0x10]
mov dword [edi + 0x40], 1
mov ebx, dword [esp + 0x170]
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x72
je 0x4af366
cmp esi, dword [esp + 0x2c]
jne 0x4b3710
add edx, 4
cmp word [ebp], 0x7b
mov dword [esp + 0x10], edx
jne 0x4ae2e7
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov dword [edi + 0xb8], ebp
mov eax, 0xfffffc1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [esp + 0x170]
cmp edx, ecx
jle 0x4af3e4
mov eax, dword [edi + 0xc]
lea edi, [eax + ecx*4]
lea ecx, [eax + edx*4]
cmp edi, ecx
jae 0x4af3dd
sub ecx, edi
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
sub eax, ebx
mov ebx, dword [esp + 0x170]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, esi
sub ecx, dword [edi + 0x78]
mov eax, dword [edi + 0xc]
sar ecx, 1
mov dword [eax + edx*4 + 4], ecx
cmp ebx, edx
jg 0x4af415
lea ebx, [edx + 2]
mov dword [esp + 0x170], ebx
mov edx, dword [esp + 0x10]
jmp 0x4af352
cmp dword [edi + 0x44], 0
je case.0x4ae319.1
cmp esi, dword [edi + 0x78]
je case.0x4ae319.151
cmp esi, dword [edi + 0x78]
jne case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp dword [edi + 0x44], 0
je 0x4af455
cmp esi, dword [edi + 0x78]
je case.0x4ae319.151
mov ecx, dword [edi + 0x78]
cmp esi, ecx
je 0x4af436
cmp esi, dword [edi + 0x7c]
je case.0x4ae319.151
mov edx, dword [edi + 0x18]
test edx, edx
je 0x4af49d
cmp esi, ecx
jbe case.0x4ae319.151
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b70c0
add esp, 0xc
test eax, eax
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edi, dword [edi + 0x1c]
lea edx, [edi + edi]
lea eax, [edx + ecx]
cmp esi, eax
jb case.0x4ae319.151
mov ecx, esi
sub ecx, edx
mov edx, dword [esp + 0x174]
mov ax, word [ecx]
cmp ax, word [edx + 0x2c]
jne case.0x4ae319.151
cmp edi, 1
mov edi, edx
je 0x4af436
mov ax, word [ecx + 2]
cmp ax, word [edi + 0x2e]
jne case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x78]
lea eax, [eax + ecx*2]
cmp esi, eax
jmp 0x4af430
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x16c], esi
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov ecx, dword [edi + 0x7c]
cmp esi, ecx
jae 0x4af583
mov edx, dword [edi + 0x18]
test edx, edx
je 0x4af550
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b7020
add esp, 0xc
test eax, eax
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edx, dword [edi + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ae319.151
mov ax, word [esi]
cmp ax, word [edi + 0x2c]
jne case.0x4ae319.151
cmp edx, 1
je 0x4af436
mov ax, word [esi + 2]
cmp ax, word [edi + 0x2e]
jmp 0x4af430
cmp dword [edi + 0x48], 0
jne case.0x4ae319.151
cmp dword [edi + 0x8c], 0
je 0x4af436
cmp esi, dword [edi + 0x88]
jbe 0x4af436
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp dword [edi + 0x48], 0
jne case.0x4ae319.151
cmp dword [edi + 0x58], 0
je case.0x4ae319.23
cmp esi, dword [edi + 0x7c]
jb case.0x4ae319.151
jmp 0x4af58d
mov edi, dword [edi + 0x7c]
cmp esi, edi
jae 0x4af658
mov ebp, dword [esp + 0x174]
mov edx, dword [ebp + 0x18]
lea ebx, [ebp + 0x1c]
test edx, edx
je 0x4af61a
push 1
push ebx
push edi
mov ecx, esi
call fcn.004b7020
add esp, 0xc
test eax, eax
je case.0x4ae319.151
mov edx, dword [ebx]
mov edi, dword [ebp + 0x7c]
jmp 0x4af64b
mov edx, dword [ebx]
mov ecx, edi
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ae319.151
mov ax, word [esi]
cmp ax, word [ebp + 0x2c]
jne case.0x4ae319.151
cmp edx, 1
je 0x4af64b
mov ax, word [esi + 2]
cmp ax, word [ebp + 0x2e]
jne case.0x4ae319.151
lea eax, [edx + edx]
sub edi, eax
cmp esi, edi
jne case.0x4ae319.151
mov edi, dword [esp + 0x174]
jmp 0x4af58d
cmp esi, dword [edi + 0x78]
je 0x4af727
mov ax, word [esi - 2]
lea edx, [esi - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
cmovne edx, esi
sub edx, 2
cmp edx, dword [edi + 0x88]
jae 0x4af698
mov dword [edi + 0x88], edx
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af6c3
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [edi + 0x54], 0
je 0x4af70f
cmp ecx, 0x5f
jne 0x4af6d3
lea edx, [ecx - 0x5e]
jmp 0x4af729
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4af708
cmp eax, 3
jne 0x4af727
mov edx, 1
jmp 0x4af729
cmp ecx, 0x100
jae 0x4af727
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x4af727
mov edx, 1
jmp 0x4af729
xor edx, edx
cmp esi, dword [edi + 0x7c]
jb 0x4af77a
cmp dword [edi + 0x8c], 0
je 0x4af753
cmp esi, dword [edi + 0x88]
jbe 0x4af753
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
xor ecx, ecx
mov ebx, dword [esp + 0x10]
xor ecx, edx
movzx eax, word [ebx]
add ebx, 2
mov dword [esp + 0x10], ebx
cmp eax, 5
jne 0x4af76d
xor ecx, 1
test ecx, ecx
jne case.0x4ae319.151
jmp 0x4ae2dc
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af7a5
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [edi + 0x54], 0
je 0x4af7fa
cmp ecx, 0x5f
jne 0x4af7b7
mov ecx, 1
jmp 0x4af755
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4af7f0
cmp eax, 3
jne 0x4af753
mov ecx, 1
jmp 0x4af755
cmp ecx, 0x100
jae 0x4af753
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x4af753
mov ecx, 1
jmp 0x4af755
mov edx, dword [edi + 0x18]
mov ecx, dword [edi + 0x7c]
test edx, edx
je 0x4af846
cmp esi, ecx
jae case.0x4ae319.13
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b7020
add esp, 0xc
test eax, eax
jne case.0x4ae319.151
jmp case.0x4ae319.13
mov edx, dword [edi + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ae319.13
mov ax, word [esi]
cmp ax, word [edi + 0x2c]
jne case.0x4ae319.13
cmp edx, 1
je case.0x4ae319.151
mov ax, word [esi + 2]
cmp ax, word [edi + 0x2e]
je case.0x4ae319.151
mov eax, dword [edi + 0x7c]
cmp esi, eax
jae 0x4b3a86
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, eax
jae 0x4af436
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4af436
mov edx, dword [esp + 0x10]
add esi, 2
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
mov edx, dword [esp + 0x10]
add esi, 2
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af91d
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4af436
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 4
jmp 0x4af430
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af976
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ae319.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 4
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af9e0
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4af436
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
jmp 0x4af430
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afa39
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ae319.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afaa3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4af436
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
jmp 0x4af430
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afafc
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ae319.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov edi, dword [edi + 0x7c]
cmp esi, edi
jae 0x4b3ab2
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afb60
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
cmp ecx, 0xd
ja 0x4afbc0
je 0x4afb8e
cmp ecx, 0xa
je 0x4afb71
lea eax, [ecx - 0xb]
jmp 0x4afbce
mov edi, dword [esp + 0x174]
mov esi, edx
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov esi, edx
mov dword [esp + 0x14], esi
cmp edx, edi
jae 0x4afba9
cmp word [edx], 0xa
mov dword [esp + 0x14], esi
jne 0x4afba9
lea esi, [edx + 2]
mov dword [esp + 0x14], esi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x174]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp ecx, 0x85
je 0x4afbd7
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae319.151
mov edi, dword [esp + 0x174]
mov esi, edx
mov dword [esp + 0x14], esi
cmp dword [edi + 0x68], 0
jmp 0x4af430
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afc2e
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4afc88
je case.0x4ae319.151
cmp ecx, 0xa0
ja 0x4afc6c
je case.0x4ae319.151
cmp ecx, 9
je case.0x4ae319.151
cmp ecx, 0x20
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp ecx, 0x1680
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp ecx, 0x205f
ja 0x4afcca
je case.0x4ae319.151
cmp ecx, 0x2000
jb 0x4af436
cmp ecx, 0x200a
jbe case.0x4ae319.151
cmp ecx, 0x202f
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp ecx, 0x3000
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afd27
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4afd5f
je 0x4af436
cmp ecx, 0xa0
ja 0x4afd54
je 0x4af436
cmp ecx, 9
je 0x4af436
cmp ecx, 0x20
jmp 0x4af430
cmp ecx, 0x1680
jmp 0x4af430
cmp ecx, 0x205f
ja 0x4afd90
je 0x4af436
cmp ecx, 0x2000
jb case.0x4ae319.151
cmp ecx, 0x200a
jbe 0x4af436
cmp ecx, 0x202f
jmp 0x4af430
cmp ecx, 0x3000
jmp 0x4af430
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afddc
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4afe0c
je case.0x4ae319.151
cmp ecx, 0xa
jb 0x4af436
cmp ecx, 0xd
jbe case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp ecx, 0x2028
jb 0x4af436
cmp ecx, 0x2029
jbe case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afe75
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4afe9f
je 0x4af436
lea eax, [ecx - 0xa]
cmp eax, 3
ja case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afeff
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov ebx, dword [esp + 0x10]
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx ecx, word [ebx + 2]
cmp ecx, 8
ja case.default.0x4aff2e
jmp dword [ecx*4 + 0x4b5c08]
cmp dword [esp + 0x1c], 0xf
jmp 0x4b0071
mov al, byte [eax*8 + 0x4cb081]
cmp al, 9
je 0x4b0060
cmp al, 5
je 0x4b0060
cmp al, 8
je 0x4b0060
xor ecx, ecx
jmp 0x4b0065
movzx ecx, byte [eax*8 + 0x4cb081]
xor edx, edx
movzx eax, word [ebx + 4]
cmp eax, dword [ecx*4 + 0x4ce740]
setne dl
xor eax, eax
cmp dword [esp + 0x1c], 0x10
sete al
cmp edx, eax
jmp 0x4b0071
movzx eax, byte [eax*8 + 0x4cb081]
mov edx, dword [esp + 0x10]
xor ecx, ecx
cmp word [edx + 4], ax
setne cl
xor eax, eax
cmp dword [esp + 0x1c], 0x10
sete al
cmp ecx, eax
je case.0x4ae319.151
add edx, 6
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
movzx eax, byte [eax*8 + 0x4cb080]
jmp 0x4aff96
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b0060
cmp eax, 3
je 0x4b0060
xor ecx, ecx
jmp 0x4b0065
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b0060
cmp edx, 9
je 0x4b0060
cmp edx, 0xa
je 0x4b0060
cmp edx, 0xc
je 0x4b0060
cmp edx, 0xd
je 0x4b0060
xor ecx, ecx
jmp 0x4b0065
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b0060
cmp edx, 9
je 0x4b0060
cmp edx, 0xa
je 0x4b0060
cmp edx, 0xb
jmp 0x4b000d
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b0060
cmp eax, 3
je 0x4b0060
cmp edx, 0x5f
je 0x4b0060
xor ecx, ecx
jmp 0x4b0065
mov ecx, 1
xor eax, eax
cmp dword [esp + 0x1c], 0xf
sete al
cmp ecx, eax
je case.0x4ae319.151
mov edx, dword [esp + 0x10]
add edx, 6
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov ebx, dword [edi + 0x7c]
cmp esi, ebx
jae 0x4b3a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b00ca
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
je case.0x4ae319.151
cmp esi, ebx
jae 0x4af436
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b013b
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4afba5
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4b0106
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x174]
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ae2e0
mov ebx, dword [esp + 0x10]
xor edx, edx
cmp dword [esp + 0x1c], 0x6e
sete dl
movzx eax, word [ebx + 2]
add ebx, 4
mov dword [esp + 0x24], edx
mov dword [esp + 0x10], ebx
lea ecx, [eax + eax]
mov dword [esp + 0x2c], ecx
cmp ecx, dword [esp + 0x170]
jge 0x4b01d0
mov eax, dword [edi + 0xc]
mov edi, dword [eax + ecx*4]
test edi, edi
js 0x4b01d0
mov ebp, dword [eax + ecx*4 + 4]
sub ebp, edi
jmp 0x4b01e1
mov eax, dword [esp + 0x174]
mov ebp, dword [eax + 0x50]
neg ebp
sbb ebp, ebp
neg ebp
dec ebp
movzx edi, word [ebx]
mov ebx, edi
lea eax, [ebx - 0x62]
cmp eax, 7
ja case.default.0x4b01f9
movzx eax, byte [eax + 0x4b5c34]
jmp dword [eax*4 + 0x4b5c2c]
mov eax, dword [esp + 0x28]
movsx edi, byte [ebx + str.space]
add eax, 6
mov dword [esp + 0x10], eax
mov eax, ebx
movsx ebx, byte [ebx + 0x4bf2ca]
and eax, 1
mov dword [esp + 0x38], eax
test ebx, ebx
mov eax, SysReAllocString
cmove ebx, eax
jmp 0x4b0254
xor eax, eax
cmp edi, 0x69
sete al
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x28]
movzx ebx, word [eax + 8]
movzx edi, word [eax + 6]
test ebx, ebx
cmove ebx, dword [esp + 0x44]
add eax, 0xa
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], ebx
test ebp, ebp
je 0x4ae2d5
jns 0x4b026a
test edi, edi
je 0x4ae2d5
mov ebx, 1
cmp edi, ebx
jl 0x4b02a2
push edx
push dword [esp + 0x178]
mov edx, esi
push ebp
call fcn.004ae030
add esp, 0xc
test eax, eax
js 0x4b3ae5
mov ecx, dword [esp + 0x2c]
lea esi, [esi + eax*2]
mov edx, dword [esp + 0x24]
inc ebx
mov dword [esp + 0x14], esi
cmp ebx, edi
jle 0x4b0273
mov eax, dword [esp + 0x28]
cmp edi, eax
je 0x4ae2d5
cmp dword [esp + 0x38], 0
je 0x4b3b04
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov ebx, dword [esp + 0x2c]
nop dword [eax + eax]
cmp edi, dword [esp + 0x28]
jge case.0x4ae319.151
push dword [esp + 0x24]
mov edx, esi
mov ecx, ebx
push dword [esp + 0x178]
push ebp
call fcn.004ae030
add esp, 0xc
test eax, eax
js 0x4b3ae5
mov edx, dword [esp + 0x10]
lea esi, [esi + eax*2]
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
inc edi
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b0300
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
push edx
push edi
push ebp
mov edx, esi
call fcn.004ae030
add esp, 0xc
test eax, eax
js 0x4b3bd3
lea esi, [esi + eax*2]
mov dword [esp + 0x14], esi
jmp 0x4ae2dc
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 0x22]
lea ebp, [eax + 2]
add eax, 0x22
mov dword [esp + 0x40], ebp
mov ecx, edx
mov dword [esp + 0x10], eax
lea eax, [ecx - 0x62]
cmp eax, 7
ja case.default.0x4b03c3
movzx eax, byte [eax + 0x4b5c44]
jmp dword [eax*4 + 0x4b5c3c]
movsx edi, byte [ecx + str.space]
mov ebx, ecx
movsx ecx, byte [ecx + 0x4bf2ca]
and ebx, 1
mov edx, dword [esp + 0x10]
test ecx, ecx
mov eax, SysReAllocString
mov dword [esp + 0x30], ebx
cmove ecx, eax
mov eax, 2
jmp 0x4b041d
xor eax, eax
cmp edx, 0x69
mov edx, dword [esp + 0x10]
sete al
mov dword [esp + 0x30], eax
mov eax, SysReAllocString
movzx ecx, word [edx + 4]
movzx edi, word [edx + 2]
test ecx, ecx
cmove ecx, eax
mov eax, 6
add edx, eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x10], edx
cmp edi, 1
jl 0x4b04c8
jmp 0x4b0447
mov edi, 1
mov dword [esp + 0x28], 1
mov dword [esp + 0x24], edi
mov ebx, 1
nop dword [eax]
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b3ab9
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0498
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add edx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp edx, 0xff
jbe 0x4b04a7
cmp dword [esp + 0x1c], 0x6a
jmp 0x4b04b9
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
test byte [edx + ebp], al
je case.0x4ae319.151
inc ebx
cmp ebx, edi
jle 0x4b0450
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x28]
cmp edi, ebx
jne 0x4b3bee
mov edi, dword [esp + 0x174]
jmp 0x4ae2e0
mov edi, dword [esp + 0x10]
movzx eax, word [edi + 2]
lea ebp, [edi + 4]
movzx edx, word [edi + eax*2]
lea edi, [edi + eax*2]
mov ecx, edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x10], edi
lea eax, [ecx - 0x62]
cmp eax, 7
ja case.default.0x4b050b
movzx eax, byte [eax + 0x4b5c54]
jmp dword [eax*4 + 0x4b5c4c]
movsx eax, byte [ecx + 0x4bf2ca]
mov edx, ecx
movsx ebx, byte [ecx + str.space]
add edi, 2
and edx, 1
mov dword [esp + 0x10], edi
mov dword [esp + 0x30], edx
mov dword [esp + 0x28], eax
test eax, eax
jne 0x4b057a
mov dword [esp + 0x28], SysReAllocString
jmp 0x4b057a
movzx ebx, word [edi + 2]
xor eax, eax
cmp edx, 0x69
mov ecx, SysReAllocString
sete al
mov dword [esp + 0x30], eax
movzx eax, word [edi + 4]
test eax, eax
cmove eax, ecx
add edi, 6
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edi
jmp 0x4b057a
mov dword [esp + 0x28], 1
mov ebx, 1
mov edi, 1
cmp ebx, edi
jl 0x4b05f1
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b3ab9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b05d8
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
push 1
mov edx, ebp
call fcn.004b71a0
add esp, 4
test eax, eax
je case.0x4ae319.151
inc edi
cmp edi, ebx
jle 0x4b0590
mov edi, dword [esp + 0x28]
cmp ebx, edi
je 0x4ae2d5
cmp dword [esp + 0x30], 0
je 0x4b3e65
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp ebx, edi
jge case.0x4ae319.151
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b3ab9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b068b
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
push 1
mov edx, ebp
call fcn.004b71a0
add esp, 4
test eax, eax
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b0643
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebx, dword [esp + 0x10]
mov ecx, 0xfc00
add ebx, 2
xor edx, edx
mov ax, word [ebx]
and ax, cx
mov ecx, 0xd800
cmp ax, cx
mov ecx, dword [edi + 0x7c]
mov eax, ecx
sete dl
sub eax, esi
inc edx
sar eax, 1
cmp edx, eax
jg 0x4b3fa3
movzx ecx, word [ebx]
dec edx
movzx eax, word [esi]
add ebx, 2
add esi, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
cmp cx, ax
jne case.0x4ae319.151
test edx, edx
jg 0x4b0717
jmp 0x4ae2dc
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
mov ecx, dword [esp + 0x10]
add ecx, 2
movzx edi, word [ecx]
lea edx, [ecx + 2]
mov eax, edi
mov dword [esp + 0x10], edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0786
movzx eax, word [edx]
and edi, 0x3ff
and eax, 0x3ff
shl edi, 0xa
or edi, eax
mov ebx, 4
add edi, 0x10000
jmp 0x4b078b
mov ebx, 2
movzx eax, word [esi]
cmp edi, 0x80
jae 0x4b07d5
mov ebx, 0xff
mov ecx, eax
cmp ax, bx
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x34]
ja 0x4b07b2
movzx ecx, byte [eax + ecx]
jmp 0x4b07b6
mov dword [esp + 0x10], edx
movzx eax, byte [eax + edi]
cmp eax, ecx
jne case.0x4ae319.151
mov edi, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
jmp 0x4ae2e0
mov edx, eax
add esi, 2
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b080a
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
lea eax, [ecx + ebx]
mov ebx, dword [esp + 0x170]
mov dword [esp + 0x10], eax
cmp edi, edx
je 0x4ae2c2
mov eax, edi
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edi
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov eax, dword [eax*8 + 0x4cb084]
add eax, edi
cmp edx, eax
jne case.0x4ae319.151
jmp 0x4ae2d5
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
lea edi, [ecx + 4]
mov ebp, eax
jmp 0x4b092c
mov dword [esp + 0x38], 1
mov ebx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x24], ebp
movzx eax, word [ebx + 2]
mov dword [esp + 0x1c], eax
cmp ecx, 0x28
je 0x4b088e
mov dword [esp + 0x30], ebp
cmp ecx, 0x35
jne 0x4b0896
mov dword [esp + 0x30], 1
lea edi, [ebx + 4]
jmp 0x4b0934
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], SysReAllocString
jmp 0x4b0930
mov edi, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], SysReAllocString
jmp 0x4b0930
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], 1
jmp 0x4b0930
mov edi, dword [esp + 0x10]
cmp edx, 0x2e
mov ecx, edx
sbb eax, eax
add edi, 2
and eax, 0xfffffff3
add eax, 0x2e
sub ecx, eax
mov eax, ecx
and ecx, 1
mov dword [esp + 0x30], ecx
mov ecx, SysReAllocString
movsx ebp, byte [eax + 0x4bf334]
movsx eax, byte [eax + 0x4bf32c]
test eax, eax
cmove eax, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebp
movzx ebx, word [edi]
mov ecx, 1
mov eax, ebx
mov dword [esp + 0x20], edi
and eax, 0xfc00
mov dword [esp + 0x18], ecx
cmp eax, 0xd800
jne 0x4b0975
movzx eax, word [edi + 2]
and ebx, 0x3ff
and eax, 0x3ff
shl ebx, 0xa
or ebx, eax
mov ecx, 2
add ebx, 0x10000
mov dword [esp + 0x18], ecx
lea eax, [edi + ecx*2]
mov dword [esp + 0x10], eax
cmp ecx, 1
jbe 0x4b0d4a
cmp edx, 0x2e
jb 0x4b09c4
mov eax, ebx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, ebx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov ecx, dword [eax*8 + 0x4cb084]
add ecx, ebx
cmp ecx, ebx
je 0x4b09c4
lea edx, [esp + 0x74]
call fcn.004b6fc0
mov dword [esp + 0x2c], eax
jmp 0x4b09cc
mov dword [esp + 0x2c], 0
mov edi, dword [esp + 0x24]
mov ebp, 1
cmp edi, ebp
jl 0x4b0b0c
mov eax, dword [esp + 0x174]
mov edx, dword [esp + 0x18]
mov ecx, dword [eax + 0x7c]
mov eax, ecx
lea ebx, [edx + edx]
mov dword [esp + 0x28], ecx
sub eax, ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], eax
nop
cmp esi, eax
ja 0x4b0a6d
lea edi, [edx + edx]
mov ecx, esi
mov edx, dword [esp + 0x20]
sub edi, 4
jb 0x4b0a23
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b0a2c
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b0a12
cmp edi, 0xfffffffc
je 0x4b0ae9
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b0a69
cmp edi, 0xfffffffd
je 0x4b0ae9
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b0a69
cmp edi, 0xfffffffe
je 0x4b0ae9
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b0a69
cmp edi, 0xffffffff
je 0x4b0ae9
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4b0ae9
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
test edx, edx
jle 0x4b3ae5
lea ebx, [edx + edx]
mov eax, ecx
sub eax, ebx
cmp esi, eax
ja 0x4b3ae5
lea edi, [edx + edx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4b0aa7
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b0aac
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b0a96
cmp edi, 0xfffffffc
je 0x4b0ae9
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b3ae5
cmp edi, 0xfffffffd
je 0x4b0ae9
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b3ae5
cmp edi, 0xfffffffe
je 0x4b0ae9
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b3ae5
cmp edi, 0xffffffff
je 0x4b0ae9
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4b3ae5
mov edi, dword [esp + 0x24]
add esi, ebx
mov eax, dword [esp + 0x48]
inc ebp
mov ebx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
cmp ebp, edi
jle 0x4b0a00
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x170]
cmp edi, ebp
je 0x4ae2c2
cmp dword [esp + 0x30], 0
jne 0x4b3fbd
mov ebx, esi
mov dword [esp + 0x30], ebx
cmp edi, ebp
jge 0x4b0c61
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x7c]
mov ebp, eax
lea ebx, [ecx + ecx]
mov dword [esp + 0x28], eax
mov dword [esp + 0x40], ebx
sub ebp, ebx
cmp esi, ebp
ja 0x4b0bbe
mov edx, dword [esp + 0x20]
lea edi, [ecx + ecx]
mov ecx, esi
sub edi, 4
jb 0x4b0b78
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b0b81
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b0b67
cmp edi, 0xfffffffc
je 0x4b0c38
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b0bba
cmp edi, 0xfffffffd
je 0x4b0c38
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b0bba
cmp edi, 0xfffffffe
je 0x4b0c38
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b0bba
cmp edi, 0xffffffff
je 0x4b0c38
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4b0c38
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x4b0d10
lea ebx, [ecx + ecx]
sub eax, ebx
cmp esi, eax
ja 0x4b0d10
lea edi, [ecx + ecx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4b0bf6
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b0bfb
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b0be5
cmp edi, 0xfffffffc
je 0x4b0c38
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b0d10
cmp edi, 0xfffffffd
je 0x4b0c38
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b0d10
cmp edi, 0xfffffffe
je 0x4b0c38
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b0d10
cmp edi, 0xffffffff
je 0x4b0c38
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4b0d10
mov edi, dword [esp + 0x24]
add esi, ebx
mov ebx, dword [esp + 0x40]
inc edi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
mov dword [esp + 0x24], edi
cmp edi, dword [esp + 0x1c]
jl 0x4b0b55
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae2dc
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop word [eax + eax]
mov ecx, esi
cmp esi, ebx
je case.0x4ae319.151
mov ax, word [esi - 2]
sub esi, 2
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b0cd6
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b0cb0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b0d41
cmp esi, dword [edi + 0x7c]
jb 0x4b0d41
cmp esi, dword [edi + 0x88]
jbe 0x4b0d41
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
mov ebx, dword [esp + 0x30]
jmp 0x4b0c68
cmp edx, 0x2e
jb 0x4b0eb8
cmp ebx, 0x7f
jbe 0x4b0d81
mov eax, ebx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, ebx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov edi, dword [eax*8 + 0x4cb084]
add edi, ebx
jmp 0x4b0d9b
cmp ebx, 0xff
ja 0x4b0d99
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x38]
movzx edi, byte [eax + ebx]
jmp 0x4b0d9b
mov edi, ebx
mov ecx, 1
cmp ebp, ecx
jl 0x4b0dd3
mov eax, dword [esp + 0x174]
mov edx, dword [eax + 0x7c]
nop
cmp esi, edx
jae 0x4b3ab2
movzx eax, word [esi]
cmp ebx, eax
je 0x4b0dc7
cmp edi, eax
jne case.0x4ae319.151
add esi, 2
inc ecx
mov dword [esp + 0x14], esi
cmp ecx, ebp
jle 0x4b0db0
mov eax, dword [esp + 0x1c]
cmp ebp, eax
je 0x4ae2d5
cmp dword [esp + 0x30], 0
jne 0x4b4179
mov edx, dword [esp + 0x24]
mov ebp, esi
cmp edx, eax
jge 0x4b0e21
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop
cmp esi, ecx
jae 0x4b0e87
movzx eax, word [esi]
cmp ebx, eax
je 0x4b0e13
cmp edi, eax
jne 0x4b0e21
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, dword [esp + 0x1c]
jl 0x4b0e00
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae2dc
cmp esi, ebp
jb case.0x4ae319.151
nop dword [eax + eax]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
sub esi, 2
test eax, eax
jne 0x4b38a6
cmp esi, ebp
jae 0x4b0e40
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b0e28
cmp esi, dword [edi + 0x88]
jbe 0x4b0e28
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
jmp 0x4b0e28
mov edi, dword [esp + 0x174]
mov ecx, 1
cmp ebp, ecx
jl 0x4b0eef
mov edx, dword [edi + 0x7c]
nop dword [eax + eax]
cmp esi, edx
jae 0x4b3a86
movzx eax, word [esi]
add esi, 2
mov dword [esp + 0x14], esi
cmp ebx, eax
jne case.0x4ae319.151
inc ecx
cmp ecx, ebp
jle 0x4b0ed0
mov edx, dword [esp + 0x1c]
cmp ebp, edx
je 0x4ae2dc
cmp dword [esp + 0x30], 0
jne 0x4b421d
mov edi, esi
cmp ebp, edx
jge 0x4b0f5b
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b0f2f
movzx eax, word [esi]
cmp ebx, eax
jne 0x4b0f5b
add esi, 2
inc ebp
mov dword [esp + 0x14], esi
cmp ebp, edx
jl 0x4b0f16
jmp 0x4b0f5b
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b0f5b
cmp esi, dword [eax + 0x88]
jbe 0x4b0f5b
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b5476
cmp dword [esp + 0x38], 0
jne 0x4ae2d5
cmp esi, edi
jb case.0x4ae319.151
nop
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
sub esi, 2
test eax, eax
jne 0x4b38a6
cmp esi, edi
jae 0x4b0f70
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx edi, word [esi]
add esi, 2
mov ecx, dword [esp + 0x10]
mov eax, edi
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b1002
movzx eax, word [esi]
and edi, 0x3ff
and eax, 0x3ff
shl edi, 0xa
add esi, 2
or edi, eax
mov dword [esp + 0x14], esi
add edi, 0x10000
movzx edx, word [ecx + 2]
lea eax, [ecx + 4]
mov dword [esp + 0x10], eax
cmp ebp, 0x20
jne 0x4b1069
cmp edx, 0x7f
jbe 0x4b1040
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov eax, dword [eax*8 + 0x4cb084]
add eax, edx
jmp 0x4b105a
cmp edx, 0xff
ja 0x4b1058
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x38]
movzx eax, byte [eax + edx]
jmp 0x4b105a
mov eax, edx
cmp edx, edi
je case.0x4ae319.151
cmp eax, edi
jmp 0x4ae2cf
mov dword [esp + 0x10], eax
cmp edx, edi
jmp 0x4ae2cf
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
add ecx, 4
mov dword [esp + 0x1c], eax
mov ebx, eax
jmp 0x4b1153
mov edx, dword [esp + 0x10]
xor ebx, ebx
movzx eax, word [edx + 2]
mov dword [esp + 0x1c], eax
cmp ecx, 0x42
je 0x4b10a6
mov dword [esp + 0x30], ebx
cmp ecx, 0x4f
jne 0x4b10ae
mov dword [esp + 0x30], 1
lea ecx, [edx + 4]
jmp 0x4b1153
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
add ecx, 2
jmp 0x4b114b
mov ecx, dword [esp + 0x10]
mov ebx, 1
mov dword [esp + 0x38], 1
add ecx, 2
jmp 0x4b114b
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
add ecx, 2
mov dword [esp + 0x1c], 1
jmp 0x4b1153
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
movzx eax, word [ecx + 2]
add ecx, 4
mov dword [esp + 0x1c], eax
jmp 0x4b1153
mov ecx, dword [esp + 0x10]
cmp edx, 0x48
sbb eax, eax
add ecx, 2
and eax, 0xfffffff3
add eax, 0x48
sub edx, eax
mov eax, edx
and edx, 1
mov dword [esp + 0x30], edx
movsx ebx, byte [eax + 0x4bf334]
movsx eax, byte [eax + 0x4bf32c]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x4b1153
mov dword [esp + 0x1c], SysReAllocString
movzx edi, word [ecx]
lea edx, [ecx + 2]
mov dword [esp + 0x24], edi
mov dword [esp + 0x10], edx
cmp ebp, 0x48
jb 0x4b1390
cmp edi, 0x7f
jbe 0x4b1198
mov eax, edi
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edi
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov ebp, dword [eax*8 + 0x4cb084]
add ebp, edi
jmp 0x4b11b2
cmp edi, 0xff
ja 0x4b11b0
mov ecx, dword [esp + 0x174]
mov eax, dword [ecx + 0x38]
movzx ebp, byte [eax + edi]
jmp 0x4b11b9
mov ebp, edi
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x2c], ebp
cmp ebx, 1
jl 0x4b122f
mov edi, dword [ecx + 0x7c]
mov edx, 1
nop word [eax + eax]
cmp esi, edi
jae 0x4b42b0
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1210
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x24], ecx
je case.0x4ae319.151
cmp ebp, ecx
je case.0x4ae319.151
inc edx
cmp edx, ebx
jle 0x4b11d0
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
cmp ebx, eax
je 0x4b04d4
cmp dword [esp + 0x30], 0
jne 0x4b42e3
mov ebp, esi
cmp ebx, eax
jge 0x4b12ad
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b1357
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1293
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp dword [esp + 0x24], ecx
je 0x4b12ad
cmp dword [esp + 0x2c], ecx
je 0x4b12ad
inc ebx
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebx, dword [esp + 0x1c]
jl 0x4b1256
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae2dc
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ae319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b131d
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b12f6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b12b4
cmp esi, dword [edi + 0x88]
jbe 0x4b12b4
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
jmp 0x4b12b4
mov ebp, dword [esp + 0x174]
mov edx, 1
cmp ebx, edx
jl 0x4b13f6
mov edi, dword [ebp + 0x7c]
cmp esi, edi
jae 0x4b43e7
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b13e3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x24], ecx
je case.0x4ae319.151
inc edx
cmp edx, ebx
jle 0x4b13a3
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
cmp ebx, eax
je 0x4b04d4
cmp dword [esp + 0x30], 0
jne 0x4b4413
mov ebp, esi
cmp ebx, eax
jge 0x4b1472
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b1521
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b145e
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp dword [esp + 0x24], ecx
je 0x4b1472
inc ebx
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebx, dword [esp + 0x1c]
jl 0x4b1421
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae2dc
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop dword [eax + eax]
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ae319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b14e7
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b14c0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b1479
cmp esi, dword [edi + 0x88]
jbe 0x4b1479
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
jmp 0x4b1479
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], 1
movzx eax, word [ecx + 2]
mov ebp, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebp
lea eax, [ecx + 4]
jmp 0x4b164d
mov edx, dword [esp + 0x10]
xor ebx, ebx
xor ebp, ebp
cmp ecx, 0x5c
mov dword [esp + 0x24], ebp
sete bl
movzx eax, word [edx + 2]
mov dword [esp + 0x20], eax
lea eax, [edx + 4]
mov dword [esp + 0x30], ebx
jmp 0x4b164d
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
jmp 0x4b1645
mov eax, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
jmp 0x4b1645
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], 1
jmp 0x4b164d
mov ecx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
mov dword [esp + 0x24], ebp
movzx eax, word [ecx + 2]
mov dword [esp + 0x20], eax
lea eax, [ecx + 4]
jmp 0x4b164d
mov eax, dword [esp + 0x10]
lea ecx, [edx - 1]
movsx ebp, byte [edx + 0x4bf2df]
and ecx, 1
mov dword [esp + 0x30], ecx
add eax, 2
movsx ecx, byte [edx + 0x4bf2d7]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ecx
test ecx, ecx
jne 0x4b164d
mov dword [esp + 0x20], SysReAllocString
movzx edi, word [eax]
lea edx, [eax + 2]
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], edx
cmp edi, 0x10
je 0x4b1672
cmp edi, 0xf
je 0x4b1672
mov ebx, dword [esp + 0x34]
or eax, 0xffffffff
mov dword [esp + 0x2c], eax
jmp 0x4b1698
movzx ecx, word [edx]
lea eax, [edx + 2]
movzx edx, word [eax]
xor ebx, ebx
cmp edi, 0xf
mov dword [esp + 0x3c], edx
mov dword [esp + 0x2c], ecx
sete bl
add eax, 2
mov dword [esp + 0x10], eax
mov eax, ecx
mov dword [esp + 0x34], ebx
test ebp, ebp
jle 0x4b1b25
test eax, eax
js 0x4b1cdd
cmp eax, 8
ja case.default.0x4aff2e
jmp dword [eax*4 + 0x4b5c5c]
test ebx, ebx
jne case.0x4ae319.151
lea edx, [ebx + 1]
mov ebx, dword [esp + 0x174]
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
mov ecx, esi
cmp esi, edi
jae 0x4b5449
movzx eax, word [esi]
add esi, 2
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b16fc
lea esi, [ecx + 4]
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b16d5
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1761
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
mov al, byte [eax*8 + 0x4cb081]
cmp al, 9
je 0x4b1794
cmp al, 5
je 0x4b1794
cmp al, 8
je 0x4b1794
xor eax, eax
jmp 0x4b1799
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b1721
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1810
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov ebx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], ebx
mov ebx, dword [esp + 0x174]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b17d0
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
nop
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b18c0
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
mov ebx, dword [esp + 0x174]
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b1880
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1967
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
mov ebx, dword [esp + 0x174]
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb080]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b1927
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
nop
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1a10
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b1a49
cmp eax, 3
je 0x4b1a49
xor eax, eax
jmp 0x4b1a4e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b19d0
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov edi, 1
cmp ebp, edi
jl 0x4b1b21
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b3ab2
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1ac1
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b1b09
cmp edx, 9
je 0x4b1b09
cmp edx, 0xa
je 0x4b1b09
cmp edx, 0xc
je 0x4b1b09
cmp edx, 0xd
je 0x4b1b09
xor eax, eax
jmp 0x4b1b0e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
inc edi
cmp edi, ebp
jle 0x4b1a81
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x174]
mov edx, dword [esp + 0x20]
cmp ebp, edx
je 0x4ae2d5
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0x2c]
jne 0x4b46a1
mov ebx, esi
mov dword [esp + 0x1c], ebx
test eax, eax
js 0x4b2be8
cmp eax, 8
ja case.default.0x4aff2e
jmp dword [eax*4 + 0x4b5c80]
mov edi, 1
cmp ebp, edi
jl 0x4b1b21
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b3ab2
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1bb8
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b1c05
cmp edx, 9
je 0x4b1c05
cmp edx, 0xa
je 0x4b1c05
cmp edx, 0xb
je 0x4b1c05
cmp edx, 0xc
je 0x4b1c05
cmp edx, 0xd
je 0x4b1c05
xor eax, eax
jmp 0x4b1c0a
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
inc edi
cmp edi, ebp
jle 0x4b1b78
jmp 0x4b1b21
mov edi, 1
cmp ebp, edi
jl 0x4b1b21
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
nop dword [eax]
cmp esi, ebx
jae 0x4b3ab2
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1c80
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b1cc0
cmp eax, 3
je 0x4b1cc0
cmp edx, 0x5f
je 0x4b1cc0
xor eax, eax
jmp 0x4b1cc5
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
inc edi
cmp edi, ebp
jle 0x4b1c40
jmp 0x4b1b21
cmp edi, 0x16
jne 0x4b1e11
mov ebx, dword [esp + 0x174]
mov ebp, 1
cmp dword [esp + 0x24], ebp
jl 0x4b2515
nop dword [eax]
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
mov esi, edx
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b1d43
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
je case.0x4ae319.151
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b1df9
mov ebx, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1db7
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4b1dee
lea esi, [ebx + edx*2]
mov ebx, esi
cmp esi, edi
jb 0x4b1d82
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x24]
jle 0x4b1d00
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4aff2e
jmp dword [eax*4 + 0x4b5ca4]
mov ebx, dword [esp + 0x174]
mov edi, 1
cmp ebp, edi
jl 0x4b1ec8
mov ecx, dword [ebx + 0x7c]
nop dword [eax + eax]
cmp esi, ecx
jae 0x4b5449
mov edx, dword [ebx + 0x18]
lea eax, [ebx + 0x1c]
test edx, edx
je 0x4b1e6a
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b7020
add esp, 0xc
test eax, eax
jne case.0x4ae319.151
jmp 0x4b1e95
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b1e95
mov ax, word [esi]
cmp ax, word [ebx + 0x2c]
jne 0x4b1e95
cmp edx, 1
je case.0x4ae319.151
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x2e]
je case.0x4ae319.151
mov ecx, dword [ebx + 0x7c]
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, ecx
jae 0x4b1ebf
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b1ebf
add esi, 2
mov dword [esp + 0x14], esi
inc edi
cmp edi, ebp
jle 0x4b1e40
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov ecx, 1
cmp ebp, ecx
jl 0x4b1b2c
mov edx, dword [ebx + 0x7c]
cmp esi, edx
jae 0x4b5449
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edx
jae 0x4b1f11
mov ax, word [esi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x68]
jne 0x4b1f11
add esi, 2
mov dword [esp + 0x14], esi
inc ecx
cmp ecx, ebp
jle 0x4b1ee8
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
lea ecx, [ebp*2]
mov eax, dword [ebx + 0x7c]
sub eax, ecx
cmp esi, eax
ja case.0x4ae319.151
add esi, ecx
mov dword [esp + 0x14], esi
jmp 0x4b1b2c
mov edi, 1
cmp ebp, edi
jl 0x4b1b21
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b3ab9
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1f90
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
cmp ecx, 0xd
ja 0x4b1fdc
je 0x4b1fb8
cmp ecx, 0xa
je 0x4b1fa1
lea eax, [ecx - 0xb]
jmp 0x4b1fea
mov esi, edx
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x174]
inc edi
cmp edi, ebp
jle 0x4b1f58
jmp 0x4b1b21
mov esi, edx
mov dword [esp + 0x14], esi
cmp edx, ebx
jae 0x4b1fa7
cmp word [edx], 0xa
mov eax, dword [esp + 0x174]
mov dword [esp + 0x14], esi
jne 0x4b1fae
lea esi, [edx + 2]
mov dword [esp + 0x14], esi
jmp 0x4b1fae
cmp ecx, 0x85
je 0x4b1ff3
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae319.151
mov eax, dword [esp + 0x174]
mov esi, edx
mov dword [esp + 0x14], esi
cmp dword [eax + 0x68], 0
jne case.0x4ae319.151
jmp 0x4b1fae
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2063
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4b2095
je case.0x4ae319.151
cmp ecx, 0xa0
ja 0x4b208d
je case.0x4ae319.151
cmp ecx, 9
je case.0x4ae319.151
cmp ecx, 0x20
jmp 0x4b20c5
cmp ecx, 0x1680
jmp 0x4b20c5
cmp ecx, 0x205f
ja 0x4b20bf
je case.0x4ae319.151
cmp ecx, 0x2000
jb 0x4b20cb
cmp ecx, 0x200a
jbe case.0x4ae319.151
cmp ecx, 0x202f
jmp 0x4b20c5
cmp ecx, 0x3000
je case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b2023
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2134
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4b215a
je 0x4b218c
cmp ecx, 0xa0
ja 0x4b2152
je 0x4b218c
cmp ecx, 9
je 0x4b218c
cmp ecx, 0x20
jmp 0x4b2186
cmp ecx, 0x1680
jmp 0x4b2186
cmp ecx, 0x205f
ja 0x4b2180
je 0x4b218c
cmp ecx, 0x2000
jb case.0x4ae319.151
cmp ecx, 0x200a
jbe 0x4b218c
cmp ecx, 0x202f
jmp 0x4b2186
cmp ecx, 0x3000
jne case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b20f4
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b21f5
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4b220d
je case.0x4ae319.151
cmp ecx, 0xa
jb 0x4b2221
cmp ecx, 0xd
jmp 0x4b221b
cmp ecx, 0x2028
jb 0x4b2221
cmp ecx, 0x2029
jbe case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b21b5
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2286
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4b2298
je 0x4b22a7
lea eax, [ecx - 0xa]
cmp eax, 3
jmp 0x4b22a1
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b2246
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2310
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x80
jae 0x4b2325
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
jne case.0x4ae319.151
inc edx
cmp edx, ebp
jle 0x4b22d0
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
nop word [eax + eax]
cmp esi, edi
jae 0x4b5449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ae319.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
je case.0x4ae319.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b2350
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae 0x4b23c8
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
jne case.0x4ae319.151
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b23ef
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4b23ef
add esi, 2
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b23a4
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ae319.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
je case.0x4ae319.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b2414
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae 0x4b248c
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x4ae319.151
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b24b3
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4b24b3
add esi, 2
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b2468
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov edx, 1
cmp ebp, edx
jl 0x4b1b25
mov ebx, dword [esp + 0x174]
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b5449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ae319.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
je case.0x4ae319.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b24d8
mov edi, dword [esp + 0x18]
jmp 0x4b1b2c
mov ebp, dword [esp + 0x24]
jmp 0x4b1b2c
mov edi, dword [esp + 0x174]
cmp ebp, edx
jge 0x4b2b45
mov edx, dword [edi + 0x7c]
cmp esi, edx
jae 0x4b2620
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
cmp dword [esp + 0x34], 0
movzx ecx, ax
jne 0x4b2b45
xor eax, eax
cmp cx, word [esp + 0x4c]
sete al
inc ebp
lea esi, [esi + eax*2]
add esi, 2
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2530
jmp 0x4b2b45
cmp ebp, edx
jge 0x4b2b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b25c0
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
mov al, byte [eax*8 + 0x4cb081]
cmp al, 9
je 0x4b25f3
cmp al, 5
je 0x4b25f3
cmp al, 8
je 0x4b25f3
xor eax, eax
jmp 0x4b25f8
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2583
jmp 0x4b2b3e
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b2b45
cmp esi, dword [edi + 0x88]
jbe 0x4b2b45
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
jmp 0x4b2b45
cmp ebp, edx
jge 0x4b2b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b269d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov ebx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], ebx
mov ebx, dword [esp + 0x1c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b2b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2664
jmp 0x4b2b3e
cmp ebp, edx
jge 0x4b2b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2745
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b2b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2708
jmp 0x4b2b3e
cmp ebp, edx
jge 0x4b2b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b27e2
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb080]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b2b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b27a5
jmp 0x4b2b3e
cmp ebp, edx
jge 0x4b2b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b287f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b28b8
cmp eax, 3
je 0x4b28b8
xor eax, eax
jmp 0x4b28bd
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2842
jmp 0x4b2b3e
cmp ebp, edx
jge 0x4b2b3e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
mov edi, 1
cmp esi, ebx
jae 0x4b299b
movzx edx, word [esi]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b292d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b2975
cmp edx, 9
je 0x4b2975
cmp edx, 0xa
je 0x4b2975
cmp edx, 0xc
je 0x4b2975
cmp edx, 0xd
je 0x4b2975
xor eax, eax
jmp 0x4b297a
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2b3a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b28f0
jmp 0x4b2b3a
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b29c7
cmp esi, dword [edi + 0x88]
jbe 0x4b29c7
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
mov ebx, dword [esp + 0x1c]
jmp 0x4b2b45
cmp ebp, edx
jge 0x4b2b3e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
mov edi, 1
cmp esi, ebx
jae 0x4b299b
movzx edx, word [esi]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2a1b
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b2a68
cmp edx, 9
je 0x4b2a68
cmp edx, 0xa
je 0x4b2a68
cmp edx, 0xb
je 0x4b2a68
cmp edx, 0xc
je 0x4b2a68
cmp edx, 0xd
je 0x4b2a68
xor eax, eax
jmp 0x4b2a6d
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2b3a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b29e2
jmp 0x4b2b3a
cmp ebp, edx
jge 0x4b2b3e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b299b
movzx edx, word [esi]
mov edi, 1
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2add
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b2b1d
cmp eax, 3
je 0x4b2b1d
cmp edx, 0x5f
je 0x4b2b1d
xor eax, eax
jmp 0x4b2b22
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2b3a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2aa0
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae2dc
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebx
je case.0x4ae319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b2bae
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b2b87
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp edi, 0x16
jne 0x4b2d56
cmp ebp, edx
jge 0x4b2d3b
mov ebx, dword [esp + 0x174]
mov ebp, dword [ebx + 0x7c]
cmp esi, ebp
jae 0x4b2d12
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2c40
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
je 0x4b2d37
mov ebx, dword [ebx + 0x7c]
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp esi, ebx
jae 0x4b2cf6
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2cbb
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4b2cf2
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4b2c86
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x174]
inc eax
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x20]
jl 0x4b2c03
jmp 0x4b2d37
cmp dword [ebx + 0x8c], 0
je 0x4b2d37
cmp esi, dword [ebx + 0x88]
jbe 0x4b2d37
mov dword [ebx + 0x64], 1
cmp dword [ebx + 0x8c], 1
jg 0x4b5476
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
je 0x4b44d4
mov edi, dword [esp + 0x174]
jmp 0x4ae2e0
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4aff2e
jmp dword [eax*4 + 0x4b5ce4]
cmp edx, 0x7fffffff
jge 0x4b2e5d
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b2e2b
mov edx, dword [eax + 0x18]
add eax, 0x1c
test edx, edx
je 0x4b2db1
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b7020
add esp, 0xc
test eax, eax
jne 0x4b309e
jmp 0x4b2de3
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b2de3
mov ecx, dword [esp + 0x174]
mov ax, word [esi]
cmp ax, word [ecx + 0x2c]
jne 0x4b2de3
cmp edx, 1
je 0x4b309e
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x2e]
je 0x4b309e
mov eax, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b2e1b
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [esp + 0x174]
jne 0x4b2e1b
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x4b2d87
jmp 0x4b309e
cmp dword [eax + 0x8c], 0
je 0x4b309e
cmp esi, dword [eax + 0x88]
jbe 0x4b309e
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b5476
jmp 0x4b309e
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop
cmp esi, ecx
jae 0x4b2e2b
mov edx, dword [eax + 0x18]
add eax, 0x1c
test edx, edx
je 0x4b2e96
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b7020
add esp, 0xc
test eax, eax
jne 0x4b309e
jmp 0x4b2ec8
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b2ec8
mov ecx, dword [esp + 0x174]
mov ax, word [esi]
cmp ax, word [ecx + 0x2c]
jne 0x4b2ec8
cmp edx, 1
je 0x4b309e
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x2e]
je 0x4b309e
mov eax, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b2f00
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [esp + 0x174]
jne 0x4b2f00
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x4b2e70
jmp 0x4b309e
cmp edx, 0x7fffffff
jge 0x4b2f68
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop word [eax + eax]
cmp esi, ecx
jae 0x4b2f5f
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, ecx
jae 0x4b2f55
mov ax, word [esi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x68]
jne 0x4b2f55
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, edx
jl 0x4b2f30
jmp 0x4b309e
mov eax, dword [esp + 0x174]
jmp 0x4b2f76
mov eax, dword [esp + 0x174]
mov esi, dword [eax + 0x7c]
mov dword [esp + 0x14], esi
cmp dword [eax + 0x8c], 0
je 0x4b2f9b
cmp esi, dword [eax + 0x88]
jbe 0x4b2f9b
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b5476
mov ebp, eax
jmp 0x4b30a5
sub edx, ebp
mov ebp, dword [esp + 0x174]
mov ecx, dword [ebp + 0x7c]
mov eax, ecx
sub eax, esi
sar eax, 1
cmp edx, eax
jbe 0x4b2fd1
mov eax, ebp
mov esi, ecx
mov dword [esp + 0x14], esi
cmp dword [eax + 0x8c], 0
je 0x4b2f9b
cmp ecx, dword [eax + 0x88]
jmp 0x4b2f85
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
jmp 0x4b30a5
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop
mov edx, esi
cmp esi, edi
jae 0x4b30c0
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b302c
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, 4
add ecx, 0x10000
jmp 0x4b3031
mov eax, 2
cmp ecx, 0xd
jne 0x4b304d
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b309a
cmp word [esi], 0xa
cmovne esi, edx
add esi, 2
jmp 0x4b308b
cmp ecx, 0xa
je 0x4b3089
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x68], 0
jne 0x4b35e4
cmp ecx, 0xb
je 0x4b3089
cmp ecx, 0xc
je 0x4b3089
cmp ecx, 0x85
je 0x4b3089
cmp ecx, 0x2028
je 0x4b3089
cmp ecx, 0x2029
jne 0x4b35e4
add esi, eax
inc ebp
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2ff0
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
je 0x4b45f4
mov edi, dword [esp + 0x174]
jmp 0x4ae2e0
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b30ec
cmp esi, dword [eax + 0x88]
jbe 0x4b30ec
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b5476
mov edi, dword [esp + 0x18]
mov ebp, eax
jmp 0x4b30a5
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
mov edx, 1
cmp esi, edi
jae 0x4b31c1
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b313f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x180e
ja 0x4b3165
je 0x4b3193
cmp ecx, 0xa0
ja 0x4b315d
je 0x4b3193
cmp ecx, 9
je 0x4b3193
cmp ecx, 0x20
jmp 0x4b318d
cmp ecx, 0x1680
jmp 0x4b318d
cmp ecx, 0x205f
ja 0x4b3187
je 0x4b3193
cmp ecx, 0x2000
jb 0x4b318f
cmp ecx, 0x200a
jbe 0x4b3193
cmp ecx, 0x202f
jmp 0x4b318d
cmp ecx, 0x3000
je 0x4b3193
xor ecx, ecx
jmp 0x4b3198
mov ecx, 1
xor eax, eax
cmp dword [esp + 0x18], 0x12
sete al
cmp ecx, eax
je 0x4b309a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3102
jmp 0x4b309a
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b30ec
cmp esi, dword [eax + 0x88]
jbe 0x4b30ec
mov dword [eax + 0x64], edx
cmp dword [eax + 0x8c], edx
jg 0x4b5476
mov edi, dword [esp + 0x18]
mov ebp, eax
jmp 0x4b30a5
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b30c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b324d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x85
ja 0x4b3288
je 0x4b3293
cmp ecx, 0xa
jb 0x4b3261
cmp ecx, 0xd
jbe 0x4b3293
xor ecx, ecx
xor eax, eax
cmp dword [esp + 0x18], 0x14
sete al
cmp ecx, eax
je 0x4b309a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3210
jmp 0x4b309a
lea eax, [ecx - 0x2028]
cmp eax, 1
ja 0x4b3261
mov ecx, 1
jmp 0x4b3263
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b30c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b32ed
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b3309
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 4
jne 0x4b309a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b32b0
jmp 0x4b309a
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop
cmp esi, edi
jae 0x4b30c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b336d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b309a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 4
je 0x4b309a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3330
jmp 0x4b309a
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b30c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b33ef
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b340b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 1
jne 0x4b309a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b33b2
jmp 0x4b309a
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b30c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b346d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b309a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 1
je 0x4b309a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3430
jmp 0x4b309a
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b30c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b34ef
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b350b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 0x10
jne 0x4b309a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b34b2
jmp 0x4b309a
cmp ebp, edx
jge 0x4b309e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b35a0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b356d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b309a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 0x10
je 0x4b309a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3530
jmp 0x4b309a
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b30ec
cmp esi, dword [eax + 0x88]
jbe 0x4b30ec
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jle 0x4b30ec
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x18]
mov ebp, edx
jmp 0x4b30a5
cmp ecx, 0x74
mov ecx, esi
jne 0x4b3630
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov edx, ebp
jmp 0x4b388f
mov dword [edi + 0x9c], 2
mov edx, ebp
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov edx, dword [esp + 0x10]
add edx, 4
jmp 0x4b388f
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0x90]
cmp eax, ebx
cmovle eax, ebx
mov dword [esp + 0x170], eax
movzx eax, word [ebp + 6]
lea eax, [eax*2 + 4]
add eax, ebp
mov ecx, eax
cmp word [ecx], 0x71
jne 0x4b36bd
movzx eax, word [ecx + 2]
lea eax, [ecx + eax*2]
mov ecx, eax
cmp word [ecx], 0x71
je 0x4b36a5
jmp 0x4b36bd
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x1c], 0x86
lea edx, [eax + 4]
mov dword [esp + 0x10], edx
jne 0x4b3893
mov dword [edi + 0x9c], 2
mov ecx, esi
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp ecx, 0x75
je 0x4b3a3a
cmp ecx, 0x74
jne 0x4b37a5
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
movzx eax, word [ebp]
mov edx, ebp
cmp eax, 0x7b
je 0x4b380c
mov ecx, 0x82
cmp ax, cx
jb 0x4b388f
mov dword [edi + 0x9c], 2
mov ecx, esi
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0x82
cmp word [ebp], ax
jb 0x4b37ba
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
cmp eax, 0xfffffc1c
jne 0x4b37ee
cmp dword [edi + 0xb8], ebp
jmp 0x4b37f0
test eax, eax
jne 0x4b38a6
mov edx, dword [esp + 0x10]
add edx, 4
cmp word [ebp], 0x7b
mov dword [esp + 0x10], edx
jne 0x4b3893
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4af3a3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 4]
mov dword [esp + 0x48], edx
lea ebp, [edx + edx]
cmp ebp, dword [edi + 0x14]
jl 0x4b5486
mov edx, dword [esp + 0x1c]
nop
cmp edx, 0x82
jae 0x4b38b1
cmp edx, 0x7b
je 0x4b38b1
cmp dword [edi + 0x6c], 0
mov edx, dword [esp + 0x10]
jne 0x4b38bf
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
je 0x4b38bf
movzx eax, word [edx]
movzx eax, byte [eax + 0x4ce360]
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jb 0x4ae280
inc eax
mov dword [edi], eax
mov eax, 0xfffffff8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x174]
inc eax
mov edi, dword [edi + 0xb0]
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx eax, byte [eax + 0x4ce360]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [edx + eax*2]
call fcn.004ae1e0
mov edx, eax
add esp, 0x14
cmp edx, 0xfffffc20
jne 0x4b393c
mov ebp, dword [esp + 0x10]
movzx ecx, word [ebp + 2]
lea eax, [ecx*2]
add eax, ebp
cmp dword [ebx + 0x80], eax
jae 0x4b5625
cmp word [ebp], 0x71
je 0x4b3948
cmp word [eax], 0x71
jne 0x4b5625
jmp 0x4b3948
test edx, edx
jne 0x4b55ea
mov ebp, dword [esp + 0x10]
movzx eax, word [ebp + 2]
lea ebp, [ebp + eax*2]
mov dword [ebx + 0xb0], edi
cmp word [ebp], 0x71
mov dword [esp + 0x10], ebp
jne case.0x4ae319.151
mov edi, ebx
jmp 0x4b385a
mov eax, dword [esp + 0x17c]
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, word [ebx + 2]
add ecx, eax
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ebx + ecx*2]
mov ecx, esi
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b39b8
cmp eax, 0xfffffc1d
je 0x4b39b8
cmp eax, 0xfffffc20
jne 0x4b38a6
lea eax, [ebx + 4]
mov dword [edi + 0x80], eax
mov eax, 0xfffffc1f
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xffffffe6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xf0]
cmp eax, ecx
je 0x4b39fa
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffffa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x16c]
mov dword [edi + 0x84], esi
mov dword [edi + 0x80], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov dword [edi + 0x84], esi
mov eax, 0xfffffc1b
mov dword [edi + 0x90], ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x170]
mov dword [edi + 0x84], esi
mov dword [edi + 0x90], eax
mov eax, dword [esp + 0x16c]
mov dword [edi + 0x80], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je case.0x4ae319.151
cmp esi, dword [edi + 0x88]
jbe case.0x4ae319.151
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jmp 0x4b5470
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ae319.151
cmp esi, dword [eax + 0x88]
jbe case.0x4ae319.151
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jmp 0x4b5470
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ae319.151
cmp esi, dword [eax + 0x7c]
jb case.0x4ae319.151
jmp 0x4b3ac6
mov ebx, esi
cmp edi, eax
jge 0x4b3b80
nop
push edx
push dword [esp + 0x178]
mov edx, esi
push ebp
call fcn.004ae030
add esp, 0xc
test eax, eax
js 0x4b3b3b
mov ecx, dword [esp + 0x2c]
lea esi, [esi + eax*2]
mov edx, dword [esp + 0x24]
inc edi
cmp edi, dword [esp + 0x28]
jl 0x4b3b10
jmp 0x4b3b6c
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b3b6c
cmp esi, dword [eax + 0x7c]
jb 0x4b3b6c
cmp esi, dword [eax + 0x88]
jbe 0x4b3b6c
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b5476
cmp esi, ebx
jb case.0x4ae319.151
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov eax, ebp
neg eax
lea esi, [esi + eax*2]
cmp esi, ebx
jae 0x4b3b80
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je case.0x4ae319.151
cmp esi, dword [edi + 0x7c]
jb case.0x4ae319.151
jmp 0x4b3a93
cmp dword [esp + 0x30], 0
je 0x4b3ce6
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp edi, ebx
jge case.0x4ae319.151
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b3ab9
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3c78
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add edx, 0x10000
add esi, 2
cmp edx, 0xff
jbe 0x4b3c87
cmp dword [esp + 0x1c], 0x6a
jmp 0x4b3c99
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
test byte [edx + ebp], al
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b3c30
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, esi
cmp edi, ebx
jge 0x4b3d54
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x28]
mov ebx, dword [eax + 0x7c]
nop
cmp esi, ebx
jae 0x4b3e2c
movzx edx, word [esi]
mov edi, 1
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3d3d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
cmp edx, 0xff
jbe 0x4b3df3
cmp dword [esp + 0x1c], 0x6a
jne 0x4b3e13
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ae319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b3db9
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b3d92
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
mov ecx, dword [esp + 0x40]
test byte [edx + ecx], al
je 0x4b3d54
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
lea esi, [esi + edi*2]
inc eax
mov dword [esp + 0x24], eax
cmp eax, ecx
jl 0x4b3d00
jmp 0x4b3d54
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b3d5b
cmp esi, dword [edi + 0x88]
jbe 0x4b3d5b
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
jmp 0x4b3d5b
mov ebp, esi
cmp ebx, edi
jge 0x4b3ed1
nop
mov edi, dword [esp + 0x174]
cmp esi, dword [edi + 0x7c]
jae 0x4b3f71
movzx ecx, word [esi]
mov edi, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3eb5
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edi, 2
add ecx, 0x10000
mov edx, dword [esp + 0x40]
push 1
call fcn.004b71a0
add esp, 4
test eax, eax
je 0x4b3ed1
inc ebx
lea esi, [esi + edi*2]
cmp ebx, dword [esp + 0x28]
jl 0x4b3e70
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ae319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b3f37
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b3f10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je 0x4b3ed8
cmp esi, dword [edi + 0x88]
jbe 0x4b3ed8
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b5476
jmp 0x4b3ed8
cmp dword [edi + 0x8c], 0
je case.0x4ae319.151
cmp esi, ecx
jb case.0x4ae319.151
jmp 0x4b3a93
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp edi, ebp
jge case.0x4ae319.151
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x18]
mov ebp, dword [eax + 0x7c]
mov eax, ebp
lea ebx, [ecx + ecx]
sub eax, ebx
cmp esi, eax
ja 0x4b4087
mov edx, dword [esp + 0x20]
lea edi, [ecx + ecx]
mov ecx, esi
sub edi, 4
jb 0x4b4041
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b404a
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b4030
cmp edi, 0xfffffffc
je 0x4b4103
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b4087
cmp edi, 0xfffffffd
je 0x4b4103
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b4087
cmp edi, 0xfffffffe
je 0x4b4103
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b4087
cmp edi, 0xffffffff
je 0x4b4103
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4b4103
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x4b4158
lea ebx, [ecx + ecx]
mov eax, ebp
sub eax, ebx
cmp esi, eax
ja 0x4b4158
lea edi, [ecx + ecx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4b40c1
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b40c6
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b40b0
cmp edi, 0xfffffffc
je 0x4b4103
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b4158
cmp edi, 0xfffffffd
je 0x4b4103
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b4158
cmp edi, 0xfffffffe
je 0x4b4103
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b4158
cmp edi, 0xffffffff
je 0x4b4103
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4b4158
mov eax, dword [esp + 0x17c]
add esi, ebx
mov edi, dword [esp + 0x24]
inc eax
mov edx, dword [esp + 0x10]
inc edi
push eax
push dword [esp + 0x17c]
mov ecx, esi
mov dword [esp + 0x2c], edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
mov ebp, dword [esp + 0x30]
add esp, 0x14
test eax, eax
je 0x4b3ff8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ae319.151
cmp esi, ebp
jb case.0x4ae319.151
jmp 0x4b3ac6
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x1c]
jge case.0x4ae319.151
mov ecx, dword [esp + 0x174]
cmp esi, dword [ecx + 0x7c]
jae 0x4b42b7
movzx eax, word [esi]
cmp ebx, eax
je 0x4b41dd
cmp edi, eax
jne case.0x4ae319.151
mov eax, dword [esp + 0x17c]
add esi, 2
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ecx
push dword [esp + 0x17c]
mov ecx, esi
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b41b4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x1c]
jge case.0x4ae319.151
cmp esi, dword [edi + 0x7c]
jae 0x4b3a86
movzx eax, word [esi]
add esi, 2
cmp ebx, eax
jne case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4252
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [esp + 0x174]
cmp dword [ecx + 0x8c], 0
je case.0x4ae319.151
cmp esi, dword [ecx + 0x88]
jbe case.0x4ae319.151
mov dword [ecx + 0x64], 1
cmp dword [ecx + 0x8c], 1
jmp 0x4b5470
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop word [eax + eax]
cmp ebx, dword [esp + 0x1c]
jge case.0x4ae319.151
mov edx, dword [esp + 0x174]
cmp esi, dword [edx + 0x7c]
jae 0x4b43bb
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b436a
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp edi, ecx
je case.0x4ae319.151
cmp ebp, ecx
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
inc ebx
push eax
push dword [esp + 0x17c]
push edx
push dword [esp + 0x17c]
mov edx, dword [esp + 0x20]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4320
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edx + 0x8c], 0
je case.0x4ae319.151
cmp esi, dword [edx + 0x88]
jbe case.0x4ae319.151
mov dword [edx + 0x64], 1
cmp dword [edx + 0x8c], 1
jmp 0x4b5470
cmp dword [ebp + 0x8c], 0
je case.0x4ae319.151
cmp esi, dword [ebp + 0x88]
jbe case.0x4ae319.151
mov dword [ebp + 0x64], 1
cmp dword [ebp + 0x8c], 1
jmp 0x4b5470
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop dword [eax + eax]
cmp ebx, dword [esp + 0x1c]
jge case.0x4ae319.151
cmp esi, dword [ebp + 0x7c]
jae 0x4b43e7
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b448f
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp edi, ecx
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebx
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4450
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x174]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop dword [eax]
lea edi, [esi - 2]
cmp esi, ebx
je case.0x4ae319.151
mov ebp, 0xdc00
movzx eax, word [edi]
mov edx, edi
mov ecx, eax
and ecx, 0xfc00
movzx ebx, cx
cmp cx, bp
jne 0x4b4539
movzx eax, word [edx - 2]
cmp bx, bp
movzx ecx, ax
lea esi, [edx - 2]
mov eax, ecx
cmovne esi, edi
lea edi, [edx - 2]
cmovne edi, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4573
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4b45a9
add edi, 0xfffffffe
jmp 0x4b4520
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x174]
inc eax
mov edx, dword [esp + 0x10]
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
mov ebx, dword [esp + 0x30]
add esp, 0x14
test eax, eax
je 0x4b4510
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
lea ecx, [esi - 2]
cmp esi, ebx
je case.0x4ae319.151
mov ax, word [ecx]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
cmovne ecx, esi
sub ecx, 2
mov esi, ecx
cmp edi, 0x11
jne 0x4b4665
cmp ecx, ebx
jbe 0x4b4665
cmp word [ecx], 0xa
jne 0x4b4665
cmp word [ecx - 2], 0xd
lea eax, [ecx - 2]
cmove esi, eax
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4625
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test eax, eax
js 0x4b4f77
cmp eax, 8
ja case.default.0x4aff2e
jmp dword [eax*4 + 0x4b5d24]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
mov ecx, esi
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx eax, word [esi]
add esi, 2
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b471a
lea esi, [ecx + 4]
cmp dword [esp + 0x34], 0
jne case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b46f0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop word [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b47e3
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
mov al, byte [eax*8 + 0x4cb081]
cmp al, 9
je 0x4b4816
cmp al, 5
je 0x4b4816
cmp al, 8
je 0x4b4816
xor eax, eax
jmp 0x4b481b
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b47a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop dword [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b48e3
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov edx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], edx
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b48a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
nop word [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b49e3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b49a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4ad3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb080]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4a90
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4bc3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b4bfc
cmp eax, 3
je 0x4b4bfc
xor eax, eax
jmp 0x4b4c01
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4b80
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4cc4
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b4d0c
cmp edx, 9
je 0x4b4d0c
cmp edx, 0xa
je 0x4b4d0c
cmp edx, 0xc
je 0x4b4d0c
cmp edx, 0xd
je 0x4b4d0c
xor eax, eax
jmp 0x4b4d11
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4c81
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4dd4
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b4e21
cmp edx, 9
je 0x4b4e21
cmp edx, 0xa
je 0x4b4e21
cmp edx, 0xb
je 0x4b4e21
cmp edx, 0xc
je 0x4b4e21
cmp edx, 0xd
je 0x4b4e21
xor eax, eax
jmp 0x4b4e26
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4d91
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b5449
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4ee9
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b4f29
cmp eax, 3
je 0x4b4f29
cmp edx, 0x5f
je 0x4b4f29
xor eax, eax
jmp 0x4b4f2e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4ea6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
cmp edi, 0x16
jne 0x4b50ea
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
mov ebx, dword [ebx + 0x7c]
cmp esi, ebx
jae 0x4b3ab2
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4ffa
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
je case.0x4ae319.151
cmp esi, ebx
jae 0x4b50a2
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b506b
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4b50a2
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4b5036
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x174]
inc eax
mov edx, dword [esp + 0x10]
inc ebp
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b4fb5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test eax, eax
jne 0x4b38a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ae319.151
mov ecx, dword [ebx + 0x7c]
cmp esi, ecx
jae 0x4b5449
cmp edi, 0xc
jne 0x4b5159
mov edx, dword [ebx + 0x18]
lea eax, [ebx + 0x1c]
test edx, edx
je 0x4b512e
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b7020
add esp, 0xc
test eax, eax
jne case.0x4ae319.151
jmp 0x4b5159
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b5159
mov ax, word [esi]
cmp ax, word [ebx + 0x2c]
jne 0x4b5159
cmp edx, 1
je case.0x4ae319.151
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x2e]
je case.0x4ae319.151
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b5189
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4aff2e
jmp dword [eax*4 + 0x4b5d48]
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0xd
ja 0x4b51d1
je 0x4b51b4
cmp ecx, 0xa
je case.0x4b5195.12
lea eax, [ecx - 0xb]
jmp 0x4b51df
mov esi, edx
cmp edx, dword [ebx + 0x7c]
jae 0x4b53f8
cmp word [edx], 0xa
jne 0x4b53f8
lea esi, [edx + 2]
jmp 0x4b53f8
cmp ecx, 0x85
je 0x4b51e8
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae319.151
cmp dword [ebx + 0x68], 0
mov esi, edx
jne case.0x4ae319.151
jmp 0x4b53f8
cmp ecx, 0x180e
ja 0x4b522b
je case.0x4ae319.151
cmp ecx, 0xa0
ja 0x4b5223
je case.0x4ae319.151
cmp ecx, 9
je case.0x4ae319.151
cmp ecx, 0x20
jmp 0x4b525f
cmp ecx, 0x1680
jmp 0x4b525f
cmp ecx, 0x205f
ja 0x4b5259
je case.0x4ae319.151
cmp ecx, 0x2000
jb case.0x4b5195.12
cmp ecx, 0x200a
jbe case.0x4ae319.151
cmp ecx, 0x202f
jmp 0x4b525f
cmp ecx, 0x3000
je case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x180e
ja 0x4b529e
je case.0x4b5195.12
cmp ecx, 0xa0
ja 0x4b5296
je case.0x4b5195.12
cmp ecx, 9
je case.0x4b5195.12
cmp ecx, 0x20
jmp 0x4b52d2
cmp ecx, 0x1680
jmp 0x4b52d2
cmp ecx, 0x205f
ja 0x4b52cc
je case.0x4b5195.12
cmp ecx, 0x2000
jb case.0x4ae319.151
cmp ecx, 0x200a
jbe case.0x4b5195.12
cmp ecx, 0x202f
jmp 0x4b52d2
cmp ecx, 0x3000
jne case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x85
ja 0x4b52fb
je case.0x4ae319.151
cmp ecx, 0xa
jb case.0x4b5195.12
cmp ecx, 0xd
jmp 0x4b530d
cmp ecx, 0x2028
jb case.0x4b5195.12
cmp ecx, 0x2029
jbe case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x85
ja 0x4b5330
je case.0x4b5195.12
lea eax, [ecx - 0xa]
cmp eax, 3
jmp 0x4b5339
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x100
jae case.0x4b5195.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
jne case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x100
jae case.0x4ae319.151
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
je case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x100
jae case.0x4b5195.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
jne case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x100
jae case.0x4ae319.151
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
je case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x100
jae case.0x4b5195.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x4ae319.151
mov esi, edx
jmp 0x4b53f8
cmp ecx, 0x100
jae case.0x4ae319.151
mov eax, dword [ebx + 0x3c]
mov esi, edx
test byte [ecx + eax], 0x10
je case.0x4ae319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b50f2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffff2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [ebx + 0x8c], 0
je case.0x4ae319.151
cmp esi, dword [ebx + 0x88]
jbe case.0x4ae319.151
mov dword [ebx + 0x64], 1
cmp dword [ebx + 0x8c], 1
jle case.0x4ae319.151
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x4c], eax
mov eax, dword [ecx + ebp*4 + 4]
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x10]
mov edi, dword [edi + 0x94]
sub eax, edx
mov edx, dword [esp + 0x174]
lea ecx, [ecx + eax*4]
mov eax, dword [ecx]
mov dword [esp + 0x44], eax
mov eax, esi
sub eax, dword [edx + 0x78]
mov ebx, dword [edx + 0xb0]
sar eax, 1
mov dword [ecx], eax
cmp dword [esp + 0x1c], 0x82
jb 0x4b54d6
mov dword [edx + 0x9c], 2
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [ecx]
push dword [esp + 0x17c]
push edx
movzx eax, byte [eax + 0x4ce360]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae1e0
mov edx, eax
add esp, 0x14
cmp edx, 0xfffffc1c
je 0x4b55a9
cmp edx, 0xfffffc20
jne 0x4b5563
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 2]
lea eax, [eax + ecx*2]
mov ecx, dword [esp + 0x174]
cmp dword [ecx + 0x80], eax
jae 0x4b55dd
mov ecx, dword [esp + 0x10]
cmp word [ecx], 0x71
mov ecx, dword [esp + 0x174]
je 0x4b555f
cmp word [eax], 0x71
jne 0x4b55dd
xor edx, edx
jmp 0x4b5572
test edx, edx
jne 0x4b55dd
mov ecx, dword [esp + 0x174]
mov eax, dword [esp + 0x10]
mov dword [ecx + 0x94], edi
mov ecx, dword [esp + 0x10]
movzx eax, word [eax + 2]
lea ecx, [ecx + eax*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x174]
mov eax, dword [esp + 0x10]
mov dword [ecx + 0xb0], ebx
cmp word [eax], 0x71
jne 0x4b55b0
mov edx, ecx
jmp 0x4b54c2
mov ecx, dword [esp + 0x174]
mov eax, dword [ecx + 0xc]
mov ebx, dword [esp + 0x174]
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x44]
mov dword [eax + ebp*4], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [esp + 0x40]
mov dword [eax + ebp*4 + 4], ecx
mov ecx, dword [ebx + 0x10]
sub ecx, dword [esp + 0x48]
mov eax, dword [ebx + 0xc]
mov dword [eax + ecx*4], esi
mov eax, edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp edx, 0xfffffc1c
jne 0x4b5625
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx]
cmp eax, 0x7b
je 0x4b561a
cmp eax, 0x71
jne 0x4b5611
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
je 0x4b5603
movzx eax, word [ecx + 2]
neg eax
lea ecx, [ecx + eax*2]
xor eax, eax
cmp dword [ebx + 0xb8], ecx
cmove edx, eax
mov eax, edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
lea ebx, [edx + 4]
mov dword [edi + 0xb4], ebx
mov dword [edi + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push edi
movzx ecx, byte [eax + 0x4ce360]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ae1e0
mov edi, eax
add esp, 0x14
cmp edi, 1
je 0x4b5694
cmp edi, 0xfffffc19
jne 0x4b56b7
mov ebp, dword [esp + 0x174]
cmp dword [ebp + 0xb0], 0
jne 0x4b56be
mov dword [ebp + 0xb0], ebx
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, dword [esp + 0x174]
cmp edi, 0xfffffc1f
jne 0x4b39fa
mov edx, dword [ebp + 0x80]
mov ecx, ebx
call fcn.004b6f10
test eax, eax
jne 0x4b39fa
mov dword [ebp + 0x80], esi
lea eax, [edi - 1]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ce360]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b574e
cmp eax, 0xfffffc1d
je 0x4b574e
cmp eax, 0xfffffc1e
je 0x4b574e
cmp eax, 0xfffffc1f
je 0x4b574e
cmp eax, 0xfffffc20
jne 0x4b38a6
mov eax, 0xfffffc1a
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ce360]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b5837
cmp eax, 0xfffffc20
je 0x4b5837
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x174]
lea edi, [edx + 4]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx ecx, byte [eax + 0x4ce360]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ae1e0
add esp, 0x14
cmp eax, 1
je 0x4b5819
cmp eax, 0xfffffc19
jne 0x4b5828
cmp dword [ebx + 0xb0], 0
jne 0x4b5828
mov dword [ebx + 0xb0], edi
test eax, eax
je 0x4b5837
cmp eax, 0xfffffc20
jne 0x4b38a6
mov eax, 0xfffffc1d
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ce360]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b5894
cmp eax, 0xfffffc1d
je 0x4b5894
cmp eax, 0xfffffc20
jne 0x4b38a6
mov dword [edi + 0x80], esi
mov eax, 0xfffffc1e
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ce360]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae1e0
add esp, 0x14
test eax, eax
je 0x4b5973
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x174]
lea edi, [edx + 4]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx ecx, byte [eax + 0x4ce360]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ae1e0
add esp, 0x14
cmp eax, 1
je 0x4b595a
cmp eax, 0xfffffc19
jne 0x4b5969
cmp dword [ebx + 0xb0], 0
jne 0x4b5969
mov dword [ebx + 0xb0], edi
test eax, eax
jne 0x4b38a6
mov edi, ebx
mov eax, dword [esp + 0x10]
mov dword [edi + 0x80], eax
mov eax, 0xfffffc20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebx, dword [esp + 0x16c]
cmp esi, ebx
jne 0x4b59cd
cmp edx, 0x99
je 0x4b59cd
cmp dword [edi + 0xa8], 0
jne 0x4b59cd
cmp dword [edi + 0x5c], 0
jne case.0x4ae319.151
cmp dword [edi + 0x60], 0
je 0x4b59cd
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x78]
lea eax, [eax + ecx*2]
cmp ebx, eax
je case.0x4ae319.151
mov eax, dword [esp + 0x170]
test bp, bp
mov dword [edi + 0x84], esi
mov ecx, 1
mov dword [edi + 0x90], eax
mov eax, 0xfffffc19
mov dword [edi + 0x80], ebx
cmove eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffffb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
pop edi
pop esi
pop ebp
mov eax, 0xffffffeb
pop ebx
add esp, 0x158
ret