Function at 0x4ae150
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x158
mov dword [esp], edx
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x10], esi
push edi
test edx, edx
jne 0x4ae1ab
cmp dword [esp + 0x17c], edx
jne 0x4ae190
push 1
push edx
push edx
push edx
push edx
lea ecx, [esp + 0x190]
call fcn.004ae150
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
lea eax, [esp + 0x17c]
sub eax, esi
cdq
xor eax, edx
sub eax, edx
neg eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x34], 0
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jae 0x4b380e
mov dword [esp + 0x64], 0xfc00
mov dword [esp + 0x68], 0xdc00
mov dword [esp + 0x44], SysReAllocString
mov dword [esp + 0x4c], 0xd800
nop dword [eax]
inc eax
mov dword [edi], eax
mov eax, dword [esp + 0x17c]
cmp eax, dword [edi + 8]
jae 0x4b5981
cmp dword [edi + 0x9c], 2
jne 0x4ae250
mov eax, dword [esp + 0x178]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], esi
mov dword [esp + 0x178], eax
mov dword [edi + 0x9c], 0
jmp 0x4ae250
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
jmp 0x4ae257
je case.0x4ae289.151
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x170]
movzx ecx, word [edx]
mov dword [esp + 0x28], edx
mov ebp, ecx
mov edx, ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], edx
cmp edx, 0x9b
ja case.0x4ae289.98
movzx eax, byte [edx + 0x4b5adc]
jmp dword [eax*4 + 0x4b5994]
cmp dword [edi + 0x70], 0
movzx ecx, byte [edx + 0x4ce360]
je 0x4b38dc
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
add ecx, eax
lea edx, [edx + ecx*2]
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edx, dword [esp + 0x10]
mov ebx, esi
mov edi, dword [edi + 0xb0]
mov ebp, edx
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
cmp eax, 1
je 0x4ae3c7
cmp eax, 0xfffffc20
jne 0x4ae338
mov edx, dword [esp + 0x10]
movzx ecx, word [edx + 2]
lea ecx, [edx + ecx*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], ecx
jae 0x4b3816
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4ae344
cmp word [ecx], 0x71
jne 0x4b3816
jmp 0x4ae344
test eax, eax
jne 0x4b3816
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea edx, [edx + eax*2]
mov eax, dword [esp + 0x174]
mov dword [esp + 0x10], edx
mov dword [eax + 0xb0], edi
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x71
je 0x4ae2c2
mov edi, dword [esp + 0x174]
movzx eax, cx
cmp eax, 0x7c
je 0x4ae382
cmp eax, 0x71
jne case.0x4ae289.151
movzx eax, word [edx + 2]
lea edx, [edx + eax*2]
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x71
je 0x4ae382
mov eax, dword [edi + 0x90]
mov esi, dword [edi + 0x84]
mov dword [esp + 0x10], edx
mov dword [esp + 0x170], eax
mov dword [esp + 0x14], esi
cmp ecx, 0x72
je 0x4ae3bb
cmp esi, ebx
jne 0x4b3560
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x80]
movzx ecx, word [edx]
mov dword [esp + 0x16c], eax
jmp 0x4ae371
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x28], ebp
jmp 0x4aef1c
mov ebp, dword [esp + 0x10]
cmp word [ebp + 4], 0x70
movzx edi, word [ebp + 2]
jne 0x4ae4ef
mov ecx, dword [0x4e82e8]
test ecx, ecx
je 0x4ae4e8
mov dword [esp + 0xb8], 2
movzx eax, word [ebp + 6]
mov ebp, dword [esp + 0x174]
mov dword [esp + 0xbc], eax
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc0], eax
mov eax, dword [ebp + 0x78]
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x7c]
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x16c]
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xcc], eax
mov eax, esi
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xd0], eax
movzx eax, word [edx + 8]
mov dword [esp + 0xe0], eax
movzx eax, word [edx + 0xa]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x170]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0xd4], eax
mov eax, dword [ebp + 0x94]
mov dword [esp + 0xd8], eax
mov eax, dword [ebp + 0xac]
mov dword [esp + 0xdc], eax
mov eax, dword [ebp + 0xb4]
mov dword [esp + 0xe8], eax
lea eax, [esp + 0xb8]
push eax
call ecx
add esp, 4
test eax, eax
jg case.0x4ae289.151
js 0x4b3816
mov ebp, dword [esp + 0x10]
add ebp, 0xc
mov dword [esp + 0x10], ebp
movzx ecx, word [ebp + 4]
lea edx, [ebp + 4]
cmp ecx, 0x89
je 0x4ae6c3
cmp ecx, 0x8a
je 0x4ae6c3
cmp ecx, 0x87
je 0x4ae58c
cmp ecx, 0x88
je 0x4ae58c
cmp ecx, 0x8b
jne 0x4ae538
movzx eax, word [ebp + 2]
lea ecx, [eax*2]
add ecx, ebp
jmp 0x4ae866
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x9c], 1
mov eax, dword [esp + 0x17c]
inc eax
push eax
push 0
push ecx
push dword [esp + 0x17c]
mov ecx, esi
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
cmp eax, 1
je 0x4b35e7
test eax, eax
je 0x4ae585
cmp eax, 0xfffffc20
jne 0x4b3816
xor edx, edx
jmp 0x4ae853
movzx edi, word [ebp + 6]
mov ebp, dword [esp + 0x174]
lea edx, [edi + edi]
cmp edx, dword [esp + 0x170]
jge 0x4ae5b0
mov eax, dword [ebp + 0xc]
cmp dword [eax + edx*4], 0
jge 0x4ae845
cmp ecx, 0x88
jne 0x4ae6b4
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x28]
mov ebx, eax
test edx, edx
jle 0x4ae6b4
xor ecx, ecx
mov ebp, eax
mov esi, ecx
movzx eax, word [ebx]
cmp eax, edi
je 0x4ae5f5
mov eax, dword [esp + 0x174]
inc esi
mov ecx, esi
mov eax, dword [eax + 0x24]
lea ebx, [eax*2]
add ebx, ebp
mov ebp, ebx
cmp esi, edx
jl 0x4ae5d2
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x14]
cmp ecx, edx
jge 0x4ae6b4
mov eax, dword [esp + 0x174]
mov edi, ebx
cmp ebx, dword [eax + 0x28]
jbe 0x4ae662
mov eax, dword [eax + 0x24]
lea ecx, [ebx + 2]
neg eax
lea edi, [edi + eax*2]
lea edx, [edi + 2]
call fcn.004b6e80
test eax, eax
jne 0x4ae65b
movzx eax, word [edi]
lea ecx, [eax + eax]
cmp ecx, dword [esp + 0x170]
jge 0x4ae64d
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x4ae845
mov eax, dword [esp + 0x174]
cmp edi, dword [eax + 0x28]
ja 0x4ae613
jmp 0x4ae662
mov eax, dword [esp + 0x174]
mov ebp, dword [esp + 0x2c]
inc ebp
cmp ebp, dword [eax + 0x20]
jge 0x4ae6b4
lea edi, [ebx + 2]
nop
mov eax, dword [eax + 0x24]
mov ecx, edi
lea ebx, [ebx + eax*2]
lea edx, [ebx + 2]
call fcn.004b6e80
test eax, eax
jne 0x4ae6b4
movzx eax, word [ebx]
lea ecx, [eax + eax]
cmp ecx, dword [esp + 0x170]
jge 0x4ae6a7
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x4ae845
mov eax, dword [esp + 0x174]
inc ebp
cmp ebp, dword [eax + 0x20]
jl 0x4ae670
mov ebp, dword [esp + 0x10]
xor edx, edx
movzx edi, word [ebp + 2]
jmp 0x4ae853
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0xa8]
test eax, eax
jne 0x4ae6e6
movzx eax, word [ebp + 2]
lea ecx, [eax*2]
add ecx, ebp
jmp 0x4ae86d
movzx edi, word [ebp + 6]
cmp edi, 0xffff
je 0x4ae845
cmp edi, dword [eax + 4]
je 0x4ae845
xor edx, edx
mov dword [esp + 0x24], edx
cmp ecx, 0x8a
jne 0x4ae831
mov eax, dword [esp + 0x174]
xor ebp, ebp
mov ecx, dword [eax + 0x28]
mov ebx, ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x20], edx
jle 0x4ae82d
mov edx, ecx
mov esi, eax
xor ecx, ecx
nop dword [eax]
movzx eax, word [ebx]
cmp eax, edi
je 0x4ae75c
mov eax, dword [esi + 0x24]
inc ebp
mov ecx, ebp
lea ebx, [edx + eax*2]
mov eax, dword [esp + 0x2c]
mov edx, ebx
cmp ebp, eax
jl 0x4ae740
jmp 0x4ae760
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebx
cmp ecx, eax
jge 0x4ae82d
mov eax, dword [esp + 0x174]
mov edi, ebx
cmp ebx, dword [eax + 0x28]
jbe 0x4ae7db
lea ebp, [ebx + 2]
mov esi, eax
nop dword [eax + eax]
mov eax, dword [esi + 0x24]
mov ecx, ebp
neg eax
lea edi, [edi + eax*2]
lea edx, [edi + 2]
call fcn.004b6e80
test eax, eax
jne 0x4ae7c4
mov eax, dword [esi + 0xa8]
xor ebx, ebx
movzx ecx, word [edi]
mov eax, dword [eax + 4]
cmp ecx, eax
sete bl
mov dword [esp + 0x24], ebx
je 0x4ae7c4
cmp edi, dword [esi + 0x28]
ja 0x4ae790
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x174]
test edx, edx
jne 0x4ae84a
inc ebp
cmp ebp, dword [eax + 0x20]
jge 0x4ae83b
mov esi, dword [esp + 0x174]
lea edi, [ebx + 2]
nop
mov eax, dword [esi + 0x24]
mov ecx, edi
lea ebx, [ebx + eax*2]
lea edx, [ebx + 2]
call fcn.004b6e80
test eax, eax
jne 0x4ae825
mov eax, dword [esi + 0xa8]
xor edx, edx
movzx ecx, word [ebx]
mov eax, dword [eax + 4]
cmp ecx, eax
sete dl
mov dword [esp + 0x24], edx
je 0x4ae829
inc ebp
cmp ebp, dword [esi + 0x20]
jl 0x4ae7f0
jmp 0x4ae829
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
test edx, edx
jne 0x4ae84a
movzx edi, word [ebp + 2]
jmp 0x4ae853
mov ebp, dword [esp + 0x10]
movzx edi, word [ebp + 2]
jmp 0x4ae853
mov edx, 1
mov ebp, dword [esp + 0x10]
mov edi, 2
lea ecx, [edi*2]
add ecx, ebp
mov eax, ecx
test edx, edx
jne 0x4b3626
mov edi, dword [esp + 0x174]
cmp word [ecx], 0x71
mov eax, ecx
je 0x4b362d
lea edx, [ecx + 4]
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x170]
movzx edi, word [eax + 2]
mov eax, dword [esp + 0x174]
lea edx, [edi + edi]
mov dword [eax + 0x94], edi
cmp edx, dword [eax + 0x14]
jl 0x4ae8c2
mov edx, dword [esp + 0x10]
mov edi, eax
add edx, 4
mov dword [esp + 0x10], edx
mov dword [edi + 0x40], 1
jmp 0x4ae257
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
sub eax, edi
mov edi, dword [esp + 0x174]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, esi
sub ecx, dword [edi + 0x78]
mov eax, dword [edi + 0xc]
sar ecx, 1
mov dword [eax + edx*4 + 4], ecx
cmp ebx, edx
jg 0x4ae8f3
lea ebx, [edx + 2]
mov dword [esp + 0x170], ebx
mov edx, dword [esp + 0x10]
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae257
mov ebp, dword [esp + 0x174]
mov edi, dword [edi + 0xb0]
cmp dword [ebp + 0x9c], 1
jne 0x4ae92a
mov dword [ebp + 0x9c], 0
mov ebx, 1
jmp 0x4ae92c
xor ebx, ebx
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push 0
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
cmp eax, 1
je 0x4ae995
cmp eax, 0xfffffc19
je 0x4ae995
test eax, eax
je 0x4ae972
cmp eax, 0xfffffc20
jne 0x4b3816
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
mov dword [ebp + 0xb0], edi
lea edx, [edx + eax*2]
movzx eax, word [edx]
mov dword [esp + 0x10], edx
mov ecx, eax
cmp eax, 0x71
je 0x4ae930
mov edi, ebp
jmp 0x4ae9ab
mov edx, dword [esp + 0x10]
mov edi, ebp
mov eax, dword [edi + 0x80]
mov dword [esp + 0x16c], eax
movzx eax, word [edx]
cmp ax, 0x72
je case.0x4ae289.151
test ebx, ebx
jne 0x4b39e6
nop dword [eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4ae9c0
mov ebx, dword [edi + 0x90]
add edx, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x170], ebx
jmp 0x4ae257
mov ebp, dword [esp + 0x174]
mov edi, dword [edi + 0xb0]
cmp dword [ebp + 0x9c], 1
jne 0x4aea0e
mov dword [ebp + 0x9c], 0
mov ebx, 1
jmp 0x4aea10
xor ebx, ebx
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push 0
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
mov dword [ebp + 0xb0], edi
cmp eax, 1
je case.0x4ae289.151
cmp eax, 0xfffffc19
je case.0x4ae289.151
cmp eax, 0xfffffc1e
je 0x4aea91
cmp eax, 0xfffffc1d
je 0x4aea91
cmp eax, 0xfffffc1a
je 0x4aea91
test eax, eax
je 0x4aea79
cmp eax, 0xfffffc20
jne 0x4b3816
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
je 0x4aea14
jmp 0x4aeaae
mov edx, dword [esp + 0x10]
nop word [eax + eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4aeaa0
test ebx, ebx
jne 0x4b39e6
add edx, 4
mov edi, ebp
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edx, dword [esp + 0x10]
movzx ecx, word [edx + 2]
test ecx, ecx
je 0x4aeb12
mov edi, dword [edi + 0x78]
mov ebx, 0xdc00
mov ebp, 0xfc00
nop dword [eax]
lea eax, [esi - 2]
mov edx, esi
mov esi, eax
dec ecx
cmp esi, edi
jb case.0x4ae289.151
mov ax, word [eax]
and ax, bp
cmp ax, bx
cmovne esi, edx
sub esi, 2
mov dword [esp + 0x14], esi
test ecx, ecx
jg 0x4aeae0
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
cmp esi, dword [edi + 0x88]
jae 0x4aeb20
mov dword [edi + 0x88], esi
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov ecx, dword [0x4e82e8]
test ecx, ecx
je 0x4aec0d
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x80], 2
movzx eax, word [ebx + 2]
mov dword [esp + 0x84], eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x88], eax
mov eax, dword [edi + 0x78]
mov dword [esp + 0x8c], eax
mov eax, dword [edi + 0x7c]
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x16c]
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x94], eax
mov eax, esi
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x98], eax
movzx eax, word [ebx + 8]
mov dword [esp + 0xa8], eax
movzx eax, word [ebx + 0xa]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x170]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x9c], eax
mov eax, dword [edi + 0x94]
mov dword [esp + 0xa0], eax
mov eax, dword [edi + 0xac]
mov dword [esp + 0xa4], eax
mov eax, dword [edi + 0xb4]
mov dword [esp + 0xb0], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0x80]
push eax
call ecx
add esp, 4
test eax, eax
jg case.0x4ae289.151
js 0x4b3816
mov edx, dword [esp + 0x10]
add edx, 0xc
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edx, dword [esp + 0x10]
mov ecx, dword [edi + 0x74]
movzx eax, word [edx + 2]
lea ebx, [ecx + eax*2]
cmp ebx, ecx
jne 0x4aec33
xor ecx, ecx
jmp 0x4aec37
movzx ecx, word [ebx + 4]
mov eax, dword [edi + 0xa8]
test eax, eax
je 0x4aec55
cmp ecx, dword [eax + 4]
jne 0x4aec4f
cmp esi, dword [eax + 0x10]
je 0x4b3941
mov eax, dword [eax]
test eax, eax
jne 0x4aec41
mov dword [esp + 0x54], ecx
add edx, 4
mov dword [esp + 0x60], esi
mov eax, dword [edi + 0xa8]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x50]
mov dword [edi + 0xa8], eax
mov ecx, dword [edi + 0x10]
mov dword [esp + 0x10], edx
mov dword [esp + 0x5c], ecx
cmp ecx, 0x1e
jg 0x4aec91
lea eax, [esp + 0xf0]
mov dword [esp + 0x58], eax
jmp 0x4aecb2
lea eax, [ecx*4]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [esp + 0x58], eax
test eax, eax
je 0x4b3977
mov ecx, dword [esp + 0x5c]
shl ecx, 2
push ecx
push dword [edi + 0xc]
push eax
call sub.VCRUNTIME140.dll_memcpy
movzx ebp, word [ebx]
add esp, 0xc
mov eax, 0x82
cmp bp, ax
jb 0x4aecd9
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, word [ebx]
push edi
push dword [esp + 0x17c]
movzx eax, byte [eax + 0x4ce360]
push dword [esp + 0x17c]
lea edx, [ebx + eax*2]
call fcn.004ae150
mov ecx, dword [esp + 0x70]
add esp, 0x14
shl ecx, 2
mov edi, eax
mov eax, dword [esp + 0x174]
push ecx
push dword [esp + 0x5c]
push dword [eax + 0xc]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [esp + 0x180]
add esp, 0xc
mov eax, dword [esp + 0x50]
mov dword [ecx + 0xa8], eax
cmp edi, 1
je 0x4aedab
cmp edi, 0xfffffc19
je 0x4aedab
test edi, edi
je 0x4aed5d
cmp edi, 0xfffffc20
jne 0x4b3951
mov edi, ecx
lea eax, [esp + 0x50]
mov dword [edi + 0xa8], eax
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x71
lea ebx, [ebx + eax*2]
je 0x4aecc5
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0xf0]
mov dword [edi + 0xa8], eax
mov eax, dword [esp + 0x58]
cmp eax, ecx
je case.0x4ae289.151
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xf0]
cmp eax, ecx
je 0x4aedc4
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov edi, dword [esp + 0x174]
mov esi, dword [edi + 0x84]
mov eax, dword [edi + 0x80]
mov dword [esp + 0x14], esi
mov dword [esp + 0x16c], eax
jmp 0x4ae24c
mov edx, dword [esp + 0x10]
nop dword [eax + eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4aedf0
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
mov ebx, dword [esp + 0x170]
add edi, 2
push eax
push dword [esp + 0x17c]
mov edx, edi
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop dword [eax + eax]
movzx eax, word [edi + 2]
cmp word [edi + eax*2], 0x71
lea edi, [edi + eax*2]
je 0x4aee50
lea edx, [edi + 4]
mov edi, dword [esp + 0x174]
mov dword [esp + 0x10], edx
jmp 0x4ae257
mov eax, dword [esp + 0x10]
add eax, 2
mov dword [esp + 0x10], eax
mov edx, eax
nop
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4aee80
mov eax, dword [esp + 0x17c]
add edx, 4
mov ebx, dword [esp + 0x170]
inc eax
push eax
push dword [esp + 0x17c]
mov ecx, esi
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov edx, dword [esp + 0x10]
jmp 0x4ae257
mov ecx, dword [esp + 0x10]
add ecx, 2
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
je 0x4aeed3
lea edx, [ecx + 4]
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov eax, dword [esp + 0x10]
mov ebp, 1
add eax, 2
mov dword [esp + 0x28], ebp
mov dword [esp + 0x10], eax
movzx edx, word [eax]
mov dword [esp + 0x1c], edx
cmp edx, 0x80
je 0x4aef1c
cmp edx, 0x85
jne 0x4af0ed
movzx edx, word [eax + 4]
mov dword [esp + 0x2c], edx
lea eax, [edx + edx]
cmp eax, dword [edi + 0x14]
jge 0x4af0e3
mov ecx, dword [edi + 0xc]
xor ebp, ebp
mov ebx, dword [esp + 0x10]
sub ebx, dword [edi + 0x74]
shl eax, 2
mov dword [esp + 0x24], eax
sar ebx, 1
mov edi, dword [eax + ecx]
mov eax, dword [eax + ecx + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0x38], edi
mov eax, dword [eax + 0x10]
sub eax, edx
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x20], eax
mov edi, dword [ecx + 0x94]
mov eax, dword [esp + 0x174]
mov edx, esi
sub edx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x10]
sub ecx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
sar edx, 1
cmp dword [esp + 0x1c], 0x82
mov dword [eax + ecx*4], edx
jb 0x4aefaa
mov eax, dword [esp + 0x174]
mov dword [eax + 0x9c], 2
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [ecx]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
movzx eax, byte [eax + 0x4ce360]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae150
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffc1b
jne 0x4af026
mov ecx, dword [esp + 0x174]
mov ebp, 1
mov eax, dword [ecx + 0x90]
mov esi, dword [ecx + 0x84]
mov dword [esp + 0x170], eax
mov eax, dword [ecx + 0x74]
mov dword [esp + 0x14], esi
lea eax, [eax + ebx*2]
mov dword [esp + 0x10], eax
jmp 0x4aef6e
cmp ecx, 0xfffffc20
jne 0x4af065
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], eax
jae 0x4af058
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4af06d
cmp word [eax], 0x71
je 0x4af06d
mov eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test ecx, ecx
jne 0x4af058
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x94], edi
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
je 0x4aef74
mov edi, ecx
test ebp, ebp
jne 0x4af0c4
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
mov dword [ecx + eax], edx
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x30]
mov dword [ecx + eax + 4], edx
mov ecx, dword [edi + 0x10]
sub ecx, dword [esp + 0x2c]
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], edx
mov edx, dword [esp + 0x10]
cmp dword [esp + 0x28], 0
jne 0x4ae3bb
test ebp, ebp
je case.0x4ae289.151
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov ecx, dword [esp + 0x174]
mov edi, eax
xor ebx, ebx
sub edi, dword [ecx + 0x74]
sar edi, 1
nop dword [eax]
cmp edx, 0x82
jb 0x4af112
mov dword [ecx + 0x9c], 2
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push ecx
mov ecx, dword [esp + 0x1c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x4ce360]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae150
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffc1b
jne 0x4af18c
mov ecx, dword [esp + 0x174]
mov ebx, 1
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x90]
mov esi, dword [ecx + 0x84]
mov dword [esp + 0x170], eax
mov eax, dword [ecx + 0x74]
mov dword [esp + 0x14], esi
lea eax, [eax + edi*2]
mov dword [esp + 0x10], eax
jmp 0x4af100
cmp ecx, 0xfffffc20
jne 0x4af1c2
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], eax
jae 0x4af058
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4af1ca
cmp word [eax], 0x71
jmp 0x4af1c4
test ecx, ecx
jne 0x4af058
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x174]
je 0x4af100
test ebx, ebx
jne 0x4af1fb
test ebp, ebp
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
mov edi, ecx
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edx, dword [esp + 0x10]
mov ebp, edx
movzx eax, word [edx + 2]
add eax, eax
sub ebp, eax
mov eax, 0x82
movzx ecx, word [ebp]
cmp cx, ax
jae 0x4af238
cmp ecx, 0x7b
je 0x4af238
mov dword [esp + 0x2c], 0
jmp 0x4af251
mov ebx, dword [esp + 0x178]
lea eax, [ebx + 4]
mov ebx, dword [ebx]
mov eax, dword [eax]
mov dword [esp + 0x178], ebx
mov dword [esp + 0x2c], eax
cmp ecx, 0x77
jb 0x4af25f
cmp ecx, 0x7a
jbe 0x4b39c6
cmp ecx, 0x7c
je 0x4b39c6
cmp ecx, 0x7f
je 0x4af28b
mov eax, 0x84
cmp cx, ax
je 0x4af28b
mov eax, 0x80
cmp cx, ax
je 0x4af28b
mov eax, 0x85
cmp cx, ax
jne 0x4af2bb
movzx ebx, word [ebp + 4]
mov eax, dword [edi + 0xa8]
lea edx, [ebx + ebx]
test eax, eax
je 0x4af2a5
cmp dword [eax + 4], ebx
je 0x4b3987
mov dword [edi + 0x94], ebx
cmp edx, dword [edi + 0x14]
jl 0x4af329
mov edx, dword [esp + 0x10]
mov dword [edi + 0x40], 1
mov ebx, dword [esp + 0x170]
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x72
je 0x4af2d6
cmp esi, dword [esp + 0x2c]
jne 0x4b3680
add edx, 4
cmp word [ebp], 0x7b
mov dword [esp + 0x10], edx
jne 0x4ae257
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov dword [edi + 0xb8], ebp
mov eax, 0xfffffc1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [esp + 0x170]
cmp edx, ecx
jle 0x4af354
mov eax, dword [edi + 0xc]
lea edi, [eax + ecx*4]
lea ecx, [eax + edx*4]
cmp edi, ecx
jae 0x4af34d
sub ecx, edi
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
sub eax, ebx
mov ebx, dword [esp + 0x170]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, esi
sub ecx, dword [edi + 0x78]
mov eax, dword [edi + 0xc]
sar ecx, 1
mov dword [eax + edx*4 + 4], ecx
cmp ebx, edx
jg 0x4af385
lea ebx, [edx + 2]
mov dword [esp + 0x170], ebx
mov edx, dword [esp + 0x10]
jmp 0x4af2c2
cmp dword [edi + 0x44], 0
je case.0x4ae289.1
cmp esi, dword [edi + 0x78]
je case.0x4ae289.151
cmp esi, dword [edi + 0x78]
jne case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp dword [edi + 0x44], 0
je 0x4af3c5
cmp esi, dword [edi + 0x78]
je case.0x4ae289.151
mov ecx, dword [edi + 0x78]
cmp esi, ecx
je 0x4af3a6
cmp esi, dword [edi + 0x7c]
je case.0x4ae289.151
mov edx, dword [edi + 0x18]
test edx, edx
je 0x4af40d
cmp esi, ecx
jbe case.0x4ae289.151
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b7030
add esp, 0xc
test eax, eax
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edi, dword [edi + 0x1c]
lea edx, [edi + edi]
lea eax, [edx + ecx]
cmp esi, eax
jb case.0x4ae289.151
mov ecx, esi
sub ecx, edx
mov edx, dword [esp + 0x174]
mov ax, word [ecx]
cmp ax, word [edx + 0x2c]
jne case.0x4ae289.151
cmp edi, 1
mov edi, edx
je 0x4af3a6
mov ax, word [ecx + 2]
cmp ax, word [edi + 0x2e]
jne case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x78]
lea eax, [eax + ecx*2]
cmp esi, eax
jmp 0x4af3a0
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x16c], esi
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov ecx, dword [edi + 0x7c]
cmp esi, ecx
jae 0x4af4f3
mov edx, dword [edi + 0x18]
test edx, edx
je 0x4af4c0
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b6f90
add esp, 0xc
test eax, eax
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edx, dword [edi + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ae289.151
mov ax, word [esi]
cmp ax, word [edi + 0x2c]
jne case.0x4ae289.151
cmp edx, 1
je 0x4af3a6
mov ax, word [esi + 2]
cmp ax, word [edi + 0x2e]
jmp 0x4af3a0
cmp dword [edi + 0x48], 0
jne case.0x4ae289.151
cmp dword [edi + 0x8c], 0
je 0x4af3a6
cmp esi, dword [edi + 0x88]
jbe 0x4af3a6
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp dword [edi + 0x48], 0
jne case.0x4ae289.151
cmp dword [edi + 0x58], 0
je case.0x4ae289.23
cmp esi, dword [edi + 0x7c]
jb case.0x4ae289.151
jmp 0x4af4fd
mov edi, dword [edi + 0x7c]
cmp esi, edi
jae 0x4af5c8
mov ebp, dword [esp + 0x174]
mov edx, dword [ebp + 0x18]
lea ebx, [ebp + 0x1c]
test edx, edx
je 0x4af58a
push 1
push ebx
push edi
mov ecx, esi
call fcn.004b6f90
add esp, 0xc
test eax, eax
je case.0x4ae289.151
mov edx, dword [ebx]
mov edi, dword [ebp + 0x7c]
jmp 0x4af5bb
mov edx, dword [ebx]
mov ecx, edi
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ae289.151
mov ax, word [esi]
cmp ax, word [ebp + 0x2c]
jne case.0x4ae289.151
cmp edx, 1
je 0x4af5bb
mov ax, word [esi + 2]
cmp ax, word [ebp + 0x2e]
jne case.0x4ae289.151
lea eax, [edx + edx]
sub edi, eax
cmp esi, edi
jne case.0x4ae289.151
mov edi, dword [esp + 0x174]
jmp 0x4af4fd
cmp esi, dword [edi + 0x78]
je 0x4af697
mov ax, word [esi - 2]
lea edx, [esi - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
cmovne edx, esi
sub edx, 2
cmp edx, dword [edi + 0x88]
jae 0x4af608
mov dword [edi + 0x88], edx
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af633
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [edi + 0x54], 0
je 0x4af67f
cmp ecx, 0x5f
jne 0x4af643
lea edx, [ecx - 0x5e]
jmp 0x4af699
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4af678
cmp eax, 3
jne 0x4af697
mov edx, 1
jmp 0x4af699
cmp ecx, 0x100
jae 0x4af697
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x4af697
mov edx, 1
jmp 0x4af699
xor edx, edx
cmp esi, dword [edi + 0x7c]
jb 0x4af6ea
cmp dword [edi + 0x8c], 0
je 0x4af6c3
cmp esi, dword [edi + 0x88]
jbe 0x4af6c3
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
xor ecx, ecx
mov ebx, dword [esp + 0x10]
xor ecx, edx
movzx eax, word [ebx]
add ebx, 2
mov dword [esp + 0x10], ebx
cmp eax, 5
jne 0x4af6dd
xor ecx, 1
test ecx, ecx
jne case.0x4ae289.151
jmp 0x4ae24c
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af715
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [edi + 0x54], 0
je 0x4af76a
cmp ecx, 0x5f
jne 0x4af727
mov ecx, 1
jmp 0x4af6c5
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4af760
cmp eax, 3
jne 0x4af6c3
mov ecx, 1
jmp 0x4af6c5
cmp ecx, 0x100
jae 0x4af6c3
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x4af6c3
mov ecx, 1
jmp 0x4af6c5
mov edx, dword [edi + 0x18]
mov ecx, dword [edi + 0x7c]
test edx, edx
je 0x4af7b6
cmp esi, ecx
jae case.0x4ae289.13
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b6f90
add esp, 0xc
test eax, eax
jne case.0x4ae289.151
jmp case.0x4ae289.13
mov edx, dword [edi + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ae289.13
mov ax, word [esi]
cmp ax, word [edi + 0x2c]
jne case.0x4ae289.13
cmp edx, 1
je case.0x4ae289.151
mov ax, word [esi + 2]
cmp ax, word [edi + 0x2e]
je case.0x4ae289.151
mov eax, dword [edi + 0x7c]
cmp esi, eax
jae 0x4b39f6
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, eax
jae 0x4af3a6
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4af3a6
mov edx, dword [esp + 0x10]
add esi, 2
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
mov edx, dword [esp + 0x10]
add esi, 2
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af88d
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4af3a6
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 4
jmp 0x4af3a0
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af8e6
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ae289.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 4
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af950
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4af3a6
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
jmp 0x4af3a0
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af9a9
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ae289.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afa13
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4af3a6
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
jmp 0x4af3a0
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afa6c
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ae289.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov edi, dword [edi + 0x7c]
cmp esi, edi
jae 0x4b3a22
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afad0
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
cmp ecx, 0xd
ja 0x4afb30
je 0x4afafe
cmp ecx, 0xa
je 0x4afae1
lea eax, [ecx - 0xb]
jmp 0x4afb3e
mov edi, dword [esp + 0x174]
mov esi, edx
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov esi, edx
mov dword [esp + 0x14], esi
cmp edx, edi
jae 0x4afb19
cmp word [edx], 0xa
mov dword [esp + 0x14], esi
jne 0x4afb19
lea esi, [edx + 2]
mov dword [esp + 0x14], esi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x174]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp ecx, 0x85
je 0x4afb47
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae289.151
mov edi, dword [esp + 0x174]
mov esi, edx
mov dword [esp + 0x14], esi
cmp dword [edi + 0x68], 0
jmp 0x4af3a0
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afb9e
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4afbf8
je case.0x4ae289.151
cmp ecx, 0xa0
ja 0x4afbdc
je case.0x4ae289.151
cmp ecx, 9
je case.0x4ae289.151
cmp ecx, 0x20
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp ecx, 0x1680
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp ecx, 0x205f
ja 0x4afc3a
je case.0x4ae289.151
cmp ecx, 0x2000
jb 0x4af3a6
cmp ecx, 0x200a
jbe case.0x4ae289.151
cmp ecx, 0x202f
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp ecx, 0x3000
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afc97
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4afccf
je 0x4af3a6
cmp ecx, 0xa0
ja 0x4afcc4
je 0x4af3a6
cmp ecx, 9
je 0x4af3a6
cmp ecx, 0x20
jmp 0x4af3a0
cmp ecx, 0x1680
jmp 0x4af3a0
cmp ecx, 0x205f
ja 0x4afd00
je 0x4af3a6
cmp ecx, 0x2000
jb case.0x4ae289.151
cmp ecx, 0x200a
jbe 0x4af3a6
cmp ecx, 0x202f
jmp 0x4af3a0
cmp ecx, 0x3000
jmp 0x4af3a0
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afd4c
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4afd7c
je case.0x4ae289.151
cmp ecx, 0xa
jb 0x4af3a6
cmp ecx, 0xd
jbe case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp ecx, 0x2028
jb 0x4af3a6
cmp ecx, 0x2029
jbe case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afde5
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4afe0f
je 0x4af3a6
lea eax, [ecx - 0xa]
cmp eax, 3
ja case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ae250
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4afe6f
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov ebx, dword [esp + 0x10]
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx ecx, word [ebx + 2]
cmp ecx, 8
ja case.default.0x4afe9e
jmp dword [ecx*4 + 0x4b5b78]
cmp dword [esp + 0x1c], 0xf
jmp 0x4affe1
mov al, byte [eax*8 + 0x4cb081]
cmp al, 9
je 0x4affd0
cmp al, 5
je 0x4affd0
cmp al, 8
je 0x4affd0
xor ecx, ecx
jmp 0x4affd5
movzx ecx, byte [eax*8 + 0x4cb081]
xor edx, edx
movzx eax, word [ebx + 4]
cmp eax, dword [ecx*4 + 0x4ce740]
setne dl
xor eax, eax
cmp dword [esp + 0x1c], 0x10
sete al
cmp edx, eax
jmp 0x4affe1
movzx eax, byte [eax*8 + 0x4cb081]
mov edx, dword [esp + 0x10]
xor ecx, ecx
cmp word [edx + 4], ax
setne cl
xor eax, eax
cmp dword [esp + 0x1c], 0x10
sete al
cmp ecx, eax
je case.0x4ae289.151
add edx, 6
mov dword [esp + 0x10], edx
jmp 0x4ae250
movzx eax, byte [eax*8 + 0x4cb080]
jmp 0x4aff06
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4affd0
cmp eax, 3
je 0x4affd0
xor ecx, ecx
jmp 0x4affd5
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4affd0
cmp edx, 9
je 0x4affd0
cmp edx, 0xa
je 0x4affd0
cmp edx, 0xc
je 0x4affd0
cmp edx, 0xd
je 0x4affd0
xor ecx, ecx
jmp 0x4affd5
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4affd0
cmp edx, 9
je 0x4affd0
cmp edx, 0xa
je 0x4affd0
cmp edx, 0xb
jmp 0x4aff7d
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4affd0
cmp eax, 3
je 0x4affd0
cmp edx, 0x5f
je 0x4affd0
xor ecx, ecx
jmp 0x4affd5
mov ecx, 1
xor eax, eax
cmp dword [esp + 0x1c], 0xf
sete al
cmp ecx, eax
je case.0x4ae289.151
mov edx, dword [esp + 0x10]
add edx, 6
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov ebx, dword [edi + 0x7c]
cmp esi, ebx
jae 0x4b39f6
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b003a
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
je case.0x4ae289.151
cmp esi, ebx
jae 0x4af3a6
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b00ab
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4afb15
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4b0076
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x174]
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ae250
mov ebx, dword [esp + 0x10]
xor edx, edx
cmp dword [esp + 0x1c], 0x6e
sete dl
movzx eax, word [ebx + 2]
add ebx, 4
mov dword [esp + 0x24], edx
mov dword [esp + 0x10], ebx
lea ecx, [eax + eax]
mov dword [esp + 0x2c], ecx
cmp ecx, dword [esp + 0x170]
jge 0x4b0140
mov eax, dword [edi + 0xc]
mov edi, dword [eax + ecx*4]
test edi, edi
js 0x4b0140
mov ebp, dword [eax + ecx*4 + 4]
sub ebp, edi
jmp 0x4b0151
mov eax, dword [esp + 0x174]
mov ebp, dword [eax + 0x50]
neg ebp
sbb ebp, ebp
neg ebp
dec ebp
movzx edi, word [ebx]
mov ebx, edi
lea eax, [ebx - 0x62]
cmp eax, 7
ja case.default.0x4b0169
movzx eax, byte [eax + 0x4b5ba4]
jmp dword [eax*4 + 0x4b5b9c]
mov eax, dword [esp + 0x28]
movsx edi, byte [ebx + str.space]
add eax, 6
mov dword [esp + 0x10], eax
mov eax, ebx
movsx ebx, byte [ebx + 0x4bf2ca]
and eax, 1
mov dword [esp + 0x38], eax
test ebx, ebx
mov eax, SysReAllocString
cmove ebx, eax
jmp 0x4b01c4
xor eax, eax
cmp edi, 0x69
sete al
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x28]
movzx ebx, word [eax + 8]
movzx edi, word [eax + 6]
test ebx, ebx
cmove ebx, dword [esp + 0x44]
add eax, 0xa
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], ebx
test ebp, ebp
je 0x4ae245
jns 0x4b01da
test edi, edi
je 0x4ae245
mov ebx, 1
cmp edi, ebx
jl 0x4b0212
push edx
push dword [esp + 0x178]
mov edx, esi
push ebp
call fcn.004adfa0
add esp, 0xc
test eax, eax
js 0x4b3a55
mov ecx, dword [esp + 0x2c]
lea esi, [esi + eax*2]
mov edx, dword [esp + 0x24]
inc ebx
mov dword [esp + 0x14], esi
cmp ebx, edi
jle 0x4b01e3
mov eax, dword [esp + 0x28]
cmp edi, eax
je 0x4ae245
cmp dword [esp + 0x38], 0
je 0x4b3a74
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov ebx, dword [esp + 0x2c]
nop dword [eax + eax]
cmp edi, dword [esp + 0x28]
jge case.0x4ae289.151
push dword [esp + 0x24]
mov edx, esi
mov ecx, ebx
push dword [esp + 0x178]
push ebp
call fcn.004adfa0
add esp, 0xc
test eax, eax
js 0x4b3a55
mov edx, dword [esp + 0x10]
lea esi, [esi + eax*2]
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
inc edi
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b0270
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
push edx
push edi
push ebp
mov edx, esi
call fcn.004adfa0
add esp, 0xc
test eax, eax
js 0x4b3b43
lea esi, [esi + eax*2]
mov dword [esp + 0x14], esi
jmp 0x4ae24c
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 0x22]
lea ebp, [eax + 2]
add eax, 0x22
mov dword [esp + 0x40], ebp
mov ecx, edx
mov dword [esp + 0x10], eax
lea eax, [ecx - 0x62]
cmp eax, 7
ja case.default.0x4b0333
movzx eax, byte [eax + 0x4b5bb4]
jmp dword [eax*4 + 0x4b5bac]
movsx edi, byte [ecx + str.space]
mov ebx, ecx
movsx ecx, byte [ecx + 0x4bf2ca]
and ebx, 1
mov edx, dword [esp + 0x10]
test ecx, ecx
mov eax, SysReAllocString
mov dword [esp + 0x30], ebx
cmove ecx, eax
mov eax, 2
jmp 0x4b038d
xor eax, eax
cmp edx, 0x69
mov edx, dword [esp + 0x10]
sete al
mov dword [esp + 0x30], eax
mov eax, SysReAllocString
movzx ecx, word [edx + 4]
movzx edi, word [edx + 2]
test ecx, ecx
cmove ecx, eax
mov eax, 6
add edx, eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x10], edx
cmp edi, 1
jl 0x4b0438
jmp 0x4b03b7
mov edi, 1
mov dword [esp + 0x28], 1
mov dword [esp + 0x24], edi
mov ebx, 1
nop dword [eax]
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b3a29
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0408
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add edx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp edx, 0xff
jbe 0x4b0417
cmp dword [esp + 0x1c], 0x6a
jmp 0x4b0429
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
test byte [edx + ebp], al
je case.0x4ae289.151
inc ebx
cmp ebx, edi
jle 0x4b03c0
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x28]
cmp edi, ebx
jne 0x4b3b5e
mov edi, dword [esp + 0x174]
jmp 0x4ae250
mov edi, dword [esp + 0x10]
movzx eax, word [edi + 2]
lea ebp, [edi + 4]
movzx edx, word [edi + eax*2]
lea edi, [edi + eax*2]
mov ecx, edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x10], edi
lea eax, [ecx - 0x62]
cmp eax, 7
ja case.default.0x4b047b
movzx eax, byte [eax + 0x4b5bc4]
jmp dword [eax*4 + 0x4b5bbc]
movsx eax, byte [ecx + 0x4bf2ca]
mov edx, ecx
movsx ebx, byte [ecx + str.space]
add edi, 2
and edx, 1
mov dword [esp + 0x10], edi
mov dword [esp + 0x30], edx
mov dword [esp + 0x28], eax
test eax, eax
jne 0x4b04ea
mov dword [esp + 0x28], SysReAllocString
jmp 0x4b04ea
movzx ebx, word [edi + 2]
xor eax, eax
cmp edx, 0x69
mov ecx, SysReAllocString
sete al
mov dword [esp + 0x30], eax
movzx eax, word [edi + 4]
test eax, eax
cmove eax, ecx
add edi, 6
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edi
jmp 0x4b04ea
mov dword [esp + 0x28], 1
mov ebx, 1
mov edi, 1
cmp ebx, edi
jl 0x4b0561
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b3a29
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0548
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
push 1
mov edx, ebp
call fcn.004b7110
add esp, 4
test eax, eax
je case.0x4ae289.151
inc edi
cmp edi, ebx
jle 0x4b0500
mov edi, dword [esp + 0x28]
cmp ebx, edi
je 0x4ae245
cmp dword [esp + 0x30], 0
je 0x4b3dd5
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp ebx, edi
jge case.0x4ae289.151
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b3a29
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b05fb
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
push 1
mov edx, ebp
call fcn.004b7110
add esp, 4
test eax, eax
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b05b3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebx, dword [esp + 0x10]
mov ecx, 0xfc00
add ebx, 2
xor edx, edx
mov ax, word [ebx]
and ax, cx
mov ecx, 0xd800
cmp ax, cx
mov ecx, dword [edi + 0x7c]
mov eax, ecx
sete dl
sub eax, esi
inc edx
sar eax, 1
cmp edx, eax
jg 0x4b3f13
movzx ecx, word [ebx]
dec edx
movzx eax, word [esi]
add ebx, 2
add esi, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
cmp cx, ax
jne case.0x4ae289.151
test edx, edx
jg 0x4b0687
jmp 0x4ae24c
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
mov ecx, dword [esp + 0x10]
add ecx, 2
movzx edi, word [ecx]
lea edx, [ecx + 2]
mov eax, edi
mov dword [esp + 0x10], edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b06f6
movzx eax, word [edx]
and edi, 0x3ff
and eax, 0x3ff
shl edi, 0xa
or edi, eax
mov ebx, 4
add edi, 0x10000
jmp 0x4b06fb
mov ebx, 2
movzx eax, word [esi]
cmp edi, 0x80
jae 0x4b0745
mov ebx, 0xff
mov ecx, eax
cmp ax, bx
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x34]
ja 0x4b0722
movzx ecx, byte [eax + ecx]
jmp 0x4b0726
mov dword [esp + 0x10], edx
movzx eax, byte [eax + edi]
cmp eax, ecx
jne case.0x4ae289.151
mov edi, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
jmp 0x4ae250
mov edx, eax
add esi, 2
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b077a
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
lea eax, [ecx + ebx]
mov ebx, dword [esp + 0x170]
mov dword [esp + 0x10], eax
cmp edi, edx
je 0x4ae232
mov eax, edi
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edi
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov eax, dword [eax*8 + 0x4cb084]
add eax, edi
cmp edx, eax
jne case.0x4ae289.151
jmp 0x4ae245
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
lea edi, [ecx + 4]
mov ebp, eax
jmp 0x4b089c
mov dword [esp + 0x38], 1
mov ebx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x24], ebp
movzx eax, word [ebx + 2]
mov dword [esp + 0x1c], eax
cmp ecx, 0x28
je 0x4b07fe
mov dword [esp + 0x30], ebp
cmp ecx, 0x35
jne 0x4b0806
mov dword [esp + 0x30], 1
lea edi, [ebx + 4]
jmp 0x4b08a4
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], SysReAllocString
jmp 0x4b08a0
mov edi, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], SysReAllocString
jmp 0x4b08a0
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], 1
jmp 0x4b08a0
mov edi, dword [esp + 0x10]
cmp edx, 0x2e
mov ecx, edx
sbb eax, eax
add edi, 2
and eax, 0xfffffff3
add eax, 0x2e
sub ecx, eax
mov eax, ecx
and ecx, 1
mov dword [esp + 0x30], ecx
mov ecx, SysReAllocString
movsx ebp, byte [eax + 0x4bf334]
movsx eax, byte [eax + 0x4bf32c]
test eax, eax
cmove eax, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebp
movzx ebx, word [edi]
mov ecx, 1
mov eax, ebx
mov dword [esp + 0x20], edi
and eax, 0xfc00
mov dword [esp + 0x18], ecx
cmp eax, 0xd800
jne 0x4b08e5
movzx eax, word [edi + 2]
and ebx, 0x3ff
and eax, 0x3ff
shl ebx, 0xa
or ebx, eax
mov ecx, 2
add ebx, 0x10000
mov dword [esp + 0x18], ecx
lea eax, [edi + ecx*2]
mov dword [esp + 0x10], eax
cmp ecx, 1
jbe 0x4b0cba
cmp edx, 0x2e
jb 0x4b0934
mov eax, ebx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, ebx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov ecx, dword [eax*8 + 0x4cb084]
add ecx, ebx
cmp ecx, ebx
je 0x4b0934
lea edx, [esp + 0x74]
call fcn.004b6f30
mov dword [esp + 0x2c], eax
jmp 0x4b093c
mov dword [esp + 0x2c], 0
mov edi, dword [esp + 0x24]
mov ebp, 1
cmp edi, ebp
jl 0x4b0a7c
mov eax, dword [esp + 0x174]
mov edx, dword [esp + 0x18]
mov ecx, dword [eax + 0x7c]
mov eax, ecx
lea ebx, [edx + edx]
mov dword [esp + 0x28], ecx
sub eax, ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], eax
nop
cmp esi, eax
ja 0x4b09dd
lea edi, [edx + edx]
mov ecx, esi
mov edx, dword [esp + 0x20]
sub edi, 4
jb 0x4b0993
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b099c
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b0982
cmp edi, 0xfffffffc
je 0x4b0a59
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b09d9
cmp edi, 0xfffffffd
je 0x4b0a59
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b09d9
cmp edi, 0xfffffffe
je 0x4b0a59
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b09d9
cmp edi, 0xffffffff
je 0x4b0a59
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4b0a59
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
test edx, edx
jle 0x4b3a55
lea ebx, [edx + edx]
mov eax, ecx
sub eax, ebx
cmp esi, eax
ja 0x4b3a55
lea edi, [edx + edx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4b0a17
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b0a1c
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b0a06
cmp edi, 0xfffffffc
je 0x4b0a59
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b3a55
cmp edi, 0xfffffffd
je 0x4b0a59
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b3a55
cmp edi, 0xfffffffe
je 0x4b0a59
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b3a55
cmp edi, 0xffffffff
je 0x4b0a59
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4b3a55
mov edi, dword [esp + 0x24]
add esi, ebx
mov eax, dword [esp + 0x48]
inc ebp
mov ebx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
cmp ebp, edi
jle 0x4b0970
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x170]
cmp edi, ebp
je 0x4ae232
cmp dword [esp + 0x30], 0
jne 0x4b3f2d
mov ebx, esi
mov dword [esp + 0x30], ebx
cmp edi, ebp
jge 0x4b0bd1
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x7c]
mov ebp, eax
lea ebx, [ecx + ecx]
mov dword [esp + 0x28], eax
mov dword [esp + 0x40], ebx
sub ebp, ebx
cmp esi, ebp
ja 0x4b0b2e
mov edx, dword [esp + 0x20]
lea edi, [ecx + ecx]
mov ecx, esi
sub edi, 4
jb 0x4b0ae8
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b0af1
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b0ad7
cmp edi, 0xfffffffc
je 0x4b0ba8
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b0b2a
cmp edi, 0xfffffffd
je 0x4b0ba8
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b0b2a
cmp edi, 0xfffffffe
je 0x4b0ba8
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b0b2a
cmp edi, 0xffffffff
je 0x4b0ba8
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4b0ba8
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x4b0c80
lea ebx, [ecx + ecx]
sub eax, ebx
cmp esi, eax
ja 0x4b0c80
lea edi, [ecx + ecx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4b0b66
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b0b6b
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b0b55
cmp edi, 0xfffffffc
je 0x4b0ba8
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b0c80
cmp edi, 0xfffffffd
je 0x4b0ba8
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b0c80
cmp edi, 0xfffffffe
je 0x4b0ba8
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b0c80
cmp edi, 0xffffffff
je 0x4b0ba8
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4b0c80
mov edi, dword [esp + 0x24]
add esi, ebx
mov ebx, dword [esp + 0x40]
inc edi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
mov dword [esp + 0x24], edi
cmp edi, dword [esp + 0x1c]
jl 0x4b0ac5
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae24c
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop word [eax + eax]
mov ecx, esi
cmp esi, ebx
je case.0x4ae289.151
mov ax, word [esi - 2]
sub esi, 2
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b0c46
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b0c20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b0cb1
cmp esi, dword [edi + 0x7c]
jb 0x4b0cb1
cmp esi, dword [edi + 0x88]
jbe 0x4b0cb1
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
mov ebx, dword [esp + 0x30]
jmp 0x4b0bd8
cmp edx, 0x2e
jb 0x4b0e28
cmp ebx, 0x7f
jbe 0x4b0cf1
mov eax, ebx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, ebx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov edi, dword [eax*8 + 0x4cb084]
add edi, ebx
jmp 0x4b0d0b
cmp ebx, 0xff
ja 0x4b0d09
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x38]
movzx edi, byte [eax + ebx]
jmp 0x4b0d0b
mov edi, ebx
mov ecx, 1
cmp ebp, ecx
jl 0x4b0d43
mov eax, dword [esp + 0x174]
mov edx, dword [eax + 0x7c]
nop
cmp esi, edx
jae 0x4b3a22
movzx eax, word [esi]
cmp ebx, eax
je 0x4b0d37
cmp edi, eax
jne case.0x4ae289.151
add esi, 2
inc ecx
mov dword [esp + 0x14], esi
cmp ecx, ebp
jle 0x4b0d20
mov eax, dword [esp + 0x1c]
cmp ebp, eax
je 0x4ae245
cmp dword [esp + 0x30], 0
jne 0x4b40e9
mov edx, dword [esp + 0x24]
mov ebp, esi
cmp edx, eax
jge 0x4b0d91
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop
cmp esi, ecx
jae 0x4b0df7
movzx eax, word [esi]
cmp ebx, eax
je 0x4b0d83
cmp edi, eax
jne 0x4b0d91
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, dword [esp + 0x1c]
jl 0x4b0d70
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae24c
cmp esi, ebp
jb case.0x4ae289.151
nop dword [eax + eax]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
sub esi, 2
test eax, eax
jne 0x4b3816
cmp esi, ebp
jae 0x4b0db0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b0d98
cmp esi, dword [edi + 0x88]
jbe 0x4b0d98
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
jmp 0x4b0d98
mov edi, dword [esp + 0x174]
mov ecx, 1
cmp ebp, ecx
jl 0x4b0e5f
mov edx, dword [edi + 0x7c]
nop dword [eax + eax]
cmp esi, edx
jae 0x4b39f6
movzx eax, word [esi]
add esi, 2
mov dword [esp + 0x14], esi
cmp ebx, eax
jne case.0x4ae289.151
inc ecx
cmp ecx, ebp
jle 0x4b0e40
mov edx, dword [esp + 0x1c]
cmp ebp, edx
je 0x4ae24c
cmp dword [esp + 0x30], 0
jne 0x4b418d
mov edi, esi
cmp ebp, edx
jge 0x4b0ecb
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b0e9f
movzx eax, word [esi]
cmp ebx, eax
jne 0x4b0ecb
add esi, 2
inc ebp
mov dword [esp + 0x14], esi
cmp ebp, edx
jl 0x4b0e86
jmp 0x4b0ecb
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b0ecb
cmp esi, dword [eax + 0x88]
jbe 0x4b0ecb
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b53e6
cmp dword [esp + 0x38], 0
jne 0x4ae245
cmp esi, edi
jb case.0x4ae289.151
nop
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
sub esi, 2
test eax, eax
jne 0x4b3816
cmp esi, edi
jae 0x4b0ee0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx edi, word [esi]
add esi, 2
mov ecx, dword [esp + 0x10]
mov eax, edi
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b0f72
movzx eax, word [esi]
and edi, 0x3ff
and eax, 0x3ff
shl edi, 0xa
add esi, 2
or edi, eax
mov dword [esp + 0x14], esi
add edi, 0x10000
movzx edx, word [ecx + 2]
lea eax, [ecx + 4]
mov dword [esp + 0x10], eax
cmp ebp, 0x20
jne 0x4b0fd9
cmp edx, 0x7f
jbe 0x4b0fb0
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov eax, dword [eax*8 + 0x4cb084]
add eax, edx
jmp 0x4b0fca
cmp edx, 0xff
ja 0x4b0fc8
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x38]
movzx eax, byte [eax + edx]
jmp 0x4b0fca
mov eax, edx
cmp edx, edi
je case.0x4ae289.151
cmp eax, edi
jmp 0x4ae23f
mov dword [esp + 0x10], eax
cmp edx, edi
jmp 0x4ae23f
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
add ecx, 4
mov dword [esp + 0x1c], eax
mov ebx, eax
jmp 0x4b10c3
mov edx, dword [esp + 0x10]
xor ebx, ebx
movzx eax, word [edx + 2]
mov dword [esp + 0x1c], eax
cmp ecx, 0x42
je 0x4b1016
mov dword [esp + 0x30], ebx
cmp ecx, 0x4f
jne 0x4b101e
mov dword [esp + 0x30], 1
lea ecx, [edx + 4]
jmp 0x4b10c3
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
add ecx, 2
jmp 0x4b10bb
mov ecx, dword [esp + 0x10]
mov ebx, 1
mov dword [esp + 0x38], 1
add ecx, 2
jmp 0x4b10bb
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
add ecx, 2
mov dword [esp + 0x1c], 1
jmp 0x4b10c3
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
movzx eax, word [ecx + 2]
add ecx, 4
mov dword [esp + 0x1c], eax
jmp 0x4b10c3
mov ecx, dword [esp + 0x10]
cmp edx, 0x48
sbb eax, eax
add ecx, 2
and eax, 0xfffffff3
add eax, 0x48
sub edx, eax
mov eax, edx
and edx, 1
mov dword [esp + 0x30], edx
movsx ebx, byte [eax + 0x4bf334]
movsx eax, byte [eax + 0x4bf32c]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x4b10c3
mov dword [esp + 0x1c], SysReAllocString
movzx edi, word [ecx]
lea edx, [ecx + 2]
mov dword [esp + 0x24], edi
mov dword [esp + 0x10], edx
cmp ebp, 0x48
jb 0x4b1300
cmp edi, 0x7f
jbe 0x4b1108
mov eax, edi
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edi
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
mov ebp, dword [eax*8 + 0x4cb084]
add ebp, edi
jmp 0x4b1122
cmp edi, 0xff
ja 0x4b1120
mov ecx, dword [esp + 0x174]
mov eax, dword [ecx + 0x38]
movzx ebp, byte [eax + edi]
jmp 0x4b1129
mov ebp, edi
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x2c], ebp
cmp ebx, 1
jl 0x4b119f
mov edi, dword [ecx + 0x7c]
mov edx, 1
nop word [eax + eax]
cmp esi, edi
jae 0x4b4220
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1180
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x24], ecx
je case.0x4ae289.151
cmp ebp, ecx
je case.0x4ae289.151
inc edx
cmp edx, ebx
jle 0x4b1140
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
cmp ebx, eax
je 0x4b0444
cmp dword [esp + 0x30], 0
jne 0x4b4253
mov ebp, esi
cmp ebx, eax
jge 0x4b121d
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b12c7
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1203
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp dword [esp + 0x24], ecx
je 0x4b121d
cmp dword [esp + 0x2c], ecx
je 0x4b121d
inc ebx
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebx, dword [esp + 0x1c]
jl 0x4b11c6
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae24c
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ae289.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b128d
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b1266
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b1224
cmp esi, dword [edi + 0x88]
jbe 0x4b1224
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
jmp 0x4b1224
mov ebp, dword [esp + 0x174]
mov edx, 1
cmp ebx, edx
jl 0x4b1366
mov edi, dword [ebp + 0x7c]
cmp esi, edi
jae 0x4b4357
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1353
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x24], ecx
je case.0x4ae289.151
inc edx
cmp edx, ebx
jle 0x4b1313
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
cmp ebx, eax
je 0x4b0444
cmp dword [esp + 0x30], 0
jne 0x4b4383
mov ebp, esi
cmp ebx, eax
jge 0x4b13e2
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b1491
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b13ce
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp dword [esp + 0x24], ecx
je 0x4b13e2
inc ebx
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebx, dword [esp + 0x1c]
jl 0x4b1391
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae24c
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop dword [eax + eax]
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ae289.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b1457
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b1430
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b13e9
cmp esi, dword [edi + 0x88]
jbe 0x4b13e9
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
jmp 0x4b13e9
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], 1
movzx eax, word [ecx + 2]
mov ebp, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebp
lea eax, [ecx + 4]
jmp 0x4b15bd
mov edx, dword [esp + 0x10]
xor ebx, ebx
xor ebp, ebp
cmp ecx, 0x5c
mov dword [esp + 0x24], ebp
sete bl
movzx eax, word [edx + 2]
mov dword [esp + 0x20], eax
lea eax, [edx + 4]
mov dword [esp + 0x30], ebx
jmp 0x4b15bd
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
jmp 0x4b15b5
mov eax, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
jmp 0x4b15b5
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], 1
jmp 0x4b15bd
mov ecx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
mov dword [esp + 0x24], ebp
movzx eax, word [ecx + 2]
mov dword [esp + 0x20], eax
lea eax, [ecx + 4]
jmp 0x4b15bd
mov eax, dword [esp + 0x10]
lea ecx, [edx - 1]
movsx ebp, byte [edx + 0x4bf2df]
and ecx, 1
mov dword [esp + 0x30], ecx
add eax, 2
movsx ecx, byte [edx + 0x4bf2d7]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ecx
test ecx, ecx
jne 0x4b15bd
mov dword [esp + 0x20], SysReAllocString
movzx edi, word [eax]
lea edx, [eax + 2]
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], edx
cmp edi, 0x10
je 0x4b15e2
cmp edi, 0xf
je 0x4b15e2
mov ebx, dword [esp + 0x34]
or eax, 0xffffffff
mov dword [esp + 0x2c], eax
jmp 0x4b1608
movzx ecx, word [edx]
lea eax, [edx + 2]
movzx edx, word [eax]
xor ebx, ebx
cmp edi, 0xf
mov dword [esp + 0x3c], edx
mov dword [esp + 0x2c], ecx
sete bl
add eax, 2
mov dword [esp + 0x10], eax
mov eax, ecx
mov dword [esp + 0x34], ebx
test ebp, ebp
jle 0x4b1a95
test eax, eax
js 0x4b1c4d
cmp eax, 8
ja case.default.0x4afe9e
jmp dword [eax*4 + 0x4b5bcc]
test ebx, ebx
jne case.0x4ae289.151
lea edx, [ebx + 1]
mov ebx, dword [esp + 0x174]
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
mov ecx, esi
cmp esi, edi
jae 0x4b53b9
movzx eax, word [esi]
add esi, 2
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b166c
lea esi, [ecx + 4]
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b1645
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b16d1
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
mov al, byte [eax*8 + 0x4cb081]
cmp al, 9
je 0x4b1704
cmp al, 5
je 0x4b1704
cmp al, 8
je 0x4b1704
xor eax, eax
jmp 0x4b1709
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b1691
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1780
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov ebx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], ebx
mov ebx, dword [esp + 0x174]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b1740
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
nop
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1830
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
mov ebx, dword [esp + 0x174]
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b17f0
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b18d7
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
mov ebx, dword [esp + 0x174]
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb080]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b1897
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
nop
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1980
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b19b9
cmp eax, 3
je 0x4b19b9
xor eax, eax
jmp 0x4b19be
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b1940
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov edi, 1
cmp ebp, edi
jl 0x4b1a91
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b3a22
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1a31
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b1a79
cmp edx, 9
je 0x4b1a79
cmp edx, 0xa
je 0x4b1a79
cmp edx, 0xc
je 0x4b1a79
cmp edx, 0xd
je 0x4b1a79
xor eax, eax
jmp 0x4b1a7e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
inc edi
cmp edi, ebp
jle 0x4b19f1
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x174]
mov edx, dword [esp + 0x20]
cmp ebp, edx
je 0x4ae245
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0x2c]
jne 0x4b4611
mov ebx, esi
mov dword [esp + 0x1c], ebx
test eax, eax
js 0x4b2b58
cmp eax, 8
ja case.default.0x4afe9e
jmp dword [eax*4 + 0x4b5bf0]
mov edi, 1
cmp ebp, edi
jl 0x4b1a91
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b3a22
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1b28
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b1b75
cmp edx, 9
je 0x4b1b75
cmp edx, 0xa
je 0x4b1b75
cmp edx, 0xb
je 0x4b1b75
cmp edx, 0xc
je 0x4b1b75
cmp edx, 0xd
je 0x4b1b75
xor eax, eax
jmp 0x4b1b7a
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
inc edi
cmp edi, ebp
jle 0x4b1ae8
jmp 0x4b1a91
mov edi, 1
cmp ebp, edi
jl 0x4b1a91
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
nop dword [eax]
cmp esi, ebx
jae 0x4b3a22
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1bf0
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b1c30
cmp eax, 3
je 0x4b1c30
cmp edx, 0x5f
je 0x4b1c30
xor eax, eax
jmp 0x4b1c35
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
inc edi
cmp edi, ebp
jle 0x4b1bb0
jmp 0x4b1a91
cmp edi, 0x16
jne 0x4b1d81
mov ebx, dword [esp + 0x174]
mov ebp, 1
cmp dword [esp + 0x24], ebp
jl 0x4b2485
nop dword [eax]
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
mov esi, edx
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b1cb3
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
je case.0x4ae289.151
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b1d69
mov ebx, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1d27
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4b1d5e
lea esi, [ebx + edx*2]
mov ebx, esi
cmp esi, edi
jb 0x4b1cf2
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x24]
jle 0x4b1c70
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4afe9e
jmp dword [eax*4 + 0x4b5c14]
mov ebx, dword [esp + 0x174]
mov edi, 1
cmp ebp, edi
jl 0x4b1e38
mov ecx, dword [ebx + 0x7c]
nop dword [eax + eax]
cmp esi, ecx
jae 0x4b53b9
mov edx, dword [ebx + 0x18]
lea eax, [ebx + 0x1c]
test edx, edx
je 0x4b1dda
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b6f90
add esp, 0xc
test eax, eax
jne case.0x4ae289.151
jmp 0x4b1e05
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b1e05
mov ax, word [esi]
cmp ax, word [ebx + 0x2c]
jne 0x4b1e05
cmp edx, 1
je case.0x4ae289.151
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x2e]
je case.0x4ae289.151
mov ecx, dword [ebx + 0x7c]
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, ecx
jae 0x4b1e2f
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b1e2f
add esi, 2
mov dword [esp + 0x14], esi
inc edi
cmp edi, ebp
jle 0x4b1db0
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov ecx, 1
cmp ebp, ecx
jl 0x4b1a9c
mov edx, dword [ebx + 0x7c]
cmp esi, edx
jae 0x4b53b9
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edx
jae 0x4b1e81
mov ax, word [esi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x68]
jne 0x4b1e81
add esi, 2
mov dword [esp + 0x14], esi
inc ecx
cmp ecx, ebp
jle 0x4b1e58
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
lea ecx, [ebp*2]
mov eax, dword [ebx + 0x7c]
sub eax, ecx
cmp esi, eax
ja case.0x4ae289.151
add esi, ecx
mov dword [esp + 0x14], esi
jmp 0x4b1a9c
mov edi, 1
cmp ebp, edi
jl 0x4b1a91
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b3a29
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1f00
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
cmp ecx, 0xd
ja 0x4b1f4c
je 0x4b1f28
cmp ecx, 0xa
je 0x4b1f11
lea eax, [ecx - 0xb]
jmp 0x4b1f5a
mov esi, edx
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x174]
inc edi
cmp edi, ebp
jle 0x4b1ec8
jmp 0x4b1a91
mov esi, edx
mov dword [esp + 0x14], esi
cmp edx, ebx
jae 0x4b1f17
cmp word [edx], 0xa
mov eax, dword [esp + 0x174]
mov dword [esp + 0x14], esi
jne 0x4b1f1e
lea esi, [edx + 2]
mov dword [esp + 0x14], esi
jmp 0x4b1f1e
cmp ecx, 0x85
je 0x4b1f63
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae289.151
mov eax, dword [esp + 0x174]
mov esi, edx
mov dword [esp + 0x14], esi
cmp dword [eax + 0x68], 0
jne case.0x4ae289.151
jmp 0x4b1f1e
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1fd3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4b2005
je case.0x4ae289.151
cmp ecx, 0xa0
ja 0x4b1ffd
je case.0x4ae289.151
cmp ecx, 9
je case.0x4ae289.151
cmp ecx, 0x20
jmp 0x4b2035
cmp ecx, 0x1680
jmp 0x4b2035
cmp ecx, 0x205f
ja 0x4b202f
je case.0x4ae289.151
cmp ecx, 0x2000
jb 0x4b203b
cmp ecx, 0x200a
jbe case.0x4ae289.151
cmp ecx, 0x202f
jmp 0x4b2035
cmp ecx, 0x3000
je case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b1f93
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b20a4
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4b20ca
je 0x4b20fc
cmp ecx, 0xa0
ja 0x4b20c2
je 0x4b20fc
cmp ecx, 9
je 0x4b20fc
cmp ecx, 0x20
jmp 0x4b20f6
cmp ecx, 0x1680
jmp 0x4b20f6
cmp ecx, 0x205f
ja 0x4b20f0
je 0x4b20fc
cmp ecx, 0x2000
jb case.0x4ae289.151
cmp ecx, 0x200a
jbe 0x4b20fc
cmp ecx, 0x202f
jmp 0x4b20f6
cmp ecx, 0x3000
jne case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b2064
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2165
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4b217d
je case.0x4ae289.151
cmp ecx, 0xa
jb 0x4b2191
cmp ecx, 0xd
jmp 0x4b218b
cmp ecx, 0x2028
jb 0x4b2191
cmp ecx, 0x2029
jbe case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b2125
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b21f6
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4b2208
je 0x4b2217
lea eax, [ecx - 0xa]
cmp eax, 3
jmp 0x4b2211
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b21b6
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2280
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x80
jae 0x4b2295
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
jne case.0x4ae289.151
inc edx
cmp edx, ebp
jle 0x4b2240
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
nop word [eax + eax]
cmp esi, edi
jae 0x4b53b9
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ae289.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
je case.0x4ae289.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b22c0
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae 0x4b2338
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
jne case.0x4ae289.151
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b235f
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4b235f
add esi, 2
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b2314
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ae289.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
je case.0x4ae289.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b2384
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b1a9c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae 0x4b23fc
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x4ae289.151
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b2423
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4b2423
add esi, 2
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b23d8
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov edx, 1
cmp ebp, edx
jl 0x4b1a95
mov ebx, dword [esp + 0x174]
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b53b9
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ae289.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
je case.0x4ae289.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b2448
mov edi, dword [esp + 0x18]
jmp 0x4b1a9c
mov ebp, dword [esp + 0x24]
jmp 0x4b1a9c
mov edi, dword [esp + 0x174]
cmp ebp, edx
jge 0x4b2ab5
mov edx, dword [edi + 0x7c]
cmp esi, edx
jae 0x4b2590
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
cmp dword [esp + 0x34], 0
movzx ecx, ax
jne 0x4b2ab5
xor eax, eax
cmp cx, word [esp + 0x4c]
sete al
inc ebp
lea esi, [esi + eax*2]
add esi, 2
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b24a0
jmp 0x4b2ab5
cmp ebp, edx
jge 0x4b2aae
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2589
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2530
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
mov al, byte [eax*8 + 0x4cb081]
cmp al, 9
je 0x4b2563
cmp al, 5
je 0x4b2563
cmp al, 8
je 0x4b2563
xor eax, eax
jmp 0x4b2568
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2aae
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b24f3
jmp 0x4b2aae
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b2ab5
cmp esi, dword [edi + 0x88]
jbe 0x4b2ab5
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
jmp 0x4b2ab5
cmp ebp, edx
jge 0x4b2aae
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2589
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b260d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov ebx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], ebx
mov ebx, dword [esp + 0x1c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b2aae
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b25d4
jmp 0x4b2aae
cmp ebp, edx
jge 0x4b2aae
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2589
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b26b5
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b2aae
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2678
jmp 0x4b2aae
cmp ebp, edx
jge 0x4b2aae
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2589
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2752
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb080]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b2aae
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2715
jmp 0x4b2aae
cmp ebp, edx
jge 0x4b2aae
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b2589
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b27ef
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b2828
cmp eax, 3
je 0x4b2828
xor eax, eax
jmp 0x4b282d
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2aae
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b27b2
jmp 0x4b2aae
cmp ebp, edx
jge 0x4b2aae
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
mov edi, 1
cmp esi, ebx
jae 0x4b290b
movzx edx, word [esi]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b289d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b28e5
cmp edx, 9
je 0x4b28e5
cmp edx, 0xa
je 0x4b28e5
cmp edx, 0xc
je 0x4b28e5
cmp edx, 0xd
je 0x4b28e5
xor eax, eax
jmp 0x4b28ea
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2aaa
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2860
jmp 0x4b2aaa
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b2937
cmp esi, dword [edi + 0x88]
jbe 0x4b2937
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
mov ebx, dword [esp + 0x1c]
jmp 0x4b2ab5
cmp ebp, edx
jge 0x4b2aae
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
mov edi, 1
cmp esi, ebx
jae 0x4b290b
movzx edx, word [esi]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b298b
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b29d8
cmp edx, 9
je 0x4b29d8
cmp edx, 0xa
je 0x4b29d8
cmp edx, 0xb
je 0x4b29d8
cmp edx, 0xc
je 0x4b29d8
cmp edx, 0xd
je 0x4b29d8
xor eax, eax
jmp 0x4b29dd
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2aaa
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2952
jmp 0x4b2aaa
cmp ebp, edx
jge 0x4b2aae
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b290b
movzx edx, word [esi]
mov edi, 1
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2a4d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b2a8d
cmp eax, 3
je 0x4b2a8d
cmp edx, 0x5f
je 0x4b2a8d
xor eax, eax
jmp 0x4b2a92
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b2aaa
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2a10
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ae24c
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebx
je case.0x4ae289.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b2b1e
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b2af7
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp edi, 0x16
jne 0x4b2cc6
cmp ebp, edx
jge 0x4b2cab
mov ebx, dword [esp + 0x174]
mov ebp, dword [ebx + 0x7c]
cmp esi, ebp
jae 0x4b2c82
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2bb0
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
je 0x4b2ca7
mov ebx, dword [ebx + 0x7c]
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp esi, ebx
jae 0x4b2c66
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2c2b
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4b2c62
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4b2bf6
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x174]
inc eax
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x20]
jl 0x4b2b73
jmp 0x4b2ca7
cmp dword [ebx + 0x8c], 0
je 0x4b2ca7
cmp esi, dword [ebx + 0x88]
jbe 0x4b2ca7
mov dword [ebx + 0x64], 1
cmp dword [ebx + 0x8c], 1
jg 0x4b53e6
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
je 0x4b4444
mov edi, dword [esp + 0x174]
jmp 0x4ae250
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4afe9e
jmp dword [eax*4 + 0x4b5c54]
cmp edx, 0x7fffffff
jge 0x4b2dcd
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b2d9b
mov edx, dword [eax + 0x18]
add eax, 0x1c
test edx, edx
je 0x4b2d21
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b6f90
add esp, 0xc
test eax, eax
jne 0x4b300e
jmp 0x4b2d53
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b2d53
mov ecx, dword [esp + 0x174]
mov ax, word [esi]
cmp ax, word [ecx + 0x2c]
jne 0x4b2d53
cmp edx, 1
je 0x4b300e
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x2e]
je 0x4b300e
mov eax, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b2d8b
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [esp + 0x174]
jne 0x4b2d8b
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x4b2cf7
jmp 0x4b300e
cmp dword [eax + 0x8c], 0
je 0x4b300e
cmp esi, dword [eax + 0x88]
jbe 0x4b300e
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b53e6
jmp 0x4b300e
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop
cmp esi, ecx
jae 0x4b2d9b
mov edx, dword [eax + 0x18]
add eax, 0x1c
test edx, edx
je 0x4b2e06
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b6f90
add esp, 0xc
test eax, eax
jne 0x4b300e
jmp 0x4b2e38
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b2e38
mov ecx, dword [esp + 0x174]
mov ax, word [esi]
cmp ax, word [ecx + 0x2c]
jne 0x4b2e38
cmp edx, 1
je 0x4b300e
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x2e]
je 0x4b300e
mov eax, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b2e70
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [esp + 0x174]
jne 0x4b2e70
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x4b2de0
jmp 0x4b300e
cmp edx, 0x7fffffff
jge 0x4b2ed8
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop word [eax + eax]
cmp esi, ecx
jae 0x4b2ecf
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, ecx
jae 0x4b2ec5
mov ax, word [esi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x68]
jne 0x4b2ec5
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, edx
jl 0x4b2ea0
jmp 0x4b300e
mov eax, dword [esp + 0x174]
jmp 0x4b2ee6
mov eax, dword [esp + 0x174]
mov esi, dword [eax + 0x7c]
mov dword [esp + 0x14], esi
cmp dword [eax + 0x8c], 0
je 0x4b2f0b
cmp esi, dword [eax + 0x88]
jbe 0x4b2f0b
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b53e6
mov ebp, eax
jmp 0x4b3015
sub edx, ebp
mov ebp, dword [esp + 0x174]
mov ecx, dword [ebp + 0x7c]
mov eax, ecx
sub eax, esi
sar eax, 1
cmp edx, eax
jbe 0x4b2f41
mov eax, ebp
mov esi, ecx
mov dword [esp + 0x14], esi
cmp dword [eax + 0x8c], 0
je 0x4b2f0b
cmp ecx, dword [eax + 0x88]
jmp 0x4b2ef5
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
jmp 0x4b3015
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop
mov edx, esi
cmp esi, edi
jae 0x4b3030
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2f9c
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, 4
add ecx, 0x10000
jmp 0x4b2fa1
mov eax, 2
cmp ecx, 0xd
jne 0x4b2fbd
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b300a
cmp word [esi], 0xa
cmovne esi, edx
add esi, 2
jmp 0x4b2ffb
cmp ecx, 0xa
je 0x4b2ff9
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x68], 0
jne 0x4b3554
cmp ecx, 0xb
je 0x4b2ff9
cmp ecx, 0xc
je 0x4b2ff9
cmp ecx, 0x85
je 0x4b2ff9
cmp ecx, 0x2028
je 0x4b2ff9
cmp ecx, 0x2029
jne 0x4b3554
add esi, eax
inc ebp
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2f60
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
je 0x4b4564
mov edi, dword [esp + 0x174]
jmp 0x4ae250
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b305c
cmp esi, dword [eax + 0x88]
jbe 0x4b305c
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b53e6
mov edi, dword [esp + 0x18]
mov ebp, eax
jmp 0x4b3015
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
mov edx, 1
cmp esi, edi
jae 0x4b3131
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b30af
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x180e
ja 0x4b30d5
je 0x4b3103
cmp ecx, 0xa0
ja 0x4b30cd
je 0x4b3103
cmp ecx, 9
je 0x4b3103
cmp ecx, 0x20
jmp 0x4b30fd
cmp ecx, 0x1680
jmp 0x4b30fd
cmp ecx, 0x205f
ja 0x4b30f7
je 0x4b3103
cmp ecx, 0x2000
jb 0x4b30ff
cmp ecx, 0x200a
jbe 0x4b3103
cmp ecx, 0x202f
jmp 0x4b30fd
cmp ecx, 0x3000
je 0x4b3103
xor ecx, ecx
jmp 0x4b3108
mov ecx, 1
xor eax, eax
cmp dword [esp + 0x18], 0x12
sete al
cmp ecx, eax
je 0x4b300a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3072
jmp 0x4b300a
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b305c
cmp esi, dword [eax + 0x88]
jbe 0x4b305c
mov dword [eax + 0x64], edx
cmp dword [eax + 0x8c], edx
jg 0x4b53e6
mov edi, dword [esp + 0x18]
mov ebp, eax
jmp 0x4b3015
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b3030
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b31bd
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x85
ja 0x4b31f8
je 0x4b3203
cmp ecx, 0xa
jb 0x4b31d1
cmp ecx, 0xd
jbe 0x4b3203
xor ecx, ecx
xor eax, eax
cmp dword [esp + 0x18], 0x14
sete al
cmp ecx, eax
je 0x4b300a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3180
jmp 0x4b300a
lea eax, [ecx - 0x2028]
cmp eax, 1
ja 0x4b31d1
mov ecx, 1
jmp 0x4b31d3
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b3030
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b325d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b3279
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 4
jne 0x4b300a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3220
jmp 0x4b300a
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop
cmp esi, edi
jae 0x4b3030
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b32dd
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b300a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 4
je 0x4b300a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b32a0
jmp 0x4b300a
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b3030
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b335f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b337b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 1
jne 0x4b300a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3322
jmp 0x4b300a
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b3030
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b33dd
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b300a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 1
je 0x4b300a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b33a0
jmp 0x4b300a
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b3030
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b345f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b347b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 0x10
jne 0x4b300a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b3422
jmp 0x4b300a
cmp ebp, edx
jge 0x4b300e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b3510
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b34dd
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b300a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 0x10
je 0x4b300a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b34a0
jmp 0x4b300a
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b305c
cmp esi, dword [eax + 0x88]
jbe 0x4b305c
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jle 0x4b305c
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x18]
mov ebp, edx
jmp 0x4b3015
cmp ecx, 0x74
mov ecx, esi
jne 0x4b35a0
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov edx, ebp
jmp 0x4b37ff
mov dword [edi + 0x9c], 2
mov edx, ebp
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov edx, dword [esp + 0x10]
add edx, 4
jmp 0x4b37ff
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0x90]
cmp eax, ebx
cmovle eax, ebx
mov dword [esp + 0x170], eax
movzx eax, word [ebp + 6]
lea eax, [eax*2 + 4]
add eax, ebp
mov ecx, eax
cmp word [ecx], 0x71
jne 0x4b362d
movzx eax, word [ecx + 2]
lea eax, [ecx + eax*2]
mov ecx, eax
cmp word [ecx], 0x71
je 0x4b3615
jmp 0x4b362d
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x1c], 0x86
lea edx, [eax + 4]
mov dword [esp + 0x10], edx
jne 0x4b3803
mov dword [edi + 0x9c], 2
mov ecx, esi
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp ecx, 0x75
je 0x4b39aa
cmp ecx, 0x74
jne 0x4b3715
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
movzx eax, word [ebp]
mov edx, ebp
cmp eax, 0x7b
je 0x4b377c
mov ecx, 0x82
cmp ax, cx
jb 0x4b37ff
mov dword [edi + 0x9c], 2
mov ecx, esi
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0x82
cmp word [ebp], ax
jb 0x4b372a
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
cmp eax, 0xfffffc1c
jne 0x4b375e
cmp dword [edi + 0xb8], ebp
jmp 0x4b3760
test eax, eax
jne 0x4b3816
mov edx, dword [esp + 0x10]
add edx, 4
cmp word [ebp], 0x7b
mov dword [esp + 0x10], edx
jne 0x4b3803
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4af313
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 4]
mov dword [esp + 0x48], edx
lea ebp, [edx + edx]
cmp ebp, dword [edi + 0x14]
jl 0x4b53f6
mov edx, dword [esp + 0x1c]
nop
cmp edx, 0x82
jae 0x4b3821
cmp edx, 0x7b
je 0x4b3821
cmp dword [edi + 0x6c], 0
mov edx, dword [esp + 0x10]
jne 0x4b382f
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
je 0x4b382f
movzx eax, word [edx]
movzx eax, byte [eax + 0x4ce360]
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jb 0x4ae1f0
inc eax
mov dword [edi], eax
mov eax, 0xfffffff8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x174]
inc eax
mov edi, dword [edi + 0xb0]
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx eax, byte [eax + 0x4ce360]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [edx + eax*2]
call fcn.004ae150
mov edx, eax
add esp, 0x14
cmp edx, 0xfffffc20
jne 0x4b38ac
mov ebp, dword [esp + 0x10]
movzx ecx, word [ebp + 2]
lea eax, [ecx*2]
add eax, ebp
cmp dword [ebx + 0x80], eax
jae 0x4b5595
cmp word [ebp], 0x71
je 0x4b38b8
cmp word [eax], 0x71
jne 0x4b5595
jmp 0x4b38b8
test edx, edx
jne 0x4b555a
mov ebp, dword [esp + 0x10]
movzx eax, word [ebp + 2]
lea ebp, [ebp + eax*2]
mov dword [ebx + 0xb0], edi
cmp word [ebp], 0x71
mov dword [esp + 0x10], ebp
jne case.0x4ae289.151
mov edi, ebx
jmp 0x4b37ca
mov eax, dword [esp + 0x17c]
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, word [ebx + 2]
add ecx, eax
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ebx + ecx*2]
mov ecx, esi
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b3928
cmp eax, 0xfffffc1d
je 0x4b3928
cmp eax, 0xfffffc20
jne 0x4b3816
lea eax, [ebx + 4]
mov dword [edi + 0x80], eax
mov eax, 0xfffffc1f
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xffffffe6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xf0]
cmp eax, ecx
je 0x4b396a
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffffa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x16c]
mov dword [edi + 0x84], esi
mov dword [edi + 0x80], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov dword [edi + 0x84], esi
mov eax, 0xfffffc1b
mov dword [edi + 0x90], ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x170]
mov dword [edi + 0x84], esi
mov dword [edi + 0x90], eax
mov eax, dword [esp + 0x16c]
mov dword [edi + 0x80], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je case.0x4ae289.151
cmp esi, dword [edi + 0x88]
jbe case.0x4ae289.151
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jmp 0x4b53e0
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ae289.151
cmp esi, dword [eax + 0x88]
jbe case.0x4ae289.151
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jmp 0x4b53e0
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ae289.151
cmp esi, dword [eax + 0x7c]
jb case.0x4ae289.151
jmp 0x4b3a36
mov ebx, esi
cmp edi, eax
jge 0x4b3af0
nop
push edx
push dword [esp + 0x178]
mov edx, esi
push ebp
call fcn.004adfa0
add esp, 0xc
test eax, eax
js 0x4b3aab
mov ecx, dword [esp + 0x2c]
lea esi, [esi + eax*2]
mov edx, dword [esp + 0x24]
inc edi
cmp edi, dword [esp + 0x28]
jl 0x4b3a80
jmp 0x4b3adc
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b3adc
cmp esi, dword [eax + 0x7c]
jb 0x4b3adc
cmp esi, dword [eax + 0x88]
jbe 0x4b3adc
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b53e6
cmp esi, ebx
jb case.0x4ae289.151
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov eax, ebp
neg eax
lea esi, [esi + eax*2]
cmp esi, ebx
jae 0x4b3af0
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je case.0x4ae289.151
cmp esi, dword [edi + 0x7c]
jb case.0x4ae289.151
jmp 0x4b3a03
cmp dword [esp + 0x30], 0
je 0x4b3c56
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp edi, ebx
jge case.0x4ae289.151
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b3a29
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3be8
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add edx, 0x10000
add esi, 2
cmp edx, 0xff
jbe 0x4b3bf7
cmp dword [esp + 0x1c], 0x6a
jmp 0x4b3c09
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
test byte [edx + ebp], al
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b3ba0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, esi
cmp edi, ebx
jge 0x4b3cc4
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x28]
mov ebx, dword [eax + 0x7c]
nop
cmp esi, ebx
jae 0x4b3d9c
movzx edx, word [esi]
mov edi, 1
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3cad
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
cmp edx, 0xff
jbe 0x4b3d63
cmp dword [esp + 0x1c], 0x6a
jne 0x4b3d83
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ae289.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b3d29
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b3d02
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
mov ecx, dword [esp + 0x40]
test byte [edx + ecx], al
je 0x4b3cc4
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
lea esi, [esi + edi*2]
inc eax
mov dword [esp + 0x24], eax
cmp eax, ecx
jl 0x4b3c70
jmp 0x4b3cc4
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b3ccb
cmp esi, dword [edi + 0x88]
jbe 0x4b3ccb
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
jmp 0x4b3ccb
mov ebp, esi
cmp ebx, edi
jge 0x4b3e41
nop
mov edi, dword [esp + 0x174]
cmp esi, dword [edi + 0x7c]
jae 0x4b3ee1
movzx ecx, word [esi]
mov edi, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3e25
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edi, 2
add ecx, 0x10000
mov edx, dword [esp + 0x40]
push 1
call fcn.004b7110
add esp, 4
test eax, eax
je 0x4b3e41
inc ebx
lea esi, [esi + edi*2]
cmp ebx, dword [esp + 0x28]
jl 0x4b3de0
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ae289.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b3ea7
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b3e80
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je 0x4b3e48
cmp esi, dword [edi + 0x88]
jbe 0x4b3e48
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b53e6
jmp 0x4b3e48
cmp dword [edi + 0x8c], 0
je case.0x4ae289.151
cmp esi, ecx
jb case.0x4ae289.151
jmp 0x4b3a03
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp edi, ebp
jge case.0x4ae289.151
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x18]
mov ebp, dword [eax + 0x7c]
mov eax, ebp
lea ebx, [ecx + ecx]
sub eax, ebx
cmp esi, eax
ja 0x4b3ff7
mov edx, dword [esp + 0x20]
lea edi, [ecx + ecx]
mov ecx, esi
sub edi, 4
jb 0x4b3fb1
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b3fba
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b3fa0
cmp edi, 0xfffffffc
je 0x4b4073
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b3ff7
cmp edi, 0xfffffffd
je 0x4b4073
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b3ff7
cmp edi, 0xfffffffe
je 0x4b4073
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b3ff7
cmp edi, 0xffffffff
je 0x4b4073
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4b4073
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x4b40c8
lea ebx, [ecx + ecx]
mov eax, ebp
sub eax, ebx
cmp esi, eax
ja 0x4b40c8
lea edi, [ecx + ecx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4b4031
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b4036
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b4020
cmp edi, 0xfffffffc
je 0x4b4073
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b40c8
cmp edi, 0xfffffffd
je 0x4b4073
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b40c8
cmp edi, 0xfffffffe
je 0x4b4073
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b40c8
cmp edi, 0xffffffff
je 0x4b4073
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4b40c8
mov eax, dword [esp + 0x17c]
add esi, ebx
mov edi, dword [esp + 0x24]
inc eax
mov edx, dword [esp + 0x10]
inc edi
push eax
push dword [esp + 0x17c]
mov ecx, esi
mov dword [esp + 0x2c], edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
mov ebp, dword [esp + 0x30]
add esp, 0x14
test eax, eax
je 0x4b3f68
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ae289.151
cmp esi, ebp
jb case.0x4ae289.151
jmp 0x4b3a36
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x1c]
jge case.0x4ae289.151
mov ecx, dword [esp + 0x174]
cmp esi, dword [ecx + 0x7c]
jae 0x4b4227
movzx eax, word [esi]
cmp ebx, eax
je 0x4b414d
cmp edi, eax
jne case.0x4ae289.151
mov eax, dword [esp + 0x17c]
add esi, 2
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ecx
push dword [esp + 0x17c]
mov ecx, esi
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4124
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x1c]
jge case.0x4ae289.151
cmp esi, dword [edi + 0x7c]
jae 0x4b39f6
movzx eax, word [esi]
add esi, 2
cmp ebx, eax
jne case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b41c2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [esp + 0x174]
cmp dword [ecx + 0x8c], 0
je case.0x4ae289.151
cmp esi, dword [ecx + 0x88]
jbe case.0x4ae289.151
mov dword [ecx + 0x64], 1
cmp dword [ecx + 0x8c], 1
jmp 0x4b53e0
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop word [eax + eax]
cmp ebx, dword [esp + 0x1c]
jge case.0x4ae289.151
mov edx, dword [esp + 0x174]
cmp esi, dword [edx + 0x7c]
jae 0x4b432b
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b42da
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp edi, ecx
je case.0x4ae289.151
cmp ebp, ecx
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
inc ebx
push eax
push dword [esp + 0x17c]
push edx
push dword [esp + 0x17c]
mov edx, dword [esp + 0x20]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4290
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edx + 0x8c], 0
je case.0x4ae289.151
cmp esi, dword [edx + 0x88]
jbe case.0x4ae289.151
mov dword [edx + 0x64], 1
cmp dword [edx + 0x8c], 1
jmp 0x4b53e0
cmp dword [ebp + 0x8c], 0
je case.0x4ae289.151
cmp esi, dword [ebp + 0x88]
jbe case.0x4ae289.151
mov dword [ebp + 0x64], 1
cmp dword [ebp + 0x8c], 1
jmp 0x4b53e0
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop dword [eax + eax]
cmp ebx, dword [esp + 0x1c]
jge case.0x4ae289.151
cmp esi, dword [ebp + 0x7c]
jae 0x4b4357
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b43ff
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp edi, ecx
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebx
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b43c0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x174]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop dword [eax]
lea edi, [esi - 2]
cmp esi, ebx
je case.0x4ae289.151
mov ebp, 0xdc00
movzx eax, word [edi]
mov edx, edi
mov ecx, eax
and ecx, 0xfc00
movzx ebx, cx
cmp cx, bp
jne 0x4b44a9
movzx eax, word [edx - 2]
cmp bx, bp
movzx ecx, ax
lea esi, [edx - 2]
mov eax, ecx
cmovne esi, edi
lea edi, [edx - 2]
cmovne edi, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b44e3
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4b4519
add edi, 0xfffffffe
jmp 0x4b4490
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x174]
inc eax
mov edx, dword [esp + 0x10]
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
mov ebx, dword [esp + 0x30]
add esp, 0x14
test eax, eax
je 0x4b4480
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
lea ecx, [esi - 2]
cmp esi, ebx
je case.0x4ae289.151
mov ax, word [ecx]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
cmovne ecx, esi
sub ecx, 2
mov esi, ecx
cmp edi, 0x11
jne 0x4b45d5
cmp ecx, ebx
jbe 0x4b45d5
cmp word [ecx], 0xa
jne 0x4b45d5
cmp word [ecx - 2], 0xd
lea eax, [ecx - 2]
cmove esi, eax
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4595
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test eax, eax
js 0x4b4ee7
cmp eax, 8
ja case.default.0x4afe9e
jmp dword [eax*4 + 0x4b5c94]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
mov ecx, esi
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx eax, word [esi]
add esi, 2
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b468a
lea esi, [ecx + 4]
cmp dword [esp + 0x34], 0
jne case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop word [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4753
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
mov al, byte [eax*8 + 0x4cb081]
cmp al, 9
je 0x4b4786
cmp al, 5
je 0x4b4786
cmp al, 8
je 0x4b4786
xor eax, eax
jmp 0x4b478b
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4710
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop dword [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4853
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov edx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], edx
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4810
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
nop word [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4953
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4910
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4a43
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb080]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4a00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4b33
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b4b6c
cmp eax, 3
je 0x4b4b6c
xor eax, eax
jmp 0x4b4b71
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4af0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4c34
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b4c7c
cmp edx, 9
je 0x4b4c7c
cmp edx, 0xa
je 0x4b4c7c
cmp edx, 0xc
je 0x4b4c7c
cmp edx, 0xd
je 0x4b4c7c
xor eax, eax
jmp 0x4b4c81
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4bf1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4d44
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 6
je 0x4b4d91
cmp edx, 9
je 0x4b4d91
cmp edx, 0xa
je 0x4b4d91
cmp edx, 0xb
je 0x4b4d91
cmp edx, 0xc
je 0x4b4d91
cmp edx, 0xd
je 0x4b4d91
xor eax, eax
jmp 0x4b4d96
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4d01
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b53b9
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4e59
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cc160]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
mov eax, dword [eax*4 + 0x4ce740]
cmp eax, 1
je 0x4b4e99
cmp eax, 3
je 0x4b4e99
cmp edx, 0x5f
je 0x4b4e99
xor eax, eax
jmp 0x4b4e9e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4e16
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
cmp edi, 0x16
jne 0x4b505a
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
mov ebx, dword [ebx + 0x7c]
cmp esi, ebx
jae 0x4b3a22
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4f6a
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
je case.0x4ae289.151
cmp esi, ebx
jae 0x4b5012
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4fdb
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cc160]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf780]
movzx eax, byte [eax*8 + 0x4cb081]
cmp dword [eax*4 + 0x4ce740], 2
jne 0x4b5012
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4b4fa6
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x174]
inc eax
mov edx, dword [esp + 0x10]
inc ebp
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b4f25
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test eax, eax
jne 0x4b3816
cmp ebp, dword [esp + 0x20]
jge case.0x4ae289.151
mov ecx, dword [ebx + 0x7c]
cmp esi, ecx
jae 0x4b53b9
cmp edi, 0xc
jne 0x4b50c9
mov edx, dword [ebx + 0x18]
lea eax, [ebx + 0x1c]
test edx, edx
je 0x4b509e
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b6f90
add esp, 0xc
test eax, eax
jne case.0x4ae289.151
jmp 0x4b50c9
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b50c9
mov ax, word [esi]
cmp ax, word [ebx + 0x2c]
jne 0x4b50c9
cmp edx, 1
je case.0x4ae289.151
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x2e]
je case.0x4ae289.151
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b50f9
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4afe9e
jmp dword [eax*4 + 0x4b5cb8]
mov esi, edx
jmp 0x4b5368
cmp ecx, 0xd
ja 0x4b5141
je 0x4b5124
cmp ecx, 0xa
je case.0x4b5105.12
lea eax, [ecx - 0xb]
jmp 0x4b514f
mov esi, edx
cmp edx, dword [ebx + 0x7c]
jae 0x4b5368
cmp word [edx], 0xa
jne 0x4b5368
lea esi, [edx + 2]
jmp 0x4b5368
cmp ecx, 0x85
je 0x4b5158
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae289.151
cmp dword [ebx + 0x68], 0
mov esi, edx
jne case.0x4ae289.151
jmp 0x4b5368
cmp ecx, 0x180e
ja 0x4b519b
je case.0x4ae289.151
cmp ecx, 0xa0
ja 0x4b5193
je case.0x4ae289.151
cmp ecx, 9
je case.0x4ae289.151
cmp ecx, 0x20
jmp 0x4b51cf
cmp ecx, 0x1680
jmp 0x4b51cf
cmp ecx, 0x205f
ja 0x4b51c9
je case.0x4ae289.151
cmp ecx, 0x2000
jb case.0x4b5105.12
cmp ecx, 0x200a
jbe case.0x4ae289.151
cmp ecx, 0x202f
jmp 0x4b51cf
cmp ecx, 0x3000
je case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x180e
ja 0x4b520e
je case.0x4b5105.12
cmp ecx, 0xa0
ja 0x4b5206
je case.0x4b5105.12
cmp ecx, 9
je case.0x4b5105.12
cmp ecx, 0x20
jmp 0x4b5242
cmp ecx, 0x1680
jmp 0x4b5242
cmp ecx, 0x205f
ja 0x4b523c
je case.0x4b5105.12
cmp ecx, 0x2000
jb case.0x4ae289.151
cmp ecx, 0x200a
jbe case.0x4b5105.12
cmp ecx, 0x202f
jmp 0x4b5242
cmp ecx, 0x3000
jne case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x85
ja 0x4b526b
je case.0x4ae289.151
cmp ecx, 0xa
jb case.0x4b5105.12
cmp ecx, 0xd
jmp 0x4b527d
cmp ecx, 0x2028
jb case.0x4b5105.12
cmp ecx, 0x2029
jbe case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x85
ja 0x4b52a0
je case.0x4b5105.12
lea eax, [ecx - 0xa]
cmp eax, 3
jmp 0x4b52a9
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x100
jae case.0x4b5105.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
jne case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x100
jae case.0x4ae289.151
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
je case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x100
jae case.0x4b5105.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
jne case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x100
jae case.0x4ae289.151
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
je case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x100
jae case.0x4b5105.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x4ae289.151
mov esi, edx
jmp 0x4b5368
cmp ecx, 0x100
jae case.0x4ae289.151
mov eax, dword [ebx + 0x3c]
mov esi, edx
test byte [ecx + eax], 0x10
je case.0x4ae289.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b5062
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffff2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [ebx + 0x8c], 0
je case.0x4ae289.151
cmp esi, dword [ebx + 0x88]
jbe case.0x4ae289.151
mov dword [ebx + 0x64], 1
cmp dword [ebx + 0x8c], 1
jle case.0x4ae289.151
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x4c], eax
mov eax, dword [ecx + ebp*4 + 4]
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x10]
mov edi, dword [edi + 0x94]
sub eax, edx
mov edx, dword [esp + 0x174]
lea ecx, [ecx + eax*4]
mov eax, dword [ecx]
mov dword [esp + 0x44], eax
mov eax, esi
sub eax, dword [edx + 0x78]
mov ebx, dword [edx + 0xb0]
sar eax, 1
mov dword [ecx], eax
cmp dword [esp + 0x1c], 0x82
jb 0x4b5446
mov dword [edx + 0x9c], 2
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [ecx]
push dword [esp + 0x17c]
push edx
movzx eax, byte [eax + 0x4ce360]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae150
mov edx, eax
add esp, 0x14
cmp edx, 0xfffffc1c
je 0x4b5519
cmp edx, 0xfffffc20
jne 0x4b54d3
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 2]
lea eax, [eax + ecx*2]
mov ecx, dword [esp + 0x174]
cmp dword [ecx + 0x80], eax
jae 0x4b554d
mov ecx, dword [esp + 0x10]
cmp word [ecx], 0x71
mov ecx, dword [esp + 0x174]
je 0x4b54cf
cmp word [eax], 0x71
jne 0x4b554d
xor edx, edx
jmp 0x4b54e2
test edx, edx
jne 0x4b554d
mov ecx, dword [esp + 0x174]
mov eax, dword [esp + 0x10]
mov dword [ecx + 0x94], edi
mov ecx, dword [esp + 0x10]
movzx eax, word [eax + 2]
lea ecx, [ecx + eax*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x174]
mov eax, dword [esp + 0x10]
mov dword [ecx + 0xb0], ebx
cmp word [eax], 0x71
jne 0x4b5520
mov edx, ecx
jmp 0x4b5432
mov ecx, dword [esp + 0x174]
mov eax, dword [ecx + 0xc]
mov ebx, dword [esp + 0x174]
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x44]
mov dword [eax + ebp*4], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [esp + 0x40]
mov dword [eax + ebp*4 + 4], ecx
mov ecx, dword [ebx + 0x10]
sub ecx, dword [esp + 0x48]
mov eax, dword [ebx + 0xc]
mov dword [eax + ecx*4], esi
mov eax, edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp edx, 0xfffffc1c
jne 0x4b5595
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx]
cmp eax, 0x7b
je 0x4b558a
cmp eax, 0x71
jne 0x4b5581
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
je 0x4b5573
movzx eax, word [ecx + 2]
neg eax
lea ecx, [ecx + eax*2]
xor eax, eax
cmp dword [ebx + 0xb8], ecx
cmove edx, eax
mov eax, edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
lea ebx, [edx + 4]
mov dword [edi + 0xb4], ebx
mov dword [edi + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push edi
movzx ecx, byte [eax + 0x4ce360]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ae150
mov edi, eax
add esp, 0x14
cmp edi, 1
je 0x4b5604
cmp edi, 0xfffffc19
jne 0x4b5627
mov ebp, dword [esp + 0x174]
cmp dword [ebp + 0xb0], 0
jne 0x4b562e
mov dword [ebp + 0xb0], ebx
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, dword [esp + 0x174]
cmp edi, 0xfffffc1f
jne 0x4b396a
mov edx, dword [ebp + 0x80]
mov ecx, ebx
call fcn.004b6e80
test eax, eax
jne 0x4b396a
mov dword [ebp + 0x80], esi
lea eax, [edi - 1]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ce360]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b56be
cmp eax, 0xfffffc1d
je 0x4b56be
cmp eax, 0xfffffc1e
je 0x4b56be
cmp eax, 0xfffffc1f
je 0x4b56be
cmp eax, 0xfffffc20
jne 0x4b3816
mov eax, 0xfffffc1a
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ce360]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b57a7
cmp eax, 0xfffffc20
je 0x4b57a7
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x174]
lea edi, [edx + 4]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx ecx, byte [eax + 0x4ce360]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ae150
add esp, 0x14
cmp eax, 1
je 0x4b5789
cmp eax, 0xfffffc19
jne 0x4b5798
cmp dword [ebx + 0xb0], 0
jne 0x4b5798
mov dword [ebx + 0xb0], edi
test eax, eax
je 0x4b57a7
cmp eax, 0xfffffc20
jne 0x4b3816
mov eax, 0xfffffc1d
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ce360]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b5804
cmp eax, 0xfffffc1d
je 0x4b5804
cmp eax, 0xfffffc20
jne 0x4b3816
mov dword [edi + 0x80], esi
mov eax, 0xfffffc1e
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ce360]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ae150
add esp, 0x14
test eax, eax
je 0x4b58e3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x174]
lea edi, [edx + 4]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx ecx, byte [eax + 0x4ce360]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ae150
add esp, 0x14
cmp eax, 1
je 0x4b58ca
cmp eax, 0xfffffc19
jne 0x4b58d9
cmp dword [ebx + 0xb0], 0
jne 0x4b58d9
mov dword [ebx + 0xb0], edi
test eax, eax
jne 0x4b3816
mov edi, ebx
mov eax, dword [esp + 0x10]
mov dword [edi + 0x80], eax
mov eax, 0xfffffc20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebx, dword [esp + 0x16c]
cmp esi, ebx
jne 0x4b593d
cmp edx, 0x99
je 0x4b593d
cmp dword [edi + 0xa8], 0
jne 0x4b593d
cmp dword [edi + 0x5c], 0
jne case.0x4ae289.151
cmp dword [edi + 0x60], 0
je 0x4b593d
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x78]
lea eax, [eax + ecx*2]
cmp ebx, eax
je case.0x4ae289.151
mov eax, dword [esp + 0x170]
test bp, bp
mov dword [edi + 0x84], esi
mov ecx, 1
mov dword [edi + 0x90], eax
mov eax, 0xfffffc19
mov dword [edi + 0x80], ebx
cmove eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffffb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
pop edi
pop esi
pop ebp
mov eax, 0xffffffeb
pop ebx
add esp, 0x158
ret