Function at 0x4ae350
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x800
mov dword [esp + 0x14], ecx
mov ecx, dword [0x5000e8]
call 0x4ae36e
pop eax
mov dword [esp + 0x164], edx
mov dword [esp + 0x1c], eax
test ecx, ecx
je 0x4af2b3
mov ebx, dword [0x5000e4]
mov edx, ecx
xor eax, eax
mov dword [esp + 0x3c], ecx
shl edx, 5
add edx, ebx
mov dword [esp + 0x38], ebx
mov esi, dword [ebx + 0x18]
mov dword [esp + 0x6c], eax
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x14]
add ebx, 0x20
shl esi, 3
mov dword [esp + 0x34], ecx
test esi, esi
je 0x4ae3e0
mov edi, eax
add esi, 0xfffffff8
add eax, 8
mov ecx, dword [edi]
add ecx, dword [esp + 0x34]
cmp ecx, dword [esp + 0x14]
ja 0x4ae3b0
add ecx, dword [edi + 4]
cmp ecx, dword [esp + 0x14]
jbe 0x4ae3b0
jmp 0x4ae3ee
mov eax, dword [esp + 0x6c]
inc eax
cmp ebx, edx
jne 0x4ae399
jmp 0x4af2b3
mov ebx, dword [0x5000f4]
mov eax, dword [esp + 0x6c]
test ebx, ebx
je 0x4ae424
mov ecx, dword [0x5000f0]
imul esi, ebx, 0x148
xor edx, edx
xor edi, edi
nop dword [eax]
cmp dword [ecx + edi], eax
je 0x4ae5c3
add edi, 0x148
dec edx
cmp esi, edi
jne 0x4ae410
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
jbe 0x4b1421
mov esi, dword [esp + 0x38]
shl eax, 5
mov edx, dword [esi + eax + 4]
lea ecx, [esp + 0x168]
push dword [esi + eax + 8]
call fcn.004adbc0
add esp, 4
test byte [esp + 0x168], 1
je 0x4af2b3
mov eax, dword [esp + 0x174]
mov edx, dword [esp + 0x170]
mov edi, dword [esp + 0x16c]
mov dword [esp + 0x328], 0
mov dword [esp + 0x32c], 4
mov dword [esp + 0x330], 0
mov dword [esp + 0x334], 0
mov dword [esp + 0x338], 4
mov dword [esp + 0x33c], 0
cmp eax, 0x40
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edx
jb 0x4ae59b
cmp word [edx], 0x5a4d
jne 0x4ae59b
mov ebx, dword [edx + 0x3c]
mov eax, dword [esp + 0x38]
sub eax, ebx
setb cl
cmp eax, 0x78
setb al
or al, cl
jne 0x4ae59b
mov eax, ebx
add eax, 0x78
setb cl
cmp dword [edx + ebx], 0x4550
jne 0x4ae59b
cmp word [edx + ebx + 0x18], 0x10b
jne 0x4ae59b
movzx esi, word [edx + ebx + 0x14]
cmp si, 0x60
jb 0x4ae59b
movzx esi, si
add esi, 0xffffffa0
mov dword [esp + 0x50], esi
mov esi, 0
adc esi, 0xffffffff
cmp ebx, 0xffffff87
mov dword [esp + 0x20], esi
ja 0x4ae59b
mov esi, dword [esp + 0x38]
sub esi, eax
jb 0x4ae59b
cmp esi, dword [esp + 0x50]
jb 0x4ae59b
mov byte [esp + 0x68], cl
mov dword [esp + 8], ebx
mov esi, dword [esp + 0x50]
xor ecx, ecx
movzx ebx, byte [esp + 0x68]
mov dword [esp + 0x68], esi
add esi, eax
lea eax, [edx + eax]
mov cl, bl
mov ebx, dword [esp + 8]
adc dword [esp + 0x20], ecx
push dword [edx + ebx + 0x74]
push dword [esp + 0x6c]
push eax
lea eax, [esp + 0x174]
push eax
call fcn.004b4790
add esp, 0x10
test byte [esp + 0x168], 1
mov edx, dword [esp + 0x3c]
jne 0x4ae59b
cmp dword [esp + 0x20], 0
je 0x4af344
lea ecx, [esp + 0x328]
call fcn.0045ffa0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x168], eax
push eax
call sub.kernel32.dll_UnmapViewOfFile
push edi
call sub.kernel32.dll_CloseHandle
jmp 0x4af2b3
test edx, edx
je 0x4ae65e
lea edx, [ecx + edi]
mov dword [esp + 0x6c], edx
lea eax, [esp + 0x6b0]
push 0x148
push edx
push eax
mov dword [esp + 0x3c], ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x30]
sub esi, edi
add esi, 0xfffffeb8
lea eax, [eax + edi + 0x148]
push esi
push eax
push dword [esp + 0x74]
call sub.msvcrt.dll_memmove
add esp, 0xc
lea esi, [ebx - 1]
mov dword [0x5000f4], esi
cmp esi, dword [0x5000ec]
jne 0x4ae623
call fcn.0046e100
mov edi, dword [0x5000f0]
imul ecx, esi, 0x148
lea eax, [edi + 0x148]
push ecx
push edi
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
push 0x148
lea eax, [esp + 0x6b4]
push eax
push edi
call sub.msvcrt.dll_memcpy
mov ecx, edi
add esp, 0xc
mov dword [0x5000f4], ebx
mov eax, dword [esp + 0x14]
mov edx, dword [ecx + 0x108]
mov dword [esp + 0x30], ecx
sub eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
inc eax
mov dword [esp + 0x3c], eax
sete al
test edx, edx
je 0x4aeadd
xor ecx, ecx
mov cl, al
mov eax, dword [esp + 0x30]
xor edi, edi
cmp edx, 1
mov dword [esp + 0x1c], edx
mov dword [esp + 0x38], ecx
mov eax, dword [eax + 0x104]
mov dword [esp + 0x6c], eax
jne 0x4ae791
mov ecx, dword [esp + 0x6c]
mov eax, edi
shl eax, 5
mov edx, dword [ecx + eax]
mov ecx, dword [ecx + eax + 4]
mov eax, ecx
mov esi, edx
xor eax, dword [esp + 0x38]
xor esi, dword [esp + 0x3c]
or esi, eax
jne 0x4ae6d0
mov ebx, dword [esp + 0x14]
inc edi
jmp 0x4ae6dd
mov ebx, dword [esp + 0x14]
xor eax, eax
cmp ebx, edx
sbb eax, ecx
sbb edi, 0xffffffff
mov eax, dword [esp + 0x1c]
cmp edi, eax
ja 0x4b1898
test edi, edi
je 0x4aeadd
mov eax, dword [esp + 0x30]
shl edi, 5
xor edx, edx
add eax, 0x100
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x6c]
lea esi, [edi + eax - 0x20]
neg edi
lea eax, [esp + 0x168]
jmp 0x4ae72c
add esi, 0xffffffe0
add edi, 0x20
je 0x4aeadd
cmp ebx, dword [esi + 0x10]
mov ecx, 0
sbb ecx, dword [esi + 0x14]
jae 0x4ae7d8
cmp ebx, dword [esi + 8]
mov ecx, 0
sbb ecx, dword [esi + 0xc]
jae 0x4ae720
cmp ebx, dword [esi]
mov ecx, 0
sbb ecx, dword [esi + 4]
jb 0x4ae720
mov edx, dword [esp + 0x30]
mov eax, dword [esi + 0x18]
mov ecx, dword [edx + 0x110]
cmp eax, ecx
jae 0x4b23ed
imul eax, eax, 0x150
mov dword [esp + 0x1c], 0
add eax, dword [edx + 0x10c]
mov edx, esi
mov dword [esp + 0x168], eax
lea eax, [esp + 0x6b0]
jmp 0x4ae7de
mov edx, dword [esp + 0x1c]
xor edi, edi
jmp 0x4ae7ab
sub edx, esi
cmp edx, 1
jbe 0x4ae6a9
mov esi, edx
mov dword [esp + 0x34], edi
mov ebx, dword [esp + 0x3c]
shr esi, 1
lea ecx, [esi + edi]
mov edi, dword [esp + 0x6c]
mov eax, ecx
shl eax, 5
cmp ebx, dword [edi + eax]
mov ebx, dword [esp + 0x38]
sbb ebx, dword [edi + eax + 4]
mov edi, dword [esp + 0x34]
jb 0x4ae7a0
mov edi, ecx
jmp 0x4ae7a0
mov cl, 1
mov dword [esp + 0x1c], ecx
mov dword [eax], edx
mov eax, dword [esp + 0x168]
test eax, eax
je 0x4aeadd
mov edi, dword [esp + 0x34]
lea ecx, [esp + 0x570]
mov edx, eax
mov dword [esp + 0x50], eax
push edi
push 0
push ebx
call fcn.0047a050
add esp, 0xc
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x6c]
movd xmm0, ebx
pshufd xmm0, xmm0, 0x44
movdqu xmmword [esp + 0x168], xmm0
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x178], eax
mov dword [esp + 0x180], edi
mov dword [esp + 0x188], edx
mov dword [esp + 0x18c], esi
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], ebx
mov dword [esp + 0x19c], 0
mov byte [esp + 0x1a0], al
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], edi
lea eax, [esp + 0x168]
lea ecx, [esp + 0x6b0]
lea edx, [esp + 0x570]
push eax
call fcn.0047c6c0
add esp, 4
cmp byte [esp + 0x728], 2
je 0x4aeac7
nop word cs:[eax + eax]
movsd xmm1, qword [esp + 0x6c0]
movq xmm0, qword [esp + 0x6c8]
movq xmm2, qword [esp + 0x6b0]
mov ecx, 0x1a
lea edi, [esp + 0x570]
lea esi, [esp + 0x6d0]
movsd qword [esp + 0x138], xmm1
movq xmm1, qword [esp + 0x6b8]
movq qword [esp + 0x140], xmm0
movq qword [esp + 0x128], xmm2
movq qword [esp + 0x130], xmm1
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x140]
lock dec dword [eax]
jne 0x4ae935
lea ecx, [esp + 0x140]
call fcn.0046d320
mov eax, dword [esp + 0x580]
mov edx, dword [esp + 0x588]
movzx ecx, byte [eax + 0x138]
cmp ecx, 0x4b
je 0x4ae967
cmp ecx, 0x4c
jne 0x4ae9a1
mov byte [eax + 0x138], 0x4b
mov dword [eax + 0x13c], 0
jmp 0x4ae990
mov esi, dword [eax + 0x13c]
test esi, esi
je 0x4ae990
mov edx, dword [esi]
mov al, 2
add esi, 8
mov cl, 0x4b
mov dword [esp + 0x34], eax
mov eax, esi
add edx, 8
jmp 0x4ae9f1
mov edx, dword [edx]
mov cl, 0x4b
mov dword [esp + 0x34], 0
add edx, 8
jmp 0x4ae9f1
movzx edx, byte [eax + 0x13b]
mov byte [esp + 0x46a], dl
movzx edx, word [eax + 0x139]
mov word [esp + 0x468], dx
movzx ebx, byte [eax + 0x140]
mov edx, dword [eax + 0x13c]
mov dword [esp + 0x34], ebx
mov bh, byte [eax + 0x143]
mov byte [esp + 0x392], bh
movzx esi, word [eax + 0x141]
mov word [esp + 0x390], si
mov eax, dword [eax + 0x144]
mov byte [esp + 0x168], cl
movzx ecx, byte [esp + 0x46a]
lea esi, [esp + 0x169]
mov byte [esi + 2], cl
movzx ecx, word [esp + 0x468]
mov word [esi], cx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x16c], edx
mov byte [esp + 0x170], cl
movzx ecx, byte [esp + 0x392]
mov byte [esi + 0xa], cl
movzx ecx, word [esp + 0x390]
mov word [esi + 8], cx
mov dword [esp + 0x174], eax
lea edx, [esp + 0x570]
lea eax, [esp + 0x168]
lea ecx, [esp + 0x350]
push eax
call fcn.0047a5f0
add esp, 4
lea eax, [esp + 0x468]
mov dword [esp + 0x34c], 0
mov ecx, 0x12
lea esi, [esp + 0x590]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
lea edx, [esp + 0x340]
lea ecx, [esp + 0x168]
push eax
call fcn.0047c6c0
add esp, 4
push 0x88
lea eax, [esp + 0x16c]
push eax
lea eax, [esp + 0x6b8]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
cmp byte [esp + 0x728], 2
jne 0x4ae8c0
mov ecx, dword [esp + 0x30]
add ecx, 8
test byte [esp + 0x6b0], 1
je 0x4aeb08
jmp 0x4af26d
mov dword [esp + 0x6b0], 0
mov dword [esp + 0x6b4], 3
mov ecx, dword [esp + 0x30]
add ecx, 8
test byte [esp + 0x6b0], 1
jne 0x4af26d
mov eax, dword [esp + 0x6d8]
mov esi, dword [esp + 0x6b4]
mov edx, dword [esp + 0x6e0]
mov dword [esp + 0x30], ecx
mov ecx, 2
mov dword [esp + 0x44], eax
lea eax, [esi - 3]
mov dword [esp + 0x74], edx
lea edx, [edx*4]
cmp eax, 2
mov dword [esp + 0x48], edx
cmovb ecx, eax
test ecx, ecx
je 0x4aec5c
mov edx, dword [esp + 0x6b8]
cmp ecx, 1
mov ecx, dword [esp + 0x6c8]
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x6c0]
mov edi, dword [esp + 0x6c4]
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x6bc]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x6cc]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x6d0]
lea esi, [ecx + 0x108]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x98], esi
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0x6d4]
mov dword [esp + 0x70], edx
mov edx, dword [esp + 0x6dc]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x6e4]
mov dword [esp + 0x94], edx
lea edx, [ecx + 0x10]
lea ecx, [ecx + 0x10c]
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x164]
mov dword [esp + 0x90], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x64], edx
mov dword [esp + 0x2c], ecx
jne 0x4aec63
cmp dword [esp + 0x74], 0
mov dword [esp + 0x28], ebx
sete cl
cmp eax, 2
setb al
or al, cl
jne 0x4aec1f
push 4
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.0040cd20
add esp, 0xc
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x38]
mov esi, edi
mov ebx, edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x6c], 3
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x50], ecx
jmp 0x4aee2d
xor ebx, ebx
jmp 0x4af241
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x24], eax
je 0x4aed07
mov dword [esp + 0xc], edi
mov edi, dword [eax - 4]
mov dword [esp + 0x34], 0
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x20]
test eax, eax
mov dword [esp + 0x1c], eax
setne byte [esp + 0x6c]
test ecx, ecx
setne byte [esp + 8]
test byte [edi], 1
je 0x4aecc1
mov edx, dword [esp + 0x90]
mov dword [esp + 0x18], ecx
mov eax, dword [edx]
xor eax, 0x2f
or eax, dword [edx + 4]
jne 0x4aed45
mov ecx, dword [esp + 0x18]
movzx edx, byte [esp + 0x6c]
xor eax, eax
mov esi, dword [edi + 0x10]
add dword [esp + 0x94], 0xfffffffc
mov al, dl
xor edx, edx
test esi, esi
mov dword [esp + 0x6c], eax
movzx eax, byte [esp + 8]
mov dword [esp + 8], esi
mov dl, al
je 0x4aed2d
mov eax, ecx
mov ecx, dword [esp + 0x4c]
mov esi, dword [edi + 0x14]
movzx ecx, word [ecx + 0x148]
mov dword [esp + 0x68], esi
mov word [esp + 0x28], cx
mov ecx, eax
jmp 0x4aed34
mov eax, dword [ecx + 0x14]
test eax, eax
mov dword [esp + 8], eax
je 0x4aedc1
mov eax, dword [esp + 0x4c]
mov ecx, dword [ecx + 0x18]
movzx edx, word [eax + 0x148]
mov dword [esp + 0x68], ecx
jmp 0x4aedc5
mov word [esp + 0x28], 2
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x38]
jmp 0x4aee0f
mov eax, dword [edi + 8]
cmp dword [esi], 2
mov dword [esp + 0x68], eax
jne 0x4af2cb
mov edx, dword [esp + 0x90]
lea ecx, [esp + 0x168]
call fcn.004782d0
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x6b0]
push dword [esp + 0x8c]
lea eax, [esp + 0x16c]
push eax
call fcn.0047cd00
add esp, 8
cmp dword [esi], 2
jne 0x4af2bf
movsd xmm0, qword [esp + 0x6c0]
movsd qword [esi + 0x10], xmm0
movq xmm0, qword [esp + 0x6b0]
movq xmm1, qword [esp + 0x6b8]
movq qword [esi + 8], xmm1
movq qword [esi], xmm0
jmp 0x4af2cb
mov dx, 2
cmp dword [esp + 0x74], 0
mov word [esp + 0x28], dx
mov dword [esp + 0x6c], 3
je 0x4aedeb
push 4
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.0040cd20
add esp, 0xc
mov esi, dword [esp + 0x38]
mov eax, edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x3c], esi
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x18]
mov edx, edi
cmp word [esp + 0x28], 2
mov dword [esp + 0x18], esi
mov esi, ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x38], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], ecx
jne 0x4aee47
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
push 0
call fcn.004b2a90
add esp, 4
mov dword [esp + 8], eax
mov dword [esp + 0x68], edx
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 8]
mov dword [esp + 0x168], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x170], edi
mov dword [esp + 0x16c], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x174], esi
mov dword [esp + 0x178], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x17c], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x184], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x168]
push ecx
push dword [esp + 0x68]
mov dword [esp + 0x20], eax
call eax
add esp, 8
nop
mov eax, dword [esp + 0x6c]
mov ecx, 2
add eax, 0xfffffffd
cmp eax, 2
cmovb ecx, eax
cmp ecx, 1
je 0x4aef40
cmp ecx, 2
jne 0x4af23f
mov eax, dword [esp + 0x94]
cmp dword [esp + 0x24], eax
je 0x4aefa9
mov edi, dword [eax - 4]
xor ecx, ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], 0
mov esi, dword [edi + 0x1c]
mov edx, dword [edi + 0x20]
test esi, esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x40], esi
setne bl
test edx, edx
setne bh
test byte [edi], 1
je 0x4af012
mov ecx, dword [esp + 0x90]
mov eax, dword [ecx]
xor eax, 0x2f
or eax, dword [ecx + 4]
jne 0x4af130
xor ecx, ecx
jmp 0x4af012
cmp dword [esp + 0x74], 0
sete cl
cmp eax, 2
setb al
or al, cl
jne 0x4aef64
push 4
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.0040cd20
add esp, 0xc
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x6c], 3
mov dword [esp + 0x1c], 2
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x20], eax
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x68], edx
mov dword [esp + 8], ecx
jmp 0x4af09f
mov eax, dword [esp + 0x70]
mov esi, dword [eax + 0x14]
test esi, esi
je 0x4af1d8
mov edi, dword [eax + 0x18]
mov eax, dword [esp + 0x4c]
movzx eax, word [eax + 0x148]
cmp dword [esp + 0x74], 0
mov word [esp + 0x50], ax
mov dword [esp + 0x78], 3
je 0x4aefec
push 4
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0xc], eax
jmp 0x4af05b
mov esi, dword [edi + 0x10]
add dword [esp + 0x94], 0xfffffffc
xor eax, eax
mov cl, bl
mov al, bh
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], eax
test esi, esi
je 0x4af044
mov eax, dword [esp + 0x4c]
mov edi, dword [edi + 0x14]
movzx eax, word [eax + 0x148]
mov word [esp + 0x50], ax
jmp 0x4af04b
mov word [esp + 0x50], 2
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x34]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x6c]
cmp word [esp + 0x50], 2
mov dword [esp + 0x68], edx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x34], eax
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x10], edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x28], ecx
jne 0x4af0b5
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
push 0
call fcn.004b2a90
add esp, 4
mov esi, eax
mov edi, edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x170], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x174], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x178], ebx
mov dword [esp + 0x17c], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], esi
mov dword [esp + 0x188], edi
lea eax, [esp + 0x168]
push eax
push dword [esp + 0x68]
call dword [esp + 0x20]
add esp, 8
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x3c], eax
jmp 0x4aeec0
mov esi, dword [esp + 0x98]
mov eax, dword [edi + 8]
cmp dword [esi], 2
mov dword [esp + 0x50], eax
jne 0x4af1a8
mov edx, dword [esp + 0x90]
lea esi, [esp + 0x168]
mov ecx, esi
call fcn.004782d0
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x6b0]
push dword [esp + 0x8c]
push esi
call fcn.0047cd00
add esp, 8
mov esi, dword [esp + 0x98]
cmp dword [esi], 2
jne 0x4af1f9
movsd xmm0, qword [esp + 0x6c0]
movsd qword [esi + 0x10], xmm0
movq xmm0, qword [esp + 0x6b0]
movq xmm1, qword [esp + 0x6b8]
movq qword [esi + 8], xmm1
movq qword [esi], xmm0
cmp dword [esi], 1
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0x50]
jne 0x4af215
mov eax, dword [esp + 0x4c]
cmp byte [eax + 0x110], 0x4b
jne 0x4af2bb
mov eax, dword [eax + 0x114]
test eax, eax
jne 0x4af215
jmp 0x4aef38
mov ax, 2
cmp dword [esp + 0x74], 0
mov word [esp + 0x50], ax
mov dword [esp + 0x78], 3
jne 0x4aefda
jmp 0x4aefec
lea ecx, [esp + 0x6b0]
call fcn.00460340
cmp dword [esi], 1
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0x50]
je 0x4af1b8
cmp dword [eax + 4], edx
mov ecx, 0
jbe 0x4af012
mov eax, dword [eax]
lea ecx, [edx + edx*2]
mov edx, dword [eax + ecx*4 + 4]
mov eax, dword [eax + ecx*4 + 8]
xor ecx, ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x2c], eax
jmp 0x4af012
mov bl, 1
cmp dword [esp + 0x74], 0
sete cl
cmp eax, 2
setb al
or al, cl
jne 0x4af265
push 4
push dword [esp + 0x4c]
push dword [esp + 0x4c]
call fcn.0040cd20
add esp, 0xc
mov ecx, dword [esp + 0x30]
test bl, bl
jne 0x4af2b3
mov edx, dword [esp + 0x14]
push 0
call fcn.004b2a90
add esp, 4
test eax, eax
je 0x4af2b3
mov esi, dword [esp + 0x164]
mov dword [esp + 0x168], 3
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], edx
mov ecx, dword [esi]
mov esi, dword [esi + 4]
lea eax, [esp + 0x168]
push eax
push ecx
call dword [esi + 0x10]
add esp, 8
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov bl, 1
jmp 0x4af323
lea ecx, [esp + 0x6b0]
call fcn.00460340
cmp dword [esi], 1
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0x68]
jne 0x4af2f8
mov eax, dword [esp + 0x4c]
mov ecx, ebx
xor ebx, ebx
cmp byte [eax + 0x110], 0x4b
jne 0x4af323
mov eax, dword [eax + 0x114]
mov ebx, ecx
test eax, eax
je 0x4af333
cmp dword [eax + 4], edx
mov ecx, dword [esp + 0x18]
jbe 0x4aecc1
mov eax, dword [eax]
lea ecx, [edx + edx*2]
mov edx, dword [eax + ecx*4 + 4]
mov eax, dword [eax + ecx*4 + 8]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x34], edx
mov dword [esp + 0x3c], eax
jmp 0x4aecc1
cmp dword [esp + 0x74], 0
jne 0x4af253
jmp 0x4af265
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x34], 0
jmp 0x4aecc1
mov eax, dword [esp + 0x38]
sub eax, esi
jb 0x4ae59b
movzx ecx, word [edx + ebx + 6]
mov dword [esp + 0x20], ecx
lea ecx, [ecx*8]
lea ecx, [ecx + ecx*4]
cmp eax, ecx
jb 0x4ae59b
mov eax, dword [edx + ebx + 0xc]
add esi, edx
mov dword [esp + 0x68], edi
test eax, eax
mov dword [esp + 0x50], eax
je 0x4af45c
mov eax, dword [esp + 0x3c]
mov ebx, dword [esp + 8]
mov edi, dword [esp + 0x68]
mov ecx, 0x12
mov eax, dword [eax + ebx + 0x10]
mov dword [esp + 0x10], eax
mul ecx
mov dword [esp + 0x2c], eax
jo 0x4ae59b
mov eax, dword [esp + 0x38]
sub eax, dword [esp + 0x50]
jb 0x4ae59b
cmp eax, dword [esp + 0x2c]
jb 0x4ae59b
mov eax, dword [esp + 0x50]
add dword [esp + 0x2c], eax
setb al
jb 0x4ae59b
mov ecx, dword [esp + 0x38]
sub ecx, dword [esp + 0x2c]
setb dl
cmp ecx, 4
setb cl
or cl, dl
jne 0x4ae59b
xor ecx, ecx
mov cl, al
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x30], ecx
mov edx, dword [edi + eax]
add edx, eax
adc ecx, 0
cmp dword [esp + 0x10], 0
mov dword [esp + 0x64], edx
mov dword [esp + 0x18], ecx
mov ecx, dword [edi + ebx + 0x34]
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 4
mov dword [esp + 0x170], 0
mov dword [esp + 0x40], ecx
je 0x4b1638
mov eax, dword [esp + 0x50]
xor ebx, ebx
mov dword [esp + 0xc], 0
add eax, dword [esp + 0x3c]
mov dword [esp + 0x50], eax
mov eax, 4
jmp 0x4afad0
xor eax, eax
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 4
mov dword [esp + 0x170], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x18], 0
mov ecx, dword [esp + 0x168]
mov edi, dword [esp + 0x68]
mov edx, ecx
neg edx
mov edx, dword [esp + 0x3c]
jo 0x4ae59b
mov dword [esp + 0x128], edx
mov edx, dword [esp + 0x38]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x368], 0x80000000
mov dword [esp + 0x12c], edx
mov dword [esp + 0x130], esi
mov dword [esp + 0x134], edi
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x13c], edx
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x144], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x170]
mov dword [esp + 0x158], eax
mov edx, str..debug_abbrev.debug_addr.debug_aranges.debug_cu_index.debug_info.debug_line.debug_line_str.debug_loc.debug_loclists.debug_ranges.debug_rnglists.debug_str.debug_str_offsets.debug_tu_index.debug_types
lea ecx, [esp + 0x128]
push 0xd
call fcn.004b2920
add esp, 4
mov dword [esp + 0x50], edx
mov edx, 1
test eax, eax
mov ecx, eax
mov dword [esp + 8], 1
cmove ecx, edx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x50]
cmove ecx, eax
mov dword [esp + 0x50], ecx
mov edx, 0x5848ed
lea ecx, [esp + 0x128]
push 0xb
call fcn.004b2920
add esp, 4
mov dword [esp + 0x20], edx
mov ecx, dword [esp + 8]
test eax, eax
cmovne ecx, eax
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x20]
cmove ecx, eax
mov dword [esp + 0x20], ecx
mov edx, 0x5848f8
lea ecx, [esp + 0x128]
push 0xe
call fcn.004b2920
add esp, 4
mov dword [esp + 0x2c], edx
test eax, eax
mov ecx, 1
mov edx, eax
mov dword [esp + 0x28], 1
cmove edx, ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x44], edx
cmove ecx, eax
mov dword [esp + 0x2c], ecx
mov edx, 0x584915
lea ecx, [esp + 0x128]
push 0xb
call fcn.004b2920
add esp, 4
mov dword [esp + 0x10], edx
mov ecx, dword [esp + 0x28]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x10]
cmove ecx, eax
mov dword [esp + 0x10], ecx
mov edx, 0x584920
lea ecx, [esp + 0x128]
push 0xb
call fcn.004b2920
add esp, 4
mov dword [esp + 0x30], edx
test eax, eax
mov ecx, 1
mov edx, eax
mov dword [esp + 0x18], 1
cmove edx, ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x48], edx
cmove ecx, eax
mov dword [esp + 0x30], ecx
mov edx, 0x58492b
lea ecx, [esp + 0x128]
push 0xf
call fcn.004b2920
add esp, 4
mov dword [esp + 0x64], edx
mov ecx, dword [esp + 0x18]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x64]
cmove ecx, eax
mov dword [esp + 0x64], ecx
mov edx, 0x58496f
lea ecx, [esp + 0x128]
push 0xa
call fcn.004b2920
add esp, 4
mov dword [esp + 0xc], edx
test eax, eax
mov ecx, 1
mov edx, eax
mov dword [esp + 0x78], 1
cmove edx, ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x90], edx
cmove ecx, eax
mov dword [esp + 0xc], ecx
mov edx, 0x584979
lea ecx, [esp + 0x128]
push 0x12
call fcn.004b2920
add esp, 4
mov dword [esp + 0x40], edx
mov ecx, dword [esp + 0x78]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x40]
cmove ecx, eax
mov dword [esp + 0x40], ecx
mov edx, 0x58499a
lea ecx, [esp + 0x128]
push 0xc
call fcn.004b2920
add esp, 4
mov dword [esp + 0x7c], edx
test eax, eax
mov ecx, 1
mov edx, eax
mov dword [esp + 0x94], 1
cmove edx, ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x70], edx
cmove ecx, eax
mov dword [esp + 0x7c], ecx
mov edx, 0x58493a
lea ecx, [esp + 0x128]
push 0xa
call fcn.004b2920
add esp, 4
mov dword [esp + 0x4c], edx
mov ecx, dword [esp + 0x94]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x4c]
cmove ecx, eax
mov dword [esp + 0x4c], ecx
mov edx, 0x584944
lea ecx, [esp + 0x128]
push 0xf
call fcn.004b2920
add esp, 4
mov dword [esp + 0x74], edx
mov ecx, dword [esp + 0x74]
test eax, eax
mov ebx, 1
cmovne ebx, eax
cmove ecx, eax
mov dword [esp + 0x74], ecx
mov edx, 0x584953
lea ecx, [esp + 0x128]
push 0xd
call fcn.004b2920
add esp, 4
mov esi, eax
mov edi, edx
mov edx, 0x584960
lea ecx, [esp + 0x128]
push 0xf
call fcn.004b2920
add esp, 4
test esi, esi
mov ecx, 1
cmove edi, esi
cmove esi, ecx
test eax, eax
cmovne ecx, eax
cmove edx, eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x170], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x174], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x17c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x184], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x19c], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x1a0], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1a4], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x1a8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x1ac], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x1b0], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x1b4], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x1b8], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x1bc], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x1c4], eax
mov eax, dword [0x59fb24]
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x1cc], edi
mov dword [esp + 0x1d0], ecx
mov dword [esp + 0x1d4], edx
mov dword [esp + 0x1d8], 0
mov dword [esp + 0x1dc], 0
mov dword [esp + 0x1e4], 0
mov byte [esp + 0x1e8], 0
mov dword [esp + 0x168], 1
mov dword [esp + 0x16c], 1
movzx eax, byte [eax]
push 4
push 0x84
call fcn.0040cd10
add esp, 8
test eax, eax
mov dword [esp + 0x2c], eax
je 0x4b23f9
push 0x84
lea eax, [esp + 0x16c]
push eax
mov esi, dword [esp + 0x34]
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esi + 0x1c]
mov eax, dword [esi + 0x18]
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 4
mov dword [esp + 0xb4], esi
mov dword [esp + 0xc0], 0
test ecx, ecx
mov dword [esp + 0x2e4], eax
mov dword [esp + 0x2e8], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x2ec], 0
mov dword [esp + 0x28], ecx
je 0x4afbe6
mov esi, dword [esp + 0x28]
xor ebx, ebx
mov dword [esp + 0x50], 0
mov dword [esp + 8], 4
jmp 0x4afa18
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x20]
mov dword [ecx + eax*8], edi
mov dword [ecx + eax*8 + 4], edx
inc eax
mov esi, dword [esp + 0x2e8]
mov dword [esp + 0x50], eax
mov dword [esp + 0xc0], eax
test esi, esi
je 0x4afb53
lea ecx, [esp + 0x168]
lea edx, [esp + 0x2e4]
push ebx
call fcn.00476320
add esp, 4
test byte [esp + 0x168], 1
jne 0x4afcd1
sub esi, dword [esp + 0x2e8]
movzx eax, byte [esp + 0x16d]
mov ecx, dword [esp + 0x178]
mov edi, dword [esp + 0x180]
mov ebx, esi
mov dword [esp + 0x20], ecx
add ebx, dword [esp + 0x2ec]
cmp al, 3
mov dword [esp + 0x2ec], ebx
je 0x4afb53
mov eax, dword [esp + 0x50]
cmp eax, dword [esp + 0xb8]
jne 0x4af9ea
lea ecx, [esp + 0xb8]
call fcn.0046dda0
mov eax, dword [esp + 0xbc]
mov dword [esp + 8], eax
jmp 0x4af9ea
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x28]
mov dword [eax + ecx*8], edi
mov dword [eax + ecx*8 + 4], edx
inc ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x170], ecx
mov ecx, dword [esp + 8]
lea ebx, [ebx + ecx + 1]
cmp dword [esp + 0x10], ebx
jbe 0x4b12a6
mov edx, dword [esp + 0x50]
lea ecx, [ebx + ebx*8]
movzx edi, byte [edx + ecx*2 + 0x11]
movzx edx, word [edx + ecx*2 + 0xe]
and edx, 0x30
mov dword [esp + 8], edi
cmp dx, 0x20
jne 0x4afabe
mov edx, dword [esp + 0x50]
lea ecx, [edx + ecx*2]
movzx edx, word [ecx + 0xc]
mov dword [esp + 0x28], ecx
cmp edx, 0xfeff
movsx ecx, dx
cmovb ecx, edx
test ecx, ecx
jle 0x4afabe
dec ecx
cmp ecx, dword [esp + 0x20]
jae 0x4b160a
mov edx, dword [esp + 0x28]
lea ecx, [ecx + ecx*4]
mov edi, dword [edx + 8]
mov edx, dword [esp + 0xc]
add edi, dword [esp + 0x40]
add edi, dword [esi + ecx*8 + 0xc]
cmp edx, dword [esp + 0x168]
jne 0x4afaa3
lea ecx, [esp + 0x168]
call fcn.0046dda0
mov eax, dword [esp + 0x16c]
jmp 0x4afaa3
cmp dword [esp + 0x50], 2
jb 0x4afbe6
mov eax, dword [esp + 0xbc]
cmp dword [esp + 0x50], 0x15
mov dword [esp + 0x10], eax
jae 0x4afbd9
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
lea eax, [edi + eax*8]
lea edx, [edi + 8]
mov dword [esp + 0x20], eax
xor eax, eax
jmp 0x4afba3
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov dword [edi], esi
mov dword [edi + 4], ecx
mov edi, dword [esp + 0x50]
add eax, 0xfffffff8
lea edx, [edi + 8]
cmp edx, dword [esp + 0x20]
je 0x4afbe6
mov esi, dword [edi + 8]
mov dword [esp + 0x50], edx
cmp esi, dword [edi]
jae 0x4afb93
mov ecx, dword [edi + 0xc]
mov ebx, dword [esp + 0x50]
mov edx, eax
mov dword [esp + 8], ecx
mov edi, dword [ebx - 8]
mov ecx, dword [ebx - 4]
test edx, edx
mov dword [ebx + 4], ecx
mov dword [ebx], edi
je 0x4afb86
add edx, 8
cmp esi, dword [ebx - 0x10]
lea edi, [ebx - 8]
mov ebx, edi
jb 0x4afbbb
jmp 0x4afb8a
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x50]
call fcn.00461190
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 8
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 8
mov dword [esp + 0x88], 0
mov dword [esp + 0xcc], 0
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], 0
lea ecx, [esp + 0x168]
lea edx, [esp + 0xec]
call fcn.004729f0
mov eax, dword [esp + 0x168]
cmp eax, 3
jne 0x4afd5e
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0xc8]
inc ebx
mov ecx, edi
cmp ebx, 1
je 0x4afc94
lea esi, [ecx + 0x150]
dec ebx
call fcn.0045e7f0
mov ecx, esi
jmp 0x4afc7f
mov eax, dword [esp + 0xc4]
test eax, eax
je 0x4afcb1
imul eax, eax, 0x150
push 8
push eax
push edi
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x80]
test eax, eax
je 0x4afcd1
shl eax, 5
push 8
push eax
push dword [esp + 0x8c]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x4afcf1
shl eax, 3
push 4
push eax
push dword [esp + 0xc4]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
lock dec dword [eax]
jne 0x4afd11
lea ecx, [esp + 0xb4]
call fcn.0046d320
mov ebx, dword [esp + 0x368]
test ebx, 0x7fffffff
je 0x4afd35
shl ebx, 3
push 4
push ebx
push dword [esp + 0x374]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x150]
test eax, eax
je 0x4afd55
shl eax, 3
push 4
push eax
push dword [esp + 0x15c]
call fcn.0040cd20
add esp, 0xc
mov edi, dword [esp + 0x68]
jmp 0x4ae59b
mov ecx, dword [esp + 0x2c]
mov esi, dword [ecx + 0x68]
mov edx, ecx
movzx ebx, byte [ecx + 0x80]
mov edi, dword [ecx + 0x6c]
add edx, 8
mov dword [esp + 0x64], edx
mov dword [esp + 0x74], esi
mov esi, dword [ecx + 0x10]
mov ecx, dword [ecx + 0x14]
mov byte [esp + 0x94], bl
mov dword [esp + 0x7c], edi
mov dword [esp + 0x78], ecx
mov dword [esp + 0x4c], esi
lea esi, [esp + 0x180]
mov ecx, dword [esp + 0x16c]
movq xmm0, qword [esp + 0x170]
mov edx, dword [esp + 0x17c]
cmp eax, 2
movsd xmm2, qword [esi + 8]
movq xmm1, qword [esi]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x178]
movsd qword [esp + 0x2d0], xmm2
movq xmm2, qword [esi + 0x10]
movq qword [esp + 0x2c8], xmm1
movq qword [esp + 0x2d8], xmm2
je 0x4b1192
test eax, eax
jne 0x4afe00
movd eax, xmm0
or eax, 4
cmp eax, 5
jne 0x4afe28
lea ecx, [esp + 0x168]
lea edx, [esp + 0xec]
call fcn.004729f0
mov eax, dword [esp + 0x168]
cmp eax, 3
jne 0x4afd95
jmp 0x4afc6e
mov eax, dword [esp + 0xcc]
movsd xmm1, qword [esp + 0x2d8]
mov dword [esp + 0xf8], 0
movq xmm2, qword [esp + 0x2c8]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xfc], eax
lea eax, [esp + 0x110]
movq qword [esp + 0x100], xmm0
mov dword [esp + 0x10c], edx
mov dword [esp + 0x108], ecx
movsd qword [eax + 0x10], xmm1
movq xmm1, qword [esp + 0x2d0]
movq qword [eax], xmm2
movq qword [eax + 8], xmm1
mov edx, dword [esp + 0x64]
lea eax, [esp + 0xf8]
lea ecx, [esp + 0x168]
push eax
call fcn.00472e80
add esp, 4
mov eax, dword [esp + 0x168]
xor eax, 2
or eax, dword [esp + 0x16c]
je 0x4afe00
push 0x108
lea eax, [esp + 0x16c]
push eax
lea eax, [esp + 0x470]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov edx, dword [esp + 0x52c]
mov eax, dword [esp + 0x558]
mov ecx, dword [esp + 0x528]
lea esi, [esp + 0x510]
mov dword [esp + 0x24], eax
test edx, edx
lea eax, [eax + 8]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], esi
mov dword [esp + 0x18], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], 0
je 0x4b1369
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
xor ecx, ecx
neg ebx
inc eax
movzx edx, byte [eax - 1]
cmp ecx, 0x3f
jne 0x4aff68
cmp dl, 2
jae 0x4b1346
mov dh, dl
xor esi, esi
mov byte [esp + 0x50], dl
and dh, 0x7f
movzx edi, dh
mov edx, 0
shld esi, edi, cl
shl edi, cl
test cl, 0x20
cmovne esi, edi
cmovne edi, edx
or dword [esp + 8], esi
or dword [esp + 0x10], edi
cmp byte [esp + 0x50], 0
jns 0x4affa4
add ecx, 7
inc eax
inc ebx
jne 0x4aff56
jmp 0x4b134f
mov ecx, dword [esp + 0x10]
not ebx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ebx
or ecx, dword [esp + 8]
jne 0x4b0077
mov eax, dword [esp + 0x24]
lock dec dword [eax]
jne 0x4affd7
lea ecx, [esp + 0x558]
call fcn.0046d290
mov eax, dword [esp + 0x478]
xor eax, 0x2f
or eax, dword [esp + 0x47c]
je 0x4afe00
mov eax, dword [esp + 0x4c8]
test eax, eax
je 0x4b000e
shl eax, 2
push 2
push eax
push dword [esp + 0x4d4]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x4d4]
test eax, eax
je 0x4b002e
shl eax, 4
push 8
push eax
push dword [esp + 0x4e0]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x4e0]
test eax, eax
je 0x4b004e
shl eax, 2
push 2
push eax
push dword [esp + 0x4ec]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x4ec]
test eax, eax
je 0x4afe00
imul eax, eax, 0x38
push 8
push eax
push dword [esp + 0x4f8]
call fcn.0040cd20
add esp, 0xc
jmp 0x4afe00
cmp dword [esp + 8], 0
jne 0x4b009d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
dec eax
cmp eax, dword [ecx + 0x10]
jae 0x4b009d
imul ecx, eax, 0x68
mov eax, dword [esp + 0x24]
add ecx, dword [eax + 0xc]
mov eax, ecx
jmp 0x4b0157
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x14]
test eax, eax
mov dword [esp + 0xc], eax
je 0x4b1369
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xc]
xor ebx, ebx
movzx eax, word [eax + 0x4d6]
mov dword [esp + 0x44], eax
imul eax, eax, 0x68
mov dword [esp + 0x24], eax
mov eax, 0xffffffff
mov edx, dword [esp + 0x24]
add edx, ebx
je 0x4b012b
mov ecx, dword [esp + 0xc]
xor edx, edx
mov edi, dword [ecx + eax*8 + 0xc]
mov esi, dword [ecx + eax*8 + 8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], edi
xor edi, dword [esp + 8]
mov dword [esp + 0x18], esi
xor esi, ecx
or esi, edi
setne dl
cmp ecx, dword [esp + 0x18]
mov ecx, dword [esp + 8]
sbb ecx, dword [esp + 0x50]
mov ecx, 0xff
cmovb edx, ecx
inc eax
add ebx, 0xffffff98
cmp dl, 1
je 0x4b00d8
movzx ecx, dl
test ecx, ecx
jne 0x4b012f
jmp 0x4b014e
mov eax, dword [esp + 0x44]
sub dword [esp + 0x48], 1
jb 0x4b1369
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + eax*4 + 0x4d8]
mov dword [esp + 0xc], ecx
jmp 0x4b00bb
mov eax, dword [esp + 0xc]
sub eax, ebx
add eax, 0xfffffff0
cmp byte [eax + 0x62], 1
jne 0x4b0168
mov dword [esp + 0xe0], 1
push eax
call fcn.004bad60
add esp, 4
mov dword [esp + 0x50], edx
xor ebx, ebx
cmp dword [esp + 0x50], 0
je 0x4b06cc
mov edi, eax
mov esi, dword [esp + 0x568]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x530]
mov edx, dword [esp + 0x560]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 8], 0
sub eax, esi
mov dword [esp + 0x98], esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x70], edx
mov dword [esp + 0x300], eax
mov eax, ecx
and eax, 0xff00
mov dword [esp + 0x2fc], eax
mov eax, ecx
shr eax, 0x10
cmp ecx, 0x50000
mov dword [esp + 0x2f8], eax
mov eax, 0
cmovb eax, esi
test byte [esp + 0x94], 1
cmove eax, ebx
shl dword [esp + 0x50], 4
mov dword [esp + 0x308], eax
mov eax, dword [esp + 0x78]
sub eax, edx
mov dword [esp + 0x48], eax
movzx eax, ch
mov dword [esp + 0x304], eax
mov eax, dword [esp + 0x74]
add eax, esi
mov dword [esp + 0xe8], eax
movzx eax, cl
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x4c]
add eax, edx
mov dword [esp + 0x9c], eax
jmp 0x4b02ae
lea ecx, [esp + 0x168]
lea edx, [esp + 0xf8]
call fcn.00471a70
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x10]
mov edx, 1
xor eax, 0x26
or eax, dword [esp + 0x16c]
movzx eax, word [esp + 0x18]
cmove ax, word [esp + 0x170]
cmove ecx, edx
mov dword [esp + 0x10], ecx
mov word [esp + 0x18], ax
add edi, 0x10
add dword [esp + 0x50], 0xfffffff0
je 0x4b06f4
mov eax, dword [esp + 0xd8]
movq xmm0, qword [edi]
movq xmm1, qword [edi + 8]
movq qword [esp + 0x2c0], xmm1
movq qword [esp + 0x2b8], xmm0
lea ecx, [esp + 0x168]
lea esi, [esp + 0x2b8]
lea edx, [esp + 0xd0]
push esi
push dword [eax + 0x20]
call fcn.0046f990
add esp, 8
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
mov edx, eax
xor edx, 0x2e
or edx, ecx
je 0x4b1369
movq xmm0, qword [esp + 0x170]
mov edx, dword [esp + 0x17c]
mov esi, dword [esp + 0x178]
movq qword [esp + 0x100], xmm0
mov dword [esp + 0x108], esi
mov dword [esp + 0x10c], edx
mov dword [esp + 0xf8], eax
movzx eax, si
mov dword [esp + 0xfc], ecx
cmp eax, 0x12
jg 0x4b03fe
cmp eax, 0x11
je 0x4b04a6
cmp eax, 0x12
jne 0x4b02a0
lea ecx, [esp + 0x168]
lea edx, [esp + 0xf8]
call fcn.00471a70
mov eax, dword [esp + 0x168]
test al, 0x3f
je 0x4b057c
cmp eax, 7
je 0x4b059d
cmp eax, 0xc
jne 0x4b02a0
mov eax, dword [esp + 0x70]
cmp dword [esp + 0x78], eax
jb 0x4b1369
mov eax, dword [esp + 0xb0]
mul dword [esp + 0x170]
jo 0x4b1369
mov ecx, dword [esp + 0x48]
sub ecx, eax
jb 0x4b1369
movzx edx, byte [esp + 0x44]
dec edx
cmp edx, 7
ja 0x4b1369
mov edx, dword [edx*4 + 0x4b2864]
add edx, dword [esp + 0x1c]
jmp edx
cmp eax, 0x13
je 0x4b0259
cmp eax, 0x55
jne 0x4b02a0
lea ecx, [esp + 0x168]
lea edx, [esp + 0xf8]
call fcn.00471a70
mov ecx, dword [esp + 0x168]
mov eax, dword [esp + 0x170]
mov edx, ecx
and dl, 0x3f
cmp dl, 0x16
je 0x4b0535
cmp ecx, 0x18
jne 0x4b054e
mov ecx, dword [esp + 0x98]
cmp dword [esp + 0x7c], ecx
jb 0x4b1369
mul dword [esp + 0x304]
jo 0x4b1369
mov ecx, dword [esp + 0x300]
sub ecx, eax
jb 0x4b1369
cmp dword [esp + 0x2fc], 0x800
jne 0x4b05c7
cmp ecx, 8
jb 0x4b1369
mov ecx, dword [esp + 0xe8]
cmp dword [ecx + eax + 4], 0
je 0x4b05d0
jmp 0x4b1369
lea ecx, [esp + 0x168]
lea edx, [esp + 0xf8]
call fcn.00471a70
mov eax, dword [esp + 0x168]
test al, 0x3f
je 0x4b055b
cmp eax, 0xc
jne 0x4b02a0
mov eax, dword [esp + 0x70]
cmp dword [esp + 0x78], eax
jb 0x4b1369
mov eax, dword [esp + 0xb0]
mul dword [esp + 0x170]
jo 0x4b1369
mov ecx, dword [esp + 0x48]
sub ecx, eax
jb 0x4b1369
movzx edx, byte [esp + 0x44]
dec edx
cmp edx, 7
ja 0x4b1369
mov edx, dword [edx*4 + 0x4b2884]
add edx, dword [esp + 0x1c]
jmp edx
add eax, dword [esp + 0x308]
mov cl, 1
mov dword [esp + 8], ecx
mov dword [esp + 0x90], eax
jmp 0x4b02a0
mov dword [esp + 8], 0
jmp 0x4b02a0
mov eax, dword [esp + 0x170]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0xa8], eax
jmp 0x4b0635
mov eax, dword [esp + 0x170]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0xa0], eax
jmp 0x4b069e
mov eax, dword [esp + 0x170]
mov dword [esp + 0x2f4], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0x2f0], eax
mov al, 1
mov dword [esp + 0x8c], eax
jmp 0x4b02a0
cmp ecx, 4
jb 0x4b1369
mov ecx, dword [esp + 0xe8]
mov eax, dword [ecx + eax]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x98]
add dword [esp + 0x90], eax
mov al, 1
mov dword [esp + 8], eax
jmp 0x4b02a0
mov al, 1
mov dword [esp + 0xc], eax
jmp 0x4b02a0
mov al, 1
mov dword [esp + 0x24], eax
jmp 0x4b02a0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x8c], 0
jmp 0x4b0806
test byte [esp + 8], 1
je 0x4b0806
xor eax, eax
cmp dword [esp + 0x44], 0x50000
mov ecx, dword [esp + 0x2c]
setae al
mov eax, dword [ecx + eax*8 + 0x64]
sub eax, dword [esp + 0x90]
jb 0x4b1369
mov edi, dword [esp + 0x44]
mov edx, dword [esp + 0x2c]
xor ecx, ecx
movq xmm0, qword [esp + 0x550]
cmp edi, 0x50000
setae cl
mov ecx, dword [edx + ecx*8 + 0x60]
mov edx, dword [esp + 0x4c]
add ecx, dword [esp + 0x90]
cmp edi, 0x50000
setae byte [esp + 0x188]
movq qword [esp + 0x168], xmm0
mov dword [esp + 0x170], edx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x174], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x178], edx
mov edx, dword [esp + 0x2f8]
mov word [esp + 0x17c], di
mov word [esp + 0x17e], dx
mov dword [esp + 0x180], ecx
mov dword [esp + 0x184], eax
mov byte [esp + 0x18b], 0
mov word [esp + 0x189], 0
lea ecx, [esp + 0xf8]
lea edx, [esp + 0x168]
call fcn.00476580
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov edx, eax
xor edx, 2
or edx, ecx
jne 0x4b0a95
mov ecx, dword [esp + 0x100]
cmp cl, 0x4b
jne 0x4b1369
mov eax, ecx
shr eax, 8
and eax, 1
mov dword [esp + 0x24], eax
jmp 0x4b0957
mov ecx, dword [esp + 0xc0]
test ecx, ecx
mov dword [esp + 8], ecx
je 0x4b0891
mov ecx, dword [esp + 0xbc]
cmp dword [esp + 8], 1
je 0x4b0845
mov edx, dword [esp + 8]
xor eax, eax
mov ebx, dword [esp + 0x20]
mov edi, edx
shr edi, 1
lea esi, [edi + eax]
cmp dword [ecx + esi*8], ebx
cmova esi, eax
sub edx, edi
cmp edx, 1
mov ebx, esi
mov eax, esi
ja 0x4b0829
mov edx, dword [esp + 0x20]
cmp dword [ecx + ebx*8], edx
jne 0x4b0891
lea esi, [ecx + ebx*8]
mov edx, ebx
sub ebx, 1
mov dword [esp + 0x50], esi
jb 0x4b086c
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x20]
cmp dword [eax - 8], edi
lea esi, [eax - 8]
je 0x4b0851
cmp dword [esp + 8], edx
je 0x4b094f
mov eax, dword [esp + 8]
mov dword [esp + 0x24], 0
lea eax, [ecx + eax*8]
mov dword [esp + 0xb0], eax
jmp 0x4b0cd3
test byte [esp + 0xc], 1
je 0x4b094f
test byte [esp + 0x24], 1
je 0x4b08f8
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
cmp dword [esp + 0xac], eax
sbb ecx, dword [esp + 0xa0]
jae 0x4b094f
mov esi, dword [esp + 0x88]
cmp esi, dword [esp + 0x80]
jne 0x4b0b6e
lea ecx, [esp + 0x80]
call fcn.0046de50
mov edi, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa0]
jmp 0x4b0b7c
test byte [esp + 0x8c], 1
je 0x4b094f
mov edi, dword [esp + 0x2f4]
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0x2f0]
mov ecx, dword [esp + 0xa8]
add edi, eax
adc ebx, ecx
cmp eax, edi
mov ecx, ecx
sbb ecx, ebx
jae 0x4b094f
mov esi, dword [esp + 0x88]
cmp esi, dword [esp + 0x80]
jne 0x4b0b7c
lea ecx, [esp + 0x80]
call fcn.0046de50
jmp 0x4b0b7c
mov dword [esp + 0x24], 0
test byte [esp + 0x24], 1
mov dword [esp + 0xd0], 2
jne 0x4b0bd0
mov eax, dword [esp + 0x478]
xor eax, 0x2f
or eax, dword [esp + 0x47c]
je 0x4b0bd0
lea ecx, [esp + 0x168]
lea edx, [esp + 0x478]
call fcn.004782d0
lea edx, [esp + 0x468]
lea ecx, [esp + 0xf8]
push dword [esp + 0x64]
lea eax, [esp + 0x16c]
push eax
call fcn.0047cd00
add esp, 8
movq xmm0, qword [esp + 0xf8]
movsd xmm1, qword [esp + 0x100]
movq qword [esp + 0xd0], xmm0
movsd qword [esp + 0xd8], xmm1
movq xmm1, qword [esp + 0x108]
test byte [esp + 0xd0], 1
movq qword [esp + 0xe0], xmm1
jne 0x4b0bd0
mov eax, dword [esp + 0xe0]
test eax, eax
je 0x4b0bd0
mov edi, dword [esp + 0x88]
mov esi, dword [esp + 0xdc]
shl eax, 3
lea eax, [eax + eax*2]
mov dword [esp + 8], eax
mov ebx, edi
add esi, 8
shl ebx, 5
or ebx, 0x18
jmp 0x4b0a74
mov eax, dword [esp + 0x84]
movdqa xmm0, xmmword [esp + 0x50]
mov ecx, dword [esp + 0x40]
inc edi
add esi, 0x18
movdqu xmmword [eax + ebx - 0x18], xmm0
mov dword [eax + ebx - 4], 0
mov dword [eax + ebx - 8], 0
mov dword [eax + ebx], ecx
add ebx, 0x20
add dword [esp + 8], 0xffffffe8
mov dword [esp + 0x88], edi
je 0x4b0bd0
movdqu xmm0, xmmword [esi]
cmp edi, dword [esp + 0x80]
movdqa xmmword [esp + 0x50], xmm0
jne 0x4b0a31
lea ecx, [esp + 0x80]
call fcn.0046de50
jmp 0x4b0a31
mov dword [esp + 0x24], 0
jmp 0x4b0b0a
mov eax, dword [esp + 0x84]
movdqa xmm0, xmmword [esp + 0x50]
mov edx, dword [esp + 0x40]
mov ecx, esi
inc esi
shl ecx, 5
movdqu xmmword [eax + ecx], xmm0
mov dword [eax + ecx + 0x14], 0
mov dword [eax + ecx + 0x10], 0
mov dword [eax + ecx + 0x18], edx
mov al, 1
mov dword [esp + 0x88], esi
mov dword [esp + 0x24], eax
lea ecx, [esp + 0xf8]
lea edx, [esp + 0x168]
call fcn.00476580
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov edx, eax
xor edx, 2
or edx, ecx
je 0x4b07e5
xor eax, 1
or eax, ecx
jne 0x4b0957
movdqu xmm1, xmmword [esp + 0x100]
pshufd xmm0, xmm1, 0x55
pshufd xmm2, xmm1, 0xff
movd ecx, xmm1
movdqa xmmword [esp + 0x50], xmm1
pshufd xmm1, xmm1, 0xee
movd esi, xmm1
movd eax, xmm0
movd edx, xmm2
cmp ecx, esi
sbb eax, edx
jae 0x4b0adc
mov esi, dword [esp + 0x88]
cmp esi, dword [esp + 0x80]
jne 0x4b0a9f
lea ecx, [esp + 0x80]
call fcn.0046de50
jmp 0x4b0a9f
mov edi, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa0]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0xa8]
mov ecx, esi
inc esi
shl ecx, 5
mov dword [eax + ecx + 4], edx
mov edx, dword [esp + 0xac]
mov dword [eax + ecx], edx
mov dword [eax + ecx + 8], edi
mov edi, dword [esp + 0x40]
mov dword [eax + ecx + 0xc], ebx
mov dword [eax + ecx + 0x14], 0
mov dword [eax + ecx + 0x10], 0
mov dword [eax + ecx + 0x18], edi
mov dword [esp + 0x88], esi
mov dword [esp + 0xd0], 2
push 0x108
lea eax, [esp + 0x46c]
push eax
lea eax, [esp + 0x170]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0xd8]
lea eax, [esp + 0x180]
movq xmm0, qword [esp + 0xd0]
mov ecx, dword [esp + 0x40]
movzx edx, word [esp + 0x18]
movsd qword [eax + 0xf8], xmm1
movq xmm1, qword [esp + 0xe0]
movq qword [eax + 0xf0], xmm0
cmp ecx, dword [esp + 0xc4]
movq qword [eax + 0x100], xmm1
mov eax, dword [esp + 0x20]
mov dword [esp + 0x2b4], eax
mov eax, dword [esp + 0x10]
mov word [esp + 0x2b0], ax
mov word [esp + 0x2b2], dx
mov dword [esp + 0x288], 2
mov byte [esp + 0x2a0], 0x4c
jne 0x4b0c77
lea ecx, [esp + 0xc4]
call fcn.0046d590
mov edi, dword [esp + 0x40]
imul eax, edi, 0x150
add eax, dword [esp + 0xc8]
push 0x150
lea esi, [esp + 0x16c]
push esi
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
inc edi
mov dword [esp + 0xcc], edi
mov ecx, esi
jmp 0x4afe07
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x44]
jae 0x4b1369
mov eax, dword [esp + 0x50]
add eax, 8
cmp eax, dword [esp + 0xb0]
mov dword [esp + 0x50], eax
je 0x4b0957
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x50]
cmp dword [ecx], eax
jne 0x4b0957
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x28]
mov eax, dword [eax + 4]
sub ecx, eax
jb 0x4b1369
mov edx, dword [esp + 0x30]
add edx, eax
mov dword [esp + 0xf8], edx
mov dword [esp + 0xfc], ecx
lea ecx, [esp + 0x168]
lea edx, [esp + 0xf8]
push eax
call fcn.00476320
add esp, 4
test byte [esp + 0x168], 1
jne 0x4b1369
mov eax, dword [esp + 0x174]
test eax, eax
mov dword [esp + 8], eax
je 0x4b0cbb
mov edx, dword [esp + 0x16c]
mov eax, dword [esp + 0x170]
movzx ecx, byte [esp + 0x184]
mov dword [esp + 0xc], eax
mov eax, edx
mov byte [esp + 0x70], cl
mov dword [esp + 0x98], edx
add al, dl
add al, cl
test cl, cl
movzx ecx, dl
movzx eax, al
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], eax
jne 0x4b0fc9
cmp byte [esp + 0x98], 8
ja 0x4b0cad
mov ecx, dword [esp + 0x48]
mov eax, 0x116
bt eax, ecx
jae 0x4b0cad
cmp byte [esp + 0x98], 1
je 0x4b0e0d
cmp dword [esp + 0x48], 2
je 0x4b0e40
cmp dword [esp + 0x48], 4
mov eax, dword [esp + 0xc]
jne 0x4b0e88
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x44]
jb 0x4b0cbb
cmp dword [esp + 8], 4
jb 0x4b1369
mov eax, dword [esp + 8]
and eax, 0xfffffffc
cmp eax, 4
je 0x4b1369
mov edx, dword [esp + 0xc]
add dword [esp + 8], 0xfffffff8
mov eax, dword [edx + 4]
mov ecx, dword [edx]
add edx, 8
mov dword [esp + 0xc], edx
mov esi, eax
or eax, ecx
je 0x4b0dc7
jmp 0x4b0e71
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x44]
jb 0x4b0cbb
sub dword [esp + 8], 2
jb 0x4b1369
mov edx, dword [esp + 0xc]
movzx eax, byte [edx + 1]
movzx ecx, byte [edx]
add edx, 2
mov dword [esp + 0xc], edx
mov esi, eax
or eax, ecx
je 0x4b0e0d
jmp 0x4b0e71
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x44]
jb 0x4b0cbb
sub dword [esp + 8], 4
jb 0x4b1369
mov edx, dword [esp + 0xc]
movzx eax, word [edx + 2]
movzx ecx, word [edx]
add edx, 4
mov dword [esp + 0xc], edx
mov esi, eax
or eax, ecx
je 0x4b0e40
mov ebx, ecx
mov dword [esp + 0x70], 0
mov dword [esp + 0x8c], 0
jmp 0x4b0edf
mov ecx, dword [esp + 8]
cmp ecx, dword [esp + 0x44]
jb 0x4b0cbb
cmp dword [esp + 8], 8
jb 0x4b1369
mov ecx, dword [esp + 8]
and ecx, 0xfffffff8
cmp ecx, 8
je 0x4b1369
mov edx, dword [eax + 4]
mov ecx, dword [eax + 0xc]
mov edi, dword [eax]
add dword [esp + 8], 0xfffffff0
mov dword [esp + 0x70], ecx
mov dword [esp + 0x8c], edx
or ecx, edx
mov edx, dword [eax + 8]
add eax, 0x10
mov ebx, edi
mov dword [esp + 0xc], eax
mov esi, edx
or edx, edi
or edx, ecx
je 0x4b0e88
mov eax, esi
or eax, dword [esp + 0x70]
je 0x4b0f5c
mov eax, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
add esi, ebx
adc dword [esp + 0x70], eax
cmp edi, dword [esp + 0x80]
jne 0x4b0f10
lea ecx, [esp + 0x80]
call fcn.0046de50
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x8c]
mov eax, edi
inc edi
shl eax, 5
mov dword [ecx + eax], ebx
mov dword [ecx + eax + 4], edx
mov ebx, dword [esp + 0x70]
mov dword [ecx + eax + 8], esi
mov esi, dword [esp + 0x40]
mov dword [ecx + eax + 0xc], ebx
mov dword [ecx + eax + 0x14], 0
mov dword [ecx + eax + 0x10], 0
mov dword [ecx + eax + 0x18], esi
mov al, 1
mov dword [esp + 0x88], edi
mov dword [esp + 0x24], eax
cmp dword [esp + 8], 0
jne 0x4b0da3
jmp 0x4b0cbb
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0x44]
jb 0x4b0cbb
movzx eax, byte [esp + 0x70]
dec eax
cmp eax, 7
ja 0x4b1369
mov eax, dword [eax*4 + 0x4b28a4]
add eax, dword [esp + 0x1c]
jmp eax
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x84]
cmp ecx, 2
mov dword [esp + 8], eax
mov dword [esp + 0x50], ecx
jb 0x4b145f
cmp dword [esp + 0x50], 0x15
jae 0x4b142d
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 8]
shl eax, 5
mov edx, esi
add eax, esi
add edx, 0x20
mov dword [esp + 0x50], eax
xor eax, eax
jmp 0x4b121d
mov ecx, dword [esp + 8]
mov dword [ecx], edx
mov dword [ecx + 4], ebx
movsd xmm0, qword [esp + 0x168]
movq xmm1, qword [esp + 0x170]
movsd qword [ecx + 8], xmm0
movq qword [ecx + 0x10], xmm1
movq xmm0, qword [esp + 0x178]
movq qword [ecx + 0x18], xmm0
mov esi, dword [esp + 0x1c]
add eax, 0xffffffe0
lea edx, [esi + 0x20]
cmp edx, dword [esp + 0x50]
je 0x4b1449
mov dword [esp + 0x1c], edx
mov edx, dword [esi + 0x20]
mov ebx, dword [esi + 0x24]
cmp edx, dword [esi]
mov ecx, ebx
sbb ecx, dword [esi + 4]
jae 0x4b1209
movsd xmm0, qword [esi + 0x38]
mov edi, dword [esp + 0x1c]
movsd qword [esp + 0x178], xmm0
movsd xmm0, qword [esi + 0x28]
movsd xmm1, qword [esi + 0x30]
mov esi, eax
movsd qword [esp + 0x170], xmm1
movsd qword [esp + 0x168], xmm0
movsd xmm0, qword [edi - 8]
test esi, esi
movsd qword [edi + 0x18], xmm0
movsd xmm0, qword [edi - 0x10]
movsd qword [edi + 0x10], xmm0
movq xmm0, qword [edi - 0x20]
movq xmm1, qword [edi - 0x18]
movq qword [edi + 8], xmm1
movq qword [edi], xmm0
je 0x4b11d6
add esi, 0x20
cmp edx, dword [edi - 0x40]
mov ecx, ebx
sbb ecx, dword [edi - 0x3c]
lea ecx, [edi - 0x20]
mov edi, ecx
jb 0x4b1260
jmp 0x4b11da
cmp dword [esp + 0xc], 2
jb 0x4b1638
mov eax, dword [esp + 0x16c]
cmp dword [esp + 0xc], 0x15
mov dword [esp + 0x40], eax
jae 0x4b162b
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], 0
lea eax, [ecx + eax*8]
add ecx, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0x50], ecx
jmp 0x4b130e
mov edi, dword [esp + 0x40]
mov eax, dword [esp + 0x28]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov eax, dword [esp + 0x50]
add dword [esp + 8], 0xfffffff8
add eax, 8
cmp eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
je 0x4b1638
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
cmp ecx, dword [eax - 8]
jae 0x4b12f4
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 8]
mov eax, dword [edx + 4]
mov dword [esp + 0x28], eax
mov edi, dword [edx - 8]
mov eax, dword [edx - 4]
test ebx, ebx
mov dword [edx + 4], eax
mov dword [edx], edi
je 0x4b12e7
add ebx, 8
cmp ecx, dword [edx - 0x10]
lea edi, [edx - 8]
mov edx, edi
jb 0x4b1328
jmp 0x4b12eb
mov dword [esp + 0xd0], eax
jmp 0x4b1369
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], 0
mov eax, dword [esp + 0x558]
lock dec dword [eax]
jne 0x4b1381
lea ecx, [esp + 0x558]
call fcn.0046d290
mov eax, dword [esp + 0x478]
xor eax, 0x2f
or eax, dword [esp + 0x47c]
je 0x4afc6e
mov eax, dword [esp + 0x4c8]
test eax, eax
je 0x4b13b8
shl eax, 2
push 2
push eax
push dword [esp + 0x4d4]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x4d4]
test eax, eax
je 0x4b13d8
shl eax, 4
push 8
push eax
push dword [esp + 0x4e0]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x4e0]
test eax, eax
je 0x4b13f8
shl eax, 2
push 2
push eax
push dword [esp + 0x4ec]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x4ec]
test eax, eax
je 0x4afc6e
imul eax, eax, 0x38
push 8
push eax
push dword [esp + 0x4f8]
call fcn.0040cd20
add esp, 0xc
jmp 0x4afc6e
push 0x588094
push ecx
push eax
call fcn.004dac50
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x50]
call fcn.00461270
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 8]
shl ecx, 5
add eax, ecx
jmp 0x4b1471
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], eax
mov dword [esp + 0x50], ecx
cmp dword [esp + 0x50], 0
je 0x4b14a0
mov eax, dword [esp + 0x50]
shl eax, 5
add eax, dword [esp + 8]
mov esi, dword [esp + 8]
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x1c], eax
mov edi, dword [esi + 8]
mov eax, dword [esi + 0xc]
cmp edi, ecx
mov ebx, eax
sbb ebx, edx
cmovae ecx, edi
cmovae edx, eax
mov dword [esi + 0x14], edx
mov dword [esi + 0x10], ecx
add esi, 0x20
cmp esi, dword [esp + 0x1c]
jne 0x4b147d
jmp 0x4b14a8
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x4b14f4
shl eax, 3
push 4
push eax
push dword [esp + 0xc4]
call fcn.0040cd20
add esp, 0xc
mov eax, dword [esp + 0x28]
neg eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x1c], eax
jo 0x4afcfc
mov eax, dword [esp + 0xc]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x70]
test eax, eax
mov dword [esp + 0x64], eax
je 0x4b1641
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x2c8], 0
mov dword [esp + 0x2cc], 8
mov dword [esp + 0x2d0], 0
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], 0
lea ecx, [esp + 0x168]
lea edx, [esp + 0xd0]
call fcn.004729f0
mov eax, dword [esp + 0x168]
cmp eax, 3
jne 0x4b167f
mov eax, dword [esp + 0x174]
mov esi, dword [esp + 0x178]
mov edx, dword [esp + 0x17c]
movzx ebx, byte [esp + 0x170]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], esi
mov dword [esp + 0x10], edx
lea ecx, [esp + 0x2c8]
call fcn.0045ec20
cmp bl, 0x4b
je 0x4b18af
mov ecx, dword [esp + 0x18]
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 1
je 0x4b1854
dec dword [esp + 0x20]
lea esi, [ecx + 0x150]
call fcn.0045e7f0
mov ecx, esi
jmp 0x4b15ec
mov eax, dword [esp + 0x168]
test eax, eax
je 0x4afd55
shl eax, 3
push 4
push eax
push dword [esp + 0x174]
jmp 0x4afd4d
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0xc]
call fcn.00466ff0
mov eax, dword [esp + 0x3c]
jmp 0x4af49f
mov dword [esp + 0x2b8], 0
mov dword [esp + 0x2bc], 8
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x30], 8
mov dword [esp + 0x10], 0
mov dword [esp + 0x2c], 0
jmp 0x4b18d0
add dword [esp + 0x64], 8
mov dword [esp + 0x10], 0
mov dword [esp + 0x30], 8
jmp 0x4b16c2
cmp eax, 2
je 0x4b18a4
lea ecx, [esp + 0x168]
lea edx, [esp + 0xd0]
call fcn.004729f0
mov eax, dword [esp + 0x168]
cmp eax, 3
je 0x4b15a6
lea esi, [esp + 0x180]
mov ecx, dword [esp + 0x16c]
movzx ebx, byte [esp + 0x170]
movzx edi, byte [esp + 0x173]
movq xmm0, qword [esp + 0x174]
mov edx, dword [esp + 0x17c]
test eax, eax
movsd xmm2, qword [esi + 8]
movq xmm1, qword [esi]
mov dword [esp + 0x2c], ecx
movzx ecx, word [esp + 0x171]
movsd qword [esp + 0x100], xmm2
movq xmm2, qword [esi + 0x10]
movq qword [esp + 0xf8], xmm1
movq qword [esp + 0x108], xmm2
jne 0x4b1696
mov eax, dword [esp + 0x2c]
shl edi, 0x10
mov dword [esp + 0x168], 0
movq xmm1, qword [esp + 0x100]
movq xmm2, qword [esp + 0x108]
or ecx, edi
mov dword [esp + 0x16c], eax
mov byte [esp + 0x170], bl
mov word [esp + 0x171], cx
shr ecx, 0x10
lea eax, [esp + 0x180]
mov byte [esp + 0x173], cl
movq qword [esp + 0x174], xmm0
movq xmm0, qword [esp + 0xf8]
mov dword [esp + 0x17c], edx
movq qword [eax + 8], xmm1
movq qword [eax + 0x10], xmm2
movq qword [eax], xmm0
mov edx, dword [esp + 0x64]
lea eax, [esp + 0x168]
lea ecx, [esp + 0x468]
push eax
call fcn.00472e80
add esp, 4
mov eax, dword [esp + 0x468]
xor eax, 2
or eax, dword [esp + 0x46c]
je 0x4b169f
push 0x108
lea eax, [esp + 0x46c]
push eax
lea eax, [esp + 0x170]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
cmp ecx, dword [esp + 0x2c8]
mov dword [esp + 0x270], eax
jne 0x4b181f
lea ecx, [esp + 0x2c8]
call fcn.0046db10
mov eax, dword [esp + 0x2cc]
mov dword [esp + 0x30], eax
mov esi, dword [esp + 0x10]
imul eax, esi, 0x110
add eax, dword [esp + 0x30]
push 0x110
lea ecx, [esp + 0x16c]
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
inc esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x2d0], esi
jmp 0x4b169f
cmp dword [esp + 0xc], 0
je 0x4b1872
imul eax, dword [esp + 0xc], 0x150
push 8
push eax
push dword [esp + 0x20]
call fcn.0040cd20
add esp, 0xc
cmp dword [esp + 0x28], 0
je 0x4afcfc
mov eax, dword [esp + 0x28]
shl eax, 5
push 8
push eax
push dword [esp + 0x10]
call fcn.0040cd20
add esp, 0xc
jmp 0x4afcfc
push 0x584b88
push eax
push edi
call fcn.004e0750
mov eax, dword [esp + 0x2c8]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2b8], eax
mov dword [esp + 0x2bc], edx
mov dword [esp + 0x2c0], ecx
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 8]
cmp dword [esp + 0x28], ecx
mov dword [esp + 0x168], eax
jbe 0x4b1938
mov ebx, dword [esp + 0x28]
shl ebx, 5
cmp dword [esp + 0x50], 0
je 0x4b1924
mov esi, dword [esp + 0x50]
shl esi, 5
push esi
push 8
push ebx
push dword [esp + 0x14]
call fcn.0040cd40
add esp, 0x10
mov edi, eax
test eax, eax
jne 0x4b1938
push esi
push 8
call fcn.004cf340
add esp, 8
jmp 0x4b2408
push 8
push ebx
push dword [esp + 0x10]
call fcn.0040cd20
add esp, 0xc
mov edi, 8
mov eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x20]
jbe 0x4b1998
imul eax, dword [esp + 0xc], 0x150
cmp dword [esp + 0x20], 0
je 0x4b1981
imul esi, dword [esp + 0x20], 0x150
push esi
push 8
push eax
push dword [esp + 0x24]
call fcn.0040cd40
add esp, 0x10
test eax, eax
mov dword [esp + 0x18], eax
jne 0x4b1998
push esi
push 8
call fcn.004cf340
add esp, 8
jmp 0x4b2408
push 8
push eax
push dword [esp + 0x20]
call fcn.0040cd20
add esp, 0xc
mov dword [esp + 0x18], 8
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x10]
jbe 0x4b19f8
imul eax, dword [esp + 0x2c], 0x110
cmp dword [esp + 0x10], 0
je 0x4b19e1
imul esi, dword [esp + 0x10], 0x110
push esi
push 8
push eax
push dword [esp + 0x3c]
call fcn.0040cd40
add esp, 0x10
test eax, eax
mov dword [esp + 0x30], eax
jne 0x4b19f8
push esi
push 8
call fcn.004cf340
add esp, 8
jmp 0x4b2408
push 8
push eax
push dword [esp + 0x38]
call fcn.0040cd20
add esp, 0xc
mov dword [esp + 0x30], 8
cmp dword [esp + 0x1c], 0
mov ebx, dword [esp + 0x368]
je 0x4afd18
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30c], eax
mov dword [esp + 0x310], edi
mov dword [esp + 0x314], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x318], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x31c], edx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x320], ecx
mov ecx, ebx
neg ecx
mov dword [esp + 0x324], edx
jno 0x4b1f6b
mov byte [esp + 0x1c], 0x16
movsd xmm1, qword [esp + 0x314]
movsd xmm2, qword [esp + 0x30c]
mov eax, dword [esp + 0x324]
lea ecx, [esp + 0x154]
movq xmm0, qword [esp + 0x31c]
mov edi, dword [esp + 0x68]
movsd qword [esp + 0x3d0], xmm1
movsd xmm1, qword [esp + 0x148]
movsd qword [esp + 0x3c8], xmm2
movsd xmm2, qword [esp + 0x140]
mov dword [esp + 0x3e0], eax
mov eax, dword [esp + 0x150]
movq qword [esp + 0x3d8], xmm0
movsd qword [esp + 0x420], xmm1
movsd xmm1, qword [esp + 0x138]
movsd qword [esp + 0x418], xmm2
movq xmm2, qword [esp + 0x128]
mov edx, eax
neg edx
movsd qword [esp + 0x410], xmm1
movsd xmm1, qword [esp + 0x130]
movq qword [esp + 0x400], xmm2
movsd qword [esp + 0x408], xmm1
movq xmm1, qword [ecx]
mov ecx, dword [ecx + 8]
movq qword [esp + 0x380], xmm1
mov dword [esp + 0x388], ecx
jo 0x4ae59b
movsd xmm0, qword [esp + 0x420]
movsd xmm1, qword [esp + 0x408]
mov ecx, dword [esp + 0x388]
movzx ebx, byte [esp + 0x4c]
mov edx, dword [esp + 0x50]
movsd qword [esp + 0x590], xmm0
movsd xmm0, qword [esp + 0x418]
movsd qword [esp + 0x578], xmm1
movsd xmm1, qword [esp + 0x398]
movsd qword [esp + 0x588], xmm0
movsd xmm0, qword [esp + 0x410]
movsd qword [esp + 0x580], xmm0
movsd xmm0, qword [esp + 0x400]
movsd qword [esp + 0x570], xmm0
movsd xmm0, qword [esp + 0x380]
mov dword [esp + 0x5a4], ecx
mov ecx, dword [esp + 0x3e0]
movsd qword [esp + 0x59c], xmm0
movsd xmm0, qword [esp + 0x390]
movsd qword [esp + 0x5b1], xmm1
movsd xmm1, qword [esp + 0x3f0]
movsd qword [esp + 0x5a9], xmm0
movsd xmm0, qword [esp + 0x3a0]
movsd qword [esp + 0x5b9], xmm0
movsd xmm0, qword [esp + 0x3a8]
movsd qword [esp + 0x5c1], xmm0
movsd xmm0, qword [esp + 0x3b0]
movsd qword [esp + 0x5c9], xmm0
movsd xmm0, qword [esp + 0x3b8]
movsd qword [esp + 0x5d1], xmm0
movsd xmm0, qword [esp + 0x3bf]
movsd qword [esp + 0x5d8], xmm0
movsd xmm0, qword [esp + 0x3f7]
movsd qword [esp + 0x5f0], xmm0
movsd xmm0, qword [esp + 0x3e8]
movsd qword [esp + 0x5e9], xmm1
movsd xmm1, qword [esp + 0x430]
movsd qword [esp + 0x5e1], xmm0
movsd xmm0, qword [esp + 0x428]
movsd qword [esp + 0x600], xmm1
movsd xmm1, qword [esp + 0x3d0]
movsd qword [esp + 0x5f8], xmm0
movsd xmm0, qword [esp + 0x438]
movsd qword [esp + 0x608], xmm0
movsd xmm0, qword [esp + 0x440]
movsd qword [esp + 0x610], xmm0
movsd xmm0, qword [esp + 0x3c8]
mov dword [esp + 0x680], ecx
movzx ecx, byte [esp + 0x1c]
movsd qword [esp + 0x670], xmm1
movsd xmm1, qword [esp + 0x330]
movsd qword [esp + 0x668], xmm0
movsd xmm0, qword [esp + 0x3d8]
movsd qword [esp + 0x454], xmm1
movsd qword [esp + 0x678], xmm0
mov dword [esp + 0x598], eax
mov byte [esp + 0x5a8], cl
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x5e0], bl
mov dword [esp + 0x618], esi
mov dword [esp + 0x61c], edx
mov edx, dword [esp + 8]
movsd xmm0, qword [esp + 0x338]
mov ebx, dword [0x5000f4]
mov esi, dword [0x5000ec]
mov dword [esp + 0x620], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x624], edx
mov edx, dword [esp + 0x2c]
movsd qword [esp + 0x45c], xmm0
movsd xmm0, qword [esp + 0x328]
cmp ebx, 4
mov dword [esp + 0x628], ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x62c], edx
mov edx, dword [esp + 0x28]
movsd qword [esp + 0x44c], xmm0
movsd xmm0, qword [esp + 0x458]
movq xmm1, qword [esp + 0x450]
mov dword [esp + 0x630], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x634], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0x638], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x63c], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x640], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x644], edx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x648], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x64c], edx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x650], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x654], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x658], ecx
mov ecx, dword [esp + 0x460]
mov dword [esp + 0x65c], edx
mov dword [esp + 0x660], 1
mov dword [esp + 0x664], 0
movsd qword [esp + 0x694], xmm0
movq xmm0, qword [esp + 0x448]
mov edx, dword [esp + 0x3c]
movq qword [esp + 0x68c], xmm1
mov dword [esp + 0x69c], ecx
mov ecx, dword [esp + 0x38]
movq qword [esp + 0x684], xmm0
mov dword [esp + 0x6a0], edi
mov dword [esp + 0x6a4], edx
mov dword [esp + 0x6a8], ecx
jne 0x4b1ee2
mov dword [0x5000f4], 3
mov eax, 0x3d8
add eax, dword [0x5000f0]
push 0x148
push eax
lea eax, [esp + 0x170]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
xor eax, eax
mov ebx, 3
cmp eax, dword [esp + 0x198]
jo 0x4b1ee2
lea ecx, [esp + 0x170]
call fcn.0045fe20
mov ebx, dword [0x5000f4]
mov esi, dword [0x5000ec]
lea edi, [esp + 0x170]
lea eax, [esp + 0x570]
push 0x140
push eax
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x6c]
cmp ebx, esi
mov dword [esp + 0x168], eax
jne 0x4b1f13
call fcn.0046e100
mov esi, dword [0x5000f0]
test ebx, ebx
je 0x4b23c6
imul ecx, ebx, 0x148
lea eax, [esi + 0x148]
push ecx
push esi
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
push 0x148
lea eax, [esp + 0x16c]
push eax
push esi
call sub.msvcrt.dll_memcpy
mov ecx, esi
add esp, 0xc
inc ebx
mov dword [0x5000f4], ebx
jne 0x4ae65e
push 0x5880a4
push 0
push 0
call fcn.004dac50
mov edx, 0x584906
lea ecx, [esp + 0x340]
push 0xf
call fcn.004b2920
add esp, 4
mov dword [esp + 0x1c], edx
mov ecx, dword [esp + 0x1c]
test eax, eax
cmove ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, 1
cmovne ecx, eax
mov dword [esp + 0x4c], ecx
mov edx, 0x58498b
lea ecx, [esp + 0x340]
push 0xf
call fcn.004b2920
add esp, 4
mov dword [esp + 0x48], eax
mov edi, edx
mov edx, 0x587fcc
lea ecx, [esp + 0x340]
push 0x11
call fcn.004b2920
add esp, 4
mov dword [esp + 0x50], edx
mov esi, eax
test eax, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x20], 1
cmove eax, esi
mov dword [esp + 0x50], eax
mov eax, 1
cmove esi, eax
mov edx, 0x587fdd
lea ecx, [esp + 0x340]
push 0xf
call fcn.004b2920
add esp, 4
mov dword [esp + 8], edx
mov ecx, dword [esp + 8]
test eax, eax
cmove ecx, eax
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x20]
cmovne ecx, eax
mov dword [esp + 0x20], ecx
mov edx, 0x587fec
lea ecx, [esp + 0x340]
push 0xf
call fcn.004b2920
add esp, 4
mov dword [esp + 0x2c], edx
mov ecx, dword [esp + 0x2c]
test eax, eax
mov dword [esp + 0x10], 1
cmove ecx, eax
mov dword [esp + 0x2c], ecx
mov ecx, 1
cmove eax, ecx
mov dword [esp + 0x94], eax
mov edx, 0x58802f
lea ecx, [esp + 0x340]
push 0xe
call fcn.004b2920
add esp, 4
mov dword [esp + 0x28], edx
mov ecx, dword [esp + 0x28]
test eax, eax
cmove ecx, eax
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x10]
cmovne ecx, eax
mov dword [esp + 0x10], ecx
mov edx, 0x58803d
lea ecx, [esp + 0x340]
push 0x16
call fcn.004b2920
add esp, 4
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x30]
test eax, eax
mov dword [esp + 0x64], 1
cmove ecx, eax
mov dword [esp + 0x30], ecx
mov ecx, 1
cmove eax, ecx
mov dword [esp + 0x74], eax
mov edx, 0x587ffb
lea ecx, [esp + 0x340]
push 0xe
call fcn.004b2920
add esp, 4
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x18]
test eax, eax
cmove ecx, eax
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x64]
cmovne ecx, eax
mov dword [esp + 0x64], ecx
mov edx, 0x588009
lea ecx, [esp + 0x340]
push 0x13
call fcn.004b2920
add esp, 4
mov dword [esp + 0xc], edx
mov ecx, dword [esp + 0xc]
test eax, eax
mov dword [esp + 0x40], 1
cmove ecx, eax
mov dword [esp + 0xc], ecx
mov ecx, 1
cmove eax, ecx
mov dword [esp + 0x24], eax
mov edx, 0x58801c
lea ecx, [esp + 0x340]
push 0x13
call fcn.004b2920
add esp, 4
mov dword [esp + 0x78], edx
mov ecx, dword [esp + 0x78]
test eax, eax
cmove ecx, eax
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x40]
cmovne ecx, eax
mov dword [esp + 0x40], ecx
mov edx, 0x588053
lea ecx, [esp + 0x340]
push 0x10
call fcn.004b2920
add esp, 4
mov dword [esp + 0x7c], edx
mov ecx, eax
test eax, eax
mov eax, dword [esp + 0x7c]
cmove eax, ecx
mov dword [esp + 0x7c], eax
mov eax, 1
cmove ecx, eax
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x168]
push dword [esp + 0x1c]
call fcn.00475d30
add esp, 4
movzx eax, byte [esp + 0x168]
cmp al, 0x16
mov byte [esp + 0x1c], al
je 0x4b227e
movq xmm0, qword [esp + 0x178]
movsd xmm1, qword [esp + 0x171]
movsd xmm2, qword [esp + 0x180]
mov eax, dword [esp + 0x48]
movsd xmm3, qword [esp + 0x169]
mov edx, 1
movq qword [esp + 0x107], xmm0
movsd qword [esp + 0x100], xmm1
movsd xmm1, qword [esp + 0x188]
movsd qword [esp + 0x468], xmm2
movq xmm2, qword [esp + 0x190]
test eax, eax
movsd qword [esp + 0xf8], xmm3
cmovne edx, eax
cmove edi, eax
movsd qword [esp + 0x470], xmm1
movq xmm1, qword [esp + 0x198]
movq qword [esp + 0x478], xmm2
movq qword [esp + 0x480], xmm1
lea ecx, [esp + 0x168]
push edi
call fcn.00475d30
add esp, 4
movzx eax, byte [esp + 0x168]
cmp al, 0x16
mov byte [esp + 0x4c], al
jne 0x4b22a8
test ebx, ebx
je 0x4b2297
shl ebx, 3
push 4
push ebx
push dword [esp + 0x374]
call fcn.0040cd20
add esp, 0xc
lea ecx, [esp + 0x30c]
call fcn.0045e6e0
jmp 0x4afd35
movq xmm0, qword [esp + 0x178]
movsd xmm1, qword [esp + 0x171]
movsd xmm2, qword [esp + 0x180]
movsd xmm3, qword [esp + 0x169]
test ebx, ebx
movq qword [esp + 0x3f7], xmm0
movsd qword [esp + 0x3f0], xmm1
movsd xmm1, qword [esp + 0x188]
movsd qword [esp + 0x428], xmm2
movsd xmm2, qword [esp + 0x190]
movsd qword [esp + 0x3e8], xmm3
movsd qword [esp + 0x430], xmm1
movsd xmm1, qword [esp + 0x198]
movsd qword [esp + 0x438], xmm2
movsd xmm2, qword [esp + 0xf8]
movsd qword [esp + 0x440], xmm1
movsd xmm1, qword [esp + 0x100]
movsd qword [esp + 0x390], xmm2
movsd xmm2, qword [esp + 0x480]
movsd qword [esp + 0x398], xmm1
movsd xmm1, qword [esp + 0x107]
movsd qword [esp + 0x39f], xmm1
movsd xmm1, qword [esp + 0x478]
movsd qword [esp + 0x3bf], xmm2
movq xmm2, qword [esp + 0x468]
movsd qword [esp + 0x3b7], xmm1
movq xmm1, qword [esp + 0x470]
movq qword [esp + 0x3a7], xmm2
movq qword [esp + 0x3af], xmm1
je 0x4b1a62
shl ebx, 3
push 4
push ebx
push dword [esp + 0x374]
call fcn.0040cd20
add esp, 0xc
jmp 0x4b1a62
push 0x148
lea eax, [esp + 0x16c]
push eax
push esi
call sub.msvcrt.dll_memcpy
mov ecx, esi
add esp, 0xc
mov dword [0x5000f4], 1
jmp 0x4ae65e
push 0x584b98
push ecx
push eax
call fcn.004dac50
push 0x84
push 4
call fcn.004cf360
add esp, 8
ud2