Function at 0x2d2430
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x490
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov eax, dword [edi + 0x70]
push dword [edi + 0x74]
call dword [eax + 0x18]
add esp, 4
mov dword [esp + 0x174], eax
mov dword [esp + 0x170], edx
mov dword [esp + 0x1f4], 0
mov dword [esp + 0x2a8], 0
mov dword [esp + 0x35c], 0
mov dword [esp + 0x410], 0
xorps xmm0, xmm0
movsd qword [esi], xmm0
mov dword [esi + 8], 0
mov esi, edi
push dword [edi + 0x4c]
call fcn.00294270
add esp, 4
push dword [edi + 0x58]
call fcn.002dce40
add esp, 4
cmp dword [eax], 0
mov ecx, 1
jne 0x2d24e8
cmp dword [eax + 4], 0
jne 0x2d24e8
cmp dword [eax + 8], 0
jne 0x2d24e8
cmp dword [eax + 0xc], 0
jne 0x2d24e8
cmp dword [eax + 0x10], 0
jne 0x2d24e8
xor ecx, ecx
mov eax, dword [esp + 0x174]
or eax, dword [esp + 0x170]
sete cl
add ecx, ecx
lea eax, [esi + 0x15]
mov dword [esp + 0x1a8], eax
lea eax, [esi + 0x130]
mov dword [esp + 0x6c], eax
mov esi, 4
mov dword [esp + 0x98], ecx
lea eax, [ecx*4]
mov dword [esp + 0x178], eax
mov dword [esp + 0x94], 0
xor ecx, ecx
jmp 0x2d253c
mov ecx, edi
inc ecx
cmp ecx, 4
je 0x2d47d1
test ecx, ecx
je 0x2d25a0
imul eax, ecx, 0xb4
mov edx, dword [esp + eax + 0x19c]
lea edi, [esp + eax]
add edi, 0x1b0
mov dword [esp + 0xc], edi
lea edi, [esp + eax + 0x250]
mov dword [esp + 0x17c], edi
mov dword [esp + 0x9c], edx
mov dword [esp + eax + 0x250], edx
lea eax, [ecx - 2]
cmp eax, 2
jb 0x2d2590
cmp ecx, 1
jne 0x2d2590
mov ebx, ecx
jmp 0x2d25d1
mov ebx, 2
jmp 0x2d25d1
mov dword [esp + 0x250], 0
mov dword [esp + 0x9c], 0
lea eax, [esp + 0x250]
mov dword [esp + 0x17c], eax
lea eax, [esp + 0x1b0]
mov dword [esp + 0xc], eax
xor ebx, ebx
push ecx
mov eax, dword [ebp + 8]
push dword [eax + 0x4c]
mov edi, ecx
call fcn.00293390
add esp, 8
test eax, eax
je 0x2d2530
mov eax, dword [esp + 0x174]
or eax, dword [esp + 0x170]
lea eax, [edi + edi*2]
mov ecx, dword [esp + 0x178]
mov edx, dword [ecx + eax*4 + 0x7a9818]
mov ecx, edi
jne 0x2d261a
mov eax, edx
and eax, 0x10000
je 0x2d2532
cmp esi, ecx
mov dword [esp + 0x34], ecx
cmovb ecx, esi
cmp esi, 3
cmove ecx, esi
mov dword [esp + 0x58], ecx
mov edi, edx
test edx, 0x2000
jne 0x2d2738
mov eax, edi
test al, 4
je 0x2d2681
mov eax, dword [ebp + 8]
mov eax, dword [eax + ebx*4 + 0x88]
mov dword [esp + 0xa0], 2
lea ecx, [esp + 0xa0]
push ecx
lea ecx, [esp + 0x144]
push ecx
lea ecx, [esp + 0xc8]
push ecx
push 0
push eax
call fcn.00296d70
add esp, 0x14
test eax, eax
jne case.0x2d443f.18
mov eax, edi
test al, 1
jne 0x2d275a
test edi, 0x2000
je 0x2d26a8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xf8]
shr eax, 7
bt eax, ebx
jb case.0x2d443f.18
test edi, 0x200
jne 0x2d2c73
mov eax, edi
test al, 8
je 0x2d26ca
mov eax, dword [ebp + 8]
test byte [eax + 0xf8], 1
jne case.0x2d443f.18
test edi, 0x400
je 0x2d26f2
mov eax, dword [ebp + 8]
movzx eax, byte [eax + 0xf9]
shr al, 2
mov ecx, dword [esp + 0x58]
cmp ecx, dword [esp + 0x34]
sete cl
test al, cl
jne case.0x2d443f.18
cmp dword [esp + 0x34], 2
je 0x2d455e
push ebx
mov eax, dword [ebp + 8]
push dword [eax + 0x54]
call fcn.002ddf70
add esp, 8
test eax, eax
je 0x2d455e
mov esi, eax
mov eax, edi
test al, 0x20
je 0x2d4304
test eax, 0x1000
jne 0x2d4451
test al, al
js 0x2d4420
jmp 0x2d43cf
mov esi, dword [ebp + 8]
push dword [esi + 0x58]
call fcn.002dce40
add esp, 4
mov edx, dword [esp + 0x34]
cmp edx, 1
je 0x2d2783
test edx, edx
jne 0x2d2789
cmp dword [eax], 0
jne 0x2d27b0
jmp 0x2d2789
push ebx
mov eax, dword [ebp + 8]
push dword [eax + 0x58]
call fcn.002dce80
add esp, 8
test eax, eax
jne case.0x2d443f.18
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xf8]
shr eax, 4
bt eax, ebx
jb case.0x2d443f.18
jmp 0x2d268b
cmp dword [eax + 4], 0
jne 0x2d2804
cmp dword [eax + ebx*4 + 8], 0
je 0x2d263b
mov edx, dword [esp + 0x34]
lea eax, [edx - 2]
cmp eax, 2
jb 0x2d27da
cmp edx, 1
mov esi, dword [ebp + 8]
je 0x2d2804
test edx, edx
jne 0x2d47d1
imul eax, edx, 0xb4
mov ecx, dword [esp + 0x98]
mov ecx, dword [ecx*4 + 0x7a9818]
mov dword [esp + eax + 0x25c], ecx
mov eax, 0x9001
mov dword [esp + 8], 0
jmp 0x2d282c
imul eax, edx, 0xb4
mov dword [esp + eax + 0x25c], edi
xor eax, eax
cmp edx, 3
sete al
lea eax, [eax + eax*2]
add eax, 0x9002
mov dword [esp + 8], 2
mov esi, dword [ebp + 8]
jmp 0x2d282c
imul eax, edx, 0xb4
mov ecx, dword [esp + 0x98]
mov ecx, dword [ecx*4 + 0x7a9824]
mov dword [esp + eax + 0x25c], ecx
mov eax, 0x9003
mov dword [esp + 8], 1
imul ebx, edx, 0xb4
mov ecx, dword [esp + ebx + 0x200]
mov edi, edx
mov edx, 0xffcf0200
and ecx, edx
or ecx, eax
xor eax, eax
mov dword [esp + ebx + 0x200], ecx
mov dword [esp + ebx + 0x204], 1
mov ecx, dword [esp + 0x1a8]
movups xmm0, xmmword [ecx]
movups xmmword [esp + ebx + 0x208], xmm0
movsd xmm0, qword [ecx + 0xd]
movsd qword [esp + ebx + 0x215], xmm0
movups xmm0, xmmword [esi]
movups xmmword [esp + ebx + 0x21d], xmm0
movsd xmm0, qword [esi + 0xd]
movsd qword [esp + ebx + 0x22a], xmm0
mov dword [esp + ebx + 0x240], 0x3ffb
mov ecx, 0
test edi, edi
jne 0x2d28b1
mov eax, dword [esi + 0x94]
mov ecx, dword [esi + 0x98]
lea edx, [esp + ebx]
add edx, 0x200
mov dword [esp + ebx + 0x238], eax
mov dword [esp + 0x14], ebx
mov dword [esp + ebx + 0x23c], ecx
movzx eax, byte [edx + 8]
mov dword [esp + 0x1ac], edx
push edx
push eax
call fcn.002992b0
add esp, 8
test eax, eax
je 0x2d47d1
mov edi, eax
push dword [esi + 0x4c]
call fcn.002946a0
add esp, 4
mov ebx, esi
mov esi, eax
sub esi, dword [esp + 0x9c]
mov eax, 0
cmovb esi, eax
mov eax, esi
sub eax, edi
jb 0x2d47d1
mov dword [esp + 0xc0], eax
lea ecx, [esp + 0xc0]
push ecx
push eax
push dword [esp + 0x3c]
push dword [ebx + 0x4c]
call fcn.00293400
add esp, 0x10
test eax, eax
je 0x2d47d1
mov ecx, dword [esp + 0x14]
lea eax, [esp + ecx]
add eax, 0x248
mov edi, dword [esp + 0xc0]
mov dword [eax + 4], edi
mov dword [eax], esi
sub esi, edi
mov dword [esp + ecx + 0x254], esi
mov eax, dword [esp + 0x98]
mov dword [esp + ecx + 0x258], eax
mov ecx, dword [esp + ecx + 0x25c]
xor eax, eax
test cl, 2
mov edx, dword [esp + 0x34]
je 0x2d29a5
mov eax, 1
test cx, cx
js 0x2d299d
mov ecx, dword [ebx + 0xf8]
shr ecx, 7
and ecx, 7
xor eax, eax
mov esi, dword [esp + 8]
bt ecx, esi
setb al
cmp eax, edi
ja 0x2d47d1
mov ecx, dword [esp + 0xc]
mov dword [ecx], ebx
mov ebx, dword [esp + 0x14]
lea ecx, [esp + ebx]
add ecx, 0x1c8
mov dword [esp + 0x44], ecx
mov dword [esp + ebx + 0x1c8], edx
mov dword [esp + ebx + 0x1b4], edi
mov dword [esp + ebx + 0x1c0], eax
mov dword [esp + ebx + 0x1c4], 0
mov dword [esp + ebx + 0x1b8], 0
mov dword [esp + ebx + 0x1bc], 0
and byte [esp + ebx + 0x1cc], 0xfc
mov dword [esp + ebx + 0x1d0], 0
and byte [esp + ebx + 0x1f0], 0xfe
mov esi, edx
shl esi, 4
mov eax, edx
mov ecx, dword [esp + 0x6c]
cmp dword [ecx + esi + 4], edi
jae 0x2d2a63
mov eax, dword [esp + 0x6c]
add eax, esi
push 0xd0
push 0x7a9774
push edi
push dword [eax]
call fcn.0034cae0
add esp, 0x10
test eax, eax
je 0x2d47d1
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx]
mov dword [ecx + esi + 0x130], eax
mov dword [ecx + esi + 0x134], edi
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x14]
mov dword [esp + ebx + 0x1f4], 1
mov dword [esp + ebx + 0x1f8], 0
mov dword [esp + ebx + 0x1fc], 0
mov dword [esp + ebx + 0x260], 0
cmp dword [esp + 0x58], edx
sete byte [esp + 0x18]
mov ecx, 2
cmp eax, 3
ja 0x2d2aa9
mov ecx, dword [eax*4 + 0x7a9858]
lea eax, [esp + ebx]
add eax, 0x25c
mov eax, dword [eax]
mov dword [esp + 0x84], 1
mov esi, dword [ebp + 8]
mov dword [esp + 0x5c], ecx
test dword [esi + ecx*8 + 0xdc], 0xc0000000
jne 0x2d50fc
lea edi, [esp + ebx]
add edi, 0x1f8
push dword [esi + 0x50]
mov dword [esp + 0x3c], eax
call fcn.002d5c90
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
add esp, 4
mov dword [esp + 0x90], edi
mov dword [edi], eax
mov dword [esp + 0x50], eax
test eax, eax
je 0x2d50fc
lea eax, [esp + ecx]
add eax, 0x1b4
mov dword [esp + 8], eax
xor eax, eax
test dl, 8
je 0x2d2b50
test byte [esi + 0xf8], 1
je 0x2d2b50
mov edx, dword [esp + 8]
test byte [edx + 0x18], 1
mov eax, 0
jne 0x2d2b39
mov eax, dword [edx + 0xc]
add eax, dword [edx + 4]
cmp dword [edx], eax
jne 0x2d2c0e
mov edx, dword [esp + 0x38]
xor eax, eax
nop word [eax + eax]
mov dword [esp + 0x28], eax
test edx, 0x200
je 0x2d2e8e
test byte [esi + 0xf8], 2
jne 0x2d2b7a
push 0
push dword [esi + 0x64]
call fcn.002ce300
add esp, 8
test eax, eax
je 0x2d2bf8
xor eax, eax
mov ecx, dword [esp + 8]
test byte [ecx + 0x18], 1
jne 0x2d2b89
mov eax, dword [ecx + 0xc]
mov edx, ecx
mov ecx, dword [ecx]
add eax, dword [edx + 4]
sub ecx, eax
cmp ecx, 2
jb 0x2d2bf8
mov ecx, dword [esp + 0xc]
call fcn.002d5500
mov ecx, esi
mov esi, eax
push dword [ecx + 0x64]
call fcn.002ce2c0
add esp, 4
test esi, esi
je 0x2d50dd
push edx
push eax
push esi
call fcn.002d6690
add esp, 0xc
test eax, eax
je 0x2d2ce7
mov eax, dword [esp + 0x50]
or byte [eax + 0x54], 2
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50dd
mov ecx, dword [esp + 8]
or byte [ecx + 0x18], 1
mov dword [esp + 0x28], 1
jmp 0x2d2d14
mov ecx, dword [esp + 8]
test byte [esi + 0xf8], 4
je 0x2d2d20
jmp 0x2d2d39
mov ecx, dword [esp + 0xc]
call fcn.002d5500
test eax, eax
je 0x2d50dd
push eax
call fcn.002d6a30
add esp, 4
test eax, eax
je 0x2d35b8
mov eax, dword [esp + 0x50]
or byte [eax + 0x54], 1
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50dd
mov eax, dword [esp + 8]
or byte [eax + 0x18], 1
mov eax, 1
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x28], eax
test edx, 0x200
jne 0x2d2b60
jmp 0x2d2e8e
mov eax, dword [ebp + 8]
test byte [eax + 0xf8], 2
jne case.0x2d443f.18
push 0
push dword [eax + 0x64]
call fcn.002ce300
add esp, 8
test eax, eax
jne case.0x2d443f.18
mov eax, dword [ebp + 8]
test byte [eax + 0xf8], 4
jne case.0x2d443f.18
push 0
push dword [eax + 0x68]
call fcn.002ce300
add esp, 8
test eax, eax
jne case.0x2d443f.18
mov eax, dword [ebp + 8]
test byte [eax + 0xf8], 8
jne case.0x2d443f.18
push 0
push dword [eax + 0x6c]
call fcn.002ce300
add esp, 8
test eax, eax
jne case.0x2d443f.18
jmp 0x2d26b4
mov ecx, dword [esp + 8]
test byte [ecx + 0x3c], 1
je 0x2d2d14
mov eax, dword [esp + 0x14]
add eax, esp
add eax, 0x1d4
push eax
call fcn.003503f0
mov ecx, dword [esp + 0xc]
add esp, 4
and byte [ecx + 0x3c], 0xfe
mov dword [ecx + 0x1c], 0
mov esi, dword [ebp + 8]
test byte [esi + 0xf8], 4
jne 0x2d2d39
push 0
push dword [esi + 0x68]
call fcn.002ce300
mov ecx, dword [esp + 0x10]
add esp, 8
test eax, eax
je 0x2d2dde
xor eax, eax
test byte [ecx + 0x18], 1
jne 0x2d2d44
mov eax, dword [ecx + 0xc]
mov edx, ecx
mov ecx, dword [ecx]
add eax, dword [edx + 4]
sub ecx, eax
cmp ecx, 2
jb 0x2d2dde
mov ecx, dword [esp + 0xc]
call fcn.002d5500
mov ecx, esi
mov esi, eax
push dword [ecx + 0x68]
call fcn.002ce2c0
add esp, 4
test esi, esi
je 0x2d50dd
push edx
push eax
push 0
push esi
call fcn.002d6720
add esp, 0x10
test eax, eax
je 0x2d2db2
mov eax, dword [esp + 0x50]
or byte [eax + 0x54], 4
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50dd
mov eax, dword [esp + 8]
or byte [eax + 0x18], 1
mov dword [esp + 0x28], 1
jmp 0x2d2ddb
mov esi, dword [esp + 8]
test byte [esi + 0x3c], 1
je 0x2d2ddb
mov eax, dword [esp + 0x14]
add eax, esp
add eax, 0x1d4
push eax
call fcn.003503f0
add esp, 4
and byte [esi + 0x3c], 0xfe
mov dword [esi + 0x1c], 0
mov esi, dword [ebp + 8]
test byte [esi + 0xf8], 8
jne 0x2d2e00
push 0
push dword [esi + 0x6c]
call fcn.002ce300
mov ecx, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x2d2e8e
xor eax, eax
mov ecx, dword [esp + 8]
test byte [ecx + 0x18], 1
jne 0x2d2e0f
mov eax, dword [ecx + 0xc]
mov edx, ecx
mov ecx, dword [ecx]
add eax, dword [edx + 4]
sub ecx, eax
cmp ecx, 2
jb 0x2d2e8a
mov ecx, dword [esp + 0xc]
call fcn.002d5500
mov ecx, esi
mov esi, eax
push dword [ecx + 0x6c]
call fcn.002ce2c0
add esp, 4
test esi, esi
je 0x2d50dd
push edx
push eax
push 1
push esi
call fcn.002d6720
add esp, 0x10
test eax, eax
je 0x2d2e79
mov eax, dword [esp + 0x50]
or byte [eax + 0x54], 8
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50dd
mov eax, dword [esp + 8]
or byte [eax + 0x18], 1
mov dword [esp + 0x28], 1
jmp 0x2d2e87
mov edi, dword [esp + 8]
test byte [edi + 0x3c], 1
jne 0x2d42bb
mov esi, dword [ebp + 8]
mov ecx, dword [esp + 0x14]
lea eax, [esp + ecx]
add eax, 0x1c4
mov dword [esp + 0x1c], eax
xor eax, eax
movzx ecx, byte [esp + 0x18]
mov al, cl
mov dword [esp + 0x64], eax
push dword [esp + 0x5c]
push dword [esi + 0x54]
call fcn.002ddf70
add esp, 8
test eax, eax
je 0x2d3148
mov esi, eax
movd xmm0, dword [esp + 0x38]
pshufd xmm0, xmm0, 0
pand xmm0, xmmword [0x7a95d0]
pcmpeqd xmm0, xmmword [0x7a9600]
movmskps eax, xmm0
mov ecx, eax
and cl, 2
shr cl, 1
mov byte [esp + 0x3c], cl
mov ecx, eax
and cl, 4
shr cl, 2
mov byte [esp + 0x30], cl
mov dword [esp + 0x68], eax
shr al, 3
mov byte [esp + 0x54], al
mov dword [esp + 0x10], 0
jmp 0x2d2f37
mov eax, dword [esp + 8]
or byte [eax + 0x18], 1
mov dword [esp + 0x28], 1
nop word [eax + eax]
push dword [esp + 0x5c]
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
je 0x2d3122
push esi
call fcn.002dd860
add esp, 4
mov edi, eax
mov ebx, edx
push esi
call fcn.002dd870
add esp, 4
mov dword [esp + 0x24], eax
push esi
call fcn.002dd880
add esp, 4
mov dword [esp + 0x18], eax
mov eax, edi
add eax, 0xfffffff9
mov dword [esp + 0x20], ebx
adc ebx, 0xffffffff
mov edx, 0x14
cmp edx, eax
mov edx, 0
sbb edx, ebx
jb case.0x2d2f7e.1
jmp dword [eax*4 + 0x7a970c]
cmp byte [esp + 0x54], 0
jne 0x2d2f20
cmp dword [esp + 0x10], 0
mov dword [esp + 0x10], 1
mov ecx, dword [esp + 8]
jne 0x2d3020
mov ecx, dword [ebp + 8]
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x84]
push eax
push dword [esp + 0x68]
call fcn.002d5770
mov ecx, dword [esp + 0x10]
add esp, 8
mov dword [esp + 0x10], eax
jmp 0x2d3020
cmp byte [esp + 0x30], 0
mov ecx, dword [esp + 8]
jne 0x2d2f20
jmp 0x2d3020
cmp byte [esp + 0x3c], 0
mov ecx, dword [esp + 8]
jne 0x2d2f20
jmp 0x2d3020
test byte [esp + 0x38], 0x20
je 0x2d2f20
mov eax, dword [esp + 0x1c]
mov dword [eax + 0x9c], 1
mov ecx, dword [esp + 8]
jmp 0x2d3020
test byte [esp + 0x68], 1
mov ecx, dword [esp + 8]
jne 0x2d2f20
mov dword [esp + 0x40], edi
mov edx, dword [ecx]
mov eax, dword [ecx + 0x18]
xor edi, edi
test al, 1
jne 0x2d3032
mov edi, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
add edi, ecx
sub edx, edi
mov edi, dword [esp + 0x18]
cmp edi, edx
ja 0x2d3122
test edi, edi
je 0x2d30e8
test al, 2
jne 0x2d50dd
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov edx, dword [esp + 0x44]
mov edx, dword [edx]
shl edx, 4
lea edi, [eax + edx]
add edi, 0x130
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
lea ebx, [edx + 1]
mov eax, dword [edi + 0xc]
cmp eax, ebx
jae 0x2d30c7
lea ebx, [eax + eax]
test eax, eax
mov eax, 8
cmove ebx, eax
lea eax, [ebx*8]
push 0xbf6
push 0x7a9774
push eax
push dword [edi + 8]
call fcn.0034cae0
add esp, 0x10
test eax, eax
je 0x2d50dd
mov dword [edi + 8], eax
mov dword [edi + 0xc], ebx
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
lea ebx, [edx + 1]
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 4]
jmp 0x2d30ca
mov eax, dword [edi + 8]
mov edi, dword [esp + 0x24]
mov dword [eax + edx*8], edi
mov edi, dword [esp + 0x18]
mov dword [eax + edx*8 + 4], edi
mov eax, dword [esp + 0x1c]
mov dword [eax], ebx
add ecx, edi
mov eax, dword [esp + 8]
mov dword [eax + 4], ecx
push esi
push dword [esp + 0x54]
call fcn.002d5d80
add esp, 8
mov eax, 0x1d
mov ecx, dword [esp + 0x40]
cmp eax, ecx
mov eax, 0
sbb eax, dword [esp + 0x20]
jb 0x2d2f0a
mov eax, 0x3000000d
bt eax, ecx
jb 0x2d2f20
jmp 0x2d2f0a
cmp dword [esp + 0x10], 0
mov esi, dword [ebp + 8]
je 0x2d3148
mov eax, dword [esp + 0x38]
test al, 4
jne 0x2d316a
test eax, 0x100
mov ecx, dword [esp + 8]
jne 0x2d360f
jmp 0x2d4680
mov ecx, esi
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x84]
push eax
push dword [esp + 0x68]
call fcn.002d5770
add esp, 8
mov eax, dword [esp + 0x38]
test al, 4
je 0x2d3134
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov dword [esp + 0x30], 2
cmp ecx, 3
ja 0x2d3188
mov eax, dword [ecx*4 + 0x7a9858]
mov dword [esp + 0x30], eax
xor ebx, ebx
mov eax, dword [esp + 0x90]
mov eax, dword [eax]
mov dword [esp + 0x54], eax
xorps xmm1, xmm1
movaps xmmword [esp + 0xd0], xmm1
movaps xmmword [esp + 0xc0], xmm1
xorps xmm0, xmm0
movsd qword [esp + 0xb0], xmm0
movaps xmmword [esp + 0xa0], xmm1
movaps xmmword [esp + 0x150], xmm1
movaps xmmword [esp + 0x140], xmm1
shl ecx, 4
add ecx, dword [esp + 0x6c]
mov dword [esp + 0x3c], ecx
jmp 0x2d326b
xor ebx, ebx
mov ecx, dword [esp + 8]
or byte [ecx + 0x18], 1
mov dword [esp + 0x144], 0xffffffff
mov dword [esp + 0x140], 0xffffffff
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x148], eax
add eax, dword [esp + 0xa8]
mov dword [esp + 0x14c], ecx
adc ecx, dword [esp + 0xac]
add eax, 0xffffffff
adc ecx, 0xffffffff
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], ecx
and byte [esp + 0x158], 0xfe
lea eax, [esp + 0x140]
push eax
push dword [esp + 0x58]
call fcn.002d5db0
add esp, 8
inc ebx
mov dword [esp + 0x28], 1
test eax, eax
je 0x2d50dd
mov ecx, dword [esp + 8]
test byte [ecx + 0x18], 1
mov eax, 0
mov esi, dword [ebp + 8]
jne 0x2d3280
mov eax, dword [ecx + 0xc]
mov edi, dword [ecx]
add eax, dword [ecx + 4]
sub edi, eax
cmp edi, 4
jb 0x2d35fc
mov dword [esp + 0x70], 2
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x18c]
push eax
lea eax, [esp + 0xc8]
push eax
push ebx
mov eax, dword [esp + 0x40]
push dword [esi + eax*4 + 0x88]
call fcn.00296d70
add esp, 0x14
test eax, eax
je 0x2d35fc
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa0], eax
mov edx, dword [esp + 0xd0]
mov eax, dword [esp + 0xd4]
mov ecx, 0xffffffff
add eax, ecx
cmp edx, 1
sbb eax, ecx
jb 0x2d35fc
mov ebx, edx
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
lea eax, [esp + 0xa0]
push eax
call fcn.002d6300
add esp, 4
test eax, eax
je 0x2d35fc
cmp ebx, 0x3f
mov ecx, 0x3f
cmovb ecx, ebx
mov esi, edi
sub esi, eax
mov edx, 0
cmovb esi, edx
lea edx, [eax + ecx]
cmp edx, edi
cmovbe esi, ecx
mov dword [esp + 0x20], esi
test esi, esi
sete byte [esp + 0x18]
cmp ebx, 0x3fff
mov ecx, 0x3fff
cmovb ecx, ebx
lea edx, [eax + 1]
mov esi, edi
sub esi, edx
mov edx, 0
cmovb esi, edx
lea edx, [eax + ecx]
inc edx
cmp edx, edi
cmovbe esi, ecx
test esi, esi
sete byte [esp + 0x24]
mov dword [esp + 0x68], ebx
cmp ebx, 0x3fffffff
mov ecx, 0x3fffffff
cmovb ecx, ebx
lea ebx, [eax + 3]
mov edx, edi
sub edx, ebx
mov ebx, 0
cmovb edx, ebx
lea ebx, [eax + ecx]
add ebx, 3
cmp ebx, edi
cmovbe edx, ecx
test edx, edx
sete byte [esp + 0x40]
mov ebx, dword [esp + 0x68]
lea ecx, [eax + ebx]
add ecx, 7
mov dword [esp + 0x10], ecx
add eax, 7
mov ecx, edi
sub ecx, eax
mov eax, 0
cmovb ecx, eax
cmp dword [esp + 0x10], edi
cmovbe ecx, ebx
cmp edx, ecx
setb al
or al, byte [esp + 0x40]
cmovne edx, ecx
cmp esi, edx
setb ah
or ah, byte [esp + 0x24]
cmove edx, esi
mov esi, dword [ebp + 8]
mov edi, dword [esp + 0x20]
cmp edi, edx
setb bl
or bl, byte [esp + 0x18]
cmove edx, edi
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], 0
cmp bl, 1
jne 0x2d3435
test al, al
je 0x2d3435
test ah, ah
je 0x2d3435
test ecx, ecx
je 0x2d35fc
push dword [esp + 0x70]
lea eax, [esp + 0x18c]
push eax
push edx
call fcn.002974b0
add esp, 0xc
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
add ecx, 3
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + 0xc]
cmp eax, ecx
jae 0x2d349a
lea esi, [eax + eax]
test eax, eax
mov eax, 8
cmove esi, eax
lea eax, [esi*8]
push 0xbf6
push 0x7a9774
push eax
push dword [edx + 8]
call fcn.0034cae0
add esp, 0x10
test eax, eax
je 0x2d50dd
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], esi
mov ecx, dword [esp + 0xc]
call fcn.002d5500
test eax, eax
je 0x2d50dd
lea ecx, [esp + 0xa0]
push ecx
push eax
call fcn.002d62b0
add esp, 8
test eax, eax
mov esi, dword [ebp + 8]
je 0x2d35cf
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50dd
cmp dword [esp + 0x70], 0
je 0x2d31e0
xor ebx, ebx
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x1c]
jmp 0x2d3520
mov dword [esp + 0x20], edi
mov eax, dword [esi + 8]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*8], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*8 + 4], edi
mov dword [esi], edx
mov ecx, dword [esp + 8]
add dword [ecx + 4], edi
mov edx, esi
inc ebx
cmp ebx, dword [esp + 0x70]
jae 0x2d31e6
mov edi, dword [esp + ebx*8 + 0x18c]
test edi, edi
je 0x2d3515
test byte [ecx + 0x18], 2
jne 0x2d3515
mov eax, dword [esp + ebx*8 + 0x188]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov ecx, dword [esp + 0x44]
mov ecx, dword [ecx]
shl ecx, 4
lea esi, [eax + ecx]
add esi, 0x130
mov ecx, dword [edx]
lea edx, [ecx + 1]
mov eax, dword [esi + 0xc]
cmp eax, edx
jae 0x2d34f0
lea ecx, [eax + eax]
test eax, eax
mov eax, 8
cmove ecx, eax
mov dword [esp + 0x24], ecx
lea eax, [ecx*8]
push 0xbf6
push 0x7a9774
push eax
push dword [esi + 8]
call fcn.0034cae0
add esp, 0x10
test eax, eax
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x1c]
je 0x2d3515
mov dword [esp + 0x20], edi
mov dword [esi + 8], eax
mov ecx, dword [esp + 0x24]
mov dword [esi + 0xc], ecx
mov ecx, dword [edx]
mov esi, edx
lea edx, [ecx + 1]
jmp 0x2d34fb
mov edi, dword [esp + 8]
test byte [edi + 0x3c], 1
jne 0x2d434f
mov ecx, dword [esp + 0x14]
jmp 0x2d2b44
mov eax, dword [esp + 8]
test byte [eax + 0x3c], 1
je 0x2d35fc
mov eax, dword [esp + 0x14]
add eax, esp
add eax, 0x1d4
push eax
call fcn.003503f0
add esp, 4
mov eax, dword [esp + 8]
and byte [eax + 0x3c], 0xfe
mov dword [eax + 0x1c], 0
mov eax, dword [esp + 0x38]
test eax, 0x100
mov ecx, dword [esp + 8]
je 0x2d4680
test byte [esi + 0xf9], 8
je 0x2d4680
push 1
push dword [esi + 0x5c]
lea eax, [esp + 0xa8]
push eax
call fcn.00298390
add esp, 0xc
mov edi, dword [esp + 0xa8]
test edi, edi
je 0x2d42b2
mov eax, dword [esp + 0x14]
add eax, esp
add eax, 0x1fc
mov dword [esp + 0x30], eax
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
lea eax, [esp + 0xa0]
push eax
call fcn.002983f0
add esp, 4
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x68], eax
mov eax, dword [edi + 0xd0]
mov ecx, 0x8fffffff
and eax, ecx
mov dword [edi + 0xd0], eax
mov edx, dword [edi + 0xd4]
mov ecx, edx
and ecx, 0xfffffffe
mov dword [edi + 0xd4], ecx
mov dword [edi + 0x4c], 0
mov dword [edi + 0x48], 0
test dl, 4
je 0x2d3721
mov ecx, dword [esp + 0xc]
call fcn.002d5500
test eax, eax
je 0x2d50dd
movups xmm0, xmmword [edi + 0x20]
movups xmmword [esp + 0xc0], xmm0
lea ecx, [esp + 0xc0]
push ecx
push eax
call fcn.002d6260
add esp, 8
test eax, eax
je 0x2d4379
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50dd
mov eax, dword [esp + 8]
or byte [eax + 0x18], 1
mov eax, dword [edi + 0xd0]
mov ecx, 0x20000000
or eax, ecx
mov dword [edi + 0xd0], eax
mov ecx, dword [edi + 0xd4]
mov dword [esp + 0x28], 1
test cl, 8
mov dword [esp + 0x10], edi
je 0x2d3824
and eax, 0xff00
cmp eax, 0x500
jne 0x2d50dd
mov ecx, dword [esp + 0xc]
call fcn.002d5500
test eax, eax
je 0x2d50dd
movsd xmm0, qword [edi + 0x20]
movsd qword [esp + 0xc0], xmm0
movsd xmm0, qword [edi + 0x30]
movsd qword [esp + 0xc8], xmm0
movzx ecx, byte [edi + 0xd1]
lea edx, [ecx - 3]
cmp edx, 4
jae 0x2d38cb
movsd xmm0, qword [edi + 0x50]
movsd qword [esp + 0xd0], xmm0
lea ecx, [esp + 0xc0]
push ecx
push eax
call fcn.002d6200
add esp, 8
test eax, eax
je 0x2d4379
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50dd
mov eax, dword [esp + 8]
or byte [eax + 0x18], 1
or byte [edi + 0xd3], 0x40
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
mov eax, dword [esp + 0x10]
lea esi, [eax + 0x60]
push esi
call fcn.002cdc70
add esp, 4
cmp eax, edi
sbb edx, ebx
jb 0x2d50dd
mov edi, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
push esi
call fcn.002cdc70
add esp, 4
sub edi, eax
sbb ebx, edx
mov eax, dword [esp + 0x10]
mov dword [eax + 0x48], edi
mov edi, dword [esp + 0x10]
mov dword [edi + 0x4c], ebx
mov eax, dword [edi + 0xd0]
mov dword [esp + 0x28], 1
mov ecx, eax
and ecx, 0xff0000
cmp ecx, 0x10000
jne 0x2d3900
test byte [edi + 0xd4], 2
jne 0x2d385a
lea eax, [edi + 0x80]
push 0
push eax
call fcn.002ce300
add esp, 8
test eax, eax
je 0x2d38fa
mov ecx, dword [esp + 0xc]
call fcn.002d5500
test eax, eax
je 0x2d50dd
mov esi, eax
lea eax, [edi + 0x80]
push eax
call fcn.002ce2c0
add esp, 4
push edx
push eax
push dword [edi + 0x24]
push dword [edi + 0x20]
push esi
call fcn.002d66d0
add esp, 0x14
test eax, eax
je 0x2d4379
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50dd
mov eax, dword [esp + 8]
or byte [eax + 0x18], 1
mov eax, dword [edi + 0xd0]
mov ecx, 0x10000000
or eax, ecx
mov dword [edi + 0xd0], eax
mov dword [esp + 0x28], 1
jmp 0x2d3900
cmp ecx, 2
jne 0x2d50dd
lea ecx, [esp + 0xd0]
push ecx
push dword [edi + 0x58]
mov esi, eax
call fcn.002971e0
add esp, 8
mov ecx, eax
mov eax, esi
test ecx, ecx
jne 0x2d378c
jmp 0x2d50dd
mov eax, dword [edi + 0xd0]
shr eax, 8
mov ecx, eax
add cl, 0xfc
cmp cl, 0xfd
jb 0x2d3c60
movzx eax, al
add eax, 0xfffffff9
cmp eax, 0xfffffffd
ja 0x2d3c60
test byte [edi + 0xd4], 8
jne 0x2d50dd
mov eax, dword [edi + 0x20]
mov dword [esp + 0x1a4], eax
mov eax, dword [edi + 0x24]
mov dword [esp + 0x1a0], eax
mov esi, dword [edi + 0x58]
lea ecx, [edi + 0x60]
xorps xmm0, xmm0
movaps xmmword [esp + 0x130], xmm0
movaps xmmword [esp + 0x120], xmm0
movaps xmmword [esp + 0x110], xmm0
movaps xmmword [esp + 0x100], xmm0
movaps xmmword [esp + 0xf0], xmm0
movaps xmmword [esp + 0xe0], xmm0
movaps xmmword [esp + 0xd0], xmm0
movaps xmmword [esp + 0xc0], xmm0
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x90]
mov eax, dword [eax]
mov dword [esp + 0x19c], eax
mov dword [esp + 0x88], ecx
push ecx
call fcn.002cdc70
add esp, 4
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], edx
mov dword [esp + 0xf8], 2
lea eax, [esp + 0xf8]
push eax
lea eax, [esp + 0xec]
push eax
lea eax, [esp + 0xc8]
push eax
push 0
mov dword [esp + 0x17c], esi
push esi
call fcn.00296d70
add esp, 0x14
mov dword [esp + 0xfc], eax
test eax, eax
je 0x2d3c2d
mov eax, dword [esp + 0x80]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov edx, eax
or edx, ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x60], edx
jne 0x2d3a3b
test byte [esp + 0xdc], 2
je 0x2d50b5
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
push dword [esp + 0x48]
push dword [esp + 0x50]
mov edi, dword [esp + 0x90]
push edi
call fcn.002cda80
add esp, 0xc
mov esi, eax
mov ebx, edx
push edi
call fcn.002cdc70
add esp, 4
add eax, esi
adc edx, ebx
mov ebx, dword [esp + 0xd0]
mov edi, dword [esp + 0xd4]
mov ecx, ebx
or ecx, edi
je 0x2d3af1
mov esi, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
add ebx, esi
adc edi, ecx
cmp eax, ebx
mov ebx, edx
sbb ebx, edi
jae 0x2d3ade
mov edi, eax
sub edi, esi
mov ebx, edx
sbb ebx, ecx
mov dword [esp + 0x18], esi
mov esi, 0
cmovb edi, esi
cmovb ebx, esi
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd0], edi
mov ebx, dword [esp + 0xdc]
and ebx, 0xfffffffd
cmp dword [esp + 0x18], eax
sbb ecx, edx
mov dword [esp + 0xdc], ebx
jae 0x2d3af8
cmp dword [esp + 0xfc], 0
mov edi, dword [esp + 0x10]
jne 0x2d3b13
jmp 0x2d3c2d
mov ebx, dword [esp + 0xdc]
test bl, 2
mov edi, dword [esp + 0x10]
je 0x2d3c2d
cmp dword [esp + 0xfc], 0
je 0x2d3c2d
mov dword [esp + 0x138], 2
lea eax, [esp + 0x138]
push eax
lea eax, [esp + 0x12c]
push eax
lea eax, [esp + 0x108]
push eax
push 1
push dword [esp + 0x17c]
call fcn.00296d70
add esp, 0x14
mov dword [esp + 0x13c], eax
test eax, eax
je 0x2d3c9e
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x114]
mov edx, eax
or edx, ecx
jne 0x2d3b78
test byte [esp + 0x11c], 2
je 0x2d50b5
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], ecx
push dword [esp + 0x48]
push dword [esp + 0x50]
mov edi, dword [esp + 0x90]
push edi
call fcn.002cda80
add esp, 0xc
mov esi, eax
mov ebx, edx
push edi
call fcn.002cdc70
add esp, 4
add eax, esi
adc edx, ebx
mov ebx, dword [esp + 0x110]
mov edi, dword [esp + 0x114]
mov ecx, ebx
or ecx, edi
je 0x2d3c83
mov esi, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
add ebx, esi
adc edi, ecx
cmp eax, ebx
mov ebx, edx
sbb ebx, edi
mov edi, dword [esp + 0x10]
jae 0x2d3c9e
mov edi, eax
sub edi, esi
mov ebx, edx
sbb ebx, ecx
mov dword [esp + 0x18], esi
mov esi, 0
cmovb edi, esi
cmovb ebx, esi
mov dword [esp + 0x114], ebx
mov dword [esp + 0x110], edi
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0x11c]
and ebx, 0xfffffffd
cmp dword [esp + 0x18], eax
sbb ecx, edx
mov dword [esp + 0x11c], ebx
jae 0x2d3c8e
jmp 0x2d3c9e
mov dword [edi + 0x48], 0
mov eax, dword [esp + 0x4c]
add eax, dword [edi + 0x48]
mov dword [esp + 0x4c], eax
mov dword [edi + 0x4c], 0
mov eax, dword [esp + 0x48]
adc eax, dword [edi + 0x4c]
mov dword [esp + 0x48], eax
nop word cs:[eax + eax]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x30]
mov eax, dword [edx]
mov dword [edi + 0x18], eax
mov dword [edx], edi
mov edi, dword [esp + 0xa8]
test edi, edi
jne 0x2d365f
jmp 0x2d4680
mov ebx, dword [esp + 0x11c]
mov edi, dword [esp + 0x10]
test bl, 2
jne 0x2d3c9e
mov dword [esp + 0x13c], 0
mov edx, dword [esp + 0x8c]
shl edx, 4
add edx, dword [esp + 0x6c]
mov dword [esp + 0x168], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x8c], edx
mov eax, dword [esp + 8]
mov ebx, dword [eax]
mov eax, dword [eax + 0x18]
mov ecx, 0
test al, 1
jne 0x2d3cdf
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 0xc]
mov esi, dword [esp + 0x3c]
and esi, 1
mov dword [esp + 0x40], esi
shl esi, 6
mov dword [esp + 0x18], esi
cmp dword [esp + esi + 0xfc], 0
je 0x2d426c
mov edx, dword [esp + 8]
add ecx, dword [edx + 4]
sub ebx, ecx
cmp ebx, 3
jb 0x2d4658
test al, 2
jne 0x2d50b9
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x18]
add eax, esp
add eax, 0xc0
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x20], eax
mov eax, dword [eax + 0x24]
mov dword [esp + 0x54], eax
cmp dword [esp + 0x3c], 0
je 0x2d3e70
mov eax, dword [esp + 0x3c]
inc eax
mov esi, eax
and esi, 1
shl esi, 6
lea ebx, [esp + esi]
add ebx, 0xc0
lea ecx, [esp + esi + 0xf8]
mov dword [esp + esi + 0xf8], 2
lea edx, [esp + esi + 0xe8]
push ecx
push edx
push ebx
push eax
push dword [esp + 0x17c]
call fcn.00296d70
add esp, 0x14
mov dword [esp + esi + 0xfc], eax
test eax, eax
je 0x2d3e70
mov eax, dword [ebx + 0x10]
mov ecx, dword [ebx + 0x14]
mov edx, eax
or edx, ecx
mov edi, ebx
jne 0x2d3dae
test byte [edi + 0x1c], 2
je 0x2d50b5
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ecx
push dword [esp + 0x48]
push dword [esp + 0x50]
mov esi, dword [esp + 0x90]
push esi
call fcn.002cda80
add esp, 0xc
mov dword [esp + 0x78], eax
mov ebx, edx
push esi
call fcn.002cdc70
add esp, 4
add eax, dword [esp + 0x78]
adc edx, ebx
mov ebx, dword [edi + 0x10]
mov esi, edi
mov edi, dword [edi + 0x14]
mov ecx, ebx
or ecx, edi
je 0x2d3e5c
mov dword [esp + 0x78], edx
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x198], ecx
mov dword [esp + 0x164], edx
add ebx, edx
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0x198]
adc edi, ecx
cmp eax, ebx
mov ebx, edx
sbb ebx, edi
mov edi, dword [esp + 0x10]
jae 0x2d3e70
mov edi, eax
sub edi, dword [esp + 0x164]
mov ebx, edx
sbb ebx, ecx
mov edx, 0
cmovb edi, edx
cmovb ebx, edx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], edi
mov edi, dword [esp + 0x10]
mov ebx, dword [esi + 0x1c]
and ebx, 0xfffffffd
cmp dword [esp + 0x164], eax
sbb ecx, dword [esp + 0x78]
mov dword [esi + 0x1c], ebx
jae 0x2d3e63
jmp 0x2d3e70
mov ebx, dword [esi + 0x1c]
mov edi, dword [esp + 0x10]
test bl, 2
jne 0x2d3e70
mov dword [esi + 0x3c], 0
nop
mov ecx, dword [esp + 0x20]
and byte [ecx + 0x1c], 0xfe
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x188], 0
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x18c]
push eax
call fcn.002d5a20
add esp, 8
test eax, eax
je 0x2d4658
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x188]
add edx, eax
mov esi, dword [esp + 0x18c]
adc esi, ecx
mov bl, 1
cmp dword [esp + 0x68], 0
jne 0x2d3efb
mov edi, dword [esp + 0x40]
xor edi, 1
shl edi, 6
cmp dword [esp + edi + 0xfc], 0
mov edi, dword [esp + 0x10]
setne bl
cmp edx, dword [esp + 0x24]
sbb esi, 0
jae 0x2d3f08
test bl, bl
jne 0x2d3f19
mov edx, dword [esp + 0x1c]
cmp dword [edx + 0x9c], 0
je 0x2d4240
mov esi, dword [esp + 0x20]
or byte [esi + 0x1c], 1
mov dword [esp + 0x184], 0
mov dword [esp + 0x180], 0
mov ecx, esi
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x180]
push eax
lea eax, [esp + 0x484]
push eax
call fcn.002d5a20
add esp, 8
test eax, eax
je 0x2d4658
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x184]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov edx, dword [esi + 0x1c]
test dl, 2
je 0x2d3f8e
mov ebx, dword [esp + 0x40]
xor ebx, 1
shl ebx, 6
mov dword [esp + ebx + 0xfc], 0
cmp eax, dword [esp + 0x64]
sbb ecx, dword [esp + 0x54]
jae 0x2d3f9e
and edx, 0xfffffffd
mov dword [esi + 0x1c], edx
lea ecx, [esi + 0x28]
push dword [esi + 0x38]
push ecx
push eax
call fcn.002974b0
add esp, 0xc
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
add ecx, 3
mov edx, dword [esp + 0x8c]
mov eax, dword [edx + 0xc]
cmp eax, ecx
jae 0x2d4003
lea esi, [eax + eax]
test eax, eax
mov eax, 8
cmove esi, eax
lea eax, [esi*8]
push 0xbf6
push 0x7a9774
push eax
push dword [edx + 8]
mov ebx, edx
call fcn.0034cae0
add esp, 0x10
test eax, eax
je 0x2d50b9
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], esi
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
call fcn.002d5500
test eax, eax
je 0x2d50b9
mov ecx, dword [esp + 0x1a4]
mov dword [esi], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esi + 4], ecx
push esi
push eax
call fcn.002d6490
add esp, 8
test eax, eax
je 0x2d462b
mov ecx, dword [esp + 0xc]
call fcn.002d5590
test eax, eax
je 0x2d50b9
cmp dword [esi + 0x38], 0
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x1c]
je 0x2d4140
lea eax, [esp + 0xec]
add dword [esp + 0x18], eax
xor edi, edi
jmp 0x2d40a3
mov dword [esp + 0x40], esi
mov eax, dword [ebx + 8]
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
mov dword [eax + ecx*8], esi
mov esi, dword [esp + 0x40]
mov dword [eax + ecx*8 + 4], esi
mov dword [ebx], edx
mov ecx, dword [esp + 8]
add dword [ecx + 4], esi
mov edx, ebx
inc edi
mov esi, dword [esp + 0x20]
cmp edi, dword [esi + 0x38]
jae 0x2d4140
mov eax, dword [esp + 0x18]
mov esi, dword [eax + edi*8]
test esi, esi
je 0x2d4095
test byte [ecx + 0x18], 2
jne 0x2d4095
mov eax, dword [esp + 0x18]
mov eax, dword [eax + edi*8 - 4]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov ecx, dword [esp + 0x44]
mov ecx, dword [ecx]
shl ecx, 4
lea ebx, [eax + ecx]
add ebx, 0x130
mov ecx, dword [edx]
lea edx, [ecx + 1]
mov eax, dword [ebx + 0xc]
cmp eax, edx
jae 0x2d4070
lea ecx, [eax + eax]
test eax, eax
mov eax, 8
cmove ecx, eax
mov dword [esp + 0x28], ecx
lea eax, [ecx*8]
push 0xbf6
push 0x7a9774
push eax
push dword [ebx + 8]
call fcn.0034cae0
add esp, 0x10
test eax, eax
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x1c]
je 0x2d4095
mov dword [esp + 0x40], esi
mov dword [ebx + 8], eax
mov ecx, dword [esp + 0x28]
mov dword [ebx + 0xc], ecx
mov ecx, dword [edx]
mov ebx, edx
lea edx, [ecx + 1]
jmp 0x2d407b
mov edx, ecx
mov ecx, dword [ecx + 0x18]
mov eax, ecx
or eax, 1
mov dword [edx + 0x18], eax
mov eax, dword [esi + 0x1c]
test al, 1
jne 0x2d415e
or ecx, 3
mov edx, dword [esp + 8]
mov dword [edx + 0x18], ecx
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov esi, edx
or esi, ecx
mov esi, dword [esp + 0x20]
mov edi, dword [esi + 8]
mov ebx, dword [esi + 0xc]
mov dword [esp + 0x18], ebx
je 0x2d41a6
add edx, edi
adc ecx, ebx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x60]
cmp edi, edx
mov esi, dword [esp + 0x2c]
mov ebx, esi
sbb ebx, ecx
cmovb esi, ecx
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x20]
cmovb edi, edx
mov dword [esp + 0x60], edi
mov edi, dword [esp + 0x24]
jmp 0x2d41aa
mov edx, edi
mov ecx, ebx
mov ebx, dword [esi]
mov dword [esp + 0x140], ebx
mov ebx, dword [esi + 4]
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], edi
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14c], edi
add edx, 0xffffffff
adc ecx, 0xffffffff
mov dword [esp + 0x150], edx
mov dword [esp + 0x154], ecx
shr eax, 1
and eax, 1
mov ecx, dword [esp + 0x158]
and ecx, 0xfffffff8
or ecx, eax
mov dword [esp + 0x158], ecx
lea eax, [esp + 0x140]
push eax
push dword [esp + 0x1a0]
call fcn.002d5db0
add esp, 8
test eax, eax
je 0x2d50b5
inc dword [esp + 0x3c]
mov eax, dword [esp + 0x64]
cmp dword [esi + 0x10], eax
mov eax, dword [esi + 0x14]
sbb eax, dword [esp + 0x54]
mov dword [esp + 0x28], 1
mov edi, dword [esp + 0x10]
jae 0x2d3cc6
jmp 0x2d426c
mov esi, dword [esp + 0x20]
mov edx, dword [esi + 0x1c]
and edx, 0xfffffffe
mov dword [esi + 0x1c], edx
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov dword [esp + 0x168], 1
test dl, 2
jne 0x2d3f79
jmp 0x2d3f8e
mov ecx, dword [esp + 0x60]
sub ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x2c]
sbb eax, dword [esp + 0x80]
mov dword [edi + 0x48], ecx
mov dword [edi + 0x4c], eax
mov eax, dword [esp + 0x4c]
add eax, dword [edi + 0x48]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x48]
adc eax, dword [edi + 0x4c]
mov dword [esp + 0x48], eax
cmp dword [esp + 0x168], 0
mov ecx, dword [esp + 8]
je 0x2d3c64
jmp 0x2d4675
mov ecx, dword [esp + 8]
jmp 0x2d4680
mov esi, dword [esp + 0x14]
lea eax, [esp + esi]
add eax, 0x1d4
push eax
call fcn.003503f0
mov ecx, esi
add esp, 4
and byte [edi + 0x3c], 0xfe
mov dword [edi + 0x1c], 0
mov esi, dword [ebp + 8]
jmp 0x2d2e8e
mov eax, edi
test al, 0x40
jne case.0x2d443f.18
nop
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
je 0x2d455e
push esi
call fcn.002dd860
add esp, 4
add eax, 0xfffffff9
adc edx, 0xffffffff
mov ecx, 0x14
cmp ecx, eax
mov ecx, 0
sbb ecx, edx
jb case.0x2d4323.1
jmp dword [eax*4 + 0x7a96b8]
test edi, 0x1000
je case.0x2d4323.20
jmp case.0x2d443f.18
mov eax, edi
test al, al
jns case.0x2d4323.20
jmp case.0x2d443f.18
test edi, 0x800
je case.0x2d4323.20
jmp case.0x2d443f.18
mov esi, dword [esp + 0x14]
lea eax, [esp + esi]
add eax, 0x1d4
push eax
call fcn.003503f0
mov ecx, esi
add esp, 4
and byte [edi + 0x3c], 0xfe
mov dword [edi + 0x1c], 0
mov esi, dword [ebp + 8]
jmp 0x2d2b44
mov ecx, dword [esp + 8]
test byte [ecx + 0x3c], 1
je 0x2d4675
mov eax, dword [esp + 0x14]
add eax, esp
add eax, 0x1d4
push eax
call fcn.003503f0
mov ecx, dword [esp + 0xc]
add esp, 4
and byte [ecx + 0x3c], 0xfe
mov dword [ecx + 0x1c], 0
jmp 0x2d4675
test edi, 0x800
jne case.0x2d443f.18
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
je 0x2d455e
push esi
call fcn.002dd860
add esp, 4
add eax, 0xfffffff9
adc edx, 0xffffffff
mov ecx, 0x14
cmp ecx, eax
mov ecx, 0
sbb ecx, edx
jb case.0x2d43ee.1
jmp dword [eax*4 + 0x7a9664]
mov eax, edi
test al, 0x40
je case.0x2d443f.21
jmp case.0x2d443f.18
test edi, 0x800
jne case.0x2d443f.18
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
je 0x2d455e
push esi
call fcn.002dd860
add esp, 4
add eax, 0xfffffff9
adc edx, 0xffffffff
mov ecx, 0x14
cmp ecx, eax
mov ecx, 0
sbb ecx, edx
jb case.0x2d443f.1
jmp dword [eax*4 + 0x7a9610]
mov eax, edi
test al, 0x40
je case.0x2d443f.0
jmp case.0x2d443f.18
test al, al
js 0x2d44c6
test al, 0x40
jne 0x2d4533
test eax, 0x800
jne 0x2d449a
push esi
call fcn.002dd860
add esp, 4
mov ecx, eax
xor ecx, 7
or ecx, edx
je case.0x2d443f.18
xor eax, 0x1b
or eax, edx
je case.0x2d443f.18
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
jne 0x2d4464
jmp 0x2d455e
push esi
call fcn.002dd860
add esp, 4
and eax, 0xfffffffe
xor eax, 0x18
or eax, edx
jne case.0x2d443f.18
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
jne 0x2d449a
jmp 0x2d455e
test al, 0x40
jne 0x2d45da
test eax, 0x800
je 0x2d450b
push esi
call fcn.002dd860
add esp, 4
xor eax, 0x18
or eax, edx
jne case.0x2d443f.18
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
jne 0x2d44d5
jmp 0x2d455e
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
je 0x2d455e
push esi
call fcn.002dd860
add esp, 4
mov ecx, 0x1b
cmp ecx, eax
mov ecx, 0
sbb ecx, edx
jb 0x2d44fb
mov ecx, 0xa000080
bt ecx, eax
jae 0x2d44fb
jmp case.0x2d443f.18
test eax, 0x800
je 0x2d45b2
push esi
call fcn.002dd860
add esp, 4
xor eax, 0x19
or eax, edx
jne case.0x2d443f.18
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
jne 0x2d453a
test edi, 0x100
je 0x2d474d
mov eax, dword [ebp + 8]
test byte [eax + 0xf9], 8
je 0x2d474d
push 0
push dword [eax + 0x5c]
lea eax, [esp + 0xc8]
push eax
call fcn.00298390
add esp, 0xc
cmp dword [esp + 0xc8], 0
jne case.0x2d443f.18
jmp 0x2d474d
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
je 0x2d455e
push esi
call fcn.002dd860
add esp, 4
mov ecx, 0x1b
cmp ecx, eax
mov ecx, 0
sbb ecx, edx
jb 0x2d45a2
mov ecx, 0x9000080
bt ecx, eax
jae 0x2d45a2
jmp case.0x2d443f.18
test eax, 0x800
je 0x2d4603
push esi
call fcn.002dd860
add esp, 4
jmp case.0x2d443f.18
push ebx
push esi
call fcn.002ddf90
add esp, 8
mov esi, eax
test eax, eax
je 0x2d455e
push esi
call fcn.002dd860
add esp, 4
mov ecx, 0x1b
cmp ecx, eax
mov ecx, 0
sbb ecx, edx
jb 0x2d45ef
mov ecx, 0xb000080
bt ecx, eax
jae 0x2d45ef
jmp case.0x2d443f.18
mov eax, dword [esp + 8]
test byte [eax + 0x3c], 1
je 0x2d4658
mov eax, dword [esp + 0x14]
add eax, esp
add eax, 0x1d4
push eax
call fcn.003503f0
add esp, 4
mov eax, dword [esp + 8]
and byte [eax + 0x3c], 0xfe
mov dword [eax + 0x1c], 0
mov ecx, dword [esp + 0x60]
sub ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x2c]
sbb eax, dword [esp + 0x80]
mov dword [edi + 0x48], ecx
mov dword [edi + 0x4c], eax
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x30]
mov eax, dword [edx]
mov dword [edi + 0x18], eax
mov dword [edx], edi
mov eax, dword [esp + 0x28]
or byte [ecx + 0x18], 1
mov esi, eax
test eax, eax
je 0x2d475a
mov dword [esp + 0x84], 0
shl esi, 3
and esi, 8
mov eax, dword [esp + 0x14]
add eax, esp
add eax, 0x254
mov dword [esp + 0xc], eax
mov eax, dword [eax]
mov ecx, dword [esp + 8]
add eax, dword [ecx + 4]
mov edi, dword [esp + 0x50]
mov dword [edi + 8], eax
mov edx, dword [ebp + 8]
mov ebx, dword [esp + 0x5c]
movsd xmm0, qword [edx + ebx*8 + 0xd8]
movsd qword [edi], xmm0
mov eax, dword [edi + 0x20]
and eax, 0xffffffc0
xor ecx, ecx
cmp dword [esp + 0x84], 0
sete cl
or eax, esi
lea eax, [eax + ecx*4]
or eax, ebx
mov dword [edi + 0x20], eax
push dword [edx + 0x7c]
call dword [edx + 0x78]
add esp, 4
mov dword [edi + 0x14], edx
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x1ac]
movzx eax, byte [eax]
mov byte [edi + 0x50], al
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x9c], 0
mov eax, 1
mov ecx, dword [esp + 0x94]
cmovne ecx, eax
mov dword [esp + 0x94], ecx
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 8]
add eax, dword [ecx + 4]
mov ecx, dword [esp + 0xc]
add eax, dword [ecx]
mov ecx, dword [esp + 0x17c]
mov dword [ecx], eax
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x58]
jmp 0x2d2532
mov eax, dword [esp + 0x38]
test al, 2
jne 0x2d4769
xor esi, esi
jmp 0x2d46a3
test ax, ax
mov esi, 0
js 0x2d4794
mov eax, 1
mov ecx, dword [esp + 0x5c]
shl eax, cl
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0xf8]
shr ecx, 7
and eax, ecx
test al, 7
je 0x2d46a3
mov ecx, dword [esp + 0xc]
call fcn.002d5500
test eax, eax
je 0x2d50dd
push eax
call fcn.002d5fe0
add esp, 4
test eax, eax
je 0x2d50dd
mov ecx, dword [esp + 0xc]
call fcn.002d5590
mov esi, 1
test eax, eax
jne 0x2d4692
jmp 0x2d50dd
mov esi, dword [esp + 0x1b8]
mov eax, dword [esp + 0x1f4]
test eax, eax
sete cl
test esi, esi
sete dl
or dl, cl
cmp dl, 1
jne 0x2d481a
cmp dword [esp + 0x94], 0
jne 0x2d481a
mov esi, dword [ebp + 8]
lea eax, [esi + 0x2c]
mov dword [esp + 0x20], eax
lea eax, [esi + 0xa4]
mov dword [esp + 0x5c], eax
xor ecx, ecx
mov dword [esp + 0xc], 0
jmp 0x2d4868
test esi, esi
sete cl
test eax, eax
sete al
or al, cl
je 0x2d4cfe
mov edi, 4
xor esi, esi
cmp dword [esp + 0x2a8], 0
jne 0x2d4d9b
jmp 0x2d4e80
cmp dword [ebx + 8], 0
setne al
movzx eax, al
mov dword [esi + 4], eax
mov dword [ebx + 0x48], 0
inc dword [esp + 0xc]
inc ecx
cmp ecx, 4
je 0x2d4e3c
imul eax, ecx, 0xb4
cmp dword [esp + eax + 0x1f4], 0
je 0x2d485e
lea edx, [esp + eax]
add edx, 0x1b0
cmp dword [edx + 8], 0
je 0x2d485e
mov esi, dword [edx + 0x18]
cmp esi, 4
jae 0x2d5104
mov dword [esp + 0x18], ecx
mov edi, dword [esi*4 + 0x7a9858]
mov eax, dword [edx + 0x48]
mov dword [esp + 8], eax
lea eax, [edx + 0x50]
mov dword [esp + 0xc0], eax
mov eax, esi
shl eax, 4
mov ecx, dword [esp + 0x6c]
mov eax, dword [ecx + eax + 8]
mov dword [esp + 0xc4], eax
mov eax, dword [edx + 0x14]
mov dword [esp + 0xc8], eax
mov dword [esp + 0x24], esi
lea eax, [esi + esi*2]
mov ecx, dword [esp + 0x178]
mov eax, dword [ecx + eax*4 + 0x7a9818]
mov dword [esp + 0x44], eax
mov dword [esp + 0xd0], 0
mov esi, edx
mov ebx, dword [esp + 0x20]
push ebx
call fcn.002ec780
add esp, 4
test eax, eax
cmovne eax, ebx
mov ebx, esi
mov dword [esp + 0xcc], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + edi*8 + 0xd8]
mov dword [esp + 0x1c], edi
mov ecx, dword [ecx + edi*8 + 0xdc]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], 1
mov esi, dword [esi + 0x4c]
jmp 0x2d4953
mov esi, dword [esi + 0x18]
test esi, esi
je 0x2d49c0
mov eax, dword [esi + 0xd0]
test eax, 0x60000000
je 0x2d4950
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
movsd xmm0, qword [0x7a95e0]
movups xmmword [esp + 0x148], xmm0
mov ecx, dword [esp + 0x158]
shr eax, 0x1c
and ecx, 0xfffffff8
and eax, 6
or eax, ecx
mov dword [esp + 0x158], eax
lea eax, [esp + 0x140]
push eax
push dword [esp + 0xc]
call fcn.002d5db0
add esp, 8
test eax, eax
jne 0x2d4950
jmp 0x2d5104
push dword [esp + 8]
push dword [esp + 0x60]
call fcn.002de050
add esp, 8
test eax, eax
je 0x2d5104
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x1c]
add dword [eax + ecx*8 + 0xd8], 1
adc dword [eax + ecx*8 + 0xdc], 0
lea ecx, [esp + 0xc0]
push ecx
push dword [eax + 0x4c]
call fcn.00293450
add esp, 8
test eax, eax
je 0x2d4e46
mov esi, dword [ebx + 0x4c]
mov edi, 1
jmp 0x2d4a23
mov esi, dword [esi + 0x18]
test esi, esi
je 0x2d4b40
mov eax, dword [esi + 0xd0]
test eax, 0x10000000
jne 0x2d4af0
test eax, 0x20000000
jne 0x2d4b19
test eax, 0x40000000
je 0x2d4a55
and byte [esi + 0xd4], 0xf7
mov eax, dword [esi + 0x48]
mov ecx, dword [esi + 0x4c]
mov edx, eax
or edx, ecx
je 0x2d4a85
lea edx, [esi + 0x60]
push ecx
push eax
push edx
call fcn.002cdb50
add esp, 0xc
test eax, eax
je 0x2d4b30
mov dword [esi + 0x4c], 0
mov dword [esi + 0x48], 0
push esi
mov eax, dword [ebp + 8]
push dword [eax + 0x5c]
call fcn.00297a70
add esp, 8
movzx eax, byte [esi + 0xd1]
add al, 0xfc
cmp al, 0xfd
jb 0x2d4a20
push dword [esi + 0x58]
call fcn.00296f60
add esp, 4
test eax, eax
jne 0x2d4a20
push 0
push dword [esi + 0x58]
call fcn.002971e0
add esp, 8
test eax, eax
je 0x2d4a20
push esi
mov eax, dword [ebp + 8]
push dword [eax + 0x5c]
call fcn.00297e50
add esp, 8
jmp 0x2d4a20
and byte [esi + 0xd4], 0xfd
lea eax, [esi + 0x80]
push 1
push eax
call fcn.002ce300
add esp, 8
mov eax, dword [esi + 0xd0]
test eax, 0x20000000
je 0x2d4a47
and byte [esi + 0xd4], 0xfb
test eax, 0x40000000
jne 0x2d4a4e
jmp 0x2d4a55
xor edi, edi
jmp 0x2d4a77
mov eax, dword [esp + 8]
test byte [eax + 0x20], 8
je 0x2d4b66
mov eax, 0xfffffffe
mov ecx, dword [esp + 0x1c]
rol eax, cl
shl eax, 7
or eax, 0xfffffc7f
mov ecx, dword [ebp + 8]
and dword [ecx + 0xf8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x54]
test al, 1
mov esi, dword [ebp + 0xc]
jne 0x2d4ba3
test al, 2
jne 0x2d4bb8
test al, 4
jne 0x2d4bda
test al, 8
jne 0x2d4bfc
test al, 0x10
jne 0x2d4c22
test al, 0x20
jne 0x2d4c4b
mov eax, dword [esp + 8]
test byte [eax + 0x20], 8
jne 0x2d4c5f
jmp 0x2d4cc0
mov eax, dword [ebp + 8]
and byte [eax + 0xf8], 0xfe
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x54]
test al, 2
je 0x2d4b78
mov eax, dword [ebp + 8]
and byte [eax + 0xf8], 0xfd
push 1
push dword [eax + 0x64]
call fcn.002ce300
add esp, 8
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x54]
test al, 4
je 0x2d4b7c
mov eax, dword [ebp + 8]
and byte [eax + 0xf8], 0xfb
push 1
push dword [eax + 0x68]
call fcn.002ce300
add esp, 8
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x54]
test al, 8
je 0x2d4b80
mov eax, dword [ebp + 8]
and byte [eax + 0xf8], 0xf7
push 1
push dword [eax + 0x6c]
call fcn.002ce300
add esp, 8
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x54]
test al, 0x10
je 0x2d4b88
mov eax, 0xfffffffe
mov ecx, dword [esp + 0x1c]
rol eax, cl
shl eax, 4
or eax, 0xffffff8f
mov ecx, dword [ebp + 8]
and dword [ecx + 0xf8], eax
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x54]
test al, 0x20
je 0x2d4b90
mov eax, dword [ebp + 8]
and byte [eax + 0xf9], 0xfb
mov eax, dword [esp + 8]
test byte [eax + 0x20], 8
je 0x2d4cc0
mov eax, dword [ebp + 8]
push dword [eax + 0x58]
call fcn.002dce40
add esp, 4
mov ecx, dword [esp + 0x24]
cmp ecx, 1
je 0x2d4c84
test ecx, ecx
jne 0x2d4c93
mov ecx, dword [eax]
mov edx, eax
test ecx, ecx
jne 0x2d4c90
jmp 0x2d4c93
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x2d4c93
mov edx, eax
add edx, 4
dec ecx
mov dword [edx], ecx
test dword [esp + 0x44], 0x2000
je 0x2d4cc0
mov ecx, dword [esp + 0x1c]
mov ecx, dword [eax + ecx*4 + 8]
test ecx, ecx
je 0x2d4cc0
dec ecx
mov edx, dword [esp + 0x1c]
mov dword [eax + edx*4 + 8], ecx
nop word cs:[eax + eax]
test edi, edi
je 0x2d4e46
mov al, 1
cmp dword [esi], 0
jne 0x2d4cdb
mov eax, dword [ebx + 0x48]
movzx eax, byte [eax + 0x20]
and al, 8
shr al, 3
movzx eax, al
mov dword [esi], eax
mov ecx, dword [esp + 0x18]
cmp ecx, 1
jne 0x2d4853
cmp dword [ebx + 0x44], 0
jne 0x2d4846
xor eax, eax
jmp 0x2d484d
mov eax, dword [esp + 0x1c8]
mov ecx, dword [esp + 0x1cc]
add ecx, ecx
and ecx, 4
test dword [esp + 0x25c], 0x4000
mov edi, 4
cmovne edi, ecx
test eax, eax
je 0x2d4d86
lea ecx, [esp + 0xc0]
push ecx
push esi
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x4c]
call fcn.002933b0
add esp, 0x10
test eax, eax
je 0x2d4e52
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x200]
mov dword [esp + 0x240], eax
movzx eax, byte [esp + 0x208]
push ecx
push eax
call fcn.002992b0
add esp, 8
add eax, dword [esp + 0xc0]
mov esi, dword [esp + 0x1b8]
sub eax, esi
mov dword [esp + 0x254], eax
add esi, dword [esp + 0x254]
cmp dword [esp + 0x2a8], 0
je 0x2d4e80
mov ecx, dword [esp + 0x26c]
test ecx, ecx
je 0x2d4e80
cmp edi, 4
jne 0x2d4dd1
mov edi, 4
test byte [esp + 0x311], 0x40
je 0x2d4dd1
movzx eax, byte [esp + 0x280]
and al, 2
shr al, 1
movzx eax, al
lea edi, [eax + eax*2]
inc edi
mov eax, dword [esp + 0x27c]
test eax, eax
je 0x2d4e77
lea edx, [esp + 0xc0]
push edx
push ecx
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x4c]
call fcn.002933b0
add esp, 0x10
test eax, eax
je 0x2d4e70
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x2b4]
mov dword [esp + 0x2f4], eax
movzx eax, byte [esp + 0x2bc]
push ecx
push eax
call fcn.002992b0
add esp, 8
add eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x26c]
sub eax, ecx
mov dword [esp + 0x308], eax
jmp 0x2d4e77
mov esi, 1
jmp 0x2d5106
mov dword [ebx + 0x48], 0
jmp 0x2d5104
mov esi, dword [esp + 0x1b8]
add esi, dword [esp + 0x254]
cmp dword [esp + 0x2a8], 0
jne 0x2d4d9b
jmp 0x2d4e80
mov ecx, dword [esp + 0x26c]
add esi, dword [esp + 0x308]
add esi, ecx
cmp dword [esp + 0x35c], 0
je 0x2d4f36
mov ecx, dword [esp + 0x320]
test ecx, ecx
je 0x2d4f36
cmp edi, 4
jne 0x2d4ebf
mov edi, 4
test byte [esp + 0x3c5], 0x40
je 0x2d4ebf
movzx edi, byte [esp + 0x334]
and edi, 2
add edi, 2
mov eax, dword [esp + 0x330]
test eax, eax
je 0x2d4f2d
lea edx, [esp + 0xc0]
push edx
push ecx
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x4c]
call fcn.002933b0
add esp, 0x10
test eax, eax
je 0x2d4f26
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x368]
mov dword [esp + 0x3a8], eax
movzx eax, byte [esp + 0x370]
push ecx
push eax
call fcn.002992b0
add esp, 8
add eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x320]
sub eax, ecx
mov dword [esp + 0x3bc], eax
jmp 0x2d4f2d
mov ecx, dword [esp + 0x320]
add esi, dword [esp + 0x3bc]
add esi, ecx
cmp dword [esp + 0x410], 0
je 0x2d4fed
mov ecx, dword [esp + 0x3d4]
test ecx, ecx
je 0x2d4fed
cmp edi, 4
jne 0x2d4f76
mov edi, 4
test byte [esp + 0x479], 0x40
je 0x2d4f76
movzx eax, byte [esp + 0x3e8]
and al, 2
cmp al, 1
sbb edi, 0
mov eax, dword [esp + 0x3e4]
test eax, eax
je 0x2d4fe4
lea edx, [esp + 0xc0]
push edx
push ecx
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x4c]
call fcn.002933b0
add esp, 0x10
test eax, eax
je 0x2d4fdd
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x41c]
mov dword [esp + 0x45c], eax
movzx eax, byte [esp + 0x424]
push ecx
push eax
call fcn.002992b0
add esp, 8
add eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x3d4]
sub eax, ecx
mov dword [esp + 0x470], eax
jmp 0x2d4fe4
mov ecx, dword [esp + 0x3d4]
add esi, dword [esp + 0x470]
add esi, ecx
cmp edi, 4
je 0x2d507b
cmp esi, 0x4af
ja 0x2d507b
imul eax, edi, 0xb4
mov dword [esp + 0xc], 0
cmp dword [esp + eax + 0x1f4], 0
je 0x2d5104
lea edi, [esp + eax]
add edi, 0x1b0
cmp dword [edi + 0x48], 0
je 0x2d5104
mov ecx, edi
call fcn.002d5500
test eax, eax
je 0x2d5104
mov ebx, 0x4b0
sub ebx, esi
push ebx
push eax
call fcn.002d5fc0
add esp, 8
test eax, eax
je 0x2d5096
mov ecx, edi
call fcn.002d5590
mov esi, 0
test eax, eax
je 0x2d5106
mov eax, dword [edi + 0x48]
add dword [eax + 8], ebx
or byte [eax + 0x20], 4
mov eax, dword [edi + 0x48]
or dword [eax + 0x20], 4
jmp 0x2d47fa
cmp esi, 0x4b0
jae 0x2d47fa
mov esi, 1
mov dword [esp + 0xc], 0
jmp 0x2d5106
test byte [edi + 0x40], 1
je 0x2d5104
lea eax, [edi + 0x24]
push eax
call fcn.003503f0
add esp, 4
and byte [edi + 0x40], 0xfe
mov dword [edi + 0x20], 0
jmp 0x2d5104
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x60]
sub ecx, dword [esp + 0x7c]
sbb eax, dword [esp + 0x80]
mov dword [edi + 0x48], ecx
mov dword [edi + 0x4c], eax
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx]
mov dword [edi + 0x18], eax
mov dword [ecx], edi
push dword [esp + 0x50]
mov eax, dword [ebp + 8]
push dword [eax + 0x50]
call fcn.002d5d50
add esp, 8
mov eax, dword [esp + 0x90]
mov dword [eax], 0
mov dword [esp + 0xc], 0
xor esi, esi
mov eax, dword [ebp + 8]
push dword [eax + 0x4c]
call fcn.00294270
add esp, 4
cmp dword [esp + 0x1f4], 0
je 0x2d5186
test byte [esp + 0x1f0], 1
je 0x2d514b
lea eax, [esp + 0x1d4]
push eax
call fcn.003503f0
add esp, 4
and byte [esp + 0x1f0], 0xfe
mov dword [esp + 0x1d0], 0
mov dword [esp + 0x1b0], 0
mov dword [esp + 0x1f4], 0
mov eax, dword [esp + 0x1f8]
test eax, eax
je 0x2d5186
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x50]
call fcn.002d5d50
add esp, 8
mov dword [esp + 0x1f8], 0
cmp dword [esp + 0x2a8], 0
je 0x2d51f8
test byte [esp + 0x2a4], 1
je 0x2d51bd
lea eax, [esp + 0x288]
push eax
call fcn.003503f0
add esp, 4
and byte [esp + 0x2a4], 0xfe
mov dword [esp + 0x284], 0
mov dword [esp + 0x264], 0
mov dword [esp + 0x2a8], 0
mov eax, dword [esp + 0x2ac]
test eax, eax
je 0x2d51f8
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x50]
call fcn.002d5d50
add esp, 8
mov dword [esp + 0x2ac], 0
cmp dword [esp + 0x35c], 0
je 0x2d526a
test byte [esp + 0x358], 1
je 0x2d522f
lea eax, [esp + 0x33c]
push eax
call fcn.003503f0
add esp, 4
and byte [esp + 0x358], 0xfe
mov dword [esp + 0x338], 0
mov dword [esp + 0x318], 0
mov dword [esp + 0x35c], 0
mov eax, dword [esp + 0x360]
test eax, eax
je 0x2d526a
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x50]
call fcn.002d5d50
add esp, 8
mov dword [esp + 0x360], 0
cmp dword [esp + 0x410], 0
je 0x2d52d1
test byte [esp + 0x40c], 1
je 0x2d52a1
lea eax, [esp + 0x3f0]
push eax
call fcn.003503f0
add esp, 4
and byte [esp + 0x40c], 0xfe
mov dword [esp + 0x3ec], 0
mov dword [esp + 0x3cc], 0
mov dword [esp + 0x410], 0
mov eax, dword [esp + 0x414]
test eax, eax
je 0x2d52d1
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x50]
call fcn.002d5d50
add esp, 8
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0xc]
mov dword [eax + 8], ecx
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
add byte [ebp + ebp], al
inc esi
inc esp
sub eax, 0x2d279400
add byte [eax], al
inc esp
sub eax, 0x2d279400
add byte [ebx - 0x50ffd2bd], bh
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
scasd eax, dword es:[edi]
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
inc ebx
sub eax, 0x2d43af00
add ch, dh
inc ebx
sub eax, 0x2d43bb00
add byte [edi - 0x6bffd2bd], ch
daa
sub eax, 0x2d432a00
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
inc edx
inc ebx
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add ch, ah
inc edx
sub eax, 0x2d433700
add byte [edx + 0x43], al
sub eax, 0x2d42f000
add byte [ebp + 0x11002d2f], al
scasd eax, dword es:[edi]
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
inc ebx
sub eax, 0x2d43af00
add byte [edi - 0x50ffd2bd], ch
inc ebx
sub eax, 0x2d43af00
add ch, dh
inc ebx
sub eax, 0x2d43bb00
add byte [edi - 0x6bffd2bd], ch
daa
sub eax, 0x2d432a00
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
inc edx
inc ebx
inc edx
inc ebx
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add byte [edx + 0x43], al
sub eax, 0x2d434200
add ch, ah
inc edx
sub eax, 0x2d433700
add byte [edx + 0x43], al
sub eax, 0x2d42f000
add byte [ebp + 0x11002d2f], al
xor byte [0x2d301100], ch
add byte [ecx], dl
adc dword [eax], esi
sub eax, 758124800
adc dword [eax], esi
sub eax, 758124800
add byte [ecx], dl
xor byte [0x2d301100], ch
add byte [ecx], dl
xor byte [0x2d301100], ch
add byte [ecx], dl
xor byte [0x2d301100], ch
add byte [ecx], dl
xor byte [0x2d301100], ch
add byte [ecx], dl
xor byte [0x2d301100], ch
add byte [ecx], dl
xor byte [0x2d301100], ch
add cl, ah
das
sub eax, 0x2d2fd000
add byte [ecx], dl
xor byte [0x2d2ff200], ch
add byte [eax + eax], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or al, 0
add byte [eax], al
jae 0x7a97e9
insb byte es:[edi], dx
das
jno 0x7a97ef
imul esp, dword [ebx + 0x2f], 0x63697571
pop edi
je 0x7a97fc
jo 0x7a97b4
arpl word [eax], ax
outsd dx, dword [esi]
jae 0x7a97fe
insb byte es:[edi], dx
pop edi
jno 0x7a9804
imul esp, dword [ebx + 0x5f], 0x705f7874
popal
arpl word [ebx + 0x65], bp
je 0x7a9805
jae 0x7a9803
jb 0x7a97ff
outsb dx, byte [esi]
ja 0x7a97a4
outsd dx, dword [esi]
jae 0x7a981a
insb byte es:[edi], dx
pop edi
jno 0x7a9820
imul esp, dword [ebx + 0x5f], 0x705f7874
popal
arpl word [ebx + 0x65], bp
je 0x7a9821
imul esp, dword [ebp + 0x74], 0x69
jae 0x7a981f
jb 0x7a981b
jae 0x7a9823
je 0x7a981f
arpl word [ebp + 0x72], si
pop edi
arpl word fs:[ecx + 0x64], bp
add byte [edi + 0x73], ch
jae 0x7a9839
pop edi
jno 0x7a9845
imul esp, dword [ebx + 0x5f], 0x705f7874
popal
arpl word [ebx + 0x65], bp
je 0x7a9846
jae 0x7a9844
jb 0x7a9840
jae 0x7a9848
je 0x7a9844
arpl word [ebp + 0x72], si
pop edi
jae 0x7a984e
imul esp, dword [eax + eax + 0x6f], 0x5f6c7373
jae 0x7a9864
insb byte es:[edi], dx
pop edi
jno 0x7a986a
imul esp, dword [ebx + 0x5f], 0x705f7874
popal
arpl word [ebx + 0x65], bp
je 0x7a986b
imul esp, dword [ebp + 0x74], 0x69
je 0x7a986b
jae 0x7a9869
jb 0x7a9865
jb 0x7a9865
pop edi
imul esi, dword fs:[ebx + 0x63], 0x5f647261
outsb dx, byte gs:[esi]
arpl word [edi + 0x6c], bx
jbe 0x7a987b
insb byte es:[edi], dx
add byte [edi], al
add byte fs:[eax], al
add byte [eax], al
add byte [edi], al
pop es
in al, 1
add byte [ecx], al
add dword [eax], esp
add dword [eax], eax
pop es
and byte [ecx], al
add byte [edi], al
add byte fs:[eax], al
pop es
in al, 1
add byte [ecx], al
and byte [ecx], al
add dl, al
inc edi
add byte [eax], al
ret 0x1c7
add byte [ecx], al
add bh, ch
jg 0x7a983f
add bh, ch
out dx, eax
inc dword [ecx]
add byte [ecx], al
add dword [eax], esp
and byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [edx], al
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add al, byte [eax]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add al, byte [eax]
add byte [eax], al
add al, byte [eax]
add byte [eax], al
jae 0x7a98dd
add byte [eax], al
add byte [ebx + 0x73], dh
jae 0x7a98d7
insb byte es:[edi], dx
das
jno 0x7a98e3
imul esp, dword [ebx + 0x2f], 0x63697571
pop edi
je 0x7a98f0
jo 0x7a98e3
insd dword es:[edi], dx
arpl word cs:[eax], ax
jae 0x7a98f3
insb byte es:[edi], dx
das
jno 0x7a98f9
imul esp, dword [ebx + 0x2f], 0x63697571
pop edi
je 0x7a9907
jo 0x7a98f5
jae 0x7a98c0
arpl word [eax], ax
outsd dx, dword [esi]
jae 0x7a990a
insb byte es:[edi], dx
pop edi
jno 0x7a9910
imul esp, dword [ebx + 0x5f], 0x5f6e6567
jb 0x7a9905
outsb dx, byte [esi]
pop edi
arpl word [edi + 0x6e], bp
outsb dx, byte [esi]
pop edi
imul esp, dword [eax + eax], 0x44444150
dec ecx
dec esi
inc edi
add byte [eax + 0x49], dl
dec esi
inc edi
add byte [ecx + 0x43], al
dec ebx
pop edi
push edi
dec ecx
push esp
dec eax
dec edi
push ebp
push esp
pop edi
inc ebp
inc ebx
dec esi
add byte [ecx + 0x43], al
dec ebx
pop edi
push edi
dec ecx
push esp
dec eax
pop edi
inc ebp
inc ebx
dec esi
add byte [edx + 0x45], dl
push ebx
inc ebp
push esp
pop edi
push ebx
push esp
push edx
inc ebp
inc ecx
dec ebp
add byte [ebx + 0x54], dl
dec edi
push eax
pop edi
push ebx
inc ebp
dec esi
inc esp
dec ecx
dec esi
inc edi
add byte [ebx + 0x52], al
push edx
pop ecx
push eax
push esp
dec edi
add byte [esi + 0x45], cl
push edi
pop edi
push esp
dec edi
dec ebx
inc ebp
dec esi
add byte [ebp + 0x41], cl
dec ebp
inc ecx
pop eax
pop edi
inc esp
inc ecx
push esp
inc ecx
add byte [ebp + 0x41], cl
pop eax
pop edi
push ebx
push esp
push edx
inc ebp
inc ecx
dec ebp
pop edi
inc esp
inc ecx
push esp
inc ecx
add byte [ebp + 0x41], cl
pop eax
pop edi
push ebx
push esp
push edx
inc ebp
inc ecx
dec ebp
push ebx
pop edi
inc edx
dec ecx
inc esp
dec ecx
add byte [ebp + 0x41], cl
pop eax
pop edi
push ebx
push esp
push edx
inc ebp
inc ecx
dec ebp
push ebx
pop edi
push ebp
dec esi
dec ecx
add byte [ecx + eax*2 + 0x54], al
inc ecx
pop edi
inc edx
dec esp
dec edi
inc ebx
dec ebx
inc ebp
inc esp
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
inc esp
inc ecx
push esp
inc ecx
pop edi
inc edx
dec esp
dec edi
inc ebx
dec ebx
inc ebp
inc esp
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
push ebx
pop edi
inc edx
dec esp
dec edi
inc ebx
dec ebx
inc ebp
inc esp
pop edi
inc edx
dec ecx
inc esp
dec ecx
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
push ebx
pop edi
inc edx
dec esp
dec edi
inc ebx
dec ebx
inc ebp
inc esp
pop edi
push ebp
dec esi
dec ecx
add byte [esi + 0x45], cl
push edi
pop edi
inc ebx
dec edi
dec esi
dec esi
pop edi
dec ecx
inc esp
add byte [edx + 0x45], dl
push esp
dec ecx
push edx
inc ebp
pop edi
inc ebx
dec edi
dec esi
dec esi
pop edi
dec ecx
inc esp
add byte [eax + 0x41], dl
push esp
dec eax
pop edi
inc ebx
dec eax
inc ecx
dec esp
dec esp
inc ebp
dec esi
inc edi
inc ebp
add byte [eax + 0x41], dl
push esp
dec eax
pop edi
push edx
inc ebp
push ebx
push eax
dec edi
dec esi
push ebx
inc ebp
add byte [ebx + 0x4f], al
dec esi
dec esi
pop edi
inc ebx
dec esp
dec edi
push ebx
inc ebp
pop edi
push esp
push edx
inc ecx
dec esi
push ebx
push eax
dec edi
push edx
push esp
add byte [ebx + 0x4f], al
dec esi
dec esi
pop edi
inc ebx
dec esp
dec edi
push ebx
inc ebp
pop edi
inc ecx
push eax
push eax
add byte [eax + 0x41], cl
dec esi
inc esp
push ebx
dec eax
inc ecx
dec ebx
inc ebp
pop edi
inc esp
dec edi
dec esi
inc ebp
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
inc esi
dec ecx
dec esi
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
dec esp
inc ebp
dec esi
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
dec esp
inc ebp
dec esi
pop edi
inc esi
dec ecx
dec esi
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
dec edi
inc esi
inc esi
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
dec edi
inc esi
inc esi
pop edi
inc esi
dec ecx
dec esi
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
dec edi
inc esi
inc esi
pop edi
dec esp
inc ebp
dec esi
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
dec edi
inc esi
inc esi
pop edi
dec esp
inc ebp
dec esi
pop edi
inc esi
dec ecx
dec esi
add byte [esi + 0x4f], cl
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [ecx + 0x4e], cl
push esp
inc ebp
push edx
dec esi
inc ecx
dec esp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [ebx + 0x4f], al
dec esi
dec esi
inc ebp
inc ebx
push esp
dec ecx
dec edi
dec esi
pop edi
push edx
inc ebp
inc esi
push ebp
push ebx
inc ebp
inc esp
add byte [esi + 0x4c], al
dec edi
push edi
pop edi
inc ebx
dec edi
dec esi
push esp
push edx
dec edi
dec esp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
dec esp
dec ecx
dec ebp
dec ecx
push esp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [ebx + 0x54], dl
push edx
inc ebp
inc ecx
dec ebp
pop edi
push ebx
push esp
inc ecx
push esp
inc ebp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [esi + 0x49], al
dec esi
inc ecx
dec esp
pop edi
push ebx
dec ecx
pop edx
inc ebp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [esi + 0x52], al
inc ecx
dec ebp
inc ebp
pop edi
inc ebp
dec esi
inc ebx
dec edi
inc esp
dec ecx
dec esi
inc edi
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [edx + edx*2 + 0x41], dl
dec esi
push ebx
push eax
dec edi
push edx
push esp
pop edi
push eax
inc ecx
push edx
inc ecx
dec ebp
inc ebp
push esp
inc ebp
push edx
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [ebx + 0x4f], al
dec esi
dec esi
inc ebp
inc ebx
push esp
dec ecx
dec edi
dec esi
pop edi
dec ecx
inc esp
pop edi
dec esp
dec ecx
dec ebp
dec ecx
push esp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [eax + 0x52], dl
dec edi
push esp
dec edi
inc ebx
dec edi
dec esp
pop edi
push esi
dec ecx
dec edi
dec esp
inc ecx
push esp
dec ecx
dec edi
dec esi
add byte [ecx + 0x4e], cl
push esi
inc ecx
dec esp
dec ecx
inc esp
pop edi
push esp
dec edi
dec ebx
inc ebp
dec esi
add byte [ecx + 0x50], al
push eax
dec esp
dec ecx
inc ebx
inc ecx
push esp
dec ecx
dec edi
dec esi
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [ebx + 0x52], al
pop ecx
push eax
push esp
dec edi
pop edi
inc edx
push ebp
inc esi
inc esi
inc ebp
push edx
pop edi
inc ebp
pop eax
inc ebx
inc ebp
inc ebp
inc esp
inc ebp
inc esp
add byte [ebx + 0x45], cl
pop ecx
pop edi
push ebp
push eax
inc esp
inc ecx
push esp
inc ebp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [ecx + 0x45], al
inc ecx
inc esp
pop edi
dec esp
dec ecx
dec ebp
dec ecx
push esp
pop edi
push edx
inc ebp
inc ecx
inc ebx
dec eax
inc ebp
inc esp
add byte [esi + 0x4f], cl
pop edi
push esi
dec ecx
inc ecx
inc edx
dec esp
inc ebp
pop edi
push eax
inc ecx
push esp
dec eax
add byte [eax], al
mov al, 0x98
jp 0x7a9b9c
mov eax, 0xbd007a98
cwde
jp 0x7a9ba4
int 0x98
jp 0x7a9ba8
ficomp dword [eax - 0x6718ff86]
jp 0x7a9bb0
hlt