Function at 0x4a1c20
Capabilities:
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x274
mov eax, dword [0x704034]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, ecx
mov dword [ebp - 0x174], 0
push ebx
push esi
push edi
mov ecx, dword [eax + 0x68]
xor ebx, ebx
mov edi, dword [eax]
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x16c], ecx
xor cl, cl
mov byte [ebp - 0x1cd], cl
mov cl, byte [edi + 0x4e]
mov byte [ebp - 0x1ac], cl
mov ecx, dword [eax + 0x58]
mov dword [ebp - 0x17c], ecx
mov ecx, eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1f0], ebx
call fcn.0049ac00
mov ecx, dword [ebp - 0x170]
cmp dword [edi + 0x148], ebx
je 0x4a1cb4
mov esi, dword [edi + 0x150]
xor edx, edx
mov eax, dword [ecx + 0xb4]
div esi
sub esi, edx
jmp 0x4a1cb7
or esi, 0xffffffff
cmp dword [ecx + 0x28], 7
mov dword [ebp - 0x178], esi
je 0x4a4119
mov dword [ecx + 0x38], ebx
mov dword [ecx + 0x3c], ebx
mov dword [ecx + 0x78], ebx
mov dword [edi + 0x19c], ebx
cmp dword [edi + 0x110], ebx
jne 0x4a84c5
mov eax, dword [ecx + 0x24]
mov edx, dword [ebp - 0x1a8]
lea eax, [eax + eax*4]
lea esi, [edx + eax*4]
mov dl, byte [esi]
inc ebx
mov dword [ebp - 0x1f0], ebx
movzx ebx, dl
mov dword [ebp - 0x16c], esi
mov byte [ebp - 0x1a1], dl
cmp ebx, 0xa8
ja case.0x4a1d15.86
jmp dword [ebx*4 + 0x4a869c]
mov edx, dword [ebp - 0x16c]
mov ecx, edx
mov edi, dword [ebp - 0x17c]
sub ecx, dword [ebp - 0x1a8]
mov eax, dword [edx + 4]
lea esi, [eax + eax*4]
mov eax, 4
mov word [edi + esi*8 + 8], ax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cdq
mov dword [edi + esi*8], eax
mov dword [edi + esi*8 + 4], edx
mov ecx, dword [ebp - 0x170]
mov esi, dword [ebp - 0x16c]
mov esi, dword [esi + 8]
mov edx, dword [ebp - 0x1a8]
dec esi
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
add esi, 0x14
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1bc]
mov eax, dword [edx + 4]
mov edx, dword [ebp - 0x1a8]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + ecx*8]
lea eax, [eax + eax*4]
lea esi, [edx + eax*4]
mov eax, 0x80
mov word [ebx + ecx*8 + 8], ax
add esi, 0x14
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x17c]
mov esi, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0xc]
dec eax
cdq
mov dword [edi + ecx*8], eax
mov eax, 4
mov dword [edi + ecx*8 + 4], edx
mov word [edi + ecx*8 + 8], ax
cmp dword [esi + 8], 0
jne 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1a8]
mov eax, dword [edx + 4]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + ecx*8]
lea eax, [eax + eax*4]
mov eax, dword [edi + eax*4 + 8]
lea eax, [eax + eax*4]
lea eax, [eax - 5]
lea esi, [edi + eax*4]
mov edi, dword [ebp - 0x1bc]
mov eax, 0x80
add esi, 0x14
mov word [ebx + ecx*8 + 8], ax
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1a8]
mov eax, dword [edx + 4]
sub edx, edi
lea esi, [eax + eax*4]
mov eax, 4
mov ecx, dword [ebx + esi*8]
mov word [ebx + esi*8 + 8], ax
mov eax, 0x66666667
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cdq
mov dword [ebx + esi*8], eax
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x170]
mov dword [ebx + esi*8 + 4], edx
lea esi, [edi + eax*4]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 0xc]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [edx + eax*8 + 8], 1
je case.0x4a1d15.86
mov ebx, dword [ebp - 0x170]
mov ecx, esi
sub ecx, dword [ebp - 0x1a8]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [ebp - 0x16c]
cmp dword [edx + 4], 0
jne 0x4a7f51
mov ecx, dword [ebx + 0xc8]
test ecx, ecx
je 0x4a7f51
mov eax, dword [ecx + 4]
dec dword [ebx + 0xd0]
mov dword [ebx + 0xc8], eax
mov eax, dword [ebx + 0x2c]
add dword [edi + 0x68], eax
mov dword [edi + 0x64], eax
call fcn.0049b8a0
mov ecx, dword [ebp - 0x16c]
cmp dword [ecx + 8], 4
jne 0x4a1f57
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x68]
mov eax, dword [eax + ecx*4 + 8]
dec eax
mov edi, dword [ebp - 0x1bc]
lea eax, [eax + eax*4]
mov ecx, ebx
mov ebx, dword [ebp - 0x1f0]
mov esi, dword [ecx + 0x68]
mov edx, dword [ecx + 0x58]
mov dword [ebp - 0x1a8], esi
mov dword [ebp - 0x17c], edx
lea esi, [esi + eax*4]
add esi, 0x14
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov ecx, eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 4]
cdq
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov edx, eax
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 0x10]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov ecx, eax
mov eax, 8
mov word [ecx + 8], ax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x10]
movsd xmm0, qword [eax]
movsd qword [ecx], xmm0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004a1bf0
mov ebx, dword [ebx + 0x10]
mov esi, eax
mov ecx, ebx
call fcn.0047b060
cmp byte [ebp - 0x1ac], 1
mov edx, dword [ebp - 0x16c]
mov dword [edx + 4], eax
je 0x4a20e1
push 0
push 1
push 0xffffffffffffffff
mov edx, ebx
mov ecx, esi
call fcn.00498ac0
add esp, 0xc
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a7118
movzx edx, byte [ebp - 0x1ac]
mov ecx, esi
call fcn.00497d60
test eax, eax
jne 0x4a4113
mov edx, dword [ebp - 0x16c]
mov dword [esi + 0x18], eax
mov eax, 0x800
or word [esi + 8], ax
cmp byte [edx + 1], 0xf9
jne 0x4a20d1
mov edx, dword [edx + 0x10]
mov ecx, edi
call fcn.00477d20
mov edx, dword [ebp - 0x16c]
mov byte [edx + 1], 0xf9
mov eax, dword [esi + 0x10]
mov dword [edx + 0x10], eax
mov eax, dword [esi + 0xc]
mov dword [edx + 4], eax
mov eax, dword [edx + 4]
cmp eax, dword [edi + 0x6c]
jg 0x4a7118
mov ecx, dword [ebp - 0x170]
mov byte [edx], 0x48
jmp 0x4a20fe
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov edx, dword [ebp - 0x16c]
mov ecx, eax
mov eax, 0xa02
mov word [ecx + 8], ax
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [edx + 4]
mov dword [ecx + 0xc], eax
mov al, byte [ebp - 0x1ac]
mov byte [ecx + 0xa], al
mov eax, edx
mov eax, dword [eax + 0xc]
test eax, eax
jle 0x4a1fa1
mov ebx, dword [ebp - 0x17c]
lea esi, [eax + eax*4]
mov eax, edx
movzx eax, word [eax + 2]
cdq
cmp dword [ebx + esi*8], eax
jne 0x4a1fa1
cmp dword [ebx + esi*8 + 4], edx
mov esi, dword [ebp - 0x16c]
jne 0x4a1fa7
mov edi, dword [ebp - 0x1bc]
mov eax, 0xa10
mov ebx, dword [ebp - 0x1f0]
add esi, 0x14
mov word [ecx + 8], ax
mov ecx, dword [ebp - 0x170]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004a1bf0
mov edi, dword [ebx + 0xc]
mov ecx, 1
sub edi, dword [ebx + 8]
mov edx, 0x101
cmp dword [ebx + 4], 0
lea esi, [eax + 0xc]
cmovne ecx, edx
mov dword [esi], 0
movzx ebx, cx
mov word [eax + 8], bx
test edi, edi
jle 0x4a1fa1
nop
lea esi, [esi + 0x28]
lea ecx, [esi - 0xc]
call fcn.004987f0
dec edi
mov word [esi - 4], bx
mov dword [esi], 0
test edi, edi
jg 0x4a21c0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 4]
mov edx, 0xff41
mov ebx, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x1bc]
lea ecx, [eax + eax*4]
mov ax, word [ebx + ecx*8 + 8]
and ax, dx
or ax, 1
add esi, 0x14
mov word [ebx + ecx*8 + 8], ax
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov esi, eax
mov eax, dword [ebp - 0x16c]
push 0
push 0
mov ecx, esi
push dword [eax + 4]
mov edx, dword [eax + 0x10]
call fcn.00498ac0
mov al, byte [ebp - 0x1ac]
add esp, 0xc
mov byte [esi + 0xa], al
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x64]
lea ebx, [eax + ecx*8]
lea ecx, [ebx - 0x28]
call fcn.00498950
test eax, eax
jne 0x4a7118
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [eax + 8]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov eax, 0x2400
test word [esi + 8], ax
je 0x4a22d5
mov ecx, esi
call fcn.004987f0
movups xmm0, xmmword [ebx - 0x28]
mov ecx, 0xebff
movups xmmword [esi], xmm0
mov eax, dword [ebx - 0x18]
mov dword [esi + 0x10], eax
mov ax, word [esi + 8]
and ax, cx
mov ecx, 0x840
or ax, cx
mov word [esi + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x190], eax
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov edx, ebx
mov ecx, esi
call fcn.00498a70
mov eax, 0x1000
test word [esi + 8], ax
je 0x4a2364
mov ecx, esi
call fcn.00497f70
test eax, eax
jne 0x4a4113
add ebx, 0x28
add esi, 0x28
sub dword [ebp - 0x190], 1
jne 0x4a2341
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x190], eax
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
nop word [eax + eax]
push 0x1000
mov edx, ebx
mov ecx, esi
call fcn.004989b0
mov eax, 0x1000
add esp, 4
test word [esi + 8], ax
je 0x4a23eb
mov ecx, esi
call fcn.00497f70
test eax, eax
jne 0x4a4113
mov ecx, dword [ebp - 0x190]
mov eax, ecx
dec ecx
mov dword [ebp - 0x190], ecx
test eax, eax
je 0x4a1fa1
add esi, 0x28
add ebx, 0x28
jmp 0x4a23c0
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
push 0x1000
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea edx, [ebx + eax*8]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 8]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
call fcn.004989b0
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
push dword [edi + eax*8 + 4]
push dword [edi + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea ecx, [edi + eax*8]
call fcn.00498850
add esp, 8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x180], ecx
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
mov eax, dword [edx + 0xc]
movzx edx, word [ecx + 8]
mov dword [ebp - 0x1b4], edx
lea eax, [eax + eax*4]
lea ebx, [ebx + eax*8]
mov al, byte [esi + 8]
or al, dl
test al, 1
je 0x4a250c
mov ecx, ebx
call fcn.004987f0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
test dl, 0x12
jne 0x4a2546
mov dl, byte [ebp - 0x1ac]
push 0
call fcn.00498040
add esp, 4
test eax, eax
jne 0x4a4113
mov eax, dword [ebp - 0x180]
mov ecx, 0xfffd
mov ax, word [eax + 8]
and ax, cx
movzx ecx, ax
mov dword [ebp - 0x1b4], ecx
jmp 0x4a2576
test edx, 0x4000
je 0x4a2576
call fcn.00497fc0
test eax, eax
jne 0x4a4113
mov eax, dword [ebp - 0x180]
mov ecx, 0xfffd
mov ax, word [eax + 8]
and ax, cx
movzx eax, ax
mov dword [ebp - 0x1b4], eax
movzx eax, word [esi + 8]
mov dword [ebp - 0x18c], eax
test al, 0x12
jne 0x4a2598
mov dl, byte [ebp - 0x1ac]
mov ecx, esi
push 0
call fcn.00498040
add esp, 4
jmp 0x4a25a6
test eax, 0x4000
je 0x4a25c3
mov ecx, esi
call fcn.00497fc0
test eax, eax
jne 0x4a4113
mov ax, word [esi + 8]
mov ecx, 0xfffd
and ax, cx
movzx eax, ax
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x180]
mov eax, dword [esi + 0xc]
add eax, dword [ecx + 0xc]
cdq
mov dword [ebp - 0x1c4], eax
mov ecx, edx
mov eax, dword [edi + 0x6c]
cdq
cmp ecx, edx
jg 0x4a7118
mov edx, dword [ebp - 0x1c4]
jl 0x4a25f4
cmp edx, eax
ja 0x4a7118
xor eax, eax
mov ecx, ebx
cmp ebx, esi
sete al
add edx, 3
push eax
call fcn.00497d80
add esp, 4
test eax, eax
jne 0x4a4113
mov ax, word [ebx + 8]
mov ecx, 0x3e40
and ax, cx
or ax, 2
mov word [ebx + 8], ax
cmp ebx, esi
je 0x4a2644
push dword [esi + 0xc]
push dword [esi + 0x10]
push dword [ebx + 0x10]
call fcn.00638870
mov eax, dword [ebp - 0x18c]
add esp, 0xc
mov word [esi + 8], ax
mov edi, dword [ebp - 0x180]
mov eax, dword [esi + 0xc]
add eax, dword [ebx + 0x10]
push dword [edi + 0xc]
push dword [edi + 0x10]
push eax
call fcn.00638870
mov eax, dword [ebp - 0x1b4]
add esp, 0xc
mov ecx, dword [ebp - 0x1c4]
mov word [edi + 8], ax
mov eax, dword [ebx + 0x10]
mov byte [ecx + eax], 0
mov eax, dword [ebx + 0x10]
mov byte [ecx + eax + 1], 0
mov eax, dword [ebx + 0x10]
mov byte [ecx + eax + 2], 0
mov eax, 0x200
or word [ebx + 8], ax
mov al, byte [ebp - 0x1ac]
mov dword [ebx + 0xc], ecx
mov byte [ebx + 0xa], al
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edi + 4]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov ecx, esi
mov dword [ebp - 0x180], esi
call fcn.004a1b90
movzx ebx, ax
mov eax, dword [edi + 8]
mov edi, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea eax, [edi + eax*8]
mov ecx, eax
mov dword [ebp - 0x18c], eax
call fcn.004a1b90
movzx ecx, ax
mov eax, dword [ebp - 0x16c]
and cl, bl
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea eax, [edi + eax*8]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x18c]
mov ax, word [eax + 8]
or ax, word [esi + 8]
movzx eax, ax
test cl, 4
je 0x4a2857
mov eax, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x18c]
mov ecx, dword [esi]
mov edx, dword [esi + 4]
movzx eax, byte [eax]
mov esi, dword [ebx]
add eax, 0xffffff99
mov edi, dword [ebx + 4]
mov dword [ebp - 0x1e8], esi
mov dword [ebp - 0x1e4], edi
cmp eax, 3
ja case.default.0x4a2761
jmp dword [eax*4 + 0x4a8940]
push edx
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.0047c360
add esp, 8
test eax, eax
je 0x4a280c
mov esi, dword [ebp - 0x180]
jmp 0x4a288c
push edx
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.0047c400
add esp, 8
test eax, eax
jne 0x4a2780
jmp 0x4a280c
push edx
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.0047c450
add esp, 8
test eax, eax
jne 0x4a2780
jmp 0x4a280c
mov eax, ecx
or eax, edx
je 0x4a285b
mov eax, ecx
and eax, edx
cmp eax, 0xffffffff
jne 0x4a27d6
test esi, esi
jne 0x4a27d6
cmp edi, 0x80000000
je 0x4a2780
push edx
push ecx
push edi
push esi
call fcn.00621480
jmp 0x4a2800
mov eax, ecx
or eax, edx
je 0x4a285b
mov eax, ecx
and eax, edx
cmp eax, 0xffffffff
jne 0x4a27f7
mov ecx, 1
xor edx, edx
push edx
push ecx
push edi
push esi
call fcn.00665930
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1e8], eax
mov ecx, dword [ebp - 0x1b4]
mov edx, 0x3e40
mov eax, dword [ebp - 0x1e8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ecx + 4], eax
mov ax, word [ecx + 8]
and ax, dx
or ax, 4
mov word [ecx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
test al, 1
je 0x4a2886
mov ecx, dword [ebp - 0x1b4]
call fcn.004987f0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x18c]
mov ecx, esi
call fcn.00498430
mov ecx, ebx
movsd qword [ebp - 0x198], xmm0
call fcn.00498430
mov eax, dword [ebp - 0x16c]
movzx eax, byte [eax]
add eax, 0xffffff99
cmp eax, 3
ja case.default.0x4a28b3
jmp dword [eax*4 + 0x4a8950]
addsd xmm0, qword [ebp - 0x198]
jmp 0x4a2941
subsd xmm0, qword [ebp - 0x198]
jmp 0x4a2941
mulsd xmm0, qword [ebp - 0x198]
jmp 0x4a2941
movsd xmm1, qword [ebp - 0x198]
xorps xmm2, xmm2
ucomisd xmm1, xmm2
lahf
test ah, 0x44
jnp 0x4a285b
divsd xmm0, xmm1
jmp 0x4a2941
mov ecx, esi
call fcn.004983b0
mov ecx, ebx
mov esi, eax
mov edi, edx
call fcn.004983b0
mov ecx, eax
mov dword [ebp - 0x1e4], edx
mov eax, esi
mov dword [ebp - 0x1e8], ecx
or eax, edi
je 0x4a285b
mov eax, esi
and eax, edi
cmp eax, 0xffffffff
jne 0x4a2931
mov esi, 1
xor edi, edi
push edi
push esi
push edx
push ecx
call fcn.00665930
mov ecx, eax
call fcn.00621420
call fcn.0047b020
test eax, eax
jne 0x4a285b
mov ecx, dword [ebp - 0x1b4]
mov edx, 0x3e40
mov ax, word [ecx + 8]
and ax, dx
movsd qword [ecx], xmm0
or ax, 8
mov word [ecx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 4]
test eax, eax
je case.0x4a1d15.86
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
push 0
push 0
lea ecx, [ecx + eax*8]
call fcn.00498850
mov ecx, dword [ebp - 0x170]
add esp, 8
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ebx, [edi + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea ecx, [edi + eax*8]
mov eax, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea edx, [edi + eax*8]
mov al, byte [ecx + 8]
or al, byte [ebx + 8]
mov dword [ebp - 0x188], edx
test al, 1
je 0x4a2a27
mov ecx, edx
call fcn.004987f0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
call fcn.004983b0
mov edi, eax
mov esi, edx
mov ecx, ebx
mov dword [ebp - 0x240], edi
mov dword [ebp - 0x23c], esi
call fcn.004983b0
mov ebx, eax
mov eax, dword [ebp - 0x16c]
mov cl, byte [eax]
cmp cl, 0x63
jne 0x4a2a5b
and edi, ebx
and esi, edx
jmp 0x4a2af9
cmp cl, 0x64
jne 0x4a2a69
or edi, ebx
or esi, edx
jmp 0x4a2af9
mov eax, ebx
or eax, edx
je 0x4a2af9
test edx, edx
jg 0x4a2aa1
jl 0x4a2a7d
test ebx, ebx
jae 0x4a2a96
mov al, 0xcb
sub al, cl
mov cl, al
cmp edx, 0xffffffff
jl 0x4a2aa1
jg 0x4a2a8f
cmp ebx, 0xffffffc0
jbe 0x4a2aa1
neg ebx
adc edx, 0
neg edx
test edx, edx
jl 0x4a2ad0
jg 0x4a2aa1
cmp ebx, 0x40
jb 0x4a2ad0
test esi, esi
jg 0x4a2ab7
jl 0x4a2aab
test edi, edi
jae 0x4a2ab7
cmp cl, 0x65
je 0x4a2ab7
or edi, 0xffffffff
or esi, edi
jmp 0x4a2af9
xorps xmm0, xmm0
movlpd qword [ebp - 0x198], xmm0
mov esi, dword [ebp - 0x194]
mov edi, dword [ebp - 0x198]
jmp 0x4a2af9
movq xmm1, qword [ebp - 0x240]
movd xmm0, ebx
cmp cl, 0x65
jne 0x4a2b38
psllq xmm1, xmm0
movq qword [ebp - 0x198], xmm1
mov edi, dword [ebp - 0x198]
mov esi, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x188]
mov edx, 0x3e40
mov ax, word [ecx + 8]
and ax, dx
mov dword [ecx], edi
or ax, 4
mov dword [ecx + 4], esi
mov word [ecx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
psrlq xmm1, xmm0
movq qword [ebp - 0x198], xmm1
test esi, esi
jg 0x4a2aed
jl 0x4a2b4e
test edi, edi
jae 0x4a2aed
mov ecx, 0x40
or eax, 0xffffffff
sub ecx, ebx
or edx, 0xffffffff
call fcn.006210b0
mov edi, dword [ebp - 0x198]
mov esi, dword [ebp - 0x194]
or edi, eax
or esi, edx
jmp 0x4a2af9
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov ecx, esi
call fcn.00498510
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 8]
cdq
add dword [esi], eax
adc dword [esi + 4], edx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 4]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea esi, [edx + eax*8]
movzx eax, word [esi + 8]
test al, 4
jne 0x4a2c19
test al, 8
jne 0x4a2bea
test al, 2
je 0x4a2bf7
mov edx, 1
mov ecx, esi
call fcn.004a1980
jmp 0x4a2bf1
mov ecx, esi
call fcn.004984b0
mov ecx, dword [ebp - 0x170]
movzx eax, word [esi + 8]
test al, 4
jne 0x4a2c19
mov esi, dword [ebp - 0x16c]
cmp dword [esi + 8], 0
jne 0x4a1d65
mov eax, 0x14
jmp 0x4a803f
and eax, 0x3e40
or eax, 4
mov word [esi + 8], ax
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [ecx + eax*8 + 8], 0x24
lea ecx, [ecx + eax*8]
je 0x4a1fa7
call fcn.00498580
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
mov eax, 0x4000
test word [esi + 8], ax
je 0x4a2ca7
mov ecx, esi
call fcn.00497fc0
mov dword [ebp - 0x174], eax
jmp 0x4a2cb1
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x16c]
mov ecx, esi
push dword [ebp - 0x1ac]
mov dl, byte [eax + 8]
call fcn.00498720
add esp, 4
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4a8045
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov eax, dword [edx + 0xc]
lea eax, [eax + eax*4]
movzx edx, word [ecx + eax*8 + 8]
lea edi, [ecx + eax*8]
movzx eax, word [ebx + 8]
mov ecx, edx
or ecx, eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x184], edx
test cl, 1
je 0x4a2e07
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax + 2]
test al, al
jns 0x4a2d89
mov cl, dl
mov al, cl
and al, byte [ebp - 0x19c]
test al, 1
je 0x4a2d72
test edx, 0x100
jne 0x4a2d72
mov eax, dword [ebp - 0x16c]
xor ecx, ecx
movzx eax, byte [eax]
mov al, byte [eax + 0x6c61dc]
jmp 0x4a2e91
test cl, 1
mov ecx, 0
sete cl
lea ecx, [ecx*2 - 1]
jmp 0x4a2fe3
test al, 0x20
je 0x4a2ddf
mov eax, dword [ebp - 0x16c]
mov ebx, 0x3e40
mov edx, dword [ebp - 0x17c]
mov dword [ebp - 0x1dc], 1
mov eax, dword [eax + 8]
lea ecx, [eax + eax*4]
mov ax, word [edx + ecx*8 + 8]
and ax, bx
or ax, 1
mov word [edx + ecx*8 + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
test al, 0x10
jne 0x4a1d59
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov esi, dword [ebp - 0x16c]
mov al, byte [esi + 2]
and al, 0x47
cmp al, 0x43
jb 0x4a2f5a
test cl, 2
je 0x4a2e53
mov al, byte [ebp - 0x19c]
and al, 0x2e
cmp al, 2
jne 0x4a2e3e
xor edx, edx
mov ecx, ebx
call fcn.004a1980
movzx eax, word [edi + 8]
mov dword [ebp - 0x184], eax
mov al, byte [ebp - 0x184]
and al, 0x2e
cmp al, 2
jne 0x4a2e53
xor edx, edx
mov ecx, edi
call fcn.004a1980
mov al, byte [edi + 8]
and al, byte [ebx + 8]
test al, 4
je 0x4a2fd2
mov esi, dword [edi + 4]
mov edx, dword [ebx + 4]
mov ecx, dword [edi]
mov eax, dword [ebx]
cmp esi, edx
jl 0x4a2f43
jg 0x4a2e7d
cmp ecx, eax
jbe 0x4a2f31
mov ecx, 1
mov eax, dword [ebp - 0x16c]
movzx eax, byte [eax]
mov al, byte [eax + 0x6c5488]
movzx esi, al
movzx eax, word [ebp - 0x19c]
mov word [ebx + 8], ax
mov ebx, dword [ebp - 0x16c]
movzx eax, word [ebp - 0x184]
mov word [edi + 8], ax
movzx ebx, word [ebx + 2]
test bl, 0x20
je 0x4a3015
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1dc], ecx
mov eax, dword [eax + 8]
lea edx, [eax + eax*4]
test bl, 8
je 0x4a2eea
mov ecx, dword [ebp - 0x16c]
xor eax, eax
cmp byte [ecx], 0x35
sete al
cmp eax, esi
je 0x4a1fa1
mov edi, dword [ebp - 0x17c]
mov ecx, 0x3e40
mov ax, word [edi + edx*8 + 8]
and ax, cx
mov dword [edi + edx*8], esi
or ax, 4
mov dword [edi + edx*8 + 4], 0
mov word [edi + edx*8 + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
cmp esi, edx
jg 0x4a2d5c
jl 0x4a2f43
cmp ecx, eax
jae 0x4a2d5c
mov eax, dword [ebp - 0x16c]
or ecx, 0xffffffff
movzx eax, byte [eax]
mov al, byte [eax + 0x6c9914]
jmp 0x4a2e91
cmp al, 0x42
jne 0x4a2fd2
mov al, byte [ebp - 0x19c]
test al, 2
jne 0x4a2f98
test al, 0x2c
je 0x4a2f98
mov dl, byte [ebp - 0x1ac]
mov ecx, ebx
push 1
call fcn.00498040
mov ax, word [ebx + 8]
mov ecx, 0x3e40
xor ax, word [ebp - 0x19c]
add esp, 4
and ax, cx
xor word [ebp - 0x19c], ax
mov al, byte [ebp - 0x184]
test al, 2
jne 0x4a2fd2
test al, 0x2c
je 0x4a2fd2
mov dl, byte [ebp - 0x1ac]
mov ecx, edi
push 1
call fcn.00498040
mov ax, word [edi + 8]
mov ecx, 0x3e40
xor ax, word [ebp - 0x184]
add esp, 4
and ax, cx
xor word [ebp - 0x184], ax
push dword [esi + 0x10]
mov edx, ebx
mov ecx, edi
call fcn.0049d6e0
add esp, 4
mov ecx, eax
test ecx, ecx
jns 0x4a2ffb
mov eax, dword [ebp - 0x16c]
movzx eax, byte [eax]
mov al, byte [eax + 0x6c9914]
jmp 0x4a2e91
jne 0x4a2e82
mov eax, dword [ebp - 0x16c]
movzx eax, byte [eax]
mov al, byte [eax + 0x6c61dc]
jmp 0x4a2e91
test esi, esi
mov esi, dword [ebp - 0x16c]
jne 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
cmp dword [ebp - 0x1dc], 0
jne 0x4a1d65
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
test byte [ebx + 2], 1
jne 0x4a306e
xor eax, eax
jmp 0x4a3074
mov eax, dword [ebx - 4]
add eax, 4
mov ecx, dword [ebx + 0xc]
mov esi, dword [ebp - 0x16c]
mov edx, dword [ebx + 0x10]
mov ebx, dword [ebx + 4]
mov dword [ebp - 0x1b4], ebx
mov ebx, dword [esi + 8]
xor esi, esi
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x18c], edx
mov dword [ebp - 0x1c4], ebx
test ecx, ecx
jle 0x4a1fa1
lea ebx, [edx + 0x14]
test eax, eax
je 0x4a30ba
mov edi, dword [eax + esi*4]
jmp 0x4a30bc
mov edi, esi
mov eax, dword [edx + 0x10]
mov ecx, dword [ebp - 0x17c]
push dword [ebx]
movzx eax, byte [esi + eax]
and eax, 1
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1c4]
add eax, edi
lea eax, [eax + eax*4]
lea edx, [ecx + eax*8]
mov eax, dword [ebp - 0x1b4]
add eax, edi
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.0049d6e0
mov ecx, eax
add esp, 4
mov dword [ebp - 0x1dc], ecx
test ecx, ecx
jne 0x4a313c
mov eax, dword [ebp - 0x190]
inc esi
mov edx, dword [ebp - 0x18c]
add ebx, 4
cmp esi, dword [ebp - 0x188]
jl 0x4a30b1
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0x10]
test byte [esi + eax], 2
je 0x4a317d
mov eax, dword [ebp - 0x1b4]
mov ebx, dword [ebp - 0x17c]
add eax, edi
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 1
jne 0x4a3175
mov eax, dword [ebp - 0x1c4]
add eax, edi
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 1
je 0x4a317d
neg ecx
mov dword [ebp - 0x1dc], ecx
cmp dword [ebp - 0x1d4], 0
mov esi, dword [ebp - 0x16c]
je 0x4a1fa7
mov edi, dword [ebp - 0x1bc]
neg ecx
mov ebx, dword [ebp - 0x1f0]
add esi, 0x14
mov dword [ebp - 0x1dc], ecx
mov ecx, dword [ebp - 0x170]
jmp 0x4a1cf1
mov edi, dword [ebp - 0x1dc]
mov edx, dword [ebp - 0x16c]
test edi, edi
jns 0x4a31e6
mov esi, dword [edx + 4]
mov edx, dword [ebp - 0x1a8]
dec esi
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
add esi, 0x14
jmp 0x4a1cf1
jne 0x4a320c
mov esi, dword [edx + 8]
mov edx, dword [ebp - 0x1a8]
dec esi
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
add esi, 0x14
jmp 0x4a1cf1
mov esi, dword [edx + 0xc]
mov edx, dword [ebp - 0x1a8]
dec esi
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
add esi, 0x14
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov edx, 2
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebx + 4]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.00498460
mov ecx, dword [ebx + 8]
mov edx, 2
mov ebx, dword [ebp - 0x17c]
mov esi, eax
lea ecx, [ecx + ecx*4]
lea ecx, [ebx + ecx*8]
call fcn.00498460
mov ecx, dword [ebp - 0x16c]
lea eax, [eax + esi*2]
cmp byte [ecx], 0x2c
jne 0x4a3281
mov al, byte [esi + eax + 0x6c5548]
jmp 0x4a3288
mov al, byte [esi + eax + 0x6c54d8]
mov esi, dword [ebp - 0x16c]
movzx edx, al
mov eax, dword [ecx + 0xc]
lea ecx, [eax + eax*4]
mov ax, word [ebx + ecx*8 + 8]
cmp edx, 2
jne 0x4a32cc
mov edi, dword [ebp - 0x1bc]
mov edx, 0x3e40
and ax, dx
or ax, 1
add esi, 0x14
mov word [ebx + ecx*8 + 8], ax
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edi, dword [ebp - 0x1bc]
mov dword [ebx + ecx*8], edx
mov edx, 0x3e40
and ax, dx
mov dword [ebx + ecx*8 + 4], 0
or ax, 4
add esi, 0x14
mov word [ebx + ecx*8 + 8], ax
mov ecx, dword [ebp - 0x170]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
mov edx, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
call fcn.00498460
mov ecx, dword [ebp - 0x16c]
xor eax, dword [ecx + 0x10]
cdq
push edx
push eax
mov eax, dword [ecx + 8]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
call fcn.00498850
add esp, 8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 1
lea ecx, [ebx + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
jne 0x4a781c
xor edx, edx
call fcn.00498460
neg eax
mov ecx, esi
push 0
sbb eax, eax
inc eax
push eax
call fcn.00498850
add esp, 8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea edi, [ebx + eax*8]
mov eax, dword [edx + 8]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
mov ecx, esi
call fcn.004987f0
test byte [edi + 8], 1
jne 0x4a1fa1
mov eax, 4
mov ecx, edi
mov word [esi + 8], ax
call fcn.004983b0
not eax
not edx
mov dword [esi], eax
mov dword [esi + 4], edx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edi, dword [ecx + 0xc8]
test edi, edi
je 0x4a349d
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov edi, dword [edi + 0x18]
sub ecx, dword [eax + 0x68]
mov eax, 0x66666667
imul ecx
mov eax, 1
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov esi, ecx
and ecx, 7
shr esi, 3
shl eax, cl
movzx edx, byte [esi + edi]
test edx, eax
jne 0x4a1d59
mov ebx, dword [ebp - 0x1f0]
bts edx, ecx
mov ecx, dword [ebp - 0x170]
mov byte [esi + edi], dl
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
mov eax, dword [ecx + 0x68]
mov eax, dword [eax + 4]
mov dword [esi + 4], eax
add esi, 0x14
jmp 0x4a1cf1
mov eax, dword [ecx + 0x68]
mov eax, dword [eax + 4]
cmp eax, dword [esi + 4]
je 0x4a1d65
mov eax, dword [ecx + 0x68]
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
mov eax, dword [eax + 4]
mov dword [esi + 4], eax
add esi, 0x14
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
mov edx, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.00498460
mov esi, dword [ebp - 0x16c]
test eax, eax
jne 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 4]
xor edx, edx
mov ecx, dword [ebp - 0x17c]
cmp dword [esi + 0xc], edx
lea eax, [eax + eax*4]
sete dl
lea ecx, [ecx + eax*8]
call fcn.00498460
test eax, eax
je 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 4]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [edx + eax*8 + 8], 1
jne 0x4a1d65
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 4]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [edx + eax*8 + 8], 1
je 0x4a1d65
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
cmp byte [eax + 2], 0
je 0x4a1fa7
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.004987f0
jmp 0x4a1d59
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], eax
mov eax, dword [edx + 8]
lea edx, [ebp - 0x1d8]
mov dword [ebp - 0x1d8], eax
call fcn.0049ce10
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov esi, dword [ebp - 0x1c0]
mov ebx, dword [ebp - 0x170]
mov eax, dword [eax + 0xc]
mov edx, dword [esi + 0x48]
mov dword [ebp - 0x19c], edx
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x184], ecx
cmp eax, dword [ebx + 0x20]
je 0x4a3751
cmp byte [esi + 2], 0
je 0x4a36ac
cmp byte [esi], 3
jne 0x4a368b
mov eax, dword [esi + 0x20]
lea ebx, [esi + 0x54]
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + ecx*8 + 0xc]
mov dword [ebx], eax
mov dword [esi + 0x50], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + ecx*8 + 0x10]
mov dword [esi + 0x4c], eax
jmp 0x4a36e9
call fcn.004987f0
mov esi, dword [ebp - 0x16c]
mov ecx, ebx
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov esi, dword [esi + 0x28]
mov ecx, esi
call fcn.0048fc40
mov ecx, dword [ebp - 0x1c0]
mov eax, dword [esi + 0x2c]
lea ebx, [ecx + 0x54]
mov dword [ecx + 0x50], eax
mov edx, ebx
mov ecx, esi
call fcn.00490270
mov esi, dword [ebp - 0x1c0]
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x50]
cmp eax, dword [edi + 0x6c]
ja 0x4a7118
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x20]
mov dword [esi + 0x1c], eax
mov ecx, dword [esi + 0x4c]
mov al, byte [ecx]
cmp al, 0x80
jae 0x4a370a
movzx eax, al
mov dword [edx], eax
mov eax, 1
jmp 0x4a3718
call fcn.0047c1a0
mov edx, dword [ebp - 0x19c]
movzx eax, al
movzx eax, al
mov dword [esi + 0x30], eax
xor eax, eax
mov word [esi + 0x3a], ax
mov eax, dword [ebx]
cmp eax, dword [edx]
jae 0x4a383a
mov dword [esi + 0x4c], 0
mov dword [ebx], 0
mov eax, dword [edx]
cmp eax, 0x18003
ja 0x4a3962
cmp eax, dword [esi + 0x50]
ja 0x4a3962
movzx eax, word [esi + 0x3a]
mov ebx, dword [ebp - 0x1d8]
cmp eax, ebx
jg 0x4a39f0
mov eax, dword [esi + 0x30]
cmp eax, dword [edx]
jae 0x4a3996
mov ebx, dword [esi + 0x4c]
mov dword [ebp - 0x1c4], ebx
test ebx, ebx
jne 0x4a37ca
xorps xmm0, xmm0
lea eax, [ebp - 0x140]
movups xmmword [ebp - 0x140], xmm0
push eax
movups xmmword [ebp - 0x130], xmm0
movq qword [ebp - 0x120], xmm0
push dword [edx]
mov ecx, dword [esi + 0x28]
xor edx, edx
call fcn.00498dd0
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov ebx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x19c]
mov dword [ebp - 0x1c4], ebx
movzx eax, word [esi + 0x3a]
mov esi, dword [esi + 0x30]
add esi, ebx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x180], 0
mov ecx, dword [edx + eax*4]
mov edx, dword [edx]
add edx, ebx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x1a0], edx
mov edx, dword [ebp - 0x1c0]
add edx, 0x58
lea eax, [edx + eax*4]
mov dword [ebp - 0x1b4], eax
nop dword [eax + eax]
movzx ebx, byte [esi]
mov dword [ebp - 0x1f8], ebx
mov dword [eax], ebx
cmp ebx, 0x80
jae 0x4a383f
movzx eax, byte [ebx + 0x6c6a98]
cdq
add ecx, eax
adc dword [ebp - 0x180], edx
mov edx, 1
jmp 0x4a3873
mov ebx, dword [esi + 0x4c]
jmp 0x4a37c4
lea edx, [ebp - 0x1f8]
mov ecx, esi
call fcn.0047c1a0
mov ebx, dword [ebp - 0x1f8]
mov ecx, ebx
movzx edx, al
mov eax, dword [ebp - 0x1b4]
mov dword [eax], ebx
call fcn.0049ce60
mov ecx, dword [ebp - 0x18c]
add ecx, eax
adc dword [ebp - 0x180], 0
mov edi, dword [ebp - 0x19c]
add esi, edx
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x1b4]
inc edx
add eax, 4
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x1b4], eax
mov dword [edi + edx*4], ecx
mov edi, dword [ebp - 0x1bc]
cmp edx, dword [ebp - 0x1d8]
jg 0x4a38c2
cmp esi, dword [ebp - 0x1a0]
jb 0x4a3810
mov eax, dword [ebp - 0x1a0]
jmp 0x4a38cc
mov eax, dword [ebp - 0x1a0]
cmp esi, eax
jb 0x4a38e7
cmp esi, eax
mov eax, dword [ebp - 0x1c0]
ja 0x4a3916
cmp ecx, dword [eax + 0x50]
jne 0x4a3916
mov eax, dword [ebp - 0x180]
test eax, eax
jne 0x4a3910
jmp 0x4a38ed
mov eax, dword [ebp - 0x180]
mov edi, dword [ebp - 0x1c0]
mov edi, dword [edi + 0x50]
mov dword [ebp - 0x188], edi
mov edi, dword [ebp - 0x1bc]
test eax, eax
jb 0x4a3929
ja 0x4a3910
cmp ecx, dword [ebp - 0x188]
jbe 0x4a3929
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x19c]
cmp dword [ecx], 0
jne 0x4a3951
mov esi, dword [ebp - 0x1a0]
xor edx, edx
mov eax, dword [ebp - 0x1c0]
sub esi, dword [ebp - 0x1c4]
mov word [eax + 0x3a], dx
mov dword [eax + 0x30], esi
mov esi, eax
cmp dword [esi + 0x4c], 0
jne 0x4a399e
lea ecx, [ebp - 0x140]
call fcn.00498300
jmp 0x4a399e
cmp dword [eax + 0x4c], 0
jne 0x4a3962
lea ecx, [ebp - 0x140]
call fcn.00498300
mov ecx, dword [ebp - 0x1a8]
mov eax, dword [ecx + 0xc]
test eax, eax
jle 0x4a8020
mov edi, dword [ebp - 0x1bc]
lea esi, [eax - 1]
mov ebx, dword [ebp - 0x1f0]
lea esi, [esi + esi*4]
lea esi, [ecx + esi*4]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
jmp 0x4a1cf1
xor ebx, ebx
mov dword [ebp - 0x1f8], ebx
movzx eax, word [esi + 0x3a]
cmp eax, dword [ebp - 0x1d8]
jg 0x4a39fa
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x184]
cmp byte [eax + 1], 0xf5
jne 0x4a24e7
mov edx, dword [eax + 0x10]
push 0x800
call fcn.004989b0
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [esi + ebx*4 + 0x58]
mov dword [ebp - 0x1f8], ebx
mov ecx, dword [ebp - 0x184]
mov eax, 0x2400
test word [ecx + 8], ax
je 0x4a3a16
call fcn.004987f0
mov ecx, dword [ebp - 0x184]
mov edi, dword [ebp - 0x1d8]
mov edx, dword [ebp - 0x19c]
mov eax, dword [esi + 0x54]
cmp eax, dword [edx + edi*4 + 4]
mov edi, dword [ebp - 0x1bc]
jb 0x4a3b0b
mov eax, dword [esi + 0x4c]
mov esi, dword [ebp - 0x1d8]
add eax, dword [edx + esi*4]
mov dword [ebp - 0x188], eax
cmp ebx, 0xc
jae 0x4a3a73
push ecx
mov edx, ebx
mov ecx, eax
call fcn.0049cfd0
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov al, byte [ebp - 0x1ac]
lea esi, [ebx - 0xc]
shr esi, 1
mov dword [ecx + 0xc], esi
mov byte [ecx + 0xa], al
lea edx, [esi + 2]
cmp dword [ecx + 0x18], edx
jge 0x4a3aaf
mov eax, 1
push 0
mov word [ecx + 8], ax
call fcn.00497d80
add esp, 4
test eax, eax
jne 0x4a4113
mov ecx, dword [ebp - 0x184]
jmp 0x4a3ab5
mov eax, dword [ecx + 0x14]
mov dword [ecx + 0x10], eax
push esi
push dword [ebp - 0x188]
push dword [ecx + 0x10]
call fcn.00638870
mov ecx, dword [ebp - 0x184]
add esp, 0xc
and ebx, 1
mov eax, dword [ecx + 0x10]
mov byte [esi + eax], 0
mov eax, dword [ecx + 0x10]
mov byte [esi + eax + 1], 0
mov ax, word [ebx*2 + 0x6c5838]
mov word [ecx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov al, byte [ebp - 0x1ac]
mov byte [ecx + 0xa], al
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax + 2]
test al, 0xc0
je 0x4a3b30
cmp ebx, 0xc
jb 0x4a3b2c
test bl, 1
je 0x4a3b41
test al, al
js 0x4a3b41
mov ecx, ebx
call fcn.0049ce60
test eax, eax
jne 0x4a3b71
mov ecx, dword [ebp - 0x184]
push ecx
mov edx, ebx
mov ecx, 0x7170cc
call fcn.0049cfd0
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
push dword [ebp - 0x184]
mov ecx, dword [esi + 0x28]
push eax
mov eax, dword [ebp - 0x1d8]
mov edx, dword [edx + eax*4]
call fcn.00498dd0
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov esi, dword [ebp - 0x184]
mov edx, ebx
push esi
mov ecx, dword [esi + 0x10]
call fcn.0049cfd0
mov eax, 0xefff
add esp, 4
and word [esi + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
mov edi, dword [edx + 0x10]
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
nop
push dword [ebp - 0x1ac]
mov dl, byte [edi]
mov ecx, esi
call fcn.004a1a10
add esp, 4
cmp byte [edi], 0x45
jne 0x4a3c53
movzx ebx, word [esi + 8]
test bl, 4
je 0x4a3c53
mov edx, dword [esi + 4]
mov ecx, dword [esi]
cmp edx, 0x7fff
jg 0x4a3c3d
jl 0x4a3c24
cmp ecx, 0xffffffff
ja 0x4a3c3d
cmp edx, 0xffff8000
jl 0x4a3c3d
jg 0x4a3c32
test ecx, ecx
jb 0x4a3c3d
and ebx, 0xfffb
or ebx, 0x20
jmp 0x4a3c4f
call fcn.00621420
and ebx, 0xfffb
movsd qword [esi], xmm0
or ebx, 8
mov word [esi + 8], bx
inc edi
cmp byte [edi], 0
je 0x4a1fa1
add esi, 0x28
jmp 0x4a3bf0
mov edx, dword [ebp - 0x16c]
xorps xmm0, xmm0
mov esi, dword [ebp - 0x17c]
movlpd qword [ebp - 0x1b8], xmm0
mov dword [ebp - 0x1a0], 0
mov eax, dword [edx + 4]
mov ebx, dword [edx + 0x10]
movlpd qword [ebp - 0x1c8], xmm0
lea eax, [eax + eax*4]
lea ecx, [esi + eax*8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x18c], ecx
lea eax, [eax + eax*4]
lea eax, [eax - 5]
lea eax, [ecx + eax*8]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x170]
movzx eax, byte [eax + 0x93]
mov dword [ebp - 0x194], eax
mov eax, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea eax, [esi + eax*8]
mov dword [ebp - 0x190], eax
test ebx, ebx
je 0x4a3d13
lea esi, [ecx + 8]
nop dword [eax + eax]
push dword [ebp - 0x1ac]
mov dl, byte [ebx]
lea ecx, [esi - 8]
call fcn.004a1a10
add esp, 4
cmp byte [ebx], 0x45
jne 0x4a3d0a
movzx eax, word [esi]
test al, 4
je 0x4a3d0a
and eax, 0xfffb
or eax, 0x20
mov word [esi], ax
inc ebx
add esi, 0x28
cmp byte [ebx], 0
jne 0x4a3ce0
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x1b4]
mov esi, dword [ebp - 0x188]
mov edx, dword [ebp - 0x1b8]
add esi, 0x1c
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x1c4], eax
nop dword [eax]
movzx ebx, word [esi - 0x14]
test bl, 1
je 0x4a3d74
and ebx, 0x4000
neg ebx
sbb ebx, ebx
and ebx, 0xa
mov dword [esi], ebx
mov ebx, dword [ebp - 0x1a0]
inc ebx
jmp 0x4a4049
test bl, 0x24
je 0x4a3f59
cmp dword [esi - 0x18], 0
mov eax, dword [esi - 0x1c]
jg 0x4a3d9b
jl 0x4a3d8c
test eax, eax
jae 0x4a3d9b
not eax
mov dword [ebp - 0x180], eax
mov eax, dword [esi - 0x18]
not eax
jmp 0x4a3da4
mov dword [ebp - 0x180], eax
mov eax, dword [esi - 0x18]
inc dword [ebp - 0x1a0]
test eax, eax
ja 0x4a3ec2
jb 0x4a3dbd
cmp dword [ebp - 0x180], 0x7f
ja 0x4a3e1f
mov eax, dword [esi - 0x1c]
and eax, 1
mov dword [ebp - 0x1d4], 0
cmp eax, dword [esi - 0x1c]
jne 0x4a3dfc
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [esi - 0x18]
jne 0x4a3dfc
cmp dword [ebp - 0x194], 4
jb 0x4a3dfc
mov eax, dword [ebp - 0x180]
mov ebx, dword [ebp - 0x1a0]
add eax, 8
mov dword [esi], eax
jmp 0x4a404f
mov ebx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 1
mov dword [ebp - 0x184], ecx
jmp 0x4a404f
test eax, eax
ja 0x4a3ec2
jb 0x4a3e35
cmp dword [ebp - 0x180], 0x7fff
ja 0x4a3e58
mov ebx, dword [ebp - 0x1a0]
add edx, 2
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 2
mov dword [ebp - 0x184], ecx
jmp 0x4a404f
test eax, eax
ja 0x4a3ec2
jb 0x4a3e6a
cmp dword [ebp - 0x180], 0x7fffff
ja 0x4a3e8d
mov ebx, dword [ebp - 0x1a0]
add edx, 3
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 3
mov dword [ebp - 0x184], ecx
jmp 0x4a404f
test eax, eax
ja 0x4a3ec2
jb 0x4a3e9f
cmp dword [ebp - 0x180], 0x7fffffff
ja 0x4a3ec2
mov ebx, dword [ebp - 0x1a0]
add edx, 4
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 4
mov dword [ebp - 0x184], ecx
jmp 0x4a404f
cmp eax, 0x7fff
ja 0x4a3ef7
jb 0x4a3ed4
cmp dword [ebp - 0x180], 0xffffffff
ja 0x4a3ef7
mov ebx, dword [ebp - 0x1a0]
add edx, 6
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [esi], 5
mov dword [ebp - 0x184], ecx
jmp 0x4a404f
add edx, 8
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [ebp - 0x184], ecx
test bl, 0x20
je 0x4a3f48
mov edx, dword [esi - 0x18]
mov ecx, dword [esi - 0x1c]
call fcn.00621420
mov ecx, dword [ebp - 0x184]
and ebx, 0xffdf
mov edx, dword [ebp - 0x19c]
or ebx, 8
mov word [esi - 0x14], bx
mov ebx, dword [ebp - 0x1a0]
movsd qword [esi - 0x1c], xmm0
mov dword [esi], 7
jmp 0x4a404f
mov ebx, dword [ebp - 0x1a0]
mov dword [esi], 6
jmp 0x4a404f
test bl, 8
je 0x4a3f82
mov ebx, dword [ebp - 0x1a0]
inc ebx
mov dword [esi], 7
add edx, 8
mov dword [ebp - 0x19c], edx
adc ecx, 0
mov dword [ebp - 0x184], ecx
jmp 0x4a4049
mov eax, dword [esi - 0x10]
mov dword [ebp - 0x180], eax
mov eax, ebx
mov edi, dword [ebp - 0x180]
shr eax, 1
and eax, 1
lea eax, [eax + edi*2]
mov edi, dword [ebp - 0x1bc]
add eax, 0xc
mov dword [ebp - 0x1d4], eax
test ebx, 0x4000
je 0x4a400d
mov edi, dword [esi - 0x1c]
lea eax, [eax + edi*2]
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0x1d4], eax
mov eax, edx
or eax, ecx
je 0x4a3ff1
lea ecx, [esi - 0x1c]
call fcn.00497fc0
test eax, eax
jne 0x4a4113
mov ecx, dword [ebp - 0x180]
add ecx, dword [esi - 0x1c]
mov dword [ebp - 0x180], ecx
mov ecx, dword [ebp - 0x184]
jmp 0x4a4001
mov eax, dword [esi - 0x1c]
cdq
add dword [ebp - 0x1c4], eax
adc dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0x1d4]
mov edx, dword [ebp - 0x19c]
add edx, dword [ebp - 0x180]
push 0
adc ecx, 0
mov dword [ebp - 0x19c], edx
push eax
mov dword [ebp - 0x184], ecx
call fcn.0047c220
mov ebx, dword [ebp - 0x1a0]
add esp, 8
mov ecx, dword [ebp - 0x184]
add ebx, eax
mov eax, dword [ebp - 0x1d4]
mov edx, dword [ebp - 0x19c]
mov dword [esi], eax
mov dword [ebp - 0x1a0], ebx
lea eax, [esi - 0x1c]
cmp eax, dword [ebp - 0x18c]
je 0x4a4062
sub esi, 0x28
jmp 0x4a3d50
cmp ebx, 0x7e
jle 0x4a408c
mov eax, ebx
cdq
push edx
push eax
call fcn.0047c220
mov esi, eax
add ebx, esi
mov eax, ebx
mov dword [ebp - 0x1a0], ebx
cdq
push edx
push eax
call fcn.0047c220
add esp, 0x10
cmp esi, eax
jge 0x4a4093
inc ebx
mov dword [ebp - 0x1a0], ebx
mov eax, ebx
cdq
mov ecx, eax
mov eax, edx
mov ebx, ecx
mov dword [ebp - 0x1d4], ecx
add ebx, dword [ebp - 0x19c]
mov ecx, eax
mov dword [ebp - 0x194], eax
mov esi, ebx
mov eax, dword [ebp - 0x190]
adc ecx, dword [ebp - 0x184]
add esi, dword [ebp - 0x1c4]
mov eax, dword [eax + 0x18]
adc ecx, dword [ebp - 0x1b4]
cdq
cmp ecx, edx
jg 0x4a40e0
jl 0x4a40d8
cmp esi, eax
ja 0x4a40e0
mov esi, dword [ebp - 0x190]
jmp 0x4a4148
mov eax, dword [edi + 0x6c]
cdq
cmp ecx, edx
jg 0x4a7118
jl 0x4a40f6
cmp esi, eax
ja 0x4a7118
mov esi, dword [ebp - 0x190]
cmp dword [esi + 0x18], ebx
jge 0x4a4143
push 0
mov edx, ebx
mov ecx, esi
call fcn.00497d80
add esp, 4
test eax, eax
je 0x4a414e
mov esi, dword [ebp - 0x178]
mov ecx, edi
call fcn.004784b0
push 0x7065c8
push dword [ebp - 0x170]
call fcn.00499530
mov ecx, dword [ebp - 0x170]
add esp, 8
mov eax, 7
jmp 0x4a804b
and word [esi + 8], 0x2d
mov eax, dword [esi + 0x14]
mov dword [esi + 0x10], eax
mov ecx, dword [ebp - 0x1c4]
mov eax, 0x10
mov word [esi + 8], ax
mov eax, ecx
or eax, dword [ebp - 0x1b4]
mov dword [esi + 0xc], ebx
je 0x4a4175
mov eax, 0x4010
mov dword [esi], ecx
mov word [esi + 8], ax
mov eax, dword [ebp - 0x1a0]
mov esi, dword [esi + 0x10]
lea edi, [esi + eax]
cmp eax, 0x80
jae 0x4a4191
mov byte [esi], al
mov eax, 1
jmp 0x4a41a7
push dword [ebp - 0x194]
mov ecx, esi
push dword [ebp - 0x1d4]
call fcn.0047bf90
add esp, 8
mov ebx, dword [ebp - 0x18c]
movzx eax, al
add esi, eax
mov ebx, dword [ebx + 0x1c]
cmp ebx, 0x80
jae 0x4a41c6
mov byte [esi], bl
mov eax, 1
jmp 0x4a41d3
push 0
push ebx
mov ecx, esi
call fcn.0047bf90
add esp, 8
push ebx
mov ebx, dword [ebp - 0x18c]
mov ecx, edi
movzx eax, al
mov edx, ebx
add esi, eax
call fcn.0049ce80
add ebx, 0x28
add esp, 4
add edi, eax
mov dword [ebp - 0x18c], ebx
cmp ebx, dword [ebp - 0x188]
jbe 0x4a41b2
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
xorps xmm0, xmm0
mov eax, dword [ebp - 0x170]
movlpd qword [ebp - 0x248], xmm0
mov ecx, dword [edx + 4]
lea edx, [ebp - 0x248]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
mov ecx, dword [eax + 0x28]
call fcn.004959f0
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a8045
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov ecx, dword [ebp - 0x248]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x244]
mov dword [eax + 4], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
mov esi, dword [edx + 0x10]
mov dword [ebp - 0x184], eax
test eax, eax
jne 0x4a4392
cmp dword [edi + 0xb8], eax
jg 0x4a802c
mov ecx, esi
call fcn.0047b060
mov ecx, dword [edi + 0x1d0]
mov ebx, eax
add ecx, dword [edi + 0x1cc]
xor edx, edx
push ecx
mov ecx, edi
mov dword [ebp - 0x194], ebx
call fcn.004e7b10
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
lea eax, [ebx + 0x21]
mov ecx, edi
push 0
push eax
call fcn.00478070
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4a1fa1
mov ecx, dword [ebp - 0x194]
lea edx, [ebx + 0x20]
inc ecx
mov dword [ebx], edx
push ecx
push esi
push edx
call fcn.00638870
add esp, 0xc
cmp byte [edi + 0x4f], 0
je 0x4a4339
mov byte [edi + 0x4f], 0
mov byte [edi + 0x57], 1
jmp 0x4a433f
inc dword [edi + 0x1cc]
mov eax, dword [edi + 0x1c4]
mov dword [ebx + 0x18], eax
mov eax, dword [edi + 0x1d8]
mov dword [edi + 0x1c4], ebx
mov dword [ebx + 8], eax
mov eax, dword [edi + 0x1dc]
mov dword [ebx + 0xc], eax
mov eax, dword [edi + 0x1e0]
mov dword [ebx + 0x10], eax
mov eax, dword [edi + 0x1e4]
mov dword [ebx + 0x14], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [edi + 0x1c4]
xor ecx, ecx
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x190], ebx
test ebx, ebx
je 0x4a43d0
nop word [eax + eax]
mov ecx, dword [ebx]
mov edx, esi
call fcn.0047b390
test eax, eax
je 0x4a43ee
mov ebx, dword [ebx + 0x18]
inc dword [ebp - 0x180]
mov dword [ebp - 0x190], ebx
test ebx, ebx
jne 0x4a43b0
push esi
push 0x7063b4
push dword [ebp - 0x170]
call fcn.00499530
add esp, 0xc
mov eax, 1
jmp 0x4a803f
cmp dword [edi + 0xb8], 0
mov edx, dword [ebp - 0x184]
jle 0x4a4406
cmp edx, 1
je 0x4a80bc
cmp dword [ebx + 0x18], 0
jne 0x4a446c
cmp byte [edi + 0x57], 0
je 0x4a446c
mov dword [ebp - 0x18c], 1
cmp edx, 1
jne 0x4a4476
mov ecx, dword [ebp - 0x170]
call fcn.0049c500
mov ecx, eax
mov dword [ebp - 0x174], ecx
test ecx, ecx
jne 0x4a8466
mov ecx, dword [ebp - 0x170]
mov byte [edi + 0x4f], 1
call fcn.0049c560
cmp eax, 5
je 0x4a80cc
mov eax, dword [ebp - 0x170]
mov byte [edi + 0x57], 0
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x174], eax
jmp 0x4a4559
mov dword [ebp - 0x18c], 0
mov eax, dword [edi + 0x1cc]
sub eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp edx, 2
jne 0x4a44f0
mov ecx, dword [edi + 0x18]
xor ebx, ebx
and ecx, 1
mov dword [ebp - 0x188], ecx
cmp dword [edi + 0x14], ebx
jle 0x4a44fa
mov eax, ecx
xor eax, 1
xor esi, esi
mov dword [ebp - 0x194], eax
nop
mov ecx, dword [edi + 0x10]
mov edx, 0x204
push eax
mov ecx, dword [ecx + esi + 4]
call fcn.0048f670
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov eax, dword [ebp - 0x194]
inc ebx
add esi, 0x10
cmp ebx, dword [edi + 0x14]
jl 0x4a44b0
mov eax, dword [ebp - 0x180]
mov edx, dword [ebp - 0x184]
jmp 0x4a44fa
mov dword [ebp - 0x188], 0
xor ebx, ebx
cmp dword [edi + 0x14], ebx
jle 0x4a4536
xor esi, esi
mov ecx, dword [edi + 0x10]
push eax
mov ecx, dword [ecx + esi + 4]
call fcn.0048f970
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov eax, dword [ebp - 0x180]
inc ebx
mov edx, dword [ebp - 0x184]
add esi, 0x10
cmp ebx, dword [edi + 0x14]
jl 0x4a4503
cmp dword [ebp - 0x188], 0
je 0x4a4553
xor edx, edx
mov ecx, edi
call fcn.0049e670
mov ecx, edi
call fcn.004bdc80
or dword [edi + 0x18], 1
mov ebx, dword [ebp - 0x190]
cmp dword [edi + 0x1c4], ebx
je 0x4a45ca
nop dword [eax]
nop word [eax + eax]
cmp dword [edi + 0x1e8], 0
mov ecx, dword [edi + 0x1c4]
mov eax, dword [ecx + 0x18]
mov dword [edi + 0x1c4], eax
je 0x4a4593
mov edx, ecx
mov ecx, edi
call fcn.00477ca0
jmp 0x4a45bc
cmp ecx, dword [edi + 0x138]
jb 0x4a45b3
cmp ecx, dword [edi + 0x13c]
jae 0x4a45b3
mov eax, dword [edi + 0x134]
mov dword [ecx], eax
mov dword [edi + 0x134], ecx
jmp 0x4a45bc
push ecx
call fcn.00477c30
add esp, 4
dec dword [edi + 0x1cc]
cmp dword [edi + 0x1c4], ebx
jne 0x4a4570
mov esi, dword [ebp - 0x184]
cmp esi, 1
jne 0x4a45fc
mov eax, dword [ebx + 0x18]
mov edx, ebx
mov ecx, edi
mov dword [edi + 0x1c4], eax
call fcn.00477d20
cmp dword [ebp - 0x18c], 0
jne 0x4a2cca
dec dword [edi + 0x1cc]
jmp 0x4a4632
cmp dword [ebp - 0x18c], 0
mov eax, dword [ebx + 8]
mov dword [edi + 0x1d8], eax
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x1dc], eax
mov eax, dword [ebx + 0x10]
mov dword [edi + 0x1e0], eax
mov eax, dword [ebx + 0x14]
mov dword [edi + 0x1e4], eax
je 0x4a4632
cmp esi, 2
jne 0x4a2cca
mov ecx, dword [ebp - 0x180]
mov edx, esi
push ecx
mov ecx, edi
call fcn.004e7b10
add esp, 4
mov dword [ebp - 0x174], eax
jmp 0x4a2cd0
mov edx, dword [ebp - 0x16c]
mov dword [ebp - 0x200], 0
mov edx, dword [edx + 8]
test edx, edx
je 0x4a4678
mov eax, dword [edi + 0x20]
and eax, 0x100000
or eax, 0
jne 0x4a810d
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 4]
mov eax, dword [edi + 0x10]
add ecx, ecx
mov esi, dword [eax + ecx*8 + 4]
test esi, esi
je 0x4a475d
lea eax, [ebp - 0x200]
mov ecx, esi
push eax
call fcn.0048e7c0
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a8117
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x170]
cmp dword [ecx + 8], eax
je 0x4a4769
test byte [edx + 0x98], 0x80
je 0x4a4769
cmp byte [edi + 0x4f], al
je 0x4a46e5
cmp dword [edi + 0xb4], 1
jle 0x4a4769
cmp dword [edx + 0x30], 0
jne 0x4a4700
mov eax, dword [edi + 0x1cc]
inc dword [edi + 0x1d0]
add eax, dword [edi + 0x1d0]
mov dword [edx + 0x30], eax
mov eax, dword [edx + 0x30]
mov ecx, edi
dec eax
xor edx, edx
push eax
call fcn.004e7b10
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a4731
mov eax, dword [ebp - 0x170]
mov ecx, esi
mov edx, dword [eax + 0x30]
call fcn.0048f910
mov dword [ebp - 0x174], eax
mov edx, dword [ebp - 0x170]
mov eax, dword [edi + 0x1d8]
mov dword [edx + 0x48], eax
mov eax, dword [edi + 0x1dc]
mov dword [edx + 0x4c], eax
mov eax, dword [edi + 0x1e0]
mov dword [edx + 0x50], eax
mov eax, dword [edi + 0x1e4]
mov dword [edx + 0x54], eax
jmp 0x4a4763
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x174]
mov esi, dword [ebp - 0x16c]
cmp word [esi + 2], 0
je 0x4a47a5
mov eax, dword [ebp - 0x200]
cmp eax, dword [esi + 0xc]
jne 0x4a815b
mov eax, esi
mov ecx, dword [eax + 4]
mov eax, dword [edi + 0x10]
add ecx, ecx
mov eax, dword [eax + ecx*8 + 0xc]
mov eax, dword [eax + 4]
cmp eax, dword [esi + 0x10]
jne 0x4a815b
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4a8045
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x24c]
mov ecx, dword [edi + 0x10]
push eax
mov eax, dword [edx + 4]
mov edx, dword [edx + 0xc]
add eax, eax
mov ecx, dword [ecx + eax*8 + 4]
call fcn.004958c0
mov edx, dword [ebp - 0x16c]
add esp, 4
mov ecx, dword [ebp - 0x170]
call fcn.004a1bf0
mov ecx, eax
mov eax, dword [ebp - 0x24c]
jmp 0x4a1f9b
mov edx, dword [ebp - 0x16c]
mov esi, dword [edx + 4]
push dword [edx + 0xc]
mov edx, dword [edx + 8]
shl esi, 4
add esi, dword [edi + 0x10]
mov ecx, dword [esi + 4]
call fcn.00495920
mov edx, dword [ebp - 0x16c]
add esp, 4
mov dword [ebp - 0x174], eax
mov eax, dword [edx + 8]
cmp eax, 1
jne 0x4a484b
mov ecx, dword [esi + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ecx], eax
or dword [edi + 0x18], 1
jmp 0x4a4859
cmp eax, 2
jne 0x4a4859
mov ecx, dword [esi + 0xc]
mov al, byte [edx + 0xc]
mov byte [ecx + 0x4c], al
mov eax, dword [ebp - 0x16c]
cmp dword [eax + 4], 1
jne 0x4a487d
xor edx, edx
mov ecx, edi
call fcn.0049e670
mov ecx, dword [ebp - 0x170]
and dword [ecx + 0x98], 0xfffffffc
jmp 0x4a4883
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4a803f
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
test esi, esi
je 0x4a48d0
mov eax, dword [esi + 0x34]
cmp eax, dword [ebx + 8]
je 0x4a4a17
mov ecx, dword [ebp - 0x170]
mov eax, dword [ecx + 0x98]
and al, 3
cmp al, 1
je 0x4a81c7
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x190], 0
mov ecx, dword [eax + 8]
mov esi, dword [eax + 0xc]
mov eax, esi
shl eax, 4
add eax, dword [edi + 0x10]
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x194], esi
mov ebx, dword [eax + 4]
mov dword [ebp - 0x1b4], ebx
cmp dl, 0x62
jne 0x4a4954
mov edx, dword [ebp - 0x16c]
mov eax, dword [eax + 0xc]
movzx ebx, word [edx + 2]
mov edx, dword [ebp - 0x170]
and ebx, 8
mov al, byte [eax + 0x4c]
or ebx, 4
cmp al, byte [edx + 0x93]
jae 0x4a4956
mov byte [edx + 0x93], al
jmp 0x4a4956
xor ebx, ebx
mov eax, dword [ebp - 0x16c]
test byte [eax + 2], 0x10
je 0x4a4983
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x17c]
lea esi, [ecx + eax*8]
mov ecx, esi
call fcn.00498510
mov eax, dword [esi]
mov esi, dword [ebp - 0x194]
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x16c]
mov al, byte [ecx + 1]
cmp al, 0xf7
jne 0x4a499f
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x190], eax
movzx eax, word [eax + 8]
jmp 0x4a49ae
cmp al, 0xfd
jne 0x4a49a8
mov eax, dword [ecx + 0x10]
jmp 0x4a49ae
mov eax, dword [ebp - 0x18c]
mov edx, dword [ecx + 4]
mov ecx, dword [ebp - 0x170]
push 0
push esi
push eax
call fcn.004a1810
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4a4113
push dword [esi + 0x28]
mov eax, dword [ebp - 0x188]
mov edx, eax
push dword [ebp - 0x190]
mov ecx, dword [ebp - 0x1b4]
or dword [esi + 8], 4
push ebx
mov byte [esi + 2], 1
mov dword [esi + 0x34], eax
call fcn.0048fb00
mov dword [ebp - 0x174], eax
add esp, 0xc
mov eax, dword [ebp - 0x190]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x16c]
cmp byte [eax + 1], 0xf7
setne al
mov byte [esi + 4], al
mov eax, dword [ebp - 0x16c]
mov cl, byte [eax + 2]
mov eax, dword [esi + 0x28]
and cl, 3
mov byte [eax + 3], cl
jmp 0x4a2cca
mov edx, dword [ebp - 0x16c]
mov esi, dword [ebp - 0x170]
push 0
push 0xffffffffffffffff
mov ecx, dword [edx + 8]
mov eax, dword [esi + 0x60]
mov edx, dword [edx + 4]
mov ebx, dword [eax + ecx*4]
mov ecx, esi
movsx eax, word [ebx + 0x38]
push eax
call fcn.004a1810
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4a4113
or dword [esi + 8], 1
push dword [esi + 0x28]
mov byte [esi + 2], 1
mov ecx, dword [ebx + 0x2c]
mov dword [esi + 0x2c], ecx
mov al, byte [ebx + 4]
mov byte [esi + 4], al
mov eax, dword [ebx + 0x34]
mov dword [esi + 0x34], eax
mov eax, dword [ebx + 8]
xor eax, dword [esi + 8]
mov edx, dword [esi + 0x34]
and eax, 4
xor dword [esi + 8], eax
push ecx
mov ecx, dword [ebx + 0xc]
push 4
call fcn.0048fb00
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x174], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [ecx + 0x60]
mov edx, dword [edx + 4]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x4a4b10
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x1c], 0
test ecx, ecx
je 0x4a4c1f
mov edx, dword [esi + 0x34]
push 0
call fcn.004954d0
add esp, 4
mov dword [ebp - 0x174], eax
jmp 0x4a4c25
mov eax, dword [ebp - 0x16c]
push 0
push 0xffffffffffffffff
push dword [eax + 8]
call fcn.004a1810
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4a4113
mov eax, dword [ebp - 0x16c]
lea ebx, [esi + 0xc]
or dword [esi + 8], 1
xor edx, edx
push 0x41e
movzx ecx, word [eax + 2]
or ecx, 5
push ecx
mov ecx, dword [edi]
push ebx
push edi
call fcn.0048d740
add esp, 0x10
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a4bff
mov ecx, dword [ebx]
lea edx, [eax + 1]
push eax
call fcn.0048e7c0
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a4bff
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebx]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x194], eax
mov dword [esi + 0x2c], eax
test eax, eax
je 0x4a4bda
movzx eax, word [edx + 2]
lea edx, [esi + 0x34]
or eax, 2
push eax
call fcn.004952b0
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a4bd4
push dword [esi + 0x28]
mov edx, dword [esi + 0x34]
push dword [ebp - 0x194]
mov ecx, dword [ebx]
push 4
call fcn.0048fb00
add esp, 0xc
mov dword [ebp - 0x174], eax
mov byte [esi + 4], 0
jmp 0x4a4bff
push dword [esi + 0x28]
mov edx, 1
mov dword [esi + 0x34], 1
push 0
push 4
call fcn.0048fb00
add esp, 0xc
mov dword [ebp - 0x174], eax
mov byte [esi + 4], 1
mov eax, dword [ebp - 0x16c]
xor ecx, ecx
cmp word [eax + 2], 8
mov eax, 4
cmovne ecx, eax
mov eax, dword [esi + 8]
and eax, 0xfffffffb
or ecx, eax
mov dword [esi + 8], ecx
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4a8045
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
mov byte [esi + 2], 1
mov esi, dword [ebp - 0x16c]
add esi, 0x14
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
push 1
push 0xffffffffffffffff
push dword [edx + 8]
mov edx, dword [edx + 4]
call fcn.004a1810
add esp, 0xc
test eax, eax
je 0x4a4113
mov edx, dword [ebp - 0x16c]
push eax
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x2c], ecx
mov ecx, edi
mov edx, dword [edx + 0xc]
call fcn.004a9de0
add esp, 4
mov dword [ebp - 0x174], eax
jmp 0x4a2cd0
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov edx, dword [eax + ecx*4]
mov edi, dword [edx + 0x10]
mov ecx, edi
mov esi, dword [edx + 0x14]
add ecx, 1
mov eax, esi
mov dword [edx + 0x10], ecx
adc eax, 0
or edi, esi
mov esi, dword [ebp - 0x16c]
mov dword [edx + 0x14], eax
je 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
push 3
push 0xffffffffffffffff
push dword [edx + 0xc]
mov edx, dword [edx + 4]
call fcn.004a1810
add esp, 0xc
test eax, eax
je 0x4a4113
mov ecx, dword [ebp - 0x16c]
mov byte [eax + 2], 1
mov ecx, dword [ecx + 8]
mov dword [eax + 0x20], ecx
mov byte [eax + 4], 1
mov dword [eax + 0x28], 0x716a73
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
mov edx, dword [ecx + 0x60]
mov edx, dword [edx + eax*4]
call fcn.0049b7c0
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov dword [eax + ecx*4], 0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x18c], 0
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x17c]
cmp byte [esi + 4], 0
mov word [esi + 2], 0
mov dword [esi + 0x1c], 0
je 0x4a4ee2
mov eax, dword [edx + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
movzx eax, word [ecx + 8]
mov dword [ebp - 0x194], eax
and al, 0x2e
mov dword [ebp - 0x190], ecx
cmp al, 2
jne 0x4a4df9
xor edx, edx
call fcn.004a1980
mov ecx, dword [ebp - 0x190]
call fcn.004983b0
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1c4], edx
mov edx, dword [ebp - 0x194]
movzx ecx, word [eax + 8]
mov word [eax + 8], dx
test cl, 0x24
jne 0x4a4e95
test cl, 8
jne 0x4a4e5b
test cl, 1
jne 0x4a77e1
cmp ebx, 0x18
jae 0x4a77e1
mov ecx, dword [esi + 0x28]
lea edx, [ebp - 0x1cc]
call fcn.00490650
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
jmp 0x4a5028
mov edx, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x1b4]
call fcn.00621420
mov eax, dword [ebp - 0x190]
movsd xmm1, qword [eax]
comisd xmm0, xmm1
jbe 0x4a4e89
test bl, 1
lea eax, [ebx - 1]
cmove eax, ebx
mov ebx, eax
jmp 0x4a4e95
comisd xmm1, xmm0
jbe 0x4a4e95
test bl, 1
jne 0x4a4e95
inc ebx
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x1cc]
push eax
push 0
push dword [ebp - 0x1c4]
xor edx, edx
push dword [ebp - 0x1b4]
call fcn.004906b0
mov dword [ebp - 0x174], eax
add esp, 0x10
mov eax, dword [ebp - 0x1b4]
mov dword [esi + 0x40], eax
mov eax, dword [ebp - 0x1c4]
mov dword [esi + 0x44], eax
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4a803f
jmp 0x4a4f73
mov eax, dword [esi + 0x28]
mov al, byte [eax + 3]
and al, 2
mov byte [ebp - 0x1a1], al
mov eax, 0
setne al
test bl, 1
mov dword [ebp - 0x18c], eax
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x6c], eax
mov ax, word [edx + 0x10]
mov word [ebp - 0x64], ax
sete al
mov byte [ebp - 0x5e], 0
lea eax, [eax*2 - 1]
mov byte [ebp - 0x62], al
mov eax, dword [edx + 0xc]
lea edx, [ebp - 0x6c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x1cc]
mov ecx, dword [esi + 0x28]
push eax
push 0
push 0
push 0
call fcn.004906b0
add esp, 0x10
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
cmp byte [ebp - 0x1a1], al
je 0x4a4f73
cmp byte [ebp - 0x5e], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x18c], eax
je 0x4a5028
mov eax, dword [ebp - 0x1cc]
cmp ebx, 0x18
jl 0x4a500d
test eax, eax
js 0x4a4fc4
jne 0x4a4f8d
cmp ebx, 0x19
je 0x4a4fc4
mov dword [ebp - 0x1cc], 0
mov ecx, dword [ebp - 0x16c]
cmp dword [ebp - 0x18c], 0
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
lea esi, [ecx + 0x14]
cmove esi, ecx
mov ecx, dword [ebp - 0x170]
add esi, 0x14
jmp 0x4a1cf1
push 0
push dword [esi + 0x28]
mov dword [ebp - 0x1cc], 0
call fcn.00490d00
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4a4f97
mov ecx, dword [ebp - 0x170]
cmp eax, 0x65
jne 0x4a8045
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x1cc], 1
jmp 0x4a1d5f
test eax, eax
jg 0x4a503a
jne 0x4a5018
cmp ebx, 0x16
je 0x4a503a
mov eax, dword [esi + 0x28]
xor ecx, ecx
cmp byte [eax], cl
setne cl
mov dword [ebp - 0x1cc], ecx
cmp dword [ebp - 0x1cc], 0
jne 0x4a77e1
jmp 0x4a4f97
push 0
push dword [esi + 0x28]
mov dword [ebp - 0x1cc], 0
call fcn.00490e60
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4a4f97
mov ecx, dword [ebp - 0x170]
cmp eax, 0x65
jne 0x4a8045
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x1cc], 1
jmp 0x4a1d5f
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
mov eax, edx
mov eax, dword [eax + 8]
shl eax, 3
xor eax, dword [ecx + 8]
and eax, 8
xor dword [ecx + 8], eax
mov ecx, dword [ebp - 0x170]
mov esi, edx
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
test byte [eax + 8], 8
jne 0x4a1fa7
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov edx, dword [ebp - 0x17c]
mov eax, dword [eax + 0x60]
mov ebx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x188], ebx
cmp dword [ecx + 0x10], 0
mov eax, dword [ecx + 0xc]
lea eax, [eax + eax*4]
lea esi, [edx + eax*8]
jle 0x4a5142
mov eax, dword [ebx + 0x2c]
lea ebx, [ebp - 0xa4]
mov dword [ebp - 0xa4], eax
mov ax, word [ecx + 0x10]
mov word [ebp - 0x9c], ax
xor eax, eax
mov dword [ebp - 0xa0], esi
mov esi, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
jmp 0x4a5192
mov eax, 0x4000
test word [esi + 8], ax
je 0x4a515c
mov ecx, esi
call fcn.00497fc0
test eax, eax
jne 0x4a4113
mov ecx, dword [ebx + 0x2c]
call fcn.0049d1b0
mov ebx, eax
mov dword [ebp - 0x190], ebx
test ebx, ebx
je 0x4a4113
mov edx, dword [esi + 0xc]
push ebx
push dword [esi + 0x10]
mov esi, dword [ebp - 0x188]
mov ecx, dword [esi + 0x2c]
call fcn.0049d200
mov ecx, dword [ebp - 0x16c]
add esp, 8
mov byte [ebx + 0xa], 0
cmp byte [ecx], 0x1b
mov dword [ebp - 0x188], 0
jne 0x4a51ce
movzx edx, word [ebx + 8]
xor ecx, ecx
test edx, edx
je 0x4a51ce
mov eax, dword [ebx + 4]
add eax, 8
test byte [eax], 1
jne 0x4a51c4
inc ecx
add eax, 0x28
cmp ecx, edx
jl 0x4a51b5
jmp 0x4a51ce
mov dword [ebp - 0x188], 1
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x250]
push eax
push 0
push 0
push 0
mov edx, ebx
call fcn.004906b0
mov dword [ebp - 0x174], eax
add esp, 0x10
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x4a5201
mov edx, eax
mov ecx, edi
call fcn.00477ce0
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4a803f
mov eax, dword [ebp - 0x250]
xor ecx, ecx
test eax, eax
mov dword [esi + 0x20], eax
mov al, 1
mov byte [esi + 3], 0
sete cl
mov dword [esi + 0x1c], 0
sub al, cl
mov byte [esi + 2], al
mov esi, dword [ebp - 0x16c]
cmp byte [esi], 0x1d
jne 0x4a525e
test ecx, ecx
jne 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
cmp dword [ebp - 0x188], 0
jne 0x4a77e7
test ecx, ecx
je 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 0xc]
mov ebx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 0x24
jne 0x4a5309
movups xmm1, xmmword [ebx + eax*8]
movups xmm0, xmmword [ebx + eax*8 + 0x10]
movups xmmword [ebp - 0x58], xmm1
movups xmmword [ebp - 0x48], xmm0
movq xmm0, qword [ebx + eax*8 + 0x20]
psrldq xmm1, 8
movd eax, xmm1
movq qword [ebp - 0x38], xmm0
test al, 4
jne 0x4a52fb
test al, 8
jne 0x4a52e2
test al, 2
je 0x4a52f3
mov eax, 1
lea ecx, [ebp - 0x58]
mov edx, eax
call fcn.004a1980
jmp 0x4a52ea
lea ecx, [ebp - 0x58]
call fcn.004984b0
mov ecx, dword [ebp - 0x170]
mov al, byte [ebp - 0x50]
test al, 4
je 0x4a1d65
mov ebx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x54]
jmp 0x4a531c
mov ebx, dword [ebp - 0x17c]
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
mov ebx, dword [ebx + eax*8]
mov edx, dword [ecx + eax*8 + 4]
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x214], 0
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
lea eax, [ebp - 0x214]
push eax
push 0
push edx
mov ecx, dword [esi + 0x28]
xor edx, edx
push ebx
call fcn.004906b0
mov dword [ebp - 0x174], eax
add esp, 0x10
mov eax, dword [ebp - 0x188]
mov dword [esi + 0x44], eax
mov eax, dword [ebp - 0x214]
mov dword [esi + 0x40], ebx
mov word [esi + 2], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], eax
mov esi, dword [ebp - 0x16c]
test eax, eax
je 0x4a479f
cmp dword [esi + 8], 0
jne 0x4a77e7
mov ecx, 0x159cf
call fcn.00502bb0
mov dword [ebp - 0x174], eax
jmp 0x4a47a5
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004a1bf0
mov edx, dword [ebx + 4]
mov ebx, dword [ebp - 0x170]
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
mov ecx, dword [ebx + 0x60]
mov edx, dword [ecx + edx*4]
mov ecx, dword [edx + 0x10]
mov dword [eax], ecx
mov ecx, dword [edx + 0x14]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 4]
mov eax, dword [ebx + 0x60]
mov eax, dword [eax + ecx*4]
mov ecx, ebx
mov ebx, dword [ebp - 0x1f0]
add dword [eax + 0x10], 1
adc dword [eax + 0x14], 0
add esi, 0x14
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
xorps xmm0, xmm0
mov edx, ebx
movlpd qword [ebp - 0x18], xmm0
mov dword [ebp - 0x1f4], 0
call fcn.004a1bf0
mov edx, dword [ebx + 4]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax + 0x60]
mov eax, dword [ecx + edx*4]
mov dword [ebp - 0x180], eax
test byte [eax + 8], 2
jne 0x4a54c4
mov ecx, dword [eax + 0x28]
lea edx, [ebp - 0x1f4]
call fcn.00490650
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
cmp dword [ebp - 0x1f4], eax
je 0x4a547f
mov ebx, 1
xor esi, esi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
jmp 0x4a54ca
mov eax, dword [ebp - 0x180]
mov esi, dword [eax + 0x28]
mov ecx, esi
call fcn.0048fc40
mov ebx, dword [esi + 0x20]
mov esi, dword [esi + 0x24]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
cmp esi, 0x7fffffff
jl 0x4a54b6
jg 0x4a54aa
cmp ebx, 0xffffffff
jb 0x4a54b6
mov eax, dword [ebp - 0x180]
or dword [eax + 8], 2
jmp 0x4a54ca
add ebx, 1
mov dword [ebp - 0x18], ebx
adc esi, 0
mov dword [ebp - 0x14], esi
jmp 0x4a54ca
mov esi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x4a556e
mov eax, dword [ebp - 0x170]
mov edx, dword [eax + 0xc8]
test edx, edx
je 0x4a5506
mov eax, dword [edx + 4]
test eax, eax
je 0x4a54fb
mov edx, eax
mov eax, dword [edx + 4]
test eax, eax
jne 0x4a54f2
mov eax, dword [edx + 0x10]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*8]
jmp 0x4a5512
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x17c]
lea ecx, [ecx + eax*8]
mov dword [ebp - 0x188], ecx
call fcn.00498510
mov eax, dword [ebp - 0x188]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
cmp ecx, 0xffffffff
jne 0x4a5539
cmp edx, 0x7fffffff
je 0x4a55f1
mov edi, dword [ebp - 0x180]
test byte [edi + 8], 2
mov edi, dword [ebp - 0x1bc]
jne 0x4a55f1
add ecx, 1
adc edx, 0
cmp esi, edx
jg 0x4a5569
jl 0x4a555f
cmp ebx, ecx
jae 0x4a5569
mov ebx, ecx
mov esi, edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
mov dword [eax], ebx
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x180]
test byte [eax + 8], 2
je 0x4a5601
mov dword [ebp - 0x188], 0
lea eax, [ebp - 0x18]
push eax
push 8
call fcn.0047a580
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x1f4]
mov ebx, dword [ebp - 0x18]
and esi, 0x3fffffff
push eax
mov eax, dword [ebp - 0x180]
add ebx, 1
push 0
adc esi, 0
mov dword [ebp - 0x18], ebx
push esi
mov ecx, dword [eax + 0x28]
xor edx, edx
push ebx
mov dword [ebp - 0x14], esi
call fcn.004906b0
add esp, 0x18
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
cmp dword [ebp - 0x1f4], eax
jne 0x4a55fb
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp eax, 0x64
jl 0x4a5588
mov eax, 0xd
jmp 0x4a803f
mov eax, dword [ebp - 0x180]
mov byte [eax + 3], 0
mov dword [eax + 0x1c], 0
mov eax, dword [ebp - 0x194]
mov dword [eax], ebx
mov dword [eax + 4], esi
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x17c]
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov ecx, ebx
mov ebx, dword [ebp - 0x17c]
cmp byte [ecx + 1], 0xfa
mov eax, dword [ecx + 0xc]
lea eax, [eax + eax*4]
mov ebx, dword [ebx + eax*8]
mov eax, dword [edi + eax*8 + 4]
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0x194], eax
mov dword [ebp - 0xc4], eax
jne 0x4a56bd
cmp dword [edi + 0xf0], 0
je 0x4a56bd
movsx ecx, byte [esi + 1]
mov eax, dword [edi + 0x10]
add ecx, ecx
mov ecx, dword [eax + ecx*8]
mov dword [ebp - 0x190], ecx
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x194]
jmp 0x4a56d1
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x190], 0
test byte [ecx + 2], 1
je 0x4a56e6
mov edi, dword [ebp - 0x170]
inc dword [edi + 0x2c]
mov edi, dword [ebp - 0x1bc]
test byte [ecx + 2], 0x20
je 0x4a56f2
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], eax
mov ebx, dword [ebp - 0x17c]
movzx ecx, word [ecx + 2]
mov eax, dword [ebx + edx*8 + 0x10]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebx + edx*8 + 0xc]
mov dword [ebp - 0xb4], eax
test cl, 0x10
je 0x4a571a
mov ebx, dword [esi + 0x20]
jmp 0x4a571c
xor ebx, ebx
mov eax, dword [ebp - 0x17c]
mov edi, 0x4000
test word [eax + edx*8 + 8], di
mov edi, dword [ebp - 0x1bc]
je 0x4a573f
mov eax, dword [eax + edx*8]
mov dword [ebp - 0xb0], eax
jmp 0x4a5749
mov dword [ebp - 0xb0], 0
and ecx, 0xa
mov dword [ebp - 0xd0], 0
push ebx
push ecx
mov ecx, dword [esi + 0x28]
lea edx, [ebp - 0xd0]
call fcn.004947b0
add esp, 8
mov dword [ebp - 0x174], eax
mov byte [esi + 3], 0
mov dword [esi + 0x1c], 0
test eax, eax
jne 0x4a803f
mov eax, dword [ebp - 0x188]
test eax, eax
je 0x4a1fa1
push dword [ebp - 0xc4]
mov ecx, 0x17
push dword [ebp - 0xc8]
push dword [eax]
mov eax, dword [ebp - 0x16c]
push dword [ebp - 0x190]
test byte [eax + 2], 4
mov eax, 0x12
cmovne eax, ecx
push eax
push dword [edi + 0xec]
mov eax, dword [edi + 0xf0]
call eax
add esp, 0x18
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
cmp byte [edx + 1], 0xfa
mov eax, dword [edx + 8]
mov ecx, dword [edx + 4]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov ebx, dword [eax + ecx*4]
jne 0x4a5865
cmp dword [edi + 0xf0], 0
je 0x4a5865
movsx ecx, byte [ebx + 1]
mov eax, dword [edi + 0x10]
add ecx, ecx
test byte [edx + 2], 2
mov esi, dword [edx + 0x10]
mov dword [ebp - 0x194], esi
mov eax, dword [eax + ecx*8]
mov dword [ebp - 0x188], eax
je 0x4a5871
cmp byte [ebx + 4], 0
je 0x4a5871
mov esi, dword [ebx + 0x28]
mov ecx, esi
call fcn.0048fc40
mov eax, dword [esi + 0x20]
mov edx, dword [ebp - 0x16c]
mov dword [ebx + 0x40], eax
mov eax, dword [esi + 0x24]
mov esi, dword [ebp - 0x194]
mov dword [ebx + 0x44], eax
jmp 0x4a5871
mov dword [ebp - 0x188], 0
xor esi, esi
mov dl, byte [edx + 2]
mov ecx, dword [ebx + 0x28]
call fcn.00494c00
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x20], 0
test eax, eax
jne 0x4a8045
test byte [ebp - 0x190], 1
je 0x4a2c25
inc dword [ecx + 0x2c]
mov eax, dword [edi + 0xf0]
test eax, eax
je 0x4a2c25
test byte [esi + 0x24], 0x20
jne 0x4a2c25
push dword [ebx + 0x44]
push dword [ebx + 0x40]
push dword [esi]
push dword [ebp - 0x188]
push 9
push dword [edi + 0xec]
call eax
add esp, 0x18
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [ecx + 0x2c]
add dword [edi + 0x68], eax
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
mov dword [edi + 0x64], eax
mov edi, dword [ebp - 0x1bc]
mov dword [ecx + 0x2c], 0
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x21c], 0
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
mov eax, dword [edx + 0xc]
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea edx, [edx + eax*8]
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [ebp - 0x16c]
push dword [eax + 0x10]
call fcn.004ac310
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov esi, dword [ebp - 0x16c]
cmp dword [ebp - 0x21c], eax
jne 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebx + 8]
lea eax, [eax + eax*4]
lea edx, [ecx + eax*8]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
call fcn.004ac270
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov eax, ebx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x170]
mov esi, ebx
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004a1bf0
mov edx, dword [ebx + 4]
mov esi, eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax + 0x60]
mov ecx, dword [ecx + edx*4]
mov ebx, dword [ecx + 0x28]
mov ecx, ebx
call fcn.0048fc40
mov eax, dword [ebx + 0x2c]
cmp eax, dword [edi + 0x6c]
ja 0x4a7118
push esi
push eax
xor edx, edx
mov ecx, ebx
call fcn.00498dd0
add esp, 8
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov ecx, dword [ebp - 0x16c]
cmp dword [ecx + 0xc], eax
jne 0x4a1fa1
mov eax, 0x1000
test word [esi + 8], ax
je 0x4a1fa1
mov ecx, esi
call fcn.00497f70
test eax, eax
jne 0x4a4113
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov ecx, dword [ebp - 0x16c]
mov ebx, eax
mov eax, dword [ebp - 0x170]
mov edx, dword [ecx + 4]
mov ecx, dword [eax + 0x60]
mov esi, dword [ecx + edx*4]
cmp byte [esi + 2], 0
je 0x4a5afe
mov eax, 1
mov word [ebx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
cmp byte [esi + 3], 0
je 0x4a5b38
mov ecx, dword [esi + 0x40]
mov dword [ebp - 0x20], ecx
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x1c], eax
mov dword [ebx], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
cmp byte [esi], 2
jne 0x4a5b9d
mov ecx, dword [esi + 0x28]
lea edx, [ebp - 0x20]
push edx
push ecx
mov esi, dword [ecx]
mov eax, dword [esi]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [ebp - 0x170]
add esp, 8
mov edx, esi
mov dword [ebp - 0x174], eax
call fcn.0049e760
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4a803f
mov ecx, dword [ebp - 0x20]
mov dword [ebx], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 0x28]
cmp byte [eax], 0
je 0x4a5bbc
mov ecx, esi
call fcn.0049cdd0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
jmp 0x4a5bc4
xor ecx, ecx
mov dword [ebp - 0x174], ecx
cmp byte [esi + 2], 0
je 0x4a5bf3
mov eax, 1
mov word [ebx + 8], ax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov esi, dword [esi + 0x28]
mov ecx, esi
call fcn.0048fc40
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x20], ecx
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x1c], eax
mov dword [ebx], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
cmp byte [ecx], 0
mov byte [ecx + 2], 1
mov dword [ecx + 0x1c], 0
jne 0x4a1fa7
mov ecx, dword [ecx + 0x28]
call fcn.0048bc50
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [ebp - 0x170]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x220], 0
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov ecx, dword [esi + 0x28]
cmp dl, 0x82
jne 0x4a5ca7
mov dword [esi + 0x20], 0xffffffff
cmp byte [ecx], 0
je 0x4a1fa1
lea edx, [ebp - 0x220]
call fcn.00490650
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x220]
mov byte [esi + 2], al
mov byte [esi + 3], 0
mov dword [esi + 0x1c], 0
test ecx, ecx
jne 0x4a824b
mov esi, dword [ebp - 0x16c]
cmp dword [esi + 8], ecx
jle 0x4a1fa7
test eax, eax
jne 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
lea edx, [ebp - 0x224]
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
mov esi, dword [eax + 0x28]
mov ecx, esi
call fcn.00490620
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
cmp dword [ebp - 0x224], eax
jne 0x4a77e1
mov ecx, esi
call fcn.00490b70
test edx, edx
jl 0x4a1fa1
jg 0x4a5d63
test eax, eax
jb 0x4a1fa1
push edx
push eax
call fcn.0047c5f0
mov esi, dword [ebp - 0x16c]
add esp, 8
mov ecx, dword [ebp - 0x170]
cwde
cmp eax, dword [esi + 0xc]
jge case.0x4a1d15.86
mov dword [ebp - 0x224], 1
jmp 0x4a1d65
inc dword [ecx + 0xac]
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1fc], 1
mov ecx, dword [edx + 4]
lea edx, [ebp - 0x1fc]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
cmp byte [esi], 1
jne 0x4a5dcb
mov ecx, esi
call fcn.004ac180
jmp 0x4a5dde
mov ecx, dword [esi + 0x28]
call fcn.00490620
mov byte [esi + 3], 0
mov dword [esi + 0x1c], 0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov eax, dword [ebp - 0x1fc]
mov byte [esi + 2], al
mov esi, dword [ebp - 0x16c]
test eax, eax
jne 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov edx, esi
mov ecx, edi
call fcn.004ac1e0
jmp 0x4a5e60
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
push dword [edx + 0xc]
mov esi, dword [eax + ecx*4]
mov eax, dword [edx + 0x10]
push dword [esi + 0x28]
call eax
add esp, 8
mov dword [ebp - 0x174], eax
mov dword [esi + 0x1c], 0
test eax, eax
jne 0x4a5e90
mov ecx, dword [ebp - 0x170]
mov byte [esi + 2], al
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax + 2]
inc dword [ecx + eax*4 + 0xa4]
jmp case.0x4a1d15.11
cmp eax, 0x65
jne 0x4a803f
xor ecx, ecx
mov byte [esi + 2], 1
mov dword [ebp - 0x174], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
cmp dword [edi + 0x110], 0
jne 0x4a84bf
mov ebx, dword [ebp - 0x178]
cmp dword [ebp - 0x1f0], ebx
jb case.0x4a1d15.86
mov eax, dword [edi + 0x148]
test eax, eax
je 0x4a1fa7
add ebx, dword [edi + 0x150]
push dword [edi + 0x14c]
mov dword [ebp - 0x178], ebx
call eax
add esp, 4
test eax, eax
jne 0x4a8659
cmp dword [ebp - 0x1f0], ebx
jae 0x4a5ed0
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov esi, dword [ebp - 0x17c]
mov ecx, dword [edx + 4]
mov edx, dword [ebp - 0x170]
mov eax, dword [edx + 0x60]
mov ebx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x16c]
test byte [ecx + 2], 1
mov eax, dword [ecx + 8]
lea eax, [eax + eax*4]
lea esi, [esi + eax*8]
je 0x4a5f52
inc dword [edx + 0x2c]
mov eax, 0x4000
test word [esi + 8], ax
je 0x4a5f72
mov ecx, esi
call fcn.00497fc0
test eax, eax
jne 0x4a803f
mov ecx, dword [ebp - 0x16c]
cmp byte [ecx], 0x83
jne 0x4a5f8b
mov edx, esi
mov ecx, ebx
call fcn.004ab200
mov dword [ebp - 0x174], eax
jmp 0x4a2cd0
mov eax, dword [esi + 0xc]
cdq
mov dword [ebp - 0x160], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x168], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x15c], edx
mov edx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea eax, [edx + eax*8]
mov dword [ebp - 0x154], eax
mov ax, word [ecx + 0x10]
mov word [ebp - 0x150], ax
movzx eax, word [ecx + 2]
test al, 0x10
je 0x4a5fd1
mov ecx, dword [ebx + 0x20]
jmp 0x4a5fd3
xor ecx, ecx
push ecx
mov ecx, dword [ebx + 0x28]
lea edx, [ebp - 0x168]
and eax, 0xa
push eax
call fcn.004947b0
add esp, 8
mov dword [ebx + 0x1c], 0
mov dword [ebp - 0x174], eax
jmp 0x4a2cd0
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [esi + 0x2c]
mov ebx, dword [esi + 0x28]
mov dword [ebp - 0x94], eax
mov ax, word [edx + 0xc]
mov word [ebp - 0x8c], ax
mov eax, dword [edx + 8]
lea edx, [ebp - 0x94]
mov byte [ebp - 0x8a], 0
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov ecx, ebx
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x254]
push eax
push 0
push 0
push 0
call fcn.004906b0
add esp, 0x10
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
cmp dword [ebp - 0x254], eax
jne 0x4a608d
mov dl, 4
mov ecx, ebx
call fcn.00494c00
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov esi, dword [eax + ecx*4]
mov eax, dword [esi + 0x28]
cmp byte [eax], 0
je 0x4a60f5
mov ecx, esi
call fcn.0049cdd0
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov edx, dword [ebp - 0x16c]
jmp 0x4a60fd
xor ecx, ecx
mov dword [ebp - 0x174], ecx
cmp byte [esi + 2], 0
jne 0x4a61d3
mov edx, dword [esi + 0x28]
lea eax, [ebp - 0x210]
xorps xmm0, xmm0
mov ecx, edi
push eax
movlpd qword [ebp - 0x210], xmm0
call fcn.0049e430
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a803f
mov eax, dword [ebp - 0x16c]
cmp byte [eax], 0x86
jne 0x4a6195
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x210]
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x20c]
mov dword [ecx + 0x44], eax
mov eax, dword [ebp - 0x16c]
mov word [ecx + 2], 0x100
mov eax, dword [eax + 0x10]
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x24], esi
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ecx, dword [ebp - 0x170]
mov edx, eax
call fcn.004a1bf0
mov ecx, dword [ebp - 0x210]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x20c]
mov dword [eax + 4], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
call fcn.004987f0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
cmp byte [ebp - 0x1a1], 0x27
mov dword [ebp - 0x1ec], 0
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov edx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x16c]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x270], eax
mov ax, word [ecx + 0x10]
mov word [ebp - 0x268], ax
sbb al, al
mov byte [ebp - 0x266], al
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov ecx, edi
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x270]
push eax
call fcn.0049e590
mov dword [ebp - 0x174], eax
add esp, 8
mov eax, dword [ebp - 0x16c]
test byte [eax], 1
mov eax, dword [ebp - 0x1ec]
je 0x4a6297
neg eax
jmp 0x4a6298
inc eax
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x1ec], eax
test ecx, ecx
jne 0x4a824b
mov esi, dword [ebp - 0x16c]
test eax, eax
jg 0x4a77e7
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov esi, eax
mov eax, 1
mov word [esi + 8], ax
mov ecx, dword [edi + 0xc0]
inc ecx
cmp dword [edi + 0xb4], ecx
jg 0x4a81d1
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x204]
mov ecx, dword [edi + 0x10]
push eax
mov dword [ebp - 0x204], 0
mov ebx, dword [edx + 0xc]
mov eax, ebx
mov edx, dword [edx + 4]
add eax, eax
mov ecx, dword [ecx + eax*8 + 4]
call fcn.00495870
mov ecx, dword [ebp - 0x204]
add esp, 4
mov dword [ebp - 0x174], eax
mov eax, 4
mov word [esi + 8], ax
mov eax, ecx
cdq
mov dword [esi], eax
mov eax, dword [ebp - 0x174]
mov dword [esi + 4], edx
test eax, eax
jne 0x4a803f
test ecx, ecx
je 0x4a1fa1
mov eax, dword [ebp - 0x16c]
mov edx, ebx
push dword [eax + 4]
push ecx
mov ecx, edi
call fcn.004c0920
lea ecx, [ebx + 1]
add esp, 8
mov byte [ebp - 0x1cd], cl
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x24], 0
cmp dword [edx + 0xc], ecx
cmove eax, ecx
mov ecx, dword [edi + 0x10]
push eax
mov eax, dword [edx + 8]
mov edx, dword [edx + 4]
add eax, eax
mov ecx, dword [ecx + eax*8 + 4]
call fcn.004954d0
mov esi, dword [ebp - 0x16c]
add esp, 4
mov dword [ebp - 0x174], eax
cmp dword [esi + 0xc], 0
je 0x4a640b
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x24]
add dword [ecx + 0x2c], eax
mov ecx, dword [esi + 0xc]
test ecx, ecx
jle 0x4a6405
mov ebx, dword [ebp - 0x17c]
lea ecx, [ecx + ecx*4]
cdq
add dword [ebx + ecx*8], eax
adc dword [ebx + ecx*8 + 4], edx
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4a8045
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov ecx, dword [eax + ecx*4]
cmp byte [ecx], 1
jne 0x4a6471
mov edx, dword [ecx + 0x28]
mov ecx, edi
call fcn.004aa430
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ecx, dword [ecx + 0x28]
push 0
mov edx, dword [ecx + 0x40]
mov ecx, dword [ecx + 8]
call fcn.004954d0
add esp, 4
mov dword [ebp - 0x174], eax
jmp 0x4a2cd0
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov esi, eax
mov dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x16c]
lea edx, [ebp - 0x218]
mov ecx, dword [eax + 4]
push dword [eax + 0xc]
shl ecx, 4
add ecx, dword [edi + 0x10]
mov ecx, dword [ecx + 4]
call fcn.004952b0
mov ecx, dword [ebp - 0x170]
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a8045
mov eax, dword [ebp - 0x218]
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
mov esi, dword [ebp - 0x16c]
add esi, 0x14
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
inc byte [edi + 0x5a]
push 0
push 0
push 0
push dword [edx + 0x10]
push edi
call fcn.004d0110
add esp, 0x14
mov dword [ebp - 0x174], eax
dec byte [edi + 0x5a]
jmp 0x4a2cd0
mov edx, dword [ebp - 0x16c]
mov ecx, dword [edx + 0x10]
mov esi, dword [edx + 4]
test ecx, ecx
jne 0x4a6587
mov eax, dword [edi + 0x10]
mov ecx, esi
add ecx, ecx
push dword [eax + ecx*8 + 0xc]
call fcn.004c4b80
mov eax, dword [ebp - 0x170]
add esp, 4
and dword [edi + 0x18], 0xffffffef
add eax, 0x7c
mov edx, esi
mov ecx, edi
push 1
push eax
call fcn.004d4ae0
mov ecx, dword [ebp - 0x170]
add esp, 8
or dword [edi + 0x18], 1
mov dword [ebp - 0x174], eax
and dword [ecx + 0x98], 0xfffffffc
jmp 0x4a663e
mov eax, dword [ebp - 0x170]
add eax, 0x7c
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x80], eax
add esi, esi
mov eax, dword [edi + 0x10]
push ecx
push 0x70648c
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x74], 0
push dword [eax + esi*8]
push 0x7064e0
push edi
call fcn.0047a2b0
mov esi, eax
add esp, 0x14
test esi, esi
je 0x4a81e8
push 0
lea eax, [ebp - 0x84]
mov byte [edi + 0xa5], 1
push eax
push fcn.004d48f0
push esi
push edi
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x70], 0
call fcn.004d0110
add esp, 0x14
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a6622
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x4a6622
cmp dword [ebp - 0x70], eax
jne 0x4a6622
mov ecx, 0x15f51
call fcn.00502bb0
mov dword [ebp - 0x174], eax
mov edx, esi
mov ecx, edi
call fcn.00477ce0
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
mov byte [edi + 0xa5], 0
test eax, eax
jne 0x4a81f2
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, edi
mov edx, dword [edx + 4]
call fcn.004bb9f0
mov dword [ebp - 0x174], eax
jmp 0x4a2cd0
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push dword [edx + 0x10]
mov edx, dword [edx + 4]
call fcn.004be000
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push dword [edx + 0x10]
mov edx, dword [edx + 4]
call fcn.004bd790
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push dword [edx + 0x10]
mov edx, dword [edx + 4]
call fcn.004e2070
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 0x10]
add edx, 4
lea esi, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ecx + esi*8]
mov ecx, dword [edi + 0x10]
inc eax
push eax
mov eax, dword [ebp - 0x16c]
push dword [eax + 8]
movzx eax, word [eax + 2]
add eax, eax
mov ecx, dword [ecx + eax*8 + 4]
call fcn.004964b0
add esp, 0xc
mov dword [ebp - 0x194], eax
mov ecx, ebx
call fcn.004987f0
mov eax, dword [ebp - 0x234]
test eax, eax
je 0x4a67b1
mov ecx, dword [ebp - 0x194]
test ecx, ecx
je 0x4a4113
mov edi, dword [ebp - 0x17c]
dec eax
cdq
push fcn.00477c30
push 1
sub dword [edi + esi*8], eax
push 0xffffffffffffffff
sbb dword [edi + esi*8 + 4], edx
mov edx, ecx
mov ecx, ebx
call fcn.00498ac0
add esp, 0xc
movzx edx, byte [ebp - 0x1ac]
mov ecx, ebx
call fcn.00497d60
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
test byte [ecx + eax*8 + 8], 0x10
lea esi, [ecx + eax*8]
mov eax, dword [edx + 8]
lea ebx, [eax + eax*4]
jne 0x4a6810
mov ecx, esi
call fcn.00498900
test eax, eax
jne 0x4a4113
mov edi, dword [ebp - 0x17c]
push dword [edi + ebx*8 + 4]
mov ecx, dword [esi + 0x10]
push dword [edi + ebx*8]
call fcn.00482680
add esp, 8
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
test byte [ebx + eax*8 + 8], 0x10
lea esi, [ebx + eax*8]
je 0x4a689e
mov ecx, dword [esi + 0x10]
lea edx, [ebp - 0x260]
call fcn.00482a70
test eax, eax
je 0x4a689e
mov eax, dword [ebp - 0x16c]
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
call fcn.00498850
add esp, 8
jmp 0x4a5ea5
mov ecx, esi
call fcn.004987f0
jmp 0x4a7996
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
test byte [ecx + eax*8 + 8], 0x10
lea esi, [ecx + eax*8]
mov eax, dword [edx + 0xc]
lea ebx, [eax + eax*4]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x188], eax
jne 0x4a68ea
mov ecx, esi
call fcn.00498900
test eax, eax
jne 0x4a4113
mov eax, dword [ebp - 0x188]
mov edi, dword [ebp - 0x17c]
test eax, eax
je 0x4a6918
push dword [edi + ebx*8 + 4]
mov ecx, dword [esi + 0x10]
mov edx, eax
push dword [edi + ebx*8]
call fcn.00482ad0
add esp, 8
test eax, eax
jne 0x4a77e1
mov eax, dword [ebp - 0x188]
test eax, eax
js 0x4a1fa1
jmp 0x4a6816
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [edx + 0xc]
mov esi, dword [edx + 0x10]
mov dword [ebp - 0x1b4], esi
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
mov eax, edx
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x18c], ecx
cmp word [eax + 2], 0
je 0x4a6979
mov eax, dword [edx + 0xc8]
mov ecx, dword [esi + 0x14]
test eax, eax
je 0x4a6973
cmp dword [eax + 0x1c], ecx
je 0x4a7f35
mov eax, dword [eax + 4]
test eax, eax
jne 0x4a6963
mov ecx, dword [ebp - 0x18c]
mov eax, dword [edx + 0xd0]
cmp eax, dword [edi + 0x94]
jge 0x4a8219
test byte [ecx + 8], 0x10
jne 0x4a6b5b
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 8]
add eax, ecx
test ecx, ecx
lea esi, [eax + 1]
cmovne esi, eax
lea eax, [esi + 2]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*2]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [eax + 4]
add eax, 7
mov eax, eax
test eax, eax
jns 0x4a69c3
add eax, 7
sar eax, 3
lea eax, [eax + ecx*4]
mov ecx, edi
mov dword [ebp - 0x194], eax
cdq
push edx
push eax
call fcn.00477f70
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4a4113
mov ecx, dword [ebp - 0x18c]
call fcn.00498300
mov ecx, dword [ebp - 0x18c]
mov eax, 0x410
mov edx, dword [ebp - 0x16c]
sub edx, dword [ebp - 0x1a8]
mov word [ecx + 8], ax
mov eax, dword [ebp - 0x194]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x170]
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x24], 0x49adf0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebx], eax
mov dword [ebx + 0x3c], esi
mov eax, dword [ecx + 0xc]
mov dword [ebx + 0x40], eax
mov eax, 0x66666667
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x170]
mov dword [ebx + 0x30], eax
mov eax, dword [edx + 0x58]
mov dword [ebx + 0x10], eax
mov eax, dword [edx + 0x18]
mov dword [ebx + 0x38], eax
mov eax, dword [edx + 0x60]
mov dword [ebx + 0x14], eax
mov eax, dword [edx + 0x1c]
mov dword [ebx + 0x2c], eax
mov eax, dword [edx + 0x68]
mov dword [ebx + 8], eax
mov eax, dword [edx + 0x6c]
mov dword [ebx + 0x34], eax
mov eax, dword [ecx + 0x14]
mov dword [ebx + 0x1c], eax
lea eax, [esi + 2]
lea eax, [eax + eax*4]
lea ecx, [ebx + eax*8]
lea eax, [ebx + 0x50]
cmp eax, ecx
je 0x4a6a9e
mov esi, 0x80
nop
mov word [eax + 8], si
mov dword [eax + 0x20], edi
add eax, 0x28
cmp eax, ecx
jne 0x4a6a90
mov esi, dword [ebp - 0x1b4]
inc dword [edx + 0xd0]
lea ecx, [ebx + 0x50]
mov eax, dword [edx + 0xc8]
mov dword [ebx + 4], eax
mov eax, dword [edi + 0x28]
mov dword [ebx + 0x20], eax
mov eax, dword [edi + 0x2c]
mov dword [ebx + 0x24], eax
mov eax, dword [edx + 0x2c]
mov dword [ebx + 0x44], eax
mov eax, dword [edx]
mov dword [ebp - 0x17c], ecx
mov eax, dword [eax + 0x64]
mov dword [ebx + 0x48], eax
mov eax, dword [edx + 0xdc]
mov dword [ebx + 0x28], eax
mov dword [edx + 0x58], ecx
mov dword [edx + 0xdc], 0
mov dword [edx + 0x2c], 0
mov dword [edx + 0xc8], ebx
mov eax, dword [ebx + 0x3c]
mov dword [edx + 0x18], eax
movzx eax, word [ebx + 0x40]
mov dword [edx + 0x1c], eax
mov eax, dword [edx + 0x18]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
mov dword [edx + 0x60], ecx
mov eax, dword [esi + 0xc]
lea ecx, [ecx + eax*4]
mov dword [ebx + 0x18], ecx
mov eax, dword [esi + 4]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
push eax
push 0
push ecx
call fcn.00639370
mov edx, dword [esi]
add esp, 0xc
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x1a8], edx
mov dword [ecx + 0x68], edx
mov eax, dword [esi + 4]
lea esi, [edx - 0x14]
mov dword [ecx + 0x6c], eax
mov dword [ebp - 0x16c], esi
jmp 0x4a5eb1
mov ebx, dword [ecx + 0x10]
jmp 0x4a6aa4
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov esi, eax
mov eax, dword [ebp - 0x170]
push 0x1000
mov eax, dword [eax + 0xc8]
mov ecx, dword [eax + 0x30]
lea edx, [ecx + ecx*4]
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [ecx + edx*4 + 4]
mov edx, dword [ebp - 0x16c]
add ecx, dword [edx + 4]
lea ecx, [ecx + ecx*4]
lea edx, [eax + ecx*8]
mov ecx, esi
call fcn.004989b0
add esp, 4
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [edi + 0x20]
and eax, 0x80000
or eax, 0
mov eax, dword [ebp - 0x16c]
mov esi, eax
je 0x4a6c03
mov eax, dword [eax + 8]
mov ebx, dword [ebp - 0x1f0]
cdq
add dword [edi + 0x1e0], eax
adc dword [edi + 0x1e4], edx
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
jmp 0x4a1cf1
cmp dword [eax + 4], 0
mov eax, dword [eax + 8]
cdq
je 0x4a6c2d
add dword [edi + 0x1d8], eax
mov ebx, dword [ebp - 0x1f0]
adc dword [edi + 0x1dc], edx
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
jmp 0x4a1cf1
add dword [ecx + 0x40], eax
mov edi, dword [ebp - 0x1bc]
adc dword [ecx + 0x44], edx
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
cmp dword [esi + 4], 0
je 0x4a6c5b
mov eax, dword [edi + 0x1d8]
or eax, dword [edi + 0x1dc]
jmp 0x4a6c61
mov eax, dword [ecx + 0x40]
or eax, dword [ecx + 0x44]
jne case.0x4a1d15.86
mov eax, dword [edi + 0x1e0]
or eax, dword [edi + 0x1e4]
je 0x4a1d65
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ecx + 0xc8]
test edx, edx
je 0x4a6cc3
mov eax, dword [edx + 4]
test eax, eax
je 0x4a6ca9
nop
mov edx, eax
mov eax, dword [edx + 4]
test eax, eax
jne 0x4a6ca0
mov eax, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [eax + 4]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x10]
lea edi, [eax + ecx*8]
jmp 0x4a6cd8
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea edi, [ebx + eax*8]
mov ecx, edi
call fcn.00498510
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + 8]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
mov ecx, esi
call fcn.00498510
mov ecx, dword [esi + 4]
mov eax, dword [esi]
cmp dword [edi + 4], ecx
jg 0x4a1fa1
jl 0x4a6d0d
cmp dword [edi], eax
jae 0x4a1fa1
mov dword [edi], eax
mov dword [edi + 4], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edi, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edi + 4]
lea esi, [eax + eax*4]
mov edi, dword [ebx + esi*8 + 4]
mov ecx, dword [ebx + esi*8]
test edi, edi
jl 0x4a1fa1
jg 0x4a6d5d
test ecx, ecx
je 0x4a1fa1
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0xc]
cdq
sub ecx, eax
mov dword [ebx + esi*8], ecx
sbb edi, edx
mov dword [ebx + esi*8 + 4], edi
jmp 0x4a1d59
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 4]
lea esi, [eax + eax*4]
mov eax, dword [edx + 0xc]
lea ebx, [eax + eax*4]
call fcn.004a1bf0
mov edx, dword [ebp - 0x17c]
mov edi, eax
mov ecx, dword [edx + esi*8 + 4]
mov eax, dword [edx + esi*8]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
test ecx, ecx
jl 0x4a6e28
jg 0x4a6dbb
test eax, eax
je 0x4a6e28
mov ecx, dword [edx + ebx*8 + 4]
mov eax, dword [edx + ebx*8]
test ecx, ecx
jl 0x4a6dcc
jg 0x4a6de3
test eax, eax
jne 0x4a6de3
xorps xmm0, xmm0
movlpd qword [ebp - 0x198], xmm0
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x198]
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.0047c360
add esp, 8
test eax, eax
jne 0x4a6e28
mov eax, dword [ebp - 0x230]
mov dword [edi], eax
mov eax, dword [ebp - 0x22c]
mov dword [edi + 4], eax
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea esi, [eax + eax*4]
mov ecx, dword [ebx + esi*8]
mov eax, ecx
mov edx, dword [ebx + esi*8 + 4]
or eax, edx
je 0x4a1fa1
test edx, edx
jl 0x4a1d59
jg 0x4a6e8a
test ecx, ecx
je 0x4a1d59
sub ecx, 1
mov dword [ebx + esi*8], ecx
sbb edx, 0
mov dword [ebx + esi*8 + 4], edx
jmp 0x4a1d59
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea ecx, [eax + eax*4]
mov edx, dword [ebx + ecx*8 + 4]
mov eax, dword [ebx + ecx*8]
cmp edx, 0x80000000
jl 0x4a6ed0
jg 0x4a6ec3
test eax, eax
je 0x4a6ed0
sub eax, 1
mov dword [ebx + ecx*8], eax
sbb edx, 0
mov dword [ebx + ecx*8 + 4], edx
mov eax, dword [ebx + ecx*8]
or eax, dword [ebx + ecx*8 + 4]
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
je 0x4a1d65
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push 0
movzx ebx, word [edx + 2]
lea eax, [ebx*4 + 0x44]
push eax
call fcn.00478070
mov esi, eax
add esp, 8
test esi, esi
je 0x4a4113
mov dword [esi + 8], 0
lea ecx, [ebx + 7]
lea ecx, [esi + ecx*4]
mov eax, 1
mov dword [esi], ecx
mov word [ecx + 8], ax
mov dword [ecx + 0x20], edi
mov dword [ecx + 0x18], 0
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + 0x10]
sub ecx, dword [ebp - 0x1a8]
mov dword [esi + 4], eax
mov eax, 0x66666667
imul ecx
mov byte [esi + 0x18], 0
sar edx, 3
mov eax, edx
mov dword [esi + 0x14], 0
shr eax, 0x1f
add eax, edx
mov byte [esi + 0x19], bl
mov edx, dword [ebp - 0x16c]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x170]
mov dword [esi + 0xc], eax
mov word [edx], 0xf09b
mov dword [edx + 0x10], esi
jmp 0x4a6f9a
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x17c]
mov esi, dword [edx + 0x10]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov dword [ebp - 0x194], ebx
cmp dword [esi + 8], ebx
je 0x4a6ffd
movzx ecx, byte [esi + 0x19]
sub ecx, 1
mov dword [esi + 8], ebx
js 0x4a6ffd
mov edi, dword [ebp - 0x16c]
lea edx, [ecx + 7]
mov ebx, dword [ebp - 0x17c]
lea edx, [esi + edx*4]
mov eax, dword [edi + 8]
lea edx, [edx - 4]
add eax, ecx
sub ecx, 1
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8]
mov dword [edx + 4], eax
jns 0x4a6fd5
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebp - 0x16c]
inc dword [ebx + 0xc]
lea eax, [esi + 0x1c]
cmp dword [edx + 4], 0
mov ecx, dword [esi + 4]
push eax
movzx eax, byte [esi + 0x19]
push eax
push esi
je 0x4a7018
mov eax, dword [ecx + 0x1c]
jmp 0x4a701b
mov eax, dword [ecx + 0x10]
call eax
mov eax, dword [esi + 0x14]
add esp, 0xc
test eax, eax
je 0x4a1fa1
jle 0x4a7054
push dword [esi]
call fcn.0049edc0
add esp, 4
push eax
push 0x706510
push dword [ebp - 0x170]
call fcn.00499530
mov eax, dword [esi + 0x14]
add esp, 0xc
mov dword [ebp - 0x174], eax
cmp byte [esi + 0x18], 0
je 0x4a7083
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax - 0x10]
test eax, eax
je 0x4a707f
mov ecx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
push 0
push 1
lea ecx, [ecx + eax*8]
call fcn.00498850
add esp, 8
mov byte [esi + 0x18], 0
mov ecx, dword [esi]
call fcn.00498300
mov eax, dword [esi]
mov ecx, 1
mov word [eax + 8], cx
mov dword [esi + 0x14], 0
jmp 0x4a2cca
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
mov eax, dword [edx + 4]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
mov eax, dword [edx + 0xc]
mov ecx, esi
test eax, eax
je 0x4a70e3
push dword [edx + 0x10]
lea eax, [eax + eax*4]
lea edx, [ebx + eax*8]
call fcn.004981c0
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8]
jmp 0x4a70ed
mov edx, dword [edx + 0x10]
call fcn.004980e0
mov ecx, eax
mov dword [ebp - 0x174], ecx
test ecx, ecx
jne 0x4a822e
movzx edx, byte [ebp - 0x1ac]
mov ecx, esi
call fcn.00497d60
mov ecx, esi
call fcn.00498950
test eax, eax
je 0x4a1fa1
push 0x70658c
push dword [ebp - 0x170]
call fcn.00499530
mov eax, 0x12
jmp 0x4a803c
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x10], 0
push eax
push dword [edx + 8]
mov edx, dword [edx + 4]
mov ecx, edi
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0xc], 0xffffffff
call fcn.00501620
add esp, 0xc
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4a7189
cmp eax, 5
jne 0x4a803f
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x16c]
xor esi, esi
mov ecx, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea edi, [ecx + eax*8]
mov eax, dword [ebp + esi*4 - 0x10]
mov ecx, edi
cdq
push edx
push eax
call fcn.00498850
inc esi
add esp, 8
add edi, 0x28
cmp esi, 3
jl 0x4a71a0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ebx, dword [ebp - 0x16c]
mov edx, ebx
call fcn.004a1bf0
mov edx, dword [ebx + 4]
mov ecx, dword [edi + 0x10]
add edx, edx
mov esi, dword [ebx + 0xc]
cmp esi, 0xffffffff
mov dword [ebp - 0x188], eax
mov eax, dword [ecx + edx*8 + 4]
mov dword [ebp - 0x194], eax
mov ecx, dword [eax + 4]
mov ecx, dword [ecx]
mov dword [ebp - 0x184], ecx
movzx edx, byte [ecx + 5]
mov dword [ebp - 0x180], edx
cmove esi, edx
call fcn.00487f40
test eax, eax
mov ebx, edx
mov eax, 0x716a52
cmovne ebx, esi
cmp byte [ecx + 0xf], 0
jne 0x4a723a
mov eax, dword [ecx + 0xa8]
cmp ebx, 5
jne 0x4a726c
mov ecx, eax
call fcn.0047b060
test eax, eax
je 0x4a7259
mov ecx, dword [ebp - 0x184]
call fcn.00487fc0
test eax, eax
jne 0x4a7266
mov edx, dword [ebp - 0x180]
mov ebx, edx
jmp 0x4a7316
mov edx, dword [ebp - 0x180]
cmp ebx, edx
je 0x4a7302
cmp edx, 5
je 0x4a7282
cmp ebx, 5
jne 0x4a7310
cmp byte [edi + 0x4f], 0
je 0x4a8256
cmp dword [edi + 0xb4], 1
jg 0x4a8256
cmp edx, 5
jne 0x4a72c2
mov edx, edi
call fcn.00488130
mov esi, dword [ebp - 0x184]
mov edx, eax
mov dword [ebp - 0x174], edx
test edx, edx
jne 0x4a7308
mov edx, ebx
mov ecx, esi
call fcn.00487e30
jmp 0x4a72e0
cmp edx, 4
jne 0x4a72d1
mov edx, 2
call fcn.00487e30
cmp dword [ebp - 0x174], 0
jne 0x4a7310
mov esi, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x194]
xor edx, edx
cmp ebx, 5
sete dl
inc edx
call fcn.00496bd0
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x174], eax
jmp 0x4a731c
mov esi, dword [ebp - 0x184]
mov edx, dword [ebp - 0x180]
jmp 0x4a731c
mov edx, dword [ebp - 0x180]
mov esi, dword [ebp - 0x184]
cmp dword [ebp - 0x174], 0
mov ecx, esi
cmove edx, ebx
call fcn.00487e30
mov ebx, dword [ebp - 0x188]
mov ecx, 0xa02
mov word [ebx + 8], cx
mov ecx, eax
call fcn.004d1630
mov ecx, eax
mov dword [ebx + 0x10], eax
call fcn.0047b060
movzx edx, byte [ebp - 0x1ac]
mov ecx, ebx
mov dword [ebx + 0xc], eax
mov byte [ebx + 0xa], 1
call fcn.00497d60
jmp 0x4a2cca
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 8]
test eax, eax
je 0x4a7382
mov ebx, dword [ebp - 0x17c]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8]
jmp 0x4a7384
xor eax, eax
push eax
push dword [edx + 4]
add ecx, 0x7c
mov edx, edi
call fcn.004e5de0
add esp, 8
mov dword [ebp - 0x174], eax
jmp 0x4a2cd0
mov edx, dword [ebp - 0x16c]
mov eax, dword [edi + 0x10]
mov ecx, dword [edx + 4]
add ecx, ecx
mov ecx, dword [eax + ecx*8 + 4]
call fcn.0048f190
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4a1fa1
mov ecx, dword [ebp - 0x170]
cmp eax, 0x65
jne 0x4a8045
mov dword [ebp - 0x174], 0
jmp 0x4a1d5f
cmp dword [esi + 4], 0
jne 0x4a740d
mov edx, dword [esi + 8]
mov ecx, edi
call fcn.0049e670
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov eax, dword [esi + 8]
mov edi, dword [ebp - 0x1bc]
inc eax
xor eax, dword [ecx + 0x98]
mov ebx, dword [ebp - 0x1f0]
and eax, 3
xor dword [ecx + 0x98], eax
add esi, 0x14
jmp 0x4a1cf1
mov al, byte [esi + 0xc]
mov byte [ebp - 0x238], al
test al, al
jne 0x4a7462
mov eax, dword [edi + 0x20]
and eax, 0x400
mov dword [ebp - 0x198], eax
mov eax, 0
jne case.0x4a1d15.86
test eax, eax
jne case.0x4a1d15.86
mov eax, dword [ebp - 0x16c]
mov ecx, dword [edi + 0x10]
mov edx, dword [ebp - 0x16c]
push dword [ebp - 0x238]
mov eax, dword [eax + 4]
add eax, eax
mov edx, dword [edx + 8]
mov ecx, dword [ecx + eax*8 + 4]
call fcn.00496ae0
add esp, 4
mov dword [ebp - 0x174], eax
test eax, eax
je 0x4a1fa1
cmp al, 6
jne 0x4a803f
mov eax, dword [ebp - 0x16c]
push dword [eax + 0x10]
push 0x706524
push dword [ebp - 0x170]
call fcn.00499530
mov eax, dword [ebp - 0x174]
add esp, 0xc
jmp 0x4a803f
mov edx, dword [ebp - 0x16c]
mov ecx, edi
mov esi, dword [edx + 0x10]
mov edx, esi
call fcn.004e7a40
mov dword [ebp - 0x174], eax
test esi, esi
je 0x4a2cd0
mov edx, dword [esi + 8]
mov ecx, dword [ebp - 0x170]
call fcn.0049e760
jmp 0x4a2cca
mov edx, dword [ebp - 0x16c]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x17c]
movq qword [ebp - 0xf8], xmm0
movups xmmword [ebp - 0x118], xmm0
mov eax, dword [edx + 8]
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf8], edi
lea eax, [eax + eax*4]
lea edx, [ecx + eax*8]
lea ecx, [ebp - 0x118]
call fcn.00498a00
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x118]
push eax
call fcn.0049edc0
add esp, 4
test eax, eax
je 0x4a7577
mov ecx, dword [ebp - 0x170]
add ecx, 0x7c
push ecx
push eax
mov eax, dword [ebp - 0x16c]
mov ecx, edi
mov edx, dword [eax + 4]
call fcn.004e74e0
add esp, 8
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0x118]
call fcn.00498300
jmp 0x4a2cca
mov edx, dword [ebp - 0x16c]
mov ecx, edi
inc dword [edi + 0xc0]
push dword [edx + 0x10]
mov edx, dword [edx + 4]
call fcn.004e7840
add esp, 4
mov dword [ebp - 0x174], eax
dec dword [edi + 0xc0]
jmp 0x4a2cd0
mov edx, dword [ebp - 0x16c]
mov dword [ebp - 0x5c], 0
mov eax, dword [edx + 0x10]
mov esi, dword [eax + 8]
test esi, esi
je 0x4a8281
mov ebx, dword [esi]
test ebx, ebx
je 0x4a8281
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebx + 0x18]
push esi
call eax
mov ecx, dword [ebp - 0x170]
add esp, 8
mov edx, esi
mov dword [ebp - 0x174], eax
call fcn.0049e760
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x170]
test eax, eax
jne 0x4a8045
mov eax, dword [ebp - 0x5c]
push 2
push 0xffffffffffffffff
push 0
mov dword [eax], esi
mov eax, dword [ebp - 0x16c]
mov edx, dword [eax + 4]
call fcn.004a1810
add esp, 0xc
test eax, eax
je 0x4a8271
mov ecx, dword [ebp - 0x5c]
mov dword [eax + 0x28], ecx
inc dword [esi + 4]
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x17c]
add ebx, 0x28
mov eax, dword [edx + 0xc]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x16c]
mov esi, dword [ebx + edx*8]
lea ebx, [ebx + edx*8]
movd xmm0, ebx
mov dword [ebp - 0x194], ebx
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x170]
pshufd xmm3, xmm0, 0
mov eax, dword [eax + 0x60]
mov eax, dword [eax + ecx*4]
xor ecx, ecx
mov dword [ebp - 0x1c4], eax
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x190], eax
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + edx*8]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x170]
mov edx, dword [eax + 0x5c]
test esi, esi
jle 0x4a777b
cmp esi, 8
jb 0x4a775d
cmp dword [0x715b04], 2
jl 0x4a775d
movaps xmm2, xmmword [0x6dd080]
mov eax, esi
and eax, 0x80000007
jns 0x4a7705
dec eax
or eax, 0xfffffff8
inc eax
movaps xmm1, xmmword [0x6dd0d0]
mov ebx, esi
sub ebx, eax
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm0, xmm0, 0
paddd xmm0, xmm2
pmulld xmm0, xmm1
paddd xmm0, xmm3
paddd xmm0, xmm1
movups xmmword [edx + ecx*4], xmm0
movd xmm0, eax
pshufd xmm0, xmm0, 0
paddd xmm0, xmm2
pmulld xmm0, xmm1
paddd xmm0, xmm3
paddd xmm0, xmm1
movups xmmword [edx + ecx*4 + 0x10], xmm0
add ecx, 8
cmp ecx, ebx
jl 0x4a7710
mov ebx, dword [ebp - 0x194]
cmp ecx, esi
jge 0x4a777b
lea eax, [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8]
nop word [eax + eax]
mov dword [edx + ecx*4], eax
inc ecx
add eax, 0x28
cmp ecx, esi
jl 0x4a7770
mov eax, dword [ebp - 0x16c]
mov ebx, dword [ebp - 0x18c]
push edx
push esi
push dword [eax + 0x10]
mov esi, dword [ebp - 0x190]
push dword [ebp - 0x188]
mov eax, dword [ebx + 0x20]
push esi
call eax
mov edx, dword [ebp - 0x1b4]
add esp, 0x14
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
call fcn.0049e760
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4a803f
mov eax, dword [ebx + 0x28]
push esi
call eax
mov ecx, dword [ebp - 0x1c4]
add esp, 4
mov byte [ecx + 2], 0
test eax, eax
je 0x4a1fa1
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
jmp 0x4a1d65
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [edx + 4]
mov eax, dword [eax + 0x60]
mov ebx, dword [eax + ecx*4]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x17c]
cmp byte [ebx + 2], 0
lea eax, [eax + eax*4]
lea esi, [ecx + eax*8]
je 0x4a7843
mov ecx, esi
call fcn.004987f0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
test byte [edx + 2], 1
xorps xmm0, xmm0
mov eax, dword [ebx + 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x188], eax
mov eax, dword [eax]
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0x194], eax
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xf0], esi
je 0x4a788d
mov ecx, esi
call fcn.004987f0
mov edx, dword [ebp - 0x16c]
mov eax, 0x4001
mov dword [esi], 0
jmp 0x4a789d
mov ax, word [esi + 8]
mov ecx, 0x3e40
and ax, cx
or ax, 1
mov word [esi + 8], ax
lea eax, [ebp - 0xf0]
push dword [edx + 8]
push eax
mov eax, dword [ebp - 0x194]
push dword [ebx + 0x28]
mov eax, dword [eax + 0x2c]
call eax
mov edx, dword [ebp - 0x188]
add esp, 0xc
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
call fcn.0049e760
cmp dword [ebp - 0xdc], 0
jle 0x4a7905
push esi
call fcn.0049edc0
add esp, 4
push eax
push 0x70657c
push dword [ebp - 0x170]
call fcn.00499530
mov eax, dword [ebp - 0xdc]
add esp, 0xc
mov dword [ebp - 0x174], eax
movzx edx, byte [ebp - 0x1ac]
mov ecx, esi
call fcn.00497d60
mov ecx, esi
call fcn.00498950
test eax, eax
jne 0x4a7118
jmp 0x4a2cca
mov ebx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x60]
mov ebx, dword [eax + ecx*4]
cmp byte [ebx + 2], 0
jne 0x4a1fa1
mov eax, dword [ebx + 0x28]
push eax
mov esi, dword [eax]
mov ecx, dword [esi]
mov dword [ebp - 0x194], ecx
mov eax, dword [ecx + 0x24]
call eax
mov ecx, dword [ebp - 0x170]
add esp, 4
mov edx, esi
mov dword [ebp - 0x174], eax
call fcn.0049e760
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4a803f
mov eax, dword [ebp - 0x194]
push dword [ebx + 0x28]
mov eax, dword [eax + 0x28]
call eax
add esp, 4
test eax, eax
jne 0x4a5ea5
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x16c]
mov esi, dword [edx + 8]
mov edx, dword [ebp - 0x1a8]
dec esi
lea esi, [esi + esi*4]
lea esi, [edx + esi*4]
mov dword [ebp - 0x16c], esi
jmp 0x4a5eb1
mov edx, dword [ebp - 0x16c]
mov ebx, dword [edi + 0x20]
or dword [edi + 0x20], 0x4000000
and ebx, 0x4000000
mov eax, dword [edi + 0x24]
mov ecx, dword [ebp - 0x17c]
mov dword [edi + 0x24], eax
mov eax, dword [edx + 0x10]
mov esi, dword [eax + 8]
mov eax, dword [edx + 4]
mov edx, 1
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov ecx, eax
mov dword [ebp - 0x194], eax
call fcn.00497d60
test eax, eax
jne 0x4a803f
mov ecx, dword [ebp - 0x194]
mov eax, dword [esi]
push dword [ecx + 0x10]
mov eax, dword [eax + 0x4c]
push esi
call eax
add esp, 8
mov dword [ebp - 0x174], eax
test ebx, ebx
jne 0x4a7a33
mov eax, dword [edi + 0x24]
and dword [edi + 0x20], 0xfbffffff
mov dword [edi + 0x24], eax
mov ecx, dword [ebp - 0x170]
mov edx, esi
call fcn.0049e760
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x174]
and dword [ecx + 0x98], 0xfffffffc
jmp 0x4a2cd6
cmp byte [edi + 0x51], 0
jne 0x4a4113
mov ebx, dword [ebp - 0x16c]
mov eax, dword [ebx + 0x10]
mov ebx, dword [eax + 8]
test ebx, ebx
je 0x4a8281
mov eax, dword [ebx]
mov dword [ebp - 0x194], eax
test eax, eax
je 0x4a8281
cmp dword [eax + 0x34], 0
mov esi, dword [ebp - 0x16c]
mov esi, dword [esi + 8]
je 0x4a2c25
mov al, byte [edi + 0x56]
mov edx, dword [ecx + 0x5c]
mov ecx, dword [ebp - 0x17c]
mov byte [ebp - 0x1a1], al
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*8]
xor eax, eax
test esi, esi
jle 0x4a7acb
mov dword [edx + eax*4], ecx
inc eax
add ecx, 0x28
cmp eax, esi
jl 0x4a7ac0
mov eax, dword [ebp - 0x16c]
mov al, byte [eax + 2]
mov byte [edi + 0x56], al
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x194]
push edx
push esi
push ebx
mov eax, dword [eax + 0x34]
call eax
mov ecx, dword [ebp - 0x170]
add esp, 0x10
mov dword [ebp - 0x174], eax
mov edx, ebx
mov al, byte [ebp - 0x1a1]
mov byte [edi + 0x56], al
call fcn.0049e760
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x16c]
test eax, eax
jne 0x4a7b2f
cmp dword [ecx + 4], eax
je 0x4a7b2f
mov eax, dword [ebp - 0x30]
mov dword [edi + 0x28], eax
mov eax, dword [ebp - 0x2c]
mov dword [edi + 0x2c], eax
mov eax, dword [ebp - 0x174]
cmp al, 0x13
jne 0x4a7b8b
mov eax, dword [ecx + 0x10]
cmp byte [eax + 0x10], 0
je 0x4a7b8b
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax + 2]
cmp eax, 4
jne 0x4a7b73
xor ecx, ecx
mov dword [ebp - 0x174], ecx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
cmp eax, 5
jne 0x4a7b7d
mov eax, 2
mov ecx, dword [ebp - 0x170]
mov byte [ecx + 0x92], al
jmp 0x4a7b94
mov ecx, dword [ebp - 0x170]
inc dword [ecx + 0x2c]
mov eax, dword [ebp - 0x174]
test eax, eax
jne 0x4a803f
mov esi, dword [ebp - 0x16c]
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ecx + 4]
mov ecx, dword [edi + 0x10]
shl edx, 4
mov ecx, dword [edx + ecx + 4]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + 0x2c]
mov dword [eax], ecx
mov dword [eax + 4], 0
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
call fcn.004a1bf0
mov ecx, dword [edi + 0x10]
mov ebx, eax
mov eax, dword [ebp - 0x16c]
mov edx, dword [eax + 4]
mov esi, dword [eax + 0xc]
add edx, edx
mov ecx, dword [ecx + edx*8 + 4]
xor edx, edx
test esi, esi
je 0x4a7c3c
mov eax, dword [ecx + 4]
mov edx, dword [eax + 0x2c]
cmp edx, esi
cmovb edx, esi
call fcn.0048e2a0
cdq
mov dword [ebx], eax
mov dword [ebx + 4], edx
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov edx, dword [ebp - 0x16c]
mov ecx, edi
push 0
movzx ebx, word [edx + 2]
lea eax, [ebx*4 + 0x1c]
push eax
call fcn.00478070
mov esi, eax
add esp, 8
test esi, esi
je 0x4a4113
mov eax, dword [ebp - 0x16c]
mov dword [esi], 0
mov ecx, dword [eax + 0x10]
mov dword [esi + 4], ecx
mov ecx, eax
sub ecx, dword [ebp - 0x1a8]
mov eax, 0x66666667
imul ecx
mov dword [esi + 0x14], 0
sar edx, 3
mov eax, edx
mov byte [esi + 0x19], bl
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x16c]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x170]
mov dword [esi + 0xc], eax
add byte [edx], 2
mov byte [edx + 1], 0xf0
mov dword [edx + 0x10], esi
jmp 0x4a7ce8
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x17c]
mov esi, dword [edx + 0x10]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*8]
mov dword [ebp - 0x194], ebx
cmp dword [esi], ebx
je 0x4a7d42
movzx ecx, byte [esi + 0x19]
sub ecx, 1
mov dword [esi], ebx
js 0x4a7d42
mov edi, dword [ebp - 0x16c]
lea edx, [ecx + 7]
mov ebx, dword [ebp - 0x17c]
lea edx, [esi + edx*4]
mov eax, dword [edi + 8]
add eax, ecx
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8]
mov dword [edx], eax
sub edx, 4
sub ecx, 1
jns 0x4a7d21
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x194]
mov ax, word [ebx + 8]
mov ecx, 0x3e40
and ax, cx
or ax, 1
mov word [ebx + 8], ax
lea eax, [esi + 0x1c]
mov ecx, dword [esi + 4]
push eax
movzx eax, byte [esi + 0x19]
push eax
mov eax, dword [ecx + 0x10]
push esi
call eax
mov eax, dword [esi + 0x14]
add esp, 0xc
test eax, eax
je 0x4a7dd1
jle 0x4a7d9a
push ebx
call fcn.0049edc0
add esp, 4
push eax
push 0x706578
push dword [ebp - 0x170]
call fcn.00499530
mov eax, dword [esi + 0x14]
add esp, 0xc
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x16c]
mov ecx, edi
mov edx, dword [ebp - 0x170]
add edx, 0xdc
push dword [eax + 4]
push dword [esi + 0x10]
call fcn.0049ca40
mov eax, dword [ebp - 0x174]
add esp, 8
mov dword [esi + 0x14], 0
test eax, eax
jne 0x4a803f
test byte [ebx + 8], 0x12
je 0x4a1fa1
movzx edx, byte [ebp - 0x1ac]
mov ecx, ebx
call fcn.00497d60
mov ecx, ebx
call fcn.00498950
test eax, eax
jne 0x4a7118
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x170]
add esi, 0x14
mov edi, dword [ebp - 0x1bc]
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov cl, byte [edi + 0x58]
mov ebx, dword [ebp - 0x170]
test cl, 0x41
je 0x4a7ed6
test byte [ebx + 0x98], 0x10
jne 0x4a7ed6
mov eax, dword [esi + 0x10]
test eax, eax
jne 0x4a7e4c
mov eax, dword [ebx + 0xc0]
test eax, eax
je 0x4a7ed6
test cl, 0x40
je 0x4a7e82
mov edi, dword [edi + 0xcc]
mov edx, eax
mov ecx, ebx
call fcn.004a1340
mov esi, eax
mov eax, dword [ebp - 0x1bc]
push esi
push dword [eax + 0xd0]
call edi
push esi
call fcn.00477c30
mov esi, dword [ebp - 0x16c]
add esp, 0xc
jmp 0x4a7ed6
cmp dword [edi + 0xbc], 1
push eax
jle 0x4a7ec2
push 0x706584
push edi
call fcn.0047a2b0
mov ecx, dword [edi + 0xcc]
add esp, 0xc
mov esi, eax
push esi
push ebx
push dword [edi + 0xd0]
push 1
call ecx
add esp, 0x10
mov edx, esi
mov ecx, edi
call fcn.00477d20
mov esi, dword [ebp - 0x16c]
jmp 0x4a7ed6
mov eax, dword [edi + 0xcc]
push ebx
push dword [edi + 0xd0]
push 1
call eax
add esp, 0x10
mov eax, dword [esi + 4]
cmp eax, dword [0x70b948]
jl 0x4a7f21
cmp byte [esi], 0xa8
je 0x4a1fa7
mov edx, 1
cmp dword [ebx + 0x6c], edx
jle 0x4a7f1a
mov eax, 0x14
nop dword [eax]
mov ecx, dword [ebx + 0x68]
cmp byte [eax + ecx], 0x11
jne 0x4a7f11
mov dword [eax + ecx + 4], 0
inc edx
add eax, 0x14
cmp edx, dword [ebx + 0x6c]
jl 0x4a7f00
mov dword [esi + 4], 0
mov ecx, dword [ebp - 0x170]
inc dword [esi + 4]
inc dword [ecx + 0xbc]
jmp 0x4a1d65
mov esi, dword [ebp - 0x16c]
mov ecx, edx
mov edi, dword [ebp - 0x1bc]
add esi, 0x14
mov ebx, dword [ebp - 0x1f0]
jmp 0x4a1cf1
mov ecx, dword [edx + 4]
mov dword [ebx + 0x28], ecx
mov al, byte [edx + 8]
mov byte [ebx + 0x92], al
mov dword [ebx + 0x24], esi
test ecx, ecx
je 0x4a7fde
movzx eax, word [edx + 2]
test ax, ax
je 0x4a7fad
push dword [eax*4 + 0x6c5d64]
push 0x706300
push ebx
call fcn.00499530
mov eax, dword [ebp - 0x16c]
add esp, 0xc
mov eax, dword [eax + 0x10]
test eax, eax
je 0x4a7fbe
push eax
push dword [ebx + 0x7c]
push 0x706328
push edi
call fcn.0047a2b0
add esp, 0x10
mov dword [ebx + 0x7c], eax
jmp 0x4a7fbe
push dword [edx + 0x10]
push 0x706324
push ebx
call fcn.00499530
add esp, 0xc
push dword [ebx + 0x7c]
mov eax, dword [ebp - 0x16c]
push dword [ebx + 0xc0]
push esi
push 0x706364
push dword [eax + 4]
call fcn.0047a540
add esp, 0x14
mov ecx, ebx
call fcn.0049c560
mov esi, dword [ebp - 0x178]
mov ecx, eax
mov dword [ebp - 0x174], ecx
cmp ecx, 5
jne 0x4a8002
mov dword [ebx + 0x28], eax
mov ebx, eax
jmp 0x4a8630
cmp dword [ebx + 0x28], 0
mov ecx, 0x65
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x174], ecx
mov ebx, ecx
jmp 0x4a8630
mov ecx, 0x152d5
call fcn.00502bb0
jmp 0x4a803f
push 0x706330
push ecx
call fcn.00499530
mov eax, 5
add esp, 8
mov ecx, dword [ebp - 0x170]
mov esi, dword [ebp - 0x178]
cmp byte [edi + 0x51], 0
mov edx, 7
cmovne eax, edx
cmp dword [ecx + 0x7c], 0
mov dword [ebp - 0x174], eax
jne 0x4a853c
cmp eax, 0xc0a
je 0x4a853c
mov ecx, 0x70ad50
sub eax, 0x64
je 0x4a8517
sub eax, 1
je 0x4a8510
sub eax, 0x19f
je 0x4a8509
mov eax, dword [ebp - 0x174]
movzx eax, al
cmp eax, 0x1d
jae 0x4a851c
mov eax, dword [eax*4 + 0x6c5408]
test eax, eax
je 0x4a851c
mov ecx, eax
jmp 0x4a851c
push 0x70637c
push dword [ebp - 0x170]
jmp 0x4a8032
mov ecx, dword [ebp - 0x16c]
mov eax, 0x66666667
sub ecx, dword [ebp - 0x1a8]
mov ebx, 5
mov esi, dword [ebp - 0x178]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x170]
mov dword [edx + 0x24], eax
mov byte [edi + 0x4f], 0
mov dword [edx + 0x28], 5
jmp 0x4a8630
mov eax, 8
jmp 0x4a803f
mov esi, dword [ebp - 0x178]
cmp al, 5
jne 0x4a820e
mov ecx, dword [ebp - 0x16c]
mov eax, 0x66666667
sub ecx, dword [ebp - 0x1a8]
imul ecx
mov ecx, dword [ebp - 0x174]
mov ebx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x170]
mov dword [edx + 0x24], eax
mov dword [edx + 0x28], ecx
jmp 0x4a8630
mov edx, dword [edx + 0x7c]
mov ecx, edi
call fcn.00477d20
mov edx, 0x70649c
mov ecx, edi
call fcn.004782e0
mov ecx, dword [ebp - 0x170]
mov dword [ecx + 0x7c], eax
mov eax, dword [ebp - 0x16c]
mov edx, dword [eax + 4]
mov ecx, edx
mov eax, dword [edi + 0x10]
add ecx, ecx
mov eax, dword [eax + ecx*8 + 0xc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x200]
je 0x4a819f
mov ecx, edi
call fcn.004bd980
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x170]
mov eax, dword [eax + 0x98]
and eax, 0xfffffffd
or eax, 1
mov dword [ecx + 0x98], eax
mov eax, 0x11
jmp 0x4a8045
mov eax, 0x204
jmp 0x4a803f
mov ecx, dword [ebp - 0x170]
mov eax, 6
mov byte [ecx + 0x92], 2
jmp 0x4a8045
mov dword [ebp - 0x174], 7
mov ecx, edi
call fcn.004bdc80
mov eax, dword [ebp - 0x174]
mov esi, dword [ebp - 0x178]
cmp eax, 7
je 0x4a4119
mov ecx, dword [ebp - 0x170]
jmp 0x4a804b
push 0x7064b8
push edx
call fcn.00499530
mov eax, 1
jmp 0x4a803c
push esi
call fcn.0049edc0
add esp, 4
push eax
push 0x70650c
push dword [ebp - 0x170]
call fcn.00499530
add esp, 0xc
mov eax, dword [ebp - 0x174]
jmp 0x4a803f
cmp ebx, 5
mov eax, 0x70651c
mov ecx, 0x706514
cmovne eax, ecx
push eax
push 0x706544
jmp 0x4a43d6
push dword [ebp - 0x5c]
mov eax, dword [ebx + 0x1c]
call eax
add esp, 4
jmp 0x4a4113
mov eax, 6
jmp 0x4a803f
xor edx, edx
call fcn.0049c500
test eax, eax
jne 0x4a803f
mov ebx, dword [ebp - 0x170]
mov eax, dword [ebx]
cmp dword [eax + 0x1d0], 0
je 0x4a82bd
cmp dword [ebx + 0x30], 0
je 0x4a82bd
mov edx, 1
mov ecx, ebx
call fcn.0049c3f0
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebp - 0x16c]
add eax, 2
mov edx, dword [ebp - 0x17c]
or eax, 1
mov dword [ebx + 0x20], eax
mov eax, dword [ecx + 4]
lea eax, [eax + eax*4]
lea esi, [edx + eax*8]
mov dword [ebx + 0x78], esi
xor ebx, ebx
cmp dword [ecx + 8], ebx
jle 0x4a8320
nop dword [eax + eax]
mov eax, 0x1000
test word [esi + 8], ax
je 0x4a830a
mov ecx, esi
call fcn.00497f70
test eax, eax
jne 0x4a4113
mov ecx, esi
call fcn.00498020
mov eax, dword [ebp - 0x16c]
inc ebx
add esi, 0x28
cmp ebx, dword [eax + 8]
jl 0x4a82f0
cmp byte [edi + 0x51], 0
jne 0x4a4113
test byte [edi + 0x58], 4
je 0x4a834b
mov eax, dword [edi + 0xcc]
push 0
push dword [ebp - 0x170]
push dword [edi + 0xd0]
push 4
call eax
add esp, 0x10
mov ecx, dword [ebp - 0x16c]
mov eax, 0x66666667
sub ecx, dword [ebp - 0x1a8]
mov ebx, 0x64
mov esi, dword [ebp - 0x178]
imul ecx
mov ecx, dword [ebp - 0x170]
sar edx, 3
mov eax, edx
shr eax, 0x1f
inc eax
add eax, edx
mov dword [ecx + 0x24], eax
jmp 0x4a8630
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edi + 0x4f]
mov ebx, dword [edx + 4]
mov ecx, dword [edx + 8]
cmp ebx, eax
je 0x4a8477
test ecx, ecx
je 0x4a83b5
mov edx, 0x204
mov ecx, edi
call fcn.00500900
mov byte [edi + 0x4f], 1
mov esi, 1
jmp 0x4a83f7
test ebx, ebx
je 0x4a83d2
cmp dword [edi + 0xb8], 0
jle 0x4a83d2
push 0x7063fc
push dword [ebp - 0x170]
jmp 0x4a8032
mov ecx, dword [ebp - 0x170]
mov esi, 1
mov edx, esi
call fcn.0049c500
mov ecx, eax
mov dword [ebp - 0x174], ecx
test ecx, ecx
jne 0x4a8466
mov byte [edi + 0x4f], bl
mov ecx, dword [ebp - 0x170]
call fcn.0049c560
cmp eax, 5
jne 0x4a8447
mov ecx, dword [ebp - 0x16c]
mov eax, 0x66666667
sub ecx, dword [ebp - 0x1a8]
mov esi, dword [ebp - 0x178]
imul ecx
mov ecx, dword [ebp - 0x170]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ecx + 0x24], eax
mov al, 1
sub al, bl
mov ebx, 5
mov byte [edi + 0x4f], al
mov dword [ecx + 0x28], ebx
jmp 0x4a8630
mov ecx, edi
call fcn.004fff40
mov eax, dword [ebp - 0x170]
mov ecx, 0x65
cmp dword [eax + 0x28], 0
cmovne ecx, esi
mov dword [ebp - 0x174], ecx
mov ebx, dword [ebp - 0x174]
mov esi, dword [ebp - 0x178]
jmp 0x4a8630
test ebx, ebx
jne 0x4a8497
mov eax, 0x7063cc
push eax
push dword [ebp - 0x170]
call fcn.00499530
add esp, 8
lea eax, [ebx + 1]
jmp 0x4a803f
test ecx, ecx
mov edx, 0x706434
mov eax, 0x706460
cmove eax, edx
push eax
push dword [ebp - 0x170]
call fcn.00499530
add esp, 8
mov eax, 1
jmp 0x4a803f
mov esi, dword [ebp - 0x178]
xor eax, eax
cmp byte [edi + 0x51], al
sete al
lea eax, [eax*2 + 7]
mov dword [ecx + 0x28], eax
mov ecx, eax
mov dword [ebp - 0x174], eax
call fcn.00500a40
push eax
push 0x7065c4
push dword [ebp - 0x170]
call fcn.00499530
mov eax, dword [ebp - 0x174]
add esp, 0xc
mov ecx, dword [ebp - 0x170]
jmp 0x4a804b
mov ecx, 0x70ad88
jmp 0x4a851c
mov ecx, 0x70ade0
jmp 0x4a851c
mov ecx, 0x70ad70
push ecx
push 0x706580
push dword [ebp - 0x170]
call fcn.00499530
mov eax, dword [ebp - 0x174]
add esp, 0xc
mov ecx, dword [ebp - 0x170]
mov dword [ecx + 0x28], eax
cmp eax, 0xc0a
je 0x4a856d
movzx eax, al
cmp eax, 0xe
je 0x4a8553
cmp eax, 0xa
jne 0x4a856d
mov eax, dword [edi]
mov ecx, dword [eax + 0x44]
test ecx, ecx
je 0x4a8568
push 0
push 0
push eax
call ecx
add esp, 0xc
jmp 0x4a856a
xor eax, eax
mov dword [edi + 0x48], eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
sub ecx, dword [ebp - 0x1a8]
push dword [eax + 0x7c]
push dword [eax + 0xc0]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push 0x7065a4
push dword [ebp - 0x174]
call fcn.0047a540
mov ecx, dword [ebp - 0x170]
add esp, 0x14
call fcn.0049c560
cmp dword [ebp - 0x174], 0xc0a
jne 0x4a85fe
cmp byte [edi + 0x51], 0
jne 0x4a85fe
cmp byte [edi + 0x52], 0
jne 0x4a85fe
cmp dword [edi + 0xbc], 0
mov byte [edi + 0x51], 1
jle 0x4a85e7
mov dword [edi + 0x110], 1
inc dword [edi + 0x118]
mov eax, dword [edi + 0xf4]
test eax, eax
je 0x4a85fe
mov dword [eax + 0xc], 7
mov al, byte [ebp - 0x1cd]
mov dword [ebp - 0x174], 1
test al, al
je 0x4a8625
movzx edx, al
mov ecx, edi
dec edx
call fcn.004bd980
mov ebx, dword [ebp - 0x174]
jmp 0x4a8630
mov ebx, 1
nop word [eax + eax]
mov ecx, dword [ebp - 0x1f0]
cmp ecx, esi
jb 0x4a866c
mov eax, dword [edi + 0x148]
test eax, eax
je 0x4a866c
push dword [edi + 0x14c]
add esi, dword [edi + 0x150]
call eax
add esp, 4
test eax, eax
je 0x4a8630
mov ecx, dword [ebp - 0x170]
or esi, 0xffffffff
mov eax, 9
jmp 0x4a804b
mov edx, dword [ebp - 0x170]
add dword [edx + 0xb4], ecx
cmp dword [edx + 0xa0], 0
je 0x4a8688
mov ecx, edx
call fcn.0049ac70
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0062063b
mov esp, ebp
pop ebp
ret