Function at 0x4b03f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x148
mov eax, dword [0x570400]
xor eax, esp
mov dword [esp + 0x144], eax
mov eax, ecx
mov dword [esp + 0x3c], 0
mov dword [esp], eax
push esi
mov esi, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x6c], eax
push edi
mov eax, dword [esi + 0x50]
mov edi, edx
mov edx, dword [ebp + 8]
mov dword [esp + 0x20], eax
movzx eax, byte [esi + 0x3c]
mov dword [esp + 0x28], edi
lea ecx, [edx + 0x50]
mov dword [esp + 0x68], edx
mov dword [esp + 0x74], ecx
lea ecx, [eax + eax*8]
mov dword [esp + 0xc], esi
mov eax, dword [edx + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [esp + 0x84], eax
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x38], eax
cmp dword [edx + 0x1f8], eax
jne 0x4b0470
mov ecx, 1
xor edx, edx
jmp 0x4b04c2
mov edx, dword [edx + 0x1f4]
mov eax, 1
cmp edx, eax
jle 0x4b04a8
mov ecx, dword [esp + 0x68]
add ecx, 0x1fc
nop dword [eax]
mov edi, dword [esp + 0x38]
cmp dword [ecx], edi
mov edi, dword [esp + 0x28]
je 0x4b0559
inc eax
add ecx, 4
cmp eax, edx
jl 0x4b0490
xorps xmm0, xmm0
movlpd qword [esp + 0x90], xmm0
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
not ecx
not edx
and ecx, dword [ebp + 0x14]
and edx, dword [ebp + 0x18]
mov dword [esi + 0x58], ecx
mov ecx, dword [esp + 0x68]
mov dword [esi + 0x5c], edx
mov esi, dword [ebp + 0xc]
mov eax, dword [ecx + 0x48]
mov edx, dword [ecx + 0x4c]
mov ecx, esi
call fcn.005466f0
mov ecx, dword [esp + 8]
and eax, 1
mov edx, dword [esp + 0xc]
mov dword [esp + 0x4c], eax
mov eax, dword [ecx + 0x38]
dec eax
mov dword [ecx + 0x38], eax
mov dword [edx + 0x10], eax
mov dword [edx + 0xc], eax
mov dword [esp + 0x40], eax
mov eax, dword [ecx + 0x38]
dec eax
mov dword [ecx + 0x38], eax
cmp byte [edx + 0x3c], 0
mov dword [esp + 0x8c], eax
mov dword [edx + 0x18], eax
jbe 0x4b05a2
mov eax, dword [esp + 0x84]
test byte [eax + 0x24], 8
je 0x4b05a2
mov edx, dword [ecx + 0x2c]
mov eax, dword [esp + 0xc]
inc edx
mov dword [ecx + 0x2c], edx
mov dword [eax], edx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b0573
push 0
push edx
push 0
mov edx, 0x47
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b05a2
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4b04c2
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, esi
test esi, esi
jle 0x4b05d3
mov edx, dword [esp + 0x68]
lea eax, [esi + esi*2]
shl eax, 5
add edx, 0x330
add eax, edx
nop word [eax + eax]
cmp dword [eax - 0x38], 0
jne 0x4b05d3
cmp dword [eax], 0
jne 0x4b05d3
dec ecx
sub eax, 0x60
test ecx, ecx
jg 0x4b05c0
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 0x68]
shl eax, 5
mov esi, dword [eax + ecx + 0x304]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x34], esi
test byte [eax + 0x28], 0x20
je 0x4b06dc
mov ecx, dword [edi + 0x6c]
mov esi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x4b061c
push edx
push 0
push esi
mov edx, 0xb
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b064b
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x4b068a
push 0
push dword [esp + 0x44]
mov edx, 0xc
mov ecx, edi
push esi
call fcn.00441fb0
mov edx, eax
add esp, 0xc
mov eax, dword [esp + 0xc]
mov dword [eax + 0x44], edx
mov edx, eax
xor eax, eax
neg eax
sbb eax, eax
mov byte [edx + 0x3d], 9
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x40]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xc]
mov dword [eax + 0x44], edx
mov edx, eax
xor eax, eax
neg eax
sbb eax, eax
mov byte [edx + 0x3d], 9
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
mov eax, dword [esp + 0x20]
mov edx, dword [eax + 0x2c]
test edx, 0x400
je 0x4b0d39
movzx eax, word [eax + 0x30]
mov dword [esp + 0x40], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x4b072b
mov ecx, dword [esp + 8]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4b0716
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x30], eax
jmp 0x4b0761
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0xa4]
mov dword [esp + 0x30], eax
jmp 0x4b0761
mov eax, dword [esp + 8]
mov edx, dword [eax + 0x1c]
mov esi, dword [eax + 0x20]
mov dword [esp + 0x30], esi
cmp ecx, edx
jg 0x4b074e
lea eax, [esi + ecx]
sub edx, ecx
mov esi, dword [esp + 8]
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], edx
jmp 0x4b0761
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 8]
mov dword [esp + 0x30], edx
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0xc]
xor esi, esi
mov eax, dword [eax + 0xc]
mov dword [esp + 0x18], eax
cmp dword [esp + 0x40], esi
jbe 0x4b0840
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x20]
add edx, 2
mov dword [esp + 0x3c], edx
nop word [eax + eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [eax + esi*4]
mov dword [esp + 0x34], ecx
test ecx, ecx
je 0x4b0831
test byte [ecx + 0xc], 1
je 0x4b08d0
cmp esi, 0x1f
ja 0x4b07c0
mov ecx, esi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x34]
jmp 0x4b07c2
xor eax, eax
mov edi, dword [esp + 0x20]
test dword [edi + 0x28], eax
mov edi, dword [esp + 0x28]
je 0x4b08a5
mov eax, dword [esp + 8]
mov edi, dword [esp + 8]
mov edx, dword [eax + 0x28]
mov dword [esp + 0x34], edx
push edx
lea eax, [edx + 1]
mov dword [edi + 0x28], eax
mov eax, edi
inc dword [eax + 0x2c]
mov edx, dword [ecx]
mov ecx, edi
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x7c], eax
call fcn.0045ee50
mov edi, dword [esp + 0x2c]
add esp, 4
mov eax, dword [esp + 0x3c]
add eax, esi
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b086e
mov edx, dword [esp + 0x78]
push edx
mov edx, dword [esp + 0x38]
push eax
push edx
mov edx, 0xaf
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x20]
inc esi
cmp esi, dword [esp + 0x40]
jl 0x4b0790
mov eax, dword [esp + 0x20]
mov ecx, dword [edi + 0x6c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x4b095d
push 0
push dword [esp + 0x34]
mov ecx, edi
push edx
mov edx, 0x47
call fcn.00441fb0
add esp, 0xc
jmp 0x4b098c
mov edx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
add edx, esi
mov dword [eax + ecx*4], 0xaf
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x78]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4b082d
lea eax, [edx + esi]
mov edx, ecx
mov ecx, dword [esp + 8]
push eax
push dword [esp + 0x50]
push esi
push dword [esp + 0x18]
call fcn.004af320
mov eax, dword [esp + 0x1c]
add esp, 0x10
mov eax, dword [eax + 0x10]
mov dword [esp + 0x18], eax
jmp 0x4b082d
lea eax, [edx + esi]
mov edx, dword [ecx]
mov ecx, dword [esp + 8]
push 1
push eax
mov edx, dword [edx + 0x10]
call fcn.004b0050
mov eax, dword [esp + 0x3c]
add esp, 8
cmp byte [eax + 0xf], 0x4a
mov eax, dword [esp + 0x20]
jne 0x4b0954
test byte [eax + 0x1c], 2
je 0x4b0954
mov eax, dword [esp + 0x68]
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x4b091c
push 0
push edx
push 0
mov edx, 0x47
jmp 0x4b0823
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4b082d
mov edx, dword [esp + 0x3c]
jmp 0x4b0835
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x30]
mov ecx, dword [edi + 0x6c]
inc edx
cmp dword [edi + 0x70], ecx
jg 0x4b09b1
push 0
push edx
push dword [esp + 0x48]
mov edx, 0x47
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b09e0
mov esi, dword [esp + 0x40]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x20]
mov esi, 0xffffffff
mov edx, dword [edi + 0x6c]
mov ecx, 0xfffffffa
test byte [eax + 0x1c], 1
mov eax, dword [eax + 0x24]
cmovne esi, ecx
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], edx
jg 0x4b0a21
push dword [esp + 0x30]
lea edx, [ecx + 0xc]
mov ecx, edi
push dword [esp + 0x1c]
push dword [esp + 0x40]
call fcn.00441fb0
add esp, 0xc
mov edx, eax
jmp 0x4b0a58
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 6
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [esp + 0x18]
mov ecx, edi
call fcn.00442d60
mov esi, dword [esp + 0x28]
add esp, 8
mov eax, dword [esp + 0x70]
and dword [esi + 0x1c], 0xfffffffe
cmp byte [eax + 0x57], 0
je 0x4b0a80
mov dword [esi + 0x24], 0
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x38]
mov dword [edx + 0x40], eax
mov eax, 0x3f
cmp byte [ecx + 0x2e], 0
mov ecx, 0xbb
cmovne eax, ecx
xor ecx, ecx
mov byte [edx + 0x3d], al
mov eax, dword [edi + 0x6c]
mov dword [edx + 0x44], eax
mov dword [esp + 0x1c], ecx
cmp dword [esp + 0x40], ecx
jbe 0x4b0d27
mov eax, dword [esp + 0x30]
add eax, 2
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x38]
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x5c], edx
cmp ecx, 0x10
jae 0x4b0af0
mov ax, word [esi + 0x22]
shr ax, cl
test al, 1
je 0x4b0aec
mov ecx, dword [esp + 0xc]
call fcn.004aee50
jmp 0x4b0d10
mov ecx, dword [esp + 0x1c]
test byte [edx + 0xc], 1
je 0x4b0d14
cmp ecx, 0x1f
ja 0x4b0b08
mov eax, 1
shl eax, cl
jmp 0x4b0b0a
xor eax, eax
test dword [esi + 0x28], eax
jne 0x4b0d14
mov eax, dword [esp + 0x70]
cmp byte [eax + 0x57], 0
jne 0x4b0d14
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x34], 0
cmp dword [ecx + 0x48], 0
jle 0x4b0c07
mov eax, dword [edi]
xor esi, esi
mov al, byte [eax + 0x57]
mov byte [esp + 0x27], al
test al, al
je 0x4b0b4d
mov ecx, 0x5732c0
jmp 0x4b0b5d
mov eax, dword [ecx + 0x4c]
mov eax, dword [esi + eax + 4]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea ecx, [eax + ecx*4]
mov al, byte [ecx]
mov byte [esp + 0x13], al
cmp al, 0x5e
jne 0x4b0b74
mov eax, dword [esp + 0x1c]
add eax, dword [esp + 0x18]
cmp dword [ecx + 0xc], eax
jmp 0x4b0b83
cmp al, 0x87
jne 0x4b0b89
mov eax, dword [esp + 0x1c]
add eax, dword [esp + 0x18]
cmp dword [ecx + 8], eax
mov edi, dword [esp + 0x28]
je 0x4b0ba8
mov ecx, dword [esp + 0x34]
add esi, 0x14
mov eax, dword [esp + 0xc]
inc ecx
mov dword [esp + 0x34], ecx
cmp ecx, dword [eax + 0x48]
jge 0x4b0c07
mov al, byte [esp + 0x27]
mov ecx, dword [esp + 0xc]
jmp 0x4b0b42
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 0xc]
mov esi, dword [ecx + 8]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], ecx
jg 0x4b0bd1
push edx
movzx edx, byte [esp + 0x17]
mov ecx, edi
push esi
push eax
call fcn.00441fb0
add esp, 0xc
jmp 0x4b0c07
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x13]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x14]
mov dword [eax + 4], ecx
mov eax, dword [esp + 8]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.004190c0
mov esi, eax
add esp, 8
test esi, esi
je 0x4b0c5d
push 0x34
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [esp + 0x14]
or eax, 0xffffffff
mov byte [esi], 0x35
add esp, 0xc
mov word [esi + 0x22], ax
mov dword [esi + 0x18], 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp eax, 1
jge 0x4b0c5d
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.0041c7c0
add esp, 0xc
mov eax, dword [esp + 0x70]
cmp byte [eax + 0x57], 0
jne 0x4b0cff
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
test ecx, ecx
jle 0x4b0c85
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*4]
mov edx, dword [eax + ecx*4 - 0xc]
mov ecx, dword [esp + 0x70]
push 0
push 0x35
mov dword [esi + 0xc], edx
call fcn.004190c0
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
je 0x4b0cf1
push 0x34
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [esp + 0x20]
or eax, 0xffffffff
add esp, 0xc
mov word [ecx + 0x22], ax
lea eax, [ecx + 0x34]
mov dword [ecx + 8], eax
mov byte [ecx], 0xb0
mov byte [eax], 0
mov eax, dword [esp + 0x1c]
add eax, dword [esp + 0x18]
mov dword [ecx + 0x18], 1
mov dword [esi + 0x10], ecx
mov dword [ecx + 0x1c], eax
mov eax, dword [esp + 0xc]
push 0x10
push dword [eax + 0x18]
push esi
push dword [esp + 0x14]
call fcn.00464970
add esp, 0x10
jmp 0x4b0cf4
mov dword [esi + 0x10], eax
mov eax, dword [esp + 0x70]
mov dword [esi + 0xc], 0
test esi, esi
je 0x4b0d0c
mov edx, esi
mov ecx, eax
call fcn.0045c540
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
inc ecx
mov dword [esp + 0x1c], ecx
cmp ecx, dword [esp + 0x40]
jl 0x4b0ac4
mov edx, dword [esp + 0xc]
xor eax, eax
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x4b0ef4
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
mov eax, dword [esp + 8]
mov ecx, eax
inc dword [eax + 0x2c]
mov esi, dword [eax + 0x2c]
push esi
push dword [esp + 0x50]
push 0
push dword [esp + 0x18]
call fcn.004af320
mov edx, eax
add esp, 0x10
mov dword [esp + 0x18], edx
cmp edx, esi
je 0x4b0d9c
test esi, esi
je 0x4b0d9c
mov ecx, dword [esp + 8]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4b0d9c
movzx eax, al
mov dword [ecx + eax*4 + 0xa4], esi
inc byte [ecx + 0x13]
mov eax, dword [esp + 0xc]
cmp dword [eax + 0x34], 0
mov esi, dword [eax + 0x10]
je 0x4b0e74
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b0dce
push 0
push esi
push edx
mov edx, 0xd
mov ecx, edi
call fcn.00441fb0
mov edx, dword [esp + 0x24]
add esp, 0xc
jmp 0x4b0dfd
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xc]
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], ecx
jg 0x4b0e26
push 1
push edx
push esi
push eax
mov edx, 0x40
mov ecx, edi
call fcn.00441ff0
add esp, 0x10
jmp 0x4b0e55
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0xfd40
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 1
push dword [ebp + 0x18]
mov eax, dword [ebp + 0x14]
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0xc]
push eax
push esi
push dword [ebp + 0xc]
call fcn.004b01c0
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b0eab
push edx
push esi
push dword [esp + 0x40]
mov edx, 0x1e
mov ecx, edi
call fcn.00441fb0
mov edx, dword [esp + 0x18]
xor eax, eax
add esp, 0xc
neg eax
sbb eax, eax
add eax, 2
mov byte [edx + 0x3d], 0xbb
mov dword [esp + 0x5c], eax
jmp 0x4b309a
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4 + 0xc], edx
mov edx, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0x10], 0
xor eax, eax
neg eax
mov byte [edx + 0x3d], 0xbb
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x4b12a9
mov eax, 0xbb
mov dword [esp + 0x18], 0
xor esi, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], 0
test dl, 0x20
je 0x4b0f36
mov eax, dword [esp + 0x20]
mov ecx, 4
mov eax, dword [eax + 0x38]
mov esi, dword [eax]
jmp 0x4b0f38
xor ecx, ecx
test dl, 0x10
je 0x4b0f4d
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x38]
mov ecx, dword [ecx + eax]
mov dword [esp + 0x2c], ecx
jmp 0x4b0f4f
xor ecx, ecx
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4b0f5d
mov dword [esp + 0x2c], esi
mov esi, ecx
test esi, esi
je 0x4b1090
mov ecx, dword [esi]
mov dword [esp + 0x48], 0x17151618
mov dword [esp + 0x34], ecx
mov edx, dword [ecx + 0x10]
mov al, byte [edx]
cmp al, 0xb0
jne 0x4b0f7f
mov al, byte [edx + 2]
cmp al, 0xb1
jne 0x4b0f88
mov eax, dword [edx + 0x14]
jmp 0x4b0f92
cmp al, 0x8a
jne 0x4b0fe1
mov eax, dword [edx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4b0fe1
mov edx, dword [esp + 8]
mov al, byte [edx + 0x13]
test al, al
jne 0x4b0faa
inc dword [edx + 0x2c]
mov esi, dword [edx + 0x2c]
jmp 0x4b0fb9
dec al
mov byte [edx + 0x13], al
movzx eax, al
mov esi, dword [edx + eax*4 + 0xa4]
mov edx, dword [ecx + 0x10]
mov ecx, dword [esp + 8]
push 1
push esi
call fcn.004b0050
mov ecx, dword [esp + 0x3c]
add esp, 8
mov edx, esi
movzx eax, byte [ecx]
inc eax
and eax, 2
or eax, 1
mov al, byte [esp + eax + 0x48]
jmp 0x4b1014
mov ecx, dword [esp + 8]
lea eax, [esp + 0x14]
push eax
call fcn.00463d10
mov ecx, dword [esp + 0x10]
add esp, 4
mov edx, esi
mov dword [esp + 0x5c], eax
call fcn.004aee50
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x5c]
movzx eax, byte [ecx]
mov al, byte [esp + eax + 0x12]
mov ecx, dword [edi + 0x6c]
mov byte [esp + 0x13], al
cmp dword [edi + 0x70], ecx
jg 0x4b1038
push edx
push dword [esp + 0x44]
movzx edx, al
mov ecx, edi
push dword [esp + 0x40]
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1072
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x13]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 8]
test esi, esi
je 0x4b10f7
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4b10f7
movzx eax, al
mov dword [ecx + eax*4 + 0xa4], esi
inc byte [ecx + 0x13]
jmp 0x4b10f7
mov ecx, dword [edi + 0x6c]
xor eax, 1
lea edx, [eax*4 + 0x20]
cmp dword [edi + 0x70], ecx
jg 0x4b10b9
mov ecx, dword [esp + 0x34]
push 0
push ecx
push dword [esp + 0x40]
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b10f3
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4b119b
mov esi, dword [eax]
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
push 1
mov edx, dword [esi + 0x10]
push eax
mov dword [esp + 0x20], eax
call fcn.004b0050
mov ecx, dword [esi + 0x10]
add esp, 8
mov dl, byte [ecx]
mov al, dl
cmp al, 0xb0
jne 0x4b112b
mov al, byte [ecx + 2]
cmp al, 0xb1
jne 0x4b1134
mov eax, dword [ecx + 0x14]
jmp 0x4b113e
cmp al, 0x8a
jne 0x4b1143
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4b114d
mov al, byte [esi]
cmp al, 0x38
je 0x4b115a
cmp al, 0x36
je 0x4b115a
mov eax, dword [esp + 0x4c]
lea eax, [eax*2 + 0x36]
jmp 0x4b1168
mov eax, dword [esp + 0x4c]
xor eax, 1
lea eax, [eax*2 + 0x37]
mov dword [esp + 0x1c], eax
cmp dl, 0xb0
jne 0x4b1174
mov dl, byte [ecx + 2]
cmp dl, 0xb1
jne 0x4b117e
mov eax, dword [ecx + 0x14]
jmp 0x4b1189
cmp dl, 0x8a
jne 0x4b118e
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4b119b
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0xc]
call fcn.004aee50
cmp dword [esp + 0x4c], 0
mov edx, dword [esp + 0xc]
mov ecx, dword [edi + 0x6c]
sete al
add al, 0x26
cmp dword [esp + 0x1c], 0xbb
mov byte [edx + 0x3d], al
mov eax, dword [esp + 0x38]
mov dword [edx + 0x40], eax
mov dword [edx + 0x44], ecx
je 0x4b0d27
mov eax, dword [esp + 8]
inc dword [eax + 0x2c]
mov ecx, dword [edi + 0x6c]
mov esi, dword [eax + 0x2c]
cmp dword [edi + 0x70], ecx
jg 0x4b11f1
push 0
push esi
push dword [esp + 0x40]
mov edx, 0x87
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1220
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [esp + 0x1c]
cmp dword [edi + 0x70], ecx
jg 0x4b1242
mov ecx, dword [esp + 0x18]
push esi
push dword [esp + 0x44]
push ecx
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1278
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x18]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4b0d23
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
xor eax, eax
mov edx, dword [esp + 0xc]
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
test edx, 0x200
je 0x4b23aa
mov esi, dword [esp + 0x20]
mov dword [esp + 0x64], 0
mov dword [esp + 0x1c], 0
movzx eax, word [esi + 0x1a]
movzx ecx, word [esi + 0x18]
mov dword [esp + 0x80], eax
movzx eax, word [esi + 0x1c]
xor esi, esi
mov dword [esp + 0x40], eax
xor eax, eax
mov dword [esp + 0x48], eax
mov byte [esp + 0x13], al
mov byte [esp + 0x27], al
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x3c], ecx
movzx ecx, cx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp + 0x54], eax
test dl, 0x20
je 0x4b132d
mov esi, dword [esp + 0x20]
mov eax, dword [esi + 0x38]
movzx esi, word [esi + 0x1a]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [esp + 0x64], eax
test dl, 0x10
je 0x4b143c
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 0x38]
movzx edx, word [edx + 0x1c]
cmp esi, edx
mov ecx, dword [eax + ecx*4]
cmova edx, esi
mov eax, 0x100
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], edx
test word [ecx + 0xa], ax
je 0x4b13f8
mov eax, dword [esp + 8]
inc dword [eax + 0x2c]
mov edx, dword [eax + 0x2c]
mov eax, dword [esp + 0xc]
mov dword [eax + 0x2c], edx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b138f
push 0
push edx
push 1
mov edx, 0x47
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b13be
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0xc]
xor edx, edx
mov eax, dword [edi + 0x6c]
mov esi, dword [ecx + 0x2c]
mov dword [ecx + 0x30], eax
add esi, esi
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0x2c], esi
movzx ecx, ax
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x1c]
cmp byte [ecx + eax], 1
mov eax, dword [esp + 0xc]
sete dl
xor edx, dword [esp + 0x4c]
or edx, esi
mov dword [eax + 0x2c], edx
mov edx, dword [esp + 0x14]
cmp dword [esp + 0x64], 0
mov esi, edx
jne 0x4b143c
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
movzx ecx, ax
mov eax, dword [esi + 4]
movsx ecx, word [eax + ecx*2]
mov dword [esp + 0x14], ecx
test ecx, ecx
js 0x4b142e
mov eax, dword [esi + 0xc]
add ecx, ecx
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 4], 0xf
je 0x4b1435
mov ecx, dword [esp + 0x14]
mov esi, edx
cmp ecx, 0xfffffffe
jne 0x4b143c
mov byte [esp + 0x13], 1
mov esi, edx
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x2c]
test al, 0x30
jne 0x4b14db
test eax, 0x80000
je 0x4b14db
mov ecx, dword [esp + 8]
mov esi, 1
mov eax, dword [esp + 0xc]
mov byte [esp + 0x13], 1
inc dword [ecx + 0x2c]
cmp dword [eax], 0
mov edx, dword [ecx + 0x2c]
mov dword [esp + 0x30], edx
mov dword [eax + 0x24], edx
je 0x4b14cd
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b1496
push 0
push edx
push 0
lea edx, [esi + 0x46]
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b14c9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 8]
mov eax, dword [ecx + 0x38]
dec eax
mov dword [ecx + 0x38], eax
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x28], eax
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
cmp ax, word [edx + 0x34]
jae 0x4b1536
movzx ecx, ax
mov eax, dword [edx + 0x1c]
xor edx, edx
cmp byte [ecx + eax], dl
sete dl
cmp dword [esp + 0x4c], edx
jne 0x4b1536
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x64], eax
mov al, byte [esp + 0x13]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x40]
mov byte [esp + 0x27], al
mov eax, dword [esp + 0x80]
movzx ecx, cx
movzx eax, al
mov byte [esp + 0x13], 0
mov dword [esp + 0x80], ecx
mov dword [esp + 0x40], eax
cmp dword [ebp + 0xc], 0
jle 0x4b159d
mov eax, dword [esp + 0x20]
test dword [eax + 0x2c], 0x100000
je 0x4b159d
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b156a
push 0
push 0
push dword [esp + 0x5c]
mov edx, 0x88
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b159d
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x88
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 8]
lea eax, [esp + 0x34]
push eax
push esi
push dword [esp + 0x54]
mov esi, dword [esp + 0x18]
mov edx, esi
call fcn.004af9e0
mov ecx, dword [esp + 0x40]
add esp, 0xc
mov edx, eax
mov dword [esp + 0x50], edx
test ecx, ecx
je 0x4b1636
cmp word [esp + 0x40], 0
je 0x4b1636
mov eax, dword [esp + 0x3c]
movzx eax, ax
add eax, ecx
mov dword [esp + 0x14], eax
jne 0x4b15e6
xor eax, eax
mov dword [esp + 0x48], eax
jmp 0x4b1636
mov ecx, eax
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b15f0
mov eax, dword [esp + 0x70]
sub ecx, edx
push 0
lea esi, [ecx + 1]
push esi
test eax, eax
je 0x4b1610
mov ecx, eax
call fcn.004190c0
jmp 0x4b1615
call fcn.00418960
add esp, 8
mov dword [esp + 0x48], eax
test eax, eax
je 0x4b162e
push esi
push dword [esp + 0x18]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [esp + 0x50]
mov esi, dword [esp + 0xc]
cmp dword [esp + 0x30], 0
je 0x4b1646
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x58], ecx
jmp 0x4b164d
mov eax, dword [esi + 0x10]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4b1663
test byte [eax + 0xc], 0x28
mov dword [esp + 0x6c], 0
je 0x4b166b
mov dword [esp + 0x6c], 1
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x4b1681
test byte [ecx + 0xc], 0x28
mov dword [esp + 0x18], 0
je 0x4b1689
mov dword [esp + 0x18], 1
mov ecx, dword [esp + 0x3c]
test eax, eax
jne 0x4b16e1
test cx, cx
jne 0x4b16e1
movzx esi, cx
mov dword [esp + 0x78], eax
mov dword [esp + 0x60], esi
mov al, byte [esp + 0x13]
test al, al
je 0x4b185c
movzx edx, cx
add edx, dword [esp + 0x50]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x6c], 0
cmp dword [edi + 0x70], ecx
jg 0x4b1888
push 0
push edx
push 0
mov edx, 0x4b
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b18bb
movzx esi, cx
mov dword [esp + 0x78], 1
mov dword [esp + 0x60], esi
test eax, eax
je 0x4b16a1
mov eax, dword [eax]
movzx ecx, cx
add ecx, edx
mov dword [esp + 0x98], ecx
mov esi, dword [eax + 0x10]
mov edx, esi
mov eax, dword [esp + 0x80]
movzx eax, ax
push eax
push ecx
mov ecx, dword [esp + 0x10]
call fcn.004b0050
mov eax, dword [esp + 0x6c]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x4b1778
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4b1742
mov edx, 0x5732cc
mov ecx, 0x5732c2
jmp 0x4b175a
mov eax, dword [edi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea edx, [ecx - 2]
lea ecx, [ecx*4 - 0x12]
add ecx, eax
lea edx, [eax + edx*4]
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0xc]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [ecx], ax
mov eax, dword [esp + 0x64]
test byte [eax + 0xa], 0x80
jne 0x4b17df
mov ecx, esi
call fcn.0045e050
test eax, eax
je 0x4b17df
mov ecx, dword [edi + 0x6c]
mov edx, dword [esp + 0x98]
cmp dword [edi + 0x70], ecx
jg 0x4b17b0
push 0
push dword [esp + 0x5c]
mov ecx, edi
push edx
mov edx, 0x32
call fcn.00441fb0
add esp, 0xc
jmp 0x4b17df
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x4b1805
mov eax, dword [esp + 0x3c]
movzx eax, ax
add eax, ecx
mov ecx, esi
push eax
mov eax, dword [esp + 0x84]
movzx edx, ax
call fcn.004aef70
add esp, 4
mov eax, dword [esp + 0x80]
movzx eax, ax
add dword [esp + 0x60], eax
mov al, byte [esi]
cmp al, 0xb0
jne 0x4b181c
mov al, byte [esi + 2]
cmp al, 0xb1
jne 0x4b1825
mov eax, dword [esi + 0x14]
jmp 0x4b182f
cmp al, 0x8a
jne 0x4b1847
mov eax, dword [esi + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4b1847
xor al, al
mov dword [esp + 0x6c], 1
mov byte [esp + 0x13], al
jmp 0x4b18cc
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0xc]
call fcn.004aee50
xor al, al
mov byte [esp + 0x13], al
jmp 0x4b18cc
cmp dword [esp + 0x30], 0
je 0x4b18cc
movzx edx, cx
add edx, dword [esp + 0x50]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b1888
push 0
push edx
push 0
mov edx, 0x4b
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b18bb
mov esi, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 4], 0
mov al, byte [esp + 0x13]
inc esi
mov dword [esp + 0x60], esi
mov dword [esp + 0x78], 1
mov esi, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x34]
mov edx, dword [esp + 0x54]
movzx eax, al
sub ecx, eax
push ecx
mov ecx, dword [esp + 0x10]
call fcn.004aeec0
mov eax, dword [esp + 0x28]
add esp, 8
movzx eax, word [eax + 0x32]
test ax, ax
je 0x4b1901
cmp esi, eax
je 0x4b1be1
mov edx, dword [esp + 0x30]
test edx, edx
je 0x4b1956
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b1927
push 0
push edx
push 1
mov edx, 0x47
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1956
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x34]
test edx, edx
je 0x4b19d8
mov ecx, dword [edi + 0x6c]
mov eax, dword [esp + 0x3c]
movzx esi, ax
cmp dword [edi + 0x70], ecx
jg 0x4b198b
push esi
push dword [esp + 0x54]
mov ecx, edi
push dword [esp + 0x60]
push edx
mov edx, 0x40
call fcn.00441ff0
add esp, 0x10
jmp 0x4b19ba
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x50]
mov dword [eax + ecx*4], 0xfd40
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], esi
push dword [ebp + 0x18]
mov eax, dword [ebp + 0x14]
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0xc]
push eax
push dword [esp + 0x60]
push dword [ebp + 0xc]
call fcn.004b01c0
add esp, 0x10
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x78]
lea eax, [ecx + eax*2]
mov ecx, dword [esp + 0x4c]
mov dl, byte [ecx + eax*2 + 0x55ca30]
mov ecx, dword [esp + 0x20]
movzx eax, dl
mov byte [esp + 0x7f], dl
mov dword [esp + 0x98], eax
test dword [ecx + 0x2c], 0x100000
je 0x4b1ae4
cmp eax, 0x17
jne 0x4b1ae4
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 8]
movsx ecx, word [eax]
mov eax, 0x66666667
add ecx, 9
imul ecx
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x2c], edx
cmp dword [edi + 0x70], edx
jg 0x4b1a5c
push 0
push 0
push esi
mov edx, 0x7c
mov ecx, edi
call fcn.00441fb0
mov esi, eax
add esp, 0xc
mov dword [esp + 0x2c], esi
jmp 0x4b1a8f
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x7c
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x64], 0
jne 0x4b1a9d
cmp dword [esp + 0x1c], 0
je 0x4b1ad9
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4b1ab4
lea ecx, [eax + eax*4]
mov edx, 1
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
inc edx
cmp byte [eax + 0x57], 0
je 0x4b1ac7
mov eax, 0x5732c0
jmp 0x4b1ad0
mov eax, dword [edi + 0x68]
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
xor eax, eax
mov dword [esp + 0x2c], eax
mov dl, byte [esp + 0x7f]
mov eax, dword [esp + 0x98]
mov ecx, dword [edi + 0x6c]
mov esi, dword [esp + 0x60]
cmp dword [edi + 0x70], ecx
jg 0x4b1b0b
push esi
push dword [esp + 0x54]
mov edx, eax
mov ecx, edi
push dword [esp + 0x60]
push dword [esp + 0x60]
call fcn.00441ff0
add esp, 0x10
jmp 0x4b1b41
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0x10], esi
mov byte [eax + ecx*4 + 1], 0xfd
lea eax, [eax + ecx*4]
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0xc], ecx
cmp dword [esp + 0x30], 0
je 0x4b1be1
mov ecx, dword [edi + 0x6c]
lea edx, [ecx + 2]
cmp dword [edi + 0x70], ecx
jg 0x4b1b6d
push 0
push edx
push 0
mov edx, 9
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1ba0
mov esi, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x4c]
mov eax, 1
cmp eax, esi
sbb eax, eax
sub esi, dword [esp + 0x6c]
and eax, 4
mov dl, byte [eax + ecx + 0x55ca32]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b1c4b
push esi
push dword [esp + 0x54]
movzx edx, dl
mov ecx, edi
push dword [esp + 0x60]
push dword [esp + 0x60]
call fcn.00441ff0
add esp, 0x10
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x1c]
movzx esi, dx
mov dword [esp + 0x6c], esi
test eax, eax
je 0x4b1dae
mov eax, dword [eax]
mov esi, dword [eax + 0x10]
movzx eax, dx
mov edx, esi
add ecx, eax
mov eax, dword [esp + 0x40]
movzx eax, ax
push eax
mov dword [esp + 0x9c], ecx
push ecx
mov ecx, dword [esp + 0x10]
call fcn.004b0050
mov eax, dword [esp + 0x24]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x4b1cbc
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4b1c86
mov edx, 0x5732cc
mov ecx, 0x5732c2
jmp 0x4b1c9e
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0x10], esi
mov byte [eax + ecx*4 + 1], 0xfd
lea eax, [eax + ecx*4]
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0xc], ecx
jmp 0x4b1be5
mov eax, dword [edi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea edx, [ecx - 2]
lea ecx, [ecx*4 - 0x12]
add ecx, eax
lea edx, [eax + edx*4]
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0xc]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [ecx], ax
mov eax, dword [esp + 0x1c]
test byte [eax + 0xa], 0x80
jne 0x4b1d23
mov ecx, esi
call fcn.0045e050
test eax, eax
je 0x4b1d23
mov ecx, dword [edi + 0x6c]
mov edx, dword [esp + 0x98]
cmp dword [edi + 0x70], ecx
jg 0x4b1cf4
push 0
push dword [esp + 0x5c]
mov ecx, edi
push edx
mov edx, 0x32
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1d23
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4b1d61
push eax
mov eax, dword [esp + 0x44]
mov ecx, esi
movzx edx, ax
call fcn.004aef70
mov eax, dword [esp + 0x4c]
add esp, 4
mov ecx, dword [esp + 8]
push eax
mov eax, dword [esp + 0x44]
movzx eax, ax
push eax
mov eax, dword [esp + 0x44]
movzx edx, ax
add edx, dword [esp + 0x58]
call fcn.004aeec0
add esp, 8
mov eax, dword [esp + 0x40]
movzx eax, ax
add dword [esp + 0x6c], eax
mov al, byte [esi]
cmp al, 0xb0
jne 0x4b1d75
mov al, byte [esi + 2]
cmp al, 0xb1
jne 0x4b1d7e
mov eax, dword [esi + 0x14]
jmp 0x4b1d88
cmp al, 0x8a
jne 0x4b1d9b
mov eax, dword [esi + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x4b1d9b
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x18], 1
jmp 0x4b1e17
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
call fcn.004aee50
mov esi, dword [esp + 0x6c]
jmp 0x4b1e17
cmp byte [esp + 0x27], 0
je 0x4b1e17
cmp dword [esp + 0x30], 0
jne 0x4b1e16
movzx edx, dx
add edx, ecx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b1ddf
push 0
push edx
push 0
mov edx, 0x4b
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1e0e
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [esp + 0x18], 0
inc esi
mov eax, dword [esp + 0x34]
test eax, eax
je 0x4b1e2a
mov ecx, dword [esp + 0x70]
mov edx, eax
call fcn.00418ce0
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4b1e3d
mov ecx, dword [esp + 0x70]
mov edx, eax
call fcn.00418ce0
mov ecx, dword [esp + 0xc]
mov eax, dword [edi + 0x6c]
mov dword [ecx + 0x44], eax
test esi, esi
je 0x4b1f39
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4b1eaa
mov ecx, dword [edi + 0x6c]
lea edx, [ecx + 3]
cmp dword [edi + 0x70], ecx
jg 0x4b1e77
push 0
push edx
push eax
mov edx, 0x11
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1eaa
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x11
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x4c]
mov ecx, dword [edi + 0x6c]
mov dl, byte [edx + eax*2 + str.___]
cmp dword [edi + 0x70], ecx
jg 0x4b1edd
push esi
push dword [esp + 0x54]
movzx edx, dl
mov ecx, edi
push dword [esp + 0x60]
push dword [esp + 0x60]
call fcn.00441ff0
add esp, 0x10
jmp 0x4b1f13
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0x10], esi
mov byte [eax + ecx*4 + 1], 0xfd
lea eax, [eax + ecx*4]
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x4b1f39
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4b1f2d
mov eax, 0x5732c0
jmp 0x4b1f36
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4b2010
mov ecx, dword [edi + 0x6c]
lea edx, [ecx + 2]
cmp dword [edi + 0x70], ecx
jg 0x4b1f65
push 0
push edx
push eax
mov edx, 0x10
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b1f98
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x10
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x4c]
movzx eax, byte [esp + 0x13]
mov ecx, dword [edi + 0x6c]
mov al, byte [eax + edx*2 + str.___]
movzx edx, byte [esp + 0x13]
add edx, esi
mov byte [esp + 0x27], al
cmp dword [edi + 0x70], ecx
jg 0x4b1fd7
push edx
push dword [esp + 0x54]
movzx edx, al
mov ecx, edi
push dword [esp + 0x60]
push dword [esp + 0x60]
call fcn.00441ff0
add esp, 0x10
jmp 0x4b2010
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 0x10], edx
mov byte [eax + ecx*4 + 1], 0xfd
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x27]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0xc], ecx
mov eax, dword [esp + 0x20]
test dword [eax + 0x2c], 0x40000
je 0x4b2079
mov eax, dword [esp + 0x3c]
mov ecx, dword [edi + 0x6c]
movzx edx, ax
movzx esi, ax
cmp dword [edi + 0x70], ecx
jg 0x4b2046
push edx
push esi
push dword [esp + 0x5c]
mov edx, 0x7d
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b2075
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x7d
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x20]
test byte [eax + 0x2c], 0x40
mov eax, dword [esp + 0x68]
je 0x4b209b
mov ecx, 0x1020
test word [eax + 0x28], cx
jne 0x4b209b
mov dword [esp + 0x2c], 1
jmp 0x4b22b2
mov edx, dword [esp + 0x44]
xor ecx, ecx
mov esi, dword [edx + 0xc]
test byte [esi + 0x1c], 0x80
jne 0x4b20c9
push dword [esp + 0x54]
mov ecx, eax
push dword [esp + 0x3c]
call fcn.004afee0
add esp, 8
mov dword [esp + 0x2c], 0
jmp 0x4b22b2
mov eax, dword [esp + 0x38]
mov dword [esp + 0x2c], ecx
cmp eax, dword [esp + 0x54]
je 0x4b22ba
mov esi, dword [esi + 8]
mov dword [esp + 0x2c], ecx
test esi, esi
je 0x4b2100
mov dword [esp + 0x2c], ecx
nop word [eax + eax]
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4b2100
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4b20f0
movzx ecx, word [esi + 0x32]
cmp ecx, 1
jne 0x4b2135
mov ecx, dword [esp + 8]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4b2120
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x48], eax
jmp 0x4b2178
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0xa4]
mov dword [esp + 0x48], eax
jmp 0x4b2178
mov edx, dword [esp + 8]
mov eax, dword [edx + 0x20]
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x48], eax
cmp ecx, edx
jg 0x4b215d
mov edi, dword [esp + 8]
add eax, ecx
sub edx, ecx
mov dword [edi + 0x20], eax
mov eax, edi
mov edi, dword [esp + 0x28]
mov dword [eax + 0x1c], edx
jmp 0x4b2174
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], edx
mov dword [ecx + 0x2c], eax
mov edx, dword [esp + 0x44]
movzx eax, word [esi + 0x32]
mov dword [esp + 0x14], 0
mov ecx, eax
mov dword [esp + 0x34], 0
cmp word [esp + 0x14], ax
jae 0x4b2253
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], eax
movzx edx, word [edx + 0x34]
xor ecx, ecx
test edx, edx
je 0x4b21d6
mov eax, dword [esi + 4]
mov edi, dword [esp + 0x34]
movzx eax, word [eax + edi*2]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 4]
mov edi, dword [esp + 0x14]
cmp di, word [eax]
mov edi, dword [esp + 0x28]
je 0x4b21fe
inc ecx
add eax, 2
cmp ecx, edx
jl 0x4b21c1
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x4b2203
push dword [esp + 0x18]
mov ecx, edi
push edx
push dword [esp + 0x5c]
mov edx, 0x5e
call fcn.00441fb0
add esp, 0xc
jmp 0x4b2236
movzx eax, cx
jmp 0x4b21d9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x34]
movzx ecx, word [esi + 0x32]
inc edx
inc dword [esp + 0x18]
cmp edx, ecx
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x44]
jl 0x4b21a1
movzx edx, cx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b2280
mov esi, dword [esp + 0x8c]
mov ecx, edi
push edx
push dword [esp + 0x4c]
mov edx, 0x1c
push esi
push dword [esp + 0x44]
call fcn.00441ff0
add esp, 0x10
jmp 0x4b22b2
mov esi, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x8c]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x48]
mov dword [eax + ecx*4], 0xfd1c
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], edx
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0xc]
cmp dword [esi], 0
jne 0x4b22d8
mov ecx, dword [edx + 0x24]
test ecx, ecx
je 0x4b22d8
push dword [esp + 0x74]
mov edx, eax
call fcn.004b0140
add esp, 4
mov edx, dword [esp + 0x20]
test dword [edx + 0x2c], 0x1000
jne 0x4b2351
cmp dword [esi + 0x48], 0
je 0x4b239b
cmp dword [esp + 0x30], 0
jne 0x4b239b
mov ecx, dword [edx + 0x20]
cmp byte [ecx + 0x36], 0
je 0x4b239b
cmp word [edx + 0x32], 0
jne 0x4b239b
movzx eax, word [edx + 0x18]
cmp ax, word [ecx + 0x32]
jne 0x4b239b
xor ecx, ecx
xor edx, edx
cmp cx, ax
jae 0x4b234d
mov esi, eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x38]
nop
mov eax, dword [ecx]
mov edi, 0x180
test word [eax + 0xc], di
mov edi, dword [esp + 0x28]
jne 0x4b2393
inc edx
add ecx, 4
cmp edx, esi
jl 0x4b2330
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x20]
mov byte [esi + 0x3d], 0xbb
mov eax, dword [esp + 0x54]
mov dword [esi + 0x40], eax
mov al, byte [edx + 0x2e]
and al, 1
mov byte [esi + 0x3e], al
test byte [edx + 0x2c], 0xf
mov edx, dword [esp + 0xc]
jne 0x4b2372
mov byte [edx + 0x3f], 1
cmp dword [esp + 0x2c], 0
je 0x4b3085
xor eax, eax
mov dword [esp + 0x44], eax
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0xc]
cmp dword [esp + 0x4c], 0
sete al
add al, 0x26
mov byte [esi + 0x3d], al
jmp 0x4b2355
test edx, 0x2000
je 0x4b2fad
mov ecx, dword [esp + 8]
xor edx, edx
mov dword [esp + 0x80], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], 0
mov eax, dword [ecx + 0x28]
inc dword [ecx + 0x2c]
mov esi, dword [ecx + 0x2c]
mov dword [esp + 0x88], eax
inc eax
mov dword [ecx + 0x28], eax
mov eax, dword [ecx + 0x38]
dec eax
mov dword [esp + 0x34], esi
mov dword [ecx + 0x38], eax
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x50], 0
mov dword [esp + 0x60], edx
mov ecx, dword [eax + 0x10]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x2c], ecx
mov eax, dword [eax + 0x38]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0xc]
mov dword [eax + 0x40], esi
mov esi, dword [esp + 0x68]
mov byte [eax + 0x3d], 0x43
mov al, byte [esi + 0x2c]
cmp al, 1
jbe 0x4b256d
mov ecx, dword [esp + 0x70]
movzx eax, al
sub eax, dword [ebp + 0xc]
dec eax
mov dword [esp + 0x5c], eax
push edx
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
call fcn.004190c0
mov ecx, eax
add esp, 8
mov dword [esp + 0x6c], ecx
test ecx, ecx
jne 0x4b2489
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x18]
pop edi
pop esi
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.0054507b
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x5c]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [esp + 0x84]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
movq qword [ecx + 0x48], xmm0
mov eax, dword [esi + 4]
add eax, 8
cmp edx, 1
jl 0x4b2529
mov esi, dword [esp + 0xc]
add ecx, 0x50
add esi, 0x9c
mov edi, eax
movzx eax, byte [esi]
lea esi, [esi + 0x60]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x4b24e2
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x68]
mov ecx, dword [esp + 0x2c]
test byte [esi + 0x28], 0x10
jne 0x4b267c
test byte [ecx + 0x1c], 0x80
jne 0x4b25aa
mov ecx, dword [esp + 8]
mov edx, dword [ecx + 0x2c]
inc edx
mov dword [ecx + 0x2c], edx
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x30], edx
cmp dword [edi + 0x70], ecx
jg 0x4b2576
push 0
push edx
push 0
mov edx, 0x4b
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b266d
mov eax, dword [esi + 4]
mov dword [esp + 0x6c], eax
jmp 0x4b252d
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4b266d
mov esi, dword [ecx + 8]
test esi, esi
je 0x4b25c1
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4b25c1
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4b25b1
mov ecx, dword [esp + 8]
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x30], eax
inc eax
mov dword [ecx + 0x28], eax
mov ecx, dword [edi + 0x6c]
movzx edx, word [esi + 0x32]
cmp dword [edi + 0x70], ecx
jg 0x4b25f4
push 0
push edx
push dword [esp + 0x38]
mov edx, 0x76
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b2627
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x76
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 8]
mov edx, esi
mov eax, dword [ecx + 8]
mov dword [esp + 0x5c], eax
call fcn.00477f50
mov esi, eax
test esi, esi
je 0x4b266d
mov edx, dword [esp + 0x5c]
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
je 0x4b265b
push esi
mov edx, 0xfffffff8
call fcn.00442b90
add esp, 4
jmp 0x4b266d
mov eax, dword [edx + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x68]
mov byte [eax + ecx*4 - 0x13], 0xf8
mov dword [eax + ecx*4 - 4], esi
mov edx, dword [esp + 8]
mov ecx, dword [edx + 0x2c]
inc ecx
mov dword [esp + 0x1c], ecx
mov dword [edx + 0x2c], ecx
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x5c], edx
cmp dword [edi + 0x70], edx
jg 0x4b26a5
push 0
push dword [esp + 0x38]
mov edx, 0x47
mov ecx, edi
push 0
call fcn.00441fb0
add esp, 0xc
mov dword [esp + 0x5c], eax
jmp 0x4b26d8
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x74]
cmp dword [eax + 0xc], 1
jle 0x4b27e3
xor ecx, ecx
xor esi, esi
mov dword [esp + 0x18], ecx
xor edi, edi
mov eax, dword [eax + 0x18]
add eax, esi
mov edx, dword [eax]
cmp eax, dword [esp + 0x14]
je 0x4b274a
mov edi, 0x8006
test word [eax + 0xa], di
mov edi, dword [esp + 0x60]
jne 0x4b274a
mov ecx, 0x3fff
test word [eax + 0xc], cx
mov ecx, dword [esp + 0x18]
je 0x4b274a
test dword [edx + 4], 0x400000
jne 0x4b274a
mov ecx, dword [esp + 0x70]
push 0
push 0
call fcn.0045c7e0
mov ecx, dword [esp + 0x10]
mov edx, edi
push eax
call fcn.0045bdd0
mov ecx, dword [esp + 0x24]
mov edi, eax
add esp, 0xc
mov dword [esp + 0x60], edi
mov eax, dword [esp + 0x74]
inc ecx
add esi, 0x30
mov dword [esp + 0x18], ecx
cmp ecx, dword [eax + 0xc]
jl 0x4b26f0
test edi, edi
mov edi, dword [esp + 0x28]
je 0x4b27e3
mov eax, dword [esp + 8]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.004190c0
mov esi, eax
add esp, 8
test esi, esi
je 0x4b27d0
push 0x34
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x6c]
or eax, 0xffffffff
mov word [esi + 0x22], ax
add esp, 0xc
mov dword [esi + 0x10], edx
mov byte [esi], 0x2c
mov eax, dword [edx + 4]
and eax, 0x400208
or dword [esi + 4], eax
mov ecx, dword [edx + 0x18]
mov edx, dword [esp + 8]
inc ecx
mov dword [esi + 0x18], ecx
mov eax, dword [edx]
mov eax, dword [eax + 0x84]
cmp ecx, eax
jle 0x4b27df
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push edx
call fcn.0041c7c0
add esp, 0xc
jmp 0x4b27df
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x60]
mov ecx, dword [eax]
call fcn.0045c540
mov dword [esp + 0x60], esi
mov esi, dword [esp + 8]
push str.MULTI_INDEX_OR
push 1
push esi
call fcn.004425b0
mov edx, dword [esp + 0x84]
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x40], ecx
cmp dword [edx + 0xc], ecx
jle 0x4b2886
nop dword [eax]
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [edx + 0x18]
mov edx, dword [esp + 0x38]
cmp dword [eax + 0x14], edx
je 0x4b282d
mov edx, 0x400
test word [eax + 0xc], dx
je 0x4b2876
mov edx, dword [eax]
xor eax, eax
mov dword [esp + 0x4c], eax
test edx, edx
je 0x4b284d
mov ecx, dword [esp + 0x70]
push eax
push eax
call fcn.0045c7e0
mov ecx, dword [esp + 0x48]
add esp, 8
jmp 0x4b284f
xor eax, eax
mov edx, dword [esp + 0x70]
mov esi, eax
mov dword [esp + 0x20], eax
cmp byte [edx + 0x57], 0
je 0x4b289b
test eax, eax
je 0x4b2872
mov ecx, dword [esp + 0x70]
mov edx, eax
call fcn.0045c540
mov ecx, dword [esp + 0x40]
mov esi, dword [esp + 8]
mov eax, dword [esp + 0x78]
inc ecx
mov dword [esp + 0x40], ecx
mov edx, eax
cmp ecx, dword [eax + 0xc]
jl 0x4b2810
mov ecx, dword [esi + 0xe8]
test ecx, ecx
jne 0x4b2dbd
xor eax, eax
jmp 0x4b2ddb
mov edx, dword [esp + 0x60]
test edx, edx
je 0x4b28a8
mov dword [edx + 0xc], eax
mov esi, edx
lea eax, [ecx + 1]
push eax
push str.INDEX__d
push 1
push dword [esp + 0x14]
call fcn.004425b0
push dword [esp + 0x98]
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x1c]
push 0x20
push 0
push 0
push 0
push esi
call fcn.004bf730
mov esi, eax
add esp, 0x28
mov dword [esp + 0x48], esi
test esi, esi
je 0x4b2d9f
mov edx, dword [esp + 0x6c]
lea ecx, [esi + 0x2f8]
push 0
push ecx
mov ecx, dword [esp + 0x10]
call fcn.004ae7d0
mov eax, dword [esp + 0x70]
add esp, 8
test byte [eax + 0x28], 0x10
jne 0x4b2c63
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x40]
mov eax, dword [eax + 0xc]
dec eax
cmp edx, eax
mov eax, 0xffffffff
cmove edx, eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x18], edx
test byte [eax + 0x1c], 0x80
jne 0x4b29f9
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b2963
push 0
push dword [esp + 0x20]
mov edx, 0x87
mov ecx, edi
push dword [esp + 0x40]
call fcn.00441fb0
mov edx, dword [esp + 0x24]
add esp, 0xc
jmp 0x4b2996
mov esi, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [edi + 0x6c]
mov dword [esp + 0x4c], esi
cmp dword [edi + 0x70], esi
jg 0x4b29c5
push edx
push dword [esp + 0x20]
mov edx, 0x2f
mov ecx, edi
push 0
push dword [esp + 0x3c]
call fcn.00441ff0
add esp, 0x10
mov dword [esp + 0x4c], eax
jmp 0x4b2c5f
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0xfd2f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x4b2c5f
mov esi, dword [eax + 8]
test esi, esi
je 0x4b2a10
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4b2a10
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4b2a00
movzx eax, word [esi + 0x32]
mov dword [esp + 0x3c], eax
mov ecx, eax
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 8]
cmp eax, 1
jne 0x4b2a5e
mov al, byte [ecx + 0x13]
test al, al
jne 0x4b2a43
inc dword [ecx + 0x2c]
mov edx, dword [ecx + 0x2c]
xor ecx, ecx
mov dword [esp + 0x64], edx
mov dword [esp + 0x58], ecx
jmp 0x4b2ab0
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0xa4]
xor ecx, ecx
mov dword [esp + 0x64], edx
mov dword [esp + 0x58], ecx
jmp 0x4b2ab0
mov edx, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x1c]
mov dword [esp + 0x64], edx
cmp eax, ecx
jg 0x4b2a84
mov edi, dword [esp + 8]
add eax, edx
sub ecx, dword [esp + 0x3c]
mov dword [edi + 0x20], eax
mov eax, edi
mov edi, dword [esp + 0x28]
mov dword [eax + 0x1c], ecx
jmp 0x4b2a9d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, dword [esp + 0x3c]
mov dword [esp + 0x64], edx
mov dword [ecx + 0x2c], eax
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x58], ecx
cmp ax, word [esp + 0x98]
jae 0x4b2ae1
nop
lea eax, [ecx + edx]
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esi + 4]
movsx eax, word [eax + ecx*2]
mov ecx, edi
push eax
push dword [esp + 0x40]
call fcn.00461160
mov ecx, dword [esp + 0x64]
add esp, 0xc
mov edx, dword [esp + 0x64]
inc ecx
mov dword [esp + 0x58], ecx
cmp ecx, dword [esp + 0x3c]
jl 0x4b2ab0
cmp dword [esp + 0x18], 0
je 0x4b2b53
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x4c], ecx
cmp dword [edi + 0x70], ecx
jg 0x4b2b19
mov esi, dword [esp + 0x3c]
mov ecx, edi
push esi
push edx
push 0
push dword [esp + 0x3c]
mov edx, 0x1d
call fcn.00441ff0
mov edx, dword [esp + 0x74]
add esp, 0x10
mov dword [esp + 0x4c], eax
jmp 0x4b2b48
mov esi, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0xfd1d
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], esi
cmp dword [esp + 0x18], 0
jl 0x4b2c21
mov ecx, dword [edi + 0x6c]
mov esi, dword [esp + 0x3c]
cmp dword [edi + 0x70], ecx
jg 0x4b2b7a
push dword [esp + 0x1c]
mov ecx, edi
push esi
push edx
mov edx, 0x61
call fcn.00441fb0
mov edx, dword [esp + 0x70]
add esp, 0xc
jmp 0x4b2ba9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b2bd0
push esi
push edx
push dword [esp + 0x24]
mov edx, 0x8a
mov ecx, edi
push dword [esp + 0x3c]
call fcn.00441ff0
mov edx, dword [esp + 0x74]
add esp, 0x10
jmp 0x4b2bff
mov esi, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0xfd8a
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], esi
cmp dword [esp + 0x18], 0
je 0x4b2c21
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4b2c21
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov edi, 0x10
mov word [eax + ecx*4 - 0x12], di
mov edi, dword [esp + 0x28]
cmp word [esp + 0x98], 1
jne 0x4b2c50
test edx, edx
je 0x4b2c5f
mov ecx, dword [esp + 8]
mov esi, dword [esp + 0x48]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4b2c63
movzx eax, al
mov dword [ecx + eax*4 + 0xa4], edx
mov eax, ecx
inc byte [eax + 0x13]
jmp 0x4b2c63
mov eax, dword [esp + 8]
cmp esi, dword [eax + 0x1c]
jle 0x4b2c5f
mov dword [eax + 0x1c], esi
mov dword [eax + 0x20], edx
mov esi, dword [esp + 0x48]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b2c86
push 0
push dword [esp + 0x58]
mov edx, 0xa
mov ecx, edi
push dword [esp + 0x3c]
call fcn.00441fb0
add esp, 0xc
jmp 0x4b2cb9
mov edx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x4b2cdf
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4b2cd3
mov eax, 0x5732c0
jmp 0x4b2cdc
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esi + 0x30]
mov ecx, 1
mov eax, dword [esp + 0x50]
test dl, 2
cmovne eax, ecx
mov ecx, dword [esi + 0x348]
mov dword [esp + 0x50], eax
test dword [ecx + 0x2c], 0x200
je 0x4b2d39
cmp dword [esp + 0x40], 0
je 0x4b2d17
mov eax, dword [esp + 0x80]
cmp dword [ecx + 0x20], eax
jne 0x4b2d39
mov eax, dword [esp + 0x2c]
test byte [eax + 0x1c], 0x80
je 0x4b2d2d
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x4b2d39
mov eax, dword [ecx + 0x20]
mov dword [esp + 0x80], eax
jmp 0x4b2d44
mov dword [esp + 0x80], 0
test dl, 1
je 0x4b2d51
mov eax, dword [esp + 0x68]
or dword [eax + 0x30], 1
mov ecx, esi
call fcn.004c07d0
mov esi, dword [esp + 8]
mov ecx, dword [esi + 0xe8]
test ecx, ecx
jne 0x4b2d70
xor eax, eax
mov dword [esi + 0xe8], eax
jmp 0x4b2da3
mov edx, dword [esi + 8]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4b2d8b
mov eax, 0x5732c0
mov eax, dword [eax + 8]
mov dword [esi + 0xe8], eax
jmp 0x4b2da3
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xe8], eax
jmp 0x4b2da3
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x20]
test edx, edx
je 0x4b2db4
mov ecx, dword [esp + 0x70]
call fcn.0045c540
mov ecx, dword [esp + 0x40]
jmp 0x4b2876
mov edx, dword [esi + 8]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x4b2dcf
mov eax, 0x5732c0
jmp 0x4b2dd8
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xe8], eax
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x80]
mov dword [esi + 0x48], eax
test eax, eax
je 0x4b2dfd
mov eax, dword [esp + 0x88]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x60]
test eax, eax
je 0x4b2e17
mov ecx, dword [esp + 0x70]
mov edx, eax
mov dword [eax + 0xc], 0
call fcn.0045c540
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4b2e29
mov eax, 0x5732c0
jmp 0x4b2e36
mov eax, dword [esp + 0x5c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x4b2e5a
push 0
push edx
push 0
mov edx, 9
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b2e89
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x54]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4b2ea7
push edx
mov edx, edi
call fcn.00442800
add esp, 4
jmp 0x4b2eb0
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [edi + 0x6c]
mov edx, esi
mov dword [edx + 0x44], eax
mov eax, dword [esp + 0x68]
cmp byte [eax + 0x2c], 1
jbe 0x4b2f7f
mov ecx, dword [esp + 0x70]
mov esi, dword [esp + 0x6c]
test ecx, ecx
je 0x4b2f1f
cmp esi, dword [ecx + 0x164]
jae 0x4b2f0d
cmp esi, dword [ecx + 0x15c]
jb 0x4b2ef5
mov eax, dword [ecx + 0x158]
mov dword [esi], eax
mov dword [ecx + 0x158], esi
jmp 0x4b2f7f
cmp esi, dword [ecx + 0x160]
jb 0x4b2f0d
mov eax, dword [ecx + 0x150]
mov dword [esi], eax
mov dword [ecx + 0x150], esi
jmp 0x4b2f7f
cmp dword [ecx + 0x210], 0
je 0x4b2f1f
mov edx, esi
call fcn.00418be0
jmp 0x4b2f7b
test esi, esi
je 0x4b2f7f
cmp dword [0x570570], 0
je 0x4b2f71
mov eax, dword [0x5733e8]
test eax, eax
je 0x4b2f3f
push eax
call dword [0x5705c0]
add esp, 4
push esi
call dword [0x57059c]
sub dword [0x573270], eax
add esp, 4
dec dword [0x573294]
push esi
call dword [0x570594]
mov eax, dword [0x5733e8]
add esp, 4
test eax, eax
je 0x4b2f7b
push eax
call dword [0x5705c8]
jmp 0x4b2f78
push esi
call dword [0x570594]
add esp, 4
mov edx, dword [esp + 0xc]
cmp dword [esp + 0x50], 0
jne 0x4b0d27
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
call fcn.004aee50
mov edx, dword [esp + 0xc]
xor eax, eax
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0xc]
test byte [eax + 0x28], 0x40
je 0x4b2fd4
xor eax, eax
mov byte [edx + 0x3d], 0xbb
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
mov ecx, dword [esp + 0x4c]
movzx eax, byte [ecx + 0x55dcac]
mov byte [edx + 0x3d], al
mov eax, dword [esp + 0x38]
mov dword [edx + 0x40], eax
mov al, byte [ecx + 0x55a428]
mov edx, dword [edi + 0x6c]
mov byte [esp + 0x27], al
cmp dword [edi + 0x70], edx
jg 0x4b302e
push 0
push esi
push dword [esp + 0x40]
movzx edx, al
mov ecx, edi
call fcn.00441fb0
mov edx, eax
add esp, 0xc
lea eax, [edx + 1]
mov edx, dword [esp + 0xc]
mov dword [edx + 0x44], eax
xor eax, eax
neg eax
mov byte [edx + 0x3f], 1
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x27]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
lea eax, [edx + 1]
mov edx, dword [esp + 0xc]
mov dword [edx + 0x44], eax
xor eax, eax
neg eax
mov byte [edx + 0x3f], 1
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
mov eax, dword [esp + 0x44]
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x5c], eax
jmp 0x4b309a
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x74]
xor ecx, ecx
mov dword [esp + 0x1c], ecx
mov esi, dword [eax + 0x18]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x14], eax
test eax, eax
jle 0x4b3357
jmp 0x4b30c4
mov edx, dword [esp + 0xc]
xor eax, eax
test byte [esi + 0xa], 6
mov dword [esp + 0x34], eax
jne 0x4b3343
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [edx + 0x58]
and eax, dword [edx + 0x5c]
or ecx, eax
je 0x4b30f1
mov eax, dword [esp + 0x68]
or dword [eax + 0x30], 2
jmp 0x4b333f
mov eax, dword [esp + 0x84]
mov edx, dword [esi]
mov dword [esp + 0x18], edx
mov al, byte [eax + 0x24]
test al, 0x58
je 0x4b31aa
mov ecx, dword [edx + 4]
test cl, 3
je 0x4b333f
test al, 8
je 0x4b3122
test cl, 1
je 0x4b333f
mov ecx, dword [esp + 0x68]
mov eax, dword [edx + 0x24]
cmp dword [ecx + 0x1f8], eax
jne 0x4b313a
mov ecx, 1
xor edx, edx
jmp 0x4b3192
mov edx, dword [ecx + 0x1f4]
mov eax, 1
mov dword [esp + 0x88], edx
cmp edx, eax
jle 0x4b3178
add ecx, 0x1fc
mov edx, dword [esp + 0x18]
mov edi, dword [edx + 0x24]
cmp dword [ecx], edi
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x88]
je 0x4b3232
inc eax
add ecx, 4
cmp eax, edx
jl 0x4b3156
xorps xmm0, xmm0
movlpd qword [esp + 0x90], xmm0
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 0xc]
and ecx, dword [eax + 0x58]
mov eax, dword [eax + 0x5c]
and eax, edx
or ecx, eax
jne 0x4b333f
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x5c]
cmp eax, 1
jne 0x4b324c
mov eax, dword [esp + 0xc]
xorps xmm0, xmm0
mov dword [esp + 0xa0], 0
movlpd qword [esp + 0xa8], xmm0
movlpd qword [esp + 0xb0], xmm0
mov eax, dword [eax + 4]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x98]
mov dword [esp + 0xa4], 0x4658c0
mov dword [esp + 0xb8], eax
test edx, edx
je 0x4b3219
lea ecx, [esp + 0xa0]
call fcn.00457010
cmp word [esp + 0xb4], 0
je 0x4b3251
mov ecx, 2
mov dword [esp + 0x1c], ecx
jmp 0x4b3343
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4b3192
cmp eax, 3
jge 0x4b3276
mov eax, 0x1000
test word [esi + 0xa], ax
je 0x4b3276
mov ecx, dword [esp + 0x1c]
test ecx, ecx
jne 0x4b3343
mov ecx, 3
mov dword [esp + 0x1c], ecx
jmp 0x4b3343
mov eax, 0x200
test word [esi + 0xa], ax
je 0x4b32fb
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x2c]
test edx, edx
je 0x4b32fb
mov ecx, dword [edi + 0x6c]
mov eax, edx
and edx, 1
shr eax, 1
or edx, 0x10
mov dword [esp + 0x88], eax
mov dword [esp + 0x34], ecx
cmp dword [edi + 0x70], ecx
jg 0x4b32be
push 0
push 0
push eax
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
mov dword [esp + 0x34], eax
jmp 0x4b32fb
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov dword [eax + 0x10], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x88]
mov dword [eax + 4], ecx
mov byte [eax + 1], 0
push 0x10
push dword [esp + 0x90]
push dword [esp + 0x20]
push dword [esp + 0x14]
call fcn.00464970
mov ecx, dword [esp + 0x44]
add esp, 0x10
test ecx, ecx
je 0x4b333a
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4b332e
mov eax, 0x5732c0
jmp 0x4b3337
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
add esi, 0x30
dec eax
mov dword [esp + 0x14], eax
test eax, eax
jg 0x4b30c0
mov dword [esp + 0x5c], ecx
test ecx, ecx
jg 0x4b3096
mov esi, dword [esp + 0x74]
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x2c], edx
test edx, edx
jle 0x4b34e1
mov edi, eax
nop dword [eax + eax]
test byte [edi + 0xa], 6
jne 0x4b34cd
movzx eax, word [edi + 0xc]
mov esi, 0xb
test al, 0x82
setne cl
bt ax, si
mov esi, dword [esp + 0x74]
setb al
test al, cl
je 0x4b34cd
mov ecx, dword [esp + 0x38]
cmp dword [edi + 0x14], ecx
jne 0x4b34cd
mov eax, dword [esp + 0x84]
test byte [eax + 0x24], 0x58
jne 0x4b34cd
mov eax, dword [edi]
mov edx, esi
push 0
push 0x83
push dword [edi + 0x18]
mov dword [esp + 0x20], eax
push ecx
lea ecx, [esp + 0xf8]
mov dword [esp + 0x28], 0
call fcn.004b7e80
mov esi, eax
add esp, 0x10
test esi, esi
je 0x4b343c
nop dword [eax]
mov edx, dword [esi + 0x20]
mov ecx, edx
mov eax, dword [esi + 0x24]
and ecx, dword [ebp + 0x14]
and eax, dword [ebp + 0x18]
or ecx, eax
jne 0x4b342a
or edx, dword [esi + 0x24]
jne 0x4b341d
test byte [esi + 0xc], 0x82
jne 0x4b3440
mov eax, dword [esp + 0x18]
test eax, eax
cmove eax, esi
mov dword [esp + 0x18], eax
lea ecx, [esp + 0xe8]
call fcn.004b7b60
mov esi, eax
test esi, esi
jne 0x4b3400
mov esi, dword [esp + 0x18]
test esi, esi
je 0x4b34c9
test byte [esi + 0xa], 4
jne 0x4b34c9
test byte [esi + 0xc], 1
je 0x4b346a
mov eax, dword [esi]
test dword [eax + 4], 0x1000
je 0x4b346a
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x4b34c9
mov eax, dword [esi]
push 0x10
push dword [esp + 0x90]
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xa8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esp + 0xb8], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esp + 0xc8], xmm0
mov eax, dword [eax + 0x30]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xa8]
push eax
push dword [esp + 0x14]
call fcn.00464970
add esp, 0x10
or word [esi + 0xa], 4
mov edx, dword [esp + 0x2c]
dec edx
add edi, 0x30
mov dword [esp + 0x2c], edx
test edx, edx
jg 0x4b3380
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x18], eax
test eax, eax
je 0x4b389d
movzx eax, byte [ecx + 0x3c]
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*8 + 0x18]
mov dword [esp + 0x5c], eax
test byte [eax + 0x1c], 0x80
jne 0x4b35b5
mov edx, dword [esp + 8]
mov ecx, dword [edx + 0x1c]
mov esi, dword [edx + 0x20]
cmp ecx, 2
jl 0x4b3531
lea eax, [esi + 2]
mov dword [edx + 0x20], eax
lea eax, [ecx - 2]
mov dword [edx + 0x1c], eax
jmp 0x4b353d
mov eax, dword [edx + 0x2c]
lea esi, [eax + 1]
add eax, 2
mov dword [edx + 0x2c], eax
mov eax, dword [esp + 0xc]
lea edx, [esi + 1]
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 4]
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], ecx
jg 0x4b3574
push 0
push edx
push eax
mov edx, 0x87
mov ecx, edi
call fcn.00441fb0
mov edx, 1
add esp, 0xc
mov dword [esp + 0x44], edx
jmp 0x4b36a1
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov edx, 1
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [esp + 0x44], edx
jmp 0x4b36a1
mov esi, dword [eax + 8]
test esi, esi
je 0x4b35d0
nop dword [eax]
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4b35d0
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4b35c0
movzx eax, word [esi + 0x32]
mov dword [esp + 0x44], eax
lea ecx, [eax + 1]
cmp ecx, 1
jne 0x4b3604
mov ecx, dword [esp + 8]
mov al, byte [ecx + 0x13]
test al, al
jne 0x4b35f3
inc dword [ecx + 0x2c]
mov edx, dword [ecx + 0x2c]
jmp 0x4b3648
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0xa4]
jmp 0x4b3648
mov eax, dword [esp + 8]
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x14], eax
cmp ecx, eax
jg 0x4b3635
mov edi, dword [esp + 8]
lea eax, [ecx + edx]
mov dword [edi + 0x20], eax
mov eax, dword [esp + 0x14]
sub eax, ecx
mov ecx, edi
mov edi, dword [esp + 0x28]
mov dword [ecx + 0x1c], eax
jmp 0x4b364c
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 8]
mov dword [ecx + 0x2c], eax
mov dword [esp + 0x2c], edx
xor ecx, ecx
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x44], ecx
jbe 0x4b3699
lea eax, [edx + 1]
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0x5c]
add eax, ecx
push eax
mov eax, dword [esi + 4]
movsx eax, word [eax + ecx*2]
mov ecx, edi
push eax
push dword [esp + 0x40]
call fcn.00461160
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov edx, dword [esp + 0x44]
inc ecx
mov eax, dword [esp + 0x88]
mov dword [esp + 0x14], ecx
cmp ecx, edx
jl 0x4b3662
jmp 0x4b369d
mov edx, dword [esp + 0x44]
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
lea eax, [esi + 1]
mov ecx, dword [ecx]
mov dword [esp + 0x14], ecx
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x5c], ecx
cmp dword [edi + 0x70], ecx
jg 0x4b36dc
push edx
mov edx, dword [esp + 0x18]
mov ecx, edi
push eax
push 0
push edx
mov edx, 0x1d
call fcn.00441ff0
mov edx, dword [esp + 0x54]
add esp, 0x10
mov dword [esp + 0x5c], eax
jmp 0x4b370e
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
lea edx, [esi + 1]
mov dword [eax + ecx*4 + 0xc], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0xfd1d
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], edx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b3731
push esi
push edx
lea eax, [esi + 1]
mov edx, 0x61
push eax
mov ecx, edi
call fcn.00441fb0
mov edx, dword [esp + 0x50]
add esp, 0xc
jmp 0x4b375f
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
lea edi, [esi + 1]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x18]
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], ecx
jg 0x4b3791
push edx
mov edx, dword [esp + 0x18]
lea eax, [esi + 1]
push eax
push esi
push edx
mov edx, 0x8a
mov ecx, edi
call fcn.00441ff0
mov edx, dword [esp + 0x54]
add esp, 0x10
jmp 0x4b37bf
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
lea edx, [esi + 1]
mov dword [eax + ecx*4 + 0xc], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0xfd8a
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0x10], edx
mov eax, dword [esp + 0x18]
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 4]
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], ecx
jg 0x4b37f3
push edx
mov edx, dword [esp + 0x18]
lea eax, [esi + 1]
push eax
push 0
push edx
mov edx, 0xb7
mov ecx, edi
call fcn.00441ff0
mov edx, dword [esp + 0x54]
add esp, 0x10
jmp 0x4b3825
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
lea edx, [esi + 1]
mov dword [eax + ecx*4 + 0xc], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0xfdb7
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], edx
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4b3840
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esp + 0x44]
mov eax, dword [edi + 0x6c]
mov dword [esp + 0x14], eax
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4b3856
mov eax, 0x5732c0
jmp 0x4b3863
mov eax, dword [esp + 0x5c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x14]
inc edx
mov dword [eax + 8], ecx
cmp edx, 1
jne 0x4b388e
test esi, esi
je 0x4b389d
mov ecx, dword [esp + 8]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x4b389d
movzx eax, al
mov dword [ecx + eax*4 + 0xa4], esi
inc byte [ecx + 0x13]
jmp 0x4b389d
mov ecx, dword [esp + 8]
cmp edx, dword [ecx + 0x1c]
jle 0x4b389d
mov dword [ecx + 0x1c], edx
mov dword [ecx + 0x20], esi
mov eax, dword [esp + 0xc]
mov edx, dword [eax]
test edx, edx
je 0x4b390d
mov ecx, dword [esp + 0xc]
mov eax, dword [edi + 0x6c]
mov dword [ecx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4b38cf
push 0
push edx
push 1
mov edx, 0x47
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b38fe
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xc]
cmp dword [eax + 0x38], 0
je 0x4b397d
mov esi, dword [eax + 0x38]
jmp 0x4b3918
mov esi, dword [eax + 0x38]
test esi, esi
je 0x4b39e5
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 8]
cmp dword [edi + 0x70], ecx
jg 0x4b3939
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, edi
call fcn.00441fb0
add esp, 0xc
jmp 0x4b396c
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 8]
mov eax, dword [edi + 0x6c]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0xc]
inc byte [edx + 0x1a]
mov ecx, dword [esp + 0x74]
xor edi, edi
mov esi, dword [ecx + 0x18]
cmp dword [ecx + 0x14], edi
jle 0x4b39e5
nop dword [eax + eax]
test byte [esi + 0xa], 6
jne 0x4b39d4
mov edx, dword [esp + 0xc]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x58]
mov eax, dword [esi + 0x2c]
and eax, dword [edx + 0x5c]
or ecx, eax
mov edx, dword [esp + 8]
jne 0x4b39d4
mov eax, dword [esp + 0x84]
test byte [eax + 0x24], 0x40
jne 0x4b39d4
push 0x10
push dword [esp + 0x90]
push dword [esi]
push edx
call fcn.00464970
add esp, 0x10
or word [esi + 0xa], 4
mov eax, dword [esp + 0x74]
inc edi
add esi, 0x30
cmp edi, dword [eax + 0x14]
mov eax, dword [esp + 0xc]
jl 0x4b3990
mov ecx, dword [esp + 0xc]
mov eax, dword [eax + 0x58]
pop edi
pop esi
mov edx, dword [ecx + 0x5c]
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.0054507b
mov esp, ebp
pop ebp
ret