Function at 0x4aa150
Capabilities:
Encode data using base64
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x100
mov eax, dword [esp + 0x104]
mov eax, dword [eax]
mov edx, dword [esp + 0x124]
mov dword [esp + 0x24], eax
shr eax, 9
and eax, 1
mov dword [esp + 0xa0], eax
xor eax, 1
push ebx
mov dword [esp + 0xa8], eax
mov eax, 0xfffffffe
xor ecx, ecx
push ebp
push esi
mov esi, dword [esp + 0x114]
mov ebx, dword [esi]
mov dword [esp + 0x54], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x30]
push edi
mov edi, dword [esp + 0x11c]
mov edi, dword [edi]
xor ebp, ebp
and eax, 1
mov esi, ebx
shl eax, 0x1c
mov dword [esp + 0x54], ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xd0], esi
mov dword [esp + 0x60], ecx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x18], ebp
mov dword [esp + 0x64], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov dword [esp + 0x20], eax
cmp eax, ecx
jne 0x4aa228
mov eax, dword [esp + 0x68]
cmp eax, ecx
je 0x4aa228
mov edi, eax
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x20], eax
cmp dword [esp + 0x138], ecx
je 0x4aa2e1
mov ecx, dword [edx + 0x34]
mov edx, dword [edx + 0x10]
lea eax, [edx + ecx*2 - 0xc8]
cmp ebx, eax
ja 0x4adab3
mov eax, dword [esp + 0xa0]
cmp ebx, eax
jae 0x4aa25b
mov ebx, eax
mov dword [esp + 0x14], ebx
mov ecx, dword [esp + 0x138]
mov ecx, dword [ecx]
mov eax, ebx
sub eax, dword [esp + 0xa0]
mov edx, 0x7fffffeb
sar eax, 1
sub edx, ecx
cmp edx, eax
jl 0x4adad6
add ecx, eax
mov eax, dword [esp + 0x138]
mov dword [eax], ecx
test ebp, ebp
je 0x4aa2cb
cmp ebp, esi
jbe 0x4aa2d1
mov ecx, ebx
sub ecx, ebp
and ecx, 0xfffffffe
push ecx
push ebp
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x140]
sub ebp, esi
sar ebp, 1
add esp, 0xc
neg ebp
lea ebx, [ebx + ebp*2]
mov ebp, esi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0xa0], ebx
jmp 0x4aa2f7
mov ebx, esi
mov dword [esp + 0x14], ebx
mov edx, dword [esp + 0x134]
mov dword [esp + 0xa0], ebx
jmp 0x4aa2f7
mov eax, dword [edx + 0x34]
mov ecx, dword [edx + 0x10]
lea eax, [ecx + eax*2 - 0xc8]
cmp dword [edx + 0x24], eax
ja 0x4adaf9
xor esi, esi
cmp dword [esp + 0x60], esi
je 0x4aa3a7
cmp dword [esp + 0x20], esi
je 0x4aa3a7
mov ecx, dword [esp + 0x20]
cmp ecx, 0x5c
jne 0x4aa33c
cmp word [edi + 2], 0x45
jne 0x4aa33c
mov edx, dword [esp + 0x134]
add edi, 2
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0xd0]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
mov eax, dword [esp + 0x64]
cmp eax, esi
je 0x4aa362
cmp dword [esp + 0x138], esi
jne 0x4aa35e
sub edi, dword [edx + 0x18]
sar edi, 1
sub di, word [eax + 8]
mov word [eax + 0xa], di
mov edi, dword [esp + 0x10]
mov dword [esp + 0x64], esi
test dword [esp + 0x34], 0x4000
je case.0x4aa52a.1
mov eax, 0x70
mov word [ebx], ax
mov eax, 0xff
mov word [ebx + 2], ax
mov dword [ebx + 4], esi
sub edi, dword [edx + 0x18]
xor edx, edx
sar edi, 1
mov word [ebx + 8], di
mov word [ebx + 0xa], dx
mov edi, dword [esp + 0x10]
mov dword [esp + 0x64], ebx
add ebx, 0xc
mov dword [esp + 0x14], ebx
jmp 0x4aa6aa
mov eax, dword [esp + 0x20]
cmp eax, 0x2a
je 0x4aa531
cmp eax, 0x2b
je 0x4aa531
cmp eax, 0x3f
je 0x4aa531
cmp eax, 0x7b
jne 0x4aa3db
lea eax, [edi + 2]
call fcn.004a7400
test eax, eax
jne 0x4aa531
mov eax, dword [esp + 0x64]
mov dword [esp + 0x24], esi
cmp eax, esi
je 0x4aa41f
mov ecx, dword [esp + 0xa8]
mov esi, ecx
dec ecx
mov dword [esp + 0xa8], ecx
test esi, esi
jg 0x4aa41f
cmp dword [esp + 0x138], 0
jne 0x4aa417
sub edi, dword [edx + 0x18]
sar edi, 1
sub di, word [eax + 8]
mov word [eax + 0xa], di
mov edi, dword [esp + 0x10]
mov dword [esp + 0x64], 0
mov eax, dword [esp + 0x34]
test al, 8
je 0x4aa4d0
mov ecx, 0xff
cmp word [edi], cx
ja 0x4aa44d
mov edx, dword [edx + 0xc]
mov ecx, dword [esp + 0x20]
test byte [ecx + edx], 1
jne 0x4ada9b
mov edx, dword [esp + 0x134]
cmp dword [esp + 0x20], 0x23
jne 0x4aa4d0
add edi, 2
mov dword [esp + 0x10], edi
movzx edx, word [edi]
test dx, dx
je 0x4aa4bd
mov eax, dword [esp + 0x134]
mov ecx, dword [eax + 0x60]
test ecx, ecx
je 0x4aa53e
mov eax, dword [eax + 0x1c]
cmp edi, eax
jae 0x4aa56f
mov esi, dword [esp + 0x134]
push 1
push ecx
add esi, 0x64
mov edx, eax
mov ecx, edi
call fcn.004b8dc0
add esp, 8
test eax, eax
je 0x4aa56f
mov ecx, dword [esp + 0x134]
mov edx, dword [ecx + 0x64]
lea edi, [edi + edx*2 - 2]
mov dword [esp + 0x10], edi
cmp word [edi], 0
jne 0x4ada9b
mov edx, dword [esp + 0x134]
mov eax, dword [esp + 0x34]
mov dword [esp + 0x20], 0
test eax, 0x4000
je 0x4aa514
cmp dword [esp + 0x24], 0
jne 0x4aa514
mov ecx, 0x70
mov word [ebx], cx
mov ecx, 0xff
mov word [ebx + 2], cx
mov dword [ebx + 4], 0
sub edi, dword [edx + 0x18]
xor ecx, ecx
sar edi, 1
mov word [ebx + 8], di
mov word [ebx + 0xa], cx
mov edi, dword [esp + 0x10]
mov dword [esp + 0x64], ebx
add ebx, 0xc
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x20], 0x7c
ja case.0x4aa52a.1
mov ecx, dword [esp + 0x20]
movzx ecx, byte [ecx + 0x4ae0b4]
jmp dword [ecx*4 + 0x4ae080]
mov dword [esp + 0x24], 1
jmp 0x4aa41f
mov ecx, dword [eax + 0x64]
mov esi, dword [eax + 0x1c]
mov dword [esp + 0x5c], ecx
add ecx, ecx
sub esi, ecx
cmp edi, esi
ja 0x4aa56f
cmp dx, word [eax + 0x68]
jne 0x4aa56f
cmp dword [esp + 0x5c], 1
je 0x4aa4a1
mov dx, word [edi + 2]
cmp dx, word [eax + 0x6a]
je 0x4aa4a1
add edi, 2
mov dword [esp + 0x10], edi
mov cx, word [edi]
mov edx, 0xfc00
and cx, dx
mov eax, 0xdc00
cmp cx, ax
jne 0x4aa592
add edi, 2
mov dword [esp + 0x10], edi
movzx edx, word [edi]
test dx, dx
jne 0x4aa463
jmp 0x4aa4bd
xor ebp, ebp
mov dword [esp + 0x18], ebp
test al, 2
je 0x4aa5e7
cmp dword [esp + 0x30], 0xfffffffe
jne 0x4aa5bc
mov dword [esp + 0x30], 0xffffffff
mov esi, dword [esp + 0xd0]
mov edx, 0x1a
mov word [ebx], dx
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x134]
add ebx, 2
add edi, 2
mov dword [esp + 0x14], ebx
xor ecx, ecx
jmp 0x4aa200
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
mov eax, 0x19
mov word [ebx], ax
mov edi, dword [esp + 0x10]
add ebx, 2
add edi, 2
mov dword [esp + 0x14], ebx
xor ecx, ecx
jmp 0x4aa200
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
xor ebp, ebp
test al, 2
mov ecx, ebp
setne cl
mov dword [esp + 0x18], ebp
add ecx, 0x1b
mov word [ebx], cx
mov edi, dword [esp + 0x10]
add ebx, 2
add edi, 2
mov dword [esp + 0x14], ebx
xor ecx, ecx
jmp 0x4aa200
mov ecx, dword [esp + 0x30]
cmp ecx, 0xfffffffe
jne 0x4aa658
or ecx, 0xffffffff
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x48]
mov esi, dword [esp + 0xd0]
shr eax, 2
and eax, 1
or eax, 0xc
mov word [ebx], ax
mov edi, dword [esp + 0x10]
mov ebp, ebx
add ebx, 2
mov dword [esp + 0x40], ecx
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x134]
add edi, 2
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebx
xor ecx, ecx
jmp 0x4aa200
test dword [edx + 0x4c], 0x2000000
jne 0x4adb81
mov ecx, dword [esp + 0x20]
mov bp, cx
and ecx, 0xfc00
mov eax, 1
mov word [esp + 0xbc], bp
cmp ecx, 0xd800
jne 0x4aa6f5
mov dx, word [edi + 2]
add edi, 2
mov ecx, 0xfc00
and dx, cx
mov ecx, 0xdc00
cmp dx, cx
jne 0x4aa6f5
mov dword [esp + 0x10], edi
mov dx, word [edi]
mov word [esp + 0xbe], dx
mov eax, 2
test byte [esp + 0x34], 1
mov ecx, dword [esp + 0x14]
mov edx, 0
setne dl
mov dword [esp + 0x18], ecx
add ecx, 2
mov dword [esp + 0x14], ecx
add edx, 0x1d
mov word [ecx - 2], dx
test eax, eax
jle 0x4aa73b
mov edx, dword [esp + 0x14]
mov ecx, eax
shr ecx, 1
lea esi, [esp + 0xbc]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
lea ecx, [edx + eax*2]
mov dword [esp + 0x14], ecx
cmp bp, 0xd
je 0x4aa74b
cmp bp, 0xa
jne 0x4ada0f
mov edx, dword [esp + 0x134]
or dword [edx + 0x50], 0x800
jmp 0x4ada16
movzx eax, word [edi + 2]
mov dword [esp + 0x18], ebx
cmp eax, 0x3a
je 0x4aa775
cmp eax, 0x2e
je 0x4aa775
cmp eax, 0x3d
jne 0x4aa78f
lea eax, [esp + 0x74]
push eax
push edi
call fcn.004a91f0
mov edi, dword [esp + 0x18]
add esp, 8
test eax, eax
jne 0x4adba4
xor eax, eax
mov dword [esp + 0x24], eax
add edi, 2
mov dword [esp + 0x10], edi
movzx ebp, word [edi]
cmp ebp, 0x5c
jne 0x4aa7fa
cmp word [edi + 2], 0x45
lea ecx, [edi + 2]
jne 0x4aa7b2
mov edi, ecx
jmp 0x4aa795
mov eax, 3
mov esi, 0x4de740
lea esp, [esp]
movzx edx, byte [esi]
dec eax
mov dword [esp + 0x5c], eax
movzx eax, word [ecx]
add ecx, 2
inc esi
cmp dx, ax
jne 0x4aa7e5
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x4aa7c0
mov eax, dword [esp + 0x24]
add edi, 6
jmp 0x4aa795
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x4aa84e
mov eax, dword [esp + 0x24]
add edi, 6
jmp 0x4aa795
test eax, eax
jne 0x4aa808
cmp ebp, 0x5e
jne 0x4aa808
lea eax, [ebp - 0x5d]
jmp 0x4aa791
cmp ebp, 0x5d
jne 0x4aa84e
mov ecx, dword [esp + 0x134]
test dword [ecx + 0x4c], 0x2000000
je 0x4aa84e
neg eax
sbb eax, eax
and eax, 0xffffff76
add eax, 0x97
mov word [ebx], ax
mov eax, dword [esp + 0x30]
add ebx, 2
mov dword [esp + 0x14], ebx
cmp eax, 0xfffffffe
jne 0x4aa845
or eax, 0xffffffff
mov dword [esp + 0x30], eax
mov dword [esp + 0x40], eax
jmp 0x4ada93
mov ebx, dword [esp + 0x14]
xor eax, eax
add ebx, 6
mov dword [esp + 0x2c], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x5c], ebx
cmp ebp, eax
je 0x4adc6d
jmp 0x4aa8b0
mov edx, ebp
and edx, 0xfc00
cmp edx, 0xd800
jne 0x4aa8f0
movzx ebp, word [edi]
mov eax, ebp
and eax, 0xfc00
cmp eax, edx
jne 0x4aa8f0
movzx ecx, word [edi + 2]
and ebp, 0x3ff
shl ebp, 0xa
and ecx, 0x3ff
or ebp, ecx
add ebp, 0x10000
add edi, 2
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x138]
test eax, eax
je 0x4aa907
mov edx, ebx
mov ebx, dword [esp + 0x5c]
sub edx, ebx
sar edx, 1
add dword [eax], edx
cmp dword [esp + 0x60], 0
je 0x4aa932
cmp ebp, 0x5c
jne 0x4aab28
cmp word [edi + 2], 0x45
jne 0x4aab28
mov dword [esp + 0x60], 0
add edi, 2
jmp 0x4ab30e
cmp ebp, 0x5b
jne 0x4aaadd
movzx eax, word [edi + 2]
cmp eax, 0x3a
je 0x4aa952
cmp eax, 0x2e
je 0x4aa952
cmp eax, 0x3d
jne 0x4aab28
lea eax, [esp + 0x74]
push eax
push edi
call fcn.004a91f0
add esp, 8
test eax, eax
je 0x4aab24
mov edi, dword [esp + 0x10]
cmp word [edi + 2], 0x3a
mov ecx, dword [esp + 0x134]
mov ebp, dword [ecx + 8]
mov dword [esp + 0x58], 0
jne 0x4adbd4
add edi, 4
mov dword [esp + 0x10], edi
cmp word [edi], 0x5e
jne 0x4aa9aa
mov eax, 1
add edi, 2
mov dword [esp + 0x58], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0x74]
mov eax, esi
sub eax, edi
sar eax, 1
push edi
call fcn.004a9280
add esp, 4
test eax, eax
js 0x4adbf7
mov ecx, dword [esp + 0x34]
test cl, 1
je 0x4aa9d5
cmp eax, 2
jg 0x4aa9d5
xor eax, eax
test ecx, 0x20000000
je 0x4aaa04
mov ecx, dword [esp + 0x58]
neg ecx
sbb ecx, ecx
and ecx, 0xe
add ecx, eax
mov edi, dword [ecx*4 + 0x4e4190]
test edi, edi
je 0x4aaa04
add esi, 2
mov dword [esp + 0x68], esi
add edi, 0xfffffffe
jmp 0x4ab30e
lea eax, [eax + eax*2]
mov esi, dword [eax*4 + 0x4cfdc0]
add esi, ebp
mov ecx, 8
lea edi, [esp + 0xe4]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax*4 + 0x4cfdc4]
mov edi, dword [eax*4 + 0x4cfdc8]
test ecx, ecx
js 0x4aaa64
xor eax, eax
lea esi, [ecx + ebp]
test edi, edi
js 0x4aaa52
lea esp, [esp]
mov dl, byte [esi + eax]
or byte [esp + eax + 0xe4], dl
inc eax
cmp eax, 0x20
jl 0x4aaa40
jmp 0x4aaa64
mov cl, byte [esi + eax]
not cl
and byte [esp + eax + 0xe4], cl
inc eax
cmp eax, 0x20
jl 0x4aaa52
test edi, edi
jns 0x4aaa6a
neg edi
cmp edi, 1
jne 0x4aaa79
and byte [esp + 0xe5], 0xc3
jmp 0x4aaa86
cmp edi, 2
jne 0x4aaa86
and byte [esp + 0xef], 0x7f
xor eax, eax
cmp dword [esp + 0x58], eax
je 0x4aaab0
mov edi, edi
mov dl, byte [esp + eax + 0xe4]
not dl
or byte [esp + eax + 0x78], dl
inc eax
cmp eax, 0x20
jl 0x4aaa90
jmp 0x4aaac1
mov cl, byte [esp + eax + 0xe4]
or byte [esp + eax + 0x78], cl
inc eax
cmp eax, 0x20
jl 0x4aaab0
mov edi, dword [esp + 0x74]
add edi, 2
mov dword [esp + 0x1c], 1
mov dword [esp + 0x28], 2
jmp 0x4ab30e
cmp ebp, 0x5c
jne 0x4aab28
mov edx, dword [esp + 0x34]
mov esi, dword [esp + 0x120]
push edx
mov edx, dword [esp + 0x138]
lea eax, [esp + 0x14]
push esi
push eax
mov eax, dword [edx + 0x38]
lea ecx, [ebp - 0x5b]
call fcn.004a7490
add esp, 0xc
cmp dword [esi], 0
mov ebp, eax
jne 0x4ae064
mov edi, ebp
neg edi
cmp edi, 5
jne 0x4aabbc
lea ebp, [edi + 3]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x60]
mov ecx, 0x5c
cmp word [edi + 2], cx
jne 0x4aab59
mov edx, 0x45
lea esp, [esp]
cmp word [edi + 4], dx
jne 0x4aab55
add edi, 4
xor eax, eax
mov dword [esp + 0x10], edi
cmp word [edi + 2], cx
je 0x4aab40
mov dword [esp + 0x60], eax
mov dword [esp + 0x4c], edi
cmp ebp, 0xd
je 0x4aab67
cmp ebp, 0xa
jne 0x4aab75
mov ecx, dword [esp + 0x134]
or dword [ecx + 0x50], 0x800
test eax, eax
jne 0x4ab1ff
cmp word [edi + 2], 0x2d
jne 0x4ab1ff
add edi, 4
mov dword [esp + 0x10], edi
cmp word [edi], 0x5c
jne 0x4aaf82
mov eax, 0x45
mov edi, edi
cmp word [edi + 2], ax
jne 0x4aaf4b
add edi, 4
mov dword [esp + 0x10], edi
cmp word [edi], 0x5c
je 0x4aaba0
jmp 0x4aaf82
cmp edi, 0xc
je 0x4adc1a
cmp edi, 0x1a
jne 0x4aabf1
mov edi, dword [esp + 0x10]
cmp word [edi + 2], 0x5c
jne 0x4aabe4
cmp word [edi + 4], 0x45
jne 0x4aabe4
add edi, 4
jmp 0x4ab30e
mov dword [esp + 0x60], 1
jmp 0x4ab30e
cmp edi, 0x19
je 0x4ab30a
test ebp, ebp
jns 0x4aab24
mov eax, dword [esp + 0x134]
mov esi, dword [eax + 8]
mov ecx, 1
add dword [esp + 0x1c], ecx
mov edx, 2
add dword [esp + 0x28], edx
lea eax, [edi - 6]
cmp eax, 0x1c
ja case.0x4aac31.12
movzx eax, byte [eax + 0x4ae168]
jmp dword [eax*4 + 0x4ae134]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x68], eax
lea eax, [ebp*4 + 0x74]
mov esi, 0x4e4178
sub esi, eax
mov edi, dword [esi]
sub edi, edx
sub dword [esp + 0x1c], ecx
jmp 0x4ab30e
xor eax, eax
lea ecx, [ecx]
mov dl, byte [esi + eax + 0x40]
or byte [esp + eax + 0x78], dl
add eax, ecx
cmp eax, 0x20
jl 0x4aac60
jmp 0x4ab30a
mov dword [esp + 0x2c], ecx
xor eax, eax
lea ebx, [ebx]
mov dl, byte [esi + eax + 0x40]
not dl
or byte [esp + eax + 0x78], dl
add eax, ecx
cmp eax, 0x20
jl 0x4aac80
jmp 0x4ab30a
xor eax, eax
jmp 0x4aaca0
mov dl, byte [esi + eax + 0xa0]
or byte [esp + eax + 0x78], dl
add eax, ecx
cmp eax, 0x20
jl 0x4aaca0
jmp 0x4ab30a
mov dword [esp + 0x2c], ecx
xor eax, eax
lea ecx, [ecx]
mov dl, byte [esi + eax + 0xa0]
not dl
or byte [esp + eax + 0x78], dl
add eax, ecx
cmp eax, 0x20
jl 0x4aacc0
jmp 0x4ab30a
mov al, byte [esi]
mov dl, byte [esi + 1]
or byte [esp + 0x78], al
and dl, 0xf7
or byte [esp + 0x79], dl
mov eax, 2
mov edi, edi
mov dl, byte [esi + eax]
or byte [esp + eax + 0x78], dl
add eax, ecx
cmp eax, 0x20
jl 0x4aacf0
jmp 0x4ab30a
lea eax, [esp + 0x78]
xor edi, edi
mov dword [esp + 0x2c], ecx
sub esi, eax
nop
lea eax, [esp + edi + 0x78]
mov dl, byte [eax + esi]
not dl
or byte [eax], dl
add edi, ecx
cmp edi, 0x20
jl 0x4aad10
or byte [esp + 0x79], 8
jmp 0x4ab30a
mov eax, ecx
mov word [ebx], ax
add ebx, edx
or byte [esp + 0x7c], cl
or byte [esp + 0x8c], cl
mov eax, 0x1680
mov word [ebx], ax
add ebx, edx
mov eax, ecx
mov word [ebx], ax
add ebx, edx
or byte [esp + 0x79], dl
mov eax, 0x180e
mov word [ebx], ax
add ebx, edx
mov eax, edx
mov word [ebx], ax
add ebx, edx
mov eax, 0x2000
mov word [ebx], ax
add ebx, edx
mov eax, 0x200a
mov word [ebx], ax
add ebx, edx
mov eax, ecx
mov word [ebx], ax
add ebx, edx
mov eax, 0x202f
mov word [ebx], ax
add ebx, edx
mov eax, ecx
mov word [ebx], ax
add ebx, edx
mov eax, 0x205f
mov word [ebx], ax
add ebx, edx
mov word [ebx], cx
mov dword [esp + 0x20], ecx
add ebx, edx
mov ecx, 0x3000
mov word [ebx], cx
add ebx, edx
jmp 0x4ab30a
xor eax, eax
mov ecx, eax
dec ecx
mov edx, 0xff
je 0x4aadcf
sub ecx, 3
je 0x4aadc8
sub ecx, 0x10
jne 0x4aadd4
mov edx, 0xfe
jmp 0x4aadd4
mov edx, 0xfd
or byte [esp + eax + 0x78], dl
inc eax
cmp eax, 0x20
jl 0x4aadb4
mov dword [ebx], 0x1000002
mov dword [ebx + 4], 0x2167f
mov dword [ebx + 8], 0x180d1681
mov dword [ebx + 0xc], 0x180f0002
mov dword [ebx + 0x10], 0x21fff
mov dword [ebx + 0x14], 0x202e200b
mov dword [ebx + 0x18], 0x20300002
mov dword [ebx + 0x1c], 0x2205e
mov dword [ebx + 0x20], 0x2fff2060
mov dword [ebx + 0x24], 0x30010002
mov dword [ebx + 0x28], 0xdfffdbff
mov dword [esp + 0x20], 1
add ebx, 0x2c
jmp 0x4ab30a
or byte [esp + 0x79], 0x3c
or byte [esp + 0x88], 0x20
mov eax, edx
mov word [ebx], ax
add ebx, edx
mov dword [esp + 0x20], ecx
mov ecx, 0x2028
mov word [ebx], cx
add ebx, edx
mov eax, 0x2029
mov word [ebx], ax
add ebx, edx
jmp 0x4ab30a
xor eax, eax
lea ecx, [ecx]
mov ecx, eax
dec ecx
mov edx, 0xff
je 0x4aae86
sub ecx, 0xf
jne 0x4aae8b
mov edx, 0xdf
jmp 0x4aae8b
mov edx, 0xc3
or byte [esp + eax + 0x78], dl
inc eax
cmp eax, 0x20
jl 0x4aae70
mov dword [ebx], 0x1000002
mov dword [ebx + 4], 0x22027
mov dword [ebx + 8], 0xdbff202a
mov ecx, 0xdfff
mov word [ebx + 0xc], cx
mov dword [esp + 0x20], 1
add ebx, 0xe
jmp 0x4ab30a
mov edx, dword [esp + 0x120]
push edx
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0xe8]
call fcn.004a7b40
add esp, 0xc
test eax, eax
js 0x4ae064
xor edx, edx
cmp edi, 0x10
sete dl
mov esi, 1
mov dword [esp + 0x20], esi
sub edx, dword [esp + 0xdc]
neg edx
sbb edx, edx
add edx, 4
mov word [ebx], dx
mov word [ebx + 2], ax
mov ax, word [esp + 0xcc]
mov word [ebx + 4], ax
add ebx, 6
sub dword [esp + 0x1c], esi
jmp 0x4ab30a
test byte [esp + 0x34], 0x40
mov edi, dword [esp + 0x10]
jne 0x4adc27
sub dword [esp + 0x1c], ecx
sub dword [esp + 0x28], edx
movzx ebp, word [edi]
jmp 0x4aab28
cmp word [edi], 0x5c
jne 0x4aaf82
cmp word [edi + 2], 0x51
jne 0x4aaf82
add edi, 4
mov dword [esp + 0x10], edi
cmp word [edi], 0x5c
jne 0x4aaf7a
cmp word [edi + 2], ax
jne 0x4aaf7a
add edi, 4
mov dword [esp + 0x10], edi
cmp word [edi], 0x5c
je 0x4aaf51
jmp 0x4aaf82
mov dword [esp + 0x60], 1
movzx eax, word [edi]
test ax, ax
je 0x4ab1f7
mov ecx, dword [esp + 0x60]
test ecx, ecx
jne 0x4aaf9f
cmp eax, 0x5d
je 0x4ab1f7
mov esi, eax
mov edx, esi
and edx, 0xfc00
mov dword [esp + 0x40], esi
cmp edx, 0xd800
jne 0x4aafda
movzx eax, word [edi + 2]
and esi, 0x3ff
shl esi, 0xa
and eax, 0x3ff
or esi, eax
add esi, 0x10000
add edi, 2
mov dword [esp + 0x40], esi
mov dword [esp + 0x10], edi
test ecx, ecx
jne 0x4ab035
cmp esi, 0x5c
jne 0x4ab035
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x120]
mov eax, dword [esp + 0x134]
mov eax, dword [eax + 0x38]
push ecx
lea edx, [esp + 0x14]
push esi
push edx
mov ecx, 1
call fcn.004a7490
add esp, 0xc
cmp dword [esi], 0
mov dword [esp + 0x40], eax
jne 0x4ae064
mov esi, eax
test esi, esi
jns 0x4ab031
cmp esi, 0xfffffffb
jne 0x4ab1f7
mov esi, 8
mov dword [esp + 0x40], esi
mov edi, dword [esp + 0x10]
cmp esi, ebp
jl 0x4adc4a
je 0x4ab1ff
cmp esi, 0xd
je 0x4ab04d
cmp esi, 0xa
jne 0x4ab05b
mov eax, dword [esp + 0x134]
or dword [eax + 0x50], 0x800
mov dword [esp + 0x28], 2
cmp esi, 0xff
jg 0x4ab085
mov eax, dword [esp + 0x34]
and eax, 1
mov dword [esp + 0x58], eax
je 0x4ab188
cmp esi, 0x7f
jle 0x4ab188
test byte [esp + 0x34], 1
mov dword [esp + 0x20], 1
je 0x4ab15f
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0xac]
push ecx
lea eax, [esp + 0xbc]
push eax
lea esi, [esp + 0x54]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x44], edx
call fcn.004a94b0
add esp, 8
test eax, eax
je 0x4ab15f
mov edi, dword [esp + 0x40]
lea esp, [esp]
mov eax, dword [esp + 0xb8]
mov esi, dword [esp + 0xac]
cmp eax, ebp
jb 0x4ab0e8
cmp esi, edi
jbe 0x4ab133
jmp 0x4ab0f7
lea ecx, [ebp - 1]
cmp esi, ecx
jb 0x4ab0f3
mov ebp, eax
jmp 0x4ab133
cmp esi, edi
jbe 0x4ab102
lea edx, [edi + 1]
cmp eax, edx
ja 0x4ab102
mov edi, esi
jmp 0x4ab133
cmp eax, esi
jne 0x4ab113
mov eax, 1
mov word [ebx], ax
add ebx, 2
jmp 0x4ab127
mov ecx, 2
mov word [ebx], cx
lea ecx, [ebx + 2]
call fcn.004b8f60
lea ebx, [ebx + eax*2 + 2]
mov ecx, ebx
mov eax, esi
call fcn.004b8f60
lea ebx, [ebx + eax*2]
lea edx, [esp + 0xac]
push edx
mov edx, dword [esp + 0x40]
lea eax, [esp + 0xbc]
push eax
lea esi, [esp + 0x54]
call fcn.004a94b0
add esp, 8
test eax, eax
jne 0x4ab0d0
mov dword [esp + 0x40], edi
mov ecx, 2
mov word [ebx], cx
lea ecx, [ebx + 2]
mov eax, ebp
call fcn.004b8f60
lea ebx, [ebx + eax*2 + 2]
mov eax, dword [esp + 0x40]
mov ecx, ebx
call fcn.004b8f60
lea ebx, [ebx + eax*2]
jmp 0x4ab30a
cmp dword [esp + 0x138], 0
mov dword [esp + 0x1c], 1
jne 0x4ab30e
cmp ebp, esi
jg 0x4ab30e
mov eax, ebp
cdq
and edx, 7
add eax, edx
mov ecx, ebp
and ecx, 7
mov dl, 1
shl dl, cl
sar eax, 3
lea eax, [esp + eax + 0x78]
or byte [eax], dl
cmp dword [esp + 0x58], 0
je 0x4ab1ed
mov eax, dword [esp + 0x134]
mov ecx, dword [eax + 4]
movzx ecx, byte [ecx + ebp]
mov eax, ecx
cdq
and edx, 7
add eax, edx
and ecx, 7
mov dl, 1
sar eax, 3
shl dl, cl
lea eax, [esp + eax + 0x78]
or byte [eax], dl
inc ebp
cmp ebp, esi
jle 0x4ab1a6
jmp 0x4ab30e
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x28]
cmp eax, 2
jge 0x4ab20d
inc eax
mov dword [esp + 0x28], eax
mov ecx, 1
cmp eax, ecx
jne 0x4ab235
cmp word [edi + 2], 0x5d
jne 0x4ab235
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4ab407
cmp ebp, 0x10000
jl 0x4ab407
cmp ebp, 0xff
jg 0x4ab29f
mov eax, dword [esp + 0x34]
and eax, ecx
mov dword [esp + 0x58], eax
je 0x4ab24e
cmp ebp, 0x7f
jg 0x4ab29f
mov eax, ebp
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [esp + 0x1c], ecx
lea esi, [esp + eax + 0x78]
mov ecx, ebp
and ecx, 7
mov al, 1
shl al, cl
or byte [esi], al
cmp dword [esp + 0x58], 0
je 0x4ab30e
mov ecx, dword [esp + 0x134]
mov edx, dword [ecx + 4]
movzx ecx, byte [edx + ebp]
mov eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
lea esi, [esp + eax + 0x78]
and ecx, 7
mov al, 1
shl al, cl
or byte [esi], al
jmp 0x4ab30e
mov word [ebx], cx
mov dword [esp + 0x20], ecx
lea ecx, [ebx + 2]
mov eax, ebp
call fcn.004b8f60
test byte [esp + 0x34], 1
lea ebx, [ebx + eax*2 + 2]
je 0x4ab30a
mov eax, ebp
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
movzx ecx, byte [eax + 0x4c1ce8]
mov edx, ebp
shl ecx, 7
and edx, 0x8000007f
jns 0x4ab2df
dec edx
or edx, 0xffffff80
inc edx
add ecx, edx
movzx eax, word [ecx*2 + 0x4c3ee8]
mov eax, dword [eax*8 + 0x4c0c0c]
add eax, ebp
cmp eax, ebp
je 0x4ab30a
mov ecx, 1
mov word [ebx], cx
lea ecx, [ebx + 2]
call fcn.004b8f60
lea ebx, [ebx + eax*2 + 2]
mov edi, dword [esp + 0x10]
add edi, 2
mov dword [esp + 0x10], edi
movzx ebp, word [edi]
test ebp, ebp
jne 0x4ab33e
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4adc6d
lea edi, [eax + 2]
mov dword [esp + 0x68], ebp
mov dword [esp + 0x10], edi
movzx ebp, word [edi]
test ebp, ebp
je 0x4adc6d
cmp ebp, 0x5d
jne 0x4aa8b0
cmp dword [esp + 0x60], 0
jne 0x4aa8b0
mov eax, dword [esp + 0x30]
cmp eax, 0xfffffffe
jne 0x4ab362
or eax, 0xffffffff
mov dword [esp + 0x30], eax
cmp dword [esp + 0x20], 0
mov edx, dword [esp + 0x48]
mov dword [esp + 0x40], eax
mov dword [esp + 0x58], edx
je 0x4ab486
cmp dword [esp + 0x2c], 0
je 0x4ab38e
test dword [esp + 0x34], 0x20000000
je 0x4ab486
mov ecx, dword [esp + 0x14]
xor eax, eax
mov word [ebx], ax
mov edx, 0x6c
add ecx, 4
mov word [ecx - 4], dx
add ebx, 2
cmp dword [esp + 0x24], eax
mov dword [esp + 0x14], ecx
setne al
cmp dword [esp + 0x1c], 0
movzx eax, ax
mov word [ecx], ax
jle 0x4ab3f0
mov edi, ecx
or eax, 2
mov word [edi], ax
add edi, 2
mov ecx, ebx
sub ecx, edi
and ecx, 0xfffffffe
push ecx
lea edx, [edi + 0x20]
push edi
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
mov ecx, 8
lea esi, [esp + 0x84]
add esp, 0xc
rep movsd dword es:[edi], dword [esi]
add ebx, 0x20
mov eax, dword [esp + 0x18]
mov ecx, ebx
sub ecx, eax
sar ecx, 1
mov dword [esp + 0x14], ebx
mov word [eax + 2], cx
jmp 0x4ada8f
mov edx, dword [esp + 0x48]
add edi, 2
mov dword [esp + 0x10], edi
mov dword [esp + 0x58], edx
test eax, eax
je 0x4ab454
mov eax, dword [esp + 0x30]
cmp eax, 0xfffffffe
jne 0x4ab42a
or eax, 0xffffffff
mov dword [esp + 0x30], eax
test byte [esp + 0x34], cl
mov ecx, 0
setne cl
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x14]
add ecx, 0x1f
mov word [eax], cx
mov word [eax + 2], bp
add eax, 4
mov dword [esp + 0x14], eax
jmp 0x4ada8f
cmp ebp, 0xffff
jle 0x4ab477
lea ecx, [esp + 0xbc]
mov eax, ebp
call fcn.004b8f60
mov bp, word [esp + 0xbc]
jmp 0x4aa6f5
mov word [esp + 0xbc], bp
mov eax, ecx
jmp 0x4aa6f5
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
xor edx, edx
cmp eax, dword [esp + 0x2c]
setne dl
add ecx, 2
mov dword [esp + 0x14], ecx
add edx, 0x6a
cmp dword [esp + 0x138], 0
mov word [ecx - 2], dx
jne 0x4ab4d4
test eax, eax
je 0x4ab4c5
xor eax, eax
mov cl, byte [esp + eax + 0x78]
not cl
mov byte [esp + eax + 0x78], cl
inc eax
cmp eax, 0x20
jl 0x4ab4b5
mov edi, dword [esp + 0x14]
mov ecx, 8
lea esi, [esp + 0x78]
rep movsd dword es:[edi], dword [esi]
add dword [esp + 0x14], 0x20
jmp 0x4ada8f
cmp dword [esp + 0x24], 0
je case.0x4aa52a.1
mov esi, dword [esp + 0x120]
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x58]
push eax
lea eax, [edi + 2]
mov edi, esi
call fcn.004a7c70
add esp, 8
cmp dword [esi], 0
mov edi, eax
mov dword [esp + 0x10], edi
jne 0x4ae068
mov esi, dword [esp + 0x44]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
jmp 0x4ab547
or esi, 0xffffffff
jmp 0x4ab53b
mov dword [esp + 0x54], 1
or esi, 0xffffffff
jmp 0x4ab543
mov esi, 1
mov dword [esp + 0x54], 0
mov dword [esp + 0x44], esi
test ebp, ebp
je 0x4adc90
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x4ab567
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x48], edx
sub eax, esi
neg eax
sbb eax, eax
and eax, 0x20000000
mov ecx, ebp
mov dword [esp + 0xe0], eax
mov dword [esp + 0x38], ecx
movzx eax, word [edi + 2]
mov dword [esp + 0x28], 0
cmp eax, 0x2b
jne 0x4ab5a3
xor edx, edx
add edi, 2
mov dword [esp + 0x28], 1
mov dword [esp + 0x10], edi
jmp 0x4ab5bf
cmp eax, 0x3f
jne 0x4ab5b8
mov edx, dword [esp + 0xb4]
add edi, 2
mov dword [esp + 0x10], edi
jmp 0x4ab5bf
mov edx, dword [esp + 0xb0]
cmp word [ebp], 0x6f
mov dword [esp + 0x1c], edx
jne 0x4ab63a
push 4
lea eax, [ebp + 4]
push ebp
push eax
call dword [sym.imp.MSVCR100.dll_memmove]
add ebx, 8
add esp, 0xc
cmp dword [esp + 0x138], 0
mov dword [ebp], 0x4007b
mov dword [ebp + 8], 0x40072
mov dword [esp + 0x14], ebx
mov dword [esp + 0x6c], 6
jne 0x4ab62e
mov edx, dword [esp + 0x134]
mov ecx, dword [edx + 0x10]
mov eax, dword [edx + 0x24]
add ecx, 2
cmp eax, ecx
jb 0x4ab62e
movzx ecx, word [eax - 2]
mov edi, ebp
sub edi, dword [edx + 0x14]
add edi, 2
sar edi, 1
cmp ecx, edi
jne 0x4ab62e
add ecx, 2
mov word [eax - 2], cx
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x10]
movzx eax, word [ebp]
cmp eax, 0x1d
je 0x4abdb9
cmp eax, 0x1e
je 0x4abdb9
cmp eax, 0x1f
je 0x4abd9d
cmp eax, 0x20
je 0x4abd9d
cmp eax, 0x17
jae 0x4ab692
mov dword [esp + 0x3c], 0x34
mov edx, eax
cmp dword [esp + 0x28], 0
mov dword [esp + 0x20], edx
jne 0x4abe7a
test esi, esi
jns 0x4abe7a
mov eax, dword [esp + 0x34]
push eax
jmp 0x4abe4e
cmp eax, 0x6a
je 0x4abd27
cmp eax, 0x6b
je 0x4abd27
cmp eax, 0x6c
je 0x4abd27
cmp eax, 0x6d
je 0x4abd27
cmp eax, 0x6e
je 0x4abd27
cmp eax, 0x77
jb 0x4abcf6
mov edx, 0x81
cmp ax, dx
ja 0x4abcf6
xor edx, edx
mov esi, ebx
sub esi, ebp
mov dword [esp + 0x20], edx
mov dword [esp + 0x4c], edx
sar esi, 1
mov edx, 0x81
mov dword [esp + 0x2c], esi
cmp ax, dx
jne 0x4ab707
mov edx, 0x8b
cmp word [ebp + 4], dx
je 0x4ac274
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x54]
cmp eax, 0x7b
jae 0x4ab734
test edx, edx
jg 0x4ac274
mov eax, dword [esp + 0x44]
test eax, eax
js 0x4ab725
cmp eax, 1
jle 0x4ab72e
mov eax, 1
mov dword [esp + 0x44], eax
mov ebp, dword [esp + 0x18]
jmp 0x4ab738
mov eax, dword [esp + 0x44]
test edx, edx
jne 0x4ab81e
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x134]
push ecx
push edx
cmp eax, 1
jg 0x4ab7b8
xor eax, eax
push 1
push ebp
mov word [ebx], ax
call fcn.004a9310
lea eax, [esi + esi]
push eax
lea edi, [ebp + 2]
push ebp
push edi
call dword [sym.imp.MSVCR100.dll_memmove]
add ebx, 2
add esp, 0x1c
cmp dword [esp + 0x44], 0
mov dword [esp + 0x14], ebx
jne 0x4ab78d
mov ecx, 0x9b
mov word [ebp], cx
jmp 0x4ac270
mov edx, dword [esp + 0x1c]
add edx, 0x8c
dec dword [esp + 0x44]
mov word [ebp], dx
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x10]
mov dword [esp + 0x4c], ebp
jmp 0x4ab9a4
xor eax, eax
push 3
push ebp
mov word [ebx], ax
call fcn.004a9310
lea eax, [esi + esi]
push eax
lea ecx, [ebp + 6]
push ebp
push ecx
call dword [sym.imp.MSVCR100.dll_memmove]
mov edx, dword [esp + 0x38]
add edx, 0x8c
mov word [ebp], dx
mov eax, 0x7d
mov word [ebp + 2], ax
add ebp, 4
xor ecx, ecx
mov word [ebp], cx
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x54]
add ebx, 6
mov dword [esp + 0x3c], ebp
add ebp, 2
add esp, 0x1c
dec dword [esp + 0x44]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
jmp 0x4ab9a4
cmp edx, 1
jle 0x4ab994
mov esi, dword [esp + 0x138]
test esi, esi
je 0x4ab875
mov eax, dword [esp + 0x54]
dec eax
mov dword [esp + 0x5c], eax
imul eax, dword [esp + 0x6c]
fild dword [esp + 0x5c]
fimul dword [esp + 0x6c]
mov edx, eax
fcomp qword [0x4de890]
fnstsw ax
test ah, 0x41
je 0x4adcb3
mov eax, dword [esi]
mov ebp, 0x7fffffeb
sub ebp, eax
cmp ebp, edx
jl 0x4adcb3
add edx, eax
mov dword [esi], edx
jmp 0x4ab994
cmp dword [esp + 0x9c], 0
je 0x4ab88e
cmp dword [esp + 0x48], 0
jge 0x4ab88e
mov edx, dword [esp + 0x30]
mov dword [esp + 0x48], edx
mov eax, 1
mov dword [esp + 0x24], eax
cmp dword [esp + 0x54], eax
jle 0x4ab994
mov eax, dword [esp + 0x2c]
lea ecx, [eax + eax]
mov dword [esp + 0x3c], ecx
lea esp, [esp]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x134]
mov esi, dword [edi + 0x24]
push edx
push eax
push ebx
call sub.MSVCR100.dll_memcpy
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x10]
mov edx, esi
sub edx, dword [esp + 0x5c]
add esp, 0xc
sar edx, 1
sub eax, edx
lea edx, [ecx + eax*2 - 0xc8]
cmp dword [edi + 0x24], edx
jbe 0x4ab943
mov eax, dword [esp + 0x50]
mov edx, edi
nop
sub esi, ecx
sub eax, ecx
sar esi, 1
sar eax, 1
mov ebx, esi
mov esi, edx
mov edi, eax
call fcn.004a7370
mov ecx, dword [esp + 0x120]
mov dword [ecx], eax
test eax, eax
jne 0x4ae064
mov edx, dword [esp + 0x134]
mov ecx, dword [edx + 0x10]
lea eax, [ecx + edi*2]
lea esi, [ecx + ebx*2]
mov ebx, dword [edx + 0x34]
mov edi, esi
sub edi, eax
sar edi, 1
sub ebx, edi
lea edi, [ecx + ebx*2 - 0xc8]
mov dword [esp + 0x50], eax
cmp dword [edx + 0x24], edi
ja 0x4ab8f0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x2c]
cmp eax, esi
jae 0x4ab96e
mov ecx, dword [esp + 0x134]
mov di, word [eax]
mov ebp, dword [ecx + 0x24]
add di, dx
mov word [ebp], di
add dword [ecx + 0x24], 2
add eax, 2
cmp eax, esi
jb 0x4ab956
mov eax, dword [esp + 0x24]
inc eax
lea ebx, [ebx + edx*2]
mov dword [esp + 0x50], esi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x54]
jl 0x4ab8b0
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x44]
test edx, edx
jle 0x4ab9a6
sub edx, dword [esp + 0x54]
mov dword [esp + 0x44], edx
test edx, edx
js 0x4abbbb
mov esi, dword [esp + 0x138]
test esi, esi
je 0x4ab9ff
test edx, edx
jle 0x4ab9ff
mov eax, dword [esp + 0x6c]
add eax, 5
mov dword [esp + 0x5c], eax
imul edx, eax
fild dword [esp + 0x5c]
fimul dword [esp + 0x44]
add edx, 0xfffffffc
fcomp qword [0x4de890]
fnstsw ax
test ah, 0x41
je 0x4adad6
mov eax, dword [esi]
mov ebp, 0x7fffffeb
sub ebp, eax
cmp ebp, edx
jl 0x4adad6
add edx, eax
mov dword [esi], edx
jmp 0x4abb73
lea ebp, [edx - 1]
mov dword [esp + 0x24], ebp
test ebp, ebp
js 0x4abb73
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
add edx, 0x8c
lea ecx, [eax + eax]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x3c], ecx
jmp 0x4aba30
mov edi, dword [esp + 0x134]
mov dx, word [esp + 0x5c]
mov esi, dword [edi + 0x24]
mov word [ebx], dx
add ebx, 2
mov dword [esp + 0x14], ebx
test ebp, ebp
je 0x4aba78
mov ecx, dword [esp + 0x20]
mov eax, 0x7d
mov word [ebx], ax
add ebx, 2
test ecx, ecx
jne 0x4aba64
xor eax, eax
jmp 0x4aba6a
mov eax, ebx
sub eax, ecx
sar eax, 1
mov dword [esp + 0x20], ebx
mov word [ebx], ax
add ebx, 2
mov dword [esp + 0x14], ebx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push ebx
call sub.MSVCR100.dll_memcpy
mov edx, dword [edi + 0x34]
mov ecx, dword [edi + 0x10]
mov eax, esi
sub eax, dword [esp + 0x5c]
add esp, 0xc
sar eax, 1
sub edx, eax
lea eax, [ecx + edx*2 - 0xc8]
cmp dword [edi + 0x24], eax
jbe 0x4abb03
mov eax, dword [esp + 0x50]
mov edx, edi
lea ecx, [ecx]
sub esi, ecx
sub eax, ecx
sar esi, 1
sar eax, 1
mov ebx, esi
mov esi, edx
mov edi, eax
call fcn.004a7370
mov ecx, dword [esp + 0x120]
mov dword [ecx], eax
test eax, eax
jne 0x4ae064
mov edx, dword [esp + 0x134]
mov ecx, dword [edx + 0x10]
lea eax, [ecx + edi*2]
lea esi, [ecx + ebx*2]
mov ebx, dword [edx + 0x34]
mov edi, esi
sub edi, eax
sar edi, 1
sub ebx, edi
lea edi, [ecx + ebx*2 - 0xc8]
mov dword [esp + 0x50], eax
cmp dword [edx + 0x24], edi
ja 0x4abab0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x50]
cmp eax, esi
jae 0x4abb51
xor edx, edx
test ebp, ebp
setne dl
lea edx, [edx + edx + 1]
movzx ecx, dx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x134]
jmp 0x4abb30
mov edi, dword [esp + 0x4c]
mov ebp, dword [ecx + 0x24]
add edi, edx
add di, word [eax]
add eax, 2
mov word [ebp], di
add dword [ecx + 0x24], 2
cmp eax, esi
jb 0x4abb30
mov ebp, dword [esp + 0x24]
jmp 0x4abb55
mov edx, dword [esp + 0x2c]
lea ebx, [ebx + edx*2]
dec ebp
mov dword [esp + 0x50], esi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x24], ebp
jns 0x4aba30
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x20]
test esi, esi
je 0x4ac07f
nop
mov eax, ebx
sub eax, esi
sar eax, 1
inc eax
lea edx, [eax + eax]
mov ecx, ebx
sub ecx, edx
movzx edx, word [ecx + 2]
test edx, edx
jne 0x4abb9a
xor esi, esi
jmp 0x4abb9f
neg edx
lea esi, [esi + edx*2]
mov edx, 0x72
mov word [ebx], dx
mov word [ebx + 2], ax
add ebx, 4
mov word [ecx + 2], ax
test esi, esi
jne 0x4abb80
jmp 0x4ac073
movzx eax, word [ebx - 2]
lea ebp, [ebx - 4]
add eax, eax
mov esi, ebp
sub esi, eax
movzx eax, word [esi]
cmp eax, 0x7b
je 0x4abbd5
cmp eax, 0x7c
jne 0x4abbe6
cmp dword [esp + 0x28], 0
je 0x4abbe6
mov ecx, 0x7d
mov word [esi], cx
jmp 0x4abbf8
cmp eax, 0x7b
je 0x4abce6
cmp eax, 0x7c
je 0x4abce6
cmp dword [esp + 0x138], 0
jne 0x4abc30
mov edi, esi
mov edx, dword [esp + 0x134]
push edx
push 1
push ebp
push edi
call fcn.004a86b0
add esp, 0x10
test eax, eax
jne 0x4abc2c
movzx eax, word [edi + 2]
cmp word [edi + eax*2], 0x71
lea edi, [edi + eax*2]
je 0x4abc04
jmp 0x4abc30
add word [esi], 5
cmp dword [esp + 0x28], 0
je 0x4abcd6
movzx eax, word [esi]
mov ecx, 0x81
cmp ax, cx
je 0x4abc61
mov edx, 0x86
cmp ax, dx
je 0x4abc61
inc eax
mov word [esi], ax
mov eax, 0x75
mov word [ebp], ax
jmp 0x4abcb6
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x134]
push edx
push eax
mov edi, ebx
xor ecx, ecx
push 2
sub edi, esi
push esi
sar edi, 1
mov word [ebx], cx
call fcn.004a9310
lea ecx, [edi + edi]
push ecx
lea edx, [esi + 4]
push esi
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
add edi, 2
mov eax, 0x7e
mov word [esi], ax
mov ecx, 0x75
mov word [ebx + 4], cx
mov word [ebx + 6], di
add esp, 0x1c
add ebx, 8
mov dword [esp + 0x14], ebx
mov word [esi + 2], di
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4abcc6
mov edx, 0x8e
mov word [eax], dx
cmp dword [esp + 0x54], 2
jl 0x4ac270
jmp 0x4ac077
mov eax, dword [esp + 0x1c]
add eax, 0x73
mov word [ebp], ax
jmp 0x4ac270
mov ecx, dword [esp + 0x1c]
add ecx, 0x73
mov word [ebp], cx
jmp 0x4ac077
mov edx, 0x97
cmp ax, dx
je 0x4ac274
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0xb
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
test esi, esi
jne 0x4abd36
mov ebx, ebp
mov dword [esp + 0x14], ebx
jmp 0x4ac274
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x4abd51
cmp esi, 0xffffffff
jne 0x4abd69
add edx, 0x62
mov word [ebx], dx
add ebx, 2
jmp 0x4ac073
cmp eax, 1
jne 0x4abd7c
cmp esi, 0xffffffff
jne 0x4abd7c
add edx, 0x64
mov word [ebx], dx
add ebx, 2
jmp 0x4ac073
cmp esi, 1
jne 0x4abd7c
add edx, 0x66
mov word [ebx], dx
add ebx, 2
jmp 0x4ac073
add edx, 0x68
mov word [ebx], dx
mov word [ebx + 2], ax
cmp esi, 0xffffffff
jne 0x4abd91
xor esi, esi
mov dword [esp + 0x44], esi
mov word [ebx + 4], si
add ebx, 6
jmp 0x4ac073
movzx edx, word [ebp + 2]
xor ecx, ecx
cmp eax, 0x1f
setne cl
dec ecx
and ecx, 0xfffffff3
add ecx, 0x27
mov dword [esp + 0x3c], ecx
jmp 0x4ab671
xor ecx, ecx
cmp eax, 0x1d
sete cl
lea eax, [ebx - 2]
dec ecx
and ecx, 0xd
mov dword [esp + 0x3c], ecx
movzx ecx, word [eax]
mov edx, ecx
and edx, 0xfc00
cmp edx, 0xdc00
jne 0x4abe1f
mov cx, word [eax]
mov edx, 0xfc00
and cx, dx
mov edx, 0xdc00
cmp cx, dx
jne 0x4abdf7
sub eax, 2
mov ecx, ebx
sub ecx, eax
sar ecx, 1
mov dword [esp + 0x20], ecx
add ecx, ecx
push ecx
push eax
lea edx, [esp + 0x10c]
push edx
call sub.MSVCR100.dll_memcpy
add esp, 0xc
or dword [esp + 0x20], 0x10000000
jmp 0x4abe3e
cmp dword [esp + 0x54], 1
mov dword [esp + 0x20], ecx
jle 0x4abe3e
mov eax, dword [esp + 0x134]
mov eax, dword [eax + 0x54]
or eax, ecx
or eax, dword [esp + 0x70]
mov dword [esp + 0x48], eax
cmp dword [esp + 0x28], 0
jne 0x4abe7a
test esi, esi
jns 0x4abe7a
mov ecx, dword [esp + 0x34]
push ecx
mov eax, dword [esp + 0x138]
add edi, 2
push edi
push ebp
call fcn.004a96f0
add esp, 0xc
test eax, eax
je 0x4abe76
mov dword [esp + 0x28], 1
mov dword [esp + 0x1c], 0
mov edi, dword [esp + 0x10]
movzx eax, word [ebp]
cmp eax, 0x10
je 0x4abe91
cmp eax, 0xf
je 0x4abe91
or edx, 0xffffffff
mov dword [esp + 0x24], edx
jmp 0x4abe9d
movzx eax, word [ebp + 4]
movzx edx, word [ebp + 2]
mov dword [esp + 0x24], eax
mov ecx, ebx
mov ebx, ebp
mov dword [esp + 0x2c], edx
mov dword [esp + 0x14], ebx
test esi, esi
je 0x4ac274
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x54]
add eax, ebx
mov dword [esp + 0x1c], eax
test ebp, ebp
jne 0x4abef5
mov ebx, dword [esp + 0x18]
cmp esi, 0xffffffff
jne 0x4abede
add eax, 0x21
mov word [ebx], ax
add ebx, 2
jmp 0x4ac028
cmp esi, 1
jne 0x4ac01b
add eax, 0x25
mov word [ebx], ax
add ebx, 2
jmp 0x4ac028
cmp ebp, 1
jne 0x4abf35
cmp esi, 0xffffffff
jne 0x4abf11
mov ebx, dword [esp + 0x18]
add eax, 0x23
mov word [ebx], ax
add ebx, 2
jmp 0x4ac028
mov ebx, ecx
mov dword [esp + 0x14], ebx
cmp esi, 1
je 0x4ac274
add eax, 0x27
lea ebx, [ecx + 2]
dec esi
mov word [ecx], ax
mov word [ebx], si
add ebx, 2
jmp 0x4ac028
lea ecx, [ebx + 0x29]
mov ebx, dword [esp + 0x18]
mov word [ebx], cx
mov word [ebx + 2], bp
add ebx, 4
test esi, esi
jns 0x4abfac
mov ecx, dword [esp + 0x20]
test ecx, 0x10000000
je 0x4abf85
mov esi, ecx
and esi, 7
lea edx, [esi + esi]
push edx
lea eax, [esp + 0x108]
push eax
push ebx
call sub.MSVCR100.dll_memcpy
mov eax, dword [esp + 0x28]
lea ebx, [ebx + esi*2]
add eax, 0x21
add esp, 0xc
mov word [ebx], ax
add ebx, 2
jmp 0x4ac028
mov word [ebx], cx
add ebx, 2
test edx, edx
js 0x4abf9e
mov cx, word [esp + 0x24]
mov word [ebx], dx
mov word [ebx + 2], cx
add ebx, 4
add eax, 0x21
mov word [ebx], ax
add ebx, 2
jmp 0x4ac028
cmp esi, ebp
je 0x4ac028
mov eax, dword [esp + 0x20]
test eax, 0x10000000
je 0x4abfde
mov edi, eax
and edi, 7
lea edx, [edi + edi]
push edx
lea eax, [esp + 0x108]
push eax
push ebx
call sub.MSVCR100.dll_memcpy
add esp, 0xc
lea ebx, [ebx + edi*2]
jmp 0x4abfe4
mov word [ebx], ax
add ebx, 2
mov eax, dword [esp + 0x2c]
test eax, eax
js 0x4abffb
mov cx, word [esp + 0x24]
mov word [ebx], ax
mov word [ebx + 2], cx
add ebx, 4
sub esi, dword [esp + 0x54]
mov dword [esp + 0x44], esi
cmp esi, 1
jne 0x4ac017
mov edx, dword [esp + 0x1c]
add edx, 0x25
mov word [ebx], dx
add ebx, 2
jmp 0x4ac028
mov eax, dword [esp + 0x1c]
add eax, 0x27
mov word [ebx], ax
mov word [ebx + 2], si
add ebx, 4
mov eax, dword [esp + 0x20]
test eax, 0x10000000
je 0x4ac052
mov esi, eax
and esi, 7
lea ecx, [esi + esi]
push ecx
lea edx, [esp + 0x108]
push edx
push ebx
call sub.MSVCR100.dll_memcpy
add esp, 0xc
lea ebx, [ebx + esi*2]
jmp 0x4ac058
mov word [ebx], ax
add ebx, 2
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], ebx
test eax, eax
js 0x4ac077
mov word [ebx], ax
mov ax, word [esp + 0x24]
mov word [ebx + 2], ax
add ebx, 4
mov dword [esp + 0x14], ebx
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x28], 0
je 0x4ac274
movzx eax, word [ecx]
cmp eax, 0x5d
jne 0x4ac0b3
movzx eax, word [ecx + 4]
cmp eax, 0x10
je 0x4ac0a8
cmp eax, 0xf
je 0x4ac0a8
xor eax, eax
lea ecx, [ecx + eax*2 + 6]
jmp 0x4ac0e4
mov eax, 2
lea ecx, [ecx + eax*2 + 6]
jmp 0x4ac0e4
cmp eax, 0x29
je 0x4ac0bd
cmp eax, 0x43
jne 0x4ac0e8
movzx eax, byte [eax + 0x4c03c0]
lea ecx, [ecx + eax*2]
mov dword [esp + 0x38], ecx
mov dx, word [ecx - 2]
mov eax, 0xfc00
and dx, ax
mov eax, 0xd800
cmp dx, ax
jne 0x4ac0e8
add ecx, 2
mov dword [esp + 0x38], ecx
mov esi, ebx
sub esi, ecx
sar esi, 1
test esi, esi
jle 0x4ac274
movzx eax, word [ecx]
add eax, 0xffffffdf
cmp eax, 0x3a
ja case.0x4ac10c.34
movzx edx, byte [eax + 0x4ae1dc]
jmp dword [edx*4 + 0x4ae188]
mov eax, 0x2a
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x2b
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x2c
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x2d
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x37
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x38
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x39
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x3a
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x44
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x45
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x46
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x47
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x51
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x52
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x53
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x54
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x5e
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x5f
mov word [ecx], dx
jmp 0x4ac270
mov eax, 0x60
mov word [ecx], ax
jmp 0x4ac270
mov edx, 0x61
mov word [ecx], dx
jmp 0x4ac270
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x134]
push ecx
xor eax, eax
push edx
mov word [ebx], ax
mov eax, dword [esp + 0x40]
push 2
push eax
call fcn.004a9310
mov eax, dword [esp + 0x48]
lea ecx, [esi + esi]
push ecx
push eax
add eax, 4
push eax
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [esp + 0x54]
mov edx, 0x7b
mov word [eax], dx
add esi, 2
mov ecx, 0x72
mov word [ebx + 4], cx
mov word [ebx + 6], si
mov edx, dword [esp + 0x54]
add esp, 0x1c
add ebx, 8
mov dword [esp + 0x14], ebx
mov word [edx + 2], si
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0xe0]
or dword [eax + 0x54], ecx
mov esi, dword [esp + 0xd0]
mov dword [esp + 0x18], 0
mov ebp, dword [esp + 0x18]
add edi, 2
mov edx, eax
xor ecx, ecx
jmp 0x4aa200
mov ecx, dword [edx + 0x24]
mov dword [esp + 0x5c], eax
xor eax, eax
add edi, 2
mov dword [esp + 0x24], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov dword [esp + 0x28], 0x7f
mov dword [esp + 0x50], ecx
cmp eax, 0x2a
jne 0x4ac53f
movzx ecx, word [edi + 2]
lea esi, [edi + 2]
mov dword [esp + 0x1c], esi
cmp ecx, 0x3a
je 0x4ac303
mov esi, 0xff
cmp cx, si
ja 0x4ac53f
mov esi, dword [edx + 0xc]
test byte [ecx + esi], 2
je 0x4ac53f
mov esi, dword [esp + 0x1c]
mov edi, esi
mov dword [esp + 0x10], edi
movzx eax, word [edi]
xor ebp, ebp
mov ecx, 0xff
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x3c], 0x4c0bdc
mov dword [esp + 0x28], ebp
mov dword [esp + 0x18], ebp
cmp ax, cx
ja 0x4ac34d
mov edx, dword [edx + 0xc]
nop
movzx eax, ax
test byte [eax + edx], 2
je 0x4ac34d
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov ecx, 0xff
cmp ax, cx
jbe 0x4ac330
mov eax, edi
sub eax, esi
sar eax, 1
cmp word [edi], 0x3a
mov dword [esp + 0x4c], eax
jne 0x4ac391
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov ecx, edi
mov dword [esp + 0x28], ecx
test ax, ax
je 0x4ac387
cmp ax, 0x29
je 0x4ac387
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
test ax, ax
jne 0x4ac372
mov eax, edi
sub eax, ecx
sar eax, 1
mov dword [esp + 0x2c], eax
cmp word [edi], 0x29
jne 0x4adcd6
mov dword [esp + 0x24], ebp
mov esi, 0x4cfcd0
mov eax, dword [esi]
cmp dword [esp + 0x4c], eax
jne 0x4ac3c1
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x1c]
call fcn.004b8d80
test eax, eax
je 0x4ac401
mov eax, dword [esi]
mov edx, dword [esp + 0x3c]
inc dword [esp + 0x24]
add esi, 0xc
lea eax, [edx + eax + 1]
mov dword [esp + 0x3c], eax
cmp esi, 0x4cfd3c
jl 0x4ac3a4
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x3c
xor eax, eax
pop ebx
add esp, 0x100
ret
mov edx, dword [esp + 0x24]
lea eax, [edx + edx*2]
add eax, eax
mov ecx, dword [eax + eax + 0x4cfcd4]
add eax, eax
cmp ecx, 0x98
jne 0x4ac489
cmp dword [esp + 0x2c], ebp
jne 0x4adcf9
mov ecx, dword [esp + 0x134]
mov eax, dword [ecx + 0x20]
mov dword [ecx + 0x58], 1
test eax, eax
je 0x4ac459
lea ebx, [ebx]
mov esi, 0x9a
mov word [ebx], si
mov si, word [eax + 4]
mov word [ebx + 2], si
mov eax, dword [eax]
add ebx, 4
test eax, eax
jne 0x4ac440
xor eax, eax
cmp dword [ecx + 0x48], eax
setg al
add ebx, 2
mov dword [esp + 0x14], ebx
add eax, 0x98
cmp dword [esp + 0x30], 0xfffffffe
mov word [ebx - 2], ax
jne 0x4ac51a
mov dword [esp + 0x30], 0xffffffff
jmp 0x4ac51a
mov esi, dword [esp + 0x2c]
test esi, esi
jne 0x4ac4c0
test ecx, ecx
js 0x4add1c
movzx eax, cx
mov word [ebx], ax
mov ecx, 0x94
add ebx, 2
mov dword [esp + 0x14], ebx
cmp ax, cx
jne 0x4ac51a
mov eax, dword [esp + 0x134]
or dword [eax + 0x50], 0x1000
jmp 0x4ac51a
cmp dword [eax + 0x4cfcd8], ebp
jl 0x4add3f
movzx eax, word [eax + 0x4cfcd8]
mov edx, 0x95
mov word [ebx], ax
cmp ax, dx
jne 0x4ac4ee
mov eax, dword [esp + 0x134]
or dword [eax + 0x50], 0x1000
mov ecx, dword [esp + 0x28]
lea eax, [esi + esi]
push eax
mov word [ebx + 2], si
push ecx
add ebx, 4
push ebx
call sub.MSVCR100.dll_memcpy
xor edx, edx
lea ebx, [ebx + esi*2]
mov word [ebx], dx
mov edx, dword [esp + 0x30]
add esp, 0xc
add ebx, 2
mov dword [esp + 0x14], ebx
mov edi, dword [esp + 0x10]
cmp edx, 9
jge 0x4ac3de
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
cmp eax, 0x3f
jne 0x4acde6
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
lea ecx, [eax - 0x21]
cmp ecx, 0x5b
ja case.0x4ac565.34
movzx ecx, byte [ecx + 0x4ae254]
jmp dword [ecx*4 + 0x4ae218]
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
test ax, ax
je 0x4ac595
jmp 0x4ac580
cmp ax, 0x29
je 0x4ac5b8
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
test ax, ax
jne 0x4ac580
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x12
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
cmp word [edi], 0
je 0x4ac595
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
mov dword [esp + 0x4c], 1
jmp case.0x4ac565.58
cmp word [edi + 2], 0x3f
mov dword [esp + 0x28], 0x81
jne 0x4ac611
movzx eax, word [edi + 4]
cmp eax, 0x3d
je 0x4ad262
cmp eax, 0x21
je 0x4ad262
cmp eax, 0x3c
je 0x4ad262
mov eax, 0x87
mov word [ebx + 4], ax
mov edi, dword [esp + 0x10]
movzx eax, word [edi + 2]
or esi, 0xffffffff
mov dword [esp + 0x24], 2
mov dword [esp + 0x3c], esi
cmp eax, 0x52
jne 0x4ac657
cmp word [edi + 4], 0x26
lea ecx, [edi + 4]
jne 0x4ac657
mov dword [esp + 0x10], ecx
mov ecx, 0x89
mov word [ebx + 4], cx
mov edi, dword [esp + 0x10]
mov dword [esp + 0x20], esi
jmp 0x4ac69f
cmp eax, 0x3c
jne 0x4ac66d
add edi, 2
mov dword [esp + 0x20], 0x3e
mov dword [esp + 0x10], edi
jmp 0x4ac69f
cmp eax, 0x27
jne 0x4ac67f
add edi, 2
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], edi
jmp 0x4ac69f
mov dword [esp + 0x20], 0
cmp eax, 0x2d
je 0x4ac691
cmp eax, 0x2b
jne 0x4ac69f
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov dword [esp + 0x3c], eax
movzx eax, word [edi + 2]
mov ecx, 0xff
cmp ax, cx
ja 0x4ade0a
mov esi, dword [edx + 0xc]
test byte [eax + esi], 0x10
je 0x4ade0a
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
xor ecx, ecx
mov ebp, 0xff
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], edi
cmp ax, bp
ja 0x4ac71d
lea esp, [esp]
movzx ebp, ax
test byte [esi + ebp], 0x10
je 0x4ac719
test ecx, ecx
js 0x4ac705
cmp ax, 0x30
jb 0x4ac702
cmp ax, 0x39
ja 0x4ac702
lea ecx, [ecx + ecx*4]
lea ecx, [ebp + ecx*2 - 0x30]
jmp 0x4ac705
or ecx, 0xffffffff
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov ebp, 0xff
cmp ax, bp
jbe 0x4ac6e0
mov dword [esp + 0x1c], ecx
mov ebp, edi
sub ebp, dword [esp + 0x18]
sar ebp, 1
cmp dword [esp + 0x20], 0
jle 0x4ac740
movzx eax, word [edi]
add edi, 2
mov dword [esp + 0x10], edi
cmp eax, dword [esp + 0x20]
jne 0x4add62
mov ax, word [edi]
add edi, 2
mov dword [esp + 0x10], edi
cmp ax, 0x29
jne 0x4add62
cmp dword [esp + 0x138], 0
jne 0x4ad262
mov eax, dword [esp + 0x3c]
test eax, eax
jle 0x4ac79e
test ecx, ecx
jle 0x4add88
cmp eax, 0x2d
jne 0x4ac781
mov eax, dword [edx + 0x38]
sub eax, ecx
lea ecx, [eax + 1]
jmp 0x4ac784
add ecx, dword [edx + 0x38]
test ecx, ecx
jle 0x4addab
cmp ecx, dword [edx + 0x3c]
jg 0x4addab
mov word [ebx + 6], cx
jmp 0x4ad262
mov eax, dword [esp + 0x134]
mov edi, dword [eax + 0x28]
xor esi, esi
cmp esi, dword [eax + 0x2c]
jge 0x4ac7f3
nop
mov edx, dword [esp + 0x18]
lea eax, [edi + 2]
mov ecx, ebp
call fcn.004b8d40
test eax, eax
je 0x4ac7d5
mov eax, dword [esp + 0x134]
mov ecx, dword [eax + 0x30]
inc esi
lea edi, [edi + ecx*2]
cmp esi, dword [eax + 0x2c]
jl 0x4ac7b0
mov eax, dword [esp + 0x134]
cmp esi, dword [eax + 0x2c]
jge 0x4ac7f3
mov dx, word [edi]
inc word [ebx + 4]
mov word [ebx + 6], dx
mov edx, eax
jmp 0x4ad262
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x134]
shr edi, 3
and edi, 1
push eax
mov ebx, ebp
call fcn.004a81b0
add esp, 4
test eax, eax
jle 0x4ac82c
mov ecx, dword [esp + 0x14]
inc word [ecx + 4]
mov word [ecx + 6], ax
mov ebx, ecx
mov edx, esi
jmp 0x4ad262
cmp dword [esp + 0x20], 0
jne 0x4addce
mov edi, dword [esp + 0x18]
cmp word [edi], 0x52
jne 0x4ac895
xor eax, eax
lea ecx, [eax + 1]
cmp ebp, ecx
jle 0x4ac876
lea ebx, [ebx]
movzx edx, word [edi + ecx*2]
cmp edx, 0x30
jb 0x4adde0
cmp edx, 0x39
ja 0x4adde0
inc ecx
lea eax, [eax + eax*4]
lea eax, [edx + eax*2 - 0x30]
cmp ecx, ebp
jl 0x4ac850
test eax, eax
jne 0x4ac87b
mov eax, 0xffff
mov ecx, dword [esp + 0x14]
mov edx, 0x89
mov word [ecx + 4], dx
mov word [ecx + 6], ax
mov ebx, ecx
mov edx, esi
jmp 0x4ad262
cmp ebp, 6
jne 0x4ac8e3
mov ecx, edi
mov ebx, ebp
mov edi, str.DEFINE
movzx eax, word [ecx]
movzx edx, byte [edi]
dec ebx
add ecx, 2
inc edi
cmp dx, ax
jne 0x4ac8b9
test ebx, ebx
jne 0x4ac8a3
jmp 0x4ac8c5
sbb eax, eax
neg eax
lea eax, [eax + eax - 1]
test eax, eax
jne 0x4ac8e3
mov ecx, dword [esp + 0x14]
mov eax, 0x8b
mov word [ecx + 4], ax
mov dword [esp + 0x24], 1
mov ebx, ecx
mov edx, esi
jmp 0x4ad262
mov eax, dword [esp + 0x1c]
test eax, eax
jle 0x4addf2
cmp eax, dword [esi + 0x3c]
jg 0x4addf2
mov edx, dword [esp + 0x14]
mov word [edx + 6], ax
mov ebx, edx
mov edx, esi
jmp 0x4ad262
inc dword [edx + 0x48]
mov dword [esp + 0x28], 0x77
jmp 0x4ad25b
add edi, 2
mov dword [esp + 0x10], edi
cmp word [edi], 0x29
jne 0x4ac957
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
mov eax, 0x97
mov word [ebx], ax
mov edi, dword [esp + 0x10]
add ebx, 2
xor ebp, ebp
add edi, 2
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
xor ecx, ecx
jmp 0x4aa200
inc dword [edx + 0x48]
mov dword [esp + 0x28], 0x78
jmp 0x4ad262
movzx esi, word [edi + 2]
mov ecx, esi
cmp ecx, 0x21
je 0x4aca6d
cmp ecx, 0x3d
je 0x4aca5a
mov ebp, 0xff
cmp si, bp
ja 0x4ade30
mov esi, dword [edx + 0xc]
test byte [ecx + esi], 0x10
je 0x4ade30
xor ecx, ecx
cmp ax, 0x3c
setne cl
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov esi, 0xff
dec ecx
and ecx, 0x17
add ecx, 0x27
mov dword [esp + 0x20], ecx
mov ecx, edi
mov dword [esp + 0x18], ecx
cmp ax, si
ja 0x4ac9ed
mov ebp, dword [edx + 0xc]
jmp 0x4ac9d0
movzx eax, ax
test byte [eax + ebp], 0x10
je 0x4ac9ed
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov esi, 0xff
cmp ax, si
jbe 0x4ac9d0
mov eax, edi
sub eax, ecx
sar eax, 1
cmp dword [esp + 0x138], 0
mov dword [esp + 0x3c], eax
je 0x4acbfb
movzx ecx, word [edi]
cmp ecx, dword [esp + 0x20]
jne 0x4adea0
cmp dword [edx + 0x2c], 0x2710
jge 0x4adec3
lea ecx, [eax + 2]
cmp ecx, dword [edx + 0x30]
jle 0x4acda0
mov dword [edx + 0x30], ecx
cmp eax, 0x20
jle 0x4acda0
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x30
xor eax, eax
pop ebx
add esp, 0x100
ret
inc dword [edx + 0x48]
mov dword [esp + 0x28], 0x79
add edi, 4
jmp 0x4ad25e
inc dword [edx + 0x48]
mov dword [esp + 0x28], 0x7a
add edi, 4
jmp 0x4ad25e
mov dword [esp + 0x28], 0x7b
jmp 0x4ad25b
mov ecx, 0x70
mov word [ebx], cx
mov edi, dword [esp + 0x10]
mov esi, edi
add edi, 2
mov dword [esp + 0x74], esi
mov dword [esp + 0x10], edi
movzx eax, word [edi]
xor ebp, ebp
xor ecx, ecx
mov dword [esp + 0x64], ebx
mov dword [esp + 0xa8], 1
cmp eax, 0x30
jb 0x4acae1
cmp ax, 0x39
ja 0x4acae1
movzx eax, ax
add edi, 2
lea ebp, [ebp + ebp*4]
lea ebp, [eax + ebp*2 - 0x30]
mov dword [esp + 0x10], edi
movzx eax, word [edi]
cmp eax, 0x30
jae 0x4acac1
movzx eax, word [edi]
cmp eax, 0x29
je 0x4acb55
test ax, ax
je 0x4ade5a
cmp eax, 0x3a
je 0x4acafb
xor ebp, ebp
mov edi, esi
lea ecx, [edi + 2]
mov dword [esp + 0x74], ecx
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
test ax, ax
je 0x4ade5a
cmp eax, 0x29
jne 0x4acb02
cmp word [edi], 0
je 0x4ade5a
sub edi, ecx
push 0
sar edi, 1
push edi
push ecx
mov ecx, 0x4ea1d0
call fcn.0043b2c0
test eax, eax
je 0x4ade56
cmp byte [eax + 0x51], 0
jne 0x4ade56
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x134]
mov ecx, eax
cmp ebp, 0xff
jg 0x4ade7d
mov esi, dword [esp + 0xd0]
mov word [ebx + 2], bp
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 0x10]
sub ecx, dword [edx + 0x18]
xor edx, edx
sar ecx, 1
inc ecx
mov word [ebx + 8], cx
mov word [ebx + 0xa], dx
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x134]
add ebx, 0xc
xor ebp, ebp
add edi, 2
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
xor ecx, ecx
jmp 0x4aa200
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
cmp eax, 0x3d
je 0x4acbe5
cmp eax, 0x3e
je 0x4acbe5
cmp eax, 0x3c
je case.0x4ac565.39
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x29
xor eax, eax
pop ebx
add esp, 0x100
ret
xor ecx, ecx
cmp eax, 0x3e
sete cl
mov ebp, 0x29
mov dword [esp + 0x24], ecx
jmp 0x4ad594
mov eax, dword [esp + 0x134]
mov esi, dword [eax + 0x28]
mov eax, dword [eax + 0x2c]
xor ecx, ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x1c], eax
cmp eax, ecx
jle 0x4acd1f
mov ecx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x18]
add ecx, ecx
lea edx, [esi + 2]
cmp ecx, 4
jb 0x4acc49
mov eax, dword [ebp]
cmp eax, dword [edx]
jne 0x4acc4d
sub ecx, 4
add edx, 4
add ebp, 4
cmp ecx, 4
jae 0x4acc34
test ecx, ecx
je 0x4acc99
movzx eax, byte [ebp]
movzx esi, byte [edx]
sub eax, esi
jne 0x4acc89
cmp ecx, 1
jbe 0x4acc95
movzx eax, byte [ebp + 1]
movzx esi, byte [edx + 1]
sub eax, esi
jne 0x4acc89
cmp ecx, 2
jbe 0x4acc95
movzx eax, byte [ebp + 2]
movzx esi, byte [edx + 2]
sub eax, esi
jne 0x4acc89
cmp ecx, 3
jbe 0x4acc95
movzx eax, byte [ebp + 3]
movzx ecx, byte [edx + 3]
sub eax, ecx
mov esi, dword [esp + 0x24]
sar eax, 0x1f
or eax, 1
jmp 0x4acc9b
mov esi, dword [esp + 0x24]
xor eax, eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x134]
test eax, eax
jne 0x4accd9
mov eax, dword [esp + 0x3c]
cmp word [esi + eax*2 + 2], 0
jne 0x4accf9
mov ecx, dword [edx + 0x38]
movzx eax, word [esi]
inc ecx
cmp eax, ecx
je 0x4acccf
test dword [esp + 0x34], 0x80000
je 0x4adee6
mov dword [esp + 0x20], 1
jmp 0x4accdb
js 0x4accf9
mov eax, dword [esp + 0x2c]
mov ecx, dword [edx + 0x30]
inc eax
lea esi, [esi + ecx*2]
mov dword [esp + 0x24], esi
mov dword [esp + 0x2c], eax
cmp eax, dword [edx + 0x2c]
jl 0x4acc22
jmp 0x4acd18
sub ecx, dword [esp + 0x2c]
mov eax, dword [edx + 0x30]
imul ecx, eax
add ecx, ecx
push ecx
lea edx, [esi + eax*2]
push esi
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
mov edi, dword [esp + 0x1c]
add esp, 0xc
cmp dword [esp + 0x20], 0
jne 0x4acd65
mov ecx, dword [esp + 0x134]
mov eax, dword [ecx + 0x28]
xor edx, edx
mov dword [esp + 0x2c], edx
cmp dword [ecx + 0x2c], edx
jle 0x4acd65
mov ecx, dword [esp + 0x134]
cmp eax, esi
je 0x4acd54
mov edx, dword [ecx + 0x38]
movzx ebp, word [eax]
inc edx
cmp ebp, edx
je 0x4adf09
mov edx, dword [esp + 0x2c]
jmp 0x4acd55
dec edx
mov ebp, dword [ecx + 0x30]
inc edx
lea eax, [eax + ebp*2]
mov dword [esp + 0x2c], edx
cmp edx, dword [ecx + 0x2c]
jl 0x4acd34
mov eax, dword [esp + 0x134]
mov cx, word [eax + 0x38]
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
inc cx
lea edx, [edi + edi]
push edx
mov word [esi], cx
push eax
lea ecx, [esi + 2]
push ecx
call sub.MSVCR100.dll_memcpy
add esp, 0xc
xor edx, edx
mov word [esi + edi*2 + 2], dx
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x134]
mov eax, 1
add dword [edx + 0x2c], eax
add edi, 2
add dword [edx + 0x38], eax
mov cx, word [edx + 0x38]
mov dword [esp + 0x10], edi
mov word [ebx + 4], cx
mov dword [esp + 0x24], eax
jmp 0x4ad262
mov ebp, 0x29
mov dword [esp + 0x24], 1
jmp 0x4ad594
add edi, 2
mov dword [esp + 0x10], edi
mov ebp, 0x29
jmp 0x4ad032
test dword [esp + 0x34], 0x1000
je 0x4acdfd
mov dword [esp + 0x28], 0x7d
jmp 0x4ad262
mov eax, 1
add dword [edx + 0x38], eax
mov cx, word [edx + 0x38]
mov word [ebx + 4], cx
mov dword [esp + 0x24], eax
jmp 0x4ad262
mov esi, dword [esp + 0x120]
push eax
mov eax, dword [esp + 0x138]
mov eax, dword [eax + 0x38]
lea edx, [esp + 0x14]
push esi
push edx
xor ecx, ecx
mov dword [esp + 0x80], edi
call fcn.004a7490
add esp, 0xc
cmp dword [esi], 0
jne 0x4ae064
xor edx, edx
cmp eax, edx
jge 0x4ad9da
mov esi, eax
neg esi
cmp esi, 0x1a
jne 0x4aceb8
mov edi, dword [esp + 0x10]
cmp word [edi + 2], 0x5c
jne 0x4ace90
cmp word [edi + 4], 0x45
jne 0x4ace90
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
add edi, 4
add edi, 2
xor ecx, ecx
jmp 0x4aa200
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x60], 1
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
cmp esi, 0x19
je 0x4ada8f
mov ecx, dword [esp + 0x30]
cmp ecx, 0xfffffffe
jne 0x4acedb
cmp esi, 5
jle 0x4acedb
cmp esi, 0x17
jge 0x4acedb
or ecx, 0xffffffff
mov dword [esp + 0x30], ecx
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x58], ecx
cmp esi, 0x1b
jne 0x4ad517
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x134]
mov ecx, dword [eax + 0x24]
add edi, 2
xor eax, eax
mov dword [esp + 0x10], edi
cmp word [edi], 0x3c
mov dword [esp + 0x50], ecx
setne al
mov dword [esp + 0x24], edx
mov dword [esp + 0x4c], edx
lea ebp, [eax - 1]
movzx eax, word [edi + 2]
and ebp, 0x17
add ebp, 0x27
mov dword [esp + 0x20], ebp
cmp eax, 0x2b
je 0x4acfd5
cmp eax, 0x2d
je 0x4acfd5
movzx eax, word [edi + 2]
lea edx, [edi + 2]
lea ebx, [esi - 0x1a]
test ax, ax
je 0x4acf90
lea esp, [esp]
movzx ecx, ax
cmp ecx, ebp
je 0x4acf90
mov ebp, 0xff
cmp ax, bp
ja 0x4acf8a
mov eax, dword [esp + 0x134]
mov eax, dword [eax + 0xc]
mov al, byte [ecx + eax]
test al, 4
jne 0x4acf74
xor ebx, ebx
mov ebp, dword [esp + 0x20]
test al, 0x10
je 0x4acf90
movzx eax, word [edx + 2]
add edx, 2
test ax, ax
jne 0x4acf50
jmp 0x4acf90
mov ebp, dword [esp + 0x20]
xor ebx, ebx
movzx ecx, word [edx]
cmp ecx, ebp
je 0x4acfc4
mov edx, dword [esp + 0x120]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0xd0]
mov dword [edx], 0x39
mov edx, dword [esp + 0x134]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
test ebx, ebx
jne 0x4ad027
mov dword [esp + 0x24], 1
jmp 0x4ad58d
movzx eax, word [edi + 4]
lea ecx, [edi + 4]
cmp eax, 0x30
jb 0x4acff3
cmp ax, 0x39
ja 0x4acff3
movzx eax, word [ecx + 2]
add ecx, 2
cmp eax, 0x30
jae 0x4acfe1
movzx eax, word [ecx]
cmp eax, ebp
je 0x4ad027
mov ecx, dword [esp + 0x120]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
mov dword [ecx], 0x39
add edi, 2
xor ecx, ecx
jmp 0x4aa200
mov ebx, dword [esp + 0x14]
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov edx, eax
cmp edx, 0x2b
jne 0x4ad0eb
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
cmp eax, 0x30
jb 0x4adf2c
cmp eax, 0x39
ja 0x4adf2c
movzx eax, word [edi]
xor ecx, ecx
mov dword [esp + 0x1c], ecx
cmp eax, 0x30
jb 0x4ad093
lea ebx, [ebx]
cmp ax, 0x39
ja 0x4ad08f
movzx eax, ax
add edi, 2
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*2 - 0x30]
mov dword [esp + 0x10], edi
movzx eax, word [edi]
cmp eax, 0x30
jae 0x4ad070
mov dword [esp + 0x1c], ecx
movzx eax, word [edi]
cmp eax, ebp
jne 0x4adfbc
cmp edx, 0x2d
jne 0x4ad4f3
test ecx, ecx
je 0x4adfdf
mov edx, dword [esp + 0x134]
mov eax, dword [edx + 0x38]
sub eax, ecx
inc eax
mov dword [esp + 0x1c], eax
test eax, eax
jg 0x4ad6b9
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0xf
xor eax, eax
pop ebx
add esp, 0x100
ret
cmp edx, 0x2d
jne 0x4ad05c
movzx ecx, word [edi + 2]
cmp ecx, 0x30
jb case.0x4ac565.34
cmp ecx, 0x39
ja case.0x4ac565.34
add edi, 2
mov dword [esp + 0x10], edi
jmp 0x4ad05c
mov esi, dword [esp + 0x134]
xor ebp, ebp
xor edx, edx
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x3c], edx
lea ecx, [esp + 0x3c]
cmp ax, 0x29
je 0x4ad19e
jmp 0x4ad130
cmp ax, 0x3a
je 0x4ad196
movzx eax, ax
add edi, 2
sub eax, 0x2d
mov dword [esp + 0x10], edi
cmp eax, 0x4b
ja case.0x4ad153.46
movzx edx, byte [eax + 0x4ae2d4]
jmp dword [edx*4 + 0x4ae2b0]
lea ecx, [esp + 0x2c]
jmp 0x4ad18e
or dword [ecx], 0x80000
or dword [esi + 0x50], 0x400
jmp 0x4ad18e
or dword [ecx], 1
jmp 0x4ad18e
or dword [ecx], 2
jmp 0x4ad18e
or dword [ecx], 4
jmp 0x4ad18e
or dword [ecx], 8
jmp 0x4ad18e
or dword [ecx], 0x200
jmp 0x4ad18e
or dword [ecx], 0x40
movzx eax, word [edi]
cmp eax, 0x29
jne 0x4ad130
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x2c]
or edx, dword [esp + 0x34]
not ebp
and edx, ebp
cmp word [edi], 0x29
mov dword [esp + 0x5c], edx
jne 0x4ad24c
mov eax, dword [esi + 0x14]
add eax, 4
cmp ebx, eax
jne 0x4ad1fc
mov eax, dword [esp + 0x138]
test eax, eax
je 0x4ad1ce
cmp dword [eax], 4
jne 0x4ad1fc
mov ecx, dword [esp + 0x114]
mov dword [esi + 0x4c], edx
mov esi, dword [esp + 0xd0]
xor ebp, ebp
mov dword [ecx], edx
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x134]
add edi, 2
mov dword [esp + 0x18], ebp
xor ecx, ecx
jmp 0x4aa200
mov ecx, dword [esp + 0x114]
mov esi, dword [esp + 0xd0]
mov eax, edx
shr eax, 9
and eax, 1
mov dword [esp + 0xb0], eax
xor eax, 1
mov dword [esp + 0xb4], eax
mov eax, edx
and eax, 1
shl eax, 0x1c
xor ebp, ebp
mov dword [ecx], edx
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x134]
add edi, 2
mov dword [esp + 0x70], eax
mov dword [esp + 0x18], ebp
xor ecx, ecx
jmp 0x4aa200
mov edx, dword [esp + 0x134]
mov dword [esp + 0x28], 0x7d
add edi, 2
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0x28]
mov word [ebx], si
mov ebp, dword [edx + 0x54]
mov edi, dword [edx + 0x38]
xor eax, eax
mov dword [esp + 0x18], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x6c], eax
cmp esi, 0x79
je 0x4ad287
cmp esi, 0x7a
jne 0x4ad28c
mov eax, 1
mov edx, dword [esp + 0x138]
neg edx
sbb edx, edx
lea ecx, [esp + 0x6c]
and edx, ecx
mov ecx, dword [esp + 0x12c]
push edx
mov edx, dword [esp + 0x138]
push edx
push ecx
lea edx, [esp + 0xa4]
push edx
xor edx, edx
cmp esi, 0x81
sete dl
lea ecx, [esp + 0xb4]
push ecx
mov ecx, dword [esp + 0x38]
add edx, dword [esp + 0x144]
push edx
mov edx, dword [esp + 0x64]
push ecx
push edx
push eax
mov eax, dword [esp + 0x144]
push eax
mov eax, dword [esp + 0x84]
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x64]
push edx
push eax
call fcn.004ae320
add esp, 0x34
test eax, eax
je 0x4ae064
cmp esi, 0x7b
jne 0x4ad392
mov ecx, dword [esp + 0x134]
mov ebx, dword [esp + 0x14]
cmp dword [ecx + 0x38], edi
jg 0x4ad327
mov edx, 0x7c
mov word [ebx], dx
mov edx, dword [esp + 0x98]
mov ecx, dword [esp + 0xa4]
mov edi, dword [esp + 0x10]
cmp word [edi], 0x29
jne 0x4adf99
cmp dword [esp + 0x138], 0
je 0x4ad41f
mov edx, dword [esp + 0x138]
mov eax, dword [edx]
mov ecx, dword [esp + 0x6c]
mov esi, 0x7fffffeb
sub esi, eax
lea ebp, [ecx - 4]
cmp esi, ebp
jl 0x4adcb3
lea ecx, [eax + ecx - 4]
mov dword [edx], ecx
mov dword [ebx + 2], 0x720002
mov ecx, 2
mov word [ebx + 6], cx
add ebx, 8
mov dword [esp + 0x14], ebx
jmp 0x4ada93
cmp esi, 0x77
jl 0x4ad3a6
cmp esi, 0x7a
jg 0x4ad3a6
mov eax, dword [esp + 0x134]
dec dword [eax + 0x48]
mov ebx, dword [esp + 0x14]
cmp esi, 0x81
jne 0x4ad327
cmp dword [esp + 0x138], 0
jne 0x4ad327
mov eax, ebx
xor ecx, ecx
movzx edx, word [eax + 2]
lea eax, [eax + edx*2]
inc ecx
cmp word [eax], 0x72
jne 0x4ad3c8
mov eax, 0x8b
cmp word [ebx + 4], ax
jne 0x4ad3f5
cmp ecx, 1
jg 0x4adf75
mov dword [esp + 0x28], eax
mov esi, eax
jmp 0x4ad327
cmp ecx, 2
jg 0x4adf87
cmp ecx, 1
jne 0x4ad327
or edx, 0xffffffff
or ecx, edx
mov dword [esp + 0x98], edx
mov dword [esp + 0xa4], ecx
jmp 0x4ad335
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x14], ebx
cmp esi, 0x8b
je 0x4ace9c
mov eax, dword [esp + 0x48]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x40], eax
mov dword [esp + 0x9c], 0
cmp esi, 0x7b
jl 0x4ad4c2
cmp eax, 0xfffffffe
jne 0x4ad487
test ecx, ecx
js 0x4ad475
mov dword [esp + 0x30], ecx
mov dword [esp + 0x9c], 1
mov dword [esp + 0x40], 0xffffffff
jmp 0x4ad49a
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x40], 0xffffffff
jmp 0x4ad49a
test ecx, ecx
js 0x4ad49a
test edx, edx
jns 0x4ad4a2
or ebp, ecx
mov edx, ebp
mov dword [esp + 0x98], edx
test edx, edx
js 0x4ace9c
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0xd0]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x134]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
cmp esi, 0x77
jne 0x4ace9c
test edx, edx
js 0x4ace9c
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0xd0]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x134]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
cmp edx, 0x2b
jne 0x4ad6b9
test ecx, ecx
je 0x4add88
mov eax, dword [esp + 0x134]
add ecx, dword [eax + 0x38]
mov dword [esp + 0x1c], ecx
jmp 0x4ad6b9
cmp esi, 0x1c
jne 0x4ad7f6
mov edi, dword [esp + 0x10]
movzx eax, word [edi + 2]
cmp eax, 0x3c
je 0x4ad564
cmp eax, 0x27
je 0x4ad564
cmp eax, 0x7b
je 0x4ad564
mov ecx, dword [esp + 0x120]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
mov dword [ecx], 0x45
add edi, 2
xor ecx, ecx
jmp 0x4aa200
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov dword [esp + 0x24], edx
cmp eax, 0x3c
jne 0x4ad57c
lea ebp, [eax + 2]
jmp 0x4ad58d
xor edx, edx
cmp eax, 0x27
setne dl
lea ebp, [edx - 1]
and ebp, 0xffffffaa
add ebp, 0x7d
mov edx, dword [esp + 0x134]
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov ecx, 0xff
mov esi, edi
mov dword [esp + 0x18], esi
cmp ax, cx
ja 0x4ad5ce
mov ecx, dword [edx + 0xc]
movzx eax, ax
test byte [eax + ecx], 0x10
je 0x4ad5ce
add edi, 2
mov dword [esp + 0x10], edi
movzx eax, word [edi]
mov ebx, 0xff
cmp ax, bx
jbe 0x4ad5b1
mov ebx, edi
sub ebx, esi
sar ebx, 1
cmp dword [esp + 0x138], 0
je 0x4ad637
test ebx, ebx
je 0x4ae002
movzx ecx, word [edi]
cmp ecx, ebp
jne 0x4ae025
cmp ebx, 0x20
jg 0x4aca37
mov esi, dword [esp + 0x134]
mov ebp, dword [esi + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esi + 0x1c], edi
mov edi, dword [esp + 0x34]
shr edi, 3
and edi, 1
push edx
call fcn.004a81b0
add esp, 4
mov dword [esp + 0x1c], eax
mov dword [esi + 0x1c], ebp
test eax, eax
jns 0x4ad6ae
mov dword [esp + 0x1c], 0
jmp 0x4ad6ae
mov eax, dword [edx + 0x2c]
mov edi, dword [edx + 0x28]
xor ebp, ebp
mov dword [esp + 0x1c], eax
test eax, eax
jle 0x4ad675
mov esi, dword [esp + 0x134]
mov edi, edi
mov edx, dword [esp + 0x18]
lea eax, [edi + 2]
mov ecx, ebx
call fcn.004b8d40
test eax, eax
jne 0x4ad669
cmp word [edi + ebx*2 + 2], ax
je 0x4ad675
mov eax, dword [esi + 0x30]
inc ebp
lea edi, [edi + eax*2]
cmp ebp, dword [esi + 0x2c]
jl 0x4ad650
cmp ebp, dword [esp + 0x1c]
jge 0x4ad684
movzx ecx, word [edi]
mov dword [esp + 0x1c], ecx
jmp 0x4ad6ae
mov edi, dword [esp + 0x34]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x134]
shr edi, 3
and edi, 1
push edx
call fcn.004a81b0
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
jle 0x4ae048
cmp dword [esp + 0x24], 0
je 0x4ad80a
cmp dword [esp + 0x138], 0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x134]
mov edi, dword [eax + 0x14]
mov ebp, ebx
mov dword [esp + 0x18], ebp
jne 0x4ad7a2
xor ecx, ecx
mov word [ebx], cx
cmp dword [esp + 0x1c], ecx
je 0x4ad6f6
mov esi, dword [esp + 0x1c]
mov edx, eax
mov eax, dword [edx + 0x14]
call fcn.004a8540
mov edi, eax
test edi, edi
jne 0x4ad76f
mov edi, dword [esp + 0x34]
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x134]
shr edi, 3
and edi, 1
push 0
call fcn.004a81b0
add esp, 4
test eax, eax
js 0x4addce
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x34]
mov edx, dword [esi + 0x10]
lea edi, [eax + ebx*2]
lea eax, [edx + ecx*2 - 0xc8]
cmp dword [esi + 0x24], eax
jb 0x4ad74f
call fcn.004a7370
mov ecx, dword [esp + 0x120]
mov dword [ecx], eax
test eax, eax
jne 0x4ae064
mov edx, dword [esp + 0x14]
sub edx, dword [esi + 0x14]
mov eax, dword [esi + 0x24]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
add edx, 2
sar edx, 1
mov word [eax], dx
add dword [esi + 0x24], 2
jmp 0x4ad7a2
cmp word [edi + 2], 0
jne 0x4ad7a2
cmp dword [esp + 0x130], 0
jg 0x4ad7a2
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x12c]
push ecx
push edx
push ebx
push edi
call fcn.004a8c40
add esp, 0x10
test eax, eax
jne 0x4ae057
mov ecx, dword [esp + 0x134]
mov eax, 0x6f
mov word [ebx], ax
sub edi, dword [ecx + 0x14]
add ebx, 4
sar edi, 1
cmp dword [esp + 0x30], 0xfffffffe
mov word [ebx - 2], di
mov dword [esp + 0x14], ebx
mov dword [esp + 0x9c], 0
jne 0x4ada8f
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0xd0]
add edi, 2
mov edx, ecx
mov dword [esp + 0x30], 0xffffffff
xor ecx, ecx
jmp 0x4aa200
cmp esi, 0x23
jl 0x4ad891
mov ecx, 0xffffffdd
sub ecx, eax
mov dword [esp + 0x1c], ecx
cmp dword [esp + 0x30], 0xfffffffe
jne 0x4ad819
mov dword [esp + 0x30], 0xffffffff
test byte [esp + 0x34], 1
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, 0
setne dl
mov dword [esp + 0x18], eax
add eax, 4
mov dword [esp + 0x14], eax
add edx, 0x6d
mov word [eax - 4], dx
mov word [eax - 2], cx
mov eax, 1
cmp ecx, 0x20
jge 0x4ad850
shl eax, cl
mov edx, dword [esp + 0x134]
or dword [edx + 0x44], eax
cmp ecx, dword [edx + 0x40]
jle 0x4ad862
mov dword [edx + 0x40], ecx
mov eax, dword [edx + 0x20]
test eax, eax
je 0x4ada8f
lea ecx, [ecx]
movzx edx, word [eax + 4]
cmp edx, ecx
je 0x4ad883
mov eax, dword [eax]
test eax, eax
jne 0x4ad870
jmp 0x4ada8f
mov ecx, 1
mov word [eax + 6], cx
jmp 0x4ada8f
cmp esi, 0xf
je 0x4ad955
cmp esi, 0x10
je 0x4ad955
cmp esi, 0x1d
jl 0x4ad8eb
cmp esi, 0x22
jg 0x4ad8eb
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0xd0]
lea eax, [eax*4 + 0x74]
mov ecx, 0x4e4178
sub ecx, eax
mov edi, dword [ecx]
add edx, 2
sub edi, 2
mov dword [esp + 0x68], edx
mov edx, dword [esp + 0x134]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
cmp esi, 5
jle 0x4ad925
cmp esi, 0x17
jge 0x4ad925
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x134]
mov word [ebx], si
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0xd0]
mov ebp, ebx
add ebx, 2
add edi, 2
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebx
xor ecx, ecx
jmp 0x4aa200
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x134]
mov word [ebx], si
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0xd0]
xor ebp, ebp
add ebx, 2
add edi, 2
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebx
xor ecx, ecx
jmp 0x4aa200
mov edx, dword [esp + 0x120]
push edx
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0xe0]
call fcn.004a7b40
mov edi, eax
add esp, 0xc
test edi, edi
js 0x4ae064
mov ebx, dword [esp + 0x14]
mov cx, word [esp + 0xd8]
xor edx, edx
cmp esi, 0x10
sete dl
mov esi, dword [esp + 0xd0]
xor eax, eax
mov ebp, ebx
mov dword [esp + 0x18], ebp
cmp edx, dword [esp + 0xd4]
mov edx, dword [esp + 0x134]
setne al
add eax, 0xf
mov word [ebx], ax
mov word [ebx + 2], di
mov word [ebx + 4], cx
mov edi, dword [esp + 0x10]
add ebx, 6
add edi, 2
mov dword [esp + 0x14], ebx
xor ecx, ecx
jmp 0x4aa200
cmp eax, 0xffff
jle 0x4ad9fa
lea ecx, [esp + 0xbc]
call fcn.004b8f60
mov bp, word [esp + 0xbc]
jmp 0x4aa6f5
mov bp, ax
mov word [esp + 0xbc], bp
mov eax, 1
jmp 0x4aa6f5
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0x30]
cmp esi, 0xfffffffe
jne 0x4ada68
mov edx, dword [esp + 0x48]
or ecx, 0xffffffff
mov dword [esp + 0x40], ecx
mov dword [esp + 0x58], edx
cmp eax, 1
je 0x4ada44
cmp dword [esp + 0x70], 0
je 0x4ada44
mov dword [esp + 0x48], ecx
mov dword [esp + 0x30], ecx
jmp 0x4ada8f
movzx ecx, bp
or ecx, dword [esp + 0x70]
mov dword [esp + 0x30], ecx
cmp eax, 1
je 0x4ada8f
mov eax, dword [esp + 0x14]
movzx eax, word [eax - 2]
mov ecx, dword [esp + 0x134]
or eax, dword [ecx + 0x54]
jmp 0x4ada8b
mov dword [esp + 0x40], esi
mov esi, dword [esp + 0x48]
mov dword [esp + 0x58], esi
cmp eax, 1
je 0x4ada80
cmp dword [esp + 0x70], 0
jne 0x4ada8f
movzx eax, word [ecx - 2]
or eax, dword [edx + 0x54]
or eax, dword [esp + 0x70]
mov dword [esp + 0x48], eax
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0xd0]
add edi, 2
xor ecx, ecx
jmp 0x4aa200
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x34
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x14
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x34
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov edx, dword [esp + 0x124]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x128]
mov dword [edx], eax
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x118]
mov dword [ecx], edx
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
mov ecx, dword [esp + 0x138]
mov dword [eax], ebx
test ecx, ecx
je 0x4adb71
sub ebx, dword [esp + 0xa0]
mov eax, dword [ecx]
mov edx, 0x7fffffeb
sar ebx, 1
sub edx, eax
cmp edx, ebx
jl 0x4adad6
add eax, ebx
mov dword [ecx], eax
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x40
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
xor edx, edx
cmp word [edi + 2], 0x3a
mov dword [ecx], edi
setne dl
pop edi
pop esi
pop ebp
pop ebx
dec edx
and edx, 0xffffffee
add edx, 0x1f
mov dword [eax], edx
xor eax, eax
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x1f
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x1e
xor eax, eax
pop ebx
add esp, 0x100
ret
mov eax, esi
mov dword [eax], 0x47
jmp 0x4ae064
mov ecx, dword [esp + 0x120]
mov dword [ecx], 7
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 8
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 6
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 9
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x14
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x3c
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x3b
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x42
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x3b
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
sub edi, 2
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x1a
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x3a
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0xf
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov edx, dword [esp + 0x120]
mov dword [edx], 0xf
jmp 0x4ae064
mov eax, dword [esp + 0x120]
mov dword [eax], 0xf
jmp 0x4ae064
mov ecx, dword [esp + 0x120]
neg eax
sbb eax, eax
and eax, 0xffffffec
add eax, 0x23
mov dword [ecx], eax
jmp 0x4ae064
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
add edi, 2
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x1c
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
add edi, 2
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x18
xor eax, eax
pop ebx
add esp, 0x100
ret
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x27
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x26
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x2a
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x31
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x2b
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x41
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x3f
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
sub edi, 2
mov dword [ecx], 0xc
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov edx, dword [esp + 0x120]
mov dword [edx], 0x36
jmp 0x4ae064
mov eax, dword [esp + 0x120]
mov dword [eax], 0x1b
jmp 0x4ae064
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0xe
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [eax], 0x1d
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x3a
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0x3e
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
mov dword [edx], 0x2a
xor eax, eax
pop ebx
add esp, 0x100
ret
mov ecx, dword [esp + 0x120]
mov dword [ecx], 0xf
jmp 0x4ae064
mov eax, dword [esp + 0x120]
mov dword [eax], 0x28
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x11c]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x100
ret