Function at 0x4ad1e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x158
mov dword [esp], edx
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x10], esi
push edi
test edx, edx
jne 0x4ad23b
cmp dword [esp + 0x17c], edx
jne 0x4ad220
push 1
push edx
push edx
push edx
push edx
lea ecx, [esp + 0x190]
call fcn.004ad1e0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
lea eax, [esp + 0x17c]
sub eax, esi
cdq
xor eax, edx
sub eax, edx
neg eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x34], 0
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jae 0x4b289e
mov dword [esp + 0x64], 0xfc00
mov dword [esp + 0x68], 0xdc00
mov dword [esp + 0x44], connect
mov dword [esp + 0x4c], 0xd800
nop dword [eax]
inc eax
mov dword [edi], eax
mov eax, dword [esp + 0x17c]
cmp eax, dword [edi + 8]
jae 0x4b4a11
cmp dword [edi + 0x9c], 2
jne 0x4ad2e0
mov eax, dword [esp + 0x178]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], esi
mov dword [esp + 0x178], eax
mov dword [edi + 0x9c], 0
jmp 0x4ad2e0
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
jmp 0x4ad2e7
je case.0x4ad319.151
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x170]
movzx ecx, word [edx]
mov dword [esp + 0x28], edx
mov ebp, ecx
mov edx, ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], edx
cmp edx, 0x9b
ja case.0x4ad319.98
movzx eax, byte [edx + 0x4b4b6c]
jmp dword [eax*4 + 0x4b4a24]
cmp dword [edi + 0x70], 0
movzx ecx, byte [edx + 0x4cd250]
je 0x4b296c
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
add ecx, eax
lea edx, [edx + ecx*2]
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edx, dword [esp + 0x10]
mov ebx, esi
mov edi, dword [edi + 0xb0]
mov ebp, edx
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
cmp eax, 1
je 0x4ad457
cmp eax, 0xfffffc20
jne 0x4ad3c8
mov edx, dword [esp + 0x10]
movzx ecx, word [edx + 2]
lea ecx, [edx + ecx*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], ecx
jae 0x4b28a6
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4ad3d4
cmp word [ecx], 0x71
jne 0x4b28a6
jmp 0x4ad3d4
test eax, eax
jne 0x4b28a6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea edx, [edx + eax*2]
mov eax, dword [esp + 0x174]
mov dword [esp + 0x10], edx
mov dword [eax + 0xb0], edi
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x71
je 0x4ad352
mov edi, dword [esp + 0x174]
movzx eax, cx
cmp eax, 0x7c
je 0x4ad412
cmp eax, 0x71
jne case.0x4ad319.151
movzx eax, word [edx + 2]
lea edx, [edx + eax*2]
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x71
je 0x4ad412
mov eax, dword [edi + 0x90]
mov esi, dword [edi + 0x84]
mov dword [esp + 0x10], edx
mov dword [esp + 0x170], eax
mov dword [esp + 0x14], esi
cmp ecx, 0x72
je 0x4ad44b
cmp esi, ebx
jne 0x4b25f0
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x80]
movzx ecx, word [edx]
mov dword [esp + 0x16c], eax
jmp 0x4ad401
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x28], ebp
jmp 0x4adfac
mov ebp, dword [esp + 0x10]
cmp word [ebp + 4], 0x70
movzx edi, word [ebp + 2]
jne 0x4ad57f
mov ecx, dword [0x4e7480]
test ecx, ecx
je 0x4ad578
mov dword [esp + 0xb8], 2
movzx eax, word [ebp + 6]
mov ebp, dword [esp + 0x174]
mov dword [esp + 0xbc], eax
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc0], eax
mov eax, dword [ebp + 0x78]
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x7c]
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x16c]
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xcc], eax
mov eax, esi
sub eax, dword [ebp + 0x78]
sar eax, 1
mov dword [esp + 0xd0], eax
movzx eax, word [edx + 8]
mov dword [esp + 0xe0], eax
movzx eax, word [edx + 0xa]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x170]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0xd4], eax
mov eax, dword [ebp + 0x94]
mov dword [esp + 0xd8], eax
mov eax, dword [ebp + 0xac]
mov dword [esp + 0xdc], eax
mov eax, dword [ebp + 0xb4]
mov dword [esp + 0xe8], eax
lea eax, [esp + 0xb8]
push eax
call ecx
add esp, 4
test eax, eax
jg case.0x4ad319.151
js 0x4b28a6
mov ebp, dword [esp + 0x10]
add ebp, 0xc
mov dword [esp + 0x10], ebp
movzx ecx, word [ebp + 4]
lea edx, [ebp + 4]
cmp ecx, 0x89
je 0x4ad753
cmp ecx, 0x8a
je 0x4ad753
cmp ecx, 0x87
je 0x4ad61c
cmp ecx, 0x88
je 0x4ad61c
cmp ecx, 0x8b
jne 0x4ad5c8
movzx eax, word [ebp + 2]
lea ecx, [eax*2]
add ecx, ebp
jmp 0x4ad8f6
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x9c], 1
mov eax, dword [esp + 0x17c]
inc eax
push eax
push 0
push ecx
push dword [esp + 0x17c]
mov ecx, esi
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
cmp eax, 1
je 0x4b2677
test eax, eax
je 0x4ad615
cmp eax, 0xfffffc20
jne 0x4b28a6
xor edx, edx
jmp 0x4ad8e3
movzx edi, word [ebp + 6]
mov ebp, dword [esp + 0x174]
lea edx, [edi + edi]
cmp edx, dword [esp + 0x170]
jge 0x4ad640
mov eax, dword [ebp + 0xc]
cmp dword [eax + edx*4], 0
jge 0x4ad8d5
cmp ecx, 0x88
jne 0x4ad744
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x28]
mov ebx, eax
test edx, edx
jle 0x4ad744
xor ecx, ecx
mov ebp, eax
mov esi, ecx
movzx eax, word [ebx]
cmp eax, edi
je 0x4ad685
mov eax, dword [esp + 0x174]
inc esi
mov ecx, esi
mov eax, dword [eax + 0x24]
lea ebx, [eax*2]
add ebx, ebp
mov ebp, ebx
cmp esi, edx
jl 0x4ad662
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x14]
cmp ecx, edx
jge 0x4ad744
mov eax, dword [esp + 0x174]
mov edi, ebx
cmp ebx, dword [eax + 0x28]
jbe 0x4ad6f2
mov eax, dword [eax + 0x24]
lea ecx, [ebx + 2]
neg eax
lea edi, [edi + eax*2]
lea edx, [edi + 2]
call fcn.004b5f10
test eax, eax
jne 0x4ad6eb
movzx eax, word [edi]
lea ecx, [eax + eax]
cmp ecx, dword [esp + 0x170]
jge 0x4ad6dd
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x4ad8d5
mov eax, dword [esp + 0x174]
cmp edi, dword [eax + 0x28]
ja 0x4ad6a3
jmp 0x4ad6f2
mov eax, dword [esp + 0x174]
mov ebp, dword [esp + 0x2c]
inc ebp
cmp ebp, dword [eax + 0x20]
jge 0x4ad744
lea edi, [ebx + 2]
nop
mov eax, dword [eax + 0x24]
mov ecx, edi
lea ebx, [ebx + eax*2]
lea edx, [ebx + 2]
call fcn.004b5f10
test eax, eax
jne 0x4ad744
movzx eax, word [ebx]
lea ecx, [eax + eax]
cmp ecx, dword [esp + 0x170]
jge 0x4ad737
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x4ad8d5
mov eax, dword [esp + 0x174]
inc ebp
cmp ebp, dword [eax + 0x20]
jl 0x4ad700
mov ebp, dword [esp + 0x10]
xor edx, edx
movzx edi, word [ebp + 2]
jmp 0x4ad8e3
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0xa8]
test eax, eax
jne 0x4ad776
movzx eax, word [ebp + 2]
lea ecx, [eax*2]
add ecx, ebp
jmp 0x4ad8fd
movzx edi, word [ebp + 6]
cmp edi, 0xffff
je 0x4ad8d5
cmp edi, dword [eax + 4]
je 0x4ad8d5
xor edx, edx
mov dword [esp + 0x24], edx
cmp ecx, 0x8a
jne 0x4ad8c1
mov eax, dword [esp + 0x174]
xor ebp, ebp
mov ecx, dword [eax + 0x28]
mov ebx, ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x20], edx
jle 0x4ad8bd
mov edx, ecx
mov esi, eax
xor ecx, ecx
nop dword [eax]
movzx eax, word [ebx]
cmp eax, edi
je 0x4ad7ec
mov eax, dword [esi + 0x24]
inc ebp
mov ecx, ebp
lea ebx, [edx + eax*2]
mov eax, dword [esp + 0x2c]
mov edx, ebx
cmp ebp, eax
jl 0x4ad7d0
jmp 0x4ad7f0
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebx
cmp ecx, eax
jge 0x4ad8bd
mov eax, dword [esp + 0x174]
mov edi, ebx
cmp ebx, dword [eax + 0x28]
jbe 0x4ad86b
lea ebp, [ebx + 2]
mov esi, eax
nop dword [eax + eax]
mov eax, dword [esi + 0x24]
mov ecx, ebp
neg eax
lea edi, [edi + eax*2]
lea edx, [edi + 2]
call fcn.004b5f10
test eax, eax
jne 0x4ad854
mov eax, dword [esi + 0xa8]
xor ebx, ebx
movzx ecx, word [edi]
mov eax, dword [eax + 4]
cmp ecx, eax
sete bl
mov dword [esp + 0x24], ebx
je 0x4ad854
cmp edi, dword [esi + 0x28]
ja 0x4ad820
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x174]
test edx, edx
jne 0x4ad8da
inc ebp
cmp ebp, dword [eax + 0x20]
jge 0x4ad8cb
mov esi, dword [esp + 0x174]
lea edi, [ebx + 2]
nop
mov eax, dword [esi + 0x24]
mov ecx, edi
lea ebx, [ebx + eax*2]
lea edx, [ebx + 2]
call fcn.004b5f10
test eax, eax
jne 0x4ad8b5
mov eax, dword [esi + 0xa8]
xor edx, edx
movzx ecx, word [ebx]
mov eax, dword [eax + 4]
cmp ecx, eax
sete dl
mov dword [esp + 0x24], edx
je 0x4ad8b9
inc ebp
cmp ebp, dword [esi + 0x20]
jl 0x4ad880
jmp 0x4ad8b9
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
test edx, edx
jne 0x4ad8da
movzx edi, word [ebp + 2]
jmp 0x4ad8e3
mov ebp, dword [esp + 0x10]
movzx edi, word [ebp + 2]
jmp 0x4ad8e3
mov edx, 1
mov ebp, dword [esp + 0x10]
mov edi, 2
lea ecx, [edi*2]
add ecx, ebp
mov eax, ecx
test edx, edx
jne 0x4b26b6
mov edi, dword [esp + 0x174]
cmp word [ecx], 0x71
mov eax, ecx
je 0x4b26bd
lea edx, [ecx + 4]
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x170]
movzx edi, word [eax + 2]
mov eax, dword [esp + 0x174]
lea edx, [edi + edi]
mov dword [eax + 0x94], edi
cmp edx, dword [eax + 0x14]
jl 0x4ad952
mov edx, dword [esp + 0x10]
mov edi, eax
add edx, 4
mov dword [esp + 0x10], edx
mov dword [edi + 0x40], 1
jmp 0x4ad2e7
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
sub eax, edi
mov edi, dword [esp + 0x174]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, esi
sub ecx, dword [edi + 0x78]
mov eax, dword [edi + 0xc]
sar ecx, 1
mov dword [eax + edx*4 + 4], ecx
cmp ebx, edx
jg 0x4ad983
lea ebx, [edx + 2]
mov dword [esp + 0x170], ebx
mov edx, dword [esp + 0x10]
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ad2e7
mov ebp, dword [esp + 0x174]
mov edi, dword [edi + 0xb0]
cmp dword [ebp + 0x9c], 1
jne 0x4ad9ba
mov dword [ebp + 0x9c], 0
mov ebx, 1
jmp 0x4ad9bc
xor ebx, ebx
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push 0
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
cmp eax, 1
je 0x4ada25
cmp eax, 0xfffffc19
je 0x4ada25
test eax, eax
je 0x4ada02
cmp eax, 0xfffffc20
jne 0x4b28a6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
mov dword [ebp + 0xb0], edi
lea edx, [edx + eax*2]
movzx eax, word [edx]
mov dword [esp + 0x10], edx
mov ecx, eax
cmp eax, 0x71
je 0x4ad9c0
mov edi, ebp
jmp 0x4ada3b
mov edx, dword [esp + 0x10]
mov edi, ebp
mov eax, dword [edi + 0x80]
mov dword [esp + 0x16c], eax
movzx eax, word [edx]
cmp ax, 0x72
je case.0x4ad319.151
test ebx, ebx
jne 0x4b2a76
nop dword [eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4ada50
mov ebx, dword [edi + 0x90]
add edx, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x170], ebx
jmp 0x4ad2e7
mov ebp, dword [esp + 0x174]
mov edi, dword [edi + 0xb0]
cmp dword [ebp + 0x9c], 1
jne 0x4ada9e
mov dword [ebp + 0x9c], 0
mov ebx, 1
jmp 0x4adaa0
xor ebx, ebx
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push 0
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
mov dword [ebp + 0xb0], edi
cmp eax, 1
je case.0x4ad319.151
cmp eax, 0xfffffc19
je case.0x4ad319.151
cmp eax, 0xfffffc1e
je 0x4adb21
cmp eax, 0xfffffc1d
je 0x4adb21
cmp eax, 0xfffffc1a
je 0x4adb21
test eax, eax
je 0x4adb09
cmp eax, 0xfffffc20
jne 0x4b28a6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
je 0x4adaa4
jmp 0x4adb3e
mov edx, dword [esp + 0x10]
nop word [eax + eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4adb30
test ebx, ebx
jne 0x4b2a76
add edx, 4
mov edi, ebp
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edx, dword [esp + 0x10]
movzx ecx, word [edx + 2]
test ecx, ecx
je 0x4adba2
mov edi, dword [edi + 0x78]
mov ebx, 0xdc00
mov ebp, 0xfc00
nop dword [eax]
lea eax, [esi - 2]
mov edx, esi
mov esi, eax
dec ecx
cmp esi, edi
jb case.0x4ad319.151
mov ax, word [eax]
and ax, bp
cmp ax, bx
cmovne esi, edx
sub esi, 2
mov dword [esp + 0x14], esi
test ecx, ecx
jg 0x4adb70
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
cmp esi, dword [edi + 0x88]
jae 0x4adbb0
mov dword [edi + 0x88], esi
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov ecx, dword [0x4e7480]
test ecx, ecx
je 0x4adc9d
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x80], 2
movzx eax, word [ebx + 2]
mov dword [esp + 0x84], eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x88], eax
mov eax, dword [edi + 0x78]
mov dword [esp + 0x8c], eax
mov eax, dword [edi + 0x7c]
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x16c]
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x94], eax
mov eax, esi
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x98], eax
movzx eax, word [ebx + 8]
mov dword [esp + 0xa8], eax
movzx eax, word [ebx + 0xa]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x170]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x9c], eax
mov eax, dword [edi + 0x94]
mov dword [esp + 0xa0], eax
mov eax, dword [edi + 0xac]
mov dword [esp + 0xa4], eax
mov eax, dword [edi + 0xb4]
mov dword [esp + 0xb0], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0x80]
push eax
call ecx
add esp, 4
test eax, eax
jg case.0x4ad319.151
js 0x4b28a6
mov edx, dword [esp + 0x10]
add edx, 0xc
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edx, dword [esp + 0x10]
mov ecx, dword [edi + 0x74]
movzx eax, word [edx + 2]
lea ebx, [ecx + eax*2]
cmp ebx, ecx
jne 0x4adcc3
xor ecx, ecx
jmp 0x4adcc7
movzx ecx, word [ebx + 4]
mov eax, dword [edi + 0xa8]
test eax, eax
je 0x4adce5
cmp ecx, dword [eax + 4]
jne 0x4adcdf
cmp esi, dword [eax + 0x10]
je 0x4b29d1
mov eax, dword [eax]
test eax, eax
jne 0x4adcd1
mov dword [esp + 0x54], ecx
add edx, 4
mov dword [esp + 0x60], esi
mov eax, dword [edi + 0xa8]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x50]
mov dword [edi + 0xa8], eax
mov ecx, dword [edi + 0x10]
mov dword [esp + 0x10], edx
mov dword [esp + 0x5c], ecx
cmp ecx, 0x1e
jg 0x4add21
lea eax, [esp + 0xf0]
mov dword [esp + 0x58], eax
jmp 0x4add42
lea eax, [ecx*4]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [esp + 0x58], eax
test eax, eax
je 0x4b2a07
mov ecx, dword [esp + 0x5c]
shl ecx, 2
push ecx
push dword [edi + 0xc]
push eax
call sub.VCRUNTIME140.dll_memcpy
movzx ebp, word [ebx]
add esp, 0xc
mov eax, 0x82
cmp bp, ax
jb 0x4add69
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, word [ebx]
push edi
push dword [esp + 0x17c]
movzx eax, byte [eax + 0x4cd250]
push dword [esp + 0x17c]
lea edx, [ebx + eax*2]
call fcn.004ad1e0
mov ecx, dword [esp + 0x70]
add esp, 0x14
shl ecx, 2
mov edi, eax
mov eax, dword [esp + 0x174]
push ecx
push dword [esp + 0x5c]
push dword [eax + 0xc]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [esp + 0x180]
add esp, 0xc
mov eax, dword [esp + 0x50]
mov dword [ecx + 0xa8], eax
cmp edi, 1
je 0x4ade3b
cmp edi, 0xfffffc19
je 0x4ade3b
test edi, edi
je 0x4added
cmp edi, 0xfffffc20
jne 0x4b29e1
mov edi, ecx
lea eax, [esp + 0x50]
mov dword [edi + 0xa8], eax
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x71
lea ebx, [ebx + eax*2]
je 0x4add55
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0xf0]
mov dword [edi + 0xa8], eax
mov eax, dword [esp + 0x58]
cmp eax, ecx
je case.0x4ad319.151
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xf0]
cmp eax, ecx
je 0x4ade54
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov edi, dword [esp + 0x174]
mov esi, dword [edi + 0x84]
mov eax, dword [edi + 0x80]
mov dword [esp + 0x14], esi
mov dword [esp + 0x16c], eax
jmp 0x4ad2dc
mov edx, dword [esp + 0x10]
nop dword [eax + eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4ade80
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
mov ebx, dword [esp + 0x170]
add edi, 2
push eax
push dword [esp + 0x17c]
mov edx, edi
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop dword [eax + eax]
movzx eax, word [edi + 2]
cmp word [edi + eax*2], 0x71
lea edi, [edi + eax*2]
je 0x4adee0
lea edx, [edi + 4]
mov edi, dword [esp + 0x174]
mov dword [esp + 0x10], edx
jmp 0x4ad2e7
mov eax, dword [esp + 0x10]
add eax, 2
mov dword [esp + 0x10], eax
mov edx, eax
nop
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x4adf10
mov eax, dword [esp + 0x17c]
add edx, 4
mov ebx, dword [esp + 0x170]
inc eax
push eax
push dword [esp + 0x17c]
mov ecx, esi
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov edx, dword [esp + 0x10]
jmp 0x4ad2e7
mov ecx, dword [esp + 0x10]
add ecx, 2
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
je 0x4adf63
lea edx, [ecx + 4]
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov eax, dword [esp + 0x10]
mov ebp, 1
add eax, 2
mov dword [esp + 0x28], ebp
mov dword [esp + 0x10], eax
movzx edx, word [eax]
mov dword [esp + 0x1c], edx
cmp edx, 0x80
je 0x4adfac
cmp edx, 0x85
jne 0x4ae17d
movzx edx, word [eax + 4]
mov dword [esp + 0x2c], edx
lea eax, [edx + edx]
cmp eax, dword [edi + 0x14]
jge 0x4ae173
mov ecx, dword [edi + 0xc]
xor ebp, ebp
mov ebx, dword [esp + 0x10]
sub ebx, dword [edi + 0x74]
shl eax, 2
mov dword [esp + 0x24], eax
sar ebx, 1
mov edi, dword [eax + ecx]
mov eax, dword [eax + ecx + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0x38], edi
mov eax, dword [eax + 0x10]
sub eax, edx
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x20], eax
mov edi, dword [ecx + 0x94]
mov eax, dword [esp + 0x174]
mov edx, esi
sub edx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x10]
sub ecx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
sar edx, 1
cmp dword [esp + 0x1c], 0x82
mov dword [eax + ecx*4], edx
jb 0x4ae03a
mov eax, dword [esp + 0x174]
mov dword [eax + 0x9c], 2
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [ecx]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
movzx eax, byte [eax + 0x4cd250]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ad1e0
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffc1b
jne 0x4ae0b6
mov ecx, dword [esp + 0x174]
mov ebp, 1
mov eax, dword [ecx + 0x90]
mov esi, dword [ecx + 0x84]
mov dword [esp + 0x170], eax
mov eax, dword [ecx + 0x74]
mov dword [esp + 0x14], esi
lea eax, [eax + ebx*2]
mov dword [esp + 0x10], eax
jmp 0x4adffe
cmp ecx, 0xfffffc20
jne 0x4ae0f5
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], eax
jae 0x4ae0e8
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4ae0fd
cmp word [eax], 0x71
je 0x4ae0fd
mov eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test ecx, ecx
jne 0x4ae0e8
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x94], edi
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
je 0x4ae004
mov edi, ecx
test ebp, ebp
jne 0x4ae154
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
mov dword [ecx + eax], edx
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x30]
mov dword [ecx + eax + 4], edx
mov ecx, dword [edi + 0x10]
sub ecx, dword [esp + 0x2c]
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], edx
mov edx, dword [esp + 0x10]
cmp dword [esp + 0x28], 0
jne 0x4ad44b
test ebp, ebp
je case.0x4ad319.151
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov ecx, dword [esp + 0x174]
mov edi, eax
xor ebx, ebx
sub edi, dword [ecx + 0x74]
sar edi, 1
nop dword [eax]
cmp edx, 0x82
jb 0x4ae1a2
mov dword [ecx + 0x9c], 2
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push ecx
mov ecx, dword [esp + 0x1c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x4cd250]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ad1e0
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffc1b
jne 0x4ae21c
mov ecx, dword [esp + 0x174]
mov ebx, 1
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x90]
mov esi, dword [ecx + 0x84]
mov dword [esp + 0x170], eax
mov eax, dword [ecx + 0x74]
mov dword [esp + 0x14], esi
lea eax, [eax + edi*2]
mov dword [esp + 0x10], eax
jmp 0x4ae190
cmp ecx, 0xfffffc20
jne 0x4ae252
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], eax
jae 0x4ae0e8
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x4ae25a
cmp word [eax], 0x71
jmp 0x4ae254
test ecx, ecx
jne 0x4ae0e8
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x174]
je 0x4ae190
test ebx, ebx
jne 0x4ae28b
test ebp, ebp
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
mov edi, ecx
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edx, dword [esp + 0x10]
mov ebp, edx
movzx eax, word [edx + 2]
add eax, eax
sub ebp, eax
mov eax, 0x82
movzx ecx, word [ebp]
cmp cx, ax
jae 0x4ae2c8
cmp ecx, 0x7b
je 0x4ae2c8
mov dword [esp + 0x2c], 0
jmp 0x4ae2e1
mov ebx, dword [esp + 0x178]
lea eax, [ebx + 4]
mov ebx, dword [ebx]
mov eax, dword [eax]
mov dword [esp + 0x178], ebx
mov dword [esp + 0x2c], eax
cmp ecx, 0x77
jb 0x4ae2ef
cmp ecx, 0x7a
jbe 0x4b2a56
cmp ecx, 0x7c
je 0x4b2a56
cmp ecx, 0x7f
je 0x4ae31b
mov eax, 0x84
cmp cx, ax
je 0x4ae31b
mov eax, 0x80
cmp cx, ax
je 0x4ae31b
mov eax, 0x85
cmp cx, ax
jne 0x4ae34b
movzx ebx, word [ebp + 4]
mov eax, dword [edi + 0xa8]
lea edx, [ebx + ebx]
test eax, eax
je 0x4ae335
cmp dword [eax + 4], ebx
je 0x4b2a17
mov dword [edi + 0x94], ebx
cmp edx, dword [edi + 0x14]
jl 0x4ae3b9
mov edx, dword [esp + 0x10]
mov dword [edi + 0x40], 1
mov ebx, dword [esp + 0x170]
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x72
je 0x4ae366
cmp esi, dword [esp + 0x2c]
jne 0x4b2710
add edx, 4
cmp word [ebp], 0x7b
mov dword [esp + 0x10], edx
jne 0x4ad2e7
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov dword [edi + 0xb8], ebp
mov eax, 0xfffffc1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [esp + 0x170]
cmp edx, ecx
jle 0x4ae3e4
mov eax, dword [edi + 0xc]
lea edi, [eax + ecx*4]
lea ecx, [eax + edx*4]
cmp edi, ecx
jae 0x4ae3dd
sub ecx, edi
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
sub eax, ebx
mov ebx, dword [esp + 0x170]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, esi
sub ecx, dword [edi + 0x78]
mov eax, dword [edi + 0xc]
sar ecx, 1
mov dword [eax + edx*4 + 4], ecx
cmp ebx, edx
jg 0x4ae415
lea ebx, [edx + 2]
mov dword [esp + 0x170], ebx
mov edx, dword [esp + 0x10]
jmp 0x4ae352
cmp dword [edi + 0x44], 0
je case.0x4ad319.1
cmp esi, dword [edi + 0x78]
je case.0x4ad319.151
cmp esi, dword [edi + 0x78]
jne case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp dword [edi + 0x44], 0
je 0x4ae455
cmp esi, dword [edi + 0x78]
je case.0x4ad319.151
mov ecx, dword [edi + 0x78]
cmp esi, ecx
je 0x4ae436
cmp esi, dword [edi + 0x7c]
je case.0x4ad319.151
mov edx, dword [edi + 0x18]
test edx, edx
je 0x4ae49d
cmp esi, ecx
jbe case.0x4ad319.151
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b60c0
add esp, 0xc
test eax, eax
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edi, dword [edi + 0x1c]
lea edx, [edi + edi]
lea eax, [edx + ecx]
cmp esi, eax
jb case.0x4ad319.151
mov ecx, esi
sub ecx, edx
mov edx, dword [esp + 0x174]
mov ax, word [ecx]
cmp ax, word [edx + 0x2c]
jne case.0x4ad319.151
cmp edi, 1
mov edi, edx
je 0x4ae436
mov ax, word [ecx + 2]
cmp ax, word [edi + 0x2e]
jne case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x78]
lea eax, [eax + ecx*2]
cmp esi, eax
jmp 0x4ae430
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x16c], esi
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov ecx, dword [edi + 0x7c]
cmp esi, ecx
jae 0x4ae583
mov edx, dword [edi + 0x18]
test edx, edx
je 0x4ae550
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b6020
add esp, 0xc
test eax, eax
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edx, dword [edi + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ad319.151
mov ax, word [esi]
cmp ax, word [edi + 0x2c]
jne case.0x4ad319.151
cmp edx, 1
je 0x4ae436
mov ax, word [esi + 2]
cmp ax, word [edi + 0x2e]
jmp 0x4ae430
cmp dword [edi + 0x48], 0
jne case.0x4ad319.151
cmp dword [edi + 0x8c], 0
je 0x4ae436
cmp esi, dword [edi + 0x88]
jbe 0x4ae436
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp dword [edi + 0x48], 0
jne case.0x4ad319.151
cmp dword [edi + 0x58], 0
je case.0x4ad319.23
cmp esi, dword [edi + 0x7c]
jb case.0x4ad319.151
jmp 0x4ae58d
mov edi, dword [edi + 0x7c]
cmp esi, edi
jae 0x4ae658
mov ebp, dword [esp + 0x174]
mov edx, dword [ebp + 0x18]
lea ebx, [ebp + 0x1c]
test edx, edx
je 0x4ae61a
push 1
push ebx
push edi
mov ecx, esi
call fcn.004b6020
add esp, 0xc
test eax, eax
je case.0x4ad319.151
mov edx, dword [ebx]
mov edi, dword [ebp + 0x7c]
jmp 0x4ae64b
mov edx, dword [ebx]
mov ecx, edi
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ad319.151
mov ax, word [esi]
cmp ax, word [ebp + 0x2c]
jne case.0x4ad319.151
cmp edx, 1
je 0x4ae64b
mov ax, word [esi + 2]
cmp ax, word [ebp + 0x2e]
jne case.0x4ad319.151
lea eax, [edx + edx]
sub edi, eax
cmp esi, edi
jne case.0x4ad319.151
mov edi, dword [esp + 0x174]
jmp 0x4ae58d
cmp esi, dword [edi + 0x78]
je 0x4ae727
mov ax, word [esi - 2]
lea edx, [esi - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
cmovne edx, esi
sub edx, 2
cmp edx, dword [edi + 0x88]
jae 0x4ae698
mov dword [edi + 0x88], edx
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4ae6c3
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [edi + 0x54], 0
je 0x4ae70f
cmp ecx, 0x5f
jne 0x4ae6d3
lea edx, [ecx - 0x5e]
jmp 0x4ae729
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4ae708
cmp eax, 3
jne 0x4ae727
mov edx, 1
jmp 0x4ae729
cmp ecx, 0x100
jae 0x4ae727
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x4ae727
mov edx, 1
jmp 0x4ae729
xor edx, edx
cmp esi, dword [edi + 0x7c]
jb 0x4ae77a
cmp dword [edi + 0x8c], 0
je 0x4ae753
cmp esi, dword [edi + 0x88]
jbe 0x4ae753
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
xor ecx, ecx
mov ebx, dword [esp + 0x10]
xor ecx, edx
movzx eax, word [ebx]
add ebx, 2
mov dword [esp + 0x10], ebx
cmp eax, 5
jne 0x4ae76d
xor ecx, 1
test ecx, ecx
jne case.0x4ad319.151
jmp 0x4ad2dc
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4ae7a5
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [edi + 0x54], 0
je 0x4ae7fa
cmp ecx, 0x5f
jne 0x4ae7b7
mov ecx, 1
jmp 0x4ae755
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4ae7f0
cmp eax, 3
jne 0x4ae753
mov ecx, 1
jmp 0x4ae755
cmp ecx, 0x100
jae 0x4ae753
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x4ae753
mov ecx, 1
jmp 0x4ae755
mov edx, dword [edi + 0x18]
mov ecx, dword [edi + 0x7c]
test edx, edx
je 0x4ae846
cmp esi, ecx
jae case.0x4ad319.13
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004b6020
add esp, 0xc
test eax, eax
jne case.0x4ad319.151
jmp case.0x4ad319.13
mov edx, dword [edi + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x4ad319.13
mov ax, word [esi]
cmp ax, word [edi + 0x2c]
jne case.0x4ad319.13
cmp edx, 1
je case.0x4ad319.151
mov ax, word [esi + 2]
cmp ax, word [edi + 0x2e]
je case.0x4ad319.151
mov eax, dword [edi + 0x7c]
cmp esi, eax
jae 0x4b2a86
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, eax
jae 0x4ae436
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4ae436
mov edx, dword [esp + 0x10]
add esi, 2
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
mov edx, dword [esp + 0x10]
add esi, 2
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4ae91d
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4ae436
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 4
jmp 0x4ae430
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4ae976
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ad319.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 4
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4ae9e0
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4ae436
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
jmp 0x4ae430
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aea39
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ad319.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aeaa3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x4ae436
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
jmp 0x4ae430
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aeafc
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x4ad319.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov edi, dword [edi + 0x7c]
cmp esi, edi
jae 0x4b2ab2
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aeb60
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
cmp ecx, 0xd
ja 0x4aebc0
je 0x4aeb8e
cmp ecx, 0xa
je 0x4aeb71
lea eax, [ecx - 0xb]
jmp 0x4aebce
mov edi, dword [esp + 0x174]
mov esi, edx
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov esi, edx
mov dword [esp + 0x14], esi
cmp edx, edi
jae 0x4aeba9
cmp word [edx], 0xa
mov dword [esp + 0x14], esi
jne 0x4aeba9
lea esi, [edx + 2]
mov dword [esp + 0x14], esi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x174]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp ecx, 0x85
je 0x4aebd7
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ad319.151
mov edi, dword [esp + 0x174]
mov esi, edx
mov dword [esp + 0x14], esi
cmp dword [edi + 0x68], 0
jmp 0x4ae430
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aec2e
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4aec88
je case.0x4ad319.151
cmp ecx, 0xa0
ja 0x4aec6c
je case.0x4ad319.151
cmp ecx, 9
je case.0x4ad319.151
cmp ecx, 0x20
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp ecx, 0x1680
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp ecx, 0x205f
ja 0x4aecca
je case.0x4ad319.151
cmp ecx, 0x2000
jb 0x4ae436
cmp ecx, 0x200a
jbe case.0x4ad319.151
cmp ecx, 0x202f
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp ecx, 0x3000
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aed27
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4aed5f
je 0x4ae436
cmp ecx, 0xa0
ja 0x4aed54
je 0x4ae436
cmp ecx, 9
je 0x4ae436
cmp ecx, 0x20
jmp 0x4ae430
cmp ecx, 0x1680
jmp 0x4ae430
cmp ecx, 0x205f
ja 0x4aed90
je 0x4ae436
cmp ecx, 0x2000
jb case.0x4ad319.151
cmp ecx, 0x200a
jbe 0x4ae436
cmp ecx, 0x202f
jmp 0x4ae430
cmp ecx, 0x3000
jmp 0x4ae430
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aeddc
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4aee0c
je case.0x4ad319.151
cmp ecx, 0xa
jb 0x4ae436
cmp ecx, 0xd
jbe case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp ecx, 0x2028
jb 0x4ae436
cmp ecx, 0x2029
jbe case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aee75
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4aee9f
je 0x4ae436
lea eax, [ecx - 0xa]
cmp eax, 3
ja case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4aeeff
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov ebx, dword [esp + 0x10]
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx ecx, word [ebx + 2]
cmp ecx, 8
ja case.default.0x4aef2e
jmp dword [ecx*4 + 0x4b4c08]
cmp dword [esp + 0x1c], 0xf
jmp 0x4af071
mov al, byte [eax*8 + 0x4c9f71]
cmp al, 9
je 0x4af060
cmp al, 5
je 0x4af060
cmp al, 8
je 0x4af060
xor ecx, ecx
jmp 0x4af065
movzx ecx, byte [eax*8 + 0x4c9f71]
xor edx, edx
movzx eax, word [ebx + 4]
cmp eax, dword [ecx*4 + 0x4cd630]
setne dl
xor eax, eax
cmp dword [esp + 0x1c], 0x10
sete al
cmp edx, eax
jmp 0x4af071
movzx eax, byte [eax*8 + 0x4c9f71]
mov edx, dword [esp + 0x10]
xor ecx, ecx
cmp word [edx + 4], ax
setne cl
xor eax, eax
cmp dword [esp + 0x1c], 0x10
sete al
cmp ecx, eax
je case.0x4ad319.151
add edx, 6
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
movzx eax, byte [eax*8 + 0x4c9f70]
jmp 0x4aef96
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4af060
cmp eax, 3
je 0x4af060
xor ecx, ecx
jmp 0x4af065
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 6
je 0x4af060
cmp edx, 9
je 0x4af060
cmp edx, 0xa
je 0x4af060
cmp edx, 0xc
je 0x4af060
cmp edx, 0xd
je 0x4af060
xor ecx, ecx
jmp 0x4af065
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 6
je 0x4af060
cmp edx, 9
je 0x4af060
cmp edx, 0xa
je 0x4af060
cmp edx, 0xb
jmp 0x4af00d
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4af060
cmp eax, 3
je 0x4af060
cmp edx, 0x5f
je 0x4af060
xor ecx, ecx
jmp 0x4af065
mov ecx, 1
xor eax, eax
cmp dword [esp + 0x1c], 0xf
sete al
cmp ecx, eax
je case.0x4ad319.151
mov edx, dword [esp + 0x10]
add edx, 6
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov ebx, dword [edi + 0x7c]
cmp esi, ebx
jae 0x4b2a86
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af0ca
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
je case.0x4ad319.151
cmp esi, ebx
jae 0x4ae436
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af13b
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
jne 0x4aeba5
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4af106
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x174]
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x4ad2e0
mov ebx, dword [esp + 0x10]
xor edx, edx
cmp dword [esp + 0x1c], 0x6e
sete dl
movzx eax, word [ebx + 2]
add ebx, 4
mov dword [esp + 0x24], edx
mov dword [esp + 0x10], ebx
lea ecx, [eax + eax]
mov dword [esp + 0x2c], ecx
cmp ecx, dword [esp + 0x170]
jge 0x4af1d0
mov eax, dword [edi + 0xc]
mov edi, dword [eax + ecx*4]
test edi, edi
js 0x4af1d0
mov ebp, dword [eax + ecx*4 + 4]
sub ebp, edi
jmp 0x4af1e1
mov eax, dword [esp + 0x174]
mov ebp, dword [eax + 0x50]
neg ebp
sbb ebp, ebp
neg ebp
dec ebp
movzx edi, word [ebx]
mov ebx, edi
lea eax, [ebx - 0x62]
cmp eax, 7
ja case.default.0x4af1f9
movzx eax, byte [eax + 0x4b4c34]
jmp dword [eax*4 + 0x4b4c2c]
mov eax, dword [esp + 0x28]
movsx edi, byte [ebx + str.space]
add eax, 6
mov dword [esp + 0x10], eax
mov eax, ebx
movsx ebx, byte [ebx + 0x4be1ba]
and eax, 1
mov dword [esp + 0x38], eax
test ebx, ebx
mov eax, SysReAllocString
cmove ebx, eax
jmp 0x4af254
xor eax, eax
cmp edi, 0x69
sete al
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x28]
movzx ebx, word [eax + 8]
movzx edi, word [eax + 6]
test ebx, ebx
cmove ebx, dword [esp + 0x44]
add eax, 0xa
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], ebx
test ebp, ebp
je 0x4ad2d5
jns 0x4af26a
test edi, edi
je 0x4ad2d5
mov ebx, 1
cmp edi, ebx
jl 0x4af2a2
push edx
push dword [esp + 0x178]
mov edx, esi
push ebp
call fcn.004ad030
add esp, 0xc
test eax, eax
js 0x4b2ae5
mov ecx, dword [esp + 0x2c]
lea esi, [esi + eax*2]
mov edx, dword [esp + 0x24]
inc ebx
mov dword [esp + 0x14], esi
cmp ebx, edi
jle 0x4af273
mov eax, dword [esp + 0x28]
cmp edi, eax
je 0x4ad2d5
cmp dword [esp + 0x38], 0
je 0x4b2b04
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov ebx, dword [esp + 0x2c]
nop dword [eax + eax]
cmp edi, dword [esp + 0x28]
jge case.0x4ad319.151
push dword [esp + 0x24]
mov edx, esi
mov ecx, ebx
push dword [esp + 0x178]
push ebp
call fcn.004ad030
add esp, 0xc
test eax, eax
js 0x4b2ae5
mov edx, dword [esp + 0x10]
lea esi, [esi + eax*2]
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
inc edi
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4af300
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
push edx
push edi
push ebp
mov edx, esi
call fcn.004ad030
add esp, 0xc
test eax, eax
js 0x4b2bd3
lea esi, [esi + eax*2]
mov dword [esp + 0x14], esi
jmp 0x4ad2dc
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 0x22]
lea ebp, [eax + 2]
add eax, 0x22
mov dword [esp + 0x40], ebp
mov ecx, edx
mov dword [esp + 0x10], eax
lea eax, [ecx - 0x62]
cmp eax, 7
ja case.default.0x4af3c3
movzx eax, byte [eax + 0x4b4c44]
jmp dword [eax*4 + 0x4b4c3c]
movsx edi, byte [ecx + str.space]
mov ebx, ecx
movsx ecx, byte [ecx + 0x4be1ba]
and ebx, 1
mov edx, dword [esp + 0x10]
test ecx, ecx
mov eax, SysReAllocString
mov dword [esp + 0x30], ebx
cmove ecx, eax
mov eax, 2
jmp 0x4af41d
xor eax, eax
cmp edx, 0x69
mov edx, dword [esp + 0x10]
sete al
mov dword [esp + 0x30], eax
mov eax, SysReAllocString
movzx ecx, word [edx + 4]
movzx edi, word [edx + 2]
test ecx, ecx
cmove ecx, eax
mov eax, 6
add edx, eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x10], edx
cmp edi, 1
jl 0x4af4c8
jmp 0x4af447
mov edi, 1
mov dword [esp + 0x28], 1
mov dword [esp + 0x24], edi
mov ebx, 1
nop dword [eax]
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b2ab9
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af498
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add edx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp edx, 0xff
jbe 0x4af4a7
cmp dword [esp + 0x1c], 0x6a
jmp 0x4af4b9
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
test byte [edx + ebp], al
je case.0x4ad319.151
inc ebx
cmp ebx, edi
jle 0x4af450
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x28]
cmp edi, ebx
jne 0x4b2bee
mov edi, dword [esp + 0x174]
jmp 0x4ad2e0
mov edi, dword [esp + 0x10]
movzx eax, word [edi + 2]
lea ebp, [edi + 4]
movzx edx, word [edi + eax*2]
lea edi, [edi + eax*2]
mov ecx, edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x10], edi
lea eax, [ecx - 0x62]
cmp eax, 7
ja case.default.0x4af50b
movzx eax, byte [eax + 0x4b4c54]
jmp dword [eax*4 + 0x4b4c4c]
movsx eax, byte [ecx + 0x4be1ba]
mov edx, ecx
movsx ebx, byte [ecx + str.space]
add edi, 2
and edx, 1
mov dword [esp + 0x10], edi
mov dword [esp + 0x30], edx
mov dword [esp + 0x28], eax
test eax, eax
jne 0x4af57a
mov dword [esp + 0x28], connect
jmp 0x4af57a
movzx ebx, word [edi + 2]
xor eax, eax
cmp edx, 0x69
mov ecx, SysReAllocString
sete al
mov dword [esp + 0x30], eax
movzx eax, word [edi + 4]
test eax, eax
cmove eax, ecx
add edi, 6
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edi
jmp 0x4af57a
mov dword [esp + 0x28], 1
mov ebx, 1
mov edi, 1
cmp ebx, edi
jl 0x4af5f1
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b2ab9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af5d8
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
push 1
mov edx, ebp
call fcn.004b61a0
add esp, 4
test eax, eax
je case.0x4ad319.151
inc edi
cmp edi, ebx
jle 0x4af590
mov edi, dword [esp + 0x28]
cmp ebx, edi
je 0x4ad2d5
cmp dword [esp + 0x30], 0
je 0x4b2e65
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp ebx, edi
jge case.0x4ad319.151
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b2ab9
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af68b
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
push 1
mov edx, ebp
call fcn.004b61a0
add esp, 4
test eax, eax
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4af643
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebx, dword [esp + 0x10]
mov ecx, 0xfc00
add ebx, 2
xor edx, edx
mov ax, word [ebx]
and ax, cx
mov ecx, 0xd800
cmp ax, cx
mov ecx, dword [edi + 0x7c]
mov eax, ecx
sete dl
sub eax, esi
inc edx
sar eax, 1
cmp edx, eax
jg 0x4b2fa3
movzx ecx, word [ebx]
dec edx
movzx eax, word [esi]
add ebx, 2
add esi, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
cmp cx, ax
jne case.0x4ad319.151
test edx, edx
jg 0x4af717
jmp 0x4ad2dc
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
mov ecx, dword [esp + 0x10]
add ecx, 2
movzx edi, word [ecx]
lea edx, [ecx + 2]
mov eax, edi
mov dword [esp + 0x10], edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4af786
movzx eax, word [edx]
and edi, 0x3ff
and eax, 0x3ff
shl edi, 0xa
or edi, eax
mov ebx, 4
add edi, 0x10000
jmp 0x4af78b
mov ebx, 2
movzx eax, word [esi]
cmp edi, 0x80
jae 0x4af7d5
mov ebx, 0xff
mov ecx, eax
cmp ax, bx
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x34]
ja 0x4af7b2
movzx ecx, byte [eax + ecx]
jmp 0x4af7b6
mov dword [esp + 0x10], edx
movzx eax, byte [eax + edi]
cmp eax, ecx
jne case.0x4ad319.151
mov edi, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
jmp 0x4ad2e0
mov edx, eax
add esi, 2
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4af80a
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
lea eax, [ecx + ebx]
mov ebx, dword [esp + 0x170]
mov dword [esp + 0x10], eax
cmp edi, edx
je 0x4ad2c2
mov eax, edi
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edi
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
mov eax, dword [eax*8 + 0x4c9f74]
add eax, edi
cmp edx, eax
jne case.0x4ad319.151
jmp 0x4ad2d5
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
lea edi, [ecx + 4]
mov ebp, eax
jmp 0x4af92c
mov dword [esp + 0x38], 1
mov ebx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x24], ebp
movzx eax, word [ebx + 2]
mov dword [esp + 0x1c], eax
cmp ecx, 0x28
je 0x4af88e
mov dword [esp + 0x30], ebp
cmp ecx, 0x35
jne 0x4af896
mov dword [esp + 0x30], 1
lea edi, [ebx + 4]
jmp 0x4af934
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], connect
jmp 0x4af930
mov edi, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], connect
jmp 0x4af930
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], 1
jmp 0x4af930
mov edi, dword [esp + 0x10]
cmp edx, 0x2e
mov ecx, edx
sbb eax, eax
add edi, 2
and eax, 0xfffffff3
add eax, 0x2e
sub ecx, eax
mov eax, ecx
and ecx, 1
mov dword [esp + 0x30], ecx
mov ecx, SysReAllocString
movsx ebp, byte [eax + 0x4be224]
movsx eax, byte [eax + 0x4be21c]
test eax, eax
cmove eax, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebp
movzx ebx, word [edi]
mov ecx, 1
mov eax, ebx
mov dword [esp + 0x20], edi
and eax, 0xfc00
mov dword [esp + 0x18], ecx
cmp eax, 0xd800
jne 0x4af975
movzx eax, word [edi + 2]
and ebx, 0x3ff
and eax, 0x3ff
shl ebx, 0xa
or ebx, eax
mov ecx, 2
add ebx, 0x10000
mov dword [esp + 0x18], ecx
lea eax, [edi + ecx*2]
mov dword [esp + 0x10], eax
cmp ecx, 1
jbe 0x4afd4a
cmp edx, 0x2e
jb 0x4af9c4
mov eax, ebx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, ebx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
mov ecx, dword [eax*8 + 0x4c9f74]
add ecx, ebx
cmp ecx, ebx
je 0x4af9c4
lea edx, [esp + 0x74]
call fcn.004b5fc0
mov dword [esp + 0x2c], eax
jmp 0x4af9cc
mov dword [esp + 0x2c], 0
mov edi, dword [esp + 0x24]
mov ebp, 1
cmp edi, ebp
jl 0x4afb0c
mov eax, dword [esp + 0x174]
mov edx, dword [esp + 0x18]
mov ecx, dword [eax + 0x7c]
mov eax, ecx
lea ebx, [edx + edx]
mov dword [esp + 0x28], ecx
sub eax, ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], eax
nop
cmp esi, eax
ja 0x4afa6d
lea edi, [edx + edx]
mov ecx, esi
mov edx, dword [esp + 0x20]
sub edi, 4
jb 0x4afa23
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4afa2c
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4afa12
cmp edi, 0xfffffffc
je 0x4afae9
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4afa69
cmp edi, 0xfffffffd
je 0x4afae9
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4afa69
cmp edi, 0xfffffffe
je 0x4afae9
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4afa69
cmp edi, 0xffffffff
je 0x4afae9
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4afae9
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
test edx, edx
jle 0x4b2ae5
lea ebx, [edx + edx]
mov eax, ecx
sub eax, ebx
cmp esi, eax
ja 0x4b2ae5
lea edi, [edx + edx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4afaa7
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4afaac
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4afa96
cmp edi, 0xfffffffc
je 0x4afae9
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b2ae5
cmp edi, 0xfffffffd
je 0x4afae9
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b2ae5
cmp edi, 0xfffffffe
je 0x4afae9
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b2ae5
cmp edi, 0xffffffff
je 0x4afae9
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4b2ae5
mov edi, dword [esp + 0x24]
add esi, ebx
mov eax, dword [esp + 0x48]
inc ebp
mov ebx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
cmp ebp, edi
jle 0x4afa00
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x170]
cmp edi, ebp
je 0x4ad2c2
cmp dword [esp + 0x30], 0
jne 0x4b2fbd
mov ebx, esi
mov dword [esp + 0x30], ebx
cmp edi, ebp
jge 0x4afc61
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x7c]
mov ebp, eax
lea ebx, [ecx + ecx]
mov dword [esp + 0x28], eax
mov dword [esp + 0x40], ebx
sub ebp, ebx
cmp esi, ebp
ja 0x4afbbe
mov edx, dword [esp + 0x20]
lea edi, [ecx + ecx]
mov ecx, esi
sub edi, 4
jb 0x4afb78
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4afb81
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4afb67
cmp edi, 0xfffffffc
je 0x4afc38
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4afbba
cmp edi, 0xfffffffd
je 0x4afc38
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4afbba
cmp edi, 0xfffffffe
je 0x4afc38
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4afbba
cmp edi, 0xffffffff
je 0x4afc38
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4afc38
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x4afd10
lea ebx, [ecx + ecx]
sub eax, ebx
cmp esi, eax
ja 0x4afd10
lea edi, [ecx + ecx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4afbf6
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4afbfb
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4afbe5
cmp edi, 0xfffffffc
je 0x4afc38
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4afd10
cmp edi, 0xfffffffd
je 0x4afc38
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4afd10
cmp edi, 0xfffffffe
je 0x4afc38
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4afd10
cmp edi, 0xffffffff
je 0x4afc38
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4afd10
mov edi, dword [esp + 0x24]
add esi, ebx
mov ebx, dword [esp + 0x40]
inc edi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
mov dword [esp + 0x24], edi
cmp edi, dword [esp + 0x1c]
jl 0x4afb55
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ad2dc
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop word [eax + eax]
mov ecx, esi
cmp esi, ebx
je case.0x4ad319.151
mov ax, word [esi - 2]
sub esi, 2
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4afcd6
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4afcb0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4afd41
cmp esi, dword [edi + 0x7c]
jb 0x4afd41
cmp esi, dword [edi + 0x88]
jbe 0x4afd41
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
mov ebx, dword [esp + 0x30]
jmp 0x4afc68
cmp edx, 0x2e
jb 0x4afeb8
cmp ebx, 0x7f
jbe 0x4afd81
mov eax, ebx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, ebx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
mov edi, dword [eax*8 + 0x4c9f74]
add edi, ebx
jmp 0x4afd9b
cmp ebx, 0xff
ja 0x4afd99
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x38]
movzx edi, byte [eax + ebx]
jmp 0x4afd9b
mov edi, ebx
mov ecx, 1
cmp ebp, ecx
jl 0x4afdd3
mov eax, dword [esp + 0x174]
mov edx, dword [eax + 0x7c]
nop
cmp esi, edx
jae 0x4b2ab2
movzx eax, word [esi]
cmp ebx, eax
je 0x4afdc7
cmp edi, eax
jne case.0x4ad319.151
add esi, 2
inc ecx
mov dword [esp + 0x14], esi
cmp ecx, ebp
jle 0x4afdb0
mov eax, dword [esp + 0x1c]
cmp ebp, eax
je 0x4ad2d5
cmp dword [esp + 0x30], 0
jne 0x4b3179
mov edx, dword [esp + 0x24]
mov ebp, esi
cmp edx, eax
jge 0x4afe21
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop
cmp esi, ecx
jae 0x4afe87
movzx eax, word [esi]
cmp ebx, eax
je 0x4afe13
cmp edi, eax
jne 0x4afe21
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, dword [esp + 0x1c]
jl 0x4afe00
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ad2dc
cmp esi, ebp
jb case.0x4ad319.151
nop dword [eax + eax]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
sub esi, 2
test eax, eax
jne 0x4b28a6
cmp esi, ebp
jae 0x4afe40
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4afe28
cmp esi, dword [edi + 0x88]
jbe 0x4afe28
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
jmp 0x4afe28
mov edi, dword [esp + 0x174]
mov ecx, 1
cmp ebp, ecx
jl 0x4afeef
mov edx, dword [edi + 0x7c]
nop dword [eax + eax]
cmp esi, edx
jae 0x4b2a86
movzx eax, word [esi]
add esi, 2
mov dword [esp + 0x14], esi
cmp ebx, eax
jne case.0x4ad319.151
inc ecx
cmp ecx, ebp
jle 0x4afed0
mov edx, dword [esp + 0x1c]
cmp ebp, edx
je 0x4ad2dc
cmp dword [esp + 0x30], 0
jne 0x4b321d
mov edi, esi
cmp ebp, edx
jge 0x4aff5b
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4aff2f
movzx eax, word [esi]
cmp ebx, eax
jne 0x4aff5b
add esi, 2
inc ebp
mov dword [esp + 0x14], esi
cmp ebp, edx
jl 0x4aff16
jmp 0x4aff5b
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4aff5b
cmp esi, dword [eax + 0x88]
jbe 0x4aff5b
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b4476
cmp dword [esp + 0x38], 0
jne 0x4ad2d5
cmp esi, edi
jb case.0x4ad319.151
nop
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
sub esi, 2
test eax, eax
jne 0x4b28a6
cmp esi, edi
jae 0x4aff70
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx edi, word [esi]
add esi, 2
mov ecx, dword [esp + 0x10]
mov eax, edi
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b0002
movzx eax, word [esi]
and edi, 0x3ff
and eax, 0x3ff
shl edi, 0xa
add esi, 2
or edi, eax
mov dword [esp + 0x14], esi
add edi, 0x10000
movzx edx, word [ecx + 2]
lea eax, [ecx + 4]
mov dword [esp + 0x10], eax
cmp ebp, 0x20
jne 0x4b0069
cmp edx, 0x7f
jbe 0x4b0040
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
mov eax, dword [eax*8 + 0x4c9f74]
add eax, edx
jmp 0x4b005a
cmp edx, 0xff
ja 0x4b0058
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x38]
movzx eax, byte [eax + edx]
jmp 0x4b005a
mov eax, edx
cmp edx, edi
je case.0x4ad319.151
cmp eax, edi
jmp 0x4ad2cf
mov dword [esp + 0x10], eax
cmp edx, edi
jmp 0x4ad2cf
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
add ecx, 4
mov dword [esp + 0x1c], eax
mov ebx, eax
jmp 0x4b0153
mov edx, dword [esp + 0x10]
xor ebx, ebx
movzx eax, word [edx + 2]
mov dword [esp + 0x1c], eax
cmp ecx, 0x42
je 0x4b00a6
mov dword [esp + 0x30], ebx
cmp ecx, 0x4f
jne 0x4b00ae
mov dword [esp + 0x30], 1
lea ecx, [edx + 4]
jmp 0x4b0153
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
add ecx, 2
jmp 0x4b014b
mov ecx, dword [esp + 0x10]
mov ebx, 1
mov dword [esp + 0x38], 1
add ecx, 2
jmp 0x4b014b
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
add ecx, 2
mov dword [esp + 0x1c], 1
jmp 0x4b0153
mov ecx, dword [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x38], 1
movzx eax, word [ecx + 2]
add ecx, 4
mov dword [esp + 0x1c], eax
jmp 0x4b0153
mov ecx, dword [esp + 0x10]
cmp edx, 0x48
sbb eax, eax
add ecx, 2
and eax, 0xfffffff3
add eax, 0x48
sub edx, eax
mov eax, edx
and edx, 1
mov dword [esp + 0x30], edx
movsx ebx, byte [eax + 0x4be224]
movsx eax, byte [eax + 0x4be21c]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x4b0153
mov dword [esp + 0x1c], connect
movzx edi, word [ecx]
lea edx, [ecx + 2]
mov dword [esp + 0x24], edi
mov dword [esp + 0x10], edx
cmp ebp, 0x48
jb 0x4b0390
cmp edi, 0x7f
jbe 0x4b0198
mov eax, edi
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edi
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
mov ebp, dword [eax*8 + 0x4c9f74]
add ebp, edi
jmp 0x4b01b2
cmp edi, 0xff
ja 0x4b01b0
mov ecx, dword [esp + 0x174]
mov eax, dword [ecx + 0x38]
movzx ebp, byte [eax + edi]
jmp 0x4b01b9
mov ebp, edi
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x2c], ebp
cmp ebx, 1
jl 0x4b022f
mov edi, dword [ecx + 0x7c]
mov edx, 1
nop word [eax + eax]
cmp esi, edi
jae 0x4b32b0
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0210
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x24], ecx
je case.0x4ad319.151
cmp ebp, ecx
je case.0x4ad319.151
inc edx
cmp edx, ebx
jle 0x4b01d0
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
cmp ebx, eax
je 0x4af4d4
cmp dword [esp + 0x30], 0
jne 0x4b32e3
mov ebp, esi
cmp ebx, eax
jge 0x4b02ad
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b0357
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0293
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp dword [esp + 0x24], ecx
je 0x4b02ad
cmp dword [esp + 0x2c], ecx
je 0x4b02ad
inc ebx
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebx, dword [esp + 0x1c]
jl 0x4b0256
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ad2dc
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ad319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b031d
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b02f6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b02b4
cmp esi, dword [edi + 0x88]
jbe 0x4b02b4
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
jmp 0x4b02b4
mov ebp, dword [esp + 0x174]
mov edx, 1
cmp ebx, edx
jl 0x4b03f6
mov edi, dword [ebp + 0x7c]
cmp esi, edi
jae 0x4b33e7
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b03e3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x24], ecx
je case.0x4ad319.151
inc edx
cmp edx, ebx
jle 0x4b03a3
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
cmp ebx, eax
je 0x4af4d4
cmp dword [esp + 0x30], 0
jne 0x4b3413
mov ebp, esi
cmp ebx, eax
jge 0x4b0472
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b0521
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b045e
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp dword [esp + 0x24], ecx
je 0x4b0472
inc ebx
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebx, dword [esp + 0x1c]
jl 0x4b0421
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ad2dc
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop dword [eax + eax]
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ad319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b04e7
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b04c0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b0479
cmp esi, dword [edi + 0x88]
jbe 0x4b0479
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
jmp 0x4b0479
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], 1
movzx eax, word [ecx + 2]
mov ebp, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebp
lea eax, [ecx + 4]
jmp 0x4b064d
mov edx, dword [esp + 0x10]
xor ebx, ebx
xor ebp, ebp
cmp ecx, 0x5c
mov dword [esp + 0x24], ebp
sete bl
movzx eax, word [edx + 2]
mov dword [esp + 0x20], eax
lea eax, [edx + 4]
mov dword [esp + 0x30], ebx
jmp 0x4b064d
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
jmp 0x4b0645
mov eax, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
jmp 0x4b0645
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], 1
jmp 0x4b064d
mov ecx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
mov dword [esp + 0x24], ebp
movzx eax, word [ecx + 2]
mov dword [esp + 0x20], eax
lea eax, [ecx + 4]
jmp 0x4b064d
mov eax, dword [esp + 0x10]
lea ecx, [edx - 1]
movsx ebp, byte [edx + 0x4be1cf]
and ecx, 1
mov dword [esp + 0x30], ecx
add eax, 2
movsx ecx, byte [edx + 0x4be1c7]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ecx
test ecx, ecx
jne 0x4b064d
mov dword [esp + 0x20], connect
movzx edi, word [eax]
lea edx, [eax + 2]
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], edx
cmp edi, 0x10
je 0x4b0672
cmp edi, 0xf
je 0x4b0672
mov ebx, dword [esp + 0x34]
or eax, 0xffffffff
mov dword [esp + 0x2c], eax
jmp 0x4b0698
movzx ecx, word [edx]
lea eax, [edx + 2]
movzx edx, word [eax]
xor ebx, ebx
cmp edi, 0xf
mov dword [esp + 0x3c], edx
mov dword [esp + 0x2c], ecx
sete bl
add eax, 2
mov dword [esp + 0x10], eax
mov eax, ecx
mov dword [esp + 0x34], ebx
test ebp, ebp
jle 0x4b0b25
test eax, eax
js 0x4b0cdd
cmp eax, 8
ja case.default.0x4aef2e
jmp dword [eax*4 + 0x4b4c5c]
test ebx, ebx
jne case.0x4ad319.151
lea edx, [ebx + 1]
mov ebx, dword [esp + 0x174]
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
mov ecx, esi
cmp esi, edi
jae 0x4b4449
movzx eax, word [esi]
add esi, 2
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b06fc
lea esi, [ecx + 4]
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b06d5
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0761
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
mov al, byte [eax*8 + 0x4c9f71]
cmp al, 9
je 0x4b0794
cmp al, 5
je 0x4b0794
cmp al, 8
je 0x4b0794
xor eax, eax
jmp 0x4b0799
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b0721
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0810
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov ebx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], ebx
mov ebx, dword [esp + 0x174]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b07d0
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
nop
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b08c0
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
mov ebx, dword [esp + 0x174]
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b0880
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0967
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
mov ebx, dword [esp + 0x174]
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f70]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b0927
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
nop
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0a10
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4b0a49
cmp eax, 3
je 0x4b0a49
xor eax, eax
jmp 0x4b0a4e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b09d0
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov edi, 1
cmp ebp, edi
jl 0x4b0b21
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b2ab2
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0ac1
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 6
je 0x4b0b09
cmp edx, 9
je 0x4b0b09
cmp edx, 0xa
je 0x4b0b09
cmp edx, 0xc
je 0x4b0b09
cmp edx, 0xd
je 0x4b0b09
xor eax, eax
jmp 0x4b0b0e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
inc edi
cmp edi, ebp
jle 0x4b0a81
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x174]
mov edx, dword [esp + 0x20]
cmp ebp, edx
je 0x4ad2d5
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0x2c]
jne 0x4b36a1
mov ebx, esi
mov dword [esp + 0x1c], ebx
test eax, eax
js 0x4b1be8
cmp eax, 8
ja case.default.0x4aef2e
jmp dword [eax*4 + 0x4b4c80]
mov edi, 1
cmp ebp, edi
jl 0x4b0b21
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b2ab2
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0bb8
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 6
je 0x4b0c05
cmp edx, 9
je 0x4b0c05
cmp edx, 0xa
je 0x4b0c05
cmp edx, 0xb
je 0x4b0c05
cmp edx, 0xc
je 0x4b0c05
cmp edx, 0xd
je 0x4b0c05
xor eax, eax
jmp 0x4b0c0a
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
inc edi
cmp edi, ebp
jle 0x4b0b78
jmp 0x4b0b21
mov edi, 1
cmp ebp, edi
jl 0x4b0b21
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
nop dword [eax]
cmp esi, ebx
jae 0x4b2ab2
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0c80
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4b0cc0
cmp eax, 3
je 0x4b0cc0
cmp edx, 0x5f
je 0x4b0cc0
xor eax, eax
jmp 0x4b0cc5
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
inc edi
cmp edi, ebp
jle 0x4b0c40
jmp 0x4b0b21
cmp edi, 0x16
jne 0x4b0e11
mov ebx, dword [esp + 0x174]
mov ebp, 1
cmp dword [esp + 0x24], ebp
jl 0x4b1515
nop dword [eax]
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
mov esi, edx
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x4b0d43
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
add esi, 2
or ecx, eax
mov dword [esp + 0x14], esi
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
je case.0x4ad319.151
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b0df9
mov ebx, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0db7
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
jne 0x4b0dee
lea esi, [ebx + edx*2]
mov ebx, esi
cmp esi, edi
jb 0x4b0d82
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x24]
jle 0x4b0d00
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4aef2e
jmp dword [eax*4 + 0x4b4ca4]
mov ebx, dword [esp + 0x174]
mov edi, 1
cmp ebp, edi
jl 0x4b0ec8
mov ecx, dword [ebx + 0x7c]
nop dword [eax + eax]
cmp esi, ecx
jae 0x4b4449
mov edx, dword [ebx + 0x18]
lea eax, [ebx + 0x1c]
test edx, edx
je 0x4b0e6a
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b6020
add esp, 0xc
test eax, eax
jne case.0x4ad319.151
jmp 0x4b0e95
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b0e95
mov ax, word [esi]
cmp ax, word [ebx + 0x2c]
jne 0x4b0e95
cmp edx, 1
je case.0x4ad319.151
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x2e]
je case.0x4ad319.151
mov ecx, dword [ebx + 0x7c]
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, ecx
jae 0x4b0ebf
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b0ebf
add esi, 2
mov dword [esp + 0x14], esi
inc edi
cmp edi, ebp
jle 0x4b0e40
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov ecx, 1
cmp ebp, ecx
jl 0x4b0b2c
mov edx, dword [ebx + 0x7c]
cmp esi, edx
jae 0x4b4449
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edx
jae 0x4b0f11
mov ax, word [esi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x68]
jne 0x4b0f11
add esi, 2
mov dword [esp + 0x14], esi
inc ecx
cmp ecx, ebp
jle 0x4b0ee8
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
lea ecx, [ebp*2]
mov eax, dword [ebx + 0x7c]
sub eax, ecx
cmp esi, eax
ja case.0x4ad319.151
add esi, ecx
mov dword [esp + 0x14], esi
jmp 0x4b0b2c
mov edi, 1
cmp ebp, edi
jl 0x4b0b21
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b2ab9
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b0f90
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
cmp ecx, 0xd
ja 0x4b0fdc
je 0x4b0fb8
cmp ecx, 0xa
je 0x4b0fa1
lea eax, [ecx - 0xb]
jmp 0x4b0fea
mov esi, edx
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x174]
inc edi
cmp edi, ebp
jle 0x4b0f58
jmp 0x4b0b21
mov esi, edx
mov dword [esp + 0x14], esi
cmp edx, ebx
jae 0x4b0fa7
cmp word [edx], 0xa
mov eax, dword [esp + 0x174]
mov dword [esp + 0x14], esi
jne 0x4b0fae
lea esi, [edx + 2]
mov dword [esp + 0x14], esi
jmp 0x4b0fae
cmp ecx, 0x85
je 0x4b0ff3
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ad319.151
mov eax, dword [esp + 0x174]
mov esi, edx
mov dword [esp + 0x14], esi
cmp dword [eax + 0x68], 0
jne case.0x4ad319.151
jmp 0x4b0fae
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1063
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4b1095
je case.0x4ad319.151
cmp ecx, 0xa0
ja 0x4b108d
je case.0x4ad319.151
cmp ecx, 9
je case.0x4ad319.151
cmp ecx, 0x20
jmp 0x4b10c5
cmp ecx, 0x1680
jmp 0x4b10c5
cmp ecx, 0x205f
ja 0x4b10bf
je case.0x4ad319.151
cmp ecx, 0x2000
jb 0x4b10cb
cmp ecx, 0x200a
jbe case.0x4ad319.151
cmp ecx, 0x202f
jmp 0x4b10c5
cmp ecx, 0x3000
je case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b1023
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1134
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x4b115a
je 0x4b118c
cmp ecx, 0xa0
ja 0x4b1152
je 0x4b118c
cmp ecx, 9
je 0x4b118c
cmp ecx, 0x20
jmp 0x4b1186
cmp ecx, 0x1680
jmp 0x4b1186
cmp ecx, 0x205f
ja 0x4b1180
je 0x4b118c
cmp ecx, 0x2000
jb case.0x4ad319.151
cmp ecx, 0x200a
jbe 0x4b118c
cmp ecx, 0x202f
jmp 0x4b1186
cmp ecx, 0x3000
jne case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b10f4
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b11f5
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4b120d
je case.0x4ad319.151
cmp ecx, 0xa
jb 0x4b1221
cmp ecx, 0xd
jmp 0x4b121b
cmp ecx, 0x2028
jb 0x4b1221
cmp ecx, 0x2029
jbe case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b11b5
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1286
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x4b1298
je 0x4b12a7
lea eax, [ecx - 0xa]
cmp eax, 3
jmp 0x4b12a1
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b1246
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1310
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x80
jae 0x4b1325
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
jne case.0x4ad319.151
inc edx
cmp edx, ebp
jle 0x4b12d0
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
nop word [eax + eax]
cmp esi, edi
jae 0x4b4449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ad319.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
je case.0x4ad319.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b1350
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae 0x4b13c8
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
jne case.0x4ad319.151
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b13ef
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4b13ef
add esi, 2
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b13a4
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ad319.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
je case.0x4ad319.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b1414
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x4b0b2c
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae 0x4b148c
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x4ad319.151
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b14b3
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4b14b3
add esi, 2
mov dword [esp + 0x14], esi
inc edx
cmp edx, ebp
jle 0x4b1468
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov edx, 1
cmp ebp, edx
jl 0x4b0b25
mov ebx, dword [esp + 0x174]
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4b4449
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x4ad319.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
je case.0x4ad319.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x4b14d8
mov edi, dword [esp + 0x18]
jmp 0x4b0b2c
mov ebp, dword [esp + 0x24]
jmp 0x4b0b2c
mov edi, dword [esp + 0x174]
cmp ebp, edx
jge 0x4b1b45
mov edx, dword [edi + 0x7c]
cmp esi, edx
jae 0x4b1620
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
cmp dword [esp + 0x34], 0
movzx ecx, ax
jne 0x4b1b45
xor eax, eax
cmp cx, word [esp + 0x4c]
sete al
inc ebp
lea esi, [esi + eax*2]
add esi, 2
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b1530
jmp 0x4b1b45
cmp ebp, edx
jge 0x4b1b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b1619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b15c0
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
mov al, byte [eax*8 + 0x4c9f71]
cmp al, 9
je 0x4b15f3
cmp al, 5
je 0x4b15f3
cmp al, 8
je 0x4b15f3
xor eax, eax
jmp 0x4b15f8
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b1b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b1583
jmp 0x4b1b3e
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b1b45
cmp esi, dword [edi + 0x88]
jbe 0x4b1b45
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
jmp 0x4b1b45
cmp ebp, edx
jge 0x4b1b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b1619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b169d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov ebx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], ebx
mov ebx, dword [esp + 0x1c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b1b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b1664
jmp 0x4b1b3e
cmp ebp, edx
jge 0x4b1b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b1619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1745
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b1b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b1708
jmp 0x4b1b3e
cmp ebp, edx
jge 0x4b1b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b1619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b17e2
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f70]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x4b1b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b17a5
jmp 0x4b1b3e
cmp ebp, edx
jge 0x4b1b3e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b1619
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b187f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4b18b8
cmp eax, 3
je 0x4b18b8
xor eax, eax
jmp 0x4b18bd
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b1b3e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b1842
jmp 0x4b1b3e
cmp ebp, edx
jge 0x4b1b3e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
mov edi, 1
cmp esi, ebx
jae 0x4b199b
movzx edx, word [esi]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b192d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 6
je 0x4b1975
cmp edx, 9
je 0x4b1975
cmp edx, 0xa
je 0x4b1975
cmp edx, 0xc
je 0x4b1975
cmp edx, 0xd
je 0x4b1975
xor eax, eax
jmp 0x4b197a
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b1b3a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b18f0
jmp 0x4b1b3a
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b19c7
cmp esi, dword [edi + 0x88]
jbe 0x4b19c7
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
mov ebx, dword [esp + 0x1c]
jmp 0x4b1b45
cmp ebp, edx
jge 0x4b1b3e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
mov edi, 1
cmp esi, ebx
jae 0x4b199b
movzx edx, word [esi]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1a1b
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 6
je 0x4b1a68
cmp edx, 9
je 0x4b1a68
cmp edx, 0xa
je 0x4b1a68
cmp edx, 0xb
je 0x4b1a68
cmp edx, 0xc
je 0x4b1a68
cmp edx, 0xd
je 0x4b1a68
xor eax, eax
jmp 0x4b1a6d
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b1b3a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b19e2
jmp 0x4b1b3a
cmp ebp, edx
jge 0x4b1b3e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x4b199b
movzx edx, word [esi]
mov edi, 1
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1add
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4b1b1d
cmp eax, 3
je 0x4b1b1d
cmp edx, 0x5f
je 0x4b1b1d
xor eax, eax
jmp 0x4b1b22
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x4b1b3a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b1aa0
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x4ad2dc
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebx
je case.0x4ad319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b1bae
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b1b87
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp edi, 0x16
jne 0x4b1d56
cmp ebp, edx
jge 0x4b1d3b
mov ebx, dword [esp + 0x174]
mov ebp, dword [ebx + 0x7c]
cmp esi, ebp
jae 0x4b1d12
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1c40
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
je 0x4b1d37
mov ebx, dword [ebx + 0x7c]
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp esi, ebx
jae 0x4b1cf6
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1cbb
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
jne 0x4b1cf2
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4b1c86
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x174]
inc eax
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x20]
jl 0x4b1c03
jmp 0x4b1d37
cmp dword [ebx + 0x8c], 0
je 0x4b1d37
cmp esi, dword [ebx + 0x88]
jbe 0x4b1d37
mov dword [ebx + 0x64], 1
cmp dword [ebx + 0x8c], 1
jg 0x4b4476
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
je 0x4b34d4
mov edi, dword [esp + 0x174]
jmp 0x4ad2e0
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4aef2e
jmp dword [eax*4 + 0x4b4ce4]
cmp edx, 0x7fffffff
jge 0x4b1e5d
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b1e2b
mov edx, dword [eax + 0x18]
add eax, 0x1c
test edx, edx
je 0x4b1db1
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b6020
add esp, 0xc
test eax, eax
jne 0x4b209e
jmp 0x4b1de3
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b1de3
mov ecx, dword [esp + 0x174]
mov ax, word [esi]
cmp ax, word [ecx + 0x2c]
jne 0x4b1de3
cmp edx, 1
je 0x4b209e
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x2e]
je 0x4b209e
mov eax, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b1e1b
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [esp + 0x174]
jne 0x4b1e1b
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x4b1d87
jmp 0x4b209e
cmp dword [eax + 0x8c], 0
je 0x4b209e
cmp esi, dword [eax + 0x88]
jbe 0x4b209e
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b4476
jmp 0x4b209e
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop
cmp esi, ecx
jae 0x4b1e2b
mov edx, dword [eax + 0x18]
add eax, 0x1c
test edx, edx
je 0x4b1e96
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b6020
add esp, 0xc
test eax, eax
jne 0x4b209e
jmp 0x4b1ec8
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b1ec8
mov ecx, dword [esp + 0x174]
mov ax, word [esi]
cmp ax, word [ecx + 0x2c]
jne 0x4b1ec8
cmp edx, 1
je 0x4b209e
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x2e]
je 0x4b209e
mov eax, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x4b1f00
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [esp + 0x174]
jne 0x4b1f00
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x4b1e70
jmp 0x4b209e
cmp edx, 0x7fffffff
jge 0x4b1f68
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop word [eax + eax]
cmp esi, ecx
jae 0x4b1f5f
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, ecx
jae 0x4b1f55
mov ax, word [esi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x68]
jne 0x4b1f55
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, edx
jl 0x4b1f30
jmp 0x4b209e
mov eax, dword [esp + 0x174]
jmp 0x4b1f76
mov eax, dword [esp + 0x174]
mov esi, dword [eax + 0x7c]
mov dword [esp + 0x14], esi
cmp dword [eax + 0x8c], 0
je 0x4b1f9b
cmp esi, dword [eax + 0x88]
jbe 0x4b1f9b
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b4476
mov ebp, eax
jmp 0x4b20a5
sub edx, ebp
mov ebp, dword [esp + 0x174]
mov ecx, dword [ebp + 0x7c]
mov eax, ecx
sub eax, esi
sar eax, 1
cmp edx, eax
jbe 0x4b1fd1
mov eax, ebp
mov esi, ecx
mov dword [esp + 0x14], esi
cmp dword [eax + 0x8c], 0
je 0x4b1f9b
cmp ecx, dword [eax + 0x88]
jmp 0x4b1f85
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
jmp 0x4b20a5
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop
mov edx, esi
cmp esi, edi
jae 0x4b20c0
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b202c
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, 4
add ecx, 0x10000
jmp 0x4b2031
mov eax, 2
cmp ecx, 0xd
jne 0x4b204d
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edi
jae 0x4b209a
cmp word [esi], 0xa
cmovne esi, edx
add esi, 2
jmp 0x4b208b
cmp ecx, 0xa
je 0x4b2089
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x68], 0
jne 0x4b25e4
cmp ecx, 0xb
je 0x4b2089
cmp ecx, 0xc
je 0x4b2089
cmp ecx, 0x85
je 0x4b2089
cmp ecx, 0x2028
je 0x4b2089
cmp ecx, 0x2029
jne 0x4b25e4
add esi, eax
inc ebp
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b1ff0
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
je 0x4b35f4
mov edi, dword [esp + 0x174]
jmp 0x4ad2e0
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b20ec
cmp esi, dword [eax + 0x88]
jbe 0x4b20ec
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b4476
mov edi, dword [esp + 0x18]
mov ebp, eax
jmp 0x4b20a5
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
mov edx, 1
cmp esi, edi
jae 0x4b21c1
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b213f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x180e
ja 0x4b2165
je 0x4b2193
cmp ecx, 0xa0
ja 0x4b215d
je 0x4b2193
cmp ecx, 9
je 0x4b2193
cmp ecx, 0x20
jmp 0x4b218d
cmp ecx, 0x1680
jmp 0x4b218d
cmp ecx, 0x205f
ja 0x4b2187
je 0x4b2193
cmp ecx, 0x2000
jb 0x4b218f
cmp ecx, 0x200a
jbe 0x4b2193
cmp ecx, 0x202f
jmp 0x4b218d
cmp ecx, 0x3000
je 0x4b2193
xor ecx, ecx
jmp 0x4b2198
mov ecx, 1
xor eax, eax
cmp dword [esp + 0x18], 0x12
sete al
cmp ecx, eax
je 0x4b209a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2102
jmp 0x4b209a
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b20ec
cmp esi, dword [eax + 0x88]
jbe 0x4b20ec
mov dword [eax + 0x64], edx
cmp dword [eax + 0x8c], edx
jg 0x4b4476
mov edi, dword [esp + 0x18]
mov ebp, eax
jmp 0x4b20a5
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b20c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b224d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x85
ja 0x4b2288
je 0x4b2293
cmp ecx, 0xa
jb 0x4b2261
cmp ecx, 0xd
jbe 0x4b2293
xor ecx, ecx
xor eax, eax
cmp dword [esp + 0x18], 0x14
sete al
cmp ecx, eax
je 0x4b209a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2210
jmp 0x4b209a
lea eax, [ecx - 0x2028]
cmp eax, 1
ja 0x4b2261
mov ecx, 1
jmp 0x4b2263
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x4b20c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b22ed
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b2309
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 4
jne 0x4b209a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b22b0
jmp 0x4b209a
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop
cmp esi, edi
jae 0x4b20c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b236d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b209a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 4
je 0x4b209a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2330
jmp 0x4b209a
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b20c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b23ef
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b240b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 1
jne 0x4b209a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b23b2
jmp 0x4b209a
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b20c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b246d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b209a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 1
je 0x4b209a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2430
jmp 0x4b209a
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b20c0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b24ef
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b250b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 0x10
jne 0x4b209a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b24b2
jmp 0x4b209a
cmp ebp, edx
jge 0x4b209e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4b25a0
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b256d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4b209a
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 0x10
je 0x4b209a
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x4b2530
jmp 0x4b209a
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b20ec
cmp esi, dword [eax + 0x88]
jbe 0x4b20ec
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jle 0x4b20ec
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x18]
mov ebp, edx
jmp 0x4b20a5
cmp ecx, 0x74
mov ecx, esi
jne 0x4b2630
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov edx, ebp
jmp 0x4b288f
mov dword [edi + 0x9c], 2
mov edx, ebp
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov edx, dword [esp + 0x10]
add edx, 4
jmp 0x4b288f
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0x90]
cmp eax, ebx
cmovle eax, ebx
mov dword [esp + 0x170], eax
movzx eax, word [ebp + 6]
lea eax, [eax*2 + 4]
add eax, ebp
mov ecx, eax
cmp word [ecx], 0x71
jne 0x4b26bd
movzx eax, word [ecx + 2]
lea eax, [ecx + eax*2]
mov ecx, eax
cmp word [ecx], 0x71
je 0x4b26a5
jmp 0x4b26bd
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x1c], 0x86
lea edx, [eax + 4]
mov dword [esp + 0x10], edx
jne 0x4b2893
mov dword [edi + 0x9c], 2
mov ecx, esi
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp ecx, 0x75
je 0x4b2a3a
cmp ecx, 0x74
jne 0x4b27a5
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
movzx eax, word [ebp]
mov edx, ebp
cmp eax, 0x7b
je 0x4b280c
mov ecx, 0x82
cmp ax, cx
jb 0x4b288f
mov dword [edi + 0x9c], 2
mov ecx, esi
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0x82
cmp word [ebp], ax
jb 0x4b27ba
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
cmp eax, 0xfffffc1c
jne 0x4b27ee
cmp dword [edi + 0xb8], ebp
jmp 0x4b27f0
test eax, eax
jne 0x4b28a6
mov edx, dword [esp + 0x10]
add edx, 4
cmp word [ebp], 0x7b
mov dword [esp + 0x10], edx
jne 0x4b2893
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4ae3a3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 4]
mov dword [esp + 0x48], edx
lea ebp, [edx + edx]
cmp ebp, dword [edi + 0x14]
jl 0x4b4486
mov edx, dword [esp + 0x1c]
nop
cmp edx, 0x82
jae 0x4b28b1
cmp edx, 0x7b
je 0x4b28b1
cmp dword [edi + 0x6c], 0
mov edx, dword [esp + 0x10]
jne 0x4b28bf
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
je 0x4b28bf
movzx eax, word [edx]
movzx eax, byte [eax + 0x4cd250]
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jb 0x4ad280
inc eax
mov dword [edi], eax
mov eax, 0xfffffff8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x174]
inc eax
mov edi, dword [edi + 0xb0]
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx eax, byte [eax + 0x4cd250]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [edx + eax*2]
call fcn.004ad1e0
mov edx, eax
add esp, 0x14
cmp edx, 0xfffffc20
jne 0x4b293c
mov ebp, dword [esp + 0x10]
movzx ecx, word [ebp + 2]
lea eax, [ecx*2]
add eax, ebp
cmp dword [ebx + 0x80], eax
jae 0x4b4625
cmp word [ebp], 0x71
je 0x4b2948
cmp word [eax], 0x71
jne 0x4b4625
jmp 0x4b2948
test edx, edx
jne 0x4b45ea
mov ebp, dword [esp + 0x10]
movzx eax, word [ebp + 2]
lea ebp, [ebp + eax*2]
mov dword [ebx + 0xb0], edi
cmp word [ebp], 0x71
mov dword [esp + 0x10], ebp
jne case.0x4ad319.151
mov edi, ebx
jmp 0x4b285a
mov eax, dword [esp + 0x17c]
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, word [ebx + 2]
add ecx, eax
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ebx + ecx*2]
mov ecx, esi
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b29b8
cmp eax, 0xfffffc1d
je 0x4b29b8
cmp eax, 0xfffffc20
jne 0x4b28a6
lea eax, [ebx + 4]
mov dword [edi + 0x80], eax
mov eax, 0xfffffc1f
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xffffffe6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xf0]
cmp eax, ecx
je 0x4b29fa
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffffa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x16c]
mov dword [edi + 0x84], esi
mov dword [edi + 0x80], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov dword [edi + 0x84], esi
mov eax, 0xfffffc1b
mov dword [edi + 0x90], ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x170]
mov dword [edi + 0x84], esi
mov dword [edi + 0x90], eax
mov eax, dword [esp + 0x16c]
mov dword [edi + 0x80], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je case.0x4ad319.151
cmp esi, dword [edi + 0x88]
jbe case.0x4ad319.151
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jmp 0x4b4470
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ad319.151
cmp esi, dword [eax + 0x88]
jbe case.0x4ad319.151
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jmp 0x4b4470
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ad319.151
cmp esi, dword [eax + 0x7c]
jb case.0x4ad319.151
jmp 0x4b2ac6
mov ebx, esi
cmp edi, eax
jge 0x4b2b80
nop
push edx
push dword [esp + 0x178]
mov edx, esi
push ebp
call fcn.004ad030
add esp, 0xc
test eax, eax
js 0x4b2b3b
mov ecx, dword [esp + 0x2c]
lea esi, [esi + eax*2]
mov edx, dword [esp + 0x24]
inc edi
cmp edi, dword [esp + 0x28]
jl 0x4b2b10
jmp 0x4b2b6c
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4b2b6c
cmp esi, dword [eax + 0x7c]
jb 0x4b2b6c
cmp esi, dword [eax + 0x88]
jbe 0x4b2b6c
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x4b4476
cmp esi, ebx
jb case.0x4ad319.151
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov eax, ebp
neg eax
lea esi, [esi + eax*2]
cmp esi, ebx
jae 0x4b2b80
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je case.0x4ad319.151
cmp esi, dword [edi + 0x7c]
jb case.0x4ad319.151
jmp 0x4b2a93
cmp dword [esp + 0x30], 0
je 0x4b2ce6
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp edi, ebx
jge case.0x4ad319.151
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x4b2ab9
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2c78
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add edx, 0x10000
add esi, 2
cmp edx, 0xff
jbe 0x4b2c87
cmp dword [esp + 0x1c], 0x6a
jmp 0x4b2c99
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
test byte [edx + ebp], al
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b2c30
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, esi
cmp edi, ebx
jge 0x4b2d54
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x28]
mov ebx, dword [eax + 0x7c]
nop
cmp esi, ebx
jae 0x4b2e2c
movzx edx, word [esi]
mov edi, 1
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2d3d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
cmp edx, 0xff
jbe 0x4b2df3
cmp dword [esp + 0x1c], 0x6a
jne 0x4b2e13
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ad319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b2db9
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b2d92
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
mov ecx, dword [esp + 0x40]
test byte [edx + ecx], al
je 0x4b2d54
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
lea esi, [esi + edi*2]
inc eax
mov dword [esp + 0x24], eax
cmp eax, ecx
jl 0x4b2d00
jmp 0x4b2d54
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4b2d5b
cmp esi, dword [edi + 0x88]
jbe 0x4b2d5b
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
jmp 0x4b2d5b
mov ebp, esi
cmp ebx, edi
jge 0x4b2ed1
nop
mov edi, dword [esp + 0x174]
cmp esi, dword [edi + 0x7c]
jae 0x4b2f71
movzx ecx, word [esi]
mov edi, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b2eb5
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edi, 2
add ecx, 0x10000
mov edx, dword [esp + 0x40]
push 1
call fcn.004b61a0
add esp, 4
test eax, eax
je 0x4b2ed1
inc ebx
lea esi, [esi + edi*2]
cmp ebx, dword [esp + 0x28]
jl 0x4b2e70
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop
mov eax, esi
mov ecx, esi
sub esi, 2
cmp eax, ebp
je case.0x4ad319.151
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4b2f37
lea esi, [ecx - 4]
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b2f10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je 0x4b2ed8
cmp esi, dword [edi + 0x88]
jbe 0x4b2ed8
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x4b4476
jmp 0x4b2ed8
cmp dword [edi + 0x8c], 0
je case.0x4ad319.151
cmp esi, ecx
jb case.0x4ad319.151
jmp 0x4b2a93
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp edi, ebp
jge case.0x4ad319.151
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x18]
mov ebp, dword [eax + 0x7c]
mov eax, ebp
lea ebx, [ecx + ecx]
sub eax, ebx
cmp esi, eax
ja 0x4b3087
mov edx, dword [esp + 0x20]
lea edi, [ecx + ecx]
mov ecx, esi
sub edi, 4
jb 0x4b3041
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b304a
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b3030
cmp edi, 0xfffffffc
je 0x4b3103
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b3087
cmp edi, 0xfffffffd
je 0x4b3103
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b3087
cmp edi, 0xfffffffe
je 0x4b3103
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b3087
cmp edi, 0xffffffff
je 0x4b3103
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4b3103
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x4b3158
lea ebx, [ecx + ecx]
mov eax, ebp
sub eax, ebx
cmp esi, eax
ja 0x4b3158
lea edi, [ecx + ecx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x4b30c1
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4b30c6
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4b30b0
cmp edi, 0xfffffffc
je 0x4b3103
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4b3158
cmp edi, 0xfffffffd
je 0x4b3103
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4b3158
cmp edi, 0xfffffffe
je 0x4b3103
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4b3158
cmp edi, 0xffffffff
je 0x4b3103
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4b3158
mov eax, dword [esp + 0x17c]
add esi, ebx
mov edi, dword [esp + 0x24]
inc eax
mov edx, dword [esp + 0x10]
inc edi
push eax
push dword [esp + 0x17c]
mov ecx, esi
mov dword [esp + 0x2c], edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
mov ebp, dword [esp + 0x30]
add esp, 0x14
test eax, eax
je 0x4b2ff8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x4ad319.151
cmp esi, ebp
jb case.0x4ad319.151
jmp 0x4b2ac6
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x1c]
jge case.0x4ad319.151
mov ecx, dword [esp + 0x174]
cmp esi, dword [ecx + 0x7c]
jae 0x4b32b7
movzx eax, word [esi]
cmp ebx, eax
je 0x4b31dd
cmp edi, eax
jne case.0x4ad319.151
mov eax, dword [esp + 0x17c]
add esi, 2
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ecx
push dword [esp + 0x17c]
mov ecx, esi
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b31b4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x1c]
jge case.0x4ad319.151
cmp esi, dword [edi + 0x7c]
jae 0x4b2a86
movzx eax, word [esi]
add esi, 2
cmp ebx, eax
jne case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3252
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [esp + 0x174]
cmp dword [ecx + 0x8c], 0
je case.0x4ad319.151
cmp esi, dword [ecx + 0x88]
jbe case.0x4ad319.151
mov dword [ecx + 0x64], 1
cmp dword [ecx + 0x8c], 1
jmp 0x4b4470
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop word [eax + eax]
cmp ebx, dword [esp + 0x1c]
jge case.0x4ad319.151
mov edx, dword [esp + 0x174]
cmp esi, dword [edx + 0x7c]
jae 0x4b33bb
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b336a
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp edi, ecx
je case.0x4ad319.151
cmp ebp, ecx
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
inc ebx
push eax
push dword [esp + 0x17c]
push edx
push dword [esp + 0x17c]
mov edx, dword [esp + 0x20]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3320
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edx + 0x8c], 0
je case.0x4ad319.151
cmp esi, dword [edx + 0x88]
jbe case.0x4ad319.151
mov dword [edx + 0x64], 1
cmp dword [edx + 0x8c], 1
jmp 0x4b4470
cmp dword [ebp + 0x8c], 0
je case.0x4ad319.151
cmp esi, dword [ebp + 0x88]
jbe case.0x4ad319.151
mov dword [ebp + 0x64], 1
cmp dword [ebp + 0x8c], 1
jmp 0x4b4470
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop dword [eax + eax]
cmp ebx, dword [esp + 0x1c]
jge case.0x4ad319.151
cmp esi, dword [ebp + 0x7c]
jae 0x4b33e7
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b348f
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp edi, ecx
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebx
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3450
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x174]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop dword [eax]
lea edi, [esi - 2]
cmp esi, ebx
je case.0x4ad319.151
mov ebp, 0xdc00
movzx eax, word [edi]
mov edx, edi
mov ecx, eax
and ecx, 0xfc00
movzx ebx, cx
cmp cx, bp
jne 0x4b3539
movzx eax, word [edx - 2]
cmp bx, bp
movzx ecx, ax
lea esi, [edx - 2]
mov eax, ecx
cmovne esi, edi
lea edi, [edx - 2]
cmovne edi, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3573
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
jne 0x4b35a9
add edi, 0xfffffffe
jmp 0x4b3520
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x174]
inc eax
mov edx, dword [esp + 0x10]
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
mov ebx, dword [esp + 0x30]
add esp, 0x14
test eax, eax
je 0x4b3510
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
lea ecx, [esi - 2]
cmp esi, ebx
je case.0x4ad319.151
mov ax, word [ecx]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
cmovne ecx, esi
sub ecx, 2
mov esi, ecx
cmp edi, 0x11
jne 0x4b3665
cmp ecx, ebx
jbe 0x4b3665
cmp word [ecx], 0xa
jne 0x4b3665
cmp word [ecx - 2], 0xd
lea eax, [ecx - 2]
cmove esi, eax
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3625
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test eax, eax
js 0x4b3f77
cmp eax, 8
ja case.default.0x4aef2e
jmp dword [eax*4 + 0x4b4d24]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
mov ecx, esi
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx eax, word [esi]
add esi, 2
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b371a
lea esi, [ecx + 4]
cmp dword [esp + 0x34], 0
jne case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b36f0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop word [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b37e3
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
mov al, byte [eax*8 + 0x4c9f71]
cmp al, 9
je 0x4b3816
cmp al, 5
je 0x4b3816
cmp al, 8
je 0x4b3816
xor eax, eax
jmp 0x4b381b
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b37a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop dword [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b38e3
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov edx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], edx
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b38a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
nop word [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b39e3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b39a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3ad3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f70]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3a90
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3bc3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4b3bfc
cmp eax, 3
je 0x4b3bfc
xor eax, eax
jmp 0x4b3c01
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3b80
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3cc4
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 6
je 0x4b3d0c
cmp edx, 9
je 0x4b3d0c
cmp edx, 0xa
je 0x4b3d0c
cmp edx, 0xc
je 0x4b3d0c
cmp edx, 0xd
je 0x4b3d0c
xor eax, eax
jmp 0x4b3d11
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3c81
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3dd4
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 6
je 0x4b3e21
cmp edx, 9
je 0x4b3e21
cmp edx, 0xa
je 0x4b3e21
cmp edx, 0xb
je 0x4b3e21
cmp edx, 0xc
je 0x4b3e21
cmp edx, 0xd
je 0x4b3e21
xor eax, eax
jmp 0x4b3e26
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3d91
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
cmp esi, dword [ebx + 0x7c]
jae 0x4b4449
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3ee9
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4cb050]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
mov eax, dword [eax*4 + 0x4cd630]
cmp eax, 1
je 0x4b3f29
cmp eax, 3
je 0x4b3f29
cmp edx, 0x5f
je 0x4b3f29
xor eax, eax
jmp 0x4b3f2e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3ea6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
cmp edi, 0x16
jne 0x4b40ea
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
mov ebx, dword [ebx + 0x7c]
cmp esi, ebx
jae 0x4b2ab2
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b3ffa
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
je case.0x4ad319.151
cmp esi, ebx
jae 0x4b40a2
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b406b
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cb050]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4be670]
movzx eax, byte [eax*8 + 0x4c9f71]
cmp dword [eax*4 + 0x4cd630], 2
jne 0x4b40a2
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4b4036
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x174]
inc eax
mov edx, dword [esp + 0x10]
inc ebp
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b3fb5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test eax, eax
jne 0x4b28a6
cmp ebp, dword [esp + 0x20]
jge case.0x4ad319.151
mov ecx, dword [ebx + 0x7c]
cmp esi, ecx
jae 0x4b4449
cmp edi, 0xc
jne 0x4b4159
mov edx, dword [ebx + 0x18]
lea eax, [ebx + 0x1c]
test edx, edx
je 0x4b412e
push 1
push eax
push ecx
mov ecx, esi
call fcn.004b6020
add esp, 0xc
test eax, eax
jne case.0x4ad319.151
jmp 0x4b4159
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x4b4159
mov ax, word [esi]
cmp ax, word [ebx + 0x2c]
jne 0x4b4159
cmp edx, 1
je case.0x4ad319.151
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x2e]
je case.0x4ad319.151
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b4189
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x4aef2e
jmp dword [eax*4 + 0x4b4d48]
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0xd
ja 0x4b41d1
je 0x4b41b4
cmp ecx, 0xa
je case.0x4b4195.12
lea eax, [ecx - 0xb]
jmp 0x4b41df
mov esi, edx
cmp edx, dword [ebx + 0x7c]
jae 0x4b43f8
cmp word [edx], 0xa
jne 0x4b43f8
lea esi, [edx + 2]
jmp 0x4b43f8
cmp ecx, 0x85
je 0x4b41e8
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ad319.151
cmp dword [ebx + 0x68], 0
mov esi, edx
jne case.0x4ad319.151
jmp 0x4b43f8
cmp ecx, 0x180e
ja 0x4b422b
je case.0x4ad319.151
cmp ecx, 0xa0
ja 0x4b4223
je case.0x4ad319.151
cmp ecx, 9
je case.0x4ad319.151
cmp ecx, 0x20
jmp 0x4b425f
cmp ecx, 0x1680
jmp 0x4b425f
cmp ecx, 0x205f
ja 0x4b4259
je case.0x4ad319.151
cmp ecx, 0x2000
jb case.0x4b4195.12
cmp ecx, 0x200a
jbe case.0x4ad319.151
cmp ecx, 0x202f
jmp 0x4b425f
cmp ecx, 0x3000
je case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x180e
ja 0x4b429e
je case.0x4b4195.12
cmp ecx, 0xa0
ja 0x4b4296
je case.0x4b4195.12
cmp ecx, 9
je case.0x4b4195.12
cmp ecx, 0x20
jmp 0x4b42d2
cmp ecx, 0x1680
jmp 0x4b42d2
cmp ecx, 0x205f
ja 0x4b42cc
je case.0x4b4195.12
cmp ecx, 0x2000
jb case.0x4ad319.151
cmp ecx, 0x200a
jbe case.0x4b4195.12
cmp ecx, 0x202f
jmp 0x4b42d2
cmp ecx, 0x3000
jne case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x85
ja 0x4b42fb
je case.0x4ad319.151
cmp ecx, 0xa
jb case.0x4b4195.12
cmp ecx, 0xd
jmp 0x4b430d
cmp ecx, 0x2028
jb case.0x4b4195.12
cmp ecx, 0x2029
jbe case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x85
ja 0x4b4330
je case.0x4b4195.12
lea eax, [ecx - 0xa]
cmp eax, 3
jmp 0x4b4339
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x100
jae case.0x4b4195.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
jne case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x100
jae case.0x4ad319.151
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
je case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x100
jae case.0x4b4195.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
jne case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x100
jae case.0x4ad319.151
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
je case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x100
jae case.0x4b4195.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x4ad319.151
mov esi, edx
jmp 0x4b43f8
cmp ecx, 0x100
jae case.0x4ad319.151
mov eax, dword [ebx + 0x3c]
mov esi, edx
test byte [ecx + eax], 0x10
je case.0x4ad319.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b40f2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffff2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [ebx + 0x8c], 0
je case.0x4ad319.151
cmp esi, dword [ebx + 0x88]
jbe case.0x4ad319.151
mov dword [ebx + 0x64], 1
cmp dword [ebx + 0x8c], 1
jle case.0x4ad319.151
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x4c], eax
mov eax, dword [ecx + ebp*4 + 4]
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x10]
mov edi, dword [edi + 0x94]
sub eax, edx
mov edx, dword [esp + 0x174]
lea ecx, [ecx + eax*4]
mov eax, dword [ecx]
mov dword [esp + 0x44], eax
mov eax, esi
sub eax, dword [edx + 0x78]
mov ebx, dword [edx + 0xb0]
sar eax, 1
mov dword [ecx], eax
cmp dword [esp + 0x1c], 0x82
jb 0x4b44d6
mov dword [edx + 0x9c], 2
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [ecx]
push dword [esp + 0x17c]
push edx
movzx eax, byte [eax + 0x4cd250]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ad1e0
mov edx, eax
add esp, 0x14
cmp edx, 0xfffffc1c
je 0x4b45a9
cmp edx, 0xfffffc20
jne 0x4b4563
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 2]
lea eax, [eax + ecx*2]
mov ecx, dword [esp + 0x174]
cmp dword [ecx + 0x80], eax
jae 0x4b45dd
mov ecx, dword [esp + 0x10]
cmp word [ecx], 0x71
mov ecx, dword [esp + 0x174]
je 0x4b455f
cmp word [eax], 0x71
jne 0x4b45dd
xor edx, edx
jmp 0x4b4572
test edx, edx
jne 0x4b45dd
mov ecx, dword [esp + 0x174]
mov eax, dword [esp + 0x10]
mov dword [ecx + 0x94], edi
mov ecx, dword [esp + 0x10]
movzx eax, word [eax + 2]
lea ecx, [ecx + eax*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x174]
mov eax, dword [esp + 0x10]
mov dword [ecx + 0xb0], ebx
cmp word [eax], 0x71
jne 0x4b45b0
mov edx, ecx
jmp 0x4b44c2
mov ecx, dword [esp + 0x174]
mov eax, dword [ecx + 0xc]
mov ebx, dword [esp + 0x174]
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x44]
mov dword [eax + ebp*4], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [esp + 0x40]
mov dword [eax + ebp*4 + 4], ecx
mov ecx, dword [ebx + 0x10]
sub ecx, dword [esp + 0x48]
mov eax, dword [ebx + 0xc]
mov dword [eax + ecx*4], esi
mov eax, edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp edx, 0xfffffc1c
jne 0x4b4625
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx]
cmp eax, 0x7b
je 0x4b461a
cmp eax, 0x71
jne 0x4b4611
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
je 0x4b4603
movzx eax, word [ecx + 2]
neg eax
lea ecx, [ecx + eax*2]
xor eax, eax
cmp dword [ebx + 0xb8], ecx
cmove edx, eax
mov eax, edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
lea ebx, [edx + 4]
mov dword [edi + 0xb4], ebx
mov dword [edi + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push edi
movzx ecx, byte [eax + 0x4cd250]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ad1e0
mov edi, eax
add esp, 0x14
cmp edi, 1
je 0x4b4694
cmp edi, 0xfffffc19
jne 0x4b46b7
mov ebp, dword [esp + 0x174]
cmp dword [ebp + 0xb0], 0
jne 0x4b46be
mov dword [ebp + 0xb0], ebx
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, dword [esp + 0x174]
cmp edi, 0xfffffc1f
jne 0x4b29fa
mov edx, dword [ebp + 0x80]
mov ecx, ebx
call fcn.004b5f10
test eax, eax
jne 0x4b29fa
mov dword [ebp + 0x80], esi
lea eax, [edi - 1]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4cd250]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b474e
cmp eax, 0xfffffc1d
je 0x4b474e
cmp eax, 0xfffffc1e
je 0x4b474e
cmp eax, 0xfffffc1f
je 0x4b474e
cmp eax, 0xfffffc20
jne 0x4b28a6
mov eax, 0xfffffc1a
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4cd250]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b4837
cmp eax, 0xfffffc20
je 0x4b4837
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x174]
lea edi, [edx + 4]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx ecx, byte [eax + 0x4cd250]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ad1e0
add esp, 0x14
cmp eax, 1
je 0x4b4819
cmp eax, 0xfffffc19
jne 0x4b4828
cmp dword [ebx + 0xb0], 0
jne 0x4b4828
mov dword [ebx + 0xb0], edi
test eax, eax
je 0x4b4837
cmp eax, 0xfffffc20
jne 0x4b28a6
mov eax, 0xfffffc1d
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4cd250]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b4894
cmp eax, 0xfffffc1d
je 0x4b4894
cmp eax, 0xfffffc20
jne 0x4b28a6
mov dword [edi + 0x80], esi
mov eax, 0xfffffc1e
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4cd250]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.004ad1e0
add esp, 0x14
test eax, eax
je 0x4b4973
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x174]
lea edi, [edx + 4]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx ecx, byte [eax + 0x4cd250]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.004ad1e0
add esp, 0x14
cmp eax, 1
je 0x4b495a
cmp eax, 0xfffffc19
jne 0x4b4969
cmp dword [ebx + 0xb0], 0
jne 0x4b4969
mov dword [ebx + 0xb0], edi
test eax, eax
jne 0x4b28a6
mov edi, ebx
mov eax, dword [esp + 0x10]
mov dword [edi + 0x80], eax
mov eax, 0xfffffc20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebx, dword [esp + 0x16c]
cmp esi, ebx
jne 0x4b49cd
cmp edx, 0x99
je 0x4b49cd
cmp dword [edi + 0xa8], 0
jne 0x4b49cd
cmp dword [edi + 0x5c], 0
jne case.0x4ad319.151
cmp dword [edi + 0x60], 0
je 0x4b49cd
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x78]
lea eax, [eax + ecx*2]
cmp ebx, eax
je case.0x4ad319.151
mov eax, dword [esp + 0x170]
test bp, bp
mov dword [edi + 0x84], esi
mov ecx, 1
mov dword [edi + 0x90], eax
mov eax, 0xfffffc19
mov dword [edi + 0x80], ebx
cmove eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffffb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
pop edi
pop esi
pop ebp
mov eax, 0xffffffeb
pop ebx
add esp, 0x158
ret