Function at 0x4a0850
Capabilities:
Enumerate pe sections
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x784
push esi
push edi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x58]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
mov dword [ebp - 8], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dword [ebp - 4], ecx
mov byte [ebp - 0x1e], 0
mov edx, dword [ebp - 4]
mov al, byte [edx + 0x42]
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x5c]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x14], 0
mov eax, dword [ebp + 8]
push eax
call fcn.00499ba0
add esp, 4
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x28], 7
jne 0x4a08d3
jmp 0x4a85dd
mov edx, dword [ebp + 8]
mov dword [edx + 0x38], 0
mov dword [edx + 0x3c], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x184], 0
mov edx, dword [ebp - 4]
cmp dword [edx + 0xf8], 0
je 0x4a090c
jmp 0x4a8606
mov eax, dword [ebp - 4]
cmp dword [eax + 0x130], 0
je 0x4a0942
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb0]
mov dword [ebp - 0x38], edx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x38]
xor edx, edx
div dword [ecx + 0x138]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x138]
sub ecx, edx
mov dword [ebp - 0x18], ecx
jmp 0x4a0949
mov dword [ebp - 0x18], 0xffffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24]
imul eax, eax, 0x14
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
jmp 0x4a0963
mov ecx, dword [ebp - 0x28]
add ecx, 0x14
mov dword [ebp - 0x28], ecx
mov edx, 1
test edx, edx
je 0x4a84c7
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x28]
movzx edx, byte [ecx]
mov dword [ebp - 0x65c], edx
cmp dword [ebp - 0x65c], 0xa4
ja case.0x4a099b.74
mov eax, dword [ebp - 0x65c]
jmp dword [eax*4 + 0x4a864c]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
sub edx, 1
imul edx, edx, 0x14
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xf8], 0
je 0x4a09c5
jmp 0x4a8606
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x18]
jb 0x4a0a20
mov edx, dword [ebp - 4]
cmp dword [edx + 0x130], 0
je 0x4a0a20
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
add ecx, dword [eax + 0x138]
mov esi, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
xor edx, edx
div dword [esi + 0x138]
sub ecx, edx
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x134]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x130]
call edx
add esp, 4
test eax, eax
je 0x4a0a20
mov dword [ebp - 8], 9
jmp 0x4a84c7
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, 4
mov eax, dword [ebp - 0x30]
mov word [eax + 8], dx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
cdq
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
sub eax, 1
imul eax, eax, 0x14
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
push 0
push 0x14
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.005b8800
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, 0x80
mov ecx, dword [ebp - 0x30]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
sub eax, 1
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov edx, 4
mov eax, dword [ebp - 0x14]
mov word [eax + 8], dx
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 8], 0
je 0x4a0ae2
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
push 0
push 0x14
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ecx]
push eax
call fcn.005b8800
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 8]
sub edx, 1
imul edx, edx, 0x14
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
mov eax, 0x80
mov ecx, dword [ebp - 0x30]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, 4
mov edx, dword [ebp - 0x30]
mov word [edx + 8], cx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
cdq
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x40]
imul edx, edx, 0x14
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
movzx eax, word [edx + 8]
and eax, 1
jne case.0x4a099b.55
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x28]
cmp dword [edx + 4], 0
jne 0x4a0c5f
mov eax, dword [ebp + 8]
cmp dword [eax + 0xc4], 0
je 0x4a0c5f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc4]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + 4]
mov dword [eax + 0xc4], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xcc]
sub ecx, 1
mov edx, dword [ebp + 8]
mov dword [edx + 0xcc], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.0049bec0
add esp, 8
mov eax, dword [ebp - 0x44]
push eax
call fcn.0049b130
add esp, 4
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 8], 4
jne 0x4a0c3c
mov edx, dword [ebp - 0x48]
imul edx, edx, 0x14
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x58]
mov edx, dword [ecx + edx + 8]
sub edx, 1
mov dword [ebp - 0x48], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x58]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x48]
imul ecx, ecx, 0x14
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
jmp case.0x4a099b.74
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov dword [edx + 0x28], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x28]
mov cl, byte [eax + 8]
mov byte [edx + 0x8e], cl
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x48]
mov dword [edx + 0x24], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x28], 0
je 0x4a0d2c
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
test eax, eax
je 0x4a0ceb
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
mov eax, dword [edx*4 + 0x64a8f4]
push eax
push str._s_constraint_failed
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049bc80
add esp, 0xc
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0x10], 0
je 0x4a0ce9
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x6c]
push eax
push str._z:__s
mov ecx, dword [ebp - 4]
push ecx
call fcn.0049b890
add esp, 0x10
mov edx, dword [ebp + 8]
mov dword [edx + 0x6c], eax
jmp 0x4a0d03
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
push 0x6aaecc
mov edx, dword [ebp + 8]
push edx
call fcn.0049bc80
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x6c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xbc]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
push str.abort_at__d_in___s_:__s
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
push eax
call fcn.00484a50
add esp, 0x14
mov ecx, dword [ebp + 8]
push ecx
call fcn.004996d0
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 5
jne 0x4a0d4d
mov edx, dword [ebp + 8]
mov dword [edx + 0x28], 5
jmp 0x4a0d60
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x28]
neg ecx
sbb ecx, ecx
and ecx, 0xffffff9c
add ecx, 0x65
mov dword [ebp - 8], ecx
jmp 0x4a8597
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 4]
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [edx]
mov dword [eax], ecx
mov edx, dword [edx + 4]
mov dword [eax + 4], edx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, 8
mov eax, dword [ebp - 0x14]
mov word [eax + 8], dx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x14]
fld qword [edx]
fstp qword [eax]
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
mov byte [eax], 0x3a
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
push edx
call fcn.00484d70
add esp, 4
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 4], eax
movzx edx, byte [ebp - 0x1d]
cmp edx, 1
je 0x4a0eb5
push 0
push 1
push 0xffffffffffffffff
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call fcn.004987e0
add esp, 0x14
mov dword [ebp - 8], eax
movzx eax, byte [ebp - 0x1d]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.0049c480
add esp, 8
test eax, eax
je 0x4a0e59
jmp 0x4a85dd
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x18], 0
mov eax, dword [ebp - 0x14]
movzx ecx, word [eax + 8]
or ecx, 0x800
mov edx, dword [ebp - 0x14]
mov word [edx + 8], cx
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax + 1]
cmp ecx, 0xfffffff9
jne 0x4a0e96
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004823c0
add esp, 8
mov edx, dword [ebp - 0x28]
mov byte [edx + 1], 0xf9
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x10], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 4]
cmp edx, dword [ecx + 0x60]
jle case.0x4a099b.58
jmp 0x4a85c0
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, 0xa02
mov eax, dword [ebp - 0x14]
mov word [eax + 8], dx
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x14]
mov dl, byte [ebp - 0x1d]
mov byte [ecx + 0xa], dl
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0xc], 0
jle 0x4a0f6a
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x28]
movzx eax, word [eax + 2]
cdq
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x660], ecx
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], edx
mov edx, dword [ebp - 0x660]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x668]
jne 0x4a0f6a
mov ecx, dword [ebp - 0x660]
mov edx, dword [ecx + 4]
cmp edx, dword [ebp - 0x664]
jne 0x4a0f6a
mov eax, 0xa10
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
sub eax, dword [edx + 8]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
neg edx
sbb edx, edx
and edx, 0x100
add edx, 1
mov word [ebp - 0x50], dx
mov eax, dword [ebp - 0x14]
mov cx, word [ebp - 0x50]
mov word [eax + 8], cx
mov edx, dword [ebp - 0x14]
mov dword [edx + 0xc], 0
cmp dword [ebp - 0x4c], 0
jle 0x4a0ff8
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00498510
add esp, 4
mov edx, dword [ebp - 0x14]
mov ax, word [ebp - 0x50]
mov word [edx + 8], ax
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0xc], 0
mov edx, dword [ebp - 0x4c]
sub edx, 1
mov dword [ebp - 0x4c], edx
jmp 0x4a0fbd
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 8]
and eax, 0xffffff60
or eax, 1
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
push 0
push 0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call fcn.004987e0
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov cl, byte [ebp - 0x1d]
mov byte [eax + 0xa], cl
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
sub eax, 1
imul eax, eax, 0x28
mov ecx, dword [ebp + 8]
add eax, dword [ecx + 0x74]
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
push edx
call fcn.004b2c30
add esp, 4
test eax, eax
je 0x4a1090
jmp 0x4a85c0
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
push 0x800
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ebp - 0x14]
push eax
call fcn.004b2c80
add esp, 0xc
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x60]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x5c]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.0049fd80
add esp, 8
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 8]
and eax, 0x1000
je 0x4a111f
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00498d30
add esp, 4
test eax, eax
je 0x4a111f
jmp 0x4a85dd
mov edx, dword [ebp - 0x30]
add edx, 0x28
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x58]
sub ecx, 1
mov dword [ebp - 0x58], ecx
jne 0x4a10ec
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, 1
test edx, edx
je 0x4a11cf
push 0x1000
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.004b2c80
add esp, 0xc
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 8]
and eax, 0x1000
je 0x4a11a9
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00498d30
add esp, 4
test eax, eax
je 0x4a11a9
jmp 0x4a85dd
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
sub eax, 1
mov dword [ebp - 0x64], eax
test edx, edx
jne 0x4a11bb
jmp 0x4a11cf
mov ecx, dword [ebp - 0x14]
add ecx, 0x28
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x30]
add edx, 0x28
mov dword [ebp - 0x30], edx
jmp 0x4a1168
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
push 0x1000
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call fcn.004b2c80
add esp, 0xc
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ecx]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.0049d850
add esp, 0xc
jmp case.0x4a099b.74
mov edx, dword [ebp - 4]
cmp dword [edx + 0x130], 0
je 0x4a1281
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
jb 0x4a1281
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x134]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x130]
call ecx
add esp, 4
test eax, eax
je 0x4a1281
mov dword [ebp - 8], 9
jmp 0x4a84c7
push 0
mov edx, dword [ebp + 8]
push edx
call fcn.0049bbe0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a129d
jmp 0x4a84c7
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.0049b990
add esp, 8
mov dword [ebp - 8], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
add edx, 2
or edx, 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x20], edx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], edx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x68]
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x6c], 0
jmp 0x4a12ed
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x6c]
cmp edx, dword [ecx + 8]
jge 0x4a133d
mov eax, dword [ebp - 0x6c]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx + eax + 8]
and edx, 0x1000
je 0x4a1329
mov eax, dword [ebp - 0x6c]
imul eax, eax, 0x28
add eax, dword [ebp - 0x68]
push eax
call fcn.00498d30
add esp, 4
test eax, eax
je 0x4a1329
jmp 0x4a85dd
mov ecx, dword [ebp - 0x6c]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x68]
push ecx
call fcn.0049cd60
add esp, 4
jmp 0x4a12e4
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x45]
test eax, eax
je 0x4a134d
jmp 0x4a85dd
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x4c]
and edx, 4
je 0x4a1379
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xbc]
push edx
push 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb8]
call ecx
add esp, 0x10
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
add eax, 1
mov edx, dword [ebp + 8]
mov dword [edx + 0x24], eax
mov dword [ebp - 8], 0x64
jmp 0x4a8597
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax + 8]
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + 8]
or ecx, eax
and ecx, 1
je 0x4a13ef
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00498510
add esp, 4
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
and eax, 0x4000
je 0x4a1411
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00498e10
add esp, 4
mov dword [ebp - 0x66c], eax
jmp 0x4a141b
mov dword [ebp - 0x66c], 0
cmp dword [ebp - 0x66c], 0
jne 0x4a1459
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + 8]
and eax, 0x4000
je 0x4a1446
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00498e10
add esp, 4
mov dword [ebp - 0x670], eax
jmp 0x4a1450
mov dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 0
je 0x4a145e
jmp 0x4a85dd
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
and eax, 0x12
jne 0x4a1486
push 0
movzx ecx, byte [ebp - 0x1d]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.0049cdf0
add esp, 0xc
test eax, eax
je 0x4a1486
jmp 0x4a85dd
mov eax, dword [ebp - 0x1c]
movzx ecx, word [eax + 8]
and ecx, 0x12
jne 0x4a14ae
push 0
movzx edx, byte [ebp - 0x1d]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call fcn.0049cdf0
add esp, 0xc
test eax, eax
je 0x4a14ae
jmp 0x4a85dd
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0xc]
mov edx, dword [ebp - 0x1c]
add eax, dword [edx + 0xc]
cdq
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
cdq
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], edx
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp - 0x674]
jl 0x4a14f1
jg 0x4a14ec
mov edx, dword [ebp - 0x78]
cmp edx, dword [ebp - 0x678]
jbe 0x4a14f1
jmp 0x4a85c0
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, dword [ebp - 0x1c]
sete cl
push ecx
mov edx, dword [ebp - 0x78]
add edx, 2
push edx
mov eax, dword [ebp - 0x14]
push eax
call fcn.00498b80
add esp, 0xc
test eax, eax
je 0x4a1519
jmp 0x4a85dd
mov ecx, dword [ebp - 0x14]
movzx edx, word [ecx + 8]
and edx, 0xffff3e00
or edx, 2
mov eax, dword [ebp - 0x14]
mov word [eax + 8], dx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x1c]
je 0x4a1555
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.005b5620
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp - 0x1c]
add ecx, dword [edx + 0xc]
push ecx
call fcn.005b5620
add esp, 0xc
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
mov byte [eax + edx], 0
mov eax, dword [ebp - 0x78]
add eax, 1
mov ecx, dword [ebp - 0x74]
adc ecx, 0
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x10]
mov byte [eax + ecx], 0
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 8]
or eax, 0x200
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x14]
mov dl, byte [ebp - 0x1d]
mov byte [ecx + 0xa], dl
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.004b4f10
add esp, 4
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.004b4f10
add esp, 4
mov word [ebp - 0x9c], ax
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
mov ecx, dword [ebp - 0x1c]
movzx edx, word [ecx + 8]
or eax, edx
mov word [ebp - 0x7c], ax
movzx eax, word [ebp - 0xa0]
movzx ecx, word [ebp - 0x9c]
and eax, ecx
and eax, 4
je 0x4a182c
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
mov dword [ebp - 0x88], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov dword [ebp - 0x98], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x94], ecx
mov byte [ebp - 0xa1], 1
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx]
mov dword [ebp - 0x67c], eax
mov ecx, dword [ebp - 0x67c]
sub ecx, 0x58
mov dword [ebp - 0x67c], ecx
cmp dword [ebp - 0x67c], 3
ja case.default.0x4a16a2
mov edx, dword [ebp - 0x67c]
jmp dword [edx*4 + 0x4a88e0]
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x88]
push ecx
lea edx, [ebp - 0x98]
push edx
call fcn.004a8c30
add esp, 0xc
test eax, eax
je 0x4a16cf
jmp 0x4a1846
jmp 0x4a17fc
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x88]
push ecx
lea edx, [ebp - 0x98]
push edx
call fcn.004a8d10
add esp, 0xc
test eax, eax
je 0x4a16fa
jmp 0x4a1846
jmp 0x4a17fc
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x88]
push ecx
lea edx, [ebp - 0x98]
push edx
call fcn.004a8d80
add esp, 0xc
test eax, eax
je 0x4a1725
jmp 0x4a1846
jmp 0x4a17fc
mov eax, dword [ebp - 0x88]
or eax, dword [ebp - 0x84]
jne 0x4a173d
jmp 0x4a1a16
mov ecx, dword [ebp - 0x88]
and ecx, dword [ebp - 0x84]
cmp ecx, 0xffffffff
jne 0x4a1768
cmp dword [ebp - 0x98], 0
jne 0x4a1768
cmp dword [ebp - 0x94], 0x80000000
jne 0x4a1768
jmp 0x4a1846
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x98]
push edx
call fcn.005b8750
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], edx
jmp 0x4a17fc
mov eax, dword [ebp - 0x88]
or eax, dword [ebp - 0x84]
jne 0x4a17aa
jmp 0x4a1a16
mov ecx, dword [ebp - 0x88]
and ecx, dword [ebp - 0x84]
cmp ecx, 0xffffffff
jne 0x4a17cf
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x84], 0
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x98]
push edx
call fcn.005bce90
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov edx, dword [ebp - 0x94]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x14]
movzx ecx, word [eax + 8]
and ecx, 0xffff3e00
or ecx, 4
mov edx, dword [ebp - 0x14]
mov word [edx + 8], cx
jmp 0x4a1a11
movzx eax, word [ebp - 0x7c]
and eax, 1
je 0x4a183f
jmp 0x4a1a16
mov byte [ebp - 0xa1], 0
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0049cf20
add esp, 4
fstp qword [ebp - 0x90]
mov edx, dword [ebp - 0x1c]
push edx
call fcn.0049cf20
add esp, 4
fstp qword [ebp - 0xb0]
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
mov dword [ebp - 0x680], ecx
mov edx, dword [ebp - 0x680]
sub edx, 0x58
mov dword [ebp - 0x680], edx
cmp dword [ebp - 0x680], 3
ja case.default.0x4a1894
mov eax, dword [ebp - 0x680]
jmp dword [eax*4 + 0x4a88f0]
fld qword [ebp - 0xb0]
fadd qword [ebp - 0x90]
fstp qword [ebp - 0xb0]
jmp 0x4a19aa
fld qword [ebp - 0xb0]
fsub qword [ebp - 0x90]
fstp qword [ebp - 0xb0]
jmp 0x4a19aa
fld qword [ebp - 0xb0]
fmul qword [ebp - 0x90]
fstp qword [ebp - 0xb0]
jmp 0x4a19aa
fldz
fcomp qword [ebp - 0x90]
fnstsw ax
test ah, 0x44
jp 0x4a18f4
jmp 0x4a1a16
fld qword [ebp - 0xb0]
fdiv qword [ebp - 0x90]
fstp qword [ebp - 0xb0]
jmp 0x4a19aa
fld qword [ebp - 0x90]
call fcn.005b8486
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], edx
fld qword [ebp - 0xb0]
call fcn.005b8486
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], edx
mov ecx, dword [ebp - 0x88]
or ecx, dword [ebp - 0x84]
jne 0x4a194c
jmp 0x4a1a16
mov edx, dword [ebp - 0x88]
and edx, dword [ebp - 0x84]
cmp edx, 0xffffffff
jne 0x4a1971
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp - 0x94]
push edx
mov eax, dword [ebp - 0x98]
push eax
call fcn.005bce90
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], edx
fild qword [ebp - 0x688]
fstp qword [ebp - 0xb0]
sub esp, 8
fld qword [ebp - 0xb0]
fstp qword [esp]
call fcn.00484d30
add esp, 8
test eax, eax
je 0x4a19c4
jmp 0x4a1a16
mov ecx, dword [ebp - 0x14]
fld qword [ebp - 0xb0]
fstp qword [ecx]
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 8]
and eax, 0xffff3e00
or eax, 8
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
movzx edx, word [ebp - 0xa0]
movzx eax, word [ebp - 0x9c]
or edx, eax
and edx, 8
jne 0x4a1a11
movsx ecx, byte [ebp - 0xa1]
test ecx, ecx
jne 0x4a1a11
mov edx, dword [ebp - 0x14]
push edx
call fcn.004a07d0
add esp, 4
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x14]
push eax
call fcn.00498510
add esp, 4
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 4], 0
je 0x4a1a49
push 0
push 0
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
push eax
call fcn.0049d850
add esp, 0xc
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
mov eax, dword [ebp - 0x1c]
movzx ecx, word [eax + 8]
or edx, ecx
and edx, 1
je 0x4a1aa1
mov edx, dword [ebp - 0x14]
push edx
call fcn.00498510
add esp, 4
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x1c]
push eax
call fcn.0049cfd0
add esp, 4
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], edx
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0049cfd0
add esp, 4
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], edx
mov edx, dword [ebp - 0x28]
mov al, byte [edx]
mov byte [ebp - 0xc9], al
movzx ecx, byte [ebp - 0xc9]
cmp ecx, 0x54
jne 0x4a1b11
mov edx, dword [ebp - 0xb8]
and edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xb4]
and eax, dword [ebp - 0xbc]
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb4], eax
jmp 0x4a1d18
movzx ecx, byte [ebp - 0xc9]
cmp ecx, 0x55
jne 0x4a1b46
mov edx, dword [ebp - 0xb8]
or edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xb4]
or eax, dword [ebp - 0xbc]
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb4], eax
jmp 0x4a1d18
mov ecx, dword [ebp - 0xc0]
or ecx, dword [ebp - 0xbc]
je 0x4a1d18
cmp dword [ebp - 0xbc], 0
jg 0x4a1be5
jl 0x4a1b70
cmp dword [ebp - 0xc0], 0
jae 0x4a1be5
movzx edx, byte [ebp - 0xc9]
mov eax, 0xad
sub eax, edx
mov byte [ebp - 0xc9], al
cmp dword [ebp - 0xbc], 0xffffffff
jl 0x4a1bb9
jg 0x4a1b98
cmp dword [ebp - 0xc0], 0xffffffc0
jbe 0x4a1bb9
mov ecx, dword [ebp - 0xc0]
neg ecx
mov edx, dword [ebp - 0xbc]
adc edx, 0
neg edx
mov dword [ebp - 0x690], ecx
mov dword [ebp - 0x68c], edx
jmp 0x4a1bcd
mov dword [ebp - 0x690], 0x40
mov dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebp - 0x68c]
mov dword [ebp - 0xbc], ecx
cmp dword [ebp - 0xbc], 0
jl 0x4a1c47
jg 0x4a1bf9
cmp dword [ebp - 0xc0], 0x40
jb 0x4a1c47
cmp dword [ebp - 0xb4], 0
jg 0x4a1c25
jl 0x4a1c0d
cmp dword [ebp - 0xb8], 0
jae 0x4a1c25
movzx edx, byte [ebp - 0xc9]
cmp edx, 0x56
je 0x4a1c25
mov dword [ebp - 0x694], 0xffffffff
jmp 0x4a1c2f
mov dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x694]
cdq
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], edx
jmp 0x4a1d18
push 8
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
call fcn.005b5620
add esp, 0xc
movzx edx, byte [ebp - 0xc9]
cmp edx, 0x56
jne 0x4a1c90
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xc4]
call fcn.005b82e0
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
jmp 0x4a1d00
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xc4]
call fcn.005bd770
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xb4], 0
jg 0x4a1d00
jl 0x4a1cc7
cmp dword [ebp - 0xb8], 0
jae 0x4a1d00
mov ecx, 0x40
sub ecx, dword [ebp - 0xc0]
mov eax, 0
sbb eax, dword [ebp - 0xbc]
or eax, 0xffffffff
or edx, 0xffffffff
call fcn.005b82e0
or eax, dword [ebp - 0xc8]
or edx, dword [ebp - 0xc4]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
push 8
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xb8]
push edx
call fcn.005b5620
add esp, 0xc
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xb8]
mov dword [eax], ecx
mov edx, dword [ebp - 0xb4]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x14]
movzx ecx, word [eax + 8]
and ecx, 0xffff3e00
or ecx, 4
mov edx, dword [ebp - 0x14]
mov word [edx + 8], cx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.004b28b0
add esp, 4
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 8]
cdq
mov ecx, dword [ebp - 0x30]
add eax, dword [ecx]
mov ecx, dword [ecx + 4]
adc ecx, edx
mov edx, dword [ebp - 0x30]
mov dword [edx], eax
mov dword [edx + 4], ecx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
and eax, 4
jne 0x4a1dd7
movzx ecx, byte [ebp - 0x1d]
push ecx
push 0x43
mov edx, dword [ebp - 0x30]
push edx
call fcn.004b4e50
add esp, 0xc
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax + 8]
and ecx, 4
jne 0x4a1dd7
mov edx, dword [ebp - 0x28]
cmp dword [edx + 8], 0
jne 0x4a1dd2
mov dword [ebp - 8], 0x14
jmp 0x4a84c7
jmp 0x4a0a57
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax + 8]
and ecx, 0xffff3e00
or ecx, 4
mov edx, dword [ebp - 0x30]
mov word [edx + 8], cx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
and eax, 4
je 0x4a1e1a
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.004b28f0
add esp, 4
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
and edx, 0x4000
je 0x4a1e51
mov eax, dword [ebp - 0x30]
push eax
call fcn.00498e10
add esp, 4
mov dword [ebp - 0x698], eax
jmp 0x4a1e5b
mov dword [ebp - 0x698], 0
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 8], ecx
movzx edx, byte [ebp - 0x1d]
push edx
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax + 8]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.004b2920
add esp, 0xc
cmp dword [ebp - 8], 0
je 0x4a1e88
jmp 0x4a84c7
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x30]
mov dx, word [ecx + 8]
mov word [ebp - 0xd8], dx
mov eax, dword [ebp - 0xc]
mov cx, word [eax + 8]
mov word [ebp - 0xdc], cx
movzx edx, word [ebp - 0xd8]
movzx eax, word [ebp - 0xdc]
or edx, eax
and edx, 1
je 0x4a1f81
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 0x80
je 0x4a1f2b
movzx eax, word [ebp - 0xd8]
movzx ecx, word [ebp - 0xdc]
and eax, ecx
and eax, 1
je 0x4a1f1f
movzx edx, word [ebp - 0xdc]
and edx, 0x100
jne 0x4a1f1f
mov dword [ebp - 0xd4], 0
jmp 0x4a1f29
mov dword [ebp - 0xd4], 1
jmp 0x4a1f7c
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
and ecx, 0x20
je 0x4a1f66
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], 1
mov ecx, dword [ebp - 0x14]
movzx edx, word [ecx + 8]
and edx, 0xffff3e00
or edx, 1
mov eax, dword [ebp - 0x14]
mov word [eax + 8], dx
jmp 0x4a1f77
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 0x10
je 0x4a1f77
jmp 0x4a0a57
jmp case.0x4a099b.74
jmp 0x4a2185
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
and ecx, 0x47
mov byte [ebp - 0xca], cl
movsx edx, byte [ebp - 0xca]
cmp edx, 0x43
jl 0x4a20bd
movzx eax, word [ebp - 0xd8]
movzx ecx, word [ebp - 0xdc]
or eax, ecx
and eax, 2
je 0x4a1ffe
movzx edx, word [ebp - 0xd8]
and edx, 0xe
cmp edx, 2
jne 0x4a1fe1
push 0
mov eax, dword [ebp - 0x30]
push eax
call fcn.004a0720
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dx, word [ecx + 8]
mov word [ebp - 0xdc], dx
movzx eax, word [ebp - 0xdc]
and eax, 0xe
cmp eax, 2
jne 0x4a1ffe
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004a0720
add esp, 8
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
mov ecx, dword [ebp - 0xc]
movzx edx, word [ecx + 8]
and eax, edx
and eax, 4
je 0x4a20b8
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x6a0], ecx
mov edx, dword [ebp - 0x69c]
mov eax, dword [ebp - 0x6a0]
mov ecx, dword [edx + 4]
cmp ecx, dword [eax + 4]
jl 0x4a2060
jg 0x4a2051
mov edx, dword [ebp - 0x69c]
mov eax, dword [ebp - 0x6a0]
mov ecx, dword [edx]
cmp ecx, dword [eax]
jbe 0x4a2060
mov dword [ebp - 0xd4], 1
jmp 0x4a2185
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6a4], edx
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x6a4]
mov edx, dword [ebp - 0x6a8]
mov eax, dword [ecx + 4]
cmp eax, dword [edx + 4]
jg 0x4a20a9
jl 0x4a209a
mov ecx, dword [ebp - 0x6a4]
mov edx, dword [ebp - 0x6a8]
mov eax, dword [ecx]
cmp eax, dword [edx]
jae 0x4a20a9
mov dword [ebp - 0xd4], 0xffffffff
jmp 0x4a2185
mov dword [ebp - 0xd4], 0
jmp 0x4a2185
jmp 0x4a2168
movsx ecx, byte [ebp - 0xca]
cmp ecx, 0x42
jne 0x4a2168
movzx edx, word [ebp - 0xd8]
and edx, 2
jne 0x4a211b
movzx eax, word [ebp - 0xd8]
and eax, 0xc
je 0x4a211b
push 1
movzx ecx, byte [ebp - 0x1d]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.0049cdf0
add esp, 0xc
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax + 8]
and ecx, 0xffff3e00
movzx edx, word [ebp - 0xd8]
and edx, 0xc1ff
or ecx, edx
mov word [ebp - 0xd8], cx
movzx eax, word [ebp - 0xdc]
and eax, 2
jne 0x4a2168
movzx ecx, word [ebp - 0xdc]
and ecx, 0xc
je 0x4a2168
push 1
movzx edx, byte [ebp - 0x1d]
push edx
mov eax, dword [ebp - 0xc]
push eax
call fcn.0049cdf0
add esp, 0xc
mov ecx, dword [ebp - 0xc]
movzx edx, word [ecx + 8]
and edx, 0xffff3e00
movzx eax, word [ebp - 0xdc]
and eax, 0xc1ff
or edx, eax
mov word [ebp - 0xdc], dx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004b37f0
add esp, 0xc
mov dword [ebp - 0xd4], eax
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx]
mov dword [ebp - 0x6ac], eax
mov ecx, dword [ebp - 0x6ac]
sub ecx, 0x4d
mov dword [ebp - 0x6ac], ecx
cmp dword [ebp - 0x6ac], 4
ja case.default.0x4a21af
mov edx, dword [ebp - 0x6ac]
jmp dword [edx*4 + 0x4a8900]
xor eax, eax
cmp dword [ebp - 0xd4], 0
sete al
mov dword [ebp - 0xd0], eax
jmp 0x4a2226
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0xd0], ecx
jmp 0x4a2226
xor edx, edx
cmp dword [ebp - 0xd4], 0
setl dl
mov dword [ebp - 0xd0], edx
jmp 0x4a2226
xor eax, eax
cmp dword [ebp - 0xd4], 0
setle al
mov dword [ebp - 0xd0], eax
jmp 0x4a2226
xor ecx, ecx
cmp dword [ebp - 0xd4], 0
setg cl
mov dword [ebp - 0xd0], ecx
jmp 0x4a2226
xor edx, edx
cmp dword [ebp - 0xd4], 0
setge dl
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x30]
mov cx, word [ebp - 0xd8]
mov word [eax + 8], cx
mov edx, dword [ebp - 0xc]
mov ax, word [ebp - 0xdc]
mov word [edx + 8], ax
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 0x20
je 0x4a22c7
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0x34], edx
xor eax, eax
cmp dword [ebp - 0xd0], 0
setne al
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 8
je 0x4a229f
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
xor edx, edx
cmp ecx, 0x4e
sete dl
cmp edx, dword [ebp - 0xd0]
jne 0x4a229f
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x14]
movzx ecx, word [eax + 8]
and ecx, 0xffff3e00
or ecx, 4
mov edx, dword [ebp - 0x14]
mov word [edx + 8], cx
mov eax, dword [ebp - 0xd0]
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp 0x4a22d5
cmp dword [ebp - 0xd0], 0
je 0x4a22d5
jmp 0x4a0a57
jmp case.0x4a099b.74
cmp dword [ebp - 0x34], 0
je 0x4a22e5
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
and eax, 1
jne 0x4a2307
mov dword [ebp - 0xf8], 0
jmp 0x4a2316
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx - 4]
add edx, 4
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x100], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov dword [ebp - 0xfc], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0xe4], 0
jmp 0x4a2361
mov edx, dword [ebp - 0xe4]
add edx, 1
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xe8]
jge 0x4a2430
cmp dword [ebp - 0xf8], 0
je 0x4a2393
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x6b0], eax
jmp 0x4a239f
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x6b0], ecx
mov edx, dword [ebp - 0x6b0]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + eax*4 + 0x14]
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp - 0xe4]
movzx eax, byte [ecx + edx]
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0xec]
push ecx
mov edx, dword [ebp - 0xf4]
add edx, dword [ebp - 0xf0]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0xf0]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
push eax
call fcn.004b37f0
add esp, 0xc
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4a242b
cmp dword [ebp - 0xe0], 0
je 0x4a2429
mov ecx, dword [ebp - 0x34]
neg ecx
mov dword [ebp - 0x34], ecx
jmp 0x4a2430
jmp 0x4a2352
jmp case.0x4a099b.74
cmp dword [ebp - 0x34], 0
jge 0x4a244f
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
sub eax, 1
imul eax, eax, 0x14
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
jmp 0x4a247b
cmp dword [ebp - 0x34], 0
jne 0x4a2469
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
sub edx, 1
imul edx, edx, 0x14
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
jmp 0x4a247b
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
sub ecx, 1
imul ecx, ecx, 0x14
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
and edx, 1
je 0x4a24a7
mov dword [ebp - 0x104], 2
jmp 0x4a24ef
mov eax, dword [ebp - 0x30]
push eax
call fcn.0049cfd0
add esp, 4
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], edx
mov ecx, dword [ebp - 0x6b8]
or ecx, dword [ebp - 0x6b4]
je 0x4a24d9
mov dword [ebp - 0x6bc], 1
jmp 0x4a24e3
mov dword [ebp - 0x6bc], 0
mov edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + 8]
and eax, 1
je 0x4a2516
mov dword [ebp - 0x108], 2
jmp 0x4a255e
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.0049cfd0
add esp, 4
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], edx
mov edx, dword [ebp - 0x6c4]
or edx, dword [ebp - 0x6c0]
je 0x4a2548
mov dword [ebp - 0x6c8], 1
jmp 0x4a2552
mov dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x28]
movzx edx, byte [ecx]
cmp edx, 0x47
jne 0x4a2588
mov eax, dword [ebp - 0x104]
imul eax, eax, 3
mov ecx, dword [ebp - 0x108]
movzx edx, byte [eax + ecx + 0x64a8c4]
mov dword [ebp - 0x104], edx
jmp 0x4a25a5
mov eax, dword [ebp - 0x104]
imul eax, eax, 3
mov ecx, dword [ebp - 0x108]
movzx edx, byte [eax + ecx + 0x64a908]
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x104], 2
jne 0x4a25d5
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 8]
and eax, 0xffff3e00
or eax, 1
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
jmp 0x4a25fa
mov eax, dword [ebp - 0x104]
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 8]
and eax, 0xffff3e00
or eax, 4
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
call fcn.00498510
add esp, 4
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
and edx, 1
jne 0x4a268c
mov eax, 4
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
mov edx, dword [ebp - 0x30]
push edx
call fcn.0049cfd0
add esp, 4
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], edx
mov eax, dword [ebp - 0x6d0]
or eax, dword [ebp - 0x6cc]
jne 0x4a2673
mov dword [ebp - 0x6d4], 1
jmp 0x4a267d
mov dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
call fcn.00498510
add esp, 4
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
and edx, 1
jne 0x4a26eb
mov eax, 4
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
mov edx, dword [ebp - 0x30]
push edx
call fcn.0049cfd0
add esp, 4
not eax
not edx
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov edx, dword [ebp + 8]
cmp dword [edx + 0xc4], 0
je 0x4a2790
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [eax + 0x58]
mov eax, ecx
cdq
mov ecx, 0x14
idiv ecx
mov dword [ebp - 0x10c], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc4]
mov ecx, dword [ebp - 0x10c]
shr ecx, 3
mov edx, dword [eax + 0x18]
movzx eax, byte [edx + ecx]
mov ecx, dword [ebp - 0x10c]
and ecx, 7
mov edx, 1
shl edx, cl
and eax, edx
je 0x4a274b
jmp 0x4a0a57
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc4]
mov edx, dword [ebp - 0x10c]
shr edx, 3
mov eax, dword [ecx + 0x18]
mov ecx, dword [ebp - 0x10c]
and ecx, 7
mov esi, 1
shl esi, cl
movzx ecx, byte [eax + edx]
or ecx, esi
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc4]
mov edx, dword [ebp - 0x10c]
shr edx, 3
mov eax, dword [eax + 0x18]
mov byte [edx + eax], cl
jmp 0x4a27a6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
mov eax, dword [ebp - 0x28]
mov ecx, dword [edx + 4]
cmp ecx, dword [eax + 4]
jne 0x4a27a6
jmp 0x4a0a57
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp - 0x28]
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
and eax, 1
je 0x4a27e3
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x110], edx
jmp 0x4a283b
mov eax, dword [ebp - 0x30]
push eax
call fcn.0049cf20
add esp, 4
fcomp qword [0x644d98]
fnstsw ax
test ah, 0x44
jnp 0x4a2808
mov dword [ebp - 0x6d8], 1
jmp 0x4a2812
mov dword [ebp - 0x6d8], 0
mov ecx, dword [ebp - 0x6d8]
mov dword [ebp - 0x110], ecx
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx]
cmp eax, 0x16
jne 0x4a283b
xor ecx, ecx
cmp dword [ebp - 0x110], 0
sete cl
mov dword [ebp - 0x110], ecx
cmp dword [ebp - 0x110], 0
je 0x4a2849
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
and edx, 1
je 0x4a286e
jmp 0x4a0a57
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
and eax, 1
jne 0x4a2893
jmp 0x4a0a57
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
movzx eax, byte [edx + 2]
test eax, eax
je 0x4a28c9
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
push edx
call fcn.00498510
add esp, 4
jmp 0x4a0a57
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x134], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
mov dword [ebp - 0x124], eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x134]
push edx
call fcn.004b2f40
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a2913
jmp 0x4a84c7
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x114], ecx
mov edx, dword [ebp - 0x134]
mov eax, dword [edx + 0x48]
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x1c]
cmp eax, dword [edx + 0x20]
je 0x4a2b6b
mov ecx, dword [ebp - 0x134]
movzx edx, byte [ecx + 2]
test edx, edx
je 0x4a29d4
mov eax, dword [ebp - 0x134]
movzx ecx, byte [eax]
cmp ecx, 3
jne 0x4a29bb
mov edx, dword [ebp - 0x134]
mov eax, dword [edx + 0x28]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x180], edx
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x180]
mov dword [eax + 0x54], ecx
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x180]
mov dword [edx + 0x50], eax
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x11c]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x4c], eax
jmp 0x4a29cf
mov ecx, dword [ebp - 0x114]
push ecx
call fcn.00498510
add esp, 4
jmp 0x4a3138
jmp 0x4a2a66
mov edx, dword [ebp - 0x134]
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x17c], eax
mov ecx, dword [ebp - 0x17c]
push ecx
call fcn.00496b80
add esp, 4
mov edx, dword [ebp - 0x134]
mov dword [edx + 0x50], eax
lea eax, [ebp - 0x180]
push eax
mov ecx, dword [ebp - 0x17c]
push ecx
call fcn.004ab010
add esp, 8
mov edx, dword [ebp - 0x134]
mov dword [edx + 0x4c], eax
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax + 0x50]
cmp ecx, dword [ebp - 0x180]
ja 0x4a2a3f
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax + 0x50]
mov dword [edx + 0x54], ecx
jmp 0x4a2a66
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 4]
mov ecx, dword [edx + 0x50]
cmp ecx, dword [eax + 0x60]
jbe 0x4a2a57
jmp 0x4a85c0
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x180]
mov dword [edx + 0x54], eax
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x20]
mov dword [ecx + 0x1c], eax
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + 0x4c]
movzx eax, byte [edx]
cmp eax, 0x80
jge 0x4a2aa6
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + 0x4c]
movzx eax, byte [edx]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x6dc], 1
jmp 0x4a2ac8
lea ecx, [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x134]
mov eax, dword [edx + 0x4c]
push eax
call fcn.004a8af0
add esp, 8
movzx ecx, al
mov dword [ebp - 0x6dc], ecx
movzx edx, byte [ebp - 0x6dc]
mov eax, dword [ebp - 0x134]
mov dword [eax + 0x30], edx
xor ecx, ecx
mov edx, dword [ebp - 0x134]
mov word [edx + 0x3a], cx
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x12c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x180]
cmp edx, dword [ebp - 0x12c]
jae 0x4a2b4e
mov eax, dword [ebp - 0x134]
mov dword [eax + 0x4c], 0
mov ecx, dword [ebp - 0x134]
mov dword [ecx + 0x54], 0
cmp dword [ebp - 0x12c], 0x18003
ja 0x4a2b37
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x12c]
cmp eax, dword [edx + 0x50]
jbe 0x4a2b4c
push 0x13e1c
call fcn.00504e80
add esp, 4
mov dword [ebp - 8], eax
jmp 0x4a84c7
jmp 0x4a2b6b
cmp dword [ebp - 0x12c], 0
jbe 0x4a2b6b
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + 0x4c]
mov dword [ebp - 0x168], edx
jmp 0x4a2c06
mov eax, dword [ebp - 0x134]
movzx ecx, word [eax + 0x3a]
cmp ecx, dword [ebp - 0x124]
jg 0x4a2ebb
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x128]
mov ecx, dword [edx + 0x30]
cmp ecx, dword [eax]
jae 0x4a2e60
mov edx, dword [ebp - 0x134]
cmp dword [edx + 0x4c], 0
jne 0x4a2bf7
push 0x28
push 0
lea eax, [ebp - 0x160]
push eax
call fcn.005b4de0
add esp, 0xc
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x128]
mov eax, dword [edx]
push eax
push 0
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004b2d20
add esp, 0x10
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a2be9
jmp 0x4a84c7
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x168], eax
jmp 0x4a2c06
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + 0x4c]
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x134]
movzx ecx, word [eax + 0x3a]
mov dword [ebp - 0x118], ecx
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x128]
mov ecx, dword [eax + edx*4]
xor edx, edx
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x168]
add ecx, dword [eax + 0x30]
mov dword [ebp - 0x164], ecx
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x168]
add eax, dword [edx]
mov dword [ebp - 0x120], eax
mov ecx, dword [ebp - 0x164]
movzx edx, byte [ecx]
mov dword [ebp - 0x16c], edx
cmp dword [ebp - 0x16c], 0x80
jae 0x4a2cb6
mov eax, dword [ebp - 0x164]
add eax, 1
mov dword [ebp - 0x164], eax
movzx ecx, byte [ebp - 0x16c]
push ecx
call fcn.004b3240
add esp, 4
movzx eax, al
cdq
add eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
adc ecx, edx
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
jmp 0x4a2d06
lea edx, [ebp - 0x16c]
push edx
mov eax, dword [ebp - 0x164]
push eax
call fcn.004a8af0
add esp, 8
movzx ecx, al
add ecx, dword [ebp - 0x164]
mov dword [ebp - 0x164], ecx
mov edx, dword [ebp - 0x16c]
push edx
call fcn.004b3210
add esp, 4
xor ecx, ecx
add eax, dword [ebp - 0x178]
mov edx, dword [ebp - 0x174]
adc edx, ecx
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x16c]
mov dword [ecx + eax*4 + 0x58], edx
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x178]
mov edx, dword [ebp - 0x174]
and edx, 0
mov eax, dword [ebp - 0x118]
mov edx, dword [ebp - 0x128]
mov dword [edx + eax*4], ecx
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x124]
jg 0x4a2d69
mov ecx, dword [ebp - 0x164]
cmp ecx, dword [ebp - 0x120]
jb 0x4a2c5c
mov edx, dword [ebp - 0x164]
cmp edx, dword [ebp - 0x120]
jb 0x4a2db8
mov eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x120]
ja 0x4a2ded
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + 0x50]
xor eax, eax
mov dword [ebp - 0x6e4], edx
mov dword [ebp - 0x6e0], eax
mov ecx, dword [ebp - 0x178]
cmp ecx, dword [ebp - 0x6e4]
jne 0x4a2ded
mov edx, dword [ebp - 0x174]
cmp edx, dword [ebp - 0x6e0]
jne 0x4a2ded
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax + 0x50]
xor edx, edx
mov dword [ebp - 0x6ec], ecx
mov dword [ebp - 0x6e8], edx
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x6e8]
jb 0x4a2e1d
ja 0x4a2ded
mov ecx, dword [ebp - 0x178]
cmp ecx, dword [ebp - 0x6ec]
jbe 0x4a2e1d
mov edx, dword [ebp - 0x134]
cmp dword [edx + 0x4c], 0
jne 0x4a2e08
lea eax, [ebp - 0x160]
push eax
call fcn.00498ea0
add esp, 4
push 0x13e57
call fcn.00504e80
add esp, 4
mov dword [ebp - 8], eax
jmp 0x4a84c7
mov ecx, dword [ebp - 0x134]
mov dx, word [ebp - 0x118]
mov word [ecx + 0x3a], dx
mov eax, dword [ebp - 0x164]
sub eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x134]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 0x134]
cmp dword [edx + 0x4c], 0
jne 0x4a2e5e
lea eax, [ebp - 0x160]
push eax
call fcn.00498ea0
add esp, 4
jmp 0x4a2e6a
mov dword [ebp - 0x16c], 0
mov ecx, dword [ebp - 0x134]
movzx edx, word [ecx + 0x3a]
cmp edx, dword [ebp - 0x124]
jg 0x4a2eb9
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax + 1]
cmp ecx, 0xfffffff5
jne 0x4a2ea5
push 0x800
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x114]
push ecx
call fcn.004b2c80
add esp, 0xc
jmp 0x4a2eb4
mov edx, dword [ebp - 0x114]
push edx
call fcn.00498510
add esp, 4
jmp 0x4a3138
jmp 0x4a2ed1
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + eax*4 + 0x58]
mov dword [ebp - 0x16c], edx
mov eax, dword [ebp - 0x114]
movzx ecx, word [eax + 8]
and ecx, 0x2460
je 0x4a2ef2
mov edx, dword [ebp - 0x114]
push edx
call fcn.00498510
add esp, 4
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x128]
mov eax, dword [eax + 0x54]
cmp eax, dword [edx + ecx*4 + 4]
jb 0x4a3048
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x128]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x168], edx
cmp dword [ebp - 0x16c], 0xc
jae 0x4a2f5a
mov edx, dword [ebp - 0x114]
push edx
mov eax, dword [ebp - 0x16c]
push eax
mov ecx, dword [ebp - 0x168]
push ecx
call fcn.004b3320
add esp, 0xc
jmp 0x4a3043
mov edx, dword [ebp - 0x16c]
sub edx, 0xc
shr edx, 1
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x130]
mov dword [eax + 0xc], ecx
mov edx, dword [ebp - 0x114]
mov al, byte [ebp - 0x1d]
mov byte [edx + 0xa], al
mov ecx, dword [ebp - 0x130]
add ecx, 2
mov edx, dword [ebp - 0x114]
cmp dword [edx + 0x18], ecx
jge 0x4a2fcf
mov eax, 1
mov ecx, dword [ebp - 0x114]
mov word [ecx + 8], ax
push 0
mov edx, dword [ebp - 0x130]
add edx, 2
push edx
mov eax, dword [ebp - 0x114]
push eax
call fcn.00498b80
add esp, 0xc
test eax, eax
je 0x4a2fcd
jmp 0x4a85dd
jmp 0x4a2fe1
mov ecx, dword [ebp - 0x114]
mov edx, dword [ebp - 0x114]
mov eax, dword [edx + 0x14]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0x130]
push ecx
mov edx, dword [ebp - 0x168]
push edx
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.005b5620
add esp, 0xc
mov edx, dword [ebp - 0x114]
mov eax, dword [edx + 0x10]
mov ecx, dword [ebp - 0x130]
mov byte [eax + ecx], 0
mov edx, dword [ebp - 0x114]
mov eax, dword [edx + 0x10]
mov ecx, dword [ebp - 0x130]
mov byte [ecx + eax + 1], 0
mov edx, dword [ebp - 0x16c]
and edx, 1
mov eax, dword [ebp - 0x114]
mov cx, word [edx*2 + 0x64a914]
mov word [eax + 8], cx
jmp 0x4a3138
mov edx, dword [ebp - 0x114]
mov al, byte [ebp - 0x1d]
mov byte [edx + 0xa], al
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 0xc0
je 0x4a3086
cmp dword [ebp - 0x16c], 0xc
jb 0x4a3077
mov eax, dword [ebp - 0x16c]
and eax, 1
je 0x4a30a4
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 0x80
jne 0x4a30a4
mov eax, dword [ebp - 0x16c]
push eax
call fcn.004b3210
add esp, 4
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x4a30c1
mov ecx, dword [ebp - 0x114]
push ecx
mov edx, dword [ebp - 0x16c]
push edx
push 0x6b6db4
call fcn.004b3320
add esp, 0xc
jmp 0x4a3138
mov eax, dword [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x130]
push ecx
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x128]
mov ecx, dword [eax + edx*4]
push ecx
mov edx, dword [ebp - 0x134]
mov eax, dword [edx + 0x28]
push eax
call fcn.004b2d20
add esp, 0x10
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a30ff
jmp 0x4a84c7
mov ecx, dword [ebp - 0x114]
push ecx
mov edx, dword [ebp - 0x16c]
push edx
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.004b3320
add esp, 0xc
mov edx, dword [ebp - 0x114]
movzx eax, word [edx + 8]
and eax, 0xffffefff
mov ecx, dword [ebp - 0x114]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x184]
mov cl, byte [eax]
mov byte [ebp - 0x6ed], cl
movzx edx, byte [ebp - 0x1d]
push edx
movzx eax, byte [ebp - 0x6ed]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.004b4e50
add esp, 0xc
mov edx, dword [ebp - 0x184]
add edx, 1
mov dword [ebp - 0x184], edx
mov eax, dword [ebp - 0x30]
add eax, 0x28
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
test edx, edx
jne 0x4a3158
jmp case.0x4a099b.74
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1d8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1cc], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x1d8]
sub ecx, 1
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d0], ecx
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 0x8f]
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x1ac], 0
je 0x4a32be
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1ac]
mov dl, byte [ecx]
mov byte [ebp - 0x6ee], dl
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x6f4], eax
movzx ecx, byte [ebp - 0x1d]
push ecx
movzx edx, byte [ebp - 0x6ee]
push edx
mov eax, dword [ebp - 0x6f4]
push eax
call fcn.004b4e50
add esp, 0xc
mov ecx, dword [ebp - 0x1b0]
add ecx, 0x28
mov dword [ebp - 0x1b0], ecx
mov edx, dword [ebp - 0x1ac]
add edx, 1
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x1ac]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x4a325d
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1b0], edx
lea eax, [ebp - 0x1bc]
push eax
mov ecx, dword [ebp - 0x1b4]
push ecx
mov edx, dword [ebp - 0x1b0]
push edx
call fcn.004b3050
add esp, 0xc
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x188]
mov dword [eax + 0x1c], ecx
mov edx, dword [ebp - 0x1b0]
movzx eax, word [edx + 8]
and eax, 0x4000
je 0x4a336c
mov ecx, dword [ebp - 0x1a8]
or ecx, dword [ebp - 0x1a4]
je 0x4a3335
mov edx, dword [ebp - 0x1b0]
push edx
call fcn.00498e10
add esp, 4
test eax, eax
je 0x4a3333
jmp 0x4a85dd
jmp 0x4a336c
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax]
cdq
add eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x18c]
adc ecx, edx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1bc]
sub eax, dword [edx]
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp - 0x1bc]
xor edx, edx
add ecx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1a4]
adc eax, edx
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x188], 0x7f
ja 0x4a33a3
mov dword [ebp - 0x6f8], 1
jmp 0x4a33bb
mov ecx, dword [ebp - 0x188]
xor edx, edx
push edx
push ecx
call fcn.004a8bf0
add esp, 8
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x19c]
add eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x1b0]
cmp ecx, dword [ebp - 0x1cc]
jne 0x4a33dd
jmp 0x4a33f9
mov edx, dword [ebp - 0x1b0]
sub edx, 0x28
mov dword [ebp - 0x1b0], edx
mov eax, 1
test eax, eax
jne 0x4a32ca
cmp dword [ebp - 0x19c], 0x7e
jg 0x4a3413
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x4a3464
mov eax, dword [ebp - 0x19c]
cdq
push edx
push eax
call fcn.004a8bf0
add esp, 8
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x19c]
add edx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x19c]
cdq
push edx
push eax
call fcn.004a8bf0
add esp, 8
cmp dword [ebp - 0x198], eax
jge 0x4a3464
mov eax, dword [ebp - 0x19c]
add eax, 1
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
cdq
add eax, dword [ebp - 0x1a8]
adc edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], edx
mov ecx, dword [ebp - 0x1c8]
add ecx, dword [ebp - 0x190]
mov esi, dword [ebp - 0x1c4]
adc esi, dword [ebp - 0x18c]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x60]
cdq
mov dword [ebp - 0x700], ecx
mov dword [ebp - 0x6fc], esi
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x6fc]
cmp eax, dword [ebp - 0x704]
jl 0x4a34dd
jg 0x4a34d8
mov ecx, dword [ebp - 0x700]
cmp ecx, dword [ebp - 0x708]
jbe 0x4a34dd
jmp 0x4a85c0
mov edx, dword [ebp - 0x1c8]
push edx
mov eax, dword [ebp - 0x14]
push eax
call fcn.00498b30
add esp, 8
test eax, eax
je 0x4a34f9
jmp 0x4a85dd
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x1b8], edx
cmp dword [ebp - 0x19c], 0x80
jae 0x4a352b
mov eax, dword [ebp - 0x1b8]
mov cl, byte [ebp - 0x19c]
mov byte [eax], cl
mov dword [ebp - 0x70c], 1
jmp 0x4a3549
mov eax, dword [ebp - 0x19c]
cdq
push edx
push eax
mov edx, dword [ebp - 0x1b8]
push edx
call fcn.004a8920
add esp, 0xc
mov dword [ebp - 0x70c], eax
movzx eax, byte [ebp - 0x70c]
mov dword [ebp - 0x194], eax
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x1d4], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [eax + 0x1c]
mov dword [ebp - 0x188], ecx
cmp dword [ebp - 0x188], 0x80
jae 0x4a35a9
mov edx, dword [ebp - 0x1b8]
add edx, dword [ebp - 0x194]
mov al, byte [ebp - 0x188]
mov byte [edx], al
mov dword [ebp - 0x710], 1
jmp 0x4a35ce
mov ecx, dword [ebp - 0x188]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x194]
push eax
call fcn.004a8920
add esp, 0xc
mov dword [ebp - 0x710], eax
movzx ecx, byte [ebp - 0x710]
add ecx, dword [ebp - 0x194]
mov dword [ebp - 0x194], ecx
mov edx, dword [ebp - 0x188]
push edx
mov eax, dword [ebp - 0x1b0]
push eax
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0x1d4]
push ecx
call fcn.004b3250
add esp, 0xc
add eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d4], eax
mov edx, dword [ebp - 0x1b0]
add edx, 0x28
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x1d0]
jbe 0x4a356e
mov ecx, dword [ebp - 0x1c8]
mov edx, dword [ebp - 0x14]
mov dword [edx + 0xc], ecx
mov eax, 0x10
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
mov edx, dword [ebp - 0x190]
or edx, dword [ebp - 0x18c]
je 0x4a3675
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 8]
or eax, 0x4000
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1dc], 0
lea edx, [ebp - 0x1e0]
push edx
mov eax, dword [ebp - 0x1e4]
push eax
call fcn.004b1470
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a36ca
jmp 0x4a84c7
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1e0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1dc]
mov dword [eax + 4], edx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x1f4], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1f4], 0
jne 0x4a3873
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xa4], 0
jle 0x4a3744
push str.cannot_open_savepoint___SQL_statements_in_progress
mov edx, dword [ebp + 8]
push edx
call fcn.0049bc80
add esp, 8
mov dword [ebp - 8], 5
jmp 0x4a386e
mov eax, dword [ebp - 0x1e8]
push eax
call fcn.00484d70
add esp, 4
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1b4]
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x1b0]
push edx
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.004c4dd0
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a3788
jmp 0x4a84c7
mov edx, dword [ebp - 0x204]
add edx, 0x21
xor eax, eax
push eax
push edx
mov ecx, dword [ebp - 4]
push ecx
call fcn.00482780
add esp, 0xc
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
je 0x4a386e
mov edx, dword [ebp - 0x200]
add edx, 0x20
mov eax, dword [ebp - 0x200]
mov dword [eax], edx
mov ecx, dword [ebp - 0x204]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x1e8]
push edx
mov eax, dword [ebp - 0x200]
mov ecx, dword [eax]
push ecx
call fcn.005b5620
add esp, 0xc
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x43]
test eax, eax
je 0x4a3802
mov ecx, dword [ebp - 4]
mov byte [ecx + 0x43], 0
mov edx, dword [ebp - 4]
mov byte [edx + 0x4b], 1
jmp 0x4a3817
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1b0]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x1b0], ecx
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1a8]
mov dword [eax + 0x18], edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x200]
mov dword [eax + 0x1a8], ecx
mov edx, dword [ebp - 0x200]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1b8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0x1bc]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp - 0x200]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1c0]
mov dword [ecx + 0x10], eax
mov edx, dword [edx + 0x1c4]
mov dword [ecx + 0x14], edx
jmp 0x4a3c58
mov dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1a8]
mov dword [ebp - 0x1fc], ecx
jmp 0x4a389d
mov edx, dword [ebp - 0x1fc]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0
je 0x4a38d3
mov ecx, dword [ebp - 0x1e8]
push ecx
mov edx, dword [ebp - 0x1fc]
mov eax, dword [edx]
push eax
call fcn.00484dd0
add esp, 8
test eax, eax
je 0x4a38d3
mov ecx, dword [ebp - 0x1f8]
add ecx, 1
mov dword [ebp - 0x1f8], ecx
jmp 0x4a388e
cmp dword [ebp - 0x1fc], 0
jne 0x4a3900
mov edx, dword [ebp - 0x1e8]
push edx
push str.no_such_savepoint:__s
mov eax, dword [ebp + 8]
push eax
call fcn.0049bc80
add esp, 0xc
mov dword [ebp - 8], 1
jmp 0x4a3c58
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xa4], 0
jle 0x4a3932
cmp dword [ebp - 0x1f4], 1
jne 0x4a3932
push str.cannot_release_savepoint___SQL_statements_in_progress
mov edx, dword [ebp + 8]
push edx
call fcn.0049bc80
add esp, 8
mov dword [ebp - 8], 5
jmp 0x4a3c58
mov eax, dword [ebp - 0x1fc]
cmp dword [eax + 0x18], 0
jne 0x4a3955
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x4b]
test edx, edx
je 0x4a3955
mov dword [ebp - 0x714], 1
jmp 0x4a395f
mov dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
je 0x4a39fa
cmp dword [ebp - 0x1f4], 1
jne 0x4a39fa
push 1
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049bbe0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a399d
jmp 0x4a8597
mov edx, dword [ebp - 4]
mov byte [edx + 0x43], 1
mov eax, dword [ebp + 8]
push eax
call fcn.004996d0
add esp, 4
cmp eax, 5
jne 0x4a39e5
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x24], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x43], 0
mov dword [ebp - 8], 5
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov dword [ecx + 0x28], edx
jmp 0x4a8597
mov eax, dword [ebp - 4]
mov byte [eax + 0x4b], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x28]
mov dword [ebp - 8], edx
jmp 0x4a3b3e
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1b0]
sub ecx, dword [ebp - 0x1f8]
sub ecx, 1
mov dword [ebp - 0x1f8], ecx
cmp dword [ebp - 0x1f4], 2
jne 0x4a3a9f
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
and eax, 0x800000
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x1f0], 0
jmp 0x4a3a51
mov ecx, dword [ebp - 0x1f0]
add ecx, 1
mov dword [ebp - 0x1f0], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [edx + 0x14]
jge 0x4a3a9d
xor ecx, ecx
cmp dword [ebp - 0x20c], 0
sete cl
push ecx
push 0x204
mov edx, dword [ebp - 0x1f0]
shl edx, 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 4]
push edx
call fcn.004982c0
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a3a9b
jmp 0x4a84c7
jmp 0x4a3a42
jmp 0x4a3aa9
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x1f0], 0
jmp 0x4a3ac4
mov eax, dword [ebp - 0x1f0]
add eax, 1
mov dword [ebp - 0x1f0], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x1f0]
cmp edx, dword [ecx + 0x14]
jge 0x4a3b0c
mov eax, dword [ebp - 0x1f8]
push eax
mov ecx, dword [ebp - 0x1f4]
push ecx
mov edx, dword [ebp - 0x1f0]
shl edx, 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 4]
push edx
call fcn.0049bb00
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a3b0a
jmp 0x4a84c7
jmp 0x4a3ab5
cmp dword [ebp - 0x20c], 0
je 0x4a3b3e
mov eax, dword [ebp - 4]
push eax
call fcn.004b4c50
add esp, 4
mov ecx, dword [ebp - 4]
push ecx
call fcn.004bc990
add esp, 4
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
or eax, 0x800000
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x18], eax
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1a8]
cmp eax, dword [ebp - 0x1fc]
je 0x4a3b9a
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1a8]
mov dword [ebp - 0x1ec], edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1ec]
mov edx, dword [ecx + 0x18]
mov dword [eax + 0x1a8], edx
mov eax, dword [ebp - 0x1ec]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004823c0
add esp, 8
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1b0]
sub eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x1b0], eax
jmp 0x4a3b3e
cmp dword [ebp - 0x1f4], 1
jne 0x4a3be8
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x1fc]
mov ecx, dword [eax + 0x18]
mov dword [edx + 0x1a8], ecx
mov edx, dword [ebp - 0x1fc]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004823c0
add esp, 8
cmp dword [ebp - 0x208], 0
jne 0x4a3be6
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1b0]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x1b0], edx
jmp 0x4a3c1e
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x1fc]
mov eax, dword [edx + 8]
mov dword [ecx + 0x1b8], eax
mov edx, dword [edx + 0xc]
mov dword [ecx + 0x1bc], edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1fc]
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x1c0], edx
mov ecx, dword [ecx + 0x14]
mov dword [eax + 0x1c4], ecx
cmp dword [ebp - 0x208], 0
je 0x4a3c30
cmp dword [ebp - 0x1f4], 2
jne 0x4a3c58
mov edx, dword [ebp - 0x1f8]
push edx
mov eax, dword [ebp - 0x1f4]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004c4dd0
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a3c58
jmp 0x4a84c7
cmp dword [ebp - 8], 0
je 0x4a3c63
jmp 0x4a84c7
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x210], edx
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x43]
cmp dword [ebp - 0x214], ecx
je 0x4a3d8b
cmp dword [ebp - 0x210], 0
je 0x4a3cb6
push 0x204
mov edx, dword [ebp - 4]
push edx
call fcn.005029e0
add esp, 8
mov eax, dword [ebp - 4]
mov byte [eax + 0x43], 1
jmp 0x4a3d14
cmp dword [ebp - 0x214], 0
je 0x4a3cea
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xa4], 0
jle 0x4a3cea
push str.cannot_commit_transaction___SQL_statements_in_progress
mov edx, dword [ebp + 8]
push edx
call fcn.0049bc80
add esp, 8
mov dword [ebp - 8], 5
jmp 0x4a84c7
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.0049bbe0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a3d08
jmp 0x4a8597
mov ecx, dword [ebp - 4]
mov dl, byte [ebp - 0x214]
mov byte [ecx + 0x43], dl
mov eax, dword [ebp + 8]
push eax
call fcn.004996d0
add esp, 4
cmp eax, 5
jne 0x4a3d5f
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x24], eax
mov eax, 1
sub eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 4]
mov byte [ecx + 0x43], al
mov dword [ebp - 8], 5
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [edx + 0x28], eax
jmp 0x4a8597
mov ecx, dword [ebp - 4]
push ecx
call fcn.005022b0
add esp, 4
mov edx, dword [ebp + 8]
cmp dword [edx + 0x28], 0
jne 0x4a3d7d
mov dword [ebp - 8], 0x65
jmp 0x4a3d84
mov dword [ebp - 8], 1
jmp 0x4a8597
cmp dword [ebp - 0x214], 0
jne 0x4a3da0
mov dword [ebp - 0x718], str.cannot_start_a_transaction_within_a_transaction
jmp 0x4a3dcb
cmp dword [ebp - 0x210], 0
je 0x4a3db5
mov dword [ebp - 0x71c], str.cannot_rollback___no_transaction_is_active
jmp 0x4a3dbf
mov dword [ebp - 0x71c], str.cannot_commit___no_transaction_is_active
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x718]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0049bc80
add esp, 8
mov dword [ebp - 8], 1
jmp 0x4a84c7
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
je 0x4a3e12
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x18]
and edx, 0x80000
je 0x4a3e12
mov dword [ebp - 8], 8
jmp 0x4a84c7
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
shl ecx, 4
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + ecx + 4]
mov dword [ebp - 0x218], ecx
cmp dword [ebp - 0x218], 0
je 0x4a3f9f
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x218]
push ecx
call fcn.00493910
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a3e8c
mov edx, dword [ebp - 8]
and edx, 0xff
cmp edx, 5
jne 0x4a3e87
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x24], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dword [eax + 0x28], ecx
jmp 0x4a8597
jmp 0x4a84c7
mov edx, dword [ebp - 0x28]
cmp dword [edx + 8], 0
je 0x4a3f69
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x94]
shr ecx, 6
and ecx, 1
je 0x4a3f69
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x43]
test eax, eax
je 0x4a3ec9
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xa0], 1
jle 0x4a3f69
mov edx, dword [ebp + 8]
cmp dword [edx + 0x30], 0
jne 0x4a3eff
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1b4]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x1b4], ecx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1b0]
mov edx, dword [ebp - 4]
add ecx, dword [edx + 0x1b4]
mov eax, dword [ebp + 8]
mov dword [eax + 0x30], ecx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
sub edx, 1
push edx
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.004c4dd0
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a3f39
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
push edx
mov eax, dword [ebp - 0x218]
push eax
call fcn.004aade0
add esp, 8
mov dword [ebp - 8], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1b8]
mov dword [ecx + 0x48], eax
mov edx, dword [edx + 0x1bc]
mov dword [ecx + 0x4c], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1c0]
mov dword [eax + 0x50], edx
mov ecx, dword [ecx + 0x1c4]
mov dword [eax + 0x54], ecx
lea edx, [ebp - 0x21c]
push edx
push 1
mov eax, dword [ebp - 0x218]
push eax
call fcn.00497a30
add esp, 0xc
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
shl edx, 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 0xc]
mov eax, dword [edx + 4]
mov dword [ebp - 0x220], eax
jmp 0x4a3fb5
mov dword [ebp - 0x21c], 0
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x220], ecx
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
test eax, eax
je 0x4a4056
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x21c]
cmp edx, dword [ecx + 0xc]
jne 0x4a3fe0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x220]
cmp ecx, dword [eax + 0x10]
je 0x4a4056
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x6c]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004823c0
add esp, 8
push 0x6ab02c
mov edx, dword [ebp - 4]
push edx
call fcn.0049deb0
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x6c], eax
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
shl eax, 4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + eax + 0xc]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x21c]
je 0x4a403a
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004bc940
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x94]
or eax, 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x94], eax
mov dword [ebp - 8], 0x11
cmp dword [ebp - 8], 0
je 0x4a4061
jmp 0x4a84c7
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x228], edx
lea eax, [ebp - 0x224]
push eax
mov ecx, dword [ebp - 0x228]
push ecx
mov edx, dword [ebp - 0x22c]
shl edx, 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 4]
push edx
call fcn.00497a30
add esp, 0xc
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x224]
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
shl eax, 4
mov ecx, dword [ebp - 4]
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x230], eax
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 4]
push ecx
call fcn.00497ab0
add esp, 0xc
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x28]
cmp dword [edx + 8], 1
jne 0x4a4135
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
mov dword [ecx], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x18]
or edx, 0x800000
mov eax, dword [ebp - 4]
mov dword [eax + 0x18], edx
jmp 0x4a4150
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 8], 2
jne 0x4a4150
mov edx, dword [ebp - 0x230]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x28]
mov dl, byte [ecx + 0xc]
mov byte [eax + 0x4c], dl
mov eax, dword [ebp - 0x28]
cmp dword [eax + 4], 1
jne 0x4a417a
mov ecx, dword [ebp - 4]
push ecx
call fcn.004b4c50
add esp, 4
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x94]
and eax, 0xfffffffe
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x94], eax
cmp dword [ebp - 8], 0
je 0x4a4185
jmp 0x4a84c7
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je case.0x4a099b.104
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x28]
mov eax, dword [ecx + 0x34]
cmp eax, dword [edx + 8]
jne case.0x4a099b.104
jmp 0x4a43bf
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x94]
and edx, 1
je 0x4a41d8
mov dword [ebp - 8], 0x204
jmp 0x4a84c7
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x238], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
shl ecx, 4
mov edx, dword [ebp - 4]
add ecx, dword [edx + 0x10]
mov dword [ebp - 0x248], ecx
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x234], ecx
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx]
cmp eax, 0x69
jne 0x4a4278
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 8
or edx, 4
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 0xc]
movzx edx, byte [ecx + 0x4c]
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 0x8f]
cmp edx, ecx
jge 0x4a4276
mov edx, dword [ebp - 0x248]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [eax + 0x4c]
mov byte [ecx + 0x8f], dl
jmp 0x4a4282
mov dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
and ecx, 0x10
je 0x4a42b4
mov edx, dword [ebp - 0x238]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004b28b0
add esp, 4
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov dword [ebp - 0x238], edx
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax + 1]
cmp ecx, 0xfffffff7
jne 0x4a42ea
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x240]
movzx edx, word [ecx + 6]
mov eax, dword [ebp - 0x240]
movzx ecx, word [eax + 8]
add edx, ecx
mov dword [ebp - 0x250], edx
jmp 0x4a4302
mov edx, dword [ebp - 0x28]
movsx eax, byte [edx + 1]
cmp eax, 0xfffffffd
jne 0x4a4302
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x250], edx
push 0
mov eax, dword [ebp - 0x24c]
push eax
mov ecx, dword [ebp - 0x250]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4cf0
add esp, 0x14
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jne 0x4a4339
jmp 0x4a85dd
mov edx, dword [ebp - 0x23c]
mov byte [edx + 2], 1
mov eax, dword [ebp - 0x23c]
mov ecx, dword [eax + 8]
or ecx, 4
mov edx, dword [ebp - 0x23c]
mov dword [edx + 8], ecx
mov eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x238]
mov dword [eax + 0x34], ecx
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 0x240]
push ecx
mov edx, dword [ebp - 0x244]
push edx
mov eax, dword [ebp - 0x238]
push eax
mov ecx, dword [ebp - 0x234]
push ecx
call fcn.004aae30
add esp, 0x14
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x240]
mov dword [edx + 0x2c], eax
mov ecx, dword [ebp - 0x28]
movsx edx, byte [ecx + 1]
xor eax, eax
cmp edx, 0xfffffff7
setne al
mov ecx, dword [ebp - 0x23c]
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
and eax, 3
push eax
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004a9a20
add esp, 8
cmp dword [ebp - 8], 0
je 0x4a43e7
jmp 0x4a84c7
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x258], ecx
push 0
push 0xffffffffffffffff
mov edx, dword [ebp - 0x258]
movsx eax, word [edx + 0x38]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4cf0
add esp, 0x14
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jne 0x4a4437
jmp 0x4a85dd
mov ecx, dword [ebp - 0x254]
mov byte [ecx + 2], 1
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 8]
or eax, 1
mov ecx, dword [ebp - 0x254]
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x258]
mov ecx, dword [eax + 0x2c]
mov dword [edx + 0x2c], ecx
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x258]
mov cl, byte [eax + 4]
mov byte [edx + 4], cl
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 0x254]
mov edx, dword [ecx + 0x2c]
push edx
push 4
push 1
mov eax, dword [ebp - 0x258]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.004aae30
add esp, 0x14
mov dword [ebp - 8], eax
jmp case.0x4a099b.74
push 0
push 0xffffffffffffffff
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4cf0
add esp, 0x14
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jne 0x4a44de
jmp 0x4a85dd
mov ecx, dword [ebp - 0x25c]
mov byte [ecx + 2], 1
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 8]
or eax, 1
mov ecx, dword [ebp - 0x25c]
mov dword [ecx + 8], eax
mov edx, dword [0x64a918]
push edx
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
or ecx, 5
push ecx
mov edx, dword [ebp - 0x25c]
add edx, 0xc
push edx
mov eax, dword [ebp - 4]
push eax
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
push edx
call fcn.004a9a30
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a454d
push 1
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.00493910
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a4612
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x25c]
mov edx, dword [ebp - 0x260]
mov dword [ecx + 0x2c], edx
cmp dword [ebp - 0x260], 0
je 0x4a45e3
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
or ecx, 2
push ecx
lea edx, [ebp - 0x264]
push edx
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.004b0c90
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a45d7
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
push 4
mov edx, dword [ebp - 0x264]
push edx
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.004aae30
add esp, 0x14
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x25c]
mov byte [edx + 4], 0
jmp 0x4a4612
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax + 0x28]
push ecx
push 0
push 4
push 1
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 0xc]
push eax
call fcn.004aae30
add esp, 0x14
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x25c]
mov byte [ecx + 4], 1
cmp dword [ebp - 8], 0
je 0x4a461d
jmp 0x4a84c7
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
xor ecx, ecx
cmp eax, 8
setne cl
and ecx, 1
shl ecx, 2
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx + 8]
and eax, 0xfffffffb
or eax, ecx
mov ecx, dword [ebp - 0x25c]
mov dword [ecx + 8], eax
jmp case.0x4a099b.74
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4cf0
add esp, 0x14
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jne 0x4a4680
jmp 0x4a85dd
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x2c], eax
mov ecx, dword [ebp - 0x268]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004b69b0
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a46b7
jmp 0x4a84c7
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x26c]
mov esi, dword [ecx + 0x10]
add esi, 1
mov ecx, dword [ecx + 0x14]
adc ecx, 0
mov edi, dword [ebp - 0x26c]
mov dword [edi + 0x10], esi
mov dword [edi + 0x14], ecx
mov dword [ebp - 0x724], edx
mov dword [ebp - 0x720], eax
mov edx, dword [ebp - 0x724]
or edx, dword [ebp - 0x720]
jne 0x4a471a
jmp 0x4a0a57
jmp case.0x4a099b.74
push 3
push 0xffffffffffffffff
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4cf0
add esp, 0x14
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jne 0x4a4751
jmp 0x4a85dd
mov edx, dword [ebp - 0x270]
mov byte [edx + 2], 1
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
mov dword [eax + 0x28], edx
mov eax, dword [ebp - 0x270]
mov byte [eax + 4], 1
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00499e70
add esp, 8
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov dword [ecx + edx*4], 0
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x28]
movzx edx, byte [ecx]
mov dword [ebp - 0x29c], edx
mov dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x284]
mov byte [eax + 2], 0
mov ecx, dword [ebp - 0x284]
movzx edx, byte [ecx + 4]
test edx, edx
je 0x4a490a
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
movzx eax, word [edx + 8]
and eax, 0xe
cmp eax, 2
jne 0x4a4820
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004a0720
add esp, 8
mov edx, dword [ebp - 0xc]
push edx
call fcn.0049cfd0
add esp, 4
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0xc]
movzx ecx, word [eax + 8]
and ecx, 4
jne 0x4a48b4
mov edx, dword [ebp - 0xc]
movzx eax, word [edx + 8]
and eax, 8
jne 0x4a485a
jmp 0x4a0a57
fild qword [ebp - 0x280]
mov ecx, dword [ebp - 0xc]
fcomp qword [ecx]
fnstsw ax
test ah, 0x41
jne 0x4a4888
mov edx, dword [ebp - 0x29c]
and edx, 1
je 0x4a4886
mov eax, dword [ebp - 0x29c]
sub eax, 1
mov dword [ebp - 0x29c], eax
jmp 0x4a48b4
fild qword [ebp - 0x280]
mov ecx, dword [ebp - 0xc]
fcomp qword [ecx]
fnstsw ax
test ah, 5
jp 0x4a48b4
mov edx, dword [ebp - 0x29c]
and edx, 1
jne 0x4a48b4
mov eax, dword [ebp - 0x29c]
add eax, 1
mov dword [ebp - 0x29c], eax
lea ecx, [ebp - 0x274]
push ecx
push 0
mov edx, dword [ebp - 0x27c]
push edx
mov eax, dword [ebp - 0x280]
push eax
push 0
mov ecx, dword [ebp - 0x284]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004ab640
add esp, 0x18
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x280]
mov dword [eax + 0x40], ecx
mov edx, dword [ebp - 0x27c]
mov dword [eax + 0x44], edx
cmp dword [ebp - 8], 0
je 0x4a4905
jmp 0x4a84c7
jmp 0x4a49d7
push 2
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax + 0x28]
push ecx
call fcn.004b2890
add esp, 8
test eax, eax
je 0x4a492c
mov dword [ebp - 0x288], 1
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x284]
mov edx, dword [ecx + 0x2c]
mov dword [ebp - 0x298], edx
mov ax, word [ebp - 0x2a0]
mov word [ebp - 0x290], ax
mov ecx, dword [ebp - 0x29c]
sub ecx, 0x18
and ecx, 1
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 1
mov byte [ebp - 0x28e], cl
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x294], eax
mov byte [ebp - 0x28a], 0
lea ecx, [ebp - 0x274]
push ecx
push 0
push 0
push 0
lea edx, [ebp - 0x298]
push edx
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax + 0x28]
push ecx
call fcn.004ab640
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a49be
jmp 0x4a84c7
cmp dword [ebp - 0x288], 0
je 0x4a49d7
movzx edx, byte [ebp - 0x28a]
test edx, edx
jne 0x4a49d7
jmp 0x4a4adf
mov eax, dword [ebp - 0x284]
mov byte [eax + 3], 0
mov ecx, dword [ebp - 0x284]
mov dword [ecx + 0x1c], 0
cmp dword [ebp - 0x29c], 0x1a
jl 0x4a4a65
cmp dword [ebp - 0x274], 0
jl 0x4a4a12
cmp dword [ebp - 0x274], 0
jne 0x4a4a59
cmp dword [ebp - 0x29c], 0x1b
jne 0x4a4a59
mov dword [ebp - 0x274], 0
push 0
mov edx, dword [ebp - 0x284]
mov eax, dword [edx + 0x28]
push eax
call fcn.004abce0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a4a57
cmp dword [ebp - 8], 0x65
jne 0x4a4a52
mov dword [ebp - 8], 0
mov dword [ebp - 0x274], 1
jmp 0x4a4a57
jmp 0x4a84c7
jmp 0x4a4a63
mov dword [ebp - 0x274], 0
jmp 0x4a4adf
cmp dword [ebp - 0x274], 0
jg 0x4a4a80
cmp dword [ebp - 0x274], 0
jne 0x4a4ac7
cmp dword [ebp - 0x29c], 0x18
jne 0x4a4ac7
mov dword [ebp - 0x274], 0
push 0
mov ecx, dword [ebp - 0x284]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004ac120
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a4ac5
cmp dword [ebp - 8], 0x65
jne 0x4a4ac0
mov dword [ebp - 8], 0
mov dword [ebp - 0x274], 1
jmp 0x4a4ac5
jmp 0x4a84c7
jmp 0x4a4adf
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax + 0x28]
push ecx
call fcn.004abc20
add esp, 4
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0
je 0x4a4aef
jmp 0x4a0a57
cmp dword [ebp - 0x288], 0
je 0x4a4b01
mov edx, dword [ebp - 0x28]
add edx, 0x14
mov dword [ebp - 0x28], edx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x2b4], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 0x10], 0
jle 0x4a4b74
mov edx, dword [ebp - 0x2b4]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x2cc], eax
mov ecx, dword [ebp - 0x28]
mov dx, word [ecx + 0x10]
mov word [ebp - 0x2c4], dx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c8], eax
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2b0], 0
jmp 0x4a4c0d
mov edx, dword [ebp - 0xc]
movzx eax, word [edx + 8]
and eax, 0x4000
je 0x4a4b96
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00498e10
add esp, 4
mov dword [ebp - 0x728], eax
jmp 0x4a4ba0
mov dword [ebp - 0x728], 0
mov edx, dword [ebp - 0x728]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x4a4bb4
jmp 0x4a85dd
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [eax + 0x2c]
push ecx
call fcn.004b3630
add esp, 4
mov dword [ebp - 0x2bc], eax
mov edx, dword [ebp - 0x2bc]
mov dword [ebp - 0x2b0], edx
cmp dword [ebp - 0x2bc], 0
jne 0x4a4be6
jmp 0x4a85dd
mov eax, dword [ebp - 0x2bc]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x2b4]
mov eax, dword [edx + 0x2c]
push eax
call fcn.004b36a0
add esp, 0x10
mov ecx, dword [ebp - 0x2bc]
mov byte [ecx + 0xa], 0
mov dword [ebp - 0x2ac], 0
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx]
cmp eax, 0x1c
jne 0x4a4c83
mov dword [ebp - 0x2b8], 0
jmp 0x4a4c47
mov ecx, dword [ebp - 0x2b8]
add ecx, 1
mov dword [ebp - 0x2b8], ecx
mov edx, dword [ebp - 0x2bc]
movzx eax, word [edx + 8]
cmp dword [ebp - 0x2b8], eax
jge 0x4a4c83
mov ecx, dword [ebp - 0x2b8]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x2bc]
mov eax, dword [edx + 4]
movzx ecx, word [eax + ecx + 8]
and ecx, 1
je 0x4a4c81
mov dword [ebp - 0x2ac], 1
jmp 0x4a4c83
jmp 0x4a4c38
lea edx, [ebp - 0x2a8]
push edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x2bc]
push eax
mov ecx, dword [ebp - 0x2b4]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004ab640
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 0x2b0], 0
je 0x4a4cc8
mov eax, dword [ebp - 0x2b0]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004823e0
add esp, 8
cmp dword [ebp - 8], 0
je 0x4a4cd3
jmp 0x4a84c7
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2a8]
mov dword [edx + 0x20], eax
xor ecx, ecx
cmp dword [ebp - 0x2a8], 0
sete cl
mov dword [ebp - 0x2a4], ecx
mov edx, 1
sub edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2b4]
mov byte [eax + 2], dl
mov ecx, dword [ebp - 0x2b4]
mov byte [ecx + 3], 0
mov edx, dword [ebp - 0x2b4]
mov dword [edx + 0x1c], 0
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
cmp ecx, 0x1e
jne 0x4a4d3a
cmp dword [ebp - 0x2a4], 0
je 0x4a4d38
jmp 0x4a0a57
jmp 0x4a4d51
cmp dword [ebp - 0x2ac], 0
jne 0x4a4d4c
cmp dword [ebp - 0x2a4], 0
jne 0x4a4d51
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
movzx edx, word [ecx + 8]
and edx, 4
jne case.0x4a099b.32
movzx eax, byte [ebp - 0x1d]
push eax
push 0x43
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004b4e50
add esp, 0xc
mov edx, dword [ebp - 0xc]
movzx eax, word [edx + 8]
and eax, 4
jne case.0x4a099b.32
jmp 0x4a0a57
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x2dc], ecx
mov edx, dword [ebp - 0x2dc]
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2d0], 0
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov dword [ebp - 0x2d8], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x2d4], eax
lea ecx, [ebp - 0x2d0]
push ecx
push 0
mov edx, dword [ebp - 0x2d4]
push edx
mov eax, dword [ebp - 0x2d8]
push eax
push 0
mov ecx, dword [ebp - 0x2e0]
push ecx
call fcn.004ab640
add esp, 0x18
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x2d8]
mov dword [edx + 0x40], eax
mov ecx, dword [ebp - 0x2d4]
mov dword [edx + 0x44], ecx
mov edx, dword [ebp - 0x2dc]
mov byte [edx + 2], 0
mov eax, dword [ebp - 0x2dc]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x2dc]
mov byte [ecx + 3], 0
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x2d0]
mov dword [edx + 0x20], eax
cmp dword [ebp - 0x2d0], 0
je 0x4a4e82
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 8], 0
jne 0x4a4e7d
push 0x144b0
call fcn.00504e80
add esp, 4
mov dword [ebp - 8], eax
jmp 0x4a4e82
jmp 0x4a0a57
cmp dword [ebp - 8], 0
je 0x4a4e8d
jmp 0x4a84c7
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov eax, dword [ebp - 0x14]
mov ecx, dword [edx + 0x10]
mov dword [eax], ecx
mov edx, dword [edx + 0x14]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov edx, dword [ecx + 0x10]
add edx, 1
mov eax, dword [ecx + 0x14]
adc eax, 0
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx + 4]
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x70]
mov ecx, dword [esi + ecx*4]
mov dword [ecx + 0x10], edx
mov dword [ecx + 0x14], eax
jmp case.0x4a099b.74
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2ec], 0
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov dword [ebp - 0x300], edx
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax + 8]
shr ecx, 1
and ecx, 1
jne 0x4a5001
lea edx, [ebp - 0x2ec]
push edx
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax + 0x28]
push ecx
call fcn.004ab500
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a4f78
jmp 0x4a84c7
cmp dword [ebp - 0x2ec], 0
je 0x4a4f97
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x2f4], 0
jmp 0x4a5001
mov edx, dword [ebp - 0x300]
mov eax, dword [edx + 0x28]
push eax
call fcn.00496ad0
add esp, 4
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], edx
cmp dword [ebp - 0x2f4], 0x7fffffff
jl 0x4a4fe3
jg 0x4a4fcc
cmp dword [ebp - 0x2f8], 0xffffffff
jb 0x4a4fe3
mov ecx, dword [ebp - 0x300]
mov edx, dword [ecx + 8]
or edx, 2
mov eax, dword [ebp - 0x300]
mov dword [eax + 8], edx
jmp 0x4a5001
mov ecx, dword [ebp - 0x2f8]
add ecx, 1
mov edx, dword [ebp - 0x2f4]
adc edx, 0
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x2f4], edx
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0xc], 0
je 0x4a5134
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xc4], 0
je 0x4a5062
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc4]
mov dword [ebp - 0x2e4], eax
jmp 0x4a503a
mov ecx, dword [ebp - 0x2e4]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x2e4], edx
mov eax, dword [ebp - 0x2e4]
cmp dword [eax + 4], 0
je 0x4a5048
jmp 0x4a502b
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x2e4]
add edx, dword [eax + 0x10]
mov dword [ebp - 0x2e8], edx
jmp 0x4a5074
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x2e8], edx
mov eax, dword [ebp - 0x2e8]
push eax
call fcn.004b28b0
add esp, 4
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp - 0x72c], ecx
mov edx, dword [ebp - 0x72c]
cmp dword [edx], 0xffffffff
jne 0x4a50a9
mov eax, dword [ebp - 0x72c]
cmp dword [eax + 4], 0x7fffffff
je 0x4a50b9
mov ecx, dword [ebp - 0x300]
mov edx, dword [ecx + 8]
shr edx, 1
and edx, 1
je 0x4a50c5
mov dword [ebp - 8], 0xd
jmp 0x4a84c7
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [eax + 4]
adc edx, 0
mov dword [ebp - 0x734], ecx
mov dword [ebp - 0x730], edx
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x730]
jg 0x4a511d
jl 0x4a5100
mov ecx, dword [ebp - 0x2f8]
cmp ecx, dword [ebp - 0x734]
jae 0x4a511d
mov edx, dword [ebp - 0x2e8]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [edx + 4]
adc ecx, 0
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], ecx
mov edx, dword [ebp - 0x2e8]
mov eax, dword [ebp - 0x2f8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2f4]
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x300]
mov eax, dword [edx + 8]
shr eax, 1
and eax, 1
je 0x4a5217
mov dword [ebp - 0x2fc], 0
lea ecx, [ebp - 0x2f8]
push ecx
push 8
call fcn.00484b10
add esp, 8
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x2f4]
and eax, 0x3fffffff
mov dword [ebp - 0x2f8], edx
mov dword [ebp - 0x2f4], eax
mov ecx, dword [ebp - 0x2f8]
add ecx, 1
mov edx, dword [ebp - 0x2f4]
adc edx, 0
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x2f4], edx
lea eax, [ebp - 0x2ec]
push eax
push 0
mov ecx, dword [ebp - 0x2f4]
push ecx
mov edx, dword [ebp - 0x2f8]
push edx
push 0
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax + 0x28]
push ecx
call fcn.004ab640
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a51f7
cmp dword [ebp - 0x2ec], 0
jne 0x4a51f7
mov edx, dword [ebp - 0x2fc]
add edx, 1
mov dword [ebp - 0x2fc], edx
cmp dword [ebp - 0x2fc], 0x64
jl 0x4a5152
cmp dword [ebp - 8], 0
je 0x4a5202
jmp 0x4a84c7
cmp dword [ebp - 0x2ec], 0
jne 0x4a5217
mov dword [ebp - 8], 0xd
jmp 0x4a84c7
mov eax, dword [ebp - 0x300]
mov byte [eax + 3], 0
mov ecx, dword [ebp - 0x300]
mov dword [ecx + 0x1c], 0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2f8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2f4]
mov dword [edx + 4], ecx
jmp case.0x4a099b.74
mov dword [ebp - 0x348], 0
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x304], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov dword [ebp - 0x33c], edx
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
cmp ecx, 0x74
jne 0x4a52ae
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x344], eax
mov ecx, dword [ebp - 0x344]
mov edx, dword [ecx]
mov dword [ebp - 0x328], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x324], eax
jmp 0x4a52c1
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
cdq
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], edx
mov edx, dword [ebp - 0x28]
movsx eax, byte [edx + 1]
cmp eax, 0xfffffffa
jne 0x4a531d
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xdc], 0
je 0x4a531d
mov edx, dword [ebp - 0x33c]
movsx eax, byte [edx + 1]
shl eax, 4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10]
mov eax, dword [eax + edx]
mov dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x338], edx
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
and ecx, 4
neg ecx
sbb ecx, ecx
and ecx, 5
add ecx, 0x12
mov dword [ebp - 0x348], ecx
jmp 0x4a5331
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
and eax, 1
je 0x4a534c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
add edx, 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x2c], edx
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 0x20
je 0x4a536d
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x328]
mov dword [eax + 0x20], ecx
mov edx, dword [ebp - 0x324]
mov dword [eax + 0x24], edx
mov eax, dword [ebp - 0x304]
movzx ecx, word [eax + 8]
and ecx, 1
je 0x4a5392
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x314], 0
jmp 0x4a53b0
mov edx, dword [ebp - 0x304]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x320], eax
mov ecx, dword [ebp - 0x304]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x314], edx
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
and ecx, 0x10
je 0x4a53cd
mov edx, dword [ebp - 0x33c]
mov eax, dword [edx + 0x20]
mov dword [ebp - 0x738], eax
jmp 0x4a53d7
mov dword [ebp - 0x738], 0
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x340], ecx
mov edx, dword [ebp - 0x304]
movzx eax, word [edx + 8]
and eax, 0x4000
je 0x4a5404
mov ecx, dword [ebp - 0x304]
mov edx, dword [ecx]
mov dword [ebp - 0x310], edx
jmp 0x4a540e
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x340]
push eax
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 0xa
push edx
lea eax, [ebp - 0x330]
push eax
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004ac340
add esp, 0x10
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x33c]
mov byte [eax + 3], 0
mov ecx, dword [ebp - 0x33c]
mov dword [ecx + 0x1c], 0
cmp dword [ebp - 8], 0
je 0x4a5468
jmp 0x4a84c7
mov edx, dword [ebp - 4]
cmp dword [edx + 0xdc], 0
je 0x4a54ba
cmp dword [ebp - 0x348], 0
je 0x4a54ba
mov eax, dword [ebp - 0x324]
push eax
mov ecx, dword [ebp - 0x328]
push ecx
mov edx, dword [ebp - 0x338]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x334]
push ecx
mov edx, dword [ebp - 0x348]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xd8]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xdc]
call eax
add esp, 0x18
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x358], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x354], ecx
mov edx, dword [ebp - 0x28]
movsx eax, byte [edx + 1]
cmp eax, 0xfffffffa
jne 0x4a555a
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xdc], 0
je 0x4a555a
mov edx, dword [ebp - 0x354]
movsx eax, byte [edx + 1]
shl eax, 4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10]
mov eax, dword [eax + edx]
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x350], edx
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
and ecx, 2
je 0x4a5558
mov edx, dword [ebp - 0x354]
movzx eax, byte [edx + 4]
test eax, eax
je 0x4a5558
mov ecx, dword [ebp - 0x354]
mov edx, dword [ecx + 0x28]
push edx
call fcn.00496ad0
add esp, 4
mov ecx, dword [ebp - 0x354]
mov dword [ecx + 0x40], eax
mov dword [ecx + 0x44], edx
jmp 0x4a556e
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x350], 0
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx + 2]
push eax
mov ecx, dword [ebp - 0x354]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004b08e0
add esp, 8
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x354]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x354]
mov dword [ecx + 0x20], 0
cmp dword [ebp - 8], 0
je 0x4a55b0
jmp 0x4a84c7
mov edx, dword [ebp - 0x358]
and edx, 1
je 0x4a561c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
add ecx, 1
mov edx, dword [ebp + 8]
mov dword [edx + 0x2c], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xdc], 0
je 0x4a561c
mov ecx, dword [ebp - 0x350]
mov edx, dword [ecx + 0x24]
and edx, 0x20
jne 0x4a561c
mov eax, dword [ebp - 0x354]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [eax + 0x40]
push edx
mov eax, dword [ebp - 0x350]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x34c]
push edx
push 9
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xd8]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xdc]
call eax
add esp, 0x18
jmp case.0x4a099b.74
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.0049bec0
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x2c], 0
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x35c], 0
lea edx, [ebp - 0x35c]
push edx
mov eax, dword [ebp - 0x364]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x360]
push edx
call fcn.004b9ee0
add esp, 0x10
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a56ac
jmp 0x4a84c7
cmp dword [ebp - 0x35c], 0
je 0x4a56ba
jmp 0x4a0a57
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x368]
push edx
call fcn.004b9de0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a5704
jmp 0x4a84c7
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ecx + 0x1c], 0
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov dword [ebp - 0x370], edx
mov eax, dword [ebp - 0x370]
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x374]
push edx
call fcn.00496b80
add esp, 4
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x36c]
cmp ecx, dword [eax + 0x60]
jbe 0x4a577e
jmp 0x4a85c0
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x36c]
push eax
push 0
mov ecx, dword [ebp - 0x374]
push ecx
call fcn.004b2d20
add esp, 0x10
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a57a8
jmp 0x4a84c7
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0xc], 0
jne 0x4a57d5
mov eax, dword [ebp - 0x14]
movzx ecx, word [eax + 8]
and ecx, 0x1000
je 0x4a57d5
mov edx, dword [ebp - 0x14]
push edx
call fcn.00498d30
add esp, 4
test eax, eax
je 0x4a57d5
jmp 0x4a85dd
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x38c], eax
mov ecx, dword [ebp - 0x38c]
movzx edx, byte [ecx + 2]
test edx, edx
je 0x4a5826
mov eax, 1
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x38c]
movzx eax, byte [edx + 3]
test eax, eax
je 0x4a5851
mov ecx, dword [ebp - 0x38c]
mov edx, dword [ecx + 0x40]
mov dword [ebp - 0x380], edx
mov eax, dword [ecx + 0x44]
mov dword [ebp - 0x37c], eax
jmp 0x4a591a
mov ecx, dword [ebp - 0x38c]
movzx edx, byte [ecx]
cmp edx, 2
jne 0x4a58c0
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax + 0x28]
mov edx, dword [ecx]
mov dword [ebp - 0x388], edx
mov eax, dword [ebp - 0x388]
mov ecx, dword [eax]
mov dword [ebp - 0x384], ecx
lea edx, [ebp - 0x380]
push edx
mov eax, dword [ebp - 0x38c]
mov ecx, dword [eax + 0x28]
push ecx
mov edx, dword [ebp - 0x384]
mov eax, dword [edx + 0x30]
call eax
add esp, 8
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x388]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4c90
add esp, 8
cmp dword [ebp - 8], 0
je 0x4a58be
jmp 0x4a84c7
jmp 0x4a591a
mov eax, dword [ebp - 0x38c]
push eax
call fcn.004b2e40
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a58dd
jmp 0x4a84c7
mov ecx, dword [ebp - 0x38c]
movzx edx, byte [ecx + 2]
test edx, edx
je 0x4a58fc
mov eax, 1
mov ecx, dword [ebp - 0x14]
mov word [ecx + 8], ax
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x38c]
mov eax, dword [edx + 0x28]
push eax
call fcn.00496ad0
add esp, 4
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], edx
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x380]
mov dword [ecx], edx
mov eax, dword [ebp - 0x37c]
mov dword [ecx + 4], eax
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov dword [ebp - 0x390], edx
mov eax, dword [ebp - 0x390]
mov byte [eax + 2], 1
mov ecx, dword [ebp - 0x390]
mov dword [ecx + 0x1c], 0
mov edx, dword [ebp - 0x390]
movzx eax, byte [edx]
test eax, eax
jne 0x4a597e
mov ecx, dword [ebp - 0x390]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004983d0
add esp, 4
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x398], ecx
mov edx, dword [ebp - 0x398]
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x394], 0
mov ecx, dword [ebp - 0x398]
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
mov dword [ecx + 0x20], eax
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 0xc], 0
je 0x4a59dc
mov edx, dword [ebp - 0x39c]
push edx
call fcn.004aaff0
add esp, 4
test eax, eax
jne 0x4a5a3d
lea eax, [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x39c]
push ecx
call fcn.004ab500
add esp, 8
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x398]
mov al, byte [ebp - 0x394]
mov byte [edx + 2], al
mov ecx, dword [ebp - 0x398]
mov byte [ecx + 3], 0
mov edx, dword [ebp - 0x398]
mov dword [edx + 0x1c], 0
cmp dword [ebp - 8], 0
je 0x4a5a26
jmp 0x4a84c7
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
jle 0x4a5a3d
cmp dword [ebp - 0x394], 0
je 0x4a5a3d
jmp 0x4a0a57
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov dword [ebp - 0x3a4], edx
mov eax, dword [ebp - 0x3a4]
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x3b4], ecx
lea edx, [ebp - 0x3a0]
push edx
mov eax, dword [ebp - 0x3b4]
push eax
call fcn.004ab080
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a5a8a
jmp 0x4a84c7
cmp dword [ebp - 0x3a0], 0
jne 0x4a5aed
mov ecx, dword [ebp - 0x3b4]
push ecx
call fcn.004abc40
add esp, 4
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], edx
cmp dword [ebp - 0x3ac], 0
jl 0x4a5aed
jg 0x4a5ac2
cmp dword [ebp - 0x3b0], 0
jb 0x4a5aed
mov edx, dword [ebp - 0x3ac]
push edx
mov eax, dword [ebp - 0x3b0]
push eax
call fcn.004a8f30
add esp, 8
movsx ecx, ax
mov edx, dword [ebp - 0x28]
cmp ecx, dword [edx + 0xc]
jge 0x4a5aed
mov dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 0
je 0x4a5afb
jmp 0x4a0a57
jmp case.0x4a099b.74
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xa8]
add ecx, 1
mov edx, dword [ebp + 8]
mov dword [edx + 0xa8], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3b8], 1
mov edx, dword [ebp - 0x3bc]
movzx eax, byte [edx]
cmp eax, 1
jne 0x4a5b5d
lea ecx, [ebp - 0x3b8]
push ecx
mov edx, dword [ebp - 0x3bc]
push edx
call fcn.004b8360
add esp, 8
mov dword [ebp - 8], eax
jmp 0x4a5b9c
mov eax, dword [ebp - 0x3bc]
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x3c0], ecx
lea edx, [ebp - 0x3b8]
push edx
mov eax, dword [ebp - 0x3c0]
push eax
call fcn.004ab080
add esp, 8
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x3bc]
mov byte [ecx + 3], 0
mov edx, dword [ebp - 0x3bc]
mov dword [edx + 0x1c], 0
cmp dword [ebp - 8], 0
je 0x4a5ba7
jmp 0x4a84c7
mov eax, dword [ebp - 0x3bc]
mov cl, byte [ebp - 0x3b8]
mov byte [eax + 2], cl
cmp dword [ebp - 0x3b8], 0
je 0x4a5bc4
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x3c4], eax
mov ecx, dword [ebp - 0x3c4]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004b9d00
add esp, 8
mov dword [ebp - 8], eax
jmp 0x4a5c41
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
cmp dword [eax + ecx*4], 0
jne case.0x4a099b.6
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov dword [ebp - 0x3c4], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x3c4]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
call edx
add esp, 8
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x3c4]
mov dword [eax + 0x1c], 0
cmp dword [ebp - 8], 0
jne 0x4a5c88
mov ecx, dword [ebp - 0x3c4]
mov byte [ecx + 2], 0
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + eax*4 + 0xa0]
add edx, 1
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
mov eax, dword [ebp + 8]
mov dword [eax + ecx*4 + 0xa0], edx
jmp case.0x4a099b.13
cmp dword [ebp - 8], 0x65
je 0x4a5c93
jmp 0x4a84c7
mov dword [ebp - 8], 0
mov ecx, dword [ebp - 0x3c4]
mov byte [ecx + 2], 1
jmp 0x4a09b4
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
and ecx, 1
je 0x4a5ce8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2c]
add eax, 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x2c], eax
mov edx, dword [ebp - 0x1c]
movzx eax, word [edx + 8]
and eax, 0x4000
je 0x4a5d0a
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00498e10
add esp, 4
mov dword [ebp - 0x73c], eax
jmp 0x4a5d14
mov dword [ebp - 0x73c], 0
mov edx, dword [ebp - 0x73c]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x4a5d28
jmp 0x4a84c7
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
cmp ecx, 0x7d
jne 0x4a5d4e
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x3f4]
push eax
call fcn.004b7140
add esp, 8
mov dword [ebp - 8], eax
jmp 0x4a5def
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0xc]
cdq
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], edx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x3f0], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x3dc], edx
mov eax, dword [ebp - 0x28]
mov cx, word [eax + 0x10]
mov word [ebp - 0x3d8], cx
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
and eax, 0x10
je 0x4a5daa
mov ecx, dword [ebp - 0x3f4]
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x740], edx
jmp 0x4a5db4
mov dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
push eax
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
and edx, 0xa
push edx
lea eax, [ebp - 0x3f0]
push eax
mov ecx, dword [ebp - 0x3f4]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004ac340
add esp, 0x10
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x3f4]
mov dword [eax + 0x1c], 0
cmp dword [ebp - 8], 0
je 0x4a5dfa
jmp 0x4a84c7
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov dword [ebp - 0x3fc], edx
mov eax, dword [ebp - 0x3fc]
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x3fc]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x28]
mov dx, word [ecx + 0xc]
mov word [ebp - 0x404], dx
mov byte [ebp - 0x402], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x408], ecx
lea edx, [ebp - 0x3f8]
push edx
push 0
push 0
push 0
lea eax, [ebp - 0x40c]
push eax
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.004ab640
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a5e8a
jmp 0x4a84c7
cmp dword [ebp - 0x3f8], 0
jne 0x4a5eb2
push 4
mov edx, dword [ebp - 0x410]
push edx
call fcn.004b08e0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a5eb2
jmp 0x4a84c7
mov eax, dword [ebp - 0x3fc]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x3fc]
mov dword [ecx + 0x20], 0
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
push ecx
call fcn.004b2e40
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a5f03
jmp 0x4a84c7
mov edx, dword [ebp - 0x420]
movzx eax, byte [edx + 2]
test eax, eax
jne 0x4a5feb
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x414], 0
lea ecx, [ebp - 0x418]
push ecx
mov edx, dword [ebp - 0x420]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004b4a00
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a5f54
jmp 0x4a84c7
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx]
cmp eax, 0x80
jne 0x4a5fc2
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x70]
mov edx, dword [ecx + edx*4]
mov dword [ebp - 0x41c], edx
mov eax, dword [ebp - 0x41c]
mov byte [eax + 2], 0
mov ecx, dword [ebp - 0x41c]
mov edx, dword [ebp - 0x418]
mov dword [ecx + 0x40], edx
mov eax, dword [ebp - 0x414]
mov dword [ecx + 0x44], eax
mov ecx, dword [ebp - 0x41c]
mov byte [ecx + 3], 1
mov edx, dword [ebp - 0x41c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
mov dword [edx + 0x18], ecx
mov edx, dword [ebp - 0x41c]
mov eax, dword [ebp - 0x420]
mov dword [edx + 0x24], eax
jmp 0x4a5fe9
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x418]
mov dword [eax], ecx
mov edx, dword [ebp - 0x414]
mov dword [eax + 4], edx
jmp 0x4a6000
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
push ecx
call fcn.00498510
add esp, 4
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x428]
mov edx, dword [ecx + 0x2c]
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x28]
mov cx, word [eax + 0x10]
mov word [ebp - 0x430], cx
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx]
cmp eax, 0x28
jge 0x4a604b
mov byte [ebp - 0x42e], 0xff
jmp 0x4a6052
mov byte [ebp - 0x42e], 0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x434], edx
mov dword [ebp - 0x424], 0
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x438]
push ecx
mov edx, dword [ebp - 0x428]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004b4b80
add esp, 0x10
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x28]
movzx edx, byte [ecx]
and edx, 1
jne 0x4a60ad
mov eax, dword [ebp - 0x424]
neg eax
mov dword [ebp - 0x424], eax
jmp 0x4a60bc
mov ecx, dword [ebp - 0x424]
add ecx, 1
mov dword [ebp - 0x424], ecx
cmp dword [ebp - 8], 0
je 0x4a60c7
jmp 0x4a84c7
cmp dword [ebp - 0x424], 0
jle 0x4a60d5
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov word [edx + 8], cx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xac]
add ecx, 1
mov edx, dword [ebp - 4]
cmp dword [edx + 0xa0], ecx
jle 0x4a612b
mov dword [ebp - 8], 6
mov eax, dword [ebp + 8]
mov byte [eax + 0x8e], 2
jmp 0x4a84c7
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x440], edx
mov dword [ebp - 0x43c], 0
lea eax, [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x440]
shl eax, 4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + eax + 4]
push eax
call fcn.004b1230
add esp, 0xc
mov dword [ebp - 8], eax
mov ecx, 4
mov edx, dword [ebp - 0x14]
mov word [edx + 8], cx
mov eax, dword [ebp - 0x43c]
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
cmp dword [ebp - 8], 0
je 0x4a6194
jmp 0x4a84c7
cmp dword [ebp - 0x43c], 0
je 0x4a61ca
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x43c]
push ecx
mov edx, dword [ebp - 0x440]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004bcd70
add esp, 0x10
mov ecx, dword [ebp - 0x440]
add ecx, 1
mov byte [ebp - 0x1e], cl
jmp case.0x4a099b.74
mov dword [ebp - 0x444], 0
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x444]
and eax, ecx
push eax
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
shl edx, 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 4]
push edx
call fcn.004b0fa0
add esp, 0xc
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0xc], 0
je 0x4a6265
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
add edx, dword [ebp - 0x444]
mov eax, dword [ebp + 8]
mov dword [eax + 0x2c], edx
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 0xc], 0
jle 0x4a6265
mov edx, dword [ebp - 0x28]
mov ecx, dword [edx + 0xc]
imul ecx, ecx, 0x28
mov eax, dword [ebp - 0x444]
cdq
mov esi, dword [ebp - 0x2c]
add eax, dword [esi + ecx]
mov ecx, dword [esi + ecx + 4]
adc ecx, edx
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0xc]
imul edx, edx, 0x28
mov esi, dword [ebp - 0x2c]
mov dword [esi + edx], eax
mov dword [esi + edx + 4], ecx
cmp dword [ebp - 8], 0
je 0x4a6270
jmp 0x4a84c7
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x448]
movzx eax, byte [edx]
cmp eax, 1
jne 0x4a62b0
mov ecx, dword [ebp - 0x448]
mov edx, dword [ecx + 0x28]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004b6c80
add esp, 8
jmp 0x4a62d0
mov ecx, dword [ebp - 0x448]
mov edx, dword [ecx + 0x28]
push edx
call fcn.004b1210
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a62d0
jmp 0x4a84c7
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x450], 0
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
shl eax, 4
mov ecx, dword [ebp - 4]
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx]
cmp eax, 0x87
jne 0x4a6320
mov dword [ebp - 0x44c], 1
jmp 0x4a632a
mov dword [ebp - 0x44c], 2
mov ecx, dword [ebp - 0x44c]
push ecx
lea edx, [ebp - 0x450]
push edx
mov eax, dword [ebp - 0x454]
mov ecx, dword [eax + 4]
push ecx
call fcn.004b0c90
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a6358
jmp 0x4a84c7
mov eax, dword [ebp - 0x450]
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov edx, dword [ebp - 4]
mov al, byte [edx + 0x4e]
add al, 1
mov ecx, dword [ebp - 4]
mov byte [ecx + 0x4e], al
push 0
push 0
push 0
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004bfd30
add esp, 0x14
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
mov al, byte [edx + 0x4e]
sub al, 1
mov ecx, dword [ebp - 4]
mov byte [ecx + 0x4e], al
cmp dword [ebp - 8], 0
je 0x4a63af
jmp 0x4a84c7
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x458], 0x6ab048
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x468], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp + 8]
add ecx, 0x6c
mov dword [ebp - 0x464], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x458]
push ecx
mov edx, dword [ebp - 0x470]
shl edx, 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx]
push edx
push str.SELECT_name__rootpage__sql_FROM__q._s_WHERE__s_ORDER_BY_rowid
mov eax, dword [ebp - 4]
push eax
call fcn.0049b890
add esp, 0x14
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0
jne 0x4a6435
mov dword [ebp - 8], 7
jmp 0x4a6499
mov ecx, dword [ebp - 4]
mov byte [ecx + 0x99], 1
mov dword [ebp - 0x45c], 0
push 0
lea edx, [ebp - 0x468]
push edx
push fcn.004c11c0
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004bfd30
add esp, 0x14
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a647c
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004823e0
add esp, 8
mov edx, dword [ebp - 4]
mov byte [edx + 0x99], 0
cmp dword [ebp - 8], 0
je 0x4a64bb
mov eax, dword [ebp - 4]
push eax
call fcn.004bc990
add esp, 4
cmp dword [ebp - 8], 7
jne 0x4a64b6
jmp 0x4a85dd
jmp 0x4a84c7
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004bae80
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a64e1
jmp 0x4a84c7
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004bcc40
add esp, 0xc
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004bc100
add esp, 0xc
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004c3320
add esp, 0xc
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x480], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x478], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
lea eax, [ebp - 0x474]
push eax
mov ecx, dword [ebp - 0x47c]
mov edx, dword [ecx]
add edx, 1
push edx
mov eax, dword [ebp - 0x480]
push eax
mov ecx, dword [ebp - 0x478]
push ecx
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
shl eax, 4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + eax + 4]
push eax
call fcn.004b1610
add esp, 0x14
mov dword [ebp - 0x484], eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00498510
add esp, 4
cmp dword [ebp - 0x474], 0
jne 0x4a65d7
jmp 0x4a6627
cmp dword [ebp - 0x484], 0
jne 0x4a65e7
jmp 0x4a85dd
mov eax, dword [ebp - 0x474]
sub eax, 1
cdq
mov ecx, dword [ebp - 0x47c]
mov esi, dword [ecx]
sub esi, eax
mov eax, dword [ecx + 4]
sbb eax, edx
mov ecx, dword [ebp - 0x47c]
mov dword [ecx], esi
mov dword [ecx + 4], eax
push fcn.00482320
push 1
push 0xffffffffffffffff
mov edx, dword [ebp - 0x484]
push edx
mov eax, dword [ebp - 0x30]
push eax
call fcn.004987e0
add esp, 0x14
movzx ecx, byte [ebp - 0x1d]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.0049c480
add esp, 8
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
and edx, 0x20
jne 0x4a6684
mov eax, dword [ebp - 0x30]
push eax
call fcn.004b2b10
add esp, 4
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
and edx, 0x20
jne 0x4a6684
jmp 0x4a85dd
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
push ecx
call fcn.004a9020
add esp, 0xc
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
and edx, 0x20
je 0x4a66d5
lea eax, [ebp - 0x490]
push eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
push edx
call fcn.004a9150
add esp, 8
test eax, eax
jne 0x4a66e8
mov eax, dword [ebp - 0x30]
push eax
call fcn.00498510
add esp, 4
jmp case.0x4a099b.13
mov ecx, dword [ebp - 0x48c]
push ecx
mov edx, dword [ebp - 0x490]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
push ecx
call fcn.0049d850
add esp, 0xc
jmp 0x4a09b4
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x498], ecx
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
and eax, 0x20
jne 0x4a6763
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.004b2b10
add esp, 4
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 8]
and eax, 0x20
jne 0x4a6763
jmp 0x4a85dd
cmp dword [ebp - 0x498], 0
je 0x4a679f
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ecx]
push eax
mov ecx, dword [ebp - 0x498]
push ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
push eax
call fcn.004a93e0
add esp, 0x10
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0
je 0x4a679f
jmp 0x4a0a57
cmp dword [ebp - 0x498], 0
jl 0x4a67c0
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ecx]
push eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
push edx
call fcn.004a9020
add esp, 0xc
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x4ac], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4b8], eax
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
test edx, edx
je 0x4a6847
mov eax, dword [ebp - 0x4ac]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x4b4], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc4]
mov dword [ebp - 0x49c], eax
jmp 0x4a681d
mov ecx, dword [ebp - 0x49c]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 0
je 0x4a6839
mov eax, dword [ebp - 0x49c]
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [ebp - 0x4b4]
je 0x4a6839
jmp 0x4a680e
cmp dword [ebp - 0x49c], 0
je 0x4a6847
jmp case.0x4a099b.74
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
mov ecx, dword [edx + 0xcc]
cmp ecx, dword [eax + 0x88]
jl 0x4a6878
mov dword [ebp - 8], 1
push str.too_many_levels_of_trigger_recursion
mov edx, dword [ebp + 8]
push edx
call fcn.0049bc80
add esp, 8
jmp 0x4a84c7
mov eax, dword [ebp - 0x4b8]
movzx ecx, word [eax + 8]
and ecx, 0x40
jne 0x4a6a61
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0x4ac]
add eax, dword [ecx + 0xc]
mov dword [ebp - 0x4b0], eax
mov edx, dword [ebp - 0x4ac]
cmp dword [edx + 0xc], 0
jne 0x4a68be
mov eax, dword [ebp - 0x4b0]
add eax, 1
mov dword [ebp - 0x4b0], eax
mov ecx, dword [ebp - 0x4b0]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx + 0xc]
lea ecx, [ecx + eax*4 + 0x50]
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx + 4]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
add ecx, eax
mov dword [ebp - 0x4a8], ecx
mov eax, dword [ebp - 0x4a8]
cdq
push edx
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.00498770
add esp, 0xc
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0
jne 0x4a691a
jmp 0x4a85dd
mov ecx, dword [ebp - 0x4b8]
push ecx
call fcn.00498ea0
add esp, 4
mov edx, 0x40
mov eax, dword [ebp - 0x4b8]
mov word [eax + 8], dx
mov ecx, dword [ebp - 0x4b8]
mov edx, dword [ebp - 0x49c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x49c]
mov eax, dword [ebp - 0x4b0]
mov dword [edx + 0x3c], eax
mov ecx, dword [ebp - 0x49c]
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx + 0xc]
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
mov edx, dword [ebp - 0x49c]
mov dword [edx + 0x30], eax
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x5c]
mov dword [eax + 0x10], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
mov dword [eax + 0x2c], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x88]
mov dword [eax + 0x34], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp - 0x4ac]
mov edx, dword [ecx + 0x14]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [eax + 0x3c]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x49c]
lea eax, [edx + ecx + 0x50]
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x49c]
add ecx, 0x50
mov dword [ebp - 0x4a0], ecx
jmp 0x4a6a34
mov edx, dword [ebp - 0x4a0]
add edx, 0x28
mov dword [ebp - 0x4a0], edx
mov eax, dword [ebp - 0x4a0]
cmp eax, dword [ebp - 0x4a4]
je 0x4a6a5f
mov ecx, 0x80
mov edx, dword [ebp - 0x4a0]
mov word [edx + 8], cx
mov eax, dword [ebp - 0x4a0]
mov ecx, dword [ebp - 4]
mov dword [eax + 0x20], ecx
jmp 0x4a6a25
jmp 0x4a6a6f
mov edx, dword [ebp - 0x4b8]
mov eax, dword [edx]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xcc]
add edx, 1
mov eax, dword [ebp + 8]
mov dword [eax + 0xcc], edx
mov ecx, dword [ebp - 0x49c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc4]
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x49c]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x20]
mov dword [ecx + 0x20], eax
mov edx, dword [edx + 0x24]
mov dword [ecx + 0x24], edx
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov dword [eax + 0x44], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x49c]
mov eax, dword [ecx + 0x58]
mov dword [edx + 0x48], eax
mov ecx, dword [ebp - 0x49c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd8]
mov dword [ecx + 0x28], eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xd8], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x2c], 0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x49c]
mov dword [eax + 0xc4], ecx
mov edx, dword [ebp - 0x49c]
add edx, 0x50
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x49c]
mov ecx, dword [eax + 0x3c]
mov dword [edx + 0x18], ecx
mov edx, dword [ebp - 0x49c]
movzx eax, word [edx + 0x40]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x1c], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x70], eax
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
lea eax, [edx + eax*4]
mov ecx, dword [ebp - 0x49c]
mov dword [ecx + 0x18], eax
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx + 4]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
push eax
push 0
mov eax, dword [ebp - 0x49c]
mov ecx, dword [eax + 0x18]
push ecx
call fcn.005b4de0
add esp, 0xc
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x24]
mov dword [ecx + 0x58], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x4ac]
mov edx, dword [ecx + 4]
mov dword [eax + 0x88], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x14
mov dword [ebp - 0x28], eax
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc4]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
mov eax, dword [edx + 0x30]
imul eax, eax, 0x14
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 8]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx + 4]
add ecx, dword [edx + eax + 4]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x4bc]
add ecx, dword [edx + 0x10]
mov dword [ebp - 0x4c0], ecx
push 0x1000
mov eax, dword [ebp - 0x4c0]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.004b2c80
add esp, 0xc
jmp case.0x4a099b.74
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
and eax, 0x40000
je 0x4a6c68
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 8]
cdq
mov ecx, dword [ebp - 4]
add eax, dword [ecx + 0x1c0]
mov ecx, dword [ecx + 0x1c4]
adc ecx, edx
mov edx, dword [ebp - 4]
mov dword [edx + 0x1c0], eax
mov dword [edx + 0x1c4], ecx
jmp 0x4a6cb5
mov eax, dword [ebp - 0x28]
cmp dword [eax + 4], 0
je 0x4a6c9a
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 8]
cdq
mov ecx, dword [ebp - 4]
add eax, dword [ecx + 0x1b8]
mov ecx, dword [ecx + 0x1bc]
adc ecx, edx
mov edx, dword [ebp - 4]
mov dword [edx + 0x1b8], eax
mov dword [edx + 0x1bc], ecx
jmp 0x4a6cb5
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 8]
cdq
mov ecx, dword [ebp + 8]
add eax, dword [ecx + 0x40]
mov ecx, dword [ecx + 0x44]
adc ecx, edx
mov edx, dword [ebp + 8]
mov dword [edx + 0x40], eax
mov dword [edx + 0x44], ecx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
cmp dword [eax + 4], 0
je 0x4a6d10
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x744], ecx
mov edx, dword [ebp - 0x744]
mov eax, dword [ebp - 0x744]
mov ecx, dword [edx + 0x1b8]
or ecx, dword [eax + 0x1bc]
jne 0x4a6d0e
mov edx, dword [ebp - 4]
mov dword [ebp - 0x748], edx
mov eax, dword [ebp - 0x748]
mov ecx, dword [ebp - 0x748]
mov edx, dword [eax + 0x1c0]
or edx, dword [ecx + 0x1c4]
jne 0x4a6d0e
jmp 0x4a0a57
jmp 0x4a6d55
mov eax, dword [ebp + 8]
mov dword [ebp - 0x74c], eax
mov ecx, dword [ebp - 0x74c]
mov edx, dword [ebp - 0x74c]
mov eax, dword [ecx + 0x40]
or eax, dword [edx + 0x44]
jne 0x4a6d55
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x750], ecx
mov edx, dword [ebp - 0x750]
mov eax, dword [ebp - 0x750]
mov ecx, dword [edx + 0x1c0]
or ecx, dword [eax + 0x1c4]
jne 0x4a6d55
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp + 8]
cmp dword [edx + 0xc4], 0
je 0x4a6dab
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc4]
mov dword [ebp - 0x4c4], ecx
jmp 0x4a6d86
mov edx, dword [ebp - 0x4c4]
mov eax, dword [edx + 4]
mov dword [ebp - 0x4c4], eax
mov ecx, dword [ebp - 0x4c4]
cmp dword [ecx + 4], 0
je 0x4a6d94
jmp 0x4a6d77
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x4c4]
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x30], eax
jmp 0x4a6dba
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.004b28b0
add esp, 4
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.004b28b0
add esp, 4
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x754], edx
mov dword [ebp - 0x758], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x758]
mov eax, dword [ecx + 4]
cmp eax, dword [edx + 4]
jg 0x4a6e2b
jl 0x4a6e1b
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x758]
mov eax, dword [ecx]
cmp eax, dword [edx]
jae 0x4a6e2b
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov dword [ecx], eax
mov edx, dword [edx + 4]
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x75c], edx
mov eax, dword [ebp - 0x75c]
cmp dword [eax + 4], 0
jl 0x4a6e81
jg 0x4a6e61
mov ecx, dword [ebp - 0x75c]
cmp dword [ecx], 0
jbe 0x4a6e81
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
cdq
mov ecx, dword [ebp - 0x30]
mov esi, dword [ecx]
sub esi, eax
mov eax, dword [ecx + 4]
sbb eax, edx
mov ecx, dword [ebp - 0x30]
mov dword [ecx], esi
mov dword [ecx + 4], eax
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
mov dword [ebp - 0x4d0], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x4cc], ecx
cmp dword [ebp - 0x4cc], 0
jl 0x4a6f4c
jg 0x4a6edf
cmp dword [ebp - 0x4d0], 0
jbe 0x4a6f4c
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x760]
cmp dword [eax + 4], 0
jl 0x4a6f17
jg 0x4a6f01
mov ecx, dword [ebp - 0x760]
cmp dword [ecx], 0
jbe 0x4a6f17
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov dword [ebp - 0x768], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x764], ecx
jmp 0x4a6f2b
mov dword [ebp - 0x768], 0
mov dword [ebp - 0x764], 0
mov edx, dword [ebp - 0x764]
push edx
mov eax, dword [ebp - 0x768]
push eax
lea ecx, [ebp - 0x4d0]
push ecx
call fcn.004a8c30
add esp, 0xc
test eax, eax
je 0x4a6f5e
mov edx, dword [ebp - 0x14]
mov dword [edx], 0xffffffff
mov dword [edx + 4], 0xffffffff
jmp 0x4a6f72
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x4d0]
mov dword [eax], ecx
mov edx, dword [ebp - 0x4cc]
mov dword [eax + 4], edx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x76c]
mov edx, dword [eax]
or edx, dword [ecx + 4]
je 0x4a6fdf
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x770]
cmp dword [ecx + 4], 0
jl 0x4a6fda
jg 0x4a6fc4
mov edx, dword [ebp - 0x770]
cmp dword [edx], 0
jbe 0x4a6fda
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
sub ecx, 1
mov edx, dword [eax + 4]
sbb edx, 0
mov eax, dword [ebp - 0x30]
mov dword [eax], ecx
mov dword [eax + 4], edx
jmp 0x4a0a57
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0x774]
cmp dword [ecx + 4], 0x80000000
jl 0x4a702e
jg 0x4a7018
mov edx, dword [ebp - 0x774]
cmp dword [edx], 0
jbe 0x4a702e
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
sub ecx, 1
mov edx, dword [eax + 4]
sbb edx, 0
mov eax, dword [ebp - 0x30]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x778], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x778]
mov ecx, dword [edx]
or ecx, dword [eax + 4]
jne 0x4a704f
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
lea edx, [ecx*4 + 0x1c]
xor eax, eax
push eax
push edx
mov ecx, dword [ebp - 4]
push ecx
call fcn.00482780
add esp, 0xc
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 0
jne 0x4a7092
jmp 0x4a85dd
mov edx, dword [ebp - 0x4d4]
mov dword [edx + 8], 0
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
mov edx, dword [ebp - 0x4d4]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], ecx
mov edx, dword [ebp - 0x4d4]
mov al, byte [ebp - 0x4d8]
mov byte [edx + 0x1a], al
mov ecx, dword [ebp - 0x28]
mov byte [ecx + 1], 0xf0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4d4]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0x28]
mov byte [ecx], 0x95
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x4e0], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x4dc], edx
mov eax, dword [ebp - 0x4e0]
mov ecx, dword [eax + 8]
cmp ecx, dword [ebp - 0x4dc]
je 0x4a7188
mov edx, dword [ebp - 0x4e0]
mov eax, dword [ebp - 0x4dc]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x4e0]
movzx edx, byte [ecx + 0x1a]
sub edx, 1
mov dword [ebp - 0x4e4], edx
jmp 0x4a715b
mov eax, dword [ebp - 0x4e4]
sub eax, 1
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x4e4], 0
jl 0x4a7188
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
add edx, dword [ebp - 0x4e4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0x4e0]
mov dword [ecx + eax*4 + 0x1c], edx
jmp 0x4a714c
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx + 0xc]
add eax, 1
mov ecx, dword [ebp - 0x4dc]
mov dword [ecx + 0xc], eax
push 1
mov edx, dword [ebp - 4]
push edx
lea eax, [ebp - 0x510]
push eax
call fcn.004b2ae0
add esp, 0xc
mov ecx, dword [ebp - 0x4e0]
lea edx, [ebp - 0x510]
mov dword [ecx], edx
mov eax, dword [ebp - 0x4e0]
mov byte [eax + 0x19], 0
mov ecx, dword [ebp - 0x4e0]
mov byte [ecx + 0x18], 0
mov edx, dword [ebp - 0x4e0]
add edx, 0x1c
push edx
mov eax, dword [ebp - 0x4e0]
movzx ecx, byte [eax + 0x1a]
push ecx
mov edx, dword [ebp - 0x4e0]
push edx
mov eax, dword [ebp - 0x4e0]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0xc]
call edx
add esp, 0xc
mov eax, dword [ebp - 0x4e0]
movzx ecx, byte [eax + 0x19]
test ecx, ecx
je 0x4a7262
mov edx, dword [ebp - 0x4e0]
cmp dword [edx + 0x14], 0
je 0x4a7248
lea eax, [ebp - 0x510]
push eax
call fcn.0049d490
add esp, 4
push eax
push 0x6ab0c0
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049bc80
add esp, 0xc
mov edx, dword [ebp - 0x4e0]
mov eax, dword [edx + 0x14]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x510]
push ecx
call fcn.00498ea0
add esp, 4
cmp dword [ebp - 8], 0
je 0x4a7262
jmp 0x4a84c7
mov edx, dword [ebp - 0x4e0]
movzx eax, byte [edx + 0x18]
test eax, eax
je 0x4a729e
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx - 0x10]
mov dword [ebp - 0x4e4], edx
cmp dword [ebp - 0x4e4], 0
je 0x4a729e
push 0
push 1
mov eax, dword [ebp - 0x4e4]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
push eax
call fcn.0049d850
add esp, 0xc
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x514]
push edx
call fcn.00498670
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a72fa
mov eax, dword [ebp - 0x514]
push eax
call fcn.0049d490
add esp, 4
push eax
push 0x6ab0c4
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049bc80
add esp, 0xc
jmp 0x4a84c7
movzx edx, byte [ebp - 0x1d]
push edx
mov eax, dword [ebp - 0x514]
push eax
call fcn.0049c480
add esp, 8
mov ecx, dword [ebp - 0x514]
push ecx
call fcn.004b2c30
add esp, 4
test eax, eax
je 0x4a7326
jmp 0x4a85c0
jmp case.0x4a099b.74
mov dword [ebp - 0x524], 0
mov dword [ebp - 0x51c], 0xffffffff
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x520], edx
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x520]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.00503700
add esp, 0x14
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a7398
cmp dword [ebp - 8], 5
je 0x4a7387
jmp 0x4a84c7
mov dword [ebp - 8], 0
mov dword [ebp - 0x524], 1
mov dword [ebp - 0x528], 0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x518], edx
jmp 0x4a73d4
mov eax, dword [ebp - 0x528]
add eax, 1
mov dword [ebp - 0x528], eax
mov ecx, dword [ebp - 0x518]
add ecx, 0x28
mov dword [ebp - 0x518], ecx
cmp dword [ebp - 0x528], 3
jge 0x4a73fe
mov edx, dword [ebp - 0x528]
mov eax, dword [ebp + edx*4 - 0x524]
cdq
push edx
push eax
mov eax, dword [ebp - 0x518]
push eax
call fcn.0049d850
add esp, 0xc
jmp 0x4a73b6
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x53c], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
shl eax, 4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + eax + 4]
mov dword [ebp - 0x52c], eax
mov ecx, dword [ebp - 0x52c]
push ecx
call fcn.0048a6a0
add esp, 4
mov dword [ebp - 0x534], eax
mov edx, dword [ebp - 0x534]
push edx
call fcn.004907c0
add esp, 4
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x53c], 0xffffffff
jne 0x4a747a
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x534]
push ecx
call fcn.004a98b0
add esp, 4
test eax, eax
jne 0x4a7499
mov edx, dword [ebp - 0x538]
mov dword [ebp - 0x53c], edx
push 1
mov eax, dword [ebp - 0x534]
push eax
call fcn.0049b8f0
add esp, 8
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x53c], 5
jne 0x4a74eb
mov ecx, dword [ebp - 0x530]
push ecx
call fcn.00484d70
add esp, 4
test eax, eax
je 0x4a74df
mov edx, dword [ebp - 0x534]
push edx
call fcn.00494c50
add esp, 4
test eax, eax
jne 0x4a74eb
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x53c]
cmp ecx, dword [ebp - 0x538]
je 0x4a75ee
cmp dword [ebp - 0x538], 5
je 0x4a7513
cmp dword [ebp - 0x53c], 5
jne 0x4a75ee
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x43]
test eax, eax
je 0x4a752a
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xa0], 1
jle 0x4a756f
mov dword [ebp - 8], 1
cmp dword [ebp - 0x53c], 5
jne 0x4a7546
mov dword [ebp - 0x77c], str.into
jmp 0x4a7550
mov dword [ebp - 0x77c], str.out_of
mov edx, dword [ebp - 0x77c]
push edx
push str.cannot_change__s_wal_mode_from_within_a_transaction
mov eax, dword [ebp + 8]
push eax
call fcn.0049bc80
add esp, 0xc
jmp 0x4a84c7
cmp dword [ebp - 0x538], 5
jne 0x4a75ac
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x534]
push edx
call fcn.004a9900
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a75aa
mov eax, dword [ebp - 0x53c]
push eax
mov ecx, dword [ebp - 0x534]
push ecx
call fcn.004a9750
add esp, 8
jmp 0x4a75c6
cmp dword [ebp - 0x538], 4
jne 0x4a75c6
push 2
mov edx, dword [ebp - 0x534]
push edx
call fcn.004a9750
add esp, 8
cmp dword [ebp - 8], 0
jne 0x4a75ee
xor eax, eax
cmp dword [ebp - 0x53c], 5
sete al
add eax, 1
push eax
mov ecx, dword [ebp - 0x52c]
push ecx
call fcn.00497b30
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a7600
mov edx, dword [ebp - 0x538]
mov dword [ebp - 0x53c], edx
mov eax, dword [ebp - 0x53c]
push eax
mov ecx, dword [ebp - 0x534]
push ecx
call fcn.004a9750
add esp, 8
mov dword [ebp - 0x53c], eax
mov edx, 0xa02
mov eax, dword [ebp - 0x14]
mov word [eax + 8], dx
mov ecx, dword [ebp - 0x53c]
push ecx
call fcn.004c0960
add esp, 4
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.00484d70
add esp, 4
mov edx, dword [ebp - 0x14]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x14]
mov byte [eax + 0xa], 1
movzx ecx, byte [ebp - 0x1d]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call fcn.0049c480
add esp, 8
cmp dword [ebp - 8], 0
je 0x4a7675
jmp 0x4a84c7
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp + 8]
add eax, 0x6c
push eax
call fcn.004c33f0
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a76a2
jmp 0x4a84c7
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
shl edx, 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 4]
mov dword [ebp - 0x540], edx
mov eax, dword [ebp - 0x540]
push eax
call fcn.004aacb0
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a76ef
cmp dword [ebp - 8], 0x65
je 0x4a76e3
jmp 0x4a84c7
mov dword [ebp - 8], 0
jmp 0x4a0a57
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 4], 0
jne 0x4a770b
mov edx, dword [ebp - 4]
push edx
call fcn.004b4c50
add esp, 4
jmp 0x4a7720
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x94]
or ecx, 1
mov edx, dword [ebp + 8]
mov dword [edx + 0x94], ecx
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x28]
mov cl, byte [eax + 0xc]
mov byte [ebp - 0x541], cl
movzx edx, byte [ebp - 0x541]
test edx, edx
jne 0x4a774a
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
and ecx, 0x400
jne 0x4a77c1
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov dword [ebp - 0x548], eax
movzx ecx, byte [ebp - 0x541]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x548]
shl ecx, 4
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + ecx + 4]
push ecx
call fcn.004b2750
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a77c1
mov edx, dword [ebp - 8]
and edx, 0xff
cmp edx, 6
jne 0x4a77bc
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x54c], ecx
mov edx, dword [ebp - 0x54c]
push edx
push str.database_table_is_locked:__s
mov eax, dword [ebp + 8]
push eax
call fcn.0049bc80
add esp, 0xc
jmp 0x4a84c7
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x550], edx
mov eax, dword [ebp - 0x550]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004c4ca0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 0x550], 0
je 0x4a7807
mov edx, dword [ebp - 0x550]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4c90
add esp, 8
cmp dword [ebp - 8], 0
je 0x4a7812
jmp 0x4a84c7
jmp case.0x4a099b.74
push 0x28
push 0
lea edx, [ebp - 0x580]
push edx
call fcn.005b4de0
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [ebp - 0x560], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
push edx
lea eax, [ebp - 0x580]
push eax
call fcn.0049db10
add esp, 8
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x580]
push ecx
call fcn.0049d490
add esp, 4
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0
je 0x4a7894
mov edx, dword [ebp + 8]
add edx, 0x6c
push edx
mov eax, dword [ebp - 0x554]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004c4140
add esp, 0x10
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x580]
push ecx
call fcn.00498ea0
add esp, 4
cmp dword [ebp - 8], 0
je 0x4a78ae
jmp 0x4a84c7
jmp case.0x4a099b.74
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xac], eax
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004c4a20
add esp, 0xc
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xac]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xac], edx
cmp dword [ebp - 8], 0
je 0x4a7905
jmp 0x4a84c7
jmp case.0x4a099b.74
mov dword [ebp - 0x590], 0
mov dword [ebp - 0x58c], 0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 0
je 0x4a7941
mov ecx, dword [ebp - 0x588]
cmp dword [ecx], 0
jne 0x4a794d
mov dword [ebp - 8], 6
jmp 0x4a84c7
mov edx, dword [ebp - 0x588]
mov eax, dword [edx]
mov dword [ebp - 0x584], eax
lea ecx, [ebp - 0x58c]
push ecx
mov edx, dword [ebp - 0x588]
push edx
mov eax, dword [ebp - 0x584]
mov ecx, dword [eax + 0x18]
call ecx
add esp, 8
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x588]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4c90
add esp, 8
cmp dword [ebp - 8], 0
je 0x4a7998
jmp 0x4a84c7
mov ecx, dword [ebp - 0x58c]
mov edx, dword [ebp - 0x588]
mov dword [ecx], edx
push 2
push 0xffffffffffffffff
push 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4cf0
add esp, 0x14
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0
je 0x4a79f4
mov eax, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x58c]
mov dword [eax + 0x28], ecx
mov edx, dword [ebp - 0x588]
mov eax, dword [edx + 4]
add eax, 1
mov ecx, dword [ebp - 0x588]
mov dword [ecx + 4], eax
jmp 0x4a7a0e
mov edx, dword [ebp - 0x58c]
push edx
mov eax, dword [ebp - 0x584]
mov ecx, dword [eax + 0x1c]
call ecx
add esp, 4
jmp 0x4a85dd
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
imul eax, eax, 0x28
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x598], eax
mov ecx, dword [ebp - 0x598]
add ecx, 0x28
mov dword [ebp - 0x5b0], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x5b4], eax
mov ecx, dword [ebp - 0x5b4]
mov edx, dword [ecx + 0x28]
mov dword [ebp - 0x5ac], edx
mov eax, dword [ebp - 0x5ac]
mov ecx, dword [eax]
mov dword [ebp - 0x5a8], ecx
mov edx, dword [ebp - 0x5a8]
mov eax, dword [edx]
mov dword [ebp - 0x59c], eax
mov ecx, dword [ebp - 0x5b0]
mov edx, dword [ecx]
mov dword [ebp - 0x5bc], edx
mov eax, dword [ebp - 0x598]
mov ecx, dword [eax]
mov dword [ebp - 0x5b8], ecx
mov dword [ebp - 0x594], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x60]
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x5a0], 0
jmp 0x4a7ac1
mov ecx, dword [ebp - 0x5a0]
add ecx, 1
mov dword [ebp - 0x5a0], ecx
mov edx, dword [ebp - 0x5a0]
cmp edx, dword [ebp - 0x5bc]
jge 0x4a7af2
mov eax, dword [ebp - 0x5a0]
add eax, 1
imul eax, eax, 0x28
add eax, dword [ebp - 0x5b0]
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ebp - 0x5a4]
mov dword [edx + ecx*4], eax
jmp 0x4a7ab2
mov eax, dword [ebp - 0x5a4]
push eax
mov ecx, dword [ebp - 0x5bc]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x5b8]
push ecx
mov edx, dword [ebp - 0x5ac]
push edx
mov eax, dword [ebp - 0x59c]
mov ecx, dword [eax + 0x20]
call ecx
add esp, 0x14
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x5a8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4c90
add esp, 8
cmp dword [ebp - 8], 0
je 0x4a7b44
jmp 0x4a84c7
mov ecx, dword [ebp - 0x5ac]
push ecx
mov edx, dword [ebp - 0x59c]
mov eax, dword [edx + 0x28]
call eax
add esp, 4
mov dword [ebp - 0x594], eax
mov ecx, dword [ebp - 0x5b4]
mov byte [ecx + 2], 0
cmp dword [ebp - 0x594], 0
je 0x4a7b77
jmp 0x4a0a57
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x5ec], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
imul edx, edx, 0x28
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x5c0], edx
mov eax, dword [ebp - 0x5ec]
movzx ecx, byte [eax + 2]
test ecx, ecx
je 0x4a7bc5
mov edx, dword [ebp - 0x5c0]
push edx
call fcn.00498510
add esp, 4
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x5ec]
mov ecx, dword [eax + 0x28]
mov edx, dword [ecx]
mov dword [ebp - 0x5e8], edx
mov eax, dword [ebp - 0x5e8]
mov ecx, dword [eax]
mov dword [ebp - 0x5e4], ecx
push 0x20
push 0
lea edx, [ebp - 0x5e0]
push edx
call fcn.005b4de0
add esp, 0xc
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x5e0], eax
mov ecx, dword [ebp - 0x5c0]
movzx edx, word [ecx + 8]
and edx, 0xffff3e00
or edx, 1
mov eax, dword [ebp - 0x5c0]
mov word [eax + 8], dx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x5e0]
push eax
mov ecx, dword [ebp - 0x5ec]
mov edx, dword [ecx + 0x28]
push edx
mov eax, dword [ebp - 0x5e4]
mov ecx, dword [eax + 0x2c]
call ecx
add esp, 0xc
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x5e8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4c90
add esp, 8
cmp dword [ebp - 0x5cc], 0
je 0x4a7c6e
mov ecx, dword [ebp - 0x5cc]
mov dword [ebp - 8], ecx
movzx edx, byte [ebp - 0x1d]
push edx
mov eax, dword [ebp - 0x5c0]
push eax
call fcn.0049c480
add esp, 8
mov ecx, dword [ebp - 0x5c0]
push ecx
call fcn.004b2c30
add esp, 4
test eax, eax
je 0x4a7c9a
jmp 0x4a85c0
cmp dword [ebp - 8], 0
je 0x4a7ca5
jmp 0x4a84c7
jmp case.0x4a099b.74
mov dword [ebp - 0x5f0], 0
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x70]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x5fc]
movzx edx, byte [ecx + 2]
test edx, edx
je 0x4a7cdc
jmp case.0x4a099b.74
mov eax, dword [ebp - 0x5fc]
mov ecx, dword [eax + 0x28]
mov edx, dword [ecx]
mov dword [ebp - 0x5f8], edx
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [eax]
mov dword [ebp - 0x5f4], ecx
mov edx, dword [ebp - 0x5fc]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 0x5f4]
mov edx, dword [ecx + 0x24]
call edx
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x5f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4c90
add esp, 8
cmp dword [ebp - 8], 0
je 0x4a7d34
jmp 0x4a84c7
mov edx, dword [ebp - 0x5fc]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 0x5f4]
mov edx, dword [ecx + 0x28]
call edx
add esp, 4
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 0
jne 0x4a7d60
jmp case.0x4a099b.13
jmp 0x4a09b4
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x604], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x600], ecx
push 1
mov edx, dword [ebp - 0x600]
push edx
call fcn.0049c480
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4a7da5
jmp 0x4a84c7
mov eax, dword [ebp - 0x600]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x604]
push edx
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x4c]
call edx
add esp, 8
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x604]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b4c90
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x94]
and eax, 0xfffffffe
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x94], eax
cmp dword [ebp - 8], 0
je 0x4a7dfc
jmp 0x4a84c7
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x624], ecx
cmp dword [ebp - 0x624], 0
je 0x4a7e24
mov edx, dword [ebp - 0x624]
cmp dword [edx], 0
jne 0x4a7e30
mov dword [ebp - 8], 6
jmp 0x4a84c7
mov eax, dword [ebp - 0x624]
mov ecx, dword [eax]
mov dword [ebp - 0x608], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 8]
mov dword [ebp - 0x628], eax
mov ecx, dword [ebp - 0x608]
cmp dword [ecx + 0x34], 0
je 0x4a7fd0
mov edx, dword [ebp - 4]
mov al, byte [edx + 0x4a]
mov byte [ebp - 0x629], al
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x60]
mov dword [ebp - 0x614], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x610], ecx
mov dword [ebp - 0x60c], 0
jmp 0x4a7e9f
mov edx, dword [ebp - 0x60c]
add edx, 1
mov dword [ebp - 0x60c], edx
mov eax, dword [ebp - 0x60c]
cmp eax, dword [ebp - 0x628]
jge 0x4a7ed3
mov ecx, dword [ebp - 0x60c]
mov edx, dword [ebp - 0x614]
mov eax, dword [ebp - 0x610]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0x610]
add ecx, 0x28
mov dword [ebp - 0x610], ecx
jmp 0x4a7e90
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x28]
mov cl, byte [eax + 2]
mov byte [edx + 0x4a], cl
lea edx, [ebp - 0x620]
push edx
mov eax, dword [ebp - 0x614]
push eax
mov ecx, dword [ebp - 0x628]
push ecx
mov edx, dword [ebp - 0x624]
push edx
mov eax, dword [ebp - 0x608]
mov ecx, dword [eax + 0x34]
call ecx
add esp, 0x10
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
mov al, byte [ebp - 0x629]
mov byte [edx + 0x4a], al
mov ecx, dword [ebp - 0x624]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4c90
add esp, 8
cmp dword [ebp - 8], 0
jne 0x4a7f4f
mov eax, dword [ebp - 0x28]
cmp dword [eax + 4], 0
je 0x4a7f4f
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x620]
mov dword [ecx + 0x20], edx
mov eax, dword [ebp - 0x61c]
mov dword [ecx + 0x24], eax
mov ecx, dword [ebp - 8]
and ecx, 0xff
cmp ecx, 0x13
jne 0x4a7fb6
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
movzx ecx, byte [eax + 0x10]
test ecx, ecx
je 0x4a7fb6
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
cmp eax, 4
jne 0x4a7f80
mov dword [ebp - 8], 0
jmp 0x4a7fb4
mov ecx, dword [ebp - 0x28]
movzx edx, word [ecx + 2]
cmp edx, 5
jne 0x4a7f98
mov dword [ebp - 0x780], 2
jmp 0x4a7fa5
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 2]
mov dword [ebp - 0x780], ecx
mov edx, dword [ebp + 8]
mov al, byte [ebp - 0x780]
mov byte [edx + 0x8e], al
jmp 0x4a7fc5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
add edx, 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x2c], edx
cmp dword [ebp - 8], 0
je 0x4a7fd0
jmp 0x4a84c7
jmp case.0x4a099b.74
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
shl ecx, 4
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + ecx + 4]
push ecx
call fcn.00492c40
add esp, 4
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004b4fc0
add esp, 8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
shl edx, 4
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 4]
mov dword [ebp - 0x630], edx
mov dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0xc], 0
je 0x4a8081
mov ecx, dword [ebp - 0x630]
push ecx
call fcn.00492c40
add esp, 4
mov dword [ebp - 0x634], eax
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x634]
cmp eax, dword [edx + 0xc]
jae 0x4a8081
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x634], edx
mov eax, dword [ebp - 0x634]
push eax
mov ecx, dword [ebp - 0x630]
push ecx
call fcn.004aac50
add esp, 8
cdq
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp case.0x4a099b.74
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 2]
mov dword [ebp - 0x63c], eax
mov ecx, dword [ebp - 0x63c]
lea edx, [ecx*4 + 0x1c]
xor eax, eax
push eax
push edx
mov ecx, dword [ebp - 4]
push ecx
call fcn.00482780
add esp, 0xc
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 0
jne 0x4a80e3
jmp 0x4a85dd
mov edx, dword [ebp - 0x638]
mov dword [edx], 0
mov eax, dword [ebp - 0x638]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
mov edx, dword [ebp - 0x638]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x638]
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], ecx
mov edx, dword [ebp - 0x638]
mov al, byte [ebp - 0x63c]
mov byte [edx + 0x1a], al
mov ecx, dword [ebp - 0x28]
mov byte [ecx + 1], 0xf0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x638]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0x28]
movzx edx, byte [ecx]
add edx, 2
mov eax, dword [ebp - 0x28]
mov byte [eax], dl
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x640], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0xc]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x640]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x14]
je 0x4a81d5
mov ecx, dword [ebp - 0x640]
mov edx, dword [ebp - 0x14]
mov dword [ecx], edx
mov eax, dword [ebp - 0x640]
movzx ecx, byte [eax + 0x1a]
sub ecx, 1
mov dword [ebp - 0x644], ecx
jmp 0x4a81a8
mov edx, dword [ebp - 0x644]
sub edx, 1
mov dword [ebp - 0x644], edx
cmp dword [ebp - 0x644], 0
jl 0x4a81d5
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 8]
add ecx, dword [ebp - 0x644]
imul ecx, ecx, 0x28
add ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x644]
mov eax, dword [ebp - 0x640]
mov dword [eax + edx*4 + 0x1c], ecx
jmp 0x4a8199
mov ecx, dword [ebp - 0x14]
movzx edx, word [ecx + 8]
and edx, 0xffff3e00
or edx, 1
mov eax, dword [ebp - 0x14]
mov word [eax + 8], dx
mov ecx, dword [ebp - 0x640]
mov byte [ecx + 0x19], 0
mov edx, dword [ebp - 0x640]
add edx, 0x1c
push edx
mov eax, dword [ebp - 0x640]
movzx ecx, byte [eax + 0x1a]
push ecx
mov edx, dword [ebp - 0x640]
push edx
mov eax, dword [ebp - 0x640]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0xc]
call edx
add esp, 0xc
mov eax, dword [ebp - 0x640]
movzx ecx, byte [eax + 0x19]
test ecx, ecx
je 0x4a8299
mov edx, dword [ebp - 0x640]
cmp dword [edx + 0x14], 0
je 0x4a8267
mov eax, dword [ebp - 0x14]
push eax
call fcn.0049d490
add esp, 4
push eax
push 0x6ab12c
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049bc80
add esp, 0xc
mov edx, dword [ebp - 0x640]
mov eax, dword [edx + 0x14]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x640]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp + 8]
add edx, 0xd8
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.0049bd90
add esp, 0x10
cmp dword [ebp - 8], 0
je 0x4a8299
jmp 0x4a84c7
mov ecx, dword [ebp - 0x14]
movzx edx, word [ecx + 8]
and edx, 0x12
je 0x4a82cb
movzx eax, byte [ebp - 0x1d]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.0049c480
add esp, 8
mov edx, dword [ebp - 0x14]
push edx
call fcn.004b2c30
add esp, 4
test eax, eax
je 0x4a82cb
jmp 0x4a85c0
jmp case.0x4a099b.74
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x4c]
and ecx, 0x81
je 0x4a8424
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x94]
shr eax, 1
and eax, 1
jne 0x4a8424
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 0x10], 0
je 0x4a830e
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x784], eax
jmp 0x4a831d
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xbc]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 0
je 0x4a8424
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x4c]
and edx, 0x80
je 0x4a839b
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb8]
mov dword [ebp - 0x650], ecx
mov edx, dword [ebp - 0x64c]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004a0000
add esp, 8
mov dword [ebp - 0x654], eax
mov ecx, dword [ebp - 0x654]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xbc]
push eax
call dword [ebp - 0x650]
add esp, 8
mov ecx, dword [ebp - 0x654]
push ecx
call fcn.00482320
add esp, 4
jmp 0x4a8424
mov edx, dword [ebp - 4]
cmp dword [edx + 0xa8], 1
jle 0x4a83ff
mov eax, dword [ebp - 0x64c]
push eax
push str.____s
mov ecx, dword [ebp - 4]
push ecx
call fcn.0049b890
add esp, 0xc
mov dword [ebp - 0x658], eax
mov edx, dword [ebp - 0x658]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xbc]
push edx
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb8]
call ecx
add esp, 0x10
mov edx, dword [ebp - 0x658]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004823c0
add esp, 8
jmp 0x4a8424
mov ecx, dword [ebp - 0x64c]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xbc]
push ecx
push 1
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xb8]
call eax
add esp, 0x10
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
cmp edx, dword [0x6a90c0]
jl 0x4a8499
mov dword [ebp - 0x648], 1
jmp 0x4a844d
mov eax, dword [ebp - 0x648]
add eax, 1
mov dword [ebp - 0x648], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x648]
cmp edx, dword [ecx + 0x88]
jge 0x4a848f
mov eax, dword [ebp - 0x648]
imul eax, eax, 0x14
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
movzx eax, byte [edx + eax]
cmp eax, 0x14
jne 0x4a848d
mov ecx, dword [ebp - 0x648]
imul ecx, ecx, 0x14
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x58]
mov dword [eax + ecx + 4], 0
jmp 0x4a843e
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 4], 0
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 4]
add eax, 1
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 4], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb8]
add eax, 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xb8], eax
jmp 0x4a0a57
jmp 0x4a095a
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x45]
test eax, eax
je 0x4a84d9
mov dword [ebp - 8], 7
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x6c], 0
jne 0x4a8509
cmp dword [ebp - 8], 0xc0a
je 0x4a8509
mov edx, dword [ebp - 8]
push edx
call fcn.00502b70
add esp, 4
push eax
push 0x6ab138
mov eax, dword [ebp + 8]
push eax
call fcn.0049bc80
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov dword [ecx + 0x28], edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.0048a880
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x6c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xbc]
push edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
cdq
mov ecx, 0x14
idiv ecx
push eax
push str.statement_aborts_at__d:___s___s
mov edx, dword [ebp - 8]
push edx
call fcn.00484a50
add esp, 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.004996d0
add esp, 4
cmp dword [ebp - 8], 0xc0a
jne 0x4a8574
mov ecx, dword [ebp - 4]
push ecx
call fcn.004828c0
add esp, 4
mov dword [ebp - 8], 1
movzx edx, byte [ebp - 0x1e]
test edx, edx
jle 0x4a8597
movzx eax, byte [ebp - 0x1e]
sub eax, 1
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004bc940
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb0]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xb0], eax
mov edx, dword [ebp + 8]
push edx
call fcn.00499c30
add esp, 4
mov eax, dword [ebp - 8]
jmp 0x4a8646
push 0x6ab15c
mov eax, dword [ebp + 8]
push eax
call fcn.0049bc80
add esp, 8
mov dword [ebp - 8], 0x12
jmp 0x4a84c7
mov ecx, dword [ebp - 4]
push ecx
call fcn.004828c0
add esp, 4
push 0x6ab174
mov edx, dword [ebp + 8]
push edx
call fcn.0049bc80
add esp, 8
mov dword [ebp - 8], 7
jmp 0x4a84c7
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x45]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 9
mov dword [ebp - 8], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [edx + 0x28], eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.00502b70
add esp, 4
push eax
push 0x6ab184
mov edx, dword [ebp + 8]
push edx
call fcn.0049bc80
add esp, 0xc
jmp 0x4a84c7
pop edi
pop esi
mov esp, ebp
pop ebp
ret