Function at 0x4b6a10
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax*4 + 0x60430c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 8], eax
cmp dword [0x1215de0], 0
je 0x4b6a4e
mov dword [ebp - 0x10], 0xf
mov dword [ebp - 0xc], 7
jmp 0x4b6a5c
mov dword [ebp - 0x10], 0x1e
mov dword [ebp - 0xc], 0x1e
cmp dword [ebp + 0x18], 0x40000000
jne 0x4b6a6c
mov dword [ebp - 0x14], 9
mov dword [ebp - 4], 0
jmp 0x4b6a7e
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x14]
jge 0x4b84ec
cmp dword [ebp + 0x18], 0x40000000
jne 0x4b6ab3
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
lea edx, [ebp + 0x10]
push edx
lea eax, [ebp + 0xc]
push eax
mov ecx, dword [ebp - 4]
push ecx
push 0
mov ecx, dword [ebp - 0x20]
call fcn.004c4c40
jmp 0x4b6ad1
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x10]
push ecx
lea edx, [ebp + 0xc]
push edx
mov eax, dword [ebp - 4]
push eax
push 1
mov ecx, dword [ebp - 0x20]
call fcn.004c4c40
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x30
test eax, eax
je 0x4b6aea
jmp 0x4b84ec
cmp dword [ebp + 0x18], 1
jne 0x4b6d01
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x10000400
test eax, eax
je 0x4b6b0f
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
movsx eax, word [edx + ecx*2 + 0x2029b0]
test eax, eax
je 0x4b6b26
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x100
test eax, eax
je 0x4b6b41
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
movsx eax, word [edx + ecx*2 + 0x1db590]
test eax, eax
je 0x4b6b58
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xbf
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xffefffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffdfffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0x7f
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffdffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffbffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xfff7ffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xdfffffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x7fffffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xbfffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffffff7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x1b3fe0], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
or edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x28c020], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x29fa30], 0
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0x48fd7c], 1
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x100000
je 0x4b6d17
cmp dword [ebp + 0x18], 0x200000
jne 0x4b7013
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x10000400
test ecx, ecx
je 0x4b6d33
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x2029b0]
test ecx, ecx
je 0x4b6d4a
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100
test ecx, ecx
je 0x4b6d66
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x1db590]
test ecx, ecx
je 0x4b6d7d
jmp 0x4b6a75
cmp dword [ebp + 0x1c], 0
je 0x4b6d9f
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100000
test ecx, ecx
jne 0x4b6d9f
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffffffbf
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
cmp dword [ebp + 0x18], 0x100000
jne 0x4b6de6
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xffdfffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
jmp 0x4b6e06
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xffefffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and cl, 0x7f
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xfffdffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffbffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfff7ffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xdfffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x7fffffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xbfffffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xfe
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffffff7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x1b3fe0], 0
cmp dword [ebp + 0x1c], 0x20
je 0x4b6f4c
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
movsx edx, word [ecx + eax*2 + 0x13dd40]
and edx, 7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov word [ecx + eax*2 + 0xef500], dx
cmp dword [ebp + 0x1c], 0x10
jne 0x4b6f5f
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x1b3fe0], 0x10
cmp dword [ebp + 0x1c], 0x20
jne 0x4b6fb4
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x1b3fe0], 0x20
mov ecx, dword [0xb08980]
and ecx, 8
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
xor esi, esi
mov si, word [eax + edx*2 + 0xef500]
shl esi, 5
add ecx, esi
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx edx, word [eax + edx*2 + 0x13dd40]
and edx, 7
shl edx, 0xa
add ecx, edx
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov word [edx + eax*2 + 0xef500], cx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
or edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
xor eax, eax
mov al, byte [edx + 0x28c020]
cmp eax, 8
jl 0x4b700e
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
xor edx, edx
mov dl, byte [ecx + 0x29fa30]
sub edx, 8
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x28c020], dl
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0x48fd7c], 1
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x80
jne 0x4b7281
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x10000400
test ecx, ecx
je 0x4b703c
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x2029b0]
test ecx, ecx
je 0x4b7053
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100
test ecx, ecx
je 0x4b706f
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100000
test ecx, ecx
je 0x4b708b
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x1db590]
test ecx, ecx
je 0x4b70a2
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 1
test ecx, ecx
je 0x4b70d2
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x28c020], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x29fa30], 0
jmp 0x4b70ff
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
xor edx, edx
mov dl, byte [ecx + 0x28c020]
cmp edx, 8
jge 0x4b70ff
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x28c020], 8
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
mov byte [ecx + 0x29fa30], 8
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffffffe
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xffefffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xffdfffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffffffbf
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xfffdffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffbffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfff7ffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xdfffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x7fffffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xbfffffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xf7
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x1b3fe0], 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
or eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x80000
jne 0x4b7487
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x10000400
test edx, edx
je 0x4b72aa
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
movsx edx, word [ecx + eax*2 + 0x2029b0]
test edx, edx
je 0x4b72c1
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x100
test edx, edx
je 0x4b72dd
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 1
test edx, edx
je 0x4b72f6
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x100000
test edx, edx
je 0x4b7312
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
movsx edx, word [ecx + eax*2 + 0x1db590]
test edx, edx
je 0x4b7329
jmp 0x4b6a75
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
xor ecx, ecx
mov cl, byte [eax + 0x28c020]
cmp ecx, 0x64
jge 0x4b7341
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffefffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xffdfffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and dl, 0x7f
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffbffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xfffdffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xdfffffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x7fffffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xbfffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffffff7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x1b3fe0], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
or edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x40000
jne 0x4b76f2
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x10000400
test ecx, ecx
je 0x4b74b0
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x2029b0]
test ecx, ecx
je 0x4b74c7
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100
test ecx, ecx
je 0x4b74e3
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100000
test ecx, ecx
je 0x4b74ff
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x1db590]
test ecx, ecx
je 0x4b7516
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 1
test ecx, ecx
je 0x4b7546
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x28c020], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x29fa30], 0
jmp 0x4b7573
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
xor edx, edx
mov dl, byte [ecx + 0x28c020]
cmp edx, 8
jge 0x4b7573
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x28c020], 8
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
mov byte [ecx + 0x29fa30], 8
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffffffe
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xbf
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xffefffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffdfffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0x7f
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffdffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfff7ffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xdfffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x7fffffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xbfffffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xf7
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x1b3fe0], 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
or eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x20000000
jne 0x4b78fb
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x10000400
test edx, edx
je 0x4b771b
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
movsx edx, word [ecx + eax*2 + 0x2029b0]
test edx, edx
je 0x4b7732
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x100
test edx, edx
je 0x4b774e
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x100000
test edx, edx
je 0x4b776a
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
movsx edx, word [ecx + eax*2 + 0x1db590]
test edx, edx
je 0x4b7781
jmp 0x4b6a75
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x28c020], 8
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
mov byte [ecx + 0x29fa30], 8
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffffffe
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xbf
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xffefffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffdfffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0x7f
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffdffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfff7ffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x7fffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xbfffffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffffff7
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
mov byte [ecx + 0x1b3fe0], 0
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
or ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x80000000
jne 0x4b7ac2
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x10000400
test eax, eax
je 0x4b7923
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
movsx eax, word [edx + ecx*2 + 0x2029b0]
test eax, eax
je 0x4b793a
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x100
test eax, eax
je 0x4b7955
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x100000
test eax, eax
je 0x4b7970
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
movsx eax, word [edx + ecx*2 + 0x1db590]
test eax, eax
je 0x4b7987
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x20000000
test eax, eax
jne 0x4b79a2
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xfe
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xffffffbf
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffefffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xffdfffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and dl, 0x7f
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffdffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xfff7ffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffffff7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x1b3fe0], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
or edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x40000000
jne 0x4b7e3a
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x1db590]
test ecx, ecx
je 0x4b7ae6
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x10000400
test ecx, ecx
je 0x4b7b02
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x2029b0]
test ecx, ecx
je 0x4b7b19
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100
test ecx, ecx
je 0x4b7b35
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 1
test ecx, ecx
je 0x4b7b4e
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100000
test ecx, ecx
je 0x4b7b6a
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x200000
test ecx, ecx
je 0x4b7b86
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x80
test ecx, ecx
je 0x4b7ba2
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x20000
test ecx, ecx
je 0x4b7bbe
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x80000
test ecx, ecx
je 0x4b7bda
jmp 0x4b6a75
mov edx, dword [ebp + 0x10]
imul edx, edx, 0xc
mov eax, dword [ebp + 0xc]
sub eax, dword [edx + 0x9f09f4]
mov dword [ebp - 0x18], eax
cmp dword [0xb08954], 1
je 0x4b7c21
cmp dword [0xb08954], 6
je 0x4b7c21
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, 0x152b748
call fcn.004807e0
test eax, eax
je 0x4b7c21
jmp 0x4b6a75
cmp dword [0xb08954], 3
jne 0x4b7c51
push 0x1e
push 0xa
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, 0x152b748
call fcn.00480a30
test eax, eax
je 0x4b7c51
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x40000000
test edx, edx
je 0x4b7c73
cmp dword [ebp + 0x1c], 3
je 0x4b7c73
jmp 0x4b6a75
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
xor ecx, ecx
mov cl, byte [eax + 0x28c020]
cmp ecx, 0xc
jle 0x4b7c8b
jmp 0x4b6a75
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x28c020], 8
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffffff7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x1b3fe0], 0
cmp dword [ebp + 0x1c], 0
jne 0x4b7d1b
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x4000
test edx, edx
jne 0x4b7d16
push 0
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x20]
call fcn.004d0eb0
test eax, eax
je 0x4b7d16
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
or dh, 0x40
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
jmp 0x4b7e35
cmp dword [ebp + 0x1c], 1
jne 0x4b7d6a
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x4000
test ecx, ecx
je 0x4b7d65
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ch, 0xbf
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov ecx, dword [ebp - 0x20]
call fcn.004d1030
jmp 0x4b7e35
cmp dword [ebp + 0x1c], 2
jne 0x4b7dd6
push 1
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x20]
call fcn.004d0eb0
test eax, eax
je 0x4b7dd4
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and dh, 0xbf
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
or ecx, 0x40000000
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
mov byte [ecx + 0x28c020], 0
jmp 0x4b7e35
cmp dword [ebp + 0x1c], 3
jne 0x4b7e35
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x20]
call fcn.004d1030
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
mov byte [ecx + 0x28c020], 8
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ch, 0xbf
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xbfffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
jmp 0x4b84d5
cmp dword [ebp + 0x1c], 2
je 0x4b7e56
cmp dword [ebp + 0x1c], 0x10
je 0x4b7e56
cmp dword [ebp + 0x1c], 0x20
je 0x4b7e56
cmp dword [ebp + 0x1c], 0x40
jne 0x4b81c7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x10000400
test edx, edx
je 0x4b7e72
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
movsx edx, word [ecx + eax*2 + 0x2029b0]
test edx, edx
je 0x4b7e89
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x100
test edx, edx
je 0x4b7ea5
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x60300001
test edx, edx
je 0x4b7ec1
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
movsx edx, word [ecx + eax*2 + 0x1db590]
test edx, edx
je 0x4b7ed8
jmp 0x4b6a75
cmp dword [ebp + 0x1c], 2
jne 0x4b7ff3
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x80000
test edx, edx
je 0x4b7efe
jmp 0x4b6a75
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0x20000
test edx, edx
je 0x4b7f1a
jmp 0x4b6a75
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
movsx ecx, byte [eax + 0x1b3fe0]
and ecx, 0x20
test ecx, ecx
je 0x4b7f33
jmp 0x4b6a75
mov edi, dword [0x116fcb0]
mov esi, dword [0x116fca4]
mov eax, dword [0x116fc84]
add esi, eax
push esi
mov eax, dword [0x116fc80]
shl eax, 5
add edi, eax
mov edx, 0
mov eax, dword [esi + 1]
mov ebx, dword [esi - 1]
and eax, 0x20
je 0x4b7f68
or edx, 0x20
and ebx, 0x20
je 0x4b7f74
or edx, 2
mov ecx, dword [edi]
add esi, ecx
mov eax, dword [esi - 1]
mov ebx, dword [esi + 1]
mov ecx, dword [esi]
and eax, 0x20
je 0x4b7f8c
or edx, 1
and ebx, 0x20
je 0x4b7f98
or edx, 0x40
and ecx, 0x20
je 0x4b7fa7
or edx, 0x80
mov ecx, dword [edi + 0x10]
pop esi
add esi, ecx
mov eax, dword [esi - 1]
mov ebx, dword [esi + 1]
mov ecx, dword [esi]
and eax, 0x20
je 0x4b7fc1
or edx, 4
and ebx, 0x20
je 0x4b7fcd
or edx, 0x10
and ecx, 0x20
je 0x4b7fd9
or edx, 8
mov byte [0x116fc88], dl
mov edx, dword [ebp - 0x20]
xor eax, eax
mov al, byte [edx + 0x48ff38]
test eax, eax
je 0x4b7ff3
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov ax, word [edx + ecx*2 + 0x2ee270]
and al, 0xdf
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov word [edx + ecx*2 + 0x2ee270], ax
cmp dword [ebp + 0x1c], 0x40
jne 0x4b8019
jmp 0x4b805d
cmp dword [ebp + 0x1c], 2
jne 0x4b8021
jmp 0x4b805d
cmp dword [ebp + 0x1c], 0x20
jne 0x4b8043
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x28c020], 0
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
mov byte [ecx + 0x29fa30], 0
jmp 0x4b805d
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x28c020], 8
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x29fa30], 8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xfe
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xffffffbf
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffefffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xffdfffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and dl, 0x7f
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffdffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xfff7ffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xdfffffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x7fffffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xbfffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
cmp dword [ebp + 0x1c], 2
je 0x4b81b3
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffffff7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov al, byte [ebp + 0x1c]
mov byte [edx + 0x1b3fe0], al
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x20000
jne 0x4b842f
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x10000400
test eax, eax
je 0x4b81ef
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
movsx eax, word [edx + ecx*2 + 0x2029b0]
test eax, eax
je 0x4b8206
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x100
test eax, eax
je 0x4b8221
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0x100000
test eax, eax
je 0x4b823c
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
movsx eax, word [edx + ecx*2 + 0x1db590]
test eax, eax
je 0x4b8253
jmp 0x4b6a75
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 1
test eax, eax
je 0x4b8283
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp + 0xc]
mov byte [ecx + 0x28c020], 0
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x29fa30], 0
jmp 0x4b82b0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
xor ecx, ecx
mov cl, byte [eax + 0x28c020]
cmp ecx, 8
jge 0x4b82b0
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x28c020], 8
mov eax, dword [ebp - 0x20]
add eax, dword [ebp + 0xc]
mov byte [eax + 0x29fa30], 8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and al, 0xfe
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xffffffbf
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xffefffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xffdfffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and dl, 0x7f
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0xfffbffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xfff7ffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xdfffffff
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x7fffffff
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + ecx*4 + 0x165160]
and eax, 0xbfffffff
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [edx + ecx*4 + 0x165160], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
and edx, 0xfffffff7
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp + 0xc]
mov byte [edx + 0x1b3fe0], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + eax*4 + 0x165160]
or edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + eax*4 + 0x165160], edx
jmp 0x4b84d5
cmp dword [ebp + 0x18], 0x40
jne 0x4b84d5
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 1
test ecx, ecx
jne 0x4b8452
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x10000400
test ecx, ecx
je 0x4b846e
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x2029b0]
test ecx, ecx
je 0x4b8485
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
and ecx, 0x100
test ecx, ecx
je 0x4b84a1
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
movsx ecx, word [eax + edx*2 + 0x1db590]
test ecx, ecx
je 0x4b84b8
jmp 0x4b6a75
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + edx*4 + 0x165160]
or ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
mov dword [eax + edx*4 + 0x165160], ecx
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov ecx, 0x152b748
call fcn.004795e0
jmp 0x4b6a75
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18