Function at 0x48c980
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x158
mov dword [esp], edx
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x10], esi
push edi
test edx, edx
jne 0x48c9db
cmp dword [esp + 0x17c], edx
jne 0x48c9c0
push 1
push edx
push edx
push edx
push edx
lea ecx, [esp + 0x190]
call fcn.0048c980
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
lea eax, [esp + 0x17c]
sub eax, esi
cdq
xor eax, edx
sub eax, edx
neg eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x34], 0
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jae 0x491eee
mov dword [esp + 0x64], 0xfc00
mov dword [esp + 0x68], 0xdc00
mov dword [esp + 0x44], SysReAllocString
mov dword [esp + 0x4c], 0xd800
nop dword [eax]
inc eax
mov dword [edi], eax
mov eax, dword [esp + 0x17c]
cmp eax, dword [edi + 8]
jae 0x49400e
cmp dword [edi + 0x9c], 2
jne 0x48ca80
mov eax, dword [esp + 0x178]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], esi
mov dword [esp + 0x178], eax
mov dword [edi + 0x9c], 0
jmp 0x48ca80
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
jmp 0x48ca87
je case.0x48cabb.151
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x170]
movzx ecx, word [edx]
mov ebp, ebx
mov dword [esp + 0x28], edx
mov ebx, ecx
mov edx, ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], edx
cmp edx, 0x9b
ja case.0x48cabb.98
movzx eax, byte [edx + 0x494168]
jmp dword [eax*4 + 0x494020]
cmp dword [edi + 0x70], 0
movzx ecx, byte [edx + 0x4ba9d0]
je 0x491fbc
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
add ecx, eax
lea edx, [edx + ecx*2]
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edx, dword [esp + 0x10]
mov ebx, esi
mov edi, dword [edi + 0xb0]
mov ebp, edx
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
cmp eax, 1
je 0x48cbf9
cmp eax, 0xfffffc20
jne 0x48cb6a
mov edx, dword [esp + 0x10]
movzx ecx, word [edx + 2]
lea ecx, [edx + ecx*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], ecx
jae 0x491ef6
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x48cb76
cmp word [ecx], 0x71
jne 0x491ef6
jmp 0x48cb76
test eax, eax
jne 0x491ef6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea edx, [edx + eax*2]
mov eax, dword [esp + 0x174]
mov dword [esp + 0x10], edx
mov dword [eax + 0xb0], edi
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x71
je 0x48caf4
mov edi, dword [esp + 0x174]
movzx eax, cx
cmp eax, 0x7c
je 0x48cbb4
cmp eax, 0x71
jne case.0x48cabb.151
movzx eax, word [edx + 2]
lea edx, [edx + eax*2]
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x71
je 0x48cbb4
mov eax, dword [edi + 0x90]
mov esi, dword [edi + 0x84]
mov dword [esp + 0x10], edx
mov dword [esp + 0x170], eax
mov dword [esp + 0x14], esi
cmp ecx, 0x72
je 0x48cbed
cmp esi, ebx
jne 0x491c40
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edi, dword [esp + 0x174]
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x80]
movzx ecx, word [edx]
mov dword [esp + 0x16c], eax
jmp 0x48cba3
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x28], ebp
jmp 0x48d73c
mov ebx, dword [esp + 0x10]
cmp word [ebx + 4], 0x70
movzx edi, word [ebx + 2]
jne 0x48cd21
mov ecx, dword [0x4ddc84]
test ecx, ecx
je 0x48cd1a
mov dword [esp + 0xb8], 2
movzx eax, word [ebx + 6]
mov ebx, dword [esp + 0x174]
mov dword [esp + 0xbc], eax
mov edx, dword [esp + 0x10]
mov eax, dword [ebx + 0xc]
mov dword [esp + 0xc0], eax
mov eax, dword [ebx + 0x78]
mov dword [esp + 0xc4], eax
mov eax, dword [ebx + 0x7c]
sub eax, dword [ebx + 0x78]
sar eax, 1
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x16c]
sub eax, dword [ebx + 0x78]
sar eax, 1
mov dword [esp + 0xcc], eax
mov eax, esi
sub eax, dword [ebx + 0x78]
sar eax, 1
mov dword [esp + 0xd0], eax
movzx eax, word [edx + 8]
mov dword [esp + 0xe0], eax
movzx eax, word [edx + 0xa]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x170]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0xd4], eax
mov eax, dword [ebx + 0x94]
mov dword [esp + 0xd8], eax
mov eax, dword [ebx + 0xac]
mov dword [esp + 0xdc], eax
mov eax, dword [ebx + 0xb4]
mov dword [esp + 0xe8], eax
lea eax, [esp + 0xb8]
push eax
call ecx
add esp, 4
test eax, eax
jg case.0x48cabb.151
js 0x491ef6
mov ebx, dword [esp + 0x10]
add ebx, 0xc
mov dword [esp + 0x10], ebx
movzx ecx, word [ebx + 4]
lea edx, [ebx + 4]
cmp ecx, 0x89
je 0x48cef3
cmp ecx, 0x8a
je 0x48cef3
cmp ecx, 0x87
je 0x48cdb9
cmp ecx, 0x88
je 0x48cdb9
cmp ecx, 0x8b
jne 0x48cd64
movzx eax, word [ebx + 2]
lea eax, [ebx + eax*2]
jmp 0x48d082
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x9c], 1
mov eax, dword [esp + 0x17c]
inc eax
push eax
push 0
push ecx
push dword [esp + 0x17c]
mov ecx, esi
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
cmp eax, 1
je 0x491cc7
test eax, eax
je 0x48cdb1
cmp eax, 0xfffffc20
jne 0x491ef6
lea eax, [ebx + edi*2]
jmp 0x48d082
movzx edi, word [ebx + 6]
mov ebp, dword [esp + 0x174]
lea edx, [edi + edi]
cmp edx, dword [esp + 0x170]
jge 0x48cddd
mov eax, dword [ebp + 0xc]
cmp dword [eax + edx*4], 0
jge 0x48d063
cmp ecx, 0x88
jne 0x48cee8
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x28]
mov ebx, eax
test edx, edx
jle 0x48cee4
xor ecx, ecx
mov ebp, eax
mov esi, ecx
nop
movzx eax, word [ebx]
cmp eax, edi
je 0x48ce23
mov eax, dword [esp + 0x174]
inc esi
mov ecx, esi
mov eax, dword [eax + 0x24]
lea ebx, [eax*2]
add ebx, ebp
mov ebp, ebx
cmp esi, edx
jl 0x48ce00
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x14]
cmp ecx, edx
jge 0x48cee4
mov eax, dword [esp + 0x174]
mov edi, ebx
cmp ebx, dword [eax + 0x28]
jbe 0x48ce90
mov eax, dword [eax + 0x24]
lea ecx, [ebx + 2]
neg eax
lea edi, [edi + eax*2]
lea edx, [edi + 2]
call fcn.00495550
test eax, eax
jne 0x48ce89
movzx eax, word [edi]
lea ecx, [eax + eax]
cmp ecx, dword [esp + 0x170]
jge 0x48ce7b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x48d063
mov eax, dword [esp + 0x174]
cmp edi, dword [eax + 0x28]
ja 0x48ce41
jmp 0x48ce90
mov eax, dword [esp + 0x174]
mov ebp, dword [esp + 0x2c]
inc ebp
cmp ebp, dword [eax + 0x20]
jge 0x48cee4
lea edi, [ebx + 2]
nop dword [eax]
mov eax, dword [eax + 0x24]
mov ecx, edi
lea ebx, [ebx + eax*2]
lea edx, [ebx + 2]
call fcn.00495550
test eax, eax
jne 0x48cee4
movzx eax, word [ebx]
lea ecx, [eax + eax]
cmp ecx, dword [esp + 0x170]
jge 0x48ced7
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x48d063
mov eax, dword [esp + 0x174]
inc ebp
cmp ebp, dword [eax + 0x20]
jl 0x48cea0
mov ebx, dword [esp + 0x10]
movzx eax, word [ebx + 2]
xor ecx, ecx
jmp 0x48d073
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0xa8]
test eax, eax
jne 0x48cf10
movzx eax, word [ebx + 2]
lea eax, [ebx + eax*2]
jmp 0x48d089
movzx edi, word [ebx + 6]
cmp edi, 0xffff
je 0x48d063
cmp edi, dword [eax + 4]
je 0x48d063
xor edx, edx
mov dword [esp + 0x24], edx
cmp ecx, 0x8a
jne 0x48d051
mov eax, dword [esp + 0x174]
xor ebp, ebp
mov ecx, dword [eax + 0x28]
mov ebx, ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x20], edx
jle 0x48d051
mov edx, ecx
mov esi, eax
xor ecx, ecx
movzx eax, word [ebx]
cmp eax, edi
je 0x48cf82
mov eax, dword [esi + 0x24]
inc ebp
mov ecx, ebp
lea ebx, [edx + eax*2]
mov eax, dword [esp + 0x2c]
mov edx, ebx
cmp ebp, eax
jl 0x48cf66
jmp 0x48cf86
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebx
cmp ecx, eax
jge 0x48d051
mov eax, dword [esp + 0x174]
mov edi, ebx
cmp ebx, dword [eax + 0x28]
jbe 0x48cffc
lea ebp, [ebx + 2]
mov esi, eax
mov eax, dword [esi + 0x24]
mov ecx, ebp
neg eax
lea edi, [edi + eax*2]
lea edx, [edi + 2]
call fcn.00495550
test eax, eax
jne 0x48cfe5
mov eax, dword [esi + 0xa8]
xor ebx, ebx
movzx ecx, word [edi]
mov eax, dword [eax + 4]
cmp ecx, eax
sete bl
mov dword [esp + 0x24], ebx
je 0x48cfe5
cmp edi, dword [esi + 0x28]
ja 0x48cfb1
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x174]
test edx, edx
jne 0x48d06a
inc ebp
cmp ebp, dword [eax + 0x20]
jge 0x48d055
mov esi, dword [esp + 0x174]
lea edi, [ebx + 2]
mov eax, dword [esi + 0x24]
mov ecx, edi
lea ebx, [ebx + eax*2]
lea edx, [ebx + 2]
call fcn.00495550
test eax, eax
jne 0x48d049
mov eax, dword [esi + 0xa8]
xor edx, edx
movzx ecx, word [ebx]
mov eax, dword [eax + 4]
cmp ecx, eax
sete dl
mov dword [esp + 0x24], edx
je 0x48d04d
inc ebp
cmp ebp, dword [esi + 0x20]
jl 0x48d014
jmp 0x48d04d
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x14]
test edx, edx
jne 0x48d06a
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
movzx eax, word [eax + 2]
jmp 0x48d073
mov ecx, 1
jmp 0x48d06e
mov ecx, dword [esp + 0x24]
mov eax, 2
mov edx, dword [esp + 0x10]
lea eax, [edx + eax*2]
test ecx, ecx
jne 0x491d03
mov edi, dword [esp + 0x174]
cmp word [eax], 0x71
je 0x491d0a
lea edx, [eax + 4]
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x170]
movzx edi, word [eax + 2]
mov eax, dword [esp + 0x174]
lea edx, [edi + edi]
mov dword [eax + 0x94], edi
cmp edx, dword [eax + 0x14]
jl 0x48d0dc
mov edx, dword [esp + 0x10]
mov edi, eax
add edx, 4
mov dword [esp + 0x10], edx
mov dword [edi + 0x40], 1
jmp 0x48ca87
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
sub eax, edi
mov edi, dword [esp + 0x174]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, esi
sub ecx, dword [edi + 0x78]
mov eax, dword [edi + 0xc]
sar ecx, 1
mov dword [eax + edx*4 + 4], ecx
cmp ebx, edx
jg 0x48d10d
lea ebx, [edx + 2]
mov dword [esp + 0x170], ebx
mov edx, dword [esp + 0x10]
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x48ca87
mov ebp, dword [esp + 0x174]
mov edi, dword [edi + 0xb0]
cmp dword [ebp + 0x9c], 1
jne 0x48d144
mov dword [ebp + 0x9c], 0
mov ebx, 1
jmp 0x48d146
xor ebx, ebx
mov edx, dword [esp + 0x10]
nop word [eax + eax]
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push 0
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
cmp eax, 1
je 0x48d1b5
cmp eax, 0xfffffc19
je 0x48d1b5
test eax, eax
je 0x48d192
cmp eax, 0xfffffc20
jne 0x491ef6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
mov dword [ebp + 0xb0], edi
lea edx, [edx + eax*2]
movzx eax, word [edx]
mov dword [esp + 0x10], edx
mov ecx, eax
cmp eax, 0x71
je 0x48d150
mov edi, ebp
jmp 0x48d1cb
mov edx, dword [esp + 0x10]
mov edi, ebp
mov eax, dword [edi + 0x80]
mov dword [esp + 0x16c], eax
movzx eax, word [edx]
cmp ax, 0x72
je case.0x48cabb.151
test ebx, ebx
jne 0x4920c5
nop dword [eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x48d1e0
mov ebx, dword [edi + 0x90]
add edx, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x170], ebx
jmp 0x48ca87
mov ebp, dword [esp + 0x174]
mov edi, dword [edi + 0xb0]
cmp dword [ebp + 0x9c], 1
jne 0x48d22e
mov dword [ebp + 0x9c], 0
mov ebx, 1
jmp 0x48d230
xor ebx, ebx
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push 0
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
mov dword [ebp + 0xb0], edi
cmp eax, 1
je case.0x48cabb.151
cmp eax, 0xfffffc19
je case.0x48cabb.151
cmp eax, 0xfffffc1e
je 0x48d2b1
cmp eax, 0xfffffc1d
je 0x48d2b1
cmp eax, 0xfffffc1a
je 0x48d2b1
test eax, eax
je 0x48d299
cmp eax, 0xfffffc20
jne 0x491ef6
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
je 0x48d234
jmp 0x48d2ce
mov edx, dword [esp + 0x10]
nop word [eax + eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x48d2c0
test ebx, ebx
jne 0x4920c5
add edx, 4
mov edi, ebp
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edx, dword [esp + 0x10]
movzx ecx, word [edx + 2]
test ecx, ecx
je 0x48d32a
mov edx, dword [edi + 0x78]
mov ebx, 0xdc00
mov ebp, 0xfc00
nop dword [eax]
add esi, 0xfffffffe
dec ecx
mov dword [esp + 0x14], esi
cmp esi, edx
jb case.0x48cabb.151
mov ax, word [esi]
and ax, bp
cmp ax, bx
jne 0x48d322
add esi, 0xfffffffe
mov dword [esp + 0x14], esi
test ecx, ecx
jg 0x48d300
mov edx, dword [esp + 0x10]
cmp esi, dword [edi + 0x88]
jae 0x48d338
mov dword [edi + 0x88], esi
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov ecx, dword [0x4ddc84]
test ecx, ecx
je 0x48d425
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x80], 2
movzx eax, word [ebx + 2]
mov dword [esp + 0x84], eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x88], eax
mov eax, dword [edi + 0x78]
mov dword [esp + 0x8c], eax
mov eax, dword [edi + 0x7c]
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x16c]
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x94], eax
mov eax, esi
sub eax, dword [edi + 0x78]
sar eax, 1
mov dword [esp + 0x98], eax
movzx eax, word [ebx + 8]
mov dword [esp + 0xa8], eax
movzx eax, word [ebx + 0xa]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x170]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x9c], eax
mov eax, dword [edi + 0x94]
mov dword [esp + 0xa0], eax
mov eax, dword [edi + 0xac]
mov dword [esp + 0xa4], eax
mov eax, dword [edi + 0xb4]
mov dword [esp + 0xb0], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0x80]
push eax
call ecx
add esp, 4
test eax, eax
jg case.0x48cabb.151
js 0x491ef6
mov edx, dword [esp + 0x10]
add edx, 0xc
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edx, dword [esp + 0x10]
mov ecx, dword [edi + 0x74]
movzx eax, word [edx + 2]
lea ebx, [ecx + eax*2]
cmp ebx, ecx
jne 0x48d44b
xor ecx, ecx
jmp 0x48d44f
movzx ecx, word [ebx + 4]
mov eax, dword [edi + 0xa8]
test eax, eax
je 0x48d474
nop dword [eax]
cmp ecx, dword [eax + 4]
jne 0x48d46e
cmp esi, dword [eax + 0x10]
je 0x492021
mov eax, dword [eax]
test eax, eax
jne 0x48d460
mov dword [esp + 0x54], ecx
add edx, 4
mov dword [esp + 0x60], esi
mov eax, dword [edi + 0xa8]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x50]
mov dword [edi + 0xa8], eax
mov ecx, dword [edi + 0x10]
mov dword [esp + 0x10], edx
mov dword [esp + 0x5c], ecx
cmp ecx, 0x1e
jg 0x48d4b0
lea eax, [esp + 0xf0]
mov dword [esp + 0x58], eax
jmp 0x48d4d0
lea eax, [ecx*4]
push eax
call fcn.004997ae
add esp, 4
mov dword [esp + 0x58], eax
test eax, eax
je 0x492056
mov ecx, dword [esp + 0x5c]
shl ecx, 2
push ecx
push dword [edi + 0xc]
push eax
call fcn.00498e20
movzx ebp, word [ebx]
add esp, 0xc
mov eax, 0x82
cmp bp, ax
jb 0x48d4f7
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, word [ebx]
push edi
push dword [esp + 0x17c]
movzx eax, byte [eax + 0x4ba9d0]
push dword [esp + 0x17c]
lea edx, [ebx + eax*2]
call fcn.0048c980
mov ecx, dword [esp + 0x70]
add esp, 0x14
shl ecx, 2
mov edi, eax
mov eax, dword [esp + 0x174]
push ecx
push dword [esp + 0x5c]
push dword [eax + 0xc]
call fcn.00498e20
mov ecx, dword [esp + 0x180]
add esp, 0xc
mov eax, dword [esp + 0x50]
mov dword [ecx + 0xa8], eax
cmp edi, 1
je 0x48d5c8
cmp edi, 0xfffffc19
je 0x48d5c8
test edi, edi
je 0x48d57b
cmp edi, 0xfffffc20
jne 0x492031
mov edi, ecx
lea eax, [esp + 0x50]
mov dword [edi + 0xa8], eax
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x71
lea ebx, [ebx + eax*2]
je 0x48d4e3
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0xf0]
mov dword [edi + 0xa8], eax
mov eax, dword [esp + 0x58]
cmp eax, ecx
je case.0x48cabb.151
push eax
call fcn.0049b8d4
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xf0]
cmp eax, ecx
je 0x48d5e0
push eax
call fcn.0049b8d4
add esp, 4
mov edi, dword [esp + 0x174]
mov esi, dword [edi + 0x84]
mov eax, dword [edi + 0x80]
mov dword [esp + 0x14], esi
mov dword [esp + 0x16c], eax
jmp 0x48ca7c
mov edx, dword [esp + 0x10]
nop word [eax + eax]
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x48d610
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
mov ebx, dword [esp + 0x170]
add edi, 2
push eax
push dword [esp + 0x17c]
mov edx, edi
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop dword [eax + eax]
movzx eax, word [edi + 2]
cmp word [edi + eax*2], 0x71
lea edi, [edi + eax*2]
je 0x48d670
lea edx, [edi + 4]
mov edi, dword [esp + 0x174]
mov dword [esp + 0x10], edx
jmp 0x48ca87
mov eax, dword [esp + 0x10]
add eax, 2
mov dword [esp + 0x10], eax
mov edx, eax
nop
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
je 0x48d6a0
mov eax, dword [esp + 0x17c]
add edx, 4
mov ebx, dword [esp + 0x170]
inc eax
push eax
push dword [esp + 0x17c]
mov ecx, esi
push edi
push ebx
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov edx, dword [esp + 0x10]
jmp 0x48ca87
mov ecx, dword [esp + 0x10]
add ecx, 2
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
je 0x48d6f3
lea edx, [ecx + 4]
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov eax, dword [esp + 0x10]
mov ebp, 1
add eax, 2
mov dword [esp + 0x28], ebp
mov dword [esp + 0x10], eax
movzx edx, word [eax]
mov dword [esp + 0x1c], edx
cmp edx, 0x80
je 0x48d73c
cmp edx, 0x85
jne 0x48d90d
movzx edx, word [eax + 4]
mov dword [esp + 0x2c], edx
lea eax, [edx + edx]
cmp eax, dword [edi + 0x14]
jge 0x48d903
mov ecx, dword [edi + 0xc]
xor ebp, ebp
mov ebx, dword [esp + 0x10]
sub ebx, dword [edi + 0x74]
shl eax, 2
mov dword [esp + 0x24], eax
sar ebx, 1
mov edi, dword [eax + ecx]
mov eax, dword [eax + ecx + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x174]
mov dword [esp + 0x38], edi
mov eax, dword [eax + 0x10]
sub eax, edx
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x174]
mov dword [esp + 0x20], eax
mov edi, dword [ecx + 0x94]
mov eax, dword [esp + 0x174]
mov edx, esi
sub edx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x10]
sub ecx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
sar edx, 1
cmp dword [esp + 0x1c], 0x82
mov dword [eax + ecx*4], edx
jb 0x48d7ca
mov eax, dword [esp + 0x174]
mov dword [eax + 0x9c], 2
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [ecx]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
movzx eax, byte [eax + 0x4ba9d0]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.0048c980
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffc1b
jne 0x48d846
mov ecx, dword [esp + 0x174]
mov ebp, 1
mov eax, dword [ecx + 0x90]
mov esi, dword [ecx + 0x84]
mov dword [esp + 0x170], eax
mov eax, dword [ecx + 0x74]
mov dword [esp + 0x14], esi
lea eax, [eax + ebx*2]
mov dword [esp + 0x10], eax
jmp 0x48d78e
cmp ecx, 0xfffffc20
jne 0x48d885
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], eax
jae 0x48d878
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x48d88d
cmp word [eax], 0x71
je 0x48d88d
mov eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test ecx, ecx
jne 0x48d878
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x94], edi
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
je 0x48d794
mov edi, ecx
test ebp, ebp
jne 0x48d8e4
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
mov dword [ecx + eax], edx
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x30]
mov dword [ecx + eax + 4], edx
mov ecx, dword [edi + 0x10]
sub ecx, dword [esp + 0x2c]
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], edx
mov edx, dword [esp + 0x10]
cmp dword [esp + 0x28], 0
jne 0x48cbed
test ebp, ebp
je case.0x48cabb.151
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov ecx, dword [esp + 0x174]
mov edi, eax
xor ebx, ebx
sub edi, dword [ecx + 0x74]
sar edi, 1
nop dword [eax]
cmp edx, 0x82
jb 0x48d932
mov dword [ecx + 0x9c], 2
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push ecx
mov ecx, dword [esp + 0x1c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
movzx eax, word [ecx]
movzx eax, byte [eax + 0x4ba9d0]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.0048c980
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffc1b
jne 0x48d9ac
mov ecx, dword [esp + 0x174]
mov ebx, 1
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x90]
mov esi, dword [ecx + 0x84]
mov dword [esp + 0x170], eax
mov eax, dword [ecx + 0x74]
mov dword [esp + 0x14], esi
lea eax, [eax + edi*2]
mov dword [esp + 0x10], eax
jmp 0x48d920
cmp ecx, 0xfffffc20
jne 0x48d9e2
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov edx, dword [esp + 0x174]
cmp dword [edx + 0x80], eax
jae 0x48d878
mov edx, dword [esp + 0x10]
cmp word [edx], 0x71
je 0x48d9ea
cmp word [eax], 0x71
jmp 0x48d9e4
test ecx, ecx
jne 0x48d878
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x174]
je 0x48d920
test ebx, ebx
jne 0x48da1b
test ebp, ebp
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
mov edi, ecx
add edx, 4
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edx, dword [esp + 0x10]
mov ebp, edx
movzx eax, word [edx + 2]
add eax, eax
sub ebp, eax
mov eax, 0x82
movzx ecx, word [ebp]
cmp cx, ax
jae 0x48da58
cmp ecx, 0x7b
je 0x48da58
mov dword [esp + 0x2c], 0
jmp 0x48da71
mov ebx, dword [esp + 0x178]
lea eax, [ebx + 4]
mov ebx, dword [ebx]
mov eax, dword [eax]
mov dword [esp + 0x178], ebx
mov dword [esp + 0x2c], eax
cmp ecx, 0x77
jb 0x48da7f
cmp ecx, 0x7a
jbe 0x4920a5
cmp ecx, 0x7c
je 0x4920a5
cmp ecx, 0x7f
je 0x48daab
mov eax, 0x84
cmp cx, ax
je 0x48daab
mov eax, 0x80
cmp cx, ax
je 0x48daab
mov eax, 0x85
cmp cx, ax
jne 0x48dadf
movzx ebx, word [ebp + 4]
mov eax, dword [edi + 0xa8]
lea edx, [ebx + ebx]
test eax, eax
je 0x48dac5
cmp dword [eax + 4], ebx
je 0x492066
mov dword [edi + 0x94], ebx
cmp edx, dword [edi + 0x14]
jl 0x48db4d
mov edx, dword [esp + 0x10]
mov dword [edi + 0x40], 1
mov ebx, dword [esp + 0x170]
movzx eax, word [edx]
mov ecx, eax
cmp eax, 0x72
je 0x48dafa
cmp esi, dword [esp + 0x2c]
jne 0x491d5d
add edx, 4
cmp word [ebp], 0x7b
mov dword [esp + 0x10], edx
jne 0x48ca87
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov dword [edi + 0xb8], ebp
mov eax, 0xfffffc1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [esp + 0x170]
cmp edx, ecx
jle 0x48db78
mov eax, dword [edi + 0xc]
lea edi, [eax + ecx*4]
lea ecx, [eax + edx*4]
cmp edi, ecx
jae 0x48db71
sub ecx, edi
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
sub eax, ebx
mov ebx, dword [esp + 0x170]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, esi
sub ecx, dword [edi + 0x78]
mov eax, dword [edi + 0xc]
sar ecx, 1
mov dword [eax + edx*4 + 4], ecx
cmp ebx, edx
jg 0x48dba9
lea ebx, [edx + 2]
mov dword [esp + 0x170], ebx
mov edx, dword [esp + 0x10]
jmp 0x48dae6
cmp dword [edi + 0x44], 0
je case.0x48cabb.1
cmp esi, dword [edi + 0x78]
je case.0x48cabb.151
cmp esi, dword [edi + 0x78]
jne case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp dword [edi + 0x44], 0
je 0x48dbe9
cmp esi, dword [edi + 0x78]
je case.0x48cabb.151
mov ecx, dword [edi + 0x78]
cmp esi, ecx
je 0x48dbca
cmp esi, dword [edi + 0x7c]
je case.0x48cabb.151
mov edx, dword [edi + 0x18]
test edx, edx
je 0x48dc31
cmp esi, ecx
jbe case.0x48cabb.151
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.00495680
add esp, 0xc
test eax, eax
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edi, dword [edi + 0x1c]
lea edx, [edi + edi]
lea eax, [edx + ecx]
cmp esi, eax
jb case.0x48cabb.151
mov ecx, esi
sub ecx, edx
mov edx, dword [esp + 0x174]
mov ax, word [ecx]
cmp ax, word [edx + 0x2c]
jne case.0x48cabb.151
cmp edi, 1
mov edi, edx
je 0x48dbca
mov ax, word [ecx + 2]
cmp ax, word [edi + 0x2e]
jne case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x78]
lea eax, [eax + ecx*2]
cmp esi, eax
jmp 0x48dbc4
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x16c], esi
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov ecx, dword [edi + 0x7c]
cmp esi, ecx
jae 0x48dd17
mov edx, dword [edi + 0x18]
test edx, edx
je 0x48dce4
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004955e0
add esp, 0xc
test eax, eax
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edx, dword [edi + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x48cabb.151
mov ax, word [esi]
cmp ax, word [edi + 0x2c]
jne case.0x48cabb.151
cmp edx, 1
je 0x48dbca
mov ax, word [esi + 2]
cmp ax, word [edi + 0x2e]
jmp 0x48dbc4
cmp dword [edi + 0x48], 0
jne case.0x48cabb.151
cmp dword [edi + 0x8c], 0
je 0x48dbca
cmp esi, dword [edi + 0x88]
jbe 0x48dbca
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp dword [edi + 0x48], 0
jne case.0x48cabb.151
cmp dword [edi + 0x58], 0
je case.0x48cabb.23
cmp esi, dword [edi + 0x7c]
jb case.0x48cabb.151
jmp 0x48dd21
mov edi, dword [edi + 0x7c]
cmp esi, edi
jae 0x48ddec
mov ebp, dword [esp + 0x174]
mov edx, dword [ebp + 0x18]
lea ebx, [ebp + 0x1c]
test edx, edx
je 0x48ddae
push 1
push ebx
push edi
mov ecx, esi
call fcn.004955e0
add esp, 0xc
test eax, eax
je case.0x48cabb.151
mov edx, dword [ebx]
mov edi, dword [ebp + 0x7c]
jmp 0x48dddf
mov edx, dword [ebx]
mov ecx, edi
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x48cabb.151
mov ax, word [esi]
cmp ax, word [ebp + 0x2c]
jne case.0x48cabb.151
cmp edx, 1
je 0x48dddf
mov ax, word [esi + 2]
cmp ax, word [ebp + 0x2e]
jne case.0x48cabb.151
lea eax, [edx + edx]
sub edi, eax
cmp esi, edi
jne case.0x48cabb.151
mov edi, dword [esp + 0x174]
jmp 0x48dd21
cmp esi, dword [edi + 0x78]
je 0x48deba
mov ax, word [esi - 2]
lea edx, [esi - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x48de1d
add edx, 0xfffffffe
cmp edx, dword [edi + 0x88]
jae 0x48de2b
mov dword [edi + 0x88], edx
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48de56
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [edi + 0x54], 0
je 0x48dea2
cmp ecx, 0x5f
jne 0x48de66
lea edx, [ecx - 0x5e]
jmp 0x48debc
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x48de9b
cmp eax, 3
jne 0x48deba
mov edx, 1
jmp 0x48debc
cmp ecx, 0x100
jae 0x48deba
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x48deba
mov edx, 1
jmp 0x48debc
xor edx, edx
cmp esi, dword [edi + 0x7c]
jb 0x48df0d
cmp dword [edi + 0x8c], 0
je 0x48dee6
cmp esi, dword [edi + 0x88]
jbe 0x48dee6
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
xor ecx, ecx
mov ebx, dword [esp + 0x10]
xor ecx, edx
movzx eax, word [ebx]
add ebx, 2
mov dword [esp + 0x10], ebx
cmp eax, 5
jne 0x48df00
xor ecx, 1
test ecx, ecx
jne case.0x48cabb.151
jmp 0x48ca7c
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48df38
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [edi + 0x54], 0
je 0x48df8d
cmp ecx, 0x5f
jne 0x48df4a
mov ecx, 1
jmp 0x48dee8
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x48df83
cmp eax, 3
jne 0x48dee6
mov ecx, 1
jmp 0x48dee8
cmp ecx, 0x100
jae 0x48dee6
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je 0x48dee6
mov ecx, 1
jmp 0x48dee8
mov edx, dword [edi + 0x18]
mov ecx, dword [edi + 0x7c]
test edx, edx
je 0x48dfd9
cmp esi, ecx
jae case.0x48cabb.13
push 1
lea eax, [edi + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.004955e0
add esp, 0xc
test eax, eax
jne case.0x48cabb.151
jmp case.0x48cabb.13
mov edx, dword [edi + 0x1c]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja case.0x48cabb.13
mov ax, word [esi]
cmp ax, word [edi + 0x2c]
jne case.0x48cabb.13
cmp edx, 1
je case.0x48cabb.151
mov ax, word [esi + 2]
cmp ax, word [edi + 0x2e]
je case.0x48cabb.151
mov eax, dword [edi + 0x7c]
cmp esi, eax
jae 0x4920d5
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, eax
jae 0x48dbca
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x48dbca
mov edx, dword [esp + 0x10]
add esi, 2
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
mov edx, dword [esp + 0x10]
add esi, 2
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e0b0
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x48dbca
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 4
jmp 0x48dbc4
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e109
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x48cabb.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 4
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e173
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x48dbca
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
jmp 0x48dbc4
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e1cc
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x48cabb.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 1
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e236
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x100
jae 0x48dbca
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
jmp 0x48dbc4
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e28f
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0xff
ja case.0x48cabb.151
mov eax, dword [edi + 0x3c]
test byte [ecx + eax], 0x10
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov edi, dword [edi + 0x7c]
cmp esi, edi
jae 0x492101
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e2f3
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
cmp ecx, 0xd
ja 0x48e353
je 0x48e321
cmp ecx, 0xa
je 0x48e304
lea eax, [ecx - 0xb]
jmp 0x48e361
mov edi, dword [esp + 0x174]
mov esi, edx
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov esi, edx
mov dword [esp + 0x14], esi
cmp edx, edi
jae 0x48e33c
cmp word [edx], 0xa
mov dword [esp + 0x14], esi
jne 0x48e33c
lea esi, [edx + 2]
mov dword [esp + 0x14], esi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x174]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp ecx, 0x85
je 0x48e36a
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x48cabb.151
mov edi, dword [esp + 0x174]
mov esi, edx
mov dword [esp + 0x14], esi
cmp dword [edi + 0x68], 0
jmp 0x48dbc4
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e3c1
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x48e41b
je case.0x48cabb.151
cmp ecx, 0xa0
ja 0x48e3ff
je case.0x48cabb.151
cmp ecx, 9
je case.0x48cabb.151
cmp ecx, 0x20
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp ecx, 0x1680
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp ecx, 0x205f
ja 0x48e45d
je case.0x48cabb.151
cmp ecx, 0x2000
jb 0x48dbca
cmp ecx, 0x200a
jbe case.0x48cabb.151
cmp ecx, 0x202f
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp ecx, 0x3000
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e4ba
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x180e
ja 0x48e4f2
je 0x48dbca
cmp ecx, 0xa0
ja 0x48e4e7
je 0x48dbca
cmp ecx, 9
je 0x48dbca
cmp ecx, 0x20
jmp 0x48dbc4
cmp ecx, 0x1680
jmp 0x48dbc4
cmp ecx, 0x205f
ja 0x48e523
je 0x48dbca
cmp ecx, 0x2000
jb case.0x48cabb.151
cmp ecx, 0x200a
jbe 0x48dbca
cmp ecx, 0x202f
jmp 0x48dbc4
cmp ecx, 0x3000
jmp 0x48dbc4
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e56f
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x48e59f
je case.0x48cabb.151
cmp ecx, 0xa
jb 0x48dbca
cmp ecx, 0xd
jbe case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp ecx, 0x2028
jb 0x48dbca
cmp ecx, 0x2029
jbe case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e608
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp ecx, 0x85
ja 0x48e632
je 0x48dbca
lea eax, [ecx - 0xa]
cmp eax, 3
ja case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 2
mov dword [esp + 0x10], edx
jmp 0x48ca80
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e692
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov ebx, dword [esp + 0x10]
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx ecx, word [ebx + 2]
cmp ecx, 8
ja case.default.0x48e6c1
jmp dword [ecx*4 + 0x494204]
cmp dword [esp + 0x1c], 0xf
jmp 0x48e804
mov al, byte [eax*8 + 0x4c6739]
cmp al, 9
je 0x48e7f3
cmp al, 5
je 0x48e7f3
cmp al, 8
je 0x48e7f3
xor ecx, ecx
jmp 0x48e7f8
movzx ecx, byte [eax*8 + 0x4c6739]
xor edx, edx
movzx eax, word [ebx + 4]
cmp eax, dword [ecx*4 + 0x4ba958]
setne dl
xor eax, eax
cmp dword [esp + 0x1c], 0x10
sete al
cmp edx, eax
jmp 0x48e804
movzx eax, byte [eax*8 + 0x4c6739]
mov edx, dword [esp + 0x10]
xor ecx, ecx
cmp word [edx + 4], ax
setne cl
xor eax, eax
cmp dword [esp + 0x1c], 0x10
sete al
cmp ecx, eax
je case.0x48cabb.151
add edx, 6
mov dword [esp + 0x10], edx
jmp 0x48ca80
movzx eax, byte [eax*8 + 0x4c6738]
jmp 0x48e729
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x48e7f3
cmp eax, 3
je 0x48e7f3
xor ecx, ecx
jmp 0x48e7f8
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 6
je 0x48e7f3
cmp edx, 9
je 0x48e7f3
cmp edx, 0xa
je 0x48e7f3
cmp edx, 0xc
je 0x48e7f3
cmp edx, 0xd
je 0x48e7f3
xor ecx, ecx
jmp 0x48e7f8
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 6
je 0x48e7f3
cmp edx, 9
je 0x48e7f3
cmp edx, 0xa
je 0x48e7f3
cmp edx, 0xb
jmp 0x48e7a0
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x48e7f3
cmp eax, 3
je 0x48e7f3
cmp edx, 0x5f
je 0x48e7f3
xor ecx, ecx
jmp 0x48e7f8
mov ecx, 1
xor eax, eax
cmp dword [esp + 0x1c], 0xf
sete al
cmp ecx, eax
je case.0x48cabb.151
mov edx, dword [esp + 0x10]
add edx, 6
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov ebx, dword [edi + 0x7c]
cmp esi, ebx
jae 0x4920d5
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e85d
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
je case.0x48cabb.151
cmp esi, ebx
jae 0x48dbca
mov edi, esi
nop dword [eax]
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48e8d5
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
jne 0x48e338
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x48e8a0
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x174]
add edx, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
jmp 0x48ca80
mov ebx, dword [esp + 0x10]
xor edx, edx
cmp dword [esp + 0x1c], 0x6e
sete dl
movzx eax, word [ebx + 2]
add ebx, 4
mov dword [esp + 0x24], edx
mov dword [esp + 0x10], ebx
lea ecx, [eax + eax]
mov dword [esp + 0x2c], ecx
cmp ecx, dword [esp + 0x170]
jge 0x48e96a
mov eax, dword [edi + 0xc]
mov edi, dword [eax + ecx*4]
test edi, edi
js 0x48e96a
mov ebp, dword [eax + ecx*4 + 4]
sub ebp, edi
jmp 0x48e97b
mov eax, dword [esp + 0x174]
mov ebp, dword [eax + 0x50]
neg ebp
sbb ebp, ebp
neg ebp
dec ebp
movzx edi, word [ebx]
mov ebx, edi
lea eax, [ebx - 0x62]
cmp eax, 7
ja case.default.0x48e993
movzx eax, byte [eax + 0x494230]
jmp dword [eax*4 + 0x494228]
mov eax, dword [esp + 0x28]
movsx edi, byte [ebx + 0x4ba16e]
add eax, 6
mov dword [esp + 0x10], eax
mov eax, ebx
movsx ebx, byte [ebx + 0x4ba166]
and eax, 1
mov dword [esp + 0x38], eax
test ebx, ebx
mov eax, SysReAllocString
cmove ebx, eax
jmp 0x48e9ee
xor eax, eax
cmp edi, 0x69
sete al
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x28]
movzx ebx, word [eax + 8]
movzx edi, word [eax + 6]
test ebx, ebx
cmove ebx, dword [esp + 0x44]
add eax, 0xa
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], ebx
test ebp, ebp
je 0x48ca75
jns 0x48ea04
test edi, edi
je 0x48ca75
mov ebx, 1
cmp edi, ebx
jl 0x48ea3f
nop dword [eax]
push edx
push dword [esp + 0x178]
mov edx, esi
push ebp
call fcn.0048c7d0
add esp, 0xc
test eax, eax
js 0x492134
mov ecx, dword [esp + 0x2c]
lea esi, [esi + eax*2]
mov edx, dword [esp + 0x24]
inc ebx
mov dword [esp + 0x14], esi
cmp ebx, edi
jle 0x48ea10
mov eax, dword [esp + 0x28]
cmp edi, eax
je 0x48ca75
cmp dword [esp + 0x38], 0
je 0x492153
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov ebx, dword [esp + 0x2c]
cmp edi, dword [esp + 0x28]
jge case.0x48cabb.151
push dword [esp + 0x24]
mov edx, esi
mov ecx, ebx
push dword [esp + 0x178]
push ebp
call fcn.0048c7d0
add esp, 0xc
test eax, eax
js 0x492134
mov edx, dword [esp + 0x10]
lea esi, [esi + eax*2]
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
inc edi
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x48ea95
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
push edx
push edi
push ebp
mov edx, esi
call fcn.0048c7d0
add esp, 0xc
test eax, eax
js 0x492223
lea esi, [esi + eax*2]
mov dword [esp + 0x14], esi
jmp 0x48ca7c
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 0x22]
lea ebp, [eax + 2]
add eax, 0x22
mov dword [esp + 0x40], ebp
mov ecx, edx
mov dword [esp + 0x10], eax
lea eax, [ecx - 0x62]
cmp eax, 7
ja case.default.0x48eb58
movzx eax, byte [eax + 0x494240]
jmp dword [eax*4 + 0x494238]
movsx edi, byte [ecx + 0x4ba16e]
mov ebx, ecx
movsx ecx, byte [ecx + 0x4ba166]
and ebx, 1
mov edx, dword [esp + 0x10]
test ecx, ecx
mov eax, SysReAllocString
mov dword [esp + 0x30], ebx
cmove ecx, eax
mov eax, 2
jmp 0x48ebb2
xor eax, eax
cmp edx, 0x69
mov edx, dword [esp + 0x10]
sete al
mov dword [esp + 0x30], eax
mov eax, SysReAllocString
movzx ecx, word [edx + 4]
movzx edi, word [edx + 2]
test ecx, ecx
cmove ecx, eax
mov eax, 6
add edx, eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x10], edx
cmp edi, 1
jl 0x48ec68
jmp 0x48ebdc
mov edi, 1
mov dword [esp + 0x28], 1
mov dword [esp + 0x24], edi
mov ebx, 1
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x492108
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48ec38
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add edx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp edx, 0xff
jbe 0x48ec47
cmp dword [esp + 0x1c], 0x6a
jmp 0x48ec59
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
test byte [edx + ebp], al
je case.0x48cabb.151
inc ebx
cmp ebx, edi
jle 0x48ebf0
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x28]
cmp edi, ebx
jne 0x49223e
mov edi, dword [esp + 0x174]
jmp 0x48ca80
mov edi, dword [esp + 0x10]
movzx eax, word [edi + 2]
lea ebp, [edi + 4]
movzx edx, word [edi + eax*2]
lea edi, [edi + eax*2]
mov ecx, edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x10], edi
lea eax, [ecx - 0x62]
cmp eax, 7
ja case.default.0x48ecaf
movzx eax, byte [eax + 0x494250]
jmp dword [eax*4 + 0x494248]
movsx eax, byte [ecx + 0x4ba166]
mov edx, ecx
movsx ebx, byte [ecx + 0x4ba16e]
add edi, 2
and edx, 1
mov dword [esp + 0x10], edi
mov dword [esp + 0x30], edx
mov dword [esp + 0x28], eax
test eax, eax
jne 0x48ed1e
mov dword [esp + 0x28], SysReAllocString
jmp 0x48ed1e
movzx ebx, word [edi + 2]
xor eax, eax
cmp edx, 0x69
mov ecx, SysReAllocString
sete al
mov dword [esp + 0x30], eax
movzx eax, word [edi + 4]
test eax, eax
cmove eax, ecx
add edi, 6
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edi
jmp 0x48ed1e
mov dword [esp + 0x28], 1
mov ebx, 1
mov edi, 1
cmp ebx, edi
jl 0x48ed91
nop word [eax + eax]
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x492108
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48ed78
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
push 1
mov edx, ebp
call fcn.00495760
add esp, 4
test eax, eax
je case.0x48cabb.151
inc edi
cmp edi, ebx
jle 0x48ed30
mov edi, dword [esp + 0x28]
cmp ebx, edi
je 0x48ca75
cmp dword [esp + 0x30], 0
je 0x4924b3
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp ebx, edi
jge case.0x48cabb.151
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x492108
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48ee2b
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
push 1
mov edx, ebp
call fcn.00495760
add esp, 4
test eax, eax
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x48ede3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebx, dword [esp + 0x10]
mov ecx, 0xfc00
add ebx, 2
xor edx, edx
mov ax, word [ebx]
and ax, cx
mov ecx, 0xd800
cmp ax, cx
mov ecx, dword [edi + 0x7c]
mov eax, ecx
sete dl
sub eax, esi
inc edx
sar eax, 1
cmp edx, eax
jg 0x4925f1
movzx ecx, word [ebx]
dec edx
movzx eax, word [esi]
add ebx, 2
add esi, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
cmp cx, ax
jne case.0x48cabb.151
test edx, edx
jg 0x48eeb7
jmp 0x48ca7c
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
mov ecx, dword [esp + 0x10]
add ecx, 2
movzx edi, word [ecx]
lea edx, [ecx + 2]
mov eax, edi
mov dword [esp + 0x10], edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48ef26
movzx eax, word [edx]
and edi, 0x3ff
and eax, 0x3ff
shl edi, 0xa
or edi, eax
mov ebx, 4
add edi, 0x10000
jmp 0x48ef2b
mov ebx, 2
movzx eax, word [esi]
cmp edi, 0x80
jae 0x48ef6f
mov ebx, 0xff
mov ecx, eax
cmp ax, bx
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x34]
ja 0x48ef50
movzx ecx, byte [eax + ecx]
movzx eax, byte [eax + edi]
cmp eax, ecx
jne case.0x48cabb.151
mov edi, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
jmp 0x48ca80
mov edx, eax
add esi, 2
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x48efa4
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
lea eax, [ecx + ebx]
mov ebx, dword [esp + 0x170]
mov dword [esp + 0x10], eax
cmp edi, edx
je 0x48ca62
mov eax, edi
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edi
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
mov eax, dword [eax*8 + 0x4c673c]
add eax, edi
cmp edx, eax
jne case.0x48cabb.151
jmp 0x48ca75
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
lea edi, [ecx + 4]
mov ebp, eax
jmp 0x48f0c6
mov dword [esp + 0x38], 1
mov ebx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x20], ebp
movzx eax, word [ebx + 2]
mov dword [esp + 0x1c], eax
cmp ecx, 0x28
je 0x48f028
mov dword [esp + 0x30], ebp
cmp ecx, 0x35
jne 0x48f030
mov dword [esp + 0x30], 1
lea edi, [ebx + 4]
jmp 0x48f0ce
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], SysReAllocString
jmp 0x48f0ca
mov edi, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], SysReAllocString
jmp 0x48f0ca
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add edi, 2
mov dword [esp + 0x1c], 1
jmp 0x48f0ca
mov edi, dword [esp + 0x10]
cmp edx, 0x2e
mov ecx, edx
sbb eax, eax
add edi, 2
and eax, 0xfffffff3
add eax, 0x2e
sub ecx, eax
mov eax, ecx
and ecx, 1
mov dword [esp + 0x30], ecx
mov ecx, SysReAllocString
movsx ebp, byte [eax + 0x4ba1d0]
movsx eax, byte [eax + 0x4ba1c8]
test eax, eax
cmove eax, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
movzx ebx, word [edi]
mov ecx, 1
mov eax, ebx
mov dword [esp + 0x24], edi
and eax, 0xfc00
mov dword [esp + 0x18], ecx
cmp eax, 0xd800
jne 0x48f10f
movzx eax, word [edi + 2]
and ebx, 0x3ff
and eax, 0x3ff
shl ebx, 0xa
or ebx, eax
mov ecx, 2
add ebx, 0x10000
mov dword [esp + 0x18], ecx
lea eax, [edi + ecx*2]
mov dword [esp + 0x10], eax
cmp ecx, 1
jbe 0x48f4e0
cmp edx, 0x2e
jb 0x48f15e
mov eax, ebx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, ebx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
mov ecx, dword [eax*8 + 0x4c673c]
add ecx, ebx
cmp ecx, ebx
je 0x48f15e
lea edx, [esp + 0x74]
call fcn.00495580
mov dword [esp + 0x2c], eax
jmp 0x48f166
mov dword [esp + 0x2c], 0
mov edi, dword [esp + 0x20]
mov ebp, 1
cmp edi, ebp
jl 0x48f2aa
mov eax, dword [esp + 0x174]
mov edx, dword [esp + 0x18]
mov ecx, dword [eax + 0x7c]
mov eax, ecx
lea ebx, [edx + edx]
mov dword [esp + 0x28], ecx
sub eax, ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], eax
cmp esi, eax
ja 0x48f20b
lea edi, [edx + edx]
mov ecx, esi
mov edx, dword [esp + 0x24]
sub edi, 4
jb 0x48f1c1
nop word [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x48f1ca
add ecx, 4
add edx, 4
sub edi, 4
jae 0x48f1b0
cmp edi, 0xfffffffc
je 0x48f287
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x48f207
cmp edi, 0xfffffffd
je 0x48f287
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x48f207
cmp edi, 0xfffffffe
je 0x48f287
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x48f207
cmp edi, 0xffffffff
je 0x48f287
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x48f287
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
test edx, edx
jle 0x492134
lea ebx, [edx + edx]
mov eax, ecx
sub eax, ebx
cmp esi, eax
ja 0x492134
lea edi, [edx + edx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x48f245
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x48f24a
add ecx, 4
add edx, 4
sub edi, 4
jae 0x48f234
cmp edi, 0xfffffffc
je 0x48f287
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x492134
cmp edi, 0xfffffffd
je 0x48f287
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x492134
cmp edi, 0xfffffffe
je 0x48f287
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x492134
cmp edi, 0xffffffff
je 0x48f287
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x492134
mov edi, dword [esp + 0x20]
add esi, ebx
mov eax, dword [esp + 0x48]
inc ebp
mov ebx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
cmp ebp, edi
jle 0x48f198
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x170]
cmp edi, ebp
je 0x48ca62
cmp dword [esp + 0x30], 0
jne 0x49260b
mov ebx, esi
mov dword [esp + 0x30], ebx
cmp edi, ebp
jge 0x48f3ff
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x7c]
mov ebp, eax
lea ebx, [ecx + ecx]
mov dword [esp + 0x28], eax
mov dword [esp + 0x40], ebx
sub ebp, ebx
cmp esi, ebp
ja 0x48f35c
mov edx, dword [esp + 0x24]
lea edi, [ecx + ecx]
mov ecx, esi
sub edi, 4
jb 0x48f316
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x48f31f
add ecx, 4
add edx, 4
sub edi, 4
jae 0x48f305
cmp edi, 0xfffffffc
je 0x48f3d6
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x48f358
cmp edi, 0xfffffffd
je 0x48f3d6
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x48f358
cmp edi, 0xfffffffe
je 0x48f3d6
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x48f358
cmp edi, 0xffffffff
je 0x48f3d6
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x48f3d6
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x48f4a6
lea ebx, [ecx + ecx]
sub eax, ebx
cmp esi, eax
ja 0x48f4a6
lea edi, [ecx + ecx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x48f394
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x48f399
add ecx, 4
add edx, 4
sub edi, 4
jae 0x48f383
cmp edi, 0xfffffffc
je 0x48f3d6
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x48f4a6
cmp edi, 0xfffffffd
je 0x48f3d6
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x48f4a6
cmp edi, 0xfffffffe
je 0x48f3d6
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x48f4a6
cmp edi, 0xffffffff
je 0x48f3d6
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x48f4a6
mov edi, dword [esp + 0x20]
add esi, ebx
mov ebx, dword [esp + 0x40]
inc edi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], esi
mov dword [esp + 0x20], edi
cmp edi, dword [esp + 0x1c]
jl 0x48f2f3
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x48ca7c
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp esi, ebx
je case.0x48cabb.151
mov ax, word [esi - 2]
add esi, 0xfffffffe
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x48f46c
add esi, 0xfffffffe
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x48f448
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x48f4d7
cmp esi, dword [edi + 0x7c]
jb 0x48f4d7
cmp esi, dword [edi + 0x88]
jbe 0x48f4d7
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
mov ebx, dword [esp + 0x30]
jmp 0x48f406
cmp edx, 0x2e
jb 0x48f648
cmp ebx, 0x7f
jbe 0x48f517
mov eax, ebx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, ebx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
mov edi, dword [eax*8 + 0x4c673c]
add edi, ebx
jmp 0x48f531
cmp ebx, 0xff
ja 0x48f52f
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x38]
movzx edi, byte [eax + ebx]
jmp 0x48f531
mov edi, ebx
mov ecx, 1
cmp ebp, ecx
jl 0x48f567
mov eax, dword [esp + 0x174]
mov edx, dword [eax + 0x7c]
cmp esi, edx
jae 0x492101
movzx eax, word [esi]
cmp ebx, eax
je 0x48f55b
cmp edi, eax
jne case.0x48cabb.151
add esi, 2
inc ecx
mov dword [esp + 0x14], esi
cmp ecx, ebp
jle 0x48f544
mov eax, dword [esp + 0x1c]
cmp ebp, eax
je 0x48ca75
cmp dword [esp + 0x30], 0
jne 0x4927a9
mov edx, dword [esp + 0x20]
mov ebp, esi
cmp edx, eax
jge 0x48f5b3
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x48f617
movzx eax, word [esi]
cmp ebx, eax
je 0x48f5a5
cmp edi, eax
jne 0x48f5b3
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, dword [esp + 0x1c]
jl 0x48f592
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x48ca7c
cmp esi, ebp
jb case.0x48cabb.151
nop dword [eax]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
sub esi, 2
test eax, eax
jne 0x491ef6
cmp esi, ebp
jae 0x48f5d0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x48f5ba
cmp esi, dword [edi + 0x88]
jbe 0x48f5ba
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
jmp 0x48f5ba
mov edi, dword [esp + 0x174]
mov ecx, 1
cmp ebp, ecx
jl 0x48f67f
mov edx, dword [edi + 0x7c]
nop dword [eax + eax]
cmp esi, edx
jae 0x4920d5
movzx eax, word [esi]
add esi, 2
mov dword [esp + 0x14], esi
cmp ebx, eax
jne case.0x48cabb.151
inc ecx
cmp ecx, ebp
jle 0x48f660
mov edx, dword [esp + 0x1c]
cmp ebp, edx
je 0x48ca7c
cmp dword [esp + 0x30], 0
jne 0x49284d
mov edi, esi
cmp ebp, edx
jge 0x48f6eb
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x48f6bf
movzx eax, word [esi]
cmp ebx, eax
jne 0x48f6eb
add esi, 2
inc ebp
mov dword [esp + 0x14], esi
cmp ebp, edx
jl 0x48f6a6
jmp 0x48f6eb
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x48f6eb
cmp esi, dword [eax + 0x88]
jbe 0x48f6eb
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x493a71
cmp dword [esp + 0x38], 0
jne 0x48ca75
cmp esi, edi
jb case.0x48cabb.151
nop
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
sub esi, 2
test eax, eax
jne 0x491ef6
cmp esi, edi
jae 0x48f700
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx edi, word [esi]
add esi, 2
mov ecx, dword [esp + 0x10]
mov eax, edi
and eax, 0xfc00
mov dword [esp + 0x14], esi
cmp eax, 0xd800
jne 0x48f792
movzx eax, word [esi]
and edi, 0x3ff
and eax, 0x3ff
shl edi, 0xa
add esi, 2
or edi, eax
mov dword [esp + 0x14], esi
add edi, 0x10000
movzx edx, word [ecx + 2]
lea eax, [ecx + 4]
mov dword [esp + 0x10], eax
cmp ebx, 0x20
jne 0x48f7f9
cmp edx, 0x7f
jbe 0x48f7d0
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
mov eax, dword [eax*8 + 0x4c673c]
add eax, edx
jmp 0x48f7ea
cmp edx, 0xff
ja 0x48f7e8
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x38]
movzx eax, byte [eax + edx]
jmp 0x48f7ea
mov eax, edx
cmp edx, edi
je case.0x48cabb.151
cmp eax, edi
jmp 0x48ca6f
mov dword [esp + 0x10], eax
cmp edx, edi
jmp 0x48ca6f
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
add ecx, 4
mov dword [esp + 0x1c], eax
mov ebp, eax
jmp 0x48f8e3
mov edx, dword [esp + 0x10]
xor ebp, ebp
movzx eax, word [edx + 2]
mov dword [esp + 0x1c], eax
cmp ecx, 0x42
je 0x48f836
mov dword [esp + 0x30], ebp
cmp ecx, 0x4f
jne 0x48f83e
mov dword [esp + 0x30], 1
lea ecx, [edx + 4]
jmp 0x48f8e3
mov ecx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add ecx, 2
jmp 0x48f8db
mov ecx, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add ecx, 2
jmp 0x48f8db
mov ecx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add ecx, 2
mov dword [esp + 0x1c], 1
jmp 0x48f8e3
mov ecx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
movzx eax, word [ecx + 2]
add ecx, 4
mov dword [esp + 0x1c], eax
jmp 0x48f8e3
mov ecx, dword [esp + 0x10]
cmp edx, 0x48
sbb eax, eax
add ecx, 2
and eax, 0xfffffff3
add eax, 0x48
sub edx, eax
mov eax, edx
and edx, 1
mov dword [esp + 0x30], edx
movsx ebp, byte [eax + 0x4ba1d0]
movsx eax, byte [eax + 0x4ba1c8]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x48f8e3
mov dword [esp + 0x1c], SysReAllocString
movzx edi, word [ecx]
lea edx, [ecx + 2]
mov dword [esp + 0x24], edi
mov dword [esp + 0x10], edx
cmp ebx, 0x48
jb 0x48fb10
cmp edi, 0x7f
jbe 0x48f92f
mov eax, edi
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edi
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
mov ecx, dword [esp + 0x174]
mov ebx, dword [eax*8 + 0x4c673c]
add ebx, edi
jmp 0x48f93d
mov ecx, dword [esp + 0x174]
mov eax, dword [ecx + 0x38]
movzx ebx, byte [eax + edi]
mov dword [esp + 0x2c], ebx
cmp ebp, 1
jl 0x48f9af
mov edi, dword [ecx + 0x7c]
mov edx, 1
nop
cmp esi, edi
jae 0x4928e0
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48f990
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x24], ecx
je case.0x48cabb.151
cmp ebx, ecx
je case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x48f950
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
cmp ebp, eax
je 0x48ec74
cmp dword [esp + 0x30], 0
jne 0x492913
mov ebx, esi
cmp ebp, eax
jge 0x48fa2d
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x48fad5
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48fa13
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp dword [esp + 0x24], ecx
je 0x48fa2d
cmp dword [esp + 0x2c], ecx
je 0x48fa2d
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x1c]
jl 0x48f9d6
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x48ca7c
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov eax, esi
add esi, 0xfffffffe
cmp eax, ebx
je case.0x48cabb.151
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x48fa9b
add esi, 0xfffffffe
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x48fa76
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x48fa34
cmp esi, dword [edi + 0x88]
jbe 0x48fa34
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
jmp 0x48fa34
mov ebx, dword [esp + 0x174]
mov edx, 1
cmp ebp, edx
jl 0x48fb76
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48fb63
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x24], ecx
je case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x48fb23
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
cmp ebp, eax
je 0x48ec74
cmp dword [esp + 0x30], 0
jne 0x492a17
mov ebx, esi
cmp ebp, eax
jge 0x48fbf2
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x48fc9f
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48fbde
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp dword [esp + 0x24], ecx
je 0x48fbf2
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x1c]
jl 0x48fba1
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x48ca7c
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop dword [eax + eax]
mov eax, esi
add esi, 0xfffffffe
cmp eax, ebx
je case.0x48cabb.151
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x48fc65
add esi, 0xfffffffe
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x48fc40
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x48fbf9
cmp esi, dword [edi + 0x88]
jbe 0x48fbf9
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
jmp 0x48fbf9
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], 1
movzx eax, word [ecx + 2]
mov ebp, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebp
lea eax, [ecx + 4]
jmp 0x48fdcd
mov edx, dword [esp + 0x10]
xor ebx, ebx
xor ebp, ebp
cmp ecx, 0x5c
mov dword [esp + 0x24], ebp
sete bl
movzx eax, word [edx + 2]
mov dword [esp + 0x20], eax
lea eax, [edx + 4]
mov dword [esp + 0x30], ebx
jmp 0x48fdcd
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
jmp 0x48fdc5
mov eax, dword [esp + 0x10]
mov ebp, 1
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
jmp 0x48fdc5
mov eax, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
add eax, 2
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], 1
jmp 0x48fdcd
mov ecx, dword [esp + 0x10]
xor ebp, ebp
mov dword [esp + 0x38], 1
mov dword [esp + 0x24], ebp
movzx eax, word [ecx + 2]
mov dword [esp + 0x20], eax
lea eax, [ecx + 4]
jmp 0x48fdcd
mov eax, dword [esp + 0x10]
lea ecx, [edx - 1]
movsx ebp, byte [edx + 0x4ba17b]
and ecx, 1
mov dword [esp + 0x30], ecx
add eax, 2
movsx ecx, byte [edx + 0x4ba173]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ecx
test ecx, ecx
jne 0x48fdcd
mov dword [esp + 0x20], SysReAllocString
movzx edi, word [eax]
lea edx, [eax + 2]
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], edx
cmp edi, 0x10
je 0x48fdf2
cmp edi, 0xf
je 0x48fdf2
mov ebx, dword [esp + 0x34]
or eax, 0xffffffff
mov dword [esp + 0x2c], eax
jmp 0x48fe18
movzx ecx, word [edx]
lea eax, [edx + 2]
movzx edx, word [eax]
xor ebx, ebx
cmp edi, 0xf
mov dword [esp + 0x3c], edx
mov dword [esp + 0x2c], ecx
sete bl
add eax, 2
mov dword [esp + 0x10], eax
mov eax, ecx
mov dword [esp + 0x34], ebx
test ebp, ebp
jle 0x490250
test eax, eax
js 0x4903ee
cmp eax, 8
ja case.default.0x48e6c1
jmp dword [eax*4 + 0x494258]
test ebx, ebx
jne case.0x48cabb.151
lea edx, [ebx + 1]
mov ebx, dword [esp + 0x174]
mov edi, dword [ebx + 0x7c]
nop dword [eax]
mov ecx, esi
cmp esi, edi
jae 0x493a44
movzx eax, word [esi]
add esi, 2
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48fe6f
lea esi, [ecx + 4]
inc edx
cmp edx, ebp
jle 0x48fe50
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48fec8
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
mov al, byte [eax*8 + 0x4c6739]
cmp al, 9
je 0x48fefb
cmp al, 5
je 0x48fefb
cmp al, 8
je 0x48fefb
xor eax, eax
jmp 0x48ff00
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x48fe90
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
nop dword [eax + eax]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x48ff68
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov ebx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], ebx
mov ebx, dword [esp + 0x174]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x48ff30
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49000a
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
mov ebx, dword [esp + 0x174]
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x48ffd2
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4900a8
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
mov ebx, dword [esp + 0x174]
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6738]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x490070
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49013f
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x490178
cmp eax, 3
je 0x490178
xor eax, eax
jmp 0x49017d
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x490107
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov eax, dword [esp + 0x174]
mov edi, 1
mov ebx, dword [eax + 0x7c]
nop dword [eax]
cmp esi, ebx
jae 0x492101
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4901e8
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 6
je 0x490230
cmp edx, 9
je 0x490230
cmp edx, 0xa
je 0x490230
cmp edx, 0xc
je 0x490230
cmp edx, 0xd
je 0x490230
xor eax, eax
jmp 0x490235
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
inc edi
cmp edi, ebp
jle 0x4901b0
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x174]
mov edx, dword [esp + 0x20]
cmp ebp, edx
je 0x48ca75
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0x2c]
jne 0x492c9f
mov ebx, esi
mov dword [esp + 0x1c], ebx
test eax, eax
js 0x491246
cmp eax, 8
ja case.default.0x48e6c1
jmp dword [eax*4 + 0x49427c]
mov eax, dword [esp + 0x174]
mov edi, 1
mov ebx, dword [eax + 0x7c]
nop
cmp esi, ebx
jae 0x492101
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4902d8
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 6
je 0x490325
cmp edx, 9
je 0x490325
cmp edx, 0xa
je 0x490325
cmp edx, 0xb
je 0x490325
cmp edx, 0xc
je 0x490325
cmp edx, 0xd
je 0x490325
xor eax, eax
jmp 0x49032a
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
inc edi
cmp edi, ebp
jle 0x4902a0
jmp 0x490248
mov eax, dword [esp + 0x174]
mov edi, 1
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x492101
movzx edx, word [esi]
add esi, 2
mov eax, edx
mov dword [esp + 0x14], esi
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490391
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
add esi, 2
or edx, eax
mov dword [esp + 0x14], esi
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x4903d1
cmp eax, 3
je 0x4903d1
cmp edx, 0x5f
je 0x4903d1
xor eax, eax
jmp 0x4903d6
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
inc edi
cmp edi, ebp
jle 0x490351
jmp 0x49024c
cmp edi, 0x16
jne 0x49050f
mov ebx, dword [esp + 0x174]
lea ebp, [edi - 0x15]
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
mov esi, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49043c
movzx eax, word [edx]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
je case.0x48cabb.151
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x4904f3
mov ebx, esi
nop dword [eax + eax]
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4904b5
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
jne 0x4904ec
lea esi, [ebx + edx*2]
mov ebx, esi
cmp esi, edi
jb 0x490480
mov ebx, dword [esp + 0x174]
inc ebp
cmp ebp, dword [esp + 0x24]
jle 0x490401
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x48e6c1
jmp dword [eax*4 + 0x4942a0]
mov ebx, dword [esp + 0x174]
mov edi, 1
mov ecx, dword [ebx + 0x7c]
cmp esi, ecx
jae 0x493a44
mov edx, dword [ebx + 0x18]
lea eax, [ebx + 0x1c]
test edx, edx
je 0x49055b
push 1
push eax
push ecx
mov ecx, esi
call fcn.004955e0
add esp, 0xc
test eax, eax
jne case.0x48cabb.151
jmp 0x490586
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x490586
mov ax, word [esi]
cmp ax, word [ebx + 0x2c]
jne 0x490586
cmp edx, 1
je case.0x48cabb.151
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x2e]
je case.0x48cabb.151
mov ecx, dword [ebx + 0x7c]
add esi, 2
cmp esi, ecx
jae 0x4905a8
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x4905a8
add esi, 2
inc edi
cmp edi, ebp
jle 0x490531
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov ecx, 1
mov edx, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edx
jae 0x493a44
add esi, 2
cmp esi, edx
jae 0x4905f1
mov ax, word [esi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x68]
jne 0x4905f1
add esi, 2
inc ecx
cmp ecx, ebp
jle 0x4905d0
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
lea ecx, [ebp*2]
mov eax, dword [ebx + 0x7c]
sub eax, ecx
cmp esi, eax
ja case.0x48cabb.151
add esi, ecx
mov dword [esp + 0x14], esi
jmp 0x490257
mov eax, dword [esp + 0x174]
mov edi, 1
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x492108
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49066c
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
cmp ecx, 0xd
ja 0x4906a8
je 0x490690
cmp ecx, 0xa
je 0x49067d
lea eax, [ecx - 0xb]
jmp 0x4906b6
mov esi, edx
mov eax, dword [esp + 0x174]
inc edi
cmp edi, ebp
jle 0x490634
jmp 0x490248
mov esi, edx
cmp edx, ebx
jae 0x49067f
cmp word [edx], 0xa
mov eax, dword [esp + 0x174]
jne 0x490686
lea esi, [edx + 2]
jmp 0x490686
cmp ecx, 0x85
je 0x4906bf
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x48cabb.151
mov eax, dword [esp + 0x174]
mov esi, edx
cmp dword [eax + 0x68], 0
jne case.0x48cabb.151
jmp 0x490686
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49071b
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp ecx, 0x180e
ja 0x49074d
je case.0x48cabb.151
cmp ecx, 0xa0
ja 0x490745
je case.0x48cabb.151
cmp ecx, 9
je case.0x48cabb.151
cmp ecx, 0x20
jmp 0x49077d
cmp ecx, 0x1680
jmp 0x49077d
cmp ecx, 0x205f
ja 0x490777
je case.0x48cabb.151
cmp ecx, 0x2000
jb 0x490783
cmp ecx, 0x200a
jbe case.0x48cabb.151
cmp ecx, 0x202f
jmp 0x49077d
cmp ecx, 0x3000
je case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x4906e3
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4907e0
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp ecx, 0x180e
ja 0x490806
je 0x490838
cmp ecx, 0xa0
ja 0x4907fe
je 0x490838
cmp ecx, 9
je 0x490838
cmp ecx, 0x20
jmp 0x490832
cmp ecx, 0x1680
jmp 0x490832
cmp ecx, 0x205f
ja 0x49082c
je 0x490838
cmp ecx, 0x2000
jb case.0x48cabb.151
cmp ecx, 0x200a
jbe 0x490838
cmp ecx, 0x202f
jmp 0x490832
cmp ecx, 0x3000
jne case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x4907a8
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490898
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp ecx, 0x85
ja 0x4908b0
je case.0x48cabb.151
cmp ecx, 0xa
jb 0x4908c4
cmp ecx, 0xd
jmp 0x4908be
cmp ecx, 0x2028
jb 0x4908c4
cmp ecx, 0x2029
jbe case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x490860
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49091d
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp ecx, 0x85
ja 0x49092f
je 0x49093e
lea eax, [ecx - 0xa]
cmp eax, 3
jmp 0x490938
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x4908e5
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
nop
cmp esi, edi
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490998
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp ecx, 0x80
jae 0x4909ad
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
jne case.0x48cabb.151
inc edx
cmp edx, ebp
jle 0x490960
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
nop
cmp esi, edi
jae 0x493a44
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x48cabb.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
je case.0x48cabb.151
inc edx
add esi, 2
cmp edx, ebp
jle 0x4909d0
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x493a44
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae 0x490a44
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
jne case.0x48cabb.151
add esi, 2
cmp esi, edi
jae 0x490a63
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x490a63
add esi, 2
inc edx
cmp edx, ebp
jle 0x490a20
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x48cabb.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
je case.0x48cabb.151
inc edx
add esi, 2
cmp edx, ebp
jle 0x490a84
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae 0x490af4
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x48cabb.151
add esi, 2
cmp esi, edi
jae 0x490b13
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x490b13
add esi, 2
inc edx
cmp edx, ebp
jle 0x490ad0
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], esi
jmp 0x490257
mov ebx, dword [esp + 0x174]
mov edx, 1
mov edi, dword [ebx + 0x7c]
cmp esi, edi
jae 0x493a44
movzx eax, word [esi]
mov ecx, 0x80
cmp ax, cx
jae case.0x48cabb.151
mov ecx, eax
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
je case.0x48cabb.151
add esi, 2
inc edx
mov dword [esp + 0x14], esi
cmp edx, ebp
jle 0x490b34
mov edi, dword [esp + 0x18]
jmp 0x490257
mov edi, dword [esp + 0x174]
cmp ebp, edx
jge 0x4911a5
mov edx, dword [edi + 0x7c]
cmp esi, edx
jae 0x490c73
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
cmp dword [esp + 0x34], 0
movzx ecx, ax
jne 0x4911a5
xor eax, eax
cmp cx, word [esp + 0x4c]
sete al
inc ebp
lea esi, [esi + eax*2]
add esi, 2
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x490b83
jmp 0x4911a5
cmp ebp, edx
jge 0x49119e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x490c6c
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490c13
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
mov al, byte [eax*8 + 0x4c6739]
cmp al, 9
je 0x490c46
cmp al, 5
je 0x490c46
cmp al, 8
je 0x490c46
xor eax, eax
jmp 0x490c4b
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x49119e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x490bd6
jmp 0x49119e
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4911a5
cmp esi, dword [edi + 0x88]
jbe 0x4911a5
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
jmp 0x4911a5
cmp ebp, edx
jge 0x49119e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x490c6c
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490cf0
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov ebx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], ebx
mov ebx, dword [esp + 0x1c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x49119e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x490cb7
jmp 0x49119e
cmp ebp, edx
jge 0x49119e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax + eax]
cmp esi, edi
jae 0x490c6c
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490d9d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x49119e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x490d60
jmp 0x49119e
cmp ebp, edx
jge 0x49119e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x490c6c
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490e3d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6738]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je 0x49119e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x490e00
jmp 0x49119e
cmp ebp, edx
jge 0x49119e
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax]
cmp esi, edi
jae 0x490c6c
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490edd
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x490f16
cmp eax, 3
je 0x490f16
xor eax, eax
jmp 0x490f1b
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x49119e
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x490ea0
jmp 0x49119e
cmp ebp, edx
jge 0x49119e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
nop
mov edi, 1
cmp esi, ebx
jae 0x490ffb
movzx edx, word [esi]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x490f8d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 6
je 0x490fd5
cmp edx, 9
je 0x490fd5
cmp edx, 0xa
je 0x490fd5
cmp edx, 0xc
je 0x490fd5
cmp edx, 0xd
je 0x490fd5
xor eax, eax
jmp 0x490fda
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x49119a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x490f50
jmp 0x49119a
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x491027
cmp esi, dword [edi + 0x88]
jbe 0x491027
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
mov ebx, dword [esp + 0x1c]
jmp 0x4911a5
cmp ebp, edx
jge 0x49119e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
mov edi, 1
cmp esi, ebx
jae 0x490ffb
movzx edx, word [esi]
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49107b
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 6
je 0x4910c8
cmp edx, 9
je 0x4910c8
cmp edx, 0xa
je 0x4910c8
cmp edx, 0xb
je 0x4910c8
cmp edx, 0xc
je 0x4910c8
cmp edx, 0xd
je 0x4910c8
xor eax, eax
jmp 0x4910cd
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x49119a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491042
jmp 0x49119a
cmp ebp, edx
jge 0x49119e
mov eax, dword [esp + 0x174]
mov ebx, dword [eax + 0x7c]
cmp esi, ebx
jae 0x490ffb
movzx edx, word [esi]
mov edi, 1
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49113d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x49117d
cmp eax, 3
je 0x49117d
cmp edx, 0x5f
je 0x49117d
xor eax, eax
jmp 0x491182
mov eax, 1
cmp eax, dword [esp + 0x34]
je 0x49119a
inc ebp
lea esi, [esi + edi*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491100
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
jne 0x48ca7c
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov eax, esi
add esi, 0xfffffffe
cmp eax, ebx
je case.0x48cabb.151
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x49120c
add esi, 0xfffffffe
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x4911e7
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp edi, 0x16
jne 0x4913b4
cmp ebp, edx
jge 0x491399
mov ebx, dword [esp + 0x174]
mov ebp, dword [ebx + 0x7c]
cmp esi, ebp
jae 0x491370
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49129e
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
je 0x491395
mov ebx, dword [ebx + 0x7c]
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp esi, ebx
jae 0x491354
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x491319
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
jne 0x491350
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x4912e4
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x174]
inc eax
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x20]
jl 0x491261
jmp 0x491395
cmp dword [ebx + 0x8c], 0
je 0x491395
cmp esi, dword [ebx + 0x88]
jbe 0x491395
mov dword [ebx + 0x64], 1
cmp dword [ebx + 0x8c], 1
jg 0x493a71
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
je 0x492ad8
mov edi, dword [esp + 0x174]
jmp 0x48ca80
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x48e6c1
jmp dword [eax*4 + 0x4942e0]
cmp edx, 0x7fffffff
jge 0x4914bb
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x491489
mov edx, dword [eax + 0x18]
add eax, 0x1c
test edx, edx
je 0x49140f
push 1
push eax
push ecx
mov ecx, esi
call fcn.004955e0
add esp, 0xc
test eax, eax
jne 0x4917cc
jmp 0x491441
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x491441
mov ecx, dword [esp + 0x174]
mov ax, word [esi]
cmp ax, word [ecx + 0x2c]
jne 0x491441
cmp edx, 1
je 0x4917cc
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x2e]
je 0x4917cc
mov eax, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x491479
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [esp + 0x174]
jne 0x491479
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x4913e5
jmp 0x4917cc
cmp dword [eax + 0x8c], 0
je 0x4917cc
cmp esi, dword [eax + 0x88]
jbe 0x4917cc
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x493a71
jmp 0x4917cc
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x491489
mov edx, dword [eax + 0x18]
add eax, 0x1c
test edx, edx
je 0x4914eb
push 1
push eax
push ecx
mov ecx, esi
call fcn.004955e0
add esp, 0xc
test eax, eax
jne 0x4917cc
jmp 0x49151d
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x49151d
mov ecx, dword [esp + 0x174]
mov ax, word [esi]
cmp ax, word [ecx + 0x2c]
jne 0x49151d
cmp edx, 1
je 0x4917cc
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x2e]
je 0x4917cc
mov eax, dword [esp + 0x174]
add esi, 2
mov dword [esp + 0x14], esi
mov ecx, dword [eax + 0x7c]
cmp esi, ecx
jae 0x491555
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
mov eax, dword [esp + 0x174]
jne 0x491555
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x4914c5
jmp 0x4917cc
cmp edx, 0x7fffffff
jge 0x4915b3
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x7c]
nop
cmp esi, ecx
jae 0x4916f4
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, ecx
jae 0x4915a9
mov ax, word [esi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x68]
jne 0x4915a9
add esi, 2
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, edx
jl 0x491580
jmp 0x4917cc
mov eax, dword [esp + 0x174]
mov esi, dword [eax + 0x7c]
mov dword [esp + 0x14], esi
cmp dword [eax + 0x8c], 0
je 0x4915e6
cmp esi, dword [eax + 0x88]
jbe 0x4915e6
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x493a71
mov ebp, eax
jmp 0x4917d3
sub edx, ebp
mov ebp, dword [esp + 0x174]
mov ecx, dword [ebp + 0x7c]
mov eax, ecx
sub eax, esi
sar eax, 1
cmp edx, eax
jbe 0x49161c
mov eax, ebp
mov esi, ecx
mov dword [esp + 0x14], esi
cmp dword [eax + 0x8c], 0
je 0x4915e6
cmp ecx, dword [eax + 0x88]
jmp 0x4915d0
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
jmp 0x4917d3
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edx, dword [eax + 0x7c]
nop word [eax + eax]
cmp esi, edx
jae 0x4916f4
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49167a
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov eax, 4
add ecx, 0x10000
jmp 0x49167f
mov eax, 2
cmp ecx, 0xd
jne 0x49169e
add esi, 2
mov dword [esp + 0x14], esi
cmp esi, edx
jae 0x4917cc
cmp word [esi], 0xa
jne 0x4916e4
add esi, 2
jmp 0x4916e0
cmp ecx, 0xa
je 0x4916de
mov ebx, dword [esp + 0x174]
cmp dword [ebx + 0x68], 0
mov ebx, dword [esp + 0x1c]
jne 0x4917cc
cmp ecx, 0xb
je 0x4916de
cmp ecx, 0xc
je 0x4916de
cmp ecx, 0x85
je 0x4916de
cmp ecx, 0x2028
je 0x4916de
cmp ecx, 0x2029
jne 0x4917cc
add esi, eax
mov dword [esp + 0x14], esi
inc ebp
cmp ebp, dword [esp + 0x20]
jl 0x491640
jmp 0x4917cc
mov eax, dword [esp + 0x174]
jmp 0x4915c1
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
mov edx, 1
cmp esi, edi
jae 0x4917ee
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49174f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x180e
ja 0x491775
je 0x4917a3
cmp ecx, 0xa0
ja 0x49176d
je 0x4917a3
cmp ecx, 9
je 0x4917a3
cmp ecx, 0x20
jmp 0x49179d
cmp ecx, 0x1680
jmp 0x49179d
cmp ecx, 0x205f
ja 0x491797
je 0x4917a3
cmp ecx, 0x2000
jb 0x49179f
cmp ecx, 0x200a
jbe 0x4917a3
cmp ecx, 0x202f
jmp 0x49179d
cmp ecx, 0x3000
je 0x4917a3
xor ecx, ecx
jmp 0x4917a8
mov ecx, 1
xor eax, eax
cmp dword [esp + 0x18], 0x12
sete al
cmp ecx, eax
je 0x4917c8
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491712
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x174]
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
je 0x492bf3
mov edi, dword [esp + 0x174]
jmp 0x48ca80
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x491815
cmp esi, dword [eax + 0x88]
jbe 0x491815
mov dword [eax + 0x64], edx
cmp dword [eax + 0x8c], edx
jg 0x493a71
mov edi, dword [esp + 0x18]
mov ebp, eax
jmp 0x4917d3
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax + eax]
cmp esi, edi
jae 0x4918ba
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49186d
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x85
ja 0x4918a8
je 0x4918b3
cmp ecx, 0xa
jb 0x491881
cmp ecx, 0xd
jbe 0x4918b3
xor ecx, ecx
xor eax, eax
cmp dword [esp + 0x18], 0x14
sete al
cmp ecx, eax
je 0x4917c8
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491830
jmp 0x4917c8
lea eax, [ecx - 0x2028]
cmp eax, 1
ja 0x491881
mov ecx, 1
jmp 0x491883
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x491815
cmp esi, dword [eax + 0x88]
jbe 0x491815
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x493a71
mov edi, dword [esp + 0x18]
mov ebp, eax
jmp 0x4917d3
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop dword [eax + eax]
cmp esi, edi
jae 0x4918ba
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x491949
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x491965
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 4
jne 0x4917c8
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491910
jmp 0x4917c8
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
nop word [eax + eax]
cmp esi, edi
jae 0x4918ba
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4919cd
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4917c8
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 4
je 0x4917c8
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491990
jmp 0x4917c8
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4918ba
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x491a4f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x491a6b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 1
jne 0x4917c8
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491a12
jmp 0x4917c8
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4918ba
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x491acd
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4917c8
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 1
je 0x4917c8
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491a90
jmp 0x4917c8
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x4918ba
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x491b4f
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x491b6b
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 0x10
jne 0x4917c8
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491b12
jmp 0x4917c8
cmp ebp, edx
jge 0x4917cc
mov eax, dword [esp + 0x174]
mov edi, dword [eax + 0x7c]
cmp esi, edi
jae 0x491bfc
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x491bc9
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
cmp ecx, 0x100
jae 0x4917c8
mov eax, dword [esp + 0x174]
mov eax, dword [eax + 0x3c]
test byte [ecx + eax], 0x10
je 0x4917c8
inc ebp
lea esi, [esi + edx*2]
mov dword [esp + 0x14], esi
cmp ebp, dword [esp + 0x20]
jl 0x491b90
jmp 0x4917c8
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x491815
cmp esi, dword [eax + 0x88]
jbe 0x491815
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jle 0x491815
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp ecx, 0x74
mov ecx, esi
jne 0x491c80
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov edx, ebp
jmp 0x491edf
mov dword [edi + 0x9c], 2
mov edx, ebp
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov edx, dword [esp + 0x10]
add edx, 4
jmp 0x491edf
mov edi, dword [esp + 0x174]
mov eax, dword [edi + 0x90]
cmp eax, ebp
cmovle eax, ebp
mov dword [esp + 0x170], eax
movzx eax, word [ebx + 6]
add eax, 2
lea eax, [ebx + eax*2]
mov ecx, eax
cmp word [ecx], 0x71
jne 0x491d0a
movzx eax, word [ecx + 2]
lea eax, [ecx + eax*2]
mov ecx, eax
cmp word [ecx], 0x71
je 0x491cf2
jmp 0x491d0a
mov edi, dword [esp + 0x174]
cmp dword [esp + 0x1c], 0x86
lea edx, [eax + 4]
mov dword [esp + 0x10], edx
jne 0x491ee3
mov dword [edi + 0x9c], 2
mov ecx, esi
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp ecx, 0x75
je 0x492089
cmp ecx, 0x74
jne 0x491df2
mov eax, dword [esp + 0x17c]
add edx, 4
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
movzx eax, word [ebp]
mov edx, ebp
cmp eax, 0x7b
je 0x491e59
mov ecx, 0x82
cmp ax, cx
jb 0x491edf
mov dword [edi + 0x9c], 2
mov ecx, esi
mov eax, dword [esp + 0x17c]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0x82
cmp word [ebp], ax
jb 0x491e07
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov edx, ebp
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
cmp eax, 0xfffffc1c
jne 0x491e3b
cmp dword [edi + 0xb8], ebp
jmp 0x491e3d
test eax, eax
jne 0x491ef6
mov edx, dword [esp + 0x10]
add edx, 4
cmp word [ebp], 0x7b
mov dword [esp + 0x10], edx
jne 0x491ee3
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push edi
push ebx
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x48db37
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 4]
mov dword [esp + 0x48], edx
lea ebp, [edx + edx]
cmp ebp, dword [edi + 0x14]
jl 0x493a81
mov edx, dword [esp + 0x1c]
nop dword [eax + eax]
cmp edx, 0x82
jae 0x491f01
cmp edx, 0x7b
je 0x491f01
cmp dword [edi + 0x6c], 0
mov edx, dword [esp + 0x10]
jne 0x491f0f
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x71
je 0x491f0f
movzx eax, word [edx]
movzx eax, byte [eax + 0x4ba9d0]
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jb 0x48ca20
inc eax
mov dword [edi], eax
mov eax, 0xfffffff8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov dword [edi + 0x9c], 2
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x174]
inc eax
mov edi, dword [edi + 0xb0]
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx eax, byte [eax + 0x4ba9d0]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [edx + eax*2]
call fcn.0048c980
mov edx, eax
add esp, 0x14
cmp edx, 0xfffffc20
jne 0x491f8c
mov ebp, dword [esp + 0x10]
movzx ecx, word [ebp + 2]
lea eax, [ecx*2]
add eax, ebp
cmp dword [ebx + 0x80], eax
jae 0x493c22
cmp word [ebp], 0x71
je 0x491f98
cmp word [eax], 0x71
jne 0x493c22
jmp 0x491f98
test edx, edx
jne 0x493be0
mov ebp, dword [esp + 0x10]
movzx eax, word [ebp + 2]
lea ebp, [ebp + eax*2]
mov dword [ebx + 0xb0], edi
cmp word [ebp], 0x71
mov dword [esp + 0x10], ebp
jne case.0x48cabb.151
mov edi, ebx
jmp 0x491ea7
mov eax, dword [esp + 0x17c]
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, word [ebx + 2]
add ecx, eax
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ebx + ecx*2]
mov ecx, esi
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492008
cmp eax, 0xfffffc1d
je 0x492008
cmp eax, 0xfffffc20
jne 0x491ef6
lea eax, [ebx + 4]
mov dword [edi + 0x80], eax
mov eax, 0xfffffc1f
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xffffffe6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xf0]
cmp eax, ecx
je 0x492049
push eax
call fcn.0049b8d4
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffffa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x16c]
mov dword [edi + 0x84], esi
mov dword [edi + 0x80], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov dword [edi + 0x84], esi
mov eax, 0xfffffc1b
mov dword [edi + 0x90], ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x170]
mov dword [edi + 0x84], esi
mov dword [edi + 0x90], eax
mov eax, dword [esp + 0x16c]
mov dword [edi + 0x80], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je case.0x48cabb.151
cmp esi, dword [edi + 0x88]
jbe case.0x48cabb.151
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jmp 0x493a6b
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x48cabb.151
cmp esi, dword [eax + 0x88]
jbe case.0x48cabb.151
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jmp 0x493a6b
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x48cabb.151
cmp esi, dword [eax + 0x7c]
jb case.0x48cabb.151
jmp 0x492115
mov ebx, esi
cmp edi, eax
jge 0x4921d0
nop dword [eax]
push edx
push dword [esp + 0x178]
mov edx, esi
push ebp
call fcn.0048c7d0
add esp, 0xc
test eax, eax
js 0x49218b
mov ecx, dword [esp + 0x2c]
lea esi, [esi + eax*2]
mov edx, dword [esp + 0x24]
inc edi
cmp edi, dword [esp + 0x28]
jl 0x492160
jmp 0x4921bc
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je 0x4921bc
cmp esi, dword [eax + 0x7c]
jb 0x4921bc
cmp esi, dword [eax + 0x88]
jbe 0x4921bc
mov dword [eax + 0x64], 1
cmp dword [eax + 0x8c], 1
jg 0x493a71
cmp esi, ebx
jb case.0x48cabb.151
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov eax, ebp
neg eax
lea esi, [esi + eax*2]
cmp esi, ebx
jae 0x4921d0
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je case.0x48cabb.151
cmp esi, dword [edi + 0x7c]
jb case.0x48cabb.151
jmp 0x4920e2
cmp dword [esp + 0x30], 0
je 0x492336
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp edi, ebx
jge case.0x48cabb.151
mov eax, dword [esp + 0x174]
cmp esi, dword [eax + 0x7c]
jae 0x492108
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4922c8
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add edx, 0x10000
add esi, 2
cmp edx, 0xff
jbe 0x4922d7
cmp dword [esp + 0x1c], 0x6a
jmp 0x4922e9
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
test byte [edx + ebp], al
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492280
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, esi
cmp edi, ebx
jge 0x4923a4
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x28]
mov ebx, dword [eax + 0x7c]
nop word [eax + eax]
cmp esi, ebx
jae 0x49247a
movzx edx, word [esi]
mov edi, 1
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49238d
movzx eax, word [esi + 2]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
mov edi, 2
add edx, 0x10000
cmp edx, 0xff
jbe 0x492441
cmp dword [esp + 0x1c], 0x6a
jne 0x492461
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov eax, esi
add esi, 0xfffffffe
cmp eax, ebp
je case.0x48cabb.151
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x492407
add esi, 0xfffffffe
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x4923e2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, edx
mov eax, 1
and ecx, 7
shr edx, 3
shl eax, cl
mov ecx, dword [esp + 0x40]
test byte [edx + ecx], al
je 0x4923a4
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
lea esi, [esi + edi*2]
inc eax
mov dword [esp + 0x24], eax
cmp eax, ecx
jl 0x492350
jmp 0x4923a4
mov edi, dword [esp + 0x174]
cmp dword [edi + 0x8c], 0
je 0x4923ab
cmp esi, dword [edi + 0x88]
jbe 0x4923ab
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
jmp 0x4923ab
mov ebp, esi
cmp ebx, edi
jge 0x492521
nop dword [eax]
mov edi, dword [esp + 0x174]
cmp esi, dword [edi + 0x7c]
jae 0x4925bf
movzx ecx, word [esi]
mov edi, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x492505
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edi, 2
add ecx, 0x10000
mov edx, dword [esp + 0x40]
push 1
call fcn.00495760
add esp, 4
test eax, eax
je 0x492521
inc ebx
lea esi, [esi + edi*2]
cmp ebx, dword [esp + 0x28]
jl 0x4924c0
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, ebx
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop
mov eax, esi
add esi, 0xfffffffe
cmp eax, ebp
je case.0x48cabb.151
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x492585
add esi, 0xfffffffe
mov eax, dword [esp + 0x17c]
mov edx, ebx
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492560
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edi + 0x8c], 0
je 0x492528
cmp esi, dword [edi + 0x88]
jbe 0x492528
mov dword [edi + 0x64], 1
cmp dword [edi + 0x8c], 1
jg 0x493a71
jmp 0x492528
cmp dword [edi + 0x8c], 0
je case.0x48cabb.151
cmp esi, ecx
jb case.0x48cabb.151
jmp 0x4920e2
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp edi, ebp
jge case.0x48cabb.151
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x18]
mov ebp, dword [eax + 0x7c]
mov eax, ebp
lea ebx, [ecx + ecx]
sub eax, ebx
cmp esi, eax
ja 0x4926c4
mov edx, dword [esp + 0x24]
lea edi, [ecx + ecx]
mov ecx, esi
sub edi, 4
jb 0x492686
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x49268f
add ecx, 4
add edx, 4
sub edi, 4
jae 0x492675
cmp edi, 0xfffffffc
je 0x492733
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4926c4
cmp edi, 0xfffffffd
je 0x492733
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4926c4
cmp edi, 0xfffffffe
je 0x492733
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4926c4
cmp edi, 0xffffffff
je 0x492733
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x492733
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x492788
lea ebx, [ecx + ecx]
mov eax, ebp
sub eax, ebx
cmp esi, eax
ja 0x492788
lea edi, [ecx + ecx]
mov ecx, esi
lea edx, [esp + 0x74]
sub edi, 4
jb 0x492701
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x492706
add ecx, 4
add edx, 4
sub edi, 4
jae 0x4926f0
cmp edi, 0xfffffffc
je 0x492733
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x492788
cmp edi, 0xfffffffd
je 0x492733
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x492788
cmp edi, 0xfffffffe
je 0x492733
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x492788
cmp edi, 0xffffffff
je 0x492733
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x492788
mov eax, dword [esp + 0x17c]
add esi, ebx
mov edi, dword [esp + 0x20]
inc eax
mov edx, dword [esp + 0x10]
inc edi
push eax
push dword [esp + 0x17c]
mov ecx, esi
mov dword [esp + 0x28], edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
mov ebp, dword [esp + 0x30]
add esp, 0x14
test eax, eax
je 0x492646
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x174]
cmp dword [eax + 0x8c], 0
je case.0x48cabb.151
cmp esi, ebp
jb case.0x48cabb.151
jmp 0x492115
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp ebp, dword [esp + 0x1c]
jge case.0x48cabb.151
mov ecx, dword [esp + 0x174]
cmp esi, dword [ecx + 0x7c]
jae 0x4928e7
movzx eax, word [esi]
cmp ebx, eax
je 0x49280d
cmp edi, eax
jne case.0x48cabb.151
mov eax, dword [esp + 0x17c]
add esi, 2
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ecx
push dword [esp + 0x17c]
mov ecx, esi
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x4927e4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp ebp, dword [esp + 0x1c]
jge case.0x48cabb.151
cmp esi, dword [edi + 0x7c]
jae 0x4920d5
movzx eax, word [esi]
add esi, 2
cmp ebx, eax
jne case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492882
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [esp + 0x174]
cmp dword [ecx + 0x8c], 0
je case.0x48cabb.151
cmp esi, dword [ecx + 0x88]
jbe case.0x48cabb.151
mov dword [ecx + 0x64], 1
cmp dword [ecx + 0x8c], 1
jmp 0x493a6b
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop word [eax + eax]
cmp ebp, dword [esp + 0x1c]
jge case.0x48cabb.151
mov edx, dword [esp + 0x174]
cmp esi, dword [edx + 0x7c]
jae 0x4929eb
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49299a
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp edi, ecx
je case.0x48cabb.151
cmp ebx, ecx
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
inc ebp
push eax
push dword [esp + 0x17c]
push edx
push dword [esp + 0x17c]
mov edx, dword [esp + 0x20]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492950
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [edx + 0x8c], 0
je case.0x48cabb.151
cmp esi, dword [edx + 0x88]
jbe case.0x48cabb.151
mov dword [edx + 0x64], 1
cmp dword [edx + 0x8c], 1
jmp 0x493a6b
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop dword [eax]
cmp ebp, dword [esp + 0x1c]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x492a93
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
cmp edi, ecx
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492a50
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x174]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
mov eax, esi
add esi, 0xfffffffe
cmp eax, ebx
je case.0x48cabb.151
mov ebp, 0xdc00
movzx eax, word [esi]
mov edx, esi
mov ecx, eax
and ecx, 0xfc00
movzx ebx, cx
cmp cx, bp
jne 0x492b3e
movzx eax, word [edx - 2]
lea esi, [edx - 2]
cmp bx, bp
movzx ecx, ax
lea edi, [edx - 2]
mov eax, ecx
cmovne edi, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x492b72
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
jne 0x492ba8
lea esi, [edi - 2]
jmp 0x492b22
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebp, dword [esp + 0x174]
inc eax
mov edx, dword [esp + 0x10]
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
mov ebx, dword [esp + 0x30]
add esp, 0x14
test eax, eax
je 0x492b10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
lea ecx, [esi - 2]
cmp esi, ebx
je case.0x48cabb.151
mov ax, word [ecx]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x492c47
add ecx, 0xfffffffe
mov esi, ecx
cmp edi, 0x11
jne 0x492c63
cmp ecx, ebx
jbe 0x492c63
cmp word [ecx], 0xa
jne 0x492c63
cmp word [ecx - 2], 0xd
lea eax, [ecx - 2]
cmove esi, eax
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebp
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492c24
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test eax, eax
js 0x493577
cmp eax, 8
ja case.default.0x48e6c1
jmp dword [eax*4 + 0x494320]
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop
mov ecx, esi
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx eax, word [esi]
add esi, 2
and eax, 0xfc00
cmp eax, 0xd800
jne 0x492d1a
lea esi, [ecx + 4]
cmp dword [esp + 0x34], 0
jne case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492cf0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop word [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x492de3
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
mov al, byte [eax*8 + 0x4c6739]
cmp al, 9
je 0x492e16
cmp al, 5
je 0x492e16
cmp al, 8
je 0x492e16
xor eax, eax
jmp 0x492e1b
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492da0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop dword [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x492ee3
movzx eax, word [esi]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add esi, 2
add ecx, 0x10000
mov edx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], edx
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492ea0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
nop word [eax + eax]
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x492fe3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x492fa0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4930d3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
xor ecx, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6738]
cmp eax, dword [esp + 0x3c]
sete cl
cmp ecx, dword [esp + 0x34]
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x493090
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4931c3
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add esi, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x4931fc
cmp eax, 3
je 0x4931fc
xor eax, eax
jmp 0x493201
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x493180
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4932c4
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 6
je 0x49330c
cmp edx, 9
je 0x49330c
cmp edx, 0xa
je 0x49330c
cmp edx, 0xc
je 0x49330c
cmp edx, 0xd
je 0x49330c
xor eax, eax
jmp 0x493311
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x493281
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4933d4
movzx eax, word [esi]
and edx, 0x3ff
shl edx, 0xa
and eax, 0x3ff
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 6
je 0x493421
cmp edx, 9
je 0x493421
cmp edx, 0xa
je 0x493421
cmp edx, 0xb
je 0x493421
cmp edx, 0xc
je 0x493421
cmp edx, 0xd
je 0x493421
xor eax, eax
jmp 0x493426
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x493391
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edi, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
mov edx, edi
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
jne 0x491ef6
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
cmp esi, dword [ebx + 0x7c]
jae 0x493a44
movzx edx, word [esi]
add esi, 2
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4934e9
movzx eax, word [esi]
and edx, 0x3ff
and eax, 0x3ff
shl edx, 0xa
or edx, eax
add esi, 2
add edx, 0x10000
mov eax, edx
shr eax, 7
movzx ecx, byte [eax + 0x4c7818]
mov eax, edx
and eax, 0x7f
shl ecx, 7
add ecx, eax
movzx eax, word [ecx*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
mov eax, dword [eax*4 + 0x4ba958]
cmp eax, 1
je 0x493529
cmp eax, 3
je 0x493529
cmp edx, 0x5f
je 0x493529
xor eax, eax
jmp 0x49352e
mov eax, 1
cmp eax, dword [esp + 0x34]
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov edx, edi
inc eax
mov ecx, esi
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x4934a6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
cmp edi, 0x16
jne 0x4936e6
test eax, eax
jne 0x491ef6
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
mov ebx, dword [ebx + 0x7c]
cmp esi, ebx
jae 0x492101
movzx ecx, word [esi]
add esi, 2
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4935fa
movzx eax, word [esi]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add esi, 2
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
je case.0x48cabb.151
cmp esi, ebx
jae 0x49369e
mov edi, esi
movzx ecx, word [esi]
mov edx, 1
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x493667
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
mov edx, 2
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c7818]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bae38]
movzx eax, byte [eax*8 + 0x4c6739]
cmp dword [eax*4 + 0x4ba958], 2
jne 0x49369e
lea esi, [edi + edx*2]
mov edi, esi
cmp esi, ebx
jb 0x493632
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov ebx, dword [esp + 0x174]
inc eax
mov edx, dword [esp + 0x10]
inc ebp
push eax
push dword [esp + 0x17c]
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x4935b5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
test eax, eax
jne 0x491ef6
nop
cmp ebp, dword [esp + 0x20]
jge case.0x48cabb.151
mov ecx, dword [ebx + 0x7c]
cmp esi, ecx
jae 0x493a44
cmp edi, 0xc
jne 0x493757
mov edx, dword [ebx + 0x18]
lea eax, [ebx + 0x1c]
test edx, edx
je 0x49372c
push 1
push eax
push ecx
mov ecx, esi
call fcn.004955e0
add esp, 0xc
test eax, eax
jne case.0x48cabb.151
jmp 0x493757
mov edx, dword [eax]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x493757
mov ax, word [esi]
cmp ax, word [ebx + 0x2c]
jne 0x493757
cmp edx, 1
je case.0x48cabb.151
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x2e]
je case.0x48cabb.151
movzx ecx, word [esi]
lea edx, [esi + 2]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x493787
movzx eax, word [edx]
and ecx, 0x3ff
shl ecx, 0xa
and eax, 0x3ff
or ecx, eax
add ecx, 0x10000
add edx, 2
lea eax, [edi - 6]
cmp eax, 0xf
ja case.default.0x48e6c1
jmp dword [eax*4 + 0x494344]
mov esi, edx
jmp 0x4939f3
cmp ecx, 0xd
ja 0x4937cf
je 0x4937b2
cmp ecx, 0xa
je case.0x493793.12
lea eax, [ecx - 0xb]
jmp 0x4937dd
mov esi, edx
cmp edx, dword [ebx + 0x7c]
jae 0x4939f3
cmp word [edx], 0xa
jne 0x4939f3
lea esi, [edx + 2]
jmp 0x4939f3
cmp ecx, 0x85
je 0x4937e6
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x48cabb.151
cmp dword [ebx + 0x68], 0
mov esi, edx
jne case.0x48cabb.151
jmp 0x4939f3
cmp ecx, 0x180e
ja 0x493829
je case.0x48cabb.151
cmp ecx, 0xa0
ja 0x493821
je case.0x48cabb.151
cmp ecx, 9
je case.0x48cabb.151
cmp ecx, 0x20
jmp 0x49385d
cmp ecx, 0x1680
jmp 0x49385d
cmp ecx, 0x205f
ja 0x493857
je case.0x48cabb.151
cmp ecx, 0x2000
jb case.0x493793.12
cmp ecx, 0x200a
jbe case.0x48cabb.151
cmp ecx, 0x202f
jmp 0x49385d
cmp ecx, 0x3000
je case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x180e
ja 0x49389c
je case.0x493793.12
cmp ecx, 0xa0
ja 0x493894
je case.0x493793.12
cmp ecx, 9
je case.0x493793.12
cmp ecx, 0x20
jmp 0x4938d0
cmp ecx, 0x1680
jmp 0x4938d0
cmp ecx, 0x205f
ja 0x4938ca
je case.0x493793.12
cmp ecx, 0x2000
jb case.0x48cabb.151
cmp ecx, 0x200a
jbe case.0x493793.12
cmp ecx, 0x202f
jmp 0x4938d0
cmp ecx, 0x3000
jne case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x85
ja 0x4938f9
je case.0x48cabb.151
cmp ecx, 0xa
jb case.0x493793.12
cmp ecx, 0xd
jmp 0x49390b
cmp ecx, 0x2028
jb case.0x493793.12
cmp ecx, 0x2029
jbe case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x85
ja 0x49392e
je case.0x493793.12
lea eax, [ecx - 0xa]
cmp eax, 3
jmp 0x493937
lea eax, [ecx - 0x2028]
cmp eax, 1
ja case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x100
jae case.0x493793.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
jne case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x100
jae case.0x48cabb.151
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 4
je case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x100
jae case.0x493793.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
jne case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x100
jae case.0x48cabb.151
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 1
je case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x100
jae case.0x493793.12
mov eax, dword [ebx + 0x3c]
test byte [ecx + eax], 0x10
jne case.0x48cabb.151
mov esi, edx
jmp 0x4939f3
cmp ecx, 0x100
jae case.0x48cabb.151
mov eax, dword [ebx + 0x3c]
mov esi, edx
test byte [ecx + eax], 0x10
je case.0x48cabb.151
mov eax, dword [esp + 0x17c]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
inc ebp
push ebx
push dword [esp + 0x17c]
push dword [esp + 0x17c]
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x4936f0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffff2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp dword [ebx + 0x8c], 0
je case.0x48cabb.151
cmp esi, dword [ebx + 0x88]
jbe case.0x48cabb.151
mov dword [ebx + 0x64], 1
cmp dword [ebx + 0x8c], 1
jle case.0x48cabb.151
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x4c], eax
mov eax, dword [ecx + ebp*4 + 4]
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x10]
mov edi, dword [edi + 0x94]
sub eax, edx
mov edx, dword [esp + 0x174]
lea ecx, [ecx + eax*4]
mov eax, dword [ecx]
mov dword [esp + 0x44], eax
mov eax, esi
sub eax, dword [edx + 0x78]
mov ebx, dword [edx + 0xb0]
sar eax, 1
mov dword [ecx], eax
nop dword [eax]
cmp dword [esp + 0x1c], 0x82
jb 0x493ad4
mov dword [edx + 0x9c], 2
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [ecx]
push dword [esp + 0x17c]
push edx
movzx eax, byte [eax + 0x4ba9d0]
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.0048c980
mov edx, eax
add esp, 0x14
cmp edx, 0xfffffc1c
je 0x493b9f
cmp edx, 0xfffffc20
jne 0x493b5d
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 2]
lea eax, [eax + ecx*2]
mov ecx, dword [esp + 0x174]
cmp dword [ecx + 0x80], eax
jae 0x493bd3
mov ecx, dword [esp + 0x10]
cmp word [ecx], 0x71
mov ecx, dword [esp + 0x174]
je 0x493b59
cmp word [eax], 0x71
jne 0x493bd3
xor edx, edx
jmp 0x493b68
test edx, edx
jne 0x493bd3
mov ecx, dword [esp + 0x174]
mov eax, dword [esp + 0x10]
mov dword [ecx + 0x94], edi
mov ecx, dword [esp + 0x10]
movzx eax, word [eax + 2]
lea ecx, [ecx + eax*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x174]
mov eax, dword [esp + 0x10]
mov dword [ecx + 0xb0], ebx
cmp word [eax], 0x71
jne 0x493ba6
mov edx, ecx
jmp 0x493ac0
mov ecx, dword [esp + 0x174]
mov eax, dword [ecx + 0xc]
mov ebx, dword [esp + 0x174]
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x44]
mov dword [eax + ebp*4], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [esp + 0x40]
mov dword [eax + ebp*4 + 4], ecx
mov ecx, dword [ebx + 0x10]
sub ecx, dword [esp + 0x48]
mov eax, dword [ebx + 0xc]
mov dword [eax + ecx*4], esi
mov eax, edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
cmp edx, 0xfffffc1c
jne 0x493c22
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx]
cmp eax, 0x7b
je 0x493c17
cmp eax, 0x71
jne 0x493c0e
nop dword [eax]
movzx eax, word [ecx + 2]
cmp word [ecx + eax*2], 0x71
lea ecx, [ecx + eax*2]
je 0x493c00
movzx eax, word [ecx + 2]
neg eax
lea ecx, [ecx + eax*2]
xor eax, eax
cmp dword [ebx + 0xb8], ecx
cmove edx, eax
mov eax, edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
lea ebx, [edx + 4]
mov dword [edi + 0xb4], ebx
mov dword [edi + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push edi
movzx ecx, byte [eax + 0x4ba9d0]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.0048c980
mov edi, eax
add esp, 0x14
cmp edi, 1
je 0x493c91
cmp edi, 0xfffffc19
jne 0x493cb4
mov ebp, dword [esp + 0x174]
cmp dword [ebp + 0xb0], 0
jne 0x493cbb
mov dword [ebp + 0xb0], ebx
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, dword [esp + 0x174]
cmp edi, 0xfffffc1f
jne 0x492049
mov edx, dword [ebp + 0x80]
mov ecx, ebx
call fcn.00495550
test eax, eax
jne 0x492049
mov dword [ebp + 0x80], esi
lea eax, [edi - 1]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ba9d0]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x493d4b
cmp eax, 0xfffffc1d
je 0x493d4b
cmp eax, 0xfffffc1e
je 0x493d4b
cmp eax, 0xfffffc1f
je 0x493d4b
cmp eax, 0xfffffc20
jne 0x491ef6
mov eax, 0xfffffc1a
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ba9d0]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x493e34
cmp eax, 0xfffffc20
je 0x493e34
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x174]
lea edi, [edx + 4]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx ecx, byte [eax + 0x4ba9d0]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.0048c980
add esp, 0x14
cmp eax, 1
je 0x493e16
cmp eax, 0xfffffc19
jne 0x493e25
cmp dword [ebx + 0xb0], 0
jne 0x493e25
mov dword [ebx + 0xb0], edi
test eax, eax
je 0x493e34
cmp eax, 0xfffffc20
jne 0x491ef6
mov eax, 0xfffffc1d
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ba9d0]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x493e91
cmp eax, 0xfffffc1d
je 0x493e91
cmp eax, 0xfffffc20
jne 0x491ef6
mov dword [edi + 0x80], esi
mov eax, 0xfffffc1e
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x10]
inc eax
push eax
push dword [esp + 0x17c]
movzx eax, byte [edx + 0x4ba9d0]
push edi
push dword [esp + 0x17c]
push dword [esp + 0x17c]
lea edx, [ecx + eax*2]
mov ecx, esi
call fcn.0048c980
add esp, 0x14
test eax, eax
je 0x493f70
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x174]
lea edi, [edx + 4]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], 0
mov eax, dword [esp + 0x17c]
inc eax
push eax
movzx eax, word [edx]
push dword [esp + 0x17c]
push ebx
movzx ecx, byte [eax + 0x4ba9d0]
movzx eax, word [edx + 2]
push dword [esp + 0x17c]
add ecx, eax
push dword [esp + 0x17c]
lea edx, [edx + ecx*2]
mov ecx, esi
call fcn.0048c980
add esp, 0x14
cmp eax, 1
je 0x493f57
cmp eax, 0xfffffc19
jne 0x493f66
cmp dword [ebx + 0xb0], 0
jne 0x493f66
mov dword [ebx + 0xb0], edi
test eax, eax
jne 0x491ef6
mov edi, ebx
mov eax, dword [esp + 0x10]
mov dword [edi + 0x80], eax
mov eax, 0xfffffc20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov ebp, dword [esp + 0x16c]
cmp esi, ebp
jne 0x493fca
cmp edx, 0x99
je 0x493fca
cmp dword [edi + 0xa8], 0
jne 0x493fca
cmp dword [edi + 0x5c], 0
jne case.0x48cabb.151
cmp dword [edi + 0x60], 0
je 0x493fca
mov ecx, dword [edi + 0x98]
mov eax, dword [edi + 0x78]
lea eax, [eax + ecx*2]
cmp ebp, eax
je case.0x48cabb.151
mov eax, dword [esp + 0x170]
test bx, bx
mov dword [edi + 0x84], esi
mov ecx, 1
mov dword [edi + 0x90], eax
mov eax, 0xfffffc19
mov dword [edi + 0x80], ebp
cmove eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
mov eax, 0xfffffffb
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x158
ret
pop edi
pop esi
pop ebp
mov eax, 0xffffffeb
pop ebx
add esp, 0x158
ret