Function at 0x498360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x3b8
mov eax, 0x75d0d7
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x3cc]
mov ebp, edx
lea edi, [edx + 0x50]
movzx ebx, byte [edx + 0x246]
mov bh, byte [edx + 0x247]
mov dword [esp + 0x118], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x140], 0
shr eax, 0x10
mov dword [esp + 4], ebp
mov dword [esp + 0x174], edi
mov dword [esp + 0x270], eax
mov eax, 0x7355cb
shr eax, 0x10
mov dword [esp + 0x264], eax
mov eax, 0x75d061
shr eax, 0x10
mov dword [esp + 0x26c], eax
mov eax, 0x75d01a
shr eax, 0x10
mov dword [esp + 0x274], eax
mov eax, 0x75d00c
shr eax, 0x10
mov dword [esp + 0x268], eax
mov eax, 0x733bbb
shr eax, 0x10
mov dword [esp + 0x278], eax
mov eax, 0x735624
shr eax, 0x10
mov dword [esp + 0x27c], eax
call 0x498421
pop eax
mov dword [esp + 0x170], eax
lea eax, [edx + 0x2a0]
mov dword [esp + 0x150], eax
lea eax, [edx + 0x288]
mov dword [esp + 0x284], eax
lea eax, [edx + 0x260]
mov dword [esp + 0x7c], eax
lea eax, [edx + 0x261]
mov dword [esp + 0x288], eax
lea eax, [edx + 0x250]
mov dword [esp + 0x11c], eax
lea eax, [edx + 0x270]
mov dword [esp + 0x280], eax
mov eax, dword [edx + 0x64]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x154], ecx
lea ecx, [esp + 0x94]
mov dword [esp + 0x158], edx
mov dword [esp + 0x34], edx
mov dword [esp + 0x30], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14c], edx
test eax, eax
je 0x498500
mov esi, dword [esp + 0x88]
nop
mov edx, edi
push dword [esp + 0x154]
push dword [esp + 0x15c]
call fcn.00450620
add esp, 8
movzx eax, byte [esp + 0x94]
cmp al, 4
jne 0x49b82f
mov eax, dword [esp + 0x98]
test eax, eax
je 0x49b863
add eax, esi
cmp dword [ebp + 0x64], 0
lea ecx, [esp + 0x94]
mov esi, eax
jne 0x4984b0
jmp 0x49851e
cmp dword [ebp + 0x4c], 0
mov eax, dword [esp + 0x88]
jne 0x49b9f5
test byte [ebp + 0x24a], 1
jne 0x49b9f5
mov dword [esp + 0x88], eax
push dword [esp + 0x158]
push ecx
mov eax, dword [esp + 0x15c]
call dword [eax + 0x38]
add esp, 8
cmp byte [esp + 0x94], 4
jne 0x49b8e6
and bl, bh
cmp dword [esp + 0x88], 0
mov byte [esp + 0x91], bl
setne al
test bl, al
jne 0x49b8cf
test byte [esp + 0x140], 1
jne 0x4988d0
nop word cs:[eax + eax]
nop dword [eax]
cmp dword [ebp + 0x4c], 0
jne 0x4988d0
cmp byte [ebp + 0x24a], 0
jne 0x4988d0
cmp byte [ebp + 0x246], 0
jne 0x4985aa
cmp dword [ebp + 0x64], 0
jne 0x4988d0
cmp dword [ebp + 0x38], 1
jne 0x498620
mov ecx, dword [ebp + 0x44]
mov eax, dword [ebp + 0x3c]
xor edx, edx
mov esi, ecx
mov edi, ecx
jmp 0x4985c6
add edx, dword [esi + 8]
add esi, 0xc
cmp esi, ecx
jne 0x4985c0
test edi, edi
je 0x4985e0
cmp ecx, edi
je 0x4985e0
mov ebx, edi
mov edi, esi
mov esi, ebx
jmp 0x4985c0
cmp edx, eax
jbe 0x498620
lea ecx, [esp + 0x318]
mov edx, 0x27
push 0x1e
push str.received_plaintext_buffer_full
call fcn.004a0750
add esp, 8
movzx ebx, byte [esp + 0x318]
cmp bl, 4
jne 0x49880c
jmp 0x498898
cmp dword [ebp + 0x258], 0
mov edi, dword [ebp + 0x2ac]
mov eax, 0xffff
mov ecx, 0x4805
cmove eax, ecx
cmp edi, eax
jae 0x4986c0
lea ebx, [edi + 0x1000]
mov esi, dword [ebp + 0x2a8]
cmp eax, ebx
cmovb ebx, eax
mov ebp, ebx
sub ebp, esi
jbe 0x4986f8
mov eax, dword [esp + 0x150]
mov eax, dword [eax]
sub eax, esi
cmp eax, ebp
jb 0x498873
mov eax, dword [esp + 4]
cmp ebp, 2
mov edi, dword [eax + 0x2a4]
lea eax, [edi + esi]
jb 0x498699
lea ecx, [ebp - 1]
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [esi + ebp - 1]
add edi, esi
mov eax, edi
mov ebp, dword [esp + 4]
inc esi
mov byte [eax], 0
lea ecx, [esp + 0x94]
mov ebx, esi
mov dword [ebp + 0x2a8], esi
mov edi, dword [ebp + 0x2ac]
jmp 0x498750
lea ecx, [esp + 0x188]
mov edx, 0x15
push 0x13
push 0x733bc1
call fcn.0043d7c0
add esp, 8
movzx ecx, byte [esp + 0x188]
mov eax, dword [esp + 0x18c]
cmp cl, 4
je 0x4987a8
jmp 0x4987e7
test edi, edi
sete cl
cmp esi, eax
seta al
or al, cl
je 0x498743
mov ebp, dword [esp + 4]
mov dword [ebp + 0x2a8], ebx
cmp dword [ebp + 0x2a0], ebx
jbe 0x498749
push ebx
push dword [ebp + 0x2a4]
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
test eax, eax
je 0x49ba2b
mov dword [ebp + 0x2a4], eax
mov dword [ebp + 0x2a0], ebx
jmp 0x498749
mov ebp, dword [esp + 4]
mov ebx, esi
lea ecx, [esp + 0x94]
sub ebx, edi
jb 0x49ba2b
mov eax, dword [ebp + 0x2a4]
add eax, edi
push ebx
push eax
push dword [esp + 0x160]
push ecx
mov eax, dword [esp + 0x164]
call dword [eax + 0xc]
add esp, 0x10
movzx eax, byte [esp + 0x94]
cmp al, 4
jne 0x4987b5
mov eax, dword [esp + 0x98]
mov cl, 4
add edi, eax
mov dword [esp + 0x18c], eax
mov byte [esp + 0x188], 4
mov dword [ebp + 0x2ac], edi
cmp cl, 4
jne 0x4987e7
test eax, eax
jne 0x4987e7
mov byte [ebp + 0x24b], 1
jmp 0x4987e7
lea edx, [esp + 0x9a]
lea esi, [esp + 0x18c]
movzx ecx, byte [edx - 3]
movzx edi, word [edx - 5]
mov edx, dword [esp + 0x98]
mov byte [esi - 1], cl
mov word [esi - 3], di
mov byte [esp + 0x188], al
mov dword [esp + 0x18c], edx
mov ebx, dword [esp + 0x188]
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x31c], eax
mov dword [esp + 0x318], ebx
cmp bl, 4
je 0x498898
lea ecx, [esp + 0x318]
call fcn.0049e3e0
cmp al, 0x23
jne 0x49b8bf
cmp bl, 3
jne 0x498580
mov esi, dword [esp + 0x31c]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x498841
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x49885f
cmp dword [ebx + 8], 9
jb 0x498850
mov edi, dword [edi - 4]
push edi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x498580
mov ecx, dword [esp + 0x150]
mov edx, esi
push 1
push 1
push ebp
call fcn.004e4f80
add esp, 0xc
mov eax, dword [esp + 4]
mov esi, dword [eax + 0x2a8]
jmp 0x498670
mov eax, dword [esp + 0x31c]
mov ecx, dword [esp + 0x140]
add dword [esp + 0x118], eax
test eax, eax
movzx ecx, cl
mov eax, 1
cmove ecx, eax
mov dword [esp + 0x140], ecx
nop word cs:[eax + eax]
nop dword [eax + eax]
movzx ecx, byte [ebp + 0x260]
mov edi, dword [ebp + 0x264]
mov ebx, dword [ebp + 0x268]
mov eax, dword [ebp + 0x26c]
mov byte [ebp + 0x260], 0x10
cmp cl, 0x16
jne 0x49ad50
mov eax, dword [ebp + 0x2b0]
mov esi, dword [ebp + 0x2ac]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x40], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x58], eax
cmp esi, dword [ebp + 0x2a8]
ja 0x49ba2b
mov edi, dword [ebp + 0x258]
mov eax, dword [ebp + 0x2a4]
mov dword [esp + 0x18], esi
test edi, edi
mov dword [esp + 0x14], eax
je 0x498ac0
mov eax, dword [ebp + 0x254]
cmp dword [eax], 1
jne 0x498ac0
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 4]
mov esi, dword [eax + 0xc]
mov ebx, ecx
add edx, 4
mov dword [esp + 0xc], esi
sub ebx, esi
mov esi, 0
cmovb ebx, esi
mov esi, dword [esp + 0x18]
cmp edx, ebx
jne 0x498ac0
xor edx, edx
cmp edi, 1
jne 0x4989a1
mov edx, dword [ebp + 0x25c]
mov dword [ebp + 0x25c], 0
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xc], ecx
mov ecx, dword [eax + 0x10]
mov ebx, ecx
sub ebx, dword [esp + 0xc]
jb 0x49ba2b
cmp ecx, esi
ja 0x49ba2b
movd xmm0, dword [eax + 8]
cmp edi, 1
mov dword [esp + 0x4c], edx
mov dword [ebp + 0x258], 0
je 0x4989f8
lea edx, [edi*4 - 4]
lea ecx, [eax + 0x14]
dec edi
lea edx, [edx + edx*4]
push edx
push ecx
push eax
movdqu xmmword [esp + 0x68], xmm0
call sub.VCRUNTIME140.dll_memmove
movdqu xmm0, xmmword [esp + 0x68]
add esp, 0xc
mov dword [ebp + 0x258], edi
mov ecx, dword [esp + 0x14]
movd eax, xmm0
movd dword [esp + 0x124], xmm0
add ecx, dword [esp + 0xc]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], ebx
mov byte [esp + 0x130], 2
mov dword [esp + 0x120], 0
mov edi, dword [esp + 0x138]
lea ebx, [esp + 0x94]
cmp ax, 0xa
mov dword [esp + 0x20], eax
je 0x49b0bd
movzx eax, byte [esp + 0x130]
movzx esi, word [esp + 0x126]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x12c]
test eax, eax
je 0x499806
cmp eax, 1
mov word [esp + 0xc], si
je 0x4998ad
movzx ebx, byte [esp + 0x47]
mov bh, byte [esp + 0x1f]
cmp eax, 2
je 0x49984f
cmp eax, 3
jne 0x49b42c
mov ebp, 0x80000005
mov eax, 0x80000000
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x84], edx
jmp 0x499967
cmp dword [esp + 0x28], esi
ja 0x49ba2b
movzx ebx, word [ebp + 0x238]
mov word [esp + 0x13c], bx
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x14]
mov eax, esi
mov esi, dword [ebp + 0x2c]
sub eax, ecx
add ecx, edx
cmp bx, 5
movzx ebx, byte [ebp + 0x32]
mov edx, dword [ebp + 0x14]
mov dword [esp + 0x228], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x22c], eax
mov dword [esp + 0x230], 0
mov byte [esp + 0xc], bl
mov dword [esp + 0x3c], edx
mov dword [esp], ecx
mov ecx, dword [ebp + 0x28]
mov dword [esp + 0x5c], ecx
jne 0x498df0
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp + 8], eax
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x94]
lea edx, [esp + 0x228]
call fcn.0043d850
mov eax, dword [esp + 0x94]
test eax, eax
jne 0x49b02f
lea eax, [esp + 0x9a]
movzx ebp, word [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 6]
cmp bp, 0xa
movq qword [esp + 0x188], xmm0
movq qword [esp + 0x18e], xmm1
je 0x49b0b1
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
lea eax, [esp + 0x29e]
mov word [esp + 0x29c], bp
lea ecx, [esp + 0x94]
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
movzx edx, byte [esp + 0x2a8]
test edx, edx
je 0x498be3
cmp edx, 1
jne 0x498beb
mov eax, dword [esp + 4]
cmp byte [eax + 0x30], 0
jne 0x498beb
cmp dword [esp + 0x2a4], 2
ja 0x498beb
test edi, edi
je 0x49915d
cmp byte [esp + 0xc], 2
jne 0x498c93
mov edi, dword [esp + 0x2a4]
push esi
mov ebx, dword [esp + 0x60]
push ebx
lea eax, [esp + 0x2a4]
push eax
push dword [esp + 0xc]
push ecx
mov eax, dword [esp + 0x50]
call dword [eax + 0xc]
add esp, 0x14
test byte [esp + 0x94], 1
je 0x498cf6
cmp byte [esp + 0x98], 6
jne 0x498d1a
test byte [esp + 8], 1
je 0x498d1a
mov ebx, dword [esp + 0x20]
sub ebx, edi
jb 0x498d1a
mov eax, dword [esp + 4]
lea ecx, [esp + 0x98]
mov word [esp + 0x188], 0xa
mov dword [eax], 1
mov dword [eax + 4], ebx
call fcn.0043da20
movzx ebp, word [esp + 0x188]
mov dword [esp + 8], 1
mov dword [esp + 0x20], ebx
cmp bp, 0xa
je 0x498d96
jmp 0x4990a4
mov ebx, edx
movzx eax, byte [esp + 0x2a9]
movzx ecx, word [esp + 0x29e]
mov edx, dword [esp + 0x2a0]
mov edi, dword [esp + 0x2a4]
mov word [esp + 0x188], bp
mov word [esp + 0x18a], cx
mov dword [esp + 0x18c], edx
mov dword [esp + 0x190], edi
mov byte [esp + 0x194], bl
mov byte [esp + 0x195], al
mov byte [esp + 0x198], 0
cmp bp, 0xa
je 0x498d96
jmp 0x4990a4
mov edx, dword [esp + 4]
mov eax, ebx
mov ecx, esi
add eax, 1
adc ecx, 0
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], ecx
cmp byte [edx + 0x30], 0
je 0x498d46
xor ebx, 0xffff0000
not esi
jmp 0x498d52
lea eax, [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 8]
lea eax, [esp + 0x18c]
movq qword [eax + 8], xmm1
movq qword [eax], xmm0
mov word [esp + 0x188], 0xb
jmp 0x498d84
xor ebx, 0xffff0000
not esi
mov byte [edx + 0x30], 1
or esi, ebx
lea edx, [esp + 0x98]
mov dword [esp + 0x5c], eax
mov esi, ecx
movq xmm0, qword [edx]
movq xmm1, qword [edx + 8]
movq qword [esp + 0x190], xmm1
movq qword [esp + 0x188], xmm0
sete byte [esp + 0x198]
movzx ebp, word [esp + 0x188]
cmp bp, 0xa
jne 0x4990a4
mov eax, dword [esp + 4]
mov edi, dword [eax + 0x258]
mov ecx, dword [eax + 0x254]
lea eax, [edi*4]
lea eax, [eax + eax*4]
test eax, eax
je 0x498b37
cmp dword [ecx], 1
jne 0x49ade6
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 0x10]
mov ebp, 0
add edx, 4
sub ebx, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb ebx, ebp
add eax, 0xffffffec
cmp edx, ebx
je 0x498db0
jmp 0x49ade6
movzx eax, byte [ebp + 0x30]
mov edx, dword [ebp]
mov ecx, dword [ebp + 4]
mov byte [esp + 8], al
mov dword [esp + 0x20], edx
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x94]
lea edx, [esp + 0x228]
call fcn.0043d850
mov eax, dword [esp + 0x94]
test eax, eax
jne 0x49b02f
lea eax, [esp + 0x9a]
movzx ebp, word [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 6]
cmp bp, 0xa
movq qword [esp + 0x188], xmm0
movq qword [esp + 0x18e], xmm1
je 0x49b0b1
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
lea eax, [esp + 0x29e]
mov word [esp + 0x29c], bp
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
movzx eax, byte [esp + 0x2a8]
test al, al
setne cl
test edi, edi
setne dl
or dl, cl
je 0x499154
cmp byte [esp + 0xc], 2
jne 0x498f45
mov edi, dword [esp + 0x2a4]
push esi
mov ebx, dword [esp + 0x60]
push ebx
lea eax, [esp + 0x2a4]
push eax
push dword [esp + 0xc]
lea eax, [esp + 0xa4]
push eax
mov eax, dword [esp + 0x50]
call dword [eax + 0xc]
add esp, 0x14
test byte [esp + 0x94], 1
je 0x498f9c
cmp byte [esp + 0x98], 6
jne 0x498fd3
test byte [esp + 0x20], 1
je 0x498fd3
mov ebx, dword [esp + 0x2c]
sub ebx, edi
jb 0x498fd3
mov eax, dword [esp + 4]
lea ecx, [esp + 0x98]
mov word [esp + 0x188], 0xa
mov dword [eax], 1
mov dword [eax + 4], ebx
call fcn.0043da20
movzx ebp, word [esp + 0x188]
mov dword [esp + 0x20], 1
mov dword [esp + 0x2c], ebx
jmp 0x499050
movzx ecx, byte [esp + 0x2a9]
movzx edx, word [esp + 0x29e]
mov edi, dword [esp + 0x2a0]
mov ebx, dword [esp + 0x2a4]
mov word [esp + 0x188], bp
mov word [esp + 0x18a], dx
mov dword [esp + 0x18c], edi
mov dword [esp + 0x190], ebx
mov byte [esp + 0x194], al
mov byte [esp + 0x195], cl
mov byte [esp + 0x198], 0
jmp 0x499050
mov eax, ebx
mov ecx, esi
mov edx, dword [esp + 4]
not esi
add eax, 1
adc ecx, 0
test byte [esp + 8], 1
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], ecx
je 0x499007
lea edx, [esp + 0x98]
xor ebx, 0xffff0000
movq xmm0, qword [edx]
movq xmm1, qword [edx + 8]
or ebx, esi
jmp 0x499028
lea eax, [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 8]
lea eax, [esp + 0x18c]
movq qword [eax + 8], xmm1
movq qword [eax], xmm0
mov word [esp + 0x188], 0xb
movzx ebp, word [esp + 0x188]
jmp 0x499050
xor ebx, 0xffff0000
mov byte [edx + 0x30], 1
mov byte [esp + 8], 1
or ebx, esi
lea esi, [esp + 0x98]
movq xmm0, qword [esi]
movq xmm1, qword [esi + 8]
movq qword [esp + 0x190], xmm1
movq qword [esp + 0x188], xmm0
sete byte [esp + 0x198]
movzx ebp, word [esp + 0x188]
mov dword [esp + 0x5c], eax
mov esi, ecx
cmp bp, 0xa
jne 0x4990a4
mov eax, dword [esp + 4]
mov edi, dword [eax + 0x258]
mov ecx, dword [eax + 0x254]
lea eax, [edi*4]
lea eax, [eax + eax*4]
test eax, eax
je 0x498e06
cmp dword [ecx], 1
jne 0x49ade6
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 0x10]
mov ebp, 0
add edx, 4
sub ebx, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb ebx, ebp
add eax, 0xffffffec
cmp edx, ebx
je 0x499070
jmp 0x49ade6
movzx eax, bp
cmp eax, 0xb
je 0x49b2bd
movzx eax, word [esp + 0x18a]
movzx ecx, byte [esp + 0x194]
movzx edx, byte [esp + 0x195]
cmp byte [esp + 0x198], 0
mov esi, dword [esp + 4]
mov dword [esp + 0x20], ebp
mov word [esp + 0x2c], ax
mov eax, dword [esp + 0x18c]
mov dword [esp], ecx
mov byte [esp + 0x160], dl
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x190]
je 0x499196
cmp byte [esi + 0x249], 0
jne 0x499196
mov byte [esi + 0x249], 1
mov edi, eax
xor eax, eax
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0
mov ecx, esi
lea edx, [esp + 0x94]
cmp byte [esi + 0x31], 2
sete al
push eax
call fcn.0044f0f0
mov eax, edi
add esp, 4
jmp 0x499196
mov dword [esp], 0
jmp 0x499160
mov dword [esp], edx
movzx eax, byte [esp + 0x2a9]
mov esi, dword [esp + 4]
mov dword [esp + 0x20], ebp
mov byte [esp + 0x160], al
movzx eax, word [esp + 0x29e]
mov word [esp + 0x2c], ax
mov eax, dword [esp + 0x2a0]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x2a4]
mov ecx, dword [esp + 0x230]
mov edi, dword [esi + 0x254]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esi + 0x258]
mov esi, edi
mov dword [esp + 8], edi
lea edx, [ecx*4]
mov dword [esp + 0xc], ecx
lea ebp, [edx + edx*4]
mov edx, ebp
nop word cs:[eax + eax]
nop dword [eax]
test edx, edx
je 0x499204
cmp dword [esi], 1
jne 0x4991f7
mov edi, dword [esi + 4]
mov ebx, dword [esi + 0x10]
mov ecx, 0
add edi, 4
sub ebx, dword [esi + 0xc]
lea esi, [esi + 0x14]
cmovb ebx, ecx
add edx, 0xffffffec
cmp edi, ebx
je 0x4991d0
cmp byte [esp], 2
mov dl, 1
je 0x49920b
jmp 0x49b419
cmp byte [esp], 2
sete dl
test eax, eax
je 0x499213
xor ebx, ebx
jmp 0x499229
mov esi, dword [esp + 4]
movzx ebx, byte [esi + 0x284]
cmp bl, 0x20
je 0x49b81c
inc bl
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 4]
add dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x5c]
mov byte [esi + 0x284], bl
sub ecx, dword [esp + 0x14]
test dl, dl
lea edi, [ecx + eax]
je 0x499a56
mov dword [esp + 0x5c], ecx
cmp edi, ecx
mov ecx, dword [esp + 0x18]
jb 0x49ba2b
cmp edi, ecx
ja 0x49ba2b
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x28]
mov dword [ecx + 0x25c], edx
mov ecx, dword [esp + 0xc]
sub ecx, 1
jae 0x499392
test eax, eax
je 0x499423
mov ecx, eax
mov eax, dword [esp + 0x5c]
add ebp, 0x10
add eax, dword [esp + 0x14]
mov dword [esp + 0x5c], eax
mov eax, ecx
jmp 0x4992e8
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
mov dword [edx + ebp - 0x10], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + ebp - 0xc], edi
mov word [edx + ebp - 8], cx
movzx ecx, word [esp + 0x2c]
mov word [edx + ebp - 6], cx
mov dword [edx + ebp - 4], esi
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 4]
mov dword [edx + ebp], ebx
add ebp, 0x14
inc esi
test eax, eax
mov dword [esp + 0xc], esi
mov dword [ecx + 0x258], esi
je 0x499423
cmp eax, 3
ja 0x49930b
mov esi, dword [esp + 0x5c]
mov ebx, eax
mov dword [esp + 0x5c], 1
mov dword [esp + 0x3c], 0
xor eax, eax
sub esi, dword [esp + 0x14]
jmp 0x499358
lea ecx, [eax - 4]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x3c], 1
movzx edi, byte [eax + 1]
movzx edx, word [eax + 2]
mov esi, eax
shl edx, 0x10
shl edi, 8
or edi, edx
mov edx, 0
bswap edi
sub ecx, edi
lea ebx, [edi + 4]
cmovb ecx, edx
lea edx, [edi + eax + 4]
mov eax, 1
cmovbe ebx, dword [esp]
cmovbe edx, eax
sub esi, dword [esp + 0x14]
mov eax, ecx
mov dword [esp + 0x5c], edx
add ebx, esi
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0xc]
cmp edx, dword [ecx]
jne 0x4992a0
mov ecx, dword [esp + 0x11c]
mov dword [esp], eax
call fcn.00449980
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x254]
mov dword [esp + 8], eax
mov eax, dword [esp]
jmp 0x4992a0
mov edx, dword [esp + 8]
lea ecx, [ecx + ecx*4]
lea ecx, [edx + ecx*4]
cmp dword [ecx], 1
jne 0x4993bd
mov edx, dword [ecx + 4]
mov esi, dword [ecx + 0x10]
add edx, 4
sub esi, dword [ecx + 0xc]
mov ecx, 0
cmovb esi, ecx
cmp edx, esi
je 0x499281
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0xc]
mov esi, dword [esp + 4]
cmp edx, dword [ecx]
jne 0x4993e6
mov ecx, dword [esp + 0x11c]
call fcn.00449980
mov eax, dword [esi + 0x254]
mov dword [esp + 8], eax
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
mov edx, dword [esp + 0x20]
movzx eax, word [esp + 0x2c]
lea ecx, [ebx + ebx*4]
inc ebx
mov dword [ebp + ecx*4], 0
mov word [ebp + ecx*4 + 8], dx
mov word [ebp + ecx*4 + 0xa], ax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], ebx
mov dword [ebp + ecx*4 + 0xc], eax
mov dword [ebp + ecx*4 + 0x10], edi
mov dword [esi + 0x258], ebx
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0xc]
xor ebx, ebx
mov edx, dword [ebp + 0x254]
test eax, eax
jne 0x499450
jmp 0x499739
mov ebp, dword [esp + 4]
mov edx, dword [ebp + 0x254]
test ecx, ecx
mov eax, ecx
je 0x49972d
lea ecx, [eax - 2]
lea ebx, [eax - 1]
mov dword [esp + 0xc], eax
lea eax, [eax + eax*4]
mov ebp, 0xffffffff
mov dword [esp + 0x5c], edx
mov dword [esp], ecx
lea eax, [eax*4 - 0x14]
mov ecx, edx
nop word cs:[eax + eax]
nop dword [eax]
test eax, eax
je 0x499731
test byte [ecx], 1
je 0x4994b3
mov edx, dword [ecx + 4]
mov esi, dword [ecx + 0x10]
mov edi, 0
add edx, 4
sub esi, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb esi, edi
dec ebx
inc ebp
add eax, 0xffffffec
cmp edx, esi
mov edx, dword [esp + 0x5c]
je 0x499480
jmp 0x4994b5
dec ebx
inc ebp
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0xc]
lea eax, [ebp + 1]
cmp ebx, eax
jbe 0x49ba2b
lea eax, [eax + eax*4]
mov edi, dword [edx + eax*4 + 0x10]
lea ecx, [edx + eax*4]
mov esi, dword [edx + eax*4 + 0xc]
lea eax, [edx + eax*4 + 0x14]
mov dword [esp + 8], edi
mov edi, edx
mov edx, ebx
sub edx, ebp
lea edx, [edx + edx*4]
lea edx, [edx*4 - 0x28]
push edx
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, ebp
lea ecx, [ebp + ebp*4]
mov dword [esp + 0x2c], ebp
not eax
movd xmm0, dword [edi + ecx*4 + 8]
lea edx, [edi + ecx*4]
add eax, ebx
mov ebx, dword [edi + ecx*4 + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 - 0x14]
movdqu xmmword [esp + 0x160], xmm0
mov dword [esp + 0x3c], ebx
mov ebx, dword [edi + ecx*4 + 0x10]
lea ecx, [edi + ecx*4 + 0x14]
mov edi, dword [esp + 8]
push eax
push ecx
push edx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [eax + 0x258], ecx
mov eax, edi
mov ecx, 0
sub eax, esi
mov ebp, eax
cmovb ebp, ecx
jb 0x49ba2b
mov ecx, dword [esp + 0x18]
cmp edi, ecx
ja 0x49ba2b
mov edi, dword [esp + 0x3c]
sub ecx, eax
cmp ecx, ebx
jb 0x49ba2b
mov ecx, dword [esp + 0x14]
add esi, ecx
add ecx, ebx
push eax
push esi
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
add ebp, ebx
mov eax, dword [esp + 0x18]
mov ebx, ebp
cmp ebp, edi
mov ebp, dword [esp + 0x2c]
jb 0x49ba2b
cmp ebx, eax
ja 0x49ba2b
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp]
sub ebx, edi
je 0x49971f
mov eax, dword [esp + 0x20]
add edi, dword [esp + 0x14]
shl eax, 2
mov dword [esp + 0x3c], edi
lea eax, [eax + eax*4]
mov dword [esp + 0x148], eax
lea eax, [ebp*4]
lea edi, [eax + eax*4]
jmp 0x499621
mov eax, dword [esp + 8]
movdqu xmm0, xmmword [esp + 0x160]
inc ecx
inc ebp
mov dword [edx + edi], eax
mov eax, dword [esp + 0x20]
mov dword [edx + edi + 4], eax
movd dword [edx + edi + 8], xmm0
mov dword [edx + edi + 0xc], esi
mov dword [edx + edi + 0x10], ebx
mov ebx, dword [esp + 0xc]
mov esi, dword [esp + 4]
add edi, 0x14
test ebx, ebx
mov dword [esi + 0x258], ecx
je 0x49943c
cmp ebx, 3
mov dword [esp], ecx
ja 0x499650
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x3c], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
sub esi, dword [esp + 0x14]
jmp 0x4996c0
mov dword [esp + 0x2c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x5c], edx
lea eax, [ebx - 4]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 1
movzx edx, byte [ebp + 1]
movzx ecx, word [ebp + 2]
mov esi, ebp
shl ecx, 0x10
shl edx, 8
or edx, ecx
mov ecx, 0
bswap edx
sub eax, edx
lea ebx, [edx + 4]
mov dword [esp + 0x20], edx
cmovbe ebx, dword [esp + 0xc]
cmovb eax, ecx
lea ecx, [edx + ebp + 4]
mov edx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0xc], ebx
mov ebx, 1
cmovbe ecx, ebx
mov ebx, dword [esp + 0xc]
sub esi, dword [esp + 0x14]
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp]
add ebx, esi
cmp ecx, ebp
jb 0x49ba2b
mov eax, dword [esp + 0x11c]
cmp ecx, dword [eax]
jne 0x4996ee
mov ecx, dword [esp + 0x11c]
call fcn.00449980
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov edx, dword [eax + 0x254]
cmp ecx, ebp
jbe 0x4995e0
lea ecx, [edx + edi + 0x14]
lea eax, [edx + edi]
push dword [esp + 0x148]
push eax
push ecx
mov dword [esp + 0x68], edx
call sub.VCRUNTIME140.dll_memmove
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x68]
add esp, 0xc
jmp 0x4995e0
mov ebp, dword [esp + 4]
test ecx, ecx
mov eax, ecx
jne 0x499450
xor ebx, ebx
jmp 0x499739
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 4]
shl ebx, 2
lea eax, [ebx + ebx*4]
jmp 0x499762
add edx, 0x14
add eax, 0xffffffec
cmp ecx, 0xffff
ja 0x49b2ef
test eax, eax
je 0x499776
test edx, edx
je 0x499776
xor ecx, ecx
cmp dword [edx], 1
jne 0x499750
mov ecx, dword [edx + 4]
jmp 0x499750
mov edi, dword [ebp + 0x258]
mov eax, dword [ebp + 0x254]
lea ecx, [edi*4]
mov edx, eax
lea esi, [ecx + ecx*4]
nop
mov ecx, esi
test esi, esi
je 0x4997b9
cmp dword [edx], 1
jne 0x4997b9
mov ebx, dword [edx + 4]
mov ebp, dword [edx + 0x10]
mov esi, 0
add ebx, 4
sub ebp, dword [edx + 0xc]
lea edx, [edx + 0x14]
cmovb ebp, esi
lea esi, [ecx - 0x14]
cmp ebx, ebp
je 0x499790
mov ebp, dword [esp + 4]
test ecx, ecx
sete byte [ebp + 0x245]
test edi, edi
je 0x4997eb
cmp dword [eax], 1
jne 0x4997eb
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0x10]
add ecx, 4
sub edx, dword [eax + 0xc]
mov eax, 0
cmovb edx, eax
cmp ecx, edx
je 0x499bae
mov esi, dword [esp + 0x18]
movzx ebx, word [esp + 0x13c]
cmp dword [esp + 0x28], esi
jbe 0x498ad9
jmp 0x49ba2b
cmp byte [ebp + 0x247], 0
jne 0x499933
cmp word [ebp + 0x238], 5
jne 0x499933
cmp edx, 1
jne 0x49b3a6
cmp byte [ecx], 1
jne 0x49b3a6
movzx eax, byte [ebp + 0x243]
test al, al
je 0x49b3ef
dec al
mov byte [ebp + 0x243], al
jmp 0x49a61f
mov bl, 0xc
test edx, edx
mov dword [esp + 0x28], edx
mov dword [esp + 0x5c], ecx
je 0x499974
mov ch, byte [ecx]
mov al, 0x14
mov cl, ch
add cl, 2
cmp cl, 0x1b
ja 0x499879
movzx eax, cl
movzx eax, byte [eax + 0x7725dc]
cmp edx, 4
mov byte [esp + 0x92], al
mov byte [esp + 0x93], ch
jae 0x499991
mov ecx, dword [esp + 0x278]
mov ax, 3
mov edi, 0x733bbb
xor edx, edx
mov dword [esp + 0x14], eax
mov ebp, ecx
jmp 0x49a2af
mov al, 0xc
test edx, edx
mov dword [esp], eax
movzx eax, byte [esp + 0x47]
je 0x49b441
movzx esi, byte [ecx]
mov ebx, ecx
mov ah, 2
mov edi, edx
cmp esi, 2
mov dword [esp + 0x14], esi
sete cl
sub ah, cl
cmp esi, 1
mov esi, 0
movzx edx, ah
cmove edx, esi
cmp edi, 1
je 0x49b45b
movzx ecx, byte [ebx + 1]
mov bl, 0x23
mov ebp, edi
mov dword [esp + 0x10], ebx
cmp ecx, 0x79
mov dword [esp + 0x14c], ecx
ja 0x499b9e
mov ecx, dword [ecx*4 + 0x49ba80]
mov ah, byte [esp + 0x1f]
mov ebx, eax
add ecx, dword [esp + 0x170]
jmp ecx
test edx, edx
je 0x49b4b4
cmp byte [ecx], 1
movzx ebx, byte [esp + 0x47]
jne 0x49b4f9
mov ebp, 0x80000004
cmp edx, 1
jne 0x49b540
mov bh, byte [esp + 0x1f]
mov eax, dword [esp + 0x114]
mov word [esp + 0xc], si
mov cl, ah
mov byte [esp + 0x1f], bh
mov edx, eax
jmp 0x49a345
mov ecx, dword [esp + 0x27c]
mov ax, 0xd
mov edi, 0x735624
xor edx, edx
mov dword [esp + 0x14], eax
mov ebp, ecx
jmp 0x49a2af
mov byte [esp + 0x3c], ch
mov ecx, dword [esp + 0x5c]
mov edi, edx
movzx ebx, byte [ecx + 1]
movzx ecx, word [ecx + 2]
shl ecx, 0x10
shl ebx, 8
or ebx, ecx
lea ecx, [edx - 4]
mov ebp, ebx
bswap ebp
cmp ecx, ebp
jae 0x4999e0
mov eax, ebp
mov bl, 0xb
xor edx, edx
mov edi, ebp
mov dword [esp + 0x14], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
shr eax, 0x10
mov ebp, eax
jmp 0x49a2af
lea ecx, [ebp + 4]
cmp ecx, edi
ja 0x49ba2b
mov ecx, dword [esp + 0x5c]
mov edi, ebp
cmp al, 0x13
lea ecx, [ecx + 4]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], ebp
mov dword [esp], ecx
mov dword [esp + 0x78], 0
ja 0x499a41
movzx ecx, al
mov dl, 0x10
mov dword [esp + 0x18], 0x75d01a
mov si, 0x11
mov ebp, dword [ecx*4 + 0x49ba30]
mov ecx, dword [esp + 0x274]
mov dword [esp + 8], edx
xor edx, edx
add ebp, dword [esp + 0x170]
jmp ebp
mov ebp, edi
mov dword [esp + 0x78], edi
mov edi, 0x80000015
mov ebx, 0x80000000
jmp 0x49aa51
mov esi, eax
mov eax, dword [esp + 0x28]
cmp edi, ecx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x18]
jb 0x49ba2b
cmp edi, eax
ja 0x49ba2b
mov eax, dword [esp]
mov edx, ecx
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 4]
mov byte [esp + 0x130], al
movzx eax, byte [esp + 0x160]
add ecx, edx
movzx edx, word [esp + 0x2c]
mov byte [esp + 0x131], al
mov eax, dword [esp + 0x20]
mov word [esp + 0x124], ax
mov word [esp + 0x126], dx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], esi
mov dword [esp + 0x120], 0
mov dword [esp + 0x4c], edx
jmp 0x498a2e
movzx ecx, byte [esp + 0x10]
mov esi, dword [esp + 0x14]
mov byte [esp + 0x1f], ah
mov eax, dword [esp + 0x14c]
movzx edi, dl
mov ebp, 0x80000001
shl ecx, 0x10
shl esi, 8
shl eax, 0x18
or edi, ecx
or edi, esi
or eax, edi
jmp 0x49a349
mov ah, byte [esp + 0x1f]
mov ebx, eax
cmp ebp, 2
jbe 0x499b6e
jmp 0x49b479
mov eax, dword [esp + 0x28]
mov dword [ebp], 0
lea ecx, [esp + 0x124]
mov edx, ebp
mov dword [esp + 0x48], eax
lea eax, [esp + 0x48]
push eax
push dword [esp + 0x1c]
push dword [esp + 0x1c]
call fcn.0049fcf0
add esp, 0xc
movzx eax, word [esp + 0x124]
jmp 0x498a23
mov esi, edx
mov ecx, 0x80000016
mov eax, dword [esp + 0x34]
movzx edx, byte [esp + 0x30]
shl ebp, 0x10
movzx ebx, bl
shl esi, 0x10
shl eax, 0x10
shl edx, 8
or edx, eax
movzx eax, di
or eax, ebp
movzx ebp, word [esp + 0x14]
or ebx, edx
or ebp, esi
cmp ecx, 0x80000016
je 0x49b450
mov dword [esp + 0x84], ecx
mov ecx, 0x17
lea edi, [esp + 0x29c]
lea esi, [esp + 0x188]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x25c], ebx
mov dword [esp + 0x260], eax
mov dword [esp + 0x258], ebp
mov ebp, 0x80000000
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x28]
mov bh, byte [esp + 0x8e]
mov bl, byte [esp + 0x8f]
mov cl, dh
mov dword [esp + 0x6c], eax
mov eax, edx
mov byte [esp + 0x90], bh
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x260]
lea edi, [esp + 0x334]
lea esi, [esp + 0x29c]
mov dword [esp + 0x32c], ecx
mov ecx, dword [esp + 0x258]
mov dword [esp + 0x330], ecx
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov byte [esp + 0x390], bl
mov byte [esp + 0x47], bl
mov dword [esp + 0x114], eax
movzx ecx, byte [esp + 0x90]
movzx esi, word [esp + 0xc]
mov byte [esp + 0x391], cl
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x318], ebp
mov byte [esp + 0x31c], dl
mov byte [esp + 0x31d], cl
mov ecx, eax
shr ecx, 0x10
cmp ebp, 0x80000001
mov dword [esp + 0x14], ecx
mov word [esp + 0x31e], cx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x320], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x324], ecx
mov ecx, dword [esp + 0x25c]
mov dword [esp + 0x328], ecx
mov ecx, dword [esp + 0x20]
mov word [esp + 0x394], cx
mov word [esp + 0x396], si
jne 0x49a449
mov ebp, dword [esp + 4]
shr eax, 0x18
cmp dl, 2
je 0x49b348
cmp byte [ebp + 0x247], 1
mov ecx, dword [esp + 0x14]
jne 0x49a5b8
test cl, cl
jne 0x49a5b8
mov edi, dword [esp + 0x138]
mov byte [ebp + 0x24a], 1
jmp 0x49a613
mov ecx, 0x20
lea edi, [esp + 0x188]
lea esi, [esp + 0x318]
rep movsd dword es:[edi], dword [esi]
mov ebp, dword [esp + 4]
cmp byte [ebp + 0x247], 1
jne 0x49a4d3
cmp word [ebp + 0x238], 5
je 0x49a4d3
mov eax, dword [esp + 0x188]
mov ecx, 0x7fffffff
add eax, ecx
cmp eax, 5
setb cl
cmp eax, 1
setne al
test cl, al
jne 0x49a4d3
movzx eax, byte [esp + 0x200]
cmp byte [ebp + 0x244], al
jne 0x49a4d3
movzx eax, byte [ebp + 0x241]
mov edi, dword [esp + 0x138]
test al, al
je 0x49a697
dec al
mov ecx, ebp
mov byte [ebp + 0x241], al
call fcn.0044f900
mov al, 0x16
mov dword [esp + 0xc], eax
jmp 0x49a6f4
mov eax, dword [esp + 0x280]
mov dword [esp + 0x228], ebp
lea ebx, [esp + 0x94]
mov ecx, 0x20
lea esi, [esp + 0x318]
mov edi, ebx
mov dword [esp + 0x22c], eax
mov eax, dword [esp + 0x284]
mov dword [esp + 0x230], eax
rep movsd dword es:[edi], dword [esi]
push ebx
lea eax, [esp + 0x22c]
push eax
push dword [esp + 0x2c]
lea eax, [esp + 0x2a8]
push eax
mov eax, dword [esp + 0x50]
call dword [eax + 0xc]
add esp, 0x10
movzx ecx, byte [esp + 0x29c]
cmp ecx, 2
jae 0x49a628
movzx eax, byte [esp + 0x29d]
mov edi, dword [esp + 0x2a8]
mov esi, ecx
mov ecx, ebp
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x10001
mov edx, ebx
mov byte [esp + 0x1e], al
movzx eax, word [esp + 0x29e]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x2a0]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x40], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
sete al
push eax
call fcn.0044f0f0
mov ecx, esi
add esp, 4
mov byte [ebp + 0x249], 1
jmp 0x49a70b
mov edi, dword [esp + 0x138]
test dl, dl
mov byte [esp + 0x189], cl
mov byte [esp + 0x18a], al
mov byte [esp + 0x188], 0xa
jne 0x49b4cb
movzx eax, byte [ebp + 0x240]
test al, al
je 0x49b500
dec al
mov byte [ebp + 0x240], al
cmp word [ebp + 0x238], 5
jne 0x49a607
cmp cl, 0x17
jne 0x49b5e7
lea ecx, [esp + 0x188]
call fcn.0043da20
lea ecx, [esp + 0x318]
call fcn.0049fe00
mov eax, dword [esp + 0x58]
jmp 0x49a718
cmp ecx, 0x16
jne 0x49a659
mov eax, dword [esp + 0x2a4]
push dword [esp + 0x2a0]
mov esi, ecx
call dword [eax + 0x20]
mov ecx, esi
add esp, 4
mov edi, dword [esp + 0x138]
mov dword [esp + 0x24], eax
mov dword [esp + 0x40], edx
jmp 0x49a704
movzx eax, byte [esp + 0x29d]
mov esi, dword [esp + 0x2a0]
mov edx, dword [esp + 0x2a4]
mov edi, dword [esp + 0x2a8]
lea ebx, [esp + 0x94]
mov byte [esp + 0x1e], al
movzx eax, word [esp + 0x29e]
mov dword [esp + 0x24], esi
mov dword [esp + 0x40], edx
mov dword [esp + 0x58], eax
jmp 0x49a70b
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
test eax, eax
je 0x49a6aa
push dword [esp + 0x24]
call eax
add esp, 4
mov eax, dword [esp + 0x40]
cmp dword [eax + 4], 0
je 0x49a6c6
cmp dword [eax + 8], 9
jae 0x49a6d3
mov al, 9
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
jmp 0x49a6e0
mov al, 9
mov byte [esp + 0x1e], 0x40
mov dword [esp + 0xc], eax
jmp 0x49a6f4
mov al, 9
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
mov eax, dword [eax - 4]
mov byte [esp + 0x1e], 0x40
push eax
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [esp + 0x188]
call fcn.0049fe00
mov ecx, dword [esp + 0xc]
lea ebx, [esp + 0x94]
mov eax, dword [esp + 0x58]
cmp cl, 0x16
jne 0x49b399
cmp byte [ebp + 0x24a], 0
jne 0x49b32b
mov dword [esp + 0x138], edi
mov ecx, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x58], eax
mov eax, 0
sub ecx, edi
cmovb ecx, eax
mov eax, dword [ebp + 0x2ac]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x4c], 0
mov esi, eax
sub esi, edi
jbe 0x49a79f
cmp eax, dword [ebp + 0x2a8]
ja 0x49ba2b
mov eax, dword [ebp + 0x2a4]
lea ecx, [eax + edi]
push esi
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [ebp + 0x2ac], esi
mov ecx, 0
mov eax, dword [ebp + 0x2b0]
sub eax, edi
cmovb eax, ecx
mov dword [ebp + 0x2b0], eax
jmp 0x498921
mov esi, eax
jne 0x498921
xor eax, eax
mov dword [ebp + 0x2ac], 0
xor esi, esi
mov dword [ebp + 0x2b0], eax
jmp 0x498921
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x84], edi
movsd xmm1, qword [esp + 0x210]
movsd xmm2, qword [esp + 0x250]
cmp ecx, dword [esp + 0x74]
lea ecx, [esp + 0x92]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x94], edi
mov edi, dword [esp]
movzx ecx, word [esp + 0x38]
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], ebp
mov word [esp + 0xa4], si
mov word [esp + 0xa6], dx
lea edx, [esp + 0x9a]
movlps qword [esp + 0xa8], xmm0
movq xmm0, qword [esp + 0x208]
mov word [edx + 0x16], cx
movzx ecx, byte [esp + 0x3a]
mov byte [edx + 0x18], cl
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xb3], ecx
mov ecx, dword [esp + 0x160]
mov dword [esp + 0xb7], ecx
movzx ecx, byte [esp + 0x2c]
mov byte [esp + 0xbb], cl
movsd qword [edx + 0x2a], xmm1
mov ecx, dword [esp + 0x13c]
movsd xmm1, qword [esp + 0x248]
movq qword [edx + 0x22], xmm0
mov dword [esp + 0xcc], ecx
movsd qword [edx + 0x5e], xmm2
movsd qword [edx + 0x56], xmm1
movsd xmm2, qword [esp + 0x240]
movsd xmm1, qword [esp + 0x238]
movsd qword [edx + 0x4e], xmm2
movsd qword [edx + 0x46], xmm1
movsd xmm2, qword [esp + 0x228]
movq xmm1, qword [esp + 0x230]
movq qword [edx + 0x3e], xmm1
movsd qword [edx + 0x36], xmm2
jae 0x49ab91
lea ecx, [esp + 0x94]
call fcn.0044e4f0
mov ax, 0x17
mov edi, 0x733c77
mov bl, 0xf
xor edx, edx
mov ecx, 0x733c77
mov dword [esp + 0x84], 0x80000016
mov dword [esp + 0x14], eax
jmp 0x49abdb
mov ecx, ebx
mov dword [esp], edi
lea edi, [esp + 0x188]
lea esi, [esp + 0xa4]
mov edx, ebp
shr ecx, 0x10
shr edx, 0x10
mov dword [esp + 0x34], ecx
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
mov byte [esp + 0x8f], al
mov al, bh
mov dword [esp + 0x14], ecx
mov ecx, dword [esp]
mov dword [esp + 0x30], eax
movzx eax, byte [esp + 0x3c]
mov edi, ecx
mov byte [esp + 0x8e], al
shr ecx, 0x10
mov esi, edx
mov ebp, ecx
mov ecx, dword [esp + 0x84]
jmp 0x49a2b6
mov edx, dword [esp + 0x288]
mov byte [esp + 0x28c], cl
lea esi, [esp + 0x28d]
movzx ecx, byte [edx + 2]
mov byte [esi + 2], cl
movzx ecx, word [edx]
lea edx, [esp + 0x28c]
mov word [esi], cx
lea ecx, [esp + 0x94]
mov dword [esp + 0x290], edi
mov dword [esp + 0x294], ebx
mov dword [esp + 0x298], eax
call fcn.0049d4f0
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x49ae7e
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x264]
mov eax, dword [edi]
test eax, eax
je 0x49adbf
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x49ae87
cmp dword [edi + 8], 9
jb 0x49add2
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49ae87
mov eax, dword [esp + 0x28]
mov word [esp + 0x124], 0x2a09
mov dword [esp + 0x48], eax
mov ebp, dword [esp + 4]
mov dword [esp + 0x120], 1
lea edx, [esp + 0x124]
lea ecx, [esp + 0x94]
movsd xmm0, qword [edx]
movsd xmm1, qword [edx + 8]
movsd qword [esp + 0x300], xmm1
movsd qword [esp + 0x2f8], xmm0
call fcn.0049d4f0
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x49aedd
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x264]
mov eax, dword [edi]
test eax, eax
je 0x49ae5a
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x49aee6
cmp dword [edi + 8], 9
jb 0x49ae6d
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49aee6
push eax
call fcn.0049dc70
add esp, 4
movsd xmm1, qword [esp + 0x9c]
mov eax, dword [esp + 0x7c]
movq xmm0, qword [esp + 0x94]
movsd xmm2, qword [esp + 0x28c]
movsd qword [eax + 8], xmm1
movq xmm1, qword [esp + 0x294]
movq qword [eax], xmm0
movsd qword [esp + 0x178], xmm2
movq qword [esp + 0x180], xmm1
cmp byte [esp + 0x178], 0x16
je 0x49afd2
jmp 0x49b909
push eax
call fcn.0049dc70
add esp, 4
movsd xmm0, qword [esp + 0x94]
mov eax, dword [esp + 0x7c]
movsd xmm1, qword [esp + 0x9c]
mov esi, dword [esp + 0x4c]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [ebp + 0x2ac]
mov edi, eax
sub edi, esi
jbe 0x49af4d
cmp eax, dword [ebp + 0x2a8]
ja 0x49ba2b
mov eax, dword [ebp + 0x2a4]
lea ecx, [eax + esi]
push edi
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [ebp + 0x2ac], edi
mov ecx, 0
mov eax, dword [ebp + 0x2b0]
sub eax, esi
cmovb eax, ecx
jmp 0x49af5b
jne 0x49af61
mov dword [ebp + 0x2ac], 0
xor eax, eax
mov dword [ebp + 0x2b0], eax
movq xmm0, qword [esp + 0x2f8]
movq xmm1, qword [esp + 0x300]
mov eax, dword [esp + 0x40]
movq qword [esp + 0x180], xmm1
movq qword [esp + 0x178], xmm0
mov eax, dword [eax]
test eax, eax
je 0x49af98
push dword [esp + 0x24]
call eax
add esp, 4
mov eax, dword [esp + 0x40]
cmp dword [eax + 4], 0
je 0x49afc4
cmp dword [eax + 8], 9
jae 0x49afae
mov eax, dword [esp + 0x24]
jmp 0x49afb5
mov eax, dword [esp + 0x24]
mov eax, dword [eax - 4]
push eax
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [esp + 0x178], 0x16
jne 0x49b909
test byte [esp + 0x91], 1
jne 0x49b8cf
movzx ecx, byte [ebp + 0x246]
mov bh, byte [ebp + 0x247]
mov eax, dword [ebp + 0x64]
mov edi, dword [esp + 0x174]
mov bl, cl
and cl, bh
test eax, eax
setne dl
test cl, dl
lea ecx, [esp + 0x94]
jne 0x4984a4
test bl, bl
je 0x49b01c
test bh, 1
jne 0x49b8cf
test byte [esp + 0x140], 1
je 0x4984a4
jmp 0x49ba19
cmp eax, 1
jne 0x49b0b1
lea ecx, [esp + 0x9a]
mov eax, dword [esp + 0x28]
mov ebp, dword [esp + 4]
movsd xmm1, qword [ecx + 6]
movsd xmm0, qword [ecx]
lea ecx, [esp + 0x124]
mov dword [esp + 0x48], eax
movzx eax, word [esp + 0x98]
mov edx, ebp
movsd qword [esp + 0x18e], xmm1
movsd qword [esp + 0x188], xmm0
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
mov word [esp + 0x318], ax
lea eax, [esp + 0x31a]
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
push dword [esp + 0x40]
push dword [esp + 0x28]
lea eax, [esp + 0x320]
jmp 0x49b2e1
mov eax, dword [esp + 0x28]
mov ebp, dword [esp + 4]
mov dword [esp + 0x48], eax
mov esi, dword [esp + 0x4c]
mov eax, dword [ebp + 0x2ac]
mov edi, dword [esp + 0x48]
mov ebx, eax
sub ebx, esi
mov dword [ebp + 0x2b0], edi
jbe 0x49b10d
cmp eax, dword [ebp + 0x2a8]
ja 0x49ba2b
mov eax, dword [ebp + 0x2a4]
lea ecx, [eax + esi]
push ebx
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
sub edi, esi
mov eax, 0
mov dword [ebp + 0x2ac], ebx
cmovb edi, eax
mov eax, dword [esp + 0x7c]
jmp 0x49b11f
mov eax, dword [esp + 0x7c]
jne 0x49b125
mov dword [ebp + 0x2ac], 0
xor edi, edi
mov dword [ebp + 0x2b0], edi
cmp byte [eax], 0x16
jne 0x49b162
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x264]
mov eax, dword [edi]
test eax, eax
je 0x49b142
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x49b16b
cmp dword [edi + 8], 9
jb 0x49b151
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49b16b
push eax
call fcn.0049dc70
add esp, 4
mov eax, dword [esp + 0x24]
mov byte [ebp + 0x260], 0x16
mov edx, 0
mov esi, 0
mov edi, 0
mov dword [ebp + 0x264], eax
mov eax, dword [esp + 0x40]
mov dword [ebp + 0x268], eax
xor eax, eax
mov ecx, dword [ebp + 0x64]
test ecx, ecx
je 0x49b1c4
mov esi, dword [ebp + 0x58]
mov edx, dword [ebp + 0x60]
mov eax, 0
cmp edx, esi
mov edi, esi
mov ebx, esi
cmovb edi, eax
sub edx, edi
mov edi, ecx
sub ebx, edx
sub edi, ebx
ja 0x49b1c2
add ecx, edx
xor edi, edi
mov esi, ecx
xor eax, eax
mov ecx, dword [ebp + 0x5c]
lea edx, [edx + edx*2]
lea esi, [esi + esi*2]
lea edi, [edi + edi*2]
lea edx, [ecx + edx*4]
lea esi, [ecx + esi*4]
lea edi, [ecx + edi*4]
jmp 0x49b1f6
mov ebp, edi
mov edi, esi
mov ebx, ecx
mov ecx, edx
mov esi, ebp
mov ebp, dword [esp + 4]
mov edx, ebx
add eax, dword [edx + 8]
add edx, 0xc
cmp edx, esi
jne 0x49b1f0
test ecx, ecx
je 0x49b202
cmp ecx, edi
jne 0x49b1e0
mov edx, dword [ebp + 0x4c]
xor ecx, ecx
mov esi, 0
mov edi, 0
mov ebx, 0
mov dword [esp + 0x14], eax
test edx, edx
je 0x49b246
mov edi, dword [ebp + 0x40]
mov esi, dword [ebp + 0x48]
mov eax, 0
cmp esi, edi
mov ebx, edi
mov ebp, edi
cmovb ebx, eax
sub esi, ebx
mov ebx, edx
sub ebp, esi
sub ebx, ebp
ja 0x49b242
add edx, esi
xor ebx, ebx
mov edi, edx
mov ebp, dword [esp + 4]
mov edx, dword [ebp + 0x44]
lea esi, [esi + esi*2]
lea ebx, [ebx + ebx*2]
lea edi, [edi + edi*2]
lea esi, [edx + esi*4]
lea eax, [edx + edi*4]
lea ebx, [edx + ebx*4]
jmp 0x49b276
mov ebp, edx
mov edx, esi
mov edi, ebx
mov ebx, eax
mov esi, ebp
mov ebp, dword [esp + 4]
mov eax, edi
add ecx, dword [esi + 8]
add esi, 0xc
cmp esi, eax
jne 0x49b270
test edx, edx
je 0x49b282
cmp edx, ebx
jne 0x49b260
mov edx, dword [esp + 0x14]
movzx eax, byte [ebp + 0x24a]
mov dword [esp + 0x17c], edx
mov dword [esp + 0x180], ecx
mov byte [esp + 0x184], al
mov byte [esp + 0x178], 0x16
test byte [esp + 0x91], 1
je 0x49afe0
jmp 0x49b8cf
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x124]
mov edx, ebp
mov dword [esp + 0x48], eax
push dword [esp + 0x40]
push dword [esp + 0x28]
lea eax, [esp + 0x194]
push eax
call fcn.0049fc20
add esp, 0xc
jmp 0x49adfc
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x9b]
movq xmm0, qword [esp + 0x94]
lea ecx, [esp + 0x124]
mov dword [ecx + 0xc], edx
movq qword [ecx + 5], xmm0
mov byte [esp + 0x124], 3
mov dword [esp + 0x48], eax
mov byte [esp + 0x128], 1
jmp 0x49adfc
mov eax, dword [ebp + 0x2ac]
cmp eax, dword [ebp + 0x2a8]
ja 0x49ba2b
mov esi, dword [esp + 0x4c]
add esi, eax
jmp 0x49b0c7
mov dword [esp + 0x5c], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0xd0001
mov ecx, ebp
lea edx, [esp + 0x94]
sete al
push eax
call fcn.0044f0f0
add esp, 4
mov al, 0xa
mov byte [ebp + 0x249], 1
mov dword [esp + 0xc], eax
jmp 0x49b521
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x24]
jmp 0x49b72e
xor eax, eax
cmp byte [ebp + 0x31], 2
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x10001
mov ecx, ebp
lea edx, [esp + 0x94]
sete al
push eax
call fcn.0044f0f0
lea ebx, [esp + 0x98]
add esp, 4
mov byte [ebp + 0x249], 1
mov al, 9
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x80]
mov byte [esp + 0x1e], 0x15
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x5c], eax
jmp 0x49b6b7
mov eax, dword [esp + 0x28]
mov word [esp + 0x124], 0x1d09
jmp 0x49adf4
mov ebp, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
mov cl, 3
jmp 0x49b561
mov ebp, 0xa
mov dword [esp + 0x6c], 0x73553f
jmp 0x49b48f
mov dword [esp + 0x6c], eax
mov ecx, ebx
jmp 0x49b561
mov edx, dword [esp + 0x14c]
mov eax, dword [esp + 0x10]
mov ebp, 0x10
mov dword [esp + 0x6c], 0x735614
mov ecx, edx
mov edx, eax
jmp 0x49b48f
mov ecx, dword [esp + 0x14]
mov al, 0xf
mov ebp, 0x13
mov dword [esp + 0x6c], 0x733b8c
mov dword [esp], eax
movzx esi, byte [esp + 0x10]
movzx eax, cl
mov ecx, dword [esp]
movzx ebx, dl
shl eax, 8
shl esi, 0x10
or eax, esi
or ebx, eax
movzx eax, cl
shl ebx, 8
or ebx, eax
jmp 0x49b561
mov ecx, 0xc
mov dword [esp + 0x6c], 0x733bb6
mov ebp, 2
jmp 0x49b552
movzx ecx, word [esp + 0x18a]
mov edi, dword [esp + 0x18c]
mov esi, dword [esp + 0x190]
mov ebp, dword [esp + 0x194]
mov al, 0xa
mov dword [esp + 0xc], eax
mov al, ch
mov dword [esp + 0x5c], ecx
jmp 0x49b666
mov ecx, 2
jmp 0x49b552
lea ecx, [esp + 0x188]
call fcn.0043da20
mov al, 9
mov dword [esp + 0xc], eax
mov al, 0x41
mov dword [esp + 0x14], eax
movzx eax, byte [esp + 0x1f]
mov dword [esp + 0x5c], eax
movzx eax, byte [esp + 0x57]
mov edi, dword [esp + 0x134]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x15c]
jmp 0x49b666
mov ecx, 0xf
mov ebp, 0x17
mov dword [esp + 0x6c], 0x733b9f
mov ebx, dword [esp + 0x114]
and ebx, 0xffffff00
or ebx, ecx
mov edi, dword [esp + 4]
mov esi, ebx
movzx eax, cl
lea edx, [esp + 0x94]
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x114], ebx
mov dword [esp + 0x98], 0x100001
and esi, 0xffffff00
or esi, eax
xor eax, eax
cmp byte [edi + 0x31], 2
mov ecx, edi
sete al
push eax
call fcn.0044f0f0
add esp, 4
mov al, 3
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x80]
mov byte [edi + 0x249], 1
mov dword [esp + 0x84], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], eax
jmp 0x49b6a2
movzx eax, word [esp + 0x18a]
mov edi, dword [esp + 0x18c]
mov esi, dword [esp + 0x194]
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x100001
mov ecx, ebp
lea edx, [esp + 0x94]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x190]
mov dword [esp + 0x80], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
sete al
push eax
call fcn.0044f0f0
add esp, 4
mov al, 0xa
mov byte [ebp + 0x249], 1
mov ebp, esi
mov esi, dword [esp + 0x80]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5c]
mov al, ah
mov ebx, dword [esp + 0x5c]
mov byte [esp + 0x57], al
movzx eax, al
shl eax, 8
movzx ecx, bl
or ecx, eax
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x318]
call fcn.0049fe00
mov byte [esp + 0x1f], bl
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x5c], esi
mov edx, esi
mov esi, edi
mov ecx, edi
mov dword [esp + 0x15c], ebp
mov edi, ebp
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov byte [esp + 0x1e], bl
lea ebx, [esp + 0x94]
mov eax, dword [eax]
test eax, eax
je 0x49b6e1
push dword [esp + 0x24]
mov dword [esp + 0x18], esi
mov esi, edi
mov ebx, ecx
mov edi, edx
call eax
mov edx, edi
mov edi, esi
mov esi, dword [esp + 0x18]
mov ecx, ebx
lea ebx, [esp + 0x98]
add esp, 4
mov eax, dword [esp + 0x40]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x80], edx
cmp dword [eax + 4], 0
je 0x49b722
cmp dword [eax + 8], 9
jae 0x49b705
mov eax, dword [esp + 0x24]
jmp 0x49b70c
mov eax, dword [esp + 0x24]
mov eax, dword [eax - 4]
push eax
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ebx, [esp + 0x94]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x5c]
mov byte [esp + 0x218], cl
movzx ecx, byte [esp + 0x1e]
mov byte [esp + 0x219], cl
mov word [esp + 0x21a], ax
mov dword [esp + 0x21c], esi
mov dword [esp + 0x220], edx
mov ecx, ebx
lea edx, [esp + 0x218]
mov dword [esp + 0x224], edi
call fcn.0049d4f0
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x49b7ad
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x264]
mov eax, dword [edi]
test eax, eax
je 0x49b78d
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x49b7b6
cmp dword [edi + 8], 9
jb 0x49b79c
mov esi, dword [esi - 4]
push esi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49b7b6
push eax
call fcn.0049dc70
add esp, 4
movsd xmm0, qword [esp + 0x94]
mov eax, dword [esp + 0x7c]
movsd xmm1, qword [esp + 0x9c]
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x150]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
call fcn.0043d770
movq xmm0, qword [esp + 0x218]
movq xmm1, qword [esp + 0x220]
movq qword [esp + 0x180], xmm1
movq qword [esp + 0x178], xmm0
cmp byte [esp + 0x178], 0x16
je 0x49afd2
jmp 0x49b909
mov eax, dword [esp + 0x28]
mov word [esp + 0x124], 0x3e09
jmp 0x49adf4
movzx ecx, byte [esp + 0x97]
mov edx, dword [esp + 0x50]
movzx edi, word [esp + 0x95]
mov esi, dword [esp + 0x98]
mov byte [edx + 7], cl
mov word [edx + 5], di
mov byte [edx + 4], al
mov eax, 1
mov dword [edx + 8], esi
mov dword [edx], eax
jmp 0x49ba0e
mov ecx, dword [esp + 0x3cc]
mov eax, dword [ecx + 4]
push dword [ecx]
lea ecx, [esp + 0x98]
push ecx
call dword [eax + 0x38]
add esp, 8
cmp byte [esp + 0x94], 4
jne 0x49b8a1
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x118]
mov dword [ecx + 4], eax
xor eax, eax
mov dword [ecx + 8], esi
mov dword [ecx], eax
jmp 0x49ba0e
movsd xmm0, qword [esp + 0x94]
mov ecx, dword [esp + 0x50]
mov eax, 1
movsd qword [ecx + 4], xmm0
mov dword [ecx], eax
jmp 0x49ba0e
mov eax, dword [esp + 0x318]
mov ecx, dword [esp + 0x31c]
jmp 0x49b8f4
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x88]
jmp 0x49ba02
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x50]
mov dword [edx + 8], ecx
mov dword [edx + 4], eax
mov dword [edx], 1
jmp 0x49ba0e
mov eax, dword [esp + 0x3cc]
mov edx, dword [esp + 0x174]
lea ecx, [esp + 0x188]
mov esi, dword [eax + 4]
mov edi, dword [eax]
push esi
push edi
call fcn.00450620
add esp, 8
push edi
lea eax, [esp + 0x98]
push eax
call dword [esi + 0x38]
add esp, 8
mov esi, dword [esp + 0x50]
lea edx, [esp + 0x178]
lea ecx, [esi + 4]
call fcn.004a07e0
cmp byte [esp + 0x94], 3
mov dword [esi], 1
jne 0x49b9a4
mov esi, dword [esp + 0x98]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x49b977
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x49b995
cmp dword [ebx + 8], 9
jb 0x49b986
mov edi, dword [edi - 4]
push edi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [esp + 0x188], 3
jne 0x49ba0e
mov esi, dword [esp + 0x18c]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x49b9c6
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x49b9e4
cmp dword [ebx + 8], 9
jb 0x49b9d5
mov edi, dword [edi - 4]
push edi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
push 0
push dword [0x776180]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49ba0e
mov edx, eax
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x118]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax], 0
add esp, 0x3b8
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x50]
mov word [eax + 4], 0x2501
mov dword [eax], 1
jmp 0x49ba0e
ud2