Function at 0x49ce90
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x558936
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x6397d4]
xor eax, esp
mov dword [esp + 0x2a4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6397d4]
xor eax, esp
push eax
lea eax, [esp + 0x2bc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2d0]
mov esi, dword [esp + 0x2cc]
mov ebx, dword [esp + 0x2d4]
mov edi, dword [esp + 0x2dc]
mov ebp, ecx
mov ecx, dword [esp + 0x2d8]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x30], ebp
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x34], edi
call fcn.0041fed0
test ebx, ebx
mov dword [esp + 0x2c4], 0
je 0x49cf54
cmp dword [ebx], 0
je 0x49cf54
test edi, edi
je 0x49cf3d
cmp dword [edi], 0
je 0x49cf3d
mov eax, dword [esp + 0x1c]
add eax, 4
push eax
push str._QQ__s_
jmp 0x49cf89
mov eax, dword [esp + 0x1c]
add eax, 4
push eax
push str.__s_
lea eax, [esp + 0x90]
push eax
jmp 0x49cf91
test edi, edi
je 0x49cf7c
cmp dword [edi], 0
je 0x49cf7c
mov edi, dword [esp + 0x1c]
mov ebx, dword [sym.imp.MSVCR80.dll_sprintf]
lea eax, [edi + 4]
push eax
lea ecx, [esp + 0x8c]
push 0x56c1e4
push ecx
call ebx
jmp 0x49cf9d
mov eax, dword [esp + 0x1c]
add eax, 4
push eax
push 0x564718
lea edx, [esp + 0x90]
push edx
mov ebx, dword [sym.imp.MSVCR80.dll_sprintf]
call ebx
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add esp, 0xc
test eax, eax
je 0x49cfb9
cmp dword [eax + 4], 0
je 0x49cfb9
push 6
push 0
push 0x55fc55
jmp 0x49cff2
cmp word [edi + 0xca], 0
push 6
push 0
je 0x49cfd6
push 0xffff00
lea ecx, [esp + 0x94]
push ecx
jmp 0x49cffa
cmp word [edi + 0x2a], 0x834
jne 0x49cfed
push 0xffff00
lea edx, [esp + 0x94]
push edx
jmp 0x49cffa
push 0xffffff
lea eax, [esp + 0x94]
push eax
mov ecx, esi
call fcn.00432170
push 0
push 0
push 0xffffff
push 0x562815
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x2a]
add eax, 0xfffff7ff
cmp eax, 0x33
ja case.0x49d02f.2050
movzx ecx, byte [eax + 0x49f6fc]
jmp dword [ecx*4 + 0x49f6d0]
movzx edx, word [edi + 0x6c]
push edx
push 0x871
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x86c
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
jmp 0x49d26e
movzx ecx, word [edi + 0x6c]
push ecx
push 0x872
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x86c
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push edx
jmp 0x49d276
movzx eax, word [edi + 0x6c]
push eax
push 0x873
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x86c
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x94]
push ecx
jmp 0x49d276
movzx edx, word [edi + 0x6c]
push edx
push 0x874
jmp 0x49d040
movzx ecx, word [edi + 0x6c]
push ecx
push 0x876
jmp 0x49d06a
movzx eax, word [edi + 0x6c]
push eax
push 0x875
jmp 0x49d09c
movzx edx, word [edi + 0x6c]
push edx
push 0x878
jmp 0x49d040
movzx ecx, word [edi + 0x6c]
push ecx
push 0x877
jmp 0x49d06a
movzx eax, word [edi + 0x6c]
push eax
push 0x87a
jmp 0x49d09c
movzx eax, word [edi + 0x38]
cmp eax, 7
ja case.default.0x49d122
jmp dword [eax*4 + 0x49f730]
push 0x196
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x1bc]
push edx
jmp 0x49d1cd
push 0x197
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x1bc]
push ecx
jmp 0x49d1cd
push 0x198
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x1bc]
push edx
jmp 0x49d1cd
push 0x199
jmp 0x49d1ba
push 0x19a
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x1bc]
push ecx
jmp 0x49d1cd
push 0x19b
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x1bc]
push edx
jmp 0x49d1cd
push 0x196
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x1bc]
push eax
call ebx
add esp, 8
cmp dword [edi], 0xc54d
jne 0x49d1f7
push 0x9f4
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x1bc]
push ecx
call ebx
add esp, 8
cmp dword [edi], 0xc54c
jne 0x49d21c
push 0x9f5
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x1bc]
push edx
call ebx
add esp, 8
movzx eax, word [edi + 0x78]
sub eax, 0
je 0x49d251
sub eax, 1
jne case.0x49d02f.2050
lea eax, [esp + 0x1b8]
push eax
push 0x111
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str.___________s___s
lea ecx, [esp + 0x94]
push ecx
jmp 0x49d276
lea edx, [esp + 0x1b8]
push edx
push 0x110
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str.___________s___s
lea eax, [esp + 0x94]
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0xfafad2
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
fldz
push edi
fstp dword [esp + 0x2c]
push esi
mov ecx, ebp
call fcn.004937b0
movzx eax, word [edi + 0x6a]
sub eax, 1
je 0x49d2c0
sub eax, 1
jne 0x49d2e0
push 0
push 0
push 0xf83232
push 0xed
jmp 0x49d2ce
push 0
push 0
push 0xf83232
push 0xec
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x6c]
test ax, ax
je 0x49d344
movzx edx, ax
push edx
push 0xee
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push eax
call ebx
mov ecx, dword [0x648a5c]
mov dx, word [ecx + 0x480]
add esp, 0xc
cmp dx, word [edi + 0x6c]
push 0
push 0
jae 0x49d330
push 0xf83232
lea eax, [esp + 0x94]
push eax
jmp 0x49d33d
push 0xffffff
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
push 0
push 0
push 0xffffff
push str.
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x6e]
test ax, ax
je 0x49d3bd
movzx edx, ax
push edx
push 0xef
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push eax
call ebx
mov ecx, dword [0x648a5c]
mov dx, word [ecx + 0x6c4]
add esp, 0xc
cmp dx, word [edi + 0x6e]
push 0
push 0
jae 0x49d3a9
push 0xe61414
lea eax, [esp + 0x94]
push eax
jmp 0x49d3b6
push 0xffffff
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x70]
test ax, ax
je 0x49d421
movzx edx, ax
push edx
push 0xf0
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push eax
call ebx
mov ecx, dword [0x648a5c]
mov dx, word [ecx + 0x6c6]
add esp, 0xc
cmp dx, word [edi + 0x70]
push 0
push 0
jae 0x49d40d
push 0xe61414
lea eax, [esp + 0x94]
push eax
jmp 0x49d41a
push 0xffffff
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x72]
test ax, ax
je 0x49d485
movzx edx, ax
push edx
push 0xf1
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push eax
call ebx
mov ecx, dword [0x648a5c]
mov dx, word [ecx + 0x6c8]
add esp, 0xc
cmp dx, word [edi + 0x72]
push 0
push 0
jae 0x49d471
push 0xe61414
lea eax, [esp + 0x94]
push eax
jmp 0x49d47e
push 0xffffff
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x74]
test ax, ax
je 0x49d4e9
movzx edx, ax
push edx
push 0xf2
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push eax
call ebx
mov ecx, dword [0x648a5c]
mov dx, word [ecx + 0x6ca]
add esp, 0xc
cmp dx, word [edi + 0x74]
push 0
push 0
jae 0x49d4d5
push 0xe61414
lea eax, [esp + 0x94]
push eax
jmp 0x49d4e2
push 0xffffff
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
push 0
push 0
push 0xffffff
push 0x562815
mov ecx, esi
call fcn.00432170
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49d514
movzx eax, word [eax + 8]
test ax, ax
je 0x49d514
movzx ecx, ax
jmp 0x49d516
xor ecx, ecx
movzx eax, word [edi + 0x3a]
test ax, ax
mov ebp, dword [esp + 0x20]
je 0x49d5b7
test ebp, ebp
je 0x49d562
movzx edx, word [ebp + 8]
test dx, dx
je 0x49d562
movzx edx, dx
movzx eax, ax
push edx
add eax, ecx
push eax
push 0x17e
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x94]
push str._s__d___d_
push ecx
call ebx
add esp, 0x14
jmp 0x49d58a
movzx edx, ax
add edx, ecx
push edx
push 0x17e
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push 0x5684c4
push eax
call ebx
add esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49d624
cmp word [eax + 8], 0
je 0x49d624
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
jmp 0x49d677
test ecx, ecx
je 0x49d5f1
test ebp, ebp
je 0x49d62f
movzx eax, word [ebp + 8]
test ax, ax
je 0x49d5f1
movzx eax, ax
push eax
push ecx
push 0x17e
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x94]
push str._s__d___d_
push ecx
call ebx
add esp, 0x14
jmp 0x49d666
test ebp, ebp
je 0x49d62f
movzx eax, word [ebp + 8]
test ax, ax
je 0x49d62f
movzx eax, ax
push eax
push 0x17e
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push str._s___d_
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
jmp 0x49d66f
mov edx, dword [esp + 0x18]
test edx, edx
je 0x49d694
movzx eax, word [edx + 8]
test ax, ax
je 0x49d67e
movzx eax, ax
push eax
push 0x17e
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push str._s__d
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x94]
push edx
mov ecx, esi
call fcn.00432170
mov edx, dword [esp + 0x18]
test edx, edx
je 0x49d694
movzx eax, word [edx + 0xa]
test ax, ax
je 0x49d694
movzx eax, ax
jmp 0x49d696
xor eax, eax
movzx ecx, word [edi + 0x3c]
test cx, cx
je 0x49d733
test ebp, ebp
je 0x49d6de
movzx edx, word [ebp + 0xa]
test dx, dx
je 0x49d6de
movzx ecx, cx
movzx edx, dx
push edx
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push str._s__d___d_
push edx
call ebx
add esp, 0x14
jmp 0x49d706
movzx ecx, cx
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x90]
push 0x5684c4
push edx
call ebx
add esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49d7a0
cmp word [eax + 0xa], 0
je 0x49d7a0
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x94]
push eax
jmp 0x49d7ef
test eax, eax
je 0x49d76d
test ebp, ebp
je 0x49d7ab
movzx ecx, word [ebp + 0xa]
test cx, cx
je 0x49d76d
movzx edx, cx
push edx
push eax
push 0x17f
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x94]
push str._s__d___d_
push eax
call ebx
add esp, 0x14
jmp 0x49d7de
test ebp, ebp
je 0x49d7ab
movzx eax, word [ebp + 0xa]
test ax, ax
je 0x49d7ab
movzx edx, ax
push edx
push 0x17f
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s___d_
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
jmp 0x49d7e7
test edx, edx
je 0x49d80c
movzx eax, word [edx + 0xa]
test ax, ax
je 0x49d7f6
movzx edx, ax
push edx
push 0x17f
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s__d
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
mov edx, dword [esp + 0x18]
test edx, edx
je 0x49d80c
movzx eax, word [edx + 0xc]
test ax, ax
je 0x49d80c
movzx eax, ax
jmp 0x49d80e
xor eax, eax
movzx ecx, word [edi + 0x3e]
test cx, cx
je 0x49d8ab
test ebp, ebp
je 0x49d856
movzx edx, word [ebp + 0xc]
test dx, dx
je 0x49d856
movzx ecx, cx
movzx edx, dx
push edx
add ecx, eax
push ecx
push 0x180
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push str._s__d___d_
push edx
call ebx
add esp, 0x14
jmp 0x49d87e
movzx ecx, cx
add ecx, eax
push ecx
push 0x180
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x90]
push 0x5684c4
push edx
call ebx
add esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49d918
cmp word [eax + 0xc], 0
je 0x49d918
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x94]
push eax
jmp 0x49d967
test eax, eax
je 0x49d8e5
test ebp, ebp
je 0x49d923
movzx ecx, word [ebp + 0xc]
test cx, cx
je 0x49d8e5
movzx edx, cx
push edx
push eax
push 0x180
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x94]
push str._s__d___d_
push eax
call ebx
add esp, 0x14
jmp 0x49d956
test ebp, ebp
je 0x49d923
movzx eax, word [ebp + 0xc]
test ax, ax
je 0x49d923
movzx edx, ax
push edx
push 0x180
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s___d_
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
jmp 0x49d95f
test edx, edx
je 0x49d984
movzx eax, word [edx + 0xc]
test ax, ax
je 0x49d96e
movzx edx, ax
push edx
push 0x180
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s__d
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
mov edx, dword [esp + 0x18]
test edx, edx
je 0x49d984
movzx eax, word [edx + 0xe]
test ax, ax
je 0x49d984
movzx eax, ax
jmp 0x49d986
xor eax, eax
movzx ecx, word [edi + 0x40]
test cx, cx
je 0x49da23
test ebp, ebp
je 0x49d9ce
movzx edx, word [ebp + 0xe]
test dx, dx
je 0x49d9ce
movzx ecx, cx
movzx edx, dx
push edx
add ecx, eax
push ecx
push 0x181
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push str._s__d___d_
push edx
call ebx
add esp, 0x14
jmp 0x49d9f6
movzx ecx, cx
add ecx, eax
push ecx
push 0x181
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x90]
push 0x5684c4
push edx
call ebx
add esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49da90
cmp word [eax + 0xe], 0
je 0x49da90
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x94]
push eax
jmp 0x49dadf
test eax, eax
je 0x49da5d
test ebp, ebp
je 0x49da9b
movzx ecx, word [ebp + 0xe]
test cx, cx
je 0x49da5d
movzx edx, cx
push edx
push eax
push 0x181
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x94]
push str._s__d___d_
push eax
call ebx
add esp, 0x14
jmp 0x49dace
test ebp, ebp
je 0x49da9b
movzx eax, word [ebp + 0xe]
test ax, ax
je 0x49da9b
movzx edx, ax
push edx
push 0x181
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s___d_
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
jmp 0x49dad7
test edx, edx
je 0x49daf5
movzx eax, word [edx + 0xe]
test ax, ax
je 0x49dae6
movzx edx, ax
push edx
push 0x181
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s__d
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
mov edx, dword [esp + 0x18]
test edx, edx
je 0x49daf5
mov eax, dword [edx + 0x10]
test eax, eax
jne 0x49daf7
xor eax, eax
mov ecx, dword [edi + 0x44]
test ecx, ecx
je 0x49db8c
test ebp, ebp
je 0x49db35
mov edx, dword [ebp + 0x10]
test edx, edx
je 0x49db35
push edx
add ecx, eax
push ecx
push 0x182
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push str._s__d___d_
push edx
call ebx
add esp, 0x14
jmp 0x49db5a
add ecx, eax
push ecx
push 0x182
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push 0x5684c4
push eax
call ebx
add esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49db7e
cmp dword [eax + 0x10], 0
je 0x49db7e
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
jmp 0x49dc59
push 0
push 0
push 0x87cefa
jmp 0x49dc51
test eax, eax
je 0x49dbd9
test ebp, ebp
je 0x49dc1a
mov ecx, dword [ebp + 0x10]
test ecx, ecx
je 0x49dbd9
push ecx
push eax
push 0x182
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x94]
push str._s__d___d_
push eax
call ebx
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
jmp 0x49dc59
test ebp, ebp
je 0x49dc1a
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x49dc1a
push eax
push 0x182
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x90]
push str._s___d_
push edx
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
lea eax, [esp + 0x94]
push eax
jmp 0x49dc59
test edx, edx
je 0x49dc76
mov eax, dword [edx + 0x10]
test eax, eax
je 0x49dc60
push eax
push 0x182
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push str._s__d
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x94]
push edx
mov ecx, esi
call fcn.00432170
mov edx, dword [esp + 0x18]
test edx, edx
je 0x49dc76
movzx eax, word [edx + 0x14]
test ax, ax
je 0x49dc76
movzx eax, ax
jmp 0x49dc78
xor eax, eax
movzx ecx, word [edi + 0x4c]
test cx, cx
je 0x49dd15
test ebp, ebp
je 0x49dcc0
movzx edx, word [ebp + 0x14]
test dx, dx
je 0x49dcc0
movzx ecx, cx
movzx edx, dx
push edx
add ecx, eax
push ecx
push 0x183
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push str._s__d___d_
push edx
call ebx
add esp, 0x14
jmp 0x49dce8
movzx ecx, cx
add ecx, eax
push ecx
push 0x183
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x90]
push 0x5684c4
push edx
call ebx
add esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49dd82
cmp word [eax + 0x14], 0
je 0x49dd82
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x94]
push eax
jmp 0x49ddd1
test eax, eax
je 0x49dd4f
test ebp, ebp
je 0x49dd8d
movzx ecx, word [ebp + 0x14]
test cx, cx
je 0x49dd4f
movzx edx, cx
push edx
push eax
push 0x183
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x94]
push str._s__d___d_
push eax
call ebx
add esp, 0x14
jmp 0x49ddc0
test ebp, ebp
je 0x49dd8d
movzx eax, word [ebp + 0x14]
test ax, ax
je 0x49dd8d
movzx edx, ax
push edx
push 0x183
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s___d_
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
jmp 0x49ddc9
test edx, edx
je 0x49dde7
movzx eax, word [edx + 0x14]
test ax, ax
je 0x49ddd8
movzx edx, ax
push edx
push 0x183
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s__d
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00432170
mov edx, dword [esp + 0x18]
test edx, edx
je 0x49dde7
mov eax, dword [edx + 0x16]
test eax, eax
jne 0x49dde9
xor eax, eax
mov ecx, dword [edi + 0x48]
test ecx, ecx
je 0x49de7e
test ebp, ebp
je 0x49de27
mov edx, dword [ebp + 0x16]
test edx, edx
je 0x49de27
push edx
add ecx, eax
push ecx
push 0x184
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push str._s__d___d_
push edx
call ebx
add esp, 0x14
jmp 0x49de4c
add ecx, eax
push ecx
push 0x184
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push 0x5684c4
push eax
call ebx
add esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49de70
cmp dword [eax + 0x16], 0
je 0x49de70
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
jmp 0x49df4b
push 0
push 0
push 0x87cefa
jmp 0x49df43
test eax, eax
je 0x49decb
test ebp, ebp
je 0x49df0c
mov ecx, dword [ebp + 0x16]
test ecx, ecx
je 0x49decb
push ecx
push eax
push 0x184
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x94]
push str._s__d___d_
push eax
call ebx
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
jmp 0x49df4b
test ebp, ebp
je 0x49df0c
mov eax, dword [ebp + 0x16]
test eax, eax
je 0x49df0c
push eax
push 0x184
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x90]
push str._s___d_
push edx
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
lea eax, [esp + 0x94]
push eax
jmp 0x49df4b
test edx, edx
je 0x49df52
mov eax, dword [edx + 0x16]
test eax, eax
je 0x49df52
push eax
push 0x184
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push str._s__d
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x94]
push edx
mov ecx, esi
call fcn.00432170
fld qword [0x563b10]
mov edi, dword [esp + 0x14]
fldz
mov ebp, dword [esp + 0x18]
mov esi, 1
jmp 0x49df71
fld qword [0x563b10]
fxch st(1)
movzx eax, si
test ax, ax
jne 0x49df7f
fst dword [esp + 0x2c]
jmp 0x49df8e
mov edx, dword [esp + 0x1c]
movzx ecx, ax
fld dword [edx + ecx*4 + 0x4c]
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
test ecx, ecx
fmul st(2)
fstp dword [esp + 0x2c]
je 0x49dfc0
test ax, ax
jne 0x49dfab
fst dword [esp + 0x28]
jmp 0x49dfb6
movzx edx, ax
fld dword [ecx + edx*4 + 0x16]
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fmul st(2)
fstp dword [esp + 0x28]
test ebp, ebp
je 0x49dff4
test ax, ax
jne 0x49dfdb
fst dword [esp + 0x24]
fld dword [esp + 0x24]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x24]
jmp 0x49dffa
movzx eax, ax
fld dword [ebp + eax*4 + 0x1a]
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x24]
jmp 0x49dffa
fstp st(1)
fst dword [esp + 0x24]
fld dword [esp + 0x2c]
fld st(0)
call fcn.00551860
test eax, eax
je 0x49e0ac
fstp st(1)
fld dword [esp + 0x28]
call fcn.00551860
fadd dword [esp + 0x24]
test eax, eax
je 0x49e04d
push eax
call fcn.00551860
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push str._s__d_____d___
push edx
call ebx
add esp, 0x14
jmp 0x49e077
call fcn.00551860
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push str._s__d__
push ecx
call ebx
add esp, 0x10
test ebp, ebp
je 0x49e096
fldz
fcomp dword [esp + 0x24]
fnstsw ax
test ah, 0x44
jnp 0x49e096
push 0
push 0
push 0x55fc55
jmp 0x49e193
push 0
push 0
push 0x87cefa
lea eax, [esp + 0x94]
push eax
jmp 0x49e19b
fstp st(0)
fld dword [esp + 0x28]
call fcn.00551860
mov ecx, eax
test ecx, ecx
je 0x49e11c
fld dword [esp + 0x24]
push ecx
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x49e0f9
call fcn.00551860
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x94]
push str._s__d_____d___
push edx
call ebx
add esp, 0x14
jmp 0x49e159
lea eax, [esi + 0x108]
fstp st(0)
push eax
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s___d___
lea ecx, [esp + 0x94]
push ecx
jmp 0x49e154
fld st(0)
fld dword [esp + 0x24]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x49e17b
fstp st(1)
call fcn.00551860
push eax
lea edx, [esi + 0x108]
push edx
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s__d__
lea eax, [esp + 0x94]
push eax
call ebx
add esp, 0x10
fldz
fcom dword [esp + 0x24]
fnstsw ax
test ah, 0x44
jnp 0x49e17d
push 0
fstp st(0)
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
jmp 0x49e19b
fstp st(0)
fcom dword [esp + 0x28]
fnstsw ax
test ah, 0x44
jnp 0x49e1a4
push 0
fstp st(0)
push 0
push 0x87cefa
lea edx, [esp + 0x94]
push edx
mov ecx, edi
call fcn.00432170
fldz
add esi, 1
cmp esi, 5
jle 0x49df69
test ebp, ebp
je 0x49e1c2
movzx eax, word [ebp + 0x1a]
test ax, ax
je 0x49e1c2
movzx edi, ax
jmp 0x49e1c4
xor edi, edi
mov ecx, dword [esp + 0x1c]
movzx eax, word [ecx + 0x80]
test ax, ax
mov ebp, 0x80a
jne 0x49e1e6
cmp word [ecx + 0x82], ax
je 0x49e42d
cmp word [ecx + 0x2a], bp
fstp st(0)
mov esi, dword [esp + 0x20]
je 0x49e339
movzx edx, word [ecx + 0x82]
cmp ax, dx
jne 0x49e263
test esi, esi
je 0x49e236
movzx ecx, word [esi + 0x32]
test cx, cx
je 0x49e236
movzx edx, ax
movzx ecx, cx
movzx eax, di
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x56c180
jmp 0x49e2d3
movzx edx, ax
movzx eax, di
add edx, eax
push edx
push 0x185
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push 0x5684b0
push ecx
call ebx
add esp, 0x10
jmp 0x49e2e0
test esi, esi
je 0x49e2af
mov ecx, esi
movzx esi, word [ecx + 0x32]
test si, si
je 0x49e2ad
movzx ecx, di
movzx edx, dx
movzx esi, si
push esi
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x98]
push str._s__d___d___d_
push ecx
call ebx
mov esi, dword [esp + 0x38]
add esp, 0x18
jmp 0x49e2e0
mov esi, ecx
movzx ecx, di
movzx edx, dx
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s__d___d
lea ecx, [esp + 0x98]
push ecx
call ebx
add esp, 0x14
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49e314
cmp word [eax + 0x1a], 0
je 0x49e314
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x94]
push edx
call fcn.00432170
fldz
mov ecx, dword [esp + 0x1c]
jmp 0x49e431
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0x87cefa
lea eax, [esp + 0x94]
push eax
call fcn.00432170
fldz
mov ecx, dword [esp + 0x1c]
jmp 0x49e431
movzx ecx, word [ecx + 0x82]
cmp ax, cx
jne 0x49e3a4
test esi, esi
je 0x49e37c
movzx ecx, word [esi + 0x32]
test cx, cx
je 0x49e37c
movzx edx, cx
movzx eax, ax
push edx
push eax
push 0x185
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s__d_____d_
lea ecx, [esp + 0x98]
push ecx
jmp 0x49e406
movzx edx, ax
push edx
push 0x185
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push 0x5684a8
push eax
call ebx
add esp, 0x10
jmp 0x49e40b
test esi, esi
je 0x49e3e1
movzx edx, word [esi + 0x32]
test dx, dx
je 0x49e3e1
movzx edx, dx
push edx
movzx ecx, cx
push ecx
movzx edx, ax
push edx
push 0x185
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x98]
push str._s__d_____d_____d_
push eax
call ebx
add esp, 0x18
jmp 0x49e40b
movzx ecx, cx
push ecx
movzx edx, ax
push edx
push 0x185
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s__d_____d__
lea eax, [esp + 0x98]
push eax
call ebx
add esp, 0x14
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0x94]
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00432170
fldz
mov ecx, dword [esp + 0x1c]
jmp 0x49e431
mov esi, dword [esp + 0x20]
test esi, esi
je 0x49e486
movzx eax, word [esi + 0x34]
test ax, ax
je 0x49e486
movzx edx, ax
fstp st(0)
push edx
push 0x186
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s___d_
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0x94]
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00432170
fldz
mov ecx, dword [esp + 0x1c]
movzx eax, word [ecx + 0x84]
test ax, ax
jne 0x49e4a7
cmp word [ecx + 0x86], ax
je 0x49e6ce
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
cmp word [ecx + 0x2a], bp
fstp st(0)
je 0x49e5dc
movzx edx, word [ecx + 0x86]
cmp ax, dx
jne 0x49e528
test esi, esi
je 0x49e4fb
movzx ecx, word [esi + 0x32]
test cx, cx
je 0x49e4fb
movzx edx, cx
movzx eax, ax
movzx ecx, di
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x56c180
lea edx, [esp + 0x98]
push edx
jmp 0x49e59c
movzx eax, ax
movzx ecx, di
add eax, ecx
push eax
push 0x187
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x90]
push 0x5684b0
push edx
call ebx
add esp, 0x10
jmp 0x49e5a1
test esi, esi
je 0x49e570
mov ecx, dword [esp + 0x20]
movzx esi, word [ecx + 0x32]
test si, si
je 0x49e570
movzx ecx, di
movzx edx, dx
movzx esi, si
push esi
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x98]
push str._s__d___d___d_
push ecx
call ebx
add esp, 0x18
jmp 0x49e5a1
movzx ecx, di
movzx edx, dx
movzx eax, ax
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s__d___d
lea ecx, [esp + 0x98]
push ecx
call ebx
add esp, 0x14
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49e5c6
cmp word [eax + 0x1a], 0
je 0x49e5c6
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x94]
push edx
jmp 0x49e6c3
push 0
push 0
push 0x87cefa
lea eax, [esp + 0x94]
push eax
jmp 0x49e6c3
mov ecx, dword [esp + 0x1c]
movzx ecx, word [ecx + 0x86]
cmp ax, cx
jne 0x49e64b
test esi, esi
je 0x49e623
movzx eax, word [esi + 0x32]
test ax, ax
je 0x49e623
movzx edx, ax
movzx eax, cx
push edx
push eax
push 0x187
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s__d_____d_
lea ecx, [esp + 0x98]
push ecx
jmp 0x49e6ad
movzx edx, cx
push edx
push 0x187
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push 0x5684a8
push eax
call ebx
add esp, 0x10
jmp 0x49e6b2
test esi, esi
je 0x49e688
movzx edx, word [esi + 0x32]
test dx, dx
je 0x49e688
movzx edx, dx
push edx
movzx ecx, cx
push ecx
movzx edx, ax
push edx
push 0x187
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x98]
push str._s__d_____d_____d_
push eax
call ebx
add esp, 0x18
jmp 0x49e6b2
movzx ecx, cx
push ecx
movzx edx, ax
push edx
push 0x187
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s__d_____d__
lea eax, [esp + 0x98]
push eax
call ebx
add esp, 0x14
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0x94]
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00432170
fldz
mov eax, dword [esp + 0x1c]
cmp word [eax + 0x80], 0
jne 0x49e800
cmp word [eax + 0x82], 0
jne 0x49e800
cmp word [eax + 0x84], 0
jne 0x49e800
cmp word [eax + 0x86], 0
jne 0x49e800
mov edx, dword [esp + 0x18]
test edx, edx
je 0x49e767
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x49e767
mov ebp, dword [esp + 0x20]
test ebp, ebp
je 0x49e7c0
movzx eax, word [ebp + 0x32]
test ax, ax
je 0x49e76b
movzx edx, ax
fstp st(0)
movzx eax, cx
push edx
push eax
push 0x2a9
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x94]
push str._s__d__d_
push ecx
call ebx
add esp, 0x14
push 0
push 0
push 0x55fc55
jmp 0x49e7a9
mov ebp, dword [esp + 0x20]
test ebp, ebp
je 0x49e7c0
movzx eax, word [ebp + 0x32]
test ax, ax
je 0x49e7c0
movzx eax, ax
fstp st(0)
push eax
push 0x2a9
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push str._s___d_
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
mov edi, dword [esp + 0x20]
lea edx, [esp + 0x94]
push edx
mov ecx, edi
call fcn.00432170
fldz
jmp 0x49e808
test edx, edx
je 0x49e804
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x49e804
movzx eax, ax
fstp st(0)
push eax
push 0x2a9
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push str._s__d
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
jmp 0x49e7a9
mov ebp, dword [esp + 0x20]
mov edi, dword [esp + 0x14]
mov esi, 1
movzx eax, si
test ax, ax
jne 0x49e81b
fst dword [esp + 0x2c]
jmp 0x49e82d
mov edx, dword [esp + 0x1c]
movzx ecx, ax
fld dword [edx + ecx*4 + 0x88]
fstp dword [esp + 0x2c]
test ebp, ebp
fld dword [esp + 0x2c]
fld qword [0x563b10]
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0x2c]
je 0x49e869
test ax, ax
jne 0x49e850
fxch st(1)
fst dword [esp + 0x28]
jmp 0x49e85d
movzx ecx, ax
fld dword [ebp + ecx*4 + 0x32]
fstp dword [esp + 0x28]
fxch st(1)
fld dword [esp + 0x28]
fmul st(2)
fstp dword [esp + 0x28]
fxch st(1)
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x49e8a5
test ax, ax
jne 0x49e88a
fxch st(1)
fst dword [esp + 0x24]
fld dword [esp + 0x24]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x24]
jmp 0x49e8ab
movzx edx, ax
fld dword [ecx + edx*4 + 0x32]
fstp dword [esp + 0x24]
fxch st(1)
fld dword [esp + 0x24]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x24]
jmp 0x49e8ab
fstp st(0)
fst dword [esp + 0x24]
fld dword [esp + 0x2c]
fld st(0)
call fcn.00551860
test eax, eax
je 0x49e960
fstp st(1)
fld dword [esp + 0x28]
call fcn.00551860
fadd dword [esp + 0x24]
test eax, eax
je 0x49e8fe
push eax
call fcn.00551860
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x94]
push str._s__d_____d___
push ecx
call ebx
add esp, 0x14
jmp 0x49e928
call fcn.00551860
push eax
lea edx, [esi + 0x187]
push edx
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s__d__
push eax
call ebx
add esp, 0x10
cmp dword [esp + 0x18], 0
je 0x49e94a
fldz
fcomp dword [esp + 0x24]
fnstsw ax
test ah, 0x44
jnp 0x49e94a
push 0
push 0
push 0x55fc55
jmp 0x49ea47
push 0
push 0
push 0x87cefa
lea edx, [esp + 0x94]
push edx
jmp 0x49ea4f
fstp st(0)
fld dword [esp + 0x28]
call fcn.00551860
mov ecx, eax
test ecx, ecx
je 0x49e9d0
fld dword [esp + 0x24]
push ecx
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x49e9ad
call fcn.00551860
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x94]
push str._s__d_____d___
push ecx
call ebx
add esp, 0x14
jmp 0x49ea0d
lea edx, [esi + 0x187]
fstp st(0)
push edx
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s___d___
lea eax, [esp + 0x94]
push eax
jmp 0x49ea08
fld st(0)
fld dword [esp + 0x24]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x49ea2f
fstp st(1)
call fcn.00551860
push eax
lea ecx, [esi + 0x187]
push ecx
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push str._s__d__
lea edx, [esp + 0x94]
push edx
call ebx
add esp, 0x10
fldz
fcom dword [esp + 0x24]
fnstsw ax
test ah, 0x44
jnp 0x49ea31
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x94]
push eax
jmp 0x49ea4f
fstp st(0)
fcom dword [esp + 0x28]
fnstsw ax
test ah, 0x44
jnp 0x49ea58
push 0
fstp st(0)
push 0
push 0x87cefa
lea ecx, [esp + 0x94]
push ecx
mov ecx, edi
call fcn.00432170
fldz
add esi, 1
cmp esi, 5
jle 0x49e80d
mov eax, dword [esp + 0x18]
fstp st(0)
test eax, eax
je 0x49ea7c
movzx eax, word [eax + 0x1c]
test ax, ax
je 0x49ea7c
movzx esi, ax
jmp 0x49ea7e
xor esi, esi
mov edx, dword [esp + 0x1c]
movzx eax, word [edx + 0xa4]
test ax, ax
je 0x49eb33
test ebp, ebp
je 0x49ead0
movzx ecx, word [ebp + 0x4e]
test cx, cx
je 0x49ead0
movzx edx, ax
movzx ecx, cx
movzx eax, si
push ecx
add edx, eax
push edx
push 0x18d
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x94]
push str._s__d___d_
push ecx
call ebx
add esp, 0x14
jmp 0x49eafb
movzx edx, ax
movzx eax, si
add edx, eax
push edx
push 0x18d
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x90]
push 0x5684c4
push ecx
call ebx
add esp, 0x10
cmp dword [esp + 0x18], 0
je 0x49eb1d
test si, si
je 0x49eb1d
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x94]
push edx
jmp 0x49ebeb
push 0
push 0
push 0x87cefa
lea eax, [esp + 0x94]
push eax
jmp 0x49ebeb
test si, si
je 0x49eb71
test ebp, ebp
je 0x49ebaf
movzx eax, word [ebp + 0x4e]
test ax, ax
je 0x49eb71
movzx ecx, ax
push ecx
movzx edx, si
push edx
push 0x18d
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x94]
push str._s__d___d_
push eax
call ebx
add esp, 0x14
jmp 0x49ebda
test ebp, ebp
je 0x49ebaf
movzx eax, word [ebp + 0x4e]
test ax, ax
je 0x49ebaf
movzx edx, ax
push edx
push 0x18d
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s___d_
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
jmp 0x49ebe3
test si, si
je 0x49ebf2
movzx edx, si
push edx
push 0x18d
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x90]
push str._s__d
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x94]
push ecx
mov ecx, edi
call fcn.00432170
mov edx, dword [esp + 0x1c]
movzx eax, word [edx + 0xa8]
test ax, ax
je 0x49ec41
movzx eax, ax
push eax
mov eax, edx
add eax, 4
push eax
push 0x18e
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x94]
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
lea edx, [esp + 0x94]
push edx
mov ecx, edi
call fcn.00432170
mov eax, dword [esp + 0x1c]
cmp word [eax + 0xac], 0
je 0x49ee94
movzx ecx, word [eax + 0xaa]
test cx, cx
je 0x49ee94
xor eax, eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov dword [esp + 0x69], eax
mov dword [esp + 0x6d], eax
mov dword [esp + 0x71], eax
mov word [esp + 0x75], ax
mov byte [esp + 0x77], al
movzx eax, cx
add eax, 0xffffffff
cmp eax, 0xa
mov byte [esp + 0x58], 0
ja case.default.0x49ec9e
jmp dword [eax*4 + 0x49f750]
push 0x196
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49ecb8
jmp case.default.0x49ec9e
push 0x197
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
mov edi, edi
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49ece0
jmp case.default.0x49ec9e
push 0x198
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49ed06
jmp case.default.0x49ec9e
push 0x199
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49ed30
jmp case.default.0x49ec9e
push 0x19a
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49ed56
jmp case.default.0x49ec9e
push 0x19b
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49ed80
jmp case.default.0x49ec9e
push 0x19c
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49eda6
jmp case.default.0x49ec9e
push 0x19d
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49edd0
jmp case.default.0x49ec9e
push 0x19e
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49edf3
jmp case.default.0x49ec9e
push 0x19f
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49ee16
jmp case.default.0x49ec9e
push 0x1a0
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [esp + 0x58]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
add eax, 1
add edx, 1
test cl, cl
jne 0x49ee40
mov eax, dword [esp + 0x1c]
movzx ecx, word [eax + 0xac]
push ecx
lea edx, [esp + 0x5c]
push edx
push 0x1a1
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x94]
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0x94]
push ecx
mov ecx, edi
call fcn.00432170
mov edi, dword [esp + 0x34]
test edi, edi
je 0x49f3ba
cmp dword [edi], 0
je 0x49f3ba
lea ecx, [esp + 0x58]
call fcn.0041fed0
mov ecx, dword [edi + 8]
cmp ecx, 1
mov byte [esp + 0x2c4], 1
jne 0x49ef35
push 0
lea edx, [esp + 0x5c]
push edx
push 0x93
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49eeef
mov ecx, dword [esp + 0x14]
push 0
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
mov ebp, dword [esp + 0x30]
mov ecx, dword [edi + 0xc]
cmp ecx, 1
jne 0x49efed
push 0
lea edx, [esp + 0x5c]
push edx
push 0x93
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49f09f
mov ecx, dword [esp + 0x14]
push 1
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
jmp 0x49f09f
jbe 0x49eeef
mov ebp, dword [esp + 0x30]
xor edx, edx
mov eax, ecx
div dword [ebp + 0x30]
mov eax, dword [ebp + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49eef3
lea esp, [esp]
cmp dword [eax], ecx
je 0x49ef5d
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49ef50
jmp 0x49eef3
mov esi, dword [eax + 4]
test esi, esi
je 0x49eef3
movzx edx, word [esi + 0x28]
push 1
lea ecx, [esp + 0x5c]
push ecx
push edx
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49ef91
mov ecx, dword [esp + 0x14]
push 0
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
movzx ecx, word [esi + 0x26]
xor edx, edx
mov eax, ecx
div dword [ebp + 0x138]
mov eax, dword [ebp + 0x13c]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49efbb
lea esp, [esp]
cmp dword [eax], ecx
je 0x49efe8
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49efb0
xor eax, eax
test eax, eax
mov esi, eax
je 0x49eef3
mov ecx, dword [esi]
push 0
push 0
push 0xc8d7aa
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00432170
mov esi, dword [esi + 4]
test esi, esi
jne 0x49efc7
jmp 0x49eef3
mov eax, dword [eax + 4]
jmp 0x49efbd
jbe 0x49f09f
xor edx, edx
mov eax, ecx
div dword [ebp + 0x30]
mov eax, dword [ebp + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49f09f
cmp dword [eax], ecx
je 0x49f018
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49f008
jmp 0x49f09f
mov esi, dword [eax + 4]
test esi, esi
je 0x49f09f
movzx edx, word [esi + 0x28]
push 1
lea ecx, [esp + 0x5c]
push ecx
push edx
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49f050
mov ecx, dword [esp + 0x14]
push 1
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
movzx ecx, word [esi + 0x26]
xor edx, edx
mov eax, ecx
div dword [ebp + 0x138]
mov eax, dword [ebp + 0x13c]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49f07b
jmp 0x49f070
cmp dword [eax], ecx
je 0x49f0dd
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49f070
xor eax, eax
test eax, eax
mov esi, eax
je 0x49f09f
mov ecx, dword [esi]
push 0
push 0
push 0xc8d7aa
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00432170
mov esi, dword [esi + 4]
test esi, esi
jne 0x49f083
mov ecx, dword [edi + 0x10]
cmp ecx, 1
jne 0x49f0e2
push 0
lea edx, [esp + 0x5c]
push edx
push 0x93
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49f192
mov ecx, dword [esp + 0x14]
push 2
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
jmp 0x49f192
mov eax, dword [eax + 4]
jmp 0x49f07d
jbe 0x49f192
xor edx, edx
mov eax, ecx
div dword [ebp + 0x30]
mov eax, dword [ebp + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49f192
lea ecx, [ecx]
cmp dword [eax], ecx
je 0x49f110
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49f100
jmp 0x49f192
mov esi, dword [eax + 4]
test esi, esi
je 0x49f192
movzx edx, word [esi + 0x28]
push 1
lea ecx, [esp + 0x5c]
push ecx
push edx
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49f148
mov ecx, dword [esp + 0x14]
push 2
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
movzx ecx, word [esi + 0x26]
xor edx, edx
mov eax, ecx
div dword [ebp + 0x138]
mov eax, dword [ebp + 0x13c]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49f16e
cmp dword [eax], ecx
je 0x49f1d0
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49f163
xor eax, eax
test eax, eax
mov esi, eax
je 0x49f192
mov ecx, dword [esi]
push 0
push 0
push 0xc8d7aa
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00432170
mov esi, dword [esi + 4]
test esi, esi
jne 0x49f176
mov ecx, dword [edi + 0x14]
cmp ecx, 1
jne 0x49f1d5
push 0
lea edx, [esp + 0x5c]
push edx
push 0x93
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49f28c
mov ecx, dword [esp + 0x14]
push 3
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
jmp 0x49f28c
mov eax, dword [eax + 4]
jmp 0x49f170
cmp dword [edi + 8], 3
jbe 0x49f28c
xor edx, edx
mov eax, ecx
div dword [ebp + 0x30]
mov eax, dword [ebp + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49f28c
cmp dword [eax], ecx
je 0x49f204
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49f1f4
jmp 0x49f28c
mov esi, dword [eax + 4]
test esi, esi
je 0x49f28c
movzx edx, word [esi + 0x28]
push 1
lea ecx, [esp + 0x5c]
push ecx
push edx
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49f23c
mov ecx, dword [esp + 0x14]
push 3
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
movzx ecx, word [esi + 0x26]
xor edx, edx
mov eax, ecx
div dword [ebp + 0x138]
mov eax, dword [ebp + 0x13c]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49f266
cmp dword [eax], ecx
je 0x49f2db
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49f257
xor eax, eax
test eax, eax
mov esi, eax
je 0x49f28c
mov edi, edi
mov ecx, dword [esi]
push 0
push 0
push 0xc8d7aa
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00432170
mov esi, dword [esi + 4]
test esi, esi
jne 0x49f270
mov ecx, dword [edi + 0x18]
cmp ecx, 1
jne 0x49f2e0
push 0
lea edx, [esp + 0x5c]
push edx
push 0x93
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
je 0x49f3a2
mov ecx, dword [esp + 0x14]
push 4
lea eax, [esp + 0x5c]
push eax
call fcn.00432190
lea ecx, [esp + 0x58]
mov byte [esp + 0x2c4], 0
call fcn.0041fee0
jmp 0x49f3be
mov eax, dword [eax + 4]
jmp 0x49f268
jbe 0x49f3a2
xor edx, edx
mov eax, ecx
div dword [ebp + 0x30]
mov eax, dword [ebp + 0x34]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49f3a2
jmp 0x49f300
cmp dword [eax], ecx
je 0x49f320
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49f300
lea ecx, [esp + 0x58]
mov byte [esp + 0x2c4], al
call fcn.0041fee0
jmp 0x49f3be
mov esi, dword [eax + 4]
test esi, esi
je 0x49f3a2
movzx edx, word [esi + 0x28]
push 1
lea ecx, [esp + 0x5c]
push ecx
push edx
mov ecx, 0x648290
call fcn.00425560
cmp dword [esp + 0x5c], 0
mov edi, dword [esp + 0x14]
je 0x49f35a
push 4
lea eax, [esp + 0x5c]
push eax
mov ecx, edi
call fcn.00432190
movzx ecx, word [esi + 0x26]
xor edx, edx
mov eax, ecx
div dword [ebp + 0x138]
mov eax, dword [ebp + 0x13c]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x49f380
cmp dword [eax], ecx
je 0x49f3b5
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x49f375
xor eax, eax
test eax, eax
mov esi, eax
je 0x49f3a2
mov ecx, dword [esi]
push 0
push 0
push 0xc8d7aa
push ecx
mov ecx, edi
call fcn.00432170
mov esi, dword [esi + 4]
test esi, esi
jne 0x49f388
lea ecx, [esp + 0x58]
mov byte [esp + 0x2c4], 0
call fcn.0041fee0
jmp 0x49f3be
mov eax, dword [eax + 4]
jmp 0x49f382
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x1c]
test word [edi + 0x2a], 0x100
mov esi, dword [esp + 0x14]
je 0x49f3d7
push edi
push esi
mov ecx, ebp
call fcn.00494400
cmp word [edi + 0xca], 0
je 0x49f3ea
push edi
push esi
mov ecx, ebp
call fcn.0049c330
cmp word [edi + 0x2a], 0x834
jne 0x49f3fb
push edi
push esi
mov ecx, ebp
call fcn.004959b0
movzx eax, word [edi + 0x2a]
test eax, 0x800
je 0x49f441
cmp ax, 0x834
jae 0x49f441
mov edi, dword [esp + 0x18]
test edi, edi
je 0x49f41a
cmp dword [edi + 4], 0
jne 0x49f42a
cmp dword [esp + 0x20], 0
je 0x49f445
mov edx, dword [esp + 0x20]
cmp dword [edx], 0
je 0x49f445
push 0
push 0
push 0xffffff
push 0x562815
mov ecx, esi
call fcn.00432170
jmp 0x49f445
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
movzx ecx, word [eax + 0x2a]
test ecx, 0x800
je 0x49f67a
cmp cx, 0x834
jae 0x49f67a
movzx eax, word [esi + 0xc]
movzx edx, ax
cmp dx, 0x88
je 0x49f67a
movzx edx, ax
cmp dx, 0x85
je 0x49f67a
cmp cx, 0x12c
je 0x49f67a
movzx eax, ax
cmp ax, 0x80
je 0x49f67a
test edi, edi
je 0x49f57e
cmp dword [edi + 4], 0
je 0x49f57e
push 0x9b4
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x49f4c0
sub eax, edx
add eax, 2
push eax
lea ecx, [esp + 0x5c]
push str.
push ecx
call fcn.005099f0
lea eax, [esi + 0x2f2]
add esp, 0xc
test eax, eax
je 0x49f57e
mov edi, str.monster
mov esi, eax
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x49f533
push 0x9b3
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x190]
push str._s_s
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0xf83232
jmp 0x49f554
push eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x190]
push str._s_s
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0xffffff
push 0xffffff
lea edx, [esp + 0x198]
push edx
push 0x9b4
mov ecx, 0x64aa48
call fcn.004bcff0
mov ecx, dword [esp + 0x28]
push eax
call fcn.00432180
mov esi, dword [esp + 0x14]
cmp dword [esp + 0x20], 0
je 0x49f67a
mov eax, dword [esp + 0x20]
cmp dword [eax], 0
je 0x49f67a
push 0x9b5
mov ecx, 0x64aa48
call fcn.004bcff0
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x49f5a8
sub eax, edx
add eax, 2
push eax
lea ecx, [esp + 0x5c]
push str.
push ecx
call fcn.005099f0
lea eax, [esi + 0x303]
add esp, 0xc
test eax, eax
je 0x49f67a
mov edi, str.monster
mov esi, eax
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x49f61b
push 0x9b3
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x190]
push str._s_s
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0xf83232
jmp 0x49f63c
push eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x190]
push str._s_s
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0xffffff
push 0xffffff
lea edx, [esp + 0x198]
push edx
push 0x9b5
mov ecx, 0x64aa48
call fcn.004bcff0
mov ecx, dword [esp + 0x28]
push eax
call fcn.00432180
push 0x2f
lea eax, [esp + 0x18c]
push 0
push eax
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [esp + 0x1c]
movzx edx, word [ecx + 0x26]
push 1
push 0xc8d7aa
push edx
push esi
mov ecx, ebp
call fcn.004970c0
lea ecx, [esp + 0x38]
mov dword [esp + 0x2c4], 0xffffffff
call fcn.0041fee0
mov ecx, dword [esp + 0x2bc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2a4]
xor ecx, esp
call fcn.0055160d
add esp, 0x2b4
ret 0x14