Function at 0x4940b8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff80
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x49667b
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 1
jne 0x494134
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov esi, dword [eax + 0xc]
dec esi
cmp esi, 0
jl 0x49412a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 4]
mov ebx, dword [eax + esi*4]
mov eax, ebx
call 0x1404098
dec esi
cmp esi, 0xffffffff
jne 0x494111
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, dword [eax]
call dword [edx]
push 0
push 0
push 0
or ecx, 0xffffffff
or edx, 0xffffffff
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov bl, 1
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x4c]
mov byte [ebp - 0x39], al
dec al
je 0x494165
sub al, 2
je 0x4941f2
jmp 0x4941fb
mov eax, dword [ebp - 4]
cmp dword [eax + 0x48], 0xffffffff
jne 0x494175
xor ebx, ebx
jmp 0x496660
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x38]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 4]
mov dword [edx + 0x50], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [0x484964]
jne 0x4941c0
mov dl, 7
mov eax, dword [ebp - 4]
call 0x1489338
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 1
jmp 0x496660
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x60], 0xffffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x494202
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
jmp 0x494202
xor ebx, ebx
jmp 0x496660
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
call 0x1494098
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
jmp 0x4965eb
cmp dword [ebp - 0x48], 0
je 0x494231
mov eax, dword [ebp - 4]
call dword [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x49424e
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx esi, byte [edx + eax]
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
cmp esi, 0xe
jg 0x4942b7
je 0x495e80
cmp esi, 0xd
ja case.default.0x4942ce
jmp dword [esi*4 + 0x49427f]
cmp esi, 0x15
jg 0x4942ed
je 0x4953e5
add esi, 0xfffffff1
cmp esi, 5
ja case.default.0x4942ce
jmp dword [esi*4 + 0x4942d5]
cmp esi, 0x19
jg 0x494314
je 0x494dfc
sub esi, 0x16
je 0x495b22
dec esi
je 0x495d9f
dec esi
je 0x495cbe
jmp case.default.0x4942ce
sub esi, 0x1a
je 0x494e50
sub esi, 0xe5
je 0x4965eb
jmp case.default.0x4942ce
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x4943ff
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494364
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x494371
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x4943bf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4943f0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x148b410
test al, al
jne 0x4944e8
cmp byte [ebp - 0x12], 0
je 0x4965f8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494453
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x494460
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x4944ae
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
jmp 0x4965f8
cmp byte [ebp - 0x12], 0
je 0x4965eb
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494509
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x494516
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x494564
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x4945bb
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x4946a5
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x49460a
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x494617
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x494665
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x494696
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x148e940
test al, al
jne 0x494792
cmp byte [ebp - 0x12], 0
je 0x4965f8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4946fd
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x49470a
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x494758
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
jmp 0x4965f8
cmp byte [ebp - 0x12], 0
je 0x4965eb
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4947b3
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x4947c0
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x49480e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
jmp 0x4965eb
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x16]
call fcn.0049ffcc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 4
mov dword [ebp - 0x11], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0xd], eax
mov byte [ebp - 9], 0
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x148b410
test al, al
jne 0x494957
cmp byte [ebp - 0x12], 0
je 0x4965f8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4948c2
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x4948cf
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x49491d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
jmp 0x4965f8
cmp byte [ebp - 0x12], 0
je 0x4965eb
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494978
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x494985
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x4949d3
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
jmp 0x4965eb
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 0x12], 0
je 0x494a42
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov dl, 0xd
mov eax, dword [ebp - 4]
call 0x1493c84
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffcc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x494a8b
mov eax, dword [ebp - 0x1a]
mov eax, dword [eax]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x4965eb
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x1a]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x16]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
cmp dword [eax + 0xc], 0
jne 0x494ac5
mov dl, 0xb
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x494aef
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp byte [eax + 0xc], 0
jne 0x494afe
mov dl, 0xb
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ff24
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494b2e
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
ja 0x494b66
mov dl, 9
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp eax, dword [0x484964]
jne 0x494d6b
xor eax, eax
push ebp
push 0x494be7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3c]
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
call dword [ebx + 0x14]
test al, al
jne 0x494bda
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
jne 0x494bcd
mov dl, 0x11
mov eax, dword [ebp - 4]
call 0x1489338
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4965f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffcc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 4
mov dword [ebp - 0x11], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0xd], eax
mov byte [ebp - 9], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x50], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ff24
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494e27
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ff24
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ff24
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494e86
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494ecf
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494f18
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov byte [ebp - 0x41], 1
lea edx, [ebp - 0x1a]
movzx ecx, byte [ebp - 0x41]
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x494f5a.0
jmp dword [eax*4 + 0x494f61]
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
setne byte [ebp - 0x41]
jmp 0x494feb
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
setne byte [ebp - 0x41]
jmp 0x494feb
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
setne byte [ebp - 0x41]
jmp 0x494feb
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
setne byte [ebp - 0x41]
jmp 0x494feb
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
setne byte [ebp - 0x41]
jmp 0x494feb
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
setne byte [ebp - 0x41]
jmp 0x494feb
mov dl, 2
mov eax, dword [ebp - 4]
call 0x1489338
cmp byte [ebp - 0x12], 0
je 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
jmp 0x4965f8
cmp byte [ebp - 0x12], 0
je 0x494ffc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
cmp byte [ebp - 0x41], 0
je 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x495034
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov byte [ebp - 0x41], 1
lea edx, [ebp - 0x1a]
movzx ecx, byte [ebp - 0x41]
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x495076.0
jmp dword [eax*4 + 0x49507d]
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
sete byte [ebp - 0x41]
jmp 0x495107
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
sete byte [ebp - 0x41]
jmp 0x495107
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
sete byte [ebp - 0x41]
jmp 0x495107
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
sete byte [ebp - 0x41]
jmp 0x495107
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
sete byte [ebp - 0x41]
jmp 0x495107
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
sete byte [ebp - 0x41]
jmp 0x495107
mov dl, 2
mov eax, dword [ebp - 4]
call 0x1489338
cmp byte [ebp - 0x12], 0
je 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
jmp 0x4965f8
cmp byte [ebp - 0x12], 0
je 0x495118
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
cmp byte [ebp - 0x41], 0
je 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
dec eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
jbe 0x49523c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
jmp 0x495218
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebx + 0xc]
jbe 0x49519d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebx + 0xc]
sub edx, eax
ja 0x49519d
dec edx
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ff24
inc dword [ebp - 0x4c]
jne 0x49518d
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
cmp dword [ebx + 0x10], 0xffffffff
je 0x4951c5
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x10], 0xffffffff
mov dword [ebp - 0x30], 1
jmp 0x49523c
cmp dword [ebx + 0x18], 0xffffffff
je 0x4951e4
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
mov dword [ebp - 0x30], 1
jmp 0x49523c
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482dc8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
je 0x49523c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x60]
je 0x49516a
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x60]
jbe 0x49523c
cmp dword [ebx + 8], 0xffffffff
jne 0x49516a
cmp dword [ebp - 0x30], 0
jne 0x4965eb
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 4]
cmp dword [eax + 0x60], 0xffffffff
jne 0x495265
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x60]
inc edx
sub edx, eax
jg 0x49528e
dec edx
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ff24
inc dword [ebp - 0x4c]
jne 0x49527e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
cmp eax, dword [edx + 0xc]
jb 0x4952ae
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [edx + 0x50], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ff24
mov eax, dword [ebp - 4]
cmp dword [eax + 0x50], 0
jne 0x49530a
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x49534d
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
jae 0x495385
mov dl, 2
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffcc
jmp 0x4965eb
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x4953ca
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x1493680
test al, al
je 0x4965f8
jmp 0x4965eb
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x49540b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x1493f88
test al, al
je 0x4965f8
jmp 0x4965eb
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x49544c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x1493520
test al, al
je 0x4965f8
jmp 0x4965eb
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x4954ae
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
cmp byte [ebp - 9], 0
je 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x4954d7.0
jmp dword [eax*4 + 0x4954de]
mov eax, dword [ebp - 0x11]
cmp byte [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495586
mov eax, dword [ebp - 0x11]
cmp byte [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495586
mov eax, dword [ebp - 0x11]
cmp word [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495586
mov eax, dword [ebp - 0x11]
cmp word [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495586
mov eax, dword [ebp - 0x11]
cmp dword [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495586
mov eax, dword [ebp - 0x11]
cmp dword [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495586
mov dl, 2
mov eax, dword [ebp - 4]
call 0x1489338
cmp byte [ebp - 9], 0
je 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
jmp 0x4965f8
cmp dword [ebp - 0x2c], 0
je 0x49559b
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x10]
xor al, 1
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
cmp byte [ebp - 9], 0
je 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x4955d5
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10], 0
je 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4965eb
mov dl, 1
mov eax, dword [0x4852c4]
call 0x1404068
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
mov dword [ebx + 0xc], eax
lea edx, [ebx + 0x10]
mov eax, dword [ebp - 4]
call 0x149382c
test al, al
jne 0x49565c
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
mov eax, ebx
call 0x1404098
jmp 0x4965f8
lea edx, [ebx + 0x14]
mov eax, dword [ebp - 4]
call 0x149382c
test al, al
jne 0x495681
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
mov eax, ebx
call 0x1404098
jmp 0x4965f8
lea edx, [ebx + 0x18]
mov eax, dword [ebp - 4]
call 0x149382c
test al, al
jne 0x4956a6
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
mov eax, ebx
call 0x1404098
jmp 0x4965f8
lea edx, [ebx + 0x1c]
mov eax, dword [ebp - 4]
call 0x149382c
test al, al
jne 0x4956cb
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
mov eax, ebx
call 0x1404098
jmp 0x4965f8
cmp dword [ebx + 0x10], 0xffffffff
je 0x4956da
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x10], eax
cmp dword [ebx + 0x14], 0xffffffff
je 0x4956e9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x14], eax
cmp dword [ebx + 0x18], 0xffffffff
je 0x4956f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x18], eax
cmp dword [ebx + 0x1c], 0xffffffff
je 0x495707
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x1c], eax
cmp dword [ebx + 0x10], 0xffffffff
je 0x495718
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x49574b
cmp dword [ebx + 0x14], 0xffffffff
je 0x495729
mov eax, dword [ebx + 0x14]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x49574b
cmp dword [ebx + 0x18], 0xffffffff
je 0x49573a
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x49574b
cmp dword [ebx + 0x1c], 0xffffffff
je 0x495761
mov eax, dword [ebx + 0x1c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x495761
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
mov eax, ebx
call 0x1404098
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, ebx
call 0x1482d80
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x495790
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
mov eax, dword [ebp - 0x2c]
sub eax, 1
jb 0x49586a
je 0x49594c
dec eax
je 0x4957ca
dec eax
je 0x495a76
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
jne 0x4957e5
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x49580e
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov dword [ebx + 0x14], 0xffffffff
cmp dword [ebx + 0x18], 0xffffffff
je 0x495830
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
jmp 0x4965eb
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482dc8
cmp dword [ebp - 0x38], 0xffffffff
je 0x49585c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x495893
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
cmp dword [ebx + 0x10], 0xffffffff
je 0x4958ae
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x10], 0xffffffff
jmp 0x4965eb
cmp dword [ebx + 0x18], 0xffffffff
je 0x4958c9
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x14], 0xffffffff
jmp 0x4965eb
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482dc8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x49592a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4965eb
cmp dword [ebp - 0x38], 0xffffffff
je 0x49593e
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x495975
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x4959d2
cmp dword [ebx + 0x14], 0xffffffff
je 0x4959d2
cmp dword [ebx + 0x14], 0xfffffffe
je 0x4959d2
mov eax, dword [ebx + 0x14]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x14], 0xfffffffe
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
mov byte [ebx + 0x20], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebx + 0x24], eax
lea eax, [ebx + 0x28]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x80]
call 0x14052d0
mov eax, dword [ebp - 4]
mov byte [eax + 0x7c], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
jmp 0x4965eb
cmp dword [ebx + 0x18], 0xffffffff
je 0x4959ed
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
jmp 0x4965eb
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482dc8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x495a54
cmp dword [ebp - 0x2c], 0xffffffff
je 0x495a54
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4965eb
cmp dword [ebp - 0x38], 0xffffffff
je 0x495a68
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x495a9f
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482dc8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x495b00
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4965eb
cmp dword [ebp - 0x38], 0xffffffff
je 0x495b14
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x4965eb
lea edx, [ebp - 0x11]
xor ecx, ecx
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x495b57
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0xd
je 0x495b6f
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
lea edx, [ebp - 0x1a]
xor ecx, ecx
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
mov eax, dword [ebp - 0x11]
add eax, 8
cmp dword [eax], 0
je 0x495ba1
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [eax]
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
call 0x14873d8
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x495c46
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
je 0x495c29
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
call 0x14873bc
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
add edx, 4
mov dword [edx], eax
mov eax, dword [ebp - 0x11]
add eax, 8
mov dword [eax], 1
mov eax, dword [ebp - 0x11]
add eax, 4
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x1a]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov ecx, 1
call 0x148ac9c
test al, al
jne 0x495ca4
cmp byte [ebp - 0x12], 0
je 0x495c1a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 0x11]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 4
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 8
xor edx, edx
mov dword [eax], edx
jmp 0x495ca4
mov eax, dword [ebp - 0x16]
call 0x14873bc
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [ebp - 0x16]
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 8
mov dword [eax], 0xffffffff
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov ecx, 1
mov edx, dword [ebp - 0x1a]
call 0x148ac9c
test al, al
jne 0x495ca4
cmp byte [ebp - 0x12], 0
je 0x495c95
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
cmp byte [ebp - 0x12], 0
je 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
jmp 0x4965eb
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x495cf3
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 0x11
ja case.0x495d0a.0
movzx eax, byte [eax + 0x495d11]
jmp dword [eax*4 + 0x495d23]
mov eax, dword [ebp - 0x11]
dec byte [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
dec byte [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
dec word [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
dec word [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
dec dword [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
dec dword [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
sub dword [eax], 1
sbb dword [eax + 4], 0
jmp 0x4965eb
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x495dd4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 0x11
ja case.0x495deb.0
movzx eax, byte [eax + 0x495df2]
jmp dword [eax*4 + 0x495e04]
mov eax, dword [ebp - 0x11]
inc byte [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
inc byte [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
inc word [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
inc word [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
inc dword [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
inc dword [eax]
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
add dword [eax], 1
adc dword [eax + 4], 0
jmp 0x4965eb
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
lea edx, [ebp - 0x11]
xor ecx, ecx
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 9], 0
je 0x495eb5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0xd
je 0x495ecd
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
lea edx, [ebp - 0x1a]
xor ecx, ecx
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 0x12], 0
je 0x495f02
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x495f2a
mov eax, dword [ebp - 0x1a]
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
add edx, 4
mov dword [edx], eax
jmp 0x4965eb
mov eax, dword [ebp - 0x11]
mov edx, dword [ebp - 0x1a]
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [ebp - 0x16]
mov dword [eax], edx
jmp 0x4965eb
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0x15
je 0x495f80
cmp byte [ebp - 9], 0
je 0x495f71
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
cmp byte [ebp - 9], 0
je 0x495f99
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ff24
cmp dword [ebp - 0x2c], 0
jne 0x495fd3
mov eax, dword [ebp - 0x11]
add eax, 8
cmp dword [eax], 0
je 0x495fd3
mov eax, dword [ebp - 0x11]
add eax, 8
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x11]
add eax, 4
mov ecx, dword [eax]
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 4]
call fcn.0049e5e8
test al, al
je 0x4965f8
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
jbe 0x495fec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
cmp eax, dword [ebp - 0x2c]
jne 0x495ffb
mov dl, 9
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [0x484964]
jne 0x496200
xor eax, eax
push ebp
push 0x49607c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3c]
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
call dword [ebx + 0x14]
test al, al
jne 0x49606f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
jne 0x496062
mov dl, 0x11
mov eax, dword [ebp - 4]
call 0x1489338
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4965f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffcc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x50], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x496299
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
lea edx, [ebp - 0x23]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
cmp byte [ebp - 0x1b], 0
je 0x496383
mov eax, dword [ebp - 0x1f]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4962e8
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x4962f5
mov edx, dword [ebp - 0x1f]
mov eax, dword [ebp - 0x23]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x496343
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x496374
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
mov dl, 6
mov eax, dword [ebp - 4]
call 0x1489338
jmp 0x4965f8
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
je 0x4965f8
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492a48
test al, al
jne 0x496463
cmp byte [ebp - 0x12], 0
je 0x4965f8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4963ce
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x4963db
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x496429
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
jmp 0x4965f8
mov eax, dword [ebp - 0x23]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x1f]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x11]
mov edx, dword [ebp - 0x1a]
mov eax, dword [ebp - 4]
call 0x148c3ec
cmp byte [ebp - 9], 0
je 0x496532
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4964a6
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x4964b3
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x496501
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x496532
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
cmp byte [ebp - 0x12], 0
je 0x4965eb
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x496553
and eax, 0x7f
bt dword [0x49668c], eax
jae 0x496560
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x1487128
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x4965ae
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482d1c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965eb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fc60
jmp 0x4965eb
mov dl, 5
mov eax, dword [ebp - 4]
call 0x1489338
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 2
je 0x494225
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
je 0x496611
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 2
je 0x494219
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 1
jne 0x496656
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov esi, dword [eax + 0xc]
dec esi
cmp esi, 0
jl 0x49663a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ff24
dec esi
cmp esi, 0xffffffff
jne 0x496629
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049fc8c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x11], 0
je 0x496656
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
sete bl
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x496682
lea eax, [ebp - 0x80]
mov edx, 0xa
call 0x14052a0
ret