Function at 0x49c130
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1828
call fcn.00448695
push ebx
push esi
push edi
lea edi, [ebp - 0x1228]
mov ecx, 0x48a
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x4f00c4]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, 0x4f592f
call fcn.0044a38c
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0x50], xmm0
lea eax, [ebp - 0x1064]
mov dword [ebp - 0x1070], eax
mov eax, dword [ebp + 0xc]
and eax, 0x800
jne 0x49c1b4
mov dword [ebp - 0x1814], 1
jmp 0x49c1be
mov dword [ebp - 0x1814], 0
mov ecx, dword [ebp - 0x1814]
mov dword [ebp - 0x107c], ecx
lea eax, [ebp - 0x1098]
mov dword [ebp - 0x10a4], eax
lea eax, [ebp - 0x10e4]
mov dword [ebp - 0x10f0], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1100], xmm0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1814], eax
mov ecx, dword [ebp - 0x1814]
cmp dword [ecx + 4], 0
ja 0x49c222
jb 0x49c20f
mov edx, dword [ebp - 0x1814]
cmp dword [edx], 0x16
jae 0x49c222
push 8
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
lea eax, [ebp - 0x50]
push eax
push 0x16
push 0x6054b50
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049bc40
add esp, 0x10
test eax, eax
jne 0x49c250
push 7
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov esi, esp
push 0x16
mov eax, dword [ebp - 0x1070]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
call eax
add esp, 0x14
cmp esi, esp
call fcn.004499b4
cmp eax, 0x16
je 0x49c294
push 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx]
shl edx, 0x18
or eax, edx
cmp eax, 0x6054b50
je 0x49c304
push 8
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
cmp dword [ebp - 0x4c], 0
jl 0x49c573
jg 0x49c31a
cmp dword [ebp - 0x50], 0x4c
jb 0x49c573
mov esi, esp
push 0x14
mov eax, dword [ebp - 0x10a4]
push eax
mov ecx, dword [ebp - 0x50]
sub ecx, 0x14
mov edx, dword [ebp - 0x4c]
sbb edx, 0
push edx
push ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
call eax
add esp, 0x14
cmp esi, esp
call fcn.004499b4
cmp eax, 0x14
jne 0x49c573
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10a4]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10a4]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx]
shl edx, 0x18
or eax, edx
cmp eax, 0x7064b50
jne 0x49c573
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10a4]
movzx eax, byte [edx + ecx + 8]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10a4]
movzx ecx, byte [edx + ecx + 8]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 8]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 8]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10a4]
movzx eax, byte [edx + ecx + 0xc]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10a4]
movzx ecx, byte [edx + ecx + 0xc]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 0xc]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 0xc]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.004497cf
or esi, eax
or edi, edx
mov dword [ebp - 0x1100], esi
mov dword [ebp - 0x10fc], edi
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub ecx, 0x38
mov edx, dword [eax + 4]
sbb edx, 0
mov dword [ebp - 0x1818], ecx
mov dword [ebp - 0x1814], edx
mov eax, dword [ebp - 0x10fc]
cmp eax, dword [ebp - 0x1814]
jb 0x49c4d2
ja 0x49c4bf
mov ecx, dword [ebp - 0x1100]
cmp ecx, dword [ebp - 0x1818]
jbe 0x49c4d2
push 8
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov esi, esp
push 0x38
mov eax, dword [ebp - 0x10f0]
push eax
mov ecx, dword [ebp - 0x10fc]
push ecx
mov edx, dword [ebp - 0x1100]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
call eax
add esp, 0x14
cmp esi, esp
call fcn.004499b4
cmp eax, 0x38
jne 0x49c573
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx]
shl edx, 0x18
or eax, edx
cmp eax, 0x6064b50
jne 0x49c573
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov dword [ecx + 0x34], 1
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 0xa]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 0xa]
shl ecx, 8
or eax, ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x10], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 8]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 8]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x18], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 4]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 4]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x24], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 6]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 6]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x30], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 0xc]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 0xc]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx + 0xc]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx + 0xc]
shl edx, 0x18
or eax, edx
mov dword [ebp - 0xc], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 0x10]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 0x10]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x18
or eax, edx
xor ecx, ecx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
cmp dword [ecx + 0x34], 0
je 0x49ccf6
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10a4]
movzx eax, byte [edx + ecx + 0x10]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10a4]
movzx ecx, byte [edx + ecx + 0x10]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x18
or eax, edx
mov dword [ebp - 0x110c], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x20]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x20]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x20]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x20]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x24]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x24]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x24]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x24]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.004497cf
or esi, eax
or edi, edx
mov dword [ebp - 0x111c], esi
mov dword [ebp - 0x1118], edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x18]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x18]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x18]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x18]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x1c]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x1c]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x1c]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x1c]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.004497cf
or esi, eax
or edi, edx
mov dword [ebp - 0x112c], esi
mov dword [ebp - 0x1128], edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 4]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 4]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 4]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 4]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 8]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 8]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 8]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 8]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.004497cf
or esi, eax
or edi, edx
mov dword [ebp - 0x113c], esi
mov dword [ebp - 0x1138], edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x28]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x28]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x28]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x28]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x2c]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x2c]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x2c]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x2c]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.004497cf
or esi, eax
or edi, edx
mov dword [ebp - 0x114c], esi
mov dword [ebp - 0x1148], edi
cmp dword [ebp - 0x1138], 0
ja 0x49cac8
jb 0x49cab5
cmp dword [ebp - 0x113c], 0x2c
jae 0x49cac8
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
cmp dword [ebp - 0x110c], 1
je 0x49cae4
push 0xa
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
cmp dword [ebp - 0x1118], 0
ja 0x49caf6
cmp dword [ebp - 0x111c], 0xffffffff
jbe 0x49cb09
push 2
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp - 0x111c]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
cmp dword [ebp - 0x1128], 0
ja 0x49cb27
cmp dword [ebp - 0x112c], 0xffffffff
jbe 0x49cb3a
push 2
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp - 0x112c]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x1148], 0
ja 0x49cb55
cmp dword [ebp - 0x114c], 0xffffffff
jbe 0x49cb68
push 0xf
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp - 0x114c]
mov dword [ebp - 0xc], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x10]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x10]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x18
or eax, edx
mov dword [ebp - 0x24], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x14]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x14]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x14]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x14]
shl edx, 0x18
or eax, edx
mov dword [ebp - 0x30], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x30]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x30]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x30]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x30]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x34]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x34]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x34]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x34]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.004497cf
or esi, eax
or edi, edx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], edi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
cmp ecx, dword [ebp - 0x18]
je 0x49cd14
push 0xa
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x30]
je 0x49cd3b
cmp dword [ebp - 0x24], 1
jne 0x49cd28
cmp dword [ebp - 0x30], 1
je 0x49cd3b
push 0xa
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov ecx, dword [ebp - 0xc]
xor esi, esi
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
mov edx, 0x2e
mul edx
mov dword [ebp - 0x1818], ecx
mov dword [ebp - 0x1814], esi
mov dword [ebp - 0x1820], eax
mov dword [ebp - 0x181c], edx
mov eax, dword [ebp - 0x1814]
cmp eax, dword [ebp - 0x181c]
ja 0x49cd96
jb 0x49cd83
mov ecx, dword [ebp - 0x1818]
cmp ecx, dword [ebp - 0x1820]
jae 0x49cd96
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp - 0xc]
xor ecx, ecx
add eax, dword [ebp - 0x40]
adc ecx, dword [ebp - 0x3c]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1818], eax
mov dword [ebp - 0x1814], ecx
mov dword [ebp - 0x181c], edx
mov eax, dword [ebp - 0x181c]
mov ecx, dword [ebp - 0x1814]
cmp ecx, dword [eax + 4]
jb 0x49cdec
ja 0x49cdd9
mov edx, dword [ebp - 0x181c]
mov eax, dword [ebp - 0x1818]
cmp eax, dword [edx]
jbe 0x49cdec
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x10], 0
je 0x49d7c5
push 0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x48]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00494620
add esp, 0x10
test eax, eax
je 0x49ce48
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x48]
add eax, 0x10
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00494620
add esp, 0x10
test eax, eax
jne 0x49ce5b
push 0x10
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
cmp dword [ebp - 0x107c], 0
je 0x49ce9a
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x48]
add eax, 0x20
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00494620
add esp, 0x10
test eax, eax
jne 0x49ce9a
push 0x10
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov esi, esp
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x48]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
call eax
add esp, 0x14
cmp esi, esp
call fcn.004499b4
cmp eax, dword [ebp - 0xc]
je 0x49cee2
push 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov edx, dword [ecx]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1164], eax
mov dword [ebp - 0x1158], 0
jmp 0x49cf11
mov eax, dword [ebp - 0x1158]
add eax, 1
mov dword [ebp - 0x1158], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x1158]
cmp ecx, dword [eax + 0x10]
jae 0x49d7c5
cmp dword [ebp - 0x1164], 0x2e
jb 0x49cf7d
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx]
shl edx, 0x18
or eax, edx
cmp eax, 0x2014b50
je 0x49cf90
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov esi, dword [ebp - 0x5c]
sub esi, dword [ecx]
mov edx, dword [ebp + 8]
mov edi, dword [edx + 0x48]
mov eax, dword [ebp - 0x1158]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x48]
add edx, 0x10
push edx
call fcn.00494510
add esp, 8
mov ecx, dword [edi + 0x10]
mov dword [ecx + eax*4], esi
cmp dword [ebp - 0x107c], 0
je 0x49cff4
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0x48]
mov ecx, dword [ebp - 0x1158]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x48]
add eax, 0x20
push eax
call fcn.00494510
add esp, 8
mov ecx, dword [esi + 0x20]
mov edx, dword [ebp - 0x1158]
mov dword [ecx + eax*4], edx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x14]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x14]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x14]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x14]
shl edx, 0x18
or eax, edx
xor ecx, ecx
mov dword [ebp - 0x11b0], eax
mov dword [ebp - 0x11ac], ecx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x18]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x18]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x18]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x18]
shl edx, 0x18
or eax, edx
xor ecx, ecx
mov dword [ebp - 0x11c0], eax
mov dword [ebp - 0x11bc], ecx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x2a]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x2a]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x2a]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x2a]
shl edx, 0x18
or eax, edx
xor ecx, ecx
mov dword [ebp - 0x11d0], eax
mov dword [ebp - 0x11cc], ecx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x1c]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x1c]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x1194], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x1e]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x1e]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
cmp dword [ecx + 0x38], 0
jne 0x49d4d6
cmp dword [ebp - 0x11a0], 0
je 0x49d4d6
mov eax, dword [ebp - 0x11ac]
cmp eax, dword [ebp - 0x11bc]
jb 0x49d1b3
ja 0x49d199
mov ecx, dword [ebp - 0x11b0]
cmp ecx, dword [ebp - 0x11c0]
jbe 0x49d1b3
mov edx, dword [ebp - 0x11b0]
mov eax, dword [ebp - 0x11ac]
mov dword [ebp - 0x1818], edx
mov dword [ebp - 0x1814], eax
jmp 0x49d1cb
mov ecx, dword [ebp - 0x11c0]
mov edx, dword [ebp - 0x11bc]
mov dword [ebp - 0x1818], ecx
mov dword [ebp - 0x1814], edx
mov eax, dword [ebp - 0x1814]
cmp eax, dword [ebp - 0x11cc]
jb 0x49d253
ja 0x49d1e9
mov ecx, dword [ebp - 0x1818]
cmp ecx, dword [ebp - 0x11d0]
jbe 0x49d253
mov edx, dword [ebp - 0x11ac]
cmp edx, dword [ebp - 0x11bc]
jb 0x49d221
ja 0x49d207
mov eax, dword [ebp - 0x11b0]
cmp eax, dword [ebp - 0x11c0]
jbe 0x49d221
mov ecx, dword [ebp - 0x11b0]
mov edx, dword [ebp - 0x11ac]
mov dword [ebp - 0x1820], ecx
mov dword [ebp - 0x181c], edx
jmp 0x49d239
mov eax, dword [ebp - 0x11c0]
mov ecx, dword [ebp - 0x11bc]
mov dword [ebp - 0x1820], eax
mov dword [ebp - 0x181c], ecx
mov edx, dword [ebp - 0x1820]
mov eax, dword [ebp - 0x181c]
mov dword [ebp - 0x1828], edx
mov dword [ebp - 0x1824], eax
jmp 0x49d26b
mov ecx, dword [ebp - 0x11d0]
mov edx, dword [ebp - 0x11cc]
mov dword [ebp - 0x1828], ecx
mov dword [ebp - 0x1824], edx
cmp dword [ebp - 0x1828], 0xffffffff
jne 0x49d4d6
cmp dword [ebp - 0x1824], 0
jne 0x49d4d6
mov eax, dword [ebp - 0x11a0]
mov dword [ebp - 0x11dc], eax
cmp dword [ebp - 0x11dc], 0
je 0x49d4d6
mov dword [ebp - 0x11f4], 0
mov eax, dword [ebp - 0x11a0]
mov ecx, dword [ebp - 0x1194]
lea edx, [ecx + eax + 0x2e]
cmp edx, dword [ebp - 0x1164]
jbe 0x49d382
mov esi, esp
mov eax, dword [ebp - 0x11a0]
push eax
call dword [sym.imp.ucrtbased.dll_malloc]
add esp, 4
cmp esi, esp
call fcn.004499b4
mov dword [ebp - 0x11f4], eax
cmp dword [ebp - 0x11f4], 0
jne 0x49d2ff
push 0x10
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov esi, esp
mov eax, dword [ebp - 0x11a0]
push eax
mov ecx, dword [ebp - 0x11f4]
push ecx
mov edx, dword [ebp - 0x40]
add edx, 0x2e
mov eax, dword [ebp - 0x3c]
adc eax, 0
xor ecx, ecx
add edx, dword [ebp - 0x1194]
adc eax, ecx
push eax
push edx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x44]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
call edx
add esp, 0x14
cmp esi, esp
call fcn.004499b4
cmp eax, dword [ebp - 0x11a0]
je 0x49d374
mov esi, esp
mov eax, dword [ebp - 0x11f4]
push eax
call dword [sym.imp.ucrtbased.dll_free]
add esp, 4
cmp esi, esp
call fcn.004499b4
push 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp - 0x11f4]
mov dword [ebp - 0x11e8], eax
jmp 0x49d395
mov eax, dword [ebp - 0x1194]
mov ecx, dword [ebp - 0x5c]
lea edx, [ecx + eax + 0x2e]
mov dword [ebp - 0x11e8], edx
cmp dword [ebp - 0x11dc], 4
jae 0x49d3ca
mov esi, esp
mov eax, dword [ebp - 0x11f4]
push eax
call dword [sym.imp.ucrtbased.dll_free]
add esp, 4
cmp esi, esp
call fcn.004499b4
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x11e8]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x11e8]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x1200], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x11e8]
movzx eax, byte [edx + ecx + 2]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x11e8]
movzx ecx, byte [edx + ecx + 2]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x120c], eax
mov eax, dword [ebp - 0x120c]
add eax, 4
cmp eax, dword [ebp - 0x11dc]
jbe 0x49d467
mov esi, esp
mov eax, dword [ebp - 0x11f4]
push eax
call dword [sym.imp.ucrtbased.dll_free]
add esp, 4
cmp esi, esp
call fcn.004499b4
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
cmp dword [ebp - 0x1200], 1
jne 0x49d48c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov dword [ecx + 0x34], 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov dword [ecx + 0x38], 1
jmp 0x49d4bd
mov eax, dword [ebp - 0x120c]
mov ecx, dword [ebp - 0x11e8]
lea edx, [ecx + eax + 4]
mov dword [ebp - 0x11e8], edx
mov eax, dword [ebp - 0x11dc]
sub eax, 4
sub eax, dword [ebp - 0x120c]
mov dword [ebp - 0x11dc], eax
jne 0x49d395
mov esi, esp
mov eax, dword [ebp - 0x11f4]
push eax
call dword [sym.imp.ucrtbased.dll_free]
add esp, 4
cmp esi, esp
call fcn.004499b4
cmp dword [ebp - 0x11b0], 0xffffffff
jne 0x49d4ec
cmp dword [ebp - 0x11ac], 0
je 0x49d59d
cmp dword [ebp - 0x11c0], 0xffffffff
jne 0x49d502
cmp dword [ebp - 0x11bc], 0
je 0x49d59d
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0xa]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0xa]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0xa]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0xa]
shl edx, 0x18
or eax, edx
jne 0x49d56e
mov eax, dword [ebp - 0x11c0]
cmp eax, dword [ebp - 0x11b0]
jne 0x49d58a
mov ecx, dword [ebp - 0x11bc]
cmp ecx, dword [ebp - 0x11ac]
jne 0x49d58a
mov eax, dword [ebp - 0x11c0]
or eax, dword [ebp - 0x11bc]
je 0x49d59d
mov eax, dword [ebp - 0x11b0]
or eax, dword [ebp - 0x11ac]
jne 0x49d59d
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x22]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x22]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x117c], eax
cmp dword [ebp - 0x117c], 0xffff
je 0x49d5e8
mov eax, dword [ebp - 0x117c]
cmp eax, dword [ebp - 0x24]
je 0x49d5fb
cmp dword [ebp - 0x117c], 1
je 0x49d5fb
push 0xa
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
cmp dword [ebp - 0x11b0], 0xffffffff
jne 0x49d611
cmp dword [ebp - 0x11ac], 0
je 0x49d6be
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x2a]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x2a]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x2a]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x2a]
shl edx, 0x18
or eax, edx
xor ecx, ecx
add eax, 0x1e
adc ecx, 0
add eax, dword [ebp - 0x11b0]
adc ecx, dword [ebp - 0x11ac]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1818], eax
mov dword [ebp - 0x1814], ecx
mov dword [ebp - 0x181c], edx
mov eax, dword [ebp - 0x181c]
mov ecx, dword [ebp - 0x1814]
cmp ecx, dword [eax + 4]
jb 0x49d6be
ja 0x49d6ab
mov edx, dword [ebp - 0x181c]
mov eax, dword [ebp - 0x1818]
cmp eax, dword [edx]
jbe 0x49d6be
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 8]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 8]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0x1188]
and eax, 0x2000
je 0x49d709
push 5
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x1c]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x1c]
shl ecx, 8
or eax, ecx
mov edx, 1
imul ecx, edx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x1e]
mov edx, 1
shl edx, 0
mov esi, dword [ebp - 0x5c]
movzx edx, byte [esi + edx + 0x1e]
shl edx, 8
or ecx, edx
lea eax, [eax + ecx + 0x2e]
mov ecx, 1
imul edx, ecx, 0
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x20]
mov ecx, 1
shl ecx, 0
mov esi, dword [ebp - 0x5c]
movzx ecx, byte [esi + ecx + 0x20]
shl ecx, 8
or edx, ecx
add eax, edx
mov dword [ebp - 0x1170], eax
mov edx, dword [ebp - 0x1170]
cmp edx, dword [ebp - 0x1164]
jbe 0x49d7a2
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.0049e500
add esp, 8
jmp 0x49d7df
mov eax, dword [ebp - 0x1164]
sub eax, dword [ebp - 0x1170]
mov dword [ebp - 0x1164], eax
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x1170]
mov dword [ebp - 0x5c], eax
jmp 0x49cf02
cmp dword [ebp - 0x107c], 0
je 0x49d7da
mov eax, dword [ebp + 8]
push eax
call fcn.0049de90
add esp, 4
mov eax, 1
push edx
mov ecx, ebp
push eax
lea edx, [0x49d810]
call fcn.00449572
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00448faa
add esp, 0x1828
cmp ebp, esp
call fcn.004499b4
mov esp, ebp
pop ebp
ret