Function at 0x49d7ec
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov esi, dword [ebp + 0x10]
push edi
lea ebx, [esi + 1]
push ebx
push dword [ebp + 8]
mov dword [ebp - 0x14], 0x50a90c
call fcn.00418b3a
push esi
push dword [ebp + 0xc]
mov edi, eax
push edi
mov dword [ebp - 0xc], edi
call fcn.004af940
lea eax, [edi + esi]
mov byte [eax], 0x6a
push 0x1c
push dword [ebp + 8]
inc eax
mov dword [ebp - 0x10], eax
call fcn.00458598
mov esi, eax
mov eax, dword [ebp + 0x10]
lea eax, [eax*4 + 4]
push eax
push dword [ebp + 8]
mov dword [esi], 0x49d7b7
call fcn.00418b3a
push 4
push ebx
push dword [ebp + 8]
mov dword [esi + 8], eax
call fcn.00418b73
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 8], eax
add esp, 0x30
xor eax, eax
cmp edi, ecx
jae 0x49e091
mov ecx, dword [ebp - 8]
add ecx, 0xfffffffc
movzx edx, byte [edi]
add ecx, 4
sub edx, 0x21
inc edi
cmp edx, 0x4f
mov dword [ebp - 4], ecx
ja case.default.0x49d886
jmp dword [edx*4 + 0x49e267]
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x6b
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x6a
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x69
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x68
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x67
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x66
jmp 0x49df86
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x65
jmp 0x49df86
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x64
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x63
jmp 0x49df86
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x62
movzx ebx, byte [edi + 2]
xor edx, edx
mov dh, byte [edi]
inc eax
mov dl, byte [edi + 1]
shl edx, 8
or edx, ebx
movzx ebx, byte [edi + 3]
shl edx, 8
or edx, ebx
add edx, dword [ebp + 0x14]
jmp 0x49dff0
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x61
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x60
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x5f
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x5e
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x5d
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x5c
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x5b
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x5a
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x59
jmp 0x49dfd6
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x58
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x57
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x6c
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x56
jmp 0x49df86
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x55
jmp 0x49df86
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x54
jmp 0x49deea
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x53
jmp 0x49deea
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x52
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x51
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x50
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x4f
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x4e
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x4d
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x4c
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x4b
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x4a
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x49
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x48
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x47
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x46
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x45
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x44
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x43
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x42
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x41
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x40
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x3f
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x3e
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x3d
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x3c
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x3b
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x3a
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x39
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x38
jmp 0x49dfd6
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x37
jmp 0x49dfd6
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x36
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x35
jmp 0x49dfd6
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x34
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x33
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x32
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x31
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x30
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x6d
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x6e
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x6f
jmp 0x49deea
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x70
jmp 0x49df86
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x2f
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x2e
mov ebx, dword [esi + 8]
xor edx, edx
mov dh, byte [edi]
inc eax
mov dl, byte [edi + 1]
mov word [ebx + eax*4], dx
inc eax
inc edi
inc edi
add ecx, 8
jmp case.default.0x49d886
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x2d
jmp 0x49df86
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x2c
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x2b
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x2a
jmp 0x49df86
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x29
jmp 0x49dfd6
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x28
mov bl, byte [edi]
mov edx, dword [esi + 8]
inc eax
mov byte [edx + eax*4], bl
inc eax
inc edi
add ecx, 4
jmp case.default.0x49d886
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x27
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x26
jmp 0x49dfd6
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x25
movzx ebx, byte [edi + 2]
xor edx, edx
mov dh, byte [edi]
inc eax
mov dl, byte [edi + 1]
shl edx, 8
or edx, ebx
movzx ebx, byte [edi + 3]
shl edx, 8
or edx, ebx
mov ebx, dword [esi + 8]
mov dword [ebx + eax*4], edx
jmp 0x49e081
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x24
jmp 0x49e023
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ebx, dword [esi + 8]
mov byte [edx + ebx], 0x23
inc eax
jmp case.default.0x49d886
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x22
jmp 0x49e04e
mov ebx, dword [esi + 8]
mov edx, eax
shl edx, 2
add ebx, edx
mov dword [ecx], ebx
mov ecx, dword [esi + 8]
mov byte [edx + ecx], 0x21
movzx edx, byte [edi + 2]
xor ecx, ecx
mov ch, byte [edi]
mov ebx, dword [esi + 8]
mov cl, byte [edi + 1]
shl ecx, 8
or ecx, edx
movzx edx, byte [edi + 3]
shl ecx, 8
or ecx, edx
add ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x20]
inc eax
shl ecx, 4
mov ecx, dword [ecx + edx + 8]
mov dword [ebx + eax*4], ecx
mov ecx, dword [ebp - 4]
add edi, 4
inc eax
add ecx, 0x10
cmp edi, dword [ebp - 0x10]
jb 0x49d870
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 0x10]
push 4
pop ebx
mov dword [esi + 0xc], eax
jae 0x49e0f8
push 8
xor eax, eax
pop edi
movzx edx, byte [ecx]
sub edx, 0x21
inc ecx
cmp edx, 0x4f
ja case.default.0x49e0b0
jmp dword [edx*4 + 0x49e3a7]
add eax, ebx
jmp case.default.0x49e0b0
mov edx, dword [esi + 8]
add eax, ebx
mov ebx, dword [ebp - 8]
add edx, eax
mov edi, dword [edx]
sub edi, dword [ebp - 0xc]
push 4
add edi, ecx
mov edi, dword [ebx + edi*4 + 0x10]
sub edi, eax
sub edi, dword [esi + 8]
pop ebx
sub edi, ebx
sar edi, 2
push 8
mov dword [edx], edi
add ecx, ebx
add eax, ebx
pop edi
jmp case.default.0x49e0b0
inc ecx
inc ecx
jmp 0x49e0f1
inc ecx
jmp 0x49e0f1
add ecx, ebx
add eax, edi
cmp ecx, dword [ebp - 0x10]
jb 0x49e0a4
cmp dword [ebp + 0x18], 0
je 0x49e1f1
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x20]
add eax, ecx
mov dword [ebp + 0x10], eax
jmp 0x49e1d1
mov eax, dword [ebp + 0x18]
movzx eax, byte [eax]
dec eax
je 0x49e20a
dec eax
je 0x49e144
mov edi, dword [ebp + 8]
lea eax, [edi + 0x588]
push str.Unimplemented_FFish_Script_bytecode
push eax
call fcn.004b1a3d
push edi
call fcn.0049ca5e
add esp, 0xc
jmp 0x49e1d1
mov eax, dword [ebp + 0x18]
movzx edx, byte [eax + 3]
xor ecx, ecx
mov ch, byte [eax + 1]
mov cl, byte [eax + 2]
movzx eax, byte [eax + 4]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
mov edi, ecx
cmp edi, dword [ebp + 0x10]
ja 0x49e1db
mov eax, dword [ebp + 0x18]
movzx ecx, byte [eax + 7]
sub dword [ebp + 0x1c], 9
xor ebx, ebx
add eax, 5
mov bh, byte [eax]
add eax, 4
mov dword [ebp + 0x18], eax
mov bl, byte [eax - 3]
shl ebx, 8
or ebx, ecx
movzx ecx, byte [eax - 1]
shl ebx, 8
or ebx, ecx
cmp dword [ebp + 0x20], edi
ja 0x49e1ce
mov eax, dword [esi + 0x14]
lea eax, [eax*8 + 8]
push eax
push dword [esi + 0x18]
push dword [ebp + 8]
call fcn.00418bb1
sub edi, dword [ebp + 0x20]
mov ecx, dword [esi + 0x14]
mov edx, dword [ebp - 8]
mov dword [esi + 0x18], eax
mov edx, dword [edx + edi*4]
mov dword [eax + ecx*8], edx
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x18]
add esp, 0xc
mov dword [ecx + eax*8 + 4], ebx
inc dword [esi + 0x14]
push 4
pop ebx
cmp dword [ebp + 0x1c], 0
ja 0x49e112
cmp dword [esi + 0x10], 0
jne 0x49e1f1
push dword [ebp - 0x14]
push dword [ebp + 8]
call fcn.00418c12
pop ecx
pop ecx
mov dword [esi + 0x10], eax
push dword [ebp - 8]
call fcn.00418c05
push dword [ebp - 0xc]
call fcn.00418c05
pop ecx
pop ecx
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret
mov eax, dword [ebp + 0x18]
movzx edx, byte [eax + 3]
inc eax
xor ecx, ecx
mov ch, byte [eax]
mov cl, byte [eax + 1]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 3]
shl ecx, 8
or ecx, edx
add eax, ebx
mov edi, ecx
mov dword [ebp + 0x18], eax
lea eax, [edi + 1]
push eax
push dword [ebp + 8]
call fcn.00418b3a
push edi
push dword [ebp + 0x18]
mov dword [esi + 0x10], eax
push eax
call fcn.004af940
mov eax, dword [esi + 0x10]
and byte [edi + eax], 0
mov eax, dword [esi + 0x10]
add dword [ebp + 0x18], edi
add esp, 0x14
mov dword [ebp - 0x14], eax
push 0xfffffffffffffffb
pop eax
sub eax, edi
add dword [ebp + 0x1c], eax
jmp 0x49e1d1