Function at 0x494178
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff80
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x49673b
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 1
jne 0x4941f4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov esi, dword [eax + 0xc]
dec esi
cmp esi, 0
jl 0x4941ea
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 4]
mov ebx, dword [eax + esi*4]
mov eax, ebx
call 0x1404098
dec esi
cmp esi, 0xffffffff
jne 0x4941d1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, dword [eax]
call dword [edx]
push 0
push 0
push 0
or ecx, 0xffffffff
or edx, 0xffffffff
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov bl, 1
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x4c]
mov byte [ebp - 0x39], al
dec al
je 0x494225
sub al, 2
je 0x4942b2
jmp 0x4942bb
mov eax, dword [ebp - 4]
cmp dword [eax + 0x48], 0xffffffff
jne 0x494235
xor ebx, ebx
jmp 0x496720
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x38]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 4]
mov dword [edx + 0x50], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [0x484a24]
jne 0x494280
mov dl, 7
mov eax, dword [ebp - 4]
call 0x14893f8
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 1
jmp 0x496720
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x60], 0xffffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x4942c2
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
jmp 0x4942c2
xor ebx, ebx
jmp 0x496720
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
call 0x1494158
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x4c], 2
jmp 0x4966ab
cmp dword [ebp - 0x48], 0
je 0x4942f1
mov eax, dword [ebp - 4]
call dword [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x49430e
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx esi, byte [edx + eax]
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
cmp esi, 0xe
jg 0x494377
je 0x495f40
cmp esi, 0xd
ja case.default.0x49438e
jmp dword [esi*4 + 0x49433f]
cmp esi, 0x15
jg 0x4943ad
je 0x4954a5
add esi, 0xfffffff1
cmp esi, 5
ja case.default.0x49438e
jmp dword [esi*4 + 0x494395]
cmp esi, 0x19
jg 0x4943d4
je 0x494ebc
sub esi, 0x16
je 0x495be2
dec esi
je 0x495e5f
dec esi
je 0x495d7e
jmp case.default.0x49438e
sub esi, 0x1a
je 0x494f10
sub esi, 0xe5
je 0x4966ab
jmp case.default.0x49438e
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x4944bf
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494424
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x494431
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x49447f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4944b0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x148b4d0
test al, al
jne 0x4945a8
cmp byte [ebp - 0x12], 0
je 0x4966b8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494513
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x494520
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x49456e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
jmp 0x4966b8
cmp byte [ebp - 0x12], 0
je 0x4966ab
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4945c9
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x4945d6
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x494624
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x49467b
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x494765
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4946ca
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x4946d7
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x494725
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x494756
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x148ea00
test al, al
jne 0x494852
cmp byte [ebp - 0x12], 0
je 0x4966b8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4947bd
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x4947ca
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x494818
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
jmp 0x4966b8
cmp byte [ebp - 0x12], 0
je 0x4966ab
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494873
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x494880
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x4948ce
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
jmp 0x4966ab
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x16]
call fcn.004a008c
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 4
mov dword [ebp - 0x11], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0xd], eax
mov byte [ebp - 9], 0
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov ecx, dword [ebp - 0x1a]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x148b4d0
test al, al
jne 0x494a17
cmp byte [ebp - 0x12], 0
je 0x4966b8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494982
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x49498f
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x4949dd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
jmp 0x4966b8
cmp byte [ebp - 0x12], 0
je 0x4966ab
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x494a38
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x494a45
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x494a93
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
jmp 0x4966ab
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 0x12], 0
je 0x494b02
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov dl, 0xd
mov eax, dword [ebp - 4]
call 0x1493d44
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004a008c
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x494b4b
mov eax, dword [ebp - 0x1a]
mov eax, dword [eax]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x4966ab
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x1a]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x16]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
cmp dword [eax + 0xc], 0
jne 0x494b85
mov dl, 0xb
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x494baf
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp byte [eax + 0xc], 0
jne 0x494bbe
mov dl, 0xb
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffe4
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494bee
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
ja 0x494c26
mov dl, 9
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp eax, dword [0x484a24]
jne 0x494e2b
xor eax, eax
push ebp
push 0x494ca7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3c]
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
call dword [ebx + 0x14]
test al, al
jne 0x494c9a
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
jne 0x494c8d
mov dl, 0x11
mov eax, dword [ebp - 4]
call 0x14893f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4966b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004a008c
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 4
mov dword [ebp - 0x11], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0xd], eax
mov byte [ebp - 9], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x50], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffe4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494ee7
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffe4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffe4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494f46
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494f8f
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x494fd8
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov byte [ebp - 0x41], 1
lea edx, [ebp - 0x1a]
movzx ecx, byte [ebp - 0x41]
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x49501a.0
jmp dword [eax*4 + 0x495021]
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
setne byte [ebp - 0x41]
jmp 0x4950ab
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
setne byte [ebp - 0x41]
jmp 0x4950ab
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
setne byte [ebp - 0x41]
jmp 0x4950ab
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
setne byte [ebp - 0x41]
jmp 0x4950ab
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
setne byte [ebp - 0x41]
jmp 0x4950ab
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
setne byte [ebp - 0x41]
jmp 0x4950ab
mov dl, 2
mov eax, dword [ebp - 4]
call 0x14893f8
cmp byte [ebp - 0x12], 0
je 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
jmp 0x4966b8
cmp byte [ebp - 0x12], 0
je 0x4950bc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
cmp byte [ebp - 0x41], 0
je 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x4950f4
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov byte [ebp - 0x41], 1
lea edx, [ebp - 0x1a]
movzx ecx, byte [ebp - 0x41]
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x495136.0
jmp dword [eax*4 + 0x49513d]
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
sete byte [ebp - 0x41]
jmp 0x4951c7
mov eax, dword [ebp - 0x1a]
cmp byte [eax], 0
sete byte [ebp - 0x41]
jmp 0x4951c7
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
sete byte [ebp - 0x41]
jmp 0x4951c7
mov eax, dword [ebp - 0x1a]
cmp word [eax], 0
sete byte [ebp - 0x41]
jmp 0x4951c7
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
sete byte [ebp - 0x41]
jmp 0x4951c7
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
sete byte [ebp - 0x41]
jmp 0x4951c7
mov dl, 2
mov eax, dword [ebp - 4]
call 0x14893f8
cmp byte [ebp - 0x12], 0
je 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
jmp 0x4966b8
cmp byte [ebp - 0x12], 0
je 0x4951d8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
cmp byte [ebp - 0x41], 0
je 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
dec eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
jbe 0x4952fc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
jmp 0x4952d8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebx + 0xc]
jbe 0x49525d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebx + 0xc]
sub edx, eax
ja 0x49525d
dec edx
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffe4
inc dword [ebp - 0x4c]
jne 0x49524d
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
cmp dword [ebx + 0x10], 0xffffffff
je 0x495285
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x10], 0xffffffff
mov dword [ebp - 0x30], 1
jmp 0x4952fc
cmp dword [ebx + 0x18], 0xffffffff
je 0x4952a4
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
mov dword [ebp - 0x30], 1
jmp 0x4952fc
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482e88
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
je 0x4952fc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x60]
je 0x49522a
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x60]
jbe 0x4952fc
cmp dword [ebx + 8], 0xffffffff
jne 0x49522a
cmp dword [ebp - 0x30], 0
jne 0x4966ab
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 4]
cmp dword [eax + 0x60], 0xffffffff
jne 0x495325
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x60]
inc edx
sub edx, eax
jg 0x49534e
dec edx
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffe4
inc dword [ebp - 0x4c]
jne 0x49533e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
cmp eax, dword [edx + 0xc]
jb 0x49536e
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [edx + 0x50], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffe4
mov eax, dword [ebp - 4]
cmp dword [eax + 0x50], 0
jne 0x4953ca
mov eax, dword [ebp - 4]
movzx edx, byte [ebp - 0x39]
mov byte [eax + 0x4c], dl
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x49540d
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
jae 0x495445
mov dl, 2
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004a008c
jmp 0x4966ab
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x49548a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x1493740
test al, al
je 0x4966b8
jmp 0x4966ab
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x4954cb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x1494048
test al, al
je 0x4966b8
jmp 0x4966ab
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x49550c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov ecx, dword [ebp - 0xd]
mov edx, dword [ebp - 0x11]
mov eax, dword [ebp - 4]
call 0x14935e0
test al, al
je 0x4966b8
jmp 0x4966ab
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x49556e
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
cmp byte [ebp - 9], 0
je 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 6
ja case.0x495597.0
jmp dword [eax*4 + 0x49559e]
mov eax, dword [ebp - 0x11]
cmp byte [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495646
mov eax, dword [ebp - 0x11]
cmp byte [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495646
mov eax, dword [ebp - 0x11]
cmp word [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495646
mov eax, dword [ebp - 0x11]
cmp word [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495646
mov eax, dword [ebp - 0x11]
cmp dword [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495646
mov eax, dword [ebp - 0x11]
cmp dword [eax], 0
setne al
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
jmp 0x495646
mov dl, 2
mov eax, dword [ebp - 4]
call 0x14893f8
cmp byte [ebp - 9], 0
je 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
jmp 0x4966b8
cmp dword [ebp - 0x2c], 0
je 0x49565b
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x10]
xor al, 1
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
cmp byte [ebp - 9], 0
je 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add eax, 3
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x495695
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
lea eax, [edx + eax]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
add dword [eax + 0x5c], 4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10], 0
je 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
add dword [eax + 0x5c], edx
jmp 0x4966ab
mov dl, 1
mov eax, dword [0x485384]
call 0x1404068
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
mov dword [ebx + 0xc], eax
lea edx, [ebx + 0x10]
mov eax, dword [ebp - 4]
call 0x14938ec
test al, al
jne 0x49571c
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
mov eax, ebx
call 0x1404098
jmp 0x4966b8
lea edx, [ebx + 0x14]
mov eax, dword [ebp - 4]
call 0x14938ec
test al, al
jne 0x495741
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
mov eax, ebx
call 0x1404098
jmp 0x4966b8
lea edx, [ebx + 0x18]
mov eax, dword [ebp - 4]
call 0x14938ec
test al, al
jne 0x495766
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
mov eax, ebx
call 0x1404098
jmp 0x4966b8
lea edx, [ebx + 0x1c]
mov eax, dword [ebp - 4]
call 0x14938ec
test al, al
jne 0x49578b
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
mov eax, ebx
call 0x1404098
jmp 0x4966b8
cmp dword [ebx + 0x10], 0xffffffff
je 0x49579a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x10], eax
cmp dword [ebx + 0x14], 0xffffffff
je 0x4957a9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x14], eax
cmp dword [ebx + 0x18], 0xffffffff
je 0x4957b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x18], eax
cmp dword [ebx + 0x1c], 0xffffffff
je 0x4957c7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
add dword [ebx + 0x1c], eax
cmp dword [ebx + 0x10], 0xffffffff
je 0x4957d8
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x49580b
cmp dword [ebx + 0x14], 0xffffffff
je 0x4957e9
mov eax, dword [ebx + 0x14]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x49580b
cmp dword [ebx + 0x18], 0xffffffff
je 0x4957fa
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jae 0x49580b
cmp dword [ebx + 0x1c], 0xffffffff
je 0x495821
mov eax, dword [ebx + 0x1c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x495821
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
mov eax, ebx
call 0x1404098
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, ebx
call 0x1482e40
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x495850
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
mov eax, dword [ebp - 0x2c]
sub eax, 1
jb 0x49592a
je 0x495a0c
dec eax
je 0x49588a
dec eax
je 0x495b36
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
jne 0x4958a5
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x4958ce
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov dword [ebx + 0x14], 0xffffffff
cmp dword [ebx + 0x18], 0xffffffff
je 0x4958f0
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
jmp 0x4966ab
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482e88
cmp dword [ebp - 0x38], 0xffffffff
je 0x49591c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x495953
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
cmp dword [ebx + 0x10], 0xffffffff
je 0x49596e
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x10], 0xffffffff
jmp 0x4966ab
cmp dword [ebx + 0x18], 0xffffffff
je 0x495989
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x14], 0xffffffff
jmp 0x4966ab
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482e88
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x4959ea
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4966ab
cmp dword [ebp - 0x38], 0xffffffff
je 0x4959fe
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x495a35
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x495a92
cmp dword [ebx + 0x14], 0xffffffff
je 0x495a92
cmp dword [ebx + 0x14], 0xfffffffe
je 0x495a92
mov eax, dword [ebx + 0x14]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x14], 0xfffffffe
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
mov byte [ebx + 0x20], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebx + 0x24], eax
lea eax, [ebx + 0x28]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x80]
call 0x14052d0
mov eax, dword [ebp - 4]
mov byte [eax + 0x7c], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
jmp 0x4966ab
cmp dword [ebx + 0x18], 0xffffffff
je 0x495aad
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
mov dword [ebx + 0x18], 0xffffffff
jmp 0x4966ab
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482e88
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x495b14
cmp dword [ebp - 0x2c], 0xffffffff
je 0x495b14
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4966ab
cmp dword [ebp - 0x38], 0xffffffff
je 0x495b28
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov ebx, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x495b5f
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, ebx
call 0x1404098
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
call 0x1482e88
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
je 0x495bc0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x74]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 8]
jmp 0x4966ab
cmp dword [ebp - 0x38], 0xffffffff
je 0x495bd4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x5c], edx
jmp 0x4966ab
lea edx, [ebp - 0x11]
xor ecx, ecx
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x495c17
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0xd
je 0x495c2f
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
lea edx, [ebp - 0x1a]
xor ecx, ecx
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
mov eax, dword [ebp - 0x11]
add eax, 8
cmp dword [eax], 0
je 0x495c61
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [eax]
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
call 0x1487498
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x495d06
mov eax, dword [ebp - 0x1a]
cmp dword [eax], 0
je 0x495ce9
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
call 0x148747c
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
add edx, 4
mov dword [edx], eax
mov eax, dword [ebp - 0x11]
add eax, 8
mov dword [eax], 1
mov eax, dword [ebp - 0x11]
add eax, 4
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x1a]
mov edx, dword [eax]
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov ecx, 1
call 0x148ad5c
test al, al
jne 0x495d64
cmp byte [ebp - 0x12], 0
je 0x495cda
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 0x11]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 4
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 8
xor edx, edx
mov dword [eax], edx
jmp 0x495d64
mov eax, dword [ebp - 0x16]
call 0x148747c
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [ebp - 0x16]
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 8
mov dword [eax], 0xffffffff
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov ecx, 1
mov edx, dword [ebp - 0x1a]
call 0x148ad5c
test al, al
jne 0x495d64
cmp byte [ebp - 0x12], 0
je 0x495d55
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
cmp byte [ebp - 0x12], 0
je 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
jmp 0x4966ab
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x495db3
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 0x11
ja case.0x495dca.0
movzx eax, byte [eax + 0x495dd1]
jmp dword [eax*4 + 0x495de3]
mov eax, dword [ebp - 0x11]
dec byte [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
dec byte [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
dec word [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
dec word [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
dec dword [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
dec dword [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
sub dword [eax], 1
sbb dword [eax + 4], 0
jmp 0x4966ab
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x495e94
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
cmp eax, 0x11
ja case.0x495eab.0
movzx eax, byte [eax + 0x495eb2]
jmp dword [eax*4 + 0x495ec4]
mov eax, dword [ebp - 0x11]
inc byte [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
inc byte [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
inc word [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
inc word [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
inc dword [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
inc dword [eax]
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
add dword [eax], 1
adc dword [eax + 4], 0
jmp 0x4966ab
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
lea edx, [ebp - 0x11]
xor ecx, ecx
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 9], 0
je 0x495f75
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0xd
je 0x495f8d
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
lea edx, [ebp - 0x1a]
xor ecx, ecx
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 0x12], 0
je 0x495fc2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 0x16]
cmp byte [eax + 0xc], 0xd
jne 0x495fea
mov eax, dword [ebp - 0x1a]
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
mov dword [edx], eax
mov eax, dword [ebp - 0x1a]
add eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0x11]
add edx, 4
mov dword [edx], eax
jmp 0x4966ab
mov eax, dword [ebp - 0x11]
mov edx, dword [ebp - 0x1a]
mov dword [eax], edx
mov eax, dword [ebp - 0x11]
add eax, 4
mov edx, dword [ebp - 0x16]
mov dword [eax], edx
jmp 0x4966ab
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
mov eax, dword [ebp - 0xd]
cmp byte [eax + 0xc], 0x15
je 0x496040
cmp byte [ebp - 9], 0
je 0x496031
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
mov dl, 0xc
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 0x11]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
cmp byte [ebp - 9], 0
je 0x496059
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049ffe4
cmp dword [ebp - 0x2c], 0
jne 0x496093
mov eax, dword [ebp - 0x11]
add eax, 8
cmp dword [eax], 0
je 0x496093
mov eax, dword [ebp - 0x11]
add eax, 8
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x11]
add eax, 4
mov ecx, dword [eax]
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 4]
call fcn.0049e6a8
test al, al
je 0x4966b8
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 0x2c]
jbe 0x4960ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
cmp eax, dword [ebp - 0x2c]
jne 0x4960bb
mov dl, 9
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [0x484a24]
jne 0x4962c0
xor eax, eax
push ebp
push 0x49613c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3c]
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
call dword [ebx + 0x14]
test al, al
jne 0x49612f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
jne 0x496122
mov dl, 0x11
mov eax, dword [ebp - 4]
call 0x14893f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4966b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004a008c
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 0x28]
mov dword [edx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0xc]
dec eax
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x50], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x5c], edx
jmp 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x58]
jb 0x496359
mov dl, 0xa
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
movzx eax, byte [edx + eax]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x5c]
lea edx, [ebp - 0x23]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
cmp byte [ebp - 0x1b], 0
je 0x496443
mov eax, dword [ebp - 0x1f]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x4963a8
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x4963b5
mov edx, dword [ebp - 0x1f]
mov eax, dword [ebp - 0x23]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x496403
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x496434
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
mov dl, 6
mov eax, dword [ebp - 4]
call 0x14893f8
jmp 0x4966b8
lea edx, [ebp - 0x1a]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
je 0x4966b8
lea edx, [ebp - 0x11]
mov cl, 1
mov eax, dword [ebp - 4]
call 0x1492b08
test al, al
jne 0x496523
cmp byte [ebp - 0x12], 0
je 0x4966b8
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x49648e
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x49649b
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x4964e9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4966b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
jmp 0x4966b8
mov eax, dword [ebp - 0x23]
push eax
mov eax, dword [ebp - 0x16]
push eax
mov eax, dword [ebp - 0xd]
push eax
mov eax, dword [ebp - 0x1f]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x11]
mov edx, dword [ebp - 0x1a]
mov eax, dword [ebp - 4]
call 0x148c4ac
cmp byte [ebp - 9], 0
je 0x4965f2
mov eax, dword [ebp - 0xd]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x496566
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x496573
mov edx, dword [ebp - 0xd]
mov eax, dword [ebp - 0x11]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x4965c1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4965f2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
cmp byte [ebp - 0x12], 0
je 0x4966ab
mov eax, dword [ebp - 0x16]
movzx eax, byte [eax + 0xc]
add al, 0xf8
cmp al, 0x1f
ja 0x496613
and eax, 0x7f
bt dword [0x49674c], eax
jae 0x496620
mov edx, dword [ebp - 0x16]
mov eax, dword [ebp - 0x1a]
call 0x14871e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
mov edx, dword [edx + 4]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
dec dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
inc dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
cmp dword [eax + 0x10], 0x200
jbe 0x49666e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call 0x1482ddc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
sub eax, dword [edx + 0x1c]
shr eax, 0xc
cmp eax, 2
jle 0x4966ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
call fcn.0049fd20
jmp 0x4966ab
mov dl, 5
mov eax, dword [ebp - 4]
call 0x14893f8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 2
je 0x4942e5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 0xc], 0
je 0x4966d1
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 2
je 0x4942d9
mov eax, dword [ebp - 4]
cmp byte [eax + 0x4c], 1
jne 0x496716
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov esi, dword [eax + 0xc]
dec esi
cmp esi, 0
jl 0x4966fa
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049ffe4
dec esi
cmp esi, 0xffffffff
jne 0x4966e9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.0049fd4c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x11], 0
je 0x496716
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
sete bl
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x496742
lea eax, [ebp - 0x80]
mov edx, 0xa
call 0x14052a0
ret