Function at 0x49e710
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x57ea91
mov eax, dword fs:[0]
push eax
sub esp, 0x190
mov eax, dword [0x5b107c]
xor eax, esp
mov dword [esp + 0x188], eax
push ebx
push esi
push edi
mov eax, dword [0x5b107c]
xor eax, esp
push eax
lea eax, [esp + 0x1a0]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x24], eax
mov eax, ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], edx
call fcn.005030c0
movzx ecx, ax
mov dword [esp + 0x14], ecx
call fcn.0052c7a0
xor edi, edi
mov dword [esp + 0x20], eax
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], vtable.cImage.0
mov esi, 0xdb
mov ecx, 0x67cb38
mov dword [esp + 0x1a8], edi
call fcn.0056e550
cmp eax, edi
je 0x49e7db
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov edi, dword [eax]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 4]
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0x10]
lea ebx, [esp + 0x30]
lea esi, [esp + 0x74]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x3c], edx
call fcn.0042a9c0
mov ebx, dword [esp + 0x10]
lea esi, [ebx + 0x190]
lea edi, [esp + 0x74]
call fcn.00401a10
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], vtable.cImage.0
mov esi, 0x3f
mov ecx, 0x67cb38
mov byte [esp + 0x1a8], 1
call fcn.0056e550
test eax, eax
je 0x49e844
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov edi, dword [eax]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 4]
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0x10]
lea ebx, [esp + 0x30]
lea esi, [esp + 0x54]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x3c], edx
call fcn.0042a9c0
mov ebx, dword [esp + 0x10]
add ebx, 0x50
call fcn.00428e10
xor eax, eax
lea esi, [ebx + 0x10]
lea edi, [esp + 0x54]
mov word [ebx + 0xc], ax
mov dword [ebx + 0x30], 0xffffffff
call fcn.00401a10
mov esi, dword [esp + 0x10]
mov dword [ebx + 0x34], 0x1e1e1e
push 0x5861b8
mov eax, ebx
mov dword [esi + 0xa0], 0xdc
call fcn.00429230
mov dword [esi + 0x18c], 1
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], vtable.cImage.0
lea edi, [esi + 0x1b0]
mov byte [esp + 0x1a8], 2
test edi, edi
je 0x49e8bd
add esi, 0x148
call fcn.00401a10
mov edi, dword [esp + 0x20]
test edi, 0x800
je 0x49e91f
mov ecx, dword [esp + 0x14]
xor edx, edx
mov eax, ecx
div dword [0x67ddb8]
mov eax, dword [0x67ddbc]
mov edx, dword [eax + edx*4]
test edx, edx
je 0x49f4fb
cmp dword [edx], ecx
je 0x49e8f7
mov edx, dword [edx + 0xc]
test edx, edx
jne 0x49e8e7
jmp 0x49f4fb
mov ecx, dword [edx + 4]
test ecx, ecx
je 0x49f4fb
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
push edx
mov edx, dword [esp + 0x14]
push eax
push edx
mov edx, dword [esp + 0x30]
call fcn.004a1050
jmp 0x49f4fb
test edi, 0x400
je 0x49e96f
mov ecx, dword [esp + 0x14]
xor edx, edx
mov eax, ecx
div dword [0x67ddb8]
mov eax, dword [0x67ddbc]
mov edx, dword [eax + edx*4]
test edx, edx
je 0x49f4fb
cmp dword [edx], ecx
je 0x49e955
mov edx, dword [edx + 0xc]
test edx, edx
jne 0x49e945
jmp 0x49f4fb
mov edx, dword [edx + 4]
test edx, edx
je 0x49f4fb
mov ecx, dword [esp + 0x10]
push edx
call fcn.004a01e0
jmp 0x49f4fb
test edi, 0x200
je 0x49e99d
mov esi, dword [esp + 0x14]
mov ecx, 0x67dd88
call fcn.004af570
test eax, eax
je 0x49f4fb
mov ecx, dword [esp + 0x10]
mov edx, eax
call fcn.0049f8d0
jmp 0x49f4fb
test edi, 0x3000
jne 0x49f4de
test edi, 0x4000
je 0x49ebbf
mov esi, dword [esp + 0x14]
mov ecx, 0x67dd88
call fcn.004af570
mov edi, eax
test edi, edi
je 0x49f4fb
mov ecx, esi
call fcn.004b0a50
lea ecx, [edi + 4]
push ecx
lea edx, [esp + 0x98]
push 0x588f28
push edx
test eax, eax
je 0x49eaa6
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0xf0f0f0
lea eax, [esp + 0x9c]
push eax
push ebx
mov eax, 9
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
movzx eax, word [edi + 0x2a]
mov ecx, 0x4010
cmp ax, cx
je 0x49ea3c
mov edx, 0x401a
cmp ax, dx
jne 0x49ea8b
mov ecx, dword [0x6813e8]
test ecx, ecx
jne 0x49ea4b
mov ecx, 0x6815d0
mov eax, dword [0x681418]
test eax, eax
jne 0x49ea59
mov eax, 0x6815d0
push ecx
push eax
lea eax, [esp + 0x9c]
push str._s__s
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
push 0
push 0xffffb0
lea ecx, [esp + 0x9c]
push ecx
push ebx
mov eax, 7
call fcn.004293e0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
push edx
push eax
mov edx, edi
mov ecx, 0x67dd88
call fcn.004a4370
jmp 0x49f4fb
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0xf0f0f0
lea eax, [esp + 0x9c]
push eax
push ebx
mov eax, 9
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
movzx eax, word [edi + 0x2a]
mov ecx, 0x4000
cmp ax, cx
je 0x49eaff
mov edx, 0x4001
cmp ax, dx
je 0x49eaff
mov ecx, 0x4002
cmp ax, cx
jne 0x49eb4e
mov ecx, dword [0x6813e8]
test ecx, ecx
jne 0x49eb0e
mov ecx, 0x6815d0
mov eax, dword [0x681418]
test eax, eax
jne 0x49eb1c
mov eax, 0x6815d0
push ecx
push eax
lea edx, [esp + 0x9c]
push str._s__s
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
push 0
push 0xffffb0
lea eax, [esp + 0x9c]
push eax
push ebx
mov eax, 7
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
mov ecx, esi
call fcn.004b0a50
test eax, eax
jne 0x49ebb6
mov eax, dword [0x67f2d0]
test eax, eax
jne 0x49eba6
mov eax, 0x6815d0
push 0
push 0xffc800
push eax
push ebx
xor eax, eax
call fcn.004293e0
movzx edx, word [edi + 0x26]
jmp 0x49ed40
test edi, 0x8000
je 0x49ed72
mov esi, dword [esp + 0x14]
mov ecx, 0x67dd88
call fcn.004af570
mov esi, eax
test esi, esi
je 0x49f4fb
lea ecx, [esi + 4]
push ecx
lea edx, [esp + 0x98]
push 0x588f28
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0xf0f0f0
lea eax, [esp + 0x9c]
push eax
push ebx
mov eax, 9
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
movzx eax, word [esi + 0x2a]
mov ecx, 0x8000
cmp ax, cx
je 0x49ec43
mov edx, 0x8001
cmp ax, dx
jne 0x49ec92
mov ecx, dword [0x6813ec]
test ecx, ecx
jne 0x49ec52
mov ecx, 0x6815d0
mov eax, dword [0x681418]
test eax, eax
jne 0x49ec60
mov eax, 0x6815d0
push ecx
push eax
lea eax, [esp + 0x9c]
push str._s__s
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
push 0
push 0xffffb0
lea ecx, [esp + 0x9c]
push ecx
push ebx
mov eax, 7
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
cmp edi, 0x8001
jne 0x49ed25
mov eax, dword [0x67f278]
test eax, eax
jne 0x49ecd0
mov eax, 0x6815d0
movzx edx, word [esi + 0xc0]
push edx
push eax
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
call fcn.00401050
mov cx, word [eax + 0x454]
push 0
cmp cx, word [esi + 0xc0]
jae 0x49ed10
push 0xe61414
lea edx, [esp + 0x9c]
push edx
jmp 0x49ed1d
push 0xf0f0f0
lea eax, [esp + 0x9c]
push eax
push ebx
xor eax, eax
call fcn.004293e0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
movzx edx, word [esi + 0x26]
mov eax, dword [esp + 0x10]
push 0xc8d7aa
push eax
mov eax, 1
mov ecx, 0x67dd88
call fcn.004a5a40
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
jmp 0x49f4fb
test edi, 0x100
je 0x49f162
mov esi, dword [esp + 0x14]
mov ecx, 0x67dd88
call fcn.004af570
mov edi, eax
test edi, edi
je 0x49f4fb
lea ecx, [edi + 4]
push ecx
lea edx, [esp + 0x98]
push 0x588f28
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, 0x104
add esp, 0xc
mov esi, 0xf0f0f0
cmp word [edi + 0x2a], ax
jne 0x49ee2b
cmp word [edi + 0x68], 0
je 0x49ee2b
movzx eax, word [edi + 0x6a]
test ax, ax
jne 0x49eddf
call fcn.00401050
cmp word [eax + 0x454], 0x32
ja 0x49ee4e
cmp word [edi + 0x6a], 1
jne 0x49ee04
call fcn.00401050
cmp word [eax + 0x454], 0x33
jb 0x49ee4e
call fcn.00401050
cmp word [eax + 0x454], 0x46
ja 0x49ee4e
cmp word [edi + 0x6a], 2
jne 0x49ee53
call fcn.00401050
cmp word [eax + 0x454], 0x47
jb 0x49ee4e
call fcn.00401050
cmp word [eax + 0x454], 0x5a
jbe 0x49ee53
jmp 0x49ee4e
call fcn.00401050
movzx ecx, word [eax + 0x454]
mov dword [esp + 0x24], ecx
fild dword [esp + 0x24]
fld dword [edi + 0xbc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x49ee53
mov esi, 0xe61414
push 0
push esi
lea edx, [esp + 0x9c]
push edx
push ebx
mov eax, 9
call fcn.004293e0
fld dword [edi + 0xbc]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x49ef16
mov eax, dword [0x67f278]
mov dword [esp + 0x20], eax
test eax, eax
jne 0x49ee93
mov dword [esp + 0x20], 0x6815d0
mov esi, dword [0x681418]
test esi, esi
jne 0x49eea2
mov esi, 0x6815d0
fld dword [edi + 0xbc]
call fcn.00577600
push eax
mov eax, dword [esp + 0x24]
push eax
push 0x5861b8
lea ecx, [esp + 0xa0]
push esi
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
call fcn.00401050
movzx edx, word [eax + 0x454]
mov dword [esp + 0x24], edx
push 0
fild dword [esp + 0x28]
fld dword [edi + 0xbc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x49eefe
push 0xe61414
lea eax, [esp + 0x9c]
push eax
jmp 0x49ef0b
push 0xf0f0f0
lea ecx, [esp + 0x9c]
push ecx
push ebx
mov eax, 9
call fcn.004293e0
mov esi, dword [esp + 0x10]
movzx eax, word [esi + 0xc]
mov edx, 0x88
cmp ax, dx
je 0x49f109
mov ecx, 0x85
cmp ax, cx
je 0x49f109
mov edx, 0x12c
cmp word [edi + 0x2a], dx
je 0x49f109
mov ecx, 0x83
cmp ax, cx
jne 0x49ef70
test byte [esi + 0x2bc], 1
je 0x49ef70
mov ecx, esi
call fcn.004b2260
push edi
mov ecx, esi
call fcn.004b1b00
jmp 0x49f4fb
mov ecx, esi
call fcn.004b2260
cmp word [edi + 0xc0], 0xb
jne 0x49ef63
push 0x2e
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
test eax, eax
je 0x49ef97
mov ecx, eax
call fcn.004b8040
mov edx, dword [0x65fd80]
cmp dword [edx + 0x234], 1
mov ecx, esi
mov eax, dword [ecx]
jne 0x49efaf
mov edx, dword [eax + 0x74]
jmp 0x49efb2
mov edx, dword [eax + 0x78]
call edx
mov esi, eax
mov ecx, 0x67df20
call fcn.0056e550
mov esi, eax
test esi, esi
je 0x49f4fb
push 0
push 0xf0f0f0
xor eax, eax
cmp dword [edi + 0x30], 1
push 0x5861b8
push ebx
jne 0x49f0ac
call fcn.004293e0
lea eax, [esp + 0x30]
push eax
push 0xffffb0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
mov eax, dword [0x67fab8]
test eax, eax
jne 0x49f00d
mov eax, 0x6815d0
push 0
push 0xf0f0f0
push eax
push ebx
xor eax, eax
call fcn.004293e0
push 0x7f
lea ecx, [esp + 0x119]
push 0
push ecx
mov byte [esp + 0x120], 0
call sub.MSVCR100.dll_memset
mov eax, dword [esi + 0x2a]
mov edi, eax
shl edi, 4
mov ecx, eax
mov edx, eax
mov esi, eax
mov dword [esp + 0x30], edi
mov edi, dword [0x67fabc]
add esp, 0xc
shl ecx, 0x14
shl edx, 0xe
shl esi, 8
test edi, edi
jne 0x49f063
mov edi, 0x6815d0
shr ecx, 0x1a
push ecx
mov ecx, dword [esp + 0x28]
shr edx, 0x1a
push edx
shr esi, 0x1a
push esi
shr ecx, 0x1c
push ecx
shr eax, 0x1c
add eax, 0xf
push eax
lea edx, [esp + 0x128]
push edi
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
push 0
push 0xffc800
lea eax, [esp + 0x11c]
push eax
push ebx
xor eax, eax
call fcn.004293e0
jmp 0x49f4fb
call fcn.004293e0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
mov eax, dword [0x680548]
test eax, eax
jne 0x49f0d6
mov eax, 0x6815d0
push 0
push 0xf0f0f0
push eax
push ebx
xor eax, eax
call fcn.004293e0
mov eax, dword [0x680550]
test eax, eax
jne 0x49f0f4
mov eax, 0x6815d0
push 0
push 0xffc800
push eax
push ebx
xor eax, eax
call fcn.004293e0
jmp 0x49f4fb
test byte [esi + 0x2c0], 1
mov ecx, dword [esp + 0x14]
je 0x49f136
call fcn.004b0a50
test eax, eax
je 0x49f156
mov edx, dword [esp + 0x18]
push edx
push esi
mov edx, edi
mov ecx, 0x67dd88
call fcn.004a4370
jmp 0x49ed59
call fcn.004b0a50
test eax, eax
je 0x49f156
mov eax, dword [esp + 0x18]
push eax
push esi
mov edx, edi
mov ecx, 0x67dd88
call fcn.004a4370
jmp 0x49f4fb
mov ecx, esi
call fcn.004b2260
jmp 0x49ed59
mov eax, edi
and edi, 0x80
jne 0x49f194
cmp eax, 0x42
je 0x49f194
cmp eax, 0x41
je 0x49f194
cmp eax, 0x43
je 0x49f194
push str.ItemManager.cpp
xor ecx, ecx
mov edx, 0x395
call fcn.0052cb10
add esp, 4
jmp 0x49f4fb
mov esi, dword [esp + 0x14]
mov ecx, 0x67dd88
call fcn.004af570
mov dword [esp + 0x1c], eax
test eax, eax
je 0x49f4fb
mov ecx, eax
add ecx, 4
push ecx
lea edx, [esp + 0x98]
push 0x588f28
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0xf0f0f0
lea eax, [esp + 0x9c]
push eax
push ebx
mov eax, 9
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
mov ecx, dword [0x681460]
test ecx, ecx
jne 0x49f207
mov ecx, 0x6815d0
mov eax, dword [0x681418]
test eax, eax
jne 0x49f215
mov eax, 0x6815d0
push ecx
push eax
lea ecx, [esp + 0x9c]
push str._s__s
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
push 0
push 0xffffb0
lea edx, [esp + 0x9c]
push edx
push ebx
mov eax, 7
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
lea eax, [esp + 0x30]
push eax
push 0xffffb0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
test edi, edi
je 0x49f3a6
mov edi, dword [esp + 0x10]
movzx eax, word [edi + 0xc]
mov ecx, 0x88
cmp ax, cx
je 0x49f2b7
mov edx, 0x85
cmp ax, dx
je 0x49f2b7
mov eax, dword [edi]
mov edx, dword [eax + 0x74]
mov ecx, edi
call edx
mov esi, eax
jmp 0x49f2bd
mov esi, dword [edi + 0x2bc]
mov eax, dword [esp + 0x1c]
push eax
mov ecx, edi
call fcn.004a4980
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49f2d5
mov esi, eax
jmp 0x49f2dd
test esi, esi
je 0x49f3a6
call fcn.0056d650
test eax, eax
je 0x49f3a6
mov ecx, dword [eax + 0xc]
fild dword [eax + 0xc]
test ecx, ecx
jns 0x49f2fa
fadd dword [0x598d50]
fmul qword [0x598da0]
fdiv qword [0x599008]
fstp dword [esp + 0x18]
fldz
fld dword [esp + 0x18]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x49f32e
fld1
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x49f32e
fstp dword [esp + 0x18]
jmp 0x49f330
fstp st(0)
push 0x80
lea edx, [esp + 0x98]
push 0
push edx
call sub.MSVCR100.dll_memset
mov ecx, dword [0x680670]
add esp, 0xc
test ecx, ecx
jne 0x49f356
mov ecx, 0x6815d0
fld dword [esp + 0x18]
fnstcw word [esp + 0x14]
movzx eax, word [esp + 0x14]
or eax, 0xc00
mov dword [esp + 0x24], eax
fldcw word [esp + 0x24]
fistp qword [esp + 0x24]
mov eax, dword [esp + 0x24]
push eax
push ecx
fldcw word [esp + 0x1c]
lea ecx, [esp + 0x9c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0x54d7ff
lea edx, [esp + 0x9c]
push edx
push ebx
xor eax, eax
call fcn.004293e0
cmp dword [esp + 0x20], 0x41
jne 0x49f490
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 0xc]
mov edx, 0x88
cmp ax, dx
je 0x49f3d8
mov edx, 0x85
cmp ax, dx
je 0x49f3d8
mov eax, dword [ecx]
mov edx, dword [eax + 0x74]
call edx
mov esi, eax
jmp 0x49f3de
mov esi, dword [ecx + 0x2bc]
push 0x80
lea eax, [esp + 0x98]
push 0
push eax
call sub.MSVCR100.dll_memset
mov eax, dword [0x68067c]
add esp, 0xc
test eax, eax
jne 0x49f403
mov eax, 0x6815d0
mov ecx, dword [esp + 0x1c]
movzx edx, word [ecx + 0xa8]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
push edx
push eax
lea eax, [esp + 0x9c]
push eax
call edi
add esp, 0xc
push 0
push 0xf0f0f0
lea ecx, [esp + 0x9c]
push ecx
push ebx
xor eax, eax
call fcn.004293e0
test esi, esi
je 0x49f490
cmp esi, dword [0x69b554]
jne 0x49f490
push 0x80
lea edx, [esp + 0x98]
push 0
push edx
call sub.MSVCR100.dll_memset
mov eax, dword [0x680680]
add esp, 0xc
test eax, eax
jne 0x49f46b
mov eax, 0x6815d0
push eax
lea eax, [esp + 0x98]
push eax
call edi
add esp, 8
push 0
push 0xf0f0f0
lea ecx, [esp + 0x9c]
push ecx
push ebx
xor eax, eax
call fcn.004293e0
push 0
push 0xf0f0f0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
lea edx, [esp + 0x30]
push edx
push 0xffffb0
push 0x5861b8
push ebx
xor eax, eax
call fcn.004293e0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
movzx edx, word [eax + 0x26]
push 0xc8d7aa
push ecx
mov eax, 1
mov ecx, 0x67dd88
call fcn.004a5a40
jmp 0x49f4fb
mov esi, dword [esp + 0x14]
mov ecx, 0x67dd88
call fcn.004af570
test eax, eax
je 0x49f4fb
mov ecx, dword [esp + 0x10]
mov edx, eax
call fcn.0049f530
mov ecx, dword [esp + 0x1a0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x188]
xor ecx, esp
call fcn.005762ee
mov esp, ebp
pop ebp
ret 0xc