Function at 0x490fff
Capabilities:
Get graphical window text
Parse pe header

Disassembly:
push ebp
push ebx
mov edx, 0x12
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x491006
call fcn.005b13d0
mov dword [esp], 0
push dword [esp + 0x54]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x49104f
push 1
mov eax, 0x72b0ec
push eax
call fcn.00507fc0
push 0
push dword [0x7c195c]
call fcn.004690f3
jmp 0x493329
mov ebx, 1
cmp ebx, dword [esp]
jne 0x491063
call fcn.0045ca56
jmp 0x493329
mov ebx, 2
cmp ebx, dword [esp]
jne 0x491077
call fcn.00543333
jmp 0x493329
mov ebx, 3
cmp ebx, dword [esp]
jne 0x49108b
call fcn.004157ba
jmp 0x493329
mov ebx, 5
cmp ebx, dword [esp]
jne 0x49109f
call fcn.004bd555
jmp 0x493329
mov ebx, 6
cmp ebx, dword [esp]
jne 0x4910c9
push 0
call fcn.004dc312
mov ebx, eax
cmp ebx, 1
jne 0x4910c4
push 0
call fcn.0051cf84
jmp 0x493329
mov ebx, 4
cmp ebx, dword [esp]
jne 0x4910dd
call fcn.00485548
jmp 0x493329
mov ebx, 7
cmp ebx, dword [esp]
jne 0x491158
call fcn.00541344
and eax, eax
je 0x491153
push dword [0x7c33c0]
call fcn.005a9e97
mov dword [esp + 8], eax
cmp dword [0x7c226c], 0
je 0x49110c
dec dword [esp + 8]
mov dword [esp + 0xc], 1
jmp 0x491116
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0xc]
jl 0x491153
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
jne 0x491143
push dword [0x7c33c0]
call fcn.005aa09a
push 0
call fcn.00528009
push 0
call fcn.0051cf84
inc dword [esp + 0xc]
jno 0x491116
jmp 0x493329
mov ebx, 8
cmp ebx, dword [esp]
jne 0x4911c3
cmp dword [0x7c195c], 0
je 0x491180
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x491180
mov eax, 1
jmp 0x491182
xor eax, eax
and eax, eax
je 0x49119f
mov ebp, dword [0x7c195c]
mov edx, dword [ebp + 0xc]
xor ecx, ecx
call fcn.0054d570
jne 0x49119f
mov eax, 1
jmp 0x4911a1
xor eax, eax
and eax, eax
je 0x4911be
push 1
mov ebp, dword [0x7c195c]
push dword [ebp + 0xc]
push dword [0x7c195c]
call fcn.004a1945
jmp 0x493329
mov ebx, 0xe
cmp ebx, dword [esp]
jne 0x4911d7
call fcn.0052d8fd
jmp 0x493329
mov ebx, 9
cmp ebx, dword [esp]
jne 0x4911fb
push 0
push dword [0x7c195c]
call fcn.004d59e7
call fcn.0051a210
jmp 0x493329
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x49121f
push 1
push dword [0x7c195c]
call fcn.004d59e7
call fcn.0051a210
jmp 0x493329
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x49125d
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x360]
and ebx, ebx
je 0x491258
mov ebp, dword [0x7c195c]
mov dword [ebp + 0x360], 0
push 1
call fcn.004cce03
call fcn.0051a210
jmp 0x493329
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x49129c
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x360]
cmp ebx, 1
je 0x491297
mov ebp, dword [0x7c195c]
mov dword [ebp + 0x360], 1
push 1
call fcn.004cce03
call fcn.0051a210
jmp 0x493329
mov ebx, 0xd
cmp ebx, dword [esp]
jne 0x4912db
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x360]
cmp ebx, 2
je 0x4912d6
mov ebp, dword [0x7c195c]
mov dword [ebp + 0x360], 2
push 1
call fcn.004cce03
call fcn.0051a210
jmp 0x493329
mov ebx, 0xf
cmp ebx, dword [esp]
jne 0x4912ef
call fcn.00528683
jmp 0x493329
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x491308
push 0xffffffff
call fcn.00460b54
jmp 0x493329
mov ebx, 0x11
cmp ebx, dword [esp]
jne 0x491320
call fcn.00541344
mov dword [esp + 4], eax
jmp 0x493329
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x49137b
cmp dword [0x7c195c], 0
je 0x491346
mov ebp, dword [0x7c195c]
cmp dword [ebp + 8], 0
je 0x491346
mov eax, 1
jmp 0x491348
xor eax, eax
and eax, eax
je 0x491364
mov ebp, dword [0x7c345c]
movsx ebx, byte [ebp + 0xa2]
and ebx, ebx
jne 0x491364
mov eax, 1
jmp 0x491366
xor eax, eax
and eax, eax
je 0x491371
call fcn.00518e6f
jmp 0x491376
call fcn.004a6e21
jmp 0x493329
mov ebx, 0x13
cmp ebx, dword [esp]
jne 0x4913d6
cmp dword [0x7c195c], 0
je 0x4913a1
mov ebp, dword [0x7c195c]
cmp dword [ebp + 8], 0
je 0x4913a1
mov eax, 1
jmp 0x4913a3
xor eax, eax
and eax, eax
je 0x4913bf
mov ebp, dword [0x7c345c]
movsx ebx, byte [ebp + 0xa2]
and ebx, ebx
jne 0x4913bf
mov eax, 1
jmp 0x4913c1
xor eax, eax
and eax, eax
je 0x4913cc
call fcn.00483600
jmp 0x4913d1
call fcn.0054bb49
jmp 0x493329
mov ebx, 0x14
cmp ebx, dword [esp]
jne 0x491431
cmp dword [0x7c195c], 0
je 0x4913fc
mov ebp, dword [0x7c195c]
cmp dword [ebp + 8], 0
je 0x4913fc
mov eax, 1
jmp 0x4913fe
xor eax, eax
and eax, eax
je 0x49141a
mov ebp, dword [0x7c345c]
movsx ebx, byte [ebp + 0xa2]
and ebx, ebx
jne 0x49141a
mov eax, 1
jmp 0x49141c
xor eax, eax
and eax, eax
je 0x491427
call fcn.0052f2ba
jmp 0x49142c
call fcn.004142fe
jmp 0x493329
mov ebx, 0x15
cmp ebx, dword [esp]
jne 0x49148c
cmp dword [0x7c195c], 0
je 0x491457
mov ebp, dword [0x7c195c]
cmp dword [ebp + 8], 0
je 0x491457
mov eax, 1
jmp 0x491459
xor eax, eax
and eax, eax
je 0x491475
mov ebp, dword [0x7c345c]
movsx ebx, byte [ebp + 0xa2]
and ebx, ebx
jne 0x491475
mov eax, 1
jmp 0x491477
xor eax, eax
and eax, eax
je 0x491482
call fcn.00414804
jmp 0x491487
call fcn.004ff91d
jmp 0x493329
mov ebx, 0x16
cmp ebx, dword [esp]
jne 0x4914e7
cmp dword [0x7c195c], 0
je 0x4914b2
mov ebp, dword [0x7c195c]
cmp dword [ebp + 8], 0
je 0x4914b2
mov eax, 1
jmp 0x4914b4
xor eax, eax
and eax, eax
je 0x4914d0
mov ebp, dword [0x7c345c]
movsx ebx, byte [ebp + 0xa2]
and ebx, ebx
jne 0x4914d0
mov eax, 1
jmp 0x4914d2
xor eax, eax
and eax, eax
je 0x4914dd
call fcn.0054122f
jmp 0x4914e2
call fcn.0043b409
jmp 0x493329
mov ebx, 0x17
cmp ebx, dword [esp]
jne 0x49151e
cmp dword [0x7c195c], 0
je 0x49150e
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x49150e
mov eax, 1
jmp 0x491510
xor eax, eax
and eax, eax
je 0x491519
call fcn.00489350
jmp 0x493329
mov ebx, 0x18
cmp ebx, dword [esp]
jne 0x491532
call fcn.0051b321
jmp 0x493329
mov ebx, 0x19
cmp ebx, dword [esp]
jne 0x491546
call fcn.0045a471
jmp 0x493329
mov ebx, 0x1a
cmp ebx, dword [esp]
jne 0x49155a
call fcn.004c7733
jmp 0x493329
mov ebx, 0x1b
cmp ebx, dword [esp]
jne 0x49156e
call fcn.004b0b48
jmp 0x493329
mov ebx, 0x1c
cmp ebx, dword [esp]
jne 0x491582
call fcn.004a63c1
jmp 0x493329
mov ebx, 0x1d
cmp ebx, dword [esp]
jne 0x491596
call fcn.004846cc
jmp 0x493329
mov ebx, 0x24
cmp ebx, dword [esp]
jne 0x4915af
push 0
call fcn.0047e892
jmp 0x493329
mov ebx, 0x25
cmp ebx, dword [esp]
je 0x4915c3
mov ebx, 0x26
cmp ebx, dword [esp]
jne 0x491614
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x49160f
push dword [0x7c1d28]
mov edx, 0x72b0ec
pop ecx
call fcn.0054d570
je 0x4915f0
push 0
call fcn.0047e892
jmp 0x49160f
mov ebx, dword [esp + 0x58]
cmp ebx, 0x26
jne 0x491601
mov dword [esp + 0x10], 1
push dword [esp + 0x10]
push 1
call fcn.00453dd5
jmp 0x493329
mov ebx, 0x27
cmp ebx, dword [esp]
jne 0x491628
call fcn.0040b357
jmp 0x493329
mov ebx, 0x28
cmp ebx, dword [esp]
jne 0x491641
push 1
call fcn.0047e892
jmp 0x493329
mov ebx, 0x29
cmp ebx, dword [esp]
jne 0x49165a
push 1
call fcn.0041de28
jmp 0x493329
mov ebx, 0x2a
cmp ebx, dword [esp]
jne 0x49166e
call fcn.004f749c
jmp 0x493329
mov ebx, 0x2b
cmp ebx, dword [esp]
jne 0x491687
push 0
call fcn.00413f57
jmp 0x493329
mov ebx, 0x2c
cmp ebx, dword [esp]
jne 0x4916a0
push 0
call fcn.0041de28
jmp 0x493329
mov ebx, 0x2d
cmp ebx, dword [esp]
jne 0x4916b4
call fcn.00488413
jmp 0x493329
mov ebx, 0x2e
cmp ebx, dword [esp]
jne 0x4916c8
call fcn.00487fa9
jmp 0x493329
mov ebx, 0x2f
cmp ebx, dword [esp]
jne 0x491715
cmp dword [0x7c23a0], 0
je 0x491710
push edx
call fcn.005b1230
pop edx
push eax
push edx
call fcn.005b1230
pop edx
push eax
push edx
call fcn.005b1230
pop edx
push eax
push dword [0x7c18c4]
call fcn.0059ce59
call fcn.0054d542
add dword [esp], edx
call fcn.0050bd9b
call fcn.0054d560
jmp 0x493329
mov ebx, 0x34
cmp ebx, dword [esp]
jne 0x4917c0
mov dword [0x7c228c], 0
mov dword [0x7c2410], 0
cmp dword [0x7c195c], 0
je 0x491789
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x49175f
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
jne 0x49175f
jmp 0x491766
mov eax, 1
jmp 0x491768
xor eax, eax
and eax, eax
je 0x49177c
cmp dword [0x7c2008], 0
je 0x49177c
mov eax, 1
jmp 0x49177e
xor eax, eax
and eax, eax
je 0x491789
mov eax, 1
jmp 0x49178b
xor eax, eax
and eax, eax
je 0x49179b
push 0
call fcn.00451a87
jmp 0x4917bb
mov ebp, dword [0x7c195c]
cmp dword [ebp + 8], 0
je 0x4917b1
push 1
call fcn.0041490f
push 0
call fcn.00500332
jmp 0x493329
mov ebx, 0x36
cmp ebx, dword [esp]
jne 0x49186b
mov dword [0x7c228c], 0
mov dword [0x7c2410], 0
cmp dword [0x7c195c], 0
je 0x491834
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x49180a
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
jne 0x49180a
jmp 0x491811
mov eax, 1
jmp 0x491813
xor eax, eax
and eax, eax
je 0x491827
cmp dword [0x7c2008], 0
je 0x491827
mov eax, 1
jmp 0x491829
xor eax, eax
and eax, eax
je 0x491834
mov eax, 1
jmp 0x491836
xor eax, eax
and eax, eax
je 0x491846
push 1
call fcn.00451a87
jmp 0x491866
mov ebp, dword [0x7c195c]
cmp dword [ebp + 8], 0
je 0x49185c
push 1
call fcn.0041490f
push 1
call fcn.00500332
jmp 0x493329
mov ebx, 0x35
cmp ebx, dword [esp]
jne 0x4918de
cmp dword [0x7c195c], 0
je 0x4918c7
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x49189d
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
jne 0x49189d
jmp 0x4918a4
mov eax, 1
jmp 0x4918a6
xor eax, eax
and eax, eax
je 0x4918ba
cmp dword [0x7c2008], 0
je 0x4918ba
mov eax, 1
jmp 0x4918bc
xor eax, eax
and eax, eax
je 0x4918c7
mov eax, 1
jmp 0x4918c9
xor eax, eax
and eax, eax
je 0x4918d4
call fcn.0041dd4a
jmp 0x4918d9
call fcn.004362c2
jmp 0x493329
mov ebx, 0x37
cmp ebx, dword [esp]
jne 0x491973
mov dword [0x7c228c], 1
mov dword [0x7c2410], 0
cmp dword [0x7c195c], 0
je 0x491952
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x491928
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
jne 0x491928
jmp 0x49192f
mov eax, 1
jmp 0x491931
xor eax, eax
and eax, eax
je 0x491945
cmp dword [0x7c2008], 0
je 0x491945
mov eax, 1
jmp 0x491947
xor eax, eax
and eax, eax
je 0x491952
mov eax, 1
jmp 0x491954
xor eax, eax
and eax, eax
je 0x491964
push 0
call fcn.00451a87
jmp 0x49196e
push 0
call fcn.00500332
jmp 0x493329
mov ebx, 0x38
cmp ebx, dword [esp]
jne 0x491a08
mov dword [0x7c228c], 0
mov dword [0x7c2410], 1
cmp dword [0x7c195c], 0
je 0x4919e7
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x4919bd
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
jne 0x4919bd
jmp 0x4919c4
mov eax, 1
jmp 0x4919c6
xor eax, eax
and eax, eax
je 0x4919da
cmp dword [0x7c2008], 0
je 0x4919da
mov eax, 1
jmp 0x4919dc
xor eax, eax
and eax, eax
je 0x4919e7
mov eax, 1
jmp 0x4919e9
xor eax, eax
and eax, eax
je 0x4919f9
push 0
call fcn.00451a87
jmp 0x491a03
push 0
call fcn.00500332
jmp 0x493329
mov ebx, 0x3d
cmp ebx, dword [esp]
jne 0x491a45
call fcn.004dc88f
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
je 0x491a40
mov ebp, dword [esp + 0x14]
mov ebx, dword [ebp + 0xf4]
neg ebx
inc ebx
push ebx
mov ebp, dword [esp + 0x18]
pop eax
mov dword [ebp + 0xf4], eax
call fcn.0045d23b
jmp 0x493329
mov ebx, 0x39
cmp ebx, dword [esp]
jne 0x491ab2
cmp dword [0x7c1994], 0
je 0x491a9e
push edx
call fcn.005b1230
pop edx
push eax
push 0
push edx
call fcn.005b1230
pop edx
push eax
mov eax, 0x74abfa
push eax
mov eax, 0x7346d6
push eax
call fcn.005000d1
call fcn.005b1360
mov eax, 0x72e4d2
push eax
call fcn.0054d542
add dword [esp + 4], edx
call fcn.00442949
call fcn.0054d560
jmp 0x491aad
push 0
push 0x7c282c
call fcn.004fd3b0
jmp 0x493329
mov ebx, 0x3a
cmp ebx, dword [esp]
jne 0x491b30
cmp dword [0x7c195c], 0
je 0x491b16
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x491ae4
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
jne 0x491ae4
jmp 0x491aeb
mov eax, 1
jmp 0x491aed
xor eax, eax
and eax, eax
jne 0x491b02
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x364], 0
jne 0x491b02
jmp 0x491b09
mov eax, 1
jmp 0x491b0b
xor eax, eax
and eax, eax
je 0x491b16
mov eax, 1
jmp 0x491b18
xor eax, eax
and eax, eax
je 0x491b2b
push 0
push 0
call fcn.00546a90
jmp 0x493329
mov ebx, 0x3b
cmp ebx, dword [esp]
jne 0x491bc8
cmp dword [0x7c195c], 0
je 0x491b90
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x491b66
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
jne 0x491b66
jmp 0x491b6d
mov eax, 1
jmp 0x491b6f
xor eax, eax
and eax, eax
je 0x491b83
cmp dword [0x7c2008], 0
je 0x491b83
mov eax, 1
jmp 0x491b85
xor eax, eax
and eax, eax
je 0x491b90
mov eax, 1
jmp 0x491b92
xor eax, eax
and eax, eax
je 0x491ba8
push 1
push dword [0x7c2008]
call fcn.0041d8b8
jmp 0x491bc3
mov ebp, dword [0x7c195c]
cmp dword [ebp + 8], 0
je 0x491bbe
push 1
call fcn.0041490f
call fcn.0042ca15
jmp 0x493329
mov ebx, 0x236
cmp ebx, dword [esp]
jg 0x491cb4
mov ebx, 0x29a
cmp ebx, dword [esp]
jl 0x491cb4
cmp dword [0x7c23a0], 0
je 0x491caf
mov ebx, dword [esp + 0x58]
add ebx, 0xfffffdca
mov dword [esp + 0x18], ebx
mov dword [0x7c2008], 0
push dword [0x7c3388]
call fcn.005a9d3a
push dword [0x7c3388]
call fcn.005a9d4f
or eax, eax
je 0x491caf
mov ebx, dword [esp + 0x18]
push dword [0x7c3388]
call fcn.005a9ea1
cmp ebx, eax
jne 0x491c7a
mov ebp, dword [0x7c338c]
mov dword [ebp + 0x1c], 1
push 1
push dword [0x7c3388]
call fcn.005a9ea1
mov ebx, eax
add ebx, 0x236
push ebx
push 0
call fcn.00574203
mov ebp, dword [0x7c338c]
lea eax, [ebp + 8]
mov dword [0x7c2008], eax
jmp 0x491caa
mov ebp, dword [0x7c338c]
mov dword [ebp + 0x1c], 0
push 0
push dword [0x7c3388]
call fcn.005a9ea1
mov ebx, eax
add ebx, 0x236
push ebx
push 0
call fcn.00574203
jmp 0x491c14
jmp 0x493329
mov ebx, 0x29b
cmp ebx, dword [esp]
jg 0x491cff
mov ebx, 0x2ff
cmp ebx, dword [esp]
jl 0x491cff
cmp dword [0x7c23a0], 0
je 0x491cfa
mov ebx, dword [esp + 0x58]
add ebx, 0xfffffd65
push ebx
push dword [0x7c3388]
call fcn.005a9ecd
and eax, eax
je 0x491cfa
mov ebp, dword [0x7c338c]
lea eax, [ebp + 8]
push eax
call fcn.004f9ce6
jmp 0x493329
mov ebx, 0x3c
cmp ebx, dword [esp]
jne 0x491d1c
cmp dword [0x7c23a0], 0
je 0x491d17
call fcn.00450998
jmp 0x493329
mov ebx, 0x30
cmp ebx, dword [esp]
jne 0x491d30
call fcn.0041c870
jmp 0x493329
mov ebx, 0x33
cmp ebx, dword [esp]
jne 0x491d44
call fcn.0051b53b
jmp 0x493329
mov ebx, 0x55
cmp ebx, dword [esp]
jne 0x491d5e
mov eax, 0x737c04
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x56
cmp ebx, dword [esp]
jne 0x491d72
call fcn.004e7653
jmp 0x493329
mov ebx, 0x57
cmp ebx, dword [esp]
jne 0x491d86
call fcn.0042d6cf
jmp 0x493329
mov ebx, 0x61
cmp ebx, dword [esp]
jne 0x491d9a
call fcn.0041babd
jmp 0x493329
mov ebx, 0x62
cmp ebx, dword [esp]
jne 0x491dd0
push edx
call fcn.005b1230
pop edx
push eax
push edx
call fcn.005b1230
pop edx
push eax
call fcn.004c31af
call fcn.0054d542
add dword [esp], edx
call fcn.00484d6b
call fcn.0054d560
jmp 0x493329
mov ebx, 0x63
cmp ebx, dword [esp]
jne 0x491de4
call fcn.0051b488
jmp 0x493329
mov ebx, 0x64
cmp ebx, dword [esp]
jne 0x491df8
call fcn.004c5063
jmp 0x493329
mov ebx, 0x65
cmp ebx, dword [esp]
jne 0x491e11
push 0
call fcn.00471046
jmp 0x493329
mov ebx, 0x66
cmp ebx, dword [esp]
jne 0x491e2a
push 1
call fcn.00471046
jmp 0x493329
mov ebx, 0x67
cmp ebx, dword [esp]
jne 0x491e43
push 1
call fcn.0042373a
jmp 0x493329
mov ebx, 0x68
cmp ebx, dword [esp]
jne 0x491e5c
push 0
call fcn.0042373a
jmp 0x493329
mov ebx, 0x69
cmp ebx, dword [esp]
jne 0x491e70
call fcn.004a087a
jmp 0x493329
mov ebx, 0x6a
cmp ebx, dword [esp]
jne 0x491e84
call fcn.00520d0d
jmp 0x493329
mov ebx, 0x6b
cmp ebx, dword [esp]
jne 0x491ed6
cmp dword [0x7c195c], 0
je 0x491eab
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x491eab
mov eax, 1
jmp 0x491ead
xor eax, eax
and eax, eax
je 0x491ed1
push 0
push 0
push 0xa3c
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
jmp 0x493329
mov ebx, 0x6c
cmp ebx, dword [esp]
jne 0x491f28
cmp dword [0x7c195c], 0
je 0x491efd
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x491efd
mov eax, 1
jmp 0x491eff
xor eax, eax
and eax, eax
je 0x491f23
push 0
push 0
push 0xa3d
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
jmp 0x493329
mov ebx, 0x6d
cmp ebx, dword [esp]
jne 0x49206e
cmp dword [0x7c195c], 0
je 0x491f53
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x491f53
mov eax, 1
jmp 0x491f55
xor eax, eax
and eax, eax
je 0x492069
push 0
push 0
push 0
push 0x85f
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
push eax
push 0x876
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
mov dword [esp + 0x1c], eax
push 0
push 0
push 0
push 0x861
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
push eax
push 0x876
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
mov dword [esp + 0x20], eax
push 0
push dword [esp + 0x20]
push 0x877
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
mov dword [esp + 0x24], eax
push 0
push dword [esp + 0x24]
push 0x877
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
mov ebx, eax
push 0
push dword [esp + 0x24]
push 0x92e
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
add ebx, eax
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x28]
sub ebx, dword [esp + 0x24]
push ebx
push dword [esp + 0x28]
push 0xa55
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
jmp 0x493329
mov ebx, 0x6e
cmp ebx, dword [esp]
jne 0x4920c0
cmp dword [0x7c195c], 0
je 0x492095
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x492095
mov eax, 1
jmp 0x492097
xor eax, eax
and eax, eax
je 0x4920bb
push 0
push 0
push 0x9a5
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
jmp 0x493329
mov ebx, 0x6f
cmp ebx, dword [esp]
jne 0x4920d9
push 0
call fcn.00477ce8
jmp 0x493329
mov ebx, 0x70
cmp ebx, dword [esp]
jne 0x4920f2
push 1
call fcn.00477ce8
jmp 0x493329
mov ebx, 0x71
cmp ebx, dword [esp]
jne 0x49210b
push 2
call fcn.00477ce8
jmp 0x493329
mov ebx, 0x72
cmp ebx, dword [esp]
jne 0x492124
push 3
call fcn.00477ce8
jmp 0x493329
mov ebx, 0x73
cmp ebx, dword [esp]
jne 0x49217b
cmp dword [0x7c195c], 0
je 0x49214b
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x49214b
mov eax, 1
jmp 0x49214d
xor eax, eax
and eax, eax
je 0x492166
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x492166
mov eax, 1
jmp 0x492168
xor eax, eax
and eax, eax
je 0x492176
push 1
call fcn.004d1c51
jmp 0x493329
mov ebx, 0x74
cmp ebx, dword [esp]
jne 0x4921d2
cmp dword [0x7c195c], 0
je 0x4921a2
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x4921a2
mov eax, 1
jmp 0x4921a4
xor eax, eax
and eax, eax
je 0x4921bd
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x4921bd
mov eax, 1
jmp 0x4921bf
xor eax, eax
and eax, eax
je 0x4921cd
push 0xffffffff
call fcn.004d1c51
jmp 0x493329
mov ebx, 0x75
cmp ebx, dword [esp]
jne 0x492224
cmp dword [0x7c195c], 0
je 0x4921f9
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x4921f9
mov eax, 1
jmp 0x4921fb
xor eax, eax
and eax, eax
je 0x492214
mov ebx, dword [0x7c195c]
cmp ebx, dword [0x7c226c]
je 0x492214
mov eax, 1
jmp 0x492216
xor eax, eax
and eax, eax
je 0x49221f
call fcn.00487c4c
jmp 0x493329
mov ebx, 0x20
cmp ebx, dword [esp]
jne 0x492310
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x3d8]
neg ebx
inc ebx
push ebx
mov ebp, dword [0x7c195c]
pop eax
mov dword [ebp + 0x3d8], eax
push dword [0x7c195c]
call fcn.004c95a9
mov ebx, eax
dec ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0xc], 0
jmp 0x49226b
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0xc]
jl 0x49229d
push dword [esp + 0xc]
call fcn.00414a1f
and eax, eax
je 0x492297
mov ebp, dword [0x7c195c]
push dword [ebp + 0x3d8]
push dword [esp + 0x10]
call fcn.004d5178
inc dword [esp + 0xc]
jno 0x49226b
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x3d8], 0
jne 0x4922de
push 0
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x388]
dec ebx
push ebx
push 0x8b1
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4922de
jmp 0x4922e5
mov eax, 1
jmp 0x4922e7
xor eax, eax
and eax, eax
je 0x49230b
push 0
push 0
push 0x879
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
jmp 0x493329
mov ebx, 0x1f
cmp ebx, dword [esp]
jne 0x4923bf
call fcn.005132a6
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x388]
dec ebx
push ebx
call fcn.00414a1f
and eax, eax
je 0x492365
push 0
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x388]
dec ebx
push ebx
push 0x8b7
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
jmp 0x4923ba
push 0
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x388]
dec ebx
push ebx
push 0x8b1
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
mov dword [esp + 0x30], eax
mov ebx, dword [esp + 0x30]
cmp ebx, 0xffffffff
je 0x4923ba
push 0
push dword [esp + 0x34]
push 0x8b7
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.0057f15d
jmp 0x493329
mov ebx, 0x1e
cmp ebx, dword [esp]
jne 0x492411
cmp dword [0x7c195c], 0
je 0x49240c
push 0x4c
mov ebp, dword [0x7c195c]
lea eax, [ebp + 0x3dc]
push eax
mov ebp, dword [0x7c195c]
lea eax, [ebp + 0x3e0]
push eax
call fcn.005b03a0
push 0xfffffffb
mov ebp, dword [0x7c195c]
push dword [ebp + 0x3dc]
call fcn.0051f141
jmp 0x493329
mov ebx, 0x21
cmp ebx, dword [esp]
jne 0x492425
call fcn.005433a3
jmp 0x493329
mov ebx, 0x22
cmp ebx, dword [esp]
jne 0x492439
call fcn.004fbe59
jmp 0x493329
mov ebx, 0x23
cmp ebx, dword [esp]
jne 0x49244d
call fcn.0045f7a0
jmp 0x493329
mov ebx, 0x76
cmp ebx, dword [esp]
jne 0x492461
call fcn.0051648b
jmp 0x493329
mov ebx, 0x77
cmp ebx, dword [esp]
jne 0x49248e
cmp dword [0x7c18f8], 0
je 0x49247b
call fcn.00487d0f
jmp 0x492489
cmp dword [0x7c1c34], 0
je 0x492489
call fcn.00501d46
jmp 0x493329
mov ebx, 0x79
cmp ebx, dword [esp]
jne 0x4924db
push dword [0x7c195c]
call fcn.004a7838
push 0xffffffff
push 0
push dword [0x7c195c]
call fcn.004cd35f
push 0xffffffff
call fcn.0050999b
call fcn.00472933
push 0xffffffff
push 0xffffffff
call fcn.0054b7eb
jmp 0x493329
mov ebx, 0x58
cmp ebx, dword [esp]
jne 0x4924f5
mov eax, 0x745718
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x59
cmp ebx, dword [esp]
jne 0x49250f
mov eax, 0x7439bc
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x5a
cmp ebx, dword [esp]
jne 0x492529
mov eax, 0x73ca72
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x5b
cmp ebx, dword [esp]
jne 0x492543
mov eax, 0x72de7c
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x5c
cmp ebx, dword [esp]
jne 0x49255d
mov eax, 0x73b57a
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x5d
cmp ebx, dword [esp]
jne 0x492577
mov eax, 0x736238
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x5e
cmp ebx, dword [esp]
jne 0x492591
mov eax, 0x733b30
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x5f
cmp ebx, dword [esp]
jne 0x4925ab
mov eax, 0x73a5e4
push eax
call fcn.004d4158
jmp 0x493329
mov ebx, 0x60
cmp ebx, dword [esp]
jne 0x4925bf
call fcn.00409f3f
jmp 0x493329
mov ebx, 0x3e
cmp ebx, dword [esp]
jne 0x4925d8
push 0
call fcn.004e3950
jmp 0x493329
mov ebx, 0x3f
cmp ebx, dword [esp]
jne 0x4925f1
push 0
call fcn.004f73f2
jmp 0x493329
mov ebx, 0x40
cmp ebx, dword [esp]
jne 0x49260a
push 0
call fcn.0040a18f
jmp 0x493329
mov ebx, 0x41
cmp ebx, dword [esp]
jne 0x492623
push 0
call fcn.00503c8b
jmp 0x493329
mov ebx, 0x42
cmp ebx, dword [esp]
jne 0x49263c
push 0
call fcn.0052f8ca
jmp 0x493329
mov ebx, 0x43
cmp ebx, dword [esp]
jne 0x492655
push 0
call fcn.004937cb
jmp 0x493329
mov ebx, 0x44
cmp ebx, dword [esp]
jne 0x49266e
push 0
call fcn.0046feed
jmp 0x493329
mov ebx, 0x45
cmp ebx, dword [esp]
jne 0x492695
call fcn.005132a6
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x388]
dec ebx
push ebx
call fcn.00472063
jmp 0x493329
mov ebx, 0x46
cmp ebx, dword [esp]
jne 0x4926a9
call fcn.0045a10b
jmp 0x493329
mov ebx, 0x47
cmp ebx, dword [esp]
jne 0x4926d7
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x4926d2
push dword [esp + 0x34]
call fcn.004186ed
jmp 0x493329
mov ebx, 0x48
cmp ebx, dword [esp]
jne 0x492782
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
je 0x49270e
mov ebx, dword [0x7c1e0c]
neg ebx
inc ebx
mov dword [0x7c1e0c], ebx
mov eax, dword [0x7c1e0c]
mov dword [esp + 0x38], eax
jmp 0x49273b
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x42c]
neg ebx
inc ebx
push ebx
mov ebp, dword [0x7c195c]
pop eax
mov dword [ebp + 0x42c], eax
mov ebp, dword [0x7c195c]
mov eax, dword [ebp + 0x42c]
mov dword [esp + 0x38], eax
mov ebx, dword [0x7c21a8]
and ebx, ebx
jne 0x492753
cmp dword [esp + 0x38], 0
je 0x492753
mov eax, 1
jmp 0x492755
xor eax, eax
and eax, eax
je 0x492760
call fcn.004b0445
jmp 0x492765
call fcn.004dc624
push dword [esp + 0x38]
push 0x48
push 0
call fcn.00574203
call fcn.00480b94
jmp 0x493329
mov ebx, 0x49
cmp ebx, dword [esp]
jne 0x4927cc
push 4
call fcn.0057fc17
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
je 0x4927b2
push dword [0x7c3398]
call fcn.005a9e39
jmp 0x4927c2
mov ebp, dword [0x7c195c]
mov dword [ebp + 0x430], 0
call fcn.0045d23b
jmp 0x493329
mov ebx, 0x4a
cmp ebx, dword [esp]
jne 0x4928d1
mov edx, 0x72b0ec
lea ecx, [esp + 0x3c]
call fcn.0054d008
mov ebp, dword [0x7c195c]
cmp dword [ebp + 0x838], 0
je 0x49284b
push dword [0x7c3398]
call fcn.005a9d3a
push dword [0x7c3398]
call fcn.005a9d4f
or eax, eax
je 0x492849
mov edx, dword [esp + 0x3c]
push edx
call fcn.005b1230
pop edx
push eax
push edx
call fcn.005b1270
mov ebp, dword [0x7c339c]
mov edx, dword [ebp + 8]
push edx
call fcn.005b1270
mov edx, 0x746002
push edx
call fcn.005b1270
lea eax, [esp + 0x40]
push eax
call fcn.005b12d0
jmp 0x492802
jmp 0x4928b2
mov dword [esp + 0xc], 0
jmp 0x492855
mov ebp, dword [0x7c195c]
mov ebx, dword [ebp + 0x430]
dec ebx
cmp ebx, dword [esp + 0xc]
jl 0x4928b2
mov edx, dword [esp + 0x3c]
push edx
call fcn.005b1230
pop edx
push eax
push edx
call fcn.005b1270
mov ebp, dword [0x7c195c]
push ebp
mov eax, dword [esp + 0x14]
shl eax, 2
pop ebp
add ebp, eax
mov edx, dword [ebp + 0x434]
push edx
call fcn.005b1270
mov edx, 0x746002
push edx
call fcn.005b1270
lea eax, [esp + 0x40]
push eax
call fcn.005b12d0
inc dword [esp + 0xc]
jno 0x492855
push dword [esp + 0x3c]
mov edx, 0x72b0ec
pop ecx
call fcn.0054d570
jne 0x4928cc
push dword [esp + 0x3c]
call fcn.0059e27e
jmp 0x493329
mov ebx, 0x4b
cmp ebx, dword [esp]
jne 0x4928eb
push dword [0x7c195c]
call fcn.0052b968
jmp 0x493329
mov ebx, 0x4c
cmp ebx, dword [esp]
jne 0x49291e
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x492919
push 1
push dword [esp + 0x38]
call fcn.004f8d48
jmp 0x493329
mov ebx, 0x4d
cmp ebx, dword [esp]
jne 0x49294c
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x492947
push dword [esp + 0x34]
call fcn.0043b42e
jmp 0x493329
mov ebx, 0x4e
cmp ebx, dword [esp]
jne 0x49297a
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x492975
push dword [esp + 0x34]
call fcn.00431bff
jmp 0x493329
mov ebx, 0x4f
cmp ebx, dword [esp]
jne 0x4929a8
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x4929a3
push dword [esp + 0x34]
call fcn.0053efc7
jmp 0x493329
mov ebx, 0x50
cmp ebx, dword [esp]
jne 0x4929d6
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x4929d1
push dword [esp + 0x34]
call fcn.004ea27c
jmp 0x493329
mov ebx, 0x51
cmp ebx, dword [esp]
jne 0x492a04
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x4929ff
push dword [esp + 0x34]
call fcn.0052cc2f
jmp 0x493329
mov ebx, 0x52
cmp ebx, dword [esp]
jne 0x492a32
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x492a2d
push dword [esp + 0x34]
call fcn.00411d6a
jmp 0x493329
mov ebx, 0x54
cmp ebx, dword [esp]
jne 0x492a60
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x492a5b
push dword [esp + 0x34]
call fcn.004fb016
jmp 0x493329
mov ebx, 0x53
cmp ebx, dword [esp]
jne 0x492a8e
push dword [0x7c195c]
call fcn.0045fcb2
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
je 0x492a89
push dword [esp + 0x34]
call fcn.004c02c7
jmp 0x493329
mov ebx, 0x313
cmp ebx, dword [esp]
jne 0x492ae8
push 0x10
call fcn.0057fb82
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x18]
cmp ebx, 0xffffffff
je 0x492ac9
push dword [esp + 0x18]
push dword [0x7c3388]
call fcn.005a9ecd
and eax, eax
je 0x492ac9
mov eax, 1
jmp 0x492acb
xor eax, eax
and eax, eax
je 0x492ae3
mov ebp, dword [0x7c338c]
lea eax, [ebp + 8]
push eax
push 1
call fcn.00546a90
jmp 0x493329
mov ebx, 0x314
cmp ebx, dword [esp]
jne 0x492c57
push 0x10
call fcn.0057fb82
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x18]
cmp ebx, 0xffffffff
je 0x492b27
push dword [esp + 0x18]
push dword [0x7c3388]
call fcn.005a9ecd
and eax, eax
je 0x492b27
mov eax, 1
jmp 0x492b29
xor eax, eax
and eax, eax
je 0x492c52
mov ebp, dword [0x7c338c]
lea eax, [ebp + 8]
mov dword [esp + 0x40], eax
cmp dword [ebp + 0x1c], 0
je 0x492bc0
push dword [0x7c3388]
call fcn.005a9e97
mov ebx, eax
cmp ebx, 1
jne 0x492b6d
mov ebp, dword [0x7c338c]
mov dword [ebp + 0x1c], 1
lea eax, [ebp + 8]
mov dword [0x7c2008], eax
jmp 0x492bbe
mov ebp, dword [0x7c338c]
mov dword [ebp + 0x1c], 0
push dword [0x7c3388]
call fcn.005a9d3a
push dword [0x7c3388]
call fcn.005a9d4f
or eax, eax
je 0x492bbe
mov ebp, dword [0x7c338c]
mov dword [ebp + 0x1c], 1
mov eax, dword [esp + 0x40]
mov dword [0x7c2008], eax
push dword [0x7c3388]
call fcn.005a9d3a
push dword [0x7c3388]
call fcn.005a9d4f
or eax, eax
je 0x492c10
mov ebp, dword [0x7c338c]
lea eax, [ebp + 8]
mov ebx, eax
cmp ebx, dword [esp + 0x40]
je 0x492c0e
push dword [0x7c3388]
call fcn.005a9d3a
push dword [0x7c3388]
call fcn.005a9d4f
or eax, eax
je 0x492c52
jmp 0x493329
mov ebx, 0x315
cmp ebx, dword [esp]
jne 0x492ce7
push 0x10
call fcn.0057fb82
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0x18]
cmp ebx, 0xffffffff
je 0x492c96
push dword [esp + 0x18]
push dword [0x7c3388]
call fcn.005a9ecd
and eax, eax
je 0x492c96
mov eax, 1
jmp 0x492c98
xor eax, eax
and eax, eax
je 0x492ce2
mov ebp, dword [0x7c338c]
cmp dword [ebp + 0x18], 0
je 0x492cb7
mov ebp, dword [0x7c338c]
mov dword [ebp + 0x18], 0
jmp 0x492cc4
mov ebp, dword [0x7c338c]
mov dword [ebp + 0x18], 1
mov ebp, dword [0x7c338c]
lea eax, [ebp + 8]
push eax
call fcn.005220b5
push eax
push dword [esp + 0x1c]
push 0x10
call fcn.0057fe74
jmp 0x493329
mov ebx, 0x301
cmp ebx, dword [esp]
jne 0x492e69
cmp dword [0x7c18f8], 0
je 0x492d16
mov ebp, dword [0x7c321c]
mov ebx, dword [ebp + 0x1dc]
cmp ebx, 0xd
jne 0x492d16
mov eax, 1
jmp 0x492d18
xor eax, eax
and eax, eax
je 0x492d26
call fcn.00487d0f
jmp 0x492e64
push 2
call fcn.0051df63
mov ebx, eax
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.00584871
cmp ebx, eax
jne 0x492d9a
mov ebx, 0x302
cmp ebx, dword [esp]
jne 0x492ff5
cmp dword [0x7c18f8], 0
je 0x492e98
mov ebp, dword [0x7c321c]
mov ebx, dword [ebp + 0x1dc]
cmp ebx, 9
jne 0x492e98
xor eax, eax
and eax, eax
je 0x492ea8
mov ebx, 0x303
cmp ebx, dword [esp]
jne 0x493122
push 2
call fcn.0051df63
mov ebx, eax
mov ebp, dword [0x7c195c]
push dword [ebp + 0x378]
call fcn.00584871
cmp ebx, eax
jne 0x493073
mov ebx, 0x304
cmp ebx, dword [esp]
jne 0x493141
pop eax
mov eax, dword [esp]
jmp 0x493331
push dword [esp + 0x38]
call fcn.005b1460
add esp, 0x48
pop ebx
pop ebp
ret 4