Function at 0x49c63c
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x23
push 0
push 0
dec ecx
jne 0x49c645
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404928
mov esi, 0x4ba024
xor eax, eax
push ebp
push 0x49eac7
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eae0
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eaec
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x18]
mov eax, ebx
pop ecx
call fcn.0040478c
mov edx, dword [ebp - 8]
mov eax, 0x49eaf8
call fcn.00404a7c
test eax, eax
jne 0x49c709
mov edx, dword [ebp - 8]
mov eax, 0x49eb04
call fcn.00404a7c
test eax, eax
jne 0x49c709
mov edx, dword [ebp - 8]
mov eax, 0x49eb10
call fcn.00404a7c
test eax, eax
jne 0x49c709
mov edx, dword [ebp - 8]
mov eax, 0x49eb1c
call fcn.00404a7c
test eax, eax
je 0x49c718
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49eb28
call fcn.00404a7c
test eax, eax
jne 0x49c76d
mov edx, dword [ebp - 8]
mov eax, 0x49eb3c
call fcn.00404a7c
test eax, eax
jne 0x49c76d
mov edx, dword [ebp - 8]
mov eax, 0x49eb4c
call fcn.00404a7c
test eax, eax
jne 0x49c76d
mov edx, dword [ebp - 8]
mov eax, 0x49eb58
call fcn.00404a7c
test eax, eax
jne 0x49c76d
mov edx, dword [ebp - 8]
mov eax, 0x49eb68
call fcn.00404a7c
test eax, eax
je 0x49c77d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x528]
mov dl, 1
call fcn.004300e8
mov edx, dword [ebp - 8]
mov eax, 0x49eb78
call fcn.00404a7c
test eax, eax
je 0x49c7fe
mov edx, dword [ebp - 8]
mov eax, 0x49eb90
call fcn.00404a7c
test eax, eax
je 0x49c7fe
mov edx, dword [ebp - 8]
mov eax, 0x49eba0
call fcn.00404a7c
test eax, eax
je 0x49c7fe
mov eax, ebx
mov edx, 0x49ebb0
call fcn.004044dc
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eba0
call fcn.00404a7c
add eax, 6
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, 0x49ebc0
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ebd0
call fcn.00404a7c
test eax, eax
jne 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ebe4
call fcn.00404a7c
test eax, eax
je 0x49c86b
mov eax, ebx
mov edx, 0x49ebfc
call fcn.004044dc
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 6
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x49ec18
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ec28
call fcn.00404a7c
test eax, eax
je 0x49c8b4
mov eax, ebx
mov edx, 0x49ebfc
call fcn.004044dc
push 0x4ba034
mov edx, dword [ebp - 8]
mov eax, 0x49ec44
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ec50
call fcn.00404a7c
test eax, eax
je 0x49c93d
mov eax, ebx
mov edx, 0x49ebfc
call fcn.004044dc
push 0x4ba038
mov edx, dword [ebp - 8]
mov eax, 0x49ec44
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push dword [0x4ba034]
push 0x49ec0c
push dword [0x4ba038]
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov ecx, 0x49ec70
mov edx, dword [esi]
call fcn.0040478c
mov ecx, dword [ebp - 0x28]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ec80
call fcn.00404a7c
test eax, eax
je 0x49c986
mov eax, ebx
mov edx, 0x49ebfc
call fcn.004044dc
push 0x4ba03c
mov edx, dword [ebp - 8]
mov eax, 0x49ec44
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ec9c
call fcn.00404a7c
test eax, eax
je 0x49c9cf
mov eax, ebx
mov edx, 0x49ebfc
call fcn.004044dc
push 0x4ba040
mov edx, dword [ebp - 8]
mov eax, 0x49ec44
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
jmp 0x49ea84
mov eax, dword [ebp - 8]
mov edx, 0x49ecb8
call fcn.00404884
jne 0x49ca3e
cmp dword [0x4ba034], 0
je 0x49ca0f
mov eax, ebx
mov edx, 0x49ecd0
call fcn.004044dc
mov eax, dword [0x4ba040]
push eax
mov ecx, 0x49ebc0
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
lea edx, [ebp - 0x2c]
mov eax, dword [0x4b8894]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
call fcn.00438c44
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x4b8894]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f0]
call fcn.0042e0bc
jmp 0x49ea84
mov eax, dword [ebp - 8]
mov edx, 0x49ecfc
call fcn.00404884
je 0x49ca6d
mov eax, dword [ebp - 8]
mov edx, 0x49ed14
call fcn.00404884
je 0x49ca6d
mov edx, dword [ebp - 8]
mov eax, 0x49ed28
call fcn.00404a7c
test eax, eax
je 0x49ca7e
mov eax, ebx
mov edx, 0x49ed38
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ed44
call fcn.00404a7c
test eax, eax
je 0x49caa0
mov eax, ebx
mov edx, 0x49ed50
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ed64
call fcn.00404a7c
test eax, eax
je 0x49cac8
mov eax, ebx
mov ecx, 0x49eaec
mov edx, dword [0x4ba048]
call fcn.0040478c
jmp 0x49ea84
lea eax, [ebp - 0x30]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x30]
mov edx, 0x49ed50
call fcn.00404884
jne 0x49cba6
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49ed70
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov edi, dword [eax]
call dword [edi]
cmp dword [ebp - 0xc], 0
jne 0x49cb23
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49ed50
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov edi, dword [eax]
call dword [edi]
push 0
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x49ec18
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov esi, dword [eax]
call dword [esi]
mov eax, dword [ebp - 0x34]
mov edx, 0x49ed84
call fcn.00404884
jne 0x49cb50
lea eax, [ebp - 0xc]
call fcn.00404488
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov edx, 0xa
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc]
call fcn.00404884
jne 0x49cb8f
mov eax, ebx
mov ecx, 0x49eaec
mov edx, dword [0x4ba048]
call fcn.0040478c
jmp 0x49ea84
mov eax, ebx
mov ecx, 0x49eae0
mov edx, dword [0x4ba048]
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ed94
call fcn.00404a7c
test eax, eax
je 0x49cc0e
mov edx, dword [ebp - 8]
mov eax, 0x49eda4
call fcn.00404a7c
test eax, eax
je 0x49cc0e
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
jne 0x49cc0e
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eaec
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x3c]
mov eax, ebx
mov ecx, 0x49edbc
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49edd0
call fcn.00404a7c
test eax, eax
je 0x49cc78
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
jne 0x49cc78
push 0x4b9fec
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [0x4b85d4]
mov eax, dword [eax]
mov edx, dword [0x4b9fec]
call fcn.0047432c
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.004b1150
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ede0
call fcn.00404a7c
test eax, eax
je 0x49cd04
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
jne 0x49cd04
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x68
je 0x49ccbe
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x3a
jne 0x49ccca
mov eax, 0x4ba044
call fcn.00404488
jmp 0x49ccf3
push 0x4ba044
mov edx, dword [ebp - 8]
mov eax, 0x49edfc
call fcn.00404a7c
add eax, 2
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, ebx
mov edx, 0x49ee08
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ee20
call fcn.00404a7c
test eax, eax
je 0x49cd7e
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
jne 0x49cd7e
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x3a
jne 0x49cd44
mov eax, 0x4ba044
call fcn.00404488
jmp 0x49cd6d
push 0x4ba044
mov edx, dword [ebp - 8]
mov eax, 0x49edfc
call fcn.00404a7c
add eax, 2
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, ebx
mov edx, 0x49ee08
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ee3c
call fcn.00404a7c
test eax, eax
je 0x49ce31
mov edx, dword [ebp - 8]
mov eax, 0x49eba0
call fcn.00404a7c
test eax, eax
je 0x49ce31
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
jne 0x49ce31
push 0x4ba040
mov edx, dword [ebp - 8]
mov eax, 0x49ebc0
call fcn.00404a7c
mov esi, eax
mov edx, dword [ebp - 8]
mov eax, 0x49ee50
call fcn.00404a7c
sub esi, eax
dec esi
push esi
mov edx, dword [ebp - 8]
mov eax, 0x49ee50
call fcn.00404a7c
mov edx, eax
inc edx
mov eax, dword [ebp - 8]
pop ecx
call fcn.00404998
push 0x4ba044
mov edx, dword [ebp - 8]
mov eax, 0x49edfc
call fcn.00404a7c
add eax, 2
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, ebx
mov edx, 0x49ee5c
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ee08
call fcn.00404a7c
test eax, eax
je 0x49ce94
push 0x4ba040
mov edx, dword [ebp - 8]
mov eax, 0x49ee50
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [0x4ba040], 0
jne 0x49ce83
mov eax, ebx
mov edx, 0x49ee08
call fcn.004044dc
jmp 0x49ea84
mov eax, ebx
mov edx, 0x49ee5c
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ee5c
call fcn.00404a7c
test eax, eax
je 0x49cf2a
push 0x4ba03c
mov edx, dword [ebp - 8]
mov eax, 0x49ee50
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [0x4ba03c], 0
jne 0x49cee8
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004044dc
jmp 0x49ea84
cmp dword [0x4ba044], 0
jne 0x49cf02
mov eax, ebx
mov edx, 0x49ee7c
call fcn.004044dc
jmp 0x49ea84
mov eax, dword [0x4ba044]
push eax
mov ecx, 0x49ebc0
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov esi, dword [eax]
call dword [esi + 4]
mov eax, ebx
mov edx, 0x49ee98
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ee7c
call fcn.00404a7c
test eax, eax
je 0x49cfa2
push 0x4ba044
mov edx, dword [ebp - 8]
mov eax, 0x49ee50
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [0x4ba044], 0
jne 0x49cf7a
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004044dc
jmp 0x49ea84
mov eax, ebx
mov edx, 0x49ee98
call fcn.004044dc
mov eax, dword [0x4ba044]
push eax
mov ecx, 0x49ebc0
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49eeac
call fcn.00404a7c
test eax, eax
je 0x49cfc8
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
je 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49eec4
call fcn.00404a7c
test eax, eax
je 0x49cfee
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
je 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49eedc
call fcn.00404a7c
test eax, eax
jne 0x49d021
mov edx, dword [ebp - 8]
mov eax, 0x49eef0
call fcn.00404a7c
test eax, eax
je 0x49d065
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
jne 0x49d065
push 0
lea eax, [ebp - 0x40]
mov ecx, 0x49eefc
mov edx, dword [0x4ba01c]
call fcn.0040478c
mov eax, dword [ebp - 0x40]
call fcn.00404938
push eax
lea eax, [ebp - 0x44]
mov ecx, 0x49ef10
mov edx, dword [0x4ba01c]
call fcn.0040478c
mov eax, dword [ebp - 0x44]
call fcn.00404938
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ef20
call fcn.00404a7c
test eax, eax
je 0x49d0cb
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
jne 0x49d0cb
push 0
lea eax, [ebp - 0x48]
mov ecx, 0x49ef10
mov edx, dword [0x4ba01c]
call fcn.0040478c
mov eax, dword [ebp - 0x48]
call fcn.00404938
push eax
lea eax, [ebp - 0x4c]
mov ecx, 0x49eefc
mov edx, dword [0x4ba01c]
call fcn.0040478c
mov eax, dword [ebp - 0x4c]
call fcn.00404938
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ef34
call fcn.00404a7c
test eax, eax
je 0x49d1ea
mov edx, dword [ebp - 8]
mov eax, 0x49ef44
call fcn.00404a7c
test eax, eax
je 0x49d125
lea eax, [ebp - 0x50]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ef54
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x50]
mov eax, ebx
mov ecx, 0x49ef60
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ef54
call fcn.00404a7c
test eax, eax
je 0x49d16b
lea eax, [ebp - 0x54]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ef54
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x54]
mov eax, ebx
mov ecx, 0x49ef70
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ef7c
call fcn.00404a7c
test eax, eax
je 0x49d1b1
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ef7c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x58]
mov eax, ebx
mov ecx, 0x49eaec
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49eaec
call fcn.00404a7c
test eax, eax
je 0x49d1d9
mov eax, ebx
mov ecx, 0x49eae0
mov edx, dword [0x4ba048]
call fcn.0040478c
jmp 0x49ea84
mov eax, ebx
mov edx, 0x49ef88
call fcn.004044dc
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49efac
call fcn.00404a7c
test eax, eax
je 0x49d236
lea eax, [ebp - 0x5c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 6
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, 0x49ec18
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49efc8
call fcn.00404a7c
test eax, eax
je 0x49d3b6
mov edx, dword [ebp - 8]
mov eax, 0x49efe0
call fcn.00404a7c
test eax, eax
jne 0x49d271
mov edx, dword [ebp - 8]
mov eax, 0x49eff0
call fcn.00404a7c
test eax, eax
je 0x49d3b6
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 4]
add eax, 0x6bc
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6bc]
mov al, byte [eax]
cmp al, 0x31
jb 0x49d2d0
cmp al, 0x39
jbe 0x49d2e1
mov eax, ebx
mov edx, 0x49f000
call fcn.004044dc
jmp 0x49ea84
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6bc]
call fcn.00408a94
cmp eax, 0x64
jge 0x49d305
mov edx, dword [ebp - 8]
mov eax, 0x49f014
call fcn.00404a7c
test eax, eax
jne 0x49d329
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6bc]
call fcn.00408a94
cmp eax, 0x64
jle 0x49d33a
mov edx, dword [ebp - 8]
mov eax, 0x49f014
call fcn.00404a7c
test eax, eax
jne 0x49d33a
mov eax, ebx
mov edx, 0x49f020
call fcn.004044dc
jmp 0x49ea84
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x20
jne 0x49d38e
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 4]
push dword [eax + 0x6b8]
push dword [ebp - 8]
push 0x49f034
mov eax, dword [ebp - 4]
add eax, 0x6b8
mov edx, 3
call fcn.00404800
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f040
call fcn.00404a7c
test eax, eax
je 0x49d3e2
push 0x49f058
mov ecx, 0x49eb28
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f064
call fcn.00404a7c
test eax, eax
je 0x49d409
mov ecx, 0x49eb28
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f080
call fcn.00404a7c
test eax, eax
je 0x49d551
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f9ac
test eax, eax
je 0x49d551
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49f098
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx]
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 0x60]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x60]
push eax
lea ecx, [ebp - 0x64]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004ad124
mov edx, dword [ebp - 0x64]
pop eax
call fcn.00404884
jne 0x49d515
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a1dc0
push dword [ebp - 0x68]
push dword [ebp - 8]
push 0x49f034
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x49f098
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov eax, dword [0x4b8894]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f0]
mov eax, dword [eax + 0x220]
mov edx, 0x49f0ac
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x4b8894]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f0]
mov eax, dword [eax + 0x220]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f0cc
call fcn.00404a7c
test eax, eax
je 0x49d60f
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49f098
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx]
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [ebp - 8], 0
je 0x49ea84
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a1dc0
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f0e4
call fcn.00404a7c
test eax, eax
je 0x49d636
mov ecx, 0x49f098
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f0f8
call fcn.00404a7c
test eax, eax
je 0x49d7c2
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49eb3c
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0xc], 0
je 0x49d677
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x61
jne 0x49d677
lea eax, [ebp - 0xc]
call fcn.00404488
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eaec
call fcn.00404a7c
add eax, 9
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
mov edx, 0x49f110
call fcn.00404884
jne 0x49d6c9
push 0x49f11c
mov ecx, 0x49eb3c
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f12c
call fcn.00404a7c
test eax, eax
je 0x49ea84
mov eax, dword [ebp - 8]
call fcn.00404740
cmp eax, 7
jl 0x49ea84
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x2e
je 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
test eax, eax
jne 0x49d77e
mov eax, dword [ebp - 8]
cmp byte [eax], 0x39
ja 0x49d77e
lea eax, [ebp - 0x70]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f12c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x70]
call fcn.00408a94
cmp eax, 0x7f
jge 0x49d75b
lea eax, [ebp - 8]
mov edx, 0x49f138
call fcn.00404748
jmp 0x49d77e
cmp eax, 0xc0
jge 0x49d771
lea eax, [ebp - 8]
mov edx, 0x49f14c
call fcn.00404748
jmp 0x49d77e
lea eax, [ebp - 8]
mov edx, 0x49f164
call fcn.00404748
lea eax, [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a1ee8
push dword [ebp - 0x74]
push dword [ebp - 8]
push 0x49f034
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x49eb3c
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f17c
call fcn.00404a7c
test eax, eax
je 0x49d7fc
push 0
mov ecx, 0x49eb3c
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
mov ecx, 0x49eb3c
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f194
call fcn.00404a7c
test eax, eax
je 0x49d862
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49eb3c
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx]
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eaec
call fcn.00404a7c
add eax, 0xc
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a1ee8
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f1ac
call fcn.00404a7c
test eax, eax
je 0x49d8e6
push 0x4ba048
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [0x4ba048]
push eax
mov ecx, 0x49f1bc
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x7c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ef7c
call fcn.00404a7c
mov edx, eax
mov ecx, 9
mov eax, dword [ebp - 8]
call fcn.00404998
mov ecx, dword [ebp - 0x7c]
mov eax, ebx
mov edx, dword [0x4ba048]
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f1d0
call fcn.00404a7c
test eax, eax
je 0x49d955
mov edx, dword [ebp - 8]
mov eax, 0x49f1e0
call fcn.00404a7c
test eax, eax
je 0x49d955
push 0x49f058
mov ecx, 0x49eb4c
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x80]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eaec
call fcn.00404a7c
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x80]
mov eax, ebx
mov ecx, 0x49f1f0
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f1d0
call fcn.00404a7c
test eax, eax
je 0x49d9ca
mov edx, dword [ebp - 8]
mov eax, 0x49eb58
call fcn.00404a7c
test eax, eax
je 0x49d9ca
push 0x49f058
mov ecx, 0x49eb58
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x84]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eaec
call fcn.00404a7c
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x84]
mov eax, ebx
mov ecx, 0x49f1f0
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f1d0
call fcn.00404a7c
test eax, eax
je 0x49da3f
mov edx, dword [ebp - 8]
mov eax, 0x49f204
call fcn.00404a7c
test eax, eax
je 0x49da3f
push 0x49f058
mov ecx, 0x49f204
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x88]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eaec
call fcn.00404a7c
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x88]
mov eax, ebx
mov ecx, 0x49f1f0
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f214
call fcn.00404a7c
test eax, eax
je 0x49da77
mov edx, dword [ebp - 8]
mov eax, 0x49f1e0
call fcn.00404a7c
test eax, eax
je 0x49da77
mov ecx, 0x49eb4c
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f214
call fcn.00404a7c
test eax, eax
je 0x49daaf
mov edx, dword [ebp - 8]
mov eax, 0x49eb58
call fcn.00404a7c
test eax, eax
je 0x49daaf
mov ecx, 0x49eb58
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f214
call fcn.00404a7c
test eax, eax
je 0x49dae7
mov edx, dword [ebp - 8]
mov eax, 0x49f204
call fcn.00404a7c
test eax, eax
je 0x49dae7
mov ecx, 0x49f204
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f228
call fcn.00404a7c
test eax, eax
je 0x49db92
mov edx, dword [ebp - 8]
mov eax, 0x49f238
call fcn.00404a7c
test eax, eax
je 0x49db92
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
test eax, eax
jne 0x49db52
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x49db78
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x49ed70
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f228
call fcn.00404a7c
test eax, eax
je 0x49dc3d
mov edx, dword [ebp - 8]
mov eax, 0x49f244
call fcn.00404a7c
test eax, eax
je 0x49dc3d
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
test eax, eax
jne 0x49dbfd
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x49dc23
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x49ed50
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f250
call fcn.00404a7c
test eax, eax
je 0x49dc77
mov edx, dword [ebp - 8]
mov eax, 0x49f238
call fcn.00404a7c
test eax, eax
je 0x49dc77
push 0
mov ecx, 0x49ed70
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f250
call fcn.00404a7c
test eax, eax
je 0x49dcb1
mov edx, dword [ebp - 8]
mov eax, 0x49f244
call fcn.00404a7c
test eax, eax
je 0x49dcb1
push 0
mov ecx, 0x49ed50
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f264
call fcn.00404a7c
test eax, eax
je 0x49dcd7
mov edx, dword [ebp - 8]
mov eax, 0x49f274
call fcn.00404a7c
test eax, eax
jne 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f264
call fcn.00404a7c
test eax, eax
je 0x49dcfd
mov edx, dword [ebp - 8]
mov eax, 0x49f284
call fcn.00404a7c
test eax, eax
jne 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f294
call fcn.00404a7c
test eax, eax
jne 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f2b8
call fcn.00404a7c
test eax, eax
je 0x49de02
mov edx, dword [ebp - 8]
mov eax, 0x49f12c
call fcn.00404a7c
test eax, eax
je 0x49de02
lea eax, [ebp - 0x8c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f2c8
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x8c]
push eax
lea eax, [ebp - 0x90]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f2c8
call fcn.00404a7c
mov edx, eax
sub edx, 2
mov ecx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x90]
mov eax, 0x4b9fd4
pop ecx
call fcn.0040478c
lea eax, [ebp - 0x94]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f2d4
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
push dword [ebp - 0x94]
push 0x49f2e0
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
mov dl, byte [edx + eax - 1]
lea eax, [ebp - 0x98]
call fcn.00404668
push dword [ebp - 0x98]
push 0x49ef70
mov eax, ebx
mov edx, 4
call fcn.00404800
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f2f0
call fcn.00404a7c
test eax, eax
je 0x49dee5
mov edx, dword [ebp - 8]
mov eax, 0x49edb0
call fcn.00404a7c
test eax, eax
je 0x49dee5
push 0x4b9fd4
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 4
mov eax, dword [ebp - 8]
call fcn.00404998
lea eax, [ebp - 0x9c]
mov edx, dword [0x4b9fd4]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x9c]
lea eax, [ebp - 0xa0]
call fcn.00402eb4
lea eax, [ebp - 0xa4]
mov edx, dword [0x4b9fd4]
mov dl, byte [edx + 3]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0xa0]
mov cl, 2
call fcn.00402e84
lea edx, [ebp - 0xa0]
mov eax, 0x4b9fd4
call fcn.004046e4
lea eax, [ebp - 0xa8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f2d4
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0xa8]
mov eax, ebx
mov ecx, 0x49ef60
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f300
call fcn.00404a7c
test eax, eax
je 0x49dfb0
mov edx, dword [ebp - 8]
mov eax, 0x49f314
call fcn.00404a7c
test eax, eax
je 0x49dfb0
mov edx, dword [ebp - 8]
mov eax, 0x49f324
call fcn.00404a7c
test eax, eax
jne 0x49df31
mov eax, 0x4b9fe8
mov edx, 0x49f330
call fcn.004044dc
jmp 0x49df40
mov eax, 0x4b9fe8
mov edx, 0x49f340
call fcn.004044dc
mov eax, dword [ebp - 4]
push dword [eax + 0x6bc]
push 0x49f34c
mov eax, dword [ebp - 4]
push dword [eax + 0x6b8]
lea eax, [ebp - 0xac]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0xac]
push eax
push dword [esi]
push dword [0x4b9fd4]
push dword [0x4b9fe8]
lea eax, [ebp - 0xb0]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xb0]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 4]
add eax, 0x6b8
call fcn.00404488
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f358
call fcn.00404a7c
test eax, eax
je 0x49e03a
mov edx, dword [ebp - 8]
mov eax, 0x49f314
call fcn.00404a7c
test eax, eax
je 0x49e03a
mov edx, dword [ebp - 8]
mov eax, 0x49f324
call fcn.00404a7c
test eax, eax
jne 0x49dff4
mov eax, 0x4b9fe8
mov edx, 0x49f330
call fcn.004044dc
jmp 0x49e003
mov eax, 0x4b9fe8
mov edx, 0x49f340
call fcn.004044dc
push 0
push dword [esi]
push dword [0x4b9fd4]
push dword [0x4b9fe8]
lea eax, [ebp - 0xb4]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xb4]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f370
call fcn.00404a7c
test eax, eax
je 0x49e1cc
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f384
call fcn.00404a7c
add eax, 5
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov ebx, 1
mov eax, ebx
cmp eax, 8
ja case.0x49e087.0
jmp dword [eax*4 + 0x49e08e]
lea eax, [ebp - 0x10]
mov edx, 0x49f394
call fcn.00404520
jmp case.0x49e087.0
lea eax, [ebp - 0x10]
mov edx, 0x49f3a4
call fcn.00404520
jmp case.0x49e087.0
lea eax, [ebp - 0x10]
mov edx, 0x49f3b4
call fcn.00404520
jmp case.0x49e087.0
lea eax, [ebp - 0x10]
mov edx, 0x49f3c4
call fcn.00404520
jmp case.0x49e087.0
lea eax, [ebp - 0x10]
mov edx, 0x49f3d4
call fcn.00404520
jmp case.0x49e087.0
lea eax, [ebp - 0x10]
mov edx, 0x49f3e4
call fcn.00404520
jmp case.0x49e087.0
lea eax, [ebp - 0x10]
mov edx, 0x49f3f4
call fcn.00404520
jmp case.0x49e087.0
lea eax, [ebp - 0x10]
mov edx, 0x49f404
call fcn.00404520
push 0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi]
call fcn.0040478c
mov ecx, dword [ebp - 0xbc]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xb8]
mov eax, 0x4b9fe8
call fcn.004044dc
lea eax, [ebp - 0xc0]
push eax
mov edx, dword [0x4b9fe8]
mov eax, 0x49f34c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [0x4b9fe8]
call fcn.00404998
mov eax, dword [ebp - 0xc0]
mov edx, dword [ebp - 8]
call fcn.00404884
jne 0x49e1bd
lea eax, [ebp - 0xc4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi]
call fcn.0040478c
mov ecx, dword [ebp - 0xc4]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov edi, dword [eax]
call dword [edi + 0x50]
inc ebx
cmp ebx, 9
jne 0x49e07c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f414
call fcn.00404a7c
test eax, eax
je 0x49e220
mov edx, dword [ebp - 8]
mov eax, 0x49ef54
call fcn.00404a7c
test eax, eax
je 0x49e220
push 0x49f424
lea eax, [ebp - 0xc8]
mov ecx, 0x49f434
mov edx, dword [0x4b9fd4]
call fcn.0040478c
mov ecx, dword [ebp - 0xc8]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f448
call fcn.00404a7c
test eax, eax
je 0x49e274
mov edx, dword [ebp - 8]
mov eax, 0x49ef54
call fcn.00404a7c
test eax, eax
je 0x49e274
push 0x49f458
lea eax, [ebp - 0xcc]
mov ecx, 0x49f434
mov edx, dword [0x4b9fd4]
call fcn.0040478c
mov ecx, dword [ebp - 0xcc]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f464
call fcn.00404a7c
test eax, eax
je 0x49e2df
lea eax, [ebp - 0xd0]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f47c
call fcn.00404a7c
mov edx, eax
add edx, 5
mov ecx, 9
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0xd0]
push eax
lea eax, [ebp - 0xd4]
mov ecx, 0x49f48c
mov edx, dword [0x4b9fd4]
call fcn.0040478c
mov ecx, dword [ebp - 0xd4]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f49c
call fcn.00404a7c
test eax, eax
je 0x49e3fe
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f700
test eax, eax
je 0x49e3fe
mov edx, dword [ebp - 8]
mov eax, 0x49f4ac
call fcn.00404a7c
test eax, eax
je 0x49e3fe
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push dword [esi]
push dword [0x4b9fd4]
push 0x49f4bc
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xd8]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
lea eax, [ebp - 0xdc]
mov ecx, 0x49f4c8
mov edx, dword [0x4b9fd4]
call fcn.0040478c
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049fbe4
test eax, eax
je 0x49ea84
mov eax, dword [ebp - 8]
push eax
push dword [esi]
push dword [0x4b9fd4]
push 0x49f4d4
lea eax, [ebp - 0xe0]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xe0]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f49c
call fcn.00404a7c
test eax, eax
je 0x49e42f
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f700
test eax, eax
je 0x49e42f
mov edx, dword [ebp - 8]
mov eax, 0x49f4e4
call fcn.00404a7c
test eax, eax
jne 0x49e444
mov edx, dword [ebp - 8]
mov eax, 0x49f4f4
call fcn.00404a7c
test eax, eax
je 0x49e52b
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [ebp - 8]
mov eax, 0x49f4f4
call fcn.00404a7c
test eax, eax
je 0x49e4c4
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f4f4
call fcn.00404a7c
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
lea eax, [ebp - 0xe4]
mov ecx, 0x49f504
mov edx, dword [0x4b9fd4]
call fcn.0040478c
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049fbe4
test eax, eax
je 0x49ea84
mov eax, dword [ebp - 8]
push eax
push dword [esi]
push dword [0x4b9fd4]
push 0x49f510
lea eax, [ebp - 0xe8]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xe8]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f520
call fcn.00404a7c
test eax, eax
je 0x49e5a2
mov edx, dword [ebp - 8]
mov eax, 0x49f538
call fcn.00404a7c
test eax, eax
je 0x49e5a2
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
mov dl, byte [edx + eax - 1]
lea eax, [ebp - 0xec]
call fcn.00404668
mov eax, dword [ebp - 0xec]
push eax
push dword [esi]
push dword [0x4b9fd4]
push 0x49f548
lea eax, [ebp - 0xf0]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xf0]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f558
call fcn.00404a7c
test eax, eax
je 0x49e619
mov edx, dword [ebp - 8]
mov eax, 0x49f538
call fcn.00404a7c
test eax, eax
je 0x49e619
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
mov dl, byte [edx + eax - 1]
lea eax, [ebp - 0xf4]
call fcn.00404668
mov eax, dword [ebp - 0xf4]
push eax
push dword [esi]
push dword [0x4b9fd4]
push 0x49f570
lea eax, [ebp - 0xf8]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xf8]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f580
call fcn.00404a7c
test eax, eax
je 0x49e63f
mov edx, dword [ebp - 8]
mov eax, 0x49f590
call fcn.00404a7c
test eax, eax
jne 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f580
call fcn.00404a7c
test eax, eax
je 0x49e665
mov edx, dword [ebp - 8]
mov eax, 0x49f5a8
call fcn.00404a7c
test eax, eax
jne 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f5b8
call fcn.00404a7c
test eax, eax
je 0x49e68b
mov edx, dword [ebp - 8]
mov eax, 0x49f5d0
call fcn.00404a7c
test eax, eax
jne 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f5b8
call fcn.00404a7c
test eax, eax
je 0x49e6b1
mov edx, dword [ebp - 8]
mov eax, 0x49f5e8
call fcn.00404a7c
test eax, eax
jne 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f5fc
call fcn.00404a7c
test eax, eax
je 0x49e707
mov edx, dword [ebp - 8]
mov eax, 0x49f4ac
call fcn.00404a7c
test eax, eax
je 0x49e707
push dword [esi]
push dword [0x4b9fd4]
push 0x49f4d4
lea eax, [ebp - 0xfc]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xfc]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f5fc
call fcn.00404a7c
test eax, eax
je 0x49e76e
mov edx, dword [ebp - 8]
mov eax, 0x49f4e4
call fcn.00404a7c
test eax, eax
jne 0x49e73a
mov edx, dword [ebp - 8]
mov eax, 0x49f4f4
call fcn.00404a7c
test eax, eax
je 0x49e76e
push dword [esi]
push dword [0x4b9fd4]
push 0x49f510
lea eax, [ebp - 0x100]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x100]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f610
call fcn.00404a7c
test eax, eax
je 0x49e815
push dword [esi]
push dword [0x4b9fd4]
push 0x49f4bc
lea eax, [ebp - 0x104]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x104]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
push dword [esi]
push dword [0x4b9fd4]
push 0x49f4d4
lea eax, [ebp - 0x108]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x108]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
push dword [esi]
push dword [0x4b9fd4]
push 0x49f510
lea eax, [ebp - 0x10c]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x10c]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f628
call fcn.00404a7c
test eax, eax
je 0x49e909
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f700
test eax, eax
je 0x49e909
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push dword [esi]
push dword [0x4b9fd4]
push 0x49f4d4
lea eax, [ebp - 0x110]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x110]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov ecx, dword [0x4b9fd4]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049fbe4
test eax, eax
je 0x49ea84
mov eax, dword [ebp - 8]
push eax
push dword [esi]
push dword [0x4b9fd4]
push 0x49f4bc
lea eax, [ebp - 0x114]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x114]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f63c
call fcn.00404a7c
test eax, eax
je 0x49e940
mov eax, 0x4b9fd4
mov edx, 0x49f650
call fcn.004044dc
mov eax, ebx
mov ecx, 0x49f660
mov edx, dword [0x4ba048]
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f678
call fcn.00404a7c
test eax, eax
je 0x49e977
mov eax, 0x4b9fd4
mov edx, 0x49f68c
call fcn.004044dc
mov eax, ebx
mov ecx, 0x49f660
mov edx, dword [0x4ba048]
call fcn.0040478c
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f698
call fcn.00404a7c
test eax, eax
je 0x49e9ba
push 0x49f6ac
lea eax, [ebp - 0x118]
mov ecx, 0x49f6bc
mov edx, dword [0x4b9fd4]
call fcn.0040478c
mov ecx, dword [ebp - 0x118]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f6cc
call fcn.00404a7c
test eax, eax
je 0x49e9fa
push 0
lea eax, [ebp - 0x11c]
mov ecx, 0x49f6bc
mov edx, dword [0x4b9fd4]
call fcn.0040478c
mov ecx, dword [ebp - 0x11c]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov edx, dword [ebp - 8]
mov eax, 0x49f6e4
call fcn.00404a7c
test eax, eax
je 0x49ea7a
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
test eax, eax
jne 0x49ea26
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x49ea4c
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ec0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
lea eax, [ebp - 0x120]
mov ecx, 0x49f6f8
mov edx, dword [0x4b9fd4]
call fcn.0040478c
mov ecx, dword [ebp - 0x120]
mov edx, dword [esi]
mov eax, dword [0x4b9f88]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49ea84
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004044dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49eace
lea eax, [ebp - 0x120]
mov edx, 0x1f
call fcn.004044ac
lea eax, [ebp - 0x98]
mov edx, 0x1b
call fcn.004044ac
lea eax, [ebp - 0x2c]
call fcn.00404488
lea eax, [ebp - 0x28]
mov edx, 9
call fcn.004044ac
ret