Function at 0x499ac0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9ec7ac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x49b303
sub esp, 0xa8
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x49ac3d
mov ecx, dword [esp + 0xc0]
test ecx, ecx
je 0x49ac39
test eax, 0x200
jne 0x499b12
lea edx, [0x7ad404]
mov ebx, dword [esp + 0xac]
jmp 0x499b4a
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004a2b10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xc0]
test ecx, 0x200
jne 0x499b61
lea ebp, [0x7ad404]
mov esi, dword [esp + 0xb8]
jmp 0x499ba9
mov dword [esp + 0x70], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004a2b10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x70]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xc0]
cmp edx, ebp
jne 0x499bc6
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00404340
movzx eax, byte [esp + 0xc]
test al, al
jne 0x499bd5
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov eax, dword [0x758c98]
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb4]
mov dword [esp + 8], ebp
mov esi, dword [esp + 0xb8]
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0xbc]
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0xc0]
mov dword [esp + 0x14], esi
lea edx, [0x758c98]
call eax
movzx eax, byte [esp + 0x18]
test al, al
je 0x499e01
mov eax, dword [esp + 0xb4]
mov ecx, eax
and eax, 0x1f
add eax, 0xffffffeb
nop
nop
cmp eax, 1
ja 0x499c80
mov eax, dword [esp + 0xac]
cmp dword [eax], 4
jne 0x49b2ea
mov edx, dword [eax + 4]
test edx, edx
je 0x49b2ea
test ecx, 0x80
je 0x499c75
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx]
jmp 0x499c90
mov edx, dword [esp + 0xb0]
mov ebx, edx
jmp 0x499c90
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebx, edx
mov ebp, dword [esp + 0xc0]
mov esi, ebp
and ebp, 0x1f
add ebp, 0xffffffeb
nop
nop
cmp ebp, 1
ja 0x499ce0
mov ebp, dword [esp + 0xb8]
cmp dword [ebp], 4
jne 0x49b2d2
mov edi, dword [ebp + 4]
test edi, edi
je 0x49b2d2
test esi, 0x80
je 0x499cd5
mov edi, dword [esp + 0xbc]
mov ebp, dword [edi]
jmp 0x499ce9
mov edi, dword [esp + 0xbc]
mov ebp, edi
jmp 0x499ce9
mov edi, dword [esp + 0xbc]
mov ebp, edi
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebp
cmp ebp, ebx
jae 0x499d05
test ecx, 0x200
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x74]
jmp 0x499d13
test ecx, 0x200
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x7c]
jne 0x499d29
mov dword [esp + 0x60], eax
lea eax, [0x7ad404]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x60]
jmp 0x499d57
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], ebp
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004a2b10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x30], eax
mov eax, ecx
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
lea eax, [0x6e8740]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
lea edx, [esp + 0x98]
mov dword [esp + 8], edx
call fcn.0040d400
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
jne 0x49ac2a
lea eax, [0x6e8740]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
lea ecx, [esp + 0x98]
mov dword [esp + 8], ecx
call fcn.0040d950
mov eax, dword [esp + 0xc]
mov byte [eax], 1
mov eax, dword [esp + 0xb4]
mov ecx, eax
and eax, 0x1f
nop
cmp eax, 0x11
ja 0x49a1ea
cmp eax, 0xc
jbe 0x499f4b
cmp eax, 0xe
jbe 0x499edb
lea edx, [eax - 0xf]
cmp edx, 1
jbe 0x499e41
cmp eax, 0x11
jne 0x49ab88
xor eax, eax
jmp 0x49b1be
cmp eax, 0xf
jne 0x499e60
mov eax, dword [esp + 0xb0]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
cvtss2sd xmm0, xmm0
cvtss2sd xmm1, xmm1
jmp 0x499e70
mov eax, dword [esp + 0xb0]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov eax, dword [esp + 0xc0]
and eax, 0x1f
nop
cmp eax, 0xf
jne 0x499e9a
mov eax, dword [esp + 0xbc]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm3, xmm3
jmp 0x499eb3
cmp eax, 0x10
jne 0x49b172
mov eax, dword [esp + 0xbc]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm2
sete cl
setnp al
and ecx, eax
ucomisd xmm1, xmm3
sete dl
setnp al
and edx, eax
and ecx, edx
mov byte [esp + 0xc8], cl
add esp, 0xa8
ret
cmp eax, 0xd
jne 0x499ef1
mov eax, dword [esp + 0xb0]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x499efc
mov eax, dword [esp + 0xb0]
movsd xmm0, qword [eax]
mov eax, dword [esp + 0xc0]
and eax, 0x1f
nop
cmp eax, 0xd
jne 0x499f1d
mov eax, dword [esp + 0xbc]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x499f31
cmp eax, 0xe
jne 0x49b134
mov eax, dword [esp + 0xbc]
movsd xmm1, qword [eax]
ucomisd xmm1, xmm0
sete cl
setnp al
and ecx, eax
mov byte [esp + 0xc8], cl
add esp, 0xa8
ret
cmp eax, 1
jne 0x499fac
mov eax, dword [esp + 0xc0]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0xb0]
movzx edx, byte [edx]
cmp eax, 1
je 0x499f92
mov byte [esp + 0x27], dl
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0049f980
movzx edx, byte [esp + 0x27]
mov eax, dword [esp + 0xbc]
cmp byte [eax], dl
sete al
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
lea edx, [eax - 2]
cmp edx, 4
ja 0x49a0d5
cmp eax, 3
ja 0x499fe9
cmp eax, 2
jne 0x499fd2
mov eax, dword [esp + 0xb0]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x49a032
mov ecx, dword [esp + 0xb0]
movsx eax, byte [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x49a032
cmp eax, 4
jne 0x49a005
mov ecx, dword [esp + 0xb0]
movsx eax, word [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x49a032
cmp eax, 5
jne 0x49a020
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x49a032
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0xc0]
and edx, 0x1f
mov dword [esp + 0x5c], edx
nop
cmp edx, 3
ja 0x49a07b
cmp edx, 2
jne 0x49a061
mov edx, dword [esp + 0xbc]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
mov ebp, ebx
mov ebx, edx
mov edx, ebp
jmp 0x49a0bb
cmp edx, 3
jne 0x49b0fa
mov ebx, dword [esp + 0xbc]
movsx edx, byte [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x49a0bb
cmp edx, 4
jne 0x49a091
mov ebx, dword [esp + 0xbc]
movsx edx, word [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x49a0bb
cmp edx, 5
jne 0x49a0a6
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x49a0bb
cmp edx, 6
jne 0x49b0fa
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
cmp ecx, edx
sete cl
cmp eax, ebx
sete al
and ecx, eax
mov byte [esp + 0xc8], cl
add esp, 0xa8
ret
cmp eax, 7
jb 0x49ab88
cmp eax, 9
ja 0x49a116
cmp eax, 7
jne 0x49a0f5
mov eax, dword [esp + 0xb0]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x49a146
cmp eax, 8
jne 0x49a108
mov ecx, dword [esp + 0xb0]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x49a146
mov ecx, dword [esp + 0xb0]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x49a146
cmp eax, 0xa
jne 0x49a128
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x49a146
cmp eax, 0xb
jne 0x49a13b
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x49a146
mov edx, dword [esp + 0xb0]
mov eax, dword [edx]
xor ecx, ecx
mov edx, dword [esp + 0xc0]
and edx, 0x1f
mov dword [esp + 0x5c], edx
nop
cmp edx, 9
ja 0x49a196
cmp edx, 7
jne 0x49a16c
mov edx, dword [esp + 0xbc]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x49a1d0
cmp edx, 8
jne 0x49a17f
mov ebx, dword [esp + 0xbc]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x49a1d0
cmp edx, 9
jne 0x49b0c0
mov ebx, dword [esp + 0xbc]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x49a1d0
cmp edx, 0xa
jne 0x49a1a8
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x49a1d0
cmp edx, 0xb
jne 0x49a1bb
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x49a1d0
cmp edx, 0xc
jne 0x49b0c0
mov ebp, dword [esp + 0xbc]
mov edx, dword [ebp]
xor ebx, ebx
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xc8], cl
add esp, 0xa8
ret
cmp eax, 0x15
jbe 0x49a6a5
cmp eax, 0x17
jbe 0x49a2c3
cmp eax, 0x18
je 0x49a237
cmp eax, 0x19
jne 0x49ab88
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004a1e90
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
xor ecx, ecx
jmp 0x49afd0
mov eax, dword [esp + 0xc0]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 4]
mov edx, dword [edx]
cmp eax, 0x18
jne 0x49a262
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x49a298
mov dword [esp + 0x68], edx
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a2a30
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x28]
cmp eax, ebx
je 0x49a2a0
xor eax, eax
jmp 0x49a2b5
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00403590
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
cmp eax, 0x16
je 0x49a593
mov eax, dword [esp + 0xc0]
mov edx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
nop
cmp eax, 0x14
ja 0x49a2fc
lea ebx, [eax - 0x12]
cmp ebx, 1
ja 0x49a2f2
test edx, 0x200
jmp 0x49a334
cmp eax, 0x14
je 0x49a30e
jmp 0x49af8b
cmp eax, 0x16
ja 0x49a309
test edx, 0x200
jmp 0x49a334
cmp eax, 0x17
jne 0x49a325
mov ebx, dword [esp + 0xbc]
mov ebp, dword [ebx]
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
jmp 0x49a369
cmp eax, 0x1a
jne 0x49af8b
test edx, 0x200
je 0x49a341
mov ebx, dword [esp + 0xbc]
xor ebp, ebp
jmp 0x49a369
test edx, 0x80
je 0x49a354
mov ebx, dword [esp + 0xbc]
mov ebp, dword [ebx]
jmp 0x49a35d
mov ebx, dword [esp + 0xbc]
mov ebp, ebx
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
mov esi, dword [esp + 0xb0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg ebp, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg ebp, eax
jne 0x49a584
mov ebp, dword [esi + 4]
cmp eax, 0x17
jne 0x49a399
mov eax, dword [ebx + 4]
jmp 0x49a3d8
mov dword [esp + 0x3c], ebp
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.004a1380
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0xb0]
cmp eax, ebp
jne 0x49a575
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
call fcn.004a2c60
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a2c60
mov eax, dword [esp + 0x94]
cmp dword [esp + 0xc], eax
je 0x49a566
mov eax, dword [esp + 0xb4]
test eax, 0x200
jne 0x49a455
lea ecx, [0x7ad404]
mov edx, dword [esp + 0xac]
jmp 0x49a47f
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004a2b10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x49a4a5
xor eax, eax
jmp 0x49ae9a
mov eax, dword [esp + 0xac]
cmp dword [0x9c4924], eax
jne 0x49a4c2
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x49a4e8
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.0049faa0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xb8]
cmp dword [0x9c4924], edx
jne 0x49a505
mov edx, dword [esp + 0xbc]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x49a53b
mov dword [esp + 0x2c], eax
mov dword [esp + 0x6c], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 8], eax
call fcn.0049faa0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x6c]
cmp eax, edx
je 0x49a543
xor eax, eax
jmp 0x49a558
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00403590
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004a2c60
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a2c60
mov eax, dword [esp + 0x94]
cmp dword [esp + 0xc], eax
jne 0x49a5fd
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.004a0960
mov eax, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a0960
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.00499ac0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
cmp eax, 0x13
jne 0x49a780
test ecx, 0x200
jne 0x49a762
test ecx, 0x80
je 0x49a6cd
mov eax, dword [esp + 0xb0]
mov eax, dword [eax]
jmp 0x49a6d4
mov eax, dword [esp + 0xb0]
test eax, eax
jne 0x49a762
mov eax, dword [esp + 0xc0]
mov ecx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
nop
cmp eax, 0x14
ja 0x49a70c
lea edx, [eax - 0x12]
cmp edx, 1
ja 0x49a702
test ecx, 0x200
jmp 0x49a73d
cmp eax, 0x14
je 0x49a71e
jmp 0x49ae59
cmp eax, 0x16
ja 0x49a719
test ecx, 0x200
jmp 0x49a73d
cmp eax, 0x17
jne 0x49a72e
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
test eax, eax
setne al
jmp 0x49a75e
cmp eax, 0x1a
jne 0x49ae59
test ecx, 0x200
jne 0x49a762
test ecx, 0x80
je 0x49a752
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
jmp 0x49a759
mov eax, dword [esp + 0xbc]
test eax, eax
setne al
test al, al
je 0x49a771
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
cmp eax, 0x14
jne 0x49a96a
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
test edx, edx
je 0x49a8ca
mov ebx, dword [esp + 0xc0]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
nop
cmp ebx, 0x14
ja 0x49a7ca
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x49a7c0
test ebp, 0x200
jmp 0x49a7ff
cmp ebx, 0x14
je 0x49a7dc
jmp 0x49ae1f
cmp ebx, 0x16
ja 0x49a7d7
test ebp, 0x200
jmp 0x49a7ff
cmp ebx, 0x17
jne 0x49a7f0
mov ebx, dword [esp + 0xbc]
mov esi, dword [ebx]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x49a826
cmp ebx, 0x1a
jne 0x49ae1f
test ebp, 0x200
jne 0x49a830
test ebp, 0x80
je 0x49a814
mov ebx, dword [esp + 0xbc]
mov esi, dword [ebx]
jmp 0x49a81d
mov ebx, dword [esp + 0xbc]
mov esi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x49a8d8
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a0960
mov eax, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a0960
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.00499ac0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc0]
test byte [eax], al
mov eax, ebp
and ebp, 0x1f
mov dword [esp + 0x5c], ebp
nop
cmp ebp, 0x14
ja 0x49a902
lea ecx, [ebp - 0x12]
cmp ecx, 1
ja 0x49a8f8
test eax, 0x200
jmp 0x49a92f
cmp ebp, 0x14
je 0x49a913
jmp 0x49ade5
cmp ebp, 0x16
ja 0x49a90e
test eax, 0x200
jmp 0x49a92f
cmp ebp, 0x17
jne 0x49a921
mov eax, dword [ebx]
test eax, eax
setne al
xor eax, 1
test edx, edx
jmp 0x49a951
cmp ebp, 0x1a
jne 0x49ade5
test eax, 0x200
je 0x49a93a
test edx, edx
mov eax, 0
jmp 0x49a951
test eax, 0x80
je 0x49a945
mov eax, dword [ebx]
jmp 0x49a947
mov eax, ebx
test eax, eax
setne al
xor eax, 1
test edx, edx
setne cl
xor ecx, 1
cmp al, cl
sete al
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
cmp eax, 0x15
jne 0x49ab88
test ecx, 0x200
je 0x49a986
mov eax, dword [esp + 0xb0]
xor edx, edx
jmp 0x49a9aa
test ecx, 0x80
je 0x49a999
mov eax, dword [esp + 0xb0]
mov edx, dword [eax]
jmp 0x49a9a2
mov eax, dword [esp + 0xb0]
mov edx, eax
test edx, edx
setne dl
xor edx, 1
mov ebx, dword [esp + 0xc0]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
nop
cmp ebx, 0x14
ja 0x49a9da
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x49a9d0
test ebp, 0x200
jmp 0x49aa12
cmp ebx, 0x14
je 0x49a9ec
jmp 0x49adab
cmp ebx, 0x16
ja 0x49a9e7
test ebp, 0x200
jmp 0x49aa12
cmp ebx, 0x17
jne 0x49aa03
mov esi, dword [esp + 0xbc]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x49aa47
cmp ebx, 0x1a
jne 0x49adab
test ebp, 0x200
je 0x49aa1f
mov esi, dword [esp + 0xbc]
xor edi, edi
jmp 0x49aa47
test ebp, 0x80
je 0x49aa32
mov esi, dword [esp + 0xbc]
mov edi, dword [esi]
jmp 0x49aa3b
mov esi, dword [esp + 0xbc]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x49ab79
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a1380
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
cmp ecx, 0x17
jne 0x49aa81
mov ecx, dword [esp + 0xbc]
mov edx, dword [ecx + 4]
jmp 0x49aab9
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 8], edx
call fcn.004a1380
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xbc]
cmp edx, eax
jne 0x49ab6a
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 8], edx
call fcn.004a2c60
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xb8]
mov dword [esp], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 8], ebx
call fcn.004a2c60
mov eax, dword [esp + 0x94]
cmp dword [esp + 0xc], eax
je 0x49ab5b
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 8], edx
call fcn.004a1800
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x58], ecx
xor edx, edx
jmp 0x49ac74
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
call fcn.004a1190
mov eax, dword [esp + 0x10]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0
call fcn.004a1190
mov eax, dword [esp + 0x8c]
cmp dword [esp + 0x10], eax
je 0x49abfc
xor eax, eax
jmp 0x49ac1c
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00404260
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
test eax, eax
jmp 0x49ac44
mov ecx, dword [esp + 0xc0]
setne al
test ecx, ecx
setne cl
cmp cl, al
sete al
mov byte [esp + 0xc8], al
add esp, 0xa8
ret
mov ebx, dword [esp + 0x94]
lea eax, [ebx + 0xc]
mov ebx, dword [esp + 0x54]
lea edx, [ebx + 1]
mov ecx, dword [esp + 0x58]
cmp edx, ecx
jge 0x49ad9c
mov dword [esp + 0x54], edx
mov dword [esp + 0x94], eax
mov ecx, dword [eax]
mov dword [esp + 0x90], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x88], edx
mov ebx, dword [eax + 8]
mov dword [esp + 0x5c], ebx
mov ebp, dword [esp + 0xac]
mov dword [esp], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp + 4], esi
mov edi, dword [esp + 0xb4]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.004a15a0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x80], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x90]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x88]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x14], edi
call fcn.004a15a0
mov eax, dword [esp + 0x50]
test eax, eax
je 0x49ad8d
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x49ad8d
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x84]
mov dword [esp], ebp
mov ebp, dword [esp + 0x80]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.00499ac0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x49ac5f
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x738e86]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x738e86]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x738e86]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x738e86]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
mov ecx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xb0]
cmp dword [ecx + 4], eax
jle 0x49af7c
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a0fe0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0xc], edi
call fcn.004a0fe0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.00499ac0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x49ae93
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x738e86]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
mov edx, dword [esp + 0x44]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x49b0b1
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a0b10
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x44]
mov dword [esp + 0xc], edi
call fcn.004a0b10
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.00499ac0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x49afc5
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x738457]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x737b5d]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
mov dword [esp + 0x5c], eax
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x738d0a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
mov dword [esp + 0x5c], eax
lea eax, [0x6fa980]
mov dword [esp], eax
call fcn.0040c5b0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x73a17c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x6ed320]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004386b0
mov edx, dword [esp + 0x4c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004a1380
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0xc], eax
jle 0x49b2c3
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a0fe0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
call fcn.004a0fe0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], eax
call fcn.00499ac0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x49b1b0
mov byte [esp + 0xc8], 0
add esp, 0xa8
ret
mov byte [esp + 0xc8], 1
add esp, 0xa8
ret
lea eax, [0x6e41c0]
mov dword [esp], eax
lea eax, [0x7aa878]
mov dword [esp + 4], eax
call fcn.004386b0
lea eax, [0x6e41c0]
mov dword [esp], eax
lea eax, [0x7aa878]
mov dword [esp + 4], eax
call fcn.004386b0
nop
call fcn.00467050
jmp fcn.00499ac0