Function at 0x49c5c8
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x23
push 0
push 0
dec ecx
jne 0x49c5d1
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404928
mov esi, 0x4ba01c
xor eax, eax
push ebp
push 0x49e9c7
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49e9e0
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49e9ec
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x18]
mov eax, ebx
pop ecx
call fcn.0040478c
mov edx, dword [ebp - 8]
mov eax, 0x49e9f8
call fcn.00404a7c
test eax, eax
jne 0x49c695
mov edx, dword [ebp - 8]
mov eax, 0x49ea04
call fcn.00404a7c
test eax, eax
jne 0x49c695
mov edx, dword [ebp - 8]
mov eax, 0x49ea10
call fcn.00404a7c
test eax, eax
jne 0x49c695
mov edx, dword [ebp - 8]
mov eax, 0x49ea1c
call fcn.00404a7c
test eax, eax
je 0x49c6a4
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004044dc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ea28
call fcn.00404a7c
test eax, eax
jne 0x49c6f9
mov edx, dword [ebp - 8]
mov eax, 0x49ea3c
call fcn.00404a7c
test eax, eax
jne 0x49c6f9
mov edx, dword [ebp - 8]
mov eax, 0x49ea4c
call fcn.00404a7c
test eax, eax
jne 0x49c6f9
mov edx, dword [ebp - 8]
mov eax, 0x49ea58
call fcn.00404a7c
test eax, eax
jne 0x49c6f9
mov edx, dword [ebp - 8]
mov eax, 0x49ea68
call fcn.00404a7c
test eax, eax
je 0x49c709
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x528]
mov dl, 1
call fcn.004300d8
mov edx, dword [ebp - 8]
mov eax, 0x49ea78
call fcn.00404a7c
test eax, eax
je 0x49c78a
mov edx, dword [ebp - 8]
mov eax, 0x49ea90
call fcn.00404a7c
test eax, eax
je 0x49c78a
mov edx, dword [ebp - 8]
mov eax, 0x49eaa0
call fcn.00404a7c
test eax, eax
je 0x49c78a
mov eax, ebx
mov edx, 0x49eab0
call fcn.004044dc
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eaa0
call fcn.00404a7c
add eax, 6
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, 0x49eac0
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ead0
call fcn.00404a7c
test eax, eax
jne 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49eae4
call fcn.00404a7c
test eax, eax
je 0x49c7f7
mov eax, ebx
mov edx, 0x49eafc
call fcn.004044dc
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 6
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x49eb18
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49eb28
call fcn.00404a7c
test eax, eax
je 0x49c840
mov eax, ebx
mov edx, 0x49eafc
call fcn.004044dc
push 0x4ba02c
mov edx, dword [ebp - 8]
mov eax, 0x49eb44
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49eb50
call fcn.00404a7c
test eax, eax
je 0x49c8c9
mov eax, ebx
mov edx, 0x49eafc
call fcn.004044dc
push 0x4ba030
mov edx, dword [ebp - 8]
mov eax, 0x49eb44
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push dword [0x4ba02c]
push 0x49eb0c
push dword [0x4ba030]
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
mov ecx, 0x49eb70
mov edx, dword [esi]
call fcn.0040478c
mov ecx, dword [ebp - 0x28]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49eb80
call fcn.00404a7c
test eax, eax
je 0x49c912
mov eax, ebx
mov edx, 0x49eafc
call fcn.004044dc
push 0x4ba034
mov edx, dword [ebp - 8]
mov eax, 0x49eb44
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49eb9c
call fcn.00404a7c
test eax, eax
je 0x49c95b
mov eax, ebx
mov edx, 0x49eafc
call fcn.004044dc
push 0x4ba038
mov edx, dword [ebp - 8]
mov eax, 0x49eb44
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
jmp 0x49e984
mov eax, dword [ebp - 8]
mov edx, 0x49ebb8
call fcn.00404884
jne 0x49c9ca
cmp dword [0x4ba02c], 0
je 0x49c99b
mov eax, ebx
mov edx, 0x49ebd0
call fcn.004044dc
mov eax, dword [0x4ba038]
push eax
mov ecx, 0x49eac0
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
lea edx, [ebp - 0x2c]
mov eax, dword [0x4b8888]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
call fcn.00438c34
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x4b8888]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f0]
call fcn.0042e0ac
jmp 0x49e984
mov eax, dword [ebp - 8]
mov edx, 0x49ebfc
call fcn.00404884
je 0x49c9f9
mov eax, dword [ebp - 8]
mov edx, 0x49ec14
call fcn.00404884
je 0x49c9f9
mov edx, dword [ebp - 8]
mov eax, 0x49ec28
call fcn.00404a7c
test eax, eax
je 0x49ca0a
mov eax, ebx
mov edx, 0x49ec38
call fcn.004044dc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ec44
call fcn.00404a7c
test eax, eax
je 0x49ca2c
mov eax, ebx
mov edx, 0x49ec50
call fcn.004044dc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ec64
call fcn.00404a7c
test eax, eax
je 0x49ca54
mov eax, ebx
mov ecx, 0x49e9ec
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x49e984
lea eax, [ebp - 0x30]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x30]
mov edx, 0x49ec50
call fcn.00404884
jne 0x49cb32
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49ec70
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov edi, dword [eax]
call dword [edi]
cmp dword [ebp - 0xc], 0
jne 0x49caaf
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49ec50
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov edi, dword [eax]
call dword [edi]
push 0
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x49eb18
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
mov eax, dword [ebp - 0x34]
mov edx, 0x49ec84
call fcn.00404884
jne 0x49cadc
lea eax, [ebp - 0xc]
call fcn.00404488
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov edx, 0xa
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc]
call fcn.00404884
jne 0x49cb1b
mov eax, ebx
mov ecx, 0x49e9ec
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x49e984
mov eax, ebx
mov ecx, 0x49e9e0
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ec94
call fcn.00404a7c
test eax, eax
je 0x49cb9a
mov edx, dword [ebp - 8]
mov eax, 0x49eca4
call fcn.00404a7c
test eax, eax
je 0x49cb9a
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
jne 0x49cb9a
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49e9ec
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x3c]
mov eax, ebx
mov ecx, 0x49ecbc
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ecd0
call fcn.00404a7c
test eax, eax
je 0x49cc04
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
jne 0x49cc04
push 0x4b9fe4
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [0x4b85cc]
mov eax, dword [eax]
mov edx, dword [0x4b9fe4]
call fcn.0047431c
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.004b1034
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ece0
call fcn.00404a7c
test eax, eax
je 0x49cc7e
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
jne 0x49cc7e
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x3a
jne 0x49cc44
mov eax, 0x4ba03c
call fcn.00404488
jmp 0x49cc6d
push 0x4ba03c
mov edx, dword [ebp - 8]
mov eax, 0x49ecfc
call fcn.00404a7c
add eax, 2
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, ebx
mov edx, 0x49ed08
call fcn.004044dc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ed20
call fcn.00404a7c
test eax, eax
je 0x49cd31
mov edx, dword [ebp - 8]
mov eax, 0x49eaa0
call fcn.00404a7c
test eax, eax
je 0x49cd31
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
jne 0x49cd31
push 0x4ba038
mov edx, dword [ebp - 8]
mov eax, 0x49eac0
call fcn.00404a7c
mov esi, eax
mov edx, dword [ebp - 8]
mov eax, 0x49ed34
call fcn.00404a7c
sub esi, eax
dec esi
push esi
mov edx, dword [ebp - 8]
mov eax, 0x49ed34
call fcn.00404a7c
mov edx, eax
inc edx
mov eax, dword [ebp - 8]
pop ecx
call fcn.00404998
push 0x4ba03c
mov edx, dword [ebp - 8]
mov eax, 0x49ecfc
call fcn.00404a7c
add eax, 2
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, ebx
mov edx, 0x49ed40
call fcn.004044dc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ed08
call fcn.00404a7c
test eax, eax
je 0x49cd94
push 0x4ba038
mov edx, dword [ebp - 8]
mov eax, 0x49ed34
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [0x4ba038], 0
jne 0x49cd83
mov eax, ebx
mov edx, 0x49ed08
call fcn.004044dc
jmp 0x49e984
mov eax, ebx
mov edx, 0x49ed40
call fcn.004044dc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ed40
call fcn.00404a7c
test eax, eax
je 0x49ce2a
push 0x4ba034
mov edx, dword [ebp - 8]
mov eax, 0x49ed34
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [0x4ba034], 0
jne 0x49cde8
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004044dc
jmp 0x49e984
cmp dword [0x4ba03c], 0
jne 0x49ce02
mov eax, ebx
mov edx, 0x49ed60
call fcn.004044dc
jmp 0x49e984
mov eax, dword [0x4ba03c]
push eax
mov ecx, 0x49eac0
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
mov eax, ebx
mov edx, 0x49ed7c
call fcn.004044dc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ed60
call fcn.00404a7c
test eax, eax
je 0x49cea2
push 0x4ba03c
mov edx, dword [ebp - 8]
mov eax, 0x49ed34
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [0x4ba03c], 0
jne 0x49ce7a
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004044dc
jmp 0x49e984
mov eax, ebx
mov edx, 0x49ed7c
call fcn.004044dc
mov eax, dword [0x4ba03c]
push eax
mov ecx, 0x49eac0
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ed90
call fcn.00404a7c
test eax, eax
je 0x49cec8
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
je 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49eda8
call fcn.00404a7c
test eax, eax
je 0x49ceee
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
je 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49edc0
call fcn.00404a7c
test eax, eax
jne 0x49cf21
mov edx, dword [ebp - 8]
mov eax, 0x49edd4
call fcn.00404a7c
test eax, eax
je 0x49cf65
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
jne 0x49cf65
push 0
lea eax, [ebp - 0x40]
mov ecx, 0x49ede0
mov edx, dword [0x4ba014]
call fcn.0040478c
mov eax, dword [ebp - 0x40]
call fcn.00404938
push eax
lea eax, [ebp - 0x44]
mov ecx, 0x49edf4
mov edx, dword [0x4ba014]
call fcn.0040478c
mov eax, dword [ebp - 0x44]
call fcn.00404938
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ee04
call fcn.00404a7c
test eax, eax
je 0x49cfcb
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
jne 0x49cfcb
push 0
lea eax, [ebp - 0x48]
mov ecx, 0x49edf4
mov edx, dword [0x4ba014]
call fcn.0040478c
mov eax, dword [ebp - 0x48]
call fcn.00404938
push eax
lea eax, [ebp - 0x4c]
mov ecx, 0x49ede0
mov edx, dword [0x4ba014]
call fcn.0040478c
mov eax, dword [ebp - 0x4c]
call fcn.00404938
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ee18
call fcn.00404a7c
test eax, eax
je 0x49d0ea
mov edx, dword [ebp - 8]
mov eax, 0x49ee28
call fcn.00404a7c
test eax, eax
je 0x49d025
lea eax, [ebp - 0x50]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ee38
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x50]
mov eax, ebx
mov ecx, 0x49ee44
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ee38
call fcn.00404a7c
test eax, eax
je 0x49d06b
lea eax, [ebp - 0x54]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ee38
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x54]
mov eax, ebx
mov ecx, 0x49ee54
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ee60
call fcn.00404a7c
test eax, eax
je 0x49d0b1
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ee60
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x58]
mov eax, ebx
mov ecx, 0x49e9ec
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49e9ec
call fcn.00404a7c
test eax, eax
je 0x49d0d9
mov eax, ebx
mov ecx, 0x49e9e0
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x49e984
mov eax, ebx
mov edx, 0x49ee6c
call fcn.004044dc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ee90
call fcn.00404a7c
test eax, eax
je 0x49d136
lea eax, [ebp - 0x5c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 6
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, 0x49eb18
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49eeac
call fcn.00404a7c
test eax, eax
je 0x49d2b6
mov edx, dword [ebp - 8]
mov eax, 0x49eec4
call fcn.00404a7c
test eax, eax
jne 0x49d171
mov edx, dword [ebp - 8]
mov eax, 0x49eed4
call fcn.00404a7c
test eax, eax
je 0x49d2b6
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 4]
add eax, 0x6b4
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6b4]
mov al, byte [eax]
cmp al, 0x31
jb 0x49d1d0
cmp al, 0x39
jbe 0x49d1e1
mov eax, ebx
mov edx, 0x49eee4
call fcn.004044dc
jmp 0x49e984
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6b4]
call fcn.00408a94
cmp eax, 0x64
jge 0x49d205
mov edx, dword [ebp - 8]
mov eax, 0x49eef8
call fcn.00404a7c
test eax, eax
jne 0x49d229
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6b4]
call fcn.00408a94
cmp eax, 0x64
jle 0x49d23a
mov edx, dword [ebp - 8]
mov eax, 0x49eef8
call fcn.00404a7c
test eax, eax
jne 0x49d23a
mov eax, ebx
mov edx, 0x49ef04
call fcn.004044dc
jmp 0x49e984
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x20
jne 0x49d28e
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 4]
push dword [eax + 0x6b0]
push dword [ebp - 8]
push 0x49ef18
mov eax, dword [ebp - 4]
add eax, 0x6b0
mov edx, 3
call fcn.00404800
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ef24
call fcn.00404a7c
test eax, eax
je 0x49d2e2
push 0x49ef3c
mov ecx, 0x49ea28
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ef48
call fcn.00404a7c
test eax, eax
je 0x49d309
mov ecx, 0x49ea28
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49ef64
call fcn.00404a7c
test eax, eax
je 0x49d451
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f890
test eax, eax
je 0x49d451
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49ef7c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx]
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 0x60]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x60]
push eax
lea ecx, [ebp - 0x64]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004ad008
mov edx, dword [ebp - 0x64]
pop eax
call fcn.00404884
jne 0x49d415
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a1ca4
push dword [ebp - 0x68]
push dword [ebp - 8]
push 0x49ef18
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x49ef7c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov eax, dword [0x4b8888]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f0]
mov eax, dword [eax + 0x220]
mov edx, 0x49ef90
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x4b8888]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f0]
mov eax, dword [eax + 0x220]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49efb0
call fcn.00404a7c
test eax, eax
je 0x49d50f
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49ef7c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx]
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [ebp - 8], 0
je 0x49e984
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a1ca4
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49efc8
call fcn.00404a7c
test eax, eax
je 0x49d536
mov ecx, 0x49ef7c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49efdc
call fcn.00404a7c
test eax, eax
je 0x49d6c2
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49ea3c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0xc], 0
je 0x49d577
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x61
jne 0x49d577
lea eax, [ebp - 0xc]
call fcn.00404488
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49e9ec
call fcn.00404a7c
add eax, 9
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
mov edx, 0x49eff4
call fcn.00404884
jne 0x49d5c9
push 0x49f000
mov ecx, 0x49ea3c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f010
call fcn.00404a7c
test eax, eax
je 0x49e984
mov eax, dword [ebp - 8]
call fcn.00404740
cmp eax, 7
jl 0x49e984
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
cmp byte [edx + eax - 1], 0x2e
je 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
test eax, eax
jne 0x49d67e
mov eax, dword [ebp - 8]
cmp byte [eax], 0x39
ja 0x49d67e
lea eax, [ebp - 0x70]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f010
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x70]
call fcn.00408a94
cmp eax, 0x7f
jge 0x49d65b
lea eax, [ebp - 8]
mov edx, 0x49f01c
call fcn.00404748
jmp 0x49d67e
cmp eax, 0xc0
jge 0x49d671
lea eax, [ebp - 8]
mov edx, 0x49f030
call fcn.00404748
jmp 0x49d67e
lea eax, [ebp - 8]
mov edx, 0x49f048
call fcn.00404748
lea eax, [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a1dcc
push dword [ebp - 0x74]
push dword [ebp - 8]
push 0x49ef18
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x49ea3c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f060
call fcn.00404a7c
test eax, eax
je 0x49d6fc
push 0
mov ecx, 0x49ea3c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
mov ecx, 0x49ea3c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f078
call fcn.00404a7c
test eax, eax
je 0x49d762
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49ea3c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx]
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49e9ec
call fcn.00404a7c
add eax, 0xc
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004a1dcc
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f090
call fcn.00404a7c
test eax, eax
je 0x49d7e6
push 0x4ba040
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [0x4ba040]
push eax
mov ecx, 0x49f0a0
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x7c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49ee60
call fcn.00404a7c
mov edx, eax
mov ecx, 9
mov eax, dword [ebp - 8]
call fcn.00404998
mov ecx, dword [ebp - 0x7c]
mov eax, ebx
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f0b4
call fcn.00404a7c
test eax, eax
je 0x49d855
mov edx, dword [ebp - 8]
mov eax, 0x49f0c4
call fcn.00404a7c
test eax, eax
je 0x49d855
push 0x49ef3c
mov ecx, 0x49ea4c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x80]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49e9ec
call fcn.00404a7c
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x80]
mov eax, ebx
mov ecx, 0x49f0d4
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f0b4
call fcn.00404a7c
test eax, eax
je 0x49d8ca
mov edx, dword [ebp - 8]
mov eax, 0x49ea58
call fcn.00404a7c
test eax, eax
je 0x49d8ca
push 0x49ef3c
mov ecx, 0x49ea58
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x84]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49e9ec
call fcn.00404a7c
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x84]
mov eax, ebx
mov ecx, 0x49f0d4
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f0b4
call fcn.00404a7c
test eax, eax
je 0x49d93f
mov edx, dword [ebp - 8]
mov eax, 0x49f0e8
call fcn.00404a7c
test eax, eax
je 0x49d93f
push 0x49ef3c
mov ecx, 0x49f0e8
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x88]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49e9ec
call fcn.00404a7c
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x88]
mov eax, ebx
mov ecx, 0x49f0d4
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f0f8
call fcn.00404a7c
test eax, eax
je 0x49d977
mov edx, dword [ebp - 8]
mov eax, 0x49f0c4
call fcn.00404a7c
test eax, eax
je 0x49d977
mov ecx, 0x49ea4c
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f0f8
call fcn.00404a7c
test eax, eax
je 0x49d9af
mov edx, dword [ebp - 8]
mov eax, 0x49ea58
call fcn.00404a7c
test eax, eax
je 0x49d9af
mov ecx, 0x49ea58
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f0f8
call fcn.00404a7c
test eax, eax
je 0x49d9e7
mov edx, dword [ebp - 8]
mov eax, 0x49f0e8
call fcn.00404a7c
test eax, eax
je 0x49d9e7
mov ecx, 0x49f0e8
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f10c
call fcn.00404a7c
test eax, eax
je 0x49da92
mov edx, dword [ebp - 8]
mov eax, 0x49f11c
call fcn.00404a7c
test eax, eax
je 0x49da92
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
test eax, eax
jne 0x49da52
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x49da78
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x49ec70
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f10c
call fcn.00404a7c
test eax, eax
je 0x49db3d
mov edx, dword [ebp - 8]
mov eax, 0x49f128
call fcn.00404a7c
test eax, eax
je 0x49db3d
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
test eax, eax
jne 0x49dafd
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x49db23
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x49ec50
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f134
call fcn.00404a7c
test eax, eax
je 0x49db77
mov edx, dword [ebp - 8]
mov eax, 0x49f11c
call fcn.00404a7c
test eax, eax
je 0x49db77
push 0
mov ecx, 0x49ec70
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f134
call fcn.00404a7c
test eax, eax
je 0x49dbb1
mov edx, dword [ebp - 8]
mov eax, 0x49f128
call fcn.00404a7c
test eax, eax
je 0x49dbb1
push 0
mov ecx, 0x49ec50
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f148
call fcn.00404a7c
test eax, eax
je 0x49dbd7
mov edx, dword [ebp - 8]
mov eax, 0x49f158
call fcn.00404a7c
test eax, eax
jne 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f148
call fcn.00404a7c
test eax, eax
je 0x49dbfd
mov edx, dword [ebp - 8]
mov eax, 0x49f168
call fcn.00404a7c
test eax, eax
jne 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f178
call fcn.00404a7c
test eax, eax
jne 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f19c
call fcn.00404a7c
test eax, eax
je 0x49dd02
mov edx, dword [ebp - 8]
mov eax, 0x49f010
call fcn.00404a7c
test eax, eax
je 0x49dd02
lea eax, [ebp - 0x8c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f1ac
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x8c]
push eax
lea eax, [ebp - 0x90]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f1ac
call fcn.00404a7c
mov edx, eax
sub edx, 2
mov ecx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x90]
mov eax, 0x4b9fcc
pop ecx
call fcn.0040478c
lea eax, [ebp - 0x94]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f1b8
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
push dword [ebp - 0x94]
push 0x49f1c4
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
mov dl, byte [edx + eax - 1]
lea eax, [ebp - 0x98]
call fcn.00404668
push dword [ebp - 0x98]
push 0x49ee54
mov eax, ebx
mov edx, 4
call fcn.00404800
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f1d4
call fcn.00404a7c
test eax, eax
je 0x49dde5
mov edx, dword [ebp - 8]
mov eax, 0x49ecb0
call fcn.00404a7c
test eax, eax
je 0x49dde5
push 0x4b9fcc
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 4
mov eax, dword [ebp - 8]
call fcn.00404998
lea eax, [ebp - 0x9c]
mov edx, dword [0x4b9fcc]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x9c]
lea eax, [ebp - 0xa0]
call fcn.00402eb4
lea eax, [ebp - 0xa4]
mov edx, dword [0x4b9fcc]
mov dl, byte [edx + 3]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0xa0]
mov cl, 2
call fcn.00402e84
lea edx, [ebp - 0xa0]
mov eax, 0x4b9fcc
call fcn.004046e4
lea eax, [ebp - 0xa8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f1b8
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0xa8]
mov eax, ebx
mov ecx, 0x49ee44
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f1e4
call fcn.00404a7c
test eax, eax
je 0x49deb0
mov edx, dword [ebp - 8]
mov eax, 0x49f1f8
call fcn.00404a7c
test eax, eax
je 0x49deb0
mov edx, dword [ebp - 8]
mov eax, 0x49f208
call fcn.00404a7c
test eax, eax
jne 0x49de31
mov eax, 0x4b9fe0
mov edx, 0x49f214
call fcn.004044dc
jmp 0x49de40
mov eax, 0x4b9fe0
mov edx, 0x49f224
call fcn.004044dc
mov eax, dword [ebp - 4]
push dword [eax + 0x6b4]
push 0x49f230
mov eax, dword [ebp - 4]
push dword [eax + 0x6b0]
lea eax, [ebp - 0xac]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0xac]
push eax
push dword [esi]
push dword [0x4b9fcc]
push dword [0x4b9fe0]
lea eax, [ebp - 0xb0]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xb0]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 4]
add eax, 0x6b0
call fcn.00404488
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f23c
call fcn.00404a7c
test eax, eax
je 0x49df3a
mov edx, dword [ebp - 8]
mov eax, 0x49f1f8
call fcn.00404a7c
test eax, eax
je 0x49df3a
mov edx, dword [ebp - 8]
mov eax, 0x49f208
call fcn.00404a7c
test eax, eax
jne 0x49def4
mov eax, 0x4b9fe0
mov edx, 0x49f214
call fcn.004044dc
jmp 0x49df03
mov eax, 0x4b9fe0
mov edx, 0x49f224
call fcn.004044dc
push 0
push dword [esi]
push dword [0x4b9fcc]
push dword [0x4b9fe0]
lea eax, [ebp - 0xb4]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xb4]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f254
call fcn.00404a7c
test eax, eax
je 0x49e0cc
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f268
call fcn.00404a7c
add eax, 5
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov ebx, 1
mov eax, ebx
cmp eax, 8
ja case.0x49df87.0
jmp dword [eax*4 + 0x49df8e]
lea eax, [ebp - 0x10]
mov edx, 0x49f278
call fcn.00404520
jmp case.0x49df87.0
lea eax, [ebp - 0x10]
mov edx, 0x49f288
call fcn.00404520
jmp case.0x49df87.0
lea eax, [ebp - 0x10]
mov edx, 0x49f298
call fcn.00404520
jmp case.0x49df87.0
lea eax, [ebp - 0x10]
mov edx, 0x49f2a8
call fcn.00404520
jmp case.0x49df87.0
lea eax, [ebp - 0x10]
mov edx, 0x49f2b8
call fcn.00404520
jmp case.0x49df87.0
lea eax, [ebp - 0x10]
mov edx, 0x49f2c8
call fcn.00404520
jmp case.0x49df87.0
lea eax, [ebp - 0x10]
mov edx, 0x49f2d8
call fcn.00404520
jmp case.0x49df87.0
lea eax, [ebp - 0x10]
mov edx, 0x49f2e8
call fcn.00404520
push 0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi]
call fcn.0040478c
mov ecx, dword [ebp - 0xbc]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xb8]
mov eax, 0x4b9fe0
call fcn.004044dc
lea eax, [ebp - 0xc0]
push eax
mov edx, dword [0x4b9fe0]
mov eax, 0x49f230
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [0x4b9fe0]
call fcn.00404998
mov eax, dword [ebp - 0xc0]
mov edx, dword [ebp - 8]
call fcn.00404884
jne 0x49e0bd
lea eax, [ebp - 0xc4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi]
call fcn.0040478c
mov ecx, dword [ebp - 0xc4]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov edi, dword [eax]
call dword [edi + 0x50]
inc ebx
cmp ebx, 9
jne 0x49df7c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f2f8
call fcn.00404a7c
test eax, eax
je 0x49e120
mov edx, dword [ebp - 8]
mov eax, 0x49ee38
call fcn.00404a7c
test eax, eax
je 0x49e120
push 0x49f308
lea eax, [ebp - 0xc8]
mov ecx, 0x49f318
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xc8]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f32c
call fcn.00404a7c
test eax, eax
je 0x49e174
mov edx, dword [ebp - 8]
mov eax, 0x49ee38
call fcn.00404a7c
test eax, eax
je 0x49e174
push 0x49f33c
lea eax, [ebp - 0xcc]
mov ecx, 0x49f318
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xcc]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f348
call fcn.00404a7c
test eax, eax
je 0x49e1df
lea eax, [ebp - 0xd0]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f360
call fcn.00404a7c
mov edx, eax
add edx, 5
mov ecx, 9
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0xd0]
push eax
lea eax, [ebp - 0xd4]
mov ecx, 0x49f370
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xd4]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f380
call fcn.00404a7c
test eax, eax
je 0x49e2fe
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f5e4
test eax, eax
je 0x49e2fe
mov edx, dword [ebp - 8]
mov eax, 0x49f390
call fcn.00404a7c
test eax, eax
je 0x49e2fe
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3a0
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xd8]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
lea eax, [ebp - 0xdc]
mov ecx, 0x49f3ac
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049fac8
test eax, eax
je 0x49e984
mov eax, dword [ebp - 8]
push eax
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3b8
lea eax, [ebp - 0xe0]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xe0]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f380
call fcn.00404a7c
test eax, eax
je 0x49e32f
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f5e4
test eax, eax
je 0x49e32f
mov edx, dword [ebp - 8]
mov eax, 0x49f3c8
call fcn.00404a7c
test eax, eax
jne 0x49e344
mov edx, dword [ebp - 8]
mov eax, 0x49f3d8
call fcn.00404a7c
test eax, eax
je 0x49e42b
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [ebp - 8]
mov eax, 0x49f3d8
call fcn.00404a7c
test eax, eax
je 0x49e3c4
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49f3d8
call fcn.00404a7c
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
lea eax, [ebp - 0xe4]
mov ecx, 0x49f3e8
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049fac8
test eax, eax
je 0x49e984
mov eax, dword [ebp - 8]
push eax
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3f4
lea eax, [ebp - 0xe8]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xe8]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f404
call fcn.00404a7c
test eax, eax
je 0x49e4a2
mov edx, dword [ebp - 8]
mov eax, 0x49f41c
call fcn.00404a7c
test eax, eax
je 0x49e4a2
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
mov dl, byte [edx + eax - 1]
lea eax, [ebp - 0xec]
call fcn.00404668
mov eax, dword [ebp - 0xec]
push eax
push dword [esi]
push dword [0x4b9fcc]
push 0x49f42c
lea eax, [ebp - 0xf0]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xf0]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f43c
call fcn.00404a7c
test eax, eax
je 0x49e519
mov edx, dword [ebp - 8]
mov eax, 0x49f41c
call fcn.00404a7c
test eax, eax
je 0x49e519
mov eax, dword [ebp - 8]
call fcn.00404740
mov edx, dword [ebp - 8]
mov dl, byte [edx + eax - 1]
lea eax, [ebp - 0xf4]
call fcn.00404668
mov eax, dword [ebp - 0xf4]
push eax
push dword [esi]
push dword [0x4b9fcc]
push 0x49f454
lea eax, [ebp - 0xf8]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xf8]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f464
call fcn.00404a7c
test eax, eax
je 0x49e53f
mov edx, dword [ebp - 8]
mov eax, 0x49f474
call fcn.00404a7c
test eax, eax
jne 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f464
call fcn.00404a7c
test eax, eax
je 0x49e565
mov edx, dword [ebp - 8]
mov eax, 0x49f48c
call fcn.00404a7c
test eax, eax
jne 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f49c
call fcn.00404a7c
test eax, eax
je 0x49e58b
mov edx, dword [ebp - 8]
mov eax, 0x49f4b4
call fcn.00404a7c
test eax, eax
jne 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f49c
call fcn.00404a7c
test eax, eax
je 0x49e5b1
mov edx, dword [ebp - 8]
mov eax, 0x49f4cc
call fcn.00404a7c
test eax, eax
jne 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f4e0
call fcn.00404a7c
test eax, eax
je 0x49e607
mov edx, dword [ebp - 8]
mov eax, 0x49f390
call fcn.00404a7c
test eax, eax
je 0x49e607
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3b8
lea eax, [ebp - 0xfc]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xfc]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f4e0
call fcn.00404a7c
test eax, eax
je 0x49e66e
mov edx, dword [ebp - 8]
mov eax, 0x49f3c8
call fcn.00404a7c
test eax, eax
jne 0x49e63a
mov edx, dword [ebp - 8]
mov eax, 0x49f3d8
call fcn.00404a7c
test eax, eax
je 0x49e66e
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3f4
lea eax, [ebp - 0x100]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x100]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f4f4
call fcn.00404a7c
test eax, eax
je 0x49e715
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3a0
lea eax, [ebp - 0x104]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x104]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3b8
lea eax, [ebp - 0x108]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x108]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3f4
lea eax, [ebp - 0x10c]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x10c]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f50c
call fcn.00404a7c
test eax, eax
je 0x49e809
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f5e4
test eax, eax
je 0x49e809
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3b8
lea eax, [ebp - 0x110]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x110]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049fac8
test eax, eax
je 0x49e984
mov eax, dword [ebp - 8]
push eax
push dword [esi]
push dword [0x4b9fcc]
push 0x49f3a0
lea eax, [ebp - 0x114]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x114]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f520
call fcn.00404a7c
test eax, eax
je 0x49e840
mov eax, 0x4b9fcc
mov edx, 0x49f534
call fcn.004044dc
mov eax, ebx
mov ecx, 0x49f544
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f55c
call fcn.00404a7c
test eax, eax
je 0x49e877
mov eax, 0x4b9fcc
mov edx, 0x49f570
call fcn.004044dc
mov eax, ebx
mov ecx, 0x49f544
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f57c
call fcn.00404a7c
test eax, eax
je 0x49e8ba
push 0x49f590
lea eax, [ebp - 0x118]
mov ecx, 0x49f5a0
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0x118]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f5b0
call fcn.00404a7c
test eax, eax
je 0x49e8fa
push 0
lea eax, [ebp - 0x11c]
mov ecx, 0x49f5a0
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0x11c]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov edx, dword [ebp - 8]
mov eax, 0x49f5c8
call fcn.00404a7c
test eax, eax
je 0x49e97a
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
test eax, eax
jne 0x49e926
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x49e94c
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x49eb0c
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
lea eax, [ebp - 0x120]
mov ecx, 0x49f5dc
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0x120]
mov edx, dword [esi]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x49e984
mov eax, ebx
mov edx, dword [ebp - 8]
call fcn.004044dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49e9ce
lea eax, [ebp - 0x120]
mov edx, 0x1f
call fcn.004044ac
lea eax, [ebp - 0x98]
mov edx, 0x1b
call fcn.004044ac
lea eax, [ebp - 0x2c]
call fcn.00404488
lea eax, [ebp - 0x28]
mov edx, 9
call fcn.004044ac
ret