Function at 0x494530
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5efcb0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xbc]
cmp eax, dword [ecx + 8]
jbe 0x4955ab
sub esp, 0x13c
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
mov dword [esp + 0x15c], 0
movzx eax, byte [esp + 0x150]
cmp dword [esp + 0x14c], eax
sete al
mov byte [esp + 0x21], al
je 0x49458c
jmp 0x49458e
jmp 0x49459f
cmp dword [esp + 0x14c], 0x5c
sete al
mov byte [esp + 0x21], al
jmp 0x49459f
movzx eax, byte [esp + 0x21]
test al, al
jne 0x4945ad
jmp 0x4946ae
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
inc edx
cmp eax, edx
jae 0x4945c9
jmp 0x4945cb
jmp 0x4945fb
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x4945fb
lea ebx, [edx + ecx - 1]
mov byte [ebx], 0x5c
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x14c]
mov byte [esp + 0x29], al
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
inc edx
cmp eax, edx
jae 0x49463e
jmp 0x494640
jmp 0x494670
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x494670
lea ebx, [edx + ecx - 1]
movzx ebp, byte [esp + 0x29]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
mov dword [esp + 0x148], eax
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], edx
mov dword [esp + 0x15c], eax
add esp, 0x13c
ret
movzx eax, byte [esp + 0x151]
test al, al
jne 0x4946bf
jmp 0x49479f
cmp dword [esp + 0x14c], 0x80
setl al
mov byte [esp + 0x21], al
jl 0x4946d5
jmp 0x4946f3
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
call fcn.00495980
movzx eax, byte [esp + 4]
mov byte [esp + 0x20], al
mov byte [esp + 0x21], al
jmp 0x4946f5
jmp 0x4946f5
movzx eax, byte [esp + 0x21]
test al, al
jne 0x494703
jmp 0x49479a
mov eax, dword [esp + 0x14c]
mov byte [esp + 0x28], al
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
inc edx
cmp eax, edx
jae 0x49472a
jmp 0x49472c
jmp 0x49475c
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x49475c
lea ebx, [edx + ecx - 1]
movzx ebp, byte [esp + 0x28]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
mov dword [esp + 0x148], eax
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], edx
mov dword [esp + 0x15c], eax
add esp, 0x13c
ret
jmp 0x49487a
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
call fcn.00495980
movzx eax, byte [esp + 4]
mov byte [esp + 0x20], al
mov byte [esp + 0x21], al
test al, al
jne 0x4947c1
jmp 0x4947c3
jmp 0x494800
movzx eax, byte [esp + 0x152]
mov byte [esp + 0x2b], al
test al, al
jne 0x4947d5
jmp 0x4947f3
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
call fcn.00495de0
movzx eax, byte [esp + 4]
mov byte [esp + 0x2a], al
mov byte [esp + 0x2b], al
jmp 0x4947f5
jmp 0x4947f5
movzx eax, byte [esp + 0x2b]
mov byte [esp + 0x21], al
jmp 0x494800
movzx eax, byte [esp + 0x21]
test al, al
jne 0x49480b
jmp 0x494878
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
mov ebx, dword [esp + 0x148]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004838e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], ecx
mov dword [esp + 0x138], edx
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
mov dword [esp + 0x15c], edx
add esp, 0x13c
ret
jmp 0x49487a
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x8c], eax
cmp eax, 9
jle 0x494892
jmp 0x494b95
cmp eax, 7
je 0x49489c
jmp 0x494996
jmp 0x49489e
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], edx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x88], ebx
cmp eax, ebx
jae 0x4948d8
jmp 0x4948e1
mov dword [esp + 0x128], ebx
jmp 0x494926
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], edx
jmp 0x494926
mov dword [esp + 0x84], 2
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x124]
lea eax, [eax + ecx - 2]
mov dword [esp + 0x120], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], eax
lea eax, [0x526ae2]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x12c]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
jmp 0x4954bd
cmp eax, 8
je 0x4949a0
jmp 0x494a94
jmp 0x4949a2
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], edx
mov dword [esp + 0x11c], eax
mov dword [esp + 0x80], ebx
cmp eax, ebx
jae 0x4949dc
jmp 0x4949e5
mov dword [esp + 0x118], ebx
jmp 0x494a2a
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], ecx
mov dword [esp + 0x11c], edx
jmp 0x494a2a
mov dword [esp + 0x7c], 2
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x114]
lea eax, [eax + ecx - 2]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp], eax
lea eax, [0x526ae4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
jmp 0x4954bd
cmp eax, 9
je 0x494a9e
jmp 0x494b8c
jmp 0x494aa0
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], eax
mov dword [esp + 0x60], ebx
cmp eax, ebx
jae 0x494ad7
jmp 0x494ae0
mov dword [esp + 0xd8], ebx
jmp 0x494b25
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], edx
jmp 0x494b25
mov dword [esp + 0x5c], 2
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xd4]
lea eax, [eax + ecx - 2]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp], eax
lea eax, [0x526aec]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
jmp 0x4954bd
jmp 0x494b8e
jmp 0x494b90
jmp 0x494f8c
cmp eax, 0xb
jle 0x494b9f
jmp 0x494d96
cmp eax, 0xa
je 0x494ba9
jmp 0x494c97
jmp 0x494bab
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], edx
mov dword [esp + 0xfc], eax
mov dword [esp + 0x70], ebx
cmp eax, ebx
jae 0x494be2
jmp 0x494beb
mov dword [esp + 0xf8], ebx
jmp 0x494c30
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], edx
jmp 0x494c30
mov dword [esp + 0x6c], 2
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0xf4]
lea eax, [eax + ecx - 2]
mov dword [esp + 0xf0], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp], eax
lea eax, [0x526ae8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
jmp 0x4954bd
cmp eax, 0xb
je 0x494ca1
jmp 0x494d8f
jmp 0x494ca3
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
mov dword [esp + 0xcc], eax
mov dword [esp + 0x58], ebx
cmp eax, ebx
jae 0x494cda
jmp 0x494ce3
mov dword [esp + 0xc8], ebx
jmp 0x494d28
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], edx
jmp 0x494d28
mov dword [esp + 0x54], 2
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xc4]
lea eax, [eax + ecx - 2]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x54]
mov dword [esp], eax
lea eax, [0x526aee]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0xcc]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
jmp 0x4954bd
jmp 0x494d91
jmp 0x494f8a
cmp eax, 0xc
je 0x494da0
jmp 0x494e8e
jmp 0x494da2
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], edx
mov dword [esp + 0x10c], eax
mov dword [esp + 0x78], ebx
cmp eax, ebx
jae 0x494dd9
jmp 0x494de2
mov dword [esp + 0x108], ebx
jmp 0x494e27
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], ecx
mov dword [esp + 0x10c], edx
jmp 0x494e27
mov dword [esp + 0x74], 2
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x104]
lea eax, [eax + ecx - 2]
mov dword [esp + 0x100], eax
mov ecx, dword [esp + 0x74]
mov dword [esp], eax
lea eax, [0x526ae6]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x10c]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
jmp 0x4954bd
cmp eax, 0xd
je 0x494e98
jmp 0x494f86
jmp 0x494e9a
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], edx
mov dword [esp + 0xec], eax
mov dword [esp + 0x68], ebx
cmp eax, ebx
jae 0x494ed1
jmp 0x494eda
mov dword [esp + 0xe8], ebx
jmp 0x494f1f
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], edx
jmp 0x494f1f
mov dword [esp + 0x64], 2
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0xe4]
lea eax, [eax + ecx - 2]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0x64]
mov dword [esp], eax
lea eax, [0x526aea]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xec]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
jmp 0x4954bd
jmp 0x494f88
jmp 0x494f8a
jmp 0x494f8c
jmp 0x494f8e
cmp dword [esp + 0x14c], 0x20
setl al
mov byte [esp + 0x20], al
jl 0x494fa1
jmp 0x494fa3
jmp 0x494fb4
cmp dword [esp + 0x14c], 0x7f
sete al
mov byte [esp + 0x20], al
jmp 0x494fb4
movzx eax, byte [esp + 0x20]
test al, al
jne 0x494fc2
jmp 0x4951d6
jmp 0x494fc4
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], eax
mov dword [esp + 0x50], ebx
cmp eax, ebx
jae 0x494ffb
jmp 0x495004
mov dword [esp + 0xb8], ebx
jmp 0x495049
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], edx
jmp 0x495049
mov dword [esp + 0x4c], 2
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xb4]
lea eax, [eax + ecx - 2]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp], eax
lea eax, [0x526ade]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
mov eax, dword [esp + 0x14c]
shr al, 4
mov byte [esp + 0x27], al
movzx eax, al
jmp 0x4950be
lea ecx, [0x528eab]
add eax, ecx
movzx eax, byte [eax]
mov byte [esp + 0x26], al
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
inc edx
cmp eax, edx
jae 0x4950e9
jmp 0x4950eb
jmp 0x49511b
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x49511b
lea ebx, [edx + ecx - 1]
movzx ebp, byte [esp + 0x26]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x14c]
mov ecx, eax
and eax, 0xf
and ecx, 0xf
mov byte [esp + 0x25], cl
jmp 0x495152
lea ecx, [0x528eab]
add eax, ecx
movzx eax, byte [eax]
mov byte [esp + 0x24], al
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
inc edx
cmp eax, edx
jae 0x49517d
jmp 0x49517f
jmp 0x4951af
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x4951af
lea ebx, [edx + ecx - 1]
movzx ebp, byte [esp + 0x24]
xchg ebp, eax
mov byte [ebx], al
xchg ebp, eax
mov dword [esp + 0x140], ecx
mov dword [esp + 0x144], edx
mov dword [esp + 0x148], eax
jmp 0x4954bb
mov eax, dword [esp + 0x14c]
mov dword [esp], eax
call fcn.00484190
movzx eax, byte [esp + 4]
mov byte [esp + 0x21], al
test al, al
jne 0x4951f7
jmp 0x495301
cmp dword [esp + 0x14c], 0x10000
jl 0x495206
jmp 0x49520b
jmp 0x495310
jmp 0x49520d
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], eax
mov dword [esp + 0x3c], ebx
cmp eax, ebx
jae 0x495244
jmp 0x49524d
mov dword [esp + 0x98], ebx
jmp 0x495292
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], edx
jmp 0x495292
mov dword [esp + 0x38], 2
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x94]
lea eax, [eax + ecx - 2]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x38]
mov dword [esp], eax
lea eax, [0x526af2]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
mov dword [esp + 0x2c], 0x1c
jmp 0x4954ee
jmp 0x495303
mov dword [esp + 0x14c], 0xfffd
jmp 0x495310
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x144]
lea ebx, [edx + 2]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], eax
mov dword [esp + 0x48], ebx
cmp eax, ebx
jae 0x495347
jmp 0x495350
mov dword [esp + 0xa8], ebx
jmp 0x495395
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], edx
jmp 0x495395
mov dword [esp + 0x44], 2
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xa4]
lea eax, [eax + ecx - 2]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x44]
mov dword [esp], eax
lea eax, [0x526af0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00476100
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
mov dword [esp + 0x30], 0xc
jmp 0x495401
mov eax, dword [esp + 0x30]
test eax, eax
jge 0x49540e
jmp 0x4954b9
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x30]
cmp ecx, 0x20
sbb edx, edx
not edx
or ecx, edx
sar eax, cl
and eax, 0xf
mov dword [esp + 0x40], eax
jmp 0x49542d
lea edx, [0x528eab]
add eax, edx
movzx eax, byte [eax]
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x148]
mov edx, dword [esp + 0x140]
mov ebx, dword [esp + 0x144]
inc ebx
cmp eax, ebx
jae 0x495458
jmp 0x49545a
jmp 0x49548a
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x49548a
lea ebp, [ebx + edx - 1]
movzx esi, byte [esp + 0x23]
xchg esi, eax
mov byte [ebp], al
xchg esi, eax
mov dword [esp + 0x140], edx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], eax
jmp 0x4954af
add dword [esp + 0x30], 0xfffffffc
jmp 0x495401
jmp 0x4954bb
jmp 0x4954bd
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
mov dword [esp + 0x15c], edx
add esp, 0x13c
ret
mov eax, dword [esp + 0x2c]
test eax, eax
jge 0x4954fb
jmp 0x4955a6
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x2c]
cmp ecx, 0x20
sbb edx, edx
not edx
or ecx, edx
sar eax, cl
and eax, 0xf
mov dword [esp + 0x34], eax
jmp 0x49551a
lea edx, [0x528eab]
add eax, edx
movzx eax, byte [eax]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x148]
mov edx, dword [esp + 0x140]
mov ebx, dword [esp + 0x144]
inc ebx
cmp eax, ebx
jae 0x495545
jmp 0x495547
jmp 0x495577
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x495577
lea ebp, [ebx + edx - 1]
movzx esi, byte [esp + 0x22]
xchg esi, eax
mov byte [ebp], al
xchg esi, eax
mov dword [esp + 0x140], edx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], eax
jmp 0x49559c
add dword [esp + 0x2c], 0xfffffffc
jmp 0x4954ee
jmp 0x4954bb
call fcn.004743b0
jmp fcn.00494530