Function at 0x49d950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x7c]
cmp eax, dword [ecx + 8]
jbe 0x49edf2
sub esp, 0xfc
mov edi, esp
lea esi, [esp + 0x100]
call fcn.0044f6ae
call fcn.004a4100
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xd8], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0x120]
mov edi, dword [esp + 0x124]
mov esi, 0xffffffff
mov dword [esp + 0x34], esi
mov edi, 0xffffffff
mov dword [esp + 0x60], edi
xor edi, edi
mov dword [esp + 0x54], edi
xor esi, esi
mov dword [esp + 0x64], esi
xor esi, esi
mov dword [esp + 0x58], esi
xor esi, esi
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x120]
mov edi, dword [esp + 0x124]
jmp 0x49da31
mov ebx, dword [esp + 0xd8]
mov ebp, dword [esp + 0x6c]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x11c], esi
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], edx
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0xcc]
mov ebp, dword [esp + 0x6c]
test edi, edi
je 0x49edca
mov dword [esp], esi
mov dword [esp + 4], edi
call fcn.0049bfb0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x3c], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xcc], ebx
mov ebp, dword [esp + 0xc]
test ebp, ebp
jne 0x49ed0d
mov ecx, dword [esp + 0x114]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x11c]
test eax, eax
je 0x49ecf1
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], esi
mov edi, edx
mov edx, dword [esp + 0x34]
test edx, edx
jge 0x49dab7
test eax, 0x100
jne 0x49ec9b
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x60]
test edx, edx
jge 0x49dace
test eax, 0x200
jne 0x49ec05
mov dword [esp + 0x60], edx
and eax, 0xffff
cmp eax, 0x108
jg 0x49e70f
cmp eax, 0x102
jg 0x49e371
cmp eax, 0x1f
jg 0x49e156
cmp eax, 0x15
je 0x49df2b
lea edx, [eax - 0x16]
cmp edx, 9
ja 0x49df20
mov edx, dword [esp + 0x68]
test edx, edx
jne 0x49df19
mov eax, edx
mov edx, dword [esp + 0x40]
cmp edx, 0x16
jne 0x49dea3
mov dword [esp + 0xb4], eax
mov eax, 1
mov byte [esp + 0x2b], al
mov eax, dword [esp + 0xb4]
movzx edx, byte [esp + 0x2b]
test dl, dl
je 0x49db9b
lea edx, [ebp + 1]
cmp edx, esi
ja 0x49db56
mov byte [ecx + ebp], 0x5a
jmp 0x49d9f6
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49db4d
mov edx, eax
mov eax, 0x88888889
imul edx
mov eax, ebx
mov ebx, dword [esp + 0x68]
add edx, ebx
sar ebx, 0x1f
sar edx, 5
mov dword [esp + 0xa0], edx
sub edx, ebx
test edx, edx
jge 0x49de36
lea edx, [ebp + 1]
cmp edx, esi
ja 0x49dde4
mov byte [ecx + ebp], 0x2d
mov ebp, dword [esp + 0xa0]
sub ebx, ebp
mov ebp, dword [esp + 0x68]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0xa0], ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov eax, 0x88888889
imul ebx
lea ecx, [ebx + edx]
sar ebx, 0x1f
sar ecx, 5
sub ecx, ebx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.0049d010
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x40]
cmp ebp, 0x19
jne 0x49ddc2
lea esi, [edx + 1]
cmp esi, ecx
ja 0x49dd7e
mov byte [ebx + edx], 0x3a
cmp ebp, 0x1d
je 0x49dc5b
cmp ebp, 0x18
jne 0x49dd3d
cmp ebp, 0x17
je 0x49dc89
cmp ebp, 0x1c
je 0x49dc89
cmp ebp, 0x1f
je 0x49dc89
cmp ebp, 0x1a
je 0x49dc89
mov eax, dword [esp + 0x68]
mov edi, dword [esp + 0x3c]
mov edx, esi
mov esi, ecx
mov ecx, ebx
mov ebx, dword [esp + 0xcc]
jmp 0x49d9f6
cmp ebp, 0x1f
jne 0x49dd2d
lea edx, [esi + 1]
cmp edx, ecx
ja 0x49dced
mov byte [ebx + esi], 0x3a
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xa0]
mov ecx, 0x88888889
imul ecx
mov ebx, dword [esp + 0xa0]
add edx, ebx
mov ebp, ebx
sar ebx, 0x1f
sar edx, 5
sub edx, ebx
imul edx, edx, 0x3c
sub ebp, edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.0049d010
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
jmp 0x49dc6f
mov dword [esp + 0x98], esi
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov esi, dword [esp + 0x98]
jmp 0x49dc99
cmp ebp, 0x1a
je 0x49dc92
mov edx, esi
jmp 0x49dc9d
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x9c]
imul eax, eax, 0x3c
mov ecx, dword [esp + 0x2c]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.0049d010
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x40]
jmp 0x49dc5b
mov dword [esp + 0x94], edx
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.0043a950
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov edx, dword [esp + 0x94]
mov ebp, dword [esp + 0x40]
jmp 0x49dc49
cmp ebp, 0x1e
je 0x49dc3e
cmp ebp, 0x1a
je 0x49dc3e
cmp ebp, 0x1f
je 0x49dc3e
mov esi, edx
jmp 0x49dc4d
mov dword [esp + 0x9c], ebx
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0xcc]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49dbce
lea ebx, [ebp + 1]
cmp ebx, esi
ja 0x49de54
mov byte [ecx + ebp], 0x2b
mov ebp, dword [esp + 0x68]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
mov ebp, dword [esp + 0x68]
jmp 0x49dbe5
mov dword [esp + 0x90], edx
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043a950
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0x90]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49de3d
cmp edx, 0x19
jne 0x49dec4
mov dword [esp + 0xac], eax
mov eax, 1
mov byte [esp + 0x2b], al
mov eax, dword [esp + 0xac]
jmp 0x49db3d
cmp edx, 0x17
jne 0x49dee5
mov dword [esp + 0xbc], eax
mov eax, 1
mov byte [esp + 0x2b], al
mov eax, dword [esp + 0xbc]
jmp 0x49db3d
cmp edx, 0x18
jne 0x49df06
mov dword [esp + 0xc4], eax
mov eax, 1
mov byte [esp + 0x2b], al
mov eax, dword [esp + 0xc4]
jmp 0x49db3d
cmp edx, 0x1a
sete dl
mov byte [esp + 0x2b], dl
mov edx, dword [esp + 0x40]
jmp 0x49db3d
mov eax, edx
jmp 0x49db9b
mov eax, dword [esp + 0x68]
mov edx, ebp
jmp 0x49d9f6
mov edx, dword [esp + 0x50]
test edx, edx
je 0x49dfcc
lea eax, [edx + ebp]
mov dword [esp + 0x118], eax
cmp eax, esi
ja 0x49df96
mov dword [esp + 0x11c], esi
mov dword [esp + 0x114], ecx
lea eax, [ecx + ebp]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044f8d0
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x118]
mov esi, dword [esp + 0x11c]
mov ecx, dword [esp + 0x114]
jmp 0x49d9f6
lea edx, [0x7ac140]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043a950
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0xa8]
jmp 0x49df45
mov eax, 0x88888889
mov edx, dword [esp + 0x68]
imul edx
mov eax, ebx
mov ebx, dword [esp + 0x68]
add edx, ebx
sar ebx, 0x1f
sar edx, 5
mov dword [esp + 0xa0], edx
sub edx, ebx
test edx, edx
jge 0x49e0f1
lea edx, [ebp + 1]
cmp edx, esi
ja 0x49e09f
mov byte [ecx + ebp], 0x2d
mov ebp, dword [esp + 0xa0]
sub ebx, ebp
mov dword [esp + 0x30], ebx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov eax, 0x88888889
imul ebx
lea ecx, [edx + ebx]
sar ebx, 0x1f
sar ecx, 5
sub ecx, ebx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.0049d010
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov ecx, dword [esp + 0xa0]
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x30]
sub edx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov dword [esp + 0x9c], ebx
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0xcc]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49e001
lea ebx, [ebp + 1]
cmp ebx, esi
ja 0x49e107
mov byte [ecx + ebp], 0x2b
mov ebp, edx
mov edx, ebx
mov ebx, ebp
jmp 0x49e00e
mov dword [esp + 0x8c], edx
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043a950
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49e0f8
lea edx, [eax - 0x20]
cmp edx, 1
jbe 0x49e2fd
cmp eax, 0x101
je 0x49e22e
cmp eax, 0x102
jne 0x49df20
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.004a3ca0
mov eax, dword [esp + 4]
cmp dword [esp + 8], 3
jb 0x49edeb
mov ecx, dword [esp + 0xa8]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xa4]
cmp edx, ebx
ja 0x49e1dc
mov ebp, dword [esp + 0xe4]
mov esi, ebp
movzx ebp, byte [eax + 2]
mov edi, ebp
movzx ebp, word [eax]
mov word [esi + ecx], bp
xchg edi, eax
mov byte [esi + ecx + 2], al
xchg edi, eax
mov eax, dword [esp + 0x68]
mov edi, dword [esp + 0x3c]
mov ecx, esi
mov esi, ebx
mov ebx, dword [esp + 0xcc]
jmp 0x49d9f6
mov dword [esp + 0x88], edx
mov dword [esp + 0xe0], eax
lea eax, [0x7ac140]
mov dword [esp], eax
mov ebp, dword [esp + 0xe4]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x88]
jmp 0x49e1af
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.004a3ca0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xa8]
lea ebx, [edx + eax]
mov dword [esp + 0x118], ebx
mov ebp, dword [esp + 0xa4]
cmp ebx, ebp
ja 0x49e2ae
mov esi, dword [esp + 0xe4]
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x114], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044f8d0
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x118]
mov esi, dword [esp + 0x11c]
mov ecx, dword [esp + 0x114]
jmp 0x49d9f6
mov dword [esp + 0x5c], eax
mov dword [esp + 0xdc], ecx
lea eax, [0x7ac140]
mov dword [esp], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a950
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xa8]
jmp 0x49e265
lea edi, [esp + 0xe8]
mov edx, esi
lea esi, [esp + 0x100]
call fcn.0044f6ae
nop
nop
mov ecx, dword [esp + 0xe8]
mov ebx, dword [esp + 0xe4]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
and ecx, 0x3fffffff
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
sar ecx, 0x10
mov dword [esp + 0x10], ecx
cmp eax, 0x21
sete al
mov byte [esp + 0x14], al
call fcn.0049d310
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
cmp eax, 0x105
jg 0x49e51f
cmp eax, 0x103
je 0x49e4df
cmp eax, 0x104
jne 0x49e3ce
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov eax, dword [esp + 0x6c]
add eax, 0x15180
nop
mov dword [esp], eax
mov eax, dword [esp + 0x70]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.0044a280
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
mov eax, ecx
sar ecx, 0x1f
add eax, edx
sar eax, 0x10
sub eax, ecx
mov dword [esp], eax
call fcn.004a3da0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xa8]
lea ebx, [edx + eax]
mov dword [esp + 0x118], ebx
mov ebp, dword [esp + 0xa4]
cmp ebx, ebp
ja 0x49e490
mov esi, dword [esp + 0xe4]
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x114], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044f8d0
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x118]
mov esi, dword [esp + 0x11c]
mov ecx, dword [esp + 0x114]
jmp 0x49d9f6
mov dword [esp + 0x48], eax
mov dword [esp + 0xd0], ecx
lea eax, [0x7ac140]
mov dword [esp], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043a950
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xa8]
jmp 0x49e447
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
cmp eax, 0x106
je 0x49e618
cmp eax, 0x107
je 0x49e5d8
mov eax, dword [esp + 0x64]
cmp eax, 0xa
jge 0x49e5d1
lea edx, [ebp + 1]
cmp edx, esi
ja 0x49e589
mov byte [ecx + ebp], 0x20
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x64]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49e549
mov edx, ebp
jmp 0x49e54d
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov eax, dword [esp + 0x6c]
add eax, 0x15180
nop
mov dword [esp], eax
mov eax, dword [esp + 0x70]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.0044a280
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [ecx + edx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
mov dword [esp], eax
call fcn.004a3da0
mov eax, dword [esp + 4]
cmp dword [esp + 8], 3
jb 0x49ede4
mov ecx, dword [esp + 0xa8]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xa4]
cmp edx, ebx
ja 0x49e6bd
mov ebp, dword [esp + 0xe4]
mov esi, ebp
movzx ebp, byte [eax + 2]
mov edi, ebp
movzx ebp, word [eax]
mov word [esi + ecx], bp
xchg edi, eax
mov byte [esi + ecx + 2], al
xchg edi, eax
mov eax, dword [esp + 0x68]
mov edi, dword [esp + 0x3c]
mov ecx, esi
mov esi, ebx
mov ebx, dword [esp + 0xcc]
jmp 0x49d9f6
mov dword [esp + 0x84], edx
mov dword [esp + 0xe0], eax
lea eax, [0x7ac140]
mov dword [esp], eax
mov ebp, dword [esp + 0xe4]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043a950
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x84]
jmp 0x49e690
cmp eax, 0x20c
jg 0x49e945
cmp eax, 0x112
jg 0x49e820
cmp eax, 0x109
je 0x49e7e0
cmp eax, 0x111
je 0x49e7a0
cmp eax, 0x112
jne 0x49df20
mov edx, dword [esp + 0x38]
test edx, edx
jge 0x49e74c
neg edx
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, 0x51eb851f
mov ecx, edx
imul edx
mov ebx, ecx
sar ecx, 0x1f
sar edx, 5
sub edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049d010
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
cmp eax, 0x20a
je 0x49e909
cmp eax, 0x20b
je 0x49e8a3
cmp eax, 0x20c
jne 0x49df20
mov eax, edx
mov ebx, 0xaaaaaaab
imul ebx
mov ebx, dword [esp + 0x60]
add edx, ebx
mov eax, ebx
sar ebx, 0x1f
sar edx, 3
sub edx, ebx
lea edx, [edx + edx*2]
shl edx, 2
sub eax, edx
test eax, eax
jne 0x49e867
mov eax, 0xc
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov eax, edx
mov ebx, 0xaaaaaaab
imul ebx
mov ebx, dword [esp + 0x60]
add edx, ebx
mov eax, ebx
sar ebx, 0x1f
sar edx, 3
sub edx, ebx
lea edx, [edx + edx*2]
shl edx, 2
sub eax, edx
test eax, eax
jne 0x49e8cd
mov eax, 0xc
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049d010
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
cmp eax, 0x20f
jle 0x49eb33
cmp eax, 0x210
je 0x49eaf3
cmp eax, 0x213
jne 0x49ea2a
cmp edx, 0xc
jl 0x49e9d2
lea eax, [ebp + 2]
cmp eax, esi
ja 0x49e986
mov edx, 0x4d50
mov word [ecx + ebp], dx
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x49d9f6
mov dword [esp + 0x80], eax
lea edx, [0x7ac140]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043a950
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49e972
lea eax, [ebp + 2]
cmp eax, esi
ja 0x49e9e4
mov edx, 0x4d41
mov word [ecx + ebp], dx
jmp 0x49e97b
mov dword [esp + 0x7c], eax
lea edx, [0x7ac140]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043a950
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49e9d9
cmp eax, 0x214
jne 0x49df20
cmp edx, 0xc
jl 0x49ea9b
lea eax, [ebp + 2]
cmp eax, esi
ja 0x49ea55
mov edx, 0x6d70
mov word [ecx + ebp], dx
mov edx, eax
mov eax, dword [esp + 0x68]
jmp 0x49d9f6
mov dword [esp + 0x78], eax
lea edx, [0x7ac140]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043a950
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49ea41
lea eax, [ebp + 2]
cmp eax, esi
ja 0x49eaad
mov edx, 0x6d61
mov word [ecx + ebp], dx
jmp 0x49ea4a
mov dword [esp + 0x74], eax
lea edx, [0x7ac140]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0043a950
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x3c]
jmp 0x49eaa2
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
cmp eax, 0x20d
je 0x49ebc5
cmp eax, 0x20e
jne 0x49eb85
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.0049d010
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049d010
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.0049d010
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
jmp 0x49d9f6
nop
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov ecx, dword [esp + 0x70]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x15180
mov dword [esp + 0xc], 0
call fcn.0044a280
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 0xb
sub edx, ecx
imul ecx, edx, 0xe10
sub eax, ecx
mov ecx, eax
mov eax, 0x88888889
mov ebx, edx
imul ecx
lea eax, [ecx + edx]
mov edx, ecx
sar ecx, 0x1f
sar eax, 5
sub eax, ecx
imul ecx, eax, 0x3c
sub edx, ecx
mov ecx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x58], eax
mov dword [esp + 0x44], edx
mov edx, ebx
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0xcc]
jmp 0x49dace
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov ecx, dword [esp + 0x70]
mov dword [esp + 4], ecx
mov byte [esp + 8], 1
call fcn.004a5da0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x54], eax
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xe4]
jmp 0x49dab7
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], ebp
mov dword [esp + 0x130], esi
add esp, 0xfc
ret
mov esi, dword [esp + 0x118]
lea edi, [ebp + esi]
mov dword [esp + 0xa0], edi
mov edx, dword [esp + 0x11c]
cmp edi, edx
ja 0x49ed74
mov dword [esp + 0x11c], edx
mov eax, dword [esp + 0x114]
lea ebx, [eax + esi]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0044f8d0
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0xcc]
mov ecx, dword [esp + 0x114]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x11c]
jmp 0x49da85
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x4c], ebp
lea eax, [0x7ac140]
mov dword [esp], eax
mov ecx, dword [esp + 0x114]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], edi
call fcn.0043a950
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xd4]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x118]
mov dword [esp + 0x114], eax
jmp 0x49ed2a
mov ecx, dword [esp + 0x114]
mov ebp, dword [esp + 0x118]
mov esi, dword [esp + 0x11c]
jmp 0x49ecf1
call fcn.004288c0
ud2
call fcn.004288c0
ud2
call fcn.0044d880
jmp fcn.0049d950