Function at 0x49be20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x3b8
mov eax, 0xfbbe7f
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x3cc]
mov ebp, edx
lea edi, [edx + 0x50]
movzx ebx, byte [edx + 0x246]
mov bh, byte [edx + 0x247]
mov dword [esp + 0x118], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x140], 0
shr eax, 0x10
mov dword [esp + 4], ebp
mov dword [esp + 0x174], edi
mov dword [esp + 0x270], eax
mov eax, 0xf94373
shr eax, 0x10
mov dword [esp + 0x264], eax
mov eax, 0xfbbe09
shr eax, 0x10
mov dword [esp + 0x26c], eax
mov eax, 0xfbbdc2
shr eax, 0x10
mov dword [esp + 0x274], eax
mov eax, 0xfbbdb4
shr eax, 0x10
mov dword [esp + 0x268], eax
mov eax, 0xf92963
shr eax, 0x10
mov dword [esp + 0x278], eax
mov eax, 0xf943cc
shr eax, 0x10
mov dword [esp + 0x27c], eax
call 0x49bee1
pop eax
mov dword [esp + 0x170], eax
lea eax, [edx + 0x2a0]
mov dword [esp + 0x150], eax
lea eax, [edx + 0x288]
mov dword [esp + 0x284], eax
lea eax, [edx + 0x260]
mov dword [esp + 0x7c], eax
lea eax, [edx + 0x261]
mov dword [esp + 0x288], eax
lea eax, [edx + 0x250]
mov dword [esp + 0x11c], eax
lea eax, [edx + 0x270]
mov dword [esp + 0x280], eax
mov eax, dword [edx + 0x64]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x154], ecx
lea ecx, [esp + 0x94]
mov dword [esp + 0x158], edx
mov dword [esp + 0x34], edx
mov dword [esp + 0x30], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14c], edx
test eax, eax
je 0x49bfc0
mov esi, dword [esp + 0x88]
nop
mov edx, edi
push dword [esp + 0x154]
push dword [esp + 0x15c]
call fcn.00453b30
add esp, 8
movzx eax, byte [esp + 0x94]
cmp al, 4
jne 0x49f2ef
mov eax, dword [esp + 0x98]
test eax, eax
je 0x49f323
add eax, esi
cmp dword [ebp + 0x64], 0
lea ecx, [esp + 0x94]
mov esi, eax
jne 0x49bf70
jmp 0x49bfde
cmp dword [ebp + 0x4c], 0
mov eax, dword [esp + 0x88]
jne 0x49f4b5
test byte [ebp + 0x24a], 1
jne 0x49f4b5
mov dword [esp + 0x88], eax
push dword [esp + 0x158]
push ecx
mov eax, dword [esp + 0x15c]
call dword [eax + 0x38]
add esp, 8
cmp byte [esp + 0x94], 4
jne 0x49f3a6
and bl, bh
cmp dword [esp + 0x88], 0
mov byte [esp + 0x91], bl
setne al
test bl, al
jne 0x49f38f
test byte [esp + 0x140], 1
jne 0x49c390
nop word cs:[eax + eax]
nop dword [eax]
cmp dword [ebp + 0x4c], 0
jne 0x49c390
cmp byte [ebp + 0x24a], 0
jne 0x49c390
cmp byte [ebp + 0x246], 0
jne 0x49c06a
cmp dword [ebp + 0x64], 0
jne 0x49c390
cmp dword [ebp + 0x38], 1
jne 0x49c0e0
mov ecx, dword [ebp + 0x44]
mov eax, dword [ebp + 0x3c]
xor edx, edx
mov esi, ecx
mov edi, ecx
jmp 0x49c086
add edx, dword [esi + 8]
add esi, 0xc
cmp esi, ecx
jne 0x49c080
test edi, edi
je 0x49c0a0
cmp ecx, edi
je 0x49c0a0
mov ebx, edi
mov edi, esi
mov esi, ebx
jmp 0x49c080
cmp edx, eax
jbe 0x49c0e0
lea ecx, [esp + 0x318]
mov edx, 0x27
push 0x1e
push 0xfbcf4c
call fcn.004a4210
add esp, 8
movzx ebx, byte [esp + 0x318]
cmp bl, 4
jne 0x49c2cc
jmp 0x49c358
cmp dword [ebp + 0x258], 0
mov edi, dword [ebp + 0x2ac]
mov eax, 0xffff
mov ecx, 0x4805
cmove eax, ecx
cmp edi, eax
jae 0x49c180
lea ebx, [edi + 0x1000]
mov esi, dword [ebp + 0x2a8]
cmp eax, ebx
cmovb ebx, eax
mov ebp, ebx
sub ebp, esi
jbe 0x49c1b8
mov eax, dword [esp + 0x150]
mov eax, dword [eax]
sub eax, esi
cmp eax, ebp
jb 0x49c333
mov eax, dword [esp + 4]
cmp ebp, 2
mov edi, dword [eax + 0x2a4]
lea eax, [edi + esi]
jb 0x49c159
lea ecx, [ebp - 1]
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea esi, [esi + ebp - 1]
add edi, esi
mov eax, edi
mov ebp, dword [esp + 4]
inc esi
mov byte [eax], 0
lea ecx, [esp + 0x94]
mov ebx, esi
mov dword [ebp + 0x2a8], esi
mov edi, dword [ebp + 0x2ac]
jmp 0x49c210
lea ecx, [esp + 0x188]
mov edx, 0x15
push 0x13
push 0xf92969
call fcn.00440ce0
add esp, 8
movzx ecx, byte [esp + 0x188]
mov eax, dword [esp + 0x18c]
cmp cl, 4
je 0x49c268
jmp 0x49c2a7
test edi, edi
sete cl
cmp esi, eax
seta al
or al, cl
je 0x49c203
mov ebp, dword [esp + 4]
mov dword [ebp + 0x2a8], ebx
cmp dword [ebp + 0x2a0], ebx
jbe 0x49c209
push ebx
push dword [ebp + 0x2a4]
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
test eax, eax
je 0x49f4eb
mov dword [ebp + 0x2a4], eax
mov dword [ebp + 0x2a0], ebx
jmp 0x49c209
mov ebp, dword [esp + 4]
mov ebx, esi
lea ecx, [esp + 0x94]
sub ebx, edi
jb 0x49f4eb
mov eax, dword [ebp + 0x2a4]
add eax, edi
push ebx
push eax
push dword [esp + 0x160]
push ecx
mov eax, dword [esp + 0x164]
call dword [eax + 0xc]
add esp, 0x10
movzx eax, byte [esp + 0x94]
cmp al, 4
jne 0x49c275
mov eax, dword [esp + 0x98]
mov cl, 4
add edi, eax
mov dword [esp + 0x18c], eax
mov byte [esp + 0x188], 4
mov dword [ebp + 0x2ac], edi
cmp cl, 4
jne 0x49c2a7
test eax, eax
jne 0x49c2a7
mov byte [ebp + 0x24b], 1
jmp 0x49c2a7
lea edx, [esp + 0x9a]
lea esi, [esp + 0x18c]
movzx ecx, byte [edx - 3]
movzx edi, word [edx - 5]
mov edx, dword [esp + 0x98]
mov byte [esi - 1], cl
mov word [esi - 3], di
mov byte [esp + 0x188], al
mov dword [esp + 0x18c], edx
mov ebx, dword [esp + 0x188]
mov eax, dword [esp + 0x18c]
mov dword [esp + 0x31c], eax
mov dword [esp + 0x318], ebx
cmp bl, 4
je 0x49c358
lea ecx, [esp + 0x318]
call fcn.004a1ea0
cmp al, 0x23
jne 0x49f37f
cmp bl, 3
jne 0x49c040
mov esi, dword [esp + 0x31c]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x49c301
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x49c31f
cmp dword [ebx + 8], 9
jb 0x49c310
mov edi, dword [edi - 4]
push edi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49c040
mov ecx, dword [esp + 0x150]
mov edx, esi
push 1
push 1
push ebp
call fcn.004e8d40
add esp, 0xc
mov eax, dword [esp + 4]
mov esi, dword [eax + 0x2a8]
jmp 0x49c130
mov eax, dword [esp + 0x31c]
mov ecx, dword [esp + 0x140]
add dword [esp + 0x118], eax
test eax, eax
movzx ecx, cl
mov eax, 1
cmove ecx, eax
mov dword [esp + 0x140], ecx
nop word cs:[eax + eax]
nop dword [eax + eax]
movzx ecx, byte [ebp + 0x260]
mov edi, dword [ebp + 0x264]
mov ebx, dword [ebp + 0x268]
mov eax, dword [ebp + 0x26c]
mov byte [ebp + 0x260], 0x10
cmp cl, 0x16
jne 0x49e810
mov eax, dword [ebp + 0x2b0]
mov esi, dword [ebp + 0x2ac]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x40], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x58], eax
cmp esi, dword [ebp + 0x2a8]
ja 0x49f4eb
mov edi, dword [ebp + 0x258]
mov eax, dword [ebp + 0x2a4]
mov dword [esp + 0x18], esi
test edi, edi
mov dword [esp + 0x14], eax
je 0x49c580
mov eax, dword [ebp + 0x254]
cmp dword [eax], 1
jne 0x49c580
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 4]
mov esi, dword [eax + 0xc]
mov ebx, ecx
add edx, 4
mov dword [esp + 0xc], esi
sub ebx, esi
mov esi, 0
cmovb ebx, esi
mov esi, dword [esp + 0x18]
cmp edx, ebx
jne 0x49c580
xor edx, edx
cmp edi, 1
jne 0x49c461
mov edx, dword [ebp + 0x25c]
mov dword [ebp + 0x25c], 0
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xc], ecx
mov ecx, dword [eax + 0x10]
mov ebx, ecx
sub ebx, dword [esp + 0xc]
jb 0x49f4eb
cmp ecx, esi
ja 0x49f4eb
movd xmm0, dword [eax + 8]
cmp edi, 1
mov dword [esp + 0x4c], edx
mov dword [ebp + 0x258], 0
je 0x49c4b8
lea edx, [edi*4 - 4]
lea ecx, [eax + 0x14]
dec edi
lea edx, [edx + edx*4]
push edx
push ecx
push eax
movdqu xmmword [esp + 0x68], xmm0
call sub.VCRUNTIME140.dll_memmove
movdqu xmm0, xmmword [esp + 0x68]
add esp, 0xc
mov dword [ebp + 0x258], edi
mov ecx, dword [esp + 0x14]
movd eax, xmm0
movd dword [esp + 0x124], xmm0
add ecx, dword [esp + 0xc]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], ebx
mov byte [esp + 0x130], 2
mov dword [esp + 0x120], 0
mov edi, dword [esp + 0x138]
lea ebx, [esp + 0x94]
cmp ax, 0xa
mov dword [esp + 0x20], eax
je 0x49eb7d
movzx eax, byte [esp + 0x130]
movzx esi, word [esp + 0x126]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x12c]
test eax, eax
je 0x49d2c6
cmp eax, 1
mov word [esp + 0xc], si
je 0x49d36d
movzx ebx, byte [esp + 0x47]
mov bh, byte [esp + 0x1f]
cmp eax, 2
je 0x49d30f
cmp eax, 3
jne 0x49eeec
mov ebp, 0x80000005
mov eax, 0x80000000
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x84], edx
jmp 0x49d427
cmp dword [esp + 0x28], esi
ja 0x49f4eb
movzx ebx, word [ebp + 0x238]
mov word [esp + 0x13c], bx
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x14]
mov eax, esi
mov esi, dword [ebp + 0x2c]
sub eax, ecx
add ecx, edx
cmp bx, 5
movzx ebx, byte [ebp + 0x32]
mov edx, dword [ebp + 0x14]
mov dword [esp + 0x228], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x22c], eax
mov dword [esp + 0x230], 0
mov byte [esp + 0xc], bl
mov dword [esp + 0x3c], edx
mov dword [esp], ecx
mov ecx, dword [ebp + 0x28]
mov dword [esp + 0x5c], ecx
jne 0x49c8b0
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp + 8], eax
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x94]
lea edx, [esp + 0x228]
call fcn.00440d70
mov eax, dword [esp + 0x94]
test eax, eax
jne 0x49eaef
lea eax, [esp + 0x9a]
movzx ebp, word [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 6]
cmp bp, 0xa
movq qword [esp + 0x188], xmm0
movq qword [esp + 0x18e], xmm1
je 0x49eb71
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
lea eax, [esp + 0x29e]
mov word [esp + 0x29c], bp
lea ecx, [esp + 0x94]
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
movzx edx, byte [esp + 0x2a8]
test edx, edx
je 0x49c6a3
cmp edx, 1
jne 0x49c6ab
mov eax, dword [esp + 4]
cmp byte [eax + 0x30], 0
jne 0x49c6ab
cmp dword [esp + 0x2a4], 2
ja 0x49c6ab
test edi, edi
je 0x49cc1d
cmp byte [esp + 0xc], 2
jne 0x49c753
mov edi, dword [esp + 0x2a4]
push esi
mov ebx, dword [esp + 0x60]
push ebx
lea eax, [esp + 0x2a4]
push eax
push dword [esp + 0xc]
push ecx
mov eax, dword [esp + 0x50]
call dword [eax + 0xc]
add esp, 0x14
test byte [esp + 0x94], 1
je 0x49c7b6
cmp byte [esp + 0x98], 6
jne 0x49c7da
test byte [esp + 8], 1
je 0x49c7da
mov ebx, dword [esp + 0x20]
sub ebx, edi
jb 0x49c7da
mov eax, dword [esp + 4]
lea ecx, [esp + 0x98]
mov word [esp + 0x188], 0xa
mov dword [eax], 1
mov dword [eax + 4], ebx
call fcn.00440f40
movzx ebp, word [esp + 0x188]
mov dword [esp + 8], 1
mov dword [esp + 0x20], ebx
cmp bp, 0xa
je 0x49c856
jmp 0x49cb64
mov ebx, edx
movzx eax, byte [esp + 0x2a9]
movzx ecx, word [esp + 0x29e]
mov edx, dword [esp + 0x2a0]
mov edi, dword [esp + 0x2a4]
mov word [esp + 0x188], bp
mov word [esp + 0x18a], cx
mov dword [esp + 0x18c], edx
mov dword [esp + 0x190], edi
mov byte [esp + 0x194], bl
mov byte [esp + 0x195], al
mov byte [esp + 0x198], 0
cmp bp, 0xa
je 0x49c856
jmp 0x49cb64
mov edx, dword [esp + 4]
mov eax, ebx
mov ecx, esi
add eax, 1
adc ecx, 0
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], ecx
cmp byte [edx + 0x30], 0
je 0x49c806
xor ebx, 0xffff0000
not esi
jmp 0x49c812
lea eax, [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 8]
lea eax, [esp + 0x18c]
movq qword [eax + 8], xmm1
movq qword [eax], xmm0
mov word [esp + 0x188], 0xb
jmp 0x49c844
xor ebx, 0xffff0000
not esi
mov byte [edx + 0x30], 1
or esi, ebx
lea edx, [esp + 0x98]
mov dword [esp + 0x5c], eax
mov esi, ecx
movq xmm0, qword [edx]
movq xmm1, qword [edx + 8]
movq qword [esp + 0x190], xmm1
movq qword [esp + 0x188], xmm0
sete byte [esp + 0x198]
movzx ebp, word [esp + 0x188]
cmp bp, 0xa
jne 0x49cb64
mov eax, dword [esp + 4]
mov edi, dword [eax + 0x258]
mov ecx, dword [eax + 0x254]
lea eax, [edi*4]
lea eax, [eax + eax*4]
test eax, eax
je 0x49c5f7
cmp dword [ecx], 1
jne 0x49e8a6
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 0x10]
mov ebp, 0
add edx, 4
sub ebx, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb ebx, ebp
add eax, 0xffffffec
cmp edx, ebx
je 0x49c870
jmp 0x49e8a6
movzx eax, byte [ebp + 0x30]
mov edx, dword [ebp]
mov ecx, dword [ebp + 4]
mov byte [esp + 8], al
mov dword [esp + 0x20], edx
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x94]
lea edx, [esp + 0x228]
call fcn.00440d70
mov eax, dword [esp + 0x94]
test eax, eax
jne 0x49eaef
lea eax, [esp + 0x9a]
movzx ebp, word [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 6]
cmp bp, 0xa
movq qword [esp + 0x188], xmm0
movq qword [esp + 0x18e], xmm1
je 0x49eb71
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
lea eax, [esp + 0x29e]
mov word [esp + 0x29c], bp
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
movzx eax, byte [esp + 0x2a8]
test al, al
setne cl
test edi, edi
setne dl
or dl, cl
je 0x49cc14
cmp byte [esp + 0xc], 2
jne 0x49ca05
mov edi, dword [esp + 0x2a4]
push esi
mov ebx, dword [esp + 0x60]
push ebx
lea eax, [esp + 0x2a4]
push eax
push dword [esp + 0xc]
lea eax, [esp + 0xa4]
push eax
mov eax, dword [esp + 0x50]
call dword [eax + 0xc]
add esp, 0x14
test byte [esp + 0x94], 1
je 0x49ca5c
cmp byte [esp + 0x98], 6
jne 0x49ca93
test byte [esp + 0x20], 1
je 0x49ca93
mov ebx, dword [esp + 0x2c]
sub ebx, edi
jb 0x49ca93
mov eax, dword [esp + 4]
lea ecx, [esp + 0x98]
mov word [esp + 0x188], 0xa
mov dword [eax], 1
mov dword [eax + 4], ebx
call fcn.00440f40
movzx ebp, word [esp + 0x188]
mov dword [esp + 0x20], 1
mov dword [esp + 0x2c], ebx
jmp 0x49cb10
movzx ecx, byte [esp + 0x2a9]
movzx edx, word [esp + 0x29e]
mov edi, dword [esp + 0x2a0]
mov ebx, dword [esp + 0x2a4]
mov word [esp + 0x188], bp
mov word [esp + 0x18a], dx
mov dword [esp + 0x18c], edi
mov dword [esp + 0x190], ebx
mov byte [esp + 0x194], al
mov byte [esp + 0x195], cl
mov byte [esp + 0x198], 0
jmp 0x49cb10
mov eax, ebx
mov ecx, esi
mov edx, dword [esp + 4]
not esi
add eax, 1
adc ecx, 0
test byte [esp + 8], 1
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], ecx
je 0x49cac7
lea edx, [esp + 0x98]
xor ebx, 0xffff0000
movq xmm0, qword [edx]
movq xmm1, qword [edx + 8]
or ebx, esi
jmp 0x49cae8
lea eax, [esp + 0x98]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 8]
lea eax, [esp + 0x18c]
movq qword [eax + 8], xmm1
movq qword [eax], xmm0
mov word [esp + 0x188], 0xb
movzx ebp, word [esp + 0x188]
jmp 0x49cb10
xor ebx, 0xffff0000
mov byte [edx + 0x30], 1
mov byte [esp + 8], 1
or ebx, esi
lea esi, [esp + 0x98]
movq xmm0, qword [esi]
movq xmm1, qword [esi + 8]
movq qword [esp + 0x190], xmm1
movq qword [esp + 0x188], xmm0
sete byte [esp + 0x198]
movzx ebp, word [esp + 0x188]
mov dword [esp + 0x5c], eax
mov esi, ecx
cmp bp, 0xa
jne 0x49cb64
mov eax, dword [esp + 4]
mov edi, dword [eax + 0x258]
mov ecx, dword [eax + 0x254]
lea eax, [edi*4]
lea eax, [eax + eax*4]
test eax, eax
je 0x49c8c6
cmp dword [ecx], 1
jne 0x49e8a6
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 0x10]
mov ebp, 0
add edx, 4
sub ebx, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb ebx, ebp
add eax, 0xffffffec
cmp edx, ebx
je 0x49cb30
jmp 0x49e8a6
movzx eax, bp
cmp eax, 0xb
je 0x49ed7d
movzx eax, word [esp + 0x18a]
movzx ecx, byte [esp + 0x194]
movzx edx, byte [esp + 0x195]
cmp byte [esp + 0x198], 0
mov esi, dword [esp + 4]
mov dword [esp + 0x20], ebp
mov word [esp + 0x2c], ax
mov eax, dword [esp + 0x18c]
mov dword [esp], ecx
mov byte [esp + 0x160], dl
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x190]
je 0x49cc56
cmp byte [esi + 0x249], 0
jne 0x49cc56
mov byte [esi + 0x249], 1
mov edi, eax
xor eax, eax
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0
mov ecx, esi
lea edx, [esp + 0x94]
cmp byte [esi + 0x31], 2
sete al
push eax
call fcn.00452600
mov eax, edi
add esp, 4
jmp 0x49cc56
mov dword [esp], 0
jmp 0x49cc20
mov dword [esp], edx
movzx eax, byte [esp + 0x2a9]
mov esi, dword [esp + 4]
mov dword [esp + 0x20], ebp
mov byte [esp + 0x160], al
movzx eax, word [esp + 0x29e]
mov word [esp + 0x2c], ax
mov eax, dword [esp + 0x2a0]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x2a4]
mov ecx, dword [esp + 0x230]
mov edi, dword [esi + 0x254]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esi + 0x258]
mov esi, edi
mov dword [esp + 8], edi
lea edx, [ecx*4]
mov dword [esp + 0xc], ecx
lea ebp, [edx + edx*4]
mov edx, ebp
nop word cs:[eax + eax]
nop dword [eax]
test edx, edx
je 0x49ccc4
cmp dword [esi], 1
jne 0x49ccb7
mov edi, dword [esi + 4]
mov ebx, dword [esi + 0x10]
mov ecx, 0
add edi, 4
sub ebx, dword [esi + 0xc]
lea esi, [esi + 0x14]
cmovb ebx, ecx
add edx, 0xffffffec
cmp edi, ebx
je 0x49cc90
cmp byte [esp], 2
mov dl, 1
je 0x49cccb
jmp 0x49eed9
cmp byte [esp], 2
sete dl
test eax, eax
je 0x49ccd3
xor ebx, ebx
jmp 0x49cce9
mov esi, dword [esp + 4]
movzx ebx, byte [esi + 0x284]
cmp bl, 0x20
je 0x49f2dc
inc bl
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 4]
add dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x5c]
mov byte [esi + 0x284], bl
sub ecx, dword [esp + 0x14]
test dl, dl
lea edi, [ecx + eax]
je 0x49d516
mov dword [esp + 0x5c], ecx
cmp edi, ecx
mov ecx, dword [esp + 0x18]
jb 0x49f4eb
cmp edi, ecx
ja 0x49f4eb
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x28]
mov dword [ecx + 0x25c], edx
mov ecx, dword [esp + 0xc]
sub ecx, 1
jae 0x49ce52
test eax, eax
je 0x49cee3
mov ecx, eax
mov eax, dword [esp + 0x5c]
add ebp, 0x10
add eax, dword [esp + 0x14]
mov dword [esp + 0x5c], eax
mov eax, ecx
jmp 0x49cda8
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
mov dword [edx + ebp - 0x10], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + ebp - 0xc], edi
mov word [edx + ebp - 8], cx
movzx ecx, word [esp + 0x2c]
mov word [edx + ebp - 6], cx
mov dword [edx + ebp - 4], esi
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 4]
mov dword [edx + ebp], ebx
add ebp, 0x14
inc esi
test eax, eax
mov dword [esp + 0xc], esi
mov dword [ecx + 0x258], esi
je 0x49cee3
cmp eax, 3
ja 0x49cdcb
mov esi, dword [esp + 0x5c]
mov ebx, eax
mov dword [esp + 0x5c], 1
mov dword [esp + 0x3c], 0
xor eax, eax
sub esi, dword [esp + 0x14]
jmp 0x49ce18
lea ecx, [eax - 4]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x3c], 1
movzx edi, byte [eax + 1]
movzx edx, word [eax + 2]
mov esi, eax
shl edx, 0x10
shl edi, 8
or edi, edx
mov edx, 0
bswap edi
sub ecx, edi
lea ebx, [edi + 4]
cmovb ecx, edx
lea edx, [edi + eax + 4]
mov eax, 1
cmovbe ebx, dword [esp]
cmovbe edx, eax
sub esi, dword [esp + 0x14]
mov eax, ecx
mov dword [esp + 0x5c], edx
add ebx, esi
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0xc]
cmp edx, dword [ecx]
jne 0x49cd60
mov ecx, dword [esp + 0x11c]
mov dword [esp], eax
call fcn.0044cea0
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x254]
mov dword [esp + 8], eax
mov eax, dword [esp]
jmp 0x49cd60
mov edx, dword [esp + 8]
lea ecx, [ecx + ecx*4]
lea ecx, [edx + ecx*4]
cmp dword [ecx], 1
jne 0x49ce7d
mov edx, dword [ecx + 4]
mov esi, dword [ecx + 0x10]
add edx, 4
sub esi, dword [ecx + 0xc]
mov ecx, 0
cmovb esi, ecx
cmp edx, esi
je 0x49cd41
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0xc]
mov esi, dword [esp + 4]
cmp edx, dword [ecx]
jne 0x49cea6
mov ecx, dword [esp + 0x11c]
call fcn.0044cea0
mov eax, dword [esi + 0x254]
mov dword [esp + 8], eax
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
mov edx, dword [esp + 0x20]
movzx eax, word [esp + 0x2c]
lea ecx, [ebx + ebx*4]
inc ebx
mov dword [ebp + ecx*4], 0
mov word [ebp + ecx*4 + 8], dx
mov word [ebp + ecx*4 + 0xa], ax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], ebx
mov dword [ebp + ecx*4 + 0xc], eax
mov dword [ebp + ecx*4 + 0x10], edi
mov dword [esi + 0x258], ebx
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0xc]
xor ebx, ebx
mov edx, dword [ebp + 0x254]
test eax, eax
jne 0x49cf10
jmp 0x49d1f9
mov ebp, dword [esp + 4]
mov edx, dword [ebp + 0x254]
test ecx, ecx
mov eax, ecx
je 0x49d1ed
lea ecx, [eax - 2]
lea ebx, [eax - 1]
mov dword [esp + 0xc], eax
lea eax, [eax + eax*4]
mov ebp, 0xffffffff
mov dword [esp + 0x5c], edx
mov dword [esp], ecx
lea eax, [eax*4 - 0x14]
mov ecx, edx
nop word cs:[eax + eax]
nop dword [eax]
test eax, eax
je 0x49d1f1
test byte [ecx], 1
je 0x49cf73
mov edx, dword [ecx + 4]
mov esi, dword [ecx + 0x10]
mov edi, 0
add edx, 4
sub esi, dword [ecx + 0xc]
lea ecx, [ecx + 0x14]
cmovb esi, edi
dec ebx
inc ebp
add eax, 0xffffffec
cmp edx, esi
mov edx, dword [esp + 0x5c]
je 0x49cf40
jmp 0x49cf75
dec ebx
inc ebp
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0xc]
lea eax, [ebp + 1]
cmp ebx, eax
jbe 0x49f4eb
lea eax, [eax + eax*4]
mov edi, dword [edx + eax*4 + 0x10]
lea ecx, [edx + eax*4]
mov esi, dword [edx + eax*4 + 0xc]
lea eax, [edx + eax*4 + 0x14]
mov dword [esp + 8], edi
mov edi, edx
mov edx, ebx
sub edx, ebp
lea edx, [edx + edx*4]
lea edx, [edx*4 - 0x28]
push edx
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, ebp
lea ecx, [ebp + ebp*4]
mov dword [esp + 0x2c], ebp
not eax
movd xmm0, dword [edi + ecx*4 + 8]
lea edx, [edi + ecx*4]
add eax, ebx
mov ebx, dword [edi + ecx*4 + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 - 0x14]
movdqu xmmword [esp + 0x160], xmm0
mov dword [esp + 0x3c], ebx
mov ebx, dword [edi + ecx*4 + 0x10]
lea ecx, [edi + ecx*4 + 0x14]
mov edi, dword [esp + 8]
push eax
push ecx
push edx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [eax + 0x258], ecx
mov eax, edi
mov ecx, 0
sub eax, esi
mov ebp, eax
cmovb ebp, ecx
jb 0x49f4eb
mov ecx, dword [esp + 0x18]
cmp edi, ecx
ja 0x49f4eb
mov edi, dword [esp + 0x3c]
sub ecx, eax
cmp ecx, ebx
jb 0x49f4eb
mov ecx, dword [esp + 0x14]
add esi, ecx
add ecx, ebx
push eax
push esi
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
add ebp, ebx
mov eax, dword [esp + 0x18]
mov ebx, ebp
cmp ebp, edi
mov ebp, dword [esp + 0x2c]
jb 0x49f4eb
cmp ebx, eax
ja 0x49f4eb
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp]
sub ebx, edi
je 0x49d1df
mov eax, dword [esp + 0x20]
add edi, dword [esp + 0x14]
shl eax, 2
mov dword [esp + 0x3c], edi
lea eax, [eax + eax*4]
mov dword [esp + 0x148], eax
lea eax, [ebp*4]
lea edi, [eax + eax*4]
jmp 0x49d0e1
mov eax, dword [esp + 8]
movdqu xmm0, xmmword [esp + 0x160]
inc ecx
inc ebp
mov dword [edx + edi], eax
mov eax, dword [esp + 0x20]
mov dword [edx + edi + 4], eax
movd dword [edx + edi + 8], xmm0
mov dword [edx + edi + 0xc], esi
mov dword [edx + edi + 0x10], ebx
mov ebx, dword [esp + 0xc]
mov esi, dword [esp + 4]
add edi, 0x14
test ebx, ebx
mov dword [esi + 0x258], ecx
je 0x49cefc
cmp ebx, 3
mov dword [esp], ecx
ja 0x49d110
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x3c], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
sub esi, dword [esp + 0x14]
jmp 0x49d180
mov dword [esp + 0x2c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x5c], edx
lea eax, [ebx - 4]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 1
movzx edx, byte [ebp + 1]
movzx ecx, word [ebp + 2]
mov esi, ebp
shl ecx, 0x10
shl edx, 8
or edx, ecx
mov ecx, 0
bswap edx
sub eax, edx
lea ebx, [edx + 4]
mov dword [esp + 0x20], edx
cmovbe ebx, dword [esp + 0xc]
cmovb eax, ecx
lea ecx, [edx + ebp + 4]
mov edx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0xc], ebx
mov ebx, 1
cmovbe ecx, ebx
mov ebx, dword [esp + 0xc]
sub esi, dword [esp + 0x14]
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp]
add ebx, esi
cmp ecx, ebp
jb 0x49f4eb
mov eax, dword [esp + 0x11c]
cmp ecx, dword [eax]
jne 0x49d1ae
mov ecx, dword [esp + 0x11c]
call fcn.0044cea0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov edx, dword [eax + 0x254]
cmp ecx, ebp
jbe 0x49d0a0
lea ecx, [edx + edi + 0x14]
lea eax, [edx + edi]
push dword [esp + 0x148]
push eax
push ecx
mov dword [esp + 0x68], edx
call sub.VCRUNTIME140.dll_memmove
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x68]
add esp, 0xc
jmp 0x49d0a0
mov ebp, dword [esp + 4]
test ecx, ecx
mov eax, ecx
jne 0x49cf10
xor ebx, ebx
jmp 0x49d1f9
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 4]
shl ebx, 2
lea eax, [ebx + ebx*4]
jmp 0x49d222
add edx, 0x14
add eax, 0xffffffec
cmp ecx, 0xffff
ja 0x49edaf
test eax, eax
je 0x49d236
test edx, edx
je 0x49d236
xor ecx, ecx
cmp dword [edx], 1
jne 0x49d210
mov ecx, dword [edx + 4]
jmp 0x49d210
mov edi, dword [ebp + 0x258]
mov eax, dword [ebp + 0x254]
lea ecx, [edi*4]
mov edx, eax
lea esi, [ecx + ecx*4]
nop
mov ecx, esi
test esi, esi
je 0x49d279
cmp dword [edx], 1
jne 0x49d279
mov ebx, dword [edx + 4]
mov ebp, dword [edx + 0x10]
mov esi, 0
add ebx, 4
sub ebp, dword [edx + 0xc]
lea edx, [edx + 0x14]
cmovb ebp, esi
lea esi, [ecx - 0x14]
cmp ebx, ebp
je 0x49d250
mov ebp, dword [esp + 4]
test ecx, ecx
sete byte [ebp + 0x245]
test edi, edi
je 0x49d2ab
cmp dword [eax], 1
jne 0x49d2ab
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0x10]
add ecx, 4
sub edx, dword [eax + 0xc]
mov eax, 0
cmovb edx, eax
cmp ecx, edx
je 0x49d66e
mov esi, dword [esp + 0x18]
movzx ebx, word [esp + 0x13c]
cmp dword [esp + 0x28], esi
jbe 0x49c599
jmp 0x49f4eb
cmp byte [ebp + 0x247], 0
jne 0x49d3f3
cmp word [ebp + 0x238], 5
jne 0x49d3f3
cmp edx, 1
jne 0x49ee66
cmp byte [ecx], 1
jne 0x49ee66
movzx eax, byte [ebp + 0x243]
test al, al
je 0x49eeaf
dec al
mov byte [ebp + 0x243], al
jmp 0x49e0df
mov bl, 0xc
test edx, edx
mov dword [esp + 0x28], edx
mov dword [esp + 0x5c], ecx
je 0x49d434
mov ch, byte [ecx]
mov al, 0x14
mov cl, ch
add cl, 2
cmp cl, 0x1b
ja 0x49d339
movzx eax, cl
movzx eax, byte [eax + 0xfd13d8]
cmp edx, 4
mov byte [esp + 0x92], al
mov byte [esp + 0x93], ch
jae 0x49d451
mov ecx, dword [esp + 0x278]
mov ax, 3
mov edi, 0xf92963
xor edx, edx
mov dword [esp + 0x14], eax
mov ebp, ecx
jmp 0x49dd6f
mov al, 0xc
test edx, edx
mov dword [esp], eax
movzx eax, byte [esp + 0x47]
je 0x49ef01
movzx esi, byte [ecx]
mov ebx, ecx
mov ah, 2
mov edi, edx
cmp esi, 2
mov dword [esp + 0x14], esi
sete cl
sub ah, cl
cmp esi, 1
mov esi, 0
movzx edx, ah
cmove edx, esi
cmp edi, 1
je 0x49ef1b
movzx ecx, byte [ebx + 1]
mov bl, 0x23
mov ebp, edi
mov dword [esp + 0x10], ebx
cmp ecx, 0x79
mov dword [esp + 0x14c], ecx
ja 0x49d65e
mov ecx, dword [ecx*4 + 0x49f540]
mov ah, byte [esp + 0x1f]
mov ebx, eax
add ecx, dword [esp + 0x170]
jmp ecx
test edx, edx
je 0x49ef74
cmp byte [ecx], 1
movzx ebx, byte [esp + 0x47]
jne 0x49efb9
mov ebp, 0x80000004
cmp edx, 1
jne 0x49f000
mov bh, byte [esp + 0x1f]
mov eax, dword [esp + 0x114]
mov word [esp + 0xc], si
mov cl, ah
mov byte [esp + 0x1f], bh
mov edx, eax
jmp 0x49de05
mov ecx, dword [esp + 0x27c]
mov ax, 0xd
mov edi, 0xf943cc
xor edx, edx
mov dword [esp + 0x14], eax
mov ebp, ecx
jmp 0x49dd6f
mov byte [esp + 0x3c], ch
mov ecx, dword [esp + 0x5c]
mov edi, edx
movzx ebx, byte [ecx + 1]
movzx ecx, word [ecx + 2]
shl ecx, 0x10
shl ebx, 8
or ebx, ecx
lea ecx, [edx - 4]
mov ebp, ebx
bswap ebp
cmp ecx, ebp
jae 0x49d4a0
mov eax, ebp
mov bl, 0xb
xor edx, edx
mov edi, ebp
mov dword [esp + 0x14], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
shr eax, 0x10
mov ebp, eax
jmp 0x49dd6f
lea ecx, [ebp + 4]
cmp ecx, edi
ja 0x49f4eb
mov ecx, dword [esp + 0x5c]
mov edi, ebp
cmp al, 0x13
lea ecx, [ecx + 4]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], ebp
mov dword [esp], ecx
mov dword [esp + 0x78], 0
ja 0x49d501
movzx ecx, al
mov dl, 0x10
mov dword [esp + 0x18], 0xfbbdc2
mov si, 0x11
mov ebp, dword [ecx*4 + 0x49f4f0]
mov ecx, dword [esp + 0x274]
mov dword [esp + 8], edx
xor edx, edx
add ebp, dword [esp + 0x170]
jmp ebp
mov ebp, edi
mov dword [esp + 0x78], edi
mov edi, 0x80000015
mov ebx, 0x80000000
jmp 0x49e511
mov esi, eax
mov eax, dword [esp + 0x28]
cmp edi, ecx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x18]
jb 0x49f4eb
cmp edi, eax
ja 0x49f4eb
mov eax, dword [esp]
mov edx, ecx
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 4]
mov byte [esp + 0x130], al
movzx eax, byte [esp + 0x160]
add ecx, edx
movzx edx, word [esp + 0x2c]
mov byte [esp + 0x131], al
mov eax, dword [esp + 0x20]
mov word [esp + 0x124], ax
mov word [esp + 0x126], dx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], esi
mov dword [esp + 0x120], 0
mov dword [esp + 0x4c], edx
jmp 0x49c4ee
movzx ecx, byte [esp + 0x10]
mov esi, dword [esp + 0x14]
mov byte [esp + 0x1f], ah
mov eax, dword [esp + 0x14c]
movzx edi, dl
mov ebp, 0x80000001
shl ecx, 0x10
shl esi, 8
shl eax, 0x18
or edi, ecx
or edi, esi
or eax, edi
jmp 0x49de09
mov ah, byte [esp + 0x1f]
mov ebx, eax
cmp ebp, 2
jbe 0x49d62e
jmp 0x49ef39
mov eax, dword [esp + 0x28]
mov dword [ebp], 0
lea ecx, [esp + 0x124]
mov edx, ebp
mov dword [esp + 0x48], eax
lea eax, [esp + 0x48]
push eax
push dword [esp + 0x1c]
push dword [esp + 0x1c]
call fcn.004a37b0
add esp, 0xc
movzx eax, word [esp + 0x124]
jmp 0x49c4e3
mov esi, edx
mov ecx, 0x80000016
mov eax, dword [esp + 0x34]
movzx edx, byte [esp + 0x30]
shl ebp, 0x10
movzx ebx, bl
shl esi, 0x10
shl eax, 0x10
shl edx, 8
or edx, eax
movzx eax, di
or eax, ebp
movzx ebp, word [esp + 0x14]
or ebx, edx
or ebp, esi
cmp ecx, 0x80000016
je 0x49ef10
mov dword [esp + 0x84], ecx
mov ecx, 0x17
lea edi, [esp + 0x29c]
lea esi, [esp + 0x188]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x25c], ebx
mov dword [esp + 0x260], eax
mov dword [esp + 0x258], ebp
mov ebp, 0x80000000
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x28]
mov bh, byte [esp + 0x8e]
mov bl, byte [esp + 0x8f]
mov cl, dh
mov dword [esp + 0x6c], eax
mov eax, edx
mov byte [esp + 0x90], bh
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x260]
lea edi, [esp + 0x334]
lea esi, [esp + 0x29c]
mov dword [esp + 0x32c], ecx
mov ecx, dword [esp + 0x258]
mov dword [esp + 0x330], ecx
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov byte [esp + 0x390], bl
mov byte [esp + 0x47], bl
mov dword [esp + 0x114], eax
movzx ecx, byte [esp + 0x90]
movzx esi, word [esp + 0xc]
mov byte [esp + 0x391], cl
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x318], ebp
mov byte [esp + 0x31c], dl
mov byte [esp + 0x31d], cl
mov ecx, eax
shr ecx, 0x10
cmp ebp, 0x80000001
mov dword [esp + 0x14], ecx
mov word [esp + 0x31e], cx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x320], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x324], ecx
mov ecx, dword [esp + 0x25c]
mov dword [esp + 0x328], ecx
mov ecx, dword [esp + 0x20]
mov word [esp + 0x394], cx
mov word [esp + 0x396], si
jne 0x49df09
mov ebp, dword [esp + 4]
shr eax, 0x18
cmp dl, 2
je 0x49ee08
cmp byte [ebp + 0x247], 1
mov ecx, dword [esp + 0x14]
jne 0x49e078
test cl, cl
jne 0x49e078
mov edi, dword [esp + 0x138]
mov byte [ebp + 0x24a], 1
jmp 0x49e0d3
mov ecx, 0x20
lea edi, [esp + 0x188]
lea esi, [esp + 0x318]
rep movsd dword es:[edi], dword [esi]
mov ebp, dword [esp + 4]
cmp byte [ebp + 0x247], 1
jne 0x49df93
cmp word [ebp + 0x238], 5
je 0x49df93
mov eax, dword [esp + 0x188]
mov ecx, 0x7fffffff
add eax, ecx
cmp eax, 5
setb cl
cmp eax, 1
setne al
test cl, al
jne 0x49df93
movzx eax, byte [esp + 0x200]
cmp byte [ebp + 0x244], al
jne 0x49df93
movzx eax, byte [ebp + 0x241]
mov edi, dword [esp + 0x138]
test al, al
je 0x49e157
dec al
mov ecx, ebp
mov byte [ebp + 0x241], al
call fcn.00452e10
mov al, 0x16
mov dword [esp + 0xc], eax
jmp 0x49e1b4
mov eax, dword [esp + 0x280]
mov dword [esp + 0x228], ebp
lea ebx, [esp + 0x94]
mov ecx, 0x20
lea esi, [esp + 0x318]
mov edi, ebx
mov dword [esp + 0x22c], eax
mov eax, dword [esp + 0x284]
mov dword [esp + 0x230], eax
rep movsd dword es:[edi], dword [esi]
push ebx
lea eax, [esp + 0x22c]
push eax
push dword [esp + 0x2c]
lea eax, [esp + 0x2a8]
push eax
mov eax, dword [esp + 0x50]
call dword [eax + 0xc]
add esp, 0x10
movzx ecx, byte [esp + 0x29c]
cmp ecx, 2
jae 0x49e0e8
movzx eax, byte [esp + 0x29d]
mov edi, dword [esp + 0x2a8]
mov esi, ecx
mov ecx, ebp
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x10001
mov edx, ebx
mov byte [esp + 0x1e], al
movzx eax, word [esp + 0x29e]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x2a0]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2a4]
mov dword [esp + 0x40], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
sete al
push eax
call fcn.00452600
mov ecx, esi
add esp, 4
mov byte [ebp + 0x249], 1
jmp 0x49e1cb
mov edi, dword [esp + 0x138]
test dl, dl
mov byte [esp + 0x189], cl
mov byte [esp + 0x18a], al
mov byte [esp + 0x188], 0xa
jne 0x49ef8b
movzx eax, byte [ebp + 0x240]
test al, al
je 0x49efc0
dec al
mov byte [ebp + 0x240], al
cmp word [ebp + 0x238], 5
jne 0x49e0c7
cmp cl, 0x17
jne 0x49f0a7
lea ecx, [esp + 0x188]
call fcn.00440f40
lea ecx, [esp + 0x318]
call fcn.004a38c0
mov eax, dword [esp + 0x58]
jmp 0x49e1d8
cmp ecx, 0x16
jne 0x49e119
mov eax, dword [esp + 0x2a4]
push dword [esp + 0x2a0]
mov esi, ecx
call dword [eax + 0x20]
mov ecx, esi
add esp, 4
mov edi, dword [esp + 0x138]
mov dword [esp + 0x24], eax
mov dword [esp + 0x40], edx
jmp 0x49e1c4
movzx eax, byte [esp + 0x29d]
mov esi, dword [esp + 0x2a0]
mov edx, dword [esp + 0x2a4]
mov edi, dword [esp + 0x2a8]
lea ebx, [esp + 0x94]
mov byte [esp + 0x1e], al
movzx eax, word [esp + 0x29e]
mov dword [esp + 0x24], esi
mov dword [esp + 0x40], edx
mov dword [esp + 0x58], eax
jmp 0x49e1cb
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
test eax, eax
je 0x49e16a
push dword [esp + 0x24]
call eax
add esp, 4
mov eax, dword [esp + 0x40]
cmp dword [eax + 4], 0
je 0x49e186
cmp dword [eax + 8], 9
jae 0x49e193
mov al, 9
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
jmp 0x49e1a0
mov al, 9
mov byte [esp + 0x1e], 0x40
mov dword [esp + 0xc], eax
jmp 0x49e1b4
mov al, 9
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
mov eax, dword [eax - 4]
mov byte [esp + 0x1e], 0x40
push eax
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [esp + 0x188]
call fcn.004a38c0
mov ecx, dword [esp + 0xc]
lea ebx, [esp + 0x94]
mov eax, dword [esp + 0x58]
cmp cl, 0x16
jne 0x49ee59
cmp byte [ebp + 0x24a], 0
jne 0x49edeb
mov dword [esp + 0x138], edi
mov ecx, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x58], eax
mov eax, 0
sub ecx, edi
cmovb ecx, eax
mov eax, dword [ebp + 0x2ac]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x4c], 0
mov esi, eax
sub esi, edi
jbe 0x49e25f
cmp eax, dword [ebp + 0x2a8]
ja 0x49f4eb
mov eax, dword [ebp + 0x2a4]
lea ecx, [eax + edi]
push esi
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [ebp + 0x2ac], esi
mov ecx, 0
mov eax, dword [ebp + 0x2b0]
sub eax, edi
cmovb eax, ecx
mov dword [ebp + 0x2b0], eax
jmp 0x49c3e1
mov esi, eax
jne 0x49c3e1
xor eax, eax
mov dword [ebp + 0x2ac], 0
xor esi, esi
mov dword [ebp + 0x2b0], eax
jmp 0x49c3e1
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x84], edi
movsd xmm1, qword [esp + 0x210]
movsd xmm2, qword [esp + 0x250]
cmp ecx, dword [esp + 0x74]
lea ecx, [esp + 0x92]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x94], edi
mov edi, dword [esp]
movzx ecx, word [esp + 0x38]
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], ebp
mov word [esp + 0xa4], si
mov word [esp + 0xa6], dx
lea edx, [esp + 0x9a]
movlps qword [esp + 0xa8], xmm0
movq xmm0, qword [esp + 0x208]
mov word [edx + 0x16], cx
movzx ecx, byte [esp + 0x3a]
mov byte [edx + 0x18], cl
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xb3], ecx
mov ecx, dword [esp + 0x160]
mov dword [esp + 0xb7], ecx
movzx ecx, byte [esp + 0x2c]
mov byte [esp + 0xbb], cl
movsd qword [edx + 0x2a], xmm1
mov ecx, dword [esp + 0x13c]
movsd xmm1, qword [esp + 0x248]
movq qword [edx + 0x22], xmm0
mov dword [esp + 0xcc], ecx
movsd qword [edx + 0x5e], xmm2
movsd qword [edx + 0x56], xmm1
movsd xmm2, qword [esp + 0x240]
movsd xmm1, qword [esp + 0x238]
movsd qword [edx + 0x4e], xmm2
movsd qword [edx + 0x46], xmm1
movsd xmm2, qword [esp + 0x228]
movq xmm1, qword [esp + 0x230]
movq qword [edx + 0x3e], xmm1
movsd qword [edx + 0x36], xmm2
jae 0x49e651
lea ecx, [esp + 0x94]
call fcn.00451a10
mov ax, 0x17
mov edi, 0xf92a1f
mov bl, 0xf
xor edx, edx
mov ecx, 0xf92a1f
mov dword [esp + 0x84], 0x80000016
mov dword [esp + 0x14], eax
jmp 0x49e69b
mov ecx, ebx
mov dword [esp], edi
lea edi, [esp + 0x188]
lea esi, [esp + 0xa4]
mov edx, ebp
shr ecx, 0x10
shr edx, 0x10
mov dword [esp + 0x34], ecx
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
mov byte [esp + 0x8f], al
mov al, bh
mov dword [esp + 0x14], ecx
mov ecx, dword [esp]
mov dword [esp + 0x30], eax
movzx eax, byte [esp + 0x3c]
mov edi, ecx
mov byte [esp + 0x8e], al
shr ecx, 0x10
mov esi, edx
mov ebp, ecx
mov ecx, dword [esp + 0x84]
jmp 0x49dd76
mov edx, dword [esp + 0x288]
mov byte [esp + 0x28c], cl
lea esi, [esp + 0x28d]
movzx ecx, byte [edx + 2]
mov byte [esi + 2], cl
movzx ecx, word [edx]
lea edx, [esp + 0x28c]
mov word [esi], cx
lea ecx, [esp + 0x94]
mov dword [esp + 0x290], edi
mov dword [esp + 0x294], ebx
mov dword [esp + 0x298], eax
call fcn.004a0fb0
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x49e93e
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x264]
mov eax, dword [edi]
test eax, eax
je 0x49e87f
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x49e947
cmp dword [edi + 8], 9
jb 0x49e892
mov esi, dword [esi - 4]
push esi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49e947
mov eax, dword [esp + 0x28]
mov word [esp + 0x124], 0x2a09
mov dword [esp + 0x48], eax
mov ebp, dword [esp + 4]
mov dword [esp + 0x120], 1
lea edx, [esp + 0x124]
lea ecx, [esp + 0x94]
movsd xmm0, qword [edx]
movsd xmm1, qword [edx + 8]
movsd qword [esp + 0x300], xmm1
movsd qword [esp + 0x2f8], xmm0
call fcn.004a0fb0
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x49e99d
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x264]
mov eax, dword [edi]
test eax, eax
je 0x49e91a
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x49e9a6
cmp dword [edi + 8], 9
jb 0x49e92d
mov esi, dword [esi - 4]
push esi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49e9a6
push eax
call fcn.004a1730
add esp, 4
movsd xmm1, qword [esp + 0x9c]
mov eax, dword [esp + 0x7c]
movq xmm0, qword [esp + 0x94]
movsd xmm2, qword [esp + 0x28c]
movsd qword [eax + 8], xmm1
movq xmm1, qword [esp + 0x294]
movq qword [eax], xmm0
movsd qword [esp + 0x178], xmm2
movq qword [esp + 0x180], xmm1
cmp byte [esp + 0x178], 0x16
je 0x49ea92
jmp 0x49f3c9
push eax
call fcn.004a1730
add esp, 4
movsd xmm0, qword [esp + 0x94]
mov eax, dword [esp + 0x7c]
movsd xmm1, qword [esp + 0x9c]
mov esi, dword [esp + 0x4c]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [ebp + 0x2ac]
mov edi, eax
sub edi, esi
jbe 0x49ea0d
cmp eax, dword [ebp + 0x2a8]
ja 0x49f4eb
mov eax, dword [ebp + 0x2a4]
lea ecx, [eax + esi]
push edi
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [ebp + 0x2ac], edi
mov ecx, 0
mov eax, dword [ebp + 0x2b0]
sub eax, esi
cmovb eax, ecx
jmp 0x49ea1b
jne 0x49ea21
mov dword [ebp + 0x2ac], 0
xor eax, eax
mov dword [ebp + 0x2b0], eax
movq xmm0, qword [esp + 0x2f8]
movq xmm1, qword [esp + 0x300]
mov eax, dword [esp + 0x40]
movq qword [esp + 0x180], xmm1
movq qword [esp + 0x178], xmm0
mov eax, dword [eax]
test eax, eax
je 0x49ea58
push dword [esp + 0x24]
call eax
add esp, 4
mov eax, dword [esp + 0x40]
cmp dword [eax + 4], 0
je 0x49ea84
cmp dword [eax + 8], 9
jae 0x49ea6e
mov eax, dword [esp + 0x24]
jmp 0x49ea75
mov eax, dword [esp + 0x24]
mov eax, dword [eax - 4]
push eax
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [esp + 0x178], 0x16
jne 0x49f3c9
test byte [esp + 0x91], 1
jne 0x49f38f
movzx ecx, byte [ebp + 0x246]
mov bh, byte [ebp + 0x247]
mov eax, dword [ebp + 0x64]
mov edi, dword [esp + 0x174]
mov bl, cl
and cl, bh
test eax, eax
setne dl
test cl, dl
lea ecx, [esp + 0x94]
jne 0x49bf64
test bl, bl
je 0x49eadc
test bh, 1
jne 0x49f38f
test byte [esp + 0x140], 1
je 0x49bf64
jmp 0x49f4d9
cmp eax, 1
jne 0x49eb71
lea ecx, [esp + 0x9a]
mov eax, dword [esp + 0x28]
mov ebp, dword [esp + 4]
movsd xmm1, qword [ecx + 6]
movsd xmm0, qword [ecx]
lea ecx, [esp + 0x124]
mov dword [esp + 0x48], eax
movzx eax, word [esp + 0x98]
mov edx, ebp
movsd qword [esp + 0x18e], xmm1
movsd qword [esp + 0x188], xmm0
movq xmm0, qword [esp + 0x188]
movq xmm1, qword [esp + 0x18e]
mov word [esp + 0x318], ax
lea eax, [esp + 0x31a]
movq qword [eax + 6], xmm1
movq qword [eax], xmm0
push dword [esp + 0x40]
push dword [esp + 0x28]
lea eax, [esp + 0x320]
jmp 0x49eda1
mov eax, dword [esp + 0x28]
mov ebp, dword [esp + 4]
mov dword [esp + 0x48], eax
mov esi, dword [esp + 0x4c]
mov eax, dword [ebp + 0x2ac]
mov edi, dword [esp + 0x48]
mov ebx, eax
sub ebx, esi
mov dword [ebp + 0x2b0], edi
jbe 0x49ebcd
cmp eax, dword [ebp + 0x2a8]
ja 0x49f4eb
mov eax, dword [ebp + 0x2a4]
lea ecx, [eax + esi]
push ebx
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
sub edi, esi
mov eax, 0
mov dword [ebp + 0x2ac], ebx
cmovb edi, eax
mov eax, dword [esp + 0x7c]
jmp 0x49ebdf
mov eax, dword [esp + 0x7c]
jne 0x49ebe5
mov dword [ebp + 0x2ac], 0
xor edi, edi
mov dword [ebp + 0x2b0], edi
cmp byte [eax], 0x16
jne 0x49ec22
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x264]
mov eax, dword [edi]
test eax, eax
je 0x49ec02
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x49ec2b
cmp dword [edi + 8], 9
jb 0x49ec11
mov esi, dword [esi - 4]
push esi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49ec2b
push eax
call fcn.004a1730
add esp, 4
mov eax, dword [esp + 0x24]
mov byte [ebp + 0x260], 0x16
mov edx, 0
mov esi, 0
mov edi, 0
mov dword [ebp + 0x264], eax
mov eax, dword [esp + 0x40]
mov dword [ebp + 0x268], eax
xor eax, eax
mov ecx, dword [ebp + 0x64]
test ecx, ecx
je 0x49ec84
mov esi, dword [ebp + 0x58]
mov edx, dword [ebp + 0x60]
mov eax, 0
cmp edx, esi
mov edi, esi
mov ebx, esi
cmovb edi, eax
sub edx, edi
mov edi, ecx
sub ebx, edx
sub edi, ebx
ja 0x49ec82
add ecx, edx
xor edi, edi
mov esi, ecx
xor eax, eax
mov ecx, dword [ebp + 0x5c]
lea edx, [edx + edx*2]
lea esi, [esi + esi*2]
lea edi, [edi + edi*2]
lea edx, [ecx + edx*4]
lea esi, [ecx + esi*4]
lea edi, [ecx + edi*4]
jmp 0x49ecb6
mov ebp, edi
mov edi, esi
mov ebx, ecx
mov ecx, edx
mov esi, ebp
mov ebp, dword [esp + 4]
mov edx, ebx
add eax, dword [edx + 8]
add edx, 0xc
cmp edx, esi
jne 0x49ecb0
test ecx, ecx
je 0x49ecc2
cmp ecx, edi
jne 0x49eca0
mov edx, dword [ebp + 0x4c]
xor ecx, ecx
mov esi, 0
mov edi, 0
mov ebx, 0
mov dword [esp + 0x14], eax
test edx, edx
je 0x49ed06
mov edi, dword [ebp + 0x40]
mov esi, dword [ebp + 0x48]
mov eax, 0
cmp esi, edi
mov ebx, edi
mov ebp, edi
cmovb ebx, eax
sub esi, ebx
mov ebx, edx
sub ebp, esi
sub ebx, ebp
ja 0x49ed02
add edx, esi
xor ebx, ebx
mov edi, edx
mov ebp, dword [esp + 4]
mov edx, dword [ebp + 0x44]
lea esi, [esi + esi*2]
lea ebx, [ebx + ebx*2]
lea edi, [edi + edi*2]
lea esi, [edx + esi*4]
lea eax, [edx + edi*4]
lea ebx, [edx + ebx*4]
jmp 0x49ed36
mov ebp, edx
mov edx, esi
mov edi, ebx
mov ebx, eax
mov esi, ebp
mov ebp, dword [esp + 4]
mov eax, edi
add ecx, dword [esi + 8]
add esi, 0xc
cmp esi, eax
jne 0x49ed30
test edx, edx
je 0x49ed42
cmp edx, ebx
jne 0x49ed20
mov edx, dword [esp + 0x14]
movzx eax, byte [ebp + 0x24a]
mov dword [esp + 0x17c], edx
mov dword [esp + 0x180], ecx
mov byte [esp + 0x184], al
mov byte [esp + 0x178], 0x16
test byte [esp + 0x91], 1
je 0x49eaa0
jmp 0x49f38f
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x124]
mov edx, ebp
mov dword [esp + 0x48], eax
push dword [esp + 0x40]
push dword [esp + 0x28]
lea eax, [esp + 0x194]
push eax
call fcn.004a36e0
add esp, 0xc
jmp 0x49e8bc
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x9b]
movq xmm0, qword [esp + 0x94]
lea ecx, [esp + 0x124]
mov dword [ecx + 0xc], edx
movq qword [ecx + 5], xmm0
mov byte [esp + 0x124], 3
mov dword [esp + 0x48], eax
mov byte [esp + 0x128], 1
jmp 0x49e8bc
mov eax, dword [ebp + 0x2ac]
cmp eax, dword [ebp + 0x2a8]
ja 0x49f4eb
mov esi, dword [esp + 0x4c]
add esi, eax
jmp 0x49eb87
mov dword [esp + 0x5c], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0xd0001
mov ecx, ebp
lea edx, [esp + 0x94]
sete al
push eax
call fcn.00452600
add esp, 4
mov al, 0xa
mov byte [ebp + 0x249], 1
mov dword [esp + 0xc], eax
jmp 0x49efe1
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x24]
jmp 0x49f1ee
xor eax, eax
cmp byte [ebp + 0x31], 2
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x10001
mov ecx, ebp
lea edx, [esp + 0x94]
sete al
push eax
call fcn.00452600
lea ebx, [esp + 0x98]
add esp, 4
mov byte [ebp + 0x249], 1
mov al, 9
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x80]
mov byte [esp + 0x1e], 0x15
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x5c], eax
jmp 0x49f177
mov eax, dword [esp + 0x28]
mov word [esp + 0x124], 0x1d09
jmp 0x49e8b4
mov ebp, dword [esp + 0x84]
mov ebx, dword [esp + 0x114]
mov cl, 3
jmp 0x49f021
mov ebp, 0xa
mov dword [esp + 0x6c], 0xf942e7
jmp 0x49ef4f
mov dword [esp + 0x6c], eax
mov ecx, ebx
jmp 0x49f021
mov edx, dword [esp + 0x14c]
mov eax, dword [esp + 0x10]
mov ebp, 0x10
mov dword [esp + 0x6c], 0xf943bc
mov ecx, edx
mov edx, eax
jmp 0x49ef4f
mov ecx, dword [esp + 0x14]
mov al, 0xf
mov ebp, 0x13
mov dword [esp + 0x6c], 0xf92934
mov dword [esp], eax
movzx esi, byte [esp + 0x10]
movzx eax, cl
mov ecx, dword [esp]
movzx ebx, dl
shl eax, 8
shl esi, 0x10
or eax, esi
or ebx, eax
movzx eax, cl
shl ebx, 8
or ebx, eax
jmp 0x49f021
mov ecx, 0xc
mov dword [esp + 0x6c], 0xf9295e
mov ebp, 2
jmp 0x49f012
movzx ecx, word [esp + 0x18a]
mov edi, dword [esp + 0x18c]
mov esi, dword [esp + 0x190]
mov ebp, dword [esp + 0x194]
mov al, 0xa
mov dword [esp + 0xc], eax
mov al, ch
mov dword [esp + 0x5c], ecx
jmp 0x49f126
mov ecx, 2
jmp 0x49f012
lea ecx, [esp + 0x188]
call fcn.00440f40
mov al, 9
mov dword [esp + 0xc], eax
mov al, 0x41
mov dword [esp + 0x14], eax
movzx eax, byte [esp + 0x1f]
mov dword [esp + 0x5c], eax
movzx eax, byte [esp + 0x57]
mov edi, dword [esp + 0x134]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x15c]
jmp 0x49f126
mov ecx, 0xf
mov ebp, 0x17
mov dword [esp + 0x6c], 0xf92947
mov ebx, dword [esp + 0x114]
and ebx, 0xffffff00
or ebx, ecx
mov edi, dword [esp + 4]
mov esi, ebx
movzx eax, cl
lea edx, [esp + 0x94]
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x114], ebx
mov dword [esp + 0x98], 0x100001
and esi, 0xffffff00
or esi, eax
xor eax, eax
cmp byte [edi + 0x31], 2
mov ecx, edi
sete al
push eax
call fcn.00452600
add esp, 4
mov al, 3
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x80]
mov byte [edi + 0x249], 1
mov dword [esp + 0x84], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], eax
jmp 0x49f162
movzx eax, word [esp + 0x18a]
mov edi, dword [esp + 0x18c]
mov esi, dword [esp + 0x194]
mov word [esp + 0x110], 4
mov dword [esp + 0x94], 0x80000001
mov dword [esp + 0x98], 0x100001
mov ecx, ebp
lea edx, [esp + 0x94]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x190]
mov dword [esp + 0x80], eax
xor eax, eax
cmp byte [ebp + 0x31], 2
sete al
push eax
call fcn.00452600
add esp, 4
mov al, 0xa
mov byte [ebp + 0x249], 1
mov ebp, esi
mov esi, dword [esp + 0x80]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5c]
mov al, ah
mov ebx, dword [esp + 0x5c]
mov byte [esp + 0x57], al
movzx eax, al
shl eax, 8
movzx ecx, bl
or ecx, eax
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x318]
call fcn.004a38c0
mov byte [esp + 0x1f], bl
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x5c], esi
mov edx, esi
mov esi, edi
mov ecx, edi
mov dword [esp + 0x15c], ebp
mov edi, ebp
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov byte [esp + 0x1e], bl
lea ebx, [esp + 0x94]
mov eax, dword [eax]
test eax, eax
je 0x49f1a1
push dword [esp + 0x24]
mov dword [esp + 0x18], esi
mov esi, edi
mov ebx, ecx
mov edi, edx
call eax
mov edx, edi
mov edi, esi
mov esi, dword [esp + 0x18]
mov ecx, ebx
lea ebx, [esp + 0x98]
add esp, 4
mov eax, dword [esp + 0x40]
mov dword [esp + 0x134], ecx
mov dword [esp + 0x80], edx
cmp dword [eax + 4], 0
je 0x49f1e2
cmp dword [eax + 8], 9
jae 0x49f1c5
mov eax, dword [esp + 0x24]
jmp 0x49f1cc
mov eax, dword [esp + 0x24]
mov eax, dword [eax - 4]
push eax
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ebx, [esp + 0x94]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x5c]
mov byte [esp + 0x218], cl
movzx ecx, byte [esp + 0x1e]
mov byte [esp + 0x219], cl
mov word [esp + 0x21a], ax
mov dword [esp + 0x21c], esi
mov dword [esp + 0x220], edx
mov ecx, ebx
lea edx, [esp + 0x218]
mov dword [esp + 0x224], edi
call fcn.004a0fb0
mov eax, dword [esp + 0x7c]
cmp byte [eax], 0x16
jne 0x49f26d
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x264]
mov eax, dword [edi]
test eax, eax
je 0x49f24d
push esi
call eax
add esp, 4
cmp dword [edi + 4], 0
je 0x49f276
cmp dword [edi + 8], 9
jb 0x49f25c
mov esi, dword [esi - 4]
push esi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49f276
push eax
call fcn.004a1730
add esp, 4
movsd xmm0, qword [esp + 0x94]
mov eax, dword [esp + 0x7c]
movsd xmm1, qword [esp + 0x9c]
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x150]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
call fcn.00440c90
movq xmm0, qword [esp + 0x218]
movq xmm1, qword [esp + 0x220]
movq qword [esp + 0x180], xmm1
movq qword [esp + 0x178], xmm0
cmp byte [esp + 0x178], 0x16
je 0x49ea92
jmp 0x49f3c9
mov eax, dword [esp + 0x28]
mov word [esp + 0x124], 0x3e09
jmp 0x49e8b4
movzx ecx, byte [esp + 0x97]
mov edx, dword [esp + 0x50]
movzx edi, word [esp + 0x95]
mov esi, dword [esp + 0x98]
mov byte [edx + 7], cl
mov word [edx + 5], di
mov byte [edx + 4], al
mov eax, 1
mov dword [edx + 8], esi
mov dword [edx], eax
jmp 0x49f4ce
mov ecx, dword [esp + 0x3cc]
mov eax, dword [ecx + 4]
push dword [ecx]
lea ecx, [esp + 0x98]
push ecx
call dword [eax + 0x38]
add esp, 8
cmp byte [esp + 0x94], 4
jne 0x49f361
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x118]
mov dword [ecx + 4], eax
xor eax, eax
mov dword [ecx + 8], esi
mov dword [ecx], eax
jmp 0x49f4ce
movsd xmm0, qword [esp + 0x94]
mov ecx, dword [esp + 0x50]
mov eax, 1
movsd qword [ecx + 4], xmm0
mov dword [ecx], eax
jmp 0x49f4ce
mov eax, dword [esp + 0x318]
mov ecx, dword [esp + 0x31c]
jmp 0x49f3b4
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x118]
mov edx, dword [esp + 0x88]
jmp 0x49f4c2
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x50]
mov dword [edx + 8], ecx
mov dword [edx + 4], eax
mov dword [edx], 1
jmp 0x49f4ce
mov eax, dword [esp + 0x3cc]
mov edx, dword [esp + 0x174]
lea ecx, [esp + 0x188]
mov esi, dword [eax + 4]
mov edi, dword [eax]
push esi
push edi
call fcn.00453b30
add esp, 8
push edi
lea eax, [esp + 0x98]
push eax
call dword [esi + 0x38]
add esp, 8
mov esi, dword [esp + 0x50]
lea edx, [esp + 0x178]
lea ecx, [esi + 4]
call fcn.004a42a0
cmp byte [esp + 0x94], 3
mov dword [esi], 1
jne 0x49f464
mov esi, dword [esp + 0x98]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x49f437
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x49f455
cmp dword [ebx + 8], 9
jb 0x49f446
mov edi, dword [edi - 4]
push edi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp byte [esp + 0x188], 3
jne 0x49f4ce
mov esi, dword [esp + 0x18c]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
test eax, eax
je 0x49f486
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x49f4a4
cmp dword [ebx + 8], 9
jb 0x49f495
mov edi, dword [edi - 4]
push edi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push esi
push 0
push dword [0xfd5200]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x49f4ce
mov edx, eax
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x118]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax], 0
add esp, 0x3b8
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x50]
mov word [eax + 4], 0x2501
mov dword [eax], 1
jmp 0x49f4ce
ud2