Function at 0x49973c
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 3
add esp, 0xfffff004
push eax
dec eax
jne 0x499745
mov eax, dword [ebp - 4]
add esp, 0xfffffe4c
push ebx
push esi
push edi
cmp dword [ebp + 0x10], 0
jne 0x499769
or eax, 0xffffffff
jmp 0x49a1e8
xor edx, edx
mov eax, 0x4ff5cc
mov ecx, dword [eax]
cmp ecx, dword [ebp + 8]
jne 0x4997d6
cmp dword [ebp + 0xc], 0
je 0x499785
mov ecx, dword [eax + 4]
mov ebx, dword [ebp + 0xc]
mov dword [ebx], ecx
mov ebx, dword [ebp + 0x10]
mov ecx, dword [eax + 8]
test edx, edx
mov dword [ebx], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
jle 0x4997ce
mov esi, eax
lea edi, [ebp - 0x31b8]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
shl edx, 4
push edx
push 0x4ff5cc
push 0x4ff5dc
call fcn.004a3554
add esp, 0xc
lea esi, [ebp - 0x31b8]
mov edi, 0x4ff5cc
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 4]
jmp 0x49a1e8
inc edx
add eax, 0x10
cmp edx, 0x800
jl 0x499770
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x20], ecx
xor eax, eax
xor edx, edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x2828], ecx
xor edx, edx
mov dword [ebp - 0x2824], eax
mov dword [ebp - 0x2820], edx
xor ecx, ecx
mov dword [ebp - 0x2818], ecx
mov dword [ebp - 8], 1
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 8], 0
jle 0x49a192
dec dword [ebp - 8]
mov ebx, dword [ebp - 8]
shl ebx, 2
lea ebx, [ebx + ebx*4]
lea eax, [ebp - 0x2828]
add ebx, eax
mov edi, dword [ebx]
cmp edi, dword [ebp - 0x20]
jb 0x499858
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x24]
cmp edi, eax
jb 0x499a3d
cmp dword [ebp - 0xc], 4
jg 0x499825
cmp dword [ebp - 0x28], 0
je 0x49986d
mov edx, dword [ebp - 0x28]
push edx
call sub.KERNEL32.DLL_GlobalFree
push edi
call sym.ollydbg.exe__Findmemory
pop ecx
mov esi, eax
test esi, esi
jne 0x499882
or eax, 0xffffffff
jmp 0x49a1e8
mov edx, dword [esi + 4]
push edx
push 0
call sub.KERNEL32.DLL_GlobalAlloc
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x49989e
or eax, 0xffffffff
jmp 0x49a1e8
mov edx, dword [esi]
mov dword [ebp - 0x20], edx
push 3
mov ecx, dword [esi + 4]
push ecx
mov eax, dword [ebp - 0x20]
push eax
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Readmemory
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ecx, dword [esi + 4]
cmp ecx, dword [ebp - 0x24]
je 0x4998d5
mov eax, dword [ebp - 0x28]
push eax
call sub.KERNEL32.DLL_GlobalFree
or eax, 0xffffffff
jmp 0x49a1e8
inc dword [ebp - 0xc]
cmp dword [0x4d36d8], 1
jne 0x499a3d
push edi
call sym.ollydbg.exe__Findmodule
pop ecx
test eax, eax
jne 0x499a3d
lea edx, [edi + 0xa]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
cmp edx, ecx
ja 0x499a3d
mov eax, edi
sub eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x28]
xor ecx, ecx
mov cl, byte [edx + eax]
cmp ecx, 0x68
jne 0x499a3d
mov eax, dword [ebp - 0x28]
add eax, edi
sub eax, dword [ebp - 0x20]
mov edx, dword [eax + 1]
mov dword [ebp - 0x14], edx
cmp edx, 0x80000000
jb 0x499a3d
mov eax, edi
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
movzx eax, byte [ecx + eax + 5]
cmp eax, 0xe9
jne 0x499a3d
mov edx, dword [ebp - 0x28]
add edx, edi
sub edx, dword [ebp - 0x20]
mov ecx, dword [edx + 6]
add ecx, edi
add ecx, 0xa
cmp ecx, 0x80000000
jb 0x499a3d
cmp dword [ebp + 0xc], 0
jne 0x499980
mov eax, dword [ebp + 0x10]
xor edx, edx
mov dword [eax], edx
xor ecx, ecx
mov dword [ebp - 4], ecx
jmp 0x49a192
push 0
push 0
push 1
mov eax, dword [ebp - 0x14]
push eax
call fcn.0040b1b4
add esp, 0x10
test eax, eax
je 0x499825
test byte [eax], 1
je 0x499825
xor edx, edx
inc eax
mov dword [ebp - 0x10], edx
jmp 0x499a10
xor edx, edx
mov dl, byte [eax]
cmp edx, 0x4d
je 0x4999c3
cmp edx, 0x4f
je 0x4999c3
cmp edx, 0x53
je 0x4999c3
cmp edx, 0x54
jne 0x4999cd
xor ecx, ecx
mov cl, byte [eax + 1]
cmp ecx, 0x3d
je 0x499a15
xor edx, edx
mov dl, byte [eax]
cmp edx, 0x2e
jne 0x4999ea
xor ecx, ecx
mov cl, byte [eax + 1]
cmp ecx, 0x2e
jne 0x4999ea
xor edx, edx
mov dl, byte [eax + 2]
cmp edx, 0x2e
je 0x499a15
mov ecx, dword [ebp - 0x10]
add ecx, 4
inc eax
mov dword [ebp - 0x10], ecx
jmp 0x4999f7
inc eax
mov dl, byte [eax]
test dl, dl
je 0x499a06
xor ecx, ecx
mov cl, dl
cmp ecx, 0x2c
jne 0x4999f6
xor edx, edx
mov dl, byte [eax]
cmp edx, 0x2c
jne 0x499a10
inc eax
cmp byte [eax], 0
jne 0x4999ab
cmp byte [eax], 0
jne 0x499825
cmp dword [ebp + 0xc], 0
je 0x499a2b
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [eax], ecx
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x10]
mov dword [eax], edx
xor ecx, ecx
mov dword [ebp - 4], ecx
jmp 0x49a192
mov esi, edi
sub esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dl, byte [eax + esi]
cmp edx, 0xcc
je 0x499825
push 0
lea ecx, [ebp - 0x3188]
push 0
push ecx
push 0
push edi
mov eax, dword [ebp - 0x24]
sub eax, esi
push eax
mov edx, dword [ebp - 0x28]
add edx, esi
push edx
call sym.ollydbg.exe__Disasm
add esp, 0x1c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x2b84]
and eax, 0xf0
cmp dword [ebp - 0x2b50], 0
jne 0x49a181
cmp eax, 0xf0
je 0x49a181
cmp eax, 0xa0
je 0x49a181
cmp eax, 0xc0
je 0x49a181
cmp eax, 0x80
jne 0x499b54
cmp dword [ebx + 4], 0
je 0x499afa
mov edx, dword [ebx + 8]
add edx, 4
mov dword [ebx + 8], edx
mov ecx, dword [ebp - 0x28]
xor eax, eax
mov al, byte [ecx + esi]
cmp eax, 0xc2
jne 0x499ae8
mov edx, dword [ebp - 0x28]
movzx ecx, word [edx + esi + 1]
add dword [ebx + 8], ecx
mov eax, dword [ebx + 4]
xor edx, edx
mov dword [ebx], eax
mov dword [ebx + 4], edx
inc dword [ebp - 8]
jmp 0x499825
mov ecx, dword [ebp - 0x28]
xor eax, eax
mov al, byte [ecx + esi]
cmp eax, 0xc2
jne 0x499b24
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + 0x10]
movzx ecx, word [edx + esi + 1]
mov dword [eax], ecx
mov edx, dword [ebp + 0x10]
test byte [edx], 3
jne 0x499825
jmp 0x499b2b
mov ecx, dword [ebp + 0x10]
xor eax, eax
mov dword [ecx], eax
cmp dword [ebp + 0xc], 0
je 0x499b49
test byte [ebx + 0x10], 4
jne 0x499b41
test byte [ebx + 8], 3
jne 0x499825
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebx + 8]
mov dword [edx], ecx
mov eax, dword [ebx + 0x10]
mov dword [ebp - 4], eax
jmp 0x49a192
cmp eax, 0x50
jne 0x499c55
push 0
lea edx, [ebp - 0x3188]
push 4
push edx
push 0
push edi
mov ecx, dword [ebp - 0x24]
sub ecx, esi
push ecx
mov eax, dword [ebp - 0x28]
add eax, esi
push eax
call sym.ollydbg.exe__Disasm
add esp, 0x1c
cmp dword [ebp - 0x2b58], 0
je 0x499b98
mov edx, dword [ebp - 0x2b58]
mov dword [ebx], edx
inc dword [ebp - 8]
jmp 0x49a181
cmp dword [ebp - 0x1c], 7
jb 0x49a181
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + esi]
and eax, 0xc7ffff
cmp eax, 0x8524ff
jne 0x49a181
mov edx, dword [ebp - 0x28]
mov ecx, dword [edx + esi + 3]
mov dword [ebp - 0x14], ecx
cmp ecx, dword [ebp - 0x20]
jb 0x49a181
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
add edx, dword [ebp - 0x24]
add eax, 4
cmp eax, edx
ja 0x49a181
mov eax, dword [ebp - 8]
lea eax, [eax + eax*4]
lea eax, [ebp + eax*4 - 0x2828]
jmp 0x499c33
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
mov ecx, dword [edx]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0x20]
jb 0x49a181
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x18]
jbe 0x49a181
push esi
mov edi, eax
mov esi, ebx
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
pop esi
mov edx, dword [ebp - 0x18]
mov dword [eax], edx
add dword [ebp - 0x14], 4
inc dword [ebp - 8]
add eax, 0x14
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
add edx, dword [ebp - 0x24]
add ecx, 4
cmp ecx, edx
ja 0x49a181
cmp dword [ebp - 8], 0x200
jl 0x499bee
jmp 0x49a181
cmp eax, 0x60
jne 0x499d1f
push 0
lea eax, [ebp - 0x3188]
push 4
push eax
push 0
push edi
mov ecx, dword [ebp - 0x24]
sub ecx, esi
push ecx
mov eax, dword [ebp - 0x28]
add eax, esi
push eax
call sym.ollydbg.exe__Disasm
add esp, 0x1c
mov edx, dword [ebp - 0x1c]
add edx, edi
cmp edx, dword [ebp - 0x2b58]
jbe 0x499cd7
mov ecx, dword [ebp - 0x2b58]
mov dword [ebx], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x200
jge 0x49a181
mov eax, dword [ebp - 8]
push esi
push edi
mov esi, ebx
lea eax, [eax + eax*4]
mov ecx, 5
lea edi, [ebp + eax*4 - 0x2828]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 8]
pop edi
add edi, dword [ebp - 0x1c]
pop esi
lea eax, [eax + eax*4]
mov dword [ebp + eax*4 - 0x2828], edi
inc dword [ebp - 8]
jmp 0x49a181
add edi, dword [ebp - 0x1c]
mov dword [ebx], edi
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x200
jge 0x49a181
mov edx, dword [ebp - 8]
push esi
mov esi, ebx
mov ecx, 5
lea edx, [edx + edx*4]
lea edi, [ebp + edx*4 - 0x2828]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 8]
pop esi
mov edx, dword [ebp - 0x2b58]
lea eax, [eax + eax*4]
mov dword [ebp + eax*4 - 0x2828], edx
inc dword [ebp - 8]
jmp 0x49a181
cmp dword [ebp + 0xc], 0
jne 0x499d32
mov ecx, dword [ebp - 0x1c]
add dword [ebx], ecx
inc dword [ebp - 8]
jmp 0x49a181
cmp eax, 0x30
je 0x499d51
cmp eax, 0x40
je 0x499d51
cmp eax, 0xb0
je 0x499d51
cmp eax, 0xd0
je 0x499d51
cmp eax, 0xe0
jne 0x499d5e
mov eax, dword [ebp - 0x1c]
add dword [ebx], eax
inc dword [ebp - 8]
jmp 0x49a181
cmp eax, 0x10
jne 0x499db9
mov edx, dword [ebp - 0x28]
xor ecx, ecx
mov cl, byte [edx + esi]
cmp ecx, 0x68
jne 0x499d7c
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + esi + 1]
mov dword [ebx + 4], edx
jmp 0x499d81
xor ecx, ecx
mov dword [ebx + 4], ecx
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dl, byte [eax + esi]
cmp edx, 0x55
je 0x499d9f
cmp dword [ebp - 0x1c], 2
jne 0x499da3
mov ecx, dword [ebp - 0x28]
cmp word [ecx + esi], 0xf5ff
jne 0x499da3
or dword [ebx + 0x10], 1
mov eax, dword [ebx + 8]
sub eax, 4
mov dword [ebx + 8], eax
mov edx, dword [ebp - 0x1c]
add dword [ebx], edx
inc dword [ebp - 8]
jmp 0x49a181
cmp eax, 0x20
je 0x499dce
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov dl, byte [ecx + esi]
cmp edx, 0x9d
jne 0x499e0b
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov cl, byte [eax + esi]
cmp ecx, 0x5d
je 0x499dec
cmp dword [ebp - 0x1c], 2
jne 0x499df0
mov eax, dword [ebp - 0x28]
cmp word [eax + esi], 0xc58f
jne 0x499df0
or dword [ebx + 0x10], 8
mov edx, dword [ebx + 8]
xor ecx, ecx
add edx, 4
mov dword [ebx + 8], edx
mov dword [ebx + 4], ecx
mov eax, dword [ebp - 0x1c]
add dword [ebx], eax
inc dword [ebp - 8]
jmp 0x49a181
cmp eax, 0x70
jne 0x499f59
push 0
lea edx, [ebp - 0x3188]
push 4
push edx
push 0
push edi
mov ecx, dword [ebp - 0x24]
sub ecx, esi
push ecx
mov eax, dword [ebp - 0x28]
add eax, esi
push eax
call sym.ollydbg.exe__Disasm
add esp, 0x1c
mov eax, dword [ebp - 0x2b58]
test eax, eax
je 0x49a181
push eax
push 0x4dc8cd
call sym.ollydbg.exe__Findsorteddata
add esp, 8
mov edi, eax
test edi, edi
je 0x499e76
test byte [edi + 0xa], 3
je 0x499e76
mov eax, dword [edi + 0x14]
xor edx, edx
add dword [ebx + 8], eax
mov dword [ebx + 4], edx
mov ecx, dword [ebp - 0x1c]
add dword [ebx], ecx
inc dword [ebp - 8]
jmp 0x49a181
lea eax, [ebp - 0x10]
push eax
push 0
mov edx, dword [ebp - 0x2b58]
push edx
call fcn.0049973c
add esp, 0xc
test eax, eax
jl 0x49a181
test edi, edi
jne 0x499f41
mov eax, dword [ebp - 0x2b58]
mov dword [ebp - 0x31a8], eax
mov dword [ebp - 0x31a4], 1
push 0
push eax
call sym.ollydbg.exe__Finddecode
add esp, 8
test eax, eax
je 0x499ee0
xor edx, edx
mov dl, byte [eax]
mov ecx, edx
and ecx, 0x1f
cmp ecx, 0x1f
je 0x499ed6
and edx, 0x60
cmp edx, 0x20
jne 0x499ee0
xor eax, eax
mov dword [ebp - 0x31a0], eax
jmp 0x499eea
mov dword [ebp - 0x31a0], 0x100000
xor edx, edx
mov dword [ebp - 0x3198], edx
mov dword [ebp - 0x319c], edx
cmp dword [ebp - 0x10], 0
jne 0x499f0a
or dword [ebp - 0x31a0], 0x20000
jmp 0x499f14
or dword [ebp - 0x31a0], 0x10000
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3194], eax
xor ecx, ecx
mov dword [ebp - 0x3190], ecx
xor eax, eax
mov dword [ebp - 0x318c], eax
lea edx, [ebp - 0x31a8]
push edx
push 0x4dc8cd
call sym.ollydbg.exe__Addsorteddata
add esp, 8
mov ecx, dword [ebp - 0x10]
xor eax, eax
add dword [ebx + 8], ecx
mov dword [ebx + 4], eax
mov edx, dword [ebp - 0x1c]
add dword [ebx], edx
inc dword [ebp - 8]
jmp 0x49a181
mov ecx, dword [ebp - 0x24]
sub ecx, esi
cmp ecx, 3
jb 0x499f8b
mov eax, dword [ebp - 0x28]
cmp word [eax + esi], 0xc483
jne 0x499f8b
mov edx, dword [ebp - 0x28]
xor eax, eax
movsx ecx, byte [edx + esi + 2]
add dword [ebx + 8], ecx
mov dword [ebx + 4], eax
mov edx, dword [ebp - 0x1c]
add dword [ebx], edx
inc dword [ebp - 8]
jmp 0x49a181
mov ecx, dword [ebp - 0x24]
sub ecx, esi
cmp ecx, 6
jb 0x499fbf
mov eax, dword [ebp - 0x28]
cmp word [eax + esi], 0xc481
jne 0x499fbf
mov edx, dword [ebp - 0x28]
xor eax, eax
mov ecx, dword [edx + esi + 2]
add ecx, dword [ebx + 8]
mov dword [ebx + 8], ecx
mov dword [ebx + 4], eax
mov edx, dword [ebp - 0x1c]
add dword [ebx], edx
inc dword [ebp - 8]
jmp 0x49a181
mov ecx, dword [ebp - 0x24]
sub ecx, esi
cmp ecx, 3
jb 0x499ff1
mov eax, dword [ebp - 0x28]
cmp word [eax + esi], 0xec83
jne 0x499ff1
mov edx, dword [ebp - 0x28]
xor eax, eax
movsx ecx, byte [edx + esi + 2]
sub dword [ebx + 8], ecx
mov dword [ebx + 4], eax
mov edx, dword [ebp - 0x1c]
add dword [ebx], edx
inc dword [ebp - 8]
jmp 0x49a181
mov ecx, dword [ebp - 0x24]
sub ecx, esi
cmp ecx, 6
jb 0x49a025
mov eax, dword [ebp - 0x28]
cmp word [eax + esi], 0xec81
jne 0x49a025
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebx + 8]
xor eax, eax
sub ecx, dword [edx + esi + 2]
mov dword [ebx + 8], ecx
mov dword [ebx + 4], eax
mov edx, dword [ebp - 0x1c]
add dword [ebx], edx
inc dword [ebp - 8]
jmp 0x49a181
mov ecx, dword [ebp - 0x24]
sub ecx, esi
cmp ecx, 4
jb 0x49a07d
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dl, byte [eax + esi]
cmp edx, 0xc8
jne 0x49a07d
mov ecx, dword [ebp - 0x28]
cmp byte [ecx + esi + 3], 0
jne 0x49a181
mov eax, dword [ebx + 8]
sub eax, 4
mov dword [ebx + 8], eax
mov edx, dword [ebx + 8]
mov dword [ebx + 0xc], edx
xor edx, edx
or dword [ebx + 0x10], 3
mov ecx, dword [ebp - 0x28]
movzx eax, word [ecx + esi + 2]
sub dword [ebx + 8], eax
mov dword [ebx + 4], edx
mov ecx, dword [ebp - 0x1c]
add dword [ebx], ecx
inc dword [ebp - 8]
jmp 0x49a181
mov eax, dword [ebp - 0x24]
sub eax, esi
cmp eax, 1
jb 0x49a0bc
mov edx, dword [ebp - 0x28]
xor ecx, ecx
mov cl, byte [edx + esi]
cmp ecx, 0xc9
jne 0x49a0bc
test byte [ebx + 0x10], 2
je 0x49a0a6
mov eax, dword [ebx + 0xc]
add eax, 4
mov dword [ebx + 8], eax
or dword [ebx + 0x10], 0xc
xor edx, edx
mov dword [ebx + 4], edx
mov ecx, dword [ebp - 0x1c]
add dword [ebx], ecx
inc dword [ebp - 8]
jmp 0x49a181
mov eax, dword [ebp - 0x24]
sub eax, esi
cmp eax, 2
jb 0x49a0f3
mov edx, dword [ebp - 0x28]
mov ax, word [edx + esi]
cmp ax, 0xec8b
je 0x49a0dc
mov edx, dword [ebp - 0x28]
cmp ax, 0xe589
jne 0x49a0f3
mov ecx, dword [ebx + 8]
mov dword [ebx + 0xc], ecx
or dword [ebx + 0x10], 2
mov eax, dword [ebp - 0x1c]
add dword [ebx], eax
inc dword [ebp - 8]
jmp 0x49a181
mov edx, dword [ebp - 0x24]
sub edx, esi
cmp edx, 2
jb 0x49a132
mov ecx, dword [ebp - 0x28]
mov ax, word [ecx + esi]
cmp ax, 0xe58b
je 0x49a113
mov edx, dword [ebp - 0x28]
cmp ax, 0xec89
jne 0x49a132
test byte [ebx + 0x10], 2
je 0x49a11f
mov ecx, dword [ebx + 0xc]
mov dword [ebx + 8], ecx
or dword [ebx + 0x10], 4
xor eax, eax
mov dword [ebx + 4], eax
mov edx, dword [ebp - 0x1c]
add dword [ebx], edx
inc dword [ebp - 8]
jmp 0x49a181
mov ecx, dword [ebp - 0x28]
xor eax, eax
mov al, byte [ecx + esi]
cmp eax, 0xcd
je 0x49a181
push 0
lea edx, [ebp - 0x3188]
push 1
push edx
push 0
push edi
mov ecx, dword [ebp - 0x24]
sub ecx, esi
push ecx
mov eax, dword [ebp - 0x28]
add eax, esi
push eax
call sym.ollydbg.exe__Disasm
add esp, 0x1c
xor edx, edx
mov dl, byte [ebp - 0x2b0c]
cmp edx, 0x24
jne 0x49a179
cmp byte [ebp - 0x2b06], 0
jne 0x49a181
mov ecx, dword [ebp - 0x1c]
add dword [ebx], ecx
inc dword [ebp - 8]
mov eax, dword [ebp - 0x28]
mov byte [eax + esi], 0xcc
cmp dword [ebp - 8], 0
jg 0x49982f
cmp dword [ebp - 0x28], 0
je 0x49a1a1
mov edx, dword [ebp - 0x28]
push edx
call sub.KERNEL32.DLL_GlobalFree
cmp dword [ebp + 0xc], 0
je 0x49a1e5
push 0x7ff0
push 0x4ff5cc
push 0x4ff5dc
call fcn.004a3554
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [0x4ff5cc], ecx
mov ecx, dword [ebp + 0x10]
mov edx, dword [eax]
add esp, 0xc
mov dword [0x4ff5d0], edx
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov dword [0x4ff5d4], eax
mov dword [0x4ff5d8], edx
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret