Function at 0x49b670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x148
mov eax, dword [0x51300c]
xor eax, esp
mov dword [esp + 0x144], eax
mov eax, ecx
mov dword [esp + 0x68], 0
push esi
mov dword [esp + 8], eax
mov esi, edx
mov edx, dword [ebp + 8]
mov eax, dword [eax]
push edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x64], eax
lea ecx, [edx + 0x50]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x30], esi
mov eax, dword [edi + 0x50]
mov dword [esp + 0x2c], eax
movzx eax, byte [edi + 0x3c]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x10], edi
lea ecx, [eax + eax*8]
mov eax, dword [edx + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [esp + 0x90], eax
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x38], eax
cmp dword [edx + 0x1f8], eax
jne 0x49b6f1
mov ecx, 1
xor edx, edx
jmp 0x49b739
mov edx, dword [edx + 0x1f4]
mov eax, 1
cmp edx, eax
jle 0x49b728
mov ecx, dword [esp + 0x6c]
add ecx, 0x1fc
nop word [eax + eax]
mov esi, dword [esp + 0x38]
cmp dword [ecx], esi
mov esi, dword [esp + 0x30]
je 0x49b7d0
inc eax
add ecx, 4
cmp eax, edx
jl 0x49b710
xorps xmm0, xmm0
movlpd qword [esp + 0x78], xmm0
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
not ecx
not edx
and ecx, dword [ebp + 0x14]
and edx, dword [ebp + 0x18]
mov dword [edi + 0x58], ecx
mov ecx, dword [esp + 0x6c]
mov dword [edi + 0x5c], edx
mov edi, dword [ebp + 0xc]
mov eax, dword [ecx + 0x48]
mov edx, dword [ecx + 0x4c]
mov ecx, edi
call fcn.004f36c0
mov ecx, dword [esp + 0xc]
and eax, 1
mov edx, dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov eax, dword [ecx + 0x38]
dec eax
mov dword [ecx + 0x38], eax
mov dword [edx + 0x10], eax
mov dword [edx + 0xc], eax
mov dword [esp + 0x44], eax
mov eax, dword [ecx + 0x38]
dec eax
mov dword [ecx + 0x38], eax
cmp byte [edx + 0x3c], 0
mov dword [edx + 0x18], eax
mov edx, dword [esp + 0x90]
mov dword [esp + 0x9c], eax
jbe 0x49b820
test byte [edx + 0x24], 8
je 0x49b820
mov edx, dword [ecx + 0x2c]
mov eax, dword [esp + 0x10]
inc edx
mov dword [ecx + 0x2c], edx
mov dword [eax], edx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49b7ea
push 0
push edx
push 0
mov edx, 0x47
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49b819
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x49b739
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x90]
mov ecx, edi
test edi, edi
jle 0x49b84b
lea eax, [edi + edi*2]
mov edi, dword [esp + 0x6c]
shl eax, 5
add edi, 0x330
add eax, edi
cmp dword [eax - 0x38], 0
jne 0x49b84b
cmp dword [eax], 0
jne 0x49b84b
dec ecx
sub eax, 0x60
test ecx, ecx
jg 0x49b838
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 0x6c]
shl eax, 5
test byte [edx + 0x28], 0x20
mov edi, dword [eax + ecx + 0x304]
mov eax, 0xb
mov dword [esp + 0x1c], edi
je 0x49b955
mov ecx, dword [esi + 0x6c]
mov edi, dword [edx + 0x1c]
mov edx, dword [edx + 0x18]
cmp dword [esi + 0x70], ecx
jg 0x49b88f
push edx
push 0
push edi
mov edx, eax
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49b8be
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x6c]
cmp dword [esi + 0x70], edx
jg 0x49b900
push 0
push dword [esp + 0x48]
mov edx, 0xc
mov ecx, esi
push edi
call fcn.00437140
mov edx, eax
add esp, 0xc
mov eax, dword [esp + 0x10]
mov dword [eax + 0x44], edx
mov edx, eax
xor eax, eax
neg eax
sbb eax, eax
mov byte [edx + 0x3d], 9
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x44]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x10]
mov dword [eax + 0x44], edx
mov edx, eax
xor eax, eax
neg eax
sbb eax, eax
mov byte [edx + 0x3d], 9
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 0x2c]
test edx, 0x400
je 0x49bfd1
movzx eax, word [eax + 0x30]
mov dword [esp + 0x44], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x49b9a4
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x49b98f
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x28], eax
jmp 0x49b9da
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0xa0]
mov dword [esp + 0x28], eax
jmp 0x49b9da
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x1c]
mov edi, dword [eax + 0x20]
mov dword [esp + 0x28], edi
cmp ecx, edx
jg 0x49b9c7
lea eax, [ecx + edi]
sub edx, ecx
mov edi, dword [esp + 0xc]
mov dword [edi + 0x20], eax
mov dword [edi + 0x1c], edx
jmp 0x49b9da
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x28], edx
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0x10]
xor edi, edi
mov eax, dword [eax + 0xc]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x44], edi
jbe 0x49bab2
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
add edx, 2
mov dword [esp + 0x3c], edx
mov eax, dword [eax + 0x38]
mov ecx, dword [eax + edi*4]
mov dword [esp + 0x18], ecx
test ecx, ecx
je 0x49baa3
test byte [ecx + 0xc], 1
je 0x49bb42
cmp edi, 0x1f
ja 0x49ba30
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x18]
jmp 0x49ba32
xor eax, eax
mov esi, dword [esp + 0x2c]
test dword [esi + 0x28], eax
mov esi, dword [esp + 0x30]
je 0x49bb17
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [eax + 0x28]
mov dword [esp + 0x60], edx
push edx
lea eax, [edx + 1]
mov dword [ecx + 0x28], eax
mov eax, ecx
mov ecx, dword [esp + 0x1c]
inc dword [eax + 0x2c]
mov edx, dword [ecx]
mov eax, dword [eax + 0x2c]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], eax
call fcn.004513d0
mov eax, dword [esp + 0x40]
add esp, 4
mov ecx, dword [esi + 0x6c]
add eax, edi
cmp dword [esi + 0x70], ecx
jg 0x49bae0
mov edx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x64]
push eax
push edx
mov edx, 0xae
mov ecx, esi
call fcn.00437140
add esp, 0xc
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x2c]
inc edi
cmp edi, dword [esp + 0x44]
jl 0x49ba00
mov eax, dword [esp + 0x2c]
mov ecx, dword [esi + 0x6c]
mov edx, dword [eax + 0x18]
cmp dword [esi + 0x70], ecx
jg 0x49bbcf
push 0
push dword [esp + 0x2c]
mov ecx, esi
push edx
mov edx, 0x47
call fcn.00437140
add esp, 0xc
jmp 0x49bbfe
mov edx, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
add edx, edi
mov dword [eax + ecx*4], 0xae
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x49ba9f
lea eax, [edx + edi]
mov edx, ecx
mov ecx, dword [esp + 0xc]
push eax
push dword [esp + 0x58]
push edi
push dword [esp + 0x1c]
call fcn.0049a4d0
mov eax, dword [esp + 0x20]
add esp, 0x10
mov eax, dword [eax + 0x10]
mov dword [esp + 0x1c], eax
jmp 0x49ba9f
lea eax, [edx + edi]
mov edx, dword [ecx]
mov ecx, dword [esp + 0xc]
push 1
push eax
mov edx, dword [edx + 0x10]
call fcn.0049b280
mov eax, dword [esp + 0x20]
add esp, 8
cmp byte [eax + 0xf], 0x4a
mov eax, dword [esp + 0x2c]
jne 0x49bbc6
test byte [eax + 0x1c], 2
je 0x49bbc6
mov eax, dword [esp + 0x6c]
mov ecx, dword [esi + 0x6c]
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
cmp dword [esi + 0x70], ecx
jg 0x49bb8e
push 0
push edx
push 0
mov edx, 0x47
jmp 0x49ba95
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x49ba9f
mov edx, dword [esp + 0x3c]
jmp 0x49baa7
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x28]
mov ecx, dword [esi + 0x6c]
inc edx
cmp dword [esi + 0x70], ecx
jg 0x49bc23
push 0
push edx
push dword [esp + 0x4c]
mov edx, 0x47
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49bc52
mov edi, dword [esp + 0x44]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x2c]
mov edi, 0xffffffff
mov edx, dword [esi + 0x6c]
mov ecx, 0xfffffffa
test byte [eax + 0x1c], 1
mov eax, dword [eax + 0x24]
cmovne edi, ecx
mov dword [esp + 0x48], eax
cmp dword [esi + 0x70], edx
jg 0x49bc93
push dword [esp + 0x28]
lea edx, [ecx + 0xc]
mov ecx, esi
push dword [esp + 0x20]
push dword [esp + 0x40]
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49bcca
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x28]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 6
mov dword [eax + ecx*4 + 0x10], 0
push edi
push dword [esp + 0x4c]
mov ecx, esi
call fcn.00437de0
mov ecx, dword [esp + 0x34]
add esp, 8
mov eax, dword [esp + 0x64]
and dword [ecx + 0x1c], 0xfffffffe
cmp byte [eax + 0x57], 0
je 0x49bcf2
mov dword [ecx + 0x24], 0
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x6c]
mov eax, dword [esp + 0x38]
mov dword [edx + 0x40], eax
mov eax, 0x3f
cmp byte [edi + 0x2e], 0
mov edi, 0xb8
cmovne eax, edi
xor edi, edi
mov byte [edx + 0x3d], al
mov eax, dword [esi + 0x6c]
mov dword [edx + 0x44], eax
mov dword [esp + 0x34], edi
cmp dword [esp + 0x44], edi
jbe 0x49bfbc
mov eax, dword [esp + 0x28]
add eax, 2
mov dword [esp + 0x18], eax
nop word [eax + eax]
mov eax, dword [ecx + 0x38]
mov edx, dword [eax + edi*4]
mov dword [esp + 0x8c], edx
cmp edi, 0x10
jae 0x49bd72
mov ax, word [ecx + 0x22]
mov cx, di
shr ax, cl
test al, 1
je 0x49bd6e
mov ecx, dword [esp + 0x10]
call fcn.0049a080
jmp 0x49bfa5
mov ecx, dword [esp + 0x2c]
test byte [edx + 0xc], 1
je 0x49bfa9
cmp edi, 0x1f
ja 0x49bd90
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x2c]
jmp 0x49bd92
xor eax, eax
test dword [ecx + 0x28], eax
jne 0x49bfa9
mov eax, dword [esp + 0x64]
cmp byte [eax + 0x57], 0
jne 0x49bfa9
mov edx, dword [esp + 0x10]
mov dword [esp + 0x1c], 0
cmp dword [edx + 0x48], 0
jle 0x49be99
mov eax, dword [esi]
xor ecx, ecx
mov dword [esp + 0x60], ecx
mov al, byte [eax + 0x57]
mov byte [esp + 0x27], al
nop
test al, al
je 0x49bddb
mov ecx, 0x5160d8
jmp 0x49bdeb
mov eax, dword [edx + 0x4c]
mov eax, dword [ecx + eax + 4]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
lea ecx, [eax + ecx*4]
mov dl, byte [ecx]
cmp dl, 0x5e
jne 0x49bdfd
mov eax, dword [esp + 0x18]
add eax, edi
cmp dword [ecx + 0xc], eax
jmp 0x49be0b
cmp dl, 0x87
jne 0x49be0d
mov eax, dword [esp + 0x18]
add eax, edi
cmp dword [ecx + 8], eax
je 0x49be34
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
inc edx
mov ecx, dword [esp + 0x60]
add ecx, 0x14
mov dword [esp + 0x1c], edx
mov dword [esp + 0x60], ecx
cmp edx, dword [eax + 0x48]
jge 0x49be99
mov al, byte [esp + 0x27]
mov edx, dword [esp + 0x10]
jmp 0x49bdd0
mov eax, dword [ecx + 8]
mov edi, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esi + 0x6c]
mov dword [esp + 0x48], eax
cmp dword [esi + 0x70], ecx
jg 0x49be63
mov ecx, dword [esp + 0x1c]
push edi
push eax
push ecx
movzx edx, dl
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49be99
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x48]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0xc]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.00413890
mov edi, eax
add esp, 8
test edi, edi
je 0x49beef
push 0x34
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [esp + 0x18]
or eax, 0xffffffff
mov byte [edi], 0x35
add esp, 0xc
mov word [edi + 0x22], ax
mov dword [edi + 0x18], 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp eax, 1
jge 0x49beef
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.00417860
add esp, 0xc
mov eax, dword [esp + 0x64]
cmp byte [eax + 0x57], 0
jne 0x49bf94
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
test ecx, ecx
jle 0x49bf1a
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*4]
mov edx, dword [eax + ecx*4 - 0xc]
mov ecx, dword [esp + 0x64]
push 0
push 0x35
mov dword [edi + 0xc], edx
call fcn.00413890
add esp, 8
mov dword [esp + 0x48], eax
test eax, eax
je 0x49bf86
push 0x34
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [esp + 0x54]
or eax, 0xffffffff
add esp, 0xc
mov word [ecx + 0x22], ax
lea eax, [ecx + 0x34]
mov dword [ecx + 8], eax
mov byte [ecx], 0xb0
mov byte [eax], 0
mov eax, dword [esp + 0x34]
add eax, dword [esp + 0x18]
mov dword [ecx + 0x18], 1
mov dword [edi + 0x10], ecx
mov dword [ecx + 0x1c], eax
mov eax, dword [esp + 0x10]
push 0x10
push dword [eax + 0x18]
push edi
push dword [esp + 0x18]
call fcn.00456af0
add esp, 0x10
jmp 0x49bf89
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x64]
mov dword [edi + 0xc], 0
test edi, edi
je 0x49bfa1
mov edx, edi
mov ecx, eax
call fcn.0044ed80
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
inc edi
mov dword [esp + 0x34], edi
cmp edi, dword [esp + 0x44]
jl 0x49bd40
mov edx, dword [esp + 0x10]
xor eax, eax
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x49c1af
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
mov eax, dword [esp + 0xc]
mov ecx, eax
inc dword [eax + 0x2c]
mov edi, dword [eax + 0x2c]
push edi
push dword [esp + 0x58]
push 0
push dword [esp + 0x1c]
call fcn.0049a4d0
mov edx, eax
add esp, 0x10
mov dword [esp + 0x18], edx
cmp edx, edi
je 0x49c034
test edi, edi
je 0x49c034
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x49c034
movzx eax, al
mov dword [ecx + eax*4 + 0xa0], edi
inc byte [ecx + 0x13]
mov eax, dword [esp + 0x10]
cmp dword [eax + 0x34], 0
mov edi, dword [eax + 0x10]
je 0x49c129
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49c062
push 0
push edi
push edx
mov edx, 0xd
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49c091
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x10]
mov edx, dword [esi + 0x6c]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x48], eax
cmp dword [esi + 0x70], edx
jg 0x49c0bd
push dword [esp + 0x18]
mov edx, 0x40
mov ecx, esi
push edi
push eax
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49c0f0
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x40
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49c10b
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 1
push dword [ebp + 0x18]
mov edx, dword [esp + 0x70]
push dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push edi
push dword [ebp + 0xc]
call fcn.0049b3f0
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49c163
push edx
push edi
push dword [esp + 0x40]
mov edx, 0x1e
mov ecx, esi
call fcn.00437140
mov edx, dword [esp + 0x1c]
xor eax, eax
add esp, 0xc
neg eax
sbb eax, eax
add eax, 2
mov byte [edx + 0x3d], 0xb8
mov dword [esp + 0x8c], eax
jmp 0x49e494
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 0xc], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0x10], 0
xor eax, eax
neg eax
mov byte [edx + 0x3d], 0xb8
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x49c571
mov eax, 0xb8
mov dword [esp + 0x18], 0
xor edi, edi
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], 0
test dl, 0x20
je 0x49c1f1
mov eax, dword [esp + 0x2c]
mov ecx, 4
mov eax, dword [eax + 0x38]
mov edi, dword [eax]
jmp 0x49c1f3
xor ecx, ecx
test dl, 0x10
je 0x49c208
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x38]
mov ecx, dword [ecx + eax]
mov dword [esp + 0x34], ecx
jmp 0x49c20a
xor ecx, ecx
mov eax, dword [esp + 0x54]
test eax, eax
je 0x49c218
mov dword [esp + 0x34], edi
mov edi, ecx
test edi, edi
je 0x49c355
mov ecx, dword [edi]
mov dword [esp + 0x40], 0x17151618
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x10]
mov al, byte [edx]
cmp al, 0xb0
jne 0x49c23a
mov al, byte [edx + 2]
cmp al, 0xb1
jne 0x49c243
mov eax, dword [edx + 0x14]
jmp 0x49c24d
cmp al, 0x8a
jne 0x49c29c
mov eax, dword [edx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x49c29c
mov edx, dword [esp + 0xc]
mov al, byte [edx + 0x13]
test al, al
jne 0x49c265
inc dword [edx + 0x2c]
mov edi, dword [edx + 0x2c]
jmp 0x49c274
dec al
mov byte [edx + 0x13], al
movzx eax, al
mov edi, dword [edx + eax*4 + 0xa0]
mov edx, dword [ecx + 0x10]
mov ecx, dword [esp + 0xc]
push 1
push edi
call fcn.0049b280
mov ecx, dword [esp + 0x24]
add esp, 8
mov edx, edi
movzx eax, byte [ecx]
inc eax
and eax, 2
or eax, 1
mov al, byte [esp + eax + 0x40]
jmp 0x49c2d5
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x48]
push eax
call fcn.00455fe0
mov ecx, dword [esp + 0x14]
add esp, 4
mov edx, edi
mov dword [esp + 0x8c], eax
call fcn.0049a080
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x48]
mov edx, dword [esp + 0x8c]
movzx eax, byte [ecx]
mov al, byte [esp + eax + 0xa]
mov ecx, dword [esi + 0x6c]
mov byte [esp + 0x17], al
cmp dword [esi + 0x70], ecx
jg 0x49c2f9
push edx
push dword [esp + 0x48]
movzx edx, al
mov ecx, esi
push dword [esp + 0x40]
call fcn.00437140
add esp, 0xc
jmp 0x49c333
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x17]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
test edi, edi
je 0x49c3bc
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x49c3bc
movzx eax, al
mov dword [ecx + eax*4 + 0xa0], edi
inc byte [ecx + 0x13]
jmp 0x49c3bc
mov ecx, dword [esi + 0x6c]
xor eax, 1
lea edx, [eax*4 + 0x20]
cmp dword [esi + 0x70], ecx
jg 0x49c37e
mov ecx, dword [esp + 0x1c]
push 0
push ecx
push dword [esp + 0x40]
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49c3b8
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x34]
test eax, eax
je 0x49c460
mov edi, dword [eax]
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
push 1
mov edx, dword [edi + 0x10]
push eax
mov dword [esp + 0x20], eax
call fcn.0049b280
mov ecx, dword [edi + 0x10]
add esp, 8
mov dl, byte [ecx]
mov al, dl
cmp al, 0xb0
jne 0x49c3f0
mov al, byte [ecx + 2]
cmp al, 0xb1
jne 0x49c3f9
mov eax, dword [ecx + 0x14]
jmp 0x49c403
cmp al, 0x8a
jne 0x49c408
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x49c412
mov al, byte [edi]
cmp al, 0x38
je 0x49c41f
cmp al, 0x36
je 0x49c41f
mov eax, dword [esp + 0x54]
lea eax, [eax*2 + 0x36]
jmp 0x49c42d
mov eax, dword [esp + 0x54]
xor eax, 1
lea eax, [eax*2 + 0x37]
mov dword [esp + 0x20], eax
cmp dl, 0xb0
jne 0x49c439
mov dl, byte [ecx + 2]
cmp dl, 0xb1
jne 0x49c443
mov eax, dword [ecx + 0x14]
jmp 0x49c44e
cmp dl, 0x8a
jne 0x49c453
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x49c460
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x10]
call fcn.0049a080
cmp dword [esp + 0x54], 0
mov edx, dword [esp + 0x10]
mov ecx, dword [esi + 0x6c]
sete al
add al, 0x26
cmp dword [esp + 0x20], 0xb8
mov byte [edx + 0x3d], al
mov eax, dword [esp + 0x38]
mov dword [edx + 0x40], eax
mov dword [edx + 0x44], ecx
je 0x49bfbc
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov ecx, dword [esi + 0x6c]
mov edi, dword [eax + 0x2c]
cmp dword [esi + 0x70], ecx
jg 0x49c4b6
push 0
push edi
push dword [esp + 0x40]
mov edx, 0x87
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49c4e5
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
mov edx, dword [esp + 0x20]
cmp dword [esi + 0x70], ecx
jg 0x49c507
mov ecx, dword [esp + 0x18]
push edi
push dword [esp + 0x48]
push ecx
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49c53d
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x18]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x49bfb8
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
xor eax, eax
mov edx, dword [esp + 0x10]
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
test edx, 0x200
je 0x49d784
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x68], 0
mov dword [esp + 0x20], 0
movzx eax, word [ecx + 0x1a]
movzx edi, word [ecx + 0x18]
mov dword [esp + 0x84], eax
movzx eax, word [ecx + 0x1c]
xor ecx, ecx
mov dword [esp + 0x44], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov byte [esp + 0x17], al
mov byte [esp + 0x27], al
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 8]
mov dword [esp + 0x58], eax
movzx eax, di
mov dword [esp + 0x5c], eax
mov edi, eax
mov dword [esp + 0x60], eax
test dl, 0x20
je 0x49c609
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx + 0x38]
mov eax, dword [eax + edi*4]
inc edi
mov dword [esp + 0x68], eax
movzx eax, word [ecx + 0x1a]
mov ecx, eax
mov dword [esp + 0x28], eax
test dl, 0x10
je 0x49c718
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x38]
mov edx, dword [eax + edi*4]
mov eax, pe_nt_image_headers32
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x20], edx
movzx edi, word [edi + 0x1c]
cmp ecx, edi
cmova edi, ecx
test word [edx + 0xa], ax
je 0x49c6d5
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov edx, dword [eax + 0x2c]
mov eax, dword [esp + 0x10]
mov dword [eax + 0x2c], edx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49c66b
push 0
push edx
push 1
mov edx, 0x47
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49c69e
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x6c]
mov esi, dword [esp + 0x5c]
mov edx, dword [ecx + 0x2c]
mov dword [ecx + 0x30], eax
add edx, edx
mov eax, dword [esp + 0x70]
mov dword [ecx + 0x2c], edx
xor ecx, ecx
mov eax, dword [eax + 0x1c]
cmp byte [esi + eax], 1
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x30]
sete cl
xor ecx, dword [esp + 0x54]
or ecx, edx
mov dword [eax + 0x2c], ecx
cmp dword [esp + 0x68], 0
mov dword [esp + 0x28], edi
jne 0x49c718
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x5c]
mov eax, dword [eax + 4]
movsx edx, word [eax + ecx*2]
test edx, edx
js 0x49c708
mov eax, dword [esp + 0x70]
mov ecx, edx
add ecx, ecx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 4], 0xf
je 0x49c711
mov dword [esp + 0x28], edi
cmp edx, 0xfffffffe
jne 0x49c718
mov byte [esp + 0x17], 1
jmp 0x49c71c
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x2c]
test al, 0x30
jne 0x49c7ba
test eax, 0x80000
je 0x49c7ba
mov eax, dword [esp + 0xc]
mov edi, 1
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x17], 1
inc dword [eax + 0x2c]
cmp dword [ecx], 0
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x3c], edx
mov dword [ecx + 0x24], edx
je 0x49c7b1
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49c776
push 0
push edx
push 0
lea edx, [edi + 0x46]
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49c7a9
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
dec dword [eax + 0x38]
mov eax, dword [eax + 0x38]
mov dword [ecx + 0x28], eax
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x1c]
cmp ax, word [ecx + 0x34]
jae 0x49c816
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
mov edx, dword [esp + 0x5c]
cmp byte [edx + eax], cl
sete cl
cmp dword [esp + 0x54], ecx
jne 0x49c816
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x68], eax
mov al, byte [esp + 0x17]
mov byte [esp + 0x27], al
mov eax, dword [esp + 0x84]
mov dword [esp + 0x20], ecx
movzx ecx, dx
movzx eax, al
mov byte [esp + 0x17], 0
mov dword [esp + 0x84], ecx
mov dword [esp + 0x44], eax
cmp dword [ebp + 0xc], 0
jle 0x49c87d
mov eax, dword [esp + 0x2c]
test dword [eax + 0x2c], 0x100000
je 0x49c87d
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49c84a
push 0
push 0
push dword [esp + 0x60]
mov edx, 0x88
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49c87d
mov edx, dword [esp + 0x58]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x88
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x94]
push eax
push edi
push dword [esp + 0x5c]
mov edi, dword [esp + 0x1c]
mov edx, edi
call fcn.0049abf0
mov dword [esp + 0x5c], eax
add esp, 0xc
mov eax, dword [esp + 0x94]
test eax, eax
je 0x49c918
cmp word [esp + 0x44], 0
je 0x49c918
add eax, dword [esp + 0x5c]
jne 0x49c8c1
xor edx, edx
mov dword [esp + 0x40], edx
jmp 0x49c918
mov ecx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x49c8c6
mov eax, dword [esp + 0x64]
sub ecx, edx
push 0
lea edi, [ecx + 1]
push edi
test eax, eax
je 0x49c8ec
mov ecx, eax
call fcn.00413890
mov edx, eax
mov dword [esp + 0x48], edx
jmp 0x49c8f7
call fcn.00413230
mov edx, eax
mov dword [esp + 0x48], eax
add esp, 8
test edx, edx
je 0x49c914
mov eax, dword [esp + 0x5c]
add eax, dword [esp + 0x94]
push edi
push eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edi, dword [esp + 0x10]
cmp dword [esp + 0x3c], 0
je 0x49c924
mov eax, dword [edi + 0x28]
jmp 0x49c927
mov eax, dword [edi + 0x10]
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x4c], eax
test ecx, ecx
je 0x49c944
test byte [ecx + 0xc], 0x28
mov dword [esp + 0x88], 0
je 0x49c94f
mov dword [esp + 0x88], 1
mov eax, dword [esp + 0x20]
test eax, eax
je 0x49c965
test byte [eax + 0xc], 0x28
mov dword [esp + 0x18], 0
je 0x49c96d
mov dword [esp + 0x18], 1
test ecx, ecx
jne 0x49c9ab
mov eax, dword [esp + 0x1c]
test ax, ax
jne 0x49c9ab
mov dword [esp + 0x1c], ecx
movzx edx, ax
mov al, byte [esp + 0x17]
mov edi, edx
mov dword [esp + 0x28], edi
test al, al
je 0x49cb36
mov edx, dword [esp + 0x60]
add edx, dword [esp + 0x50]
mov dword [esp + 0x88], 0
jmp 0x49cb4b
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x28], edx
test ecx, ecx
je 0x49c981
mov eax, dword [ecx]
mov edi, dword [eax + 0x10]
mov eax, dword [esp + 0x84]
movzx ecx, ax
mov eax, dword [esp + 0x50]
add eax, edx
mov dword [esp + 0x48], edi
push ecx
mov ecx, dword [esp + 0x10]
mov edx, edi
push eax
call fcn.0049b280
mov eax, dword [esp + 0x70]
add esp, 8
movzx eax, word [eax + 0xa]
mov ecx, eax
test eax, 0x100
je 0x49ca47
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x49ca0d
mov edx, 0x5160e4
mov ecx, 0x5160da
jmp 0x49ca25
mov eax, dword [esi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
lea edx, [ecx - 2]
lea ecx, [ecx*4 - 0x12]
add ecx, eax
lea edx, [eax + edx*4]
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0x10]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [ecx], ax
mov eax, dword [esp + 0x68]
movzx ecx, word [eax + 0xa]
test cl, cl
js 0x49cab5
mov ecx, edi
call fcn.00450610
test eax, eax
je 0x49cab5
mov edx, dword [esp + 0x5c]
mov ecx, dword [esi + 0x6c]
add edx, dword [esp + 0x50]
cmp dword [esi + 0x70], ecx
jg 0x49ca7e
push 0
push dword [esp + 0x50]
mov ecx, esi
push edx
mov edx, 0x32
call fcn.00437140
add esp, 0xc
jmp 0x49cab5
mov edi, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x94]
test eax, eax
je 0x49cad9
add eax, dword [esp + 0x5c]
mov ecx, edi
push eax
mov eax, dword [esp + 0x88]
movzx edx, ax
call fcn.0049a1a0
add esp, 4
mov ecx, dword [esp + 0x84]
movzx eax, cx
add dword [esp + 0x28], eax
mov al, byte [edi]
cmp al, 0xb0
jne 0x49caf0
mov al, byte [edi + 2]
cmp al, 0xb1
jne 0x49caf9
mov eax, dword [edi + 0x14]
jmp 0x49cb03
cmp al, 0x8a
jne 0x49cb1e
mov eax, dword [edi + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x49cb1e
mov edi, dword [esp + 0x28]
xor al, al
mov dword [esp + 0x88], 1
jmp 0x49cbb5
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x10]
call fcn.0049a080
mov edi, dword [esp + 0x28]
xor al, al
jmp 0x49cbb5
cmp dword [esp + 0x3c], 0
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x5c], ecx
je 0x49cbb5
mov edx, dword [esp + 0x50]
add edx, ecx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49cb69
push 0
push edx
push 0
mov edx, 0x4b
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49cb9c
mov edi, dword [esp + 0x28]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 4], 0
mov eax, dword [esp + 0x60]
inc edi
mov dword [esp + 0x5c], eax
mov al, byte [esp + 0x17]
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], 1
push dword [esp + 0x94]
mov edx, dword [esp + 0x54]
movzx ecx, al
mov eax, edi
sub eax, ecx
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x10]
push eax
call fcn.0049a0f0
mov eax, dword [esp + 0x34]
add esp, 8
movzx eax, word [eax + 0x32]
test ax, ax
je 0x49cbed
cmp edi, eax
je 0x49cf5f
mov edx, dword [esp + 0x3c]
test edx, edx
je 0x49cc42
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49cc13
push 0
push edx
push 1
mov edx, 0x47
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49cc42
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 0x34]
test edi, edi
je 0x49cce1
mov edx, dword [esi + 0x6c]
cmp dword [esi + 0x70], edx
jg 0x49cc75
push dword [esp + 0x50]
mov edx, 0x40
mov ecx, esi
push dword [esp + 0x50]
push edi
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49cca8
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x4c]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x50]
mov dword [eax + ecx*4], 0x40
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edi, dword [esp + 0x4c]
cmp byte [eax + 0x57], 0
jne 0x49ccc7
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x5c]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
push dword [ebp + 0x18]
mov edx, dword [esp + 0x70]
push dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push edi
push dword [ebp + 0xc]
call fcn.0049b3f0
add esp, 0x10
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x88]
lea eax, [ecx + eax*2]
mov ecx, dword [esp + 0x54]
mov al, byte [ecx + eax*2 + 0x4fae10]
mov ecx, dword [esp + 0x2c]
mov byte [esp + 0x17], al
movzx eax, al
mov dword [esp + 0x1c], eax
test dword [ecx + 0x2c], 0x100000
je 0x49cde8
cmp eax, 0x17
jne 0x49cde8
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 8]
movsx ecx, word [eax]
mov eax, 0x66666667
add ecx, 9
imul ecx
sar edx, 2
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x34], edx
cmp dword [esi + 0x70], edx
jg 0x49cd65
push 0
push 0
push edi
mov edx, 0x7c
mov ecx, esi
call fcn.00437140
mov edi, eax
add esp, 0xc
mov dword [esp + 0x34], edi
jmp 0x49cd98
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x7c
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x68], 0
jne 0x49cda6
cmp dword [esp + 0x20], 0
je 0x49cde4
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x49cdc0
lea ecx, [eax + eax*4]
mov edx, 1
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov eax, dword [esi + 0x6c]
lea edx, [eax + 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x49cdd2
mov eax, 0x5160d8
jmp 0x49cddb
mov eax, dword [esi + 0x68]
lea ecx, [edi + edi*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x1c]
mov edx, dword [esi + 0x6c]
cmp dword [esi + 0x70], edx
jg 0x49ce0c
push dword [esp + 0x50]
mov edx, eax
mov ecx, esi
push dword [esp + 0x50]
push dword [esp + 0x60]
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49ce49
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x17]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
mov edi, dword [esp + 0x28]
cmp byte [eax + 0x57], 0
jne 0x49ce64
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x49cf63
mov ecx, dword [esi + 0x6c]
lea edx, [ecx + 2]
cmp dword [esi + 0x70], ecx
jg 0x49ce91
push 0
push edx
push 0
mov edx, 9
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49cec4
mov edi, dword [esp + 0x28]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x54]
mov eax, 1
mov edx, dword [esi + 0x6c]
cmp eax, edi
sbb eax, eax
and eax, 4
mov al, byte [eax + ecx + 0x4fae12]
mov byte [esp + 0x17], al
cmp dword [esi + 0x70], edx
jg 0x49cf04
push dword [esp + 0x50]
movzx edx, al
mov ecx, esi
push dword [esp + 0x50]
push dword [esp + 0x60]
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49cf41
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x17]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49cf5f
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
sub edi, dword [esp + 0x88]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x5c]
mov edi, edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x1c], edi
test eax, eax
je 0x49d0fa
mov eax, dword [eax]
mov edi, dword [eax + 0x10]
mov eax, dword [esp + 0x44]
movzx ecx, ax
mov eax, dword [esp + 0x50]
add eax, edx
mov dword [esp + 0x48], edi
push ecx
mov ecx, dword [esp + 0x10]
mov edx, edi
push eax
call fcn.0049b280
mov eax, dword [esp + 0x28]
add esp, 8
movzx eax, word [eax + 0xa]
mov ecx, eax
test eax, 0x100
je 0x49cffe
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x49cfc4
mov edx, 0x5160e4
mov ecx, 0x5160da
jmp 0x49cfdc
mov eax, dword [esi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
lea edx, [ecx - 2]
lea ecx, [ecx*4 - 0x12]
add ecx, eax
lea edx, [eax + edx*4]
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0x10]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [ecx], ax
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + 0xa]
test cl, cl
js 0x49d06c
mov ecx, edi
call fcn.00450610
test eax, eax
je 0x49d06c
mov edx, dword [esp + 0x5c]
mov ecx, dword [esi + 0x6c]
add edx, dword [esp + 0x50]
cmp dword [esi + 0x70], ecx
jg 0x49d035
push 0
push dword [esp + 0x50]
mov ecx, esi
push edx
mov edx, 0x32
call fcn.00437140
add esp, 0xc
jmp 0x49d06c
mov edi, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x40]
test eax, eax
je 0x49d0aa
push eax
mov eax, dword [esp + 0x48]
mov ecx, edi
movzx edx, ax
call fcn.0049a1a0
mov eax, dword [esp + 0x44]
add esp, 4
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x5c]
push eax
movzx eax, dx
mov edx, dword [esp + 0x54]
push eax
lea edx, [ecx + edx]
mov ecx, dword [esp + 0x14]
call fcn.0049a0f0
add esp, 8
mov ecx, dword [esp + 0x44]
movzx eax, cx
add dword [esp + 0x1c], eax
mov al, byte [edi]
cmp al, 0xb0
jne 0x49d0be
mov al, byte [edi + 2]
cmp al, 0xb1
jne 0x49d0c7
mov eax, dword [edi + 0x14]
jmp 0x49d0d1
cmp al, 0x8a
jne 0x49d0e7
mov eax, dword [edi + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x49d0e7
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x18], 1
jmp 0x49d163
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
call fcn.0049a080
mov edi, dword [esp + 0x1c]
jmp 0x49d163
cmp byte [esp + 0x27], 0
je 0x49d163
test ecx, ecx
jne 0x49d162
add edx, dword [esp + 0x50]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49d127
push 0
push edx
push 0
mov edx, 0x4b
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49d15a
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [esp + 0x18], 0
inc edi
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x64]
test ecx, ecx
je 0x49d1cd
cmp ecx, dword [edx + 0x164]
jae 0x49d1aa
cmp ecx, dword [edx + 0x15c]
jb 0x49d192
mov eax, dword [edx + 0x158]
mov dword [ecx], eax
mov dword [edx + 0x158], ecx
jmp 0x49d1cd
cmp ecx, dword [edx + 0x160]
jb 0x49d1aa
mov eax, dword [edx + 0x150]
mov dword [ecx], eax
mov dword [edx + 0x150], ecx
jmp 0x49d1cd
cmp dword [edx + 0x210], 0
je 0x49d1c0
mov edx, ecx
mov ecx, dword [esp + 0x64]
call fcn.004134c0
jmp 0x49d1c9
push ecx
call fcn.00413450
add esp, 4
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x49d22c
cmp ecx, dword [edx + 0x164]
jae 0x49d20d
cmp ecx, dword [edx + 0x15c]
jb 0x49d1f5
mov eax, dword [edx + 0x158]
mov dword [ecx], eax
mov dword [edx + 0x158], ecx
jmp 0x49d22c
cmp ecx, dword [edx + 0x160]
jb 0x49d20d
mov eax, dword [edx + 0x150]
mov dword [ecx], eax
mov dword [edx + 0x150], ecx
jmp 0x49d22c
cmp dword [edx + 0x210], 0
je 0x49d223
mov edx, ecx
mov ecx, dword [esp + 0x64]
call fcn.004134c0
jmp 0x49d22c
push ecx
call fcn.00413450
add esp, 4
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x6c]
mov dword [ecx + 0x44], eax
test edi, edi
je 0x49d34b
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x49d299
mov ecx, dword [esi + 0x6c]
lea edx, [ecx + 3]
cmp dword [esi + 0x70], ecx
jg 0x49d266
push 0
push edx
push eax
mov edx, 0x11
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49d299
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x11
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x54]
mov edx, dword [esi + 0x6c]
mov al, byte [eax + ecx*2 + 0x4fd254]
mov byte [esp + 0x27], al
cmp dword [esi + 0x70], edx
jg 0x49d2d1
push dword [esp + 0x50]
movzx edx, al
mov ecx, esi
push dword [esp + 0x50]
push dword [esp + 0x60]
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49d30e
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x27]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49d325
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x49d34b
mov eax, dword [esi]
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x49d33f
mov eax, 0x5160d8
jmp 0x49d348
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x49d43e
mov ecx, dword [esi + 0x6c]
lea edx, [ecx + 2]
cmp dword [esi + 0x70], ecx
jg 0x49d377
push 0
push edx
push eax
mov edx, 0x10
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49d3aa
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x10
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x54]
mov edx, dword [esi + 0x6c]
mov al, byte [eax + ecx*2 + 0x4fd254]
mov byte [esp + 0x27], al
cmp dword [esi + 0x70], edx
jg 0x49d3e2
push dword [esp + 0x50]
movzx edx, al
mov ecx, esi
push dword [esp + 0x50]
push dword [esp + 0x60]
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49d41f
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x27]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49d43e
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x60]
add eax, edi
mov dword [ecx + 0x10], eax
mov edi, dword [esp + 0x2c]
test dword [edi + 0x2c], 0x40000
je 0x49d49d
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49d46e
mov eax, dword [esp + 0x5c]
mov edx, 0x7d
push eax
push eax
push dword [esp + 0x60]
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49d49d
mov edx, dword [esp + 0x58]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x5c]
mov dword [eax + ecx*4], 0x7d
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
test byte [edi + 0x2c], 0x40
mov eax, dword [esp + 0x6c]
je 0x49d502
mov ecx, 0x1020
test word [eax + 0x28], cx
jne 0x49d502
mov dword [esp + 0x60], 1
mov edi, dword [esp + 0x58]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x10]
cmp dword [edx], 0
jne 0x49d4e8
mov ecx, dword [esp + 0x70]
mov ecx, dword [ecx + 0x24]
test ecx, ecx
je 0x49d4e8
push dword [esp + 0x74]
mov edx, eax
call fcn.0049b370
mov edx, dword [esp + 0x14]
add esp, 4
mov ecx, dword [esp + 0x2c]
test dword [ecx + 0x2c], 0x1000
je 0x49d73e
mov byte [edx + 0x3d], 0xb8
jmp 0x49d74b
mov edx, dword [esp + 0x70]
mov dword [esp + 0x60], 0
mov edi, dword [edx + 0xc]
test byte [edi + 0x1c], 0x80
jne 0x49d52c
mov edi, dword [esp + 0x58]
mov ecx, eax
push edi
push dword [esp + 0x3c]
call fcn.0049b100
add esp, 8
jmp 0x49d4be
mov eax, dword [esp + 0x38]
cmp eax, dword [esp + 0x58]
je 0x49d735
mov edi, dword [edi + 8]
test edi, edi
je 0x49d551
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x49d551
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x49d541
movzx ecx, word [edi + 0x32]
cmp ecx, 1
jne 0x49d586
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x49d571
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x40], eax
jmp 0x49d5c9
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0xa0]
mov dword [esp + 0x40], eax
jmp 0x49d5c9
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x20]
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x40], eax
cmp ecx, edx
jg 0x49d5ae
mov esi, dword [esp + 0xc]
add eax, ecx
sub edx, ecx
mov dword [esi + 0x20], eax
mov eax, esi
mov esi, dword [esp + 0x30]
mov dword [eax + 0x1c], edx
jmp 0x49d5c5
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x40], edx
mov dword [ecx + 0x2c], eax
mov edx, dword [esp + 0x70]
movzx eax, word [edi + 0x32]
mov dword [esp + 0x48], 0
mov ecx, eax
mov dword [esp + 0x1c], 0
cmp word [esp + 0x48], ax
jae 0x49d6ae
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
jmp 0x49d5f8
mov edx, dword [esp + 0x70]
movzx edx, word [edx + 0x34]
xor ecx, ecx
test edx, edx
je 0x49d635
mov eax, dword [edi + 4]
mov esi, dword [esp + 0x1c]
movzx eax, word [eax + esi*2]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 4]
nop dword [eax + eax]
mov esi, dword [esp + 0x48]
cmp si, word [eax]
mov esi, dword [esp + 0x30]
je 0x49d65d
inc ecx
add eax, 2
cmp ecx, edx
jl 0x49d620
or eax, 0xffffffff
mov ecx, dword [esi + 0x6c]
movsx edx, ax
cmp dword [esi + 0x70], ecx
jg 0x49d662
push dword [esp + 0x18]
mov ecx, esi
push edx
push dword [esp + 0x60]
mov edx, 0x5e
call fcn.00437140
add esp, 0xc
jmp 0x49d695
movzx eax, cx
jmp 0x49d638
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x18]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x1c]
movzx ecx, word [edi + 0x32]
inc edx
inc dword [esp + 0x18]
mov dword [esp + 0x1c], edx
cmp edx, ecx
jl 0x49d5f4
mov edx, dword [esi + 0x6c]
movzx edi, cx
cmp dword [esi + 0x70], edx
jg 0x49d6db
push dword [esp + 0x40]
mov edx, 0x1c
mov ecx, esi
push dword [esp + 0xa0]
push dword [esp + 0x40]
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49d715
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x9c]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x40]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x1c
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49d4ba
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x49d4ba
mov edi, dword [esp + 0x58]
jmp 0x49d4c2
cmp dword [esp + 0x54], 0
sete al
add al, 0x26
mov byte [edx + 0x3d], al
mov dword [edx + 0x40], edi
mov al, byte [ecx + 0x2e]
and al, 1
mov byte [edx + 0x3e], al
test byte [ecx + 0x2c], 0xf
jne 0x49d760
mov byte [edx + 0x3f], 1
cmp dword [esp + 0x60], 0
je 0x49e477
xor eax, eax
mov dword [esp + 0x70], eax
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
test edx, 0x2000
je 0x49e393
mov ecx, dword [esp + 0xc]
xor edx, edx
mov dword [esp + 0x88], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x20], 0
mov eax, dword [ecx + 0x28]
dec dword [ecx + 0x38]
inc dword [ecx + 0x2c]
mov edi, dword [ecx + 0x2c]
mov dword [esp + 0x8c], eax
inc eax
mov dword [ecx + 0x28], eax
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x5c], 0
mov dword [esp + 0x4c], edx
mov ecx, dword [eax + 0x10]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x94], ecx
mov eax, dword [eax + 0x38]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x10]
mov dword [eax + 0x40], edi
mov edi, dword [esp + 0x6c]
mov byte [eax + 0x3d], 0x43
mov al, byte [edi + 0x2c]
cmp al, 1
jbe 0x49d94e
mov ecx, dword [esp + 0x64]
movzx eax, al
sub eax, dword [ebp + 0xc]
dec eax
mov dword [esp + 0x18], eax
push edx
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
call fcn.00413890
mov ecx, eax
add esp, 8
mov dword [esp + 0x84], ecx
test ecx, ecx
jne 0x49d868
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x18]
pop edi
pop esi
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.004f1f57
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x18]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [esp + 0x90]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
movq qword [ecx + 0x48], xmm0
mov eax, dword [edi + 4]
add eax, 8
cmp edx, 1
jl 0x49d908
mov edi, dword [esp + 0x10]
add ecx, 0x50
add edi, 0x9c
mov esi, eax
movzx eax, byte [edi]
lea edi, [edi + 0x60]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [esi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [esi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x49d8c1
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x6c]
mov ecx, dword [esp + 0x94]
test byte [edi + 0x28], 0x10
jne 0x49da5f
test byte [ecx + 0x1c], 0x80
jne 0x49d98e
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov ecx, dword [esi + 0x6c]
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x28], edx
cmp dword [esi + 0x70], ecx
jg 0x49d95a
push 0
push edx
push 0
mov edx, 0x4b
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49da51
mov eax, dword [edi + 4]
mov dword [esp + 0x84], eax
jmp 0x49d90f
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x49da51
mov edi, dword [ecx + 8]
test edi, edi
je 0x49d9a5
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x49d9a5
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x49d995
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x28], eax
inc eax
mov dword [ecx + 0x28], eax
mov ecx, dword [esi + 0x6c]
movzx edx, word [edi + 0x32]
cmp dword [esi + 0x70], ecx
jg 0x49d9d8
push 0
push edx
push dword [esp + 0x30]
mov edx, 0x76
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49da0b
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x28]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x76
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0xc]
mov edx, edi
mov eax, dword [ecx + 8]
mov dword [esp + 0x18], eax
call fcn.00468e70
mov edi, eax
test edi, edi
je 0x49da51
mov edx, dword [esp + 0x18]
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
je 0x49da3f
push edi
mov edx, 0xfffffff8
call fcn.00437b50
add esp, 4
jmp 0x49da51
mov eax, dword [edx + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x68]
mov byte [eax + ecx*4 - 0x13], 0xf8
mov dword [eax + ecx*4 - 4], edi
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x20], eax
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x2c], edx
cmp dword [esi + 0x70], edx
jg 0x49da88
push 0
push dword [esp + 0x20]
mov edx, 0x47
mov ecx, esi
push 0
call fcn.00437140
add esp, 0xc
mov dword [esp + 0x2c], eax
jmp 0x49dabb
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov edx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x74]
cmp dword [eax + 0xc], 1
jle 0x49dbc6
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x18], ecx
xor esi, esi
mov eax, dword [eax + 0x18]
add eax, edi
mov edx, dword [eax]
cmp eax, dword [esp + 0x48]
je 0x49db2d
mov esi, 0x8006
test word [eax + 0xa], si
mov esi, dword [esp + 0x4c]
jne 0x49db2d
mov ecx, 0x3fff
test word [eax + 0xc], cx
mov ecx, dword [esp + 0x18]
je 0x49db2d
test dword [edx + 4], 0x400000
jne 0x49db2d
mov ecx, dword [esp + 0x64]
push 0
push 0
call fcn.0044efb0
mov ecx, dword [esp + 0x14]
mov edx, esi
push eax
call fcn.0044e8d0
mov ecx, dword [esp + 0x24]
mov esi, eax
add esp, 0xc
mov dword [esp + 0x4c], esi
mov eax, dword [esp + 0x74]
inc ecx
add edi, 0x30
mov dword [esp + 0x18], ecx
cmp ecx, dword [eax + 0xc]
jl 0x49dad3
test esi, esi
mov esi, dword [esp + 0x30]
je 0x49dbc6
mov eax, dword [esp + 0xc]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.00413890
mov edi, eax
add esp, 8
test edi, edi
je 0x49dbb3
push 0x34
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x58]
or eax, 0xffffffff
mov word [edi + 0x22], ax
add esp, 0xc
mov dword [edi + 0x10], edx
mov byte [edi], 0x2c
mov eax, dword [edx + 4]
and eax, 0x400208
or dword [edi + 4], eax
mov ecx, dword [edx + 0x18]
mov edx, dword [esp + 0xc]
inc ecx
mov dword [edi + 0x18], ecx
mov eax, dword [edx]
mov eax, dword [eax + 0x84]
cmp ecx, eax
jle 0x49dbc2
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push edx
call fcn.00417860
add esp, 0xc
jmp 0x49dbc2
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x4c]
mov ecx, dword [eax]
call fcn.0044ed80
mov dword [esp + 0x4c], edi
mov edi, dword [esp + 0xc]
push str.MULTI_INDEX_OR
push 1
push edi
call fcn.00437550
mov edx, dword [esp + 0x6c]
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x54], ecx
cmp dword [edx + 0xc], ecx
jle 0x49dc68
nop dword [eax]
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [edx + 0x18]
mov edx, dword [esp + 0x38]
cmp dword [eax + 0x14], edx
je 0x49dc0d
mov edx, 0x400
test word [eax + 0xc], dx
je 0x49dc58
mov edx, dword [eax]
mov dword [esp + 0x34], 0
test edx, edx
je 0x49dc33
mov ecx, dword [esp + 0x64]
push 0
push 0
call fcn.0044efb0
mov ecx, dword [esp + 0x5c]
add esp, 8
mov edi, eax
jmp 0x49dc35
xor edi, edi
mov eax, dword [esp + 0x64]
mov dword [esp + 0x78], edi
cmp byte [eax + 0x57], 0
je 0x49dc7d
test edi, edi
je 0x49dc54
mov edx, edi
mov ecx, eax
call fcn.0044ed80
mov ecx, dword [esp + 0x54]
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x60]
inc ecx
mov dword [esp + 0x54], ecx
mov edx, eax
cmp ecx, dword [eax + 0xc]
jl 0x49dbf0
mov ecx, dword [edi + 0xe4]
test ecx, ecx
jne 0x49e1ed
xor eax, eax
jmp 0x49e20b
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x49dc8a
mov dword [eax + 0xc], edi
mov edi, eax
lea eax, [ecx + 1]
push eax
push str.INDEX__d
push 1
push dword [esp + 0x18]
call fcn.00437550
push dword [esp + 0x9c]
mov edx, dword [esp + 0x98]
mov ecx, dword [esp + 0x20]
push 0x20
push 0
push 0
push 0
push edi
call fcn.004a9280
mov edi, eax
add esp, 0x28
mov dword [esp + 0x3c], edi
test edi, edi
je 0x49e1cd
mov edx, dword [esp + 0x84]
lea ecx, [edi + 0x2f8]
push 0
push ecx
mov ecx, dword [esp + 0x14]
call fcn.00499af0
mov eax, dword [esp + 0x74]
add esp, 8
test byte [eax + 0x28], 0x10
jne 0x49e07c
mov eax, dword [esp + 0x60]
mov edi, dword [esp + 0x54]
mov eax, dword [eax + 0xc]
dec eax
cmp edi, eax
mov eax, 0xffffffff
cmove edi, eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x18], edi
test byte [eax + 0x1c], 0x80
jne 0x49ddfe
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49dd47
push 0
push dword [esp + 0x24]
mov edx, 0x87
mov ecx, esi
push dword [esp + 0x40]
call fcn.00437140
add esp, 0xc
jmp 0x49dd7a
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x34], edx
cmp dword [esi + 0x70], edx
jg 0x49dda7
push dword [esp + 0x20]
mov edx, 0x2f
mov ecx, esi
push 0
push dword [esp + 0x30]
call fcn.00437140
mov edx, eax
add esp, 0xc
mov dword [esp + 0x34], edx
jmp 0x49ddde
mov edi, dword [esp + 0x28]
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x2f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49e078
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x49e078
mov ecx, eax
call fcn.004611b0
mov edx, eax
mov dword [esp + 0x58], edx
movzx ecx, word [edx + 0x32]
mov edi, ecx
mov eax, ecx
mov dword [esp + 0x50], eax
mov dword [esp + 0x44], edi
cmp edi, 1
jne 0x49de4c
mov edi, dword [esp + 0xc]
mov cl, byte [edi + 0x13]
test cl, cl
jne 0x49de37
inc dword [edi + 0x2c]
mov eax, dword [edi + 0x2c]
mov dword [esp + 0x68], eax
jmp 0x49de8f
dec cl
movzx eax, cl
mov byte [edi + 0x13], cl
mov eax, dword [edi + eax*4 + 0xa0]
mov dword [esp + 0x68], eax
jmp 0x49de8f
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x20]
mov dword [esp + 0x68], edx
cmp edi, ecx
jg 0x49de6f
lea eax, [edx + edi]
sub ecx, edi
mov edx, dword [esp + 0xc]
mov dword [edx + 0x20], eax
mov dword [edx + 0x1c], ecx
jmp 0x49de82
mov eax, dword [eax + 0x2c]
lea ecx, [eax + 1]
add eax, edi
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x2c], eax
xor eax, eax
cmp ax, word [esp + 0x50]
jae 0x49dec0
mov edx, dword [esp + 0x58]
xor edi, edi
mov eax, dword [esp + 0x68]
mov ecx, esi
add eax, edi
push eax
mov eax, dword [edx + 4]
mov edx, dword [esp + 0x98]
movsx eax, word [eax + edi*2]
push eax
push dword [esp + 0x40]
call fcn.004536c0
mov edx, dword [esp + 0x64]
inc edi
add esp, 0xc
cmp edi, dword [esp + 0x44]
jl 0x49de91
cmp dword [esp + 0x18], 0
je 0x49df5a
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x34], edx
cmp dword [esi + 0x70], edx
jg 0x49def9
mov edi, dword [esp + 0x68]
mov edx, 0x1d
push edi
push 0
push dword [esp + 0x30]
mov ecx, esi
call fcn.00437140
mov edx, eax
add esp, 0xc
mov dword [esp + 0x34], edx
jmp 0x49df2c
mov edi, dword [esp + 0x28]
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x68]
mov dword [eax + ecx*4], 0x1d
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49df49
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x44]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x49df4d
mov edx, dword [esp + 0x44]
cmp dword [esp + 0x18], 0
jl 0x49e03f
jmp 0x49df5e
mov edx, dword [esp + 0x44]
mov ecx, dword [esi + 0x6c]
mov edi, dword [esp + 0x68]
cmp dword [esi + 0x70], ecx
jg 0x49df84
push dword [esp + 0x20]
mov edx, 0x61
mov ecx, esi
push dword [esp + 0x48]
push edi
call fcn.00437140
add esp, 0xc
jmp 0x49dfaf
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x6c]
cmp dword [esi + 0x70], edx
jg 0x49dfd3
push edi
push dword [esp + 0x24]
mov edx, 0x8a
mov ecx, esi
push dword [esp + 0x30]
call fcn.00437140
add esp, 0xc
mov edx, eax
jmp 0x49e006
mov edi, dword [esp + 0x28]
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x68]
mov dword [eax + ecx*4], 0x8a
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49e021
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x44]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
cmp dword [esp + 0x18], 0
je 0x49e03f
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x49e03f
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp word [esp + 0x50], 1
jne 0x49e065
test edi, edi
je 0x49e078
mov edx, dword [esp + 0xc]
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x49e078
movzx eax, al
mov dword [edx + eax*4 + 0xa0], edi
inc byte [edx + 0x13]
jmp 0x49e078
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x44]
cmp eax, dword [edx + 0x1c]
jle 0x49e078
mov dword [edx + 0x1c], eax
mov dword [edx + 0x20], edi
mov edi, dword [esp + 0x3c]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49e09f
push 0
push dword [esp + 0x44]
mov edx, 0xa
mov ecx, esi
push dword [esp + 0x24]
call fcn.00437140
add esp, 0xc
jmp 0x49e0d2
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x49e0f8
mov eax, dword [esi]
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x49e0ec
mov eax, 0x5160d8
jmp 0x49e0f5
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [edi + 0x30]
mov edx, 1
mov ecx, dword [esp + 0x5c]
test al, 2
cmovne ecx, edx
mov edx, dword [edi + 0x348]
mov dword [esp + 0x5c], ecx
mov ecx, eax
test dword [edx + 0x2c], 0x200
je 0x49e159
cmp dword [esp + 0x54], 0
je 0x49e135
mov edi, dword [esp + 0x88]
cmp dword [edx + 0x20], edi
mov edi, dword [esp + 0x3c]
jne 0x49e159
mov esi, dword [esp + 0x94]
test byte [esi + 0x1c], 0x80
mov esi, dword [esp + 0x30]
je 0x49e190
mov edx, dword [edx + 0x20]
mov dword [esp + 0x88], edx
mov eax, dword [edx + 0x38]
and al, 3
cmp al, 2
jne 0x49e164
mov dword [esp + 0x88], 0
test cl, 1
je 0x49e171
mov eax, dword [esp + 0x6c]
or dword [eax + 0x30], 1
mov ecx, edi
call fcn.004aa240
mov edi, dword [esp + 0xc]
mov ecx, dword [edi + 0xe4]
test ecx, ecx
jne 0x49e19e
xor eax, eax
mov dword [edi + 0xe4], eax
jmp 0x49e1d1
mov ecx, eax
mov eax, dword [edx + 0x20]
mov dword [esp + 0x88], eax
jmp 0x49e164
mov edx, dword [edi + 8]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x49e1b9
mov eax, 0x5160d8
mov eax, dword [eax + 8]
mov dword [edi + 0xe4], eax
jmp 0x49e1d1
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [edi + 0xe4], eax
jmp 0x49e1d1
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x78]
test eax, eax
je 0x49e1e4
mov ecx, dword [esp + 0x64]
mov edx, eax
call fcn.0044ed80
mov ecx, dword [esp + 0x54]
jmp 0x49dc58
mov edx, dword [edi + 8]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x49e1ff
mov eax, 0x5160d8
jmp 0x49e208
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x10]
mov dword [edi + 0xe4], eax
mov eax, dword [esp + 0x88]
mov dword [ecx + 0x48], eax
test eax, eax
je 0x49e22d
mov eax, dword [esp + 0x8c]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x4c]
mov edi, dword [esp + 0x64]
test eax, eax
je 0x49e249
mov edx, eax
mov dword [eax + 0xc], 0
mov ecx, edi
call fcn.0044ed80
mov eax, dword [esi]
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x49e25b
mov eax, 0x5160d8
jmp 0x49e268
mov eax, dword [esp + 0x2c]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x6c]
mov edx, dword [eax + 0xc]
cmp dword [esi + 0x70], ecx
jg 0x49e290
push 0
push edx
push 0
mov edx, 9
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49e2c3
mov edi, dword [esp + 0x64]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x40]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49e2e1
push edx
mov edx, esi
call fcn.004376f0
add esp, 4
jmp 0x49e2ea
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edx*4], eax
mov edx, dword [esp + 0x10]
mov eax, dword [esi + 0x6c]
mov dword [edx + 0x44], eax
mov eax, dword [esp + 0x6c]
cmp byte [eax + 0x2c], 1
jbe 0x49e362
mov ecx, dword [esp + 0x84]
test edi, edi
je 0x49e355
cmp ecx, dword [edi + 0x164]
jae 0x49e341
cmp ecx, dword [edi + 0x15c]
jb 0x49e329
mov eax, dword [edi + 0x158]
mov dword [ecx], eax
mov dword [edi + 0x158], ecx
jmp 0x49e362
cmp ecx, dword [edi + 0x160]
jb 0x49e341
mov eax, dword [edi + 0x150]
mov dword [ecx], eax
mov dword [edi + 0x150], ecx
jmp 0x49e362
cmp dword [edi + 0x210], 0
je 0x49e355
mov edx, ecx
mov ecx, edi
call fcn.004134c0
jmp 0x49e35e
push ecx
call fcn.00413450
add esp, 4
mov edx, dword [esp + 0x10]
cmp dword [esp + 0x5c], 0
jne 0x49bfbc
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x10]
call fcn.0049a080
mov edx, dword [esp + 0x10]
xor eax, eax
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0x10]
test byte [eax + 0x28], 0x40
je 0x49e3bd
xor eax, eax
mov byte [edx + 0x3d], 0xb8
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
mov ecx, dword [esp + 0x54]
movzx eax, byte [ecx + 0x4fbf5c]
mov byte [edx + 0x3d], al
mov eax, dword [esp + 0x38]
mov dword [edx + 0x40], eax
mov al, byte [ecx + 0x4f8890]
mov edx, dword [esi + 0x6c]
mov byte [esp + 0x27], al
cmp dword [esi + 0x70], edx
jg 0x49e41d
push 0
push edi
push dword [esp + 0x40]
movzx edx, al
mov ecx, esi
call fcn.00437140
mov edx, eax
add esp, 0xc
lea eax, [edx + 1]
mov edx, dword [esp + 0x10]
mov dword [edx + 0x44], eax
xor eax, eax
neg eax
mov byte [edx + 0x3f], 1
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x27]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
lea eax, [edx + 1]
mov edx, dword [esp + 0x10]
mov dword [edx + 0x44], eax
xor eax, eax
neg eax
mov byte [edx + 0x3f], 1
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
mov eax, dword [esp + 0x70]
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x8c], eax
jmp 0x49e494
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x74]
xor ecx, ecx
mov dword [esp + 0x20], ecx
mov edi, dword [eax + 0x18]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x48], eax
test eax, eax
jg 0x49e696
mov edx, dword [esp + 0x74]
mov dword [esp + 0x8c], ecx
test ecx, ecx
jg 0x49e490
mov eax, dword [edx + 0x14]
mov dword [esp + 0x40], eax
test eax, eax
jle 0x49e638
lea esi, [edi + 0xc]
mov edi, eax
test byte [esi - 2], 6
jne 0x49e624
movzx eax, word [esi]
mov edx, 0xb
test al, 0x82
setne cl
bt ax, dx
mov edx, dword [esp + 0x74]
setb al
test al, cl
je 0x49e624
mov ecx, dword [esp + 0x38]
cmp dword [esi + 8], ecx
jne 0x49e624
mov eax, dword [esp + 0x90]
test byte [eax + 0x24], 0x58
jne 0x49e624
mov eax, dword [esi - 0xc]
push 0
push 0x83
push dword [esi + 0xc]
mov dword [esp + 0x84], eax
push ecx
lea ecx, [esp + 0xf8]
mov dword [esp + 0x28], 0
call fcn.004a2620
mov edi, eax
add esp, 0x10
test edi, edi
je 0x49e58c
nop dword [eax]
mov edx, dword [edi + 0x20]
mov ecx, edx
mov eax, dword [edi + 0x24]
and ecx, dword [ebp + 0x14]
and eax, dword [ebp + 0x18]
or ecx, eax
jne 0x49e57a
or edx, dword [edi + 0x24]
jne 0x49e56d
test byte [edi + 0xc], 0x82
jne 0x49e590
mov eax, dword [esp + 0x18]
test eax, eax
cmove eax, edi
mov dword [esp + 0x18], eax
lea ecx, [esp + 0xe8]
call fcn.004a22d0
mov edi, eax
test edi, edi
jne 0x49e550
mov edi, dword [esp + 0x18]
test edi, edi
je 0x49e620
test byte [edi + 0xa], 4
jne 0x49e620
test byte [edi + 0xc], 1
je 0x49e5be
mov eax, dword [edi]
test dword [eax + 4], 0x1000
je 0x49e5be
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x49e620
mov eax, dword [edi]
push 0x10
push dword [esp + 0xa0]
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xa8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esp + 0xb8], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esp + 0xc8], xmm0
mov eax, dword [eax + 0x30]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x80]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xa8]
push eax
push dword [esp + 0x18]
call fcn.00456af0
add esp, 0x10
or word [edi + 0xa], 4
mov edi, dword [esp + 0x40]
dec edi
add esi, 0x30
mov dword [esp + 0x40], edi
test edi, edi
jg 0x49e4d3
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x18], eax
test eax, eax
je 0x49ece1
movzx eax, byte [ecx + 0x3c]
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*8 + 0x18]
mov dword [esp + 0x8c], eax
test byte [eax + 0x1c], 0x80
jne 0x49e9b9
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x1c]
mov edi, dword [edx + 0x20]
cmp ecx, 2
jl 0x49e937
lea eax, [edi + 2]
mov dword [edx + 0x20], eax
lea eax, [ecx - 2]
mov dword [edx + 0x1c], eax
jmp 0x49e943
mov edx, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x1c], eax
movzx eax, word [edi + 0xa]
test al, 6
jne 0x49e917
mov ecx, dword [edx + 0x58]
mov edx, dword [edx + 0x5c]
mov eax, dword [edi + 0x2c]
mov dword [esp + 0x60], ecx
and eax, edx
and ecx, dword [edi + 0x28]
or ecx, eax
mov dword [esp + 0x34], edx
je 0x49e6cf
mov eax, dword [esp + 0x6c]
or dword [eax + 0x30], 2
jmp 0x49e913
mov eax, dword [esp + 0x90]
mov edx, dword [edi]
mov dword [esp + 0x18], edx
mov al, byte [eax + 0x24]
test al, 0x58
je 0x49e779
mov ecx, dword [edx + 4]
test cl, 3
je 0x49e913
test al, 8
je 0x49e700
test cl, 1
je 0x49e913
mov ecx, dword [esp + 0x6c]
mov eax, dword [edx + 0x24]
cmp dword [ecx + 0x1f8], eax
jne 0x49e718
mov ecx, 1
xor edx, edx
jmp 0x49e761
mov edx, dword [ecx + 0x1f4]
mov eax, 1
mov dword [esp + 0x78], edx
cmp edx, eax
jle 0x49e750
add ecx, 0x1fc
mov edx, dword [esp + 0x18]
mov esi, dword [edx + 0x24]
cmp dword [ecx], esi
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x78]
je 0x49e804
inc eax
add ecx, 4
cmp eax, edx
jl 0x49e731
xorps xmm0, xmm0
movlpd qword [esp + 0x78], xmm0
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x60]
and eax, ecx
mov ecx, dword [esp + 0x34]
and ecx, edx
or eax, ecx
jne 0x49e913
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x8c]
cmp eax, 1
jne 0x49e81e
mov eax, dword [esp + 0x10]
xorps xmm0, xmm0
mov dword [esp + 0xa0], 0
movlpd qword [esp + 0xa8], xmm0
movlpd qword [esp + 0xb0], xmm0
mov eax, dword [eax + 4]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x94], eax
lea eax, [esp + 0x94]
mov dword [esp + 0xa4], 0x457910
mov dword [esp + 0xb8], eax
test edx, edx
je 0x49e7eb
lea ecx, [esp + 0xa0]
call fcn.0044a1e0
cmp word [esp + 0xb4], 0
je 0x49e823
mov ecx, 2
mov dword [esp + 0x20], ecx
jmp 0x49e917
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x49e761
cmp eax, 3
jge 0x49e848
movzx eax, word [edi + 0xa]
test eax, 0x1000
je 0x49e84c
mov ecx, dword [esp + 0x20]
test ecx, ecx
jne 0x49e917
mov ecx, 3
mov dword [esp + 0x20], ecx
jmp 0x49e917
movzx eax, word [edi + 0xa]
test eax, 0x200
je 0x49e8cf
mov eax, dword [esp + 0x10]
mov edx, dword [eax + 0x2c]
test edx, edx
je 0x49e8cf
mov ecx, dword [esi + 0x6c]
mov eax, edx
and edx, 1
shr eax, 1
or edx, 0x10
mov dword [esp + 0x78], eax
mov dword [esp + 0x1c], ecx
cmp dword [esi + 0x70], ecx
jg 0x49e895
push 0
push 0
push eax
mov ecx, esi
call fcn.00437140
add esp, 0xc
mov dword [esp + 0x1c], eax
jmp 0x49e8cf
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov dword [eax + 0x10], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x78]
mov dword [eax + 4], ecx
mov byte [eax + 1], 0
push 0x10
push dword [esp + 0xa0]
push dword [esp + 0x20]
push dword [esp + 0x18]
call fcn.00456af0
mov ecx, dword [esp + 0x2c]
add esp, 0x10
test ecx, ecx
je 0x49e90e
mov eax, dword [esi]
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x49e902
mov eax, 0x5160d8
jmp 0x49e90b
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [edi + 0xa], 4
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x48]
add edi, 0x30
dec eax
mov dword [esp + 0x48], eax
test eax, eax
jg 0x49e692
mov edx, dword [esp + 0x74]
mov edi, dword [edx + 0x18]
jmp 0x49e4b4
mov eax, dword [edx + 0x2c]
lea edi, [eax + 1]
add eax, 2
mov dword [edx + 0x2c], eax
mov eax, dword [esp + 0x10]
lea edx, [edi + 1]
mov ecx, dword [esi + 0x6c]
mov eax, dword [eax + 4]
mov dword [esp + 0x78], eax
cmp dword [esi + 0x70], ecx
jg 0x49e979
push 0
push edx
push eax
mov edx, 0x87
mov ecx, esi
call fcn.00437140
add esp, 0xc
mov dword [esp + 0x20], 1
jmp 0x49ea97
lea eax, [ecx + 1]
mov dword [esp + 0x20], 1
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x49ea97
mov edi, dword [eax + 8]
test edi, edi
je 0x49e9d0
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x49e9d0
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x49e9c0
movzx eax, word [edi + 0x32]
mov dword [esp + 0x20], eax
lea ecx, [eax + 1]
cmp ecx, 1
jne 0x49ea04
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x49e9f3
inc dword [ecx + 0x2c]
mov edx, dword [ecx + 0x2c]
jmp 0x49ea48
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0xa0]
jmp 0x49ea48
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x34], edx
mov dword [esp + 0x78], eax
cmp ecx, eax
jg 0x49ea35
mov esi, dword [esp + 0xc]
lea eax, [ecx + edx]
mov dword [esi + 0x20], eax
mov eax, dword [esp + 0x78]
sub eax, ecx
mov ecx, esi
mov esi, dword [esp + 0x30]
mov dword [ecx + 0x1c], eax
jmp 0x49ea4c
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x2c], eax
mov dword [esp + 0x34], edx
xor ecx, ecx
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x20], ecx
jbe 0x49ea93
lea eax, [edx + 1]
mov dword [esp + 0x78], eax
nop
mov edx, dword [esp + 0x8c]
add eax, ecx
push eax
mov eax, dword [edi + 4]
movsx eax, word [eax + ecx*2]
mov ecx, esi
push eax
push dword [esp + 0x40]
call fcn.004536c0
mov ecx, dword [esp + 0x54]
add esp, 0xc
mov eax, dword [esp + 0x78]
inc ecx
mov dword [esp + 0x48], ecx
cmp ecx, dword [esp + 0x20]
jl 0x49ea60
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
lea eax, [edi + 1]
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x1c], edx
mov ecx, dword [ecx]
mov dword [esp + 0x78], ecx
cmp dword [esi + 0x70], edx
jg 0x49eacb
push eax
push 0
push ecx
mov edx, 0x1d
mov ecx, esi
call fcn.00437140
mov edx, eax
add esp, 0xc
mov dword [esp + 0x1c], edx
jmp 0x49eb01
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov edx, dword [esp + 0x78]
mov dword [eax + ecx*4 + 4], edx
lea edx, [edi + 1]
mov dword [eax + ecx*4 + 0xc], edx
mov edx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x1d
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49eb1e
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x20]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x49eb22
mov edx, dword [esp + 0x20]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49eb41
push edi
push edx
lea eax, [edi + 1]
mov edx, 0x61
push eax
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49eb6f
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
lea esi, [edi + 1]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 0x6c]
mov dword [esp + 0x78], ecx
mov edx, dword [eax]
cmp dword [esi + 0x70], ecx
jg 0x49eb9a
lea eax, [edi + 1]
mov ecx, esi
push eax
push edi
push edx
mov edx, 0x8a
call fcn.00437140
add esp, 0xc
mov ecx, eax
jmp 0x49ebcc
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edx
lea edx, [edi + 1]
mov dword [eax + ecx*4], 0x8a
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x78]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x49ebe7
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x20]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 0x6c]
mov dword [esp + 0x78], ecx
mov edx, dword [eax + 4]
cmp dword [esi + 0x70], ecx
jg 0x49ec14
lea eax, [edi + 1]
mov ecx, esi
push eax
push 0
push edx
mov edx, 0xb4
call fcn.00437140
add esp, 0xc
mov ecx, eax
jmp 0x49ec4a
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], edx
lea edx, [edi + 1]
mov dword [eax + ecx*4], 0xb4
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x78]
mov eax, dword [esi]
mov edx, dword [esp + 0x20]
cmp byte [eax + 0x57], 0
jne 0x49ec65
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
mov ecx, dword [esi + 0x6c]
mov dword [esp + 0x48], ecx
test ecx, ecx
jle 0x49ec8b
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
mov edx, 0x10
mov word [eax + ecx*4 - 0x12], dx
mov eax, dword [esi + 0x6c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x48], eax
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x49ec9a
mov ecx, 0x5160d8
jmp 0x49eca7
mov eax, dword [esp + 0x1c]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x48]
inc edx
mov dword [ecx + 8], eax
cmp edx, 1
jne 0x49ecd2
test edi, edi
je 0x49ece1
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x49ece1
movzx eax, al
mov dword [ecx + eax*4 + 0xa0], edi
inc byte [ecx + 0x13]
jmp 0x49ece1
mov ecx, dword [esp + 0xc]
cmp edx, dword [ecx + 0x1c]
jle 0x49ece1
mov dword [ecx + 0x1c], edx
mov dword [ecx + 0x20], edi
mov eax, dword [esp + 0x10]
mov edi, dword [eax]
test edi, edi
je 0x49ed59
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x6c]
mov dword [ecx + 0x1c], eax
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x49ed17
push 0
push edi
push 1
mov edx, 0x47
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49ed46
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x10]
cmp dword [eax + 0x38], 0
je 0x49edc9
mov edi, dword [eax + 0x38]
jmp 0x49ed64
mov edi, dword [eax + 0x38]
test edi, edi
je 0x49ee2c
mov ecx, dword [esi + 0x6c]
mov edx, dword [edi + 8]
cmp dword [esi + 0x70], ecx
jg 0x49ed85
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.00437140
add esp, 0xc
jmp 0x49edb8
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0xc]
mov eax, dword [esi + 0x6c]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x10]
inc byte [edx + 0x1a]
mov ecx, dword [esp + 0x74]
xor edi, edi
mov esi, dword [ecx + 0x18]
cmp dword [ecx + 0x14], edi
jle 0x49ee2c
test byte [esi + 0xa], 6
jne 0x49ee1b
mov edx, dword [esp + 0x10]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x58]
mov eax, dword [esi + 0x2c]
and eax, dword [edx + 0x5c]
or ecx, eax
mov edx, dword [esp + 0xc]
jne 0x49ee1b
mov eax, dword [esp + 0x90]
test byte [eax + 0x24], 0x40
jne 0x49ee1b
push 0x10
push dword [esp + 0xa0]
push dword [esi]
push edx
call fcn.00456af0
add esp, 0x10
or word [esi + 0xa], 4
mov eax, dword [esp + 0x74]
inc edi
add esi, 0x30
cmp edi, dword [eax + 0x14]
mov eax, dword [esp + 0x10]
jl 0x49edd7
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x58]
pop edi
pop esi
mov edx, dword [ecx + 0x5c]
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.004f1f57
mov esp, ebp
pop ebp
ret