Function at 0x49a6f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x134
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x34], edx
mov edx, ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x10], edx
lea eax, [edi + edi]
mov dword [esp + 0x50], 0
mov dword [esp + 0x12c], eax
add eax, ecx
mov esi, eax
mov dword [esp + 0x13c], eax
xor eax, eax
mov dword [esp + 0x44], 0
mov dword [esp + 0x4c], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x24], 0
lea eax, [esi - 2]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x48], eax
test edx, edx
jne 0x49a7a9
cmp dword [esp + 0x34], 0
jne 0x49a7a9
test ecx, ecx
jne 0x49a7a9
cmp ebx, 0xfffffc19
jne 0x49a7a9
cmp edi, ebx
jne 0x49a7a9
push ecx
push ecx
push ecx
push ecx
push ecx
xor edx, edx
call fcn.00492890
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test dword [ebp + 0x14], 0xe20f5a6f
je 0x49a7be
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edx, edx
je 0x49b570
test ecx, ecx
je 0x49b570
cmp dword [ebp + 0x18], 0
mov eax, dword [ebp + 0x1c]
jne 0x49a7df
test eax, eax
jg 0x49b570
test eax, eax
jns 0x49a7ef
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
js 0x49b564
cmp edi, ebx
jg 0x49b564
mov ecx, dword [edx]
cmp ecx, 0x50435245
je 0x49a823
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [edx + 0xc]
test al, 2
jne 0x49a837
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xac], 1
test eax, 0x8000000
je 0x49a853
mov eax, 2
jmp 0x49a859
shr eax, 0xf
and eax, 1
test dword [ebp + 0x14], 0x2000
mov ecx, 0xfc00
mov dword [esp + 0xec], eax
jne 0x49a896
test edi, edi
jle 0x49a896
cmp edi, ebx
jge 0x49a896
mov eax, dword [ebp + 8]
mov ax, word [eax + edi*2]
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x49a896
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [edx + 0x18]
mov dword [esp + 0x30], eax
mov dword [esp + 0x64], 0x989680
mov dword [esp + 0x68], 0x1770
lea eax, [edx + eax*2]
mov dword [esp + 0x88], eax
movzx eax, word [edx + 0x1c]
mov dword [esp + 0x80], eax
movzx eax, word [edx + 0x1a]
mov dword [esp + 0x84], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x10c], eax
mov eax, dword [edx + 0x20]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x38], eax
test edx, edx
je 0x49a92d
mov ecx, dword [edx]
test cl, 1
je 0x49a8f8
mov eax, dword [edx + 4]
mov dword [esp + 0x40], eax
test cl, 2
je 0x49a904
mov eax, dword [edx + 8]
mov dword [esp + 0x64], eax
test cl, 0x10
je 0x49a910
mov eax, dword [edx + 0x14]
mov dword [esp + 0x68], eax
test cl, 4
je 0x49a91f
mov eax, dword [edx + 0xc]
mov dword [esp + 0x10c], eax
test cl, 8
je 0x49a929
mov eax, dword [edx + 0x10]
jmp 0x49a92d
mov eax, dword [esp + 0x38]
test eax, eax
mov esi, dword [esp + 0x10]
mov edx, 0x4c2608
mov dword [esp + 0xf8], edi
cmovne edx, eax
mov dword [esp + 0xd0], 0
mov eax, dword [esp + 0x10]
mov dword [esp + 0xc4], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x110], 0
mov eax, dword [eax + 8]
mov ecx, eax
shr eax, 0x12
and eax, 1
or ecx, dword [ebp + 0x14]
mov dword [esp + 0x58], eax
movzx eax, word [esi + 0x1a]
imul eax, dword [esp + 0x80]
shr ecx, 4
and ecx, 1
mov dword [esp + 0x108], 0
mov dword [esp + 0x5c], ecx
movzx ecx, word [esi + 0xc]
add eax, dword [esp + 0x30]
mov dword [esp + 0x28], ecx
shr dword [esp + 0x28], 8
and dword [esp + 0x28], 1
lea eax, [esi + eax*2]
shr ecx, 0xc
mov dword [esp + 0xd4], eax
and ecx, 1
mov eax, dword [ebp + 8]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x94], edx
lea eax, [eax + ebx*2]
mov ebx, eax
mov dword [esp + 0xc], eax
mov eax, esi
mov dword [esp + 0xdc], ebx
mov esi, dword [ebp + 0x14]
mov edi, dword [eax + 8]
mov eax, edi
shr eax, 5
and eax, 1
mov dword [esp + 0xb8], eax
mov eax, edi
shr eax, 0x1d
and eax, 1
mov dword [esp + 0xb4], eax
mov eax, edi
shr eax, 0x19
and eax, 1
mov dword [esp + 0xb0], eax
mov eax, esi
shr eax, 7
and eax, 1
mov dword [esp + 0xa4], eax
mov eax, esi
shr eax, 8
and eax, 1
mov dword [esp + 0xa8], eax
mov eax, esi
shr eax, 0xa
and eax, 1
mov dword [esp + 0xbc], eax
mov eax, esi
shr eax, 0x1c
and eax, 1
mov dword [esp + 0xc0], eax
lea eax, [edx + 0x100]
mov dword [esp + 0x98], eax
lea eax, [edx + 0x340]
mov dword [esp + 0x9c], eax
mov eax, esi
mov esi, dword [esp + 0x14]
and eax, 0x1800000
je 0x49aaaa
cmp eax, 0x800000
je 0x49aac3
cmp eax, 0x1000000
jne 0x49ab56
mov dword [esp + 0xc8], 0
jmp 0x49aace
test edi, 0x1800000
je 0x49aac3
mov eax, edi
shr eax, 0x17
and eax, 1
mov dword [esp + 0xc8], eax
jmp 0x49aace
mov dword [esp + 0xc8], 1
mov eax, dword [ebp + 0x14]
test eax, 0x700000
cmove eax, edi
and eax, 0x700000
cmp eax, 0x300000
ja 0x49ab48
je 0x49ab2b
test eax, eax
je 0x49ab62
cmp eax, 0x100000
je 0x49ab12
cmp eax, 0x200000
jne 0x49ab56
mov eax, 0xa
mov dword [esp + 0x7c], 1
xor ecx, ecx
mov word [esp + 0x8c], ax
jmp 0x49ab6e
mov eax, 0xd
mov dword [esp + 0x7c], 1
xor ecx, ecx
mov word [esp + 0x8c], ax
jmp 0x49ab6e
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 2
mov dword [esp + 0x8c], 0xa000d
jmp 0x49ab72
cmp eax, 0x400000
je 0x49ab69
cmp eax, 0x500000
je 0x49ab62
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, 2
jmp 0x49ab6e
mov ecx, 1
mov dword [esp + 0x78], ecx
cmp dword [esp + 0xec], 0
je 0x49ab97
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 0xc]
test eax, 0x200
je 0x49ab97
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x1c]
mov eax, 0x55555556
shr edx, 1
lea edi, [edx + edx*2]
lea ecx, [edi + edi]
mov dword [esp + 0x30], edi
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x10]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x49ac1b
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x49ac1b
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x30], eax
shl eax, 2
push eax
call fcn.0049f88a
mov edi, eax
add esp, 4
mov dword [esp + 0x6c], edi
test edi, edi
jne 0x49ac06
lea eax, [edi - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0x50], 1
mov dword [esp + 0x18], edi
jmp 0x49ac28
mov eax, dword [ebp + 0x18]
mov edi, eax
mov dword [esp + 0x6c], edi
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x70], eax
mov dword [esp + 0xa0], 0
mov dword [esp + 0xf4], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x49acb9
mov ecx, dword [esp + 0x30]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x10]
mov edx, ecx
movzx eax, word [eax + 0x10]
shl eax, 2
sub edx, eax
mov eax, dword [esp + 0x18]
add eax, 8
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x49aca1
nop dword [eax]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x49ac90
mov edi, dword [esp + 0x6c]
mov dword [edi + 4], 0xffffffff
mov eax, dword [esp + 0x6c]
mov dword [eax], 0xffffffff
mov ebx, dword [esp + 0xdc]
cmp dword [esp + 0x5c], 0
jne 0x49ae18
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 0xc]
test al, 0x10
je 0x49ade3
movzx edx, word [edx + 0x14]
movzx edi, dx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x98]
mov dword [esp + 0x44], 1
mov dword [esp + 0x20], edx
movzx ecx, dx
test al, 0x20
je 0x49ae0f
mov eax, 0xff
cmp dx, ax
ja 0x49adac
movzx edx, byte [edi + ecx]
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x24]
cmp dx, 0x7f
ja 0x49adb0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
movzx eax, ax
mov dword [esp + 0x128], eax
movzx eax, dx
lea edx, [ecx + 0xc]
mov dword [esp + 0x124], eax
movzx eax, word [edx]
mov dword [esp + 0x18], edx
test al, 0x40
je 0x49ae67
movzx ecx, word [ecx + 0x16]
mov dword [esp + 0x1c], ecx
mov esi, dword [esp + 0x1c]
movzx esi, si
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x14]
mov dword [esp + 0x54], 1
movzx ecx, cx
mov dword [esp + 0x18], edx
test al, al
jns 0x49ae6b
mov eax, 0xff
cmp word [esp + 0x1c], ax
ja 0x49ae28
movzx eax, byte [edi + ecx]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x1c], eax
cmp dx, 0x7f
jbe 0x49ae6f
jmp 0x49ae2c
mov edx, dword [esp + 0x24]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cfc48]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4c3268]
mov ax, word [eax*8 + 0x4ceb6c]
add ax, dx
movzx eax, ax
mov dword [esp + 0x20], eax
jmp 0x49ad25
cmp dword [esp + 0x28], 0
jne 0x49ae18
mov eax, dword [esp + 0x40]
test eax, eax
je 0x49ae18
mov edi, dword [esp + 0x98]
xor edx, edx
test byte [eax + 4], 1
je 0x49ae08
add eax, 8
mov dword [esp + 0x3c], eax
xor eax, eax
jmp 0x49ad25
mov edx, dword [esp + 0x24]
jmp 0x49ad21
mov edi, dword [esp + 0x98]
xor edx, edx
xor eax, eax
jmp 0x49ad25
mov edx, dword [esp + 0x2c]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cfc48]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4c3268]
mov ax, word [eax*8 + 0x4ceb6c]
add ax, dx
movzx eax, ax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
add eax, 0xc
mov dword [esp + 0x18], eax
jmp 0x49ae6f
xor edx, edx
jmp 0x49ae6f
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0xc]
movzx eax, dx
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x1c]
movzx eax, ax
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x2c]
movzx eax, ax
mov dword [esp + 0x130], eax
nop dword [eax]
cmp dword [esp + 0x58], 0
mov edi, ecx
je 0x49af59
mov edi, esi
cmp esi, ebx
jae 0x49af59
mov esi, dword [esp + 0x78]
nop dword [eax + eax]
test esi, esi
je 0x49aefd
cmp edi, ebx
jae 0x49aef5
push 1
lea eax, [esp + 0x80]
mov edx, esi
push eax
push ebx
mov ecx, edi
call fcn.0049b980
mov ebx, dword [esp + 0xe8]
add esp, 0xc
mov esi, dword [esp + 0x78]
test eax, eax
je 0x49aef5
mov eax, 1
jmp 0x49aef7
xor eax, eax
test eax, eax
jne 0x49af55
jmp 0x49af2c
mov edx, dword [esp + 0x7c]
mov ecx, ebx
lea eax, [edx + edx]
sub ecx, eax
cmp edi, ecx
ja 0x49af2c
mov ax, word [edi]
cmp ax, word [esp + 0x8c]
jne 0x49af2c
cmp edx, 1
je 0x49af55
mov ax, word [edi + 2]
cmp ax, word [esp + 0x8e]
je 0x49af55
add edi, 2
cmp edi, dword [esp + 0xc]
jae 0x49af4d
mov ax, word [edi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x49af4d
add edi, 2
cmp edi, ebx
jb 0x49aec0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 8]
or ebx, dword [ebp + 0x14]
and ebx, 0x4000000
jne 0x49b100
cmp dword [esp + 0x44], ebx
je 0x49afda
cmp esi, edi
jae 0x49b108
mov eax, dword [esp + 0x124]
cmp ax, word [esp + 0x128]
je 0x49afc1
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
nop word [eax + eax]
movzx eax, word [esi]
cmp ax, cx
je 0x49b108
cmp ax, dx
je 0x49b108
add esi, 2
cmp esi, edi
jb 0x49afa0
jmp 0x49b108
mov eax, dword [esp + 0x24]
cmp word [esi], ax
je 0x49b108
add esi, 2
cmp esi, edi
jb 0x49afc5
jmp 0x49b108
cmp dword [esp + 0x28], 0
je 0x49b0c3
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0xd8]
add eax, ecx
cmp esi, eax
jbe 0x49b108
cmp esi, edi
jae 0x49b09f
mov eax, dword [esp + 0x78]
test eax, eax
je 0x49b03b
cmp esi, ecx
jbe 0x49b033
push 1
lea edx, [esp + 0x80]
push edx
push ecx
mov edx, eax
mov ecx, esi
call fcn.0049ba40
add esp, 0xc
test eax, eax
je 0x49b033
mov eax, 1
jmp 0x49b035
xor eax, eax
test eax, eax
jne 0x49b09f
jmp 0x49b06d
mov edx, dword [esp + 0x7c]
lea ebx, [edx + edx]
lea eax, [ecx + ebx]
cmp esi, eax
jb 0x49b074
mov ecx, esi
sub ecx, ebx
mov ax, word [ecx]
cmp ax, word [esp + 0x8c]
jne 0x49b06d
cmp edx, 1
je 0x49b09f
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x8e]
je 0x49b09f
mov ecx, dword [esp + 0xd8]
add esi, 2
cmp esi, edi
jae 0x49b09f
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x49b005
add esi, 2
cmp esi, edi
jb 0x49b005
cmp word [esi - 2], 0xd
jne 0x49b108
mov eax, dword [esp + 0x78]
cmp eax, 1
je 0x49b0b4
cmp eax, 2
jne 0x49b108
cmp esi, edi
jae 0x49b108
cmp word [esi], 0xa
jne 0x49b108
add esi, 2
jmp 0x49b108
cmp dword [esp + 0x3c], 0
je 0x49b108
cmp esi, edi
jae 0x49b108
nop
movzx edx, word [esi]
mov eax, 0xff
cmp edx, 0xff
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
mov ecx, dword [esp + 0x3c]
test byte [edx + ecx], al
jne 0x49b108
add esi, 2
cmp esi, edi
jb 0x49b0d0
test ebx, ebx
jne 0x49b1c0
cmp dword [esp + 0xec], 0
jne 0x49b1c0
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x49b133
test byte [ecx + 4], 2
je 0x49b133
mov eax, ebx
sub eax, esi
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x49b193
cmp dword [esp + 0x54], 0
je 0x49b1c0
mov eax, ebx
sub eax, esi
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x49b1c0
mov eax, dword [esp + 0x44]
lea ecx, [esi + eax*2]
cmp ecx, dword [esp + 0x48]
jbe 0x49b1c0
cmp ecx, ebx
jae 0x49b193
mov eax, dword [esp + 0x130]
cmp ax, word [esp + 0x134]
je 0x49b19a
nop
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
mov dword [esp + 0x48], edi
mov edx, eax
cmp ax, word [esp + 0x138]
je 0x49b1bc
cmp dx, word [esp + 0x1c]
je 0x49b1bc
cmp ecx, ebx
jb 0x49b170
xor edi, edi
jmp 0x49b247
mov edx, dword [esp + 0x2c]
nop
mov ax, word [ecx]
mov edi, ecx
add ecx, 2
mov dword [esp + 0x48], edi
cmp ax, dx
je 0x49b1bc
cmp ecx, ebx
jb 0x49b1a0
xor edi, edi
jmp 0x49b247
cmp edi, ebx
jae 0x49b193
mov edx, dword [esp + 0xd4]
lea eax, [esp + 0x60]
push 0
push 0
push eax
push 2
push esi
mov ecx, esi
mov dword [esp + 0xf4], esi
mov dword [esp + 0xfc], esi
mov dword [esp + 0x74], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x104], 0
call fcn.00492890
add esp, 0x14
mov edi, eax
cmp dword [esp + 0xc4], 0
je 0x49b227
mov eax, dword [esp + 0x4c]
test eax, eax
cmove eax, dword [esp + 0xe8]
mov dword [esp + 0x4c], eax
cmp edi, 0xfffffc1d
jg 0x49b274
je 0x49b2b8
cmp edi, 0xfffffc1a
jne 0x49b3ee
xor edi, edi
mov ebx, dword [esp + 0xc]
cmp dword [esp + 0x50], 0
je 0x49b25a
push dword [esp + 0x6c]
call fcn.0049f86f
add esp, 4
test edi, edi
je 0x49b46f
cmp edi, 0xfffffff4
je 0x49b46f
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xfffffc20
jg 0x49b2b0
je 0x49b2b8
cmp edi, 0xfffffc1e
je 0x49b29f
cmp edi, 0xfffffc1f
jne 0x49b243
mov dword [esp + 0x14], esi
mov dword [esp + 0xd0], 1
jmp 0x49b2ec
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0x14], ecx
cmp ecx, esi
je 0x49b2b8
jmp 0x49b2ec
test edi, edi
jne 0x49b3e9
lea ecx, [esi + 2]
mov dword [esp + 0xd0], 0
mov dword [esp + 0x14], ecx
cmp ecx, dword [esp + 0xc]
jae 0x49b2ec
mov ax, word [ecx]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x49b2ec
add ecx, 2
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0xdc]
xor edi, edi
cmp dword [esp + 0x58], edi
je 0x49b371
mov eax, dword [esp + 0x78]
test eax, eax
je 0x49b33a
cmp esi, ebx
jae 0x49b32e
push 1
lea ecx, [esp + 0x80]
mov edx, eax
push ecx
push ebx
mov ecx, esi
call fcn.0049b980
mov ebx, dword [esp + 0xe8]
add esp, 0xc
test eax, eax
je 0x49b32e
lea eax, [edi + 1]
jmp 0x49b330
xor eax, eax
test eax, eax
jne 0x49b243
jmp 0x49b371
mov edx, dword [esp + 0x7c]
mov eax, ebx
lea ecx, [edx + edx]
sub eax, ecx
cmp esi, eax
ja 0x49b371
mov ax, word [esi]
cmp ax, word [esp + 0x8c]
jne 0x49b371
cmp edx, 1
je 0x49b243
mov ax, word [esi + 2]
cmp ax, word [esp + 0x8e]
je 0x49b243
mov eax, dword [esp + 0x14]
mov esi, eax
mov dword [esp + 0x14], esi
cmp dword [esp + 0x5c], edi
jne 0x49b243
mov ecx, dword [esp + 0xc]
cmp eax, ecx
ja 0x49b468
cmp eax, dword [esp + 0x13c]
jbe 0x49b3d9
cmp word [eax - 2], 0xd
jne 0x49b3d9
cmp eax, ecx
jae 0x49b3d9
cmp word [eax], 0xa
jne 0x49b3d9
mov edx, dword [esp + 0x18]
mov edi, 0x800
test word [edx], di
jne 0x49b3d9
mov ecx, dword [esp + 0x78]
cmp ecx, 1
je 0x49b3ce
cmp ecx, 2
je 0x49b3ce
cmp dword [esp + 0x7c], 2
jne 0x49b3d5
lea esi, [eax + 2]
mov dword [esp + 0x14], esi
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x110], 0
jmp 0x49aea0
cmp edi, 1
je 0x49b3fa
cmp edi, 0xfffffc19
jne 0x49b243
cmp dword [esp + 0x50], 0
mov edi, dword [esp + 0x38]
je 0x49b44f
mov esi, dword [esp + 0x6c]
cmp edi, 4
jl 0x49b429
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call fcn.0049ef90
add esp, 0xc
mov eax, dword [esp + 0xa0]
mov ecx, 1
cmp dword [esp + 0xf0], edi
push esi
cmovg eax, ecx
mov dword [esp + 0xa4], eax
call fcn.0049f86f
add esp, 4
cmp dword [esp + 0xa0], 0
mov ecx, dword [esp + 0xf0]
je 0x49b4c1
cmp ecx, edi
jl 0x49b4c1
xor esi, esi
jmp 0x49b4ca
mov ebx, ecx
jmp 0x49b247
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x49b496
cmp dword [ebp + 0x1c], 1
jle 0x49b48f
sub eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x18]
sub ebx, dword [ebp + 8]
sar eax, 1
sar ebx, 1
mov dword [ecx], eax
mov dword [ecx + 4], ebx
mov eax, 0xfffffff4
jmp 0x49b499
or eax, 0xffffffff
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x49b575
test byte [ecx], 0x20
je 0x49b575
mov edx, dword [ecx + 0x18]
mov ecx, dword [esp + 0x114]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x10]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp + 0x18]
sar eax, 1
cmp eax, edi
jg 0x49b513
test edx, edx
je 0x49b513
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea edi, [edx + ecx*4]
cmovg eax, dword [esp + 0x30]
xor ebx, ebx
lea eax, [edx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, ebx
test ecx, ecx
je 0x49b513
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x1c], 2
jge 0x49b51d
xor esi, esi
jmp 0x49b542
mov eax, dword [esp + 0xe0]
sub eax, dword [esp + 0xd8]
sar eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0xe4]
sub eax, dword [esp + 0xd8]
sar eax, 1
mov dword [edx + 4], eax
mov eax, dword [esp + 0x34]
test eax, eax
je 0x49b55b
test byte [eax], 0x20
je 0x49b55b
mov edx, dword [eax + 0x18]
mov ecx, dword [esp + 0x110]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret