Function at 0x494020
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44c
push ebx
push esi
push edi
mov edi, ecx
mov eax, dword [edi + 0x2c]
mov ecx, dword [eax + 0x50]
xor ebx, ebx
mov dword [esp + 0x6c], ecx
mov ecx, dword [ebp + 0x10]
cmp ecx, ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
je 0x494067
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.0048d940
mov eax, dword [ebp + 8]
lea ecx, [esp + 0x1c]
push ecx
mov edx, ecx
push edx
push eax
call fcn.0043ddc0
mov eax, dword [edi + 0x2c]
mov ecx, dword [eax + 0x2c]
add esp, 0xc
cmp ecx, ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov byte [esp + 0x12], 1
je 0x494097
mov ecx, dword [ecx + 8]
jmp 0x494099
xor ecx, ecx
push ebx
push ebx
add eax, 0x4c
push eax
push ecx
lea ecx, [esp + 0x1f8]
call fcn.004cfe00
mov eax, dword [edi + 0x2c]
mov ecx, dword [eax + 0x2c]
cmp ecx, ebx
je 0x4940bb
mov ecx, dword [ecx + 8]
jmp 0x4940bd
xor ecx, ecx
push ebx
push ebx
add eax, 0x4c
push eax
push ecx
lea ecx, [esp + 0x330]
call fcn.004cfe00
mov esi, dword [edi + 0x2c]
mov ecx, esi
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x68], ebx
call fcn.00449e30
test eax, eax
je 0x4940fb
mov ecx, dword [esi + 4]
mov eax, dword [ecx + 0x20]
mov cl, byte [eax + 0x129]
test cl, cl
je 0x4940fb
lea esi, [eax + 0x10]
jmp 0x49411a
mov eax, dword [esi + 0x2c]
mov edx, dword [eax + 8]
cmp eax, dword [edx + 0x3e8]
jne 0x494114
mov ecx, dword [eax + 8]
mov esi, dword [ecx + 0x3e4]
jmp 0x49411a
mov esi, dword [esi + 0x2c]
add esi, 0x10
push esi
lea ecx, [esp + 0xac]
call fcn.00463100
mov eax, dword [edi + 0x2c]
mov ecx, dword [eax + 0x2c]
cmp ecx, ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x10], 0
mov byte [esp + 0xf], 0
je 0x49414c
mov ecx, dword [ecx + 8]
jmp 0x49414e
xor ecx, ecx
add eax, 0x4c
push eax
push ecx
lea ecx, [esp + 0x150]
call fcn.00477800
mov eax, dword [edi + 0x2c]
mov ecx, dword [eax + 0x2c]
cmp ecx, ebx
je 0x49416e
mov ecx, dword [ecx + 8]
jmp 0x494170
xor ecx, ecx
add eax, 0x4c
push eax
push ecx
lea ecx, [esp + 0x108]
call fcn.00477800
cmp dword [ebp + 0x10], ebx
mov ecx, 2
mov eax, 5
je 0x4941ac
mov dword [esp + 0x324], ecx
mov dword [esp + 0x104], ecx
mov dword [esp + 0x1ec], eax
mov dword [esp + 0x14c], eax
xor dl, dl
xor esi, esi
mov byte [esp + 0x11], dl
mov dword [esp + 0x40], esi
xor eax, eax
mov dword [esp + 0x2c], ebx
mov ecx, dword [edi + 4]
cmp eax, ecx
mov dword [esp + 0x44], eax
jbe 0x494279
cmp esi, ebx
jne 0x49427d
mov al, byte [esp + 0x10]
test al, al
je 0x494206
mov al, byte [esp + 0xf]
test al, al
je 0x494206
lea ecx, [esp + 0x1e8]
call fcn.004d0a00
cmp dword [ebp + 0x10], ebx
je 0x494f9c
lea ecx, [esp + 0x320]
call fcn.004d0a00
cmp dword [ebp + 0x10], ebx
je 0x494f9c
mov eax, dword [edi + 0x2c]
mov esi, dword [eax + 0x50]
cmp esi, dword [esp + 0x6c]
je 0x494f9c
nop
movzx ebx, byte [esi + 0x26]
mov ecx, esi
call fcn.004631a0
mov ecx, esi
mov dword [esp + 0x38], eax
call fcn.004631a0
add eax, 0x10
cmp ebx, 2
je 0x494247
cmp ebx, 1
jne 0x494f88
mov ecx, dword [esp + 0x38]
cmp dword [ecx], 0x7ffffff
je 0x494f88
cmp dword [eax], 0x7ffffff
je 0x494f88
mov ecx, dword [edi + 0x2c]
mov ecx, dword [ecx + 0x2c]
test ecx, ecx
je 0x494f38
mov ecx, dword [ecx + 8]
jmp 0x494f3a
cmp esi, ebx
je 0x49429e
sub eax, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], eax
mov ecx, dword [esi]
cmp ecx, 7
ja case.default.0x494297
jmp dword [ecx*4 + 0x494fb4]
mov esi, eax
imul esi, esi, 0x1c
add esi, dword [edi]
cmp eax, ecx
mov dword [esp + 0x14], esi
jne 0x49428c
test dl, dl
je case.default.0x494297
mov al, byte [esp + 0x12]
test al, al
jne case.default.0x494297
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x8c]
mov dword [esp + 0x90], edx
mov dl, byte [esp + 0x11]
mov byte [edi + 0x44], 1
mov edi, dword [esp + 0x18]
inc eax
mov dword [esp + 0x8c], 3
mov dword [esp + 0x40], ecx
xor ebx, ebx
mov esi, ecx
jmp 0x4941be
cmp dword [esi + 0x18], ebx
jne 0x49437b
test dl, dl
je 0x49435a
mov al, byte [esp + 0x12]
test al, al
jne 0x49435a
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x8c]
mov dword [esp + 0x90], edx
mov dl, byte [esp + 0x11]
inc eax
mov dword [esp + 0x8c], 3
mov dword [esp + 0x40], ecx
xor ebx, ebx
mov esi, ecx
jmp 0x4941be
mov dword [esp + 0x174], ebx
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x134], ebx
mov byte [esp + 0x11], 0
cmp dword [esi], 7
jne 0x494510
push 0x3c
call fcn.005dd330
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x494510
mov ecx, dword [edi + 0x2c]
call fcn.0048e810
push eax
mov ecx, ebx
call fcn.00463100
mov ebx, eax
test ebx, ebx
je 0x494510
xor eax, eax
mov word [ebx + 4], ax
mov word [ebx + 6], ax
mov word [ebx + 8], ax
mov word [ebx + 0xa], ax
mov byte [ebx + 0x24], 1
mov esi, dword [esi + 8]
cmp esi, eax
mov dword [esp + 0x88], esi
je 0x49449c
mov esi, dword [esi]
cmp esi, eax
je 0x49449c
cmp dword [esi + 4], eax
je 0x49449c
push 1
mov ecx, ebx
call fcn.00463200
mov edi, dword [ebx + 0x38]
mov edx, dword [esp + 0x14]
mov esi, dword [edx + 4]
add edi, 8
xor edx, edx
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x38]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x14]
lea eax, [esi + 0x18]
mov dword [ecx + 4], eax
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
test eax, eax
setne dl
xor eax, eax
dec edx
and edx, 2
test ecx, ecx
mov ecx, dword [ebx + 0x38]
setne al
or edx, eax
or edx, 0x40
mov word [ecx], dx
mov eax, dword [ebx + 0x38]
mov edx, dword [ebp + 8]
add edx, 0x1c
mov ecx, dword [edx]
add eax, 0x40
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edx + 0xc]
mov dword [eax + 0xc], ecx
mov edx, dword [edx + 0x10]
mov dword [eax + 0x10], edx
mov eax, dword [esi + 0x38]
test eax, eax
jne 0x494483
mov ecx, dword [ebx + 0x38]
add ecx, 0x40
call fcn.00444a80
test eax, eax
jne 0x494483
xor al, al
jmp 0x494485
mov al, 1
mov esi, dword [esp + 0x18]
mov byte [ebx + 0x24], al
mov eax, dword [ebp + 8]
push 0
push eax
push ebx
mov ecx, esi
call fcn.00492b70
jmp 0x4944a8
push eax
mov ecx, ebx
call fcn.00463200
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0x2c]
mov edx, dword [ecx + 4]
cmp word [edx + 0x56], 0
je 0x4944be
push 5
mov ecx, ebx
call fcn.00463200
mov eax, dword [esi + 0x2c]
mov ecx, dword [eax + 0x50]
mov eax, dword [esp + 0x2c]
mov dword [ebx + 0x18], ecx
mov edx, dword [esi + 0x2c]
mov dword [edx + 0x50], ebx
mov dword [ebx + 0x1c], eax
inc eax
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4944e7
mov ecx, ebx
call fcn.0046f9a0
mov esi, dword [esp + 0x14]
mov eax, 1
mov dword [esp + 0x174], ebx
mov dword [esp + 0x17c], eax
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x134], eax
mov byte [esp + 0x11], al
mov eax, dword [esi + 4]
test eax, eax
jne case.default.0x494297
mov eax, dword [esi + 0x18]
test eax, eax
je 0x494566
mov al, byte [esp + 0x10]
test al, al
je 0x494551
mov al, byte [esp + 0xf]
test al, al
je 0x494551
lea ecx, [esp + 0x1e8]
call fcn.004d0a00
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x494551
lea ecx, [esp + 0x320]
call fcn.004d0a00
mov eax, dword [esi + 0x18]
test eax, eax
mov byte [esp + 0xf], 0
je 0x494566
lea ebx, [esp + 0xa8]
jmp 0x494598
push 0x3c
call fcn.005dd330
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x494297
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x2c]
call fcn.0048e810
push eax
mov ecx, esi
call fcn.00463100
mov ebx, eax
test ebx, ebx
je case.default.0x494297
mov esi, dword [esp + 0x14]
mov eax, dword [esi]
xor ecx, ecx
cmp eax, ecx
jne 0x49460d
xor edx, edx
mov dl, byte [esi + 0xa]
lea edi, [ebx + 4]
and edx, 0xff
mov word [ebx + 8], dx
movzx ax, byte [esi + 9]
mov word [ebx + 6], ax
xor edx, edx
mov dl, byte [esi + 8]
mov eax, 0x51eb851f
and edx, 0xff
mov word [edi], dx
mov esi, dword [esi + 0xc]
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov word [ebx + 0xa], ax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x1c]
add eax, 0x1c
cmp edx, ecx
je 0x4945fc
push 1
push edi
mov ecx, eax
call fcn.0046bb20
push edi
call fcn.00421c30
add esp, 4
mov byte [ebx + 0x24], al
jmp 0x494782
mov eax, 0xff
mov word [ebx + 4], cx
mov word [ebx + 6], cx
push 2
mov ecx, ebx
mov word [ebx + 8], ax
mov word [ebx + 0xa], ax
call fcn.00463200
mov ecx, dword [esi + 0x14]
mov edx, dword [ebx + 0x38]
sar ecx, 9
mov byte [edx + 0x94], cl
mov ecx, dword [ebx + 0x38]
xor eax, eax
mov ax, word [esi + 0x14]
and eax, 0x1ff
mov word [ecx + 0x96], ax
mov eax, dword [ebx + 0x38]
cmp word [eax + 0x96], 0
jne 0x49467b
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x49466c
test byte [eax + 0x94], 0xc
jne 0x49467b
xor edx, edx
test esi, esi
sete dl
lea edx, [edx + edx + 0x10]
mov dword [eax], edx
jmp 0x494697
shl word [eax + 0x96], 7
mov eax, dword [ebx + 0x38]
sar word [eax + 0x96], 7
mov eax, dword [ebx + 0x38]
mov dword [eax], 0x13
mov ecx, dword [ebx + 0x38]
mov eax, dword [esp + 0x14]
mov dword [ecx + 0x90], 0
mov edi, dword [ebx + 0x38]
mov esi, dword [eax + 8]
add edi, 4
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebx + 0x38]
mov esi, dword [eax + 0x10]
add edi, 0x3c
mov ecx, 0x15
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x38]
mov byte [ebx + 0x24], 0
mov cl, byte [eax + 0x3c]
xor esi, esi
test cl, cl
jbe 0x49476b
mov edi, dword [ebp + 8]
add edi, 0x1c
cmp dword [edi], 0
je 0x49474d
movzx dx, byte [eax + esi*4 + 0x50]
mov word [esp + 0x54], dx
movzx cx, byte [eax + esi*4 + 0x51]
mov word [esp + 0x52], cx
movzx dx, byte [eax + esi*4 + 0x52]
mov word [esp + 0x50], dx
movzx ax, byte [eax + esi*4 + 0x53]
push 1
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
mov word [esp + 0x5e], ax
call fcn.0046bb20
mov edx, dword [ebx + 0x38]
mov al, byte [esp + 0x54]
mov byte [edx + esi*4 + 0x50], al
mov ecx, dword [ebx + 0x38]
mov dl, byte [esp + 0x52]
mov byte [ecx + esi*4 + 0x51], dl
mov eax, dword [ebx + 0x38]
mov cl, byte [esp + 0x50]
mov byte [eax + esi*4 + 0x52], cl
mov edx, dword [ebx + 0x38]
mov al, byte [esp + 0x56]
mov byte [edx + esi*4 + 0x53], al
mov eax, dword [ebx + 0x38]
cmp byte [eax + esi*4 + 0x53], 0xff
jae 0x49475b
mov byte [ebx + 0x24], 1
mov ecx, dword [ebx + 0x38]
movzx edx, byte [ecx + 0x3c]
inc esi
cmp esi, edx
jb 0x4946e2
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x494782
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x18]
push 0
push eax
push ebx
call fcn.00492ca0
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x18]
test eax, eax
jne case.default.0x494297
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x2c]
mov ecx, dword [edx + 4]
cmp word [ecx + 0x56], 0
je 0x4947af
push 5
mov ecx, ebx
call fcn.00463200
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x2c]
mov ecx, dword [edx + 0x50]
mov dword [ebx + 0x18], ecx
mov edx, dword [eax + 0x2c]
mov eax, dword [esp + 0x2c]
mov dword [edx + 0x50], ebx
mov dword [ebx + 0x1c], eax
inc eax
mov dword [esp + 0x2c], eax
mov eax, 1
mov dword [esp + 0x17c], eax
mov dword [esp + 0x134], eax
mov byte [esp + 0x11], al
mov eax, dword [ebp + 0x10]
test eax, eax
mov dword [esp + 0x174], ebx
mov dword [esp + 0x12c], ebx
jne case.default.0x494297
mov ecx, ebx
call fcn.0046f9a0
mov eax, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x40]
mov dl, byte [esp + 0x11]
inc eax
xor ebx, ebx
jmp 0x4941be
test dl, dl
je 0x494867
mov al, byte [esp + 0x12]
test al, al
jne 0x494867
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x8c]
mov dword [esp + 0x40], edx
inc eax
mov esi, edx
mov dl, byte [esp + 0x11]
mov dword [esp + 0x8c], 3
mov dword [esp + 0x94], ecx
xor ebx, ebx
jmp 0x4941be
mov al, byte [esp + 0x10]
test al, al
je 0x494894
mov al, byte [esp + 0xf]
test al, al
je 0x494894
lea ecx, [esp + 0x1e8]
call fcn.004d0a00
cmp dword [ebp + 0x10], ebx
je 0x494894
lea ecx, [esp + 0x320]
call fcn.004d0a00
mov eax, dword [esi + 4]
mov dword [esp + 0x1c], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x20], ecx
mov ecx, dword [ebp + 0x10]
cmp ecx, ebx
mov byte [esp + 0xf], 0
je 0x4948bd
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.0048d940
mov eax, dword [ebp + 8]
lea ecx, [esp + 0x1c]
push ecx
mov edx, ecx
push edx
push eax
call fcn.0043ddc0
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x24]
mov esi, dword [esp + 0x4c]
add esp, 0xc
mov dword [esp + 0x34], edx
mov dl, byte [esp + 0x11]
inc eax
mov dword [esp + 0x30], ecx
xor ebx, ebx
jmp 0x4941be
mov eax, dword [esi + 4]
cmp ecx, 3
mov ecx, dword [esi + 8]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov byte [esp + 0x13], 1
jne 0x494937
cmp dword [esi + 0xc], ebx
setne byte [esp + 0x13]
jmp 0x494973
mov dword [esp + 0x58], eax
cmp dword [ebp + 0x10], ebx
mov dword [esp + 0x5c], ecx
je 0x494959
mov ecx, dword [ebp + 0x10]
lea edx, [esp + 0x80]
push edx
lea eax, [esp + 0x5c]
push eax
call fcn.0048d940
mov eax, dword [ebp + 8]
lea ecx, [esp + 0x58]
push ecx
mov edx, ecx
push edx
push eax
call fcn.0043ddc0
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
add esp, 0xc
cmp dword [esp + 0x30], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
jne 0x49498c
cmp dword [esp + 0x34], ecx
mov byte [esp + 0x12], 1
je 0x494991
mov byte [esp + 0x12], 0
mov eax, dword [ebp + 0x10]
cmp eax, ebx
je 0x4949a9
lea ecx, [esp + 0x60]
push ecx
lea edx, [esp + 0x28]
push edx
mov ecx, eax
call fcn.0048d940
mov edx, dword [ebp + 8]
lea eax, [esp + 0x24]
push eax
mov ecx, eax
push ecx
push edx
call fcn.0043ddc0
mov al, byte [esp + 0x1c]
add esp, 0xc
test al, al
je 0x494be3
cmp dword [esi], 3
lea eax, [esp + 0x194]
lea ecx, [esp + 0x24]
push eax
push ecx
jne 0x494a0b
lea edx, [esp + 0x24]
push edx
call fcn.0041fd90
mov eax, dword [ebp + 0x10]
add esp, 0xc
test eax, eax
je 0x494a46
lea eax, [esp + 0x1b0]
push eax
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x50]
push edx
call fcn.0041fd90
add esp, 0xc
jmp 0x494a46
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x28]
push eax
call fcn.0041fd50
mov eax, dword [ebp + 0x10]
add esp, 0x10
test eax, eax
je 0x494a46
lea ecx, [esp + 0x1b0]
push ecx
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x54]
push ecx
call fcn.0041fd50
add esp, 0x10
mov al, byte [esp + 0xf]
test al, al
jne 0x494bad
push 0x3c
call fcn.005dd330
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x494bad
mov ecx, dword [edi + 0x2c]
call fcn.0048e810
push eax
mov ecx, ebx
call fcn.00463100
mov ebx, eax
test ebx, ebx
je 0x494bad
mov dl, byte [esp + 0xcc]
mov byte [ebx + 0x24], dl
movzx eax, byte [esp + 0xce]
push eax
mov ecx, ebx
call fcn.00463200
mov ecx, dword [esp + 0xac]
movzx eax, byte [ebx + 0x26]
sub eax, 0
mov dword [ebx + 4], ecx
mov edx, dword [esp + 0xb0]
mov dword [ebx + 8], edx
je 0x494ac4
dec eax
je 0x494abd
dec eax
jne 0x494b19
mov ecx, 0x26
jmp 0x494b05
mov ecx, dword [edi + 0x2c]
call fcn.0048e810
test eax, eax
je 0x494b00
mov ecx, dword [edi + 0x2c]
call fcn.0048e810
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x494b00
mov ecx, dword [edi + 0x2c]
call fcn.0048e810
cmp dword [eax + 0xdc], 4
jl 0x494b00
mov ecx, dword [esp + 0xe0]
mov eax, dword [ebx + 0x38]
mov edx, dword [ecx]
mov dword [eax], edx
jmp 0x494b19
mov ecx, 0x10
mov esi, dword [esp + 0xe0]
mov edi, dword [ebx + 0x38]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0x2c]
mov ecx, dword [eax + 0x50]
mov eax, dword [esp + 0x2c]
mov dword [ebx + 0x18], ecx
mov edx, dword [edi + 0x2c]
mov dword [edx + 0x50], ebx
mov dword [ebx + 0x1c], eax
inc eax
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x494b42
mov ecx, ebx
call fcn.0046f9a0
mov cx, word [esp + 0x68]
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x3c]
push ebx
and eax, 0xfff7
mov word [esp + 0x276], cx
push edx
lea ecx, [esp + 0x1f0]
mov word [esp + 0x278], ax
call fcn.004d1520
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x494ba8
mov cx, word [esp + 0x38]
mov edx, dword [esp + 0x70]
mov ax, word [esp + 0x270]
push ebx
mov word [esp + 0x3ae], cx
push edx
lea ecx, [esp + 0x328]
mov word [esp + 0x3b0], ax
call fcn.004d1520
mov byte [esp + 0xf], 1
mov al, byte [ebp + 0xc]
test al, al
jne 0x494be3
lea eax, [esp + 0x194]
push eax
lea ecx, [esp + 0x1ec]
call fcn.004d15e0
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x494be3
lea ecx, [esp + 0x1b0]
push ecx
lea ecx, [esp + 0x324]
call fcn.004d15e0
mov al, byte [esp + 0x11]
test al, al
je 0x494c9a
mov eax, dword [esi]
lea edx, [esp + 0x1cc]
cmp eax, 3
push edx
lea eax, [esp + 0x28]
push eax
jne 0x494c33
lea ecx, [esp + 0x24]
push ecx
call fcn.0041fd90
mov esi, dword [ebp + 0x10]
add esp, 0xc
test esi, esi
je 0x494c6e
lea edx, [esp + 0xe4]
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x50]
push ecx
call fcn.0041fd90
add esp, 0xc
jmp 0x494c6e
lea ecx, [esp + 0x60]
push ecx
lea edx, [esp + 0x28]
push edx
call fcn.0041fd50
mov esi, dword [ebp + 0x10]
add esp, 0x10
test esi, esi
je 0x494c6e
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x88]
push edx
lea eax, [esp + 0x54]
push eax
call fcn.0041fd50
add esp, 0x10
lea ecx, [esp + 0x1cc]
push ecx
lea ecx, [esp + 0x14c]
call fcn.00478820
test esi, esi
je 0x494c9a
lea edx, [esp + 0xe4]
push edx
lea ecx, [esp + 0x104]
call fcn.00478820
mov al, byte [esp + 0x13]
test al, al
je case.default.0x494297
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x40]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x48], edx
mov dl, byte [esp + 0x11]
inc eax
mov dword [esp + 0x20], ecx
xor ebx, ebx
jmp 0x4941be
mov al, byte [esp + 0x10]
test al, al
je 0x494d0b
mov al, byte [esp + 0xf]
test al, al
je 0x494d0b
lea ecx, [esp + 0x1e8]
call fcn.004d0a00
cmp dword [ebp + 0x10], ebx
je 0x494d0b
lea ecx, [esp + 0x320]
call fcn.004d0a00
cmp dword [esi + 0x10], ebx
mov byte [esp + 0x10], 0
mov byte [esp + 0xf], 0
jne case.default.0x494297
cmp dword [ebp + 0x10], ebx
mov eax, dword [esi + 0x14]
mov dword [esp + 0x7c], eax
jne 0x494dd4
mov ebx, eax
and ebx, 6
je 0x494dd2
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0x74]
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], eax
push edx
mov eax, edx
mov dword [esp + 0x6c], ecx
mov ecx, dword [ebp + 8]
push eax
push ecx
call fcn.0043e180
add esp, 0xc
cmp ebx, 2
jne 0x494d80
mov eax, dword [esp + 0x74]
cmp eax, 1
jge 0x494d72
mov eax, 1
movzx edx, ax
mov dword [esp + 0x3c], edx
xor ebx, ebx
jmp 0x494e0a
cmp ebx, 4
jne 0x494d9e
mov eax, dword [esp + 0x78]
cmp eax, 1
jge 0x494d93
mov eax, 1
movzx eax, ax
mov dword [esp + 0x3c], eax
xor ebx, ebx
jmp 0x494e0a
mov ecx, dword [edi + 0x2c]
call fcn.0048e810
mov ecx, dword [eax]
imul ecx, dword [esi + 4]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jge 0x494dc7
mov eax, 1
movzx ecx, ax
mov dword [esp + 0x3c], ecx
xor ebx, ebx
jmp 0x494e0a
xor ebx, ebx
mov edx, dword [esi + 4]
mov eax, dword [ebp + 8]
push edx
push eax
call fcn.0043f940
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x70], ecx
mov ecx, dword [ebp + 0x10]
add esp, 8
cmp ecx, ebx
mov dword [esp + 0x3c], eax
je 0x494e0a
mov edx, dword [esi + 4]
push edx
call fcn.0048c480
mov dword [esp + 0x70], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], eax
xor ecx, ecx
mov cl, byte [esi + 0xa]
xor eax, eax
push ebx
mov byte [esp + 0x14], 1
and ecx, 0xff
mov word [esp + 0xb4], cx
movzx dx, byte [esi + 9]
mov word [esp + 0xb2], dx
mov al, byte [esi + 8]
and eax, 0xff
mov word [esp + 0xb0], ax
mov esi, dword [esi + 0xc]
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov word [esp + 0xb6], cx
lea ecx, [esp + 0xac]
call fcn.00463200
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x1c]
add ecx, 0x1c
cmp eax, ebx
je 0x494e86
push 1
lea edx, [esp + 0xb0]
push edx
call fcn.0046bb20
lea eax, [esp + 0xac]
push eax
call fcn.00421c30
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x44]
mov dl, byte [esp + 0x15]
mov byte [esp + 0xd0], al
mov eax, dword [esp + 0x48]
add esp, 4
inc eax
xor ebx, ebx
jmp 0x4941be
test dl, dl
je 0x494eff
mov cl, byte [esp + 0x12]
test cl, cl
jne 0x494eff
mov edx, dword [edi]
mov esi, dword [esp + 0x30]
mov ecx, eax
imul ecx, ecx, 0x1c
mov dword [ecx + edx - 0x1c], 3
mov edx, dword [edi]
mov dword [ecx + edx - 0x18], esi
mov edx, dword [edi]
mov esi, dword [esp + 0x34]
mov edi, dword [esp + 0x18]
sub eax, 2
mov dword [ecx + edx - 0x14], esi
mov esi, dword [esp + 0x40]
mov dl, byte [esp + 0x11]
mov dword [esp + 0x44], eax
inc eax
xor ebx, ebx
jmp 0x4941be
mov dword [esp + 0x174], ebx
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x134], ebx
mov byte [esp + 0x11], 0
mov eax, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x40]
mov dl, byte [esp + 0x11]
inc eax
xor ebx, ebx
jmp 0x4941be
xor ecx, ecx
mov edx, dword [ecx + 0x3e0]
push edx
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0xe8]
push ecx
push eax
push edx
call fcn.0043ed10
mov al, byte [esi + 0x26]
add esp, 0x10
cmp al, 2
jne 0x494f74
mov ecx, dword [ebp + 8]
lea eax, [esp + 0xe4]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00492ca0
jmp 0x494f88
mov eax, dword [ebp + 8]
lea edx, [esp + 0xe4]
push edx
push eax
push esi
mov ecx, edi
call fcn.00492b70
mov ecx, esi
call fcn.0046f9a0
mov esi, dword [esi + 0x18]
cmp esi, dword [esp + 0x6c]
jne 0x494220
lea ecx, [esp + 0xa8]
call fcn.0046f990
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc