Function at 0x49f250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x870
mov edx, dword [esp + 0x874]
mov eax, ecx
mov dword [esp + 8], eax
test edx, edx
je 0x49fa54
cmp dword [esp + 0x878], 0xf0
jbe 0x49fa54
push esi
push edi
mov ecx, 0x18
lea edi, [esp + 0x78]
mov esi, edx
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0xa4], 0x4d524353
je 0x49f2a5
pop edi
xor eax, eax
pop esi
add esp, 0x870
ret 8
push ebp
push 0x1e00
lea edi, [eax + 0xe99c]
mov dword [eax + 0xe920], 2
push 0
push edi
mov ebp, 0x60
call sub.MSVCRT.dll_memset
movzx eax, byte [esp + 0xb9]
lea esi, [esp + 0x88]
mov ecx, 7
add esp, 0xc
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x14]
mov dword [edi + 0xe900], eax
cmp eax, 1
jae 0x49f2fa
mov dword [edi + 0xe900], 6
cmp dword [edi + 0xe900], 0x1f
jbe 0x49f30d
mov dword [edi + 0xe900], 0x1f
movzx eax, byte [esp + 0xae]
mov dword [edi + 0xe904], eax
cmp eax, 0x28
jae 0x49f32a
mov dword [edi + 0xe904], 0x28
cmp dword [edi + 0xe904], 0xf0
jbe 0x49f340
mov dword [edi + 0xe904], 0xf0
movzx eax, byte [esp + 0xac]
shl eax, 2
mov dword [edi + 0xe908], eax
test eax, eax
je 0x49f35c
cmp eax, 0x100
jbe 0x49f366
mov dword [edi + 0xe908], 0x100
movzx eax, byte [esp + 0xaf]
lea ecx, [edi + 0xc1c0]
and eax, 0x7f
mov dword [edi + 0xe910], 4
mov dword [edi + 0xe964], eax
xor edx, edx
push ebx
lea ebx, [ebx]
mov bl, byte [esp + edx + 0xc0]
mov dword [ecx], pe_nt_image_headers32
mov dword [ecx + 4], 0x40
mov dword [ecx + 8], 0x100
cmp bl, 0xff
je 0x49f3ce
lea eax, [edx + 1]
mov dword [edi + 0xe910], eax
movzx eax, bl
and eax, 8
mov dword [ecx + 8], 0
or eax, 4
shl eax, 4
mov dword [ecx], eax
inc edx
add ecx, 0x24
cmp edx, 0x20
jb 0x49f390
cmp dword [edi + 0xe910], 4
jae 0x49f3ea
mov dword [edi + 0xe910], 4
mov eax, 0x1320
cmp word [esp + 0xa8], ax
jb 0x49f403
test byte [esp + 0xa6], 0x40
je 0x49f40a
or dword [edi + 0xe90c], 2
movzx ebx, word [esp + 0xa0]
cmp ebx, 1
jae 0x49f41e
mov ebx, 1
jmp 0x49f431
cmp ebx, 0x100
jbe 0x49f42d
mov ebx, 0x100
jmp 0x49f431
test ebx, ebx
je 0x49f451
mov esi, dword [esp + 0x884]
push ebx
lea eax, [esi + 0x60]
push eax
lea eax, [edi + 0xd060]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
lea ebp, [ebx + 0x60]
jmp 0x49f458
mov esi, dword [esp + 0x884]
test bl, 1
je 0x49f464
cmp byte [esi + ebp], 0xff
jne 0x49f464
inc ebp
movzx ebx, word [esp + 0xa2]
mov dword [esp + 0x14], ebx
mov eax, ebx
cmp ebx, 0xf0
jb 0x49f483
mov eax, 0xef
mov dword [esp + 0x14], eax
movzx esi, word [esp + 0xa4]
mov dword [edi + 0xe924], eax
mov dword [esp + 0x10], esi
cmp esi, 0xf0
jbe 0x49f4a5
mov dword [esp + 0x10], 0xf0
push 0x200
lea eax, [esp + 0x2c4]
push 0
push eax
call sub.MSVCRT.dll_memset
add esi, ebx
add esp, 0xc
cmp esi, 0x100
jbe 0x49f4d5
pop ebx
pop ebp
pop edi
xor eax, eax
pop esi
add esp, 0x870
ret 8
test esi, esi
je 0x49f582
mov eax, dword [esp + 0x884]
add esi, esi
add eax, ebp
push esi
push eax
lea eax, [esp + 0x2c8]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
add ebp, esi
cmp byte [esp + 0xb5], 0xfc
jne 0x49f582
mov eax, dword [esp + 0x884]
lea edx, [edi + 0xc208]
mov esi, 8
lea ecx, [eax + 1]
add ecx, ebp
lea ecx, [ecx]
mov al, byte [ecx - 1]
test al, 0x20
je 0x49f536
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx - 0x48], eax
mov al, byte [ecx]
test al, 0x20
je 0x49f54b
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx - 0x24], eax
mov al, byte [ecx + 1]
test al, 0x20
je 0x49f560
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx], eax
mov al, byte [ecx + 2]
test al, 0x20
je 0x49f576
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx + 0x24], eax
add ecx, 4
add edx, 0x90
dec esi
jne 0x49f520
cmp dword [edi + 0xe910], 0
je 0x49fa24
push 0x3c0
lea eax, [esp + 0x4c4]
push 0
push eax
call sub.MSVCRT.dll_memset
mov ebp, 1
add esp, 0xc
lea ecx, [ebp + 0x3f]
cmp dword [esp + 0x14], ebp
jb 0x49f7ae
mov eax, dword [esp + 0x14]
lea edx, [edi + 0xe9d8]
lea ecx, [esp + 0x2c0]
mov dword [esp + 0x1c], edx
lea ebx, [edi + 0x8240]
mov dword [esp + 0x20], ecx
movzx ecx, word [ecx]
shl ecx, 4
test ecx, ecx
je 0x49f77f
lea eax, [ecx + 0x50]
cmp eax, dword [esp + 0x888]
ja 0x49f77b
mov esi, dword [esp + 0x884]
lea edi, [esp + 0x30]
add esi, ecx
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x31]
lea edi, [edx - 0x1c]
mov dword [ebx + 0x2a], eax
lea esi, [esp + 0x60]
mov eax, dword [esp + 0x35]
mov dword [ebx + 0x2e], eax
mov eax, dword [esp + 0x39]
mov dword [ebx + 0x32], eax
mov eax, dword [esp + 0x4c]
mov ecx, eax
shr ecx, 0x18
mov dword [esp + 0x24], ecx
mov byte [esp + ebp + 0xdf], cl
mov ecx, 7
shr eax, 0x10
cmp byte [esp + 0x30], 1
rep movsd dword es:[edi], dword [esi]
mov byte [esp + ebp + 0x1cf], al
mov byte [edx], 0
jne 0x49f77b
cmp byte [esp + 0x7e], 0x52
jne 0x49f77b
cmp byte [esp + 0x7f], 0x53
jne 0x49f77b
mov eax, dword [esp + 0x40]
cmp eax, 0xf42400
jbe 0x49f680
mov edx, 0xf42400
jmp 0x49f689
cmp eax, 4
sbb edx, edx
not edx
and edx, eax
mov eax, dword [esp + 0x44]
lea esi, [edx - 1]
mov dword [ebx], edx
cmp eax, esi
ja 0x49f69f
cmp eax, 4
sbb esi, esi
not esi
and esi, eax
mov eax, dword [esp + 0x48]
mov dword [ebx + 4], esi
cmp eax, edx
ja 0x49f6b3
cmp eax, 4
sbb edx, edx
not edx
and edx, eax
mov eax, dword [esp + 0x4c]
movzx eax, al
mov dword [ebx + 8], edx
cmp eax, 0x40
jbe 0x49f6c7
mov eax, 0x40
shl eax, 2
test byte [esp + 0x24], 1
mov word [ebx + 0x1e], ax
mov eax, 0x40
mov word [ebx + 0x20], ax
je 0x49f6e3
or word [ebx + 0x22], 2
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x49f6f2
mov eax, 0x20ab
jmp 0x49f6fe
cmp eax, 0x400
jae 0x49f6fe
mov eax, 0x400
mov ecx, dword [esp + 0x3c]
mov dword [ebx + 0x18], eax
mov eax, ecx
shr eax, 8
movzx eax, al
shl eax, 0x10
shr ecx, 0x10
add eax, ecx
shl eax, 4
mov dword [esp + ebp*4 + 0x4c0], eax
cmp eax, dword [esp + 0x888]
jbe 0x49f735
mov dword [esp + ebp*4 + 0x4c0], 0
jmp 0x49f755
test eax, eax
je 0x49f755
lea ecx, [ebp - 1]
test ecx, ecx
js 0x49f755
cmp eax, dword [esp + ecx*4 + 0x4c0]
jne 0x49f752
xor eax, eax
mov dword [esp + ebp*4 + 0x4c0], eax
dec ecx
jns 0x49f740
cmp esi, edx
jae 0x49f760
sub edx, esi
cmp edx, 8
jae 0x49f76e
mov dword [ebx + 8], 0
mov dword [ebx + 4], 0
mov edx, dword [esp + 0x1c]
mov eax, pe_nt_image_headers32
mov word [ebx + 0x1c], ax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
inc ebp
add ecx, 2
add edx, 0x20
add ebx, 0x40
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], edx
cmp ebp, eax
jbe 0x49f5d7
mov edi, dword [esp + 0x18]
mov ecx, 0x40
movzx ebx, word [esp + 0xa2]
cmp dword [esp + 0x10], 0
jbe 0x49f970
mov edx, dword [esp + 0x888]
lea eax, [edi + 0xcac0]
mov dword [esp + 0x20], eax
lea ebp, [edi + 0xce80]
lea eax, [esp + 0x2c0]
mov dword [esp + 0x1c], ebp
lea eax, [eax + ebx*2]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x24], eax
movzx esi, word [eax]
shl esi, 4
lea eax, [esi + 0x40]
cmp eax, edx
ja 0x49f949
mov ebx, dword [esp + 0x884]
movzx eax, word [esi + ebx]
add esi, 2
mov word [ebp], cx
test ax, ax
je 0x49f945
lea ecx, [eax + esi]
mov dword [esp + 0x2c], eax
lea eax, [edx - 6]
cmp ecx, eax
ja 0x49f945
push dword [edi + 0xe910]
push 0x40
call fcn.00495350
mov edx, eax
add esp, 8
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], edx
mov dword [eax], edx
test edx, edx
je 0x49f93e
mov eax, dword [esp + 0x2c]
lea edi, [esi + ebx]
xor ebp, ebp
xor esi, esi
test eax, eax
je 0x49f936
jmp 0x49f860
mov bl, byte [esi + edi]
inc esi
test bl, bl
jne 0x49f877
inc ebp
cmp ebp, 0x40
jae 0x49f936
jmp 0x49f92e
mov eax, dword [esp + 0x18]
movzx ecx, bl
and ecx, 0x1f
mov eax, dword [eax + 0xe910]
cmp ecx, eax
jae 0x49fa36
imul eax, ebp
add eax, ecx
lea eax, [eax + eax*2]
lea edx, [edx + eax*2]
test bl, 0x20
je 0x49f8d5
mov al, byte [esi + edi]
mov ah, al
mov byte [edx], al
cmp ah, 0xf0
jae 0x49f8c3
shr al, 4
and ah, 0xf
mov cl, al
add al, al
add cl, al
shl cl, 2
add cl, 0xd
add cl, ah
mov byte [edx], cl
jmp 0x49f8cb
cmp ah, 0xff
jne 0x49f8cb
mov byte [edx], 0
mov al, byte [esi + edi + 1]
add esi, 2
mov byte [edx + 1], al
test bl, 0x40
je 0x49f900
movzx eax, byte [esi + edi]
inc esi
lea ecx, [eax - 0x80]
cmp ecx, 0x40
ja 0x49f8ef
mov eax, ecx
mov byte [edx + 2], 2
jmp 0x49f8fd
cmp eax, 0x40
jbe 0x49f8f9
mov eax, 0x40
mov byte [edx + 2], 1
mov byte [edx + 4], al
test bl, bl
jns 0x49f926
mov al, byte [esi + edi]
mov byte [edx + 3], al
mov al, byte [esi + edi + 1]
add esi, 2
cmp byte [edx + 3], 0
mov byte [edx + 5], al
je 0x49f926
mov ecx, dword [esp + 0x18]
push 0
push edx
call fcn.0049fa60
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
cmp esi, eax
jb 0x49f860
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x888]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
add ebp, 2
add dword [esp + 0x20], 4
add eax, 2
dec ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], ebp
mov ecx, 0x40
mov dword [esp + 0x10], ebx
jne 0x49f7e6
mov ebp, dword [esp + 0x14]
mov esi, 1
cmp ebp, esi
jb 0x49f9f8
mov bx, word [esp + 0xaa]
add edi, 0x8240
jmp 0x49f990
cmp dword [edi], 0
je 0x49f9f0
mov edx, dword [esp + esi*4 + 0x4c0]
test edx, edx
je 0x49f9f0
mov al, byte [esp + esi + 0xdf]
xor ecx, ecx
cmp bx, 1
setne cl
test al, 4
je 0x49f9b7
add ecx, 5
test al, 2
je 0x49f9be
or ecx, 8
cmp byte [esp + esi + 0x1cf], 4
jne 0x49f9cd
mov ecx, 3
mov eax, dword [esp + 0x888]
cmp edx, eax
jae 0x49f9f0
sub eax, edx
push eax
mov eax, dword [esp + 0x888]
add eax, edx
push eax
push ecx
mov ecx, dword [esp + 0x24]
push edi
call fcn.004960e0
inc esi
add edi, 0x40
cmp esi, ebp
jbe 0x49f990
test byte [esp + 0xa6], 0x10
mov eax, dword [esp + 0x18]
mov dword [eax + 0xe974], 0x40
mov dword [eax + 0xe978], 0x7fff
je 0x49fa24
or dword [eax + 0xe90c], 0x10000
pop ebx
pop ebp
pop edi
mov eax, 1
pop esi
add esp, 0x870
ret 8
test bl, 0x20
je 0x49fa3e
add esi, 2
test bl, 0x40
je 0x49fa44
inc esi
test bl, bl
jns 0x49f92a
add esi, 2
jmp 0x49f92a
xor eax, eax
add esp, 0x870
ret 8