Function at 0x4999d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x154
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, ecx
mov dword [esp + 0x5c], edx
xor ecx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x60], ecx
mov ecx, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0xc]
lea esi, [ecx + eax*2]
xor ecx, ecx
mov dword [esp + 0x60], ecx
lea ecx, [esi - 2]
mov dword [esp + 0x5c], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x28], esi
test ebx, ebx
jne 0x499a53
test edx, edx
jne 0x499a53
test ecx, ecx
jne 0x499a53
cmp edi, 0xfffffc19
jne 0x499a53
cmp eax, edi
jne 0x499a53
push ecx
push ecx
push ecx
push ecx
push ecx
call fcn.00491c00
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test dword [ebp + 0x14], 0xe20f5a6f
je 0x499a68
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x49aaf5
test ecx, ecx
je 0x49aaf5
cmp dword [ebp + 0x18], 0
mov edx, dword [ebp + 0x1c]
jne 0x499a89
test edx, edx
jg 0x49aaf5
test edx, edx
jns 0x499a99
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test eax, eax
js 0x49aae9
cmp eax, edi
jg 0x49aae9
mov ecx, dword [ebx]
cmp ecx, 0x50435245
je 0x499acd
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx edx, word [ebx + 0xc]
test dl, 2
jne 0x499ae2
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x14]
mov dword [esp + 0xc4], 1
test edx, 0x8000000
je 0x499aff
mov ecx, 2
jmp 0x499b07
mov ecx, edx
shr ecx, 0xf
and ecx, 1
mov dword [esp + 0x50], ecx
mov dword [esp + 0x104], ecx
mov dword [esp + 0x148], 0xfc00
mov dword [esp + 0x14c], 0xdc00
test edx, 0x2000
jne 0x499b5d
test eax, eax
jle 0x499b5d
cmp eax, edi
jge 0x499b5d
mov ecx, dword [ebp + 8]
mov ax, word [ecx + eax*2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x499b5d
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 0x18]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], 0
mov dword [esp + 0x7c], 0x989680
lea eax, [ebx + eax*2]
mov dword [esp + 0xa0], eax
movzx eax, word [ebx + 0x1c]
mov dword [esp + 0x98], eax
movzx eax, word [ebx + 0x1a]
mov ebx, dword [ebx + 0x20]
mov dword [esp + 0x18], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0x80], 0x1770
mov dword [esp + 0x124], 0
test edx, edx
je 0x499bfe
mov ecx, dword [edx]
test cl, 1
je 0x499bc8
mov eax, dword [edx + 4]
mov dword [esp + 0x58], eax
test cl, 2
je 0x499bd4
mov eax, dword [edx + 8]
mov dword [esp + 0x7c], eax
test cl, 0x10
je 0x499be3
mov eax, dword [edx + 0x14]
mov dword [esp + 0x80], eax
test cl, 4
je 0x499bf2
mov eax, dword [edx + 0xc]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x18]
test cl, 8
je 0x499bfe
mov ebx, dword [edx + 0x10]
mov ecx, dword [esp + 0x14]
test ebx, ebx
mov edx, 0x4be660
mov dword [esp + 0xe8], 0
cmovne edx, ebx
mov dword [esp + 0xdc], 0
imul eax, dword [esp + 0x98]
mov ebx, dword [ecx + 8]
mov esi, ebx
or esi, dword [ebp + 0x14]
shr esi, 4
and esi, 1
mov dword [esp + 0x4c], ebx
add eax, dword [esp + 0x54]
mov dword [esp + 0x74], esi
mov esi, ecx
shr dword [esp + 0x4c], 0x12
and dword [esp + 0x4c], 1
mov dword [esp + 0x12c], 0
movzx ecx, word [esi + 0xc]
lea eax, [esi + eax*2]
mov esi, dword [ebp + 8]
mov dword [esp + 0xec], eax
mov eax, esi
mov dword [esp + 0xf0], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x110], eax
lea eax, [esi + edi*2]
mov dword [esp + 0xf4], eax
mov dword [esp + 0x2c], eax
mov eax, ebx
shr eax, 5
and eax, 1
mov edi, dword [ebp + 0x14]
mov dword [esp + 0xd0], eax
mov eax, ebx
shr eax, 0x1d
and eax, 1
mov esi, dword [esp + 0x28]
mov dword [esp + 0xcc], eax
mov eax, ebx
shr eax, 0x19
and eax, 1
mov dword [esp + 0x40], ecx
mov dword [esp + 0xc8], eax
mov eax, edi
shr eax, 7
and eax, 1
shr dword [esp + 0x40], 8
mov dword [esp + 0xbc], eax
mov eax, edi
shr eax, 8
and eax, 1
and dword [esp + 0x40], 1
mov dword [esp + 0xc0], eax
mov eax, edi
shr eax, 0xa
and eax, 1
shr ecx, 0xc
mov dword [esp + 0xd4], eax
and ecx, 1
mov eax, edi
mov dword [esp + 0x128], 0
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x120], 0
mov dword [esp + 0xd8], eax
lea eax, [edx + 0x100]
mov dword [esp + 0xb0], eax
lea eax, [edx + 0x340]
mov dword [esp + 0xb4], eax
mov eax, edi
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xac], edx
and eax, 0x1800000
je 0x499d77
cmp eax, 0x800000
je 0x499d90
cmp eax, 0x1000000
jne 0x499e48
mov dword [esp + 0xe0], 0
jmp 0x499d9b
test ebx, 0x1800000
je 0x499d90
mov eax, ebx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xe0], eax
jmp 0x499d9b
mov dword [esp + 0xe0], 1
test edi, 0x700000
mov eax, edi
cmove eax, ebx
and eax, 0x700000
cmp eax, 0x300000
ja 0x499e3a
je 0x499e0a
test eax, eax
je 0x499e54
cmp eax, 0x100000
je 0x499dd5
cmp eax, 0x200000
jne 0x499e48
mov eax, 0xa
jmp 0x499dda
mov eax, 0xd
mov cx, word [esp + 0xa6]
mov edi, 1
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], edi
mov word [esp + 0xa4], ax
mov dword [esp + 0x24], ecx
jmp 0x499e93
mov edi, 2
mov dword [esp + 0x90], 0
mov ecx, 0xa
mov dword [esp + 0x94], edi
mov dword [esp + 0xa4], 0xa000d
mov dword [esp + 0x24], ecx
lea eax, [edi + 0xb]
jmp 0x499e93
cmp eax, 0x400000
je 0x499e6d
cmp eax, 0x500000
je 0x499e54
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov cx, word [esp + 0xa6]
mov dword [esp + 0x90], 2
mov dword [esp + 0x24], ecx
jmp 0x499e84
mov ax, word [esp + 0xa6]
mov dword [esp + 0x90], 1
mov dword [esp + 0x24], eax
mov edi, dword [esp + 0x94]
mov ax, word [esp + 0xa4]
cmp dword [esp + 0x50], 0
mov dword [esp + 0x1c], eax
je 0x499eb9
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xc]
test eax, 0x200
je 0x499eb9
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x1c]
mov eax, 0x55555556
shr edx, 1
lea ebx, [edx + edx*2]
lea ecx, [ebx + ebx]
mov dword [esp + 0x20], ebx
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x14]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x499f76
mov ecx, eax
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x499f76
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x20], eax
shl eax, 2
push eax
call fcn.0049eded
mov ebx, eax
add esp, 4
mov dword [esp + 0x84], ebx
test ebx, ebx
jne 0x499f2f
lea eax, [ebx - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x20]
mov dword [esp + 0x88], eax
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [eax + eax]
mov dword [esp + 0x34], 1
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x8c], eax
jmp 0x499fc9
mov eax, dword [ebp + 0x18]
mov ebx, eax
xor eax, eax
mov dword [esp + 0x84], ebx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x88], eax
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x8c], eax
test ebx, ebx
je 0x49a042
mov eax, dword [esp + 0x14]
mov edi, ebx
movzx eax, word [eax + 0x10]
lea ecx, [edi + edx*4]
shl eax, 2
mov edx, ecx
sub edx, eax
lea eax, [edi + 8]
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x49a004
nop dword [eax]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x499ff0
mov ebx, dword [esp + 0x84]
mov dword [ebx + 4], 0xffffffff
mov eax, dword [esp + 0x84]
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x104]
mov edi, dword [esp + 0x94]
mov dword [esp + 0x50], eax
mov ax, word [esp + 0xa6]
mov dword [esp + 0x24], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x74], 0
mov ebx, 0xff
jne 0x49a1a7
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc]
test al, 0x10
je 0x49a16b
movzx edx, word [edx + 0x14]
movzx ecx, dx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x38], edx
movzx ecx, cx
test al, 0x20
je 0x49a197
cmp dx, bx
mov ebx, dword [esp + 0xb0]
ja 0x49a134
movzx edx, byte [ebx + ecx]
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x3c]
cmp dx, 0x7f
ja 0x49a138
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x140], eax
movzx eax, dx
lea edx, [ecx + 0xc]
mov dword [esp + 0x13c], eax
movzx eax, word [edx]
mov dword [esp + 0x18], edx
test al, 0x40
je 0x49a1eb
movzx ecx, word [ecx + 0x16]
mov dword [esp + 0x44], ecx
movzx ecx, cx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x70], 1
movzx ecx, cx
mov dword [esp + 0x18], edx
test al, al
jns 0x49a1eb
mov eax, 0xff
cmp word [esp + 0x44], ax
ja 0x49a1b7
movzx eax, byte [ebx + ecx]
mov edx, dword [esp + 0x14]
add edx, 0xc
mov dword [esp + 0x44], eax
cmp word [esp + 0x48], 0x7f
mov eax, ecx
mov dword [esp + 0x18], edx
jbe 0x49a1eb
jmp 0x49a1b9
mov edx, dword [esp + 0x3c]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4cbca8]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf2c8]
mov ax, word [eax*8 + 0x4cabcc]
add ax, dx
movzx eax, ax
mov dword [esp + 0x38], eax
jmp 0x49a0ae
cmp dword [esp + 0x40], 0
jne 0x49a1a7
mov eax, dword [esp + 0x58]
test eax, eax
je 0x49a1a7
mov ebx, dword [esp + 0xb0]
xor edx, edx
test byte [eax + 4], 1
je 0x49a190
add eax, 8
mov dword [esp + 0x68], eax
xor eax, eax
jmp 0x49a0ae
mov ebx, dword [esp + 0xb0]
mov edx, dword [esp + 0x3c]
jmp 0x49a0aa
mov ebx, dword [esp + 0xb0]
xor edx, edx
xor eax, eax
jmp 0x49a0ae
mov eax, ecx
shr eax, 7
and ecx, 0x7f
mov dword [esp + 0x18], edx
movzx eax, byte [eax + 0x4cbca8]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4bf2c8]
mov ax, word [eax*8 + 0x4cabcc]
add ax, word [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x158], eax
mov eax, dword [esp + 0x44]
movzx eax, ax
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x150], eax
mov eax, dword [ebp + 0x10]
add eax, eax
mov dword [esp + 0x144], eax
add eax, dword [ebp + 8]
mov dword [esp + 0x15c], eax
nop dword [eax + eax]
cmp dword [esp + 0x4c], 0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x30], ebx
je 0x49a364
mov ebx, dword [esp + 0xf4]
mov edx, esi
cmp esi, ebx
jae 0x49a35e
mov esi, dword [esp + 0x90]
nop dword [eax + eax]
test esi, esi
je 0x49a30e
cmp edx, ebx
jae case.default.0x49a2df
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49a29b
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp esi, 2
jne 0x49a2cd
cmp ecx, 0xa
je case.0x49a2df.10
cmp ecx, 0xd
jne case.default.0x49a2df
lea eax, [ebx - 2]
cmp edx, eax
jae case.0x49a2df.10
cmp word [edx + 2], 0xa
mov edi, 2
je 0x49a2f8
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x49a308
cmp ecx, 0x85
ja 0x49a2e6
je case.0x49a2df.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x49a2df
jmp dword [ecx*4 + 0x49ab04]
sub ecx, 0x2028
je case.0x49a2df.10
sub ecx, 1
jne case.default.0x49a2df
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x49a308
xor eax, eax
test eax, eax
jne 0x49a35a
jmp 0x49a331
lea eax, [edi + edi]
mov ecx, ebx
sub ecx, eax
cmp edx, ecx
ja 0x49a331
mov eax, dword [esp + 0x1c]
cmp word [edx], ax
jne 0x49a331
cmp edi, 1
je 0x49a35a
mov eax, dword [esp + 0x24]
cmp word [edx + 2], ax
je 0x49a35a
add edx, 2
cmp edx, dword [esp + 0x2c]
jae 0x49a352
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x49a352
add edx, 2
cmp edx, ebx
jb 0x49a260
mov esi, dword [esp + 0x28]
mov ebx, edx
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
test eax, 0x4000000
jne 0x49a5e6
test edx, edx
je 0x49a3dc
cmp esi, ebx
jae 0x49a5e6
mov eax, dword [esp + 0x13c]
cmp ax, word [esp + 0x140]
je 0x49a3c3
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
movzx eax, word [esi]
cmp ax, cx
je 0x49a5e2
cmp ax, dx
je 0x49a5e2
add esi, 2
cmp esi, ebx
jb 0x49a3a2
jmp 0x49a5e2
mov eax, dword [esp + 0x3c]
cmp word [esi], ax
je 0x49a5e6
add esi, 2
cmp esi, ebx
jb 0x49a3c7
jmp 0x49a5e6
cmp dword [esp + 0x40], 0
je 0x49a58f
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0xf0]
add eax, edx
cmp esi, eax
jbe 0x49a5e2
cmp esi, ebx
jae 0x49a560
lea ecx, [esi - 2]
mov dword [esp + 0x28], ecx
lea ebx, [esi - 4]
cmp dword [esp + 0x90], 0
je 0x49a4ef
cmp esi, edx
jbe case.default.0x49a490
movzx eax, word [ecx]
mov edx, ecx
mov ecx, eax
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x49a43f
movzx ecx, word [ebx]
mov edx, ebx
movzx ecx, cx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49a46a
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x90], 2
jne 0x49a47e
cmp ecx, 0xa
je case.0x49a490.10
cmp ecx, 0xd
jmp 0x49a4c7
cmp ecx, 0x85
ja 0x49a4bc
je case.0x49a490.11
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x49a490
jmp dword [ecx*4 + 0x49ab14]
cmp edx, dword [esp + 0xf0]
jbe case.0x49a490.11
cmp word [edx - 2], 0xd
mov edi, 2
je 0x49a4ce
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x49a4de
sub ecx, 0x2028
je case.0x49a490.11
sub ecx, 1
jne case.default.0x49a490
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x49a4de
xor eax, eax
test eax, eax
jne 0x49a55c
mov edx, dword [esp + 0xf0]
jmp 0x49a515
lea ecx, [edi + edi]
lea eax, [ecx + edx]
cmp esi, eax
jb 0x49a515
mov eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x1c]
cmp word [eax], cx
jne 0x49a515
cmp edi, 1
je 0x49a55c
mov ecx, dword [esp + 0x24]
cmp word [eax + 2], cx
je 0x49a55c
mov ecx, dword [esp + 0x28]
add esi, 2
add ecx, 2
add ebx, 2
mov dword [esp + 0x28], ecx
cmp esi, dword [esp + 0x2c]
jae 0x49a55c
mov ax, word [esi]
and ax, word [esp + 0x148]
cmp ax, word [esp + 0x14c]
jne 0x49a411
add esi, 2
add ecx, 2
add ebx, 2
mov dword [esp + 0x28], ecx
cmp esi, dword [esp + 0x2c]
jb 0x49a411
mov ebx, dword [esp + 0x2c]
cmp word [esi - 2], 0xd
jne 0x49a5e2
mov eax, dword [esp + 0x90]
cmp eax, 1
je 0x49a57c
cmp eax, 2
jne 0x49a5e2
cmp esi, ebx
jae 0x49a5e2
cmp word [esi], 0xa
mov edx, dword [esp + 0x10]
jne 0x49a5e6
add esi, 2
jmp 0x49a5e6
cmp dword [esp + 0x68], 0
je 0x49a5e6
cmp esi, ebx
jae 0x49a5e6
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x34]
movzx edx, word [esi]
mov dword [esp + 0x34], eax
cmp edx, 0xff
mov eax, 0xff
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
mov ecx, dword [esp + 0x68]
test byte [edx + ecx], al
jne 0x49a5de
mov eax, dword [esp + 0x34]
add esi, 2
mov dword [esp + 0x34], eax
cmp esi, ebx
jb 0x49a5a2
mov dword [esp + 0x20], edi
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x2c], edi
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
test eax, 0x4000000
jne 0x49a6c4
cmp dword [esp + 0x50], 0
jne 0x49a6c4
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x49a62b
test byte [ecx + 4], 2
je 0x49a62b
mov eax, edi
sub eax, esi
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x49a744
cmp dword [esp + 0x70], 0
je 0x49a6c4
mov eax, edi
sub eax, esi
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x49a6c4
lea eax, [esi + edx*2]
cmp eax, dword [esp + 0x5c]
jbe 0x49a6c4
cmp eax, edi
jae 0x49a744
mov ecx, dword [esp + 0x150]
cmp cx, word [esp + 0x154]
je 0x49a69a
nop word [eax + eax]
movzx ecx, word [eax]
mov ebx, eax
add eax, 2
mov dword [esp + 0x5c], ebx
mov edx, ecx
cmp cx, word [esp + 0x158]
je 0x49a6bc
cmp dx, word [esp + 0x44]
je 0x49a6bc
cmp eax, edi
jb 0x49a670
xor ebx, ebx
jmp 0x49a8a3
mov edx, dword [esp + 0x48]
nop
mov cx, word [eax]
mov ebx, eax
add eax, 2
mov dword [esp + 0x5c], ebx
cmp cx, dx
je 0x49a6bc
cmp eax, edi
jb 0x49a6a0
xor ebx, ebx
jmp 0x49a8a3
cmp ebx, edi
jae 0x49a744
mov edx, dword [esp + 0xec]
lea eax, [esp + 0x78]
push 0
push 0
push eax
push 2
push esi
mov ecx, esi
mov dword [esp + 0x10c], esi
mov dword [esp + 0x114], esi
mov dword [esp + 0x8c], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x11c], 0
call fcn.00491c00
add esp, 0x14
mov ebx, eax
cmp dword [esp + 0xdc], 0
je 0x49a72e
mov eax, dword [esp + 0x60]
test eax, eax
cmove eax, dword [esp + 0x100]
mov dword [esp + 0x60], eax
cmp ebx, 0xfffffc1d
jg 0x49a74b
je 0x49a78d
cmp ebx, 0xfffffc1a
jne 0x49a980
xor ebx, ebx
jmp 0x49a8a3
cmp ebx, 0xfffffc20
jg 0x49a785
je 0x49a78d
cmp ebx, 0xfffffc1e
je 0x49a778
cmp ebx, 0xfffffc1f
jne 0x49a8a3
mov edx, esi
mov dword [esp + 0xe8], 1
jmp 0x49a7b7
mov edx, dword [esp + 0xf8]
cmp edx, esi
je 0x49a78d
jmp 0x49a7b7
test ebx, ebx
jne 0x49a97b
lea edx, [esi + 2]
mov dword [esp + 0xe8], 0
cmp edx, edi
jae 0x49a7b7
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x49a7b7
add edx, 2
mov ax, word [esp + 0xa6]
xor ebx, ebx
mov dword [esp + 0x24], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x4c], ebx
je 0x49a904
cmp dword [esp + 0x90], ebx
je 0x49a8d3
mov edi, dword [esp + 0xf4]
cmp esi, edi
jae case.default.0x49a86b
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49a822
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x90], 2
jne 0x49a859
cmp ecx, 0xa
je case.0x49a86b.10
cmp ecx, 0xd
jne case.default.0x49a86b
lea eax, [edi - 2]
cmp esi, eax
jae case.0x49a86b.10
cmp word [esi + 2], 0xa
mov edi, 2
je 0x49a884
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x49a89b
cmp ecx, 0x85
ja 0x49a872
je case.0x49a86b.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x49a86b
jmp dword [ecx*4 + 0x49ab24]
sub ecx, 0x2028
je case.0x49a86b.10
sub ecx, 1
jne case.default.0x49a86b
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x49a89b
mov edi, dword [esp + 0x94]
xor eax, eax
test eax, eax
je 0x49a90b
mov edi, dword [esp + 0x30]
cmp dword [esp + 0x34], 0
je 0x49a8b9
push dword [esp + 0x84]
call fcn.0049edd2
add esp, 4
test ebx, ebx
je 0x49a9f4
cmp ebx, 0xfffffff4
je 0x49a9f4
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [esp + 0x94]
mov ecx, dword [esp + 0xf4]
lea eax, [edi + edi]
sub ecx, eax
cmp esi, ecx
ja 0x49a90b
mov eax, dword [esp + 0x1c]
cmp word [esi], ax
jne 0x49a90b
cmp edi, 1
je 0x49a89f
mov eax, dword [esp + 0x24]
cmp word [esi + 2], ax
je 0x49a89f
jmp 0x49a90b
mov edi, dword [esp + 0x94]
mov esi, edx
mov dword [esp + 0x28], esi
cmp dword [esp + 0x74], ebx
jne 0x49a89f
mov eax, dword [esp + 0x30]
cmp edx, eax
ja 0x49a89f
cmp edx, dword [esp + 0x15c]
jbe 0x49a964
cmp word [edx - 2], 0xd
jne 0x49a964
cmp edx, eax
jae 0x49a964
cmp word [edx], 0xa
jne 0x49a964
mov eax, dword [esp + 0x18]
mov ecx, 0x800
test word [eax], cx
jne 0x49a964
mov eax, dword [esp + 0x90]
cmp eax, 1
je 0x49a95d
cmp eax, 2
je 0x49a95d
cmp edi, 2
jne 0x49a964
lea esi, [edx + 2]
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x104]
mov dword [esp + 0x128], ebx
mov dword [esp + 0x50], eax
jmp 0x49a230
cmp ebx, 1
je 0x49a98c
cmp ebx, 0xfffffc19
jne 0x49a8a3
cmp dword [esp + 0x34], 0
mov edi, dword [esp + 0x54]
je 0x49a9db
mov esi, dword [esp + 0x84]
cmp edi, 4
jl 0x49a9be
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call fcn.0049c910
add esp, 0xc
cmp dword [esp + 0x108], edi
jle 0x49a9d2
mov dword [esp + 0xb8], 1
push esi
call fcn.0049edd2
add esp, 4
cmp dword [esp + 0xb8], 0
mov ecx, dword [esp + 0x108]
je 0x49aa46
cmp ecx, edi
jl 0x49aa46
xor esi, esi
jmp 0x49aa4f
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x49aa1b
cmp dword [ebp + 0x1c], 1
jle 0x49aa14
sub ecx, dword [ebp + 8]
mov eax, dword [ebp + 0x18]
sub edi, dword [ebp + 8]
sar ecx, 1
sar edi, 1
mov dword [eax], ecx
mov dword [eax + 4], edi
mov eax, 0xfffffff4
jmp 0x49aa1e
or eax, 0xffffffff
mov edx, dword [esp + 0x64]
test edx, edx
je 0x49aafa
test byte [edx], 0x20
je 0x49aafa
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x12c]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x14]
mov ebx, dword [ebp + 0x18]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp eax, edi
jg 0x49aa98
test ebx, ebx
je 0x49aa98
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea edi, [ebx + ecx*4]
cmovg eax, dword [esp + 0x20]
xor edx, edx
lea eax, [ebx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, edx
test ecx, ecx
je 0x49aa98
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x1c], 2
jge 0x49aaa2
xor esi, esi
jmp 0x49aac7
mov eax, dword [esp + 0xf8]
sub eax, dword [esp + 0xf0]
sar eax, 1
mov dword [ebx], eax
mov eax, dword [esp + 0xfc]
sub eax, dword [esp + 0xf0]
sar eax, 1
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x64]
test edx, edx
je 0x49aae0
test byte [edx], 0x20
je 0x49aae0
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x128]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret