Function at 0x499b90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x154
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, ecx
mov dword [esp + 0x5c], edx
xor ecx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x60], ecx
mov ecx, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0xc]
lea esi, [ecx + eax*2]
xor ecx, ecx
mov dword [esp + 0x60], ecx
lea ecx, [esi - 2]
mov dword [esp + 0x5c], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x28], esi
test ebx, ebx
jne 0x499c13
test edx, edx
jne 0x499c13
test ecx, ecx
jne 0x499c13
cmp edi, 0xfffffc19
jne 0x499c13
cmp eax, edi
jne 0x499c13
push ecx
push ecx
push ecx
push ecx
push ecx
call fcn.00491dc0
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test dword [ebp + 0x14], 0xe20f5a6f
je 0x499c28
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x49acb5
test ecx, ecx
je 0x49acb5
cmp dword [ebp + 0x18], 0
mov edx, dword [ebp + 0x1c]
jne 0x499c49
test edx, edx
jg 0x49acb5
test edx, edx
jns 0x499c59
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test eax, eax
js 0x49aca9
cmp eax, edi
jg 0x49aca9
mov ecx, dword [ebx]
cmp ecx, 0x50435245
je 0x499c8d
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx edx, word [ebx + 0xc]
test dl, 2
jne 0x499ca2
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x14]
mov dword [esp + 0xc4], 1
test edx, 0x8000000
je 0x499cbf
mov ecx, 2
jmp 0x499cc7
mov ecx, edx
shr ecx, 0xf
and ecx, 1
mov dword [esp + 0x50], ecx
mov dword [esp + 0x104], ecx
mov dword [esp + 0x148], 0xfc00
mov dword [esp + 0x14c], 0xdc00
test edx, 0x2000
jne 0x499d1d
test eax, eax
jle 0x499d1d
cmp eax, edi
jge 0x499d1d
mov ecx, dword [ebp + 8]
mov ax, word [ecx + eax*2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x499d1d
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 0x18]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], 0
mov dword [esp + 0x7c], 0x989680
lea eax, [ebx + eax*2]
mov dword [esp + 0xa0], eax
movzx eax, word [ebx + 0x1c]
mov dword [esp + 0x98], eax
movzx eax, word [ebx + 0x1a]
mov ebx, dword [ebx + 0x20]
mov dword [esp + 0x18], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0x80], 0x1770
mov dword [esp + 0x124], 0
test edx, edx
je 0x499dbe
mov ecx, dword [edx]
test cl, 1
je 0x499d88
mov eax, dword [edx + 4]
mov dword [esp + 0x58], eax
test cl, 2
je 0x499d94
mov eax, dword [edx + 8]
mov dword [esp + 0x7c], eax
test cl, 0x10
je 0x499da3
mov eax, dword [edx + 0x14]
mov dword [esp + 0x80], eax
test cl, 4
je 0x499db2
mov eax, dword [edx + 0xc]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x18]
test cl, 8
je 0x499dbe
mov ebx, dword [edx + 0x10]
mov ecx, dword [esp + 0x14]
test ebx, ebx
mov edx, 0x4bf660
mov dword [esp + 0xe8], 0
cmovne edx, ebx
mov dword [esp + 0xdc], 0
imul eax, dword [esp + 0x98]
mov ebx, dword [ecx + 8]
mov esi, ebx
or esi, dword [ebp + 0x14]
shr esi, 4
and esi, 1
mov dword [esp + 0x4c], ebx
add eax, dword [esp + 0x54]
mov dword [esp + 0x74], esi
mov esi, ecx
shr dword [esp + 0x4c], 0x12
and dword [esp + 0x4c], 1
mov dword [esp + 0x12c], 0
movzx ecx, word [esi + 0xc]
lea eax, [esi + eax*2]
mov esi, dword [ebp + 8]
mov dword [esp + 0xec], eax
mov eax, esi
mov dword [esp + 0xf0], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x110], eax
lea eax, [esi + edi*2]
mov dword [esp + 0xf4], eax
mov dword [esp + 0x2c], eax
mov eax, ebx
shr eax, 5
and eax, 1
mov edi, dword [ebp + 0x14]
mov dword [esp + 0xd0], eax
mov eax, ebx
shr eax, 0x1d
and eax, 1
mov esi, dword [esp + 0x28]
mov dword [esp + 0xcc], eax
mov eax, ebx
shr eax, 0x19
and eax, 1
mov dword [esp + 0x40], ecx
mov dword [esp + 0xc8], eax
mov eax, edi
shr eax, 7
and eax, 1
shr dword [esp + 0x40], 8
mov dword [esp + 0xbc], eax
mov eax, edi
shr eax, 8
and eax, 1
and dword [esp + 0x40], 1
mov dword [esp + 0xc0], eax
mov eax, edi
shr eax, 0xa
and eax, 1
shr ecx, 0xc
mov dword [esp + 0xd4], eax
and ecx, 1
mov eax, edi
mov dword [esp + 0x128], 0
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x120], 0
mov dword [esp + 0xd8], eax
lea eax, [edx + 0x100]
mov dword [esp + 0xb0], eax
lea eax, [edx + 0x340]
mov dword [esp + 0xb4], eax
mov eax, edi
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xac], edx
and eax, 0x1800000
je 0x499f37
cmp eax, 0x800000
je 0x499f50
cmp eax, 0x1000000
jne 0x49a008
mov dword [esp + 0xe0], 0
jmp 0x499f5b
test ebx, 0x1800000
je 0x499f50
mov eax, ebx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xe0], eax
jmp 0x499f5b
mov dword [esp + 0xe0], 1
test edi, 0x700000
mov eax, edi
cmove eax, ebx
and eax, 0x700000
cmp eax, 0x300000
ja 0x499ffa
je 0x499fca
test eax, eax
je 0x49a014
cmp eax, 0x100000
je 0x499f95
cmp eax, 0x200000
jne 0x49a008
mov eax, 0xa
jmp 0x499f9a
mov eax, 0xd
mov cx, word [esp + 0xa6]
mov edi, 1
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], edi
mov word [esp + 0xa4], ax
mov dword [esp + 0x24], ecx
jmp 0x49a053
mov edi, 2
mov dword [esp + 0x90], 0
mov ecx, 0xa
mov dword [esp + 0x94], edi
mov dword [esp + 0xa4], 0xa000d
mov dword [esp + 0x24], ecx
lea eax, [edi + 0xb]
jmp 0x49a053
cmp eax, 0x400000
je 0x49a02d
cmp eax, 0x500000
je 0x49a014
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov cx, word [esp + 0xa6]
mov dword [esp + 0x90], 2
mov dword [esp + 0x24], ecx
jmp 0x49a044
mov ax, word [esp + 0xa6]
mov dword [esp + 0x90], 1
mov dword [esp + 0x24], eax
mov edi, dword [esp + 0x94]
mov ax, word [esp + 0xa4]
cmp dword [esp + 0x50], 0
mov dword [esp + 0x1c], eax
je 0x49a079
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xc]
test eax, 0x200
je 0x49a079
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x1c]
mov eax, 0x55555556
shr edx, 1
lea ebx, [edx + edx*2]
lea ecx, [ebx + ebx]
mov dword [esp + 0x20], ebx
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x14]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x49a136
mov ecx, eax
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x49a136
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x20], eax
shl eax, 2
push eax
call fcn.0049efad
mov ebx, eax
add esp, 4
mov dword [esp + 0x84], ebx
test ebx, ebx
jne 0x49a0ef
lea eax, [ebx - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x20]
mov dword [esp + 0x88], eax
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [eax + eax]
mov dword [esp + 0x34], 1
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x8c], eax
jmp 0x49a189
mov eax, dword [ebp + 0x18]
mov ebx, eax
xor eax, eax
mov dword [esp + 0x84], ebx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x88], eax
mov dword [esp + 0xb8], 0
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x8c], eax
test ebx, ebx
je 0x49a202
mov eax, dword [esp + 0x14]
mov edi, ebx
movzx eax, word [eax + 0x10]
lea ecx, [edi + edx*4]
shl eax, 2
mov edx, ecx
sub edx, eax
lea eax, [edi + 8]
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x49a1c4
nop dword [eax]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x49a1b0
mov ebx, dword [esp + 0x84]
mov dword [ebx + 4], 0xffffffff
mov eax, dword [esp + 0x84]
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x104]
mov edi, dword [esp + 0x94]
mov dword [esp + 0x50], eax
mov ax, word [esp + 0xa6]
mov dword [esp + 0x24], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x74], 0
mov ebx, 0xff
jne 0x49a367
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc]
test al, 0x10
je 0x49a32b
movzx edx, word [edx + 0x14]
movzx ecx, dx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x38], edx
movzx ecx, cx
test al, 0x20
je 0x49a357
cmp dx, bx
mov ebx, dword [esp + 0xb0]
ja 0x49a2f4
movzx edx, byte [ebx + ecx]
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x3c]
cmp dx, 0x7f
ja 0x49a2f8
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x140], eax
movzx eax, dx
lea edx, [ecx + 0xc]
mov dword [esp + 0x13c], eax
movzx eax, word [edx]
mov dword [esp + 0x18], edx
test al, 0x40
je 0x49a3ab
movzx ecx, word [ecx + 0x16]
mov dword [esp + 0x44], ecx
movzx ecx, cx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x70], 1
movzx ecx, cx
mov dword [esp + 0x18], edx
test al, al
jns 0x49a3ab
mov eax, 0xff
cmp word [esp + 0x44], ax
ja 0x49a377
movzx eax, byte [ebx + ecx]
mov edx, dword [esp + 0x14]
add edx, 0xc
mov dword [esp + 0x44], eax
cmp word [esp + 0x48], 0x7f
mov eax, ecx
mov dword [esp + 0x18], edx
jbe 0x49a3ab
jmp 0x49a379
mov edx, dword [esp + 0x3c]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4ccca8]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4c02c8]
mov ax, word [eax*8 + 0x4cbbcc]
add ax, dx
movzx eax, ax
mov dword [esp + 0x38], eax
jmp 0x49a26e
cmp dword [esp + 0x40], 0
jne 0x49a367
mov eax, dword [esp + 0x58]
test eax, eax
je 0x49a367
mov ebx, dword [esp + 0xb0]
xor edx, edx
test byte [eax + 4], 1
je 0x49a350
add eax, 8
mov dword [esp + 0x68], eax
xor eax, eax
jmp 0x49a26e
mov ebx, dword [esp + 0xb0]
mov edx, dword [esp + 0x3c]
jmp 0x49a26a
mov ebx, dword [esp + 0xb0]
xor edx, edx
xor eax, eax
jmp 0x49a26e
mov eax, ecx
shr eax, 7
and ecx, 0x7f
mov dword [esp + 0x18], edx
movzx eax, byte [eax + 0x4ccca8]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4c02c8]
mov ax, word [eax*8 + 0x4cbbcc]
add ax, word [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x158], eax
mov eax, dword [esp + 0x44]
movzx eax, ax
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x48]
movzx eax, ax
mov dword [esp + 0x150], eax
mov eax, dword [ebp + 0x10]
add eax, eax
mov dword [esp + 0x144], eax
add eax, dword [ebp + 8]
mov dword [esp + 0x15c], eax
nop dword [eax + eax]
cmp dword [esp + 0x4c], 0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x30], ebx
je 0x49a524
mov ebx, dword [esp + 0xf4]
mov edx, esi
cmp esi, ebx
jae 0x49a51e
mov esi, dword [esp + 0x90]
nop dword [eax + eax]
test esi, esi
je 0x49a4ce
cmp edx, ebx
jae case.default.0x49a49f
movzx ecx, word [edx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49a45b
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp esi, 2
jne 0x49a48d
cmp ecx, 0xa
je case.0x49a49f.10
cmp ecx, 0xd
jne case.default.0x49a49f
lea eax, [ebx - 2]
cmp edx, eax
jae case.0x49a49f.10
cmp word [edx + 2], 0xa
mov edi, 2
je 0x49a4b8
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x49a4c8
cmp ecx, 0x85
ja 0x49a4a6
je case.0x49a49f.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x49a49f
jmp dword [ecx*4 + 0x49acc4]
sub ecx, 0x2028
je case.0x49a49f.10
sub ecx, 1
jne case.default.0x49a49f
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x49a4c8
xor eax, eax
test eax, eax
jne 0x49a51a
jmp 0x49a4f1
lea eax, [edi + edi]
mov ecx, ebx
sub ecx, eax
cmp edx, ecx
ja 0x49a4f1
mov eax, dword [esp + 0x1c]
cmp word [edx], ax
jne 0x49a4f1
cmp edi, 1
je 0x49a51a
mov eax, dword [esp + 0x24]
cmp word [edx + 2], ax
je 0x49a51a
add edx, 2
cmp edx, dword [esp + 0x2c]
jae 0x49a512
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x49a512
add edx, 2
cmp edx, ebx
jb 0x49a420
mov esi, dword [esp + 0x28]
mov ebx, edx
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
test eax, 0x4000000
jne 0x49a7a6
test edx, edx
je 0x49a59c
cmp esi, ebx
jae 0x49a7a6
mov eax, dword [esp + 0x13c]
cmp ax, word [esp + 0x140]
je 0x49a583
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
movzx eax, word [esi]
cmp ax, cx
je 0x49a7a2
cmp ax, dx
je 0x49a7a2
add esi, 2
cmp esi, ebx
jb 0x49a562
jmp 0x49a7a2
mov eax, dword [esp + 0x3c]
cmp word [esi], ax
je 0x49a7a6
add esi, 2
cmp esi, ebx
jb 0x49a587
jmp 0x49a7a6
cmp dword [esp + 0x40], 0
je 0x49a74f
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0xf0]
add eax, edx
cmp esi, eax
jbe 0x49a7a2
cmp esi, ebx
jae 0x49a720
lea ecx, [esi - 2]
mov dword [esp + 0x28], ecx
lea ebx, [esi - 4]
cmp dword [esp + 0x90], 0
je 0x49a6af
cmp esi, edx
jbe case.default.0x49a650
movzx eax, word [ecx]
mov edx, ecx
mov ecx, eax
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x49a5ff
movzx ecx, word [ebx]
mov edx, ebx
movzx ecx, cx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49a62a
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x90], 2
jne 0x49a63e
cmp ecx, 0xa
je case.0x49a650.10
cmp ecx, 0xd
jmp 0x49a687
cmp ecx, 0x85
ja 0x49a67c
je case.0x49a650.11
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x49a650
jmp dword [ecx*4 + 0x49acd4]
cmp edx, dword [esp + 0xf0]
jbe case.0x49a650.11
cmp word [edx - 2], 0xd
mov edi, 2
je 0x49a68e
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x49a69e
sub ecx, 0x2028
je case.0x49a650.11
sub ecx, 1
jne case.default.0x49a650
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x49a69e
xor eax, eax
test eax, eax
jne 0x49a71c
mov edx, dword [esp + 0xf0]
jmp 0x49a6d5
lea ecx, [edi + edi]
lea eax, [ecx + edx]
cmp esi, eax
jb 0x49a6d5
mov eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x1c]
cmp word [eax], cx
jne 0x49a6d5
cmp edi, 1
je 0x49a71c
mov ecx, dword [esp + 0x24]
cmp word [eax + 2], cx
je 0x49a71c
mov ecx, dword [esp + 0x28]
add esi, 2
add ecx, 2
add ebx, 2
mov dword [esp + 0x28], ecx
cmp esi, dword [esp + 0x2c]
jae 0x49a71c
mov ax, word [esi]
and ax, word [esp + 0x148]
cmp ax, word [esp + 0x14c]
jne 0x49a5d1
add esi, 2
add ecx, 2
add ebx, 2
mov dword [esp + 0x28], ecx
cmp esi, dword [esp + 0x2c]
jb 0x49a5d1
mov ebx, dword [esp + 0x2c]
cmp word [esi - 2], 0xd
jne 0x49a7a2
mov eax, dword [esp + 0x90]
cmp eax, 1
je 0x49a73c
cmp eax, 2
jne 0x49a7a2
cmp esi, ebx
jae 0x49a7a2
cmp word [esi], 0xa
mov edx, dword [esp + 0x10]
jne 0x49a7a6
add esi, 2
jmp 0x49a7a6
cmp dword [esp + 0x68], 0
je 0x49a7a6
cmp esi, ebx
jae 0x49a7a6
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x34]
movzx edx, word [esi]
mov dword [esp + 0x34], eax
cmp edx, 0xff
mov eax, 0xff
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
mov ecx, dword [esp + 0x68]
test byte [edx + ecx], al
jne 0x49a79e
mov eax, dword [esp + 0x34]
add esi, 2
mov dword [esp + 0x34], eax
cmp esi, ebx
jb 0x49a762
mov dword [esp + 0x20], edi
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x2c], edi
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
test eax, 0x4000000
jne 0x49a884
cmp dword [esp + 0x50], 0
jne 0x49a884
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x49a7eb
test byte [ecx + 4], 2
je 0x49a7eb
mov eax, edi
sub eax, esi
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x49a904
cmp dword [esp + 0x70], 0
je 0x49a884
mov eax, edi
sub eax, esi
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x49a884
lea eax, [esi + edx*2]
cmp eax, dword [esp + 0x5c]
jbe 0x49a884
cmp eax, edi
jae 0x49a904
mov ecx, dword [esp + 0x150]
cmp cx, word [esp + 0x154]
je 0x49a85a
nop word [eax + eax]
movzx ecx, word [eax]
mov ebx, eax
add eax, 2
mov dword [esp + 0x5c], ebx
mov edx, ecx
cmp cx, word [esp + 0x158]
je 0x49a87c
cmp dx, word [esp + 0x44]
je 0x49a87c
cmp eax, edi
jb 0x49a830
xor ebx, ebx
jmp 0x49aa63
mov edx, dword [esp + 0x48]
nop
mov cx, word [eax]
mov ebx, eax
add eax, 2
mov dword [esp + 0x5c], ebx
cmp cx, dx
je 0x49a87c
cmp eax, edi
jb 0x49a860
xor ebx, ebx
jmp 0x49aa63
cmp ebx, edi
jae 0x49a904
mov edx, dword [esp + 0xec]
lea eax, [esp + 0x78]
push 0
push 0
push eax
push 2
push esi
mov ecx, esi
mov dword [esp + 0x10c], esi
mov dword [esp + 0x114], esi
mov dword [esp + 0x8c], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x11c], 0
call fcn.00491dc0
add esp, 0x14
mov ebx, eax
cmp dword [esp + 0xdc], 0
je 0x49a8ee
mov eax, dword [esp + 0x60]
test eax, eax
cmove eax, dword [esp + 0x100]
mov dword [esp + 0x60], eax
cmp ebx, 0xfffffc1d
jg 0x49a90b
je 0x49a94d
cmp ebx, 0xfffffc1a
jne 0x49ab40
xor ebx, ebx
jmp 0x49aa63
cmp ebx, 0xfffffc20
jg 0x49a945
je 0x49a94d
cmp ebx, 0xfffffc1e
je 0x49a938
cmp ebx, 0xfffffc1f
jne 0x49aa63
mov edx, esi
mov dword [esp + 0xe8], 1
jmp 0x49a977
mov edx, dword [esp + 0xf8]
cmp edx, esi
je 0x49a94d
jmp 0x49a977
test ebx, ebx
jne 0x49ab3b
lea edx, [esi + 2]
mov dword [esp + 0xe8], 0
cmp edx, edi
jae 0x49a977
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x49a977
add edx, 2
mov ax, word [esp + 0xa6]
xor ebx, ebx
mov dword [esp + 0x24], eax
mov ax, word [esp + 0xa4]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x4c], ebx
je 0x49aac4
cmp dword [esp + 0x90], ebx
je 0x49aa93
mov edi, dword [esp + 0xf4]
cmp esi, edi
jae case.default.0x49aa2b
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x49a9e2
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x90], 2
jne 0x49aa19
cmp ecx, 0xa
je case.0x49aa2b.10
cmp ecx, 0xd
jne case.default.0x49aa2b
lea eax, [edi - 2]
cmp esi, eax
jae case.0x49aa2b.10
cmp word [esi + 2], 0xa
mov edi, 2
je 0x49aa44
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, edi
jmp 0x49aa5b
cmp ecx, 0x85
ja 0x49aa32
je case.0x49aa2b.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x49aa2b
jmp dword [ecx*4 + 0x49ace4]
sub ecx, 0x2028
je case.0x49aa2b.10
sub ecx, 1
jne case.default.0x49aa2b
mov edi, 1
mov dword [esp + 0x94], edi
mov eax, 1
jmp 0x49aa5b
mov edi, dword [esp + 0x94]
xor eax, eax
test eax, eax
je 0x49aacb
mov edi, dword [esp + 0x30]
cmp dword [esp + 0x34], 0
je 0x49aa79
push dword [esp + 0x84]
call fcn.0049ef92
add esp, 4
test ebx, ebx
je 0x49abb4
cmp ebx, 0xfffffff4
je 0x49abb4
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [esp + 0x94]
mov ecx, dword [esp + 0xf4]
lea eax, [edi + edi]
sub ecx, eax
cmp esi, ecx
ja 0x49aacb
mov eax, dword [esp + 0x1c]
cmp word [esi], ax
jne 0x49aacb
cmp edi, 1
je 0x49aa5f
mov eax, dword [esp + 0x24]
cmp word [esi + 2], ax
je 0x49aa5f
jmp 0x49aacb
mov edi, dword [esp + 0x94]
mov esi, edx
mov dword [esp + 0x28], esi
cmp dword [esp + 0x74], ebx
jne 0x49aa5f
mov eax, dword [esp + 0x30]
cmp edx, eax
ja 0x49aa5f
cmp edx, dword [esp + 0x15c]
jbe 0x49ab24
cmp word [edx - 2], 0xd
jne 0x49ab24
cmp edx, eax
jae 0x49ab24
cmp word [edx], 0xa
jne 0x49ab24
mov eax, dword [esp + 0x18]
mov ecx, 0x800
test word [eax], cx
jne 0x49ab24
mov eax, dword [esp + 0x90]
cmp eax, 1
je 0x49ab1d
cmp eax, 2
je 0x49ab1d
cmp edi, 2
jne 0x49ab24
lea esi, [edx + 2]
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x104]
mov dword [esp + 0x128], ebx
mov dword [esp + 0x50], eax
jmp 0x49a3f0
cmp ebx, 1
je 0x49ab4c
cmp ebx, 0xfffffc19
jne 0x49aa63
cmp dword [esp + 0x34], 0
mov edi, dword [esp + 0x54]
je 0x49ab9b
mov esi, dword [esp + 0x84]
cmp edi, 4
jl 0x49ab7e
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call fcn.0049cad0
add esp, 0xc
cmp dword [esp + 0x108], edi
jle 0x49ab92
mov dword [esp + 0xb8], 1
push esi
call fcn.0049ef92
add esp, 4
cmp dword [esp + 0xb8], 0
mov ecx, dword [esp + 0x108]
je 0x49ac06
cmp ecx, edi
jl 0x49ac06
xor esi, esi
jmp 0x49ac0f
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x49abdb
cmp dword [ebp + 0x1c], 1
jle 0x49abd4
sub ecx, dword [ebp + 8]
mov eax, dword [ebp + 0x18]
sub edi, dword [ebp + 8]
sar ecx, 1
sar edi, 1
mov dword [eax], ecx
mov dword [eax + 4], edi
mov eax, 0xfffffff4
jmp 0x49abde
or eax, 0xffffffff
mov edx, dword [esp + 0x64]
test edx, edx
je 0x49acba
test byte [edx], 0x20
je 0x49acba
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x12c]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x14]
mov ebx, dword [ebp + 0x18]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp eax, edi
jg 0x49ac58
test ebx, ebx
je 0x49ac58
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea edi, [ebx + ecx*4]
cmovg eax, dword [esp + 0x20]
xor edx, edx
lea eax, [ebx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, edx
test ecx, ecx
je 0x49ac58
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x1c], 2
jge 0x49ac62
xor esi, esi
jmp 0x49ac87
mov eax, dword [esp + 0xf8]
sub eax, dword [esp + 0xf0]
sar eax, 1
mov dword [ebx], eax
mov eax, dword [esp + 0xfc]
sub eax, dword [esp + 0xf0]
sar eax, 1
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x64]
test edx, edx
je 0x49aca0
test byte [edx], 0x20
je 0x49aca0
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0x128]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret