Function at 0x4e0270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x12c
mov ebx, dword [esp + 0x14c]
mov esi, dword [esp + 0x148]
mov edi, dword [esp + 0x140]
test edi, edi
jne 0x4e02d3
cmp dword [esp + 0x144], 0
jne 0x4e02d3
test esi, esi
jne 0x4e02d3
cmp ebx, 0xfffffc19
jne 0x4e02d3
cmp dword [esp + 0x150], 0xfffffc19
jne 0x4e02d3
sub esp, 0xc
xor ecx, ecx
xor edx, edx
push 0
push 0
push 0
push 0
push 0
call fcn.004e15d0
add esp, 0x20
mov ebp, eax
jmp 0x4e02e5
mov ebp, 0xfffffffd
test dword [esp + 0x154], 0xe20f5a6f
je 0x4e02f2
mov eax, ebp
add esp, 0x12c
pop esi
pop edi
pop ebx
pop ebp
ret
test edi, edi
mov ebp, 0xfffffffe
je 0x4e02e5
test esi, esi
je 0x4e02e5
mov edx, dword [esp + 0x15c]
cmp dword [esp + 0x158], 0
jne 0x4e0319
mov ebp, 0xfffffffe
test edx, edx
jg 0x4e02e5
test edx, edx
js 0x4e0414
test ebx, ebx
js 0x4e041e
mov eax, dword [esp + 0x150]
test eax, eax
mov ebp, 0xffffffe8
js 0x4e02e5
cmp eax, ebx
jg 0x4e02e5
mov eax, dword [edi]
cmp eax, 0x50435245
jne 0x4e0428
mov ebp, 0xffffffe4
test byte [edi + 0xc], 2
je 0x4e02e5
mov eax, 0x800
and eax, dword [edi + 8]
mov dword [esp + 0x30], eax
mov ebp, eax
shr ebp, 0xb
mov eax, dword [esp + 0x154]
mov ecx, eax
shr eax, 0xf
and eax, 1
test ecx, 0x8000000
mov ecx, 2
cmove ecx, eax
mov dword [esp + 0x3c], ebp
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xf8], ecx
mov eax, dword [esp + 0x150]
lea eax, [esi + eax*2]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x154]
test ah, 0x20
jne 0x4e0471
cmp dword [esp + 0x30], 0
je 0x4e0471
sub esp, 4
lea eax, [esp + 0x12c]
push eax
push ebx
push esi
call fcn.0052f680
add esp, 0x10
test eax, eax
je 0x4e043f
cmp dword [esp + 0x15c], 2
jl 0x4e03f4
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x158]
mov dword [edx], ecx
mov dword [edx + 4], eax
cmp dword [esp + 0xf8], 1
mov ebp, 0xffffffe7
mov ecx, 0xfffffff6
cmovle ebp, ecx
cmp eax, 2
cmovge ebp, ecx
jmp 0x4e02e5
mov ebp, 0xfffffff1
jmp 0x4e02e5
mov ebp, 0xffffffe0
jmp 0x4e02e5
cmp eax, 0x45524350
mov eax, 0xffffffe3
mov ebp, 0xfffffffc
cmove ebp, eax
jmp 0x4e02e5
mov eax, dword [esp + 0x150]
test eax, eax
mov edx, dword [esp + 0x15c]
jle 0x4e0471
cmp eax, ebx
jge 0x4e0471
mov eax, dword [esp + 0x58]
movzx eax, word [eax]
and eax, 0xfc00
mov ebp, 0xfffffff5
cmp eax, 0xdc00
je 0x4e02e5
mov ecx, dword [esp + 0x144]
test ecx, ecx
je 0x4e04d1
mov eax, dword [ecx]
and eax, 0x48
cmp eax, 0x40
jne 0x4e04d1
test dword [esp + 0x154], 0xe7ff5a7f
jne 0x4e04d1
mov eax, dword [ecx + 0x1c]
test eax, eax
mov eax, dword [esp + 0x158]
je 0x4e04d1
sub esp, 4
push edx
push eax
push dword [esp + 0x160]
push dword [esp + 0x160]
push ebx
push esi
push ecx
call fcn.00505f30
mov ecx, dword [esp + 0x164]
add esp, 0x20
mov ebp, eax
cmp ebp, 0xffffffe1
jne 0x4e02e5
test ecx, ecx
movzx eax, word [edi + 0x22]
lea eax, [edi + eax*2]
mov dword [esp + 0xc], eax
mov dword [esp + 0x9c], eax
movzx eax, word [edi + 0x26]
mov dword [esp + 8], eax
mov dword [esp + 0x8c], eax
movzx edx, word [edi + 0x24]
mov dword [esp + 0x90], edx
mov dword [esp + 0x70], 0x989680
mov dword [esp + 0x74], 0x989680
mov dword [esp + 0x118], 0
mov eax, dword [edi + 0x30]
mov dword [esp + 0x10], eax
je 0x4e0562
mov eax, dword [ecx]
mov dword [esp + 0x2c], 0
test al, 1
je 0x4e0538
mov ebp, dword [ecx + 4]
mov dword [esp + 0x2c], ebp
mov ebp, 0x989680
test al, 2
je 0x4e0548
mov ebp, dword [ecx + 8]
mov dword [esp + 0x70], ebp
mov dword [esp + 0x14], 0x989680
test al, 0x10
jne 0x4e057d
test al, 4
jne 0x4e0594
test al, 8
jne 0x4e05b0
mov ecx, dword [esp + 0x10]
jmp 0x4e05b3
mov dword [esp + 0x2c], 0
mov dword [esp + 0x14], 0x989680
mov ebp, 0x989680
mov ecx, dword [esp + 0x10]
jmp 0x4e05b3
mov dword [esp + 0x1c], ebp
mov ebp, dword [ecx + 0x14]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x1c]
test al, 4
je 0x4e0558
mov ecx, dword [esp + 0x144]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x118], ecx
mov ecx, dword [esp + 0x144]
test al, 8
je 0x4e055c
mov ecx, dword [ecx + 0x10]
mov eax, dword [edi + 0xc]
mov dword [esp + 0x38], eax
test ah, 0x20
je 0x4e05ca
mov eax, dword [edi + 0x10]
cmp eax, ebp
jae 0x4e05ca
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x38]
test ah, 0x40
je 0x4e05e0
mov eax, dword [edi + 0x14]
cmp eax, dword [esp + 0x14]
jae 0x4e05e0
mov dword [esp + 0x74], eax
test ecx, ecx
mov eax, 0x5599e0
cmovne eax, ecx
imul edx, dword [esp + 8]
mov ebp, dword [edi + 8]
mov ecx, dword [esp + 0xc]
lea ecx, [ecx + edx*2]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], esi
mov ecx, dword [esp + 0x150]
mov dword [esp + 0x104], ecx
lea ecx, [esi + ebx*2]
mov dword [esp + 0x14], ecx
mov dword [esp + 0xe8], ecx
mov ecx, ebp
shr ecx, 5
and ecx, 1
mov dword [esp + 0xc8], ecx
mov ecx, ebp
shr ecx, 0x1d
and ecx, 1
mov dword [esp + 0xc4], ecx
mov ecx, ebp
shr ecx, 0x19
and ecx, 1
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x98], 0
mov edx, dword [esp + 0x154]
mov ecx, edx
shr ecx, 7
and ecx, 1
mov dword [esp + 0xb4], ecx
mov ecx, edx
shr ecx, 8
and ecx, 1
mov dword [esp + 0xb8], ecx
mov ecx, edx
shr ecx, 0xa
and ecx, 1
mov dword [esp + 0xcc], ecx
mov ecx, edx
shr ecx, 0x1c
and ecx, 1
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x114], 0
mov ecx, dword [esp + 0x38]
shr ecx, 0xc
and ecx, 1
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xa8], eax
lea ecx, [eax + 0x100]
mov dword [esp + 0xac], ecx
add eax, 0x340
mov dword [esp + 0xb0], eax
mov ecx, edx
and ecx, 0x1800000
cmp ecx, 0x1000000
mov dword [esp + 0x10], ebp
je 0x4e0741
cmp ecx, 0x800000
mov eax, dword [esp + 0x15c]
je 0x4e074c
mov ebp, 0xffffffe9
test ecx, ecx
jne 0x4e02e5
mov ebp, dword [esp + 0x10]
test ebp, 0x1800000
je 0x4e0753
mov ecx, ebp
shr ecx, 0x17
and ecx, 1
jmp 0x4e0755
xor ecx, ecx
mov eax, dword [esp + 0x15c]
jmp 0x4e0755
mov ecx, 1
jmp 0x4e0755
xor ecx, ecx
mov dword [esp + 0xd8], ecx
mov ecx, dword [esp + 0x154]
test ecx, 0x700000
mov edx, ecx
cmove edx, ebp
shr edx, 0x14
mov ecx, edx
and cl, 7
cmp cl, 5
ja case.default.0x4e0782
mov cx, 0xa
and edx, 7
jmp dword [edx*4 + 0x4e15a4]
mov cx, 0xd
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 1
mov word [esp + 0xa0], cx
jmp 0x4e07f2
mov ebp, 0xffffffe9
jmp 0x4e02e5
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 2
mov dword [esp + 0xa0], 0xa000d
jmp 0x4e07f2
mov dword [esp + 0x84], 1
jmp 0x4e07f2
mov dword [esp + 0x84], 2
mov ecx, dword [esp + 0x38]
test ch, 2
je 0x4e080f
mov ecx, dword [esp + 0xf8]
mov ebp, 0xfffffff3
test ecx, ecx
jne 0x4e02e5
mov ecx, 0xaaaaaaab
mul ecx
mov ecx, edx
shr ecx, 1
lea eax, [ecx + ecx*2]
mov dword [esp + 0x64], eax
lea eax, [eax + eax]
mov edx, 0x55555556
imul edx
mov dword [esp + 0x34], edx
movzx ebp, word [edi + 0x20]
test ebp, ebp
je 0x4e0877
cmp ecx, ebp
ja 0x4e0877
lea eax, [ebp + ebp*2]
lea eax, [eax*4 + 0xc]
sub esp, 0xc
push eax
call dword [0x545970]
add esp, 0x10
mov ecx, eax
mov dword [esp + 0x78], ecx
test ecx, ecx
je 0x4e0a4f
lea ebp, [ebp + ebp*2 + 3]
lea eax, [esp + 0x78]
mov dword [esp + 0x50], eax
mov dword [esp + 0x40], 1
jmp 0x4e0896
lea eax, [esp + 0x78]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x158]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x40], 0
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x10]
or eax, dword [esp + 0x154]
and eax, 0x10
mov dword [esp + 0x48], eax
mov dword [esp + 0x7c], ebp
lea eax, [ebp + ebp]
mov edx, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x80], eax
mov dword [esp + 0x100], 0
test ecx, ecx
mov edx, dword [esp + 0x15c]
je 0x4e0925
movzx edx, word [edi + 0x1e]
lea eax, [ecx + ebp*4 - 4]
sub ebp, edx
lea edx, [ecx + ebp*4]
mov dword [esp + 0xc], edx
lea edx, [ecx + 8]
cmp ebp, 2
cmovge edx, dword [esp + 0xc]
cmp eax, edx
jb 0x4e0908
mov dword [eax], 0xffffffff
add eax, 0xfffffffc
cmp eax, edx
jae 0x4e08fb
mov edx, dword [esp + 0x15c]
test edx, edx
jle 0x4e0925
mov dword [ecx], 0xffffffff
cmp edx, 1
je 0x4e0925
mov dword [ecx + 4], 0xffffffff
cmp dword [esp + 0x48], 0
mov eax, dword [edi + 0xc]
je 0x4e0984
mov dword [esp + 0x24], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov ebp, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
shr ecx, 0x1f
test al, 0x40
jne 0x4e09fb
mov al, 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x150]
jmp 0x4e0ad9
test al, 0x10
jne 0x4e0a26
mov dword [esp + 0x24], 0
cmp dword [esp + 0x2c], 0
je 0x4e0937
mov ecx, dword [esp + 0x38]
and ecx, 0x100
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov ebp, dword [esp + 0x10]
jne 0x4e0953
mov ebp, dword [esp + 0x2c]
mov ecx, dword [ebp + 4]
and ecx, 1
neg ecx
lea ebp, [ebp + 8]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x10]
and dword [esp + 0x18], ecx
mov dword [esp + 0x24], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
jmp 0x4e0953
mov dword [esp + 0xc], eax
mov ax, word [edi + 0x1a]
cmp byte [esp + 0xc], 0
mov dword [esp + 0x60], eax
js 0x4e0a59
mov dword [esp + 0x44], 0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x150]
jmp 0x4e0ad9
mov bp, word [edi + 0x18]
test al, 0x20
mov dword [esp + 0x1c], ebp
jne 0x4e1435
mov dword [esp + 0x20], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ebp
jmp 0x4e094f
mov ebp, 0xfffffffa
jmp 0x4e02e5
movzx edx, ax
mov ebp, edx
cmp edx, 0xff
mov dword [esp + 0x28], eax
ja 0x4e0a79
mov edx, dword [esp + 0xac]
movzx eax, byte [edx + ebp]
mov dword [esp + 0x28], eax
mov dword [esp + 0x44], 0
cmp dword [esp + 0x30], 0
je 0x4e0ac7
cmp ebp, 0x80
jb 0x4e0ac7
mov eax, ebp
mov edx, eax
and edx, 0xff80
shr edx, 7
movzx edx, byte [edx + 0x5494e0]
shl edx, 7
and ebp, 0x7f
or ebp, edx
movzx edx, word [ebp + ebp + 0x54b6e0]
add eax, dword [edx*8 + 0x547e64]
mov dword [esp + 0x44], 0
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x15c]
mov eax, dword [esp + 0x150]
mov ebp, dword [esp + 0x10]
lea eax, [esi + eax*2 - 2]
mov dword [esp + 0x68], eax
add dword [esp + 0x34], ecx
mov dword [esp + 0x5c], 0
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov dword [esp + 0x4c], 0
jmp 0x4e0d7a
add eax, 2
cmp eax, dword [esp + 0x14]
jae 0x4e0b10
cmp word [eax], bp
jne 0x4e0b02
cmp eax, dword [esp + 0x14]
mov dword [esp + 0x68], eax
jae 0x4e14db
mov ecx, dword [esp + 8]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf4], ecx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x94], 0
mov edx, dword [esp + 0xe0]
sub esp, 0xc
mov ebp, ecx
push 0
push 0
lea eax, [esp + 0x80]
push eax
push 2
push ebp
call fcn.004e15d0
add esp, 0x20
mov ebp, eax
cmp dword [esp + 0xd4], 0
setne al
mov edx, dword [esp + 0x5c]
test edx, edx
sete cl
and cl, al
cmovne edx, dword [esp + 0xf4]
mov dword [esp + 0x5c], edx
test cl, cl
mov eax, dword [esp + 0x4c]
cmovne eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
lea eax, [ebp + 0x3e4]
cmp eax, 4
ja case.default.0x4e0bc1
mov edx, dword [esp + 0x15c]
jmp dword [eax*4 + 0x4e15bc]
mov ebp, dword [esp + 0xec]
cmp ebp, dword [esp + 8]
jbe case.0x4e0bc1.995
jmp 0x4e0c3c
test ebp, ebp
mov edx, dword [esp + 0x15c]
jne 0x4e12d9
mov eax, dword [esp + 8]
lea ebp, [eax + 2]
cmp dword [esp + 0x30], 0
mov dword [esp + 0x98], 0
je 0x4e0c3c
cmp ebp, dword [esp + 0x14]
jae 0x4e0c3c
mov ecx, eax
movzx eax, word [ecx + 2]
and eax, 0xfc00
lea ecx, [ecx + 4]
cmp eax, 0xdc00
cmove ebp, ecx
test dword [esp + 0x10], 0x40000
jne 0x4e0c4a
jmp 0x4e0cfe
mov eax, dword [esp + 0x94]
mov dword [esp + 0x98], eax
mov ebp, dword [esp + 8]
test dword [esp + 0x10], 0x40000
je 0x4e0cfe
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0xe8]
test ecx, ecx
je 0x4e0c9f
cmp dword [esp + 8], eax
jae 0x4e0cfe
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push dword [esp + 0x24]
call fcn.0052f350
add esp, 0x20
or eax, dword [esp + 0x48]
jne 0x4e14db
cmp ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x15c]
jbe 0x4e0d13
jmp case.0x4e0bc1.996
mov ecx, dword [esp + 0x88]
lea edx, [ecx + ecx]
sub eax, edx
mov edx, dword [esp + 0x15c]
cmp dword [esp + 8], eax
ja 0x4e0cfe
mov eax, dword [esp + 8]
movzx eax, word [eax]
cmp ax, word [esp + 0xa0]
jne 0x4e0cfe
cmp ecx, 1
je case.0x4e0bc1.996
cmp dword [esp + 0x48], 0
jne case.0x4e0bc1.996
cmp ebp, dword [esp + 0x14]
ja case.0x4e0bc1.996
movzx eax, word [esp + 0xa2]
mov ecx, dword [esp + 8]
cmp word [ecx + 2], ax
jne 0x4e0d13
jmp case.0x4e0bc1.996
cmp dword [esp + 0x48], 0
jne case.0x4e0bc1.996
cmp ebp, dword [esp + 0x14]
ja case.0x4e0bc1.996
cmp ebp, dword [esp + 0x58]
jbe 0x4e0d67
cmp ebp, dword [esp + 0x14]
jae 0x4e0d67
movzx eax, word [ebp - 2]
cmp eax, 0xd
jne 0x4e0d67
movzx eax, word [ebp]
cmp eax, 0xa
jne 0x4e0d67
test byte [edi + 0xd], 8
jne 0x4e0d67
mov eax, dword [esp + 0x84]
dec eax
lea ecx, [ebp + 2]
cmp dword [esp + 0x88], 2
cmove ebp, ecx
cmp eax, 2
cmovb ebp, ecx
jmp 0x4e0d67
mov eax, ecx
jmp 0x4e1216
mov eax, dword [esp + 8]
mov edx, ebp
jmp 0x4e1216
mov dword [esp + 0x11c], 0
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x10]
test ebp, 0x40000
mov ecx, dword [esp + 0x14]
je 0x4e0f17
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0xe8]
je 0x4e0e55
mov ecx, dword [esp + 8]
cmp ecx, eax
jae 0x4e0f17
mov ebp, dword [esp + 8]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x4e0de1
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push ebp
call fcn.0052f350
add esp, 0x20
test eax, eax
mov edx, dword [esp + 0x15c]
je 0x4e0e21
jmp 0x4e0f08
mov ecx, dword [esp + 0x88]
lea edx, [ecx + ecx]
sub eax, edx
cmp ebp, eax
mov edx, dword [esp + 0x15c]
ja 0x4e0e21
movzx eax, word [ebp]
cmp ax, word [esp + 0xa0]
jne 0x4e0e21
cmp ecx, 1
je 0x4e0f08
movzx eax, word [ebp + 2]
cmp ax, word [esp + 0xa2]
je 0x4e0f08
lea ecx, [ebp + 2]
cmp ecx, dword [esp + 0x14]
jae 0x4e0e3f
movzx eax, word [ebp + 2]
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x4e0e3f
add ebp, 4
mov ecx, ebp
mov eax, dword [esp + 0xe8]
cmp ecx, eax
mov ebp, ecx
jb 0x4e0dac
jmp 0x4e0f17
mov ecx, dword [esp + 8]
cmp ecx, eax
jae 0x4e0f17
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x4e0ea9
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push dword [esp + 0x28]
call fcn.0052f350
add esp, 0x20
test eax, eax
jne 0x4e0f0c
mov eax, dword [esp + 0xe8]
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 0xc]
jmp 0x4e0efb
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x54], ecx
lea edx, [ecx + ecx]
mov ebp, eax
sub ebp, edx
mov ecx, dword [esp + 0xc]
cmp ecx, ebp
jbe 0x4e0ecc
mov edx, dword [esp + 0x15c]
jmp 0x4e0efb
movzx edx, word [ecx]
cmp dx, word [esp + 0xa0]
jne 0x4e0e9c
cmp dword [esp + 0x54], 1
mov edx, dword [esp + 0x15c]
je 0x4e0f13
mov ebp, dword [esp + 0xc]
movzx ecx, word [ebp + 2]
cmp cx, word [esp + 0xa2]
mov ecx, ebp
je 0x4e0f17
add ecx, 2
cmp ecx, eax
jb 0x4e0e65
jmp 0x4e0f17
mov ecx, ebp
jmp 0x4e0f17
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 0xc]
mov eax, dword [edi + 8]
or eax, dword [esp + 0x154]
test eax, 0x4000000
jne 0x4e1212
cmp dword [esp + 0x20], 0
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 8]
mov dword [esp + 0xc], ecx
je 0x4e0f74
mov dword [esp + 0x1c], edx
cmp dx, bp
jne 0x4e0fe5
cmp eax, ecx
mov edx, dword [esp + 0x15c]
jae 0x4e1216
cmp word [eax], bp
je 0x4e1216
add eax, 2
cmp eax, ecx
jb 0x4e0f5f
jmp 0x4e1216
mov eax, dword [esp + 0x38]
test ah, 1
jne 0x4e1021
cmp dword [esp + 0x18], 0
mov edx, dword [esp + 0x15c]
je 0x4e1212
mov eax, dword [esp + 8]
cmp eax, ecx
jae 0x4e1216
mov ebp, eax
movzx ecx, word [eax]
cmp ecx, 0xff
jb 0x4e0fb1
mov ecx, 0xff
mov eax, ecx
shr eax, 3
mov edx, dword [esp + 0x18]
movzx edx, byte [edx + eax]
and cl, 7
mov eax, 1
shl eax, cl
and eax, edx
jne 0x4e0fcf
add ebp, 2
mov ecx, dword [esp + 0xc]
test eax, eax
mov edx, dword [esp + 0x15c]
mov eax, ebp
je 0x4e0f97
jmp 0x4e1216
cmp eax, ecx
mov edx, dword [esp + 0x15c]
jae 0x4e1216
mov ecx, edx
mov edx, eax
movzx eax, word [eax]
cmp ax, word [esp + 0x1c]
je 0x4e1119
cmp ax, bp
je 0x4e1119
mov eax, edx
add eax, 2
cmp eax, dword [esp + 0xc]
mov edx, ecx
jb 0x4e0ff4
jmp 0x4e1216
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x150]
lea ecx, [eax + ecx*2]
cmp dword [esp + 8], ecx
mov edx, dword [esp + 0x15c]
jbe 0x4e1212
cmp dword [esp + 0x30], 0
je 0x4e1122
mov ecx, dword [esp + 0xc]
cmp dword [esp + 8], ecx
jb 0x4e1064
jmp 0x4e11d1
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x4e109a
mov ebp, dword [esp + 8]
cmp ebp, eax
jbe 0x4e10e2
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push ebp
call fcn.0052f400
add esp, 0x20
test eax, eax
je 0x4e10e2
jmp 0x4e11ca
mov ecx, dword [esp + 0x88]
lea eax, [eax + ecx*2]
mov ebp, dword [esp + 8]
cmp ebp, eax
jb 0x4e10e2
lea eax, [ecx + ecx]
mov edx, ebp
sub edx, eax
movzx eax, word [edx]
cmp ax, word [esp + 0xa0]
jne 0x4e10e2
cmp ecx, 1
je 0x4e11ca
neg ecx
mov ebp, dword [esp + 8]
movzx eax, word [ebp + ecx*2 + 2]
cmp ax, word [esp + 0xa2]
je 0x4e11ca
lea eax, [ebp + 2]
mov ecx, dword [esp + 0xc]
cmp eax, ecx
jae 0x4e1108
movzx ecx, word [ebp + 2]
and ecx, 0xfc00
cmp ecx, 0xdc00
jne 0x4e1104
add ebp, 4
mov eax, ebp
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], eax
cmp eax, ecx
jb 0x4e105d
jmp 0x4e11ca
mov eax, edx
mov edx, ecx
jmp 0x4e1216
mov ecx, dword [esp + 0xc]
cmp dword [esp + 8], ecx
jae 0x4e11d1
mov ecx, dword [esp + 8]
lea ebp, [ecx + 2]
jmp 0x4e1143
mov eax, dword [esp + 0xe4]
add ebp, 2
lea ecx, [ebp - 2]
mov edx, dword [esp + 0x84]
test edx, edx
je 0x4e117d
cmp ecx, eax
jbe 0x4e11b2
sub esp, 0xc
push dword [esp + 0x48]
mov dword [esp + 0x64], ebp
lea ebp, [esp + 0x98]
push ebp
mov ebp, dword [esp + 0x68]
push eax
push edx
push ecx
call fcn.0052f400
add esp, 0x20
test eax, eax
je 0x4e11b2
jmp 0x4e11c3
mov edx, dword [esp + 0x88]
lea eax, [eax + edx*2]
cmp ecx, eax
jb 0x4e11b2
lea ecx, [edx + edx]
mov eax, ebp
sub eax, ecx
movzx ecx, word [eax - 2]
cmp cx, word [esp + 0xa0]
jne 0x4e11b2
cmp edx, 1
je 0x4e11ca
movzx eax, word [eax]
cmp ax, word [esp + 0xa2]
je 0x4e11ca
add dword [esp + 8], 2
cmp ebp, dword [esp + 0xc]
jb 0x4e1139
jmp 0x4e11ca
add ebp, 0xfffffffe
mov dword [esp + 8], ebp
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 8]
movzx eax, word [ecx - 2]
cmp eax, 0xd
jne 0x4e0d55
cmp ecx, dword [esp + 0xc]
jae 0x4e1212
mov ebp, edx
mov eax, dword [esp + 0x84]
dec eax
cmp eax, 1
ja 0x4e0d5c
mov edx, dword [esp + 8]
movzx eax, word [edx]
lea ecx, [edx + 2]
cmp eax, 0xa
mov eax, edx
cmove eax, ecx
jmp 0x4e0d60
mov eax, dword [esp + 8]
mov dword [esp + 8], eax
mov eax, dword [edi + 8]
or eax, dword [esp + 0x154]
and eax, 0x4000000
or eax, dword [esp + 0xf8]
jne 0x4e0b1e
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4e125b
test byte [eax + 4], 2
je 0x4e125b
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 8]
sar eax, 1
mov ecx, dword [esp + 0x2c]
cmp eax, dword [ecx + 0x28]
jb case.0x4e0bc1.996
cmp byte [esp + 0x44], 0
jne 0x4e0b1e
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
sub eax, ecx
cmp eax, 0x7cf
jg 0x4e0b1e
mov eax, dword [esp + 0x20]
lea eax, [ecx + eax*2]
cmp eax, dword [esp + 0x68]
jbe 0x4e0b1e
mov ebp, dword [esp + 0x60]
cmp bp, word [esp + 0x28]
je 0x4e0b05
cmp eax, dword [esp + 0x14]
jae 0x4e0b10
movzx ecx, word [eax]
cmp cx, word [esp + 0x28]
mov edx, eax
je 0x4e12b4
lea edx, [eax + 2]
cmp cx, bp
cmovne eax, edx
cmp eax, dword [esp + 0x14]
jae 0x4e0b10
cmp cx, bp
je 0x4e0b10
cmp cx, word [esp + 0x28]
jne 0x4e12a5
jmp 0x4e0b10
cmp ebp, 1
je 0x4e12ea
cmp ebp, 0xfffffc19
jne 0x4e14bd
cmp dword [esp + 0x40], 0
je 0x4e1349
cmp dword [esp + 0x64], 6
jl 0x4e1322
mov eax, dword [esp + 0x158]
lea eax, [eax + 8]
mov ecx, dword [esp + 0x78]
add ecx, 8
mov edx, dword [esp + 0x34]
lea edx, [edx*4 - 8]
sub esp, 4
push edx
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xfc], eax
jle 0x4e1337
or byte [esp + 0x102], 1
sub esp, 0xc
mov eax, dword [esp + 0x5c]
push dword [eax]
call dword [0x545974]
add esp, 0x10
mov eax, dword [esp + 0xfc]
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
xor esi, esi
cmp eax, dword [esp + 0x34]
cmovl esi, ecx
test byte [esp + 0x102], 1
cmove esi, ecx
cmp dword [esp + 0x158], 0
je 0x4e13cd
movzx edx, word [edi + 0x1e]
cmp ecx, edx
jg 0x4e13cd
lea ecx, [edx + edx + 2]
mov edx, dword [esp + 0x15c]
cmp ecx, edx
cmovg ecx, edx
cmp eax, ecx
jge 0x4e13cd
mov edx, dword [esp + 0x158]
mov ebx, edx
lea ecx, [ebx + ecx*4]
lea edx, [ebx + eax*4]
lea edi, [ebx + eax*4 + 4]
shl eax, 2
cmp ecx, edi
cmova edi, ecx
sub edi, eax
mov eax, ebx
not eax
lea eax, [edi + eax + 4]
and eax, 0xfffffffc
sub esp, 4
push eax
push 0xff
push edx
call sub.msvcrt.dll_memset
add esp, 0x10
xor ebp, ebp
cmp dword [esp + 0x15c], 2
jl 0x4e1404
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xec]
sub ecx, eax
sar ecx, 1
mov edx, dword [esp + 0x158]
mov dword [edx], ecx
mov ecx, dword [esp + 0xf0]
sub ecx, eax
sar ecx, 1
mov dword [edx + 4], ecx
mov ebp, esi
cmp dword [esp + 0x144], 0
je 0x4e02e5
mov eax, dword [esp + 0x144]
test byte [eax], 0x20
je 0x4e02e5
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x144]
jmp 0x4e159a
movzx ecx, bp
cmp ecx, 0xff
mov dword [esp + 0x24], ebp
ja 0x4e1453
mov edx, dword [esp + 0xac]
movzx edx, byte [edx + ecx]
mov dword [esp + 0x24], edx
mov dword [esp + 0x18], 0
cmp dword [esp + 0x30], 0
mov dword [esp + 0x20], 1
je 0x4e14b1
cmp ecx, 0x80
jb 0x4e14b1
mov edx, ecx
and edx, 0xff80
shr edx, 7
movzx edx, byte [edx + 0x5494e0]
shl edx, 7
mov ebp, ecx
and ebp, 0x7f
or ebp, edx
movzx edx, word [ebp + ebp + 0x54b6e0]
add ecx, dword [edx*8 + 0x547e64]
mov dword [esp + 0x20], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x15c]
jmp 0x4e094f
cmp dword [esp + 0x40], 0
mov ecx, dword [esp + 0x144]
mov eax, dword [esp + 0x158]
mov edx, dword [esp + 0x15c]
jne 0x4e14f9
jmp 0x4e1520
mov edx, dword [esp + 0x15c]
xor ebp, ebp
cmp dword [esp + 0x40], 0
mov ecx, dword [esp + 0x144]
mov eax, dword [esp + 0x158]
je 0x4e152d
sub esp, 0xc
mov eax, dword [esp + 0x5c]
push dword [eax]
call dword [0x545974]
mov edx, dword [esp + 0x16c]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x154]
add esp, 0x10
test ebp, ebp
je 0x4e152d
cmp ebp, 0xfffffff4
jne 0x4e02e5
cmp dword [esp + 0x4c], 0
je 0x4e157d
mov dword [esp + 0x11c], 0
mov ebp, 0xfffffff4
cmp edx, 2
jl 0x4e1582
mov edi, dword [esp + 0x5c]
sub edi, esi
sar edi, 1
mov dword [eax], edi
add ebx, ebx
sar ebx, 1
mov dword [eax + 4], ebx
mov ebp, 0xfffffff4
cmp edx, 2
je 0x4e1582
mov edx, dword [esp + 0x4c]
sub edx, esi
sar edx, 1
mov dword [eax + 8], edx
mov ebp, 0xfffffff4
test ecx, ecx
jne 0x4e158a
jmp 0x4e02e5
mov ebp, 0xffffffff
test ecx, ecx
je 0x4e02e5
test byte [ecx], 0x20
je 0x4e02e5
mov eax, dword [esp + 0x120]
mov ecx, dword [ecx + 0x18]
mov dword [ecx], eax
jmp 0x4e02e5