Function at 0x49c920
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x49d2bf
sub esp, 0x12c
mov eax, dword [esp + 0x130]
movzx ecx, byte [eax + 0xf]
and ecx, 0x1f
cmp ecx, 0x13
jne 0x49d2a5
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x49c975
movzx edx, byte [ecx + 0xf]
and edx, 0x1f
cmp edx, 0x14
je 0x49d22a
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
lea edx, [0xc5d8b0]
mov dword [esp], edx
lea ebx, [0x837020]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xb0]
mov dword [esp + 8], ebp
call fcn.0045d5f0
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test al, al
jne 0x49d147
lea eax, [0x836cc0]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x49d140
movzx edx, byte [ecx + 0xf]
test dl, 0x20
jne 0x49d098
mov edx, dword [eax]
test edx, 7
jne 0x49ca18
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 4]
mov ebp, dword [eax + 8]
lea esi, [ebp + 1]
cmp esi, edx
jg 0x49d036
lea edx, [ebp + 1]
mov dword [eax + 8], edx
mov byte [ebx + ebp], 0
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
mov ebp, dword [eax]
mov esi, ebp
shr ebp, 3
cmp ebp, edx
jae 0x49d20b
movzx edx, byte [ebx + ebp]
and esi, 7
mov ecx, esi
mov edi, 1
shl edi, cl
or edi, edx
xchg edi, eax
mov byte [ebx + ebp], al
xchg edi, eax
mov edx, dword [eax]
inc edx
mov dword [eax], edx
mov ecx, 4
mov edx, dword [esp + 0x130]
movzx ebx, byte [edx + 0xc]
test bl, 1
je 0x49d02c
mov ebx, 0x34
movzx ebp, word [edx + 0x20]
test bp, bp
jne 0x49d006
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x34], ebx
mov dword [esp + 0xac], ebp
xor esi, esi
jmp 0x49caea
mov dword [esp + 0x54], esi
mov edx, dword [ebp + esi*4]
mov dword [esp + 0xa4], edx
movzx ebx, byte [edx + 0xd]
mov dword [esp], eax
mov edi, ecx
neg ecx
dec ebx
movzx ebx, bl
and ebx, ecx
lea ecx, [edi + ebx]
mov dword [esp + 0x3c], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0049d2d0
mov eax, dword [esp + 0x54]
lea esi, [eax + 1]
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
mov ecx, dword [esp + 0x3c]
add ecx, eax
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x130]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0xac]
cmp esi, ebx
jl 0x49ca87
mov ebx, ecx
neg ecx
and ecx, 3
add ecx, ebx
movzx ebp, byte [edx + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x49cffc
mov ebp, 0x34
mov dword [esp + 0x50], ebx
movzx esi, word [edx + 0x22]
test si, 0x7fff
jne 0x49cf7e
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x38], ebp
mov dword [esp + 0xac], esi
mov dword [esp + 0x3c], ecx
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x54], ecx
mov ecx, edi
jmp 0x49cba6
mov edx, dword [esi + edi*4]
mov dword [esp + 0x9c], edx
movzx ebx, byte [edx + 0xd]
mov dword [esp], eax
mov ebp, ecx
neg ecx
dec ebx
movzx ebx, bl
and ebx, ecx
lea ecx, [ebp + ebx]
mov dword [esp + 0x4c], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0049d2d0
mov eax, dword [esp + 0x54]
inc eax
mov ecx, dword [esp + 0x9c]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x4c]
add ecx, edx
mov edx, dword [esp + 0x130]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xa0]
mov edi, dword [esp + 0x54]
cmp edi, ebp
jl 0x49cb3d
mov dword [esp + 0x4c], ecx
lea eax, [0x874020]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov byte [eax + 0xd], 4
mov ecx, dword [esp + 0x4c]
mov edx, ecx
neg ecx
and ecx, 3
add ecx, edx
mov dword [eax], ecx
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx]
shl edx, 2
mov dword [eax + 4], edx
mov edx, dword [ecx]
test edx, edx
jbe 0x49cf66
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
test edx, edx
jbe 0x49d1ef
mov edx, dword [0xc6f140]
test edx, edx
jne 0x49cf48
mov dword [eax + 0x14], ebx
mov edx, dword [esp + 0x134]
test edx, edx
mov dword [esp + 0x98], eax
je 0x49ceec
mov dword [esp], edx
call fcn.004971f0
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0x130]
mov dword [esp], edx
call fcn.004971f0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
lea edx, [esp + 0x78]
mov dword [esp], edx
lea edx, [0x89c1f7]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
mov edx, dword [esp + 0xac]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], edx
lea edx, [0x896a27]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 2
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
lea eax, [0x8969cb]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 1
call fcn.0043bef0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
call fcn.00496d00
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00497030
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x98]
mov dword [ecx + 0x18], eax
lea eax, [0x850980]
mov dword [esp], eax
call fcn.00409d90
mov eax, dword [esp + 4]
mov dword [esp + 0xa8], eax
lea ecx, [0x823600]
mov dword [esp], ecx
call fcn.00409d90
mov eax, dword [esp + 4]
lea ecx, [0x4a69b0]
mov dword [eax], ecx
mov ecx, dword [0xc6f140]
test ecx, ecx
jne 0x49cec1
mov ecx, dword [esp + 0x98]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0xa8]
mov dword [edx + 8], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0xbc], eax
lea edi, [esp + 0x104]
lea esi, [0x923690]
call fcn.0044ce3e
mov eax, dword [esp + 0x98]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], edx
lea eax, [0x837020]
mov dword [esp], eax
lea eax, [esp + 0xb8]
mov dword [esp + 4], eax
call fcn.00407360
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xac], ecx
lea edx, [0x858ba0]
mov dword [esp], edx
lea ebx, [esp + 0x104]
mov dword [esp + 4], ebx
call fcn.00407360
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
lea eax, [0xc5d8b0]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0045dd20
mov eax, dword [esp + 0x14]
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0x18]
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.0044c95b
mov eax, dword [esp + 0x40]
lea ecx, [0x858ba0]
cmp eax, ecx
jne 0x49d1d7
lea edi, [esp + 0xf0]
call fcn.0044ce3e
lea edi, [esp + 0xc8]
lea esi, [esp + 0xf0]
call fcn.0044ce3e
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], edx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebp
add esp, 0x12c
ret
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x98]
call fcn.0044c860
mov edx, dword [esp + 0xa8]
lea edi, [edx + 8]
mov ebx, eax
mov eax, ecx
call fcn.0044c860
mov ecx, ebx
jmp 0x49cd4c
mov eax, dword [esp + 0x130]
mov dword [esp], eax
call fcn.004971f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea edx, [esp + 0x58]
mov dword [esp], edx
lea edx, [0x89b075]
mov dword [esp + 4], edx
mov dword [esp + 8], 9
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x8969cb]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0043be30
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
jmp 0x49ccbc
lea edi, [eax + 0x14]
mov edx, eax
mov eax, ebx
call fcn.0044c860
mov ebx, dword [esp + 0x134]
test ebx, ebx
mov eax, edx
mov edx, ebx
jmp 0x49cc18
movzx ebx, byte [eax + 0xf]
or ebx, 0xffffff80
mov byte [eax + 0xf], bl
mov edx, dword [esp + 0x134]
test edx, edx
jmp 0x49cc18
add ebp, edx
test byte [ebp], al
and esi, 0x7fff
movzx edi, word [edx + 0x20]
add esi, edi
movzx esi, si
test esi, esi
jl 0x49d1f6
movzx edi, di
cmp edi, esi
ja 0x49d1f6
cmp esi, 0x100000
ja 0x49d1f6
mov dword [esp + 0x54], edi
sub esi, edi
add edi, 0xfff00000
xchg edi, ebx
neg ebx
xchg edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x54]
shl edi, 2
mov dword [esp + 0x54], edi
mov edi, dword [esp + 0x48]
sar edi, 0x1f
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0x48]
and edi, ebx
add edi, ebp
mov ebx, dword [esp + 0x50]
mov ebp, esi
mov esi, edi
jmp 0x49cb22
mov ebp, 0x24
jmp 0x49cb0b
add ebx, edx
test byte [ebx], al
movzx ebp, bp
test ebp, ebp
jl 0x49d1fd
cmp ebp, 0x100000
ja 0x49d1fd
mov esi, ebx
mov ebx, ebp
mov ebp, esi
jmp 0x49ca78
mov ebx, 0x24
jmp 0x49ca67
lea eax, [0x80a6a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 0xc], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x49d08e
mov dword [ebx + 4], eax
mov ebp, ecx
mov ebx, eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x134]
jmp 0x49ca0e
lea edi, [ebx + 4]
call fcn.0044c860
jmp 0x49d077
test dl, 0x80
je 0x49c9f0
mov edx, dword [eax]
test edx, 7
jne 0x49d0c5
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
lea esi, [ebx + 1]
cmp esi, ebp
jg 0x49d0e1
lea ebp, [ebx + 1]
mov dword [eax + 8], ebp
mov byte [edx + ebx], 0
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov ebp, ebx
shr ebx, 3
cmp ebx, edx
jae 0x49d204
lea edx, [ebp + 1]
mov dword [eax], edx
jmp 0x49ca49
lea eax, [0x80a6a0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00438c30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 0xc], edx
mov edx, dword [0xc6f140]
test edx, edx
jne 0x49d136
mov dword [ebx + 4], eax
mov ebx, ecx
mov edx, eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x134]
jmp 0x49d0bb
lea edi, [ebx + 4]
call fcn.0044c860
jmp 0x49d122
xor ecx, ecx
jmp 0x49ca4e
mov dword [esp + 0x44], ecx
lea edi, [esp + 0x118]
xor eax, eax
call fcn.0044c95b
mov ecx, dword [esp + 0x44]
lea edx, [0x858ba0]
cmp ecx, edx
jne 0x49d212
lea edi, [esp + 0x118]
call fcn.0044ce3e
lea edi, [esp + 0xdc]
lea esi, [esp + 0x118]
call fcn.0044ce3e
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0xe4]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0xec]
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], edx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebp
add esp, 0x12c
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x809c60]
mov dword [esp + 8], eax
call fcn.004071c0
ud2
call fcn.00426770
ud2
call fcn.00426870
ud2
call fcn.00426870
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x809c60]
mov dword [esp + 8], eax
call fcn.004071c0
ud2
mov dword [esp], ecx
call fcn.004971f0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x8b03a1]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x2c
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0043bdd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
lea eax, [0x80a3e0]
mov dword [esp], eax
lea eax, [esp + 0xc0]
mov dword [esp + 4], eax
call fcn.00407520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00427650
ud2
lea eax, [0x80a3e0]
mov dword [esp], eax
lea eax, [0x91fe68]
mov dword [esp + 4], eax
call fcn.00427650
ud2
call fcn.0044b100
jmp fcn.0049c920