Function at 0x48f370
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x124
push ebx
mov ebx, dword [ebp + 0xc]
xor eax, eax
push esi
push edi
xor edi, edi
mov dword [esp + 0x50], eax
mov dword [esp + 0x4c], edi
mov dword [esp + 0x58], edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x34], edx
mov edx, ecx
xor ecx, ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x2c], ecx
lea eax, [edi + edi]
mov dword [esp + 0x20], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x12c], eax
add eax, ecx
mov esi, eax
mov dword [esp + 0x64], eax
xor eax, eax
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x54], 0
lea eax, [esi - 2]
mov dword [esp + 0x30], eax
test edx, edx
jne 0x48f414
cmp dword [esp + 0x34], 0
jne 0x48f414
test ecx, ecx
jne 0x48f414
cmp ebx, 0xfffffc19
jne 0x48f414
cmp edi, ebx
jne 0x48f414
push ecx
push ecx
push ecx
push ecx
push ecx
xor edx, edx
call fcn.00487b90
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test dword [ebp + 0x14], 0xe20f5a6f
je 0x48f429
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edx, edx
je 0x4900f3
test ecx, ecx
je 0x4900f3
cmp dword [ebp + 0x18], 0
mov eax, dword [ebp + 0x1c]
jne 0x48f44a
test eax, eax
jg 0x4900f3
test eax, eax
jns 0x48f45a
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
js 0x4900e7
cmp edi, ebx
jg 0x4900e7
mov ecx, dword [edx]
cmp ecx, 0x50435245
je 0x48f48e
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [edx + 0xc]
test al, 2
jne 0x48f4a2
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xb4], 1
test eax, 0x8000000
je 0x48f4be
mov eax, 2
jmp 0x48f4c4
shr eax, 0xf
and eax, 1
test dword [ebp + 0x14], 0x2000
mov ecx, 0xfc00
mov dword [esp + 0xf4], eax
jne 0x48f4ff
test edi, edi
jle 0x48f4ff
cmp edi, ebx
jge 0x48f4ff
mov eax, esi
mov ax, word [eax]
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x48f4ff
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [edx + 0x18]
mov dword [esp + 0x28], eax
mov dword [esp + 0x6c], 0x989680
mov dword [esp + 0x70], 0x1770
lea eax, [edx + eax*2]
mov dword [esp + 0x90], eax
movzx eax, word [edx + 0x1c]
mov dword [esp + 0x88], eax
movzx eax, word [edx + 0x1a]
mov dword [esp + 0x8c], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x114], eax
mov eax, dword [edx + 0x20]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x38], eax
test edx, edx
je 0x48f596
mov ecx, dword [edx]
test cl, 1
je 0x48f561
mov eax, dword [edx + 4]
mov dword [esp + 0x3c], eax
test cl, 2
je 0x48f56d
mov eax, dword [edx + 8]
mov dword [esp + 0x6c], eax
test cl, 0x10
je 0x48f579
mov eax, dword [edx + 0x14]
mov dword [esp + 0x70], eax
test cl, 4
je 0x48f588
mov eax, dword [edx + 0xc]
mov dword [esp + 0x114], eax
test cl, 8
je 0x48f592
mov eax, dword [edx + 0x10]
jmp 0x48f596
mov eax, dword [esp + 0x38]
test eax, eax
mov ebx, dword [esp + 0x14]
mov edx, 0x4b67c0
mov dword [esp + 0x100], edi
cmovne edx, eax
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov dword [esp + 0xd8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0x11c], 0
mov eax, dword [eax + 8]
mov ecx, eax
shr eax, 0x12
and eax, 1
or ecx, dword [ebp + 0x14]
mov dword [esp + 0x5c], eax
movzx eax, word [ebx + 0x1a]
imul eax, dword [esp + 0x88]
shr ecx, 4
and ecx, 1
mov dword [esp + 0x118], 0
mov dword [esp + 0x60], ecx
movzx ecx, word [ebx + 0xc]
add eax, dword [esp + 0x28]
mov dword [esp + 0x1c], ecx
shr dword [esp + 0x1c], 8
and dword [esp + 0x1c], 1
lea eax, [ebx + eax*2]
shr ecx, 0xc
mov ebx, dword [ebp + 0xc]
and ecx, 1
mov dword [esp + 0xdc], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xd4], ecx
mov ecx, dword [ebp + 0x14]
lea eax, [eax + ebx*2]
mov dword [esp + 0x110], 0
mov ebx, dword [edi + 8]
mov dword [esp + 0xe4], eax
mov dword [esp + 0x10], eax
mov eax, ebx
shr eax, 5
and eax, 1
mov dword [esp + 0x9c], edx
mov dword [esp + 0xc0], eax
mov eax, ebx
shr eax, 0x1d
and eax, 1
mov dword [esp + 0xbc], eax
mov eax, ebx
shr eax, 0x19
and eax, 1
mov dword [esp + 0xb8], eax
mov eax, dword [ebp + 0x14]
shr eax, 7
and eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [ebp + 0x14]
shr eax, 8
and eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [ebp + 0x14]
shr eax, 0xa
and eax, 1
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x14]
shr eax, 0x1c
and eax, 1
mov dword [esp + 0xc8], eax
lea eax, [edx + 0x100]
mov dword [esp + 0xa0], eax
lea eax, [edx + 0x340]
mov dword [esp + 0xa4], eax
mov eax, ecx
and eax, 0x1800000
je 0x48f71e
cmp eax, 0x800000
je 0x48f711
cmp eax, 0x1000000
je 0x48f737
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0xd0], 1
jmp 0x48f742
test ebx, 0x1800000
je 0x48f737
mov eax, ebx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xd0], eax
jmp 0x48f742
mov dword [esp + 0xd0], 0
test ecx, 0x700000
mov eax, ecx
cmove eax, ebx
and eax, 0x700000
cmp eax, 0x300000
ja 0x48f7ac
je 0x48f791
test eax, eax
je 0x48f791
cmp eax, 0x100000
je 0x48f774
cmp eax, 0x200000
jne 0x48f705
mov eax, 0xa
jmp 0x48f779
mov eax, 0xd
mov edx, 1
mov word [esp + 0x94], ax
xor ebx, ebx
mov dword [esp + 0x84], edx
jmp 0x48f7ca
mov edx, 2
mov dword [esp + 0x94], 0xa000d
xor ebx, ebx
mov dword [esp + 0x84], edx
jmp 0x48f7ca
cmp eax, 0x400000
je 0x48f7c5
cmp eax, 0x500000
jne 0x48f705
mov ebx, 2
jmp 0x48f7ca
mov ebx, 1
cmp dword [esp + 0xf4], 0
mov dword [esp + 0x80], ebx
je 0x48f7f2
movzx eax, word [edi + 0xc]
test eax, 0x200
je 0x48f7f2
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x55555556
imul dword [ebp + 0x1c]
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov dword [esp + 0x24], eax
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x38], eax
movzx eax, word [edi + 0x12]
test ax, ax
je 0x48f875
mov ecx, eax
mov eax, 0x55555556
imul dword [esp + 0x24]
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x48f875
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x24], eax
shl eax, 2
push eax
call fcn.00495d48
mov edi, eax
add esp, 4
mov dword [esp + 0x74], edi
test edi, edi
jne 0x48f864
lea eax, [edi - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x48], 1
jmp 0x48f87c
mov edi, dword [ebp + 0x18]
mov dword [esp + 0x74], edi
mov eax, dword [esp + 0x24]
mov dword [esp + 0x78], eax
mov dword [esp + 0xa8], 0
mov dword [esp + 0xfc], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x7c], eax
test edi, edi
je 0x48f909
mov eax, dword [esp + 0x24]
lea ecx, [edi + eax*4]
mov eax, dword [esp + 0x14]
mov edx, ecx
movzx eax, word [eax + 0x10]
shl eax, 2
sub edx, eax
lea eax, [edi + 8]
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x48f8f1
nop dword [eax + eax]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x48f8e0
mov edi, dword [esp + 0x74]
mov dword [edi + 4], 0xffffffff
mov eax, dword [esp + 0x74]
mov dword [eax], 0xffffffff
mov ebx, dword [esp + 0x80]
cmp dword [esp + 0x60], 0
jne 0x48f9b4
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc]
test al, 0x10
je 0x48f98f
movzx ecx, word [edx + 0x14]
movzx edi, cx
mov dword [esp + 0x40], 1
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x4c], edi
test al, 0x20
je 0x48f9b4
mov edx, dword [esp + 0xa0]
mov eax, 0xff
cmp cx, ax
ja 0x48f957
movzx eax, cx
movzx ecx, byte [eax + edx]
mov dword [esp + 0x2c], ecx
cmp edi, 0x7f
jbe 0x48f9bb
movzx ecx, di
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c3e00]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4b7420]
mov ax, word [eax*8 + 0x4c2d24]
add ax, di
movzx ecx, ax
mov dword [esp + 0x2c], ecx
jmp 0x48f9bb
cmp dword [esp + 0x1c], 0
jne 0x48f9b4
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x48f9b4
test byte [eax + 4], 1
mov edx, dword [esp + 0xa0]
je 0x48f9bb
add eax, 8
mov dword [esp + 0x50], eax
jmp 0x48f9bb
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xc]
test al, 0x40
je 0x48fa30
movzx ecx, word [ecx + 0x16]
movzx edi, cx
mov dword [esp + 0x54], 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x58], edi
test al, al
jns 0x48fa30
mov eax, 0xff
cmp cx, ax
ja 0x48f9f7
movzx eax, cx
movzx ecx, byte [eax + edx]
mov dword [esp + 0x20], ecx
cmp edi, 0x7f
jbe 0x48fa30
movzx ecx, di
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4c3e00]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4b7420]
mov ax, word [eax*8 + 0x4c2d24]
add ax, di
movzx ecx, ax
mov dword [esp + 0x20], ecx
nop dword [eax]
cmp dword [esp + 0x5c], 0
mov edi, dword [esp + 0x10]
mov dword [esp + 0x28], edi
je 0x48fae4
mov ecx, dword [esp + 0xe4]
mov edi, esi
cmp esi, ecx
jae 0x48fae0
test ebx, ebx
je 0x48fa80
cmp edi, ecx
jae 0x48fab7
push 1
lea eax, [esp + 0x88]
mov edx, ebx
push eax
push ecx
mov ecx, edi
call fcn.004905a0
mov ebx, dword [esp + 0x8c]
add esp, 0xc
test eax, eax
jne 0x48fae0
jmp 0x48fab0
mov edx, dword [esp + 0x84]
lea eax, [edx + edx]
sub ecx, eax
cmp edi, ecx
ja 0x48fab0
mov ax, word [edi]
cmp ax, word [esp + 0x94]
jne 0x48fab0
cmp edx, 1
je 0x48fae0
mov ax, word [edi + 2]
cmp ax, word [esp + 0x96]
je 0x48fae0
mov ecx, dword [esp + 0xe4]
add edi, 2
cmp edi, dword [esp + 0x10]
jae 0x48fad8
mov ax, word [edi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x48fad8
add edi, 2
cmp edi, ecx
jb 0x48fa54
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 8]
or edx, dword [ebp + 0x14]
and edx, 0x4000000
mov dword [esp + 0x18], edx
jne 0x48fc9c
cmp dword [esp + 0x40], 0
je 0x48fb65
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x2c]
cmp cx, dx
je 0x48fb41
cmp esi, edi
jae 0x48fc9c
nop word [eax + eax]
movzx eax, word [esi]
cmp ax, cx
je 0x48fc9c
cmp ax, dx
je 0x48fc9c
add esi, 2
cmp esi, edi
jb 0x48fb20
jmp 0x48fc9c
cmp esi, edi
jae 0x48fc9c
nop dword [eax]
cmp word [esi], cx
je 0x48fc9c
add esi, 2
cmp esi, edi
jb 0x48fb50
jmp 0x48fc9c
cmp dword [esp + 0x1c], 0
je 0x48fc57
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0xe0]
add eax, ecx
cmp esi, eax
jbe 0x48fc9c
cmp esi, edi
jae 0x48fc37
test ebx, ebx
je 0x48fbc3
cmp esi, ecx
jbe 0x48fc10
push 1
lea eax, [esp + 0x88]
mov edx, ebx
push eax
push ecx
mov ecx, esi
call fcn.00490650
mov ebx, dword [esp + 0x8c]
add esp, 0xc
test eax, eax
jne 0x48fc37
mov ecx, dword [esp + 0xe0]
jmp 0x48fc10
mov edx, dword [esp + 0x84]
lea edi, [edx + edx]
lea eax, [edi + ecx]
cmp esi, eax
jb 0x48fc0c
mov ecx, esi
sub ecx, edi
mov ax, word [ecx]
cmp ax, word [esp + 0x94]
jne 0x48fc05
mov edi, dword [esp + 0x10]
cmp edx, 1
je 0x48fc37
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x96]
je 0x48fc37
mov ecx, dword [esp + 0xe0]
jmp 0x48fc10
mov ecx, dword [esp + 0xe0]
mov edi, dword [esp + 0x10]
add esi, 2
cmp esi, edi
jae 0x48fc37
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x48fc2f
add esi, 2
cmp esi, edi
jb 0x48fb90
cmp word [esi - 2], 0xd
jne 0x48fc9c
cmp ebx, 1
je 0x48fc48
cmp ebx, 2
jne 0x48fc9c
cmp esi, edi
jae 0x48fc9c
cmp word [esi], 0xa
jne 0x48fc9c
add esi, 2
jmp 0x48fc9c
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x48fc9c
cmp esi, edi
jae 0x48fc9c
nop dword [eax]
nop word [eax + eax]
movzx edx, word [esi]
mov eax, 0xff
cmp edx, 0xff
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebx], al
jne 0x48fc9c
add esi, 2
cmp esi, edi
jb 0x48fc70
cmp dword [esp + 0x18], 0
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x10], ebx
jne 0x48fd60
cmp dword [esp + 0xf4], 0
jne 0x48fd60
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x48fcda
test byte [ecx + 4], 2
je 0x48fcda
mov eax, ebx
sub eax, esi
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x48fddd
cmp dword [esp + 0x54], 0
je 0x48fd60
mov eax, ebx
sub eax, esi
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x48fd60
mov eax, dword [esp + 0x40]
lea ecx, [esi + eax*2]
cmp ecx, dword [esp + 0x30]
jbe 0x48fd60
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x20]
cmp dx, ax
je 0x48fd37
cmp ecx, ebx
jae 0x48fddd
movzx edi, dx
movzx edx, word [ecx]
mov dword [esp + 0x30], ecx
add ecx, 2
cmp edx, edi
je 0x48fd5a
movzx eax, ax
cmp edx, eax
je 0x48fd5a
cmp ecx, ebx
jae 0x48fddd
mov eax, dword [esp + 0x20]
jmp 0x48fd14
cmp ecx, ebx
jae 0x48fddd
nop
mov ax, word [ecx]
mov dword [esp + 0x30], ecx
add ecx, 2
cmp ax, dx
je 0x48fd5a
cmp ecx, ebx
jb 0x48fd40
xor ebx, ebx
jmp 0x48ff4d
cmp dword [esp + 0x30], ebx
jae 0x48fddd
mov edx, dword [esp + 0xdc]
lea eax, [esp + 0x68]
push 0
push 0
push eax
push 2
push esi
mov ecx, esi
mov dword [esp + 0xfc], esi
mov dword [esp + 0x104], esi
mov dword [esp + 0x7c], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x10c], 0
call fcn.00487b90
add esp, 0x14
mov dword [esp + 0x18], eax
cmp dword [esp + 0xcc], 0
je 0x48fdc9
mov ecx, dword [esp + 0x44]
test ecx, ecx
cmove ecx, dword [esp + 0xf0]
mov dword [esp + 0x44], ecx
cmp eax, 0xfffffc1d
jg 0x48fde4
je 0x48fe23
cmp eax, 0xfffffc1a
jne 0x48ff39
xor ebx, ebx
jmp 0x48ff4d
cmp eax, 0xfffffc20
jg 0x48fe1b
je 0x48fe23
cmp eax, 0xfffffc1e
je 0x48fe0e
cmp eax, 0xfffffc1f
jne 0x48ff39
mov edi, esi
mov dword [esp + 0xd8], 1
jmp 0x48fe4d
mov edi, dword [esp + 0xe8]
cmp edi, esi
je 0x48fe23
jmp 0x48fe4d
test eax, eax
jne 0x48ff39
lea edi, [esi + 2]
mov dword [esp + 0xd8], 0
cmp edi, ebx
jae 0x48fe4d
mov ax, word [edi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x48fe4d
add edi, 2
cmp dword [esp + 0x5c], 0
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x18], 0
je 0x48fe9c
mov eax, dword [esp + 0xe4]
test ebx, ebx
je 0x48ff04
cmp esi, eax
jae 0x48fe9c
push 1
lea ecx, [esp + 0x88]
mov edx, ebx
push ecx
push eax
mov ecx, esi
call fcn.004905a0
add esp, 0xc
test eax, eax
jne 0x48ff49
mov ebx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
cmp dword [esp + 0x60], 0
mov esi, edi
jne 0x48ff49
mov eax, dword [esp + 0x28]
cmp edi, eax
ja 0x48ff49
cmp edi, dword [esp + 0x64]
jbe 0x48fef4
cmp word [edi - 2], 0xd
jne 0x48fef4
cmp edi, eax
jae 0x48fef4
cmp word [edi], 0xa
jne 0x48fef4
mov ecx, dword [esp + 0x14]
mov eax, 0x800
test word [ecx + 0xc], ax
jne 0x48fef4
cmp ebx, 1
je 0x48fef1
cmp ebx, 2
je 0x48fef1
cmp edx, 2
jne 0x48fef4
lea esi, [edi + 2]
mov dword [esp + 0x118], 0
jmp 0x48fa30
mov edx, dword [esp + 0x84]
lea ecx, [edx + edx]
sub eax, ecx
cmp esi, eax
ja 0x48fea3
mov ax, word [esi]
cmp ax, word [esp + 0x94]
jne 0x48fea3
cmp edx, 1
je 0x48ff49
mov ax, word [esi + 2]
cmp ax, word [esp + 0x96]
je 0x48ff49
jmp 0x48fea3
cmp eax, 1
je 0x48ffc8
cmp eax, 0xfffffc19
je 0x48ffc8
mov ebx, dword [esp + 0x18]
cmp dword [esp + 0x48], 0
je 0x48ff60
push dword [esp + 0x74]
call fcn.00495d53
add esp, 4
test ebx, ebx
je 0x48ff72
cmp ebx, 0xfffffff4
je 0x48ff72
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x44]
test eax, eax
je 0x48ff9d
cmp dword [ebp + 0x1c], 1
jle 0x48ff96
sub eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x18]
sar eax, 1
mov dword [ecx], eax
mov eax, dword [esp + 0x28]
sub eax, dword [ebp + 8]
sar eax, 1
mov dword [ecx + 4], eax
mov eax, 0xfffffff4
jmp 0x48ffa0
or eax, 0xffffffff
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x4900f8
test byte [ecx], 0x20
je 0x4900f8
mov edx, dword [ecx + 0x18]
mov ecx, dword [esp + 0x11c]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x48], 0
mov edi, dword [esp + 0x38]
je 0x49001d
mov esi, dword [esp + 0x74]
cmp edi, 4
jl 0x48fff7
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call fcn.004ab450
add esp, 0xc
mov eax, dword [esp + 0xa8]
mov ecx, 1
cmp dword [esp + 0xf8], edi
push esi
cmovg eax, ecx
mov dword [esp + 0xac], eax
call fcn.00495d53
add esp, 4
cmp dword [esp + 0xa8], 0
mov ecx, dword [esp + 0xf8]
je 0x490036
cmp ecx, edi
jl 0x490036
xor edi, edi
jmp 0x49003f
mov eax, ecx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
mov eax, dword [esp + 0x14]
movzx esi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp + 0x18]
sar eax, 1
cmp eax, esi
jg 0x490096
test edx, edx
je 0x490096
lea eax, [esi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea ecx, [edx + ecx*4]
cmovg eax, dword [esp + 0x24]
xor ebx, ebx
lea eax, [edx + eax*4]
xor edx, edx
mov esi, eax
sub esi, ecx
add esi, 3
shr esi, 2
cmp ecx, eax
cmova esi, ebx
test esi, esi
je 0x490093
inc edx
mov dword [ecx], 0xffffffff
lea ecx, [ecx + 4]
cmp edx, esi
jb 0x490085
mov edx, dword [ebp + 0x18]
cmp dword [ebp + 0x1c], 2
jge 0x4900a0
xor edi, edi
jmp 0x4900c5
mov eax, dword [esp + 0xe8]
sub eax, dword [esp + 0xe0]
sar eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0xec]
sub eax, dword [esp + 0xe0]
sar eax, 1
mov dword [edx + 4], eax
mov eax, dword [esp + 0x34]
test eax, eax
je 0x4900de
test byte [eax], 0x20
je 0x4900de
mov edx, dword [eax + 0x18]
mov ecx, dword [esp + 0x118]
mov dword [edx], ecx
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret