Function at 0x4c1aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x120]
cmp eax, dword [ecx + 8]
jbe 0x4c2470
sub esp, 0x1a0
lea edi, [esp + 0xe0]
xor eax, eax
call fcn.00456170
mov ecx, dword [0x5fe208]
mov edx, dword [0x5fe204]
mov ebx, dword [0x5fe200]
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], ecx
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 0xec], ecx
mov edx, dword [esp + 0x1b4]
mov dword [esp + 0xf0], edx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0xf4], ebx
mov eax, 2
xor ebp, ebp
xor esi, esi
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x54], ebp
xor ebp, ebp
mov dword [esp + 0x58], ebp
xor ebp, ebp
mov dword [esp + 0xdc], ebp
xor ebp, ebp
jmp 0x4c1dfb
mov dword [esp + 0x78], ebp
lea eax, [esp + 0xe0]
mov ecx, dword [eax + ebp*4]
mov ebx, dword [esp + ebp*4 + 0xe4]
mov esi, dword [esp + ebp*4 + 0xe8]
mov edi, dword [eax + edx*4]
mov eax, dword [esp + edx*4 + 0xe4]
mov edx, dword [esp + edx*4 + 0xe8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004bdd00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x78]
lea ebp, [esp + 0xe0]
mov dword [ebp + ebx*4 + 4], ecx
mov dword [ebp + ebx*4 + 8], edx
mov dword [ebp + ebx*4], eax
mov esi, dword [esp + 0xd8]
mov dword [esp], esi
mov esi, dword [esp + 0x48]
mov dword [esp + 4], esi
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov esi, dword [esp + 0xdc]
mov dword [esp + 0xc], esi
mov esi, dword [esp + 0x54]
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x1c8]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1d0]
mov dword [esp + 0x2c], edx
call fcn.004be6a0
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x4c], edx
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x78]
lea edx, [esp + 0xe0]
mov ecx, dword [edx + edi*4]
mov dword [esp + 0xc8], ecx
mov ecx, dword [esp + edi*4 + 0xe4]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + edi*4 + 0xe8]
mov dword [esp + 0x58], ecx
mov dword [edx + edi*4 + 4], ebx
mov dword [edx + edi*4 + 8], ebp
mov dword [edx + edi*4], esi
mov edx, dword [esp + edi*4 + 0xec]
mov ecx, dword [esp + edi*4 + 0xf0]
mov eax, dword [esp + edi*4 + 0xf4]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebp
mov eax, dword [esp + 0x1b0]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x1b8]
mov dword [esp + 0x20], edx
call fcn.004bccc0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x78]
mov dword [esp + ebx*4 + 0xec], eax
mov dword [esp + ebx*4 + 0xf0], ecx
mov dword [esp + ebx*4 + 0xf4], edx
mov ebp, dword [esp + 0xc4]
mov dword [esp], ebp
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x4c]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0xc8]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x1c8]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x1cc]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1d0]
mov dword [esp + 0x2c], edx
call fcn.004be6a0
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x4c], ebp
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + ebx*4 + 0xec]
mov dword [esp + 0xc8], ebp
mov ebp, dword [esp + ebx*4 + 0xf0]
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + ebx*4 + 0xf4]
mov dword [esp + ebx*4 + 0xec], eax
mov dword [esp + ebx*4 + 0xf0], ecx
mov dword [esp + ebx*4 + 0xf4], edx
mov eax, dword [esp + 0x64]
add eax, 2
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x1b0]
mov edx, dword [esp + 0x1b4]
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x58], ebp
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xdc], eax
mov ebp, dword [esp + 0x4c]
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], esi
mov dword [esp + 0xd8], edi
cmp eax, 0x10
jge 0x4c1e45
mov dword [esp + 0x64], eax
shr eax, 0x1f
mov ebx, dword [esp + 0x64]
add eax, ebx
sar eax, 1
cmp eax, 0x10
jae 0x4c2465
lea edx, [eax + eax*2]
cmp ebx, 0x10
jae 0x4c2459
lea ebp, [ebx + ebx*2]
inc ebx
cmp ebx, 0x10
jb 0x4c1b49
jmp 0x4c244d
nop
mov edx, dword [esp + 0x1ac]
cmp edx, 1
jl 0x4c240b
mov eax, dword [esp + 0x1a4]
mov dword [eax], 1
mov ecx, dword [esp + 0x1c0]
lea ebx, [ecx - 1]
mov dword [esp + 0x60], ebx
mov dword [esp + 0xb4], eax
mov eax, 1
mov dword [esp + 0x1a8], eax
mov eax, dword [esp + 0xb4]
jmp 0x4c2360
mov dword [esp + 0x54], edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebp
mov dword [esp + 0xd8], ebx
mov edi, dword [esp + 0x50]
shr edi, 0x1c
lea edi, [edi + edi*2]
mov esi, dword [esp + edi*4 + 0xe0]
mov dword [esp + 0xd0], esi
mov esi, dword [esp + edi*4 + 0xe4]
mov edi, dword [esp + edi*4 + 0xe8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
call fcn.004bccc0
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xd8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x1c8]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1cc]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1d0]
mov dword [esp + 0x2c], esi
call fcn.004be6a0
mov eax, dword [esp + 0x5c]
add eax, 4
mov dword [esp + 0x5c], eax
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x44]
mov eax, dword [esp + 0x50]
shl eax, 4
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], edx
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xdc], eax
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x8c]
mov ecx, dword [esp + 0x1c0]
mov ebx, dword [esp + 0x78]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x5c]
cmp edx, 0x20
jge 0x4c233e
mov ecx, dword [esp + 0x60]
cmp ebx, ecx
je 0x4c231d
mov dword [esp + 0xd4], eax
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x14], edx
call fcn.004bdd00
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1c8]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1cc]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1d0]
mov dword [esp + 0x2c], esi
call fcn.004be6a0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0xd0], ebx
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x54], ebp
mov esi, dword [esp + 0x44]
mov dword [esp + 0x58], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.004bdd00
mov eax, dword [esp + 0x18]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1c8]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1cc]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1d0]
mov dword [esp + 0x2c], esi
call fcn.004be6a0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0xc8], ebx
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x54], ebp
mov esi, dword [esp + 0x44]
mov dword [esp + 0x58], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.004bdd00
mov eax, dword [esp + 0x18]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xc8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xcc]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1c8]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1cc]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1d0]
mov dword [esp + 0x2c], esi
call fcn.004be6a0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0xc8], ebx
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x54], ebp
mov esi, dword [esp + 0x44]
mov dword [esp + 0x58], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.004bdd00
mov eax, dword [esp + 0x18]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0xc8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xd0]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1c8]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1cc]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1d0]
mov dword [esp + 0x2c], esi
call fcn.004be6a0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x6c]
mov edi, dword [esp + 0x68]
mov dword [esp + 0x58], edi
mov edi, dword [esp + 0xcc]
mov dword [esp + 0xdc], edi
mov edi, dword [esp + 0x6c]
jmp 0x4c1e90
test edx, edx
jne 0x4c2016
mov ebx, eax
mov edx, ebp
mov ecx, esi
mov eax, edi
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x4c]
mov ebp, dword [esp + 0x48]
jmp 0x4c1e90
dec ebx
mov edx, dword [esp + 0x60]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1a8], eax
mov eax, dword [esp + 0xac]
test ebx, ebx
jl 0x4c23cc
cmp ebx, ecx
jae 0x4c2446
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x78], ebx
mov edx, dword [esp + 0x1bc]
mov edx, dword [edx + ebx*4]
mov dword [esp + 0xa4], eax
xor eax, eax
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 0x48], ecx
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x94]
jmp 0x4c1ff9
mov dword [esp], eax
mov eax, dword [esp + 0x1a8]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004bb430
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x1d8], ecx
mov dword [esp + 0x1dc], edx
add esp, 0x1a0
ret
lea eax, [0x4ff980]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004400f0
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0xd8]
mov edx, 1
jmp 0x4c1e5d
mov eax, ebx
call fcn.00455fa0
mov eax, ebx
mov ecx, 0x10
call fcn.00455fa0
mov eax, ebx
mov ecx, 0x10
call fcn.00455fa0
mov ecx, 0x10
call fcn.00455fa0
nop
call fcn.004546e0
jmp fcn.004c1aa0