Function at 0x4ec6d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x4c]
cmp eax, dword [ecx + 8]
jbe 0x4ed1f5
sub esp, 0xcc
mov dword [esp + 0xe0], 0
mov eax, dword [esp + 0xd0]
cmp dword [eax + 0xc], 1
jle 0x4ec763
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
lea eax, [0x4ed200]
mov dword [esp + 0x70], eax
lea eax, [esp + 0xd8]
mov dword [esp + 0x74], eax
lea eax, [esp + 0xe0]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x34]
mov dword [esp], eax
call fcn.00435b80
test eax, eax
jne 0x4ecc47
mov eax, dword [esp + 0xd0]
movzx ecx, byte [eax + 1]
test cl, cl
jne 0x4ec77d
mov ecx, dword [esp + 0xd4]
test ecx, ecx
je 0x4ec7aa
movzx ecx, byte [ecx]
test cl, cl
je 0x4ec7aa
mov ecx, dword [eax + 4]
cmp dword [eax + 8], 7
jne 0x4ec7a3
cmp dword [ecx], 0x646e6977
jne 0x4ec7a3
cmp word [ecx + 4], 0x776f
jne 0x4ec7a3
cmp byte [ecx + 6], 0x73
jne 0x4ec7a3
mov ecx, 4
jmp 0x4ec7ac
mov ecx, 1
jmp 0x4ec7ac
xor ecx, ecx
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
cmp ebx, 7
jne 0x4ec7cd
cmp dword [edx], 0x646e6977
jne 0x4ec7cd
cmp word [edx + 4], 0x776f
jne 0x4ec7cd
cmp byte [edx + 6], 0x73
je 0x4ec7e0
cmp ebx, 5
jne 0x4ec7f3
cmp dword [edx], 0x6e616c70
jne 0x4ec7f3
cmp byte [edx + 4], 0x39
jne 0x4ec7f3
mov dword [esp + 0xe0], ecx
call fcn.00436170
add esp, 0xcc
ret
movzx ebp, byte [eax]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4ec828
mov ebp, dword [eax + 0x14]
movzx ebp, byte [ebp + 0x29]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4ec828
mov dword [esp + 0x24], ecx
cmp ebx, 7
jne 0x4ec83b
cmp dword [edx], 0x72646e61
jne 0x4ec83b
cmp word [edx + 4], 0x696f
jne 0x4ec83b
cmp byte [edx + 6], 0x64
jne 0x4ec83b
mov dword [esp + 0xe0], ecx
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov byte [esp + 8], 0x5c
call fcn.00402a00
cmp dword [esp + 0xc], 0xffffffff
jne 0x4ec887
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov byte [esp + 8], 0x25
call fcn.00402a00
cmp dword [esp + 0xc], 0xffffffff
je 0x4ec89e
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov ebx, dword [esp + 0xd0]
mov ebp, dword [ebx + 4]
cmp dword [ebx + 8], 7
jne 0x4eca61
cmp dword [ebp], 0x6e65706f
jne 0x4eca61
cmp word [ebp + 4], 0x7362
jne 0x4eca61
cmp byte [ebp + 6], 0x64
jne 0x4eca61
mov eax, dword [ebx + 0x14]
mov ecx, dword [eax + 0x38]
mov eax, dword [eax + 0x3c]
mov edx, dword [0x8f7db8]
mov ebp, dword [0x8f7dbc]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.00498de0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4eca4a
mov eax, dword [esp + 0xd0]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax + 0x2c]
mov eax, dword [eax + 0x30]
test eax, eax
je 0x4eca33
cmp eax, 2
jg 0x4eca1c
mov edx, dword [ecx]
mov ebx, dword [ecx + 4]
cmp ebx, 4
jne 0x4eca05
cmp dword [edx], 0x646e6962
jne 0x4ec99d
cmp eax, 2
jne 0x4ec986
mov eax, dword [ecx + 8]
cmp dword [ecx + 0xc], 4
jne 0x4ec96f
cmp dword [eax], 0x656c6966
jne 0x4ec96f
mov dword [esp + 0xe0], 2
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov dword [esp + 0xe0], 4
call fcn.00436170
add esp, 0xcc
ret
cmp ebx, 4
jne 0x4eca05
cmp dword [edx], 0x656c6966
jne 0x4eca05
cmp eax, 2
jne 0x4ec9ee
mov eax, dword [ecx + 8]
cmp dword [ecx + 0xc], 4
jne 0x4ec9d7
cmp dword [eax], 0x646e6962
jne 0x4ec9d7
mov dword [esp + 0xe0], 1
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov dword [esp + 0xe0], 3
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov dword [esp + 0xe0], 2
call fcn.00436170
add esp, 0xcc
ret
mov dword [esp + 0xe0], 3
call fcn.00436170
add esp, 0xcc
ret
mov ecx, dword [esp + 0xdc]
mov ebp, dword [esp + 0xd8]
cmp ecx, 1
jl 0x4ecaab
lea eax, [ecx - 1]
cmp ecx, eax
jb 0x4ed1ef
lea eax, [ecx + ebp - 1]
mov dword [esp], eax
lea eax, [0x6c709d]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov ebx, dword [esp + 0xd0]
jmp 0x4ecaad
xor eax, eax
test al, al
je 0x4ecaca
mov edx, dword [esp + 0xdc]
lea ecx, [edx - 1]
cmp edx, ecx
jb 0x4ed1ea
mov dword [esp + 0xdc], ecx
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x6c7b9a]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 6
call fcn.00502ff0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4ecc30
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x5c], ecx
mov edx, dword [ecx + 8]
lea ebx, [0x690280]
mov dword [esp], ebx
mov dword [esp + 4], edx
lea edx, [0x6c79c7]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 5
call fcn.0040fa50
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov dword [esp + 0x18], ecx
mov eax, dword [eax]
mov dword [esp + 0x58], eax
mov edx, dword [esp + 0x5c]
mov ebx, dword [edx]
mov ebp, dword [edx + 4]
mov esi, dword [0x8f7db8]
mov edi, dword [0x8f7dbc]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
call fcn.00498de0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4ecbdc
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
test eax, eax
je 0x4ecb8b
mov ecx, dword [esp + 0x18]
jmp 0x4ecb95
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4ecbdc
test eax, eax
jne 0x4ecbc5
test ecx, ecx
je 0x4ecbb6
mov eax, dword [esp + 0x58]
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
xor edx, edx
mov dword [esp + 0x30], edx
xor edx, edx
jmp 0x4ecd32
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0x4ecc53
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax + 4]
cmp dword [eax + 8], 7
jne 0x4ecc19
cmp dword [ecx], 0x616c6f73
jne 0x4ecc19
cmp word [ecx + 4], 0x6972
jne 0x4ecc19
cmp byte [ecx + 6], 0x73
jne 0x4ecc19
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov dword [esp + 0xe0], 1
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
call fcn.00436170
add esp, 0xcc
ret
test cl, cl
je 0x4ecc7d
mov ecx, dword [esp + 0xd0]
movzx ecx, byte [ecx + 3]
test cl, cl
je 0x4ecc7d
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
test dl, dl
je 0x4ecce1
test al, al
je 0x4eccc6
cmp ebp, 5
jne 0x4eccaf
cmp dword [ebx], 0x656c6966
jne 0x4eccaf
cmp byte [ebx + 4], 0x73
jne 0x4eccaf
mov dword [esp + 0xe0], 1
call fcn.00436170
add esp, 0xcc
ret
mov dword [esp + 0xe0], 2
call fcn.00436170
add esp, 0xcc
ret
test dl, dl
je 0x4ecce1
mov dword [esp + 0xe0], 3
call fcn.00436170
add esp, 0xcc
ret
test al, al
je 0x4eccfc
mov dword [esp + 0xe0], 4
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov ecx, dword [esp + 0x6c]
add ecx, 0x14
mov dword [esp + 0x30], eax
mov eax, ecx
mov ecx, dword [esp + 0x18]
mov ecx, ebx
mov ebx, edi
mov edi, ebp
mov ebp, esi
mov esi, ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x20], edx
mov dword [esp + 0x60], esi
xchg edi, eax
mov byte [esp + 0x15], al
xchg edi, eax
mov dword [esp + 0x6c], eax
xchg ebp, eax
mov byte [esp + 0x16], al
xchg ebp, eax
mov byte [esp + 0x17], bl
lea edi, [esp + 0x7c]
mov esi, eax
call fcn.0046362e
mov ecx, dword [esp + 0x7c]
cmp dword [esp + 0x80], 0xa
jne 0x4ecda0
mov dword [esp], ecx
lea eax, [0x6c94ff]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.00402990
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4ece53
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x20]
movzx ebx, byte [esp + 0x17]
movzx ebp, byte [esp + 0x16]
mov ecx, dword [esp + 0x7c]
mov esi, eax
mov eax, dword [esp + 0x80]
cmp eax, 5
jne 0x4ecdc0
cmp dword [ecx], 0x656c6966
jne 0x4ecdc0
cmp byte [ecx + 4], 0x73
je 0x4ecdd2
cmp eax, 3
jne 0x4ece07
cmp word [ecx], 0x6e64
jne 0x4ece07
cmp byte [ecx + 2], 0x73
jne 0x4ece07
lea edi, [esp + 0x90]
mov eax, esi
lea esi, [esp + 0x7c]
call fcn.0046362e
mov ecx, dword [esp + 0x9c]
mov esi, eax
mov eax, dword [esp + 0x98]
test ecx, ecx
je 0x4ecfd1
mov dword [esp + 0x2c], ecx
xor edi, edi
jmp 0x4ed03f
cmp eax, 4
jl 0x4ecef5
mov dword [esp], ecx
lea eax, [0x6c7701]
mov dword [esp + 4], eax
mov dword [esp + 8], 4
call fcn.00402990
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ecef5
movzx eax, byte [esp + 0x16]
movzx ecx, byte [esp + 0x17]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x60]
mov ebp, 1
jmp 0x4ecedb
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004ed520
movzx eax, byte [esp + 8]
test al, al
jne 0x4ecf0c
mov ecx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xd8]
nop
cmp ecx, 7
jne 0x4ece95
xor eax, eax
jmp 0x4ecf8b
mov edx, dword [0x8f1404]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov ebx, dword [esp]
test eax, eax
jne 0x4ecf23
mov edx, dword [esp + 0xdc]
mov ebp, dword [esp + 0xd8]
cmp ecx, edx
jne 0x4ecec4
xor eax, eax
jmp 0x4ecf41
movzx eax, byte [esp + 0x16]
movzx ecx, byte [esp + 0x17]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x60]
movzx ebp, byte [esp + 0x15]
mov esi, eax
mov eax, dword [esp + 0x30]
inc eax
mov edi, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jg 0x4ecd13
jmp 0x4ecf76
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
inc eax
mov edx, esi
mov ebx, edi
mov ebp, ecx
cmp eax, edx
jge 0x4ecf23
jae 0x4ecf83
mov ecx, ebp
movzx ebp, byte [eax + ebp]
mov esi, edx
lea edx, [ebp - 0x41]
cmp dl, 0x19
ja 0x4ecf5a
add ebp, 0x20
movzx edx, byte [eax + ebx]
mov edi, ebx
lea ebx, [edx - 0x41]
cmp bl, 0x19
ja 0x4ecf6b
add edx, 0x20
xchg ebp, eax
cmp dl, al
xchg ebp, eax
je 0x4ecf3a
jmp 0x4ecec4
mov eax, edi
mov ecx, ebp
mov ebp, edx
mov edx, esi
jmp 0x4ecc53
mov ecx, edx
call fcn.00462f50
inc eax
cmp eax, ecx
jge 0x4ecf0c
jae 0x4ecfcc
movzx ebp, byte [eax + ebx]
lea esi, [ebp - 0x41]
xchg esi, eax
cmp al, 0x19
xchg esi, eax
ja 0x4ecfa6
add ebp, 0x20
lea esi, [0x6c82d7]
movzx edi, byte [eax + esi]
lea esi, [edi - 0x41]
xchg esi, eax
cmp al, 0x19
xchg esi, eax
ja 0x4ecfbd
add edi, 0x20
xchg edi, eax
xchg ebp, ebx
cmp al, bl
xchg ebp, ebx
xchg edi, eax
je 0x4ecf8a
jmp 0x4ece95
call fcn.00462f50
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
cmp ecx, 5
jne 0x4ecff6
cmp dword [eax], 0x656c6966
jne 0x4ecff6
cmp byte [eax + 4], 0x73
jne 0x4ecff6
mov ebp, 1
jmp 0x4ed00d
cmp ecx, 3
jne 0x4ed00d
cmp word [eax], 0x6e64
jne 0x4ed00d
cmp byte [eax + 2], 0x73
jne 0x4ed00d
mov ebx, 1
test edx, edx
je 0x4ed017
mov ecx, edx
mov eax, dword [esp + 0x60]
mov edx, ecx
mov ecx, ebx
mov ebx, eax
mov eax, ebp
movzx ebp, byte [esp + 0x15]
jmp 0x4ecedb
add eax, 0x14
mov edx, edi
movzx ebx, byte [esp + 0x17]
mov ebp, esi
mov esi, dword [esp + 0x6c]
mov edi, ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1c], edi
lea edi, [esp + 0xa4]
mov esi, eax
call fcn.0046362e
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x28], ecx
lea edi, [esp + 0xb8]
lea esi, [esp + 0xa4]
call fcn.0046362e
movzx ecx, byte [esp + 0xb8]
test cl, cl
je 0x4ed08a
mov ebx, dword [esp + 0x1c]
mov esi, ebp
mov edi, edx
xor ecx, ecx
jmp 0x4ed1ae
mov ecx, dword [esp + 0xbc]
mov esi, ebp
mov ebp, dword [esp + 0xc0]
cmp ebp, 7
jne 0x4ed0e5
cmp dword [ecx], 0x63637573
jne 0x4ed0c2
cmp word [ecx + 4], 0x7365
jne 0x4ed0c2
cmp byte [ecx + 6], 0x73
jne 0x4ed0c2
mov ecx, 6
lea ebp, [0x6c7e9a]
jmp 0x4ed123
cmp dword [ecx], 0x76616e75
jne 0x4ed1a6
cmp word [ecx + 4], 0x6961
jne 0x4ed1a6
cmp byte [ecx + 6], 0x6c
je 0x4ed118
jmp 0x4ed1a6
cmp ebp, 8
jne 0x4ed1a6
cmp dword [ecx], 0x66746f6e
jne 0x4ed0ff
cmp dword [ecx + 4], 0x646e756f
je 0x4ed118
cmp dword [ecx], 0x61797274
jne 0x4ed1a6
cmp dword [ecx + 4], 0x6e696167
jne 0x4ed1a6
mov ecx, 8
lea ebp, [0x6c87ca]
mov edi, edx
mov edx, dword [esp + 0x28]
dec edx
mov ebx, dword [esp + 0x1c]
cmp ebx, edx
jne 0x4ed15a
mov edx, dword [esp + 0xc4]
cmp dword [esp + 0xc8], 6
jne 0x4ed15a
cmp dword [edx], 0x75746572
jne 0x4ed15a
cmp word [edx + 4], 0x6e72
jne 0x4ed15a
mov ecx, 1
jmp 0x4ed1ae
mov dword [esp + 0x64], ebp
mov edx, dword [esp + 0xc8]
mov ebp, dword [esp + 0xc4]
cmp ecx, edx
je 0x4ed174
xor ecx, ecx
jmp 0x4ed1ae
mov dword [esp + 0x68], eax
mov dword [esp], ebp
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov ebx, dword [esp + 0x1c]
movzx esi, byte [esp + 0x16]
mov edi, dword [esp + 0x20]
mov ecx, eax
mov eax, dword [esp + 0x68]
jmp 0x4ed1ae
mov ebx, dword [esp + 0x1c]
mov edi, edx
xor ecx, ecx
test cl, cl
je 0x4ed1d3
lea ecx, [ebx + 1]
mov edx, dword [esp + 0x2c]
cmp edx, ecx
jg 0x4ed029
mov edx, edi
movzx ebx, byte [esp + 0x17]
mov ebp, esi
mov esi, dword [esp + 0x6c]
jmp 0x4ecfd1
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
call fcn.00436170
add esp, 0xcc
ret
call fcn.00462f70
call fcn.00462fb0
nop
call fcn.00461ac0
jmp fcn.004ec6d0