Function at 0x4c6f00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x4c78b9
sub esp, 0xa0
mov eax, dword [esp + 0xb4]
mov ebx, dword [esp + 0xc0]
cmp eax, ebx
jl 0x4c718e
test eax, eax
je 0x4c7160
test ebx, ebx
je 0x4c7160
cmp ebx, 1
je 0x4c70e4
mov ebp, dword [esp + 0xac]
test ebp, ebp
je 0x4c6f81
mov esi, dword [esp + 0xa4]
lea edi, [esi + ebp*4 - 4]
mov edx, dword [esp + 0xb8]
mov ecx, eax
mov eax, dword [esp + 0xb0]
lea eax, [eax + edx*4 - 4]
cmp eax, edi
je 0x4c6fb4
test ebp, ebp
jmp 0x4c6f91
mov ecx, eax
mov edx, dword [esp + 0xb8]
mov esi, dword [esp + 0xa4]
je 0x4c6fba
lea eax, [esi + ebp*4 - 4]
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xbc]
lea ebx, [ebx + edi*4 - 4]
cmp ebx, eax
jne 0x4c6fc1
mov ebx, dword [esp + 0xc0]
xor ebp, ebp
xor esi, esi
jmp 0x4c6fc8
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0xc0]
mov eax, dword [0x6161b8]
cmp ebx, eax
jl 0x4c6fe9
mov dword [esp + 0x8c], esi
nop
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0x70], ebx
mov ebx, edi
jmp 0x4c7273
lea eax, [ecx + ebx]
cmp ebp, eax
jl 0x4c6ffb
jae 0x4c7086
jmp 0x4c7258
cmp eax, 1
jne 0x4c7043
lea eax, [0x534b80]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00447510
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xc0]
mov ebp, 1
mov eax, 1
jmp 0x4c7086
mov dword [esp + 0x60], eax
lea edx, [0x534b80]
mov dword [esp], edx
mov dword [esp + 4], eax
lea edx, [ebx + ecx + 4]
mov dword [esp + 0x38], edx
mov dword [esp + 8], edx
call fcn.00447510
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x30], eax
mov dword [esp + 0x88], esi
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov edi, dword [esp + 0xb0]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x20], ecx
call fcn.004c6030
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x88]
mov edx, eax
jmp 0x4c7211
mov ecx, dword [esp + 0xbc]
mov ecx, dword [ecx]
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0
call fcn.004c5e80
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], edx
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], 0
mov eax, dword [esp + 0xac]
mov dword [esp + 0xd0], eax
add esp, 0xa0
ret
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x20], eax
call fcn.004c6f00
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], edx
add esp, 0xa0
ret
mov eax, ebx
test eax, eax
jle 0x4c7224
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x4c724f
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4c720f
mov edx, dword [esp + 0x38]
cmp eax, edx
ja 0x4c7248
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], edx
add esp, 0xa0
ret
mov ecx, eax
call fcn.0045f490
mov eax, ebx
mov ecx, edx
call fcn.0045f450
mov ecx, eax
mov edx, ebp
call fcn.0045f490
sar ebx, 1
mov esi, dword [esp + 0x70]
inc esi
mov dword [esp + 0x70], esi
mov esi, dword [esp + 0x8c]
cmp ebx, eax
jg 0x4c7261
mov eax, dword [esp + 0x70]
cmp eax, 0x20
sbb esi, esi
mov ecx, eax
shl ebx, cl
and esi, ebx
cmp edx, esi
jb 0x4c78b1
mov eax, dword [esp + 0xc4]
cmp eax, esi
jb 0x4c78a8
lea ebx, [esi + esi*2]
mov ecx, ebx
shl ebx, 1
mov eax, dword [esp + 0xb4]
add eax, edi
cmp ebx, eax
jg 0x4c72b3
mov ebx, eax
mov dword [esp + 0x40], esi
mov dword [esp + 0x78], ecx
mov dword [esp + 0x4c], eax
cmp ebp, ebx
jl 0x4c72e0
jb 0x4c789f
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x84], eax
jmp 0x4c7364
cmp ebx, 1
jne 0x4c7325
lea eax, [0x534b80]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00447510
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov ebp, 1
mov dword [esp + 0x84], esi
mov ebx, 1
mov esi, dword [esp + 0x40]
jmp 0x4c7364
mov dword [esp + 0x3c], ebx
lea eax, [0x534b80]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 0x34], eax
mov dword [esp + 8], eax
call fcn.00447510
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0xb8]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x84], esi
mov ebx, dword [esp + 0x3c]
mov esi, dword [esp + 0x40]
mov dword [esp + 0x34], ebp
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], esi
mov edi, dword [esp + 0xc4]
mov dword [esp + 0x20], edi
call fcn.004c6750
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x4c]
cmp edx, ecx
jb 0x4c789a
mov eax, dword [esp + 0x40]
mov ebx, eax
shl eax, 1
cmp eax, ecx
ja 0x4c7895
mov ebp, ecx
sub ecx, eax
mov esi, edx
sub edx, eax
neg edx
mov edi, ebx
shl ebx, 3
sar edx, 0x1f
and edx, ebx
mov ebx, dword [esp + 0x84]
mov eax, esi
lea esi, [ebx + edx]
test ecx, ecx
je 0x4c7412
mov dword [esp], esi
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.0045fb10
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x4c]
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0xc0]
cmp esi, edi
jg 0x4c742c
mov edi, dword [esp + 0xb4]
cmp edi, esi
je 0x4c77d3
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.004c87e0
mov eax, dword [esp + 4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov dword [esp + 0x5c], ebx
nop
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0xb0]
mov edi, ebp
jmp 0x4c745e
mov ebp, ebx
mov ebx, dword [esp + 0x5c]
test ebp, ebp
jle 0x4c7481
lea ebx, [ebp - 1]
cmp edi, ebx
jbe 0x4c788c
mov dword [esp + 0x6c], ebp
mov ebp, dword [esi + ebp*4 - 4]
test ebp, ebp
je 0x4c7458
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x6c]
mov esi, dword [esp + 0xb8]
cmp esi, ebp
jb 0x4c7883
mov esi, dword [esp + 0xc0]
cmp esi, edi
jb 0x4c787a
mov dword [esp + 0x98], eax
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0xc4]
sub edx, edi
mov dword [esp + 0x48], edx
mov ebp, edx
neg edx
shl edi, 2
sar edx, 0x1f
and edx, edi
mov edi, dword [esp + 0xbc]
add edx, edi
mov dword [esp + 0x90], edx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x40]
sub esi, edx
mov dword [esp + 0x44], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ebp
call fcn.004c6f00
mov eax, dword [esp + 0x24]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x4c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
call fcn.004c6df0
nop
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xbc]
mov edx, eax
jmp 0x4c756f
mov eax, ebx
test eax, eax
jle 0x4c7586
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x4c7871
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4c756d
mov ebx, dword [esp + 0xc4]
cmp ebx, eax
jb 0x4c7868
mov dword [esp + 0x68], eax
mov ebp, dword [esp + 0xb0]
mov edi, dword [esp + 0xb4]
mov esi, dword [esp + 0xb8]
jmp 0x4c773a
mov dword [esp + 0x94], esi
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
call fcn.004c6f00
mov eax, dword [esp + 0x24]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x4c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x74]
mov dword [esp + 0x18], edi
call fcn.004c6df0
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x20], edx
call fcn.004c6f00
mov eax, dword [esp + 0x24]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x4c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x74]
mov esi, dword [esp + 0x40]
add edi, esi
mov dword [esp + 0x74], edi
mov dword [esp + 0x18], edi
call fcn.004c6df0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0xc4]
mov ebp, dword [esp + 0xb0]
mov esi, dword [esp + 0xb8]
mov edi, edx
mov edx, dword [esp + 0x74]
cmp edi, edx
jle 0x4c77a1
jb 0x4c785f
mov dword [esp + 0x74], edx
sub esi, edx
mov dword [esp + 0x54], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
shl edx, 2
sar esi, 0x1f
and esi, edx
add esi, ebp
mov edx, ebp
mov ebp, dword [esp + 0x74]
sub edi, ebp
mov ebp, dword [esp + 0x40]
cmp ebp, edi
jge 0x4c7772
mov edi, ebp
jmp 0x4c7778
mov ebp, edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x50], ebp
jmp 0x4c7829
mov ebx, dword [esp + 0xc4]
mov ebp, dword [esp + 0x64]
mov edi, dword [esp + 0x40]
mov edi, dword [esp + 0x54]
cmp ebp, edi
jbe 0x4c75b3
jmp 0x4c784d
lea eax, [0x631070]
mov dword [esp], eax
lea eax, [0x545da0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
call fcn.00465e90
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x4c]
mov ecx, ebp
jmp 0x4c77d9
mov ebp, esi
test ebp, ebp
jle 0x4c77ec
lea esi, [ebp - 1]
cmp esi, ecx
jae 0x4c7815
mov edi, dword [ebx + ebp*4 - 4]
test edi, edi
je 0x4c77d7
cmp ebp, eax
ja 0x4c780c
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xd0], eax
add esp, 0xa0
ret
mov ecx, ebp
mov edx, eax
call fcn.0045f490
mov eax, esi
call fcn.0045f450
mov ebx, dword [esp + 0xc4]
mov ebp, edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x64], ebp
test ebp, ebp
jle 0x4c7790
lea edi, [ebp - 1]
mov ebx, dword [esp + 0x50]
cmp ebx, edi
jbe 0x4c7856
mov ebp, dword [esi + ebp*4 - 4]
test ebp, ebp
je 0x4c781c
jmp 0x4c7781
mov ecx, ebp
mov edx, edi
call fcn.0045f490
mov eax, edi
mov ecx, ebx
call fcn.0045f450
mov eax, edx
mov ecx, edi
call fcn.0045f4b0
mov ecx, eax
mov edx, ebx
call fcn.0045f490
mov eax, ebx
mov ecx, edx
call fcn.0045f450
mov eax, edi
mov ecx, esi
call fcn.0045f4b0
mov ecx, ebp
mov edx, esi
call fcn.0045f490
mov eax, ebx
mov ecx, edi
call fcn.0045f450
call fcn.0045f4b0
call fcn.0045f490
mov ecx, ebx
mov edx, ebp
call fcn.0045f490
mov ecx, esi
mov edx, eax
call fcn.0045f490
mov ecx, esi
call fcn.0045f490
nop
call fcn.0045e000
jmp fcn.004c6f00