Function at 0x4dcad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x74
mov eax, dword [0x7e4788]
xor eax, esp
mov dword [esp + 0x70], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [esp + 0x40], esi
mov dword [esp + 0x50], 0
mov eax, dword [esi + 0x7c]
mov ebx, dword [eax + 0xc]
xor eax, eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], ebx
mov eax, dword [ebx + 0xec]
push dword [ebx + 0x88]
mov dword [esp + 0x3c], eax
call fcn.004517e0
mov ecx, dword [ebx + 0x78]
add esp, 4
mov dword [esp + 0x70], eax
test ecx, ecx
je 0x4dcb67
cmp dword [ecx + 0x20], 0
mov eax, dword [ecx + 0x10]
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x60], eax
mov eax, dword [ecx + 0x18]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x50], eax
jne 0x4dcb60
cmp dword [ecx + 0x24], 0
jne 0x4dcb60
cmp dword [ecx + 0x28], 0
jne 0x4dcb60
cmp dword [ecx + 0x3c], 0
jne 0x4dcb60
cmp dword [ecx + 0x4c], 0
je 0x4dcb67
mov dword [esi + 0x30], 1
cmp dword [esi + 0x24], 0
jne 0x4dcb91
cmp byte [esi + 0x1b], 0
jl 0x4dcb91
mov eax, dword [ebx]
lea ecx, [esp + 0x3c]
push ecx
push ebx
mov eax, dword [eax + 0x74]
call eax
add esp, 8
test eax, eax
jne 0x4dd60e
mov edi, dword [esp + 0x3c]
jmp 0x4dcb97
xor edi, edi
mov dword [esp + 0x3c], edi
movzx eax, word [esi + 0x16]
test edi, edi
mov dword [esp + 0x48], eax
mov eax, 1
cmove edi, eax
push 0x158
mov dword [esp + 0x48], edi
call fcn.0047f870
push 0x158
push 0
push eax
mov dword [esp + 0x3c], eax
call fcn.0052b3e0
movd xmm0, edi
mov ecx, edi
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x64da90]
call fcn.00537290
add esp, 8
movsd qword [esp + 0x28], xmm0
fld qword [esp + 0x28]
fstp qword [esp]
call fcn.00537390
add esp, 8
fstp qword [esp + 0x20]
movsd xmm0, qword [esp + 0x20]
call fcn.00529ed0
mov esi, eax
xor edx, edx
mov eax, dword [esp + 0x48]
mov ecx, esi
add eax, 4
mov dword [esp + 0x54], esi
mov dword [esp + 0x34], eax
mov eax, 0x100000
div dword [esp + 0x34]
cmp esi, eax
jae 0x4dcc36
nop dword [eax]
add ecx, ecx
cmp ecx, eax
jb 0x4dcc30
cmp ecx, edi
mov esi, edi
cmovbe esi, ecx
nop dword [eax]
mov edi, esi
imul edi, dword [esp + 0x34]
lea eax, [edi*4]
push eax
call fcn.0047f7e0
add esp, 4
test eax, eax
je 0x4dcc75
push eax
call fcn.0047f840
lea eax, [edi + edi]
push eax
call fcn.0047f7e0
mov ecx, eax
add esp, 8
test ecx, ecx
jne 0x4dcc93
jmp 0x4dcc77
shr esi, 1
mov eax, dword [esp + 0x54]
cmp esi, eax
jae 0x4dcc40
mov esi, eax
add eax, eax
imul eax, dword [esp + 0x34]
push eax
call fcn.0047f870
add esp, 4
mov ecx, eax
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x2c]
mov edi, dword [esp + 0x48]
mov dword [eax], edx
mov dword [eax + 4], 0
mov dword [eax + 0xc], edi
mov al, byte [edx + 0x1a]
mov byte [ebx + 0x10], al
mov eax, dword [edx + 0x20]
mov edx, ebx
mov dword [edx + 0x14], eax
lea eax, [esi + esi]
mov dword [edx + 0x34], eax
mov eax, dword [esp + 0x44]
mov dword [edx + 0x1c], eax
dec eax
mov dword [edx + 0x30], esi
add eax, esi
mov dword [edx + 0x38], ecx
xor edx, edx
div esi
mov esi, ebx
mov dword [esi + 0x28], eax
lea eax, [eax + eax*2]
shl eax, 3
push eax
call fcn.0047f870
mov ecx, dword [esi + 0x28]
mov dword [esi + 0x40], eax
lea ecx, [ecx + ecx*2]
shl ecx, 3
push ecx
push 0
push eax
call fcn.0052b3e0
add esp, 0x10
lea eax, [edi + 1]
push eax
push 0
push eax
call fcn.0047f870
add esp, 4
push eax
call fcn.0052b3e0
mov ebx, dword [esp + 0x64]
add esp, 0xc
mov dword [esi + 0x14c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebx + 0x160], esi
mov dword [esi + 0x18], eax
cmp dword [esp + 0x3c], 0
jne 0x4dcde0
mov edi, dword [esp + 0x40]
mov eax, dword [edi + 0x7c]
movzx ecx, word [eax + 0x2e]
movzx eax, word [edi + 0x16]
add eax, 0x54
add eax, ecx
push eax
push 0
push eax
call fcn.0047f870
add esp, 4
push eax
call fcn.0052b3e0
mov esi, eax
push 0
mov byte [esi + 0x20], 0xff
mov dword [esi + 8], 0xffffffff
mov dword [esi + 4], 0xffffffff
mov dword [esi + 0x40], edi
push dword [edi + 0x7c]
call fcn.004d7070
mov dword [esi], eax
add esp, 0x14
mov dword [esi + 0x24], 1
mov dword [esi + 0x44], 0
mov eax, dword [edi + 0xa4]
mov dword [esi + 0x48], eax
mov dword [edi + 0xa4], esi
mov eax, dword [esi + 0x48]
test eax, eax
je 0x4dcdac
mov dword [eax + 0x44], esi
mov dword [esi + 0x38], 0
mov dword [esi + 0x10], 0xffffffff
mov byte [esi + 0x21], 1
mov dword [edi + 0x84], esi
mov eax, dword [esi]
mov dword [edi + 0x74], eax
mov byte [esi + 0x20], 3
push dword [edi + 0x84]
call fcn.004dada0
add esp, 4
jmp 0x4dd5ef
movzx eax, word [ebx + 0x174]
xor esi, esi
mov dword [esp + 0x6c], eax
xor edi, edi
mov eax, dword [ebx + 0xe4]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x44], edi
mov dword [esp + 0x34], esi
mov dword [esp + 0x48], esi
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x30], esi
mov dword [esp + 0x64], ecx
cmp word [eax + 0x18], si
je 0x4dce27
push edi
call fcn.00465e10
add esp, 4
mov dword [esp + 0x30], eax
mov ecx, dword [ebx + 0x78]
test ecx, ecx
je 0x4dce7d
cmp dword [ecx + 0x34], esi
jne 0x4dce7d
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x4dce54
push eax
call fcn.004680f0
mov esi, eax
add esp, 4
test esi, esi
je 0x4dce54
mov edi, 1
mov dword [esp + 0x44], edi
jmp 0x4dcec9
mov eax, dword [ebx + 0x78]
cmp dword [eax + 0x28], edi
jne 0x4dcf31
cmp dword [eax + 0x20], edi
jg 0x4dcf31
cmp dword [eax + 0x4c], edi
je 0x4dce78
mov dword [esp + 0x34], 1
jmp 0x4dcec9
cmp dword [eax + 0x3c], edi
jne 0x4dce88
xor eax, eax
mov word [ebx + 0x174], ax
jmp 0x4dcec9
cmp word [ebx + 0x174], di
je 0x4dcec9
push ebx
call fcn.004d6390
mov edi, eax
add esp, 4
test edi, edi
je 0x4dcec7
push dword [edi + 0x7c]
call fcn.004d7470
push edi
call fcn.004deab0
push edi
call fcn.004dd970
mov eax, dword [edi + 0x88]
push dword [edi + 0x7c]
mov esi, dword [eax]
call fcn.004d79f0
add esp, 0x10
xor edi, edi
movzx ecx, word [ebx + 0xa2]
xor edx, edx
mov eax, 0x10000
div ecx
mov dword [esp + 0x54], eax
call fcn.00472410
test eax, eax
jne 0x4dcf62
mov edx, dword [esp + 0x54]
cmp edx, 1
jle 0x4dcf62
mov ecx, dword [ebx + 0x78]
test ecx, ecx
je 0x4dcf0a
cmp dword [ecx + 0x34], eax
jne 0x4dcf0a
cmp word [ebx + 0x174], ax
jne 0x4dcf62
cmp dword [esp + 0x34], eax
jne 0x4dcf62
movzx eax, word [ebx + 0xa2]
imul eax, edx
mov dword [esp + 0x4c], 1
push eax
call fcn.0047f870
mov ecx, dword [esp + 0x30]
add esp, 4
mov dword [ecx + 0x154], eax
jmp 0x4dcf6a
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x4dcf46
push ecx
call fcn.004680f0
mov esi, eax
add esp, 4
mov eax, dword [ebx + 0x78]
mov ecx, dword [esp + 0x38]
test esi, esi
mov eax, dword [eax + 0x20]
cmovne ecx, esi
test eax, eax
mov esi, ecx
cmovg edi, eax
mov dword [esp + 0x44], edi
jmp 0x4dcec9
mov dword [esp + 0x4c], 0
test esi, esi
jne 0x4dcf7d
cmp word [ebx + 0x174], si
mov eax, 1
cmove esi, eax
mov eax, dword [ebx]
test esi, esi
jne 0x4dcf8e
mov eax, dword [eax + 0x18]
push ebx
call eax
add esp, 4
jmp 0x4dcfac
mov eax, dword [eax + 0x10]
push esi
push ebx
call eax
add esp, 8
cmp dword [esp + 0x34], 0
je 0x4dcfac
mov eax, dword [ebx]
push 1
push ebx
mov eax, dword [eax + 0x24]
call eax
add esp, 8
cmp dword [ebx + 0x28], 0
mov esi, dword [ebx + 0xec]
mov dword [esp + 0x38], esi
jne 0x4dd583
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4dd0d9
cmp esi, dword [esp + 0x3c]
ja 0x4dd583
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4dcfe4
cmp eax, dword [esp + 0x54]
jl 0x4dd055
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x54]
sub ecx, esi
cmp ecx, eax
jb 0x4dcff6
mov ecx, eax
jmp 0x4dcff7
inc ecx
test edi, edi
je 0x4dd000
cmp edi, ecx
cmovb ecx, edi
movzx eax, word [ebx + 0xa2]
mov edi, eax
cdq
push edx
push eax
imul edi, ecx
lea ecx, [esi - 1]
push 0
push ecx
call fcn.0052a2f0
mov esi, eax
mov ecx, edx
movzx eax, word [ebx + 0xa0]
cdq
add esi, eax
mov eax, dword [esp + 0x2c]
adc ecx, edx
push ecx
push esi
push edi
push dword [eax + 0x154]
push dword [ebx + 0x8c]
call fcn.004553d0
add esp, 0x14
cmp eax, edi
jne 0x4dd504
mov esi, dword [esp + 0x38]
xor edi, edi
jmp 0x4dd059
mov edi, dword [esp + 0x48]
movzx eax, word [ebx + 0xa2]
mov ecx, dword [esp + 0x2c]
imul eax, edi
push 0
push ebx
add eax, dword [ecx + 0x154]
mov dword [ebx + 0xe4], eax
mov eax, dword [ebx]
mov dword [ebx + 0xec], esi
mov eax, dword [eax + 0x54]
call eax
add esp, 8
cmp eax, 1
je 0x4dd583
mov eax, dword [ebx + 0xe4]
xor ecx, ecx
mov dword [ebx + 0x118], 1
mov dword [ebx + 0x114], 1
cmp byte [eax], 0x2a
sete cl
cmp dword [ebx + 0x7c], 0
mov dword [ebx + 0x124], ecx
je 0x4dd0d4
mov eax, dword [ebx]
push ebx
mov eax, dword [eax + 0xd4]
call eax
add esp, 4
cmp eax, 1
je 0x4dd583
inc edi
mov dword [esp + 0x48], edi
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x4dd10f
mov eax, dword [ebx + 0x78]
mov edi, dword [esp + 0x50]
cmp edi, dword [eax + 0x18]
jl 0x4dd10a
xor edi, edi
push ecx
mov dword [esp + 0x54], edi
call fcn.00477550
push eax
call fcn.00467f70
add esp, 8
test eax, eax
je 0x4dd583
inc edi
mov dword [esp + 0x50], edi
mov eax, dword [esp + 0x60]
test eax, eax
je 0x4dd12e
push eax
call fcn.00477550
push eax
call fcn.00467f70
add esp, 8
test eax, eax
je 0x4dd583
cmp esi, dword [esp + 0x3c]
ja 0x4dd494
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4dd157
push eax
call fcn.00477550
push eax
call fcn.00467f70
add esp, 8
test eax, eax
je 0x4dd494
mov edi, dword [esp + 0x40]
movzx ecx, word [edi + 0x18]
test cx, cx
je 0x4dd17a
mov eax, dword [ebx]
push dword [esp + 0x30]
push ecx
mov eax, dword [eax + 0x58]
push ebx
call eax
mov eax, dword [esp + 0x3c]
add esp, 0xc
jmp 0x4dd189
push dword [edi + 0xc]
call fcn.00477550
add esp, 4
mov dword [esp + 0x30], eax
push eax
call fcn.0046a450
add esp, 4
cmp eax, 0x40
ja 0x4dd3bf
je 0x4dd3a7
sub eax, 2
cmp eax, 0x1e
ja case.0x4dd1b4.3
movzx eax, byte [eax + 0x4dd62c]
jmp dword [eax*4 + 0x4dd620]
cmp word [edi + 0x16], 4
push dword [esp + 0x30]
jne 0x4dd1e3
call fcn.004680f0
add esp, 4
sub eax, 0x80000000
bswap eax
mov dword [esp + 0x74], eax
mov eax, 4
jmp 0x4dd2af
call fcn.00468020
fstp qword [esp + 0x24]
movsd xmm0, qword [esp + 0x24]
xorps xmm1, xmm1
add esp, 4
comisd xmm0, xmm1
jb 0x4dd24e
ucomisd xmm0, qword [0x72cd58]
lahf
test ah, 0x44
jp 0x4dd212
movsd qword [esp + 0x20], xmm1
mov al, byte [esp + 0x27]
mov ebx, dword [esp + 0x24]
xor al, 0x80
mov edx, dword [esp + 0x20]
mov ecx, edx
mov byte [esp + 0x74], al
mov al, byte [esp + 0x26]
mov byte [esp + 0x75], al
mov eax, ebx
shrd ecx, eax, 0x18
mov byte [esp + 0x76], bh
mov byte [esp + 0x78], cl
mov ecx, edx
shrd ecx, eax, 0x10
mov eax, edx
mov byte [esp + 0x77], bl
shrd eax, ebx, 8
jmp 0x4dd29a
mov al, byte [esp + 0x27]
mov ebx, dword [esp + 0x24]
not al
mov edx, dword [esp + 0x20]
mov ecx, edx
mov byte [esp + 0x74], al
mov al, byte [esp + 0x26]
not al
mov byte [esp + 0x75], al
mov al, bh
not al
mov byte [esp + 0x76], al
mov al, bl
not al
mov byte [esp + 0x77], al
mov eax, ebx
shrd ecx, eax, 0x18
not cl
mov byte [esp + 0x78], cl
mov ecx, edx
shrd ecx, eax, 0x10
mov eax, edx
not dl
shrd eax, ebx, 8
not cl
not al
mov ebx, dword [esp + 0x58]
mov byte [esp + 0x7a], al
mov eax, 8
mov byte [esp + 0x7b], dl
mov byte [esp + 0x79], cl
push eax
lea eax, [esp + 0x78]
push eax
mov eax, dword [ebx + 0xec]
push eax
push dword [esp + 0x38]
call fcn.004dc2c0
add esp, 0x10
jmp 0x4dd494
push dword [esp + 0x30]
call fcn.00467f20
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x24], xmm0
xorps xmm1, xmm1
add esp, 4
comisd xmm0, xmm1
jb 0x4dd340
ucomisd xmm0, qword [0x72cd58]
lahf
test ah, 0x44
jp 0x4dd304
movsd qword [esp + 0x20], xmm1
mov al, byte [esp + 0x27]
mov ebx, dword [esp + 0x24]
xor al, 0x80
mov edx, dword [esp + 0x20]
mov ecx, edx
mov byte [esp + 0x74], al
mov al, byte [esp + 0x26]
mov byte [esp + 0x75], al
mov eax, ebx
shrd ecx, eax, 0x18
mov byte [esp + 0x76], bh
mov byte [esp + 0x78], cl
mov ecx, edx
shrd ecx, eax, 0x10
mov eax, edx
mov byte [esp + 0x77], bl
shrd eax, ebx, 8
jmp 0x4dd38c
mov al, byte [esp + 0x27]
mov ebx, dword [esp + 0x24]
not al
mov edx, dword [esp + 0x20]
mov ecx, edx
mov byte [esp + 0x74], al
mov al, byte [esp + 0x26]
not al
mov byte [esp + 0x75], al
mov al, bh
not al
mov byte [esp + 0x76], al
mov al, bl
not al
mov byte [esp + 0x77], al
mov eax, ebx
shrd ecx, eax, 0x18
not cl
mov byte [esp + 0x78], cl
mov ecx, edx
shrd ecx, eax, 0x10
mov eax, edx
not dl
shrd eax, ebx, 8
not cl
not al
mov ebx, dword [esp + 0x58]
mov byte [esp + 0x7a], al
lea eax, [esp + 0x74]
mov byte [esp + 0x7b], dl
mov byte [esp + 0x79], cl
push 8
jmp 0x4dd451
push dword [esp + 0x30]
call fcn.004682e0
fstp qword [esp + 0x24]
movsd xmm0, qword [esp + 0x24]
jmp 0x4dd2e4
cmp eax, 0x80
je 0x4dd466
cmp eax, 0x400
je 0x4dd43a
cmp eax, 0xc00
je 0x4dd43a
call fcn.0047edc0
test ax, ax
jne 0x4dd42b
call fcn.00447ad0
mov esi, eax
push 0x21
push esi
call fcn.00447bf0
push 0x402
push esi
call fcn.00447c90
push 0
push esi
call fcn.00447c50
push 0x21
call fcn.0044a550
push eax
push esi
call fcn.00447b90
mov eax, dword [ebx]
push esi
push ebx
mov eax, dword [eax + 0x144]
call eax
push esi
call fcn.00448320
mov esi, dword [esp + 0x68]
add esp, 0x30
mov dword [esp + 0x5c], 0
mov edi, 1
jmp 0x4dd49c
mov edi, dword [esp + 0x30]
push edi
call fcn.00467ee0
add esp, 4
push eax
push edi
call fcn.00467f00
add esp, 4
push eax
push dword [ebx + 0xec]
push dword [esp + 0x38]
call fcn.004dc2c0
add esp, 0x10
jmp 0x4dd494
push dword [esp + 0x30]
call fcn.00467f70
neg eax
push 1
sbb al, al
and al, 0xe
add al, 0x46
mov byte [esp + 0x7c], al
lea eax, [esp + 0x7c]
push eax
push dword [ebx + 0xec]
push dword [esp + 0x3c]
call fcn.004dc2c0
add esp, 0x14
mov edi, dword [esp + 0x44]
test edi, edi
je 0x4dd4a9
sub edi, 1
mov dword [esp + 0x44], edi
je 0x4dd583
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4dd4b4
inc esi
jmp 0x4dd4f1
mov eax, dword [ebx]
push 1
push ebx
mov eax, dword [eax + 0x28]
call eax
add esp, 8
cmp eax, 1
je 0x4dd583
cmp dword [esp + 0x34], 0
je 0x4dd4e7
mov eax, dword [ebx]
push 1
push ebx
mov eax, dword [eax + 0x24]
call eax
add esp, 8
cmp eax, 1
je 0x4dd583
mov esi, dword [ebx + 0xec]
mov eax, dword [esp + 0x4c]
cmp dword [ebx + 0x28], 0
mov dword [esp + 0x38], esi
je 0x4dcfc4
jmp 0x4dd583
call fcn.004541a0
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x64], eax
mov ecx, dword [ecx + 0x7c]
mov eax, dword [ecx + 0xc]
mov edi, dword [ecx]
mov dword [esp + 0x60], eax
call fcn.0047edc0
test ax, ax
jne 0x4dd583
call fcn.00447ad0
mov esi, eax
push 0x17
push esi
call fcn.00447bf0
push 0x3f2
push esi
call fcn.00447c90
push dword [esp + 0x74]
push esi
call fcn.00447c50
push 0x17
call fcn.0044a550
push eax
push esi
call fcn.00447b90
add esp, 0x24
test edi, edi
je 0x4dd56a
push edi
push esi
call fcn.00447bb0
add esp, 8
mov ecx, dword [esp + 0x60]
push esi
push ecx
mov eax, dword [ecx]
mov eax, dword [eax + 0x144]
call eax
push esi
call fcn.00448320
add esp, 0xc
push dword [esp + 0x2c]
call fcn.004dc510
mov eax, dword [esp + 0x44]
add esp, 4
cmp word [eax + 0x18], 0
je 0x4dd5a6
push dword [esp + 0x30]
call fcn.00469760
add esp, 4
cmp dword [esp + 0x4c], 0
je 0x4dd5c6
mov eax, dword [esp + 0x68]
push dword [esp + 0x38]
mov dword [ebx + 0xe4], eax
mov eax, dword [ebx]
push ebx
mov eax, dword [eax + 0x10]
call eax
add esp, 8
mov eax, dword [esp + 0x6c]
mov word [ebx + 0x174], ax
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4dd5ef
cmp dword [esp + 0x50], 0
je 0x4dd5ef
push eax
call fcn.00477550
push eax
call fcn.00467f70
add esp, 8
push dword [esp + 0x2c]
call fcn.004dc170
push dword [esp + 0x74]
mov dword [ebx + 0x160], 0
call fcn.004517e0
add esp, 8
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00529c8c
mov esp, ebp
pop ebp
ret