Function at 0x4a9ce0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4aa4d2
sub esp, 0x74
mov ecx, dword [esp + 0x80]
cmp ecx, 1
jb 0x4aa4cb
lea edx, [ecx - 1]
mov dword [esp + 0x38], edx
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 1
mov dword [esp + 0x50], edx
mov ebp, dword [esp + 0x7c]
lea esi, [ebp + edx]
mov dword [esp + 0x5c], esi
nop
mov eax, ebx
mov ebx, dword [esp + 0x78]
mov edi, dword [ebx + 0x10]
test edi, edi
je 0x4aa49a
mov dword [esp + 0x64], edi
mov esi, dword [0x5c2560]
mov edx, dword [edi + 0x10]
test esi, esi
jne 0x4aa467
mov dword [ebx + 0x10], edx
mov edx, eax
xor eax, eax
call fcn.0044aab1
mov eax, dword [esp + 0x64]
mov byte [eax], 4
movzx ecx, word [ebx]
mov word [eax + 2], cx
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 2
mov ecx, dword [0x5c2560]
lea edi, [eax + 0x14]
lea esi, [eax + 0x20]
test ecx, ecx
jne 0x4aa44b
mov dword [eax + 0x14], esi
mov ecx, dword [esp + 0x80]
cmp ecx, 1
je 0x4aa43b
mov esi, dword [esp + 0x50]
movzx esi, byte [ebp + esi]
xchg esi, eax
cmp al, 0x5e
xchg esi, eax
jne 0x4aa43b
lea edx, [ecx - 2]
mov esi, edx
neg edx
sar edx, 0x1f
and edx, 1
mov ecx, dword [esp + 0x5c]
add ecx, edx
movzx edx, word [ebx]
test dx, 4
jne 0x4a9dec
mov edx, dword [eax + 0x14]
mov dword [eax + 0x18], 2
xor ebp, ebp
mov dword [edx + ebp*4], 0xa
mov dword [edx + ebp*4 + 4], 0xa
mov edx, 0xffffffff
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], edi
mov dword [esp + 0x3c], edx
mov ebp, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
mov ebx, dword [eax + 0x14]
mov dword [esp + 0x54], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x54]
jmp 0x4a9e39
mov eax, dword [esp + 0x78]
mov eax, dword [esp + 0x68]
mov ecx, ebx
xor ebx, ebx
mov byte [esp + 0x37], bl
mov ebx, edi
mov edi, dword [esp + 0x70]
mov edi, esi
mov esi, edx
mov edx, edi
mov edi, dword [esp + 0x70]
mov dword [esp + 0x4c], ebp
test esi, esi
jne 0x4aa33c
mov dword [esp + 0x40], esi
mov dword [esp + 0x60], ecx
je 0x4aa333
cmp byte [ecx], 0x2d
jne 0x4aa32a
mov edi, dword [esp + 0x78]
movzx eax, word [edi]
test ax, 0x40
jne 0x4a9e76
movzx eax, byte [esp + 0x37]
test al, al
je 0x4aa23c
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x48], edx
cmp esi, 2
jle 0x4a9e92
cmp byte [ecx], 0x5b
jne 0x4a9e92
cmp byte [ecx + 1], 0x3a
je 0x4aa1ac
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebp
call fcn.004a9550
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
test ecx, ecx
jne 0x4aa184
test edi, edi
jne 0x4a9e19
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x14], esi
call fcn.004a8fb0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
test edx, edx
je 0x4a9f35
mov esi, ecx
mov edi, edx
mov edx, ebx
mov ebx, ebp
mov ebp, eax
jmp 0x4a9e19
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x10], ebp
call fcn.004a8e70
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
test ecx, ecx
jne 0x4aa15c
cmp edx, 2
jl 0x4a9f95
cmp byte [ebp], 0x2d
jne 0x4a9f95
cmp byte [ebp + 1], 0x5d
jne 0x4aa022
mov eax, ebx
mov dword [esp + 0x38], edx
mov dword [esp + 0x5c], ebp
mov ecx, dword [esp + 0x78]
movzx esi, word [ecx]
test si, 1
jne 0x4a9ff0
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.004aa6b0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x5c]
mov esi, ecx
mov edi, edx
mov ebp, eax
mov edx, dword [esp + 0x38]
jmp 0x4a9e19
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.004aa7d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
jmp 0x4a9fdd
mov dword [esp + 0x44], ebx
mov eax, dword [esp + 0x78]
mov dword [esp], eax
lea ecx, [ebp + 1]
mov dword [esp + 4], ecx
lea ecx, [edx - 1]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x10], edx
call fcn.004a8e70
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
test edx, edx
jne 0x4aa134
mov eax, dword [esp + 0x44]
cmp ebp, eax
jl 0x4aa084
mov edx, ecx
mov esi, ebp
mov ebp, ebx
mov ebx, esi
jmp 0x4a9f97
mov eax, dword [esp + 0x40]
mov edx, eax
sub eax, ecx
test eax, eax
jl 0x4aa4bd
cmp eax, edx
ja 0x4aa4bd
mov dword [esp + 0x40], eax
lea eax, [0x4dab80]
mov dword [esp], eax
call fcn.004098b0
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1d
mov eax, dword [0x5c2560]
test eax, eax
jne 0x4aa127
lea ecx, [0x4f4785]
mov dword [edi], ecx
mov ecx, dword [esp + 0x40]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x5c2560]
test ecx, ecx
jne 0x4aa111
mov eax, dword [esp + 0x60]
mov dword [edi + 8], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
lea eax, [0x50eb80]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], edi
add esp, 0x74
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x60]
call fcn.0044a9c0
mov edi, edx
jmp 0x4aa0e3
lea eax, [0x4f4785]
call fcn.0044a9c0
jmp 0x4aa0cb
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], edx
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebp
call fcn.004a9100
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
test edx, edx
jne 0x4aa214
test edi, edi
je 0x4aa1f7
mov edx, ebx
mov ebx, ebp
mov ebp, ecx
jmp 0x4a9e19
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x78]
jmp 0x4a9e92
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], edx
mov dword [esp + 0x90], eax
add esp, 0x74
ret
cmp esi, 1
jne 0x4aa31e
mov eax, 1
test al, al
je 0x4a9e76
lea eax, [esi - 1]
mov edx, eax
neg eax
sar eax, 0x1f
and eax, 1
add eax, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00450bf0
mov eax, dword [esp + 0xc]
inc eax
test eax, eax
jl 0x4aa4c4
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x4aa4c4
mov dword [esp + 0x50], eax
lea eax, [0x4dab80]
mov dword [esp], eax
call fcn.004098b0
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1d
mov eax, dword [0x5c2560]
test eax, eax
jne 0x4aa311
lea ecx, [0x4f4785]
mov dword [edi], ecx
mov ecx, dword [esp + 0x50]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x5c2560]
test ecx, ecx
jne 0x4aa2fb
mov eax, dword [esp + 0x60]
mov dword [edi + 8], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
lea eax, [0x50eb80]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], edi
add esp, 0x74
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x60]
call fcn.0044a9c0
mov edi, edx
jmp 0x4aa2cd
lea eax, [0x4f4785]
call fcn.0044a9c0
jmp 0x4aa2b5
cmp byte [ecx + 1], 0x5d
setne al
jmp 0x4aa24a
mov edi, dword [esp + 0x78]
jmp 0x4a9e76
mov edi, dword [esp + 0x78]
jmp 0x4a9e76
cmp byte [ecx], 0x5d
je 0x4aa348
test esi, esi
jmp 0x4a9e45
movzx ebp, byte [esp + 0x37]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4aa35e
test esi, esi
mov ebp, dword [esp + 0x4c]
jmp 0x4a9e45
mov dword [eax + 0x18], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + 0x1c], edx
lea edx, [esi - 1]
mov dword [esp + 0x38], edx
neg edx
sar edx, 0x1f
and edx, 1
add ecx, edx
mov dword [esp + 0x5c], ecx
mov edx, dword [0x5c2560]
test edx, edx
jne 0x4aa42f
mov dword [eax + 0x14], ebx
mov dword [esp], edi
call fcn.004aa4e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x3c]
test ebx, ebx
jl 0x4aa40e
mov ebx, dword [esp + 0x68]
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], edx
mov edx, dword [0x5c2560]
test edx, edx
jne 0x4aa401
mov dword [ebx + 0x14], ecx
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.004a3680
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov edi, dword [esp + 0x70]
mov eax, ecx
call fcn.0044a9c0
jmp 0x4aa3c1
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004ab0e0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
jmp 0x4aa3aa
mov eax, ebx
call fcn.0044a9c0
jmp 0x4aa38e
mov esi, edx
mov ecx, dword [esp + 0x5c]
mov edx, 1
jmp 0x4a9df1
mov ecx, eax
mov eax, esi
call fcn.0044a9c0
mov esi, dword [esp + 0x80]
cmp esi, 1
mov eax, ecx
mov ecx, esi
jmp 0x4a9d9a
lea ecx, [ebx + 0x10]
mov eax, edi
mov edi, ecx
mov ebp, eax
mov eax, edx
call fcn.0044a9c0
lea ecx, [0x4e55e0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.0040e200
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x7c]
jmp 0x4a9d5d
lea eax, [0x4e55e0]
mov dword [esp], eax
call fcn.004098b0
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x7c]
jmp 0x4a9d61
call fcn.004254a0
ud2
call fcn.004254a0
ud2
call fcn.004254a0
ud2
call fcn.00449270
jmp fcn.004a9ce0