Function at 0x4f1160
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x59da36
mov eax, dword fs:[0]
push eax
sub esp, 0x254
mov eax, dword [0x5f13cc]
xor eax, esp
mov dword [esp + 0x250], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5f13cc]
xor eax, esp
push eax
lea eax, [esp + 0x268]
mov dword fs:[0], eax
mov eax, dword [esp + 0x27c]
mov ebp, dword [esp + 0x278]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x3c], eax
jne 0x4f11e7
mov eax, dword [str.null_file_handler]
mov dword [ebp + 0x44], eax
mov ecx, dword [0x5ca728]
mov dword [ebp + 0x48], ecx
mov edx, dword [0x5ca72c]
mov dword [ebp + 0x4c], edx
mov eax, dword [0x5ca730]
mov dword [ebp + 0x50], eax
mov cx, word [0x5ca734]
mov word [ebp + 0x54], cx
xor al, al
jmp 0x4f195b
mov eax, dword [ebp + 4]
cmp eax, ebx
jne 0x4f121a
mov edx, dword [str.null_image___]
mov dword [ebp + 0x44], edx
mov eax, dword [0x5ca73c]
mov dword [ebp + 0x48], eax
mov ecx, dword [0x5ca740]
mov dword [ebp + 0x4c], ecx
mov dx, word [0x5ca744]
mov word [ebp + 0x50], dx
xor al, al
jmp 0x4f195b
mov edi, dword [ebp + 0x28]
cmp edi, ebx
je 0x4f1226
add eax, 0x28
jmp 0x4f1228
xor eax, eax
movzx ecx, word [ebp + 0x16]
cmp cx, 8
mov dword [esp + 0x14], eax
ja 0x4f123a
cmp eax, ebx
je 0x4f1213
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
lea eax, [ecx + 0x1f]
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
add eax, eax
add eax, eax
mov edx, esi
imul edx, eax
cmp dword [ebp + 0x1bc], ebx
mov dword [esp + 0x68], eax
movzx eax, word [ebp + 0x16]
mov dword [esp + 0x44], edx
mov edx, dword [ebp + 0x1c]
movzx eax, ax
mov dword [esp + 0x34], edx
je 0x4f1289
cmp edi, ebx
jne 0x4f1289
mov edx, esi
imul edx, ecx
add edx, edx
add edx, edx
mov eax, 0x20
mov dword [esp + 0x34], edx
mov edx, 1
mov word [esp + 0x1e], dx
mov word [esp + 0x20], dx
mov edx, dword [esp + 0x34]
lea edi, [edx + edi*4 + 0x28]
movzx edx, byte [ebp + 0xc]
add edi, dword [esp + 0x44]
mov byte [esp + 0x24], dl
movzx edx, byte [ebp + 0x10]
mov byte [esp + 0x25], dl
movzx edx, byte [ebp + 0x28]
mov word [esp + 0x2a], ax
mov word [esp + 0x7a], ax
mov eax, dword [ebp + 0x40]
mov byte [esp + 0x26], dl
mov edx, dword [esp + 0x34]
mov dword [esp + 0x70], ecx
lea ecx, [esi + esi]
push eax
lea esi, [esp + 0xa0]
mov word [esp + 0x20], bx
mov dword [ebp + 0x1c8], 0x16
mov byte [esp + 0x2b], bl
mov word [esp + 0x2c], bx
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], 0x16
mov dword [esp + 0x70], 0x28
mov dword [esp + 0x78], ecx
mov word [esp + 0x7c], 1
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], edx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0xa0], vtable.CxImage.0
call fcn.004e4970
push ebp
mov eax, esi
call fcn.004e4bb0
mov dword [esp + 0x270], ebx
mov dword [esp + 0x50], vtable.CxMemFile.0
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x58], ebx
mov byte [esp + 0x5c], 1
mov eax, 0xff
mov byte [esp + 0x270], 1
cmp dword [ebp + 0xc], eax
jg 0x4f1390
cmp dword [ebp + 0x10], eax
jle 0x4f13c5
lea esi, [esp + 0x50]
mov byte [esp + 0x25], bl
mov byte [esp + 0x24], bl
call fcn.004ed4c0
push 4
mov eax, esi
push eax
lea ecx, [esp + 0xa4]
call fcn.004e58c0
cmp dword [esp + 0x54], ebx
jne 0x4f13bd
or edi, 0xffffffff
jmp 0x4f13c1
mov edi, dword [esp + 0x58]
mov dword [esp + 0x2c], edi
mov al, byte [ebp + 0x1b6]
cmp al, bl
je 0x4f13d6
movzx ecx, word [esp + 0x1e]
jmp 0x4f13e3
movzx cx, byte [esp + 0x1f]
mov ch, byte [esp + 0x1e]
movzx ecx, cx
cmp al, bl
mov word [esp + 0x1e], cx
je 0x4f13f3
movzx eax, word [esp + 0x20]
jmp 0x4f1400
movzx dx, byte [esp + 0x21]
mov dh, byte [esp + 0x20]
movzx eax, dx
mov esi, dword [esp + 0x3c]
push 1
mov word [esp + 0x24], ax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
push 6
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call edx
mov cl, byte [ebp + 0x1b6]
cmp cl, bl
je 0x4f142c
movzx eax, word [esp + 0x1e]
jmp 0x4f1439
movzx ax, byte [esp + 0x1f]
mov ah, byte [esp + 0x1e]
movzx eax, ax
cmp cl, bl
mov word [esp + 0x1e], ax
je 0x4f1449
movzx eax, word [esp + 0x20]
jmp 0x4f1456
movzx dx, byte [esp + 0x21]
mov dh, byte [esp + 0x20]
movzx eax, dx
cmp cl, bl
mov word [esp + 0x20], ax
je 0x4f1466
movzx eax, word [esp + 0x28]
jmp 0x4f1473
movzx ax, byte [esp + 0x29]
mov ah, byte [esp + 0x28]
movzx eax, ax
cmp cl, bl
mov word [esp + 0x28], ax
je 0x4f1483
movzx eax, word [esp + 0x2a]
jmp 0x4f1490
movzx dx, byte [esp + 0x2b]
mov dh, byte [esp + 0x2a]
movzx eax, dx
cmp cl, bl
mov word [esp + 0x2a], ax
je 0x4f149f
mov eax, dword [esp + 0x2c]
jmp 0x4f14c2
mov edx, dword [esp + 0x2c]
mov eax, edx
and edx, 0xff00
shl eax, 0x10
or eax, edx
movzx edx, byte [esp + 0x2f]
shl eax, 8
or eax, edx
xor edx, edx
mov dh, byte [esp + 0x2e]
or eax, edx
cmp cl, bl
mov dword [esp + 0x2c], eax
je 0x4f14d0
mov eax, dword [esp + 0x30]
jmp 0x4f14f3
mov ecx, dword [esp + 0x30]
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
xor edx, edx
mov dh, byte [esp + 0x32]
or eax, ecx
movzx ecx, byte [esp + 0x33]
shl eax, 8
or eax, ecx
or eax, edx
push 1
mov dword [esp + 0x34], eax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
push 0x10
lea ecx, [esp + 0x2c]
push ecx
mov ecx, esi
call edx
mov cl, byte [ebp + 0x1b6]
cmp cl, bl
je 0x4f151a
movzx eax, word [esp + 0x28]
jmp 0x4f1527
movzx ax, byte [esp + 0x29]
mov ah, byte [esp + 0x28]
movzx eax, ax
cmp cl, bl
mov word [esp + 0x28], ax
je 0x4f1537
movzx eax, word [esp + 0x2a]
jmp 0x4f1544
movzx dx, byte [esp + 0x2b]
mov dh, byte [esp + 0x2a]
movzx eax, dx
cmp cl, bl
mov word [esp + 0x2a], ax
je 0x4f1553
mov eax, dword [esp + 0x2c]
jmp 0x4f1576
mov edx, dword [esp + 0x2c]
mov eax, edx
and edx, 0xff00
shl eax, 0x10
or eax, edx
movzx edx, byte [esp + 0x2f]
shl eax, 8
or eax, edx
xor edx, edx
mov dh, byte [esp + 0x2e]
or eax, edx
cmp cl, bl
mov dword [esp + 0x2c], eax
je 0x4f1584
mov eax, dword [esp + 0x30]
jmp 0x4f15a7
mov ecx, dword [esp + 0x30]
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
xor edx, edx
mov dh, byte [esp + 0x32]
or eax, ecx
movzx ecx, byte [esp + 0x33]
shl eax, 8
or eax, ecx
or eax, edx
add dword [ebp + 0x1c8], edi
cmp byte [esp + 0x24], bl
mov dword [esp + 0x30], eax
jne 0x4f15d3
cmp byte [esp + 0x25], bl
jne 0x4f15d3
mov ecx, dword [esp + 0x54]
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
push 1
push edi
push ecx
mov ecx, esi
call edx
jmp 0x4f1903
lea eax, [esp + 0x6c]
mov edi, ebp
call fcn.004e3bb0
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
push 1
push 0x28
lea ecx, [esp + 0x74]
push ecx
mov ecx, esi
call edx
lea eax, [esp + 0x6c]
call fcn.004e3bb0
mov eax, dword [ebp + 0x14c]
cmp eax, ebx
setge byte [esp + 0x1b]
cmp word [ebp + 0x16], 0x18
jae 0x4f1622
cmp eax, ebx
jl 0x4f1622
movzx eax, al
push eax
lea eax, [esp + 0x4c]
mov ecx, ebp
call fcn.004e3eb0
jmp 0x4f162c
mov ecx, dword [ebp + 0x150]
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x14], ebx
je 0x4f167c
cmp byte [esp + 0x1b], bl
je 0x4f164c
mov al, byte [ebp + 0x14c]
push ebx
push ebx
push ebx
mov esi, ebp
call fcn.004e3df0
mov esi, dword [esp + 0x3c]
mov eax, dword [ebp + 0x28]
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
mov edx, dword [edx + 0xc]
add eax, eax
push 1
add eax, eax
push eax
push ecx
mov ecx, esi
call edx
cmp byte [esp + 0x1b], bl
je 0x4f167c
mov eax, dword [esp + 0x48]
push eax
mov al, byte [ebp + 0x14c]
mov edi, ebp
call fcn.004e3e40
cmp dword [ebp + 0x1bc], ebx
je 0x4f175b
cmp dword [ebp + 0x28], ebx
jne 0x4f175b
mov ecx, dword [esp + 0x34]
push ecx
call fcn.005786ac
add esp, 4
cmp dword [ebp + 0x10], ebx
mov dword [esp + 0x40], eax
mov esi, eax
mov dword [esp + 0x14], ebx
jle 0x4f1739
mov edx, dword [esp + 0x14]
mov eax, ebp
call fcn.004e4ed0
xor edx, edx
cmp dword [ebp + 0xc], ebx
jle 0x4f1725
movzx ecx, byte [eax]
mov byte [esi], cl
movzx ecx, byte [eax + 1]
add eax, 1
add esi, 1
mov byte [esi], cl
movzx ecx, byte [eax + 1]
add eax, 1
add esi, 1
mov byte [esi], cl
mov edi, dword [ebp + 0x1bc]
add esi, 1
add eax, 1
cmp edi, ebx
je 0x4f1716
mov ecx, dword [esp + 0x14]
cmp ecx, ebx
jl 0x4f1716
cmp ecx, dword [ebp + 0x10]
jge 0x4f1716
cmp edx, ebx
jl 0x4f1716
mov ecx, dword [ebp + 0xc]
cmp edx, ecx
jge 0x4f1716
imul ecx, dword [esp + 0x14]
add ecx, edi
mov cl, byte [ecx + edx]
xor ebx, ebx
jmp 0x4f1718
xor cl, cl
mov byte [esi], cl
add edx, 1
add esi, 1
cmp edx, dword [ebp + 0xc]
jl 0x4f16c3
mov eax, dword [esp + 0x14]
add eax, 1
cmp eax, dword [ebp + 0x10]
mov dword [esp + 0x14], eax
jl 0x4f16b1
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
mov edx, dword [ecx]
mov esi, dword [esp + 0x40]
mov edx, dword [edx + 0xc]
push 1
push eax
push esi
call edx
push esi
call fcn.0057876f
add esp, 4
jmp 0x4f176f
mov ecx, dword [esp + 0x34]
mov eax, dword [esi]
mov edx, dword [ebp + 0x34]
mov eax, dword [eax + 0xc]
push 1
push ecx
push edx
mov ecx, esi
call eax
mov ecx, dword [esp + 0x44]
push 1
push ecx
call fcn.005797d1
add esp, 8
cmp eax, ebx
mov dword [esp + 0x40], eax
jne 0x4f17bd
lea esi, [esp + 0x50]
call fcn.004ed450
mov dword [esp + 0x270], 0xffffffff
lea esi, [esp + 0x9c]
mov dword [esp + 0x9c], vtable.CxImage.0
call fcn.004e4af0
call fcn.004e4a40
xor al, al
jmp 0x4f195b
mov eax, ebp
call fcn.004e7800
cmp dword [ebp + 0x1bc], ebx
mov byte [esp + 0x3a], al
setne byte [esp + 0x3b]
cmp dword [ebp + 0x10], ebx
mov dword [esp + 0x14], ebx
jle 0x4f18e3
mov dword [esp + 0x4c], ebx
xor esi, esi
cmp dword [ebp + 0xc], ebx
jle 0x4f18c7
nop
cmp byte [esp + 0x3b], bl
mov dword [esp + 0x34], ebx
je 0x4f182e
mov ecx, dword [ebp + 0x1bc]
cmp ecx, ebx
je 0x4f1826
mov edx, dword [esp + 0x14]
cmp edx, ebx
jl 0x4f1826
cmp edx, dword [ebp + 0x10]
jge 0x4f1826
cmp esi, ebx
jl 0x4f1826
mov eax, dword [ebp + 0xc]
cmp esi, eax
jge 0x4f1826
imul eax, edx
add eax, ecx
cmp byte [eax + esi], bl
jne 0x4f182e
mov dword [esp + 0x34], 1
cmp byte [esp + 0x3a], bl
je 0x4f1856
mov eax, dword [esp + 0x14]
push esi
lea edi, [esp + 0x98]
mov ebx, ebp
call fcn.004e41b0
xor ebx, ebx
cmp byte [eax + 3], bl
jne 0x4f1856
mov dword [esp + 0x34], 1
mov eax, dword [esp + 0x14]
mov edx, dword [ebp]
mov edx, dword [edx + 4]
push ebx
push eax
push esi
lea ecx, [esp + 0xa4]
push ecx
mov ecx, ebp
call edx
cmp byte [esp + 0x1b], bl
mov eax, dword [eax]
je 0x4f1885
cmp eax, dword [esp + 0x48]
jne 0x4f1885
mov dword [esp + 0x34], 1
mov edi, esi
sar edi, 3
add edi, dword [esp + 0x4c]
mov eax, esi
add edi, dword [esp + 0x40]
and eax, 0x80000007
jns 0x4f18a0
dec eax
or eax, 0xfffffff8
inc eax
mov ecx, 7
sub ecx, eax
mov al, byte [esp + 0x34]
mov dl, 1
shl dl, cl
and al, 1
shl al, cl
add esi, 1
not dl
and dl, byte [edi]
or dl, al
mov byte [edi], dl
cmp esi, dword [ebp + 0xc]
jl 0x4f17f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x68]
add dword [esp + 0x4c], ecx
add eax, 1
cmp eax, dword [ebp + 0x10]
mov dword [esp + 0x14], eax
jl 0x4f17e4
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x44]
mov edx, dword [ecx]
mov esi, dword [esp + 0x40]
mov edx, dword [edx + 0xc]
push 1
push eax
push esi
call edx
push esi
call fcn.0057876f
add esp, 4
mov eax, dword [esp + 0x54]
cmp eax, ebx
mov dword [esp + 0x50], vtable.CxMemFile.0
je 0x4f192a
cmp byte [esp + 0x5c], bl
je 0x4f192a
push eax
call fcn.0057876f
add esp, 4
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x270], 0xffffffff
lea esi, [esp + 0x9c]
mov dword [esp + 0x50], vtable.CxFile.0
mov dword [esp + 0x9c], vtable.CxImage.0
call fcn.004e4af0
call fcn.004e4a40
mov al, 1
mov ecx, dword [esp + 0x268]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x250]
xor ecx, esp
call fcn.005787fd
add esp, 0x260
ret 8