Function at 0x4e4390
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ecx, 0x11
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x4c
mov dword [esp + 0x18], edx
add edx, 0x48
mov edi, edx
mov dword [esp + 0x1c], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esi + 0x68], 0
mov dword [esi + 0x50], 0
mov edx, dword [esi + 0x4c]
test edx, edx
je 0x4e4761
mov esi, dword [esp + 0x1c]
lea eax, [esi + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x60]
mov dword [esp + 0x20], eax
shr eax, 0x1f
lea eax, [edx + eax - 1]
mov dword [esp], eax
call fcn.004e7110
test eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
je 0x4e4720
mov eax, dword [eax + 0x5c]
mov esi, dword [esp + 0x18]
mov dword [esi + 0x70], eax
mov esi, dword [esp + 0x20]
lea eax, [esi + 4]
sub eax, dword [esi + 4]
lea edi, [eax + 9]
mov esi, eax
mov dword [esp + 0x28], eax
mov dword [esp], edi
mov dword [esp + 0x24], edi
call sub.msvcrt.dll_strlen
cmp byte [esi + 9], 0x65
lea eax, [edi + eax + 1]
je 0x4e4660
mov esi, dword [esp + 0x28]
movzx edx, byte [eax]
movzx ecx, byte [esi + 8]
mov byte [esp + 0x2f], cl
cmp cl, 3
ja 0x4e4818
xor esi, esi
xor ecx, ecx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or esi, edx
test bl, bl
js 0x4e4450
mov ebx, dword [esp + 0x18]
xor ecx, ecx
mov dword [ebx + 0x7c], esi
xor ebx, ebx
lea esi, [esi]
mov ebp, eax
movzx edx, byte [eax]
add eax, 1
mov edi, edx
and edi, 0x7f
shl edi, cl
add ecx, 7
or ebx, edi
test dl, dl
js 0x4e4478
mov edi, ebp
mov ebp, edx
mov edx, edi
cmp ecx, 0x1f
ja 0x4e44a9
and ebp, 0x40
je 0x4e44a9
mov edi, 0xffffffff
shl edi, cl
or ebx, edi
mov ecx, dword [esp + 0x18]
xor edi, edi
mov ebp, ebx
mov dword [ecx + 0x78], ebx
xor ecx, ecx
cmp byte [esp + 0x2f], 1
je 0x4e4690
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or edi, edx
test bl, bl
js 0x4e44c8
mov ebx, ebp
mov ecx, dword [esp + 0x18]
xor ebp, ebp
mov dword [ecx + 0x80], edi
mov edi, dword [esp + 0x24]
mov byte [ecx + 0x85], 0xff
movzx edx, byte [edi]
cmp dl, 0x7a
je 0x4e4770
test dl, dl
je 0x4e49e0
mov edi, dword [esp + 0x24]
add edi, 1
sub edx, 0x42
cmp dl, 0x11
ja case.0x4e451d.1
movzx edx, dl
jmp dword [edx*4 + 0x62831c]
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
mov byte [ecx + 0x85], dl
movzx edx, byte [edi]
add edi, 1
test dl, dl
jne 0x4e4512
test ebp, ebp
jne 0x4e4558
mov ebp, eax
lea esi, cs:[esi]
test ebp, ebp
je 0x4e481d
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
lea edx, [ecx + eax + 4]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebp
cmp ebx, 0xfffffffc
jne 0x4e457d
cmp esi, 1
je 0x4e484f
call fcn.004e3b90
mov eax, dword [esp + 0x18]
movzx eax, byte [eax + 0x84]
cmp al, 0xff
je 0x4e4830
and eax, 7
cmp al, 2
je 0x4e4808
jbe 0x4e47c0
cmp al, 3
je 0x4e47c8
cmp al, 4
jne 0x5daf64
mov ebx, 0x18
mov eax, dword [esp + 0x20]
add ebx, eax
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x86], 0
movzx edx, byte [eax + 0x85]
je 0x4e47d8
xor esi, esi
xor ecx, ecx
mov edi, edx
nop
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or esi, eax
test dl, dl
js 0x4e45e0
mov edx, edi
cmp dl, 0xff
je 0x4e461b
lea eax, [esp + 0x3c]
mov edi, dword [esp + 0x1c]
movzx edx, dl
mov ecx, ebx
mov dword [esp], eax
mov eax, edi
call fcn.004e28b0
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x50], eax
add ebx, esi
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
lea edx, [esi + eax + 4]
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x78], 0xfffffffc
jne 0x4e463b
cmp dword [eax + 0x7c], 1
je 0x4e483a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebx
call fcn.004e3b90
xor eax, eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [esi + 0xa], 0x68
jne 0x4e4430
mov edx, dword [eax]
mov esi, dword [esp + 0x18]
add eax, 4
mov dword [esi + 0x88], edx
mov esi, dword [esp + 0x28]
add esi, 0xb
mov dword [esp + 0x24], esi
jmp 0x4e4430
movzx edi, byte [eax]
lea eax, [edx + 2]
jmp 0x4e44e0
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
add edi, 1
mov byte [ecx + 0x84], dl
movzx edx, byte [edi - 1]
test dl, dl
jne 0x4e4512
jmp 0x4e4542
movzx edx, byte [eax]
lea ecx, [eax + 1]
lea eax, [esp + 0x3c]
add edi, 1
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
call fcn.004e28b0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x74], edx
movzx edx, byte [edi - 1]
test dl, dl
jne 0x4e4512
jmp 0x4e4542
mov ecx, dword [esp + 0x18]
add edi, 1
mov byte [ecx + 0x87], 1
movzx edx, byte [edi - 1]
test dl, dl
jne 0x4e4512
jmp 0x4e4542
mov ecx, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
cmp byte [eax - 2], 0xff
movzx edx, byte [eax - 5]
je 0x4e4981
cmp dl, 0xe8
je 0x4e49a8
cmp dl, 0x8b
jne 0x4e474c
cmp byte [eax - 4], 0x4d
je 0x4e48d3
cmp byte [eax - 1], 0x83
jne 0x4e4761
cmp byte [eax], 9
jne 0x4e4761
cmp byte [eax + 1], 0
je 0x4e4867
add esp, 0x4c
mov eax, 5
pop ebx
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
mov edi, ebx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or ebp, edx
test bl, bl
js 0x4e4778
mov ebx, edi
mov edi, dword [esp + 0x18]
add ebp, eax
mov byte [edi + 0x86], 1
mov edi, dword [esp + 0x24]
movzx edx, byte [edi + 1]
lea ecx, [edi + 1]
test dl, dl
je 0x4e4558
mov dword [esp + 0x24], ecx
jmp 0x4e450b
test al, al
jne 0x4e49ee
mov ebx, 0x10
jmp 0x4e45bb
cmp dl, 0xff
je 0x4e461d
lea eax, [esp + 0x3c]
mov esi, dword [esp + 0x1c]
mov ecx, ebx
mov dword [esp], eax
mov eax, esi
call fcn.004e28b0
mov ebx, eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x50], eax
jmp 0x4e461d
mov ebx, 0xc
jmp 0x4e45bb
cmp dl, 4
je 0x4e4859
add esp, 0x4c
mov eax, 3
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, 8
jmp 0x4e45bb
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov eax, ebx
call fcn.004e3430
xor eax, eax
jmp 0x4e464f
call fcn.004e3430
jmp 0x4e4582
cmp byte [eax + 1], 0
jne 0x4e481d
add eax, 2
jmp 0x4e4448
cmp byte [eax + 2], 0x2d
jne 0x4e4761
cmp byte [eax + 3], 0
jne 0x4e4761
cmp byte [eax + 4], 0x10
jne 0x4e4761
cmp byte [eax + 5], 0
jne 0x4e4761
mov eax, dword [esp + 0x18]
mov byte [eax + 0x5c], 1
mov dword [eax + 0x68], 4
mov dword [eax + 0x64], 4
mov byte [eax + 0x49], 1
mov dword [eax + 4], 0xfffffffc
mov dword [eax + 0x80], 8
mov byte [eax + 0x50], 1
mov dword [eax + 0x20], 0
mov byte [eax + 0x87], 1
xor eax, eax
jmp 0x4e464f
cmp byte [eax], 0x64
jne 0x4e474c
cmp byte [eax + 1], 0x8b
jne 0x4e4761
mov eax, dword [ecx + 8]
mov edx, dword [eax + 0xc4]
mov esi, dword [esp + 0x18]
mov ebx, edx
mov byte [esi + 0x5c], 1
sub ebx, ecx
lea ecx, [eax + 0xb0]
mov dword [esi + 0x68], 4
sub ecx, edx
mov dword [esi + 0x64], ebx
mov dword [esi], ecx
lea ecx, [eax + 0xa4]
sub ecx, edx
mov dword [esi + 0x48], 0x1010101
mov dword [esi + 0xc], ecx
lea ecx, [eax + 0xac]
sub ecx, edx
mov dword [esi + 0x4d], 0x1010101
mov dword [esi + 4], ecx
lea ecx, [eax + 0xa8]
sub ecx, edx
mov byte [esi + 0x87], 1
mov dword [esi + 8], ecx
lea ecx, [eax + 0xa0]
mov dword [esi + 0x80], 8
sub ecx, edx
mov dword [esi + 0x18], ecx
lea ecx, [eax + 0x9c]
sub ecx, edx
mov dword [esi + 0x1c], ecx
lea ecx, [eax + 0xb4]
add eax, 0xb8
sub eax, edx
sub ecx, edx
mov dword [esi + 0x20], eax
xor eax, eax
mov dword [esi + 0x14], ecx
jmp 0x4e464f
cmp byte [eax - 1], 0xd0
jne 0x4e4734
cmp byte [eax], 0x83
jne 0x4e4734
cmp byte [eax + 1], 0xf8
jne 0x4e4734
mov eax, dword [ecx]
mov eax, dword [eax + 4]
jmp 0x4e48e9
cmp byte [eax - 4], 0x68
movzx edx, byte [eax]
je 0x4e49e7
cmp dl, 0x83
jne 0x4e474c
cmp byte [eax + 1], 0xc4
jne 0x4e4761
cmp byte [eax + 3], 0xb8
jne 0x4e4761
mov eax, dword [ecx + 0x38]
jmp 0x4e48e9
mov ebp, eax
jmp 0x4e4558
cmp dl, 0xc3
jne 0x4e49b1
jmp 0x4e499e
jmp 0x5daf64