Function at 0x4d1640
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6cfe90]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4d1dd6
sub esp, 0x68
mov eax, 0
mov dword [esp + 0x64], eax
mov byte [esp + 0x23], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
call fcn.004d1fa0
mov eax, dword [esp]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
lea ecx, [0x4d1de0]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x64], ecx
mov byte [esp + 0x23], 1
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x7c]
movzx esi, byte [esp + 0x84]
mov edi, dword [esp + 0x6c]
mov dword [esp + 0x34], eax
xor eax, eax
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x34]
jmp 0x4d1744
inc ecx
mov ebp, dword [esp + 0x78]
mov edi, dword [esp + 0x4c]
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x48], eax
mov edi, ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x78]
movzx esi, byte [esp + 0x84]
mov ebx, edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x44], ebx
mov ebx, dword [esp + 0x28]
cmp ebp, ebx
jle 0x4d1c1d
movzx eax, byte [ecx + ebx]
mov byte [esp + 0x20], al
xchg esi, eax
test al, al
xchg esi, eax
je 0x4d1914
cmp al, 0x3c
je 0x4d1779
cmp al, 0x3e
je 0x4d1779
cmp al, 0x26
jne 0x4d1900
mov ebp, dword [esp + 0x24]
cmp ebp, ebx
jge 0x4d1834
ja 0x4d1dc3
sub ebx, ebp
mov esi, dword [esp + 0x44]
lea eax, [ebx + esi]
sub edx, ebp
neg edx
sar edx, 0x1f
and edx, ebp
add edx, ecx
mov ebp, dword [esp + 0x48]
cmp ebp, eax
jae 0x4d17e7
mov dword [esp + 0x48], ebx
mov dword [esp + 0x58], edx
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
lea eax, [0x557560]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x44]
mov ebp, ecx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x58], edi
mov dword [esp + 0x44], eax
lea ecx, [edi + esi]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004653a0
movzx eax, byte [esp + 0x20]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x28]
movzx esi, byte [esp + 0x84]
mov ebp, dword [esp + 0x48]
mov edi, dword [esp + 0x44]
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x58]
jmp 0x4d1849
mov ebp, dword [esp + 0x48]
mov byte [esp + 0x2c], al
mov eax, dword [esp + 0x44]
mov dword [esp + 0x48], eax
movzx eax, byte [esp + 0x2c]
mov dword [esp + 0x58], edi
mov esi, dword [esp + 0x48]
add esi, 6
shr al, 4
movzx eax, al
movzx ebx, byte [esp + 0x20]
and ebx, 0xf
lea edi, [0x57e639]
movzx eax, byte [eax + edi]
movzx ebx, byte [ebx + edi]
cmp ebp, esi
jae 0x4d18cd
mov byte [esp + 0x22], al
mov byte [esp + 0x21], bl
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 6
lea eax, [0x557560]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
movzx eax, byte [esp + 0x22]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x80]
movzx ebx, byte [esp + 0x21]
mov dword [esp + 0x58], edi
lea edi, [0x57e639]
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x48]
mov dword [edi + esi - 6], 0x3030755c
mov byte [edi + esi - 2], al
mov byte [edi + esi - 1], bl
mov eax, esi
mov esi, dword [esp + 0x28]
lea ebx, [esi + 1]
movzx esi, byte [esp + 0x84]
xchg esi, eax
test al, al
xchg esi, eax
jmp 0x4d1922
xchg esi, eax
test al, al
xchg esi, eax
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x48]
mov eax, edi
mov edi, dword [esp + 0x44]
jmp 0x4d1922
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x48]
mov eax, edi
mov edi, dword [esp + 0x44]
je 0x4d1ae0
movzx esi, byte [esp + 0x20]
xchg esi, eax
cmp al, 0xe2
xchg esi, eax
jne 0x4d1ae5
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
lea edx, [esi + 2]
mov ebx, dword [esp + 0x7c]
cmp ebx, edx
jle 0x4d1ad5
mov dword [esp + 0x54], eax
lea eax, [esi + 1]
cmp ebx, eax
jbe 0x4d1dbc
lea eax, [esi + ecx + 1]
cmp byte [eax], 0x80
jne 0x4d1ac6
cmp ebx, edx
jbe 0x4d1db3
movzx eax, byte [ecx + esi + 2]
and eax, 0xfffffffe
cmp al, 0xa8
jne 0x4d1ab7
mov eax, dword [esp + 0x40]
cmp eax, esi
jge 0x4d1a38
ja 0x4d1dac
sub esi, eax
lea ebx, [esi + edi]
mov edx, dword [esp + 0x80]
sub edx, eax
neg edx
sar edx, 0x1f
and eax, edx
add eax, ecx
cmp ebp, ebx
jb 0x4d19b7
mov edx, dword [esp + 0x54]
jmp 0x4d19ff
mov dword [esp + 0x48], esi
mov dword [esp + 0x58], eax
mov dword [esp + 0x3c], edi
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
lea eax, [0x557560]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x3c]
mov edx, eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x58], edx
lea ecx, [edx + edi]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004653a0
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x7c]
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x44]
mov edi, dword [esp + 0x48]
mov eax, dword [esp + 0x58]
jmp 0x4d1a3c
mov eax, dword [esp + 0x54]
add edi, 6
movzx edx, byte [ecx + esi + 2]
and edx, 0xf
lea ecx, [0x57e639]
movzx edx, byte [edx + ecx]
cmp ebp, edi
jae 0x4d1a9a
mov byte [esp + 0x22], dl
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 6
lea eax, [0x557560]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [0x57e639]
movzx edx, byte [esp + 0x22]
mov ebx, dword [esp + 0x7c]
mov esi, dword [esp + 0x28]
mov byte [edi + eax - 6], 0x5c
mov dword [edi + eax - 5], 0x32303275
mov byte [edi + eax - 1], dl
lea edx, [esi + 3]
movzx esi, byte [esp + 0x20]
mov ebx, edx
jmp 0x4d1ae5
movzx esi, byte [esp + 0x20]
mov ebx, dword [esp + 0x40]
mov eax, dword [esp + 0x54]
jmp 0x4d1ae5
movzx esi, byte [esp + 0x20]
mov ebx, dword [esp + 0x40]
mov eax, dword [esp + 0x54]
jmp 0x4d1ae5
movzx esi, byte [esp + 0x20]
mov ebx, dword [esp + 0x40]
jmp 0x4d1ae5
movzx esi, byte [esp + 0x20]
mov dword [esp + 0x48], ebp
mov dword [esp + 0x24], ebx
mov dword [esp + 0x44], edi
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx]
mov eax, dword [edx]
mov dword [esp], ecx
xchg esi, eax
mov byte [esp + 4], al
xchg esi, eax
call eax
mov eax, dword [esp + 8]
cmp eax, 9
jl 0x4d1bea
cmp eax, 0xb
je 0x4d1c03
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
cmp eax, ecx
jl 0x4d1b3b
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x58]
jmp 0x4d1be2
ja 0x4d1da7
sub ecx, eax
mov ebx, dword [esp + 0x44]
lea ebp, [ecx + ebx]
mov esi, dword [esp + 0x80]
sub esi, eax
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and eax, esi
mov esi, dword [esp + 0x78]
add eax, esi
mov edi, dword [esp + 0x48]
cmp edi, ebp
jae 0x4d1bb4
mov dword [esp + 0x48], ecx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
lea eax, [0x557560]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x58], eax
mov edi, ecx
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebp
mov edx, dword [esp + 0x58]
add ebx, edx
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004653a0
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x58]
lea esi, [ecx + 1]
jmp 0x4d1710
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x58]
jmp 0x4d1710
mov eax, dword [esp + 0x4c]
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x58]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x48], ecx
jmp 0x4d1c31
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x48]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x48], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x44], esi
mov dword [esp + 0x58], edi
mov dword [esp + 0x24], ebx
mov dword [esp], eax
call fcn.004d20c0
cmp dword [esp + 4], 0xb
jne 0x4d1c9e
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x44]
cmp ecx, edx
ja 0x4d1da2
mov eax, dword [esp + 0x4c]
mov ebx, dword [eax + 0x14]
mov eax, dword [eax + 0x18]
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x88], ebp
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], eax
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x64]
mov eax, dword [edx]
call eax
add esp, 0x68
ret
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x24]
cmp ecx, eax
jle 0x4d1d55
jb 0x4d1d9d
sub ecx, eax
mov edx, dword [esp + 0x48]
lea ebx, [ecx + edx]
mov ebp, dword [esp + 0x80]
sub ebp, eax
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, eax
mov eax, dword [esp + 0x78]
add eax, ebp
mov ebp, dword [esp + 0x44]
cmp ebp, ebx
jb 0x4d1ce5
mov edi, dword [esp + 0x58]
jmp 0x4d1d29
mov dword [esp + 0x44], ecx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
lea eax, [0x557560]
mov dword [esp + 0x10], eax
call fcn.0044b670
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov ebp, esi
mov dword [esp + 0x48], ebp
mov dword [esp + 0x44], ebx
mov dword [esp + 0x58], edi
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004653a0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x58]
jmp 0x4d1d61
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x64]
mov eax, dword [edx]
call eax
add esp, 0x68
ret
call fcn.00464b90
call fcn.00464b70
call fcn.00464b90
mov ecx, esi
call fcn.00464b90
mov eax, edx
mov ecx, ebx
call fcn.00464b30
mov ecx, ebx
call fcn.00464b30
mov eax, ebp
mov ecx, ebx
call fcn.00464b90
nop
call fcn.00435c60
add esp, 0x68
ret
call fcn.004636b0
jmp fcn.004d1640