Function at 0x4a6490
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x14]
cmp eax, dword [ecx + 8]
jbe 0x4a6bb3
sub esp, 0x94
mov edx, dword [esp + 0x98]
movzx ebx, byte [edx + 0xf]
and ebx, 0x1f
cmp ebx, 0x14
jne 0x4a6b75
mov ebx, dword [edx + 0x28]
test ebx, ebx
je 0x4a6b66
mov ebx, dword [esp + 0x9c]
movzx ebp, byte [ebx + 0xf]
and ebp, 0x1f
cmp ebp, 0x14
jne 0x4a6804
xor eax, eax
xor ecx, ecx
jmp 0x4a6508
mov ebp, dword [esp + 0x20]
lea eax, [ebp + 1]
mov ebp, dword [esp + 0x9c]
mov ebx, ebp
mov ecx, edx
mov edx, dword [esp + 0x98]
cmp dword [ebx + 0x28], eax
jle 0x4a67f5
mov ebp, dword [edx + 0x28]
mov esi, dword [edx + 0x24]
cmp ecx, ebp
jae 0x4a6ba9
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], esi
mov dword [esp + 0x28], ecx
lea eax, [esi + ecx*8]
mov eax, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0043fb10
mov eax, dword [esp + 0x9c]
mov ecx, dword [eax + 0x24]
mov edx, dword [eax + 0x28]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x20]
cmp ebp, edx
jae 0x4a6ba0
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], ecx
lea edx, [ecx + ebp*8]
mov edx, dword [edx]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0043fb10
mov eax, dword [esp + 8]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
test eax, eax
je 0x4a65ae
lea edx, [eax + 3]
mov dword [esp + 0x8c], edx
movzx edx, byte [eax + 1]
shl edx, 8
movzx ebx, byte [eax + 2]
or ebx, edx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov edx, dword [esp + 0x4c]
test edx, edx
je 0x4a65de
lea ebx, [edx + 3]
mov dword [esp + 0x54], ebx
movzx ebx, byte [edx + 1]
shl ebx, 8
movzx ebp, byte [edx + 2]
or ebp, ebx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x44], eax
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x8c]
lea edi, [esp + 0x54]
cmp dword [edi + 4], ebp
je 0x4a67d3
xor ecx, ecx
test cl, cl
jne 0x4a6771
xor ecx, ecx
test cl, cl
je 0x4a6761
movzx ebx, byte [edx]
test bl, 1
je 0x4a6641
mov edx, dword [esp + 0x28]
inc edx
mov ebx, dword [esp + 0x98]
cmp dword [ebx + 0x28], edx
jg 0x4a64ef
mov byte [esp + 0xa0], 1
add esp, 0x94
ret
mov dword [esp], edx
call fcn.004a2dd0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test ecx, ecx
jne 0x4a675a
mov eax, dword [esp + 0x98]
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
test ecx, ecx
je 0x4a668f
lea edx, [ecx + 3]
mov dword [esp + 0x5c], edx
movzx edx, byte [ecx + 1]
shl edx, 8
movzx ecx, byte [ecx + 2]
or edx, ecx
mov dword [esp + 0x60], edx
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x30], edx
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.004a2dd0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x4a674d
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
test ebx, ebx
je 0x4a66fd
lea ebp, [ebx + 3]
mov dword [esp + 0x84], ebp
movzx ebp, byte [ebx + 1]
shl ebp, 8
movzx ebx, byte [ebx + 2]
or ebp, ebx
mov dword [esp + 0x88], ebp
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x14]
cmp ebx, esi
je 0x4a6723
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x28]
jmp 0x4a64ef
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004026d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a661d
mov edx, dword [esp + 0x9c]
jmp 0x4a6713
mov edx, dword [esp + 0x9c]
mov ebx, eax
mov ebp, ecx
jmp 0x4a670b
mov edx, eax
jmp 0x4a6697
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x28]
jmp 0x4a64ef
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x48]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0043fb50
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x50]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 8]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x98]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0043fb50
mov eax, dword [esp + 0x40]
cmp dword [esp + 8], eax
sete cl
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
jmp 0x4a660d
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004026d0
movzx ecx, byte [esp + 0xc]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
jmp 0x4a6603
mov byte [esp + 0xa0], 0
add esp, 0x94
ret
mov dword [esp], ebx
call fcn.004a31e0
mov eax, dword [esp + 4]
test eax, eax
je 0x4a6b57
movzx ebp, word [eax + 4]
test bp, bp
jne 0x4a6b3d
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x38], eax
mov ebx, dword [esp + 0x98]
xor ebp, ebp
xor esi, esi
jmp 0x4a6859
mov edi, dword [esp + 0x1c]
lea ebp, [edi + 1]
mov edi, dword [esp + 0x38]
mov eax, edi
mov ecx, dword [esp + 0x10]
mov esi, edx
mov edx, dword [esp + 0x3c]
movzx edi, word [eax + 4]
cmp ebp, edi
jge 0x4a6b2e
mov edi, dword [ebx + 0x24]
mov edx, dword [ebx + 0x28]
cmp esi, edx
jae 0x4a6b8d
mov dword [esp + 0x50], edi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x24], esi
lea eax, [edi + esi*8]
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0043fb10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
cmp ecx, edx
jae 0x4a6b84
mov dword [esp + 0x4c], eax
shl ecx, 4
mov edx, dword [esp + 0x3c]
mov ebx, dword [edx + ecx + 4]
mov dword [esp + 0x2c], ebx
mov ecx, dword [edx + ecx]
nop
mov ebp, dword [esp + 0x9c]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0043fb10
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
test eax, eax
je 0x4a6904
lea edx, [eax + 3]
mov dword [esp + 0x7c], edx
movzx edx, byte [eax + 1]
shl edx, 8
movzx ebx, byte [eax + 2]
or edx, ebx
mov dword [esp + 0x80], edx
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov edx, dword [esp + 0x4c]
test edx, edx
je 0x4a6934
lea ebx, [edx + 3]
mov dword [esp + 0x74], ebx
movzx ebx, byte [edx + 1]
shl ebx, 8
movzx ebp, byte [edx + 2]
or ebx, ebp
mov dword [esp + 0x78], ebx
mov dword [esp + 0x44], eax
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x7c]
lea edi, [esp + 0x74]
cmp dword [edi + 4], ebx
je 0x4a6b0c
xor ecx, ecx
test cl, cl
jne 0x4a6ab4
xor ecx, ecx
test cl, cl
je 0x4a6aa4
movzx ebx, byte [edx]
test bl, 1
je 0x4a6994
mov edx, dword [esp + 0x24]
inc edx
mov ebx, dword [esp + 0x98]
cmp dword [ebx + 0x28], edx
jg 0x4a6842
mov byte [esp + 0xa0], 1
add esp, 0x94
ret
mov dword [esp], edx
call fcn.004a2dd0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test ecx, ecx
jne 0x4a6a9b
mov eax, dword [esp + 0x98]
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
test ecx, ecx
je 0x4a69e2
lea edx, [ecx + 3]
mov dword [esp + 0x6c], edx
movzx edx, byte [ecx + 1]
shl edx, 8
movzx ecx, byte [ecx + 2]
or edx, ecx
mov dword [esp + 0x70], edx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.004a2dd0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x4a6a45
mov edx, dword [esp + 0x18]
cmp ecx, edx
je 0x4a6a22
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x24]
jmp 0x4a6842
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004026d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a6970
jmp 0x4a6a12
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0043fb10
mov eax, dword [esp + 8]
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
test eax, eax
je 0x4a6a8e
lea edx, [eax + 3]
mov dword [esp + 0x64], edx
movzx edx, byte [eax + 1]
shl edx, 8
movzx ebx, byte [eax + 2]
or edx, ebx
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
jmp 0x4a6a0a
mov edx, ecx
mov ecx, eax
jmp 0x4a69ea
mov ebx, dword [esp + 0x98]
mov edx, dword [esp + 0x24]
jmp 0x4a6842
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
call fcn.0043fb50
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x50]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 8]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x98]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0043fb50
mov eax, dword [esp + 0x40]
cmp dword [esp + 8], eax
sete cl
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
jmp 0x4a6960
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.004026d0
movzx ecx, byte [esp + 0xc]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
jmp 0x4a6956
mov byte [esp + 0xa0], 0
add esp, 0x94
ret
mov esi, dword [eax + 8]
movzx edx, bp
lea ebp, [eax + esi]
cmp edx, 0x10000
ja 0x4a6b96
mov ecx, edx
mov edx, ebp
jmp 0x4a6829
mov byte [esp + 0xa0], 0
add esp, 0x94
ret
mov byte [esp + 0xa0], 1
add esp, 0x94
ret
mov byte [esp + 0xa0], 0
add esp, 0x94
ret
mov eax, ecx
mov ecx, edx
call fcn.0045a130
mov eax, esi
mov ecx, edx
call fcn.0045a130
mov ebx, 0x10000
call fcn.0045a1b0
mov eax, ebp
mov ecx, edx
call fcn.0045a130
mov eax, ecx
mov ecx, ebp
call fcn.0045a130
nop
call fcn.00458870
jmp fcn.004a6490