Function at 0x4cac80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x68]
cmp eax, dword [ecx + 8]
jbe 0x4cb736
sub esp, 0xe8
mov eax, dword [esp + 0xfc]
mov ebx, dword [esp + 0x108]
cmp eax, ebx
jl 0x4cb620
test eax, eax
je 0x4cb5f2
test ebx, ebx
je 0x4cb5f2
cmp ebx, 1
je 0x4cb576
mov ebp, dword [esp + 0xf4]
test ebp, ebp
jle 0x4cb564
mov esi, dword [esp + 0xec]
lea edi, [esi + ebp*4 - 4]
mov edx, dword [esp + 0x100]
mov ecx, eax
mov eax, dword [esp + 0xf8]
lea eax, [eax + edx*4 - 4]
cmp edi, eax
jne 0x4cb521
xor eax, eax
xor ebp, ebp
mov esi, dword [0x74f11c]
cmp ebx, esi
jl 0x4cb3d5
mov dword [esp + 0xe4], ebp
nop
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0x80], ebx
mov ebx, edi
jmp 0x4cad46
sar ebx, 1
mov ebp, dword [esp + 0x80]
inc ebp
mov dword [esp + 0x80], ebp
mov ebp, dword [esp + 0xe4]
cmp esi, ebx
jl 0x4cad2e
mov esi, dword [esp + 0x80]
cmp esi, 0x20
sbb ebp, ebp
mov ecx, esi
shl ebx, cl
and ebx, ebp
cmp ebx, edx
ja 0x4cb715
mov ebp, dword [esp + 0x10c]
cmp ebx, ebp
ja 0x4cb70c
lea esi, [ebx + ebx*2]
mov ecx, esi
shl esi, 1
mov ebp, dword [esp + 0xfc]
add ebp, edi
cmp esi, ebp
jle 0x4cb3ce
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x88], ebp
cmp esi, eax
jg 0x4cb342
ja 0x4cb703
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0xf4], eax
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov ebp, dword [esp + 0xf8]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edx
mov esi, dword [esp + 0x104]
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ebx
mov edi, dword [esp + 0x10c]
mov dword [esp + 0x20], edi
call fcn.004ca4c0
mov edx, dword [esp + 0xf4]
mov ecx, dword [esp + 0x88]
cmp edx, ecx
jb 0x4cb6fe
mov eax, dword [esp + 0x58]
mov ebx, eax
shl eax, 1
cmp ecx, eax
jb 0x4cb6f9
sub edx, eax
mov esi, edx
neg edx
shl ebx, 3
sar edx, 0x1f
and ebx, edx
mov edx, dword [esp + 0xec]
add ebx, edx
mov dword [esp], ebx
sub ecx, eax
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.004c93f0
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x58]
cmp eax, ecx
jg 0x4caed1
mov ebx, dword [esp + 0xfc]
cmp ebx, eax
jne 0x4caed1
mov ebp, dword [esp + 0x88]
mov ebx, dword [esp + 0xec]
mov eax, ebp
jmp 0x4cae8f
mov ebp, esi
test ebp, ebp
jle 0x4caea6
lea esi, [ebp - 1]
cmp eax, esi
jbe 0x4cb6a8
mov edi, dword [ebx + ebp*4 - 4]
test edi, edi
je 0x4cae8d
mov edx, dword [esp + 0xf4]
cmp edx, ebp
jb 0x4cb6a1
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebp
mov dword [esp + 0x118], edx
add esp, 0xe8
ret
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004ccc60
mov eax, dword [esp + 4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov dword [esp + 0x70], ebx
nop
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0xf8]
mov edi, ebp
jmp 0x4caf06
mov ebp, ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x5c], ebp
test ebp, ebp
jle 0x4caf21
lea ebx, [ebp - 1]
cmp edi, ebx
jbe 0x4cb6f0
mov ebp, dword [esi + ebp*4 - 4]
test ebp, ebp
je 0x4caf00
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x100]
cmp ebx, ebp
ja 0x4cb6e7
mov ebp, dword [esp + 0x108]
cmp ebp, edi
jb 0x4cb6de
mov dword [esp + 0xd0], eax
mov dword [esp], ecx
mov dword [esp + 4], edx
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x100]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x10c]
sub ecx, edi
mov dword [esp + 0x50], ecx
mov ebx, ecx
neg ecx
shl edi, 2
sar ecx, 0x1f
and edi, ecx
mov ecx, dword [esp + 0x104]
add edi, ecx
mov dword [esp + 0xcc], edi
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x58]
sub ebp, edi
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebx
call fcn.004cac80
mov eax, dword [esp + 0x24]
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xf4]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x58]
mov dword [esp + 0x18], edi
call fcn.004cab70
nop
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x104]
mov edx, eax
jmp 0x4cb016
mov eax, ebx
test eax, eax
jle 0x4cb02d
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x4cb6d5
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4cb014
mov ebx, dword [esp + 0x10c]
cmp eax, ebx
ja 0x4cb6cc
mov dword [esp + 0x54], eax
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x100]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x70], eax
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x60], ecx
mov dword [esp + 0xa8], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0xe0], edx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xa8]
jmp 0x4cb2cc
mov ebx, dword [esp + 0x10c]
mov ebp, esi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x34], ebp
test ebp, ebp
jle 0x4cb0ce
lea esi, [ebp - 1]
mov ebx, dword [esp + 0x48]
cmp esi, ebx
jae 0x4cb6ba
mov ebp, dword [edi + ebp*4 - 4]
test ebp, ebp
je 0x4cb0a2
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x34]
cmp ebx, ebp
jb 0x4cb6b1
mov dword [esp + 0xc8], edi
mov edx, dword [esp + 0xe0]
mov dword [esp], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x10c]
mov dword [esp + 0x20], edx
call fcn.004cac80
mov eax, dword [esp + 0x24]
mov dword [esp + 0xd4], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x78], edx
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xf4]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x84]
mov dword [esp + 0x18], edi
call fcn.004cab70
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x20], edx
call fcn.004cac80
mov eax, dword [esp + 0x28]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xd8], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x74], edx
mov ebx, dword [esp + 0xec]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xf4]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x84]
mov esi, dword [esp + 0x58]
add edi, esi
mov dword [esp + 0x84], edi
mov dword [esp + 0x18], edi
call fcn.004cab70
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x100]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x74]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x104]
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0xf8]
mov esi, edx
mov edi, dword [esp + 0x100]
mov edx, dword [esp + 0x84]
mov dword [esp + 0xa0], ebp
mov ebp, dword [esp + 0x74]
mov dword [esp + 0x70], ebp
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x60], esi
mov dword [esp + 0x90], edi
mov edi, dword [esp + 0xd8]
mov dword [esp + 0xe0], edi
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 0x100]
cmp esi, edx
jle 0x4cb31a
jb 0x4cb6c3
mov dword [esp + 0x84], edx
sub edi, edx
mov dword [esp + 0x40], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
shl edx, 2
sar edi, 0x1f
and edx, edi
lea edi, [edx + ebp]
mov edx, ebp
mov ebp, dword [esp + 0x84]
sub esi, ebp
mov ebp, dword [esp + 0x58]
cmp ebp, esi
jge 0x4cb312
mov esi, ebp
mov dword [esp + 0x48], ebp
jmp 0x4cb0af
mov ebp, esi
mov esi, dword [esp + 0x58]
jmp 0x4cb309
lea eax, [0x783710]
mov dword [esp], eax
lea eax, [0x60ccc0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 8], eax
call fcn.00470e30
jmp 0x4cae7b
cmp esi, 1
jne 0x4cb38a
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004450a0
mov ebp, dword [esp + 0xc]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x58]
mov eax, 1
mov dword [esp + 0xec], ebp
mov esi, 1
jmp 0x4cadc7
mov dword [esp + 0x30], esi
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], esi
lea eax, [esi + 4]
mov dword [esp + 0x3c], eax
mov dword [esp + 8], eax
call fcn.004450a0
mov ebp, dword [esp + 0xc]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x58]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xec], ebp
mov esi, dword [esp + 0x30]
jmp 0x4cadc7
mov esi, ebp
jmp 0x4cad8b
lea esi, [ecx + ebx]
cmp esi, eax
jg 0x4cb48e
ja 0x4cb72c
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf0], esi
mov dword [esp + 0xec], ebp
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov edi, dword [esp + 0xf8]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x20], ecx
call fcn.004c9de0
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov edx, eax
jmp 0x4cb44c
mov eax, ebx
test eax, eax
jle 0x4cb463
lea ebx, [eax - 1]
cmp ebx, edx
jae 0x4cb723
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4cb44a
mov edx, dword [esp + 0xf4]
cmp eax, edx
ja 0x4cb71c
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], edx
add esp, 0xe8
ret
cmp esi, 1
jne 0x4cb4d9
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004450a0
mov ebp, dword [esp + 0xc]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x108]
mov eax, 1
mov esi, 1
jmp 0x4cb3e6
mov dword [esp + 0x38], esi
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], esi
lea eax, [ebx + ecx + 4]
mov dword [esp + 0x44], eax
mov dword [esp + 8], eax
call fcn.004450a0
mov ebp, dword [esp + 0xc]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x108]
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x38]
jmp 0x4cb3e6
test ebp, ebp
jle 0x4cb55b
lea eax, [esi + ebp*4 - 4]
mov edi, dword [esp + 0x10c]
mov ebx, dword [esp + 0x104]
lea ebx, [ebx + edi*4 - 4]
cmp eax, ebx
jne 0x4cb54b
mov ebx, dword [esp + 0x108]
jmp 0x4cad05
mov ebx, dword [esp + 0x108]
mov eax, ebp
mov ebp, esi
jmp 0x4cad09
mov edi, dword [esp + 0x10c]
jmp 0x4cb54b
mov ecx, eax
mov edx, dword [esp + 0x100]
mov esi, dword [esp + 0xec]
jmp 0x4cb523
mov ecx, dword [esp + 0x104]
mov ecx, dword [ecx]
mov edx, dword [esp + 0xec]
mov dword [esp], edx
mov edx, dword [esp + 0xf0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xf4]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0
call fcn.004c9c20
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], edx
add esp, 0xe8
ret
mov eax, dword [esp + 0xec]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], 0
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x118], eax
add esp, 0xe8
ret
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov ecx, dword [esp + 0xf0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xf4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0x20], eax
call fcn.004cac80
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], edx
add esp, 0xe8
ret
mov ecx, ebp
call fcn.0045ded0
mov ecx, eax
mov eax, esi
call fcn.0045de90
mov ecx, ebp
mov edx, ebx
call fcn.0045ded0
mov eax, esi
mov ecx, ebx
call fcn.0045de90
mov eax, edx
mov ecx, esi
call fcn.0045def0
mov ecx, eax
mov edx, ebx
call fcn.0045ded0
mov eax, ebx
mov ecx, edx
call fcn.0045de90
mov eax, edi
mov ecx, ebp
call fcn.0045def0
mov ecx, ebx
mov edx, ebp
call fcn.0045ded0
mov eax, ebx
mov ecx, edi
call fcn.0045de90
call fcn.0045def0
call fcn.0045ded0
mov ecx, esi
mov edx, eax
call fcn.0045ded0
mov ecx, ebx
mov edx, ebp
call fcn.0045ded0
mov ecx, ebx
call fcn.0045ded0
mov ecx, eax
call fcn.0045ded0
mov eax, ebx
mov ecx, edx
call fcn.0045de90
mov ecx, esi
mov edx, eax
call fcn.0045ded0
nop
call fcn.0045c8b0
jmp fcn.004cac80