Function at 0x4c85a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x18
push ebx
mov ebx, dword [esp + 0x20]
push ebp
push esi
push edi
mov edi, dword [esp + 0x30]
mov ebp, 0x8000
mov edx, dword [edi + 0x28]
nop word [eax + eax]
and edx, 0x1f000000
cmp edx, 0xb000000
je 0x4c85ee
xor eax, eax
cmp dword [edi + 0x30], eax
setne al
push eax
push edi
push ebx
call fcn.004ca3e0
add esp, 0xc
test eax, eax
je 0x4c8c6d
jmp 0x4c885c
mov eax, dword [edi + 0xc]
cmp eax, 0xffffffff
je 0x4c860a
cmp eax, 0xfffffff2
jae 0x4c8641
movsd xmm0, qword [edi + 8]
ucomisd xmm0, xmm0
lahf
test ah, 0x44
jnp 0x4c8641
cmp dword [edi + 0x30], 0
jne 0x4c8c65
cmp word [edi + 0x2c], bp
jae 0x4c8641
cmp dword [edi + 0x3c], 0
je 0x4c8634
push 0
push edi
push ebx
call fcn.004ca3e0
add esp, 0xc
test eax, eax
jne 0x4c885c
pop edi
pop esi
pop ebp
mov eax, 0x7fff
pop ebx
add esp, 0x18
ret
lea eax, [esp + 0x13]
push eax
lea eax, [esp + 0x20]
push eax
push edi
push ebx
call fcn.004cc3d0
mov ebp, dword [ebx + 0x10]
add esp, 0x10
movzx edx, ax
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], edx
mov al, byte [ebp + edx*8 + 5]
mov byte [esp + 0x30], al
cmp al, 0x1a
jne 0x4c8675
mov ebp, dword [ebp + edx*8]
jmp 0x4c8678
mov ebp, dword [edi + 0x24]
mov ecx, dword [edi + 0x30]
test ecx, ecx
jne 0x4c874f
mov esi, dword [ebp + 4]
cmp esi, 0xfffffff2
jae 0x4c8690
lea esi, [ecx + 0xe]
jmp 0x4c8692
not esi
lea eax, [ebx - 0x118]
cmp ebp, eax
jne 0x4c86d7
lea eax, [ebx - 0x118]
push eax
push 0x1a
push ebx
call fcn.004e0790
mov edx, dword [esp + 0x20]
mov ecx, 0x885
mov word [ebx + 0x7c], cx
add esp, 0xc
movzx ecx, dx
movzx eax, ax
mov word [ebx + 0x78], cx
mov ecx, ebx
mov word [ebx + 0x7a], ax
call fcn.004e3930
mov ebp, 0x7fff
jmp 0x4c870a
cmp byte [esp + 0x30], 0x38
mov ecx, 0x4280
mov eax, 0x4380
cmove eax, ecx
or ax, si
mov word [ebx + 0x7c], ax
mov eax, dword [esp + 0x14]
movzx ecx, ax
xor eax, eax
mov word [ebx + 0x78], cx
mov ecx, ebx
mov word [ebx + 0x7a], ax
call fcn.004e3930
mov ebp, eax
mov eax, dword [esp + 0x1c]
movzx ecx, bp
cmp ecx, eax
jae 0x4c8726
push eax
push ebx
call fcn.004e0aa0
mov al, byte [esp + 0x1b]
add esp, 8
mov byte [ebx + 0x76], al
test esi, esi
jne 0x4c88f2
cmp dword [edi + 0x3c], esi
je 0x4c88f7
push esi
push edi
push ebx
call fcn.004ca3e0
add esp, 0xc
test eax, eax
je 0x4c88f7
jmp 0x4c8857
mov eax, dword [edi]
mov esi, dword [eax + 0x10]
movzx eax, byte [edi + 0x2f]
and eax, 0x1f
mov dword [esp + 0x24], esi
sub eax, 4
cmp eax, 8
ja 0x4c8777
mov dword [esp + 0x18], 1
test ecx, 0x1f000000
jne 0x4c877f
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x1c]
cmp edx, eax
jae 0x4c879c
push eax
push ebx
call fcn.004e0aa0
mov al, byte [esp + 0x1b]
add esp, 8
mov edx, dword [esp + 0x20]
mov byte [ebx + 0x76], al
cmp dword [ebp + 4], 0xffffffff
jne 0x4c8a67
cmp dword [edi + 0x3c], 0
je 0x4c87ee
test esi, esi
je 0x4c87ee
push dword [ebx - 0x94]
push esi
call fcn.004a0ab0
add esp, 8
test eax, eax
je 0x4c87ee
cmp dword [eax + 4], 0xffffffff
je 0x4c87ee
cmp byte [esp + 0x30], 0x38
mov ecx, 0x4280
mov eax, 0x4380
cmove eax, ecx
mov word [ebx + 0x7c], ax
mov eax, dword [esp + 0x14]
movzx ecx, ax
xor eax, eax
mov word [ebx + 0x7a], ax
jmp 0x4c882e
cmp byte [esp + 0x30], 0x3a
jne 0x4c8839
lea eax, [ebx - 0x118]
push eax
push 0x1a
push ebx
call fcn.004e0790
movzx edx, ax
add esp, 0xc
lea eax, [ebx - 0x118]
mov word [ebx + 0x7a], dx
cmp ebp, eax
mov ecx, 0x985
mov eax, 0x885
cmove ecx, eax
mov eax, dword [esp + 0x14]
mov word [ebx + 0x7c], cx
movzx ecx, ax
mov word [ebx + 0x78], cx
mov ecx, ebx
call fcn.004e3930
cmp dword [edi + 0x3c], 0
je 0x4c89b6
push 1
push edi
push ebx
call fcn.004ca3e0
add esp, 0xc
test eax, eax
je 0x4c89b6
mov ebp, 0x8000
mov ecx, dword [edi + 0x38]
and ecx, 0x1f000000
cmp ecx, 0x8000000
je 0x4c890d
cmp dword [edi + 0x34], 0x7fff
jne 0x4c88d2
cmp dword [edi + 0x30], 0
jne 0x4c88d2
mov eax, dword [edi + 0x28]
and eax, 0x1f000000
cmp eax, 0xc000000
jne 0x4c88d2
mov eax, dword [edi]
cmp byte [eax + 6], 3
jne 0x4c88d2
cmp ecx, 0xb000000
jne 0x4c88d2
mov ecx, dword [edi + 0x2c]
mov eax, ecx
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x4c88d2
cmp cx, bp
jae 0x4c88d2
push dword [edi + 8]
push dword [edi + 0x18]
call fcn.004a0ab0
push eax
push ebx
call fcn.004c8520
add esp, 0x10
test eax, eax
jne 0x4c8998
add dword [edi + 0x3c], 0xffffffff
mov edx, dword [edi + 0x38]
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x1c]
mov dword [edi + 0x28], edx
mov dword [edi], eax
mov dword [edi + 4], ecx
je 0x4c8c75
jmp 0x4c85c0
cmp esi, 2
ja 0x4c8903
imul ebp, esi, 0xffffff
add ebp, 0x7fff
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0x18
ret
cmp dword [edi + 0x30], 0
mov ecx, 0x402d97
mov eax, 0x402cbb
cmovne eax, ecx
push eax
push ebx
call fcn.004cce40
mov ecx, dword [ebx + 0x54]
mov edx, eax
mov ebp, dword [ebx + 0x64]
add esp, 8
mov esi, dword [ecx + 0x10]
mov ecx, dword [edi + 0x38]
mov dword [ebp + edx*4], ecx
mov eax, dword [edi + 0x28]
mov dword [ebp + edx*4 + 4], eax
mov eax, dword [edi + 0x2c]
mov dword [ebp + edx*4 + 8], eax
mov eax, dword [edi + 0x18]
mov dword [esi + edx*8], eax
mov dword [esi + edx*8 + 4], 0xfffffff7
mov eax, dword [edi]
mov ecx, dword [edi + 4]
mov dword [esi + edx*8 + 8], eax
mov dword [esi + edx*8 + 0xc], ecx
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0xc]
mov dword [esi + edx*8 + 0x10], eax
mov dword [esi + edx*8 + 0x14], ecx
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4c89a0
mov dword [ebp + edx*4 + 0xc], eax
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x14]
push 3
push edx
push ebx
mov dword [esi + edx*8 + 0x18], eax
mov dword [esi + edx*8 + 0x1c], ecx
call fcn.004c84d0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
push 2
push edx
push ebx
call fcn.004c84d0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
lea eax, [ebx - 0x118]
cmp ebp, eax
jne 0x4c8b3f
mov esi, dword [edi + 0x2c]
mov eax, esi
shr eax, 0x18
and eax, 0x1f
sub eax, 0xf
cmp eax, 4
ja 0x4c89ed
mov ecx, ebx
mov dword [ebx + 0x7a], 0x5b0e01d3
mov word [ebx + 0x78], si
call fcn.004e3930
mov esi, eax
jmp 0x4c8a40
mov eax, esi
and eax, 0x1f000000
cmp eax, 0xe000000
jne 0x4c8a40
movzx eax, si
mov ecx, 0x8000
cmp ax, cx
jae 0x4c8a28
cmp dword [edi + 8], 0
jne 0x4c8a40
cmp dword [edi + 0xc], 0x80000000
jne 0x4c8a40
push 0
push 0
push ebx
call fcn.004e06a0
add esp, 0xc
mov esi, eax
jmp 0x4c8a40
mov ecx, 0x88e
mov word [ebx + 0x78], ax
mov word [ebx + 0x7c], cx
mov ecx, ebx
mov word [ebx + 0x7a], ax
call fcn.004e3930
movzx eax, word [edi + 0x28]
mov ecx, 0x3b05
mov word [ebx + 0x7c], cx
mov ecx, ebx
mov word [ebx + 0x78], ax
mov word [ebx + 0x7a], si
call fcn.004e3930
mov dword [esp + 0x14], eax
xor ebp, ebp
jmp 0x4c8b43
xor eax, eax
cmp byte [esp + 0x30], 0x38
push edx
setne al
add eax, 0x42
movzx esi, ax
push esi
push ebx
call fcn.004e5610
add esp, 0xc
test eax, eax
jne 0x4c8a60
cmp byte [esp + 0x30], 0x3a
jne 0x4c8ac1
lea eax, [ebx - 0x118]
push eax
push 0x1a
push ebx
call fcn.004e0790
mov edx, dword [esp + 0x20]
mov ecx, 0x985
mov word [ebx + 0x7c], cx
add esp, 0xc
movzx ecx, dx
movzx eax, ax
mov word [ebx + 0x78], cx
mov ecx, ebx
mov word [ebx + 0x7a], ax
call fcn.004e3930
cmp dword [edi + 0x3c], 0
je 0x4c8b3f
cmp dword [esp + 0x24], 0
jne 0x4c8b07
movzx eax, word [edi + 0x28]
mov ecx, ebx
mov dword [ebx + 0x7a], 0x450b0005
mov word [ebx + 0x78], ax
call fcn.004e3930
push 0xb
push ebx
mov esi, eax
call fcn.004e0620
movzx ecx, ax
add esp, 8
mov eax, 0x88b
mov word [ebx + 0x78], si
mov word [ebx + 0x7c], ax
mov word [ebx + 0x7a], cx
jmp 0x4c8b38
mov eax, dword [ebp + 4]
cmp eax, 0xfffffff2
jae 0x4c8b16
mov eax, 0xe
jmp 0x4c8b18
not eax
mov ecx, dword [esp + 0x14]
shl esi, 8
or esi, eax
movzx eax, cx
or esi, 0x80
mov word [ebx + 0x78], ax
xor eax, eax
mov word [ebx + 0x7c], si
mov word [ebx + 0x7a], ax
mov ecx, ebx
call fcn.004e3930
mov ebp, dword [esp + 0x18]
mov ecx, dword [edi + 0x30]
movzx eax, cx
mov esi, eax
mov edx, eax
mov eax, ecx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xf
cmp eax, 4
ja 0x4c8b77
mov ecx, ebx
mov dword [ebx + 0x7a], 0x5b0e01d3
mov word [ebx + 0x78], si
call fcn.004e3930
mov ecx, eax
mov dword [edi + 0x30], ecx
movzx edx, cx
shr ecx, 0x18
mov eax, 0x4b00
and ecx, 0x1f
mov word [ebx + 0x7a], dx
cmp byte [esp + 0x30], 0x38
mov esi, 0x4a00
cmove eax, esi
or cx, ax
mov eax, dword [esp + 0x14]
mov word [ebx + 0x7c], cx
mov ecx, ebx
mov word [ebx + 0x78], ax
call fcn.004e3930
test ebp, ebp
jne 0x4c8bbc
movzx eax, byte [edi + 0x33]
and eax, 0x1f
sub eax, 4
cmp eax, 8
ja 0x4c8bd2
movzx eax, word [edi + 0x28]
mov ecx, ebx
mov dword [ebx + 0x7a], 0x58000000
mov word [ebx + 0x78], ax
call fcn.004e3930
mov ecx, dword [edi + 0x2c]
mov eax, ecx
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x4c8c57
movzx eax, cx
mov ecx, 0x8000
cmp ax, cx
jae 0x4c8c1b
mov ecx, eax
mov eax, dword [ebx + 0x10]
mov edx, dword [eax + ecx*8]
xor ecx, ecx
lea eax, [ebx - 0x98]
cmp dword [eax], edx
je 0x4c8c1b
inc ecx
add eax, 4
cmp ecx, 5
jbe 0x4c8c00
pop edi
pop esi
pop ebp
mov byte [ebx + 0x75], 1
xor eax, eax
pop ebx
add esp, 0x18
ret
movzx eax, word [edi + 0x28]
mov ecx, ebx
mov dword [ebx + 0x7a], 0x3e05000a
mov word [ebx + 0x78], ax
call fcn.004e3930
xor edx, edx
mov ecx, ebx
mov esi, eax
call fcn.004e0160
movzx ecx, ax
mov eax, 0x4d10
mov word [ebx + 0x7a], cx
mov ecx, ebx
mov word [ebx + 0x7c], ax
mov word [ebx + 0x78], si
call fcn.004e3930
pop edi
pop esi
pop ebp
mov byte [ebx + 0x75], 1
xor eax, eax
pop ebx
add esp, 0x18
ret
push 0x11
push ebx
call fcn.004a52b0
push 0x12
push ebx
call fcn.004a52b0
push 0x13
push ebx
call fcn.004a52b0
int3