Function at 0x4e1810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5376e0
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x581094]
xor eax, esp
mov dword [esp + 0xa0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x581094]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xc8]
push 0x108
mov edi, ecx
push 0xf
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], ebp
call fcn.004da310
mov cl, byte [ebp + 0x30]
push pe_nt_image_headers32
mov dword [esp + 0x28], eax
add eax, 8
push 0
push eax
mov byte [esp + 0x37], cl
call fcn.00502e80
mov esi, dword [ebp + 0xc]
add esp, 0xc
cmp esi, dword [ebp + 0x10]
jbe 0x4e1893
call fcn.00502761
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
cmp dword [ebp + 0xc], eax
jbe 0x4e18ab
call fcn.00502761
mov edx, dword [ebp]
mov dword [esp + 0x3c], edx
test ebx, ebx
je 0x4e18bc
cmp ebx, dword [esp + 0x3c]
je 0x4e18c1
call fcn.00502761
cmp esi, dword [esp + 0x18]
je 0x4e1967
mov ecx, dword [esp + 0x1c]
xor ebx, ebx
cmp byte [edi + 0xc], 0
je 0x4e18ec
mov eax, dword [edi + 4]
mov eax, dword [eax]
movzx edx, bl
mov dl, byte [eax + edx + 0x104]
mov byte [esp + 0x14], dl
jmp 0x4e18f0
mov byte [esp + 0x14], bl
test ecx, ecx
jne 0x4e195f
call fcn.00502761
mov ecx, dword [esp + 0x1c]
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4e190d
call fcn.00502761
mov ecx, dword [esp + 0x1c]
cmp byte [edi + 0xc], 0
mov al, byte [esi]
je 0x4e1924
mov edx, dword [edi + 4]
mov edx, dword [edx]
movzx eax, al
mov al, byte [edx + eax + 0x104]
cmp byte [esp + 0x14], al
jne 0x4e1935
mov eax, dword [esp + 0x24]
add eax, 8
mov byte [eax + ebx], 1
inc ebx
cmp ebx, 0x100
jb 0x4e18d1
test ecx, ecx
jne 0x4e1963
call fcn.00502761
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4e1953
call fcn.00502761
mov ebx, dword [esp + 0x1c]
add esi, 2
jmp 0x4e18b2
mov eax, dword [ecx]
jmp 0x4e18ff
mov eax, dword [ecx]
jmp 0x4e1949
mov esi, dword [ebp + 0x24]
cmp esi, dword [ebp + 0x28]
jbe 0x4e1974
call fcn.00502761
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x20], esi
mov dword [esp + 0x3c], eax
cmp dword [ebp + 0x24], eax
jbe 0x4e1990
call fcn.00502761
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x34], ecx
jmp 0x4e19a0
mov esi, dword [esp + 0x20]
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x4e19b6
cmp edi, dword [esp + 0x34]
je 0x4e19bb
call fcn.00502761
cmp esi, dword [esp + 0x3c]
je 0x4e1d0c
test edi, edi
jne 0x4e1c86
call fcn.00502761
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4e19de
call fcn.00502761
cmp byte [ebp + 0xc], 0
mov al, byte [esi]
mov ecx, dword [ebp + 4]
je 0x4e19f5
mov ecx, dword [ecx]
movzx edx, al
mov al, byte [edx + ecx + 0x104]
mov byte [esp + 0x14], al
test edi, edi
jne 0x4e1c8d
call fcn.00502761
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4e1a12
call fcn.00502761
add esi, 2
test edi, edi
jne 0x4e1c94
call fcn.00502761
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4e1a2e
call fcn.00502761
cmp byte [ebp + 0xc], 0
mov bl, byte [esi]
mov eax, dword [ebp + 4]
je 0x4e1a45
mov eax, dword [eax]
movzx ecx, bl
mov bl, byte [ecx + eax + 0x104]
test edi, edi
jne 0x4e1c9b
call fcn.00502761
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4e1a5e
call fcn.00502761
mov edx, dword [ebp]
mov al, byte [esp + 0x14]
add esi, 2
test dword [edx + 0x20], 0x200000
mov dword [esp + 0x20], esi
je 0x4e1ca2
lea ecx, [esp + 0x19]
push ecx
mov ecx, dword [ebp + 4]
lea edx, [esp + 0x1c]
mov byte [esp + 0x1c], al
push edx
lea eax, [esp + 0xa0]
push eax
mov byte [esp + 0x25], 0
call fcn.004dad60
lea ecx, [esp + 0x19]
push ecx
mov ecx, dword [ebp + 4]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x68]
push eax
mov dword [esp + 0xcc], 0
mov byte [esp + 0x24], bl
call fcn.004dad60
cmp dword [esp + 0xb0], 0x10
mov edx, dword [esp + 0x9c]
mov byte [esp + 0xc0], 1
jae 0x4e1ae2
lea edx, [esp + 0x9c]
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0xac]
mov ecx, esi
cmp esi, edi
jb 0x4e1af5
mov ecx, edi
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x64]
mov eax, ebp
cmp ebx, 0x10
jae 0x4e1b08
lea eax, [esp + 0x64]
push ecx
push edx
push eax
call fcn.0040928e
add esp, 0xc
test eax, eax
jne 0x4e1b26
cmp esi, edi
jb 0x4e1cc8
cmp esi, edi
setne al
test eax, eax
jl 0x4e1cc8
mov dword [esp + 0x14], 0
mov cl, byte [esp + 0x14]
lea edx, [esp + 0x19]
push edx
mov edx, dword [esp + 0x30]
mov byte [esp + 0x1c], cl
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x4c]
push ecx
mov ecx, dword [edx + 4]
call fcn.004dad60
cmp dword [esp + 0xb0], 0x10
mov edx, dword [esp + 0x9c]
jae 0x4e1b6f
lea edx, [esp + 0x9c]
mov edi, dword [esp + 0x58]
mov esi, dword [esp + 0xac]
mov ecx, edi
cmp edi, esi
jb 0x4e1b82
mov ecx, esi
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x48]
mov eax, ebp
cmp ebx, 0x10
jae 0x4e1b95
lea eax, [esp + 0x48]
push ecx
push edx
push eax
call fcn.0040928e
add esp, 0xc
test eax, eax
jne 0x4e1baf
cmp edi, esi
jb 0x4e1c02
cmp edi, esi
setne al
test eax, eax
jl 0x4e1c02
mov edx, ebp
cmp ebx, 0x10
jae 0x4e1bbc
lea edx, [esp + 0x48]
mov esi, dword [esp + 0x74]
mov ecx, esi
cmp esi, edi
jb 0x4e1bc8
mov ecx, edi
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
jae 0x4e1bd7
lea eax, [esp + 0x64]
push ecx
push edx
push eax
call fcn.0040928e
add esp, 0xc
test eax, eax
jne 0x4e1bf1
cmp esi, edi
jb 0x4e1c02
cmp esi, edi
setne al
test eax, eax
jl 0x4e1c02
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
add eax, 8
mov byte [eax + ecx], 1
mov byte [esp + 0xc0], 1
cmp ebx, 0x10
jb 0x4e1c18
push ebp
call fcn.00500d36
add esp, 4
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x100
jb 0x4e1b34
mov esi, 0x10
cmp dword [esp + 0x78], esi
jb 0x4e1c44
mov edx, dword [esp + 0x64]
push edx
call fcn.00500d36
add esp, 4
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0xb0], esi
jb 0x4e19a0
mov eax, dword [esp + 0x9c]
push eax
call fcn.00500d36
add esp, 4
jmp 0x4e19a0
mov eax, dword [edi]
jmp 0x4e19d4
mov eax, dword [edi]
jmp 0x4e1a08
mov eax, dword [edi]
jmp 0x4e1a24
mov eax, dword [edi]
jmp 0x4e1a54
cmp bl, al
jb 0x4e1d05
mov edx, dword [esp + 0x24]
movzx eax, al
movzx ecx, bl
sub ecx, eax
inc ecx
push ecx
lea eax, [eax + edx + 8]
push 1
push eax
call fcn.00502e80
add esp, 0xc
jmp 0x4e19ac
cmp ebx, 0x10
jb 0x4e1cd6
push ebp
call fcn.00500d36
add esp, 4
cmp dword [esp + 0xb0], 0x10
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
jb 0x4e1d05
mov ecx, dword [esp + 0x9c]
push ecx
call fcn.00500d36
add esp, 4
xor eax, eax
jmp 0x4e2042
mov edx, dword [ebp]
mov eax, dword [edx + 0x20]
mov ebx, dword [esp + 0x30]
mov edi, dword [ebx + 0x34]
test eax, 0x100000
je 0x4e1d39
mov eax, dword [ebp + 0x34]
mov ecx, eax
and ecx, edi
cmp ecx, eax
je 0x4e1d36
mov eax, dword [ebp + 0x38]
mov edx, eax
and edx, edi
cmp edx, eax
jne 0x4e1d39
or edi, dword [ebp + 0x3c]
test edi, edi
je 0x4e1d62
xor esi, esi
nop
mov ecx, dword [ebp + 4]
push edi
push esi
call fcn.004d78e0
test al, al
je 0x4e1d59
mov eax, dword [esp + 0x24]
add eax, 8
mov byte [eax + esi], 1
inc esi
cmp esi, 0x100
jb 0x4e1d40
mov eax, dword [ebp]
test dword [eax + 0x20], 0x100000
mov edi, dword [ebx + 0x38]
je 0x4e1d8a
mov eax, dword [ebp + 0x34]
mov ecx, eax
and ecx, edi
cmp ecx, eax
je 0x4e1d87
mov eax, dword [ebp + 0x38]
mov edx, eax
and edx, edi
cmp edx, eax
jne 0x4e1d8a
or edi, dword [ebp + 0x3c]
test edi, edi
je 0x4e1db2
xor esi, esi
mov ecx, dword [ebp + 4]
push edi
push esi
call fcn.004d78e0
test al, al
jne 0x4e1da9
mov eax, dword [esp + 0x24]
add eax, 8
mov byte [eax + esi], 1
inc esi
cmp esi, 0x100
jb 0x4e1d90
mov esi, dword [ebx + 0x4c]
cmp esi, dword [ebx + 0x50]
jbe 0x4e1dbf
call fcn.00502761
mov ebp, dword [ebx + 0x50]
mov edi, dword [ebx + 0x40]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x30], ebp
cmp dword [ebx + 0x4c], ebp
jbe 0x4e1ddb
call fcn.00502761
mov eax, dword [ebx + 0x40]
mov dword [esp + 0x34], eax
test edi, edi
je 0x4e1dec
cmp edi, dword [esp + 0x34]
je 0x4e1df1
call fcn.00502761
cmp esi, ebp
je 0x4e2016
mov dword [esp + 0x94], 0xf
mov dword [esp + 0x90], 0
mov byte [esp + 0x80], 0
mov dword [esp + 0xc0], 3
test edi, edi
jne 0x4e1fe3
call fcn.00502761
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4e1e3b
call fcn.00502761
test edi, edi
jne 0x4e1fea
call fcn.00502761
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x4e1e54
call fcn.00502761
mov eax, dword [esp + 0x2c]
lea ecx, [esi + 1]
push ecx
mov ecx, dword [eax + 4]
push esi
lea edx, [esp + 0x4c]
push edx
call fcn.004e0130
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 4
call fcn.00402941
mov esi, 0x10
mov byte [esp + 0xc0], 3
cmp dword [esp + 0x5c], esi
jb 0x4e1ea3
mov ecx, dword [esp + 0x48]
push ecx
call fcn.00500d36
add esp, 4
cmp dword [esp + 0x90], 0
je 0x4e1ff5
xor ebx, ebx
lea edx, [esp + 0x15]
push edx
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x4c]
push ecx
mov ecx, dword [edx + 4]
mov byte [esp + 0x20], bl
mov byte [esp + 0x21], 0
call fcn.004e0130
mov ebp, dword [esp + 0x5c]
mov edx, dword [esp + 0x48]
cmp ebp, 0x10
jae 0x4e1ee8
lea edx, [esp + 0x48]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x58]
mov ecx, esi
cmp esi, edi
jb 0x4e1efb
mov ecx, edi
cmp dword [esp + 0x94], 0x10
mov eax, dword [esp + 0x80]
jae 0x4e1f13
lea eax, [esp + 0x80]
push ecx
push edx
push eax
call fcn.0040928e
add esp, 0xc
test eax, eax
jne 0x4e1f3a
cmp esi, edi
jb 0x4e1f3a
cmp esi, edi
setne al
test eax, eax
jne 0x4e1f3a
mov eax, dword [esp + 0x24]
add eax, 8
mov byte [eax + ebx], 1
mov byte [esp + 0xc0], 3
cmp ebp, 0x10
jb 0x4e1f54
mov eax, dword [esp + 0x48]
push eax
call fcn.00500d36
add esp, 4
xor esi, esi
inc ebx
mov edi, 0xf
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], esi
mov byte [esp + 0x48], 0
cmp ebx, 0x100
jb 0x4e1eb3
mov eax, dword [esp + 0x1c]
cmp eax, esi
jne 0x4e1ff1
call fcn.00502761
xor eax, eax
mov ecx, dword [esp + 0x20]
cmp ecx, dword [eax + 0x10]
jb 0x4e1f92
call fcn.00502761
add dword [esp + 0x20], 2
cmp dword [esp + 0x94], 0x10
mov dword [esp + 0xc0], 0xffffffff
jb 0x4e1fbc
mov edx, dword [esp + 0x80]
push edx
call fcn.00500d36
add esp, 4
mov ebp, dword [esp + 0x30]
mov dword [esp + 0x94], edi
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x90], esi
mov esi, dword [esp + 0x20]
mov byte [esp + 0x80], 0
jmp 0x4e1de2
mov eax, dword [edi]
jmp 0x4e1e31
mov eax, dword [edi]
jmp 0x4e1e4a
mov eax, dword [eax]
jmp 0x4e1f84
cmp dword [esp + 0x94], esi
jb 0x4e1d05
mov eax, dword [esp + 0x80]
push eax
call fcn.00500d36
add esp, 4
xor eax, eax
jmp 0x4e2042
cmp byte [esp + 0x2b], 0
je 0x4e203e
mov eax, dword [esp + 0x24]
add eax, 8
mov ecx, pe_nt_image_headers32
lea esp, [esp]
cmp byte [eax], 0
sete dl
mov byte [eax], dl
inc eax
sub ecx, 1
jne 0x4e2030
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.00502c08
add esp, 0xb0
ret 8