Function at 0x4c7e10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4d72b8
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x510918]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x510918]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0x28], ebp
push 0x20
push 0xe
call fcn.004c8880
mov ebx, dword [esp + 0xb8]
mov edi, eax
mov ecx, dword [ebx + 4]
sub ecx, dword [ebx]
sar ecx, 2
mov dword [edi + 8], ecx
mov eax, dword [ebx + 0x10]
sub eax, dword [ebx + 0xc]
sar eax, 2
shr eax, 1
mov dword [edi + 0xc], eax
mov eax, dword [ebx + 0x2c]
sub eax, dword [ebx + 0x28]
sar eax, 2
mov dword [edi + 0x10], eax
mov esi, dword [ebx + 0x1c]
mov dword [edi + 0x14], esi
mov edx, dword [ebx + 0x20]
mov dword [edi + 0x18], edx
mov eax, dword [ebp]
test dword [eax + 0x14], 0x100000
je 0x4c7ed8
mov eax, esi
and eax, dword [ebp + 0x44]
cmp eax, dword [ebp + 0x44]
je 0x4c7eb4
mov eax, esi
and eax, dword [ebp + 0x48]
cmp eax, dword [ebp + 0x48]
jne 0x4c7ebc
mov eax, dword [ebp + 0x4c]
or eax, esi
mov dword [edi + 0x14], eax
mov eax, edx
and eax, dword [ebp + 0x44]
cmp eax, dword [ebp + 0x44]
je 0x4c7ed0
mov eax, edx
and eax, dword [ebp + 0x48]
cmp eax, dword [ebp + 0x48]
jne 0x4c7ed8
mov eax, dword [ebp + 0x4c]
or eax, edx
mov dword [edi + 0x18], eax
mov al, byte [ebx + 0x18]
mov byte [edi + 0x1c], al
mov al, byte [ebx + 0x19]
test al, al
sete al
mov byte [edi + 0x1d], al
mov eax, dword [ebp]
mov esi, dword [ebx]
sub edi, dword [eax + 0x138]
mov dword [esp + 0x30], edi
mov edi, dword [ebx + 4]
cmp esi, edi
je 0x4c7fc5
mov ecx, dword [ebp]
xor ebx, ebx
cmp word [esi + 2], bx
mov eax, dword [ecx + 0x134]
setne bl
sub eax, dword [ecx + 0x13c]
add ecx, 0x134
mov dword [esp + 0x14], ecx
add ebx, 2
add ebx, ebx
cmp eax, ebx
jae 0x4c7f3f
mov edx, ebx
sub edx, dword [ecx + 4]
add edx, dword [ecx + 8]
call fcn.004d66e0
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 8]
mov dword [esp + 0x14], edx
lea eax, [ebx + edx]
mov dword [ecx + 8], eax
mov al, byte [ebp + 0xc]
movzx ecx, word [esi]
mov ebx, dword [ebp + 4]
test al, al
je 0x4c7f6b
mov edx, dword [ebx]
mov edx, dword [edx]
call fcn.004d6400
mov edx, dword [esp + 0x14]
movzx eax, ax
jmp 0x4c7f6d
mov eax, ecx
mov word [edx], ax
movzx ecx, word [esi + 2]
test cx, cx
je 0x4c7fad
mov al, byte [ebp + 0xc]
mov ebx, dword [ebp + 4]
test al, al
je 0x4c7f9f
mov edx, dword [ebx]
mov edx, dword [edx]
call fcn.004d6400
mov edx, dword [esp + 0x14]
movzx eax, ax
mov word [edx + 2], ax
xor eax, eax
mov word [edx + 4], ax
jmp 0x4c7fb3
mov eax, ecx
mov word [edx + 2], ax
xor eax, eax
mov word [edx + 4], ax
jmp 0x4c7fb3
xor eax, eax
mov word [edx + 2], ax
add esi, 4
cmp esi, edi
jne 0x4c7f03
mov ebx, dword [esp + 0xb8]
mov esi, dword [ebx + 0xc]
mov edi, dword [ebx + 0x10]
cmp esi, edi
je 0x4c867c
mov dx, word [esi]
mov al, byte [ebp + 0xc]
mov bx, word [esi + 2]
mov word [esp + 0x20], dx
mov edx, dword [ebp + 4]
mov word [esp + 0x22], bx
test al, al
je 0x4c8000
mov edx, dword [edx]
mov ecx, dword [esp + 0x20]
mov edx, dword [edx]
call fcn.004d6400
mov word [esp + 0x20], ax
mov cl, byte [ebp + 0xc]
mov edx, dword [ebp + 4]
test cl, cl
je 0x4c801f
mov edx, dword [edx]
mov ecx, dword [esp + 0x22]
mov edx, dword [edx]
call fcn.004d6400
mov bx, ax
mov word [esp + 0x22], bx
mov ax, word [esi + 4]
mov cl, byte [ebp + 0xc]
mov dx, word [esi + 6]
mov word [esp + 0x18], ax
mov eax, dword [ebp + 4]
mov word [esp + 0x1a], dx
test cl, cl
je 0x4c8052
mov edx, dword [eax]
mov ecx, dword [esp + 0x18]
mov edx, dword [edx]
call fcn.004d6400
mov dx, word [esp + 0x1a]
mov word [esp + 0x18], ax
mov cl, byte [ebp + 0xc]
mov eax, dword [ebp + 4]
test cl, cl
je 0x4c8071
mov edx, dword [eax]
mov ecx, dword [esp + 0x1a]
mov edx, dword [edx]
call fcn.004d6400
mov dx, ax
mov word [esp + 0x1a], dx
xor eax, eax
add esi, 8
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov dword [esp + 0xb0], eax
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], eax
mov word [esp + 0x34], ax
mov eax, dword [ebp]
mov byte [esp + 0xb0], 1
test dword [eax + 0x14], 0x200000
je 0x4c83b5
mov ax, word [esp + 0x20]
mov word [esp + 0x94], ax
xor eax, eax
mov word [esp + 0x98], ax
mov ax, word [esp + 0x18]
mov word [esp + 0x9c], ax
xor eax, eax
mov word [esp + 0xa0], ax
lea ecx, [esp + 0x96]
lea eax, [esp + 0x98]
test bx, bx
cmove eax, ecx
mov ecx, dword [ebp + 4]
push eax
lea eax, [esp + 0x98]
push eax
lea eax, [esp + 0x6c]
push eax
mov word [esp + 0xa2], bx
mov word [esp + 0xaa], dx
call fcn.004d3ba0
mov ebx, eax
lea eax, [esp + 0x4c]
cmp eax, ebx
je 0x4c81a3
cmp dword [esp + 0x60], 8
jb 0x4c8140
push dword [esp + 0x4c]
call fcn.004a295f
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp dword [ebx + 0x14], 8
jae 0x4c8176
mov eax, dword [ebx + 0x10]
inc eax
je 0x4c8182
add eax, eax
push eax
lea eax, [esp + 0x50]
push ebx
push eax
call fcn.004a2bb0
add esp, 0xc
jmp 0x4c8182
mov eax, dword [ebx]
mov dword [esp + 0x4c], eax
mov dword [ebx], 0
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x5c], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x60], eax
xor eax, eax
mov dword [ebx + 0x14], 7
mov dword [ebx + 0x10], 0
mov word [ebx], ax
cmp dword [esp + 0x78], 8
jb 0x4c81b6
push dword [esp + 0x64]
call fcn.004a295f
add esp, 4
cmp word [esp + 0x9e], 0
lea ecx, [esp + 0x9e]
lea eax, [esp + 0xa0]
cmove eax, ecx
mov ecx, dword [ebp + 4]
push eax
lea eax, [esp + 0xa0]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.004d3ba0
mov ebx, eax
lea eax, [esp + 0x34]
cmp eax, ebx
je 0x4c8266
cmp dword [esp + 0x48], 8
jb 0x4c8203
push dword [esp + 0x34]
call fcn.004a295f
add esp, 4
xor eax, eax
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
cmp dword [ebx + 0x14], 8
jae 0x4c8239
mov eax, dword [ebx + 0x10]
inc eax
je 0x4c8245
add eax, eax
push eax
lea eax, [esp + 0x38]
push ebx
push eax
call fcn.004a2bb0
add esp, 0xc
jmp 0x4c8245
mov eax, dword [ebx]
mov dword [esp + 0x34], eax
mov dword [ebx], 0
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x44], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x48], eax
xor eax, eax
mov dword [ebx + 0x14], 7
mov dword [ebx + 0x10], 0
mov word [ebx], ax
cmp dword [esp + 0x78], 8
jb 0x4c8279
push dword [esp + 0x64]
call fcn.004a295f
add esp, 4
cmp dword [esp + 0x5c], 0
jne 0x4c830f
xor eax, eax
cmp dword [esp + 0x60], 8
mov ecx, 7
mov edx, 1
mov dword [esp + 0x78], ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x74], edx
jb 0x4c82b7
push dword [esp + 0x4c]
call fcn.004a295f
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp ecx, 8
jae 0x4c82ff
lea eax, [edx + 1]
test eax, eax
je 0x4c8307
add eax, eax
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.004a2bb0
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
add esp, 0xc
jmp 0x4c8307
mov eax, dword [esp + 0x64]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x5c], edx
mov dword [esp + 0x60], ecx
cmp dword [esp + 0x44], 0
jne 0x4c8502
xor eax, eax
cmp dword [esp + 0x48], 8
mov ecx, 7
mov edx, 1
mov dword [esp + 0x78], ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x74], edx
jb 0x4c834d
push dword [esp + 0x34]
call fcn.004a295f
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
add esp, 4
xor eax, eax
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
cmp ecx, 8
jae 0x4c83a0
lea eax, [edx + 1]
test eax, eax
je 0x4c83a8
add eax, eax
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.004a2bb0
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
add esp, 0xc
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], ecx
jmp 0x4c8502
mov eax, dword [esp + 0x64]
mov dword [esp + 0x34], eax
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], ecx
jmp 0x4c8502
lea ecx, [esp + 0x4c]
test bx, bx
je 0x4c8415
push dword [esp + 0x20]
push 1
push 0
call fcn.0042c0c4
cmp dword [esp + 0x60], 8
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x4c]
cmovae ecx, dword [esp + 0x4c]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x4c]
cmovae ecx, dword [esp + 0x4c]
test eax, eax
jne 0x4c83ff
push dword [esp + 0x22]
lea ecx, [esp + 0x50]
push 1
push eax
call fcn.0042c0c4
jmp 0x4c8464
push dword [esp + 0x22]
sub eax, ecx
sar eax, 1
push 1
push eax
lea ecx, [esp + 0x58]
call fcn.0042c0c4
jmp 0x4c8464
mov ax, word [esp + 0x20]
mov word [esp + 0x64], ax
xor eax, eax
mov word [esp + 0x66], ax
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
lea eax, [esp + 0x64]
push eax
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], 1
mov dword [esp + 0x64], 7
call fcn.00402070
cmp dword [esp + 0x78], 8
jb 0x4c8464
push dword [esp + 0x64]
call fcn.004a295f
add esp, 4
cmp word [esp + 0x1a], 0
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x34]
je 0x4c84d4
cmp dword [esp + 0x48], 8
cmovae ecx, dword [esp + 0x34]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x34]
cmovae ecx, dword [esp + 0x34]
test eax, eax
je 0x4c8492
sub eax, ecx
sar eax, 1
push dword [esp + 0x18]
lea ecx, [esp + 0x38]
push 1
push eax
call fcn.0042c0c4
cmp dword [esp + 0x48], 8
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x34]
cmovae ecx, dword [esp + 0x34]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x34]
cmovae ecx, dword [esp + 0x34]
test eax, eax
jne 0x4c84ca
push dword [esp + 0x1a]
jmp 0x4c84f6
push dword [esp + 0x1a]
sub eax, ecx
sar eax, 1
jmp 0x4c84f6
cmp dword [esp + 0x48], 8
cmovae ecx, dword [esp + 0x34]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x34]
cmovae ecx, dword [esp + 0x34]
test eax, eax
je 0x4c84f2
sub eax, ecx
sar eax, 1
push dword [esp + 0x18]
push 1
push eax
lea ecx, [esp + 0x40]
call fcn.0042c0c4
cmp dword [esp + 0x60], 8
push dword [esp + 0x5c]
lea eax, [esp + 0x50]
cmovae eax, dword [esp + 0x50]
push eax
push dword [esp + 0x4c]
lea ecx, [esp + 0x40]
push 0
call fcn.0040b150
test eax, eax
js 0x4c86f2
mov eax, dword [esp + 0x44]
add eax, dword [esp + 0x5c]
mov ebx, dword [ebp]
add ebx, 0x134
lea ecx, [eax*2 + 4]
mov edx, dword [ebx + 8]
mov eax, dword [ebx]
sub eax, edx
mov dword [esp + 0x14], ecx
cmp eax, ecx
jae 0x4c8563
sub edx, dword [ebx + 4]
add edx, ecx
mov ecx, ebx
call fcn.004d66e0
mov ecx, dword [esp + 0x14]
mov eax, dword [ebx + 8]
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0x14]
add eax, ecx
mov dword [ebx + 8], eax
cmp dword [esp + 0x60], 8
mov ecx, dword [esp + 0x5c]
lea eax, [esp + 0x4c]
cmovae eax, dword [esp + 0x4c]
mov dword [esp + 0x2c], ecx
lea edx, [eax + ecx*2]
lea ecx, [esp + 0x4c]
cmovae ecx, dword [esp + 0x4c]
mov ebx, ebp
cmp ecx, edx
je 0x4c85b6
jmp 0x4c85a0
mov ax, word [ecx]
add ecx, 2
mov word [ebx], ax
lea ebx, [ebx + 2]
cmp ecx, edx
jne 0x4c85a0
mov eax, dword [esp + 0x5c]
jmp 0x4c85ba
mov eax, dword [esp + 0x2c]
xor ecx, ecx
mov word [ebp + eax*2], cx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x44]
lea eax, [eax*2 + 2]
add eax, ebp
cmp dword [esp + 0x48], 8
mov dword [esp + 0x2c], eax
mov ebp, dword [esp + 0x2c]
lea eax, [esp + 0x34]
cmovae eax, dword [esp + 0x34]
mov dword [esp + 0x14], ecx
lea edx, [eax + ecx*2]
lea ecx, [esp + 0x34]
cmovae ecx, dword [esp + 0x34]
mov ebx, ebp
cmp ecx, edx
je 0x4c8616
mov edi, edi
mov ax, word [ecx]
add ecx, 2
mov word [ebx], ax
add ebx, 2
cmp ecx, edx
jne 0x4c8600
mov eax, dword [esp + 0x44]
jmp 0x4c861a
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov word [ebp + eax*2], cx
cmp dword [esp + 0x48], 8
jb 0x4c8634
push dword [esp + 0x34]
call fcn.004a295f
add esp, 4
xor eax, eax
cmp dword [esp + 0x60], 8
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
mov dword [esp + 0xb0], 0xffffffff
jb 0x4c8669
push dword [esp + 0x4c]
call fcn.004a295f
add esp, 4
mov ebp, dword [esp + 0x28]
cmp esi, edi
jne 0x4c7fd3
mov ebx, dword [esp + 0xb8]
mov eax, dword [ebx + 0x28]
mov esi, dword [ebx + 0x2c]
mov dword [esp + 0x28], eax
cmp eax, esi
je 0x4c883b
mov edi, edi
xor ecx, ecx
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
mov word [esp + 0x7c], cx
movzx edx, word [eax + 2]
lea ecx, [eax + 2]
mov dword [esp + 0xb0], 2
test dx, dx
je 0x4c8736
mov ax, word [eax]
mov word [esp + 0x94], ax
xor eax, eax
mov word [esp + 0x98], ax
lea eax, [esp + 0x98]
push eax
mov word [esp + 0x9a], dx
lea eax, [esp + 0x98]
jmp 0x4c8737
cmp dword [esp + 0x48], 8
jb 0x4c8705
push dword [esp + 0x34]
call fcn.004a295f
add esp, 4
xor eax, eax
cmp dword [esp + 0x60], 8
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
jb 0x4c872f
push dword [esp + 0x4c]
call fcn.004a295f
add esp, 4
xor eax, eax
jmp 0x4c8849
push ecx
mov ecx, dword [ebp + 4]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.004d3c00
mov edi, eax
lea eax, [esp + 0x7c]
cmp eax, edi
je 0x4c878e
cmp dword [esp + 0x90], 8
jb 0x4c8765
push dword [esp + 0x7c]
call fcn.004a295f
add esp, 4
xor eax, eax
push edi
lea ecx, [esp + 0x80]
mov dword [esp + 0x94], 7
mov dword [esp + 0x90], eax
mov word [esp + 0x80], ax
call fcn.00402070
cmp dword [esp + 0x78], 8
jb 0x4c87a1
push dword [esp + 0x64]
call fcn.004a295f
add esp, 4
lea ecx, [esp + 0x7c]
call fcn.004014f0
lea ecx, [esp + 0x7c]
test al, al
jne 0x4c8873
call fcn.00402b10
mov ecx, dword [ebp]
lea edx, [eax*2 + 2]
add ecx, 0x134
call fcn.004caf70
mov ebx, eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x80]
call fcn.00402040
mov edi, eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x80]
call fcn.004029e0
push ebx
push dword [edi]
push dword [eax]
call fcn.004c2ed0
add esp, 0xc
lea ecx, [esp + 0x7c]
call fcn.00402b10
xor ecx, ecx
mov word [ebx + eax*2], cx
lea ecx, [esp + 0x28]
call fcn.004c6460
lea ecx, [esp + 0x7c]
mov dword [esp + 0xb0], 0xffffffff
call fcn.00403170
mov eax, dword [esp + 0x28]
cmp eax, esi
jne 0x4c8690
push dword [esp + 0x30]
mov ecx, ebp
call fcn.004cc4e0
mov dword [ebp + 8], eax
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.004a2964
add esp, 0xa0
ret 8
call fcn.00403170
xor eax, eax
jmp 0x4c8849