Function at 0x4d6de0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6c4e70]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x4d7665
sub esp, 0xac
mov eax, dword [esp + 0xc4]
test eax, eax
je 0x4d6e1f
test eax, 0x200
jne 0x4d6e1f
lea ecx, [0x5c13b8]
mov edx, dword [esp + 0xbc]
jmp 0x4d6e49
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048a890
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x4c]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x34], eax
cmp eax, 0x18
je 0x4d6f6b
cmp eax, 0x14
je 0x4d6f6b
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x4d6e9d
test ecx, 0x200
jne 0x4d6e9d
lea eax, [0x5c13b8]
mov ecx, dword [esp + 0xbc]
jmp 0x4d6ec3
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048a890
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov edx, dword [esp + 0x34]
mov dword [esp], edx
call fcn.00409470
mov eax, dword [esp + 4]
lea ecx, [0x563160]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4d6f14
mov eax, dword [eax + 4]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x78], eax
lea eax, [0x594191]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0x6c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004adf70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
add esp, 0xac
ret
mov ecx, dword [esp + 0xb4]
lea edx, [0x5625a0]
cmp ecx, edx
jne 0x4d6f85
mov ecx, dword [esp + 0xb8]
jmp 0x4d6f8a
mov ecx, 0
jne 0x4d70c7
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x40], ebx
nop
cmp ebx, 0x14
ja 0x4d6fbc
lea esi, [ebx - 0x12]
cmp esi, 1
jbe 0x4d6fe3
cmp ebx, 0x14
je 0x4d6fc6
jmp 0x4d762a
cmp ebx, 0x16
jbe 0x4d6fe3
cmp ebx, 0x17
jne 0x4d6fda
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x4d7014
cmp ebx, 0x1a
jne 0x4d762a
test ebp, 0x200
jne 0x4d709f
test ebp, 0x80
je 0x4d7002
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
jmp 0x4d700b
mov ebx, dword [esp + 0xc0]
mov esi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4d709f
test ebp, ebp
je 0x4d7039
test ebp, 0x200
jne 0x4d7039
lea esi, [0x5c13b8]
mov edi, dword [esp + 0xbc]
jmp 0x4d705c
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.0048a890
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov esi, eax
mov edi, ecx
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], 0
call fcn.0048b1e0
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
call fcn.00489770
mov ecx, dword [esp + 0x4c]
lea edx, [0x5625a0]
lea edi, [esp + 0x7c]
xor eax, eax
call fcn.004610e4
mov dword [esp], edx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 8], ecx
call fcn.0040d930
jmp 0x4d71f5
test ecx, ecx
je 0x4d7183
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x70], eax
lea eax, [0x586477]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00409580
mov eax, dword [esp + 8]
lea ecx, [0x560820]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
lea eax, [0x594397]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x43
lea eax, [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 2
call fcn.004d92f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
add esp, 0xac
ret
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
add esp, 0xac
ret
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x20], eax
call fcn.00489e80
lea eax, [esp + 0x7c]
mov dword [esp], eax
call fcn.0040db70
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4d7603
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 4]
mov dword [esp + 0x38], ebx
mov ebp, dword [edx]
lea esi, [ebx + 1]
mov dword [esp + 0x30], esi
mov edi, dword [eax]
mov dword [esp + 0x58], edi
mov eax, dword [eax + 4]
mov dword [esp + 0x3c], eax
mov edx, dword [ecx]
mov dword [esp + 0x28], edx
mov ecx, dword [ecx + 4]
mov dword [esp + 0x48], ecx
lea ecx, [0x560820]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call fcn.004493b0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jae 0x4d7625
mov edx, dword [esp + 0x10]
lea ebx, [edx + eax*8 + 4]
mov ebp, dword [esp + 0x3c]
mov dword [ebx], ebp
mov ebx, dword [0x6c4f80]
lea eax, [edx + eax*8]
test ebx, ebx
jne 0x4d7284
mov ebx, dword [esp + 0x58]
jmp 0x4d7294
call fcn.00460f00
mov ebx, dword [esp + 0x58]
mov dword [edi], ebx
mov esi, dword [eax]
mov dword [edi + 4], esi
mov dword [eax], ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.004e4750
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
lea ebp, [0x562420]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.0040fc40
mov eax, dword [esp + 0x10]
test byte [eax], al
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
inc edx
mov ebx, dword [eax]
cmp ecx, edx
jae 0x4d7340
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x560820]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xb0]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4d733a
call fcn.00460f00
mov dword [edi], ecx
mov eax, dword [ebx]
mov dword [edi + 4], eax
mov dword [ebx], ecx
mov eax, ebx
mov ebx, ecx
mov dword [eax + 4], edx
lea ecx, [ebx + edx*8 - 4]
mov ebp, dword [esp + 0x3c]
mov dword [ecx], ebp
mov ecx, dword [0x6c4f80]
lea edx, [ebx + edx*8 - 8]
test ecx, ecx
jne 0x4d7371
mov ecx, dword [esp + 0xc4]
test ecx, ecx
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0xc4]
jmp 0x4d738a
call fcn.00460f00
mov ecx, dword [esp + 0x58]
mov dword [edi], ecx
mov ebx, dword [edx]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0xc4]
test ebx, ebx
mov dword [edx], ecx
je 0x4d73a5
test ebx, 0x200
jne 0x4d73a5
lea edx, [0x5c13b8]
mov esi, dword [esp + 0xbc]
jmp 0x4d73cf
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048a890
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov esi, ecx
mov eax, dword [edx + 0x28]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0048b360
mov eax, dword [esp + 0x10]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
cmp eax, 0x16
jne 0x4d741f
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00487840
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov ecx, eax
mov dword [esp + 0x50], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x54], ebx
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004d9510
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 8], ecx
call fcn.004d5f30
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4d75e6
mov eax, dword [esp + 0xb0]
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
lea ecx, [ebx - 1]
cmp edx, ecx
jb 0x4d7620
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x4d74a3
test ecx, 0x200
jne 0x4d74a3
lea edx, [0x5c13b8]
mov ebx, dword [esp + 0xbc]
jmp 0x4d74cd
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048a890
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [edx + 0x4c]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0048b360
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004d9510
mov eax, dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x34]
cmp ebx, 0x14
je 0x4d7560
cmp ebx, 0x18
jne 0x4d71a0
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x10], ebx
call fcn.0048a390
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x40]
jmp 0x4d71a0
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.00409580
mov eax, dword [esp + 8]
lea ecx, [0x560820]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], eax
mov edx, dword [esp + 0x64]
test edx, edx
je 0x4d75a7
movzx ebx, byte [edx + 0xf]
nop
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4d75ad
or ebx, 0x80
jmp 0x4d75ad
xor ebx, ebx
xor edx, edx
xor eax, eax
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x40]
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.00489770
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x40]
jmp 0x4d71a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
add esp, 0xac
ret
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
add esp, 0xac
ret
call fcn.00460fa0
call fcn.00460f60
lea eax, [0x569800]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x589c60]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
lea ecx, [0x563fc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435490
nop
call fcn.0045faf0
jmp fcn.004d6de0