Function at 0x4dafc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x4dba40
sub esp, 0x110
mov byte [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
nop
mov eax, dword [esp + 0x120]
lea ecx, [esp + 0x100]
cmp eax, ecx
je 0x4db098
nop
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
nop
test ecx, ecx
jg 0x4db9aa
mov ebx, ecx
xor ebp, ebp
xor esi, esi
cmp ecx, ebx
jle 0x4db9a3
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x34], ecx
mov dword [esp + 0x8c], esi
cmp esi, edx
je 0x4db063
mov dword [esp], esi
mov dword [esp + 4], edx
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.0044d890
mov eax, dword [esp + 0x34]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x120]
movzx ecx, byte [eax]
mov byte [esp + 0x100], cl
mov byte [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
nop
mov ecx, dword [esp + 0x124]
lea edx, [esp + 0xf0]
cmp ecx, edx
je 0x4db99c
nop
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 8]
nop
test ebx, ebx
jg 0x4db906
mov ebp, ebx
xor esi, esi
xor edi, edi
cmp ebx, ebp
jle 0x4db8ff
mov dword [esp + 0x38], esi
mov dword [esp + 0x8c], edi
mov dword [esp + 0x30], ebx
cmp edi, edx
je 0x4db11c
mov dword [esp], edi
mov dword [esp + 4], edx
shl ebp, 2
mov dword [esp + 8], ebp
call fcn.0044d890
mov eax, dword [esp + 0x30]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x124]
movzx ecx, byte [eax]
mov byte [esp + 0xf0], cl
mov ecx, dword [esp + 0x118]
test ecx, ecx
je 0x4db8ee
mov edx, 1
mov byte [esp + 0x2d], dl
test dl, dl
jne 0x4db86d
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x78], ebp
mov dword [esp + 0x88], ebx
mov byte [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov byte [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
mov byte [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov byte [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x104]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xfc]
mov ebx, dword [esp + 0xf4]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
call fcn.004dd450
mov eax, dword [esp + 0x18]
test eax, eax
jge 0x4db84f
lea eax, [esp + 0x100]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x88]
lea ebx, [esp + 0xf0]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x80], eax
jmp 0x4db2bd
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x84]
mov ebp, dword [eax + 8]
cmp ebp, 1
jle 0x4db451
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004da6e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
movzx ebp, byte [esp + 0x18]
test edx, edx
je 0x4db3e6
mov dword [esp + 0x58], eax
mov dword [esp + 0x54], ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], ebx
xchg ebp, eax
mov byte [esp + 0x2f], al
xchg ebp, eax
mov esi, dword [esp + 0x84]
mov dword [esp], esi
mov edi, dword [esp + 0x80]
mov dword [esp + 4], edi
lea esi, [esp + 0xc0]
mov dword [esp + 8], esi
lea esi, [esp + 0xb0]
mov dword [esp + 0xc], esi
lea esi, [esp + 0xa0]
mov dword [esp + 0x10], esi
lea esi, [esp + 0x90]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ebx
xchg ebp, eax
mov byte [esp + 0x28], al
xchg ebp, eax
call fcn.004da900
movzx eax, byte [esp + 0x2d]
test al, al
je 0x4db2a7
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
lea edx, [esp + 0xc0]
mov dword [esp + 8], edx
lea ebx, [esp + 0xb0]
mov dword [esp + 0xc], ebx
lea ebp, [esp + 0xa0]
mov dword [esp + 0x10], ebp
lea esi, [esp + 0x90]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x58]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x54]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x50]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x24], edi
movzx edi, byte [esp + 0x2f]
xchg edi, eax
mov byte [esp + 0x28], al
xchg edi, eax
call fcn.004da900
movzx eax, byte [esp + 0x2d]
jmp 0x4db2a7
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0xc], ebx
lea ebp, [esp + 0xc0]
mov dword [esp + 0x10], ebp
lea esi, [esp + 0xb0]
mov dword [esp + 0x14], esi
lea edi, [esp + 0xa0]
mov dword [esp + 0x18], edi
lea edi, [esp + 0x90]
mov dword [esp + 0x1c], edi
movzx edi, byte [esp + 0x2d]
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
call fcn.004dabf0
movzx eax, byte [esp + 0x2d]
jmp 0x4db2a7
test ebp, ebp
jle 0x4db83d
cmp dword [ebx + 8], 1
jg 0x4db7d7
mov ebp, dword [eax + 8]
mov esi, dword [eax + 4]
test ebp, ebp
jle 0x4db7c5
mov ebp, dword [ebx + 8]
mov eax, ecx
mov ecx, dword [ebx + 4]
mov esi, dword [esi]
test ebp, ebp
jbe 0x4dba39
mov ecx, dword [ecx]
movzx ebp, byte [esp + 0x2d]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4db7ba
mov ebp, 1
xor edi, edi
mov ebp, 1
mov dword [esp + 0x48], ebp
xor ebp, ebp
mov dword [esp + 0x40], ebp
mov edi, 1
xchg edi, eax
mov byte [esp + 0x2e], al
xchg edi, eax
mov ebp, 1
xor edi, edi
jmp 0x4db512
mov eax, ecx
xor edx, edx
div esi
mov edx, eax
mov eax, ecx
mov ecx, edx
xor edx, edx
div esi
mov eax, edi
imul edi, ecx
add edi, ebp
mov ebp, edx
mov edx, dword [esp + 0x48]
imul ecx, edx
mov edx, dword [esp + 0x40]
add edx, ecx
mov ecx, edx
movzx edx, byte [esp + 0x2e]
xor edx, 1
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x40], eax
mov byte [esp + 0x2e], dl
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x48], ecx
mov ecx, esi
mov esi, ebp
mov ebp, dword [esp + 0x68]
test esi, esi
jne 0x4db4be
mov dword [esp + 0x5c], ecx
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x9c]
nop
test ebp, ebp
jne 0x4db756
xor ebp, ebp
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], edi
mov dword [esp + 0x94], esi
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
nop
mov edi, dword [esp + 0x40]
test edi, edi
jne 0x4db704
xor edi, edi
mov dword [esp + 0xa8], edi
mov dword [esp + 0xac], ebp
mov dword [esp + 0xa4], esi
movzx eax, byte [esp + 0x2e]
mov ecx, eax
xor eax, 1
mov byte [esp + 0x90], al
mov byte [esp + 0xa0], cl
lea eax, [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004d9c20
lea eax, [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d9c20
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
lea ecx, [esp + 0x90]
mov dword [esp + 4], ecx
lea ecx, [esp + 0xa0]
mov dword [esp + 8], ecx
call fcn.004d9780
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
test edx, edx
jbe 0x4dba32
mov dword [ebx], eax
mov edx, dword [esp + 0x118]
test edx, edx
je 0x4db6fb
mov ebx, dword [esp + 0x7c]
mov eax, dword [ebx + 4]
mov ebp, dword [ebx + 8]
movzx esi, byte [ebx]
mov edi, ebx
mov ebx, dword [ebx + 0xc]
xchg esi, eax
mov byte [edx], al
xchg esi, eax
mov dword [edx + 8], ebp
mov dword [edx + 0xc], ebx
mov ebx, dword [0x8a6100]
test ebx, ebx
jne 0x4db6e8
mov dword [edx + 4], eax
mov edx, dword [esp + 0x11c]
test edx, edx
jne 0x4db689
movzx edx, byte [ecx]
mov ebx, dword [ecx + 0xc]
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov ebp, dword [esp + 0x114]
mov byte [ebp], dl
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], ebx
mov ecx, dword [0x8a6100]
test ecx, ecx
jne 0x4db67f
mov dword [ebp + 4], eax
mov dword [esp + 0x128], ebp
add esp, 0x110
ret
lea edi, [ebp + 4]
call fcn.0044d090
jmp 0x4db671
mov dword [esp], edx
mov eax, dword [esp + 0x120]
mov dword [esp + 4], eax
mov dword [esp + 8], edi
call fcn.004d9c20
mov eax, dword [esp + 0x11c]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004d99d0
mov eax, dword [esp + 0x11c]
mov dword [esp], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 8], eax
call fcn.004d9ec0
mov ecx, dword [esp + 0x84]
jmp 0x4db648
add edx, 4
mov ebx, edi
mov edi, edx
call fcn.0044d090
mov edi, ebx
jmp 0x4db63d
mov edi, dword [esp + 0x7c]
jmp 0x4db63d
nop
cmp ebp, 1
jl 0x4db716
mov dword [esi], edi
mov edi, 1
jmp 0x4db565
lea eax, [0x640560]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00438de0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x84]
mov edi, dword [esp + 0x40]
mov ebp, 1
jmp 0x4db70a
nop
cmp edi, 1
jl 0x4db768
mov dword [esi], ebp
mov ebp, 1
jmp 0x4db533
mov dword [esp + 0x44], ebp
lea eax, [0x640560]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00438de0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x44]
mov edi, 1
jmp 0x4db75c
mov eax, ecx
xor edx, edx
div esi
mov ecx, esi
mov esi, edx
mov edx, dword [esp + 0x7c]
test esi, esi
jne 0x4db7ac
mov eax, ecx
jmp 0x4db5ea
mov ebp, dword [esp + 0x118]
test ebp, ebp
mov ecx, ebx
mov edx, ebp
jmp 0x4db60a
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
lea ebp, [esp + 0xc0]
mov dword [esp + 0x10], ebp
lea ebp, [esp + 0xb0]
mov dword [esp + 0x14], ebp
lea ebp, [esp + 0xa0]
mov dword [esp + 0x18], ebp
lea esi, [esp + 0x90]
mov dword [esp + 0x1c], esi
movzx edi, byte [esp + 0x2d]
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
call fcn.004dabf0
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x84]
jmp 0x4db463
mov ebp, dword [esp + 0x118]
test ebp, ebp
mov ecx, ebx
mov edx, ebp
jmp 0x4db60a
lea eax, [esp + 0xf0]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x78]
lea ebx, [esp + 0x100]
jmp 0x4db28f
mov byte [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
lea eax, [esp + 0xe0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0
call fcn.004d95d0
mov ebp, dword [esp + 0xc]
mov byte [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
lea ebx, [esp + 0xd0]
jmp 0x4db175
mov ebx, dword [esp + 0x11c]
test ebx, ebx
setne dl
jmp 0x4db165
mov ebp, ebx
jmp 0x4db0f6
mov dword [esp + 0x70], edx
mov dword [esp + 0x64], ebx
cmp ebx, 1
jne 0x4db95a
lea eax, [0x640560]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00438de0
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x70]
mov ebp, dword [esp + 0x64]
mov esi, 1
mov ebx, 1
jmp 0x4db0ee
lea eax, [0x640560]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea ecx, [ebx + 4]
mov dword [esp + 0x38], ecx
mov dword [esp + 8], ecx
call fcn.00438de0
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x70]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x38]
mov ebx, ebp
jmp 0x4db0ee
mov eax, ecx
jmp 0x4db151
mov ebx, ecx
jmp 0x4db03d
mov dword [esp + 0x60], ecx
mov dword [esp + 0x74], edx
cmp ecx, 1
jne 0x4db9f7
lea eax, [0x640560]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00438de0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x120]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x60]
mov ebp, 1
mov ecx, 1
jmp 0x4db035
lea eax, [0x640560]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [ecx + 4]
mov dword [esp + 0x3c], edx
mov dword [esp + 8], edx
call fcn.00438de0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x120]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x3c]
mov ecx, ebx
jmp 0x4db035
call fcn.00427150
ud2
call fcn.00427150
ud2
call fcn.0044b940
jmp fcn.004dafc0