Function at 0x4dbd70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x108]
cmp eax, dword [ecx + 8]
jbe 0x4dc720
sub esp, 0x188
lea edi, [esp + 0xc8]
xor eax, eax
call fcn.00459a60
mov ecx, dword [0x700ae8]
mov edx, dword [0x700aec]
mov ebx, dword [0x700af0]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], ebx
mov ecx, dword [esp + 0x198]
mov dword [esp + 0xd4], ecx
mov edx, dword [esp + 0x19c]
mov dword [esp + 0xd8], edx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0xdc], ebx
mov eax, 2
xor ebp, ebp
xor esi, esi
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x54], ebp
xor ebp, ebp
mov dword [esp + 0x58], ebp
xor ebp, ebp
mov dword [esp + 0xb8], ebp
xor ebp, ebp
jmp 0x4dc0b9
mov dword [esp + 0x78], ebp
mov eax, dword [esp + ebp*4 + 0xc8]
mov ecx, dword [esp + ebp*4 + 0xcc]
mov ebx, dword [esp + ebp*4 + 0xd0]
mov esi, dword [esp + edx*4 + 0xc8]
mov edi, dword [esp + edx*4 + 0xcc]
mov edx, dword [esp + edx*4 + 0xd0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edx
call fcn.004d82d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x78]
mov dword [esp + ebx*4 + 0xcc], ecx
mov dword [esp + ebx*4 + 0xd0], edx
mov dword [esp + ebx*4 + 0xc8], eax
mov ebp, dword [esp + 0xb4]
mov dword [esp], ebp
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x4c]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0xb8]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x1b0]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1b8]
mov dword [esp + 0x2c], edx
call fcn.004d8ca0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x30]
mov dword [esp + 0xb4], edx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x48], ebx
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x4c], ebp
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x78]
mov ebp, dword [esp + edi*4 + 0xc8]
mov dword [esp + 0xb8], ebp
mov ebp, dword [esp + edi*4 + 0xcc]
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + edi*4 + 0xd0]
mov dword [esp + 0x58], ebp
mov dword [esp + edi*4 + 0xcc], eax
mov dword [esp + edi*4 + 0xd0], ecx
mov dword [esp + edi*4 + 0xc8], esi
mov ebp, dword [esp + edi*4 + 0xd4]
mov ebx, dword [esp + edi*4 + 0xd8]
mov edx, dword [esp + edi*4 + 0xdc]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x198]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x19c]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x1a0]
mov dword [esp + 0x20], edx
call fcn.004d72e0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x78]
mov dword [esp + ebx*4 + 0xd4], eax
mov dword [esp + ebx*4 + 0xd8], ecx
mov dword [esp + ebx*4 + 0xdc], edx
mov ebp, dword [esp + 0xb4]
mov dword [esp], ebp
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x4c]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0xb8]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x1b0]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1b8]
mov dword [esp + 0x2c], edx
call fcn.004d8ca0
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x4c], ebp
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + ebx*4 + 0xd4]
mov dword [esp + 0xb8], ebp
mov ebp, dword [esp + ebx*4 + 0xd8]
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + ebx*4 + 0xdc]
mov dword [esp + ebx*4 + 0xd4], eax
mov dword [esp + ebx*4 + 0xd8], ecx
mov dword [esp + ebx*4 + 0xdc], edx
mov eax, dword [esp + 0x64]
add eax, 2
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x198]
mov edx, dword [esp + 0x19c]
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x4c]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], esi
mov dword [esp + 0xb4], edi
cmp eax, 0x10
jge 0x4dc103
mov dword [esp + 0x64], eax
shr eax, 0x1f
mov ebx, dword [esp + 0x64]
add eax, ebx
sar eax, 1
cmp eax, 0x10
jae 0x4dc715
lea edx, [eax + eax*2]
cmp ebx, 0x10
jae 0x4dc709
lea ebp, [ebx + ebx*2]
inc ebx
cmp ebx, 0x10
jb 0x4dbe19
jmp 0x4dc6fd
nop
mov edx, dword [esp + 0x194]
cmp edx, 1
jl 0x4dc6bb
mov eax, dword [esp + 0x18c]
mov dword [eax], 1
mov ecx, dword [esp + 0x1a8]
lea ebx, [ecx - 1]
mov dword [esp + 0x60], ebx
mov dword [esp + 0xac], eax
mov eax, 1
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0xac]
jmp 0x4dc61e
mov dword [esp + 0x54], edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebp
mov dword [esp + 0xb4], ebx
mov edi, dword [esp + 0x50]
shr edi, 0x1c
lea edi, [edi + edi*2]
mov esi, dword [esp + edi*4 + 0xc8]
mov dword [esp + 0xc0], esi
mov esi, dword [esp + edi*4 + 0xcc]
mov edi, dword [esp + edi*4 + 0xd0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
call fcn.004d72e0
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp], ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1b4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1b8]
mov dword [esp + 0x2c], esi
call fcn.004d8ca0
mov eax, dword [esp + 0x5c]
add eax, 4
mov dword [esp + 0x5c], eax
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x44]
mov eax, dword [esp + 0x50]
shl eax, 4
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], edx
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x54], eax
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 0xb8], edx
mov edx, dword [esp + 0x8c]
mov ecx, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x78]
mov eax, dword [esp + 0x84]
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x5c]
cmp edx, 0x20
jge 0x4dc5fc
mov ecx, dword [esp + 0x60]
cmp ecx, ebx
je 0x4dc5db
mov dword [esp + 0xc4], eax
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x14], edx
call fcn.004d82d0
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp], ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1b4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1b8]
mov dword [esp + 0x2c], esi
call fcn.004d8ca0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x58], edx
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004d82d0
mov eax, dword [esp + 0x18]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1b4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1b8]
mov dword [esp + 0x2c], esi
call fcn.004d8ca0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x58], edx
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004d82d0
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1b4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1b8]
mov dword [esp + 0x2c], esi
call fcn.004d8ca0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x58], edx
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004d82d0
mov eax, dword [esp + 0x18]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1b4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1b8]
mov dword [esp + 0x2c], esi
call fcn.004d8ca0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x6c]
mov edi, dword [esp + 0x68]
mov dword [esp + 0x58], edi
mov edi, dword [esp + 0xbc]
mov dword [esp + 0xb8], edi
mov edi, dword [esp + 0x6c]
jmp 0x4dc14e
test edx, edx
jne 0x4dc2d4
mov ebx, eax
mov edx, ebp
mov ecx, esi
mov eax, edi
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x4c]
mov ebp, dword [esp + 0x48]
jmp 0x4dc14e
dec ebx
mov edx, dword [esp + 0x60]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0xa4]
test ebx, ebx
jl 0x4dc67c
cmp ebx, ecx
jae 0x4dc6f6
mov dword [esp + 0x194], edx
mov dword [esp + 0x78], ebx
mov edx, dword [esp + 0x1a4]
mov edx, dword [edx + ebx*4]
mov dword [esp + 0x9c], eax
xor eax, eax
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x190]
mov dword [esp + 0x48], ecx
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x94]
jmp 0x4dc2b7
mov dword [esp], eax
mov eax, dword [esp + 0x190]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004d5d40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], ecx
mov dword [esp + 0x1c4], edx
add esp, 0x188
ret
lea eax, [0x51e040]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00441920
mov eax, dword [esp + 0xc]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0xb4]
mov edx, 1
jmp 0x4dc11b
mov eax, ebx
call fcn.004598d0
mov eax, ebx
mov ecx, 0x10
call fcn.004598d0
mov eax, ebx
mov ecx, 0x10
call fcn.004598d0
mov ecx, 0x10
call fcn.004598d0
nop
call fcn.00458300
jmp fcn.004dbd70