Function at 0x4da800
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x14]
cmp eax, dword [ecx + 8]
jbe 0x4daf3f
sub esp, 0x94
mov ecx, dword [esp + 0xa8]
test ecx, ecx
je 0x4daaba
cmp ecx, 1
jne 0x4da894
mov ebx, dword [esp + 0xa4]
mov eax, dword [ebx]
mov ebx, dword [esp + 0xa0]
cmp ebx, 2
jl 0x4da850
mov ecx, dword [esp + 0x98]
jmp 0x4da881
mov dword [esp + 0x68], eax
lea eax, [0x6dbbc0]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 6
call fcn.0046c5c0
mov eax, dword [esp + 0xc]
mov ecx, eax
mov ebx, 6
mov eax, dword [esp + 0x68]
mul eax
nop
nop
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov eax, 2
jmp 0x4daf09
mov eax, dword [esp + 0xa0]
test eax, eax
je 0x4da8c6
mov ebx, dword [esp + 0x98]
lea ebp, [ebx + eax*4 - 4]
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
lea edi, [esi + edx*4 - 4]
cmp edi, ebp
jne 0x4da8db
xor eax, eax
xor ebx, ebx
jmp 0x4da8db
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
mov ebx, dword [esp + 0x98]
cmp dword [0x8ed3b0], ecx
jg 0x4da9d9
mov ebp, dword [0x8ed3b4]
cmp ecx, ebp
jl 0x4da901
nop
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x64], ecx
mov ecx, edi
jmp 0x4dab78
mov ebp, ecx
shl ebp, 1
cmp eax, ebp
jl 0x4da914
jae 0x4da99e
jmp 0x4dab5d
cmp ebp, 1
jne 0x4da95c
lea eax, [0x6dbbc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0046c5c0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
mov eax, 1
mov ebp, 1
jmp 0x4da99e
mov dword [esp + 0x5c], ebp
lea eax, [0x6dbbc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [ebp + 4]
mov dword [esp + 0x3c], eax
mov dword [esp + 8], eax
call fcn.0046c5c0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
mov eax, dword [esp + 0x3c]
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x30], ebp
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004da120
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
jmp 0x4dab28
mov ebp, ecx
shl ebp, 1
cmp eax, ebp
jl 0x4da9ec
jae 0x4daa76
jmp 0x4dab1e
cmp ebp, 1
jne 0x4daa34
lea eax, [0x6dbbc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0046c5c0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
mov eax, 1
mov ebp, 1
jmp 0x4daa76
mov dword [esp + 0x60], ebp
lea eax, [0x6dbbc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [ebp + 4]
mov dword [esp + 0x40], eax
mov dword [esp + 8], eax
call fcn.0046c5c0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
mov eax, dword [esp + 0x40]
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x40], eax
mov dword [esp + 0x34], ebp
mov dword [esp + 0x84], ebx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
call fcn.004d89b0
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x34]
jmp 0x4daae9
mov eax, dword [esp + 0x98]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], 0
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xb8], eax
add esp, 0x94
ret
dec ecx
test ecx, ecx
jle 0x4daaf5
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4daae8
mov edx, dword [esp + 0x40]
cmp ecx, edx
ja 0x4dab19
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], edx
add esp, 0x94
ret
call fcn.004718f0
mov ecx, ebp
mov edx, eax
call fcn.004718f0
dec ecx
test ecx, ecx
jle 0x4dab34
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4dab27
mov edx, dword [esp + 0x3c]
cmp ecx, edx
ja 0x4dab58
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], edx
add esp, 0x94
ret
call fcn.004718f0
mov ecx, ebp
mov edx, eax
call fcn.004718f0
sar ecx, 1
mov esi, dword [esp + 0x64]
inc esi
mov dword [esp + 0x64], esi
mov esi, dword [esp + 0xa4]
cmp ecx, ebp
jg 0x4dab66
mov ebp, ecx
mov ecx, dword [esp + 0x64]
shl ebp, cl
cmp ecx, 0x20
sbb ecx, ecx
and ecx, ebp
cmp edx, ecx
jb 0x4daf03
lea ebp, [ecx + ecx*2]
shl ebp, 1
shl edi, 1
cmp edi, ebp
jle 0x4daba2
mov ebp, edi
jmp 0x4dabb0
mov dword [esp + 0x6c], eax
mov eax, ebp
mov ebp, edi
mov edi, eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x78], ebp
cmp edi, eax
jg 0x4dabc7
jbe 0x4dac4b
jmp 0x4daefa
cmp edi, 1
jne 0x4dac0c
lea eax, [0x6dbbc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0046c5c0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
mov eax, 1
mov edi, 1
jmp 0x4dac4b
mov dword [esp + 0x58], edi
lea eax, [0x6dbbc0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [edi + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 8], eax
call fcn.0046c5c0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x58]
mov dword [esp + 0x38], eax
mov dword [esp + 0x7c], ebx
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004da3f0
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x78]
cmp edx, ecx
jb 0x4daef5
mov eax, dword [esp + 0x44]
mov ebx, eax
shl ebx, 1
cmp ebx, ecx
ja 0x4daeee
mov dword [esp + 0x74], ebx
mov ebp, ecx
sub ecx, ebx
mov esi, edx
sub esi, ebx
xchg esi, ebx
neg ebx
xchg esi, ebx
mov edi, eax
shl eax, 3
sar esi, 0x1f
and eax, esi
mov esi, dword [esp + 0x7c]
add eax, esi
test ecx, ecx
je 0x4dacd8
mov dword [esp], eax
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.00471ff0
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x44]
mov eax, dword [esp + 0xa8]
cmp eax, edi
jle 0x4daeb1
mov dword [esp], ebx
call fcn.004daf50
nop
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x44]
mov edx, ecx
jmp 0x4dad00
dec ecx
test ecx, ecx
jle 0x4dad0c
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4dacff
mov ebx, dword [esp + 0xac]
cmp ebx, ecx
jb 0x4daee7
mov ebp, dword [esp + 4]
mov dword [esp + 0x8c], ebp
mov esi, dword [ebp]
mov edi, dword [ebp + 4]
mov ebp, dword [ebp + 8]
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
sub ebx, edx
mov dword [esp + 0x4c], ebx
mov ecx, ebx
neg ebx
mov ebp, edx
shl edx, 2
sar ebx, 0x1f
and edx, ebx
add eax, edx
mov dword [esp + 0x88], eax
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0xa8]
sub edx, ebp
mov dword [esp + 0x48], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
call fcn.004d9830
mov eax, dword [esp + 0x24]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x78]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x44]
mov dword [esp + 0x18], edi
call fcn.004d9720
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x90]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x54]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x44]
mov dword [esp + 0x18], edi
call fcn.004d9720
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x14], eax
call fcn.004da800
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x78]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x74]
mov dword [esp + 0x18], eax
call fcn.004d9720
nop
lea eax, [0x91f310]
mov dword [esp], eax
lea eax, [0x7189c0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.00486f20
mov edx, dword [esp + 0x38]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x7c]
jmp 0x4daeb4
dec ebp
test ebp, ebp
jle 0x4daec0
mov eax, dword [esi + ebp*4 - 4]
test eax, eax
je 0x4daeb3
cmp ebp, edx
ja 0x4daee0
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], edx
add esp, 0x94
ret
mov ecx, ebp
call fcn.004718f0
mov edx, ebx
call fcn.004718f0
mov eax, ebx
call fcn.00471910
call fcn.004718f0
mov ecx, edi
mov edx, eax
call fcn.004718f0
call fcn.004718f0
dec eax
test eax, eax
jle 0x4daf15
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4daf08
cmp eax, ebx
ja 0x4daf35
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ebx
add esp, 0x94
ret
mov ecx, eax
mov edx, ebx
call fcn.004718f0
nop
call fcn.00470430
jmp fcn.004da800