Function at 0x4afd00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5a4bbf
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
mov eax, dword [0x6e50b4]
xor eax, esp
mov dword [esp + 0xa4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6e50b4]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
mov ebx, dword [esp + 0xd0]
mov ebp, ecx
lea ecx, [esp + 0x18]
call fcn.0042f0f0
push 0
lea eax, [esp + 0x1c]
push eax
push 0xd5
mov ecx, 0x6f42b0
mov dword [esp + 0xd0], 0
call fcn.004346c0
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebx + 2]
push ecx
lea edx, [esp + 0x3c]
push 0x5b40b0
push edx
call edi
add esp, 0xc
push 2
push 0
push 0xffffff
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx + 0x48]
mov ecx, 0x200
cmp ax, cx
jne 0x4afe4c
push 0x94d
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push str._s__s
push edx
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
lea ecx, [esp + 0x1c]
push ecx
push 0xffffb0
jmp 0x4aff5c
mov edx, 0x201
cmp ax, dx
jne 0x4afedc
push 0x94e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x40]
push str._s__s
push eax
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
lea edx, [esp + 0x1c]
push edx
push 0xffffb0
jmp 0x4aff5c
mov ecx, 0x202
cmp ax, cx
jne 0x4afeed
push 0x94f
jmp 0x4afefc
mov ecx, 0x203
cmp ax, cx
jne 0x4aff68
push 0x94d
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push str._s__s
push edx
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx + 0x5a]
test ax, ax
je 0x4affa6
push eax
push 0x105
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85ec
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx + 0x5c]
test ax, ax
je 0x4affe4
push eax
push 0x106
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85ec
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx + 0x5e]
test ax, ax
je 0x4b0022
push eax
push 0x107
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85ec
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx + 0x60]
test ax, ax
je 0x4b0060
push eax
push pe_nt_image_headers32
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85ec
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
fld dword [ebx + 0x70]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
test eax, eax
je 0x4b00b9
fld dword [ebx + 0x70]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
push eax
push 0x109
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x40]
push str._s__d__
push ecx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.00441480
fld dword [ebx + 0x74]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
test eax, eax
je 0x4b0112
fld dword [ebx + 0x74]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
push eax
push 0x10a
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x40]
push str._s__d__
push eax
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
call fcn.00441480
fld dword [ebx + 0x78]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
test eax, eax
je 0x4b016b
fld dword [ebx + 0x78]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
push eax
push 0x10b
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push str._s__d__
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
fld dword [ebx + 0x7c]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
test eax, eax
je 0x4b01c4
fld dword [ebx + 0x7c]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
push eax
push 0x10c
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x40]
push str._s__d__
push ecx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.00441480
fld dword [ebx + 0x80]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
test eax, eax
je 0x4b0223
fld dword [ebx + 0x80]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
call fcn.00582f70
push eax
push 0x10d
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x40]
push str._s__d__
push eax
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx + 0xd2]
test ax, ax
je 0x4b0286
mov edx, 0x201
push eax
mov ecx, 0x6f63d0
cmp word [ebx + 0x48], dx
jne 0x4b0257
push 0x4fc
call fcn.004d54d0
push eax
push 0x5b85d8
lea ecx, [esp + 0x44]
push ecx
jmp 0x4b026c
push 0x10e
call fcn.004d54d0
push eax
push 0x5b85d8
lea eax, [esp + 0x44]
push eax
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
call fcn.00441480
fld dword [ebx + 0xd4]
fmul qword [0x5b1638]
call fcn.00582f70
test eax, eax
je 0x4b02d0
push eax
push 0x10e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85d0
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx + 0xd8]
test ax, ax
je 0x4b0311
push eax
push 0x10f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85d8
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
fld dword [ebx + 0xdc]
fmul qword [0x5b1638]
call fcn.00582f70
test eax, eax
je 0x4b035b
push eax
push 0x10f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x40]
push 0x5b85d0
push ecx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx]
mov ecx, 0xcf6e
cmp ax, cx
jne 0x4b0415
push 0x3e8
push 0x10e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85d8
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
push 0x3e8
push 0x10f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x40]
push 0x5b85d8
push ecx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x44]
push edx
mov ecx, esi
call fcn.00441480
push 0x3e8
push 0xb5
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x5b85d8
lea eax, [esp + 0x44]
push eax
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x44]
push ecx
jmp 0x4b056b
mov edx, 0xcf27
cmp ax, dx
je 0x4b053c
mov ecx, 0xcf66
cmp ax, cx
je 0x4b053c
mov edx, 0xcfe0
cmp ax, dx
je 0x4b0520
mov ecx, 0xcfe6
cmp ax, cx
je 0x4b0520
mov edx, 0xcf28
cmp ax, dx
je 0x4b0483
mov ecx, 0xcf67
cmp ax, cx
je 0x4b0483
mov edx, 0xcf6f
cmp ax, dx
je 0x4b0483
mov ecx, 0xcfe1
cmp ax, cx
je 0x4b0483
mov edx, 0xcfe7
cmp ax, dx
jne 0x4b0572
push 0x64
push 0x10e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x40]
push 0x5b85d0
push eax
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
call fcn.00441480
push 0x64
push 0x10f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85d0
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
push 0x64
push 0xb5
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x40]
push 0x5b85d0
push ecx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x44]
push edx
jmp 0x4b056b
push 0x64
push 0xb5
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x5b85d0
jmp 0x4b03f8
push 0x64
push 0xb5
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x40]
push 0x5b85d0
push edx
call edi
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00441480
movzx ecx, word [ebx + 0x44]
push 1
push 0xc8d7aa
push ecx
push esi
mov ecx, ebp
call fcn.004ac440
lea ecx, [esp + 0x18]
mov dword [esp + 0xc4], 0xffffffff
call fcn.0042f100
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa4]
xor ecx, esp
call fcn.005825b3
add esp, 0xb4
ret 8