Function at 0x4cf950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 8]
cmp eax, dword [ecx + 8]
jbe 0x4d01bc
sub esp, 0x88
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x90]
mov ebx, dword [edx + 4]
test ecx, 1
jne 0x4d01a3
test ebx, 1
jne 0x4d01a3
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
lea eax, [0x668560]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0043bc50
mov eax, dword [esp + 0xc]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
lea eax, [0x669220]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0043bc50
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov byte [esp + 0x23], 1
mov dword [esp + 0x44], 0xc
lea eax, [0x6d5904]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x23]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x64], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x68], eax
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.00429a40
test eax, eax
jne 0x4d012c
mov dword [esp + 0x2c], 0xffffffff
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x40]
jmp 0x4cfad9
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
mov edx, edi
mov ebp, ecx
mov esi, eax
mov eax, dword [esp + 0x28]
cmp eax, edx
jge 0x4d00cd
mov edi, dword [esp + 0x24]
cmp edi, esi
jl 0x4cfcb4
mov edi, dword [esp + 0x2c]
test edi, edi
jle 0x4cfcad
mov ecx, ebp
mov ebp, dword [ebx]
mov esi, dword [ebx + 4]
cmp eax, esi
jae 0x4d018e
mov esi, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
mov ebp, dword [ebp + eax*4]
cmp edi, esi
jae 0x4d0185
mov edx, dword [edx + edi*4]
cmp ebp, edx
jg 0x4cfb94
xor eax, eax
mov byte [esp + 0x23], al
movzx edx, byte [esp + 0x23]
test dl, dl
jne 0x4cfacb
mov eax, dword [0x960d40]
mov ecx, dword [0x960d3c]
mov edx, dword [0x960d38]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
mov eax, dword [0x960d30]
mov ecx, dword [0x960d2c]
mov edx, dword [0x960d28]
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
nop
call fcn.0042a180
add esp, 0x88
ret
mov edx, dword [ebx]
mov ebp, dword [ebx + 4]
cmp eax, ebp
jae 0x4d017e
mov esi, dword [edx + eax*4]
lea edi, [eax + 1]
cmp edi, ebp
jae 0x4d0175
mov dword [esp + 0x38], esi
mov ebp, dword [esp + 0x80]
lea edi, [ebp + 2]
mov ebx, dword [esp + 0x7c]
mov esi, dword [esp + 0x84]
mov edx, dword [edx + eax*4 + 4]
cmp edi, esi
ja 0x4cfc64
lea esi, [ebp + 2]
mov dword [esp + 0x80], esi
mov esi, dword [esp + 0x38]
mov dword [ebx + ebp*4], esi
mov dword [ebx + ebp*4 + 4], edx
add dword [esp + 0x28], 2
add dword [esp + 0x2c], 2
mov edx, dword [esp + 0x74]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x78]
cmp ebx, esi
ja 0x4cfc29
lea esi, [edx + 1]
mov dword [esp + 0x74], esi
mov esi, dword [esp + 0x94]
mov dword [ebp + edx*4], esi
mov ebx, dword [esp + 0x8c]
mov eax, 1
jmp 0x4cfb2c
lea eax, [0x669220]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043bd10
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x70], ebp
mov ecx, dword [esp + 0x90]
jmp 0x4cfc06
mov dword [esp + 0x34], edx
lea eax, [0x668560]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.0043bd10
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x84], eax
mov dword [esp + 0x7c], ebx
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x34]
jmp 0x4cfbd4
mov ecx, ebp
jmp 0x4cfb94
cmp eax, edx
jl 0x4cfe41
mov eax, dword [esp + 0x2c]
test eax, eax
jle 0x4cfe3a
mov ecx, ebx
mov ebx, dword [ebp]
mov esi, dword [ebp + 4]
cmp edi, esi
jae 0x4d016c
mov esi, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
mov ebx, dword [ebx + edi*4]
cmp eax, esi
jae 0x4d0165
mov edx, dword [edx + eax*4]
cmp ebx, edx
jg 0x4cfd09
xor eax, eax
mov byte [esp + 0x23], al
mov ecx, ebp
mov ebx, dword [esp + 0x8c]
jmp 0x4cfb30
mov edx, dword [ebp]
mov ebx, dword [ebp + 4]
cmp edi, ebx
jae 0x4d015c
mov esi, dword [edx + edi*4]
lea eax, [edi + 1]
cmp eax, ebx
jae 0x4d0155
mov dword [esp + 0x38], esi
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x30], ebx
mov eax, ebp
lea ebp, [ebx + 2]
mov esi, dword [esp + 0x84]
mov ebx, dword [esp + 0x7c]
mov edx, dword [edx + edi*4 + 4]
cmp ebp, esi
ja 0x4cfde6
mov ebp, dword [esp + 0x30]
lea esi, [ebp + 2]
mov dword [esp + 0x80], esi
mov esi, dword [esp + 0x38]
mov dword [ebx + ebp*4], esi
mov dword [ebx + ebp*4 + 4], edx
add dword [esp + 0x24], 2
add dword [esp + 0x2c], 2
mov edx, dword [esp + 0x74]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x78]
cmp ebx, esi
ja 0x4cfda4
lea ebx, [edx + 1]
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0x98]
mov dword [ebp + edx*4], ebx
mov ebp, eax
mov eax, 1
jmp 0x4cfcf7
lea eax, [0x669220]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043bd10
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x70], ebp
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x8c]
jmp 0x4cfd86
mov dword [esp + 0x34], edx
lea eax, [0x668560]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x30]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043bd10
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x84], eax
mov dword [esp + 0x7c], ebx
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x34]
jmp 0x4cfd54
mov ecx, ebx
jmp 0x4cfd09
mov ecx, dword [ebp + 4]
mov ebp, dword [ebp]
cmp edi, ecx
jae 0x4d019c
mov esi, dword [ebp + edi*4]
mov edx, dword [ebx + 4]
mov ebx, dword [ebx]
cmp eax, edx
jae 0x4d0195
mov dword [esp + 0x6c], ebx
mov ebx, dword [ebx + eax*4]
cmp esi, ebx
jge 0x4cff9d
mov eax, dword [esp + 0x2c]
test eax, eax
jle 0x4cfeaa
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
cmp eax, ebx
jae 0x4d014e
mov edx, dword [edx + eax*4]
cmp esi, edx
jg 0x4cfeaa
xor eax, eax
mov byte [esp + 0x23], al
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x8c]
jmp 0x4cfb30
lea eax, [edi + 1]
cmp eax, ecx
jae 0x4d0149
mov edx, dword [esp + 0x80]
lea ebx, [edx + 2]
mov eax, esi
mov esi, dword [esp + 0x7c]
mov ecx, edx
mov edx, dword [esp + 0x84]
mov ebp, dword [ebp + edi*4 + 4]
cmp ebx, edx
ja 0x4cff53
lea edx, [ecx + 2]
mov dword [esp + 0x80], edx
mov dword [esi + ecx*4], eax
mov dword [esi + ecx*4 + 4], ebp
add dword [esp + 0x24], 2
add dword [esp + 0x2c], 2
mov edx, dword [esp + 0x74]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x70]
cmp ebx, ebp
ja 0x4cff1f
lea ebx, [edx + 1]
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0x98]
mov dword [esi + edx*4], ebx
mov eax, 1
jmp 0x4cfe93
lea eax, [0x669220]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043bd10
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x70], esi
jmp 0x4cff04
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ebp
lea eax, [0x668560]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043bd10
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x84], eax
mov dword [esp + 0x7c], esi
mov eax, dword [esp + 0x38]
mov ebp, dword [esp + 0x34]
jmp 0x4cfed6
mov ebp, dword [esp + 0x2c]
test ebp, ebp
jle 0x4cffd8
mov ecx, dword [esp + 0x80]
mov esi, dword [esp + 0x7c]
cmp ebp, ecx
jae 0x4d0142
mov ebp, dword [esi + ebp*4]
cmp ebx, ebp
jg 0x4cffd8
xor eax, eax
mov byte [esp + 0x23], al
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x8c]
jmp 0x4cfb30
lea ebp, [eax + 1]
cmp ebp, edx
jae 0x4d0139
mov edx, dword [esp + 0x80]
lea ebp, [edx + 2]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x84]
mov ecx, ebx
mov ebx, dword [esp + 0x6c]
mov ebx, dword [ebx + eax*4 + 4]
cmp ebp, edi
ja 0x4d0083
lea ebp, [edx + 2]
mov dword [esp + 0x80], ebp
mov dword [esi + edx*4], ecx
mov dword [esi + edx*4 + 4], ebx
add dword [esp + 0x28], 2
add dword [esp + 0x2c], 2
mov edx, dword [esp + 0x74]
lea ebx, [edx + 1]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0x70]
cmp ebx, ebp
ja 0x4d004f
lea ebx, [edx + 1]
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0x94]
mov dword [esi + edx*4], ebx
mov eax, 1
jmp 0x4cffc1
lea eax, [0x669220]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0043bd10
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x70], esi
jmp 0x4d0034
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], ebx
lea eax, [0x668560]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0043bd10
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x84], eax
mov dword [esp + 0x7c], esi
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
jmp 0x4d0006
cmp dword [esp + 0x24], esi
jl 0x4cfae5
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x70]
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
nop
call fcn.0042a180
add esp, 0x88
ret
nop
call fcn.0042a180
add esp, 0x88
ret
mov eax, ebp
mov ecx, edx
call fcn.00450370
mov eax, ebp
call fcn.00450370
call fcn.00450370
mov ecx, ebx
call fcn.00450370
mov ecx, ebx
call fcn.00450370
mov eax, edi
mov ecx, ebx
call fcn.00450370
mov ecx, esi
call fcn.00450370
mov eax, edi
mov ecx, esi
call fcn.00450370
mov eax, edi
mov ecx, ebp
call fcn.00450370
mov ecx, ebp
call fcn.00450370
mov eax, edi
mov ecx, esi
call fcn.00450370
mov ecx, esi
call fcn.00450370
mov ecx, edx
call fcn.00450370
mov eax, edi
call fcn.00450370
lea eax, [0x6690a0]
mov dword [esp], eax
lea eax, [0x71a920]
mov dword [esp + 4], eax
call fcn.0042a4d0
nop
call fcn.0044eab0
jmp fcn.004cf950