Function at 0x4e9950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x38]
cmp eax, dword [ecx + 8]
jbe 0x4ea2bd
sub esp, 0xb8
mov ecx, dword [esp + 0xc4]
cmp ecx, 1
jb 0x4ea2b6
lea edx, [ecx - 2]
mov dword [esp + 0x54], edx
mov ebx, edx
sar edx, 0x1f
xor edx, 0xffffffff
and edx, 1
mov dword [esp + 0x50], edx
mov ebp, dword [esp + 0xc0]
mov eax, ebx
lea ebx, [edx + ebp]
mov dword [esp + 0x60], ebx
mov esi, ebx
lea ebx, [ecx - 1]
mov dword [esp + 0x38], ebx
mov edi, ebx
mov ebx, dword [esp + 0xbc]
mov edx, dword [ebx + 0x10]
mov dword [esp + 0x68], edx
test edx, edx
je 0x4ea290
mov ebp, dword [0x884700]
mov ecx, dword [edx + 0x10]
lea edx, [ebx + 0x10]
test ebp, ebp
jne 0x4ea26c
mov dword [ebx + 0x10], ecx
lea edi, [esp + 0x7c]
mov edx, eax
xor eax, eax
call fcn.0044a371
mov ecx, dword [0x884700]
test ecx, ecx
jne 0x4ea23a
mov edi, dword [esp + 0x68]
mov eax, esi
lea esi, [esp + 0x7c]
call fcn.0044a7fa
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x6c], ecx
mov byte [ecx], 4
movzx ebp, word [ebx]
mov word [ecx + 2], bp
lea ebp, [ecx + 0x20]
test byte [ebp], al
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x1c], 2
mov esi, dword [0x884700]
lea edi, [ecx + 0x14]
mov dword [esp + 0x78], edi
test esi, esi
jne 0x4ea208
mov dword [ecx + 0x14], ebp
mov ebp, dword [esp + 0xc4]
cmp ebp, 1
je 0x4ea1fa
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0xc0]
movzx esi, byte [edi + esi]
xchg esi, eax
cmp al, 0x5e
xchg esi, eax
jne 0x4ea1ec
lea esi, [ebp - 3]
sar esi, 0x1f
xor esi, 0xffffffff
and esi, 1
add eax, esi
mov dword [esp + 0x60], eax
movzx esi, word [ebx]
test si, 4
jne 0x4e9ab5
mov esi, dword [ecx + 0x18]
mov ebp, dword [ecx + 0x1c]
mov edi, dword [ecx + 0x14]
lea ebx, [esi + 2]
cmp ebx, ebp
jg 0x4ea17a
lea ebx, [esi + 2]
mov dword [ecx + 0x18], ebx
mov dword [edi + esi*4], 0xa
mov dword [edi + esi*4 + 4], 0xa
mov ebx, 0xffffffff
mov dword [esp + 0x3c], ebx
mov ebp, dword [ecx + 0x1c]
mov esi, dword [ecx + 0x18]
mov edi, dword [ecx + 0x14]
mov dword [esp + 0x58], eax
mov eax, 1
mov byte [esp + 0x37], al
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
mov dword [esp + 0x40], edx
mov dword [esp + 0x48], esi
mov dword [esp + 0x74], edi
mov dword [esp + 0x4c], ebp
test edx, edx
jne 0x4ea050
je 0x4ea044
movzx ebx, byte [eax]
cmp bl, 0x2d
jne 0x4ea038
mov ebx, dword [esp + 0xbc]
movzx ecx, word [ebx]
test cx, 0x40
jne 0x4e9b24
movzx ecx, byte [esp + 0x37]
test cl, cl
je 0x4e9f43
cmp edx, 2
jle 0x4e9b3e
movzx ecx, byte [eax]
cmp cl, 0x5b
jne 0x4e9b3e
movzx ecx, byte [eax + 1]
cmp cl, 0x3a
je 0x4e9ea7
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
call fcn.004e9170
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x30]
test eax, eax
jne 0x4e9e7c
test esi, esi
je 0x4e9ba1
mov eax, edx
mov edx, ecx
xor edi, edi
xchg edi, eax
mov byte [esp + 0x37], al
xchg edi, eax
mov edi, esi
mov ecx, dword [esp + 0x6c]
mov esi, ebp
mov ebp, ebx
mov ebx, dword [esp + 0x3c]
jmp 0x4e9ad8
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x14], esi
call fcn.004e8ba0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x20]
test eax, eax
je 0x4e9bfe
mov esi, eax
mov edi, ecx
mov ecx, edx
mov edx, ebx
mov ebx, ebp
mov ebp, edi
jmp 0x4e9b82
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0xc4]
mov dword [esp + 0x10], ebp
call fcn.004e8a40
mov eax, dword [esp + 0x14]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
test ecx, ecx
jne 0x4e9e51
cmp ebx, 2
jl 0x4e9c71
movzx ecx, byte [ebp]
cmp cl, 0x2d
jne 0x4e9c71
movzx ecx, byte [ebp + 1]
lea edx, [ebp + 1]
cmp cl, 0x5d
jne 0x4e9d01
mov ecx, eax
mov dword [esp + 0x60], ebp
mov dword [esp + 0x38], ebx
mov edx, dword [esp + 0xbc]
movzx esi, word [edx]
test si, 1
jne 0x4e9ccf
mov esi, dword [esp + 0x74]
mov dword [esp], esi
mov esi, dword [esp + 0x48]
mov dword [esp + 4], esi
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004ea4a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebp, ecx
mov ebx, eax
mov esi, edx
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x60]
jmp 0x4e9b82
mov esi, dword [esp + 0x74]
mov dword [esp], esi
mov esi, dword [esp + 0x48]
mov dword [esp + 4], esi
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004ea5d0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x4e9cbc
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea edx, [ebx - 1]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 0xc], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 0x10], ebx
call fcn.004e8a40
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x20]
test ebp, ebp
jne 0x4e9e26
mov ebx, dword [esp + 0x44]
cmp edx, ebx
jl 0x4e9d62
mov ebp, ecx
mov ecx, ebx
mov ebx, eax
mov eax, edx
jmp 0x4e9c73
mov ecx, dword [esp + 0x40]
mov edx, ecx
sub ecx, eax
mov dword [esp + 0x40], ecx
cmp ecx, edx
ja 0x4e9e1f
lea eax, [0x6ca800]
mov dword [esp], eax
call fcn.0040cd70
mov eax, dword [esp + 4]
mov dword [esp + 0x70], eax
mov dword [eax + 4], 0x1d
mov ecx, dword [0x884700]
test ecx, ecx
jne 0x4e9e07
lea ecx, [0x70ee4c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x884700]
lea edx, [eax + 8]
test ecx, ecx
jne 0x4e9df1
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
lea ecx, [0x8483c0]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], eax
add esp, 0xb8
ret
mov dword [esp], edx
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call fcn.0040d5a0
mov eax, dword [esp + 0x70]
jmp 0x4e9dc0
mov dword [esp], eax
lea ecx, [0x70ee4c]
mov dword [esp + 4], ecx
call fcn.0040d5a0
mov eax, dword [esp + 0x70]
jmp 0x4e9da5
call fcn.004246e0
ud2
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], ebp
mov dword [esp + 0xd4], ebx
add esp, 0xb8
ret
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], edx
add esp, 0xb8
ret
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edi
add esp, 0xb8
ret
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
call fcn.004e8cf0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
test ecx, ecx
jne 0x4e9f18
test ebp, ebp
je 0x4e9ef8
mov ecx, ebx
mov ebx, edi
mov eax, edx
mov edx, esi
mov esi, ebp
mov ebp, eax
jmp 0x4e9b82
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x74]
jmp 0x4e9b3e
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], eax
add esp, 0xb8
ret
cmp edx, 1
je 0x4e9f56
movzx ecx, byte [eax + 1]
cmp cl, 0x5d
jne 0x4e9f56
jmp 0x4e9b24
lea ecx, [edx - 2]
sar ecx, 0x1f
xor ecx, 0xffffffff
and ecx, 1
add ecx, eax
mov dword [esp], ecx
lea ecx, [edx - 1]
mov dword [esp + 4], ecx
call fcn.0044df60
mov eax, dword [esp + 0xc]
inc eax
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x4ea031
lea ecx, [0x6ca800]
mov dword [esp], ecx
call fcn.0040cd70
mov eax, dword [esp + 4]
mov dword [esp + 0x70], eax
mov dword [eax + 4], 0x1d
mov ecx, dword [0x884700]
test ecx, ecx
jne 0x4ea019
lea ecx, [0x70ee4c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x884700]
lea edx, [eax + 8]
test ecx, ecx
jne 0x4ea003
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
lea ecx, [0x8483c0]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], eax
add esp, 0xb8
ret
mov dword [esp], edx
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call fcn.0040d5a0
mov eax, dword [esp + 0x70]
jmp 0x4e9fd2
mov dword [esp], eax
lea ecx, [0x70ee4c]
mov dword [esp + 4], ecx
call fcn.0040d5a0
mov eax, dword [esp + 0x70]
jmp 0x4e9fb7
call fcn.004246e0
ud2
mov ebx, dword [esp + 0xbc]
jmp 0x4e9b24
mov ebx, dword [esp + 0xbc]
jmp 0x4e9b24
movzx ebx, byte [eax]
cmp bl, 0x5d
je 0x4ea063
test edx, edx
mov ebx, dword [esp + 0x3c]
jmp 0x4e9af4
movzx ebx, byte [esp + 0x37]
test bl, bl
je 0x4ea077
test edx, edx
mov ebx, dword [esp + 0x3c]
jmp 0x4e9af4
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x1c], ebp
lea ebx, [edx - 2]
sar ebx, 0x1f
xor ebx, 0xffffffff
and ebx, 1
add eax, ebx
mov dword [esp + 0x60], eax
dec edx
mov dword [esp + 0x38], edx
mov ebx, dword [0x884700]
test ebx, ebx
jne 0x4ea159
mov dword [ecx + 0x14], edi
mov ebx, dword [esp + 0x78]
mov dword [esp], ebx
call fcn.004ea2d0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x3c]
test ebx, ebx
jl 0x4ea138
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x18], ecx
mov dword [ebx + 0x1c], edx
mov ecx, dword [0x884700]
test ecx, ecx
jne 0x4ea122
mov dword [ebx + 0x14], eax
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.004e2840
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
add esp, 0xb8
ret
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ebx, dword [esp + 0x6c]
jmp 0x4ea0dc
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004eaee0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
jmp 0x4ea0c5
mov ebx, dword [esp + 0x78]
mov dword [esp], ebx
mov dword [esp + 4], edi
call fcn.0040d5a0
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x38]
jmp 0x4ea0a5
lea eax, [0x6b42e0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0x1c], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x4ea1d2
mov dword [ebx + 0x14], eax
mov edi, dword [ebx + 0x14]
mov eax, dword [esp + 0x60]
mov ecx, ebx
mov edx, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
jmp 0x4e9aa0
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x50]
mov ebx, dword [esp + 0x6c]
jmp 0x4ea1bc
mov edx, dword [esp + 0x38]
mov ebx, 1
jmp 0x4e9aba
mov edx, dword [esp + 0x38]
mov ebx, 1
jmp 0x4e9aba
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.0040d5a0
mov ebp, dword [esp + 0xc4]
cmp ebp, 1
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x78]
jmp 0x4e9a50
lea eax, [0x6eb8c0]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
lea ecx, [esp + 0x7c]
mov dword [esp + 8], ecx
call fcn.0040d6b0
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0xbc]
jmp 0x4e9a08
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0040d5a0
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0xbc]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x38]
jmp 0x4e99de
lea edx, [0x6eb8c0]
mov dword [esp], edx
call fcn.0040cd70
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0xbc]
jmp 0x4e9a0c
call fcn.004246e0
ud2
call fcn.004486b0
jmp fcn.004e9950