Function at 0x4d6710
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x30
push ebx
push ebp
push esi
mov esi, eax
mov eax, dword [0x16d8a10]
push edi
mov dword [esp + 0x18], eax
call fcn.004d60f0
mov ecx, dword [0x16d8e24]
xor ebp, ebp
or ebx, 0xffffffff
add ecx, esi
cmp esi, ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x1c], ebx
mov dword [0x16d8e5c], 0x16c508c
mov dword [esp + 0x14], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x10], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x28], ebx
mov dword [0x16d8e24], ecx
jle 0x4d6bdb
mov edi, dword [esp + 0x44]
add edi, 4
mov dword [esp + 0x20], edi
mov dword [esp + 0x38], esi
jmp 0x4d6780
mov eax, dword [edi - 4]
cmp eax, ebx
jne 0x4d679b
mov eax, dword [edi]
mov ecx, dword [eax]
push eax
call dword [ecx*4 + 0x571140]
add esp, 4
jmp 0x4d6bba
mov ecx, eax
mov edx, eax
mov edi, eax
shr ecx, 8
shr edx, 0x12
shr edi, 2
mov esi, eax
mov ebx, eax
and ecx, 0x3ff
and edx, 0xfff
mov ebp, dword [edx*4 + 0x16cf84c]
shr esi, 0x1e
and ebx, 1
and edi, 1
test al, 2
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], ecx
je 0x4d67e2
mov dword [esp + 0x44], 0x3fe
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
cmp ebp, eax
jne 0x4d6810
cmp esi, dword [esp + 0x2c]
jne 0x4d6810
cmp ebx, dword [esp + 0x24]
jne 0x4d6810
cmp edi, dword [esp + 0x28]
jne 0x4d6810
cmp ecx, dword [esp + 0x1c]
je 0x4d6acf
test byte [ebp + 0x4c], 4
jne 0x4d68a2
test eax, eax
je 0x4d682d
call fcn.005027c0
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp + 0x4c]
mov ecx, dword [esp + 0x44]
xor eax, edx
mov dword [esp + 0x34], eax
cmp ecx, 0x3fe
je 0x4d684a
mov eax, dword [0x16d8b18]
imul ecx, ecx, 0x2b8
add ecx, eax
mov dword [0x16d8e5c], ecx
jmp 0x4d6854
mov dword [0x16d8e5c], 0x16c508c
cmp esi, dword [0x16c397c]
je 0x4d6882
mov eax, dword [0x16c3abc]
test eax, eax
je 0x4d686c
call fcn.0050bb80
jmp 0x4d687c
mov eax, dword [0x16c3ad8]
test eax, eax
je 0x4d687c
mov eax, esi
call fcn.004ff4e0
mov dword [0x16c397c], esi
push 3
mov ecx, ebp
call fcn.004ff570
mov ecx, dword [esp + 0x48]
add esp, 4
mov dword [esp + 0x14], ebp
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], esi
cmp ecx, dword [esp + 0x1c]
je 0x4d6acf
fld dword [esp + 0x18]
xor ebx, ebx
xor ebp, ebp
cmp ecx, 0x3fe
mov dword [esp + 0x10], ebx
je 0x4d69ec
mov edx, dword [0x16d8b18]
mov eax, dword [0x197ff90]
mov edi, ecx
imul edi, edi, 0x2b8
add edi, edx
mov dword [0x16d8e5c], edi
fsub dword [edi + 0x78]
fst dword [0x16d8a10]
fsub dword [eax + 0x17c]
fstp dword [0x197ff98]
mov cl, byte [eax + 0x4c]
test cl, 4
je 0x4d690f
mov ecx, 0x1f
mov esi, 0x16d8bc4
mov edi, 0x16d8da8
rep movsd dword es:[edi], dword [esi]
jmp 0x4d692e
mov eax, dword [edi]
cmp eax, 1
je 0x4d691f
cmp eax, 2
je 0x4d691f
cmp eax, ebp
jne 0x4d68fc
mov eax, 0x16d8da8
mov ebx, 0x16d8b48
call fcn.004d3630
mov edx, dword [0x16d8e5c]
cmp dword [edx + 0x9c], ebp
je 0x4d6951
mov edx, dword [0x16d8b24]
mov eax, dword [0x16d8b20]
mov ecx, 0x16d8da8
call fcn.004b5650
mov eax, dword [0x16d8e5c]
mov eax, dword [eax + 4]
mov ecx, dword [0x197ff90]
and eax, 0x18
mov dword [esp + 0x10], eax
test byte [ecx + 0x54], 0x18
je 0x4d69d4
call fcn.004d64e0
mov edx, dword [0x16d8e5c]
mov esi, dword [edx + 0x2ac]
mov eax, dword [0x16c398c]
cmp esi, eax
je 0x4d69a2
cmp eax, ebp
je 0x4d6991
push eax
call dword [0x16c3d00]
cmp esi, ebp
mov dword [0x16c398c], esi
je 0x4d69a2
push esi
call dword [0x16c4288]
mov ebx, dword [esp + 0x10]
push 0x16d8de4
call dword [0x16c4020]
mov esi, dword [esp + 0x30]
cmp esi, ebx
je 0x4d6ac2
cmp ebx, 0x18
ja case.0x4d69cd.1
movzx edx, byte [ebx + 0x4d6c88]
jmp dword [edx*4 + 0x4d6c78]
mov eax, dword [0x16c398c]
cmp eax, ebp
je 0x4d69a2
push eax
call dword [0x16c3d00]
mov dword [0x16c398c], ebp
jmp 0x4d69a2
mov eax, dword [esp + 0x18]
mov dword [0x16d8a10], eax
mov dword [0x16d8e5c], 0x16c508c
mov ecx, 0x1f
mov esi, 0x16d8bc4
mov edi, 0x16d8da8
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x197ff90]
mov edx, dword [0x16d8b24]
mov eax, dword [0x16d8b1c]
fsub dword [ecx + 0x17c]
mov ecx, 0x16d8da8
fstp dword [0x197ff98]
call fcn.004b5650
mov eax, dword [0x16c398c]
cmp eax, ebp
je 0x4d69a6
push eax
call dword [0x16c3d00]
mov dword [0x16c398c], ebp
jmp 0x4d69a6
push 0x3ff00000
jmp 0x4d6a8f
push 0x1701
call dword [0x16c408c]
push 0x16d8cd0
call dword [0x16c4020]
push 0x1700
call dword [0x16c408c]
push 0x3fc99999
push 0xa0000000
jmp 0x4d6a90
push 0x3fe00000
push ebp
push ebp
push ebp
call dword [0x16c46bc]
cmp esi, 8
jne 0x4d6abe
push 0x1701
call dword [0x16c408c]
push 0x16d8c90
call dword [0x16c4020]
push 0x1700
call dword [0x16c408c]
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x44]
mov dword [esp + 0x1c], eax
jmp 0x4d6b9d
mov edx, dword [0x197ff90]
test byte [edx + 0x54], 0x18
je 0x4d6b21
call fcn.004d64e0
test eax, eax
je 0x4d6aef
push 0x16d8de4
call dword [0x16c4020]
mov eax, dword [0x16d8e5c]
mov esi, dword [eax + 0x2ac]
mov eax, dword [0x16c398c]
cmp esi, eax
je 0x4d6b3b
test eax, eax
je 0x4d6b0e
push eax
call dword [0x16c3d00]
test esi, esi
mov dword [0x16c398c], esi
je 0x4d6b3b
push esi
call dword [0x16c4288]
jmp 0x4d6b3b
mov eax, dword [0x16c398c]
test eax, eax
je 0x4d6b3f
push eax
call dword [0x16c3d00]
mov dword [0x16c398c], 0
mov ecx, dword [esp + 0x44]
cmp ecx, 0x3fe
je 0x4d6b9d
test byte [esp + 0x34], 4
je 0x4d6b9d
mov ecx, dword [0x197ff90]
test byte [ecx + 0x4c], 4
je 0x4d6b6d
mov ecx, 0x1f
mov esi, 0x16d8bc4
mov edi, 0x16d8da8
rep movsd dword es:[edi], dword [esi]
jmp 0x4d6b92
mov edi, dword [0x16d8e5c]
mov eax, dword [edi]
cmp eax, 1
je 0x4d6b83
cmp eax, 2
je 0x4d6b83
test eax, eax
jne 0x4d6b5a
mov eax, 0x16d8da8
mov ebx, 0x16d8b48
call fcn.004d3630
push 0x16d8de4
call dword [0x16c4020]
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
mov ecx, dword [eax]
push eax
call dword [ecx*4 + 0x571140]
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x24]
add esp, 4
xor ebp, ebp
mov eax, dword [esp + 0x38]
add edi, 8
dec eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x38], eax
jne 0x4d6780
cmp dword [esp + 0x14], ebp
je 0x4d6bdb
call fcn.005027c0
mov eax, dword [0x16d8868]
cmp eax, dword [0x16c397c]
mov edi, eax
je 0x4d6c0e
cmp dword [0x16c3abc], ebp
je 0x4d6bfb
mov esi, eax
call fcn.0050bb80
jmp 0x4d6c08
cmp dword [0x16c3ad8], ebp
je 0x4d6c08
call fcn.004ff4e0
mov dword [0x16c397c], edi
mov edx, dword [esp + 0x18]
mov dword [0x16d8a10], edx
mov dword [0x16d8e5c], 0x16c508c
mov ecx, 0x1f
mov esi, 0x16d8bc4
mov edi, 0x16d8da8
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x16d8b24]
mov eax, dword [0x16d8b1c]
mov ecx, 0x16d8da8
call fcn.004b5650
push 0x16d8c00
call dword [0x16c4020]
cmp dword [esp + 0x10], ebp
je 0x4d6c67
push 0x3ff00000
push ebp
push ebp
push ebp
call dword [0x16c46bc]
call fcn.00513130
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
jmp 0x4d9770
mov eax, dword [0x16c36cc]
mov ecx, dword [eax + 0x20]
sub esp, 0xc
push ebx
push ebp
xor ebx, ebx
cmp ecx, ebx
push esi
push edi
je 0x4d9ae8
call fcn.004d8fd0
call fcn.004d9100
mov esi, dword [0x16da40c]
xor ebp, ebp
cmp esi, ebx
mov dword [0x14072fc], ebx
mov edi, 0x16da40c
je 0x4d9828
lea ebx, [ebx]
mov ecx, dword [esi + 4]
cmp ecx, dword [0x16d8c58]
jge 0x4d97e8
fld dword [esi + 0x24]
fcomp dword [0x568e64]
fnstsw ax
test ah, 0x41
jp 0x4d97de
mov edx, dword [esi]
mov eax, dword [0x16dca20]
mov dword [edi], edx
mov dword [esi], eax
mov dword [0x16dca20], esi
jmp 0x4d9822
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x30], 0x40000000
mov ecx, dword [esi + 0xc]
cmp ecx, dword [0x16d8c54]
jne 0x4d9820
mov edx, dword [0x16d8c4c]
cmp dword [esi + 8], edx
jne 0x4d9820
push esi
call fcn.004d9310
fld dword [esi + 0x24]
fcomp dword [0x568e64]
add esp, 4
fnstsw ax
test ah, 0x44
jnp 0x4d9ad1
mov ebp, 1
mov edi, esi
mov esi, dword [edi]
cmp esi, ebx
jne 0x4d97b0
mov edx, dword [0x14072fc]
push edx
lea edi, [esp + 0x18]
lea esi, [esp + 0x14]
call fcn.004e8270
add esp, 4
cmp ebp, ebx
jne 0x4d9869
fld dword [esp + 0x10]
fcomp dword [0x568e64]
fnstsw ax
test ah, 0x41
jp 0x4d9869
fld dword [esp + 0x14]
fcomp dword [0x568e64]
fnstsw ax
test ah, 0x41
jnp 0x4d9ae8
cmp dword [0x16d8c4c], ebx
je 0x4d987c
push 0x3000
call dword [0x16c3d00]
call dword [0x16c40c0]
call dword [0x16c3b24]
push 0x1701
call dword [0x16c408c]
call dword [0x16c40c0]
call dword [0x16c3b24]
mov eax, dword [0x16d8c74]
mov ecx, dword [0x16d8c7c]
mov edx, dword [0x16d8c70]
push 0x40f869f0
push ebx
add ecx, eax
mov eax, dword [0x16d8c78]
push 0xc0f869f0
mov dword [esp + 0x24], ecx
fild dword [esp + 0x24]
push ebx
sub esp, 0x20
add eax, edx
fstp qword [esp + 0x18]
mov dword [esp + 0x48], eax
fild dword [0x16d8c74]
fstp qword [esp + 0x10]
fild dword [esp + 0x48]
fstp qword [esp + 8]
fild dword [0x16d8c70]
fstp qword [esp]
call dword [0x16c3dc0]
fld dword [esp + 0x10]
fcomp dword [0x568e64]
fnstsw ax
test ah, 0x44
jp 0x4d991f
fld dword [esp + 0x14]
fcomp dword [0x568e64]
fnstsw ax
test ah, 0x44
jnp 0x4d9a74
call fcn.004e0e00
mov esi, dword [0x16c4de4]
call fcn.004d5450
mov eax, 0x10062
call fcn.004d57b0
mov eax, dword [0x16c38c0]
mov edx, dword [eax*4 + 0x16c38e8]
mov ecx, 0x2100
cmp edx, ecx
je 0x4d9966
push ecx
push 0x2200
push 0x2300
mov dword [eax*4 + 0x16c38e8], ecx
call dword [0x16c447c]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
push ecx
push eax
push eax
push eax
call fcn.004e11c0
fild dword [0x16d8c74]
add esp, 0x10
push ebx
push ecx
fstp dword [esp]
push ecx
fild dword [0x16d8c70]
mov dword [0x16d88e8], 7
fstp dword [esp]
call fcn.004e10a0
mov edx, dword [0x16d8c74]
mov eax, dword [0x16d8c7c]
add eax, edx
add esp, 0xc
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
push ebx
push ecx
fstp dword [esp]
push ecx
fild dword [0x16d8c70]
fstp dword [esp]
call fcn.004e10a0
mov ecx, dword [0x16d8c74]
mov edx, dword [0x16d8c7c]
mov eax, dword [0x16d8c70]
add esp, 0xc
add edx, ecx
push ebx
push ecx
mov ecx, dword [0x16d8c78]
mov dword [esp + 0x20], edx
fild dword [esp + 0x20]
add ecx, eax
mov dword [esp + 0x20], ecx
fstp dword [esp]
push ecx
fild dword [esp + 0x24]
fstp dword [esp]
call fcn.004e10a0
mov edx, dword [0x16d8c70]
fild dword [0x16d8c74]
mov eax, dword [0x16d8c78]
add esp, 0xc
push ebx
push ecx
add eax, edx
fstp dword [esp]
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
push ecx
fstp dword [esp]
call fcn.004e10a0
mov ecx, dword [0x16d8908]
mov edx, dword [0x16d88e8]
add esp, 0xc
push ecx
push ebx
push edx
call dword [0x16c433c]
mov dword [0x16d8908], ebx
mov dword [0x16d88e8], ebx
mov dword [0x16d88e4], ebx
call fcn.004d2a80
push 0x17bff60
push ebx
push 0x1406
push 3
call dword [0x16c4810]
cmp ebp, ebx
je 0x4d9ab3
mov edi, dword [0x16da40c]
cmp edi, ebx
je 0x4d9ab3
mov eax, dword [edi + 0xc]
cmp eax, dword [0x16d8c54]
jne 0x4d9aad
mov ecx, dword [edi + 8]
cmp ecx, dword [0x16d8c4c]
jne 0x4d9aad
fld dword [edi + 0x24]
fcomp dword [0x568e64]
fnstsw ax
test ah, 0x44
jnp 0x4d9aad
call fcn.004d94b0
mov edi, dword [edi]
cmp edi, ebx
jne 0x4d9a82
call dword [0x16c46c8]
push 0x1700
call dword [0x16c408c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
jmp dword [0x16c46c8]
mov eax, dword [esi]
mov ecx, dword [0x16dca20]
mov dword [edi], eax
mov dword [esi], ecx
mov dword [0x16dca20], esi
jmp 0x4d9822
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret