Function at 0x4d85f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9ec7ac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x50]
cmp eax, dword [ecx + 8]
jbe 0x4d90d3
sub esp, 0xd0
mov ebx, dword [esp + 0xe0]
mov ebp, ebx
and ebx, 0x1f
nop
cmp ebx, 0xa
jbe 0x4d8b39
cmp ebx, 0xf
jbe 0x4d8827
cmp ebx, 0x11
ja 0x4d8787
cmp ebx, 0x10
je 0x4d8669
nop
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004a1380
mov eax, dword [esp + 0xc]
mov dword [esp + 0x44], eax
xor ecx, ecx
jmp 0x4d90ca
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4d9066
cmp eax, ecx
ja 0x4d9061
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd4]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 8]
mov dword [edx + 0x14], ebp
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], ecx
mov eax, dword [edx + 0x10]
lea ecx, [ebx + 0x10]
cmp eax, ecx
jb 0x4d905a
cmp ecx, ebp
jb 0x4d9053
movsd xmm0, qword [esp + 0x78]
movsd qword [esp + 0x68], xmm0
mov ecx, dword [edx]
mov esi, dword [edx + 4]
mov ecx, dword [ecx + 0x28]
mov edi, dword [edx + 8]
mov dword [esp], esi
sub eax, ebx
add eax, 0xfffffff8
mov ebx, eax
neg eax
sar eax, 0x1f
and ebp, eax
lea eax, [ebp + edi]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], ecx
movsd xmm0, qword [esp + 0x70]
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x68]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.004a2300
jmp 0x4d8e61
cmp ebx, 0x17
jne 0x4d87a2
nop
mov eax, dword [esp + 0xdc]
mov ecx, dword [eax + 4]
mov dword [esp + 0x40], ecx
xor edx, edx
jmp 0x4d904a
cmp ebx, 0x19
jne 0x4d8e61
test ebp, 0x200
jne 0x4d87c2
lea eax, [0x7ad404]
mov ecx, dword [esp + 0xd8]
jmp 0x4d87ef
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004a2b10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0xe0]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004a1e90
mov eax, dword [esp + 0xc]
mov dword [esp + 0x48], eax
xor ecx, ecx
jmp 0x4d8ed0
cmp ebx, 0xd
ja 0x4d896e
cmp ebx, 0xb
jne 0x4d88cb
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4d8ec0
cmp eax, ecx
ja 0x4d8ebb
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004a2580
jmp 0x4d8e61
cmp ebx, 0xd
jne 0x4d8e61
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4d8eb6
cmp eax, ecx
ja 0x4d8eb1
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov dword [esp + 0x60], eax
movss xmm0, dword [esp + 0x60]
cvtss2sd xmm0, xmm0
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004a23d0
jmp 0x4d8e61
cmp ebx, 0xe
jne 0x4d8a1e
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4d8eac
cmp eax, ecx
ja 0x4d8ea7
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], ecx
movsd xmm0, qword [esp + 0x80]
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004a23d0
jmp 0x4d8e61
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4d8ea2
cmp eax, ecx
ja 0x4d8e9d
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
mov edx, dword [ecx + 0x14]
lea ebx, [edx + 4]
mov dword [ecx + 0x14], ebx
mov dword [esp + 0x5c], eax
mov eax, dword [ecx + 0x10]
lea ebp, [edx + 8]
cmp eax, ebp
jb 0x4d8e94
cmp ebp, ebx
jb 0x4d8e8b
movss xmm0, dword [esp + 0x5c]
cvtss2sd xmm0, xmm0
movsd qword [esp + 0x88], xmm0
mov ebp, dword [ecx]
mov esi, dword [ecx + 4]
mov ebp, dword [ebp + 0x24]
mov edi, dword [ecx + 8]
mov dword [esp], esi
sub eax, edx
add eax, 0xfffffffc
mov edx, eax
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [ebx + edi]
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], edx
call ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov dword [esp + 0x58], eax
movss xmm0, dword [esp + 0x58]
cvtss2sd xmm0, xmm0
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x88]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.004a2300
jmp 0x4d8e61
cmp ebx, 5
ja 0x4d8c91
cmp ebx, 3
ja 0x4d8bf7
cmp ebx, 1
jne 0x4d8b9c
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
cmp eax, ecx
jae 0x4d8e86
mov ecx, dword [edx + 8]
movzx ecx, byte [ecx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
test cl, cl
setne al
mov byte [esp + 0xc], al
call fcn.004a2240
jmp 0x4d8e61
cmp ebx, 3
jne 0x4d8e61
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
nop
cmp ecx, eax
jbe 0x4d8e81
mov ecx, dword [edx + 8]
add ecx, eax
movsx ecx, byte [ecx]
mov ebx, ecx
sar ecx, 0x1f
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
call fcn.004a2490
jmp 0x4d8e61
cmp ebx, 4
jne 0x4d8c47
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004d8460
movsx eax, word [esp + 4]
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004a2490
jmp 0x4d8e61
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004d84e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004a2490
jmp 0x4d8e61
cmp ebx, 8
ja 0x4d8d40
cmp ebx, 6
je 0x4d8cf7
cmp ebx, 8
jne 0x4d8e61
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4d8e7c
mov ecx, dword [edx + 8]
movzx ecx, byte [ecx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
call fcn.004a2580
jmp 0x4d8e61
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004d8560
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004a2490
jmp 0x4d8e61
cmp ebx, 9
jne 0x4d8ddc
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 2]
cmp edx, ecx
jb 0x4d8e77
cmp eax, ecx
ja 0x4d8e72
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x20]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 2
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004a2580
jmp 0x4d8e61
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4d8e6d
cmp eax, ecx
ja 0x4d8e68
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004a2580
add esp, 0xd0
ret
call fcn.00468520
call fcn.00468500
call fcn.00468520
call fcn.00468500
call fcn.004684c0
call fcn.004684c0
call fcn.004684c0
mov eax, ebx
mov ecx, ebp
call fcn.00468520
mov ecx, ebp
mov edx, eax
call fcn.00468500
call fcn.00468520
call fcn.00468500
call fcn.00468520
call fcn.00468500
call fcn.00468520
call fcn.00468500
call fcn.00468520
call fcn.00468500
mov edx, dword [esp + 0x50]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x48]
cmp ecx, eax
jge 0x4d8e61
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a0b10
mov eax, dword [esp + 0x18]
mov ecx, eax
and eax, 0x160
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0x100
je 0x4d8f8c
mov dword [esp + 0x64], ecx
mov dword [esp + 0x98], edx
mov dword [esp + 0x94], ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov ebx, dword [esp + 0x50]
mov dword [esp + 4], ebx
call ecx
lea edi, [esp + 0x9c]
lea esi, [esp + 8]
call fcn.00468b8e
cmp dword [esp + 0xa0], 1
je 0x4d8f69
mov eax, 1
jmp 0x4d8f76
mov eax, dword [esp + 0x9c]
cmp byte [eax], 0x5f
setne al
test al, al
je 0x4d8fb3
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x94]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004d85f0
mov eax, dword [esp + 0xd4]
jmp 0x4d8ec5
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
call fcn.004d80a0
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax + 0x14]
add ecx, dword [esp + 0xc]
mov dword [eax + 0x14], ecx
jmp 0x4d8ec5
mov dword [esp + 0x4c], edx
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.004a0fe0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004d85f0
mov eax, dword [esp + 0x4c]
lea edx, [eax + 1]
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x40]
mov ebp, dword [esp + 0xe0]
cmp edx, ecx
jl 0x4d8feb
jmp 0x4d8e61
mov eax, ebp
call fcn.00468520
mov edx, eax
call fcn.00468500
call fcn.00468520
call fcn.00468500
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a0fe0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004d85f0
mov eax, dword [esp + 0x54]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x44]
cmp ecx, eax
jl 0x4d906b
jmp 0x4d8e61
call fcn.00467050
jmp fcn.004d85f0