Function at 0x4e0c30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c4
mov eax, dword [0x401424]
xor eax, esp
mov dword [esp + 0x5c0], eax
mov eax, dword [esp + 0x5cc]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x5d0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5d4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x5d8]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x5e0]
push ebx
mov dword [esp + 0x40], eax
xor ebx, ebx
mov eax, dword [esp + 0x5e8]
push ebp
mov ebp, dword [esp + 0x5e4]
mov dword [esp + 0x48], eax
lea eax, [esp + 0x40]
push esi
mov esi, dword [esp + 0x5d4]
push eax
mov eax, dword [0x4eed0c]
push 0x40dcc8
mov dword [esp + 0x34], esi
mov eax, dword [eax + 0x44]
call eax
test eax, eax
je 0x4e0cde
push 0x40dd08
push esi
call fcn.004ab2d0
add esp, 8
lea eax, [ebx + 0x5e]
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x5c0]
xor ecx, esp
call fcn.004ed9d4
add esp, 0x5c4
ret
mov eax, dword [esp + 0x44]
push edi
push eax
mov esi, dword [eax + 8]
mov eax, dword [0x4eed0c]
mov dword [esp + 0x2c], esi
mov eax, dword [eax + 0x40]
call eax
push esi
call dword [fcn.00401034]
mov edi, eax
add esp, 4
mov dword [esp + 0x10], edi
test edi, edi
je 0x4e10bf
mov edx, dword [esp + 0x20]
mov ecx, dword [ebp + 0xc]
test edx, edx
je 0x4e0d1e
test ecx, ecx
je 0x4e0d75
jmp 0x4e0d22
test ecx, ecx
jne 0x4e0d75
lea esi, [ebp + 0x10]
mov eax, dword [esi]
cmp dword [esp + 0x1c], ebx
je 0x4e0d33
test eax, eax
je 0x4e0d75
jmp 0x4e0d37
test eax, eax
jne 0x4e0d75
test edx, edx
je 0x4e0d4d
test ecx, ecx
je 0x4e0d4d
push ecx
push edx
call fcn.004b0cb0
add esp, 8
test eax, eax
jne 0x4e0d75
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x18], esi
test ecx, ecx
je 0x4e0db7
mov eax, dword [esi]
mov dword [esp + 0x18], esi
test eax, eax
je 0x4e0db7
push eax
push ecx
mov dword [esp + 0x20], esi
call fcn.004b0cb0
add esp, 8
test eax, eax
je 0x4e0db7
mov eax, dword [ebp + 8]
test eax, eax
je 0x4e0d96
push eax
mov eax, dword [0x4eed0c]
mov eax, dword [eax + 0x24]
call eax
push dword [ebp + 8]
call dword [fcn.00401038]
add esp, 4
mov dword [ebp + 8], ebx
push dword [ebp + 0xc]
call dword [fcn.00401038]
push dword [ebp + 0x10]
lea esi, [ebp + 0x10]
mov dword [ebp + 0xc], ebx
mov dword [esp + 0x20], esi
call dword [fcn.00401038]
add esp, 8
mov dword [esi], ebx
mov esi, dword [esp + 0x24]
cmp dword [ebp + 8], ebx
je 0x4e0f08
mov ecx, esi
mov dword [esp + 0x3c], ebx
lea eax, [esp + 0x94]
mov dword [esp + 0x40], 5
mov dword [esp + 0x44], eax
mov dword [esp + 0x98], 2
mov dword [esp + 0x9c], ebx
lea edx, [ecx + 1]
mov dword [esp + 0x94], ebx
mov dword [esp + 0xa4], 3
mov dword [esp + 0xa8], esi
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e0e10
sub ecx, edx
push ecx
call fcn.004aeb40
mov dword [esp + 0xa4], eax
add esp, 4
mov eax, dword [esp + 0x2c]
mov ecx, eax
mov dword [esp + 0xb0], 3
mov dword [esp + 0xb4], eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e0e44
sub ecx, edx
push ecx
call fcn.004aeb40
push dword [esp + 0x2c]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xc4], 3
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xd0], 9
mov dword [esp + 0xd4], edi
call fcn.004aeb40
add esp, 8
mov dword [esp + 0xc4], eax
lea eax, [esp + 0x3c]
push 0
push eax
mov eax, dword [0x4eed0c]
push 0
push dword [ebp + 8]
mov eax, dword [eax + 0x38]
call eax
mov ecx, eax
test ecx, ecx
jne 0x4e0ebd
mov ebx, dword [esp + 0xc4]
jmp 0x4e0f08
mov edx, dword [esp + 0x30]
test edx, edx
je 0x4e0eec
cmp byte [edx + 0x68a], bl
je 0x4e0eec
mov eax, dword [edx + 0xca8]
test eax, eax
je 0x4e0edd
cmp dword [eax + 4], 1
jl 0x4e0eec
push ecx
push 0x40dd70
push edx
call fcn.004ab3a0
add esp, 0xc
mov eax, dword [0x4eed0c]
push dword [ebp + 8]
mov eax, dword [eax + 0x24]
call eax
push dword [ebp + 8]
call dword [fcn.00401038]
add esp, 4
mov dword [ebp + 8], ebx
cmp dword [ebp + 8], 0
jne 0x4e1398
push dword [ebp + 0xc]
call dword [fcn.00401038]
mov ebx, dword [esp + 0x1c]
mov dword [ebp + 0xc], 0
push dword [ebx]
call dword [fcn.00401038]
mov ecx, dword [esp + 0x28]
add esp, 8
mov dword [ebx], 0
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test ecx, ecx
je 0x4e109a
cmp byte [ecx], 0
je 0x4e109a
lea eax, [esp + 0x78]
push eax
push dword [esp + 0x20]
push ecx
call fcn.004e1c20
add esp, 0xc
test eax, eax
jne 0x4e10b5
cmp dword [esp + 0x80], 0
mov eax, dword [ebp]
mov dword [esp + 0x14], eax
je 0x4e0f90
cmp dword [esp + 0x84], 0
jne 0x4e1090
nop dword [eax + eax]
mov cl, byte [eax]
test cl, cl
je 0x4e0fab
cmp cl, 0x20
je 0x4e0fa0
cmp cl, 9
jne 0x4e0fab
inc eax
mov dword [esp + 0x14], eax
mov cl, byte [eax]
test cl, cl
jne 0x4e0f96
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x1d4]
push ecx
lea ecx, [esp + 0xd8]
push ecx
push eax
call fcn.004ec5b0
add esp, 0x10
test al, al
je 0x4e108c
lea eax, [esp + 0xd0]
push 0x40dd58
push eax
call fcn.004b0d10
add esp, 8
test eax, eax
je 0x4e104c
lea eax, [esp + 0x1d0]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov edi, eax
add esp, 4
test edi, edi
je 0x4e10b1
push edi
call dword [fcn.00401040]
mov esi, eax
add esp, 4
test esi, esi
je 0x4e1084
push dword [esp + 0x80]
call dword [fcn.00401038]
add esp, 4
mov dword [esp + 0x80], esi
lea ecx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x4e1030
sub esi, ecx
push esi
call fcn.004aeb40
push edi
mov dword [esp + 0x8c], eax
call ebx
add esp, 8
mov eax, dword [esp + 0x14]
mov dl, byte [eax]
test dl, dl
je 0x4e1071
mov cl, dl
cmp cl, 0x20
je 0x4e1064
mov dl, cl
cmp cl, 9
jne 0x4e1071
inc eax
mov dword [esp + 0x14], eax
mov dl, byte [eax]
mov cl, dl
test cl, cl
jne 0x4e1058
cmp dl, 0x2c
jne 0x4e0f90
inc eax
mov dword [esp + 0x14], eax
jmp 0x4e0f90
push edi
call ebx
add esp, 4
jmp 0x4e10b1
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
lea edi, [esp + 0x78]
jmp 0x4e10a0
xor edi, edi
test ecx, ecx
je 0x4e10dd
push ecx
call dword [fcn.00401040]
add esp, 4
mov dword [ebp + 0xc], eax
test eax, eax
jne 0x4e10dd
mov edi, dword [esp + 0x10]
push edi
call dword [fcn.00401038]
add esp, 4
mov eax, 0x1b
mov ecx, dword [esp + 0x5d0]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004ed9d4
add esp, 0x5c4
ret
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4e1118
push eax
call dword [fcn.00401040]
mov ecx, dword [esp + 0x1c]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x4e1118
push dword [esp + 0x10]
call dword [fcn.00401038]
push dword [ebp + 0xc]
call dword [fcn.00401038]
add esp, 8
mov dword [ebp + 0xc], 0
jmp 0x4e10bf
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x4eed0c]
push 0
push 0
push edi
mov eax, dword [eax + 0xc]
push 0
push 2
push 0x40dcc8
push 0
call eax
test eax, eax
je 0x4e115d
push edi
call fcn.004e1d70
push dword [esp + 0x14]
call dword [fcn.00401038]
add esp, 8
mov eax, 0x43
jmp 0x4e10c4
push dword [ebp + 4]
lea eax, [esp + 0x98]
mov dword [esp + 0x40], 0
mov dword [esp + 0x48], eax
mov eax, dword [ebp]
mov dword [esp + 0x44], 3
mov dword [esp + 0x9c], 2
mov dword [esp + 0xa0], eax
call fcn.004aeb40
add esp, 4
mov dword [esp + 0x94], eax
mov dword [esp + 0xa4], 3
lea ecx, [esi + 1]
mov dword [esp + 0xa8], esi
mov al, byte [esi]
inc esi
test al, al
jne 0x4e11b4
sub esi, ecx
push esi
call fcn.004aeb40
push dword [esp + 0x2c]
mov esi, dword [esp + 0x18]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0x68]
mov dword [esp + 0xb8], 3
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 1
mov dword [esp + 0x64], eax
mov dword [esp + 0x6c], 2
mov dword [esp + 0x70], esi
call fcn.004aeb40
push dword [esp + 0x34]
mov dword [esp + 0x6c], eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov ebx, eax
add esp, 0xc
test ebx, ebx
jne 0x4e1257
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x4eed0c]
mov eax, dword [eax + 0x10]
call eax
push edi
call fcn.004e1d70
push esi
call dword [fcn.00401038]
add esp, 8
jmp 0x4e10bf
push 8
push 1
call dword [fcn.00401044]
add esp, 8
mov dword [ebp + 8], eax
test eax, eax
je 0x4e10bf
lea ecx, [esp + 0x70]
push ecx
lea ecx, [esp + 0x70]
push ecx
lea ecx, [esp + 0x5c]
push ecx
push eax
push 0
lea eax, [esp + 0x50]
push eax
push 0
push 0
push 0x1000000
push ebx
push 0
lea eax, [esp + 0x60]
push eax
mov eax, dword [0x4eed0c]
mov eax, dword [eax + 0x18]
call eax
push ebx
mov esi, eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp esi, 0x90313
je 0x4e1364
cmp esi, 0x90314
je 0x4e1364
test esi, esi
je 0x4e1378
cmp esi, 0x90312
je 0x4e1378
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x4eed0c]
mov eax, dword [eax + 0x10]
call eax
push edi
call fcn.004e1d70
push dword [esp + 0x14]
call dword [fcn.00401038]
push dword [ebp + 8]
call dword [fcn.00401038]
add esp, 0xc
mov dword [ebp + 8], 0
cmp esi, 0x80090300
je 0x4e10bf
mov ebx, dword [esp + 0x30]
test ebx, ebx
je 0x4e135a
cmp byte [ebx + 0x68a], 0
je 0x4e135a
mov eax, dword [ebx + 0xca8]
test eax, eax
je 0x4e1338
cmp dword [eax + 4], 1
jl 0x4e135a
push 0x100
lea eax, [esp + 0xd4]
push eax
push esi
call fcn.00493420
push eax
push 0x40dd28
push ebx
call fcn.004ab3a0
add esp, 0x18
mov eax, 0x5e
jmp 0x4e10c4
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x4eed0c]
mov eax, dword [eax + 0x20]
call eax
mov ebx, dword [esp + 0x60]
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x4eed0c]
mov eax, dword [eax + 0x10]
call eax
push edi
call fcn.004e1d70
mov edi, dword [esp + 0x14]
add esp, 4
lea eax, [ebx + 1]
push eax
call dword [fcn.00401034]
mov esi, eax
add esp, 4
test esi, esi
je 0x4e10b5
push ebx
push edi
push esi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x58]
mov byte [esi + ebx], 0
push edi
mov dword [eax], esi
mov eax, dword [esp + 0x60]
mov dword [eax], ebx
call dword [fcn.00401038]
add esp, 0x10
xor eax, eax
jmp 0x4e10c4