Function at 0x4cfaa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98d270]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x50]
cmp eax, dword [ecx + 8]
jbe 0x4d0583
sub esp, 0xd0
mov ebx, dword [esp + 0xe0]
mov ebp, ebx
and ebx, 0x1f
nop
cmp ebx, 0xa
jbe 0x4cffe9
cmp ebx, 0xf
jbe 0x4cfcd7
cmp ebx, 0x11
ja 0x4cfc37
cmp ebx, 0x10
je 0x4cfb19
nop
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004ace20
mov eax, dword [esp + 0xc]
mov dword [esp + 0x44], eax
xor ecx, ecx
jmp 0x4d057a
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4d0516
cmp eax, ecx
ja 0x4d0511
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd4]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 8]
mov dword [edx + 0x14], ebp
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], ecx
mov eax, dword [edx + 0x10]
lea ecx, [ebx + 0x10]
cmp eax, ecx
jb 0x4d050a
cmp ecx, ebp
jb 0x4d0503
movsd xmm0, qword [esp + 0x78]
movsd qword [esp + 0x68], xmm0
mov ecx, dword [edx]
mov esi, dword [edx + 4]
mov ecx, dword [ecx + 0x28]
mov edi, dword [edx + 8]
mov dword [esp], esi
sub eax, ebx
add eax, 0xfffffff8
mov ebx, eax
neg eax
sar eax, 0x1f
and ebp, eax
lea eax, [ebp + edi]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], ecx
movsd xmm0, qword [esp + 0x70]
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x68]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.004ae040
jmp 0x4d0311
cmp ebx, 0x17
jne 0x4cfc52
nop
mov eax, dword [esp + 0xdc]
mov ecx, dword [eax + 4]
mov dword [esp + 0x40], ecx
xor edx, edx
jmp 0x4d04fa
cmp ebx, 0x19
jne 0x4d0311
test ebp, 0x200
jne 0x4cfc72
lea eax, [0x7767c4]
mov ecx, dword [esp + 0xd8]
jmp 0x4cfc9f
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004aed40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0xe0]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004ad930
mov eax, dword [esp + 0xc]
mov dword [esp + 0x48], eax
xor ecx, ecx
jmp 0x4d0380
cmp ebx, 0xd
ja 0x4cfe1e
cmp ebx, 0xb
jne 0x4cfd7b
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4d0370
cmp eax, ecx
ja 0x4d036b
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004ae7b0
jmp 0x4d0311
cmp ebx, 0xd
jne 0x4d0311
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4d0366
cmp eax, ecx
ja 0x4d0361
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov dword [esp + 0x60], eax
movss xmm0, dword [esp + 0x60]
cvtss2sd xmm0, xmm0
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004ae110
jmp 0x4d0311
cmp ebx, 0xe
jne 0x4cfece
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4d035c
cmp eax, ecx
ja 0x4d0357
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], ecx
movsd xmm0, qword [esp + 0x80]
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004ae110
jmp 0x4d0311
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4d0352
cmp eax, ecx
ja 0x4d034d
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
mov edx, dword [ecx + 0x14]
lea ebx, [edx + 4]
mov dword [ecx + 0x14], ebx
mov dword [esp + 0x5c], eax
mov eax, dword [ecx + 0x10]
lea ebp, [edx + 8]
cmp eax, ebp
jb 0x4d0344
cmp ebp, ebx
jb 0x4d033b
movss xmm0, dword [esp + 0x5c]
cvtss2sd xmm0, xmm0
movsd qword [esp + 0x88], xmm0
mov ebp, dword [ecx]
mov esi, dword [ecx + 4]
mov ebp, dword [ebp + 0x24]
mov edi, dword [ecx + 8]
mov dword [esp], esi
sub eax, edx
add eax, 0xfffffffc
mov edx, eax
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [ebx + edi]
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], edx
call ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov dword [esp + 0x58], eax
movss xmm0, dword [esp + 0x58]
cvtss2sd xmm0, xmm0
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x88]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.004ae040
jmp 0x4d0311
cmp ebx, 5
ja 0x4d0141
cmp ebx, 3
ja 0x4d00a7
cmp ebx, 1
jne 0x4d004c
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
cmp eax, ecx
jae 0x4d0336
mov ecx, dword [edx + 8]
movzx ecx, byte [ecx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
test cl, cl
setne al
mov byte [esp + 0xc], al
call fcn.004adce0
jmp 0x4d0311
cmp ebx, 3
jne 0x4d0311
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
nop
cmp ecx, eax
jbe 0x4d0331
mov ecx, dword [edx + 8]
add ecx, eax
movsx ecx, byte [ecx]
mov ebx, ecx
sar ecx, 0x1f
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
call fcn.004ae1d0
jmp 0x4d0311
cmp ebx, 4
jne 0x4d00f7
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004cf910
movsx eax, word [esp + 4]
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004ae1d0
jmp 0x4d0311
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004cf990
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004ae1d0
jmp 0x4d0311
cmp ebx, 8
ja 0x4d01f0
cmp ebx, 6
je 0x4d01a7
cmp ebx, 8
jne 0x4d0311
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4d032c
mov ecx, dword [edx + 8]
movzx ecx, byte [ecx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
call fcn.004ae7b0
jmp 0x4d0311
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004cfa10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004ae1d0
jmp 0x4d0311
cmp ebx, 9
jne 0x4d028c
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 2]
cmp edx, ecx
jb 0x4d0327
cmp eax, ecx
ja 0x4d0322
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x20]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 2
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004ae7b0
jmp 0x4d0311
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4d031d
cmp eax, ecx
ja 0x4d0318
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004ae7b0
add esp, 0xd0
ret
call fcn.00468a60
call fcn.00468a40
call fcn.00468a60
call fcn.00468a40
call fcn.00468a00
call fcn.00468a00
call fcn.00468a00
mov eax, ebx
mov ecx, ebp
call fcn.00468a60
mov ecx, ebp
mov edx, eax
call fcn.00468a40
call fcn.00468a60
call fcn.00468a40
call fcn.00468a60
call fcn.00468a40
call fcn.00468a60
call fcn.00468a40
call fcn.00468a60
call fcn.00468a40
mov edx, dword [esp + 0x50]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x48]
cmp ecx, eax
jge 0x4d0311
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004ac2c0
mov eax, dword [esp + 0x18]
mov ecx, eax
and eax, 0x160
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0x100
je 0x4d043c
mov dword [esp + 0x64], ecx
mov dword [esp + 0x98], edx
mov dword [esp + 0x94], ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov ebx, dword [esp + 0x50]
mov dword [esp + 4], ebx
call ecx
lea edi, [esp + 0x9c]
lea esi, [esp + 8]
call fcn.004690be
cmp dword [esp + 0xa0], 1
je 0x4d0419
mov eax, 1
jmp 0x4d0426
mov eax, dword [esp + 0x9c]
cmp byte [eax], 0x5f
setne al
test al, al
je 0x4d0463
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x94]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004cfaa0
mov eax, dword [esp + 0xd4]
jmp 0x4d0375
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
call fcn.004cf550
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax + 0x14]
add ecx, dword [esp + 0xc]
mov dword [eax + 0x14], ecx
jmp 0x4d0375
mov dword [esp + 0x4c], edx
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.004ac790
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004cfaa0
mov eax, dword [esp + 0x4c]
lea edx, [eax + 1]
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x40]
mov ebp, dword [esp + 0xe0]
cmp edx, ecx
jl 0x4d049b
jmp 0x4d0311
mov eax, ebp
call fcn.00468a60
mov edx, eax
call fcn.00468a40
call fcn.00468a60
call fcn.00468a40
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004ac790
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004cfaa0
mov eax, dword [esp + 0x54]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x44]
cmp ecx, eax
jl 0x4d051b
jmp 0x4d0311
call fcn.00467590
jmp fcn.004cfaa0