Function at 0x4de500
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x527fcd
mov eax, dword fs:[0]
push eax
sub esp, 0x334
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x330], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [section..data]
xor eax, esp
push eax
lea eax, [esp + 0x348]
mov dword fs:[0], eax
cmp byte [ecx + 0x30], 0
lea esi, [ecx + 0x30]
mov eax, dword [esp + 0x35c]
mov ebx, dword [esp + 0x358]
mov dword [esp + 0x1c], eax
jne 0x4de55d
mov ecx, esi
call fcn.004ffcd0
xor eax, eax
mov dword [esp + 0x78], 0
push 0xffffffffffffffff
push eax
mov word [esp + 0x70], ax
lea ecx, [esp + 0x70]
lea eax, [esi + 4]
mov dword [esp + 0x84], 0
push eax
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], 0
call fcn.00404c30
mov dword [esp + 0x350], 0
cmp dword [esp + 0x78], 0
mov edi, dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete_void__]
jne 0x4de5bc
xor bl, bl
jmp 0x4debe2
mov edx, 0x10
lea ecx, [esp + 0x68]
call fcn.00422300
push ebx
lea edx, [esp + 0x6c]
lea ecx, [esp + 0xa0]
call fcn.00422950
add esp, 4
mov byte [esp + 0x350], 1
push 4
call dword [sym.imp.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_]
mov esi, eax
mov dword [esp + 0x1c], eax
add esp, 4
mov dword [esp + 0x80], esi
mov byte [esp + 0x350], 2
test esi, esi
je 0x4de618
mov dword [esi], 0
mov dword [esi], 0xffffffff
jmp 0x4de61e
xor esi, esi
mov dword [esp + 0x18], esi
mov byte [esp + 0x350], 1
mov dword [esp + 0x80], esi
mov byte [esp + 0x350], 3
lea ecx, [esp + 0xb4]
call fcn.004581e0
mov byte [esp + 0x350], 4
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xa0]
mov ecx, esi
push eax
call fcn.00458e40
mov ebp, dword [sym.imp.KERNEL32.dll_FindClose]
test al, al
jne 0x4de730
mov eax, dword [esi]
cmp eax, 0xffffffff
je 0x4de682
push eax
call ebp
test eax, eax
je 0x4de682
mov dword [esi], 0xffffffff
cmp dword [esp + 0x7c], 8
lea eax, [esp + 0x68]
mov dword [esp + 0x78], 0
lea edx, [esp + 0x68]
cmovae eax, dword [esp + 0x68]
xor ecx, ecx
mov word [eax], cx
mov ecx, 0x19
call fcn.0041ea20
test al, al
je 0x4de71f
push ebx
lea edx, [esp + 0x6c]
lea ecx, [esp + 0x3c]
call fcn.00422950
add esp, 4
mov byte [esp + 0x350], 5
lea ecx, [esp + 0x9c]
push eax
call fcn.004048a0
mov byte [esp + 0x350], 4
cmp dword [esp + 0x4c], 8
jb 0x4de6ed
push dword [esp + 0x38]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
mov word [esp + 0x38], ax
mov ecx, esi
lea eax, [esp + 0xb4]
mov dword [esp + 0x48], 0
push eax
lea eax, [esp + 0xa0]
push eax
call fcn.00458e40
test al, al
jne 0x4de730
xor bl, bl
jmp 0x4deb35
xor eax, eax
mov dword [esp + 0x60], 0
push 0xffffffffffffffff
push eax
mov word [esp + 0x58], ax
lea ecx, [esp + 0x58]
lea eax, [esp + 0xe4]
mov dword [esp + 0x6c], 0
push eax
mov dword [esp + 0x70], 7
mov dword [esp + 0x6c], 0
call fcn.00404c30
mov byte [esp + 0x350], 6
lea eax, [esp + 0x50]
push eax
lea edx, [esp + 0x6c]
lea ecx, [esp + 0x3c]
call fcn.00422950
add esp, 4
mov byte [esp + 0x350], 7
xor eax, eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
mov byte [esp + 0x350], 8
lea edx, [esp + 0x20]
lea ecx, [esp + 0x38]
call fcn.004df7b0
lea edx, [esp + 0x20]
lea ecx, [esp + 0x84]
call fcn.0042ded0
mov byte [esp + 0x350], 9
cmp dword [esp + 0x30], 0
je 0x4de86f
mov eax, dword [esp + 0x1c]
xor ebp, ebp
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4de86b
xor ebx, ebx
add esi, ebx
cmp dword [esi + 0x14], 8
jb 0x4de81b
mov esi, dword [esi]
lea ecx, [esp + 0x84]
call fcn.00404960
test esi, esi
jne 0x4de832
test eax, eax
sete al
jmp 0x4de83f
test eax, eax
je 0x4de847
mov edx, eax
mov ecx, esi
call fcn.0042fa70
test al, al
jne 0x4de9a1
mov eax, dword [esp + 0x1c]
inc ebp
add ebx, 0x18
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jb 0x4de811
mov esi, dword [esp + 0x18]
mov esi, dword [esi]
cmp esi, 0xffffffff
je 0x4dea5e
push 0x24c
lea eax, [esp + 0xfc]
mov dword [esp + 0xf8], 0
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [esp + 0xf4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
setne al
test al, al
je 0x4dea5e
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.00459080
mov byte [esp + 0x350], 8
cmp dword [esp + 0x98], 8
jb 0x4de8eb
push dword [esp + 0x84]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], 0
mov word [esp + 0x84], ax
mov byte [esp + 0x350], 7
cmp dword [esp + 0x34], 8
jb 0x4de923
push dword [esp + 0x20]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
mov byte [esp + 0x350], 6
cmp dword [esp + 0x4c], 8
jb 0x4de952
push dword [esp + 0x38]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
mov byte [esp + 0x350], 4
cmp dword [esp + 0x64], 8
jb 0x4de981
push dword [esp + 0x50]
call edi
add esp, 4
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x64], 7
mov dword [esp + 0x60], 0
mov word [esp + 0x50], ax
jmp 0x4de730
mov bl, 1
mov byte [esp + 0x350], 8
cmp dword [esp + 0x98], 8
jb 0x4de9c1
push dword [esp + 0x84]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], 0
mov word [esp + 0x84], ax
mov byte [esp + 0x350], 7
cmp dword [esp + 0x34], 8
jb 0x4de9f9
push dword [esp + 0x20]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
mov byte [esp + 0x350], 6
cmp dword [esp + 0x4c], 8
jb 0x4dea28
push dword [esp + 0x38]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
mov byte [esp + 0x350], 4
cmp dword [esp + 0x64], 8
jb 0x4dea57
push dword [esp + 0x50]
call edi
add esp, 4
xor eax, eax
jmp 0x4deb16
mov byte [esp + 0x350], 8
cmp dword [esp + 0x98], 8
jb 0x4dea7c
push dword [esp + 0x84]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], 0
mov word [esp + 0x84], ax
mov byte [esp + 0x350], 7
cmp dword [esp + 0x34], 8
jb 0x4deab4
push dword [esp + 0x20]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
mov byte [esp + 0x350], 6
cmp dword [esp + 0x4c], 8
jb 0x4deae3
push dword [esp + 0x38]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
mov byte [esp + 0x350], 4
cmp dword [esp + 0x64], 8
jb 0x4deb12
push dword [esp + 0x50]
call edi
add esp, 4
xor eax, eax
mov bl, al
mov esi, dword [esp + 0x18]
mov ebp, dword [sym.imp.KERNEL32.dll_FindClose]
mov word [esp + 0x50], ax
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 7
mov byte [esp + 0x350], 3
cmp dword [esp + 0xf0], 8
jb 0x4deb53
push dword [esp + 0xdc]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0xf0], 7
mov dword [esp + 0xec], 0
mov word [esp + 0xdc], ax
mov byte [esp + 0x350], 1
test esi, esi
je 0x4deb99
mov eax, dword [esi]
cmp eax, 0xffffffff
je 0x4deb93
push eax
call ebp
test eax, eax
je 0x4deb93
mov dword [esi], 0xffffffff
push esi
call edi
add esp, 4
mov dword [esp + 0x80], 0
mov byte [esp + 0x350], 0
cmp dword [esp + 0xb0], 8
jb 0x4debc2
push dword [esp + 0x9c]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0xb0], 7
mov dword [esp + 0xac], 0
mov word [esp + 0x9c], ax
mov dword [esp + 0x350], 0xffffffff
cmp dword [esp + 0x7c], 8
jb 0x4debfd
push dword [esp + 0x68]
call edi
add esp, 4
xor eax, eax
mov dword [esp + 0x7c], 7
mov word [esp + 0x68], ax
mov al, bl
mov dword [esp + 0x78], 0
mov ecx, dword [esp + 0x348]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x330]
xor ecx, esp
call fcn.00505b1e
add esp, 0x340
ret 8