Function at 0x4fa6c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x20
mov ecx, dword [esp + 0x28]
mov eax, 1
push ebx
push ebp
push esi
add ecx, 6
shl eax, cl
xor ecx, ecx
push edi
mov edi, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov eax, dword [edi + 0x78]
mov esi, dword [edi + 0x7c]
add eax, 0xc
lea esi, [eax + esi*4]
mov eax, dword [esp + 0x3c]
mov dword [eax], 0
test dword [edi + 0x80], 0xfffffffc
jbe 0x4facfa
mov eax, 2
mov dword [esp + 0x34], eax
xor edx, edx
mov dword [esp + 0x10], edx
cmp dword [edi + 0x7c], edx
jbe 0x4facd4
mov ebp, dword [esi]
test ebp, ebp
je 0x4facbb
mov ecx, dword [edi + 0x8c]
imul ecx, dword [esp + 0x18]
mov eax, dword [edi + 0x74]
add ecx, edx
lea eax, [eax + ecx*4]
mov dword [esp + 0x20], eax
test ebp, 0x200010
jne 0x4fa89b
and ebp, 0x1ef
je 0x4fa89b
mov eax, dword [eax]
mov ecx, dword [edi + 0x6c]
cdq
xor eax, edx
sub eax, edx
and eax, dword [esp + 0x14]
neg eax
sbb ebx, ebx
movzx eax, byte [ecx + ebp]
add eax, 7
neg ebx
cmp byte [esp + 0x40], 1
push ebx
push edi
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4fa78b
call fcn.004fc790
jmp 0x4fa790
call fcn.004fca30
add esp, 8
test ebx, ebx
je 0x4fa891
mov ebx, dword [esi - 4]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
and eax, 0x80000
shr ebx, 2
and ebx, 0x20000
or ebx, eax
mov eax, ecx
and eax, 0x400000
shr ebx, 1
or ebx, eax
mov eax, ecx
and eax, 0x40000
shr ebx, 2
or ebx, eax
and ecx, 0xaa
mov eax, dword [esp + 0x20]
shr ebx, 0xe
or ebx, ecx
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
cdq
movzx ebp, byte [ebx + 0x57a1f8]
sets cl
xor eax, edx
mov dword [esp + 0x1c], ecx
sub eax, edx
mov edx, dword [esp + 0x38]
test edx, edx
je 0x4fa80f
mov ecx, edx
shr eax, cl
mov ecx, dword [esp + 0x1c]
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a3f8]
jmp 0x4fa81a
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a4f8]
mov edx, dword [esp + 0x3c]
cwde
add dword [edx], eax
lea eax, [edi + 0x1c]
cmp byte [esp + 0x40], 1
lea eax, [eax + ebp*4]
mov dword [edi + 0x68], eax
jne 0x4fa83a
push ecx
push edi
call fcn.004fc790
jmp 0x4fa84a
movzx eax, byte [ebx + 0x57a2f8]
xor eax, ecx
push eax
push edi
call fcn.004fca30
mov edx, dword [esp + 0x24]
add esp, 8
mov ecx, dword [edi + 0x7c]
mov eax, edx
or dword [esi - 4], 0x20
shl eax, 0x13
or eax, 0x10
or dword [esi], eax
or dword [esi + 4], 8
test byte [esp + 0x44], 8
jne 0x4fa891
lea eax, [ecx*4 + 8]
shl edx, 0x1f
mov ecx, esi
or edx, 0x10000
sub ecx, eax
or dword [ecx], edx
or dword [ecx - 4], 0x20000
or dword [ecx + 4], 0x8000
or dword [esi], 0x200000
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
mov eax, dword [edi + 0x74]
dec ecx
imul ecx, dword [edi + 0x8c]
add ecx, edx
lea ebp, [eax + ecx*4]
mov ecx, dword [esi]
test ecx, 0x1000080
jne 0x4fa9f1
test ecx, 0xf78
je 0x4fa9f1
mov eax, dword [ebp]
cdq
xor eax, edx
sub eax, edx
and eax, dword [esp + 0x14]
neg eax
sbb ebx, ebx
mov eax, dword [edi + 0x6c]
shr ecx, 3
neg ebx
and ecx, 0x1ef
push ebx
push edi
movzx eax, byte [ecx + eax]
add eax, 7
cmp byte [esp + 0x48], 1
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4fa904
call fcn.004fc790
jmp 0x4fa909
call fcn.004fca30
add esp, 8
test ebx, ebx
je 0x4fa9e7
mov ebx, dword [esi - 4]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
and eax, 0x400000
shr ebx, 2
and ebx, 0x100000
or ebx, eax
mov eax, ecx
and eax, 0x2000000
shr ebx, 1
or ebx, eax
mov eax, ecx
and eax, 0x80000
shr ebx, 4
or ebx, eax
and ecx, 0x550
shr ebx, 0xc
or ebx, ecx
xor ecx, ecx
shr ebx, 3
movzx eax, byte [ebx + 0x57a1f8]
mov dword [esp + 0x20], eax
mov eax, dword [ebp]
test eax, eax
cdq
sets cl
xor eax, edx
sub eax, edx
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x38]
test edx, edx
je 0x4fa98c
mov ecx, edx
shr eax, cl
mov ecx, dword [esp + 0x1c]
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a3f8]
jmp 0x4fa997
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a4f8]
mov edx, dword [esp + 0x3c]
cwde
add dword [edx], eax
mov eax, dword [esp + 0x20]
add eax, 7
cmp byte [esp + 0x40], 1
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4fa9bb
push ecx
push edi
call fcn.004fc790
jmp 0x4fa9cb
movzx eax, byte [ebx + 0x57a2f8]
xor eax, ecx
push eax
push edi
call fcn.004fca30
mov eax, dword [esp + 0x24]
add esp, 8
or dword [esi - 4], 0x100
shl eax, 0x16
or eax, 0x80
or dword [esi], eax
or dword [esi + 4], 0x40
or dword [esi], 0x1000000
mov edx, dword [esp + 0x10]
mov ecx, dword [edi + 0x8c]
imul ecx, dword [esp + 0x34]
mov eax, dword [edi + 0x74]
add ecx, edx
lea ebp, [eax + ecx*4]
mov ecx, dword [esi]
test ecx, 0x8000400
jne 0x4fab49
test ecx, 0x7bc0
je 0x4fab49
mov eax, dword [ebp]
cdq
xor eax, edx
sub eax, edx
and eax, dword [esp + 0x14]
neg eax
sbb ebx, ebx
mov eax, dword [edi + 0x6c]
shr ecx, 6
neg ebx
and ecx, 0x1ef
push ebx
push edi
movzx eax, byte [ecx + eax]
add eax, 7
cmp byte [esp + 0x48], 1
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4faa59
call fcn.004fc790
jmp 0x4faa5e
call fcn.004fca30
add esp, 8
test ebx, ebx
je 0x4fab3f
mov ebx, dword [esi - 4]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
and eax, 0x2000000
shr ebx, 2
and ebx, 0x800000
or ebx, eax
mov eax, ecx
and eax, 0x10000000
shr ebx, 1
or ebx, eax
mov eax, ecx
and eax, 0x400000
shr ebx, 4
or ebx, eax
and ecx, 0x2a80
shr ebx, 0xc
or ebx, ecx
xor ecx, ecx
shr ebx, 6
movzx eax, byte [ebx + 0x57a1f8]
mov dword [esp + 0x20], eax
mov eax, dword [ebp]
test eax, eax
cdq
sets cl
xor eax, edx
sub eax, edx
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x38]
test edx, edx
je 0x4faae1
mov ecx, edx
shr eax, cl
mov ecx, dword [esp + 0x1c]
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a3f8]
jmp 0x4faaec
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a4f8]
mov edx, dword [esp + 0x3c]
cwde
add dword [edx], eax
mov eax, dword [esp + 0x20]
add eax, 7
cmp byte [esp + 0x40], 1
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4fab10
push ecx
push edi
call fcn.004fc790
jmp 0x4fab20
movzx eax, byte [ebx + 0x57a2f8]
xor eax, ecx
push eax
push edi
call fcn.004fca30
mov eax, dword [esp + 0x24]
add esp, 8
or dword [esi - 4], 0x800
shl eax, 0x19
or eax, 0x400
or dword [esi], eax
or dword [esi + 4], 0x200
or dword [esi], 0x8000000
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
mov eax, dword [edi + 0x74]
inc ecx
imul ecx, dword [edi + 0x8c]
add ecx, edx
lea ebp, [eax + ecx*4]
mov ecx, dword [esi]
test ecx, 0x40002000
jne 0x4facbb
test ecx, 0x3de00
je 0x4facbb
mov eax, dword [ebp]
cdq
xor eax, edx
sub eax, edx
and eax, dword [esp + 0x14]
neg eax
sbb ebx, ebx
mov eax, dword [edi + 0x6c]
shr ecx, 9
neg ebx
and ecx, 0x1ef
push ebx
push edi
movzx eax, byte [ecx + eax]
add eax, 7
cmp byte [esp + 0x48], 1
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4fabb2
call fcn.004fc790
jmp 0x4fabb7
call fcn.004fca30
add esp, 8
test ebx, ebx
je 0x4facb1
mov ebx, dword [esi - 4]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
and eax, 0x10000000
shr ebx, 2
and ebx, 0x4000000
or ebx, eax
mov eax, ecx
and eax, 0x81ffffff
shr ebx, 1
or ebx, eax
mov eax, ecx
and eax, 0x2000000
shr ebx, 4
or ebx, eax
and ecx, 0x15400
shr ebx, 0xc
or ebx, ecx
xor ecx, ecx
shr ebx, 9
movzx eax, byte [ebx + 0x57a1f8]
mov dword [esp + 0x20], eax
mov eax, dword [ebp]
test eax, eax
cdq
sets cl
xor eax, edx
sub eax, edx
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x38]
test edx, edx
je 0x4fac3a
mov ecx, edx
shr eax, cl
mov ecx, dword [esp + 0x1c]
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a3f8]
jmp 0x4fac45
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a4f8]
mov edx, dword [esp + 0x3c]
cwde
add dword [edx], eax
mov eax, dword [esp + 0x20]
add eax, 7
cmp byte [esp + 0x40], 1
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4fac69
push ecx
push edi
call fcn.004fc790
jmp 0x4fac79
movzx eax, byte [ebx + 0x57a2f8]
xor eax, ecx
push eax
push edi
call fcn.004fca30
mov ecx, dword [edi + 0x7c]
add esp, 8
mov edx, dword [esp + 0x1c]
mov eax, edx
or dword [esi - 4], 0x4000
shl eax, 0x1c
or eax, 0x2000
shl edx, 0x12
or dword [esi], eax
or edx, 2
or dword [esi + 4], 0x1000
or dword [esi + ecx*4 + 8], edx
or dword [esi + ecx*4 + 4], 4
or dword [esi + ecx*4 + 0xc], 1
or dword [esi], 0x40000000
mov edx, dword [esp + 0x10]
inc edx
add esi, 4
mov dword [esp + 0x10], edx
cmp edx, dword [edi + 0x7c]
jb 0x4fa721
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
add eax, 4
add ecx, 4
mov dword [esp + 0x34], eax
add esi, 8
mov eax, dword [edi + 0x80]
and eax, 0xfffffffc
mov dword [esp + 0x18], ecx
cmp ecx, eax
mov eax, dword [esp + 0x34]
jb 0x4fa712
mov eax, dword [edi + 0x80]
cmp ecx, eax
jae 0x4faf56
xor ebx, ebx
mov dword [esp + 0x10], ebx
cmp dword [edi + 0x7c], ebx
jbe 0x4faf56
cmp dword [esi], 0
je 0x4faf45
mov edx, ecx
mov dword [esp + 0x20], edx
cmp ecx, eax
jae 0x4faf45
mov dword [esp + 0x34], 0
xor ebp, ebp
cmp edx, ecx
jne 0x4fad4b
test byte [esp + 0x44], 8
mov dword [esp + 0x1c], 1
jne 0x4fad53
mov dword [esp + 0x1c], 0
mov ecx, dword [edi + 0x8c]
mov eax, dword [edi + 0x74]
imul ecx, edx
mov edx, dword [esi]
mov dword [esp + 0x24], edx
add ecx, ebx
lea ebx, [eax + ecx*4]
mov eax, 0x200010
mov ecx, ebp
mov dword [esp + 0x28], ebx
shl eax, cl
test edx, eax
jne 0x4faf1f
mov eax, 0x1ef
shl eax, cl
test edx, eax
je 0x4faf1f
mov eax, dword [ebx]
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x24]
and eax, dword [esp + 0x14]
neg eax
sbb ebx, ebx
mov eax, dword [edi + 0x6c]
shr edx, cl
neg ebx
and edx, 0x1ef
push ebx
push edi
movzx eax, byte [edx + eax]
add eax, 7
cmp byte [esp + 0x48], 1
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4fadcb
call fcn.004fc790
jmp 0x4fadd0
call fcn.004fca30
add esp, 8
test ebx, ebx
je 0x4faf14
mov edx, dword [esi - 4]
lea ecx, [ebp + 0x13]
mov eax, dword [esi + 4]
mov ebx, dword [esi]
shr edx, cl
lea ecx, [ebp + 0x11]
shr eax, cl
and edx, 1
and eax, 4
mov ecx, ebp
or edx, eax
mov eax, ebx
shr eax, cl
and eax, 0xaa
or edx, eax
cmp dword [esp + 0x34], 0
mov eax, ebx
jne 0x4fae10
shr eax, 0xe
jmp 0x4fae15
lea ecx, [ebp + 0xc]
shr eax, cl
and eax, 0x10
lea ecx, [ebp + 0x10]
or edx, eax
shr ebx, cl
mov ecx, dword [esp + 0x38]
and ebx, 0x40
or ebx, edx
mov dword [esp + 0x2c], ebx
movzx eax, byte [ebx + 0x57a1f8]
xor ebx, ebx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
test eax, eax
cdq
sets bl
xor eax, edx
sub eax, edx
test ecx, ecx
je 0x4fae5c
shr eax, cl
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a3f8]
jmp 0x4fae67
and eax, 0x7f
movzx eax, word [eax*2 + 0x57a4f8]
mov ecx, dword [esp + 0x3c]
cwde
add dword [ecx], eax
mov eax, dword [esp + 0x24]
add eax, 7
cmp byte [esp + 0x40], 1
lea eax, [edi + eax*4]
mov dword [edi + 0x68], eax
jne 0x4fae8b
push ebx
push edi
call fcn.004fc790
jmp 0x4fae9f
mov eax, dword [esp + 0x2c]
movzx eax, byte [eax + 0x57a2f8]
xor eax, ebx
push eax
push edi
call fcn.004fca30
mov edx, dword [edi + 0x7c]
mov ecx, ebp
mov eax, 0x20
add esp, 8
shl eax, cl
or dword [esi - 4], eax
mov eax, ebx
shl eax, 0x13
or eax, 0x10
shl eax, cl
or dword [esi], eax
mov eax, 8
shl eax, cl
or dword [esi + 4], eax
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x4faefb
cmp dword [esp + 0x1c], eax
jne 0x4faf14
lea eax, [edx*4 + 8]
shl ebx, 0x1f
mov ecx, esi
or ebx, 0x10000
sub ecx, eax
or dword [ecx], ebx
or dword [ecx - 4], 0x20000
or dword [ecx + 4], 0x8000
jmp 0x4faf14
cmp eax, 3
jne 0x4faf14
shl ebx, 0x12
or ebx, 2
or dword [esi + edx*4 + 8], ebx
or dword [esi + edx*4 + 4], 4
or dword [esi + edx*4 + 0xc], 1
mov eax, 0x200000
mov ecx, ebp
shl eax, cl
or dword [esi], eax
mov edx, dword [esp + 0x20]
add ebp, 3
inc dword [esp + 0x34]
inc edx
mov eax, dword [edi + 0x80]
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x20], edx
cmp edx, eax
jb 0x4fad38
inc ebx
add esi, 4
mov dword [esp + 0x10], ebx
cmp ebx, dword [edi + 0x7c]
jb 0x4fad17
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret