Function at 0x4facf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x98d270]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x30]
cmp eax, dword [ecx + 8]
jbe 0x4fb4a9
sub esp, 0xb0
mov eax, dword [esp + 0xc8]
test eax, eax
je 0x4fad4d
movzx ecx, byte [esp + 0xcc]
test cl, cl
jne 0x4fad35
lea edx, [eax - 2]
cmp edx, 0x3c
jbe 0x4fad4d
test cl, cl
je 0x4fb417
cmp eax, 2
je 0x4fad4d
cmp eax, 8
je 0x4fad4d
cmp eax, 0xa
je 0x4fad4d
cmp eax, 0x10
jne 0x4fb417
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0xc8]
test ebx, ebx
jne 0x4faef5
test ecx, ecx
je 0x4fad9f
mov esi, 0xa
mov ebp, 0x2e
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x34], ebp
mov ebp, 0x2e
jmp 0x4faee8
cmp al, 0x30
je 0x4fadc0
mov esi, 0xa
mov ebp, 0x2e
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x34], ebp
mov ebp, 0x2e
jmp 0x4faee8
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 8]
movzx ecx, byte [esp + 4]
mov edx, dword [esp + 0xc]
test eax, eax
je 0x4fae00
movzx ebx, byte [esp + 0xcc]
mov esi, 0xa
mov edi, 1
xor ebp, ebp
jmp 0x4faecd
cmp cl, 0x58
ja 0x4fae16
cmp cl, 0x42
je 0x4fae1b
cmp cl, 0x4f
je 0x4fae34
cmp cl, 0x58
je 0x4fae4d
jmp 0x4fae61
cmp cl, 0x62
jne 0x4fae2f
movzx ebx, byte [esp + 0xcc]
mov ebp, 0x62
mov esi, 2
jmp 0x4fae80
cmp cl, 0x6f
jne 0x4fae48
movzx ebx, byte [esp + 0xcc]
mov ebp, 0x6f
mov esi, 8
jmp 0x4fae80
cmp cl, 0x78
jne 0x4fae61
movzx ebx, byte [esp + 0xcc]
mov ebp, 0x78
mov esi, 0x10
jmp 0x4fae80
movzx ebx, byte [esp + 0xcc]
test bl, bl
je 0x4fae76
xor ebp, ebp
mov esi, 0xa
jmp 0x4fae80
mov ebp, 0x30
mov esi, 8
test ebp, ebp
je 0x4faec8
cmp ebp, 0x30
je 0x4faec4
mov dword [esp + 0x34], ebp
mov dword [esp + 0x5c], esi
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
movzx ecx, byte [esp + 4]
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
movzx ebx, byte [esp + 0xcc]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x5c]
xor edi, edi
jmp 0x4faecd
mov edi, 1
mov ebx, dword [esp + 0xc8]
mov dword [esp + 0x34], ebp
mov ebp, 0x30
mov ebp, ecx
mov ecx, eax
mov eax, ebp
mov ebp, 0x30
mov ebx, esi
mov esi, ebp
mov ebp, dword [esp + 0xc8]
jmp 0x4faf06
mov ebp, ebx
mov esi, 0x2e
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x34], ebx
mov ebx, ebp
test ebx, ebx
je 0x4fb412
mov dword [esp + 0xa4], edx
mov byte [esp + 0x2e], al
mov eax, 0xffffffff
xor edx, edx
div ebx
mov edx, ebx
mov edx, 1
mov dword [esp + 0x3c], edx
mov edx, ebx
jmp 0x4faf44
imul ebx, edx
mov ebp, dword [esp + 0x3c]
inc ebp
mov dword [esp + 0x3c], ebp
mov ebp, dword [esp + 0xc8]
cmp ebx, eax
jbe 0x4faf31
mov dword [esp + 0x38], ebx
mov dword [esp + 0x5c], edx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x98], eax
movzx eax, byte [esp + 0xcc]
mov byte [esp + 0x2f], al
mov dword [esp + 0x90], ecx
xor ecx, ecx
mov byte [esp + 0x2d], cl
xor ecx, ecx
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x80], ebx
xor ebx, ebx
mov dword [esp + 0x54], ebx
xor ebx, ebx
mov dword [esp + 0x48], ebx
mov ebx, 0xffffffff
mov dword [esp + 0x44], ebx
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x80]
jmp 0x4fb046
mov dword [esp + 0x4c], edi
mov dword [esp + 0x30], esi
mov byte [esp + 0x2d], cl
mov byte [esp + 0x2f], bl
mov eax, dword [esp + 0xc0]
mov edx, dword [eax + 0x10]
mov ebp, dword [esp + 0xc4]
mov dword [esp], ebp
call edx
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
movzx eax, byte [esp + 4]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0xc0]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0xc8]
mov dword [esp + 0xa4], edx
mov byte [esp + 0x2e], al
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x30], esi
test ecx, ecx
jne 0x4fb214
movzx ecx, byte [esp + 0x2e]
cmp cl, 0x2e
jne 0x4fb08a
movzx ebx, byte [esp + 0x2f]
test bl, bl
je 0x4fb08f
cmp esi, 0x5f
sete cl
movzx ebx, byte [esp + 0x2d]
or ecx, ebx
xor ebx, ebx
mov esi, 0x2e
mov dword [esp + 0x44], edi
jmp 0x4fafd4
movzx ebx, byte [esp + 0x2f]
cmp cl, 0x5f
jne 0x4fb0d3
test ebp, ebp
jne 0x4fb0d3
cmp esi, 0x30
setne cl
movzx esi, byte [esp + 0x2d]
or ecx, esi
mov byte [esp + 0x2d], cl
mov esi, 0x5f
mov dword [esp + 0x30], esi
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x70]
jmp 0x4fb1c8
lea esi, [ecx - 0x30]
xchg esi, eax
cmp al, 9
xchg esi, eax
ja 0x4fb0e4
xchg esi, eax
movzx ecx, al
xchg esi, eax
jmp 0x4fb11e
lea esi, [ecx - 0x61]
xchg esi, eax
cmp al, 0x19
xchg esi, eax
ja 0x4fb0f8
lea esi, [ecx - 0x57]
xchg esi, eax
movzx ecx, al
xchg esi, eax
jmp 0x4fb11e
lea esi, [ecx - 0x41]
xchg esi, eax
cmp al, 0x19
xchg esi, eax
ja 0x4fb119
cmp edx, 0x24
jg 0x4fb10f
add ecx, 0xffffffc9
movzx ecx, cl
jmp 0x4fb11e
lea esi, [ecx - 0x1d]
xchg esi, eax
movzx ecx, al
xchg esi, eax
jmp 0x4fb11e
mov ecx, 0x3f
cmp ecx, edx
jae 0x4fb1ee
mov esi, dword [esp + 0x48]
imul esi, edx
mov edx, dword [esp + 0x40]
inc edx
add ecx, esi
cmp eax, edx
je 0x4fb14e
mov esi, dword [esp + 0x58]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x78]
jmp 0x4fb1b6
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov edx, dword [esp + 0x54]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
call fcn.004f4a10
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
movzx ebx, byte [esp + 0x2f]
mov ebp, dword [esp + 0xc8]
mov edi, dword [esp + 0x4c]
mov esi, edx
mov dword [esp + 0x58], ecx
xor ecx, ecx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x3c]
xor edx, edx
inc edi
mov dword [esp + 0x68], eax
mov eax, 0x30
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x40], edx
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], esi
mov dword [esp + 0x48], ecx
movzx ecx, byte [esp + 0x2d]
mov esi, dword [esp + 0x30]
jmp 0x4fafd4
mov eax, dword [esp + 0xc0]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0xc4]
mov dword [esp], ecx
call eax
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
cmp dword [0x95dc50], ecx
je 0x4fb225
mov eax, dword [esp + 0xa4]
jmp 0x4fb274
mov eax, dword [0x95dc54]
mov dword [esp], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004042b0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4fb25d
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
xor ecx, ecx
xor eax, eax
jmp 0x4fb274
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0xa4]
test ecx, ecx
jne 0x4fb292
movzx ebx, byte [esp + 0x2d]
test bl, bl
jne 0x4fb286
cmp esi, 0x5f
jne 0x4fb292
mov ecx, dword [0x95df40]
mov eax, dword [0x95df44]
test edi, edi
jne 0x4fb2fc
mov ebx, dword [esp + 0x34]
cmp ebx, 0x30
je 0x4fb2ad
mov ecx, dword [0x95df38]
mov eax, dword [0x95df3c]
jmp 0x4fb2fc
mov edx, dword [esp + 0xa0]
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], 0
mov edx, dword [esp + 0x58]
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], 0xa
mov dword [esp + 0xe0], 1
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xb0
ret
mov dword [esp + 0xa4], eax
mov ebx, dword [esp + 0x40]
test ebx, ebx
jle 0x4fb317
mov ebp, edx
mov esi, 1
jmp 0x4fb3a2
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x54]
jmp 0x4fb330
dec esi
mov eax, dword [esp + 0xa4]
test esi, esi
jle 0x4fb343
mov eax, dword [ebp + esi*4 - 4]
test eax, eax
je 0x4fb328
mov eax, dword [esp + 0xa4]
cmp esi, ebx
ja 0x4fb394
mov eax, dword [esp + 0x44]
test eax, eax
jl 0x4fb353
sub eax, edi
jmp 0x4fb355
mov eax, edi
mov dword [esp + 0xd0], ebp
mov dword [esp + 0xd4], esi
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xe8], eax
add esp, 0xb0
ret
mov ecx, esi
mov edx, ebx
call fcn.00468a40
imul edx, edx
sar ebx, 1
test ebx, ebx
jle 0x4fb3b3
test ebx, 1
je 0x4fb39d
imul esi, edx
jmp 0x4fb39d
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0x54]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], eax
call fcn.004f4a10
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x5c]
mov edi, dword [esp + 0x4c]
jmp 0x4fb326
call fcn.00437490
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp], eax
call fcn.00409c20
mov eax, dword [esp + 4]
lea ecx, [0x6bd2e0]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
lea eax, [0x7139e2]
mov dword [esp], eax
mov dword [esp + 4], 0x16
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c5a30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409d30
mov eax, dword [esp + 8]
lea ecx, [0x6bd160]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004385d0
nop
call fcn.00467590
jmp fcn.004facf0