Function at 0x4fa7c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x4faf81
sub esp, 0x9c
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x4faa72
cmp ecx, 1
jne 0x4fa856
mov ebx, dword [esp + 0xac]
mov eax, dword [ebx]
mov ebx, dword [esp + 0xa8]
cmp ebx, 2
jl 0x4fa812
mov ecx, dword [esp + 0xa0]
jmp 0x4fa843
mov dword [esp + 0x78], eax
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 6
call fcn.0044b780
mov eax, dword [esp + 0xc]
mov ecx, eax
mov ebx, 6
mov eax, dword [esp + 0x78]
mul eax
nop
nop
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov eax, 2
jmp 0x4faf37
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x4fa888
mov ebx, dword [esp + 0xa0]
lea ebp, [ebx + eax*4 - 4]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
lea edi, [esi + edx*4 - 4]
cmp edi, ebp
jne 0x4fa89d
xor eax, eax
xor ebx, ebx
jmp 0x4fa89d
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov ebx, dword [esp + 0xa0]
cmp dword [0x8a73d0], ecx
jg 0x4fa996
mov ebp, dword [0x8a73d4]
cmp ecx, ebp
jl 0x4fa8c3
nop
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x74], ecx
mov ecx, edi
jmp 0x4fab52
mov ebp, ecx
shl ecx, 1
cmp eax, ecx
jl 0x4fa8d6
jae 0x4fa952
jmp 0x4fab39
cmp ecx, 1
jne 0x4fa917
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b780
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, 1
mov ecx, 1
jmp 0x4fa952
mov dword [esp + 0x68], ecx
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x3c], eax
mov dword [esp + 8], eax
call fcn.0044b780
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x84], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov esi, dword [esp + 0xac]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
call fcn.004fa0b0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x84]
mov edx, eax
jmp 0x4faaf2
mov ebp, ecx
shl ecx, 1
cmp eax, ecx
jl 0x4fa9a9
jae 0x4faa25
jmp 0x4faae9
cmp ecx, 1
jne 0x4fa9ea
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b780
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, 1
mov ecx, 1
jmp 0x4faa25
mov dword [esp + 0x6c], ecx
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x40], eax
mov dword [esp + 8], eax
call fcn.0044b780
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x88], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov esi, dword [esp + 0xac]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], edx
call fcn.004f8810
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x88]
mov edx, eax
jmp 0x4faaa2
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc0], eax
add esp, 0x9c
ret
mov eax, ebx
test eax, eax
jle 0x4faab5
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x4faae0
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4faaa0
mov edx, dword [esp + 0x40]
cmp eax, edx
ja 0x4faad9
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, eax
call fcn.00463190
mov eax, ebx
mov ecx, edx
call fcn.00463150
mov edx, eax
call fcn.00463190
mov eax, ebx
test eax, eax
jle 0x4fab05
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x4fab30
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4faaf0
mov edx, dword [esp + 0x3c]
cmp eax, edx
ja 0x4fab29
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, eax
call fcn.00463190
mov eax, ebx
mov ecx, edx
call fcn.00463150
mov edx, eax
call fcn.00463190
sar ecx, 1
mov esi, dword [esp + 0x74]
inc esi
mov dword [esp + 0x74], esi
mov esi, dword [esp + 0xac]
cmp ecx, ebp
jg 0x4fab40
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x64], ecx
mov ebp, dword [esp + 0x74]
cmp ebp, 0x20
sbb esi, esi
mov ecx, ebp
mov ebx, dword [esp + 0x64]
shl ebx, cl
and esi, ebx
cmp edx, esi
jb 0x4faf2e
lea ebx, [esi + esi*2]
shl ebx, 1
mov ebp, edi
shl edi, 1
cmp edi, ebx
jl 0x4fab8b
mov ebx, edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x50], edi
cmp ebx, eax
jg 0x4faba6
ja 0x4faf25
mov ecx, dword [esp + 0x8c]
jmp 0x4fac20
cmp ebx, 1
jne 0x4fabe6
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b780
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0x48]
mov eax, 1
mov ecx, ebx
mov ebx, 1
jmp 0x4fac20
mov dword [esp + 0x44], ebx
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 8], eax
call fcn.0044b780
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0x48]
mov eax, dword [esp + 0x38]
mov ecx, ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x4c], eax
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov ebx, dword [esp + 0xac]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edx
call fcn.004fa3a0
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
cmp edx, ecx
jb 0x4faf20
mov eax, dword [esp + 0x48]
mov ebx, eax
shl eax, 1
cmp eax, ecx
ja 0x4faf1b
mov dword [esp + 0x7c], eax
mov ebp, ecx
sub ecx, eax
mov esi, edx
sub edx, eax
neg edx
mov edi, ebx
shl ebx, 3
sar edx, 0x1f
and ebx, edx
mov edx, esi
mov esi, dword [esp + 0x80]
add ebx, esi
test ecx, ecx
je 0x4facbb
mov dword [esp], ebx
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.00463890
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x48]
mov ebx, dword [esp + 0xb0]
cmp ebx, edi
jle 0x4faec0
mov dword [esp], eax
call fcn.004faf90
mov eax, dword [esp + 4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov dword [esp + 0x60], ebx
nop
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0x48]
mov edi, esi
jmp 0x4facf8
mov esi, ebx
mov ebx, dword [esp + 0x60]
test esi, esi
jle 0x4fad1b
lea ebx, [esi - 1]
cmp edi, ebx
jbe 0x4faf12
mov dword [esp + 0x70], esi
mov esi, dword [ebp + esi*4 - 4]
test esi, esi
je 0x4facf2
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x70]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xb4]
cmp eax, esi
jb 0x4faf09
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
sub eax, edi
mov dword [esp + 0x58], eax
mov ecx, eax
neg eax
mov edx, edi
shl edi, 2
sar eax, 0x1f
and edi, eax
lea eax, [ebp + edi]
mov dword [esp + 0x90], eax
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0xb0]
sub ebx, edx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ecx
call fcn.004f96e0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x50]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x48]
mov dword [esp + 0x18], edi
call fcn.004f95d0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x60]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x18], edi
call fcn.004f95d0
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x14], eax
call fcn.004fa7c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x50]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x18], eax
call fcn.004f95d0
lea eax, [0x8e7010]
mov dword [esp], eax
lea eax, [0x6cb2c0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 8], eax
call fcn.0046aaf0
mov edx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
mov eax, ebp
jmp 0x4faec6
mov ebp, ebx
test ebp, ebp
jle 0x4faed9
lea ebx, [ebp - 1]
cmp eax, ebx
jbe 0x4faf00
mov edi, dword [esi + ebp*4 - 4]
test edi, edi
je 0x4faec4
cmp ebp, edx
ja 0x4faef9
mov dword [esp + 0xb8], esi
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, ebp
call fcn.00463190
mov ecx, eax
mov eax, ebx
call fcn.00463150
mov ecx, esi
mov edx, eax
call fcn.00463190
mov eax, ebx
mov ecx, edi
call fcn.00463150
call fcn.004631b0
call fcn.00463190
mov ecx, ebx
mov edx, eax
call fcn.00463190
mov ecx, esi
call fcn.00463190
mov eax, ebp
test eax, eax
jle 0x4faf4b
lea ebp, [eax - 1]
cmp ebp, 2
jae 0x4faf74
mov esi, dword [ecx + eax*4 - 4]
test esi, esi
je 0x4faf35
cmp eax, ebx
ja 0x4faf6b
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ebx
add esp, 0x9c
ret
mov ecx, eax
mov edx, ebx
call fcn.00463190
mov eax, ebp
mov ecx, 2
call fcn.00463150
nop
call fcn.00461cc0
jmp fcn.004fa7c0