Function at 0x4f6df0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8c
mov eax, dword [0x5d26e8]
xor eax, esp
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0x98]
mov dword [esp + 4], eax
xor eax, eax
movzx ecx, ax
push ebx
mov ebx, dword [esp + 0xa4]
mov eax, ecx
shl ecx, 0x10
or eax, ecx
push ebp
mov ebp, dword [esp + 0xa4]
push esi
mov esi, dword [esp + 0xa0]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x4c], esi
mov dword [esp + 0x38], ebp
mov dword [esp + 0x48], ebx
test edx, edx
jbe 0x4f6e82
lea esp, [esp]
movzx ecx, word [esi + eax*2]
inc word [esp + ecx*2 + 0x54]
lea ecx, [esp + ecx*2 + 0x54]
inc eax
cmp eax, edx
jb 0x4f6e70
mov eax, dword [ebx]
mov dword [esp + 0x14], eax
mov edx, 0xf
lea ecx, [ecx]
cmp word [esp + edx*2 + 0x54], 0
jne 0x4f6e9e
dec edx
cmp edx, 1
jae 0x4f6e90
mov dword [esp + 0x24], edx
cmp eax, edx
jbe 0x4f6eac
mov dword [esp + 0x14], edx
mov eax, edx
test edx, edx
jne 0x4f6ef5
mov ecx, dword [ebp]
mov byte [esp + 0xc], 0x40
mov byte [esp + 0xd], 1
mov word [esp + 0xe], dx
mov eax, dword [esp + 0xc]
mov dword [ecx], eax
add dword [ebp], 4
mov ecx, dword [ebp]
mov dword [ecx], eax
add dword [ebp], 4
pop esi
pop ebp
mov dword [ebx], 1
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x88]
xor ecx, esp
call fcn.004cdc91
add esp, 0x8c
ret
mov ebx, 1
cmp edx, ebx
jbe 0x4f6f0d
mov edi, edi
cmp word [esp + ebx*2 + 0x54], 0
jne 0x4f6f0d
inc ebx
cmp ebx, edx
jb 0x4f6f00
cmp eax, ebx
jae 0x4f6f15
mov dword [esp + 0x14], ebx
mov ecx, 1
mov eax, ecx
push edi
lea ecx, [ecx]
movzx edi, word [esp + eax*2 + 0x58]
add ecx, ecx
sub ecx, edi
js 0x4f6f45
inc eax
cmp eax, 0xf
jbe 0x4f6f20
mov edi, dword [esp + 0xa0]
test ecx, ecx
jle 0x4f6f4d
test edi, edi
je 0x4f6f45
cmp edx, 1
je 0x4f6f4d
or eax, 0xffffffff
jmp 0x4f7273
xor edx, edx
mov word [esp + 0x7a], dx
mov eax, 2
lea esp, [esp]
mov cx, word [esp + eax + 0x78]
add cx, word [esp + eax + 0x58]
add eax, 2
mov word [esp + eax + 0x78], cx
cmp eax, 0x1e
jb 0x4f6f60
xor eax, eax
cmp dword [esp + 0xa8], eax
jbe 0x4f6fb1
cmp word [esi + eax*2], 0
je 0x4f6fa7
movzx edx, word [esi + eax*2]
movzx ecx, word [esp + edx*2 + 0x78]
mov edx, dword [esp + 0x14]
mov word [edx + ecx*2], ax
movzx ecx, word [esi + eax*2]
inc word [esp + ecx*2 + 0x78]
lea ecx, [esp + ecx*2 + 0x78]
inc eax
cmp eax, dword [esp + 0xa8]
jb 0x4f6f82
mov eax, edi
xor ecx, ecx
sub eax, ecx
je 0x4f6fee
sub eax, 1
je 0x4f6fd4
mov dword [esp + 0x2c], 0x5972f0
mov dword [esp + 0x34], 0x597330
mov dword [esp + 0x30], ecx
jmp 0x4f7002
mov dword [esp + 0x2c], 0x597270
mov dword [esp + 0x34], 0x5972b0
mov dword [esp + 0x30], 0x101
jmp 0x4f7002
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], 0x14
mov eax, dword [ebp]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x18]
mov eax, 1
shl eax, cl
or ebp, 0xffffffff
lea ecx, [eax - 1]
mov dword [esp + 0x40], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x48], ecx
cmp edi, 1
jne 0x4f703a
cmp eax, 0x354
jmp 0x4f7044
cmp edi, 2
jne 0x4f704a
cmp eax, 0x250
ja 0x4f726e
mov edx, dword [esp + 0x14]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x30]
mov al, bl
sub al, dl
mov byte [esp + 0x11], al
movzx eax, word [ecx]
movzx ecx, ax
lea edi, [ecx + 1]
cmp edi, esi
jae 0x4f707f
mov byte [esp + 0x10], 0
mov word [esp + 0x12], ax
jmp 0x4f70b4
cmp ecx, esi
jb 0x4f70a8
mov eax, dword [esp + 0x14]
movzx eax, word [eax]
mov ecx, dword [esp + 0x34]
sub eax, esi
add eax, eax
mov cl, byte [eax + ecx]
mov byte [esp + 0x10], cl
mov ecx, dword [esp + 0x2c]
mov ax, word [eax + ecx]
mov word [esp + 0x12], ax
jmp 0x4f70b4
xor ecx, ecx
mov byte [esp + 0x10], 0x60
mov word [esp + 0x12], cx
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x40]
mov ecx, ebx
sub ecx, edx
mov edx, 1
shl edx, cl
mov ecx, dword [esp + 0x1c]
shr edi, cl
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x54], eax
lea esi, [edx*4]
add edi, eax
lea ecx, [ecx + edi*4]
mov edi, dword [esp + 0x10]
sub eax, edx
sub ecx, esi
mov dword [ecx], edi
test eax, eax
jne 0x4f70e5
lea ecx, [ebx - 1]
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x20]
test ecx, eax
je 0x4f7107
shr eax, 1
test ecx, eax
jne 0x4f7101
test eax, eax
je 0x4f7118
lea edx, [eax - 1]
and edx, ecx
add edx, eax
mov dword [esp + 0x20], edx
jmp 0x4f7120
mov dword [esp + 0x20], 0
add dword [esp + 0x14], 2
mov eax, 0xffff
add word [esp + ebx*2 + 0x58], ax
movzx eax, word [esp + ebx*2 + 0x58]
test ax, ax
jne 0x4f7152
cmp ebx, dword [esp + 0x28]
je 0x4f7228
mov ecx, dword [esp + 0x14]
movzx edx, word [ecx]
mov eax, dword [esp + 0x50]
movzx ebx, word [eax + edx*2]
cmp ebx, dword [esp + 0x18]
jbe 0x4f7052
mov esi, dword [esp + 0x48]
and esi, dword [esp + 0x20]
mov dword [esp + 0x44], esi
cmp esi, ebp
je 0x4f7052
mov edx, dword [esp + 0x1c]
test edx, edx
jne 0x4f7182
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c], ecx
mov edx, ecx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x54]
mov ebp, dword [esp + 0x28]
lea eax, [eax + ecx*4]
mov ecx, ebx
sub ecx, edx
mov dword [esp + 0x24], eax
mov eax, 1
add edx, ecx
shl eax, cl
cmp edx, ebp
jae 0x4f71c8
lea esi, [esp + edx*2 + 0x58]
lea ebx, [ebx]
movzx edi, word [esi]
sub eax, edi
test eax, eax
jle 0x4f71c4
inc edx
inc ecx
add esi, 2
add eax, eax
cmp edx, ebp
jb 0x4f71b0
mov esi, dword [esp + 0x44]
mov edx, dword [esp + 0x38]
mov eax, 1
shl eax, cl
add edx, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x38], edx
cmp eax, 1
jne 0x4f71f1
cmp edx, 0x354
jmp 0x4f71fc
cmp eax, 2
jne 0x4f71fe
cmp edx, 0x250
ja 0x4f726e
mov eax, dword [esp + 0x3c]
mov edx, dword [eax]
mov ebp, esi
mov byte [edx + ebp*4], cl
mov ecx, dword [eax]
mov dl, byte [esp + 0x18]
mov byte [ecx + ebp*4 + 1], dl
mov eax, dword [eax]
mov ecx, dword [esp + 0x24]
sub ecx, eax
sar ecx, 2
mov word [eax + ebp*4 + 2], cx
jmp 0x4f7052
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4f724f
sub bl, byte [esp + 0x1c]
xor edx, edx
mov word [esp + 0x12], dx
mov edx, dword [esp + 0x24]
mov byte [esp + 0x10], 0x40
mov byte [esp + 0x11], bl
mov ecx, dword [esp + 0x10]
mov dword [edx + eax*4], ecx
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
lea ecx, [eax*4]
mov eax, dword [esp + 0x3c]
add dword [eax], ecx
mov eax, dword [esp + 0x4c]
mov dword [eax], edx
xor eax, eax
jmp 0x4f7273
mov eax, 1
mov ecx, dword [esp + 0x98]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004cdc91
add esp, 0x8c
ret