Function at 0x4fbe40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x84
push ebx
push esi
push edi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov dword [esp + 0xc], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x2c], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x28], ecx
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x84], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x88], ecx
mov ecx, dword [eax + 0x24]
mov dword [esp + 0x4c], ecx
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x34], ecx
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x30], ecx
mov ecx, dword [eax + 0x30]
mov ebx, dword [eax + 0x20]
mov dword [esp + 0x78], ecx
mov ecx, dword [eax + 0x34]
mov dword [esp + 0x8c], ecx
mov ecx, dword [eax + 0x38]
mov dword [esp + 0x54], ecx
mov cl, byte [eax + 0x3c]
mov byte [esp + 0x1b], cl
mov ecx, dword [eax + 0x40]
mov dword [esp + 0x74], ecx
mov cl, byte [eax + 0x44]
mov byte [esp + 0x5b], cl
mov ecx, dword [eax + 0x48]
mov dword [esp + 0x7c], ecx
mov ecx, dword [eax + 0x4c]
mov dword [esp + 0x3c], ecx
mov ecx, dword [eax + 0x50]
mov esi, dword [eax + 0xc]
mov edi, dword [eax + 0x1c]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 0x54]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x10], edi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x40], eax
cmp esi, dword [esp + 0x28]
jg 0x4fcb63
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
jmp 0x4fbf10
cmp esi, dword [esp + 0x84]
jl 0x4fcb4f
cmp esi, dword [esp + 0x88]
jge 0x4fcb4f
lea eax, [esi + 0x8000]
cdq
and edx, 0xffff
add eax, edx
sar eax, 0x10
mov dword [esp + 0x80], eax
xor ecx, ecx
lea edx, [ecx + 1]
mov eax, edx
and eax, 3
cmp dword [ebx + ecx*4], esi
jne 0x4fbf57
cmp dword [ebx + eax*4], esi
je 0x4fbf64
mov ecx, edx
mov dword [esp + 0x48], edx
cmp ecx, 4
jl 0x4fbf45
jmp 0x4fbf87
mov eax, dword [edi + eax*4]
cmp eax, dword [edi + ecx*4]
mov edx, 0x10000
mov dword [esp + 0x64], 0
cmovg edx, dword [esp + 0x64]
add ecx, 8
mov dword [esp + 0x50], edx
mov dword [esp + 0x48], ecx
cmp ecx, 8
jge 0x4fbfbb
xor ecx, ecx
mov dword [esp + 0x48], ecx
mov eax, dword [ebx + ecx*4]
lea edx, [ecx + 1]
and edx, 3
cmp eax, esi
jg 0x4fbfa8
cmp dword [ebx + edx*4], esi
jg 0x4fc01d
cmp eax, esi
jle 0x4fbfb1
cmp dword [ebx + edx*4], esi
jle 0x4fc04f
inc ecx
mov dword [esp + 0x48], ecx
cmp ecx, 4
jl 0x4fbf92
mov edi, dword [esp + 0x50]
mov dword [esp + 0x64], edi
cmp ecx, 4
jge 0x4fc0c8
xor edx, edx
mov dword [esp + 0x1c], edx
cmp edx, ecx
je 0x4fc006
mov edi, dword [ebx + edx*4]
lea eax, [edx + 1]
and eax, 3
mov dword [esp + 0x44], eax
cmp edi, esi
jne 0x4fbfee
cmp dword [ebx + eax*4], esi
je 0x4fc05d
cmp edi, esi
jg 0x4fbff9
cmp dword [ebx + eax*4], esi
jg 0x4fc083
cmp edi, esi
jle 0x4fc006
cmp dword [ebx + eax*4], esi
jle 0x4fc0b6
inc edx
mov dword [esp + 0x1c], edx
cmp edx, 4
jl 0x4fbfd2
mov edi, dword [esp + 0x50]
mov dword [esp + 0x48], edi
jmp 0x4fc0dc
mov ecx, eax
mov eax, dword [ebx + edx*4]
sub eax, ecx
cdq
mov ebx, eax
mov eax, esi
sub eax, ecx
push edx
cdq
shld edx, eax, 0x10
push ebx
shl eax, 0x10
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x24]
mov edi, eax
mov dword [esp + 0x50], edi
jmp 0x4fbfbf
mov edi, eax
sub eax, dword [ebx + edx*4]
sub edi, esi
cdq
mov ebx, eax
mov eax, edi
jmp 0x4fc02b
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x48], 0
mov eax, dword [ebx + eax*4]
cmp eax, dword [ebx + edx*4]
mov edi, 0x10000
cmovg edi, dword [esp + 0x48]
mov dword [esp + 0x50], edi
mov dword [esp + 0x48], edi
jmp 0x4fc0dc
mov eax, dword [ebx + eax*4]
mov ecx, edi
sub eax, ecx
cdq
mov ebx, eax
mov eax, esi
sub eax, ecx
push edx
cdq
shld edx, eax, 0x10
push ebx
shl eax, 0x10
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x1c]
mov edi, eax
mov dword [esp + 0x50], edi
mov dword [esp + 0x48], edi
jmp 0x4fc0dc
mov ecx, dword [esp + 0x44]
mov eax, edi
sub eax, dword [ebx + ecx*4]
sub edi, esi
cdq
mov ebx, eax
mov eax, edi
jmp 0x4fc091
and ecx, 3
mov eax, 0x10000
mov edx, ecx
sub eax, edi
mov dword [esp + 0x1c], edx
mov dword [esp + 0x48], eax
cmp ecx, 3
ja case.default.0x4fc0e5
jmp dword [ecx*4 + 0x4fcb6c]
mov eax, dword [esp + 0x64]
mov edi, dword [esp + 0x10]
cdq
mov edi, dword [edi]
mov ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, edx
mov eax, dword [eax + 4]
push ebx
sub eax, edi
cdq
push ecx
push edx
push eax
mov dword [esp + 0x54], ecx
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
add eax, edi
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x4c]
push ebx
mov edi, dword [eax]
mov eax, dword [eax + 8]
push dword [esp + 0x48]
sub eax, edi
cdq
push edx
push eax
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x4c]
add eax, edi
mov dword [esp + 0x14], eax
mov eax, dword [ecx + 4]
jmp 0x4fc28d
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x64]
cdq
mov ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, edx
mov eax, dword [eax + 8]
push ebx
sub eax, edi
cdq
push ecx
push edx
push eax
mov dword [esp + 0x54], ecx
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x4c]
add eax, edi
mov edi, dword [ecx + 4]
mov dword [esp + 0x68], eax
mov eax, dword [ecx + 8]
push ebx
push dword [esp + 0x48]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx + 0xc]
jmp 0x4fc273
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 8]
mov eax, dword [esp + 0x64]
cdq
mov ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, edx
mov eax, dword [eax + 0xc]
push ebx
sub eax, edi
cdq
push ecx
push edx
push eax
mov dword [esp + 0x54], ecx
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
add eax, edi
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x4c]
push ebx
mov edi, dword [eax + 8]
mov eax, dword [eax]
push dword [esp + 0x48]
sub eax, edi
cdq
push edx
push eax
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x4c]
add eax, edi
mov dword [esp + 0x14], eax
mov eax, dword [ecx + 0xc]
jmp 0x4fc28d
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 0xc]
mov eax, dword [esp + 0x64]
cdq
mov ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, edx
mov eax, dword [eax]
push ebx
sub eax, edi
cdq
push ecx
push edx
push eax
mov dword [esp + 0x54], ecx
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x4c]
add eax, edi
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x68], eax
mov eax, dword [ecx]
push ebx
push dword [esp + 0x48]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx + 4]
sub eax, edi
cdq
push edx
push eax
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
add eax, edi
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
cmp edx, 3
ja case.default.0x4fc29e
jmp dword [edx*4 + 0x4fcb7c]
mov eax, dword [esp + 0x10]
mov edi, dword [eax]
mov eax, dword [esp + 0x48]
cdq
mov ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, edx
mov eax, dword [eax + 4]
push ebx
sub eax, edi
cdq
push ecx
push edx
push eax
mov dword [esp + 0x54], ecx
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
add eax, edi
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x4c]
push ebx
mov edi, dword [eax]
mov eax, dword [eax + 8]
push dword [esp + 0x48]
sub eax, edi
cdq
push edx
push eax
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x4c]
add eax, edi
mov ebx, dword [ecx + 4]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x60], ebx
jmp 0x4fc45c
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x48]
cdq
mov ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, edx
mov eax, dword [eax + 8]
push ebx
sub eax, edi
cdq
push ecx
push edx
push eax
mov dword [esp + 0x54], ecx
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x4c]
add eax, edi
mov edi, dword [ecx + 4]
mov dword [esp + 0x5c], eax
mov eax, dword [ecx + 8]
push ebx
push dword [esp + 0x48]
mov dword [esp + 0x74], eax
mov eax, dword [ecx + 0xc]
sub eax, edi
cdq
push edx
push eax
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
lea ebx, [edi + eax]
mov dword [esp + 0x60], ebx
jmp 0x4fc45c
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 8]
mov eax, dword [esp + 0x48]
cdq
mov ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, edx
mov eax, dword [eax + 0xc]
push ebx
sub eax, edi
cdq
push ecx
push edx
push eax
mov dword [esp + 0x54], ecx
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
add eax, edi
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x4c]
push ebx
mov edi, dword [eax + 8]
mov eax, dword [eax]
push dword [esp + 0x48]
sub eax, edi
cdq
push edx
push eax
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x4c]
add eax, edi
mov ebx, dword [ecx + 0xc]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x60], ebx
jmp 0x4fc45c
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 0xc]
mov eax, dword [esp + 0x48]
cdq
mov ecx, eax
mov eax, dword [esp + 0x10]
mov ebx, edx
mov eax, dword [eax]
push ebx
sub eax, edi
cdq
push ecx
push edx
push eax
mov dword [esp + 0x54], ecx
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov ecx, dword [esp + 0x4c]
add eax, edi
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x5c], eax
mov eax, dword [ecx]
push ebx
push dword [esp + 0x48]
mov dword [esp + 0x74], eax
mov eax, dword [ecx + 4]
jmp 0x4fc36c
mov ebx, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x68]
cmp edx, ecx
jle 0x4fc48e
mov eax, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov edx, ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x68], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x60], eax
lea eax, [edx + 0x7fffffff]
shr eax, 0x10
sub eax, 0x7fff
mov dword [esp + 0x44], eax
lea ecx, [edx - 1]
and ecx, 0xffff
mov eax, 0xffff
sub eax, ecx
cdq
mov ebx, eax
mov eax, dword [esp + 0x34]
mov edi, edx
push edi
cdq
push ebx
push edx
push eax
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
push edi
cdq
push ebx
push edx
push eax
call fcn.00640e40
push 0
push 0x10000
push edx
push eax
call fcn.0064aae0
mov edi, dword [esp + 0x5c]
add dword [esp + 0x20], eax
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x44]
mov edx, dword [eax]
lea edi, [edi + 0x7fffffff]
shr edi, 0x10
sub edi, 0x7fff
cmp ebx, edx
jge 0x4fc534
mov ecx, edx
sub ecx, ebx
mov eax, ecx
imul ecx, dword [esp + 0x30]
imul eax, dword [esp + 0x34]
add dword [esp + 0x14], eax
add dword [esp + 0x20], ecx
mov eax, dword [esp + 0x78]
mov ebx, edx
mov ecx, dword [eax + 8]
cmp edi, ecx
cmovg edi, ecx
mov eax, edi
sub eax, ebx
mov dword [esp + 0x1c], eax
test eax, eax
jle case.0x4fc60f.4
cmp byte [esp + 0x5b], 0
je 0x4fc5bc
lea eax, [ebx + 1]
cmp eax, ecx
cmovg eax, ecx
sub eax, edx
test eax, eax
jle 0x4fc584
push dword [esp + 0x7c]
cmp byte [esp + 0x1f], 0
push eax
mov eax, dword [esp + 0x14]
lea eax, [eax + edx*4]
push eax
mov eax, dword [0x856c84]
cmovne eax, dword [0x856ff0]
call eax
add esp, 0xc
mov edx, dword [esp + 0x78]
lea ecx, [edi - 1]
cmp ecx, dword [edx]
mov eax, dword [edx + 8]
cmovl ecx, dword [edx]
sub eax, ecx
test eax, eax
jle 0x4fc5bc
push dword [esp + 0x7c]
cmp byte [esp + 0x1f], 0
push eax
mov eax, dword [esp + 0x14]
lea eax, [eax + ecx*4]
push eax
mov eax, dword [0x856c84]
cmovne eax, dword [0x856ff0]
call eax
add esp, 0xc
mov eax, dword [ebp + 8]
cmp byte [eax + 0x6c], 0
je 0x4fc5de
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x5c], ebx
mov dword [eax + 0x60], edi
mov byte [eax + 0x6c], 0
mov dword [eax + 0x68], ecx
mov dword [eax + 0x64], ecx
jmp 0x4fc5f8
cmp ebx, dword [eax + 0x5c]
jge 0x4fc5e6
mov dword [eax + 0x5c], ebx
cmp edi, dword [eax + 0x60]
jle 0x4fc5ee
mov dword [eax + 0x60], edi
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x68], ecx
mov edx, dword [esp + 0x8c]
cmp edx, 0xf
ja case.0x4fc60f.4
movzx eax, byte [edx + 0x4fcbb0]
jmp dword [eax*4 + 0x4fcb8c]
mov edi, dword [esp + 0x54]
push dword [esp + 0x40]
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
cmp edi, 0xff
jne 0x4fc6da
cmp byte [esp + 0x1f], 0
jne 0x4fc6a8
cmp dword [esp + 0x78], 1
jl 0x4fc676
push dword [esp + 0x74]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x48]
push dword [esp + 0x50]
push dword [esp + 0x34]
push ebx
push dword [esp + 0x2c]
push dword [0x856d3c]
push dword [0x856ef4]
call fcn.004fd5f0
add esp, 0x2c
jmp case.0x4fc60f.4
push dword [esp + 0x24]
push dword [esp + 0x1c]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
push dword [0x856d68]
push dword [0x856ce0]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
push dword [esp + 0x24]
push dword [esp + 0x1c]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
push dword [0x856c44]
push dword [0x856f60]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
cmp byte [esp + 0x1f], 0
jne 0x4fc74c
cmp dword [esp + 0x78], 1
jl 0x4fc720
push dword [esp + 0x74]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x48]
push dword [esp + 0x50]
push dword [esp + 0x34]
push ebx
push dword [esp + 0x2c]
push edi
push dword [0x856bfc]
push edi
push dword [0x856cec]
call fcn.004fdd70
add esp, 0x34
jmp case.0x4fc60f.4
push dword [esp + 0x24]
push dword [esp + 0x1c]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
push edi
push dword [0x856c14]
push edi
push dword [0x856da8]
jmp 0x4fcb33
push dword [esp + 0x24]
push dword [esp + 0x1c]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
push edi
push dword [0x856cc8]
push edi
push dword [0x856cdc]
jmp 0x4fcb33
push dword [esp + 0x40]
mov edi, dword [esp + 0x58]
push dword [esp + 0x24]
mov edx, dword [esp + 0x38]
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
cmp edi, 0xff
jne 0x4fc7c2
push dword [0x856c24]
push dword [0x856cac]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
push edi
push dword [0x856ef8]
push edi
push dword [0x856c78]
jmp 0x4fcb33
push dword [esp + 0x40]
mov edi, dword [esp + 0x58]
push dword [esp + 0x24]
mov edx, dword [esp + 0x38]
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
cmp edi, 0xff
jne 0x4fc83f
cmp byte [esp + 0x3b], 0
jne 0x4fc826
push dword [0x856d14]
push dword [0x856ddc]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
push dword [0x856d08]
push dword [0x856c48]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
cmp byte [esp + 0x3b], 0
push edi
jne 0x4fc859
push dword [0x856e40]
push edi
push dword [0x856e70]
jmp 0x4fcb33
push dword [0x856f44]
push edi
push dword [0x856f1c]
jmp 0x4fcb33
push dword [esp + 0x40]
mov edi, dword [esp + 0x58]
push dword [esp + 0x24]
mov edx, dword [esp + 0x38]
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
cmp edi, 0xff
jne 0x4fc8b5
push dword [0x856eb0]
push dword [0x856c0c]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
push edi
push dword [0x856f8c]
push edi
push dword [0x856f54]
jmp 0x4fcb33
mov edi, dword [esp + 0x54]
push dword [esp + 0x40]
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
cmp edi, 0xff
jne 0x4fc98c
cmp byte [esp + 0x1f], 0
jne 0x4fc95a
cmp dword [esp + 0x78], 1
jl 0x4fc928
push dword [esp + 0x74]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x48]
push dword [esp + 0x50]
push dword [esp + 0x34]
push ebx
push dword [esp + 0x2c]
push dword [0x856e58]
push dword [0x856f40]
call fcn.004fe5a0
add esp, 0x2c
jmp case.0x4fc60f.4
push dword [esp + 0x24]
push dword [esp + 0x1c]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
push dword [0x856c28]
push dword [0x856fb8]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
push dword [esp + 0x24]
push dword [esp + 0x1c]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
push dword [0x856f7c]
push dword [0x856d1c]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
cmp byte [esp + 0x1f], 0
jne 0x4fc9fe
cmp dword [esp + 0x78], 1
jl 0x4fc9d2
push dword [esp + 0x74]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x48]
push dword [esp + 0x50]
push dword [esp + 0x34]
push ebx
push dword [esp + 0x2c]
push edi
push dword [0x856f48]
push edi
push dword [0x856d78]
call fcn.004fecd0
add esp, 0x34
jmp case.0x4fc60f.4
push dword [esp + 0x24]
push dword [esp + 0x1c]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
push edi
push dword [0x856f64]
push edi
push dword [0x856e70]
jmp 0x4fcb33
push dword [esp + 0x24]
push dword [esp + 0x1c]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
push edi
push dword [0x856eb4]
push edi
push dword [0x856d20]
jmp 0x4fcb33
push dword [esp + 0x40]
mov edi, dword [esp + 0x58]
push dword [esp + 0x24]
mov edx, dword [esp + 0x38]
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
cmp edi, 0xff
jne 0x4fca74
push dword [0x856ca0]
push dword [0x856de4]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
push edi
push dword [0x856f88]
push edi
push dword [0x856c90]
jmp 0x4fcb33
push dword [esp + 0x40]
mov edi, dword [esp + 0x58]
push dword [esp + 0x24]
mov edx, dword [esp + 0x38]
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
cmp edi, 0xff
jne 0x4fcace
push dword [0x856bf0]
push dword [0x856de4]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
push edi
push dword [0x856efc]
push edi
push dword [0x856c90]
jmp 0x4fcb33
push dword [esp + 0x40]
mov edi, dword [esp + 0x58]
push dword [esp + 0x24]
mov edx, dword [esp + 0x38]
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
push dword [esp + 0x44]
push dword [esp + 0x4c]
push dword [esp + 0x30]
push ebx
push dword [esp + 0x28]
cmp edi, 0xff
jne 0x4fcb25
push dword [0x856c24]
push dword [0x856cac]
call fcn.004fdc70
add esp, 0x28
jmp case.0x4fc60f.4
push edi
push dword [0x856da4]
push edi
push dword [0x856c74]
call fcn.004fe490
add esp, 0x30
mov ebx, dword [esp + 0x24]
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
add esi, 0x10000
add eax, edx
mov dword [esp + 0xc], eax
cmp esi, ecx
jle 0x4fbf10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4