Function at 0x4fae80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x18]
cmp eax, dword [ecx + 8]
jbe 0x4fb768
sub esp, 0x98
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0xb8]
cmp eax, ebx
jl 0x4fb104
test eax, eax
je 0x4fb0d6
test ebx, ebx
je 0x4fb0d6
cmp ebx, 1
je 0x4fb05a
mov ebp, dword [esp + 0xa4]
test ebp, ebp
je 0x4faeff
mov esi, dword [esp + 0x9c]
lea edi, [esi + ebp*4 - 4]
mov edx, dword [esp + 0xb0]
mov ecx, eax
mov eax, dword [esp + 0xa8]
lea eax, [eax + edx*4 - 4]
cmp eax, edi
je 0x4faf32
test ebp, ebp
jmp 0x4faf0f
mov ecx, eax
mov edx, dword [esp + 0xb0]
mov esi, dword [esp + 0x9c]
je 0x4faf3f
lea eax, [esi + ebp*4 - 4]
mov edi, dword [esp + 0xbc]
mov ebx, dword [esp + 0xb4]
lea ebx, [ebx + edi*4 - 4]
cmp ebx, eax
jne 0x4faf38
mov ebx, dword [esp + 0xb8]
xor ebp, ebp
xor esi, esi
jmp 0x4faf3f
mov ebx, dword [esp + 0xb8]
mov eax, dword [0x93e170]
cmp ebx, eax
jl 0x4faf60
mov dword [esp + 0x88], esi
nop
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0x58], ebx
mov ebx, edi
jmp 0x4fb1d6
lea eax, [ecx + ebx]
cmp ebp, eax
jl 0x4faf72
jae 0x4faffd
jmp 0x4fb1bb
cmp eax, 1
jne 0x4fafba
lea eax, [0x693140]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004507f0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb8]
mov ebp, 1
mov eax, 1
jmp 0x4faffd
mov dword [esp + 0x44], eax
lea edx, [0x693140]
mov dword [esp], edx
mov dword [esp + 4], eax
lea edx, [ebx + ecx + 4]
mov dword [esp + 0x38], edx
mov dword [esp + 8], edx
call fcn.004507f0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x30], eax
mov dword [esp + 0x80], esi
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov edi, dword [esp + 0xa8]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x20], ecx
call fcn.004fa000
nop
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
jmp 0x4fb186
mov ecx, dword [esp + 0xb4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0
call fcn.004f9e70
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
add esp, 0x98
ret
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], 0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xc8], eax
add esp, 0x98
ret
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x20], eax
call fcn.004fae80
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
add esp, 0x98
ret
dec ecx
test ecx, ecx
jle 0x4fb192
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4fb185
mov edx, dword [esp + 0x38]
cmp ecx, edx
ja 0x4fb1b6
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
add esp, 0x98
ret
call fcn.0046c950
mov ecx, eax
mov edx, ebp
call fcn.0046c950
sar ebx, 1
mov esi, dword [esp + 0x58]
inc esi
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x88]
cmp ebx, eax
jg 0x4fb1c4
mov eax, ecx
mov ecx, dword [esp + 0x58]
shl ebx, cl
cmp ecx, 0x20
sbb ecx, ecx
and ecx, ebx
cmp edx, ecx
jb 0x4fb762
mov ebx, dword [esp + 0xbc]
cmp ebx, ecx
jb 0x4fb75b
lea ebx, [ecx + ecx*2]
mov dword [esp + 0x78], ebx
shl ebx, 1
add eax, edi
cmp ebx, eax
jge 0x4fb213
mov ebx, eax
jmp 0x4fb21d
mov dword [esp + 0x6c], eax
mov eax, ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x74], ebx
cmp eax, ebp
jg 0x4fb230
jbe 0x4fb2a6
jmp 0x4fb752
cmp eax, 1
jne 0x4fb26e
lea eax, [0x693140]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004507f0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xb0]
mov ebp, 1
mov eax, 1
jmp 0x4fb2a6
mov dword [esp + 0x40], eax
lea ecx, [0x693140]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea ecx, [eax + 4]
mov dword [esp + 0x34], ecx
mov dword [esp + 8], ecx
call fcn.004507f0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x7c], esi
mov dword [esp + 0x34], ebp
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov edi, dword [esp + 0xbc]
mov dword [esp + 0x20], edi
call fcn.004fa6e0
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x74]
cmp edx, ecx
jb 0x4fb74d
mov eax, dword [esp + 0x3c]
mov ebx, eax
shl ebx, 1
cmp ebx, ecx
ja 0x4fb746
mov ebp, ecx
sub ecx, ebx
mov esi, edx
sub esi, ebx
xchg esi, ebx
neg ebx
xchg esi, ebx
mov ebx, eax
shl eax, 3
sar esi, 0x1f
and esi, eax
mov eax, dword [esp + 0x7c]
add esi, eax
test ecx, ecx
je 0x4fb34c
mov dword [esp], esi
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.0046d050
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0xb8]
cmp esi, ebx
jg 0x4fb366
mov edi, dword [esp + 0xac]
cmp edi, esi
je 0x4fb6c5
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.004fc5b0
nop
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xa8]
mov edx, eax
jmp 0x4fb383
dec eax
test eax, eax
jle 0x4fb38f
mov ebx, dword [ecx + eax*4 - 4]
test ebx, ebx
je 0x4fb382
mov ebx, dword [esp + 0xb0]
cmp ebx, eax
jb 0x4fb73d
mov ebp, dword [esp + 0xb8]
cmp ebp, edx
jb 0x4fb734
mov esi, dword [esp + 4]
mov dword [esp + 0x8c], esi
mov edi, dword [esi]
mov ebp, dword [esi + 4]
mov esi, dword [esi + 8]
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0xbc]
sub eax, edx
mov dword [esp + 0x4c], eax
mov esi, dword [esp + 0xb8]
sub esi, edx
mov dword [esp + 0x48], esi
mov edi, eax
neg eax
shl edx, 2
sar eax, 0x1f
and eax, edx
mov edx, dword [esp + 0xb4]
add eax, edx
mov dword [esp + 0x84], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
call fcn.004fae80
mov eax, dword [esp + 0x24]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x74]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x18], edi
call fcn.004fad70
nop
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xb4]
mov edx, eax
jmp 0x4fb47a
dec eax
test eax, eax
jle 0x4fb486
mov ebx, dword [ecx + eax*4 - 4]
test ebx, ebx
je 0x4fb479
mov ebx, dword [esp + 0xbc]
cmp ebx, eax
jb 0x4fb72b
mov dword [esp + 0x54], eax
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0xb0]
jmp 0x4fb63e
mov dword [esp + 0x94], edi
mov dword [esp + 0x50], esi
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
call fcn.004fae80
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + eax]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x90], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x60], ebp
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x64], esi
mov edi, dword [esp + 0x7c]
mov dword [esp], edi
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
call fcn.004fad70
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x20], edx
call fcn.004fae80
mov eax, dword [esp + 0x24]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x74]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x18], edi
call fcn.004fad70
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x64]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0xb0]
mov edx, dword [esp + 0x5c]
cmp ebp, edx
jle 0x4fb695
jb 0x4fb722
mov dword [esp + 0x5c], edx
sub edi, edx
mov dword [esp + 0x68], edi
sub ebp, edx
xchg edi, ebx
neg ebx
xchg edi, ebx
shl edx, 2
sar edi, 0x1f
and edi, edx
add edi, esi
mov edx, esi
mov esi, dword [esp + 0x3c]
cmp esi, ebp
jge 0x4fb672
mov ebp, esi
jmp 0x4fb678
mov esi, ebp
mov ebp, dword [esp + 0x3c]
jmp 0x4fb704
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x68]
cmp esi, ebp
jbe 0x4fb4b3
jmp 0x4fb719
nop
lea eax, [0x96f5c0]
mov dword [esp], eax
lea eax, [0x6cd540]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.004899b0
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x34]
mov ebp, dword [esp + 0x74]
nop
jmp 0x4fb6c9
dec ebp
test ebp, ebp
jle 0x4fb6d5
mov ebx, dword [eax + ebp*4 - 4]
test ebx, ebx
je 0x4fb6c8
cmp ebp, edx
ja 0x4fb6f5
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc8], edx
add esp, 0x98
ret
mov ecx, ebp
call fcn.0046c950
dec esi
mov edx, dword [esp + 0xa8]
test esi, esi
jle 0x4fb684
mov edx, dword [edi + esi*4 - 4]
test edx, edx
je 0x4fb6fc
jmp 0x4fb67d
mov ecx, esi
mov edx, ebp
call fcn.0046c950
mov eax, edx
mov ecx, ebp
call fcn.0046c970
mov ecx, eax
mov edx, ebx
call fcn.0046c950
mov eax, edx
mov ecx, ebp
call fcn.0046c970
mov ecx, eax
mov edx, ebx
call fcn.0046c950
mov eax, ebx
call fcn.0046c970
call fcn.0046c950
mov ecx, eax
mov edx, ebp
call fcn.0046c950
mov edx, ebx
call fcn.0046c950
call fcn.0046c950
nop
call fcn.0046b490
jmp fcn.004fae80