Function at 0x4fef70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x85d3cc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x4ff6a0
sub esp, 0x9c
lea eax, [0x6748a0]
mov dword [esp], eax
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
call fcn.004ffb10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
jmp 0x4fefde
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.004ffb10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
test al, al
je 0x4ff05a
mov dword [esp + 0x34], edx
mov dword [esp + 0x58], ecx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov byte [esp + 8], 0x23
call fcn.00403520
mov ecx, dword [esp + 0xc]
cmp ecx, 0xffffffff
je 0x4ff011
mov edx, dword [esp + 0x34]
cmp edx, ecx
jae 0x4ff015
jmp 0x4ff69a
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x58]
jmp 0x4ff079
test ecx, ecx
je 0x4fefc2
mov dword [esp + 0x34], ecx
mov dword [esp + 0x58], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
mov byte [esp + 8], 0x3a
call fcn.00403520
mov ecx, dword [esp + 0xc]
cmp ecx, 0xffffffff
je 0x4ff0bd
mov edx, dword [esp + 0x34]
cmp edx, ecx
jb 0x4ff695
mov eax, dword [esp + 0x58]
mov ebx, ecx
mov ebp, eax
jmp 0x4ff124
mov eax, dword [esp + 0x60]
mov dword [esp + 0xa4], eax
add esp, 0x9c
ret
dec ecx
mov edx, ecx
neg edx
sar edx, 0x1f
and edx, 1
add eax, edx
test ecx, ecx
je 0x4ff097
movzx edx, byte [eax]
cmp dl, 0x20
je 0x4ff06c
cmp dl, 9
je 0x4ff06c
cmp dl, 0xa
je 0x4ff06c
cmp dl, 0xd
je 0x4ff06c
jmp 0x4ff097
dec ecx
test ecx, ecx
je 0x4fefc2
movzx edx, byte [eax + ecx - 1]
cmp dl, 0x20
je 0x4ff096
cmp dl, 9
je 0x4ff096
cmp dl, 0xa
je 0x4ff096
cmp dl, 0xd
je 0x4ff096
jmp 0x4ff01b
lea eax, [0x66a620]
mov dword [esp], eax
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x10
lea ecx, [0x693bb7]
mov dword [eax], ecx
lea ecx, [0x6f1b20]
mov edx, dword [esp + 0x60]
mov dword [edx + 0x14], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
je 0x4ff102
call fcn.00468040
mov dword [edi], eax
mov ecx, dword [edx + 0x18]
mov dword [edi + 4], ecx
mov dword [edx + 0x18], eax
mov dword [esp + 0xa4], edx
add esp, 0x9c
ret
dec ecx
mov esi, ecx
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add eax, esi
test ecx, ecx
je 0x4ff14a
movzx esi, byte [eax]
xchg esi, eax
cmp al, 0x20
xchg esi, eax
je 0x4ff113
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x4ff113
xchg esi, eax
cmp al, 0xa
xchg esi, eax
je 0x4ff113
xchg esi, eax
cmp al, 0xd
xchg esi, eax
je 0x4ff113
jmp 0x4ff14a
dec ecx
test ecx, ecx
je 0x4ff16f
movzx esi, byte [eax + ecx - 1]
xchg esi, eax
cmp al, 0x20
xchg esi, eax
je 0x4ff149
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x4ff149
xchg esi, eax
cmp al, 0xa
xchg esi, eax
je 0x4ff149
xchg esi, eax
cmp al, 0xd
xchg esi, eax
je 0x4ff149
lea esi, [ebx + 1]
cmp edx, esi
jb 0x4ff68c
mov dword [esp + 0x24], ecx
mov dword [esp + 0x4c], eax
sub edx, ebx
dec edx
mov ebx, edx
neg edx
sar edx, 0x1f
and esi, edx
lea edx, [ebp + esi]
jmp 0x4ff1b0
lea esi, [esp + 0x88]
call fcn.0046875e
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x6c]
jmp 0x4ff4af
test ebx, ebx
je 0x4fefc2
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x54], edx
mov dword [esp], edx
mov dword [esp + 4], ebx
mov byte [esp + 8], 0x20
call fcn.00403520
mov ecx, dword [esp + 0xc]
cmp ecx, 0xffffffff
je 0x4ff20e
mov edx, dword [esp + 0x2c]
cmp edx, ecx
jb 0x4ff687
lea eax, [ecx + 1]
cmp edx, eax
jb 0x4ff680
sub edx, ecx
dec edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0x54]
lea ebp, [edx + eax]
jmp 0x4ff629
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x30], edx
test eax, eax
je 0x4ff333
cmp byte [ecx], 0x5b
je 0x4ff232
xor ebx, ebx
xor ebp, ebp
xor esi, esi
jmp 0x4ff339
mov dword [esp + 0x44], eax
mov dword [esp + 0x70], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov byte [esp + 8], 0x5d
call fcn.00403520
mov ecx, dword [esp + 0xc]
cmp ecx, 0xffffffff
je 0x4ff5ac
mov edx, dword [esp + 0x44]
cmp edx, ecx
jb 0x4ff613
cmp ecx, 1
jb 0x4ff607
mov dword [esp + 0x40], ecx
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
lea eax, [ecx - 1]
mov dword [esp + 0x20], eax
mov edx, eax
neg eax
sar eax, 0x1f
and eax, 1
mov ebx, dword [esp + 0x70]
add eax, ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
lea ebp, [0x4ff6b0]
mov dword [esp + 0x74], ebp
lea esi, [esp + 0x7c]
mov dword [esp + 0x78], esi
mov dword [esp], eax
mov dword [esp + 4], edx
lea esi, [esp + 0x74]
mov dword [esp + 8], esi
call fcn.005002d0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4ff503
mov edx, dword [esp + 0x40]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x44]
cmp ecx, eax
jb 0x4ff602
sub ecx, edx
lea edx, [ecx - 1]
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x7c]
mov ecx, edx
mov edx, dword [esp + 0x70]
add edx, eax
mov eax, ebx
mov ebx, ecx
mov ecx, edx
mov edx, dword [esp + 0x30]
jmp 0x4ff339
xor ebx, ebx
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x60]
mov eax, dword [ecx + 0x1c]
test eax, eax
jne 0x4ff396
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x5c], esi
call fcn.0040ccc0
mov eax, dword [0x85d680]
mov ecx, dword [esp]
test eax, eax
jne 0x4ff370
mov edx, dword [esp + 0x60]
jmp 0x4ff381
call fcn.00468040
mov dword [edi], ecx
mov edx, dword [esp + 0x60]
mov ebx, dword [edx + 0x1c]
mov dword [edi + 4], ebx
mov dword [edx + 0x1c], ecx
mov ecx, edx
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x5c]
lea edi, [esp + 0x88]
xor eax, eax
call fcn.0046827b
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], edx
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebp
mov ecx, dword [esp + 0x60]
mov edx, dword [ecx + 0x1c]
lea ebx, [0x663b80]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], edx
mov ebp, dword [esp + 0x24]
mov dword [esp + 0xc], ebp
call fcn.00410700
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
inc ebx
mov ebp, dword [ecx]
cmp edx, ebx
jae 0x4ff45c
mov dword [esp + 0x68], ecx
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x678000]
mov dword [esp + 0x10], eax
call fcn.0044d800
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x68]
mov dword [ebx + 8], eax
mov eax, dword [0x85d680]
test eax, eax
je 0x4ff454
call fcn.00468040
mov dword [edi], ecx
mov eax, dword [ebx]
mov dword [edi + 4], eax
mov dword [ebx], ecx
mov ebp, ecx
mov ecx, ebx
mov ebx, edx
mov dword [ecx + 4], ebx
mov eax, dword [0x85d680]
lea ecx, [ebx + ebx*4]
lea edi, [ebp + ecx*4 - 0x14]
test eax, eax
je 0x4ff194
mov dword [esp + 0x64], edi
lea eax, [0x678000]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x88]
mov dword [esp + 8], eax
call fcn.00411200
mov edi, dword [esp + 0x64]
jmp 0x4ff194
dec ebx
mov ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add edx, ebp
test ebx, ebx
je 0x4ff4d5
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x4ff49e
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x4ff49e
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x4ff49e
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x4ff49e
jmp 0x4ff4d5
dec ebx
test ebx, ebx
je 0x4fefc2
movzx ebp, byte [edx + ebx - 1]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x4ff4d4
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x4ff4d4
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x4ff4d4
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x4ff4d4
jmp 0x4ff1b5
mov dword [esp], 0
lea eax, [0x694606]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x12
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
call fcn.00451270
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x50], ecx
lea edx, [0x66a620]
mov dword [esp], edx
call fcn.0040c260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
jne 0x4ff56a
mov ecx, dword [esp + 0x50]
jmp 0x4ff575
call fcn.00468030
mov ecx, dword [esp + 0x50]
mov dword [edi], ecx
mov dword [eax], ecx
lea ecx, [0x6f1b20]
mov edx, dword [esp + 0x60]
mov dword [edx + 0x14], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
je 0x4ff59b
call fcn.00468040
mov dword [edi], eax
mov ecx, dword [edx + 0x18]
mov dword [edi + 4], ecx
mov dword [edx + 0x18], eax
mov dword [esp + 0xa4], edx
add esp, 0x9c
ret
lea eax, [0x66a620]
mov dword [esp], eax
call fcn.0040c260
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1a
lea ecx, [0x697f5d]
mov dword [eax], ecx
lea ecx, [0x6f1b20]
mov edx, dword [esp + 0x60]
mov dword [edx + 0x14], ecx
mov ecx, dword [0x85d680]
test ecx, ecx
je 0x4ff5f1
call fcn.00468040
mov dword [edi], eax
mov ecx, dword [edx + 0x18]
mov dword [edi + 4], ecx
mov dword [edx + 0x18], eax
mov dword [esp + 0xa4], edx
add esp, 0x9c
ret
call fcn.004680f0
mov eax, 1
xor ecx, ecx
call fcn.004680f0
call fcn.004680b0
dec ebx
mov esi, ebx
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebp, esi
test ebx, ebx
je 0x4ff650
movzx esi, byte [ebp]
xchg esi, eax
cmp al, 0x20
xchg esi, eax
je 0x4ff618
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x4ff618
xchg esi, eax
cmp al, 0xa
xchg esi, eax
je 0x4ff618
xchg esi, eax
cmp al, 0xd
xchg esi, eax
je 0x4ff618
jmp 0x4ff650
dec ebx
test ebx, ebx
je 0x4ff675
movzx esi, byte [ebp + ebx - 1]
xchg esi, eax
cmp al, 0x20
xchg esi, eax
je 0x4ff64f
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x4ff64f
xchg esi, eax
cmp al, 0xa
xchg esi, eax
je 0x4ff64f
xchg esi, eax
cmp al, 0xd
xchg esi, eax
je 0x4ff64f
mov eax, ebx
mov edx, ecx
mov ecx, ebp
jmp 0x4ff216
mov ecx, edx
call fcn.004680f0
call fcn.004680b0
mov eax, esi
mov ecx, edx
call fcn.004680f0
call fcn.004680b0
call fcn.004680b0
nop
call fcn.00466c30
jmp fcn.004fef70