Function at 0x4fd450
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x10]
cmp eax, dword [ecx + 8]
jbe 0x4fdce0
sub esp, 0x90
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xb0]
cmp eax, ecx
jl 0x4fdc19
test eax, eax
je 0x4fdbeb
test ecx, ecx
je 0x4fdbeb
cmp ecx, 1
je 0x4fdb6f
mov edx, dword [esp + 0x9c]
test edx, edx
jle 0x4fdb5a
lea ebx, [edx - 1]
cmp ebx, edx
jae 0x4fdcd9
mov ebx, dword [esp + 0x94]
lea ebp, [ebx + edx*4 - 4]
mov esi, dword [esp + 0xa8]
lea edi, [esi - 1]
cmp edi, esi
jae 0x4fdcd9
mov edi, dword [esp + 0xa0]
lea edi, [edi + esi*4 - 4]
cmp edi, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4fdaef
xor edx, edx
xor ebx, ebx
mov ebp, dword [0xb71118]
cmp ecx, ebp
jl 0x4fda09
mov dword [esp + 0x8c], edx
mov dword [esp + 0x3c], ebx
mov dword [esp], ecx
mov eax, dword [0xb71118]
mov dword [esp + 4], eax
call fcn.004fd410
mov eax, dword [esp + 8]
test eax, eax
jl 0x4fdcc4
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
ja 0x4fdcc4
mov edx, dword [esp + 0xb4]
cmp eax, edx
ja 0x4fdcbd
lea ebx, [eax + eax*2]
shl ebx, 1
mov ebp, dword [esp + 0xb0]
mov esi, dword [esp + 0xa4]
lea edi, [esi + ebp]
cmp ebx, edi
jle 0x4fda02
mov dword [esp + 0x50], eax
mov dword [esp + 0x30], edi
mov esi, dword [esp + 0x3c]
cmp ebx, esi
jg 0x4fd9bf
test ebx, ebx
jl 0x4fdcb6
mov dword [esp + 0x3c], esi
mov ebp, dword [esp + 0x8c]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov edi, dword [esp + 0xac]
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
call fcn.004fcc40
mov eax, dword [esp + 0x30]
test eax, eax
jl 0x4fdcaf
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
ja 0x4fdcaf
mov edx, dword [esp + 0x50]
mov ebx, edx
shl edx, 1
cmp edx, eax
ja 0x4fdca8
sub ecx, edx
mov esi, ecx
neg ecx
shl ebx, 3
sar ecx, 0x1f
and ebx, ecx
mov ecx, dword [esp + 0x8c]
add ebx, ecx
mov dword [esp], ebx
sub eax, edx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004fbc90
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xb0]
cmp eax, ecx
jge 0x4fd9ae
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.004fbcd0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xb0]
cmp eax, ecx
ja 0x4fdca1
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov edx, dword [esp + 0xb4]
sub edx, eax
mov dword [esp + 0x44], edx
mov ebp, edx
neg edx
mov esi, eax
shl eax, 2
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0xac]
add eax, edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x18], eax
sub ecx, esi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], ebp
call fcn.004fd450
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0x8c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x3c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov edi, dword [esp + 0x50]
mov dword [esp + 0x18], edi
call fcn.004fd300
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.004fbcd0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x70]
jmp 0x4fd92e
mov dword [esp], ebx
mov dword [esp + 4], esi
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.004fbcd0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x80], edx
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x20], esi
call fcn.004fd450
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0x8c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x3c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x60]
mov dword [esp + 0x18], edi
call fcn.004fd300
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x20], edx
call fcn.004fd450
mov eax, dword [esp + 0x24]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0x8c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x3c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x60]
mov esi, dword [esp + 0x50]
add edi, esi
mov dword [esp + 0x64], edi
mov dword [esp + 0x18], edi
call fcn.004fd300
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0xa8]
mov edi, ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x68], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 0x88], ebp
mov ebp, dword [esp + 0xa0]
cmp ebx, edi
jge 0x4fd967
ja 0x4fdc9a
mov dword [esp + 0x60], ebx
sub edi, ebx
sub esi, ebx
mov dword [esp + 0x54], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
shl ebx, 2
sar esi, 0x1f
and ebx, esi
add ebx, ebp
mov esi, dword [esp + 0x50]
cmp edi, esi
jg 0x4fd76f
mov esi, edi
jmp 0x4fd76f
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
call fcn.004fbcd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
add esp, 0x90
ret
mov edx, dword [esp + 0xa4]
cmp edx, ecx
jne 0x4fd62c
jmp 0x4fd967
lea eax, [0x7715e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 8], eax
call fcn.00438c00
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x50]
jmp 0x4fd587
mov ebx, edi
jmp 0x4fd56b
lea ebp, [eax + ecx]
cmp ebp, ebx
jg 0x4fdaaf
test ebp, ebp
jl 0x4fdccb
mov dword [esp + 0x8c], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ebp
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov edi, dword [esp + 0xa0]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0xac]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x20], eax
call fcn.004fc5c0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.004fbcd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
add esp, 0x90
ret
lea edx, [0x7715e0]
mov dword [esp], edx
mov dword [esp + 4], ebp
lea edx, [ecx + eax + 4]
mov dword [esp + 8], edx
call fcn.00438c00
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xb0]
mov esi, dword [esp + 0xa8]
jmp 0x4fda1c
test edx, edx
jle 0x4fdb4f
lea ebp, [edx - 1]
cmp ebp, edx
jae 0x4fdcd2
lea ebp, [ebx + edx*4 - 4]
mov edi, dword [esp + 0xb4]
lea esi, [edi - 1]
cmp esi, edi
jae 0x4fdcd2
mov esi, dword [esp + 0xac]
lea esi, [esi + edi*4 - 4]
cmp esi, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4fdb3a
mov esi, dword [esp + 0xa8]
jmp 0x4fd4f4
mov esi, dword [esp + 0xa8]
mov edx, ebx
mov ebx, dword [esp + 0x9c]
jmp 0x4fd4f8
mov edi, dword [esp + 0xb4]
xor ebp, ebp
jmp 0x4fdb28
mov ebx, dword [esp + 0x94]
mov esi, dword [esp + 0xa8]
xor ebp, ebp
jmp 0x4fd4ea
mov ecx, dword [esp + 0xac]
mov ecx, dword [ecx]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], 0
call fcn.004fc420
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
add esp, 0x90
ret
mov eax, dword [esp + 0x94]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xc0], eax
add esp, 0x90
ret
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x20], eax
call fcn.004fd450
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], edx
add esp, 0x90
ret
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
call fcn.0044b4c0
jmp fcn.004fd450