Function at 0x4f6ef0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x30]
cmp eax, dword [ecx + 8]
jbe 0x4f76a9
sub esp, 0xb0
mov eax, dword [esp + 0xc8]
test eax, eax
je 0x4f6f4d
movzx ecx, byte [esp + 0xcc]
test cl, cl
jne 0x4f6f35
lea edx, [eax - 2]
cmp edx, 0x3c
jbe 0x4f6f4d
test cl, cl
je 0x4f7617
cmp eax, 2
je 0x4f6f4d
cmp eax, 8
je 0x4f6f4d
cmp eax, 0xa
je 0x4f6f4d
cmp eax, 0x10
jne 0x4f7617
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0xc8]
test ebx, ebx
jne 0x4f70f5
test ecx, ecx
je 0x4f6f9f
mov esi, 0xa
mov ebp, 0x2e
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x34], ebp
mov ebp, 0x2e
jmp 0x4f70e8
cmp al, 0x30
je 0x4f6fc0
mov esi, 0xa
mov ebp, 0x2e
xor edi, edi
xor ebp, ebp
mov dword [esp + 0x34], ebp
mov ebp, 0x2e
jmp 0x4f70e8
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 8]
movzx ecx, byte [esp + 4]
mov edx, dword [esp + 0xc]
test eax, eax
je 0x4f7000
movzx ebx, byte [esp + 0xcc]
mov esi, 0xa
mov edi, 1
xor ebp, ebp
jmp 0x4f70cd
cmp cl, 0x58
ja 0x4f7016
cmp cl, 0x42
je 0x4f701b
cmp cl, 0x4f
je 0x4f7034
cmp cl, 0x58
je 0x4f704d
jmp 0x4f7061
cmp cl, 0x62
jne 0x4f702f
movzx ebx, byte [esp + 0xcc]
mov ebp, 0x62
mov esi, 2
jmp 0x4f7080
cmp cl, 0x6f
jne 0x4f7048
movzx ebx, byte [esp + 0xcc]
mov ebp, 0x6f
mov esi, 8
jmp 0x4f7080
cmp cl, 0x78
jne 0x4f7061
movzx ebx, byte [esp + 0xcc]
mov ebp, 0x78
mov esi, 0x10
jmp 0x4f7080
movzx ebx, byte [esp + 0xcc]
test bl, bl
je 0x4f7076
xor ebp, ebp
mov esi, 0xa
jmp 0x4f7080
mov ebp, 0x30
mov esi, 8
test ebp, ebp
je 0x4f70c8
cmp ebp, 0x30
je 0x4f70c4
mov dword [esp + 0x34], ebp
mov dword [esp + 0x5c], esi
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
call ecx
movzx ecx, byte [esp + 4]
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
movzx ebx, byte [esp + 0xcc]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x5c]
xor edi, edi
jmp 0x4f70cd
mov edi, 1
mov ebx, dword [esp + 0xc8]
mov dword [esp + 0x34], ebp
mov ebp, 0x30
mov ebp, ecx
mov ecx, eax
mov eax, ebp
mov ebp, 0x30
mov ebx, esi
mov esi, ebp
mov ebp, dword [esp + 0xc8]
jmp 0x4f7106
mov ebp, ebx
mov esi, 0x2e
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x34], ebx
mov ebx, ebp
test ebx, ebx
je 0x4f7612
mov dword [esp + 0xa4], edx
mov byte [esp + 0x2e], al
mov eax, 0xffffffff
xor edx, edx
div ebx
mov edx, ebx
mov edx, 1
mov dword [esp + 0x3c], edx
mov edx, ebx
jmp 0x4f7144
imul ebx, edx
mov ebp, dword [esp + 0x3c]
inc ebp
mov dword [esp + 0x3c], ebp
mov ebp, dword [esp + 0xc8]
cmp ebx, eax
jbe 0x4f7131
mov dword [esp + 0x38], ebx
mov dword [esp + 0x5c], edx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x98], eax
movzx eax, byte [esp + 0xcc]
mov byte [esp + 0x2f], al
mov dword [esp + 0x90], ecx
xor ecx, ecx
mov byte [esp + 0x2d], cl
xor ecx, ecx
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x80], ebx
xor ebx, ebx
mov dword [esp + 0x54], ebx
xor ebx, ebx
mov dword [esp + 0x48], ebx
mov ebx, 0xffffffff
mov dword [esp + 0x44], ebx
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x80]
jmp 0x4f7246
mov dword [esp + 0x4c], edi
mov dword [esp + 0x30], esi
mov byte [esp + 0x2d], cl
mov byte [esp + 0x2f], bl
mov eax, dword [esp + 0xc0]
mov edx, dword [eax + 0x10]
mov ebp, dword [esp + 0xc4]
mov dword [esp], ebp
call edx
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
movzx eax, byte [esp + 4]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0xc0]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0xc8]
mov dword [esp + 0xa4], edx
mov byte [esp + 0x2e], al
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x30], esi
test ecx, ecx
jne 0x4f7414
movzx ecx, byte [esp + 0x2e]
cmp cl, 0x2e
jne 0x4f728a
movzx ebx, byte [esp + 0x2f]
test bl, bl
je 0x4f728f
cmp esi, 0x5f
sete cl
movzx ebx, byte [esp + 0x2d]
or ecx, ebx
xor ebx, ebx
mov esi, 0x2e
mov dword [esp + 0x44], edi
jmp 0x4f71d4
movzx ebx, byte [esp + 0x2f]
cmp cl, 0x5f
jne 0x4f72d3
test ebp, ebp
jne 0x4f72d3
cmp esi, 0x30
setne cl
movzx esi, byte [esp + 0x2d]
or ecx, esi
mov byte [esp + 0x2d], cl
mov esi, 0x5f
mov dword [esp + 0x30], esi
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x70]
jmp 0x4f73c8
lea esi, [ecx - 0x30]
xchg esi, eax
cmp al, 9
xchg esi, eax
ja 0x4f72e4
xchg esi, eax
movzx ecx, al
xchg esi, eax
jmp 0x4f731e
lea esi, [ecx - 0x61]
xchg esi, eax
cmp al, 0x19
xchg esi, eax
ja 0x4f72f8
lea esi, [ecx - 0x57]
xchg esi, eax
movzx ecx, al
xchg esi, eax
jmp 0x4f731e
lea esi, [ecx - 0x41]
xchg esi, eax
cmp al, 0x19
xchg esi, eax
ja 0x4f7319
cmp edx, 0x24
jg 0x4f730f
add ecx, 0xffffffc9
movzx ecx, cl
jmp 0x4f731e
lea esi, [ecx - 0x1d]
xchg esi, eax
movzx ecx, al
xchg esi, eax
jmp 0x4f731e
mov ecx, 0x3f
cmp ecx, edx
jae 0x4f73ee
mov esi, dword [esp + 0x48]
imul esi, edx
mov edx, dword [esp + 0x40]
inc edx
add ecx, esi
cmp eax, edx
je 0x4f734e
mov esi, dword [esp + 0x58]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x78]
jmp 0x4f73b6
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov edx, dword [esp + 0x54]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
call fcn.004f0540
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
movzx ebx, byte [esp + 0x2f]
mov ebp, dword [esp + 0xc8]
mov edi, dword [esp + 0x4c]
mov esi, edx
mov dword [esp + 0x58], ecx
xor ecx, ecx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x3c]
xor edx, edx
inc edi
mov dword [esp + 0x68], eax
mov eax, 0x30
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x40], edx
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], esi
mov dword [esp + 0x48], ecx
movzx ecx, byte [esp + 0x2d]
mov esi, dword [esp + 0x30]
jmp 0x4f71d4
mov eax, dword [esp + 0xc0]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0xc4]
mov dword [esp], ecx
call eax
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
cmp dword [0x967010], ecx
je 0x4f7425
mov eax, dword [esp + 0xa4]
jmp 0x4f7474
mov eax, dword [0x967014]
mov dword [esp], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00404290
movzx eax, byte [esp + 0xc]
test al, al
je 0x4f745d
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
xor ecx, ecx
xor eax, eax
jmp 0x4f7474
mov edx, dword [esp + 0x5c]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0xa4]
test ecx, ecx
jne 0x4f7492
movzx ebx, byte [esp + 0x2d]
test bl, bl
jne 0x4f7486
cmp esi, 0x5f
jne 0x4f7492
mov ecx, dword [0x967748]
mov eax, dword [0x96774c]
test edi, edi
jne 0x4f74fc
mov ebx, dword [esp + 0x34]
cmp ebx, 0x30
je 0x4f74ad
mov ecx, dword [0x967740]
mov eax, dword [0x967744]
jmp 0x4f74fc
mov edx, dword [esp + 0xa0]
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], 0
mov edx, dword [esp + 0x58]
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], 0xa
mov dword [esp + 0xe0], 1
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe8], eax
add esp, 0xb0
ret
mov dword [esp + 0xa4], eax
mov ebx, dword [esp + 0x40]
test ebx, ebx
jle 0x4f7517
mov ebp, edx
mov esi, 1
jmp 0x4f75a2
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x54]
jmp 0x4f7530
dec esi
mov eax, dword [esp + 0xa4]
test esi, esi
jle 0x4f7543
mov eax, dword [ebp + esi*4 - 4]
test eax, eax
je 0x4f7528
mov eax, dword [esp + 0xa4]
cmp esi, ebx
ja 0x4f7594
mov eax, dword [esp + 0x44]
test eax, eax
jl 0x4f7553
sub eax, edi
jmp 0x4f7555
mov eax, edi
mov dword [esp + 0xd0], ebp
mov dword [esp + 0xd4], esi
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xe8], eax
add esp, 0xb0
ret
mov ecx, esi
mov edx, ebx
call fcn.00468f10
imul edx, edx
sar ebx, 1
test ebx, ebx
jle 0x4f75b3
test ebx, 1
je 0x4f759d
imul esi, edx
jmp 0x4f759d
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0x54]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], eax
call fcn.004f0540
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x5c]
mov edi, dword [esp + 0x4c]
jmp 0x4f7526
call fcn.004379d0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp], eax
call fcn.00409c30
mov eax, dword [esp + 4]
lea ecx, [0x6f4660]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], eax
lea eax, [0x741618]
mov dword [esp], eax
mov dword [esp + 4], 0x16
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c4b20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409d40
mov eax, dword [esp + 8]
lea ecx, [0x6f44e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00438b10
nop
call fcn.00467a60
jmp fcn.004f6ef0