Function at 0x4fb6c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xbc]
cmp eax, dword [ecx + 8]
jbe 0x4fc38d
sub esp, 0x13c
mov eax, dword [esp + 0x148]
test eax, eax
je 0x4fb732
mov ecx, dword [esp + 0x154]
test ecx, ecx
je 0x4fb720
mov edx, dword [esp + 0x140]
lea ebx, [edx + eax*4 - 4]
mov ebp, dword [esp + 0x14c]
lea esi, [ebp + ecx*4 - 4]
cmp esi, ebx
jne 0x4fb71c
mov edi, dword [esp + 0x158]
jmp 0x4fb767
test eax, eax
jmp 0x4fb747
test eax, eax
mov edx, dword [esp + 0x140]
mov ebp, dword [esp + 0x14c]
jmp 0x4fb747
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x140]
mov ebp, dword [esp + 0x14c]
je 0x4fb778
mov ebx, dword [esp + 0x160]
test ebx, ebx
je 0x4fb76f
lea esi, [edx + eax*4 - 4]
mov edi, dword [esp + 0x158]
lea ebx, [edi + ebx*4 - 4]
cmp ebx, esi
jne 0x4fb77f
xor eax, eax
xor edx, edx
xor ebx, ebx
jmp 0x4fb786
mov edi, dword [esp + 0x158]
jmp 0x4fb77f
mov edi, dword [esp + 0x158]
mov ebx, dword [esp + 0x144]
mov esi, dword [esp + 0x168]
cmp esi, 1
jne 0x4fb7be
mov ecx, dword [esp + 0x164]
cmp dword [ecx], 1
jne 0x4fb7c5
mov dword [esp + 0x170], edx
mov dword [esp + 0x174], 0
mov dword [esp + 0x178], eax
add esp, 0x13c
ret
mov ecx, dword [esp + 0x164]
mov ecx, dword [esp + 0x15c]
test ecx, ecx
je 0x4fbc96
cmp ecx, 1
jne 0x4fb879
cmp dword [edi], 1
jne 0x4fb879
test esi, esi
je 0x4fb879
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x150]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x2c], eax
call fcn.004ff7d0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], edx
add esp, 0x13c
ret
test esi, esi
je 0x4fb914
cmp esi, eax
jle 0x4fb914
cmp esi, 1
jne 0x4fb8d3
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b780
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x15c]
mov ebp, dword [esp + 0x14c]
mov esi, dword [esp + 0x168]
mov edi, dword [esp + 0x158]
mov eax, 1
jmp 0x4fb914
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], esi
lea ecx, [esi + 4]
mov dword [esp + 0x4c], ecx
mov dword [esp + 8], ecx
call fcn.0044b780
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x15c]
mov ebp, dword [esp + 0x14c]
mov esi, dword [esp + 0x168]
mov edi, dword [esp + 0x158]
mov eax, dword [esp + 0x4c]
nop
mov ebx, dword [esp + 0x150]
cmp ebx, eax
jle 0x4fb9bb
cmp ebx, 1
jne 0x4fb973
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b780
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x15c]
mov ebp, dword [esp + 0x14c]
mov esi, dword [esp + 0x168]
mov edi, dword [esp + 0x158]
mov ebx, 1
mov eax, 1
jmp 0x4fb9bb
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 0x48], eax
mov dword [esp + 8], eax
call fcn.0044b780
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x15c]
mov ebp, dword [esp + 0x14c]
mov esi, dword [esp + 0x168]
mov edi, dword [esp + 0x158]
mov ebx, dword [esp + 0x150]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x150]
cmp eax, ebx
jl 0x4fb9cc
mov eax, ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x118], edx
cmp ebp, edx
je 0x4fb9ee
mov dword [esp], edx
mov dword [esp + 4], ebp
shl eax, 2
mov dword [esp + 8], eax
call fcn.00463a60
mov eax, dword [0x8e0f60]
mov ecx, dword [0x8e0f64]
mov edx, dword [0x8e0f68]
mov ebx, dword [esp + 0x14c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x150]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x154]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004f85b0
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x4fbbb1
mov ebx, dword [esp + 0x15c]
cmp ebx, 1
jle 0x4fbba8
mov ebp, dword [esp + 0x168]
test ebp, ebp
je 0x4fbbbf
mov eax, dword [esp + 0x164]
mov eax, dword [eax]
test eax, 1
je 0x4fbb0c
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x150]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x160]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebp
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x2c], eax
call fcn.004fcd70
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], edx
add esp, 0x13c
ret
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x14c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x150]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x160]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebp
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x2c], eax
call fcn.004fc3a0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], edx
add esp, 0x13c
ret
mov ebp, dword [esp + 0x168]
jmp 0x4fbbbf
mov ebx, dword [esp + 0x15c]
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x158]
mov edi, dword [esi + ebx*4 - 4]
nop
nop
cmp edi, 0x10000
jb 0x4fbbe0
mov eax, edi
shr edi, 0x10
mov ecx, 0x10
jmp 0x4fbbe4
mov eax, edi
xor ecx, ecx
cmp edi, 0x100
jb 0x4fbbf2
shr edi, 8
add ecx, 8
cmp edi, 0x100
jae 0x4fc380
mov edx, esi
lea esi, [0x6e4d48]
movzx esi, byte [esi + edi]
lea esi, [esi + ecx - 0x20]
xchg esi, ebx
neg ebx
xchg esi, ebx
lea ecx, [esi + 1]
cmp ecx, 0x20
sbb edi, edi
shl eax, cl
and eax, edi
add esi, 0xffffffe1
xchg esi, ebx
neg ebx
xchg esi, ebx
mov dword [esp + 0x64], esi
xor ecx, ecx
mov edi, dword [esp + 0x60]
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x118]
mov dword [esp + 0x110], edi
xor edi, edi
mov dword [esp + 0x54], edi
xor ecx, ecx
mov dword [esp + 0xb4], ecx
xor ecx, ecx
mov dword [esp + 0x138], ecx
xor ecx, ecx
mov dword [esp + 0x70], ecx
xor ecx, ecx
mov dword [esp + 0x6c], ecx
xor ecx, ecx
mov dword [esp + 0x11c], ecx
xor ecx, ecx
mov dword [esp + 0x74], ecx
xor ecx, ecx
mov dword [esp + 0x78], ecx
xor ecx, ecx
mov dword [esp + 0x120], ecx
mov edi, dword [esp + 0x60]
xor ecx, ecx
jmp 0x4fbd28
nop
cmp eax, 1
jge 0x4fbcc3
lea eax, [0x696400]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044b780
mov edx, dword [esp + 0xc]
mov eax, 1
mov dword [edx], 1
mov dword [esp + 0x170], edx
mov dword [esp + 0x174], 1
mov dword [esp + 0x178], eax
add esp, 0x13c
ret
mov ebp, dword [esp + 0x80]
inc ebp
shl ebx, 1
mov dword [esp + 0x50], ecx
mov dword [esp + 0x110], eax
mov dword [esp + 0x54], edi
mov dword [esp + 0xb4], esi
mov esi, dword [esp + 0x64]
mov ecx, ebp
mov eax, ebx
mov edi, edx
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x15c]
mov ebp, dword [esp + 0x168]
cmp ecx, esi
jge 0x4fbf58
mov dword [esp + 0xb0], edi
mov dword [esp + 0x80], ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edi
call fcn.004fa7c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x68]
test ebx, 0x80000000
jne 0x4fbdac
mov ebp, dword [esp + 0x168]
test ebp, ebp
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0xb0]
jmp 0x4fbe53
mov dword [esp + 0x134], eax
mov dword [esp + 0xac], edx
mov dword [esp + 0xa8], ecx
mov ebx, dword [esp + 0x110]
mov dword [esp], ebx
mov ebx, dword [esp + 0x50]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x150]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x154]
mov dword [esp + 0x20], esi
call fcn.004f96e0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x168]
test ebx, ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0xac]
mov ebp, dword [esp + 0x134]
mov dword [esp + 0x110], ebp
mov ebp, dword [esp + 0x168]
jne 0x4fbe76
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x108]
jmp 0x4fbce9
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x130], eax
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov ebx, dword [esp + 0x11c]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x164]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x16c]
mov dword [esp + 0x2c], esi
call fcn.004ff7d0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x78]
mov edi, dword [esp + 0x120]
mov dword [esp + 0x138], edi
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x70], edi
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x6c], edi
mov edi, dword [esp + 0x130]
mov dword [esp + 0x11c], edi
mov dword [esp + 0x120], ebx
mov ebx, dword [esp + 0x68]
mov edi, dword [esp + 0x78]
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x74]
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x168]
jmp 0x4fbce9
lea esi, [ebx - 2]
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x58], eax
mov dword [esp + 0xf8], ecx
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x114], ecx
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x50], edx
mov dword [esp + 0xe8], ebx
mov ebx, dword [esp + 0x138]
mov dword [esp + 0x110], ebx
mov ecx, dword [esp + 0xf8]
mov eax, dword [esp + 0x100]
mov edx, dword [esp + 0xf0]
mov ebx, dword [esp + 0xe8]
jmp 0x4fc017
dec esi
mov ebx, dword [esp + 0x15c]
mov ebp, dword [esp + 0x74]
mov ebp, dword [esp + 0x168]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x58], eax
mov dword [esp + 0xd8], ecx
mov ecx, dword [esp + 0x138]
mov dword [esp + 0x114], ecx
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0xe0]
test esi, esi
jl 0x4fc06d
cmp ebx, esi
jbe 0x4fc377
mov dword [esp + 0x84], esi
mov ebx, dword [edx + esi*4]
mov dword [esp + 0xd0], eax
xor eax, eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xc8], ecx
mov ecx, dword [esp + 0x114]
mov dword [esp + 0x138], ecx
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xd0]
jmp 0x4fc104
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0x114]
mov eax, ecx
jmp 0x4fc07e
mov ecx, ebp
test ecx, ecx
jle 0x4fc091
lea ebp, [ecx - 1]
cmp eax, ebp
jbe 0x4fc0b8
mov esi, dword [ebx + ecx*4 - 4]
test esi, esi
je 0x4fc07c
cmp ecx, edi
ja 0x4fc0b1
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ecx
mov dword [esp + 0x178], edi
add esp, 0x13c
ret
mov edx, edi
call fcn.00463190
mov ecx, eax
mov eax, ebp
call fcn.00463150
mov ebp, dword [esp + 0x7c]
inc ebp
shl ebx, 1
mov dword [esp + 0x7c], ebp
mov dword [esp + 0xb4], edx
mov dword [esp + 0x138], eax
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], edi
mov eax, dword [esp + 0x120]
mov edx, dword [esp + 0x158]
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x84]
mov edi, ecx
mov ecx, dword [esp + 0x78]
mov ebp, dword [esp + 0x7c]
cmp ebp, 0x20
jge 0x4fbfcf
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], ecx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x68], ebx
mov eax, dword [esp + 0x110]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edi
call fcn.004fa7c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x68]
test ebx, 0x80000000
jne 0x4fc1ac
mov ebp, dword [esp + 0x168]
test ebp, ebp
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xb4]
mov esi, dword [esp + 0x138]
mov dword [esp + 0x110], esi
mov esi, dword [esp + 0x9c]
jmp 0x4fc256
mov dword [esp + 0x94], edx
mov dword [esp + 0x128], eax
mov dword [esp + 0x90], ecx
mov ebx, dword [esp + 0x138]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x14c]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x150]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x154]
mov dword [esp + 0x20], esi
call fcn.004f96e0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x168]
test ebx, ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x168]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x94]
mov ebp, dword [esp + 0x128]
mov dword [esp + 0x110], ebp
mov ebp, dword [esp + 0x168]
jne 0x4fc292
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x78], eax
mov dword [esp + 0xb8], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x120], ecx
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xb8]
jmp 0x4fc0c1
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], edx
mov dword [esp + 0x124], eax
mov ebx, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov ebx, dword [esp + 0x11c]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
mov ebx, dword [esp + 0x164]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x16c]
mov dword [esp + 0x2c], esi
call fcn.004ff7d0
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x74]
mov edi, dword [esp + 0x12c]
mov dword [esp + 0x110], edi
mov edi, dword [esp + 0x8c]
mov dword [esp + 0x70], edi
mov edi, dword [esp + 0x88]
mov dword [esp + 0x6c], edi
mov edi, dword [esp + 0x124]
mov dword [esp + 0x11c], edi
mov dword [esp + 0x78], esi
mov dword [esp + 0x120], ebx
mov ebx, dword [esp + 0x68]
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 0x74]
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x168]
jmp 0x4fc0c1
mov eax, esi
mov ecx, ebx
call fcn.00463150
mov eax, edi
mov ecx, 0x100
call fcn.00463160
nop
call fcn.00461cc0
jmp fcn.004fb6c0