Function at 0x4f2500
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x10]
cmp eax, dword [ecx + 8]
jbe 0x4f2c1b
sub esp, 0x90
mov ecx, dword [esp + 0xa4]
test ecx, ecx
je 0x4f27a6
cmp ecx, 1
jne 0x4f2594
mov ebx, dword [esp + 0xa0]
mov eax, dword [ebx]
mov ebx, dword [esp + 0x9c]
cmp ebx, 2
jl 0x4f2550
mov ecx, dword [esp + 0x94]
jmp 0x4f2581
mov dword [esp + 0x70], eax
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 6
call fcn.0044e560
mov eax, dword [esp + 0xc]
mov ecx, eax
mov ebx, 6
mov eax, dword [esp + 0x70]
mul eax
nop
nop
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov eax, 2
jmp 0x4f2be5
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x4f25c6
mov ebx, dword [esp + 0x94]
lea ebp, [ebx + eax*4 - 4]
mov edx, dword [esp + 0xa8]
mov esi, dword [esp + 0xa0]
lea edi, [esi + edx*4 - 4]
cmp edi, ebp
jne 0x4f25db
xor eax, eax
xor ebx, ebx
jmp 0x4f25db
mov edx, dword [esp + 0xa8]
mov esi, dword [esp + 0xa0]
mov ebx, dword [esp + 0x94]
cmp dword [0x9372c0], ecx
jg 0x4f26cc
mov ebp, dword [0x9372c4]
cmp ecx, ebp
jl 0x4f2601
nop
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x64], ecx
mov ecx, edi
jmp 0x4f2864
mov ebp, ecx
shl ebp, 1
cmp eax, ebp
jl 0x4f2614
jae 0x4f2690
jmp 0x4f2849
cmp ebp, 1
jne 0x4f2655
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044e560
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
mov eax, 1
mov ebp, 1
jmp 0x4f2690
mov dword [esp + 0x5c], ebp
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [ebp + 4]
mov dword [esp + 0x34], eax
mov dword [esp + 8], eax
call fcn.0044e560
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x34], eax
mov dword [esp + 0x68], ebp
mov dword [esp + 0x7c], ebx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov esi, dword [esp + 0xa0]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004f1e20
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x68]
jmp 0x4f2814
mov ebp, ecx
shl ebp, 1
cmp eax, ebp
jl 0x4f26df
jae 0x4f275b
jmp 0x4f280a
cmp ebp, 1
jne 0x4f2720
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044e560
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
mov eax, 1
mov ebp, 1
jmp 0x4f275b
mov dword [esp + 0x60], ebp
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [ebp + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 8], eax
call fcn.0044e560
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
mov eax, dword [esp + 0x38]
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x38], eax
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x80], ebx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov esi, dword [esp + 0xa0]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
call fcn.004f06d0
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x6c]
jmp 0x4f27d5
mov eax, dword [esp + 0x94]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xb4], eax
add esp, 0x90
ret
dec ecx
test ecx, ecx
jle 0x4f27e1
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4f27d4
mov edx, dword [esp + 0x38]
cmp ecx, edx
ja 0x4f2805
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], edx
add esp, 0x90
ret
call fcn.00468f10
mov ecx, ebp
mov edx, eax
call fcn.00468f10
dec ecx
test ecx, ecx
jle 0x4f2820
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4f2813
mov edx, dword [esp + 0x34]
cmp ecx, edx
ja 0x4f2844
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], edx
add esp, 0x90
ret
call fcn.00468f10
mov ecx, ebp
mov edx, eax
call fcn.00468f10
sar ecx, 1
mov esi, dword [esp + 0x64]
inc esi
mov dword [esp + 0x64], esi
mov esi, dword [esp + 0xa0]
cmp ecx, ebp
jg 0x4f2852
mov ebp, ecx
mov ecx, dword [esp + 0x64]
shl ebp, cl
cmp ecx, 0x20
sbb ecx, ecx
and ecx, ebp
cmp edx, ecx
jb 0x4f2bdf
lea ebp, [ecx + ecx*2]
shl ebp, 1
shl edi, 1
cmp edi, ebp
jl 0x4f288c
mov ebp, edi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x48], edi
cmp ebp, eax
jg 0x4f28a3
jbe 0x4f2927
jmp 0x4f2bd6
cmp ebp, 1
jne 0x4f28e8
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044e560
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0xa8]
mov esi, dword [esp + 0xa0]
mov eax, 1
mov ebp, 1
jmp 0x4f2927
mov dword [esp + 0x3c], ebp
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [ebp + 4]
mov dword [esp + 0x30], eax
mov dword [esp + 8], eax
call fcn.0044e560
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0xa8]
mov esi, dword [esp + 0xa0]
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x44], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004f20f0
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
cmp edx, ecx
jb 0x4f2bd1
mov eax, dword [esp + 0x40]
mov ebx, eax
shl ebx, 1
cmp ebx, ecx
ja 0x4f2bca
mov dword [esp + 0x74], ebx
mov ebp, ecx
sub ecx, ebx
mov esi, edx
sub esi, ebx
xchg esi, ebx
neg ebx
xchg esi, ebx
mov edi, eax
shl eax, 3
sar esi, 0x1f
and eax, esi
mov esi, dword [esp + 0x78]
add eax, esi
test ecx, ecx
je 0x4f29b4
mov dword [esp], eax
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.00469620
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0x40]
mov eax, dword [esp + 0xa4]
cmp eax, edi
jle 0x4f2b8d
mov dword [esp], ebx
call fcn.004f2c30
nop
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x40]
mov edx, ecx
jmp 0x4f29dc
dec ecx
test ecx, ecx
jle 0x4f29e8
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4f29db
mov ebx, dword [esp + 0xa8]
cmp ebx, ecx
jb 0x4f2bc3
mov ebp, dword [esp + 4]
mov dword [esp + 0x88], ebp
mov esi, dword [ebp]
mov edi, dword [ebp + 4]
mov ebp, dword [ebp + 8]
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
sub ebx, edx
mov dword [esp + 0x50], ebx
mov ecx, ebx
neg ebx
mov ebp, edx
shl edx, 2
sar ebx, 0x1f
and edx, ebx
add eax, edx
mov dword [esp + 0x84], eax
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0xa4]
sub edx, ebp
mov dword [esp + 0x4c], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
call fcn.004f1550
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0x78]
mov dword [esp], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x44]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
call fcn.004f1440
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x58]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
call fcn.004f1440
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x14], eax
call fcn.004f2500
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x78]
mov dword [esp], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x44]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x74]
mov dword [esp + 0x18], eax
call fcn.004f1440
nop
lea eax, [0x96ef80]
mov dword [esp], eax
lea eax, [0x738020]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.00472ec0
mov edx, dword [esp + 0x44]
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x78]
jmp 0x4f2b90
dec ebp
test ebp, ebp
jle 0x4f2b9c
mov eax, dword [esi + ebp*4 - 4]
test eax, eax
je 0x4f2b8f
cmp ebp, edx
ja 0x4f2bbc
mov dword [esp + 0xac], esi
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xb4], edx
add esp, 0x90
ret
mov ecx, ebp
call fcn.00468f10
mov edx, ebx
call fcn.00468f10
mov eax, ebx
call fcn.00468f30
call fcn.00468f10
mov ecx, ebp
mov edx, eax
call fcn.00468f10
call fcn.00468f10
dec eax
test eax, eax
jle 0x4f2bf1
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4f2be4
cmp eax, ebx
ja 0x4f2c11
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ebx
add esp, 0x90
ret
mov ecx, eax
mov edx, ebx
call fcn.00468f10
nop
call fcn.00467a60
jmp fcn.004f2500