Function at 0x4fa870
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x48]
cmp eax, dword [ecx + 8]
jbe 0x4fb2bd
sub esp, 0xc8
mov ebx, dword [esp + 0xcc]
mov ebp, dword [ebx + 0x10]
mov esi, dword [esp + 0xd0]
sub esi, ebp
shl esi, 2
mov dword [esp + 0x3c], esi
mov edi, dword [esp + 0xd8]
sub edi, ebp
shl edi, 2
mov ebp, dword [ebx + 0x14]
mov eax, edi
mov edi, dword [esp + 0xd4]
sub edi, ebp
mov ecx, esi
mov esi, dword [esp + 0xdc]
sub esi, ebp
mov dword [esp + 8], esi
mov ebp, dword [esp + 0xe0]
mov edx, ebp
mov ebp, dword [ebp + 0x2c]
cmp ebp, 1
jg 0x4fa937
test ebp, ebp
jne 0x4fa90d
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x94]
jmp 0x4fb0c2
cmp ebp, 1
jne 0x4fa988
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x9c]
jmp 0x4fae7a
cmp ebp, 2
jne 0x4fa961
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa4]
jmp 0x4fac1a
cmp ebp, 3
jne 0x4fa988
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xac]
jmp 0x4fa9c6
mov byte [esp + 0xec], 0
add esp, 0xc8
ret
mov ecx, dword [esp + 0x60]
inc ecx
mov ebx, dword [esp + 0x2c]
inc ebx
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xe4]
mov ebp, esi
mov esi, dword [esp + 8]
mov edi, ecx
mov dword [esp + 0x2c], ebx
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0xcc]
cmp edi, esi
je 0x4faa7b
mov esi, dword [ebx + 4]
mov ebp, dword [ebx]
mov dword [esp + 0xc4], ebp
mov ebp, dword [ebx + 8]
mov ebx, dword [ebx + 0xc]
imul ebx, edi
cmp esi, ebx
jb 0x4fabeb
mov dword [esp + 0x60], edi
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov edi, dword [esp + 0xc4]
add ebp, edi
mov dword [esp + 0xb4], ebp
sub esi, ebx
mov dword [esp + 0x50], esi
mov ebx, dword [edx + 0x34]
mov dword [esp + 0x90], ebx
mov edi, dword [esp + 0x2c]
sub edi, ebx
imul edi, dword [edx + 0x24]
mov ebp, dword [edx + 0x30]
mov ebx, dword [esp + 0xe4]
sub ebx, ebp
mov dword [esp + 0x8c], ebx
lea ebp, [edi + ebx]
mov dword [esp + 0x1c], ebp
mov edi, dword [esp + 0x2c]
shr edi, 0x1f
mov ebp, dword [esp + 0x2c]
add edi, ebp
sar edi, 1
mov ebp, dword [esp + 0x90]
shr ebp, 0x1f
mov ebx, dword [esp + 0x90]
add ebx, ebp
sar ebx, 1
sub edi, ebx
imul edi, dword [edx + 0x28]
mov ebx, dword [esp + 0x8c]
add ebx, edi
mov ebp, dword [esp + 0x1c]
mov edi, ecx
jmp 0x4faad7
mov byte [esp + 0xec], 1
add esp, 0xc8
ret
sub edi, ecx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and ecx, edi
mov edi, dword [esp + 0x40]
mov edx, dword [esp + 0xb4]
xchg edi, eax
mov byte [edx + ecx], al
xchg edi, eax
xchg ebp, eax
mov byte [edx + ecx + 1], al
xchg ebp, eax
mov byte [edx + ecx + 2], bl
mov byte [edx + ecx + 3], 0xff
mov ecx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x70]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xe0]
mov edx, ecx
mov edi, dword [esp + 0x3c]
mov ecx, esi
mov esi, dword [esp + 0x50]
cmp ecx, eax
je 0x4fa997
mov edi, dword [edx + 4]
mov esi, dword [edx]
cmp ebp, edi
jae 0x4fabe2
mov dword [esp + 0x1c], ebp
movzx esi, byte [ebp + esi]
mov edi, dword [edx + 0x10]
mov ebp, dword [edx + 0xc]
cmp ebx, edi
jae 0x4fabd9
movzx ebp, byte [ebx + ebp]
mov dword [esp + 0x88], ebp
mov edi, dword [edx + 0x1c]
mov ebp, dword [edx + 0x18]
cmp ebx, edi
jae 0x4fabd0
imul esi, esi, 0x10101
movzx ebp, byte [ebx + ebp]
imul edi, ebp, 0x166e9
lea edi, [esi + edi - 0xb37480]
test edi, 0xff000000
jne 0x4fab40
sar edi, 0x10
jmp 0x4fab49
sar edi, 0x1f
xchg edi, ebx
not ebx
xchg edi, ebx
mov dword [esp + 0x78], esi
mov dword [esp + 0x40], edi
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0x88]
imul edi, ebx, 0x581a
sub esi, edi
imul ebp, ebp, 0xb6d2
sub esi, ebp
lea ebp, [esi + 0x877600]
test ebp, 0xff000000
jne 0x4fab7f
sar ebp, 0x10
jmp 0x4fab88
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
imul ebx, ebx, 0x1c5a2
mov esi, dword [esp + 0x78]
lea ebx, [ebx + esi - 0xe2d100]
test ebx, 0xff000000
jne 0x4faba6
sar ebx, 0x10
jmp 0x4fabab
sar ebx, 0x1f
not ebx
lea esi, [ecx + 4]
mov edi, dword [esp + 0x50]
cmp edi, esi
jb 0x4fabc7
cmp ecx, esi
jbe 0x4faa8a
mov eax, ecx
mov ecx, esi
call fcn.00456c00
mov ecx, esi
mov edx, edi
call fcn.00456bf0
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebp
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, esi
call fcn.00456ba0
mov ecx, dword [esp + 0x64]
lea edi, [ecx + 1]
mov ecx, dword [esp + 0x30]
inc ecx
mov ebx, dword [esp + 0xcc]
mov esi, dword [esp + 8]
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x3c]
cmp edi, esi
je 0x4faa7b
mov esi, dword [ebx + 4]
mov ebp, dword [ebx]
mov dword [esp + 0xc4], ebp
mov ebp, dword [ebx + 8]
mov ebx, dword [ebx + 0xc]
imul ebx, edi
cmp esi, ebx
jb 0x4fae4b
mov dword [esp + 0x64], edi
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov edi, dword [esp + 0xc4]
add ebp, edi
mov dword [esp + 0xb8], ebp
sub esi, ebx
mov dword [esp + 0x54], esi
mov ebx, dword [edx + 0x34]
mov dword [esp + 0x90], ebx
mov edi, dword [esp + 0x30]
sub edi, ebx
imul edi, dword [edx + 0x24]
mov ebp, dword [edx + 0x30]
mov dword [esp + 0x8c], ebp
mov ebx, dword [esp + 0xe4]
sub ebx, ebp
add ebx, edi
mov dword [esp + 0x20], ebx
mov edi, dword [esp + 0x30]
shr edi, 0x1f
mov ebx, dword [esp + 0x30]
add edi, ebx
sar edi, 1
mov ebx, dword [esp + 0x90]
shr ebx, 0x1f
mov ebp, dword [esp + 0x90]
add ebx, ebp
sar ebx, 1
sub edi, ebx
imul edi, dword [edx + 0x28]
mov ebx, dword [esp + 0x8c]
mov ebp, ebx
shr ebx, 0x1f
add ebx, ebp
sar ebx, 1
sub edi, ebx
mov dword [esp + 0x14], edi
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0xe4]
jmp 0x4fad2b
sub edi, ecx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, ecx
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xb8]
mov byte [edx + edi], cl
mov byte [edx + edi + 1], bl
xchg ebp, eax
mov byte [edx + edi + 2], al
xchg ebp, eax
mov byte [edx + edi + 3], 0xff
mov ecx, dword [esp + 0xc]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x20]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xe0]
mov edi, dword [esp + 0x14]
mov edx, ecx
mov ecx, esi
mov esi, dword [esp + 0x54]
cmp ecx, eax
je 0x4fabf4
mov dword [esp + 0xc], ebp
shr ebp, 0x1f
mov esi, dword [esp + 0xc]
add ebp, esi
sar ebp, 1
add ebp, edi
mov edi, dword [edx + 4]
mov esi, dword [edx]
cmp ebx, edi
jae 0x4fae42
mov dword [esp + 0x20], ebx
movzx esi, byte [esi + ebx]
mov edi, dword [edx + 0x10]
mov ebx, dword [edx + 0xc]
cmp edi, ebp
jbe 0x4fae39
movzx ebx, byte [ebx + ebp]
mov dword [esp + 0x88], ebx
mov edi, dword [edx + 0x1c]
mov ebx, dword [edx + 0x18]
cmp edi, ebp
jbe 0x4fae30
imul esi, esi, 0x10101
movzx ebx, byte [ebx + ebp]
imul ebp, ebx, 0x166e9
lea ebp, [ebp + esi - 0xb37480]
test ebp, 0xff000000
jne 0x4fada4
sar ebp, 0x10
jmp 0x4fadad
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
mov dword [esp + 0x7c], esi
mov dword [esp + 0x44], ebp
mov edi, dword [esp + 0x88]
imul ebp, edi, 0x581a
sub esi, ebp
imul ebx, ebx, 0xb6d2
sub esi, ebx
lea ebx, [esi + 0x877600]
test ebx, 0xff000000
jne 0x4faddf
sar ebx, 0x10
jmp 0x4fade4
sar ebx, 0x1f
not ebx
imul ebp, edi, 0x1c5a2
mov esi, dword [esp + 0x7c]
lea ebp, [ebp + esi - 0xe2d100]
test ebp, 0xff000000
jne 0x4fae02
sar ebp, 0x10
jmp 0x4fae0b
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
lea esi, [ecx + 4]
mov edi, dword [esp + 0x54]
cmp edi, esi
jb 0x4fae27
cmp ecx, esi
jbe 0x4face0
mov eax, ecx
mov ecx, esi
call fcn.00456c00
mov ecx, esi
mov edx, edi
call fcn.00456bf0
mov eax, ebp
mov ecx, edi
call fcn.00456b40
mov eax, ebp
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, esi
call fcn.00456ba0
mov ecx, dword [esp + 0x68]
lea edi, [ecx + 1]
mov ecx, dword [esp + 0x34]
inc ecx
mov ebx, dword [esp + 0xcc]
mov esi, dword [esp + 8]
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x3c]
cmp edi, esi
je 0x4faa7b
mov esi, dword [ebx + 4]
mov ebp, dword [ebx]
mov dword [esp + 0xc4], ebp
mov ebp, dword [ebx + 8]
mov ebx, dword [ebx + 0xc]
imul ebx, edi
cmp esi, ebx
jb 0x4fb08a
mov dword [esp + 0x68], edi
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov edi, dword [esp + 0xc4]
add ebp, edi
mov dword [esp + 0xbc], ebp
sub esi, ebx
mov dword [esp + 0x58], esi
mov ebx, dword [edx + 0x24]
mov edi, dword [edx + 0x34]
mov ebp, dword [esp + 0x34]
sub ebp, edi
mov dword [esp + 0x90], ebp
imul ebx, ebp
mov edi, dword [edx + 0x30]
mov ebp, dword [esp + 0xe4]
sub ebp, edi
add ebx, ebp
mov dword [esp + 0x24], ebx
mov ebp, dword [edx + 0x28]
mov ebx, dword [esp + 0x90]
imul ebx, ebp
mov ebp, edi
shr edi, 0x1f
add ebp, edi
sar ebp, 1
sub ebx, ebp
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0xe4]
jmp 0x4faf62
sub edi, ecx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, ecx
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xbc]
mov byte [edx + edi], cl
mov byte [edx + edi + 1], bl
xchg ebp, eax
mov byte [edx + edi + 2], al
xchg ebp, eax
mov byte [edx + edi + 3], 0xff
mov ecx, dword [esp + 0x10]
lea edi, [ecx + 1]
mov ecx, dword [esp + 0x24]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0xe0]
mov ebx, dword [esp + 0x18]
mov edx, ecx
mov ecx, esi
mov esi, dword [esp + 0x58]
cmp ecx, eax
je 0x4fae54
mov dword [esp + 0x10], edi
shr edi, 0x1f
mov esi, dword [esp + 0x10]
add edi, esi
sar edi, 1
add edi, ebx
mov ebx, dword [edx + 4]
mov esi, dword [edx]
cmp ebp, ebx
jae 0x4fb081
mov dword [esp + 0x24], ebp
movzx ebx, byte [esi + ebp]
mov esi, dword [edx + 0x10]
mov ebp, dword [edx + 0xc]
cmp esi, edi
jbe 0x4fb078
movzx ebp, byte [ebp + edi]
mov dword [esp + 0x88], ebp
mov esi, dword [edx + 0x1c]
mov ebp, dword [edx + 0x18]
cmp esi, edi
jbe 0x4fb06f
imul ebx, ebx, 0x10101
movzx ebp, byte [ebp + edi]
imul esi, ebp, 0x166e9
lea esi, [esi + ebx - 0xb37480]
test esi, 0xff000000
jne 0x4fafdd
sar esi, 0x10
jmp 0x4fafe6
sar esi, 0x1f
xchg esi, ebx
not ebx
xchg esi, ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x48], esi
mov edi, dword [esp + 0x88]
imul esi, edi, 0x581a
sub ebx, esi
imul ebp, ebp, 0xb6d2
sub ebx, ebp
add ebx, 0x877600
test ebx, 0xff000000
jne 0x4fb01b
sar ebx, 0x10
jmp 0x4fb020
sar ebx, 0x1f
not ebx
imul ebp, edi, 0x1c5a2
mov esi, dword [esp + 0x80]
lea ebp, [ebp + esi - 0xe2d100]
test ebp, 0xff000000
jne 0x4fb041
sar ebp, 0x10
jmp 0x4fb04a
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
lea esi, [ecx + 4]
mov edi, dword [esp + 0x58]
cmp edi, esi
jb 0x4fb066
cmp ecx, esi
jbe 0x4faf17
mov eax, ecx
mov ecx, esi
call fcn.00456c00
mov ecx, esi
mov edx, edi
call fcn.00456bf0
mov eax, edi
mov ecx, esi
call fcn.00456b40
mov eax, edi
mov ecx, esi
call fcn.00456b40
mov eax, ebp
mov ecx, ebx
call fcn.00456b40
mov eax, ebx
mov ecx, esi
call fcn.00456ba0
mov ecx, dword [esp + 0x6c]
inc ecx
mov ebx, dword [esp + 0x38]
inc ebx
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xe4]
mov ebp, esi
mov esi, dword [esp + 8]
mov edi, ecx
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0xcc]
cmp edi, esi
je 0x4faa7b
mov esi, dword [ebx + 4]
mov ebp, dword [ebx]
mov dword [esp + 0xc4], ebp
mov ebp, dword [ebx + 8]
mov ebx, dword [ebx + 0xc]
imul ebx, edi
cmp esi, ebx
jb 0x4fb2b3
mov dword [esp + 0x6c], edi
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov edi, dword [esp + 0xc4]
add ebp, edi
mov dword [esp + 0xc0], ebp
sub esi, ebx
mov dword [esp + 0x5c], esi
mov ebx, dword [edx + 0x24]
mov edi, dword [edx + 0x34]
mov ebp, dword [esp + 0x38]
sub ebp, edi
mov dword [esp + 0x90], ebp
imul ebx, ebp
mov edi, dword [edx + 0x30]
mov ebp, dword [esp + 0xe4]
sub ebp, edi
add ebx, ebp
mov dword [esp + 0x28], ebx
mov edi, dword [edx + 0x28]
mov ebx, dword [esp + 0x90]
imul ebx, edi
add ebx, ebp
mov ebp, dword [esp + 0x28]
mov edi, ecx
jmp 0x4fb198
sub edi, ecx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0xc0]
mov byte [edx + edi], cl
xchg ebp, eax
mov byte [edx + edi + 1], al
xchg ebp, eax
mov byte [edx + edi + 2], bl
mov byte [edx + edi + 3], 0xff
mov ecx, dword [esp + 0x28]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x74]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xe0]
mov edx, ecx
mov edi, dword [esp + 0x3c]
mov ecx, esi
mov esi, dword [esp + 0x5c]
cmp ecx, eax
je 0x4fb093
mov edi, dword [edx + 4]
mov esi, dword [edx]
cmp ebp, edi
jae 0x4fb2aa
mov dword [esp + 0x28], ebp
movzx esi, byte [esi + ebp]
mov edi, dword [edx + 0x10]
mov ebp, dword [edx + 0xc]
cmp ebx, edi
jae 0x4fb2a1
movzx ebp, byte [ebp + ebx]
mov dword [esp + 0x88], ebp
mov edi, dword [edx + 0x1c]
mov ebp, dword [edx + 0x18]
cmp ebx, edi
jae 0x4fb298
imul esi, esi, 0x10101
movzx ebp, byte [ebp + ebx]
imul edi, ebp, 0x166e9
lea edi, [edi + esi - 0xb37480]
test edi, 0xff000000
jne 0x4fb202
sar edi, 0x10
jmp 0x4fb20b
sar edi, 0x1f
xchg edi, ebx
not ebx
xchg edi, ebx
mov dword [esp + 0x84], esi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0x88]
imul edi, ebx, 0x581a
sub esi, edi
imul ebp, ebp, 0xb6d2
sub esi, ebp
lea ebp, [esi + 0x877600]
test ebp, 0xff000000
jne 0x4fb244
sar ebp, 0x10
jmp 0x4fb24d
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
imul ebx, ebx, 0x1c5a2
mov esi, dword [esp + 0x84]
lea ebx, [ebx + esi - 0xe2d100]
test ebx, 0xff000000
jne 0x4fb26e
sar ebx, 0x10
jmp 0x4fb273
sar ebx, 0x1f
not ebx
lea esi, [ecx + 4]
mov edi, dword [esp + 0x5c]
cmp edi, esi
jb 0x4fb28f
cmp ecx, esi
jbe 0x4fb14d
mov eax, ecx
mov ecx, esi
call fcn.00456c00
mov ecx, esi
mov edx, edi
call fcn.00456bf0
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebp
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, esi
call fcn.00456ba0
nop
call fcn.00455690
jmp fcn.004fa870