Function at 0x4fc600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x4fd24a
sub esp, 0x12c
mov byte [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov eax, dword [esp + 0x13c]
lea ecx, [esp + 0x11c]
cmp eax, ecx
je 0x4fc6d5
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
test ecx, ecx
jg 0x4fd1a8
mov ebx, ecx
xor ebp, ebp
xor esi, esi
cmp ecx, ebx
jle 0x4fd1a1
mov dword [esp + 0x44], ebp
mov dword [esp + 0x30], ecx
mov dword [esp + 0xa8], esi
cmp esi, edx
je 0x4fc6a0
mov dword [esp], esi
mov dword [esp + 4], edx
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.004516d0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x13c]
movzx ecx, byte [eax]
mov byte [esp + 0x11c], cl
mov byte [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov ecx, dword [esp + 0x140]
lea edx, [esp + 0x10c]
cmp ecx, edx
je 0x4fd19a
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 8]
test ebx, ebx
jg 0x4fd0fb
mov ebp, ebx
xor esi, esi
xor edi, edi
cmp ebx, ebp
jle 0x4fd0f4
mov dword [esp + 0x40], esi
mov dword [esp + 0xa8], edi
mov dword [esp + 0x34], ebx
cmp edi, edx
je 0x4fc756
mov dword [esp], edi
mov dword [esp + 4], edx
shl ebp, 2
mov dword [esp + 8], ebp
call fcn.004516d0
mov eax, dword [esp + 0x34]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x140]
movzx ecx, byte [eax]
mov byte [esp + 0x10c], cl
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x4fd0e3
mov edx, 1
mov byte [esp + 0x2d], dl
test dl, dl
jne 0x4fd062
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x94], ebp
mov dword [esp + 0xa4], ebx
mov byte [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov byte [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov byte [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov byte [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x120]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x118]
mov ebx, dword [esp + 0x110]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
call fcn.004fef10
mov eax, dword [esp + 0x18]
test eax, eax
jge 0x4fd041
lea eax, [esp + 0x11c]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xa4]
lea ebx, [esp + 0x10c]
mov dword [esp + 0x98], edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x94], ecx
mov dword [esp + 0x84], eax
jmp 0x4fc909
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [eax + 8]
cmp ebp, 1
jle 0x4fcaa9
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004fbd20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
movzx ebp, byte [esp + 0x18]
test edx, edx
je 0x4fca38
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ebx
xchg ebp, eax
mov byte [esp + 0x2e], al
xchg ebp, eax
mov esi, dword [esp + 0xa0]
mov dword [esp], esi
mov edi, dword [esp + 0x84]
mov dword [esp + 4], edi
lea esi, [esp + 0xdc]
mov dword [esp + 8], esi
lea esi, [esp + 0xcc]
mov dword [esp + 0xc], esi
lea esi, [esp + 0xbc]
mov dword [esp + 0x10], esi
lea esi, [esp + 0xac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ebx
xchg ebp, eax
mov byte [esp + 0x28], al
xchg ebp, eax
call fcn.004fbf40
movzx eax, byte [esp + 0x2d]
test al, al
je 0x4fc8ed
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
lea edx, [esp + 0xdc]
mov dword [esp + 8], edx
lea ebx, [esp + 0xcc]
mov dword [esp + 0xc], ebx
lea ebp, [esp + 0xbc]
mov dword [esp + 0x10], ebp
lea esi, [esp + 0xac]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x64]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x60]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x58]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x54]
mov dword [esp + 0x24], edi
movzx edi, byte [esp + 0x2e]
xchg edi, eax
mov byte [esp + 0x28], al
xchg edi, eax
call fcn.004fbf40
movzx eax, byte [esp + 0x2d]
jmp 0x4fc8ed
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x94]
mov dword [esp + 0xc], ebx
lea ebp, [esp + 0xdc]
mov dword [esp + 0x10], ebp
lea esi, [esp + 0xcc]
mov dword [esp + 0x14], esi
lea edi, [esp + 0xbc]
mov dword [esp + 0x18], edi
lea edi, [esp + 0xac]
mov dword [esp + 0x1c], edi
movzx edi, byte [esp + 0x2d]
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
call fcn.004fc230
movzx eax, byte [esp + 0x2d]
jmp 0x4fc8ed
test ebp, ebp
jle 0x4fd03a
cmp dword [ebx + 8], 1
jg 0x4fcfce
mov ebp, dword [eax + 8]
mov esi, dword [eax + 4]
test ebp, ebp
jle 0x4fcfc7
mov ebp, dword [ebx + 8]
mov edi, edx
mov edx, dword [ebx + 4]
mov esi, dword [esi]
test ebp, ebp
jbe 0x4fd240
mov edx, dword [edx]
movzx ebp, byte [esp + 0x2d]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4fcfbc
mov ebp, 1
xor ebp, ebp
mov dword [esp + 0x5c], ebp
mov ebp, 1
mov dword [esp + 0x50], ebp
xor ebp, ebp
mov dword [esp + 0x4c], ebp
mov ebp, 1
xchg ebp, eax
mov byte [esp + 0x2f], al
xchg ebp, eax
mov ebp, 1
jmp 0x4fcb88
mov eax, edx
xor edx, edx
div esi
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
xor edx, edx
div esi
mov eax, edx
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x68]
imul edx, ebx
add edx, ebp
mov ebp, edx
mov edx, dword [esp + 0x50]
imul ebx, edx
mov edx, dword [esp + 0x4c]
add edx, ebx
mov ebx, edx
movzx edx, byte [esp + 0x2f]
xor edx, 1
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x4c], eax
mov byte [esp + 0x2f], dl
mov eax, dword [esp + 0x84]
mov edx, esi
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0x7c]
mov esi, ebp
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x5c], esi
mov esi, dword [esp + 0x7c]
mov dword [esp + 0x6c], edx
test esi, esi
jne 0x4fcb18
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
test ebp, ebp
jne 0x4fcf51
xor ebp, ebp
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], eax
mov dword [esp + 0xb0], esi
mov eax, dword [esp + 0xc8]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0x4c]
test esi, esi
jne 0x4fcef9
xor esi, esi
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc8], eax
mov dword [esp + 0xc0], ebp
movzx eax, byte [esp + 0x2f]
mov ecx, eax
xor eax, 1
mov byte [esp + 0xac], al
mov byte [esp + 0xbc], cl
lea eax, [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.004fb1a0
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004fb1a0
mov eax, dword [esp + 0x98]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
lea ecx, [esp + 0xbc]
mov dword [esp + 8], ecx
call fcn.004fad00
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xa0]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 4]
test ecx, ecx
jbe 0x4fd239
mov dword [ebx], eax
mov ecx, dword [esp + 0x138]
test ecx, ecx
je 0x4fceeb
mov ebx, dword [esp + 0x140]
cmp ecx, ebx
jne 0x4fcee4
nop
mov ebp, dword [esp + 0x84]
cmp ebx, ebp
je 0x4fcedd
mov esi, dword [ebp + 0xc]
mov eax, edx
mov edx, dword [ebp + 4]
mov edi, ecx
mov ecx, dword [ebx + 8]
mov dword [esp + 0x38], ecx
mov ebx, dword [ebx + 4]
cmp ecx, esi
jg 0x4fce3a
mov dword [esp + 0x3c], esi
mov esi, dword [esp + 0x38]
cmp ecx, esi
jle 0x4fce33
mov dword [esp + 0xa8], edx
mov dword [esp + 0x78], ecx
cmp edx, ebx
je 0x4fccf7
mov dword [esp], edx
mov dword [esp + 4], ebx
shl esi, 2
mov dword [esp + 8], esi
call fcn.004516d0
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x84]
mov dword [edx + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4fce1f
mov eax, dword [esp + 0xa8]
mov dword [edx + 4], eax
mov eax, dword [esp + 0x140]
movzx eax, byte [eax]
mov byte [edx], al
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 8], ecx
call fcn.004fb1a0
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004faf50
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.004fb440
mov eax, dword [esp + 0x134]
test eax, eax
je 0x4fcdcb
mov ecx, dword [esp + 0x98]
movzx edx, byte [ecx]
mov ebx, dword [ecx + 0xc]
mov ebp, dword [ecx + 8]
mov ecx, dword [ecx + 4]
mov byte [eax], dl
mov dword [eax + 8], ebp
mov dword [eax + 0xc], ebx
mov edx, dword [0x8c1190]
test edx, edx
jne 0x4fce13
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xa0]
movzx edx, byte [ecx]
mov ebx, dword [ecx + 0xc]
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov ebp, dword [esp + 0x130]
mov byte [ebp], dl
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], ebx
mov ecx, dword [0x8c1190]
test ecx, ecx
jne 0x4fce09
mov dword [ebp + 4], eax
mov dword [esp + 0x144], ebp
add esp, 0x12c
ret
lea edi, [ebp + 4]
call fcn.00450d20
jmp 0x4fcdfb
lea edi, [eax + 4]
mov eax, ecx
call fcn.00450d20
jmp 0x4fcdcb
lea edi, [edx + 4]
mov eax, dword [esp + 0xa8]
call fcn.00450d20
jmp 0x4fcd24
mov esi, ecx
jmp 0x4fccd5
mov dword [esp + 0x90], ebx
cmp ecx, 1
jne 0x4fce93
lea eax, [0x659340]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043c2b0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x84]
mov edi, dword [esp + 0x138]
mov esi, 1
mov ecx, 1
jmp 0x4fccc5
lea eax, [0x659340]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x3c], eax
mov dword [esp + 8], eax
call fcn.0043c2b0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x84]
mov edi, dword [esp + 0x138]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
jmp 0x4fccc5
mov edx, ebp
jmp 0x4fcd30
mov edx, ebx
jmp 0x4fcd30
mov eax, dword [esp + 0x134]
test eax, eax
jmp 0x4fcda1
cmp eax, 1
jl 0x4fcf0b
mov dword [ebp], esi
mov esi, 1
jmp 0x4fcbd9
lea eax, [0x659340]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043c2b0
mov ebp, dword [esp + 0xc]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x98]
mov eax, 1
jmp 0x4fcefe
cmp eax, 1
jl 0x4fcf62
mov dword [esi], ebp
mov ebp, 1
jmp 0x4fcba8
mov dword [esp + 0x48], ebp
lea eax, [0x659340]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043c2b0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x48]
mov edi, dword [esp + 0x98]
mov eax, 1
jmp 0x4fcf56
mov ecx, eax
mov eax, edx
xor edx, edx
div esi
mov eax, ecx
mov ebp, esi
mov esi, edx
mov edx, ebp
test esi, esi
jne 0x4fcfac
mov eax, edx
jmp 0x4fcc64
mov edx, ebx
jmp 0x4fcc7b
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
lea ebp, [esp + 0xdc]
mov dword [esp + 0x10], ebp
lea ebp, [esp + 0xcc]
mov dword [esp + 0x14], ebp
lea ebp, [esp + 0xbc]
mov dword [esp + 0x18], ebp
lea esi, [esp + 0xac]
mov dword [esp + 0x1c], esi
movzx edi, byte [esp + 0x2d]
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
call fcn.004fc230
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa0]
jmp 0x4fcabb
mov edx, ebx
jmp 0x4fcc7b
lea eax, [esp + 0x10c]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x94]
lea ebx, [esp + 0x11c]
jmp 0x4fc8cf
mov byte [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea eax, [esp + 0xfc]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0
call fcn.004fab50
mov ebp, dword [esp + 0xc]
mov byte [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea ebx, [esp + 0xec]
jmp 0x4fc7af
mov ebx, dword [esp + 0x138]
test ebx, ebx
setne dl
jmp 0x4fc79f
mov ebp, ebx
jmp 0x4fc730
mov dword [esp + 0x8c], edx
mov dword [esp + 0x74], ebx
cmp ebx, 1
jne 0x4fd155
lea eax, [0x659340]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043c2b0
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov esi, 1
mov ebx, 1
jmp 0x4fc728
lea eax, [0x659340]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea ecx, [ebx + 4]
mov dword [esp + 0x40], ecx
mov dword [esp + 8], ecx
call fcn.0043c2b0
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x40]
mov ebx, ebp
jmp 0x4fc728
mov eax, ecx
jmp 0x4fc78b
mov ebx, ecx
jmp 0x4fc67a
mov dword [esp + 0x70], ecx
mov dword [esp + 0x88], edx
cmp ecx, 1
jne 0x4fd1fb
lea eax, [0x659340]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043c2b0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x70]
mov ebp, 1
mov ecx, 1
jmp 0x4fc672
lea eax, [0x659340]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [ecx + 4]
mov dword [esp + 0x44], edx
mov dword [esp + 8], edx
call fcn.0043c2b0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x44]
mov ecx, ebx
jmp 0x4fc672
xor eax, eax
call fcn.00450da0
xor eax, eax
mov ecx, ebp
call fcn.00450da0
nop
call fcn.0044f4e0
jmp fcn.004fc600