Function at 0x4fa640
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x44]
cmp eax, dword [ecx + 8]
jbe 0x4fad15
sub esp, 0xc4
mov edx, dword [esp + 0xec]
test edx, edx
je 0x4fa6c0
mov ecx, dword [esp + 0xf0]
lea edx, [ecx - 1]
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0xd0]
mov edi, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [esp + 0xa0], eax
xor eax, eax
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xa0]
jmp 0x4faa81
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0xc8]
mov dword [esp + 0x8c], eax
mov ebp, dword [esp + 0xe0]
cmp ebp, 0xa
jne 0x4fa6f6
mov ebp, eax
jmp 0x4fa893
mov esi, eax
jmp 0x4fa707
mov edx, ecx
mov ecx, dword [esp + 0x84]
mov ebx, eax
mov eax, edi
test edx, edx
je 0x4fa7a4
mov dword [esp + 0x74], eax
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x18], eax
call fcn.004fb6b0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0xe0]
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 0xe4]
mov dword [esp + 0xb0], eax
xor eax, eax
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xb0]
jmp 0x4fa824
mov edi, dword [esp + 0x80]
jmp 0x4fa6fa
mov edx, dword [esp + 0xd4]
jmp 0x4fa7b4
mov byte [eax + edx - 1], 0x30
mov eax, ebx
test eax, eax
jle 0x4fa7c1
lea ebx, [eax - 1]
cmp esi, ebx
ja 0x4fa7ad
jmp 0x4fa7c8
add esp, 0xc4
ret
mov eax, ebx
mov ecx, esi
call fcn.00461150
mov byte [esp + 0x4b], dl
mov edx, dword [esp + 0xd4]
movzx ecx, byte [esp + 0x4b]
mov byte [edi + edx - 1], cl
mov edx, dword [esp + 0x68]
inc edx
mov dword [esp + 0x68], edx
mov edi, eax
mov eax, dword [esp + 0x60]
xor edx, edx
div ebp
mov edx, dword [esp + 0xe4]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov ebx, eax
mov dword [esp + 0x80], edi
mov eax, dword [esp + 0xc0]
mov edi, dword [esp + 0xe4]
mov edx, dword [esp + 0x68]
cmp edi, edx
jle 0x4fa798
mov edi, dword [esp + 0x80]
test edi, edi
jle 0x4fa6fa
test ebp, ebp
je 0x4fa87a
mov eax, ebx
xor edx, edx
div ebp
cmp edx, 0x3e
jae 0x4fa86e
mov dword [esp + 0x60], ebx
lea eax, [edi - 1]
lea ebx, [0x61e527]
movzx edx, byte [ebx + edx]
cmp esi, eax
ja 0x4fa7d1
mov ecx, esi
call fcn.00461150
mov eax, edx
mov ecx, 0x3e
call fcn.00461160
call fcn.00434c30
mov ebp, edi
mov edx, ecx
mov ecx, dword [esp + 0x88]
mov ebx, eax
mov eax, dword [esp + 0x84]
test edx, edx
je 0x4fa926
mov dword [esp + 0x74], eax
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x18], eax
call fcn.004fb6b0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0x8c]
mov dword [esp + 0xa8], eax
xor eax, eax
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0xa8]
jmp 0x4fa954
mov ebp, dword [esp + 0x84]
jmp 0x4fa87f
mov esi, ebp
jmp 0x4fa7a4
add ebx, 0x30
mov byte [ebp + esi - 1], bl
mov ebx, dword [esp + 0x6c]
inc ebx
mov ebp, dword [esp + 0xe4]
mov edx, dword [esp + 0x88]
mov dword [esp + 0x6c], ebx
mov ebx, eax
mov eax, dword [esp + 0xc0]
mov edx, dword [esp + 0x6c]
cmp ebp, edx
jle 0x4fa91a
mov ebp, dword [esp + 0x84]
test ebp, ebp
jle 0x4fa87f
lea edx, [ebp - 1]
mov dword [esp + 0x84], edx
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov eax, edx
lea edx, [edx + edx*4]
shl edx, 1
sub ebx, edx
mov edx, dword [esp + 0x84]
cmp edi, edx
ja 0x4fa92d
mov eax, edx
mov ecx, edi
call fcn.00461150
mov dword [esp + 0x78], ecx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x58], ebp
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x84], edx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov edx, dword [esp + 0xdc]
sub edx, ecx
mov dword [esp + 0x7c], edx
neg edx
sar edx, 0x1f
and edx, ecx
mov ebx, dword [esp + 0xd4]
add edx, ebx
mov dword [esp + 0xc], edx
sub edi, ecx
mov dword [esp + 0x10], edi
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x18], edx
mov edi, dword [esp + 0xe4]
mov dword [esp + 0x1c], edi
mov ebx, dword [esp + 0xe8]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], eax
mov edi, dword [esp + 0x88]
mov dword [esp + 0x28], edi
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0x2c], ebx
call fcn.004fa640
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0x88]
mov ecx, eax
mov ebx, dword [esp + 0xec]
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0xc0]
mov esi, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x78]
cmp dword [0x79e7ec], eax
jge 0x4fac99
mov dword [esp + 0xb8], edi
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x54], esi
lea ebp, [eax - 1]
test ebp, ebp
jl 0x4fab30
mov esi, dword [edi + eax*4 - 4]
nop
cmp esi, 0x10000
jb 0x4faad3
shr esi, 0x10
mov dword [esp + 0x90], eax
mov eax, 0x10
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x90]
jmp 0x4faae7
mov dword [esp + 0x98], eax
xor eax, eax
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x98]
cmp esi, 0x100
jb 0x4faafb
shr esi, 8
mov edi, dword [esp + 0x64]
add edi, 8
jmp 0x4faaff
mov edi, dword [esp + 0x64]
cmp esi, 0x100
jae 0x4fad08
shl ebp, 5
lea ebx, [0x620151]
movzx esi, byte [ebx + esi]
add esi, edi
add ebp, esi
mov ebx, dword [esp + 0xec]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0xb8]
jmp 0x4fab32
xor ebp, ebp
mov dword [esp + 0x4c], ebp
sar ebp, 1
jmp 0x4facb3
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0xb8]
cmp ecx, edx
jbe 0x4facfa
lea ebp, [edx + edx*4]
mov dword [esp + 0x88], ebp
lea ebp, [ebx + ebp*4 + 0xc]
mov esi, dword [esp + 0x4c]
cmp dword [ebp], esi
jge 0x4fab6b
xor ebp, ebp
jmp 0x4fabcd
mov dword [esp + 0x70], edx
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x88]
mov edx, dword [ebx + ecx*4]
mov ebp, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4 + 8]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x14], ecx
call fcn.004f4130
mov eax, dword [esp + 0x18]
test eax, eax
setge al
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0xec]
mov edi, dword [esp + 0xb8]
mov ebp, eax
mov eax, dword [esp + 0x50]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4fabdc
dec edx
test edx, edx
jl 0x4face2
cmp ecx, edx
jbe 0x4facdb
mov dword [esp + 0x88], edx
lea ecx, [edx + edx*4]
mov dword [esp + 0x84], ecx
mov ebp, dword [ebx + ecx*4]
mov esi, dword [ebx + ecx*4 + 4]
mov edx, dword [ebx + ecx*4 + 8]
mov dword [esp], edi
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], edx
call fcn.004fb350
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x84]
mov eax, dword [esp + 0xec]
mov edi, dword [eax + edi*4 + 0x10]
mov ecx, dword [esp + 0x8c]
sub ecx, edi
mov edi, dword [esp + 0x8c]
cmp edi, ecx
jae 0x4fa99c
jmp 0x4facd2
mov ecx, esi
mov edx, eax
mov ebx, edi
mov eax, ebp
jmp 0x4fa6dc
mov edi, dword [esp + 0xb8]
mov edx, esi
mov esi, dword [esp + 0x54]
test edx, edx
jle 0x4fab48
lea esi, [edx - 1]
cmp ecx, esi
jbe 0x4fad01
lea edi, [edx + edx*4]
lea edi, [ebx + edi*4 - 8]
cmp dword [edi], ebp
jg 0x4faca6
jmp 0x4fab3d
mov eax, ecx
mov ecx, edi
call fcn.004611b0
mov eax, edx
call fcn.00461150
lea eax, [0x5e4740]
mov dword [esp], eax
lea eax, [0x667d2c]
mov dword [esp + 4], eax
call fcn.00435ee0
mov eax, edx
call fcn.00461150
mov eax, esi
call fcn.00461150
mov eax, esi
mov ecx, 0x100
call fcn.00461160
nop
call fcn.0045fcc0
jmp fcn.004fa640