Function at 0x4f4810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x4f51cd
sub esp, 0xa4
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xd0]
sub eax, ecx
mov ebx, dword [esp + 0xb0]
test ebx, ebx
jle 0x4f512c
mov ebp, dword [esp + 0xbc]
test ebp, ebp
jle 0x4f511e
lea esi, [ebx - 1]
cmp esi, ebx
jae 0x4f51c6
mov esi, dword [esp + 0xa8]
lea edi, [esi + ebx*4 - 4]
lea edx, [ebp - 1]
cmp edx, ebp
jae 0x4f51c6
mov edx, dword [esp + 0xb4]
lea edx, [edx + ebp*4 - 4]
cmp edx, edi
sete dl
test dl, dl
je 0x4f504f
xor edx, edx
xor ebx, ebx
mov dword [esp + 0x64], eax
lea esi, [eax + 1]
cmp esi, ebx
jg 0x4f501e
ja 0x4f51b1
mov dword [esp + 0x30], ebx
mov dword [esp + 0xa0], edx
mov dword [esp + 0x2c], esi
lea eax, [ecx + 1]
mov dword [esp], eax
call fcn.004f46d0
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [eax]
mov dword [esp + 0x90], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x54], edx
mov ebx, dword [eax + 8]
mov ebp, dword [esp + 0xbc]
test ebp, ebp
jle 0x4f5002
mov esi, dword [esp + 0xc8]
test esi, esi
jle 0x4f4fed
lea edi, [ebp - 1]
cmp edi, ebp
jae 0x4f51aa
mov edi, dword [esp + 0xb4]
lea edx, [edi + ebp*4 - 4]
lea eax, [esi - 1]
cmp eax, esi
jae 0x4f51aa
mov eax, dword [esp + 0xc0]
lea ecx, [eax + esi*4 - 4]
cmp ecx, edx
sete cl
mov dword [esp + 0x58], ebx
test cl, cl
je 0x4f4f6f
xor ecx, ecx
xor edx, edx
mov ebp, dword [esp + 0xc4]
lea edi, [ebp + 1]
cmp edi, edx
jg 0x4f4f45
ja 0x4f519c
mov dword [esp + 0x28], edi
mov dword [esp + 0x34], edx
mov dword [esp + 0x9c], ecx
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], edx
call fcn.004f19f0
mov eax, dword [esp + 0xd0]
lea ecx, [eax - 1]
cmp ecx, eax
jae 0x4f5195
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + eax*4 - 4]
mov dword [esp], edx
call fcn.004e2c00
mov eax, dword [esp + 4]
mov dword [esp + 0x4c], eax
test eax, eax
ja 0x4f4ebc
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0xd4]
xor ebp, ebp
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0x34]
cmp esi, edi
ja 0x4f518e
mov dword [esp + 0x74], ecx
mov dword [esp + 0x98], edx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0x84], ebp
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov edx, dword [esp + 0xc0]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
call fcn.005014f0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0x28]
cmp ecx, edx
jae 0x4f5187
mov ebx, dword [esp + 0x9c]
mov dword [ebx + ecx*4], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
cmp eax, ecx
jae 0x4f5180
mov eax, dword [esp + 0xd0]
mov ebp, dword [esp + 0x98]
mov esi, dword [ebp + eax*4 - 4]
mov dword [esp + 0x40], esi
mov edi, dword [esp + 0x64]
jmp 0x4f4c3c
mov dword [esp + 0x70], eax
mov dword [esp + 0x50], edi
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
call fcn.005013d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x9c]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0xd0]
mov esi, dword [esp + 0x60]
cmp eax, esi
jbe 0x4f4d96
mov eax, 1
test al, al
je 0x4f4d89
mov eax, dword [esp + 0x5c]
dec eax
mov ecx, dword [esp + 0x40]
lea edi, [ecx + esi]
cmp edi, esi
jae 0x4f4a7f
mov ebp, dword [esp + 0x58]
cmp edx, ebp
ja 0x4f515d
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xc], ebx
mov esi, dword [esp + 0x74]
mov dword [esp + 0x10], esi
mov edi, dword [esp + 0xd4]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], 0
call fcn.00501590
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x54]
cmp ecx, edx
jae 0x4f5156
mov ebx, dword [esp + 0x90]
mov dword [ebx + ecx*4], eax
mov eax, dword [esp + 0x64]
lea ebp, [eax + edx]
cmp eax, ebp
ja 0x4f514f
mov esi, dword [esp + 0x34]
cmp ebp, esi
ja 0x4f514f
sub esi, eax
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
shl eax, 2
sar esi, 0x1f
and esi, eax
mov eax, dword [esp + 0x9c]
add esi, eax
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x28]
cmp ebp, eax
ja 0x4f514f
mov dword [esp + 0x6c], edi
mov dword [esp + 0x94], esi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
sub eax, ebp
mov dword [esp + 0x68], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x20], edx
call fcn.00501450
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x4f4d08
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x2c]
cmp ecx, edx
jae 0x4f5141
mov ebx, dword [esp + 0xa0]
mov dword [ebx + ecx*4], eax
lea edi, [ecx - 1]
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x40]
test edi, edi
jl 0x4f4db9
lea ecx, [eax + edi]
cmp ecx, edx
jae 0x4f5179
mov dword [esp + 0x64], edi
mov dword [esp + 0x78], ecx
mov ecx, dword [ebx + ecx*4]
cmp ecx, esi
je 0x4f4da9
lea edi, [edi + eax - 1]
cmp edi, edx
jae 0x4f5172
mov eax, dword [ebx + edi*4]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], esi
call fcn.005013f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
lea ebx, [edx - 2]
mov ebp, dword [esp + 0x74]
cmp ebx, ebp
jae 0x4f516b
mov dword [esp + 0x5c], eax
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x98]
mov ebx, dword [ecx + edx*4 - 8]
mov dword [esp + 0x3c], ebx
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.005013d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + edx - 2]
mov esi, dword [esp + 0x28]
cmp ebp, esi
jae 0x4f5164
mov edi, dword [esp + 0x9c]
mov ebp, dword [edi + ebp*4]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x7c]
jmp 0x4f4ad0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x78]
cmp eax, ecx
ja 0x4f5148
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov ecx, dword [esp + 0xd0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x98]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x74]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0xd4]
mov dword [esp + 0x20], ebx
call fcn.00501410
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + ecx*4]
add eax, ebx
mov dword [edx + ecx*4], eax
mov eax, dword [esp + 0x5c]
dec eax
jmp 0x4f4bfe
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x5c]
jmp 0x4f4af9
jne 0x4f4da2
cmp ecx, ebp
seta al
jmp 0x4f4ae1
xor eax, eax
jmp 0x4f4ae1
mov ecx, esi
mov edx, eax
mov ebx, edi
mov eax, 0xffffffff
jmp 0x4f4af9
mov eax, dword [esp + 0x84]
test eax, eax
jne 0x4f4eaf
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004f47d0
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
call fcn.004f1a30
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x94], edx
mov ebx, dword [esp + 0x9c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x18], edi
call fcn.00501540
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call fcn.004f1a30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x94]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
add esp, 0xa4
ret
mov dword [esp], eax
call fcn.004f47d0
jmp 0x4f4dc8
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004f46d0
mov eax, dword [esp + 4]
mov dword [esp + 0x84], eax
mov ecx, dword [eax + 4]
mov dword [esp + 0x44], ecx
mov edx, dword [eax]
mov dword [esp + 0x88], edx
mov ebx, dword [eax + 8]
mov dword [esp + 0x48], ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0xcc]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0xd4]
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x18], esi
call fcn.005014f0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x84]
jmp 0x4f49ce
lea eax, [0x744200]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [ebp + 5]
mov dword [esp + 8], eax
call fcn.00439b00
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
jmp 0x4f495f
test ebp, ebp
jle 0x4f4fdb
mov ecx, dword [esp + 0xd4]
test ecx, ecx
jle 0x4f4fd0
lea edx, [ebp - 1]
cmp edx, ebp
jae 0x4f51a3
lea edx, [edi + ebp*4 - 4]
lea ebx, [ecx - 1]
cmp ebx, ecx
jae 0x4f51a3
mov ebx, dword [esp + 0xcc]
lea esi, [ebx + ecx*4 - 4]
cmp esi, edx
sete dl
test dl, dl
je 0x4f4fbc
mov ebx, dword [esp + 0x58]
mov esi, dword [esp + 0xc8]
jmp 0x4f4943
mov ebx, dword [esp + 0x58]
mov esi, dword [esp + 0xc8]
mov ecx, edi
mov edx, ebp
jmp 0x4f4947
mov ebx, dword [esp + 0xcc]
xor edx, edx
jmp 0x4f4fa8
mov ecx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xcc]
xor edx, edx
jmp 0x4f4fa8
mov eax, dword [esp + 0xc0]
mov edi, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x4f4937
mov eax, dword [esp + 0xc0]
mov esi, dword [esp + 0xc8]
mov edi, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x4f4937
lea ecx, [0x744200]
mov dword [esp], ecx
mov dword [esp + 4], esi
lea edx, [eax + 5]
mov dword [esp + 8], edx
call fcn.00439b00
mov esi, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0xd0]
jmp 0x4f48b0
test ebx, ebx
jle 0x4f5110
mov edx, dword [esp + 0xc8]
test edx, edx
jle 0x4f510c
lea edi, [ebx - 1]
cmp edi, ebx
jae 0x4f51bf
lea edi, [esi + ebx*4 - 4]
lea ebp, [edx - 1]
cmp ebp, edx
jae 0x4f51bf
mov ebp, dword [esp + 0xc0]
lea ebp, [ebp + edx*4 - 4]
cmp ebp, edi
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4f50a6
mov ebp, dword [esp + 0xbc]
jmp 0x4f4897
test ebx, ebx
jle 0x4f5101
mov ebp, dword [esp + 0xd4]
test ebp, ebp
jle 0x4f50fd
lea edi, [ebx - 1]
cmp edi, ebx
jae 0x4f51b8
lea edi, [esi + ebx*4 - 4]
lea edx, [ebp - 1]
cmp edx, ebp
jae 0x4f51b8
mov edx, dword [esp + 0xcc]
lea edx, [edx + ebp*4 - 4]
cmp edx, edi
sete dl
test dl, dl
je 0x4f50ef
mov ebp, dword [esp + 0xbc]
jmp 0x4f4897
mov ebp, dword [esp + 0xbc]
mov edx, esi
jmp 0x4f489b
xor edx, edx
jmp 0x4f50df
mov ebp, dword [esp + 0xd4]
xor edx, edx
jmp 0x4f50df
xor ebp, ebp
jmp 0x4f5094
mov edx, dword [esp + 0xc8]
xor ebp, ebp
jmp 0x4f5094
mov esi, dword [esp + 0xa8]
xor edx, edx
jmp 0x4f488f
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0xa8]
xor edx, edx
jmp 0x4f488f
call fcn.00426960
ud2
call fcn.004269c0
ud2
call fcn.004269c0
ud2
call fcn.00426960
ud2
call fcn.004269c0
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.004269c0
ud2
call fcn.00426960
ud2
call fcn.004269c0
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.004269c0
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.0044be50
jmp fcn.004f4810