Function at 0x4fb0f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 4]
cmp eax, dword [ecx + 8]
jbe 0x4fb8ba
sub esp, 0x84
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x74], ecx
mov eax, dword [esp + 0x94]
mov dword [esp + 0x78], eax
nop
mov edx, dword [esp + 0x74]
nop
test edx, edx
je 0x4fb8b1
lea ebx, [0x604040]
nop
test ecx, ecx
je 0x4fb8a6
nop
movzx ebp, byte [0x727bf8]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4fb16b
mov dword [0x727bfc], ecx
mov ebp, dword [0x738420]
test ebp, ebp
jne 0x4fb896
mov dword [0x727c00], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], eax
nop
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x4fb88b
nop
nop
movzx ebp, byte [ecx + 0xf]
mov esi, ebp
and ebp, 0x1f
xchg esi, eax
test al, 0x20
xchg esi, eax
jne 0x4fb19b
or ebp, 0x80
mov dword [esp + 0x70], edx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x28], ebp
mov dword [esp + 0x68], ecx
mov esi, dword [ebx + 0x50]
mov dword [esp], edx
call esi
cmp dword [esp + 4], 0x19
je 0x4fb212
nop
lea eax, [0x59e6a0]
mov dword [esp], eax
call fcn.00409bc0
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1a
mov eax, dword [0x738420]
test eax, eax
jne 0x4fb205
lea eax, [0x5ccb9e]
mov dword [edi], eax
lea eax, [0x600de0]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], edi
add esp, 0x84
ret
lea eax, [0x5ccb9e]
call fcn.0044cea0
jmp 0x4fb1ea
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x64]
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
xor ecx, ecx
jmp 0x4fb239
mov edx, dword [esp + 0x34]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x38]
cmp ecx, eax
jge 0x4fb86e
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x28]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.00492410
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
nop
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00492aa0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test eax, eax
je 0x4fb335
mov dword [esp + 0x24], eax
mov dword [esp + 0x64], ecx
mov edx, dword [eax + 8]
mov dword [esp + 0x40], edx
cmp edx, 0x86318d2e
ja 0x4fb56c
cmp edx, 0x382e7edf
ja 0x4fb443
cmp edx, 0x1c184284
je 0x4fb39d
cmp edx, 0x382e7edf
jne 0x4fb335
lea edx, [0x58df20]
cmp edx, eax
jne 0x4fb389
mov eax, dword [ecx + 4]
mov ebx, dword [ecx + 8]
mov ecx, dword [ecx]
jne 0x4fb335
mov edx, dword [esp + 0x88]
mov dword [esp], edx
mov ebp, dword [esp + 0x8c]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.004fc810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4fb22e
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
add esp, 0x84
ret
nop
lea eax, [0x59e6a0]
mov dword [esp], eax
call fcn.00409bc0
mov edi, dword [esp + 4]
mov dword [edi + 4], 0xe
mov eax, dword [0x738420]
test eax, eax
jne 0x4fb37c
lea eax, [0x5c8768]
mov dword [edi], eax
lea eax, [0x600de0]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], edi
add esp, 0x84
ret
lea eax, [0x5c8768]
call fcn.0044cea0
jmp 0x4fb361
mov ecx, 0
mov eax, 0
mov ebx, 0
jmp 0x4fb2e8
lea eax, [0x593360]
mov dword [esp], eax
call fcn.00409bc0
mov eax, dword [esp + 4]
lea ecx, [0x593360]
mov edx, dword [esp + 0x24]
cmp ecx, edx
jne 0x4fb435
mov ebx, dword [esp + 0x64]
mov ebp, dword [ebx]
mov dword [esp + 0x3c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [eax], ebp
je 0x4fb3e2
mov ebp, dword [esp + 0x40]
cmp ebp, 0x382e7edf
mov eax, edx
mov ecx, ebx
jmp 0x4fb2d0
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 4
call fcn.004fc810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4fb22e
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
add esp, 0x84
ret
mov dword [esp + 0x3c], 0
mov ebx, dword [esp + 0x64]
jmp 0x4fb3c7
cmp edx, 0x46fb81a2
je 0x4fb4c3
cmp edx, 0x86318d2e
jne 0x4fb335
lea edx, [0x597d20]
cmp edx, eax
jne 0x4fb4b7
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
jne 0x4fb335
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004f9af0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
call fcn.004fc810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4fb22e
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
add esp, 0x84
ret
mov ecx, 0
mov eax, 0
jmp 0x4fb466
lea eax, [0x592560]
mov dword [esp], eax
call fcn.00409bc0
mov eax, dword [esp + 4]
lea ecx, [0x592560]
mov edx, dword [esp + 0x24]
cmp ecx, edx
jne 0x4fb55f
mov ebx, dword [esp + 0x64]
movzx ebp, word [ebx]
mov word [esp + 0x22], bp
movzx ebp, word [esp + 0x22]
mov word [eax], bp
je 0x4fb50c
mov ebp, dword [esp + 0x40]
cmp ebp, 0x86318d2e
mov eax, edx
mov ecx, ebx
jmp 0x4fb451
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004fc810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4fb22e
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
add esp, 0x84
ret
mov word [esp + 0x22], 0
mov ebx, dword [esp + 0x64]
jmp 0x4fb4ef
cmp edx, 0xd04ae83d
ja 0x4fb70b
cmp edx, 0xa8ff599c
je 0x4fb649
cmp edx, 0xd04ae83d
jne 0x4fb335
lea edx, [0x597ce0]
cmp edx, eax
jne 0x4fb63f
mov eax, dword [ecx]
jne 0x4fb335
mov dword [esp + 0x2c], eax
nop
lea eax, [0x597d60]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call fcn.00438f10
mov eax, dword [esp + 0xc]
nop
mov ecx, dword [esp + 0x2c]
mov edx, ecx
shr ecx, 0x18
mov byte [eax], cl
mov ecx, edx
shr edx, 0x10
mov byte [eax + 1], dl
mov edx, ecx
shr ecx, 8
mov byte [eax + 2], cl
mov byte [eax + 3], dl
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 4
call fcn.004fc810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4fb22e
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
add esp, 0x84
ret
mov eax, 0
jmp 0x4fb5a0
lea eax, [0x5928a0]
mov dword [esp], eax
call fcn.00409bc0
mov eax, dword [esp + 4]
lea ecx, [0x5928a0]
mov edx, dword [esp + 0x24]
cmp ecx, edx
jne 0x4fb6f7
lea edi, [esp + 0x44]
mov esi, dword [esp + 0x64]
call fcn.0044d460
mov edi, eax
lea esi, [esp + 0x44]
call fcn.0044d460
lea ecx, [0x5928a0]
cmp ecx, edx
je 0x4fb6a4
mov ebx, dword [esp + 0x40]
cmp ebx, 0xd04ae83d
mov eax, edx
mov ecx, dword [esp + 0x64]
jmp 0x4fb58a
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x20
mov dword [esp + 0x10], 0x20
call fcn.004fc810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4fb22e
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
add esp, 0x84
ret
lea edi, [esp + 0x44]
mov ebx, eax
xor eax, eax
call fcn.0044cf98
mov eax, ebx
jmp 0x4fb67a
cmp edx, 0xe0ff5cb4
jne 0x4fb863
lea ebx, [0x597b60]
cmp ebx, eax
jne 0x4fb854
mov ebp, dword [ecx + 4]
mov esi, dword [ecx]
je 0x4fb7e9
cmp edx, 0xeff20ea0
jne 0x4fb335
lea edx, [0x597ca0]
cmp edx, eax
jne 0x4fb7df
movzx eax, word [ecx]
jne 0x4fb335
mov word [esp + 0x20], ax
nop
lea eax, [0x597d60]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.00438f10
mov eax, dword [esp + 0xc]
nop
movzx ecx, word [esp + 0x20]
mov edx, ecx
shr cx, 8
mov byte [eax], cl
mov byte [eax + 1], dl
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004fc810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4fb22e
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
add esp, 0x84
ret
mov eax, 0
jmp 0x4fb74d
mov dword [esp], 0
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.0043c5c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov ebp, dword [esp + 0x8c]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.004fc810
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4fb22e
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
add esp, 0x84
ret
mov esi, 0
mov ebp, 0
jmp 0x4fb72a
lea ebx, [0x597b60]
jmp 0x4fb730
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
add esp, 0x84
ret
xor ebp, ebp
xor eax, eax
xor ecx, ecx
jmp 0x4fb19b
lea edi, [0x727c00]
call fcn.0044cea0
jmp 0x4fb16b
xor eax, eax
xor ebp, ebp
xor ecx, ecx
jmp 0x4fb19b
xor edx, edx
xor ebx, ebx
jmp 0x4fb13a
call fcn.0044b750
jmp fcn.004fb0f0