Function at 0x4fbca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x4fc461
sub esp, 0x9c
mov ecx, dword [esp + 0xb0]
test ecx, ecx
je 0x4fbf52
cmp ecx, 1
jne 0x4fbd36
mov ebx, dword [esp + 0xac]
mov eax, dword [ebx]
mov ebx, dword [esp + 0xa8]
cmp ebx, 2
jl 0x4fbcf2
mov ecx, dword [esp + 0xa0]
jmp 0x4fbd23
mov dword [esp + 0x78], eax
lea eax, [0x5ff3c0]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 6
call fcn.00449ec0
mov eax, dword [esp + 0xc]
mov ecx, eax
mov ebx, 6
mov eax, dword [esp + 0x78]
mul eax
nop
nop
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov eax, 2
jmp 0x4fc417
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x4fbd68
mov ebx, dword [esp + 0xa0]
lea ebp, [ebx + eax*4 - 4]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
lea edi, [esi + edx*4 - 4]
cmp edi, ebp
jne 0x4fbd7d
xor eax, eax
xor ebx, ebx
jmp 0x4fbd7d
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov ebx, dword [esp + 0xa0]
cmp dword [0x7db6e4], ecx
jg 0x4fbe76
mov ebp, dword [0x7db6e8]
cmp ecx, ebp
jl 0x4fbda3
nop
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x74], ecx
mov ecx, edi
jmp 0x4fc032
mov ebp, ecx
shl ecx, 1
cmp eax, ecx
jl 0x4fbdb6
jae 0x4fbe32
jmp 0x4fc019
cmp ecx, 1
jne 0x4fbdf7
lea eax, [0x5ff3c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00449ec0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, 1
mov ecx, 1
jmp 0x4fbe32
mov dword [esp + 0x68], ecx
lea eax, [0x5ff3c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x3c], eax
mov dword [esp + 8], eax
call fcn.00449ec0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x84], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov esi, dword [esp + 0xac]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
call fcn.004fb590
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x84]
mov edx, eax
jmp 0x4fbfd2
mov ebp, ecx
shl ecx, 1
cmp eax, ecx
jl 0x4fbe89
jae 0x4fbf05
jmp 0x4fbfc9
cmp ecx, 1
jne 0x4fbeca
lea eax, [0x5ff3c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00449ec0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, 1
mov ecx, 1
jmp 0x4fbf05
mov dword [esp + 0x6c], ecx
lea eax, [0x5ff3c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x40], eax
mov dword [esp + 8], eax
call fcn.00449ec0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x88], ebx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov esi, dword [esp + 0xac]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], edx
call fcn.004f9d00
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x88]
mov edx, eax
jmp 0x4fbf82
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc0], eax
add esp, 0x9c
ret
mov eax, ebx
test eax, eax
jle 0x4fbf95
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x4fbfc0
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4fbf80
mov edx, dword [esp + 0x40]
cmp eax, edx
ja 0x4fbfb9
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, eax
call fcn.004625c0
mov eax, ebx
mov ecx, edx
call fcn.00462580
mov edx, eax
call fcn.004625c0
mov eax, ebx
test eax, eax
jle 0x4fbfe5
lea ebx, [eax - 1]
cmp edx, ebx
jbe 0x4fc010
mov ebp, dword [ecx + eax*4 - 4]
test ebp, ebp
je 0x4fbfd0
mov edx, dword [esp + 0x3c]
cmp eax, edx
ja 0x4fc009
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, eax
call fcn.004625c0
mov eax, ebx
mov ecx, edx
call fcn.00462580
mov edx, eax
call fcn.004625c0
sar ecx, 1
mov esi, dword [esp + 0x74]
inc esi
mov dword [esp + 0x74], esi
mov esi, dword [esp + 0xac]
cmp ecx, ebp
jg 0x4fc020
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x64], ecx
mov ebp, dword [esp + 0x74]
cmp ebp, 0x20
sbb esi, esi
mov ecx, ebp
mov ebx, dword [esp + 0x64]
shl ebx, cl
and esi, ebx
cmp edx, esi
jb 0x4fc40e
lea ebx, [esi + esi*2]
shl ebx, 1
mov ebp, edi
shl edi, 1
cmp edi, ebx
jl 0x4fc06b
mov ebx, edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x50], edi
cmp ebx, eax
jg 0x4fc086
ja 0x4fc405
mov ecx, dword [esp + 0x8c]
jmp 0x4fc100
cmp ebx, 1
jne 0x4fc0c6
lea eax, [0x5ff3c0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00449ec0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0x48]
mov eax, 1
mov ecx, ebx
mov ebx, 1
jmp 0x4fc100
mov dword [esp + 0x44], ebx
lea eax, [0x5ff3c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 8], eax
call fcn.00449ec0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0x48]
mov eax, dword [esp + 0x38]
mov ecx, ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x4c], eax
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov ebx, dword [esp + 0xac]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edx
call fcn.004fb880
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
cmp edx, ecx
jb 0x4fc400
mov eax, dword [esp + 0x48]
mov ebx, eax
shl eax, 1
cmp eax, ecx
ja 0x4fc3fb
mov dword [esp + 0x7c], eax
mov ebp, ecx
sub ecx, eax
mov esi, edx
sub edx, eax
neg edx
mov edi, ebx
shl ebx, 3
sar edx, 0x1f
and ebx, edx
mov edx, esi
mov esi, dword [esp + 0x80]
add ebx, esi
test ecx, ecx
je 0x4fc19b
mov dword [esp], ebx
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.00462cc0
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x48]
mov ebx, dword [esp + 0xb0]
cmp ebx, edi
jle 0x4fc3a0
mov dword [esp], eax
call fcn.004fc470
mov eax, dword [esp + 4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov dword [esp + 0x60], ebx
nop
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0x48]
mov edi, esi
jmp 0x4fc1d8
mov esi, ebx
mov ebx, dword [esp + 0x60]
test esi, esi
jle 0x4fc1fb
lea ebx, [esi - 1]
cmp edi, ebx
jbe 0x4fc3f2
mov dword [esp + 0x70], esi
mov esi, dword [ebp + esi*4 - 4]
test esi, esi
je 0x4fc1d2
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x70]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xb4]
cmp eax, esi
jb 0x4fc3e9
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
sub eax, edi
mov dword [esp + 0x58], eax
mov ecx, eax
neg eax
mov edx, edi
shl edi, 2
sar eax, 0x1f
and edi, eax
lea eax, [ebp + edi]
mov dword [esp + 0x90], eax
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0xb0]
sub ebx, edx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ecx
call fcn.004fabd0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x50]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x48]
mov dword [esp + 0x18], edi
call fcn.004faac0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x60]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x18], edi
call fcn.004faac0
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x14], eax
call fcn.004fbca0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x50]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x18], eax
call fcn.004faac0
lea eax, [0x7f8890]
mov dword [esp], eax
lea eax, [0x62e540]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 8], eax
call fcn.0046bda0
mov edx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
mov eax, ebp
jmp 0x4fc3a6
mov ebp, ebx
test ebp, ebp
jle 0x4fc3b9
lea ebx, [ebp - 1]
cmp eax, ebx
jbe 0x4fc3e0
mov edi, dword [esi + ebp*4 - 4]
test edi, edi
je 0x4fc3a4
cmp ebp, edx
ja 0x4fc3d9
mov dword [esp + 0xb8], esi
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xc0], edx
add esp, 0x9c
ret
mov ecx, ebp
call fcn.004625c0
mov ecx, eax
mov eax, ebx
call fcn.00462580
mov ecx, esi
mov edx, eax
call fcn.004625c0
mov eax, ebx
mov ecx, edi
call fcn.00462580
call fcn.004625e0
call fcn.004625c0
mov ecx, ebx
mov edx, eax
call fcn.004625c0
mov ecx, esi
call fcn.004625c0
mov eax, ebp
test eax, eax
jle 0x4fc42b
lea ebp, [eax - 1]
cmp ebp, 2
jae 0x4fc454
mov esi, dword [ecx + eax*4 - 4]
test esi, esi
je 0x4fc415
cmp eax, ebx
ja 0x4fc44b
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ebx
add esp, 0x9c
ret
mov ecx, eax
mov edx, ebx
call fcn.004625c0
mov eax, ebp
mov ecx, 2
call fcn.00462580
nop
call fcn.004610f0
jmp fcn.004fbca0