Function at 0x4fd200
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x4fde4a
sub esp, 0x12c
mov byte [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov eax, dword [esp + 0x13c]
lea ecx, [esp + 0x11c]
cmp eax, ecx
je 0x4fd2d5
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
test ecx, ecx
jg 0x4fdda8
mov ebx, ecx
xor ebp, ebp
xor esi, esi
cmp ecx, ebx
jle 0x4fdda1
mov dword [esp + 0x44], ebp
mov dword [esp + 0x30], ecx
mov dword [esp + 0xa8], esi
cmp esi, edx
je 0x4fd2a0
mov dword [esp], esi
mov dword [esp + 4], edx
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.004529a0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x13c]
movzx ecx, byte [eax]
mov byte [esp + 0x11c], cl
mov byte [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov ecx, dword [esp + 0x140]
lea edx, [esp + 0x10c]
cmp ecx, edx
je 0x4fdd9a
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 8]
test ebx, ebx
jg 0x4fdcfb
mov ebp, ebx
xor esi, esi
xor edi, edi
cmp ebx, ebp
jle 0x4fdcf4
mov dword [esp + 0x40], esi
mov dword [esp + 0xa8], edi
mov dword [esp + 0x34], ebx
cmp edi, edx
je 0x4fd356
mov dword [esp], edi
mov dword [esp + 4], edx
shl ebp, 2
mov dword [esp + 8], ebp
call fcn.004529a0
mov eax, dword [esp + 0x34]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x140]
movzx ecx, byte [eax]
mov byte [esp + 0x10c], cl
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x4fdce3
mov edx, 1
mov byte [esp + 0x2d], dl
test dl, dl
jne 0x4fdc62
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x94], ebp
mov dword [esp + 0xa4], ebx
mov byte [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov byte [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov byte [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov byte [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x120]
mov esi, dword [esp + 0x114]
mov edi, dword [esp + 0x118]
mov ebx, dword [esp + 0x110]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
call fcn.00502780
mov eax, dword [esp + 0x18]
test eax, eax
jge 0x4fdc41
lea eax, [esp + 0x11c]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xa4]
lea ebx, [esp + 0x10c]
mov dword [esp + 0x98], edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x94], ecx
mov dword [esp + 0x84], eax
jmp 0x4fd509
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [eax + 8]
cmp ebp, 1
jle 0x4fd6a9
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004fc920
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
movzx ebp, byte [esp + 0x18]
test edx, edx
je 0x4fd638
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ebx
xchg ebp, eax
mov byte [esp + 0x2e], al
xchg ebp, eax
mov esi, dword [esp + 0xa0]
mov dword [esp], esi
mov edi, dword [esp + 0x84]
mov dword [esp + 4], edi
lea esi, [esp + 0xdc]
mov dword [esp + 8], esi
lea esi, [esp + 0xcc]
mov dword [esp + 0xc], esi
lea esi, [esp + 0xbc]
mov dword [esp + 0x10], esi
lea esi, [esp + 0xac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ebx
xchg ebp, eax
mov byte [esp + 0x28], al
xchg ebp, eax
call fcn.004fcb40
movzx eax, byte [esp + 0x2d]
test al, al
je 0x4fd4ed
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
lea edx, [esp + 0xdc]
mov dword [esp + 8], edx
lea ebx, [esp + 0xcc]
mov dword [esp + 0xc], ebx
lea ebp, [esp + 0xbc]
mov dword [esp + 0x10], ebp
lea esi, [esp + 0xac]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x64]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x60]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x58]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x54]
mov dword [esp + 0x24], edi
movzx edi, byte [esp + 0x2e]
xchg edi, eax
mov byte [esp + 0x28], al
xchg edi, eax
call fcn.004fcb40
movzx eax, byte [esp + 0x2d]
jmp 0x4fd4ed
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x94]
mov dword [esp + 0xc], ebx
lea ebp, [esp + 0xdc]
mov dword [esp + 0x10], ebp
lea esi, [esp + 0xcc]
mov dword [esp + 0x14], esi
lea edi, [esp + 0xbc]
mov dword [esp + 0x18], edi
lea edi, [esp + 0xac]
mov dword [esp + 0x1c], edi
movzx edi, byte [esp + 0x2d]
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
call fcn.004fce30
movzx eax, byte [esp + 0x2d]
jmp 0x4fd4ed
test ebp, ebp
jle 0x4fdc3a
cmp dword [ebx + 8], 1
jg 0x4fdbce
mov ebp, dword [eax + 8]
mov esi, dword [eax + 4]
test ebp, ebp
jle 0x4fdbc7
mov ebp, dword [ebx + 8]
mov edi, edx
mov edx, dword [ebx + 4]
mov esi, dword [esi]
test ebp, ebp
jbe 0x4fde40
mov edx, dword [edx]
movzx ebp, byte [esp + 0x2d]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4fdbbc
mov ebp, 1
xor ebp, ebp
mov dword [esp + 0x5c], ebp
mov ebp, 1
mov dword [esp + 0x50], ebp
xor ebp, ebp
mov dword [esp + 0x4c], ebp
mov ebp, 1
xchg ebp, eax
mov byte [esp + 0x2f], al
xchg ebp, eax
mov ebp, 1
jmp 0x4fd788
mov eax, edx
xor edx, edx
div esi
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
xor edx, edx
div esi
mov eax, edx
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x68]
imul edx, ebx
add edx, ebp
mov ebp, edx
mov edx, dword [esp + 0x50]
imul ebx, edx
mov edx, dword [esp + 0x4c]
add edx, ebx
mov ebx, edx
movzx edx, byte [esp + 0x2f]
xor edx, 1
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x4c], eax
mov byte [esp + 0x2f], dl
mov eax, dword [esp + 0x84]
mov edx, esi
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0x7c]
mov esi, ebp
mov ebp, dword [esp + 0x5c]
mov dword [esp + 0x5c], esi
mov esi, dword [esp + 0x7c]
mov dword [esp + 0x6c], edx
test esi, esi
jne 0x4fd718
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0xb8]
test ebp, ebp
jne 0x4fdb51
xor ebp, ebp
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], eax
mov dword [esp + 0xb0], esi
mov eax, dword [esp + 0xc8]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0x4c]
test esi, esi
jne 0x4fdaf9
xor esi, esi
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc8], eax
mov dword [esp + 0xc0], ebp
movzx eax, byte [esp + 0x2f]
mov ecx, eax
xor eax, 1
mov byte [esp + 0xac], al
mov byte [esp + 0xbc], cl
lea eax, [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.004fb290
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004fb290
mov eax, dword [esp + 0x98]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
lea ecx, [esp + 0xbc]
mov dword [esp + 8], ecx
call fcn.004fadf0
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xa0]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 4]
test ecx, ecx
jbe 0x4fde39
mov dword [ebx], eax
mov ecx, dword [esp + 0x138]
test ecx, ecx
je 0x4fdaeb
mov ebx, dword [esp + 0x140]
cmp ecx, ebx
jne 0x4fdae4
nop
mov ebp, dword [esp + 0x84]
cmp ebx, ebp
je 0x4fdadd
mov esi, dword [ebp + 0xc]
mov eax, edx
mov edx, dword [ebp + 4]
mov edi, ecx
mov ecx, dword [ebx + 8]
mov dword [esp + 0x38], ecx
mov ebx, dword [ebx + 4]
cmp ecx, esi
jg 0x4fda3a
mov dword [esp + 0x3c], esi
mov esi, dword [esp + 0x38]
cmp ecx, esi
jle 0x4fda33
mov dword [esp + 0xa8], edx
mov dword [esp + 0x78], ecx
cmp edx, ebx
je 0x4fd8f7
mov dword [esp], edx
mov dword [esp + 4], ebx
shl esi, 2
mov dword [esp + 8], esi
call fcn.004529a0
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x84]
mov dword [edx + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [edx + 0xc], ecx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x4fda1f
mov eax, dword [esp + 0xa8]
mov dword [edx + 4], eax
mov eax, dword [esp + 0x140]
movzx eax, byte [eax]
mov byte [edx], al
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 8], ecx
call fcn.004fb290
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004fb040
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.004fba20
mov eax, dword [esp + 0x134]
test eax, eax
je 0x4fd9cb
mov ecx, dword [esp + 0x98]
movzx edx, byte [ecx]
mov ebx, dword [ecx + 0xc]
mov ebp, dword [ecx + 8]
mov ecx, dword [ecx + 4]
mov byte [eax], dl
mov dword [eax + 8], ebp
mov dword [eax + 0xc], ebx
mov edx, dword [0xc6be00]
test edx, edx
jne 0x4fda13
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xa0]
movzx edx, byte [ecx]
mov ebx, dword [ecx + 0xc]
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov ebp, dword [esp + 0x130]
mov byte [ebp], dl
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], ebx
mov ecx, dword [0xc6be00]
test ecx, ecx
jne 0x4fda09
mov dword [ebp + 4], eax
mov dword [esp + 0x144], ebp
add esp, 0x12c
ret
lea edi, [ebp + 4]
call fcn.00451ff0
jmp 0x4fd9fb
lea edi, [eax + 4]
mov eax, ecx
call fcn.00451ff0
jmp 0x4fd9cb
lea edi, [edx + 4]
mov eax, dword [esp + 0xa8]
call fcn.00451ff0
jmp 0x4fd924
mov esi, ecx
jmp 0x4fd8d5
mov dword [esp + 0x90], ebx
cmp ecx, 1
jne 0x4fda93
lea eax, [0x843300]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043d110
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x84]
mov edi, dword [esp + 0x138]
mov esi, 1
mov ecx, 1
jmp 0x4fd8c5
lea eax, [0x843300]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x3c], eax
mov dword [esp + 8], eax
call fcn.0043d110
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x84]
mov edi, dword [esp + 0x138]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
jmp 0x4fd8c5
mov edx, ebp
jmp 0x4fd930
mov edx, ebx
jmp 0x4fd930
mov eax, dword [esp + 0x134]
test eax, eax
jmp 0x4fd9a1
cmp eax, 1
jl 0x4fdb0b
mov dword [ebp], esi
mov esi, 1
jmp 0x4fd7d9
lea eax, [0x843300]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043d110
mov ebp, dword [esp + 0xc]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x98]
mov eax, 1
jmp 0x4fdafe
cmp eax, 1
jl 0x4fdb62
mov dword [esi], ebp
mov ebp, 1
jmp 0x4fd7a8
mov dword [esp + 0x48], ebp
lea eax, [0x843300]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043d110
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x48]
mov edi, dword [esp + 0x98]
mov eax, 1
jmp 0x4fdb56
mov ecx, eax
mov eax, edx
xor edx, edx
div esi
mov eax, ecx
mov ebp, esi
mov esi, edx
mov edx, ebp
test esi, esi
jne 0x4fdbac
mov eax, edx
jmp 0x4fd864
mov edx, ebx
jmp 0x4fd87b
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
lea ebp, [esp + 0xdc]
mov dword [esp + 0x10], ebp
lea ebp, [esp + 0xcc]
mov dword [esp + 0x14], ebp
lea ebp, [esp + 0xbc]
mov dword [esp + 0x18], ebp
lea esi, [esp + 0xac]
mov dword [esp + 0x1c], esi
movzx edi, byte [esp + 0x2d]
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
call fcn.004fce30
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa0]
jmp 0x4fd6bb
mov edx, ebx
jmp 0x4fd87b
lea eax, [esp + 0x10c]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x94]
lea ebx, [esp + 0x11c]
jmp 0x4fd4cf
mov byte [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea eax, [esp + 0xfc]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0
call fcn.004fa7b0
mov ebp, dword [esp + 0xc]
mov byte [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea ebx, [esp + 0xec]
jmp 0x4fd3af
mov ebx, dword [esp + 0x138]
test ebx, ebx
setne dl
jmp 0x4fd39f
mov ebp, ebx
jmp 0x4fd330
mov dword [esp + 0x8c], edx
mov dword [esp + 0x74], ebx
cmp ebx, 1
jne 0x4fdd55
lea eax, [0x843300]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043d110
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov esi, 1
mov ebx, 1
jmp 0x4fd328
lea eax, [0x843300]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea ecx, [ebx + 4]
mov dword [esp + 0x40], ecx
mov dword [esp + 8], ecx
call fcn.0043d110
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x40]
mov ebx, ebp
jmp 0x4fd328
mov eax, ecx
jmp 0x4fd38b
mov ebx, ecx
jmp 0x4fd27a
mov dword [esp + 0x70], ecx
mov dword [esp + 0x88], edx
cmp ecx, 1
jne 0x4fddfb
lea eax, [0x843300]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0043d110
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x70]
mov ebp, 1
mov ecx, 1
jmp 0x4fd272
lea eax, [0x843300]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [ecx + 4]
mov dword [esp + 0x44], edx
mov dword [esp + 8], edx
call fcn.0043d110
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x44]
mov ecx, ebx
jmp 0x4fd272
xor eax, eax
call fcn.00452070
xor eax, eax
mov ecx, ebp
call fcn.00452070
nop
call fcn.004507b0
jmp fcn.004fd200