Function at 0x4f4ba0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x38]
cmp eax, dword [ecx + 8]
jbe 0x4f53b2
sub esp, 0xb8
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
call fcn.0044e350
nop
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
mov edx, dword [esp + 0xd8]
xor edx, 0x80000000
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp], ecx
mov edx, dword [esp + 0xdc]
xor edx, 0x80000000
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0xd0]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0xc], ecx
call fcn.004f3a80
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], ecx
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.0044e770
movzx eax, byte [esp + 0x10]
test al, al
je 0x4f5039
nop
mov edx, dword [esp + 0xc0]
mov ecx, dword [edx + 4]
mov ebx, dword [edx]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4f53ac
nop
imul eax, ecx, 0x1c
mov ecx, dword [ebx + eax - 8]
mov eax, dword [ebx + eax - 4]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
xor ecx, 0x80000000
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp], ecx
mov ecx, dword [esp + 0x34]
xor ecx, 0x80000000
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
call fcn.0044d600
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc0]
mov dword [esp], ecx
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x34]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
call fcn.004f0f20
nop
nop
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
lea ebx, [ecx - 1]
cmp ecx, ebx
jbe 0x4f53a5
imul eax, ecx, 0x1c
mov ecx, dword [edx + eax - 8]
mov dword [esp + 0x34], ecx
mov eax, dword [edx + eax - 4]
mov dword [esp + 0x30], eax
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
lea edi, [esp + 0x9c]
xor eax, eax
call fcn.00465fe9
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xa4], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xb4], ecx
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 4]
inc edx
mov ebx, dword [ecx]
mov ebp, dword [ecx + 8]
cmp ebp, edx
jae 0x4f4ebe
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6b1f00]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xc0]
mov dword [edi + 8], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x4f4eb1
mov dword [edi], eax
jmp 0x4f4eb6
call fcn.00465d80
mov edx, ecx
mov ebx, eax
xor eax, eax
mov ecx, edi
mov dword [ecx + 4], edx
imul ecx, edx, 0x1c
lea edi, [ebx + ecx - 0x1c]
lea esi, [esp + 0x9c]
call fcn.004664ba
nop
mov ecx, dword [esp + 0xbc]
mov edx, dword [ecx + 4]
mov ebx, dword [ecx]
lea ebp, [edx - 1]
cmp edx, ebp
jbe 0x4f539c
imul eax, edx, 0x1c
mov ecx, dword [ebx + eax - 8]
mov dword [esp + 0x3c], ecx
mov eax, dword [ebx + eax - 4]
mov dword [esp + 0x38], eax
mov dword [esp], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
lea edi, [esp + 0x80]
xor eax, eax
call fcn.00465fe9
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax + 4]
inc ecx
mov edx, dword [eax]
mov ebx, dword [eax + 8]
cmp ebx, ecx
jae 0x4f501e
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6b1f00]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xbc]
mov dword [edi + 8], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x4f5015
mov dword [edi], eax
jmp 0x4f501a
call fcn.00465d80
mov edx, eax
mov eax, edi
mov dword [eax + 4], ecx
imul eax, ecx, 0x1c
lea edi, [edx + eax - 0x1c]
lea esi, [esp + 0x80]
call fcn.004664ba
jmp 0x4f5380
nop
mov edx, dword [esp + 0xbc]
mov ecx, dword [edx + 4]
mov ebx, dword [edx]
lea eax, [ecx - 1]
cmp ecx, eax
jbe 0x4f5397
nop
imul eax, ecx, 0x1c
mov ecx, dword [ebx + eax - 8]
mov eax, dword [ebx + eax - 4]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0xc8]
mov dword [esp], edx
xor ecx, 0x80000000
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp], ecx
mov ecx, dword [esp + 0x34]
xor ecx, 0x80000000
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
call fcn.0044d600
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x34]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
call fcn.004f0f20
nop
nop
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
lea ebx, [ecx - 1]
cmp ecx, ebx
jbe 0x4f5390
imul eax, ecx, 0x1c
mov ecx, dword [edx + eax - 8]
mov dword [esp + 0x34], ecx
mov eax, dword [edx + eax - 4]
mov dword [esp + 0x30], eax
mov dword [esp], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
lea edi, [esp + 0x64]
xor eax, eax
call fcn.00465fe9
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0xbc]
mov edx, dword [ecx + 4]
inc edx
mov ebx, dword [ecx]
mov ebp, dword [ecx + 8]
cmp ebp, edx
jae 0x4f5224
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6b1f00]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xbc]
mov dword [edi + 8], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x4f5217
mov dword [edi], eax
jmp 0x4f521c
call fcn.00465d80
mov edx, ecx
mov ebx, eax
xor eax, eax
mov ecx, edi
mov dword [ecx + 4], edx
imul ecx, edx, 0x1c
lea edi, [ebx + ecx - 0x1c]
lea esi, [esp + 0x64]
call fcn.004664ba
nop
nop
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 4]
mov ebx, dword [ecx]
lea ebp, [edx - 1]
cmp edx, ebp
jbe 0x4f5387
imul eax, edx, 0x1c
mov ecx, dword [ebx + eax - 8]
mov dword [esp + 0x44], ecx
mov eax, dword [ebx + eax - 4]
mov dword [esp + 0x40], eax
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x40]
mov dword [esp], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 4], edx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f000000
call fcn.0044e3e0
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
lea edi, [esp + 0x48]
xor eax, eax
call fcn.00465fe9
mov eax, dword [esp + 0x44]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 4]
inc ecx
mov edx, dword [eax]
mov ebx, dword [eax + 8]
cmp ebx, ecx
jae 0x4f536d
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6b1f00]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xc0]
mov dword [edi + 8], edx
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x4f5364
mov dword [edi], eax
jmp 0x4f5369
call fcn.00465d80
mov edx, eax
mov eax, edi
mov dword [eax + 4], ecx
imul eax, ecx, 0x1c
lea edi, [edx + eax - 0x1c]
lea esi, [esp + 0x48]
call fcn.004664ba
add esp, 0xb8
ret
mov eax, ebp
mov ecx, edx
call fcn.00465e00
mov eax, ebx
call fcn.00465e00
call fcn.00465e00
mov eax, ebp
mov ecx, edx
call fcn.00465e00
mov eax, ebx
call fcn.00465e00
call fcn.00465e00
nop
call fcn.004649b0
jmp fcn.004f4ba0