Function at 0x4f1550
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xc]
cmp eax, dword [ecx + 8]
jbe 0x4f1e11
sub esp, 0x8c
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0xac]
cmp eax, ebx
jl 0x4f17ca
test eax, eax
je 0x4f179c
test ebx, ebx
je 0x4f179c
cmp ebx, 1
je 0x4f1720
mov ebp, dword [esp + 0x98]
test ebp, ebp
je 0x4f15cf
mov esi, dword [esp + 0x90]
lea edi, [esi + ebp*4 - 4]
mov edx, dword [esp + 0xa4]
mov ecx, eax
mov eax, dword [esp + 0x9c]
lea eax, [eax + edx*4 - 4]
cmp eax, edi
je 0x4f1602
test ebp, ebp
jmp 0x4f15df
mov ecx, eax
mov edx, dword [esp + 0xa4]
mov esi, dword [esp + 0x90]
je 0x4f160f
lea eax, [esi + ebp*4 - 4]
mov edi, dword [esp + 0xb0]
mov ebx, dword [esp + 0xa8]
lea ebx, [ebx + edi*4 - 4]
cmp ebx, eax
jne 0x4f1608
mov ebx, dword [esp + 0xac]
xor ebp, ebp
xor esi, esi
jmp 0x4f160f
mov ebx, dword [esp + 0xac]
mov eax, dword [0x9372bc]
cmp ebx, eax
jl 0x4f162d
mov dword [esp + 0x78], esi
nop
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0x60], ebx
mov ebx, edi
jmp 0x4f1899
lea eax, [ecx + ebx]
cmp ebp, eax
jl 0x4f163f
jae 0x4f16ca
jmp 0x4f1881
cmp eax, 1
jne 0x4f1687
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044e560
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xac]
mov ebp, 1
mov eax, 1
jmp 0x4f16ca
mov dword [esp + 0x54], eax
lea edx, [0x6f5360]
mov dword [esp], edx
mov dword [esp + 4], eax
lea edx, [ebx + ecx + 4]
mov dword [esp + 0x34], edx
mov dword [esp + 8], edx
call fcn.0044e560
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x54]
mov dword [esp + 0x34], ebp
mov dword [esp + 0x74], esi
mov dword [esp + 0x64], eax
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov edi, dword [esp + 0x9c]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x20], ecx
call fcn.004f06d0
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x64]
jmp 0x4f184c
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0
call fcn.004f0540
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], edx
add esp, 0x8c
ret
mov eax, dword [esp + 0x90]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0x98]
mov dword [esp + 0xbc], eax
add esp, 0x8c
ret
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x20], eax
call fcn.004f1550
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], edx
add esp, 0x8c
ret
dec ecx
test ecx, ecx
jle 0x4f1858
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4f184b
mov edx, dword [esp + 0x34]
cmp ecx, edx
ja 0x4f187c
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], edx
add esp, 0x8c
ret
call fcn.00468f10
mov ecx, eax
mov edx, ebp
call fcn.00468f10
sar ebx, 1
mov esi, dword [esp + 0x60]
inc esi
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0x78]
cmp ebx, eax
jg 0x4f188a
mov eax, ecx
mov ecx, dword [esp + 0x60]
shl ebx, cl
cmp ecx, 0x20
sbb ecx, ecx
and ecx, ebx
cmp edx, ecx
jb 0x4f1e0b
mov ebx, dword [esp + 0xb0]
cmp ebx, ecx
jb 0x4f1e04
lea ebx, [ecx + ecx*2]
mov dword [esp + 0x6c], ebx
shl ebx, 1
add eax, edi
cmp ebx, eax
jg 0x4f18d4
mov ebx, eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x44], eax
cmp ebp, ebx
jl 0x4f18e7
jae 0x4f195d
jmp 0x4f1dfb
cmp ebx, 1
jne 0x4f1925
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044e560
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa4]
mov ebp, 1
mov ebx, 1
jmp 0x4f195d
mov dword [esp + 0x38], ebx
lea eax, [0x6f5360]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 0x30], eax
mov dword [esp + 8], eax
call fcn.0044e560
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x70], esi
mov dword [esp + 0x30], ebp
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov edi, dword [esp + 0xb0]
mov dword [esp + 0x20], edi
call fcn.004f0db0
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x44]
cmp edx, ecx
jb 0x4f1df6
mov eax, dword [esp + 0x5c]
mov ebx, eax
shl ebx, 1
cmp ebx, ecx
ja 0x4f1def
mov ebp, ecx
sub ecx, ebx
mov esi, edx
sub esi, ebx
xchg esi, ebx
neg ebx
xchg esi, ebx
mov ebx, eax
shl eax, 3
sar esi, 0x1f
and esi, eax
mov eax, dword [esp + 0x70]
add esi, eax
test ecx, ecx
je 0x4f1a03
mov dword [esp], esi
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.00469620
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0xac]
cmp esi, ebx
jg 0x4f1a1d
mov edi, dword [esp + 0xa0]
cmp edi, esi
je 0x4f1d73
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.004f2c30
nop
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x9c]
mov edx, eax
jmp 0x4f1a3a
dec eax
test eax, eax
jle 0x4f1a46
mov ebx, dword [ecx + eax*4 - 4]
test ebx, ebx
je 0x4f1a39
mov ebx, dword [esp + 0xa4]
cmp ebx, eax
jb 0x4f1de6
mov ebp, dword [esp + 0xac]
cmp ebp, edx
jb 0x4f1ddd
mov esi, dword [esp + 4]
mov dword [esp + 0x84], esi
mov edi, dword [esi]
mov ebp, dword [esi + 4]
mov esi, dword [esi + 8]
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0xb0]
sub eax, edx
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0xac]
sub esi, edx
mov dword [esp + 0x3c], esi
mov edi, eax
neg eax
shl edx, 2
sar eax, 0x1f
and eax, edx
mov edx, dword [esp + 0xa8]
add eax, edx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
call fcn.004f1550
mov eax, dword [esp + 0x24]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x70]
mov dword [esp], ebx
mov ebp, dword [esp + 0x44]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x30]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x18], edi
call fcn.004f1440
nop
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xa8]
mov edx, eax
jmp 0x4f1b2e
dec eax
test eax, eax
jle 0x4f1b3a
mov ebx, dword [ecx + eax*4 - 4]
test ebx, ebx
je 0x4f1b2d
mov ebx, dword [esp + 0xb0]
cmp ebx, eax
jb 0x4f1dd4
mov dword [esp + 0x6c], eax
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa4]
jmp 0x4f1cef
mov dword [esp + 0x80], edi
mov dword [esp + 0x58], esi
mov edx, dword [esp + 0x88]
mov dword [esp], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
call fcn.004f1550
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x5c]
lea edx, [ecx + eax]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x50], ebp
mov esi, dword [esp + 0x24]
mov dword [esp + 0x88], esi
mov edi, dword [esp + 0x70]
mov dword [esp], edi
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], eax
call fcn.004f1440
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x20], edx
call fcn.004f1550
mov eax, dword [esp + 0x24]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x70]
mov dword [esp], ebx
mov ebp, dword [esp + 0x44]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x30]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x68]
mov dword [esp + 0x18], edi
call fcn.004f1440
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x88]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0xa8]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa4]
mov edx, dword [esp + 0x68]
cmp ebp, edx
jle 0x4f1d43
jb 0x4f1dcb
mov dword [esp + 0x68], edx
sub edi, edx
mov dword [esp + 0x48], edi
sub ebp, edx
xchg edi, ebx
neg ebx
xchg edi, ebx
shl edx, 2
sar edi, 0x1f
and edi, edx
add edi, esi
mov edx, esi
mov esi, dword [esp + 0x5c]
cmp esi, ebp
jge 0x4f1d23
mov ebp, esi
jmp 0x4f1d29
mov esi, ebp
mov ebp, dword [esp + 0x5c]
jmp 0x4f1db1
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x48]
cmp esi, ebp
jbe 0x4f1b67
jmp 0x4f1dc2
nop
lea eax, [0x96ef80]
mov dword [esp], eax
lea eax, [0x738020]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], eax
call fcn.00472ec0
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x30]
mov ebp, dword [esp + 0x44]
jmp 0x4f1d76
dec ebp
test ebp, ebp
jle 0x4f1d82
mov ebx, dword [eax + ebp*4 - 4]
test ebx, ebx
je 0x4f1d75
cmp ebp, edx
ja 0x4f1da2
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ebp
mov dword [esp + 0xbc], edx
add esp, 0x8c
ret
mov ecx, ebp
call fcn.00468f10
dec esi
mov edx, dword [esp + 0x9c]
test esi, esi
jle 0x4f1d35
mov edx, dword [edi + esi*4 - 4]
test edx, edx
je 0x4f1da9
jmp 0x4f1d2e
mov ecx, esi
mov edx, ebp
call fcn.00468f10
mov eax, edx
mov ecx, ebp
call fcn.00468f30
mov ecx, eax
mov edx, ebx
call fcn.00468f10
mov eax, edx
mov ecx, ebp
call fcn.00468f30
mov ecx, eax
mov edx, ebx
call fcn.00468f10
mov eax, ebx
call fcn.00468f30
call fcn.00468f10
mov ecx, ebx
mov edx, ebp
call fcn.00468f10
mov edx, ebx
call fcn.00468f10
call fcn.00468f10
nop
call fcn.00467a60
jmp fcn.004f1550