Function at 0x4f6730
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4f6f7f
sub esp, 0x74
mov ebx, dword [esp + 0x78]
movzx ebp, byte [ebx + 0x3d]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4f6f32
mov byte [ebx + 0x3c], 1
jmp 0x4f6845
mov eax, ebx
mov ebx, ebp
mov ecx, dword [ebx + 0x20]
mov edx, dword [ebx + 0x1c]
mov ebp, dword [ebx + 0x24]
mov esi, dword [ebx + 0x2c]
cmp ecx, esi
jb 0x4f6f3b
mov dword [esp + 0x30], eax
mov eax, dword [ebx]
mov edi, dword [ebx + 4]
mov eax, dword [eax + 0x10]
mov dword [esp], edi
sub ebp, esi
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, esi
add edx, ebp
mov dword [esp + 4], edx
sub ecx, esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
test eax, eax
jl 0x4f6af6
mov ebp, dword [esp + 0x78]
mov esi, dword [ebp + 0x20]
mov edi, ebx
mov ebx, dword [ebp + 0x2c]
sub esi, ebx
cmp eax, esi
jg 0x4f6a77
add ebx, eax
mov dword [ebp + 0x2c], ebx
test ecx, ecx
jne 0x4f6a03
test eax, eax
jg 0x4f69f7
mov ebx, dword [esp + 0x30]
inc ebx
cmp ebx, 0x64
jle 0x4f6764
mov eax, dword [0xacd16c]
mov ebx, dword [0xacd168]
mov esi, dword [ebp + 0x30]
mov ecx, ebx
mov ebx, dword [ebp + 0x34]
test esi, esi
je 0x4f682f
mov edx, ebx
mov ebx, dword [0xacd15c]
cmp dword [0xacd158], esi
je 0x4f69c9
xor edx, edx
test dl, dl
je 0x4f6843
mov dword [ebp + 0x30], ecx
mov ebx, dword [0xaec8c0]
test ebx, ebx
jne 0x4f69bc
mov dword [ebp + 0x34], eax
mov ebx, ebp
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ebx + 0x28]
cmp ecx, eax
jg 0x4f6bd8
mov ebp, dword [ebx + 0x30]
test ebp, ebp
jne 0x4f6bd8
mov ebp, dword [ebx + 0x30]
test ebp, ebp
jne 0x4f6bc1
mov eax, dword [ebx + 0x28]
test eax, eax
jle 0x4f6bba
mov ecx, dword [ebx + 0x2c]
mov ebp, dword [ebx + 0x20]
mov edx, dword [ebx + 0x24]
mov esi, dword [ebx + 0x1c]
cmp ecx, ebp
jne 0x4f6bab
cmp ecx, edx
ja 0x4f6f57
cmp eax, ecx
ja 0x4f6f52
sub edx, eax
neg edx
sar edx, 0x1f
and edx, eax
sub ecx, eax
mov eax, ebx
lea ebx, [esi + edx]
cmp ecx, ebp
jge 0x4f6ba4
test edx, edx
je 0x4f68c4
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00466ae0
mov edx, dword [esp + 0x78]
mov ebx, dword [edx + 0x2c]
sub ebx, dword [edx + 0x28]
mov dword [edx + 0x2c], ebx
mov dword [edx + 0x28], 0
mov ebx, dword [edx + 0x20]
cmp dword [edx + 0x2c], ebx
jne 0x4f6b9d
mov ecx, dword [edx + 0xc]
cmp ecx, ebx
jle 0x4f6b25
cmp ebx, 0x3fffffff
jg 0x4f6b25
shl ebx, 1
test ebx, ebx
jne 0x4f6b1e
mov eax, 0x1000
cmp ecx, eax
jge 0x4f6b17
mov dword [esp + 0x28], ecx
lea eax, [0x79faa0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044a490
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x24]
mov ebx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x28]
mov esi, dword [ecx + 0x2c]
cmp edx, esi
jb 0x4f6f4b
cmp ebp, esi
ja 0x4f6f42
sub esi, ebp
sub edx, ebp
neg edx
sar edx, 0x1f
and ebp, edx
lea edx, [ebx + ebp]
mov ebx, dword [esp + 0x28]
cmp ebx, esi
jle 0x4f6b10
mov dword [esp + 0x60], eax
cmp eax, edx
je 0x4f6982
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00466ae0
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x20], edx
mov dword [ebx + 0x24], edx
mov edx, dword [0xaec8c0]
test edx, edx
jne 0x4f6aff
mov edx, dword [esp + 0x60]
mov dword [ebx + 0x1c], edx
mov edx, dword [ebx + 0x2c]
sub edx, dword [ebx + 0x28]
mov dword [ebx + 0x2c], edx
mov dword [ebx + 0x28], 0
xor eax, eax
jmp 0x4f6768
lea edi, [ebp + 0x34]
call fcn.00466130
jmp 0x4f6843
mov dword [esp + 0x40], ecx
mov dword [esp + 0x50], eax
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00403800
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x40]
mov ebp, dword [esp + 0x78]
jmp 0x4f682b
mov dword [ebp + 0x38], 0
jmp 0x4f6843
nop
mov ebx, dword [ebp + 0x30]
mov esi, dword [ebp + 0x34]
test ebx, ebx
je 0x4f6a28
mov eax, esi
mov esi, dword [0xacd15c]
cmp dword [0xacd158], ebx
je 0x4f6a4c
xor eax, eax
test al, al
je 0x4f6843
mov dword [ebp + 0x30], edi
mov ebx, dword [0xaec8c0]
test ebx, ebx
jne 0x4f6a3d
mov dword [ebp + 0x34], edx
jmp 0x4f6843
lea edi, [ebp + 0x34]
mov eax, edx
call fcn.00466130
jmp 0x4f6843
mov dword [esp + 0x70], edx
mov dword [esp + 0x6c], edi
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00403800
movzx eax, byte [esp + 0xc]
mov edx, dword [esp + 0x70]
mov ebp, dword [esp + 0x78]
mov edi, dword [esp + 0x6c]
jmp 0x4f6a20
mov eax, dword [0xacce44]
mov ebx, dword [0xacce40]
mov esi, dword [ebp + 0x30]
mov ecx, ebx
mov ebx, dword [ebp + 0x34]
test esi, esi
je 0x4f6aa9
mov edx, ebx
mov ebx, dword [0xacd15c]
cmp dword [0xacd158], esi
je 0x4f6acb
xor edx, edx
test dl, dl
je 0x4f6843
mov dword [ebp + 0x30], ecx
mov ebx, dword [0xaec8c0]
test ebx, ebx
jne 0x4f6abe
mov dword [ebp + 0x34], eax
jmp 0x4f6843
lea edi, [ebp + 0x34]
call fcn.00466130
jmp 0x4f6843
mov dword [esp + 0x5c], eax
mov dword [esp + 0x40], ecx
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00403800
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x40]
mov ebp, dword [esp + 0x78]
jmp 0x4f6aa1
mov ebp, dword [esp + 0x78]
jmp 0x4f6a77
lea edi, [ebx + 0x1c]
mov eax, dword [esp + 0x60]
call fcn.00466130
jmp 0x4f69a5
mov esi, ebx
jmp 0x4f696a
mov ecx, eax
jmp 0x4f6912
mov eax, ebx
jmp 0x4f690a
mov eax, dword [0xacce7c]
mov ecx, dword [0xacce78]
mov ebx, dword [edx + 0x30]
mov ebp, dword [edx + 0x34]
test ebx, ebx
je 0x4f6b4f
mov esi, dword [0xacd15c]
cmp dword [0xacd158], ebx
je 0x4f6b72
xor ebx, ebx
test bl, bl
je 0x4f6b5f
mov dword [edx + 0x30], ecx
mov ecx, dword [0xaec8c0]
test ecx, ecx
jne 0x4f6b68
mov dword [edx + 0x34], eax
mov byte [esp + 0x7c], 0
add esp, 0x74
ret
lea edi, [edx + 0x34]
call fcn.00466130
jmp 0x4f6b5f
mov dword [esp + 0x54], eax
mov dword [esp + 0x3c], ecx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00403800
movzx ebx, byte [esp + 0xc]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x78]
jmp 0x4f6b4b
mov ebx, edx
jmp 0x4f69b5
mov ecx, ebp
jmp 0x4f68b0
mov edi, ebp
shr ebp, 1
cmp eax, ebp
jle 0x4f6bba
mov ebp, edi
jmp 0x4f6888
mov edx, ebx
jmp 0x4f68d8
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0
mov byte [esp + 0x7c], 0
add esp, 0x74
ret
mov edx, dword [ebx + 0x24]
mov ebp, dword [ebx + 0x1c]
cmp ecx, edx
ja 0x4f6f79
cmp ecx, eax
jb 0x4f6f74
mov esi, dword [ebx + 8]
mov edi, dword [esi]
sub edx, eax
mov dword [esp + 0x48], edx
neg edx
sar edx, 0x1f
and edx, eax
add ebp, edx
mov ebx, dword [ebx + 0x30]
mov dword [esp], ebp
sub ecx, eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
test ebx, ebx
setne al
mov byte [esp + 0xc], al
mov edx, esi
call edi
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x68], ebx
mov ebp, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x48], esi
mov edi, dword [esp + 0x18]
mov dword [esp + 0x44], edi
mov edx, ebp
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x70], ebp
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x6c], ebx
mov ebx, dword [esp + 0x20]
test ecx, ecx
jne 0x4f6e4f
mov dword [esp + 0x2c], eax
test eax, eax
jge 0x4f6d81
mov ebx, dword [0xacce6c]
mov dword [esp + 0x58], ebx
mov ecx, ebp
mov ebp, dword [0xacce68]
mov dword [esp + 0x34], ebp
mov edx, esi
mov esi, dword [esp + 0x78]
mov ebx, dword [esi + 0x30]
mov ebp, dword [esi + 0x34]
test ebx, ebx
je 0x4f6cb3
mov dword [esp + 0x6c], ebp
mov ebp, dword [0xacd15c]
cmp dword [0xacd158], ebx
je 0x4f6d4f
xor ebx, ebx
test bl, bl
je 0x4f6ccb
mov ebx, dword [esp + 0x34]
mov dword [esi + 0x30], ebx
mov ebx, dword [0xaec8c0]
test ebx, ebx
jne 0x4f6d34
mov ebx, dword [esp + 0x58]
mov dword [esi + 0x34], ebx
xor ebx, ebx
test bl, bl
je 0x4f6d2b
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edx
mov ebx, dword [0xaec8c0]
test ebx, ebx
jne 0x4f6d1b
mov dword [esi + 0x10], ecx
test ecx, ecx
jne 0x4f6cef
mov ebx, esi
jmp 0x4f685e
mov ecx, dword [esi + 0x30]
test ecx, ecx
je 0x4f6cfa
test eax, eax
jle 0x4f6d0a
mov dword [esi + 0x38], 0
mov byte [esp + 0x7c], 1
add esp, 0x74
ret
mov eax, dword [esi + 0x38]
inc eax
mov dword [esi + 0x38], eax
cmp eax, 0x64
jle 0x4f6d01
jmp 0x4f6f5c
lea edi, [esi + 0x10]
mov edx, eax
mov eax, ecx
call fcn.00466130
mov eax, edx
jmp 0x4f6ce4
mov byte [esp + 0x7c], 0
add esp, 0x74
ret
lea ebx, [esi + 0x34]
mov ebp, edi
mov edi, ebx
mov eax, dword [esp + 0x58]
call fcn.00466130
mov eax, dword [esp + 0x2c]
mov edi, ebp
jmp 0x4f6ccb
mov dword [esp], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00403800
movzx ebx, byte [esp + 0xc]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x48]
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0x44]
jmp 0x4f6caf
mov ebx, dword [esp + 0x78]
mov ecx, ebp
mov ebp, dword [ebx + 0x2c]
mov edx, esi
mov esi, dword [ebx + 0x28]
sub ebp, esi
cmp eax, ebp
jle 0x4f6e3d
mov ebp, dword [0xacce3c]
mov dword [esp + 0x4c], ebp
mov esi, dword [0xacce38]
mov ebp, dword [ebx + 0x30]
mov ebx, dword [ebx + 0x34]
test ebp, ebp
je 0x4f6dcb
mov dword [esp + 0x6c], ebx
mov ebx, dword [0xacd15c]
cmp dword [0xacd158], ebp
je 0x4f6e0a
xor ebx, ebx
test bl, bl
je 0x4f6e04
mov ebx, dword [esp + 0x78]
mov dword [ebx + 0x30], esi
mov ebp, dword [0xaec8c0]
test ebp, ebp
jne 0x4f6dec
mov ebp, dword [esp + 0x4c]
mov dword [ebx + 0x34], ebp
mov esi, ebx
xor ebx, ebx
jmp 0x4f6ccd
lea ebp, [ebx + 0x34]
mov esi, edi
mov edi, ebp
mov eax, dword [esp + 0x4c]
call fcn.00466130
mov eax, dword [esp + 0x2c]
mov edi, esi
jmp 0x4f6de3
mov ebx, dword [esp + 0x78]
jmp 0x4f6de3
mov dword [esp + 0x38], esi
mov dword [esp], ebp
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00403800
movzx ebx, byte [esp + 0xc]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x48]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x44]
jmp 0x4f6dc7
lea ebp, [eax + esi]
mov dword [ebx + 0x28], ebp
mov esi, ebx
mov ebx, 1
jmp 0x4f6ccd
mov dword [esp + 0x64], ebx
mov ecx, dword [0xacce54]
mov ebp, dword [esp + 0x68]
cmp dword [0xacce50], ebp
je 0x4f6ed2
nop
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x30]
mov ebp, dword [ecx + 0x34]
test edx, edx
je 0x4f6e88
mov esi, dword [0xacd15c]
cmp dword [0xacd158], edx
je 0x4f6eb3
xor eax, eax
test al, al
je 0x4f6e9c
mov dword [ecx + 0x30], ebx
mov edx, dword [0xaec8c0]
test edx, edx
jne 0x4f6ea5
mov eax, dword [esp + 0x6c]
mov dword [ecx + 0x34], eax
mov byte [esp + 0x7c], 0
add esp, 0x74
ret
lea edi, [ecx + 0x34]
mov eax, dword [esp + 0x6c]
call fcn.00466130
jmp 0x4f6e9c
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.00403800
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x64]
jmp 0x4f6e84
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00403800
movzx eax, byte [esp + 0xc]
test al, al
je 0x4f6f29
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x78]
mov dword [edx + 0x14], ecx
mov ecx, dword [esp + 0x48]
mov dword [edx + 0x18], ecx
mov ecx, dword [0xaec8c0]
test ecx, ecx
jne 0x4f6f1b
mov eax, dword [esp + 0x70]
mov dword [edx + 0x10], eax
mov byte [edx + 0x3d], 1
mov byte [esp + 0x7c], 1
add esp, 0x74
ret
lea edi, [edx + 0x10]
mov eax, dword [esp + 0x70]
call fcn.00466130
jmp 0x4f6f0e
mov ebx, dword [esp + 0x64]
jmp 0x4f6e65
mov byte [esp + 0x7c], 0
add esp, 0x74
ret
mov eax, esi
call fcn.00466210
mov eax, ebp
mov ecx, esi
call fcn.00466210
mov ecx, esi
call fcn.004661f0
call fcn.00466210
call fcn.004661f0
lea eax, [0x79f7e0]
mov dword [esp], eax
lea eax, [0x8a7370]
mov dword [esp + 4], eax
call fcn.004353f0
call fcn.00466210
call fcn.004661f0
nop
call fcn.00464bd0
jmp fcn.004f6730