Function at 0x4fce00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x5c
mov dword [esp + 0x10], edx
mov edx, ecx
push ebx
push esi
push edi
mov ebx, dword [edx]
mov edi, dword [ebp + 8]
mov dword [esp + 0x20], edx
mov dword [esp + 0x18], ebx
mov esi, dword [ebx + 8]
mov eax, dword [edi + 0x4c]
mov dword [esp + 0x2c], esi
mov dword [esp + 0xc], eax
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x3c], ecx
cmp dword [esi + 0x78], ecx
jg 0x4fce58
push 0
push 0
push 0
mov edx, 0x11
mov ecx, esi
call fcn.0048eaa0
mov edx, dword [esp + 0x2c]
add esp, 0xc
mov dword [esp + 0x3c], eax
jmp 0x4fce90
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x11
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
nop dword [eax + eax]
push edi
mov ecx, ebx
call fcn.004f3580
dec dword [ebx + 0x38]
add esp, 4
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x38], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebx + 0x2c], eax
mov dword [esp + 0x28], eax
mov dword [edi + 0x34], eax
movzx eax, byte [edi + 0x38]
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*8 + 0x18]
mov ecx, 0xa
movsx eax, word [eax + 0x26]
cdq
idiv ecx
mov ecx, eax
mov eax, edx
cdq
movzx ecx, cx
test edx, edx
jne 0x4fcef7
cmp eax, 5
jae 0x4fcef7
test edx, edx
jne 0x4fcef2
cmp eax, 1
jb 0x4fcefd
add eax, 0xffffffff
jmp 0x4fcefa
add eax, 0xfffffffe
adc edx, 0xffffffff
cmp cx, 0x3c
jg 0x4fcf4b
add eax, 8
movsx edi, cx
adc edx, 0
cmp cx, 3
jl 0x4fcf1c
lea ecx, [edi - 3]
call fcn.0056f2c0
jmp 0x4fcf28
mov ecx, 3
sub ecx, edi
call fcn.0056f2e0
mov edi, eax
test edx, edx
ja 0x4fcf4b
jb 0x4fcf38
cmp edi, 0x2710
jae 0x4fcf3f
mov edi, 0x2710
jmp 0x4fcf50
test edx, edx
jne 0x4fcf4b
cmp edi, 0x989680
jbe 0x4fcf58
mov edi, 0x989680
mov dword [esp + 0x44], 0
mov ecx, dword [esi + 0x74]
mov edx, dword [esp + 0x28]
cmp dword [esi + 0x78], ecx
jg 0x4fcf79
push 0
push edx
push edi
mov edx, 0x4c
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4fcfa4
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4c
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x28], ecx
cmp dword [esi + 0x78], ecx
jg 0x4fcfcd
push 0
push 0
push dword [esp + 0x18]
mov edx, 0x26
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
mov dword [esp + 0x28], eax
jmp 0x4fd000
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x26
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x20]
mov edi, dword [eax + 0x70]
mov eax, dword [eax + 0x64]
lea edx, [eax + eax*2]
shl edx, 4
add edx, edi
mov dword [esp + 0x14], edx
cmp edi, edx
jae 0x4fd07b
mov esi, dword [esp + 0x10]
mov eax, edx
test byte [edi + 0xa], 2
mov edx, dword [edi]
jne 0x4fd070
mov dword [esp + 0x50], fcn.004a8370
mov eax, 3
mov word [esp + 0x60], ax
mov dword [esp + 0x54], 0x4a8250
mov dword [esp + 0x64], esi
test edx, edx
je 0x4fd05b
lea ecx, [esp + 0x4c]
call fcn.004a2570
cmp word [esp + 0x60], 0
je 0x4fd06c
push 0x10
push dword [esp + 0x3c]
push dword [edi]
push ebx
call fcn.004ae9b0
add esp, 0x10
mov eax, dword [esp + 0x14]
add edi, 0x30
cmp edi, eax
jb 0x4fd020
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0xc]
test dword [edi + 0x2c], 0x100
je 0x4fd1a8
mov al, byte [ebx + 0x13]
test al, al
jne 0x4fd09b
inc dword [ebx + 0x2c]
mov edx, dword [ebx + 0x2c]
jmp 0x4fd0aa
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov edx, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x14], edx
cmp dword [esi + 0x78], ecx
jg 0x4fd0ce
push 0
push edx
push dword [esp + 0x18]
mov edx, 0x86
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4fd101
mov ebx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 8]
mov edx, dword [esi + 0x74]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x34], eax
cmp dword [esi + 0x78], edx
jg 0x4fd12d
push dword [esp + 0x14]
mov edx, 0xb2
mov ecx, esi
push 0
push eax
call fcn.0048eaa0
add esp, 0xc
mov edx, eax
jmp 0x4fd164
mov edi, dword [esp + 0x34]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xb2
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4fd17f
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 1
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4fd316
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4fd316
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ecx
inc byte [ebx + 0x13]
jmp 0x4fd316
movzx eax, word [edi + 0x18]
mov edx, dword [edi + 0x20]
mov ecx, eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x24], ecx
cmp ecx, 1
jne 0x4fd1ee
mov al, byte [ebx + 0x13]
test al, al
jne 0x4fd1d7
inc dword [ebx + 0x2c]
xor edi, edi
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x14], eax
jmp 0x4fd227
dec al
xor edi, edi
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov dword [esp + 0x14], eax
jmp 0x4fd227
mov edi, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x20]
mov dword [esp + 0x14], edx
cmp ecx, edi
jg 0x4fd209
lea eax, [edx + ecx]
sub edi, ecx
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], edi
jmp 0x4fd218
mov eax, dword [ebx + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [esp + 0x14], edx
mov dword [ebx + 0x2c], eax
xor eax, eax
xor edi, edi
cmp ax, word [esp + 0x34]
jae 0x4fd260
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x14]
nop dword [eax + eax]
lea eax, [edi + ebx]
mov ecx, esi
push eax
mov eax, dword [edx + 4]
mov edx, dword [edx + 0xc]
movsx eax, word [eax + edi*2]
push eax
push dword [esp + 0x18]
call fcn.004ab6c0
mov edx, dword [esp + 0x3c]
inc edi
add esp, 0xc
cmp edi, dword [esp + 0x24]
jl 0x4fd230
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 8]
mov edi, dword [esi + 0x74]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x30], eax
cmp dword [esi + 0x78], edi
jg 0x4fd28d
push edx
push 0
push eax
mov edx, 0xb2
mov ecx, esi
call fcn.0048eaa0
mov edx, dword [esp + 0x20]
add esp, 0xc
mov edi, eax
jmp 0x4fd2c0
mov ebx, dword [esp + 0x30]
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x18]
mov dword [eax + ecx*4], 0xb2
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4fd2dd
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
mov edi, dword [esp + 0x24]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x4fd2e1
mov edi, dword [esp + 0x24]
cmp word [esp + 0x34], 1
jne 0x4fd307
test edx, edx
je 0x4fd312
mov al, byte [ebx + 0x13]
mov edi, dword [esp + 0xc]
cmp al, 8
jae 0x4fd316
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edx
inc byte [ebx + 0x13]
jmp 0x4fd316
cmp edi, dword [ebx + 0x1c]
jle 0x4fd312
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x20], edx
mov edi, dword [esp + 0xc]
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x38]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4fd334
push edx
mov edx, esi
call fcn.0048f2c0
add esp, 4
jmp 0x4fd33d
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp + 8]
mov edx, dword [esp + 0x28]
mov ecx, dword [esi + 0x74]
inc edx
mov eax, dword [eax + 4]
mov dword [esp + 0x38], eax
cmp dword [esi + 0x78], ecx
jg 0x4fd369
push 0
push edx
push eax
mov edx, 5
mov ecx, esi
call fcn.0048eaa0
add esp, 0xc
jmp 0x4fd39c
mov ebx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x18]
mov dword [eax + ecx*4], 5
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4fd3ae
mov eax, 0x5c24f8
jmp 0x4fd3c3
mov ecx, dword [esp + 0x28]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
and dword [edi + 0x2c], 0xffbfffff
mov eax, dword [ebx]
test dword [eax + 0x50], 0x100000
jne 0x4fd47c
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x1c]
inc edi
mov dword [esp + 0x1c], edi
movzx eax, byte [edx + 0x30]
mov dword [esp + 0x34], eax
cmp edi, eax
jge 0x4fd473
mov ecx, dword [edx + 4]
mov esi, edi
mov ebx, dword [esp + 0x34]
add edx, 0x34c
imul eax, esi, 0x58
mov dword [esp + 0x38], ecx
add edx, eax
lea eax, [edx - 0x4c]
mov dword [ebp + 8], eax
movzx eax, byte [edx - 0x14]
lea eax, [eax + eax*8]
test byte [ecx + eax*8 + 0x2c], 8
jne 0x4fd451
mov edi, dword [edx]
mov dword [esp + 0xc], edi
test edi, edi
je 0x4fd451
mov ecx, dword [ebp + 0xc]
mov eax, dword [edi + 4]
and ecx, dword [edi]
and eax, dword [ebp + 0x10]
or ecx, eax
jne 0x4fd44d
mov eax, dword [edi + 0x2c]
and eax, 0x400004
cmp eax, 0x400000
je 0x4fd45d
mov ecx, dword [esp + 0x38]
inc esi
add edx, 0x58
mov dword [esp + 0x1c], esi
cmp esi, ebx
jl 0x4fd411
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x1c]
cmp edi, eax
mov esi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov edi, dword [ebp + 8]
jl 0x4fce90
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x4fd494
mov dword [0x5c2500], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x3c]
lea eax, [edx - 1]
test ecx, ecx
pop edi
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
pop esi
pop ebx
mov dword [eax + ecx*4 + 8], edx
mov esp, ebp
pop ebp
ret