Function at 0x4fa230
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x90eeac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x50]
cmp eax, dword [ecx + 8]
jbe 0x4fa9cd
sub esp, 0xd0
mov eax, 0
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], eax
mov byte [esp + 0x43], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov eax, dword [esp + 0xd8]
test eax, eax
je 0x4fa9a8
call fcn.0049bd40
lea edi, [esp + 0xb4]
lea esi, [esp]
call fcn.00471bde
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp + 8], edx
lea edi, [esp + 0xc]
lea esi, [esp + 0xb4]
call fcn.00471bde
call fcn.004f8ce0
lea edi, [esp + 0x84]
lea esi, [esp + 0x20]
call fcn.00471bde
lea edi, [esp + 0x5c]
lea esi, [esp + 0x84]
call fcn.00471bde
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
test eax, 0x80000000
je 0x4fa33d
mov ebx, ecx
shl ecx, 1
shl eax, 1
mov ebp, ebx
shr ebx, 0x1f
or eax, ebx
mov ebx, eax
shl eax, 1
shr ecx, 0x1f
or ecx, eax
shr ebx, 0x1f
add ecx, 0xd7b17f80
adc ebx, 0xd
jmp 0x4fa349
mov eax, dword [esp + 0x64]
mov ebx, dword [esp + 0x68]
mov ebp, ecx
mov ecx, eax
test ecx, ecx
sete al
test ebx, ebx
sete cl
and ecx, eax
test cl, cl
je 0x4fa376
test ebp, 0x3fffffff
jne 0x4fa376
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
xor eax, eax
jmp 0x4fa479
mov edx, dword [0x8e23ec]
mov eax, dword [edx]
call eax
lea edi, [esp + 0xb4]
xor eax, eax
call fcn.004716fb
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax + 0xc]
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
call ecx
movzx eax, byte [esp + 0x18]
lea edi, [esp + 0xb4]
lea esi, [esp + 4]
call fcn.00471bde
lea edi, [esp + 0x98]
lea esi, [esp + 0xb4]
call fcn.00471bde
test al, al
je 0x4fa3fd
lea edi, [esp]
lea esi, [esp + 0x84]
call fcn.00471bde
lea edi, [esp + 0x14]
lea esi, [esp + 0x98]
call fcn.00471bde
call fcn.00495180
movzx eax, byte [esp + 0x28]
test al, al
je 0x4fa469
lea edi, [esp + 0xb4]
lea esi, [esp + 0x84]
call fcn.00471bde
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
lea edi, [esp + 8]
lea esi, [esp + 0xb4]
call fcn.00471bde
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call fcn.004ed990
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xc8], eax
mov byte [esp + 0x43], 1
mov eax, 1
jmp 0x4fa479
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
xor eax, eax
mov ebx, dword [esp + 0xd4]
mov ebp, dword [ebx + 0x54]
test ebp, ebp
je 0x4fa547
mov dword [esp + 0x7c], ebp
mov byte [esp + 0x42], al
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.004ec790
mov eax, dword [esp + 0x10]
mov dword [esp + 0xac], eax
movzx ecx, byte [esp + 0x42]
or ecx, 2
mov byte [esp + 0x42], cl
mov edx, dword [esp + 8]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x70], ebx
mov dword [esp + 0xcc], eax
mov byte [esp + 0x43], cl
lea ebp, [0x68e700]
mov dword [esp], ebp
call fcn.0040bdb0
mov eax, dword [esp + 4]
lea ecx, [0x4fa9e0]
mov dword [eax], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x4fa506
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x70]
jmp 0x4fa522
call fcn.00471480
mov ecx, dword [esp + 0x7c]
mov dword [edi], ecx
mov edx, dword [esp + 0xac]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x70]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ebx
mov dword [esp], eax
call fcn.00442260
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x70]
movzx eax, byte [esp + 0x42]
mov byte [esp + 0x42], al
mov dword [esp + 0x48], ecx
mov dword [esp + 0x78], edx
mov ebx, dword [ecx + 0x18]
mov dword [esp], edx
lea ebp, [0x67d580]
mov dword [esp + 4], ebp
lea esi, [0x90ed40]
mov dword [esp + 8], esi
call ebx
lea eax, [0x669320]
cmp dword [esp + 0xc], eax
jne 0x4fa581
mov ecx, dword [esp + 0x10]
jmp 0x4fa583
xor ecx, ecx
test ecx, ecx
jne 0x4fa594
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x78]
jmp 0x4fa632
mov dword [esp + 0x58], ecx
lea eax, [0x698020]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [0x90f128]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x58]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
test eax, eax
je 0x4fa5c7
call fcn.00471470
mov dword [edi], ebx
mov dword [edi + 4], edx
mov dword [ecx], ebx
mov dword [ecx + 4], edx
mov eax, dword [0x90f128]
test eax, eax
je 0x4fa5e6
mov eax, dword [ecx + 8]
call fcn.00471470
mov dword [edi], eax
mov eax, dword [ecx + 0xc]
mov dword [edi + 4], eax
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
lea ebx, [0x67d580]
mov dword [esp + 8], ebx
lea ebx, [0x90ed40]
mov dword [esp + 0xc], ebx
lea ebx, [0x669320]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ecx
call fcn.004ee1d0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0xd4]
mov ebx, dword [eax + 0x50]
test ebx, ebx
jne 0x4fa646
mov ebx, dword [0x8e23fc]
mov ebp, dword [eax + 0x1c]
mov esi, dword [eax + 0x20]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
lea ecx, [0x6b85fd]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 4
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xe4]
mov dword [esp + 0x18], ebx
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0xec]
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], esi
call fcn.004f93e0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x3c]
test eax, eax
je 0x4fa7cc
mov dword [esp + 0x80], ebp
mov dword [esp + 0x4c], eax
lea eax, [0x69c1c0]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x6b85fd]
mov dword [eax], ecx
mov ecx, dword [esp + 0xe4]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x4fa707
mov ecx, dword [esp + 0xe0]
jmp 0x4fa715
call fcn.00471460
mov ecx, dword [esp + 0xe0]
mov dword [edi], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0x20], ecx
mov ecx, dword [0x90f128]
test ecx, ecx
jne 0x4fa74e
mov ecx, dword [esp + 0x80]
jmp 0x4fa75c
call fcn.00471460
mov ecx, dword [esp + 0x80]
mov dword [edi], ecx
mov dword [eax + 0x24], ecx
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
lea ecx, [0x71da00]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], eax
movzx eax, byte [esp + 0x42]
test al, 2
je 0x4fa7ae
and eax, 0xfffffffd
mov byte [esp + 0x42], al
mov byte [esp + 0x43], al
mov edx, dword [esp + 0xcc]
mov ecx, dword [edx]
call ecx
movzx eax, byte [esp + 0x42]
test al, 1
je 0x4fa7c5
and eax, 0xfffffffe
mov byte [esp + 0x43], al
mov edx, dword [esp + 0xc8]
mov eax, dword [edx]
call eax
add esp, 0xd0
ret
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], edx
mov dword [esp + 0xb0], ecx
lea eax, [0x697aa0]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [0x90f128]
mov edi, dword [esp + 4]
mov dword [esp + 0x74], edi
test eax, eax
je 0x4fa842
mov eax, edi
call fcn.00471490
mov ecx, dword [esp + 0xe0]
mov dword [edi], ecx
mov edx, dword [eax + 0x64]
mov dword [edi + 4], edx
mov edx, dword [esp + 0xe8]
mov dword [edi + 8], edx
mov ebx, dword [eax + 0x6c]
mov dword [edi + 0xc], ebx
lea ebx, [0x6a6700]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0xd4]
mov dword [esp + 8], ebx
call fcn.0040eab0
mov edi, dword [esp + 0x74]
mov esi, dword [esp + 0xd4]
call fcn.00471b16
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x74]
mov dword [ecx + 0x68], eax
mov edx, dword [esp + 0xe0]
mov dword [ecx + 0x64], edx
mov ebx, dword [esp + 0xec]
mov dword [ecx + 0x70], ebx
mov ebx, dword [esp + 0xe8]
mov dword [ecx + 0x6c], ebx
mov ebx, dword [esp + 0xd4]
mov ebx, dword [ebx + 0x2c]
test ebx, ebx
sete bl
xchg ebp, ebx
setg bl
xchg ebp, ebx
and ebx, 1
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4fa8f0
cmp eax, 3
jne 0x4fa8f0
cmp word [edx], 0x6374
jne 0x4fa8f0
cmp byte [edx + 2], 0x70
jne 0x4fa8f0
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
lea eax, [0x6d60b8]
mov dword [esp + 0xc], eax
call fcn.00506400
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
jmp 0x4fa905
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
xor ebp, ebp
xor esi, esi
mov ecx, dword [esp + 0xb0]
xor eax, eax
mov edi, dword [esp + 0x74]
mov dword [esp], edi
mov edi, dword [esp + 0x48]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], esi
call fcn.004faaa0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], edx
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], ebx
movzx eax, byte [esp + 0x42]
test al, 2
je 0x4fa98a
and eax, 0xfffffffd
mov byte [esp + 0x42], al
mov byte [esp + 0x43], al
mov edx, dword [esp + 0xcc]
mov ecx, dword [edx]
call ecx
movzx eax, byte [esp + 0x42]
test al, 1
je 0x4fa9a1
and eax, 0xfffffffe
mov byte [esp + 0x43], al
mov edx, dword [esp + 0xc8]
mov eax, dword [edx]
call eax
add esp, 0xd0
ret
lea eax, [0x6765e0]
mov dword [esp], eax
lea eax, [0x71cc30]
mov dword [esp + 4], eax
call fcn.0046ab50
nop
call fcn.004359f0
add esp, 0xd0
ret
call fcn.00470060
jmp fcn.004fa230