Function at 0x4f0870
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc4]
cmp eax, dword [ecx + 8]
jbe 0x4f154d
sub esp, 0x144
mov eax, dword [esp + 0x150]
test eax, eax
jle 0x4f08e2
mov ecx, dword [esp + 0x15c]
test ecx, ecx
jle 0x4f08d0
mov edx, dword [esp + 0x148]
lea ebx, [edx + eax*4 - 4]
mov ebp, dword [esp + 0x154]
lea esi, [ebp + ecx*4 - 4]
cmp esi, ebx
jne 0x4f08cc
mov edi, dword [esp + 0x160]
jmp 0x4f0917
test eax, eax
jmp 0x4f08f7
test eax, eax
mov edx, dword [esp + 0x148]
mov ebp, dword [esp + 0x154]
jmp 0x4f08f7
mov ecx, dword [esp + 0x15c]
mov edx, dword [esp + 0x148]
mov ebp, dword [esp + 0x154]
jle 0x4f0928
mov ebx, dword [esp + 0x168]
test ebx, ebx
jle 0x4f091f
lea esi, [edx + eax*4 - 4]
mov edi, dword [esp + 0x160]
lea ebx, [edi + ebx*4 - 4]
cmp ebx, esi
jne 0x4f092f
xor eax, eax
xor edx, edx
xor ebx, ebx
jmp 0x4f0936
mov edi, dword [esp + 0x160]
jmp 0x4f092f
mov edi, dword [esp + 0x160]
mov ebx, dword [esp + 0x14c]
mov esi, dword [esp + 0x170]
cmp esi, 1
jne 0x4f096e
mov ecx, dword [esp + 0x16c]
cmp dword [ecx], 1
jne 0x4f0975
mov dword [esp + 0x178], edx
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], eax
add esp, 0x144
ret
mov ecx, dword [esp + 0x16c]
mov ecx, dword [esp + 0x164]
test ecx, ecx
je 0x4f0e46
cmp ecx, 1
jne 0x4f0a29
cmp dword [edi], 1
jne 0x4f0a29
test esi, esi
je 0x4f0a29
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x174]
mov dword [esp + 0x2c], eax
call fcn.004f4780
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], edx
add esp, 0x144
ret
test esi, esi
je 0x4f0ac4
cmp esi, eax
jle 0x4f0ac4
cmp esi, 1
jne 0x4f0a83
lea eax, [0x5310e0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00446320
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x164]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x160]
mov eax, 1
jmp 0x4f0ac4
lea eax, [0x5310e0]
mov dword [esp], eax
mov dword [esp + 4], esi
lea ecx, [esi + 4]
mov dword [esp + 0x4c], ecx
mov dword [esp + 8], ecx
call fcn.00446320
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x164]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x160]
mov eax, dword [esp + 0x4c]
nop
mov ebx, dword [esp + 0x158]
cmp ebx, eax
jle 0x4f0b6b
cmp ebx, 1
jne 0x4f0b23
lea eax, [0x5310e0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00446320
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x164]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x160]
mov ebx, 1
mov eax, 1
jmp 0x4f0b6b
lea eax, [0x5310e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [ebx + 4]
mov dword [esp + 0x48], eax
mov dword [esp + 8], eax
call fcn.00446320
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x164]
mov ebp, dword [esp + 0x154]
mov esi, dword [esp + 0x170]
mov edi, dword [esp + 0x160]
mov ebx, dword [esp + 0x158]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x158]
cmp eax, ebx
jl 0x4f0b7c
mov eax, ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x120], edx
cmp ebp, edx
je 0x4f0b9e
mov dword [esp], edx
mov dword [esp + 4], ebp
shl eax, 2
mov dword [esp + 8], eax
call fcn.0045d2d0
mov eax, dword [0x65f490]
mov ecx, dword [0x65f494]
mov edx, dword [0x65f498]
mov ebx, dword [esp + 0x154]
mov dword [esp], ebx
mov ebp, dword [esp + 0x158]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x15c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004edaa0
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x4f0d61
mov ebx, dword [esp + 0x164]
cmp ebx, 1
jle 0x4f0d58
mov ebp, dword [esp + 0x170]
test ebp, ebp
jle 0x4f0d6f
mov eax, dword [esp + 0x16c]
mov eax, dword [eax]
test eax, 1
je 0x4f0cbc
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x168]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebp
mov eax, dword [esp + 0x174]
mov dword [esp + 0x2c], eax
call fcn.004f1f30
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], edx
add esp, 0x144
ret
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x168]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebp
mov eax, dword [esp + 0x174]
mov dword [esp + 0x2c], eax
call fcn.004f1560
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], edx
add esp, 0x144
ret
mov ebp, dword [esp + 0x170]
jmp 0x4f0d6f
mov ebx, dword [esp + 0x164]
mov ebp, dword [esp + 0x170]
mov esi, dword [esp + 0x160]
mov edi, dword [esi + ebx*4 - 4]
nop
nop
cmp edi, 0x10000
jb 0x4f0d90
mov eax, edi
shr edi, 0x10
mov ecx, 0x10
jmp 0x4f0d94
mov eax, edi
xor ecx, ecx
cmp edi, 0x100
jb 0x4f0da2
shr edi, 8
add ecx, 8
cmp edi, 0x100
jae 0x4f1540
mov edx, esi
lea esi, [0x55b38c]
movzx esi, byte [esi + edi]
lea esi, [esi + ecx - 0x20]
xchg esi, ebx
neg ebx
xchg esi, ebx
lea ecx, [esi + 1]
cmp ecx, 0x20
sbb edi, edi
shl eax, cl
and eax, edi
add esi, 0xffffffe1
xchg esi, ebx
neg ebx
xchg esi, ebx
mov dword [esp + 0x64], esi
xor ecx, ecx
mov edi, dword [esp + 0x60]
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x120]
mov dword [esp + 0x118], edi
xor edi, edi
mov dword [esp + 0x54], edi
xor ecx, ecx
mov dword [esp + 0xb4], ecx
xor ecx, ecx
mov dword [esp + 0x140], ecx
xor ecx, ecx
mov dword [esp + 0x70], ecx
xor ecx, ecx
mov dword [esp + 0x6c], ecx
xor ecx, ecx
mov dword [esp + 0x124], ecx
xor ecx, ecx
mov dword [esp + 0x74], ecx
xor ecx, ecx
mov dword [esp + 0x78], ecx
xor ecx, ecx
mov dword [esp + 0x128], ecx
mov edi, dword [esp + 0x60]
xor ecx, ecx
jmp 0x4f0ed8
nop
cmp eax, 1
jge 0x4f0e73
lea eax, [0x5310e0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00446320
mov edx, dword [esp + 0xc]
mov eax, 1
mov dword [edx], 1
mov dword [esp + 0x178], edx
mov dword [esp + 0x17c], 1
mov dword [esp + 0x180], eax
add esp, 0x144
ret
mov ebp, dword [esp + 0x80]
inc ebp
shl ebx, 1
mov dword [esp + 0x50], ecx
mov dword [esp + 0x118], eax
mov dword [esp + 0x54], esi
mov dword [esp + 0xb4], edi
mov esi, dword [esp + 0x64]
mov ecx, ebp
mov eax, ebx
mov edi, edx
mov edx, dword [esp + 0x160]
mov ebx, dword [esp + 0x164]
mov ebp, dword [esp + 0x170]
cmp ecx, esi
jge 0x4f1118
mov dword [esp + 0xb0], edi
mov dword [esp + 0x80], ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edi
call fcn.004efc40
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x68]
test ebx, 0x80000000
jne 0x4f0f5c
mov ebp, dword [esp + 0x170]
test ebp, ebp
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0x50]
jmp 0x4f1003
mov dword [esp + 0xac], ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0x13c], eax
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
mov ebx, dword [esp + 0x50]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x154]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x158]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x15c]
mov dword [esp + 0x20], esi
call fcn.004eeba0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x170]
test ebx, ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x170]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0xac]
mov ebp, dword [esp + 0x13c]
mov dword [esp + 0x118], ebp
mov ebp, dword [esp + 0x170]
jne 0x4f1026
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x108]
jmp 0x4f0e99
mov dword [esp + 0xa4], edx
mov dword [esp + 0x138], eax
mov dword [esp + 0xa0], ecx
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov ebx, dword [esp + 0x124]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x174]
mov dword [esp + 0x2c], esi
call fcn.004f4780
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x74]
mov edi, dword [esp + 0x128]
mov dword [esp + 0x140], edi
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x6c], edi
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x70], edi
mov edi, dword [esp + 0x138]
mov dword [esp + 0x124], edi
mov dword [esp + 0x128], ebx
mov ebx, dword [esp + 0x68]
mov edi, dword [esp + 0x74]
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x170]
mov dword [esp + 0x110], eax
mov eax, esi
mov esi, dword [esp + 0x78]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x110]
jmp 0x4f0e99
lea esi, [ebx - 2]
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x58], eax
mov dword [esp + 0xf8], ecx
mov ecx, dword [esp + 0x118]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x50], edx
mov dword [esp + 0xe8], ebx
mov ebx, dword [esp + 0x140]
mov dword [esp + 0x118], ebx
mov ecx, dword [esp + 0xf8]
mov eax, dword [esp + 0x100]
mov edx, dword [esp + 0xf0]
mov ebx, dword [esp + 0xe8]
jmp 0x4f11d7
dec esi
mov ebx, dword [esp + 0x164]
mov ebp, dword [esp + 0x78]
mov ebp, dword [esp + 0x170]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x58], eax
mov dword [esp + 0xd8], ecx
mov ecx, dword [esp + 0x140]
mov dword [esp + 0x11c], ecx
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0xe0]
test esi, esi
jl 0x4f122d
cmp ebx, esi
jbe 0x4f1537
mov dword [esp + 0x84], esi
mov ebx, dword [edx + esi*4]
mov dword [esp + 0xd0], eax
xor eax, eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xc8], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0x140], ecx
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xd0]
jmp 0x4f12c4
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0x11c]
mov eax, ecx
jmp 0x4f123e
mov ecx, ebp
test ecx, ecx
jle 0x4f1251
lea ebp, [ecx - 1]
cmp eax, ebp
jbe 0x4f1278
mov esi, dword [ebx + ecx*4 - 4]
test esi, esi
je 0x4f123c
cmp ecx, edi
ja 0x4f1271
mov dword [esp + 0x178], ebx
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], edi
add esp, 0x144
ret
mov edx, edi
call fcn.0045ca40
mov ecx, eax
mov eax, ebp
call fcn.0045ca00
mov ebp, dword [esp + 0x7c]
inc ebp
shl ebx, 1
mov dword [esp + 0x7c], ebp
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x140], eax
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], esi
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x128]
mov ebp, dword [esp + 0x170]
mov esi, dword [esp + 0x84]
mov edi, edx
mov edx, dword [esp + 0x160]
mov ebp, dword [esp + 0x7c]
cmp ebp, 0x20
jge 0x4f118f
mov dword [esp + 0x9c], edi
mov dword [esp + 0x134], eax
mov dword [esp + 0x98], ecx
mov dword [esp + 0x68], ebx
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edi
call fcn.004efc40
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x68]
test ebx, 0x80000000
jne 0x4f136c
mov ebp, dword [esp + 0x170]
test ebp, ebp
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x9c]
mov esi, dword [esp + 0x140]
mov dword [esp + 0x118], esi
mov esi, dword [esp + 0xb4]
jmp 0x4f1416
mov dword [esp + 0x130], eax
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], ecx
mov ebx, dword [esp + 0x140]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0x154]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 0x158]
mov dword [esp + 0x1c], ebp
mov esi, dword [esp + 0x15c]
mov dword [esp + 0x20], esi
call fcn.004eeba0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x170]
test ebx, ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x170]
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x94]
mov ebp, dword [esp + 0x130]
mov dword [esp + 0x118], ebp
mov ebp, dword [esp + 0x170]
jne 0x4f1452
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x74], eax
mov dword [esp + 0xb8], ecx
mov ecx, dword [esp + 0x134]
mov dword [esp + 0x128], ecx
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xb8]
jmp 0x4f1281
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x12c], eax
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov ebx, dword [esp + 0x124]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x174]
mov dword [esp + 0x2c], esi
call fcn.004f4780
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x78]
mov edi, dword [esp + 0x134]
mov dword [esp + 0x118], edi
mov edi, dword [esp + 0x8c]
mov dword [esp + 0x70], edi
mov edi, dword [esp + 0x88]
mov dword [esp + 0x6c], edi
mov edi, dword [esp + 0x12c]
mov dword [esp + 0x124], edi
mov dword [esp + 0x74], ebp
mov dword [esp + 0x128], ebx
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x170]
mov edi, dword [esp + 0x78]
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x98]
jmp 0x4f1281
mov eax, esi
mov ecx, ebx
call fcn.0045ca00
mov eax, edi
mov ecx, 0x100
call fcn.0045ca10
nop
call fcn.0045b540
jmp fcn.004f0870