Function at 0x4fa850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x48]
cmp eax, dword [ecx + 8]
jbe 0x4fb29d
sub esp, 0xc8
mov ebx, dword [esp + 0xcc]
mov ebp, dword [ebx + 0x10]
mov esi, dword [esp + 0xd0]
sub esi, ebp
shl esi, 2
mov dword [esp + 0x54], esi
mov edi, dword [esp + 0xd8]
sub edi, ebp
shl edi, 2
mov ebp, dword [ebx + 0x14]
mov eax, edi
mov edi, dword [esp + 0xd4]
sub edi, ebp
mov ecx, esi
mov esi, dword [esp + 0xdc]
sub esi, ebp
mov dword [esp + 0x18], esi
mov ebp, dword [esp + 0xe0]
mov edx, ebp
mov ebp, dword [ebp + 0x2c]
cmp ebp, 1
jg 0x4fa917
test ebp, ebp
jne 0x4fa8ed
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x94]
jmp 0x4fb0a5
cmp ebp, 1
jne 0x4fa968
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x9c]
jmp 0x4fae5d
cmp ebp, 2
jne 0x4fa941
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xa4]
jmp 0x4fabfa
cmp ebp, 3
jne 0x4fa968
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xac]
jmp 0x4fa9a6
mov byte [esp + 0xec], 0
add esp, 0xc8
ret
mov ecx, dword [esp + 0x78]
inc ecx
mov ebx, dword [esp + 8]
inc ebx
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xe4]
mov ebp, esi
mov esi, dword [esp + 0x18]
mov edi, ecx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0xcc]
cmp edi, esi
je 0x4faa5b
mov esi, dword [ebx + 4]
mov ebp, dword [ebx]
mov dword [esp + 0xc4], ebp
mov ebp, dword [ebx + 8]
mov ebx, dword [ebx + 0xc]
imul ebx, edi
cmp esi, ebx
jb 0x4fabcb
mov dword [esp + 0x78], edi
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov edi, dword [esp + 0xc4]
add ebp, edi
mov dword [esp + 0xb4], ebp
sub esi, ebx
mov dword [esp + 0x44], esi
mov ebx, dword [edx + 0x34]
mov dword [esp + 0x90], ebx
mov edi, dword [esp + 8]
sub edi, ebx
imul edi, dword [edx + 0x24]
mov ebp, dword [edx + 0x30]
mov ebx, dword [esp + 0xe4]
sub ebx, ebp
mov dword [esp + 0x8c], ebx
lea ebp, [edi + ebx]
mov dword [esp + 0x34], ebp
mov edi, dword [esp + 8]
shr edi, 0x1f
mov ebp, dword [esp + 8]
add edi, ebp
sar edi, 1
mov ebp, dword [esp + 0x90]
shr ebp, 0x1f
mov ebx, dword [esp + 0x90]
add ebx, ebp
sar ebx, 1
sub edi, ebx
imul edi, dword [edx + 0x28]
mov ebx, dword [esp + 0x8c]
add ebx, edi
mov ebp, dword [esp + 0x34]
mov edi, ecx
jmp 0x4faab7
mov byte [esp + 0xec], 1
add esp, 0xc8
ret
sub edi, ecx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and ecx, edi
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0xb4]
xchg edi, eax
mov byte [edx + ecx], al
xchg edi, eax
xchg ebp, eax
mov byte [edx + ecx + 1], al
xchg ebp, eax
mov byte [edx + ecx + 2], bl
mov byte [edx + ecx + 3], 0xff
mov ecx, dword [esp + 0x34]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x58]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xe0]
mov edx, ecx
mov edi, dword [esp + 0x54]
mov ecx, esi
mov esi, dword [esp + 0x44]
cmp ecx, eax
je 0x4fa977
mov edi, dword [edx + 4]
mov esi, dword [edx]
cmp ebp, edi
jae 0x4fabc2
mov dword [esp + 0x34], ebp
movzx esi, byte [ebp + esi]
mov edi, dword [edx + 0x10]
mov ebp, dword [edx + 0xc]
cmp ebx, edi
jae 0x4fabb9
movzx ebp, byte [ebx + ebp]
mov dword [esp + 0x88], ebp
mov edi, dword [edx + 0x1c]
mov ebp, dword [edx + 0x18]
cmp ebx, edi
jae 0x4fabb0
imul esi, esi, 0x10101
movzx ebp, byte [ebx + ebp]
imul edi, ebp, 0x166e9
lea edi, [esi + edi - 0xb37480]
test edi, 0xff000000
jne 0x4fab20
sar edi, 0x10
jmp 0x4fab29
sar edi, 0x1f
xchg edi, ebx
not ebx
xchg edi, ebx
mov dword [esp + 0x68], esi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x88]
imul edi, ebx, 0x581a
sub esi, edi
imul ebp, ebp, 0xb6d2
sub esi, ebp
lea ebp, [esi + 0x877600]
test ebp, 0xff000000
jne 0x4fab5f
sar ebp, 0x10
jmp 0x4fab68
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
imul ebx, ebx, 0x1c5a2
mov esi, dword [esp + 0x68]
lea ebx, [ebx + esi - 0xe2d100]
test ebx, 0xff000000
jne 0x4fab86
sar ebx, 0x10
jmp 0x4fab8b
sar ebx, 0x1f
not ebx
lea esi, [ecx + 4]
mov edi, dword [esp + 0x44]
cmp edi, esi
jb 0x4faba7
cmp ecx, esi
jbe 0x4faa6a
mov eax, ecx
mov ecx, esi
call fcn.00456c00
mov ecx, esi
mov edx, edi
call fcn.00456bf0
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebp
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, esi
call fcn.00456ba0
mov ecx, dword [esp + 0x7c]
lea edi, [ecx + 1]
mov ecx, dword [esp + 0xc]
inc ecx
mov ebx, dword [esp + 0xcc]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x54]
cmp edi, esi
je 0x4faa5b
mov esi, dword [ebx + 4]
mov ebp, dword [ebx]
mov dword [esp + 0xc4], ebp
mov ebp, dword [ebx + 8]
mov ebx, dword [ebx + 0xc]
imul ebx, edi
cmp esi, ebx
jb 0x4fae2b
mov dword [esp + 0x7c], edi
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov edi, dword [esp + 0xc4]
add ebp, edi
mov dword [esp + 0xb8], ebp
sub esi, ebx
mov dword [esp + 0x48], esi
mov ebx, dword [edx + 0x34]
mov dword [esp + 0x90], ebx
mov edi, dword [esp + 0xc]
sub edi, ebx
imul edi, dword [edx + 0x24]
mov ebp, dword [edx + 0x30]
mov dword [esp + 0x8c], ebp
mov ebx, dword [esp + 0xe4]
sub ebx, ebp
add ebx, edi
mov dword [esp + 0x38], ebx
mov edi, dword [esp + 0xc]
shr edi, 0x1f
mov ebx, dword [esp + 0xc]
add edi, ebx
sar edi, 1
mov ebx, dword [esp + 0x90]
shr ebx, 0x1f
mov ebp, dword [esp + 0x90]
add ebx, ebp
sar ebx, 1
sub edi, ebx
imul edi, dword [edx + 0x28]
mov ebx, dword [esp + 0x8c]
mov ebp, ebx
shr ebx, 0x1f
add ebx, ebp
sar ebx, 1
sub edi, ebx
mov dword [esp + 0x60], edi
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0xe4]
jmp 0x4fad0b
sub edi, ecx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0xb8]
mov byte [edx + edi], cl
mov byte [edx + edi + 1], bl
xchg ebp, eax
mov byte [edx + edi + 2], al
xchg ebp, eax
mov byte [edx + edi + 3], 0xff
mov ecx, dword [esp + 0x2c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x38]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xe0]
mov edi, dword [esp + 0x60]
mov edx, ecx
mov ecx, esi
mov esi, dword [esp + 0x48]
cmp ecx, eax
je 0x4fabd4
mov dword [esp + 0x2c], ebp
shr ebp, 0x1f
mov esi, dword [esp + 0x2c]
add ebp, esi
sar ebp, 1
add ebp, edi
mov edi, dword [edx + 4]
mov esi, dword [edx]
cmp ebx, edi
jae 0x4fae22
mov dword [esp + 0x38], ebx
movzx esi, byte [esi + ebx]
mov edi, dword [edx + 0x10]
mov ebx, dword [edx + 0xc]
cmp edi, ebp
jbe 0x4fae19
movzx ebx, byte [ebx + ebp]
mov dword [esp + 0x88], ebx
mov edi, dword [edx + 0x1c]
mov ebx, dword [edx + 0x18]
cmp edi, ebp
jbe 0x4fae10
imul esi, esi, 0x10101
movzx ebx, byte [ebx + ebp]
imul ebp, ebx, 0x166e9
lea ebp, [ebp + esi - 0xb37480]
test ebp, 0xff000000
jne 0x4fad84
sar ebp, 0x10
jmp 0x4fad8d
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
mov dword [esp + 0x6c], esi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x88]
imul ebp, edi, 0x581a
sub esi, ebp
imul ebx, ebx, 0xb6d2
sub esi, ebx
lea ebx, [esi + 0x877600]
test ebx, 0xff000000
jne 0x4fadbf
sar ebx, 0x10
jmp 0x4fadc4
sar ebx, 0x1f
not ebx
imul ebp, edi, 0x1c5a2
mov esi, dword [esp + 0x6c]
lea ebp, [ebp + esi - 0xe2d100]
test ebp, 0xff000000
jne 0x4fade2
sar ebp, 0x10
jmp 0x4fadeb
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
lea esi, [ecx + 4]
mov edi, dword [esp + 0x48]
cmp edi, esi
jb 0x4fae07
cmp ecx, esi
jbe 0x4facc0
mov eax, ecx
mov ecx, esi
call fcn.00456c00
mov ecx, esi
mov edx, edi
call fcn.00456bf0
mov eax, ebp
mov ecx, edi
call fcn.00456b40
mov eax, ebp
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, esi
call fcn.00456ba0
mov ecx, dword [esp + 0x80]
lea edi, [ecx + 1]
mov ecx, dword [esp + 0x10]
inc ecx
mov ebx, dword [esp + 0xcc]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x54]
cmp edi, esi
je 0x4faa5b
mov esi, dword [ebx + 4]
mov ebp, dword [ebx]
mov dword [esp + 0xc4], ebp
mov ebp, dword [ebx + 8]
mov ebx, dword [ebx + 0xc]
imul ebx, edi
cmp esi, ebx
jb 0x4fb06a
mov dword [esp + 0x80], edi
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov edi, dword [esp + 0xc4]
add ebp, edi
mov dword [esp + 0xbc], ebp
sub esi, ebx
mov dword [esp + 0x4c], esi
mov ebx, dword [edx + 0x24]
mov edi, dword [edx + 0x34]
mov ebp, dword [esp + 0x10]
sub ebp, edi
mov dword [esp + 0x90], ebp
imul ebx, ebp
mov edi, dword [edx + 0x30]
mov ebp, dword [esp + 0xe4]
sub ebp, edi
add ebx, ebp
mov dword [esp + 0x3c], ebx
mov ebp, dword [edx + 0x28]
mov ebx, dword [esp + 0x90]
imul ebx, ebp
mov ebp, edi
shr edi, 0x1f
add ebp, edi
sar ebp, 1
sub ebx, ebp
mov dword [esp + 0x64], ebx
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0xe4]
jmp 0x4faf48
sub edi, ecx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0xbc]
mov byte [edx + edi], cl
mov byte [edx + edi + 1], bl
xchg ebp, eax
mov byte [edx + edi + 2], al
xchg ebp, eax
mov byte [edx + edi + 3], 0xff
mov ecx, dword [esp + 0x30]
lea edi, [ecx + 1]
mov ecx, dword [esp + 0x3c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0xe0]
mov ebx, dword [esp + 0x64]
mov edx, ecx
mov ecx, esi
mov esi, dword [esp + 0x4c]
cmp ecx, eax
je 0x4fae34
mov dword [esp + 0x30], edi
shr edi, 0x1f
mov esi, dword [esp + 0x30]
add edi, esi
sar edi, 1
add edi, ebx
mov ebx, dword [edx + 4]
mov esi, dword [edx]
cmp ebp, ebx
jae 0x4fb061
mov dword [esp + 0x3c], ebp
movzx ebx, byte [esi + ebp]
mov esi, dword [edx + 0x10]
mov ebp, dword [edx + 0xc]
cmp esi, edi
jbe 0x4fb058
movzx ebp, byte [ebp + edi]
mov dword [esp + 0x88], ebp
mov esi, dword [edx + 0x1c]
mov ebp, dword [edx + 0x18]
cmp esi, edi
jbe 0x4fb04f
imul ebx, ebx, 0x10101
movzx ebp, byte [ebp + edi]
imul esi, ebp, 0x166e9
lea esi, [esi + ebx - 0xb37480]
test esi, 0xff000000
jne 0x4fafc3
sar esi, 0x10
jmp 0x4fafcc
sar esi, 0x1f
xchg esi, ebx
not ebx
xchg esi, ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x24], esi
mov edi, dword [esp + 0x88]
imul esi, edi, 0x581a
sub ebx, esi
imul ebp, ebp, 0xb6d2
sub ebx, ebp
add ebx, 0x877600
test ebx, 0xff000000
jne 0x4faffe
sar ebx, 0x10
jmp 0x4fb003
sar ebx, 0x1f
not ebx
imul ebp, edi, 0x1c5a2
mov esi, dword [esp + 0x70]
lea ebp, [ebp + esi - 0xe2d100]
test ebp, 0xff000000
jne 0x4fb021
sar ebp, 0x10
jmp 0x4fb02a
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
lea esi, [ecx + 4]
mov edi, dword [esp + 0x4c]
cmp edi, esi
jb 0x4fb046
cmp ecx, esi
jbe 0x4faefd
mov eax, ecx
mov ecx, esi
call fcn.00456c00
mov ecx, esi
mov edx, edi
call fcn.00456bf0
mov eax, edi
mov ecx, esi
call fcn.00456b40
mov eax, edi
mov ecx, esi
call fcn.00456b40
mov eax, ebp
mov ecx, ebx
call fcn.00456b40
mov eax, ebx
mov ecx, esi
call fcn.00456ba0
mov ecx, dword [esp + 0x84]
inc ecx
mov ebx, dword [esp + 0x14]
inc ebx
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xe4]
mov ebp, esi
mov esi, dword [esp + 0x18]
mov edi, ecx
mov dword [esp + 0x14], ebx
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0xcc]
cmp edi, esi
je 0x4faa5b
mov esi, dword [ebx + 4]
mov ebp, dword [ebx]
mov dword [esp + 0xc4], ebp
mov ebp, dword [ebx + 8]
mov ebx, dword [ebx + 0xc]
imul ebx, edi
cmp esi, ebx
jb 0x4fb293
mov dword [esp + 0x84], edi
sub ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, ebx
mov edi, dword [esp + 0xc4]
add ebp, edi
mov dword [esp + 0xc0], ebp
sub esi, ebx
mov dword [esp + 0x50], esi
mov ebx, dword [edx + 0x24]
mov edi, dword [edx + 0x34]
mov ebp, dword [esp + 0x14]
sub ebp, edi
mov dword [esp + 0x90], ebp
imul ebx, ebp
mov edi, dword [edx + 0x30]
mov ebp, dword [esp + 0xe4]
sub ebp, edi
add ebx, ebp
mov dword [esp + 0x40], ebx
mov edi, dword [edx + 0x28]
mov ebx, dword [esp + 0x90]
imul ebx, edi
add ebx, ebp
mov ebp, dword [esp + 0x40]
mov edi, ecx
jmp 0x4fb17e
sub edi, ecx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, ecx
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc0]
mov byte [edx + edi], cl
xchg ebp, eax
mov byte [edx + edi + 1], al
xchg ebp, eax
mov byte [edx + edi + 2], bl
mov byte [edx + edi + 3], 0xff
mov ecx, dword [esp + 0x40]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x5c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0xe0]
mov edx, ecx
mov edi, dword [esp + 0x54]
mov ecx, esi
mov esi, dword [esp + 0x50]
cmp ecx, eax
je 0x4fb073
mov edi, dword [edx + 4]
mov esi, dword [edx]
cmp ebp, edi
jae 0x4fb28a
mov dword [esp + 0x40], ebp
movzx esi, byte [esi + ebp]
mov edi, dword [edx + 0x10]
mov ebp, dword [edx + 0xc]
cmp ebx, edi
jae 0x4fb281
movzx ebp, byte [ebp + ebx]
mov dword [esp + 0x88], ebp
mov edi, dword [edx + 0x1c]
mov ebp, dword [edx + 0x18]
cmp ebx, edi
jae 0x4fb278
imul esi, esi, 0x10101
movzx ebp, byte [ebp + ebx]
imul edi, ebp, 0x166e9
lea edi, [edi + esi - 0xb37480]
test edi, 0xff000000
jne 0x4fb1e8
sar edi, 0x10
jmp 0x4fb1f1
sar edi, 0x1f
xchg edi, ebx
not ebx
xchg edi, ebx
mov dword [esp + 0x74], esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x88]
imul edi, ebx, 0x581a
sub esi, edi
imul ebp, ebp, 0xb6d2
sub esi, ebp
lea ebp, [esi + 0x877600]
test ebp, 0xff000000
jne 0x4fb227
sar ebp, 0x10
jmp 0x4fb230
sar ebp, 0x1f
xchg ebp, ebx
not ebx
xchg ebp, ebx
imul ebx, ebx, 0x1c5a2
mov esi, dword [esp + 0x74]
lea ebx, [ebx + esi - 0xe2d100]
test ebx, 0xff000000
jne 0x4fb24e
sar ebx, 0x10
jmp 0x4fb253
sar ebx, 0x1f
not ebx
lea esi, [ecx + 4]
mov edi, dword [esp + 0x50]
cmp edi, esi
jb 0x4fb26f
cmp ecx, esi
jbe 0x4fb133
mov eax, ecx
mov ecx, esi
call fcn.00456c00
mov ecx, esi
mov edx, edi
call fcn.00456bf0
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, edi
call fcn.00456b40
mov eax, ebp
mov ecx, edi
call fcn.00456b40
mov eax, ebx
mov ecx, esi
call fcn.00456ba0
nop
call fcn.00455690
jmp fcn.004fa850