Function at 0x4b6580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5efcb0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x38]
cmp eax, dword [ecx + 8]
jbe 0x4b6db9
sub esp, 0xb8
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
lea edi, [esp]
lea esi, [esp + 0xbc]
call fcn.00475eee
call fcn.004b79c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x24]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ebx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], ebp
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], ebx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x38], eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], edx
mov dword [esp], ecx
mov dword [esp + 4], edx
mov byte [esp + 8], 1
call fcn.004c1740
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x48], edx
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.004b1900
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
inc edx
cmp ecx, edx
jae 0x4b66fb
jmp 0x4b66fd
jmp 0x4b672d
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b672d
lea ebx, [edx + eax - 1]
mov byte [ebx], 0x2d
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0x3c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004b1900
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
inc edx
cmp ecx, edx
jae 0x4b6791
jmp 0x4b6793
jmp 0x4b67c3
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b67c3
lea ebx, [edx + eax - 1]
mov byte [ebx], 0x2d
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0x48]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004b1900
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
inc edx
cmp ecx, edx
jae 0x4b6827
jmp 0x4b6829
jmp 0x4b6859
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b6859
lea ebx, [edx + eax - 1]
mov byte [ebx], 0x54
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004c1680
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x7c], edx
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x34], edx
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004b1900
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
inc edx
cmp ecx, edx
jae 0x4b691b
jmp 0x4b691d
jmp 0x4b694d
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b694d
lea ebx, [edx + eax - 1]
mov byte [ebx], 0x3a
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0x40]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004b1900
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
inc edx
cmp ecx, edx
jae 0x4b69b1
jmp 0x4b69b3
jmp 0x4b69e3
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b69e3
lea ebx, [edx + eax - 1]
mov byte [ebx], 0x3a
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004b1900
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], edx
movzx eax, byte [esp + 0xdc]
test al, al
jne 0x4b6a51
jmp 0x4b6ae5
mov dword [esp], 0x23
mov dword [esp + 4], 9
mov dword [esp + 8], 0x2e
call fcn.004b2070
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
lea edi, [esp]
lea esi, [esp + 0xbc]
call fcn.00475eee
call fcn.004b7e00
mov eax, dword [esp + 0x14]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
mov ebp, dword [esp + 0xd8]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004b2140
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], edx
jmp 0x4b6ae7
jmp 0x4b6ae7
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x4b6af4
jmp 0x4b6b7a
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
inc edx
cmp eax, edx
jae 0x4b6b10
jmp 0x4b6b12
jmp 0x4b6b42
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
jmp 0x4b6b42
lea ebx, [edx + ecx - 1]
mov byte [ebx], 0x5a
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], eax
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], eax
add esp, 0xb8
ret
mov ecx, dword [esp + 0x38]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0x28], edx
test edx, edx
jl 0x4b6b99
jmp 0x4b6c10
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
inc ebx
cmp ecx, ebx
jae 0x4b6bb5
jmp 0x4b6bb7
jmp 0x4b6be7
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b6be7
lea ebp, [ebx + edx - 1]
mov byte [ebp], 0x2d
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ecx
mov ecx, dword [esp + 0x28]
neg ecx
mov dword [esp + 0x28], ecx
jmp 0x4b6c7d
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
inc ebx
cmp ecx, ebx
jae 0x4b6c2c
jmp 0x4b6c2e
jmp 0x4b6c5e
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4b6c5e
lea ebp, [ebx + edx - 1]
mov byte [ebp], 0x2b
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ecx
jmp 0x4b6c7d
mov ecx, dword [esp + 0x28]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0x64], edx
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
mov ebp, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004b1900
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], edx
inc ebx
cmp edx, ebx
jae 0x4b6cef
jmp 0x4b6cf1
jmp 0x4b6d21
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x511660]
mov dword [esp + 0x10], eax
call fcn.00471230
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
jmp 0x4b6d21
lea ebp, [ebx + ecx - 1]
mov byte [ebp], 0x3a
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], edx
mov ebp, dword [esp + 0x28]
mov eax, 0x88888889
mov esi, edx
imul ebp
add edx, ebp
sar edx, 5
mov edi, ebp
sar ebp, 0x1f
sub edx, ebp
imul edx, edx, 0x3c
sub edi, edx
mov dword [esp + 0x60], edi
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 2
call fcn.004b1900
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], ebx
add esp, 0xb8
ret
call fcn.004743b0
jmp fcn.004b6580