Function at 0x4bce40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x5b107c]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
mov ebx, ecx
cmp dword [ebx + 0x10], 0
mov eax, dword [ebx + 0x1d4]
push esi
push edi
mov dword [esp + 0x20], eax
je 0x4bd537
call fcn.004239f0
lea ecx, [ebx + 0x2a4]
call fcn.004035d0
test eax, eax
jne 0x4bcf29
mov ecx, dword [ebx + 0x1dc]
imul ecx, dword [ebx + 0x1d8]
mov eax, 0x51eb851f
mul ecx
shr edx, 5
mov edi, edx
mov edx, dword [ebx + 0x2b4]
sub edx, dword [ebx + 0x2ac]
mov eax, dword [ebx + 0x2b8]
mov dword [esp + 0xc], edx
sub eax, dword [ebx + 0x2b0]
fild dword [esp + 0xc]
shl edi, 0x18
mov dword [esp + 0xc], eax
or edi, dword [ebx + 0x1d4]
cmp dword [ebx + 0x2a8], 0
fdiv dword [ebx + 0x2bc]
fstp dword [esp + 0x10]
fild dword [esp + 0xc]
fdiv dword [ebx + 0x2c0]
fstp dword [esp + 0x14]
je 0x4bcf29
mov eax, dword [0x65fadc]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
push eax
call edx
fldz
mov edx, dword [eax]
mov edx, dword [edx + 0x3c]
push 0x1000
push 0
push edi
lea ecx, [ebx + 0x2ac]
push ecx
lea ecx, [ebx + 0x1e0]
push ecx
push ecx
fstp dword [esp]
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [ebx + 0x2a8]
push ecx
push eax
call edx
lea ecx, [ebx + 0x2c4]
call fcn.004035d0
test eax, eax
jne 0x4bcffe
mov ecx, dword [ebx + 0x1dc]
fld dword [ebx + 0x1e0]
imul ecx, dword [ebx + 0x1d8]
fadd qword [0x598d58]
fstp dword [esp + 0x10]
fld dword [ebx + 0x1e4]
fadd qword [0x5992a8]
mov eax, 0x51eb851f
fstp dword [esp + 0x14]
mul ecx
shr edx, 5
mov edi, edx
mov edx, dword [ebx + 0x2d4]
sub edx, dword [ebx + 0x2cc]
mov eax, dword [ebx + 0x2d8]
mov dword [esp + 0xc], edx
sub eax, dword [ebx + 0x2d0]
fild dword [esp + 0xc]
shl edi, 0x18
mov dword [esp + 0xc], eax
or edi, dword [ebx + 0x1d4]
cmp dword [ebx + 0x2c8], 0
fdiv dword [ebx + 0x2dc]
fstp dword [esp + 0x18]
fild dword [esp + 0xc]
fdiv dword [ebx + 0x2e0]
fstp dword [esp + 0x1c]
je 0x4bcffe
mov eax, dword [0x65fadc]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
push eax
call edx
fldz
mov edx, dword [eax]
mov edx, dword [edx + 0x3c]
push 0x1000
push 0
push edi
lea ecx, [ebx + 0x2cc]
push ecx
lea ecx, [esp + 0x20]
push ecx
push ecx
fstp dword [esp]
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [ebx + 0x2c8]
push ecx
push eax
call edx
mov ecx, dword [ebx + 0x304]
test ecx, ecx
je 0x4bd32e
mov eax, dword [ecx]
mov edx, dword [eax + 0x78]
call edx
call fcn.0052c800
mov esi, 1
cmp eax, esi
je 0x4bd0cd
mov ecx, dword [ebx + 0x304]
mov eax, dword [ecx]
mov edx, dword [eax + 0x78]
call edx
call fcn.004b0ac0
test eax, eax
je 0x4bd0cd
mov eax, dword [ebx + 0x30c]
push eax
push 0x58ce48
push 0x69dac0
call dword [sym.imp.USER32.dll_wsprintfA]
fld dword [ebx + 0x1e0]
add esp, 0xc
call fcn.00577600
fld dword [ebx + 0x1e4]
add eax, 0x15
mov dword [esp + 0x24], eax
call fcn.00577600
add eax, 0x1d
mov dword [esp + 0x28], eax
mov eax, 0x69dac0
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4bd090
sub eax, edx
mov edx, dword [ebx + 0x1dc]
imul edx, dword [ebx + 0x1d8]
mov ecx, eax
mov eax, 0x51eb851f
mul edx
shr edx, 5
shl edx, 0x18
or edx, dword [ebx + 0x1d4]
lea esi, [esp + 0x24]
push edx
push ecx
push 0x69dac0
xor eax, eax
call fcn.00422dc0
mov ecx, dword [ebx + 0x304]
mov eax, dword [ecx]
mov edx, dword [eax + 0x78]
call edx
call fcn.0052c800
cmp eax, 3
jne 0x4bd0f6
mov edi, dword [ebx + 0x304]
lea eax, [ebx + 0x1e0]
push eax
call fcn.0054ccc0
mov ecx, dword [ebx + 0x304]
mov edx, dword [ecx]
mov eax, dword [edx + 0x78]
call eax
call fcn.0052c800
cmp eax, 2
jne 0x4bd32e
mov ecx, dword [ebx + 0x304]
mov edx, dword [ecx]
mov eax, dword [edx + 0x74]
call eax
xor edx, edx
mov ecx, eax
div dword [0x67dd94]
mov eax, dword [0x67dd98]
mov edx, dword [eax + edx*4]
test edx, edx
je 0x4bd32e
cmp dword [edx], ecx
je 0x4bd148
mov edx, dword [edx + 0xc]
test edx, edx
jne 0x4bd138
jmp 0x4bd32e
mov edi, dword [edx + 4]
test edi, edi
je 0x4bd32e
test dword [edi + 0x2bc], 0x1000
je 0x4bd22c
mov ecx, ebx
call fcn.0056ba60
fld dword [ebx + 0x1e0]
call fcn.00577600
fld dword [ebx + 0x1e4]
add eax, 9
mov dword [esp + 0x24], eax
call fcn.00577600
add eax, 0xf
mov dword [esp + 0x28], eax
mov eax, 1
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov eax, dword [0x68066c]
test eax, eax
jne 0x4bd1a9
mov eax, 0x6815d0
push 0xffff0000
push 4
push eax
lea esi, [esp + 0x30]
xor eax, eax
call fcn.00422dc0
call fcn.00401050
mov edx, dword [edi]
lea ecx, [esp + 0x10]
mov esi, eax
mov eax, dword [edx + 0x78]
push ecx
mov ecx, edi
call eax
push eax
lea ecx, [esi + 0x668]
mov eax, 2
call fcn.005394a0
fstp dword [esp + 0xc]
fldz
fld dword [esp + 0xc]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x4bd32a
fld1
movzx ecx, word [ebx + 0x20a]
fstp dword [esp + 0x10]
push 0xff000000
lea edx, [esp + 0x1c]
mov dword [esp + 0x10], ecx
fst dword [esp + 0x18]
push edx
fld dword [ebx + 0x1e0]
fstp dword [esp + 0x20]
fld1
fsubrp st(1)
fild dword [esp + 0x14]
jmp 0x4bd296
mov eax, edi
call fcn.0049cb30
cmp eax, 0x22b
jne 0x4bd2b7
call fcn.00401050
lea esi, [eax + 0x668]
lea edx, [esp + 0x10]
call fcn.00539630
fstp dword [esp + 0xc]
fldz
fld dword [esp + 0xc]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x4bd32a
fld1
movzx eax, word [ebx + 0x20a]
fstp dword [esp + 0x10]
push 0xff000000
lea ecx, [esp + 0x1c]
mov dword [esp + 0x10], eax
fst dword [esp + 0x18]
push ecx
fld dword [ebx + 0x1e0]
fstp dword [esp + 0x20]
fld1
fsubrp st(1)
fild dword [esp + 0x14]
fmulp st(1)
push ecx
lea esi, [ebx + 0x2e4]
lea eax, [esp + 0x1c]
fadd dword [ebx + 0x1e4]
fstp dword [esp + 0x28]
fstp dword [esp]
call fcn.00425d60
jmp 0x4bd32e
mov eax, edi
call fcn.0049cb30
cmp eax, 0x200
jne 0x4bd32e
mov dword [esp + 0xc], 0
call fcn.00401050
lea edi, [eax + 0x668]
lea esi, [esp + 0xc]
call fcn.00539700
fstp dword [esp + 0xc]
fldz
fld dword [esp + 0xc]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x4bd32a
fld1
movzx edx, word [ebx + 0x20a]
fstp dword [esp + 0x10]
push 0xff000000
lea eax, [esp + 0x1c]
mov dword [esp + 0x10], edx
fst dword [esp + 0x18]
push eax
fld dword [ebx + 0x1e0]
fstp dword [esp + 0x20]
fld1
fsubrp st(1)
fild dword [esp + 0x14]
jmp 0x4bd296
fstp st(0)
fstp st(0)
mov ecx, dword [ebx + 0x304]
mov edx, dword [ecx]
mov eax, dword [edx + 0x78]
call eax
call fcn.0052c800
cmp eax, 1
jne 0x4bd52d
mov ecx, dword [ebx + 0x304]
mov edx, dword [ecx]
mov eax, dword [edx + 0xbc]
call eax
test ax, ax
je 0x4bd406
mov ecx, dword [ebx + 0x1dc]
imul ecx, dword [ebx + 0x1d8]
mov eax, 0x51eb851f
mul ecx
shr edx, 5
mov esi, edx
mov edx, dword [ebx + 0x328]
sub edx, dword [ebx + 0x320]
lea edi, [ebx + 0x320]
mov dword [esp + 0xc], edx
mov eax, dword [ebx + 0x32c]
fild dword [esp + 0xc]
sub eax, dword [ebx + 0x324]
shl esi, 0x18
mov dword [esp + 0xc], eax
fdiv dword [ebx + 0x330]
or esi, dword [ebx + 0x1d4]
cmp dword [ebx + 0x31c], 0
fstp dword [esp + 0x18]
fild dword [esp + 0xc]
fdiv dword [ebx + 0x334]
fstp dword [esp + 0x1c]
je 0x4bd406
mov eax, dword [0x65fadc]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
push eax
call edx
fldz
mov ecx, dword [eax]
push 0x1000
push 0
push esi
push edi
lea edx, [ebx + 0x1e0]
push edx
push ecx
fstp dword [esp]
lea edx, [esp + 0x30]
push edx
mov edx, dword [ebx + 0x31c]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov dword [esp + 0xc], 0
call fcn.00401050
mov ecx, dword [ebx + 0x304]
mov edx, dword [ecx]
cmp dword [eax + 0x404], 0
mov eax, dword [edx + 0x78]
call eax
mov esi, eax
call fcn.00401050
lea ecx, [esp + 0xc]
movzx edx, si
push ecx
lea ecx, [eax + 0x668]
push edx
mov eax, 1
call fcn.005394a0
fstp dword [esp + 0x10]
fldz
fld dword [esp + 0x10]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x4bd4ac
fld1
movzx eax, word [ebx + 0x20a]
fstp dword [esp + 0x24]
mov dword [esp + 0x10], eax
push 0xff000000
lea ecx, [esp + 0x1c]
fst dword [esp + 0x2c]
push ecx
fld dword [ebx + 0x1e0]
push ecx
fstp dword [esp + 0x24]
lea esi, [ebx + 0x2e4]
fld1
lea eax, [esp + 0x30]
fsubrp st(1)
fild dword [esp + 0x1c]
fmulp st(1)
fadd dword [ebx + 0x1e4]
fstp dword [esp + 0x28]
fstp dword [esp]
call fcn.00425d60
jmp 0x4bd4b0
fstp st(0)
fstp st(0)
xor edi, edi
cmp dword [0x67cd34], edi
je 0x4bd52d
mov edx, dword [0x6830a8]
mov eax, dword [0x6830a4]
push edx
push eax
mov ecx, ebx
call fcn.00436300
mov esi, 1
cmp eax, esi
jne 0x4bd52d
mov ecx, dword [esp + 0xc]
cmp ecx, edi
je 0x4bd50a
mov eax, 0x10624dd3
mul ecx
shr edx, 6
lea eax, [edx + 1]
cmp dword [ebx + 0x314], eax
je 0x4bd52d
push ecx
mov ecx, ebx
mov dword [ebx + 0x314], eax
call fcn.004bd550
mov dword [ebx + 0x310], esi
jmp 0x4bd52d
push edi
mov ecx, ebx
cmp dword [ebx + 0x310], esi
jne 0x4bd528
call fcn.004bd550
mov dword [ebx + 0x310], edi
mov dword [ebx + 0x314], edi
jmp 0x4bd52d
call fcn.004bd550
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x1d4], ecx
mov ecx, dword [esp + 0x34]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005762ee
mov esp, ebp
pop ebp
ret