Function at 0x4b6f40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x4c]
cmp eax, dword [ecx + 8]
jbe 0x4b7a1f
sub esp, 0xcc
nop
mov ebx, dword [esp + 0xdc]
mov ebp, ebx
and ebx, 0x1f
cmp ebx, 0xa
jbe 0x4b7671
cmp ebx, 0xf
jbe 0x4b736b
cmp ebx, 0x11
ja 0x4b7140
cmp ebx, 0x10
je 0x4b7025
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004a4910
mov eax, dword [esp + 0xc]
mov dword [esp + 0x44], eax
xor ecx, ecx
jmp 0x4b701a
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a45d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004b6f40
mov eax, dword [esp + 0x50]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x44]
cmp eax, ecx
jg 0x4b6fbb
add esp, 0xcc
ret
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp ecx, edx
ja 0x4b79be
cmp eax, ecx
ja 0x4b79b9
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], ecx
movsd xmm0, qword [esp + 0x74]
mov eax, dword [edx + 0x10]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 8]
cmp eax, ebp
jb 0x4b79b0
cmp ebx, ebp
ja 0x4b79a7
movsd qword [esp + 0x6c], xmm0
mov ebp, dword [edx]
mov esi, dword [edx + 4]
mov ebp, dword [ebp + 0x28]
mov dword [esp], esi
sub eax, ebx
mov esi, eax
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [ecx + ebx]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], esi
call ebp
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], ecx
movsd xmm0, qword [esp + 0x7c]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x6c]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.004a5610
jmp 0x4b701e
cmp ebx, 0x17
je 0x4b72d9
cmp ebx, 0x19
jne 0x4b701e
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004a5db0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xdc]
mov dword [esp + 8], ebp
call fcn.004a4f70
mov eax, dword [esp + 0xc]
mov dword [esp + 0x48], eax
xor ecx, ecx
jmp 0x4b71bf
mov edx, dword [esp + 0x54]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x48]
cmp eax, ecx
jle 0x4b701e
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a44d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, eax
and eax, 0x160
cmp eax, 0x100
jne 0x4b722b
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.004b6f40
jmp 0x4b71b4
mov dword [esp + 0x64], ebx
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], ecx
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
call ecx
lea edi, [esp + 0x98]
lea esi, [esp + 8]
call fcn.0045ad7e
mov eax, dword [esp + 0x98]
cmp dword [esp + 0x9c], 1
je 0x4b72d1
mov eax, 1
test al, al
je 0x4b7299
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x64]
jmp 0x4b720e
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
call fcn.004b69f0
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax + 0x14]
add ecx, dword [esp + 0xc]
mov dword [eax + 0x14], ecx
jmp 0x4b71b4
cmp byte [eax], 0x5f
setne al
jmp 0x4b727e
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004a4910
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
xor ecx, ecx
jmp 0x4b7362
mov dword [esp + 0x4c], ecx
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a45d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004b6f40
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x40]
cmp eax, ecx
jg 0x4b7303
jmp 0x4b701e
cmp ebx, 0xd
ja 0x4b74b2
cmp ebx, 0xb
jne 0x4b740f
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4b79f6
cmp eax, ecx
ja 0x4b79f1
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 8], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.004a5890
jmp 0x4b701e
cmp ebx, 0xd
jne 0x4b701e
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4b79ec
cmp eax, ecx
ja 0x4b79e7
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov dword [esp + 0x58], eax
movss xmm0, dword [esp + 0x58]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
cvtss2sd xmm0, xmm0
movsd qword [esp + 0xc], xmm0
call fcn.004a56e0
jmp 0x4b701e
cmp ebx, 0xe
jne 0x4b7562
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4b79e2
cmp eax, ecx
ja 0x4b79dd
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], ecx
movsd xmm0, qword [esp + 0x84]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004a56e0
jmp 0x4b701e
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4b79d8
cmp eax, ecx
ja 0x4b79d3
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov dword [esp + 0x60], eax
movss xmm0, dword [esp + 0x60]
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 8]
mov ebx, dword [ecx + 0x14]
lea ebp, [ebx + 4]
cmp edx, ebp
jb 0x4b79cc
cmp ebx, ebp
ja 0x4b79c3
movss dword [esp + 0x3c], xmm0
mov ebp, dword [ecx]
mov esi, dword [ecx + 4]
mov ebp, dword [ebp + 0x24]
mov dword [esp], esi
sub edx, ebx
mov esi, edx
neg edx
sar edx, 0x1f
and ebx, edx
add eax, ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], esi
call ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov dword [esp + 0x5c], eax
movss xmm0, dword [esp + 0x5c]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movss xmm1, dword [esp + 0x3c]
cvtss2sd xmm1, xmm1
movsd qword [esp + 0xc], xmm1
cvtss2sd xmm0, xmm0
movsd qword [esp + 0x14], xmm0
call fcn.004a5610
jmp 0x4b701e
cmp ebx, 5
ja 0x4b77ca
cmp ebx, 3
ja 0x4b7730
cmp ebx, 1
jne 0x4b76d4
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp eax, ecx
jae 0x4b7a19
movzx ecx, byte [ebx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
test cl, cl
setne al
mov byte [esp + 0xc], al
call fcn.004a52e0
jmp 0x4b701e
cmp ebx, 3
jne 0x4b701e
nop
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp eax, ecx
jae 0x4b7a14
lea ecx, [ebx + eax]
movsx ecx, byte [ecx]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov eax, ecx
sar ecx, 0x1f
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.004a57a0
jmp 0x4b701e
cmp ebx, 4
jne 0x4b7780
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004b6db0
movsx eax, word [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004a57a0
jmp 0x4b701e
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004b6e30
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004a57a0
jmp 0x4b701e
cmp ebx, 8
ja 0x4b7879
cmp ebx, 6
je 0x4b7830
cmp ebx, 8
jne 0x4b701e
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp eax, ecx
jae 0x4b7a0f
movzx ecx, byte [ebx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
call fcn.004a5890
jmp 0x4b701e
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004b6eb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 8], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.004a57a0
jmp 0x4b701e
cmp ebx, 9
jne 0x4b7915
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 2]
cmp ecx, edx
ja 0x4b7a0a
cmp eax, ecx
ja 0x4b7a05
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x20]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 2
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004a5890
jmp 0x4b701e
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp ecx, edx
ja 0x4b7a00
cmp eax, ecx
ja 0x4b79fb
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004a5890
jmp 0x4b701e
mov eax, ebx
mov ecx, ebp
call fcn.0045a760
mov ecx, ebp
mov edx, eax
call fcn.0045a740
call fcn.0045a760
call fcn.0045a740
mov eax, ebx
mov ecx, ebp
call fcn.0045a760
mov ecx, ebp
call fcn.0045a740
call fcn.0045a760
call fcn.0045a740
call fcn.0045a760
call fcn.0045a740
call fcn.0045a760
call fcn.0045a740
call fcn.0045a760
call fcn.0045a740
call fcn.0045a760
call fcn.0045a740
call fcn.0045a760
call fcn.0045a740
call fcn.0045a700
call fcn.0045a700
call fcn.0045a700
nop
call fcn.00459120
jmp fcn.004b6f40