Function at 0x46fec0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xcc
push ebx
push esi
push edi
lea eax, [esp + 0x14]
mov edi, ecx
push 4
push eax
mov dword [esp + 0x78], edi
call fcn.00458f10
add esp, 8
lea ecx, [esp + 0x14]
push ecx
lea edx, [ebp + 8]
push edx
lea ecx, [edi + 0x9c]
call fcn.004679c0
test eax, eax
je 0x47034b
lea eax, [esp + 0xc]
push 4
push eax
call fcn.00458f10
mov esi, dword [esp + 0x1c]
xor ebx, ebx
add esp, 8
cmp esi, ebx
je 0x46ff21
mov ecx, dword [esi]
mov edx, dword [ecx + 4]
push esi
call edx
mov eax, dword [esi]
mov edx, dword [eax]
lea ecx, [esp + 0x10]
push ecx
push 0x100bd078
push esi
call edx
mov eax, dword [esi]
mov ecx, dword [eax + 8]
push esi
call ecx
mov ecx, dword [esp + 0x10]
cmp ecx, ebx
je 0x46ff8c
mov edx, dword [ecx]
mov edx, dword [edx + 0x44]
lea eax, [esp + 0x24]
push eax
call edx
mov esi, eax
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x46ff64
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0xc], ebx
mov ecx, dword [esi]
cmp ecx, ebx
mov dword [esp + 0xc], ecx
je 0x46ff7a
mov eax, dword [ecx]
push ecx
mov ecx, dword [eax + 4]
call ecx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x46fffb
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x46fff7
mov esi, dword [esp + 0x14]
cmp esi, ebx
je 0x46ff9c
mov ecx, dword [esi]
mov edx, dword [ecx + 4]
push esi
call edx
mov eax, dword [esi]
mov edx, dword [eax]
lea ecx, [esp + 0x30]
push ecx
push 0x100bc638
push esi
call edx
mov eax, dword [esi]
mov ecx, dword [eax + 8]
push esi
call ecx
mov ecx, dword [esp + 0x30]
cmp ecx, ebx
je 0x47030a
mov edx, dword [ecx]
mov edx, dword [edx + 0x44]
lea eax, [esp + 0x24]
push eax
call edx
push eax
lea ecx, [esp + 0x10]
call fcn.00463f90
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x46ffe7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x46fff7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 0x24]
call edx
test eax, eax
jne 0x470065
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
lea edx, [esp + 0x30]
push edx
call eax
mov esi, eax
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x47002c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0xc], ebx
mov ecx, dword [esi]
cmp ecx, ebx
mov dword [esp + 0xc], ecx
je 0x470042
mov eax, dword [ecx]
push ecx
mov ecx, dword [eax + 4]
call ecx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x47005a
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ebx
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
call eax
test eax, eax
je 0x470006
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
je 0x470147
mov eax, dword [ebp + 0x18]
sub eax, 2
je 0x4700d2
sub eax, 4
je 0x4700bc
sub eax, 2
je 0x47009a
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
mov dword [ecx], ebx
mov dword [edx], 0xc000000d
jmp 0x4700e6
cmp dword [ebp + 0x14], 0x40
jae 0x4700b0
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x20]
mov dword [eax], ebx
mov dword [ecx], 0xc0000004
jmp 0x4700e6
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x20]
mov dword [edx], ebx
mov dword [eax], ebx
jmp 0x4700e6
cmp dword [ebp + 0x14], 0x30
jae 0x47013b
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
mov dword [ecx], ebx
mov dword [edx], 0xc0000004
jmp 0x4700e6
cmp dword [ebp + 0x14], 8
jae 0x47010a
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x20]
mov dword [edx], ebx
mov dword [eax], 0xc0000004
lea ecx, [esp + 0x10]
call fcn.0048e940
lea ecx, [esp + 0xc]
call fcn.0048e940
lea ecx, [esp + 0x14]
call fcn.0048e940
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [esp + 0xc]
mov esi, dword [eax]
mov edi, eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
shr ecx, 1
push ecx
add eax, 4
push eax
lea ecx, [esp + 0x84]
add esi, 0x78
call fcn.00498140
mov ecx, eax
call fcn.004c87c0
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x20]
mov dword [eax], ebx
mov dword [ecx], ebx
jmp 0x4700e6
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x18], ebx
mov edx, dword [ecx]
mov edx, dword [edx + 0x2c]
lea eax, [esp + 0x28]
push eax
call edx
push 0x100b11d8
lea ecx, [esp + 0x2c]
call fcn.004984e0
mov esi, dword [0x100cca70]
push 0x4021
push 3
lea ecx, [esp + 0x84]
add esi, 0x15c
call fcn.004980e0
mov ecx, eax
call fcn.004c87c0
push eax
push ebx
push 0x40
lea ecx, [esp + 0x3c]
call fcn.004c87c0
push eax
push ebx
lea ecx, [esp + 0xbc]
call fcn.00498110
mov ecx, eax
call fcn.004c87c0
mov edx, dword [esi]
push eax
push 0x100002
lea eax, [esp + 0x2c]
push eax
mov eax, dword [edx + 0x24]
mov ecx, esi
call eax
call eax
test eax, eax
jne 0x4702c9
cmp dword [edi + 0x44], 1
jne 0x4702be
mov eax, dword [ebp + 0x18]
sub eax, 1
je 0x470246
sub eax, 1
je 0x4701f4
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], 1
jmp 0x4702a7
mov eax, dword [esp + 0xc]
mov esi, dword [eax]
mov edi, eax
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
shr edx, 1
push edx
add eax, 4
push eax
lea ecx, [esp + 0x84]
add esi, 0x78
call fcn.00498140
mov ecx, eax
call fcn.004c87c0
push eax
mov eax, dword [esi]
mov ecx, edi
call eax
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
mov dword [ecx], ebx
lea ecx, [esp + 0x28]
mov dword [edx], ebx
call fcn.00498440
lea ecx, [esp + 0x18]
call fcn.00460970
jmp 0x4700e6
mov eax, dword [esp + 0xc]
mov esi, dword [eax]
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0xc]
shr eax, 1
push eax
lea ecx, [edi + 0x12]
push ecx
lea ecx, [esp + 0x90]
add esi, 0x78
call fcn.00498140
mov ecx, eax
call fcn.004c87c0
mov ecx, dword [esp + 0x24]
mov edx, dword [esi]
push eax
call edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov edx, dword [edi + 8]
mov eax, dword [eax + 0x88]
push edx
call eax
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x94]
push edi
call eax
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
mov dword [ecx], ebx
mov dword [edx], ebx
lea ecx, [esp + 0x28]
call fcn.00498440
lea ecx, [esp + 0x18]
call fcn.00460970
jmp 0x4700e6
mov eax, dword [ebp + 0x1c]
mov dword [eax], 1
jmp 0x4702a7
lea ecx, [esp + 0x28]
call fcn.00498440
lea ecx, [esp + 0x18]
call fcn.00460970
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x4702ef
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x4702ff
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
cmp eax, ebx
jmp 0x470a1b
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x20]
mov dword [eax], ebx
mov eax, dword [esp + 0x10]
cmp eax, ebx
mov dword [ecx], 0xc0000229
je 0x47032c
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x470340
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x14]
cmp eax, ebx
jmp 0x470a1b
cmp dword [edi + 0x44], 1
jne 0x470a0c
mov eax, dword [ebp + 0x18]
cmp eax, 1
je 0x470366
cmp eax, 2
jne 0x470a0c
lea eax, [esp + 0x18]
push 4
push eax
call fcn.00458f10
add esp, 8
lea ecx, [esp + 0x28]
call fcn.00498320
mov edx, dword [ebp + 8]
lea ecx, [esp + 0x28]
push ecx
push edx
mov ecx, edi
call fcn.0046b360
test eax, eax
je 0x4703c5
mov eax, dword [ebp + 0x1c]
lea ecx, [esp + 0x28]
mov dword [eax], 1
call fcn.00498440
xor ebx, ebx
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x4703ba
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x14]
cmp eax, ebx
jmp 0x470a1b
lea eax, [esp + 0x1c]
push 4
push eax
call fcn.00458f10
lea ecx, [esp + 0x28]
push 4
push ecx
call fcn.00458f10
lea edx, [esp + 0x20]
push 4
push edx
call fcn.00458f10
add esp, 0x18
lea ecx, [esp + 0x3c]
call fcn.004947b0
mov eax, dword [edi + 0x48]
push eax
lea ecx, [esp + 0x3c]
call fcn.00498080
mov esi, dword [edi + 0x48]
lea ecx, [esp + 0x88]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00498450
mov ecx, dword [eax + 4]
lea edx, [esp + 0x3c]
push edx
mov edx, dword [eax]
xor ebx, ebx
push ebx
push 0x40
push ecx
push edx
lea ecx, [esp + 0x90]
call fcn.00498180
mov ecx, eax
call fcn.004c87c0
push eax
push ebx
lea ecx, [esp + 0xb4]
call fcn.00498110
mov ecx, eax
call fcn.004c87c0
push eax
push esi
mov ecx, edi
call fcn.0046e9b0
test eax, eax
je 0x4708ae
lea eax, [esp + 0x78]
push eax
lea ecx, [esp + 0x40]
call fcn.00498020
mov esi, eax
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x470484
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x10], ebx
mov eax, dword [esi]
cmp eax, ebx
mov dword [esp + 0x10], eax
je 0x470496
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [esp + 0x78]
cmp eax, ebx
je 0x4704aa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x78], ebx
lea ecx, [esp + 0x38]
call fcn.004980b0
lea eax, [esp + 0xc]
push 4
push eax
call fcn.00458f10
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
add esp, 8
lea eax, [esp + 0x74]
push eax
mov dword [esp + 0x28], ebx
call edx
xor ecx, ecx
cmp dword [eax], ebx
mov eax, dword [esp + 0x74]
sete cl
cmp eax, ebx
mov esi, ecx
je 0x4704f3
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov dword [esp + 0x74], ebx
cmp esi, ebx
je 0x4705b9
lea ecx, [esp + 0x90]
call fcn.00485880
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x40]
call fcn.004c66e0
mov ecx, eax
call fcn.00485770
test eax, eax
je 0x47093b
lea edx, [esp + 0x94]
push edx
call fcn.00485f90
add esp, 4
test eax, eax
je 0x47093b
mov ecx, dword [edi + 0x48]
mov eax, dword [ecx]
mov eax, dword [eax + 0xac]
push 2
lea edx, [esp + 0x98]
push edx
push edx
lea edx, [esp + 0x78]
push edx
call eax
mov esi, eax
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x470572
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0xc], ebx
mov eax, dword [esi]
cmp eax, ebx
mov dword [esp + 0xc], eax
je 0x470588
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x6c]
cmp ecx, ebx
je 0x4705a0
mov eax, dword [ecx]
push ecx
mov ecx, dword [eax + 8]
call ecx
mov eax, dword [esp + 0xc]
mov dword [esp + 0x6c], ebx
mov edx, dword [esp + 0x10]
push eax
push edx
lea ecx, [esp + 0x24]
call fcn.00463ef0
mov dword [esp + 0x24], 1
jmp 0x470630
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x4705c9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x10]
cmp eax, ebx
mov ecx, eax
mov dword [esp + 0xc], ecx
je 0x4705e3
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 0x24]
call edx
test eax, eax
jne 0x470630
mov edi, edi
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
lea edx, [esp + 0x84]
push edx
call eax
push eax
lea ecx, [esp + 0x10]
call fcn.00463f90
lea ecx, [esp + 0x84]
call fcn.0048e940
mov ecx, dword [esp + 0xc]
cmp ecx, ebx
je 0x470961
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
call eax
test eax, eax
je 0x4705f0
mov eax, dword [ebp + 0x18]
sub eax, 1
je 0x470674
sub eax, 1
jne 0x4706ce
mov eax, dword [esp + 0xc]
mov esi, dword [eax]
mov edi, eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
shr ecx, 1
push ecx
add eax, 4
push eax
lea ecx, [esp + 0xd8]
add esi, 0x78
call fcn.00498140
mov ecx, eax
call fcn.004c87c0
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
jmp 0x4706ca
mov eax, dword [esp + 0xc]
mov esi, dword [eax]
mov edi, eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0xc]
shr ecx, 1
push ecx
add eax, 0x12
push eax
lea ecx, [esp + 0xc8]
add esi, 0x78
call fcn.00498140
mov ecx, eax
call fcn.004c87c0
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
mov ecx, dword [esp + 0xc]
mov esi, dword [ebp + 0x10]
mov eax, dword [ecx]
mov edx, dword [esi + 8]
mov eax, dword [eax + 0x88]
push edx
call eax
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x94]
push esi
call eax
mov edi, dword [esp + 0x70]
cmp dword [esp + 0x24], ebx
je 0x470a00
mov ecx, dword [edi + 0x48]
push ecx
lea ecx, [esp + 0x34]
call fcn.00498080
mov esi, dword [edi + 0x48]
lea edx, [esp + 0xc8]
push edx
lea ecx, [esp + 0x2c]
call fcn.00498450
mov edx, dword [eax + 4]
mov eax, dword [eax]
lea ecx, [esp + 0x3c]
push ecx
push ebx
push 0x40
push edx
push eax
lea ecx, [esp + 0xcc]
call fcn.00498180
mov ecx, eax
call fcn.004c87c0
push eax
push ebx
lea ecx, [esp + 0xb4]
call fcn.00498110
mov ecx, eax
call fcn.004c87c0
push eax
push esi
mov ecx, edi
call fcn.0046e9b0
test eax, eax
je 0x4709a0
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x40]
call fcn.00498020
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
mov esi, dword [esp + 0x10]
call eax
mov edx, dword [esi]
mov edx, dword [edx + 0xc]
mov ecx, esi
mov dword [esp + 0x24], eax
call edx
mov ecx, dword [esp + 0x24]
cmp ecx, eax
je 0x4709cf
mov eax, dword [esp + 0x34]
cmp eax, ebx
je 0x47078b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x34], ebx
lea ecx, [esp + 0x30]
call fcn.004980b0
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x4707a8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x64]
cmp eax, ebx
je 0x4707bc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x64], ebx
mov eax, dword [esp + 0x44]
cmp eax, ebx
je 0x4707d0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x44], ebx
lea ecx, [esp + 0x3c]
call fcn.00498440
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x4707ed
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x470801
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x470815
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x1c], ebx
lea eax, [esp + 0x1c]
push 4
push eax
call fcn.00458f10
lea ecx, [esp + 0x28]
push 4
push ecx
call fcn.00458f10
lea edx, [esp + 0x20]
push 4
push edx
call fcn.00458f10
add esp, 0x18
lea ecx, [esp + 0x3c]
call fcn.004947b0
mov eax, dword [edi + 0x48]
push eax
lea ecx, [esp + 0x3c]
call fcn.00498080
mov esi, dword [edi + 0x48]
lea ecx, [esp + 0x88]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00498450
mov ecx, dword [eax + 4]
lea edx, [esp + 0x3c]
push edx
mov edx, dword [eax]
push ebx
push 0x40
push ecx
push edx
lea ecx, [esp + 0x90]
call fcn.00498180
mov ecx, eax
call fcn.004c87c0
push eax
push ebx
lea ecx, [esp + 0xb4]
call fcn.00498110
mov ecx, eax
call fcn.004c87c0
push eax
push esi
mov ecx, edi
call fcn.0046e9b0
test eax, eax
jne 0x470460
mov eax, dword [ebp + 0x1c]
lea ecx, [esp + 0x38]
mov dword [eax], 1
call fcn.004980b0
mov eax, dword [esp + 0x64]
cmp eax, ebx
je 0x4708d4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x64], ebx
mov eax, dword [esp + 0x44]
cmp eax, ebx
je 0x4708e8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x44], ebx
lea ecx, [esp + 0x3c]
call fcn.00498440
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x470905
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x470919
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x47092d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x1c], ebx
lea ecx, [esp + 0x28]
call fcn.00498440
jmp 0x4703a6
mov eax, dword [ebp + 0x1c]
mov dword [eax], 1
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x4708c0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0xc], ebx
jmp 0x4708c0
mov eax, dword [ebp + 0x1c]
lea ecx, [esp + 0xc]
mov dword [eax], 1
call fcn.0048e940
lea ecx, [esp + 0x3c]
call fcn.00464b40
lea ecx, [esp + 0x10]
call fcn.0048e940
lea ecx, [esp + 0x1c]
call fcn.004995c0
lea ecx, [esp + 0x28]
call fcn.00498440
lea ecx, [esp + 0x18]
jmp 0x4700f3
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], 1
lea ecx, [esp + 0x30]
call fcn.004980b0
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x4708c0
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov dword [esp + 0xc], ebx
jmp 0x4708c0
mov ecx, dword [esp + 0x1c]
cmp ecx, ebx
je 0x4709e3
mov eax, dword [ecx]
mov edx, dword [esp + 0x20]
mov eax, dword [eax + 0x48]
push edx
call eax
mov eax, dword [esp + 0x34]
cmp eax, ebx
je 0x4709f7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x34], ebx
lea ecx, [esp + 0x30]
call fcn.004980b0
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x20]
mov dword [eax], ebx
mov dword [ecx], ebx
jmp 0x4709b2
mov eax, dword [ebp + 0x1c]
mov dword [eax], 1
mov eax, dword [esp + 0x14]
test eax, eax
je 0x470a25
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c