Function at 0x4bf9a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6c4e70]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4bfe6a
sub esp, 0x58
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
je 0x4bf9c7
xor edx, edx
jmp 0x4bf9ee
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00403360
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x68]
mov edx, eax
mov eax, dword [esp + 0x70]
test dl, dl
jne 0x4bf9fa
mov edx, dword [esp + 0x74]
test edx, edx
jne 0x4bfa0e
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x7c], eax
add esp, 0x58
ret
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov edx, dword [esp + 0x60]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004bdc90
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4bfaa5
mov ecx, dword [esp + 0x74]
test ecx, ecx
jl 0x4bfa44
cmp ecx, eax
jg 0x4bfa44
mov eax, ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
lea ecx, [esp + 0x48]
mov dword [esp], ecx
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x68]
sub ecx, edx
imul ecx, eax
mov ebp, dword [esp + 0x60]
add ecx, ebp
mov dword [esp + 4], ecx
call fcn.004bb980
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x5c]
xor esi, esi
xor edi, edi
jmp 0x4bfb1b
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x7c], eax
add esp, 0x58
ret
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x44], ebp
add ecx, ebp
mov dword [esp], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004617e0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x2c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x68]
lea edi, [ecx + eax]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x5c]
mov eax, ecx
mov ecx, dword [esp + 0x60]
cmp esi, ebx
jge 0x4bfd18
mov dword [esp + 0x2c], esi
mov dword [esp + 0x20], edi
test eax, eax
jne 0x4bfb7d
test esi, esi
jle 0x4bfbc9
cmp ecx, edi
jb 0x4bfe62
sub ecx, edi
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, edi
add ecx, ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00469ab0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
lea edi, [eax + ecx]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x2c]
jmp 0x4bfbc9
cmp ecx, edi
jb 0x4bfe5b
sub ecx, edi
mov esi, ecx
neg ecx
sar ecx, 0x1f
and ecx, edi
add ecx, ebp
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.004c00d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
lea edi, [eax + ecx]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x2c]
cmp ecx, edi
jb 0x4bfe52
mov edx, dword [esp + 0x20]
cmp edx, edi
ja 0x4bfe49
mov dword [esp + 0x28], edi
sub edi, edx
mov dword [esp + 0x24], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
mov edi, dword [esp + 0x48]
add edx, ebp
nop
test edi, edi
je 0x4bfc0f
lea ebp, [esp + 0x48]
cmp edi, ebp
jne 0x4bfe31
mov ebp, dword [esp + 0x5c]
jmp 0x4bfc17
lea edi, [esp + 0x48]
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov ecx, dword [esp + 0x24]
lea ebx, [ebp + ecx]
mov eax, dword [esp + 0x4c]
cmp edi, ebx
jae 0x4bfc6d
mov dword [esp + 0x40], edx
mov dword [esp + 0x34], ebp
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
lea eax, [0x560b60]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x44], eax
add ebp, eax
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004617e0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x48]
nop
nop
test eax, eax
je 0x4bfcba
lea ecx, [esp + 0x48]
cmp eax, ecx
je 0x4bfcc2
jmp 0x4bfe19
lea eax, [esp + 0x48]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x70]
lea ebx, [edx + ecx]
mov ebp, dword [esp + 0x4c]
cmp eax, ebx
jae 0x4bfab9
mov dword [esp + 0x34], ecx
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
lea eax, [0x560b60]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x70]
jmp 0x4bfab9
cmp ecx, edi
jb 0x4bfe12
sub ecx, edi
mov eax, ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
mov ecx, dword [esp + 0x48]
lea edx, [ebp + edi]
nop
test ecx, ecx
je 0x4bfd45
lea ebx, [esp + 0x48]
cmp ecx, ebx
je 0x4bfd4d
jmp 0x4bfdfa
lea ecx, [esp + 0x48]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x50]
lea ebp, [ebx + eax]
mov esi, dword [esp + 0x4c]
cmp ecx, ebp
jae 0x4bfda2
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], eax
mov dword [esp + 0x3c], edx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
lea ecx, [0x560b60]
mov dword [esp + 0x10], ecx
call fcn.004495c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], ebp
mov dword [esp + 0x44], esi
add ebx, esi
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004617e0
mov eax, dword [esp + 0x34]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x4c], ecx
mov edx, ecx
neg ecx
cmp eax, ecx
ja 0x4bfdec
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
add esp, 0x58
ret
test edx, edx
je 0x4bfdf5
call fcn.0045a5c0
call fcn.0045a600
lea eax, [0x560820]
mov dword [esp], eax
lea eax, [0x5c0238]
mov dword [esp + 4], eax
call fcn.00435490
mov eax, edi
call fcn.00460fc0
lea eax, [0x560820]
mov dword [esp], eax
lea eax, [0x5c0238]
mov dword [esp + 4], eax
call fcn.00435490
lea eax, [0x560820]
mov dword [esp], eax
lea eax, [0x5c0238]
mov dword [esp + 4], eax
call fcn.00435490
mov eax, edx
mov ecx, edi
call fcn.00460fc0
mov edx, ecx
mov ecx, edi
call fcn.00460f80
mov eax, edi
call fcn.00460fc0
mov eax, edi
call fcn.00460fc0
nop
call fcn.0045faf0
jmp fcn.004bf9a0