Function at 0x4bdfb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc0]
cmp eax, dword [ecx + 8]
jbe 0x4befe5
sub esp, 0x140
mov eax, dword [esp + 0x158]
test eax, eax
je 0x4bdfe9
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x4bef9a
mov ecx, dword [esp + 0x150]
test ecx, ecx
je 0x4bef7d
mov edx, dword [esp + 0x154]
test edx, edx
je 0x4be012
mov ebx, dword [edx + 0x1c]
test ebx, 0x80
jne 0x4bef1f
mov ebx, dword [esp + 0x14c]
mov ebp, dword [esp + 0x148]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], ebp
mov esi, ecx
and ecx, 0x1f
mov dword [esp + 0x60], ecx
cmp ecx, 0x14
jne 0x4be0a8
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.0048e730
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4be08b
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call fcn.0048dd70
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
mov eax, dword [esp + 0x158]
mov edx, dword [esp + 0x154]
jmp 0x4be020
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
add esp, 0x140
ret
cmp ecx, 0x16
jne 0x4be0af
jmp 0x4be03a
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00490190
mov eax, dword [esp + 0xc]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x34]
mov dword [esp + 8], ebp
call fcn.0048e480
movzx eax, byte [esp + 0xc]
lea ecx, [esp + 0x10]
mov dword [esp + 0xb0], ecx
lea edx, [esp + 0xc]
mov dword [esp + 0xac], edx
test al, al
jne 0x4bedfd
mov eax, dword [esp + 0x34]
test eax, 0x100
jne 0x4bec3c
mov ebx, dword [esp + 0x68]
mov dword [esp], ebx
mov ebp, dword [esp + 0x6c]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0048e480
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4beb1f
mov eax, dword [esp + 0x34]
test eax, 0x100
jne 0x4be96c
mov ecx, dword [esp + 0x60]
cmp ecx, 0x17
jne 0x4be95e
mov edx, dword [esp + 0x74]
mov ebx, dword [edx + 0x2c]
mov ebp, dword [esp + 0x78]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x54]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
cmp eax, 8
jne 0x4be882
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
call fcn.004c7ce0
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x90], edx
test edx, edx
jne 0x4be86d
lea edi, [esp + 0xb4]
mov ebx, eax
xor eax, eax
call fcn.0044a379
mov ecx, dword [esp + 0x158]
test ecx, ecx
jne 0x4be73a
mov eax, dword [ebx]
test eax, eax
je 0x4be21a
mov ecx, dword [eax + 0xc]
mov ebp, dword [eax + 0x10]
test ebp, ebp
je 0x4be699
mov esi, dword [eax + 0x18]
mov eax, dword [eax + 0x14]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], esi
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], ebp
mov eax, dword [esp + 0xc0]
test eax, eax
jne 0x4be258
mov eax, dword [esp + 0x154]
test eax, eax
je 0x4be258
mov ecx, dword [eax + 0x18]
mov ebp, dword [eax + 0x14]
mov esi, dword [eax + 0x10]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], esi
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x4be5f8
mov eax, dword [ebx + 8]
mov dword [esp + 0x5c], eax
xor ecx, ecx
mov dword [esp + 0x48], ecx
cmp ecx, eax
jge 0x4be2bb
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 4]
mov dword [esp + 0xa8], esi
cmp ecx, ebp
jae 0x4be5f1
mov ebp, ecx
imul ecx, ecx, 0x2c
mov dword [esp + 0x58], ecx
lea edi, [esi + ecx]
mov edx, dword [esi + ecx + 0x1c]
test edx, 2
jne 0x4be495
lea ecx, [ebp + 1]
mov edx, dword [esp + 0x90]
mov dword [esp + 0x48], ecx
cmp ecx, eax
jl 0x4be278
mov eax, dword [esp + 0x144]
mov dword [esp], eax
lea ecx, [esp + 0xb4]
mov dword [esp + 4], ecx
call fcn.004c0520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test ecx, ecx
jne 0x4be480
mov eax, dword [esp + 0x60]
cmp eax, 0x19
jne 0x4be3ce
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x10], ecx
call fcn.004c14b0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x4be3b9
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004c09f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4be38d
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
add esp, 0x140
ret
mov eax, dword [esp + 0x144]
mov dword [esp], eax
call fcn.004c2630
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
add esp, 0x140
ret
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
add esp, 0x140
ret
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x14], ecx
call fcn.004c0e70
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
test ebp, ebp
je 0x4be42e
mov ecx, ebp
mov eax, ebx
jmp 0x4be329
test eax, eax
je 0x4be467
lea ecx, [0x847d00]
mov dword [esp], ecx
mov ecx, dword [esp + 0x144]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
call fcn.004d0310
mov ebx, dword [esp + 0x94]
mov ebp, dword [esp + 0x90]
jmp 0x4be425
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004d0720
jmp 0x4be457
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
add esp, 0x140
ret
mov dword [esp], edi
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
mov edi, dword [esp + 0x6c]
mov dword [esp + 8], edi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
call fcn.004ca210
mov eax, dword [esp + 0x18]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xa8]
mov esi, dword [ebp + ebx + 0x1c]
test esi, 0x80
jne 0x4be5ab
mov esi, eax
and eax, 0x1f
cmp eax, 0x14
jne 0x4be51c
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.0048e730
movzx eax, byte [esp + 0xc]
test al, al
je 0x4be51c
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x48]
jmp 0x4be2a9
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + eax + 0x10]
mov ebx, dword [ecx + eax + 0xc]
mov ebp, dword [ecx + eax + 0x18]
mov eax, dword [ecx + eax + 0x14]
mov ecx, dword [esp + 0x144]
mov dword [esp], ecx
lea esi, [esp + 0xb4]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], eax
call fcn.004beff0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
test ecx, ecx
jne 0x4be596
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x48]
jmp 0x4be2a9
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
add esp, 0x140
ret
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c2b50
movzx eax, byte [esp + 0xc]
test al, al
je 0x4be5d5
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x48]
jmp 0x4be2a9
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xa8]
jmp 0x4be4e8
call fcn.00424680
ud2
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x64]
mov ebp, dword [esp + 0x78]
mov dword [esp], ebp
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test eax, eax
je 0x4be632
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x7c]
jmp 0x4be267
lea eax, [0x6c14e0]
mov dword [esp], eax
call fcn.0040cd70
mov eax, dword [esp + 4]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0x74]
mov dword [eax], ecx
mov ecx, dword [0x884700]
lea edx, [eax + 4]
test ecx, ecx
jne 0x4be680
mov ecx, dword [esp + 0x78]
mov dword [eax + 4], ecx
lea ecx, [0x847ce0]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
add esp, 0x140
ret
mov dword [esp], edx
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
call fcn.0040d5a0
mov eax, dword [esp + 0xa4]
jmp 0x4be665
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 8], ecx
mov ebp, dword [esp + 0x34]
mov dword [esp + 0xc], ebp
call fcn.004ca210
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048e520
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea edx, [0x6c82e0]
cmp edx, ecx
jne 0x4be724
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov eax, dword [eax + 4]
jne 0x4be714
test ecx, ecx
je 0x4be714
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], ecx
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x7c]
jmp 0x4be21a
mov edx, 0
mov ecx, 0
mov ebx, 0
mov eax, 0
jmp 0x4be6f2
mov eax, dword [ecx + 8]
mov ebp, dword [ecx + 0xc]
mov esi, dword [ecx]
mov edi, dword [ecx + 4]
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], edi
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ebp
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x5c], eax
mov ebp, dword [esp + 0xc8]
mov dword [esp + 0x58], ebp
lea esi, [eax + ebp]
mov dword [esp + 0x54], esi
mov edi, dword [esp + 0xc4]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x50], edx
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0xa0], ecx
mov ebx, dword [esp + 0xcc]
cmp esi, ebx
ja 0x4be82b
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x9c], edi
cmp esi, ebx
ja 0x4be824
cmp ebp, esi
ja 0x4be824
sub ebx, ebp
lea ebp, [ebp + ebp*2]
shl ebp, 3
lea esi, [ebx - 1]
sar esi, 0x1f
xor esi, 0xffffffff
and ebp, esi
add ebp, edi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
lea ebx, [0x6c8280]
mov dword [esp], ebx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
call fcn.0040d910
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xcc], eax
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x7c]
jmp 0x4be21a
call fcn.004246e0
ud2
lea edx, [0x6c8280]
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00437660
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x54]
jmp 0x4be7a1
mov dword [esp + 0x15c], edx
mov dword [esp + 0x160], ecx
add esp, 0x140
ret
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 8], edx
call fcn.0048e870
mov eax, dword [esp + 0xc]
mov dword [esp + 0x44], eax
xor ecx, ecx
mov dword [esp + 0x4c], ecx
cmp ecx, eax
jge 0x4be92c
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x34]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
call fcn.0048e140
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x144]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x158]
mov dword [esp + 0x14], ecx
call fcn.004bdfb0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4be949
mov edx, dword [esp + 0x4c]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x4c], ecx
cmp ecx, eax
jl 0x4be8b0
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
add esp, 0x140
ret
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
add esp, 0x140
ret
cmp ecx, 0x11
jne 0x4be18b
jmp 0x4be15e
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048d2c0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x80], edx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048e480
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4be9c4
mov eax, dword [esp + 0x34]
jmp 0x4be151
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 8], edx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x44]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x8727f8]
mov ebx, dword [0x8727fc]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bea15
jmp 0x4be9bb
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 8], edx
call fcn.0048e520
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea edx, [0x6be360]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0040ac30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x80]
mov dword [esp], edx
mov edx, dword [esp + 0x88]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 8], edx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x154]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0xc], eax
call fcn.004bff80
lea edi, [esp + 0xd0]
mov esi, dword [esp + 0xb0]
call fcn.0044a84a
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
mov edi, dword [esp + 0xac]
lea esi, [esp + 0xd0]
call fcn.0044a84a
call fcn.004c0430
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x160], eax
add esp, 0x140
ret
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x44]
mov edx, dword [0x8727fc]
mov ebx, dword [0x8727f8]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call ecx
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4beb5a
mov eax, dword [esp + 0x34]
test eax, 0x100
jmp 0x4be14b
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call fcn.0048e520
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea edx, [0x6be360]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0040ac30
mov eax, dword [esp + 0x10]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x154]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x158]
mov dword [esp + 0xc], edx
call fcn.004bff80
lea edi, [esp + 0xec]
mov esi, dword [esp + 0xb0]
call fcn.0044a84a
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
mov edi, dword [esp + 0xac]
lea esi, [esp + 0xec]
call fcn.0044a84a
call fcn.004c0430
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
add esp, 0x140
ret
mov ebx, dword [esp + 0x68]
mov dword [esp], ebx
mov ebp, dword [esp + 0x6c]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.0048d2c0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x84], edx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048e480
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4beca2
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xac]
jmp 0x4be11d
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x44]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x8727e8]
mov ebx, dword [0x8727ec]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4becf3
jmp 0x4bec8b
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
call fcn.0048e520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea edx, [0x6be4e0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0040ac30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x84]
mov dword [esp], edx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x154]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0xc], eax
call fcn.004bff80
lea edi, [esp + 0x108]
mov esi, dword [esp + 0xb0]
call fcn.0044a84a
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
mov edi, dword [esp + 0xac]
lea esi, [esp + 0x108]
call fcn.0044a84a
call fcn.004c0170
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
add esp, 0x140
ret
mov eax, dword [esp + 0x74]
mov ebx, dword [eax + 0x44]
mov ebp, dword [0x8727e8]
mov esi, dword [0x8727ec]
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov ebp, dword [esp + 0x78]
mov dword [esp], ebp
call ebx
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bee3d
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xac]
jmp 0x4be10e
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call fcn.0048e520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea edx, [0x6be4e0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0040ac30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x154]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x158]
mov dword [esp + 0xc], edx
call fcn.004bff80
lea edi, [esp + 0x124]
mov esi, dword [esp + 0xb0]
call fcn.0044a84a
mov eax, dword [esp + 0x144]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
mov edi, dword [esp + 0xac]
lea esi, [esp + 0x124]
call fcn.0044a84a
call fcn.004c0170
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
add esp, 0x140
ret
mov ebx, dword [esp + 0x148]
mov dword [esp], ebx
mov ebp, dword [esp + 0x14c]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.004c2b50
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bef60
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x154]
jmp 0x4be012
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
add esp, 0x140
ret
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
add esp, 0x140
ret
lea eax, [0x715f81]
mov dword [esp], eax
mov dword [esp + 4], 0x34
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.0049a940
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], ecx
add esp, 0x140
ret
call fcn.004486b0
jmp fcn.004bdfb0