Function at 0x4beff0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x8c]
cmp eax, dword [ecx + 8]
jbe 0x4bff76
sub esp, 0x10c
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov ecx, dword [esp + 0x12c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x130]
mov dword [esp + 8], edx
call fcn.0048e480
movzx eax, byte [esp + 0xc]
lea ecx, [esp + 0x14]
mov dword [esp + 0x78], ecx
test al, al
jne 0x4bfd70
mov eax, dword [esp + 0x130]
test eax, 0x100
jne 0x4bfb35
mov ecx, dword [esp + 0x128]
mov dword [esp], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048e480
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bf8e4
mov eax, dword [esp + 0x130]
test eax, 0x100
jne 0x4bf659
mov ecx, eax
and eax, 0x1f
cmp eax, 0x14
jne 0x4bf63b
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov edx, dword [esp + 0x12c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0048e730
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bf61e
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 8], eax
call fcn.0048dd70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x34], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x58], edx
mov ebx, eax
and eax, 0x1f
cmp eax, 0x17
je 0x4bf4cf
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x8727d0]
cmp eax, edx
je 0x4bf349
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 8], edx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x110]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
call fcn.004c0e70
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x30]
test esi, esi
jne 0x4bf334
test edx, edx
jne 0x4bf30f
mov dword [esp + 0x40], ecx
lea edi, [esp + 0xac]
mov edx, eax
xor eax, eax
call fcn.0044a37a
mov ecx, dword [esp + 0x118]
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x120]
mov dword [esp + 0xb4], ecx
mov ecx, dword [esp + 0x124]
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], edx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x114]
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x18]
mov eax, ecx
add ecx, 0x10
mov dword [esp + 0x74], ecx
lea ecx, [ebx + 1]
cmp ecx, ebp
jg 0x4bf2a1
lea ecx, [ebx + 1]
mov dword [eax + 0x14], ecx
lea eax, [ebx + ebx*2]
lea edi, [edx + eax*8]
mov eax, dword [0x884700]
test eax, eax
jne 0x4bf282
lea esi, [esp + 0xac]
call fcn.0044a854
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
add esp, 0x10c
ret
lea eax, [0x6c8280]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0040d6b0
jmp 0x4bf265
lea edi, [0x6c8280]
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 0x18], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x4bf2f2
mov dword [ebx + 0x10], eax
mov edx, dword [ebx + 0x10]
mov eax, ebx
mov ebx, ecx
jmp 0x4bf243
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x114]
jmp 0x4bf2e6
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call fcn.0043a9c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
jmp 0x4bf1c5
mov dword [esp + 0x134], esi
mov dword [esp + 0x138], edi
add esp, 0x10c
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [0x8727d0]
mov ecx, dword [0x8727d4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.004022c0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4bf377
jmp 0x4bf146
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call fcn.0048e520
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov esi, dword [esp + 0x10]
lea edi, [esp + 0xf4]
xor eax, eax
call fcn.0044a37a
lea eax, [0x6c8280]
mov ecx, dword [esp + 0x70]
cmp eax, ecx
jne 0x4bf4b7
lea edi, [esp + 0xf4]
call fcn.0044a854
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov ebx, dword [eax + 0x18]
lea ebp, [eax + 0x10]
mov dword [esp + 0x74], ebp
lea ebp, [edx + 1]
cmp ebp, ebx
jg 0x4bf447
lea ebx, [edx + 1]
mov dword [eax + 0x14], ebx
lea eax, [edx + edx*2]
mov edx, dword [0x884700]
lea edi, [ecx + eax*8]
test edx, edx
jne 0x4bf428
lea esi, [esp + 0xf4]
call fcn.0044a854
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
add esp, 0x10c
ret
lea eax, [0x6c8280]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
call fcn.0040d6b0
jmp 0x4bf40b
lea edi, [0x6c8280]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 0x18], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x4bf49a
mov dword [ebx + 0x10], eax
mov ebp, dword [ebx + 0x10]
mov eax, ebx
mov edx, ecx
mov ecx, ebp
jmp 0x4bf3e9
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x114]
jmp 0x4bf48c
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x6b43a0]
mov dword [esp + 8], eax
call fcn.0040a700
ud2
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x2c]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x54]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
cmp eax, 8
jne 0x4bf519
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x34]
jmp 0x4bf120
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 8], edx
call fcn.0048e870
mov eax, dword [esp + 0xc]
mov dword [esp + 0x4c], eax
xor ecx, ecx
mov dword [esp + 0x50], ecx
cmp ecx, eax
jge 0x4bf5ec
mov edx, dword [esp + 0x58]
mov dword [esp], edx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x34]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
call fcn.0048e140
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x110]
mov dword [esp], ebx
mov ebp, dword [esp + 0x114]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x118]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x11c]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x120]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x124]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
call fcn.004beff0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
test eax, eax
jne 0x4bf609
mov edx, dword [esp + 0x50]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x50], ecx
cmp ecx, eax
jl 0x4bf54b
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
add esp, 0x10c
ret
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], ecx
add esp, 0x10c
ret
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
add esp, 0x10c
ret
cmp eax, 0x16
je 0x4bf0aa
mov eax, ecx
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0x128]
jmp 0x4bf106
mov ecx, dword [esp + 0x128]
mov dword [esp], ecx
mov edx, dword [esp + 0x12c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048d2c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x48], edx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0048e480
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bf6b4
mov eax, dword [esp + 0x130]
jmp 0x4bf09c
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x48]
mov dword [esp + 8], edx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x44]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x8727f8]
mov ebx, dword [0x8727fc]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bf6ff
jmp 0x4bf6a8
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
call fcn.0048e520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea edx, [0x6be360]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0040ac30
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test ebx, ebx
jne 0x4bf8cf
lea edi, [esp + 0xc4]
mov ebx, eax
xor eax, eax
call fcn.0044a37a
mov ecx, dword [esp + 0x118]
mov dword [esp + 0xc4], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0xc8], ecx
mov ecx, dword [esp + 0x120]
mov dword [esp + 0xcc], ecx
mov ecx, dword [esp + 0x124]
mov dword [esp + 0xd0], ecx
mov dword [esp], 0
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0043a9c0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], edx
mov ecx, dword [esp + 0x114]
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x18]
lea esi, [ecx + 0x10]
mov dword [esp + 0x74], esi
lea esi, [ebx + 1]
cmp esi, ebp
jg 0x4bf85f
lea eax, [ebx + 1]
mov dword [ecx + 0x14], eax
lea eax, [ebx + ebx*2]
lea edi, [edx + eax*8]
mov eax, dword [0x884700]
test eax, eax
jne 0x4bf840
lea esi, [esp + 0xc4]
call fcn.0044a854
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
add esp, 0x10c
ret
lea eax, [0x6c8280]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
call fcn.0040d6b0
jmp 0x4bf823
lea edi, [0x6c8280]
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 0x18], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x4bf8b2
mov dword [ebx + 0x10], eax
mov edx, dword [ebx + 0x10]
mov ecx, ebx
mov ebx, dword [esp + 0x54]
jmp 0x4bf801
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x114]
jmp 0x4bf8a4
mov dword [esp + 0x134], ebx
mov dword [esp + 0x138], ebp
add esp, 0x10c
ret
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov ecx, dword [esp + 0x12c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x130]
mov dword [esp + 8], edx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x44]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x8727f8]
mov ebx, dword [0x8727fc]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bf947
mov eax, dword [esp + 0x130]
test eax, 0x100
jmp 0x4bf096
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 8], eax
call fcn.0048e520
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea edx, [0x6be360]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0040ac30
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test ebx, ebx
jne 0x4bfb20
lea edi, [esp + 0xdc]
mov ebx, eax
xor eax, eax
call fcn.0044a37a
mov ecx, dword [esp + 0x118]
mov dword [esp + 0xdc], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0xe0], ecx
mov ecx, dword [esp + 0x120]
mov dword [esp + 0xe4], ecx
mov ecx, dword [esp + 0x124]
mov dword [esp + 0xe8], ecx
mov dword [esp], 0
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0043a9c0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf0], edx
mov ecx, dword [esp + 0x114]
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x18]
lea esi, [ecx + 0x10]
mov dword [esp + 0x74], esi
lea esi, [ebx + 1]
cmp esi, ebp
jg 0x4bfab0
lea eax, [ebx + 1]
mov dword [ecx + 0x14], eax
lea eax, [ebx + ebx*2]
lea edi, [edx + eax*8]
mov eax, dword [0x884700]
test eax, eax
jne 0x4bfa91
lea esi, [esp + 0xdc]
call fcn.0044a854
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
add esp, 0x10c
ret
lea eax, [0x6c8280]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
call fcn.0040d6b0
jmp 0x4bfa74
lea edi, [0x6c8280]
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 0x18], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x4bfb03
mov dword [ebx + 0x10], eax
mov edx, dword [ebx + 0x10]
mov ecx, ebx
mov ebx, dword [esp + 0x54]
jmp 0x4bfa52
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x114]
jmp 0x4bfaf5
mov dword [esp + 0x134], ebx
mov dword [esp + 0x138], ebp
add esp, 0x10c
ret
mov edx, dword [esp + 0x128]
mov dword [esp], edx
mov ebx, dword [esp + 0x12c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.0048d2c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x64], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048e480
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bfb90
mov eax, dword [esp + 0x130]
jmp 0x4bf05f
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 8], edx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x44]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x8727e0]
mov ebx, dword [0x8727e4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bfbdb
jmp 0x4bfb84
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.0048e520
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea edx, [0x6be540]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0040ac30
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x118]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x120]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x124]
mov dword [esp + 0x10], edx
mov dword [esp], ecx
call eax
lea edi, [esp + 0x7c]
mov esi, dword [esp + 0x78]
call fcn.0044a854
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
test eax, eax
jne 0x4bfd5b
mov eax, dword [esp + 0x88]
test eax, eax
je 0x4bfcb6
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
mov ebx, dword [eax + 0x18]
lea ebp, [eax + 0x10]
mov dword [esp + 0x74], ebp
lea ebp, [ecx + 1]
cmp ebp, ebx
jg 0x4bfcef
lea ebx, [ecx + 1]
mov dword [eax + 0x14], ebx
mov eax, dword [0x884700]
lea ecx, [ecx + ecx*2]
lea edi, [edx + ecx*8]
test eax, eax
jne 0x4bfcd3
lea esi, [esp + 0x7c]
call fcn.0044a854
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
add esp, 0x10c
ret
lea eax, [0x6c8280]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.0040d6b0
jmp 0x4bfcb6
lea edi, [0x6c8280]
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 0x18], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x4bfd3e
mov dword [ebx + 0x10], eax
mov edx, dword [ebx + 0x10]
mov eax, ebx
jmp 0x4bfc97
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x114]
jmp 0x4bfd34
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], ecx
add esp, 0x10c
ret
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov edx, dword [esp + 0x12c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x130]
mov dword [esp + 8], ebx
call fcn.00490190
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x44]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x8727e0]
mov ebx, dword [0x8727e4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4bfdcb
mov ecx, dword [esp + 0x78]
jmp 0x4bf04d
mov eax, dword [esp + 0x128]
mov dword [esp], eax
mov eax, dword [esp + 0x12c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 8], eax
call fcn.0048e520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
lea edx, [0x6be540]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0040ac30
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x118]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x11c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x120]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x124]
mov dword [esp + 0x10], edx
mov dword [esp], ecx
call eax
lea edi, [esp + 0x94]
mov esi, dword [esp + 0x78]
call fcn.0044a854
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
test eax, eax
jne 0x4bff61
mov eax, dword [esp + 0xa0]
test eax, eax
je 0x4bfeb5
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov ebx, dword [eax + 0x18]
lea ebp, [eax + 0x10]
mov dword [esp + 0x74], ebp
lea ebp, [edx + 1]
cmp ebp, ebx
jg 0x4bfef1
lea ebx, [edx + 1]
mov dword [eax + 0x14], ebx
lea eax, [edx + edx*2]
lea edi, [ecx + eax*8]
mov eax, dword [0x884700]
test eax, eax
jne 0x4bfed2
lea esi, [esp + 0x94]
call fcn.0044a854
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
add esp, 0x10c
ret
lea eax, [0x6c8280]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x94]
mov dword [esp + 8], eax
call fcn.0040d6b0
jmp 0x4bfeb5
lea edi, [0x6c8280]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x114]
mov dword [ebx + 0x18], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x4bff44
mov dword [ebx + 0x10], eax
mov ebp, dword [ebx + 0x10]
mov eax, ebx
mov edx, ecx
mov ecx, ebp
jmp 0x4bfe93
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x114]
jmp 0x4bff36
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], ecx
add esp, 0x10c
ret
call fcn.004486b0
jmp fcn.004beff0