Function at 0x4fbd40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2e
push 0
push 0
dec ecx
jne 0x4fbd48
push ebx
push esi
push edi
mov dword [ebp - 8], edx
xor edx, edx
push ebp
push 0x4fcb09
push dword fs:[edx]
mov dword fs:[edx], esp
call fcn.004fcdd0
mov dl, 1
mov eax, dword [0x42fc88]
call fcn.0043c260
mov dword [ebp - 0x1c], eax
mov dl, 1
mov eax, dword [0x42fc88]
call fcn.0043c260
mov dword [ebp - 0x20], eax
mov dl, 1
mov eax, dword [0x42fc88]
call fcn.0043c260
mov dword [ebp - 0x24], eax
mov dl, 1
mov eax, dword [0x42fc88]
call fcn.0043c260
mov dword [ebp - 0x28], eax
mov eax, 0xff
call fcn.004169ec
mov dword [ebp - 0x30], eax
xor eax, eax
push ebp
push 0x4fcadc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x585bf8]
cmp byte [eax], 0
je 0x4fbdd8
lea eax, [ebp - 4]
mov edx, 0x4fcb24
call fcn.004074c4
jmp 0x4fbde5
lea eax, [ebp - 4]
mov edx, 0x4fcb70
call fcn.004074c4
call fcn.004f3738
mov esi, eax
mov eax, dword [0x585bf8]
cmp byte [eax], 0
je 0x4fc5c8
mov edx, 0x80000002
mov eax, esi
call fcn.00450e94
mov edx, 0x4fcb24
xor ecx, ecx
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fca9f
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.00451514
mov eax, esi
call fcn.00450e64
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4fca9f
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xc], 0
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0x64]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x64]
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00407a28
mov edx, dword [ebp - 0x60]
xor ecx, ecx
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fc5b7
mov edx, dword [ebp - 0x20]
mov eax, esi
call fcn.00451514
mov eax, esi
call fcn.00450e64
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4fc5b7
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x6c]
push 0x4fcb88
lea ecx, [ebp - 0x70]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x70]
lea eax, [ebp - 0x68]
mov edx, 5
call fcn.00407a28
mov edx, dword [ebp - 0x68]
xor ecx, ecx
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fc5ab
mov edx, dword [ebp - 0x24]
mov eax, esi
call fcn.00451514
mov eax, esi
call fcn.00450e64
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4fc5ab
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x14], 0
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0x78]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x78]
push 0x4fcb88
lea ecx, [ebp - 0x7c]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x7c]
push 0x4fcb88
lea ecx, [ebp - 0x80]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x80]
lea eax, [ebp - 0x74]
mov edx, 7
call fcn.00407a28
mov edx, dword [ebp - 0x74]
xor ecx, ecx
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fc59f
mov edx, 0x4fcb98
mov eax, esi
call fcn.00452320
test al, al
je 0x4fc59f
mov edx, dword [0x4f9334]
mov eax, 0x90
call fcn.004086c0
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ebx, eax
lea ecx, [ebp - 0x88]
mov edx, 0x4fcbb4
mov eax, esi
call fcn.00451a0c
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x84]
call fcn.00414a2c
mov edx, dword [ebp - 0x84]
lea eax, [ebx + 0x18]
call fcn.00407470
lea ecx, [ebp - 0x8c]
mov edx, 0x4fcbd4
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x8c]
lea eax, [ebx + 0x10]
call fcn.00407470
mov edx, dword [ebx + 0x10]
mov eax, 0x4fcbfc
call fcn.00407ec8
test eax, eax
jle 0x4fc042
lea eax, [ebx + 0x10]
push eax
mov edx, dword [ebx + 0x10]
mov eax, 0x4fcbfc
call fcn.00407ec8
mov edx, eax
inc edx
mov eax, dword [ebx + 0x10]
mov ecx, 0x400
call fcn.00407bb0
lea ecx, [ebp - 0x90]
mov edx, 0x4fcc0c
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x90]
lea eax, [ebx + 0x14]
call fcn.00407470
mov edx, dword [ebx + 0x14]
mov eax, 0x4fcbfc
call fcn.00407ec8
test eax, eax
jle 0x4fc094
lea eax, [ebx + 0x14]
push eax
mov edx, dword [ebx + 0x14]
mov eax, 0x4fcbfc
call fcn.00407ec8
mov edx, eax
inc edx
mov eax, dword [ebx + 0x14]
mov ecx, 0x400
call fcn.00407bb0
lea edx, [ebp - 0x94]
mov eax, dword [ebx + 0x10]
call fcn.004150ac
cmp dword [ebp - 0x94], 0
jne 0x4fc0b7
mov eax, ebx
mov edx, dword [ebx + 0x14]
call fcn.00407470
jmp 0x4fc0c1
mov eax, ebx
mov edx, dword [ebx + 0x10]
call fcn.00407470
lea ecx, [ebp - 0x98]
mov edx, 0x4fcc30
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x98]
lea eax, [ebx + 0x1c]
call fcn.00407470
mov edx, dword [ebx + 0x1c]
mov eax, 0x4fcbfc
call fcn.00407ec8
test eax, eax
jle 0x4fc113
lea eax, [ebx + 0x1c]
push eax
mov edx, dword [ebx + 0x1c]
mov eax, 0x4fcbfc
call fcn.00407ec8
mov edx, eax
inc edx
mov eax, dword [ebx + 0x1c]
mov ecx, 0x400
call fcn.00407bb0
lea ecx, [ebp - 0x9c]
mov edx, 0x4fcc44
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x9c]
lea eax, [ebx + 0x54]
call fcn.00407470
lea ecx, [ebp - 0xa0]
mov edx, 0x4fcc60
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0xa0]
lea eax, [ebx + 0x20]
call fcn.00407470
lea eax, [ebx + 0x2c]
push eax
lea ecx, [ebx + 0x28]
lea edx, [ebx + 0x24]
mov eax, dword [ebx + 0x20]
call fcn.004f9c4c
cmp dword [ebx + 0x20], 0
jne 0x4fc191
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebp - 0xa4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x20]
call fcn.004fb6c8
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebx + 8]
lea edx, [ebx + 4]
mov eax, dword [ebx + 0x18]
call fcn.004fb0cc
cmp dword [ebx + 4], 0
jne 0x4fc1c9
lea ecx, [ebp - 0xa8]
mov edx, 0x4fcc94
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0xa8]
lea eax, [ebx + 4]
call fcn.00407470
lea ecx, [ebp - 0xac]
mov edx, 0x4fccac
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0xac]
lea eax, [ebx + 0x40]
call fcn.00407470
lea eax, [ebx + 0x4c]
push eax
lea eax, [ebx + 0x50]
push eax
lea ecx, [ebx + 0x48]
lea edx, [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.004fb3f8
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x58]
mov eax, dword [ebx + 0x54]
call fcn.004fb6c8
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0xb0]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xb0]
push 0x4fcb88
lea ecx, [ebp - 0xb4]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xb4]
push 0x4fcb88
lea ecx, [ebp - 0xb8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xb8]
lea eax, [ebx + 0x64]
mov edx, 7
call fcn.00407a28
lea ecx, [ebp - 0xbc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xbc]
lea eax, [ebx + 0x38]
call fcn.00407470
push 0
lea eax, [ebp - 0xc0]
push eax
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0xc8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xc8]
push 0x4fcb88
lea ecx, [ebp - 0xcc]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xcc]
push 0x4fcb88
lea ecx, [ebp - 0xd0]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xd0]
lea eax, [ebp - 0xc4]
mov edx, 7
call fcn.00407a28
mov edx, dword [ebp - 0xc4]
mov ecx, 0x4fccc8
mov eax, 0x80000002
call fcn.004f375c
mov edx, dword [ebp - 0xc0]
lea eax, [ebx + 0x30]
call fcn.00407470
lea eax, [ebx + 0x7c]
push eax
lea eax, [ebx + 0x80]
push eax
lea ecx, [ebx + 0x78]
lea edx, [ebx + 0x74]
mov eax, dword [ebx + 0x30]
call fcn.004fbb1c
lea ecx, [ebx + 0x6c]
lea edx, [ebx + 0x68]
mov eax, dword [ebx + 0x64]
call fcn.004fb878
lea ecx, [ebp - 0xd4]
mov edx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x30]
call fcn.004faca8
mov edx, dword [ebp - 0xd4]
lea eax, [ebx + 0x34]
call fcn.00407470
mov eax, esi
call fcn.00450e64
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0xdc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xdc]
push 0x4fcb88
lea ecx, [ebp - 0xe0]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xe0]
push 0x4fcb88
lea ecx, [ebp - 0xe4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xe4]
push 0x4fcb88
push 0x4fcb98
lea eax, [ebp - 0xd8]
mov edx, 9
call fcn.00407a28
mov edx, dword [ebp - 0xd8]
xor ecx, ecx
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fc424
lea edx, [ebp - 0x5c]
mov eax, esi
call fcn.004514a8
lea eax, [ebp - 0x48]
call fcn.004ea6d0
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004ea640
fstp qword [ebx + 0x88]
wait
mov eax, esi
call fcn.00450e64
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0xec]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xec]
push 0x4fcb88
lea ecx, [ebp - 0xf0]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xf0]
push 0x4fcb88
lea ecx, [ebp - 0xf4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xf4]
push 0x4fcb88
push 0x4fccec
lea eax, [ebp - 0xe8]
mov edx, 9
call fcn.00407a28
mov edx, dword [ebp - 0xe8]
xor ecx, ecx
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fc551
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.00451788
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4fc54a
inc eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0xf8]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0xf8], 0
je 0x4fc542
lea ecx, [ebp - 0xfc]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xfc]
mov eax, esi
call fcn.004518cc
cmp al, 1
jne 0x4fc542
lea ecx, [ebp - 0x104]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x104]
lea ecx, [ebp - 0x100]
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x100]
lea eax, [ebx + 0x3c]
call fcn.00407470
jmp 0x4fc54a
inc dword [ebp - 0x18]
dec dword [ebp - 0x40]
jne 0x4fc4d2
mov eax, esi
call fcn.00450e64
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
call fcn.004150ac
cmp dword [ebp - 0x108], 0
je 0x4fc591
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
call fcn.004f9ac4
mov edx, dword [ebp - 0x2c]
mov byte [edx + 0x70], al
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
jmp 0x4fc59f
mov edx, dword [0x4f9334]
mov eax, dword [ebp - 0x2c]
call fcn.004086d4
inc dword [ebp - 0x14]
dec dword [ebp - 0x3c]
jne 0x4fbf2d
inc dword [ebp - 0x10]
dec dword [ebp - 0x38]
jne 0x4fbeb0
inc dword [ebp - 0xc]
dec dword [ebp - 0x34]
jne 0x4fbe49
jmp 0x4fca9f
mov edx, 0x80000006
mov eax, esi
call fcn.00450e94
xor ecx, ecx
mov edx, 0x4fcd1c
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fc67c
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.00451514
mov eax, esi
call fcn.00450e64
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4fc67c
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x110]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x110]
lea eax, [ebp - 0x10c]
mov edx, 0x4fcd54
call fcn.00407944
mov edx, dword [ebp - 0x10c]
xor ecx, ecx
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fc674
lea ecx, [ebp - 0x114]
mov edx, 0x4fcd8c
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, esi
call fcn.00450e64
inc dword [ebp - 0xc]
dec dword [ebp - 0x34]
jne 0x4fc613
mov edx, 0x80000002
mov eax, esi
call fcn.00450e94
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4fca9f
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x11c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11c]
lea edx, [ebp - 0x118]
call fcn.00414a2c
mov edx, dword [ebp - 0x118]
mov eax, 0x4fcdb0
call fcn.00407ec8
test eax, eax
jne 0x4fca93
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0x124]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x124]
lea eax, [ebp - 0x120]
mov edx, 3
call fcn.00407a28
mov edx, dword [ebp - 0x120]
xor ecx, ecx
mov eax, esi
call fcn.00450fdc
test al, al
je 0x4fca93
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.00451514
mov edx, dword [0x4f9334]
mov eax, 0x90
call fcn.004086c0
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ebx, eax
mov edx, 0x4fcbb4
lea ecx, [ebp - 0x12c]
mov eax, esi
call fcn.00451a0c
mov eax, dword [ebp - 0x12c]
lea edx, [ebp - 0x128]
call fcn.00414a2c
mov edx, dword [ebp - 0x128]
lea eax, [ebx + 0x18]
call fcn.00407470
mov edx, 0x4fcbd4
lea ecx, [ebp - 0x130]
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x130]
lea eax, [ebx + 0x10]
call fcn.00407470
mov edx, 0x4fcc0c
lea ecx, [ebp - 0x134]
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x134]
lea eax, [ebx + 0x14]
call fcn.00407470
lea edx, [ebp - 0x138]
mov eax, dword [ebx + 0x10]
call fcn.004150ac
cmp dword [ebp - 0x138], 0
jne 0x4fc7da
mov eax, ebx
mov edx, dword [ebx + 0x14]
call fcn.00407470
jmp 0x4fc7e4
mov eax, ebx
mov edx, dword [ebx + 0x10]
call fcn.00407470
mov edx, 0x4fcc30
lea ecx, [ebp - 0x13c]
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x13c]
lea eax, [ebx + 0x1c]
call fcn.00407470
mov edx, 0x4fcc44
lea ecx, [ebp - 0x140]
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x140]
lea eax, [ebx + 0x54]
call fcn.00407470
mov edx, 0x4fcc60
lea ecx, [ebp - 0x144]
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x144]
lea eax, [ebx + 0x20]
call fcn.00407470
lea eax, [ebx + 0x2c]
push eax
lea ecx, [ebx + 0x28]
lea edx, [ebx + 0x24]
mov eax, dword [ebx + 0x20]
call fcn.004f9c4c
cmp dword [ebx + 0x20], 0
jne 0x4fc882
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebp - 0x148]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x148]
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x20]
call fcn.004fb6c8
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebx + 8]
lea edx, [ebx + 4]
mov eax, dword [ebx + 0x18]
call fcn.004fb0cc
cmp dword [ebx + 4], 0
jne 0x4fc8ba
mov edx, 0x4fcc94
lea ecx, [ebp - 0x14c]
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x14c]
lea eax, [ebx + 4]
call fcn.00407470
mov edx, 0x4fccac
lea ecx, [ebp - 0x150]
mov eax, esi
call fcn.00451a0c
mov edx, dword [ebp - 0x150]
lea eax, [ebx + 0x40]
call fcn.00407470
lea eax, [ebx + 0x4c]
push eax
lea eax, [ebx + 0x50]
push eax
lea ecx, [ebx + 0x48]
lea edx, [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.004fb3f8
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x58]
mov eax, dword [ebx + 0x54]
call fcn.004fb6c8
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0x154]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x154]
lea eax, [ebx + 0x64]
mov edx, 3
call fcn.00407a28
lea ecx, [ebp - 0x158]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x158]
lea eax, [ebx + 0x38]
call fcn.00407470
push 0
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 4]
push 0x4fcb88
lea ecx, [ebp - 0x164]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x164]
lea eax, [ebp - 0x160]
mov edx, 3
call fcn.00407a28
mov edx, dword [ebp - 0x160]
mov ecx, 0x4fccc8
mov eax, 0x80000002
call fcn.004f375c
mov edx, dword [ebp - 0x15c]
lea eax, [ebx + 0x30]
call fcn.00407470
lea eax, [ebx + 0x7c]
push eax
lea eax, [ebx + 0x80]
push eax
lea ecx, [ebx + 0x78]
lea edx, [ebx + 0x74]
mov eax, dword [ebx + 0x30]
call fcn.004fbb1c
lea eax, [ebx + 0x34]
xor edx, edx
call fcn.00407470
lea ecx, [ebx + 0x6c]
lea edx, [ebx + 0x68]
mov eax, dword [ebx + 0x64]
call fcn.004fbad8
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
call fcn.004150ac
cmp dword [ebp - 0x168], 0
je 0x4fca7e
mov eax, dword [ebp - 0x2c]
push dword [eax + 4]
push 0x4fcdcc
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x14]
lea eax, [ebp - 0x16c]
mov edx, 3
call fcn.00407a28
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
jne 0x4fca7e
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
call fcn.004f9ac4
mov edx, dword [ebp - 0x2c]
mov byte [edx + 0x70], al
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [ebp - 0x2c]
push dword [eax + 4]
push 0x4fcdcc
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x14]
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.00407a28
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x4fca8c
mov edx, dword [0x4f9334]
mov eax, dword [ebp - 0x2c]
call fcn.004086d4
mov eax, esi
call fcn.00450e64
inc dword [ebp - 0xc]
dec dword [ebp - 0x34]
jne 0x4fc6a4
mov eax, esi
call fcn.004054dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fcae3
mov eax, dword [ebp - 0x30]
call fcn.00416a48
mov eax, dword [ebp - 0x1c]
call fcn.004054dc
mov eax, dword [ebp - 0x20]
call fcn.004054dc
mov eax, dword [ebp - 0x24]
call fcn.004054dc
mov eax, dword [ebp - 0x28]
call fcn.004054dc
ret