Function at 0x4bad50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x4c]
cmp eax, dword [ecx + 8]
jbe 0x4bb82b
sub esp, 0xcc
nop
mov ebx, dword [esp + 0xdc]
mov ebp, ebx
and ebx, 0x1f
cmp ebx, 0xa
jbe 0x4bb28c
cmp ebx, 0xf
jbe 0x4baf86
cmp ebx, 0x11
ja 0x4baee6
cmp ebx, 0x10
je 0x4badcb
nop
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004b60d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x48], eax
xor ecx, ecx
jmp 0x4bb822
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4bb7be
cmp eax, ecx
ja 0x4bb7b9
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], ecx
movsd xmm0, qword [esp + 0x7c]
mov eax, dword [edx + 0x10]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 8]
cmp eax, ebp
jb 0x4bb7b0
cmp ebx, ebp
ja 0x4bb7a7
movsd qword [esp + 0x6c], xmm0
mov ebp, dword [edx]
mov esi, dword [edx + 4]
mov ebp, dword [ebp + 0x28]
mov dword [esp], esi
sub eax, ebx
mov esi, eax
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [ecx + ebx]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], esi
call ebp
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], ecx
movsd xmm0, qword [esp + 0x74]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x6c]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.004b6fd0
jmp 0x4bb5b5
cmp ebx, 0x17
jne 0x4baf01
nop
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax + 4]
mov dword [esp + 0x44], ecx
xor edx, edx
jmp 0x4bb79e
cmp ebx, 0x19
jne 0x4bb5b5
test ebp, 0x200
jne 0x4baf21
lea eax, [0x6c4d98]
mov ecx, dword [esp + 0xd4]
jmp 0x4baf4e
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004b77c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0xdc]
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004b6ba0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x4c], eax
xor ecx, ecx
jmp 0x4bb622
cmp ebx, 0xd
ja 0x4bb0cd
cmp ebx, 0xb
jne 0x4bb02a
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4bb612
cmp eax, ecx
ja 0x4bb60d
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004b7250
jmp 0x4bb5b5
cmp ebx, 0xd
jne 0x4bb5b5
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4bb608
cmp eax, ecx
ja 0x4bb603
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov dword [esp + 0x64], eax
movss xmm0, dword [esp + 0x64]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
cvtss2sd xmm0, xmm0
movsd qword [esp + 0xc], xmm0
call fcn.004b70a0
jmp 0x4bb5b5
cmp ebx, 0xe
jne 0x4bb17d
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4bb5fe
cmp eax, ecx
ja 0x4bb5f9
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], ecx
movsd xmm0, qword [esp + 0x84]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004b70a0
jmp 0x4bb5b5
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4bb5f4
cmp eax, ecx
ja 0x4bb5ef
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov dword [esp + 0x60], eax
movss xmm0, dword [esp + 0x60]
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 8]
mov ebx, dword [ecx + 0x14]
lea ebp, [ebx + 4]
cmp edx, ebp
jb 0x4bb5e8
cmp ebx, ebp
ja 0x4bb5df
movss dword [esp + 0x40], xmm0
mov ebp, dword [ecx]
mov esi, dword [ecx + 4]
mov ebp, dword [ebp + 0x24]
mov dword [esp], esi
sub edx, ebx
mov esi, edx
neg edx
sar edx, 0x1f
and ebx, edx
add eax, ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], esi
call ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov dword [esp + 0x5c], eax
movss xmm0, dword [esp + 0x5c]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movss xmm1, dword [esp + 0x40]
cvtss2sd xmm1, xmm1
movsd qword [esp + 0xc], xmm1
cvtss2sd xmm0, xmm0
movsd qword [esp + 0x14], xmm0
call fcn.004b6fd0
jmp 0x4bb5b5
cmp ebx, 5
ja 0x4bb3e5
cmp ebx, 3
ja 0x4bb34b
cmp ebx, 1
jne 0x4bb2ef
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4bb5da
movzx ecx, byte [ebx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
test cl, cl
setne al
mov byte [esp + 0xc], al
call fcn.004b6f10
jmp 0x4bb5b5
cmp ebx, 3
jne 0x4bb5b5
nop
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4bb5d5
lea ecx, [ebx + eax]
movsx ecx, byte [ecx]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov eax, ecx
sar ecx, 0x1f
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.004b7160
jmp 0x4bb5b5
cmp ebx, 4
jne 0x4bb39b
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004babc0
movsx eax, word [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004b7160
jmp 0x4bb5b5
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004bac40
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004b7160
jmp 0x4bb5b5
cmp ebx, 8
ja 0x4bb494
cmp ebx, 6
je 0x4bb44b
cmp ebx, 8
jne 0x4bb5b5
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4bb5d0
movzx ecx, byte [ebx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
call fcn.004b7250
jmp 0x4bb5b5
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004bacc0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004b7160
jmp 0x4bb5b5
cmp ebx, 9
jne 0x4bb530
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 2]
cmp edx, ecx
jb 0x4bb5cb
cmp eax, ecx
ja 0x4bb5c6
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x20]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 2
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004b7250
jmp 0x4bb5b5
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4bb5c1
cmp eax, ecx
ja 0x4bb5bc
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004b7250
add esp, 0xcc
ret
call fcn.004627a0
call fcn.00462780
call fcn.004627a0
call fcn.00462780
call fcn.00462740
call fcn.00462740
call fcn.00462740
mov eax, ebx
mov ecx, ebp
call fcn.004627a0
mov ecx, ebp
call fcn.00462780
call fcn.004627a0
call fcn.00462780
call fcn.004627a0
call fcn.00462780
call fcn.004627a0
call fcn.00462780
call fcn.004627a0
call fcn.00462780
mov edx, dword [esp + 0x54]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x4c]
cmp ecx, eax
jge 0x4bb5b5
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004b57e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, ecx
and ecx, 0x160
cmp ecx, 0x100
je 0x4bb6e0
mov dword [esp + 0x68], ebx
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x8c]
mov dword [esp], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
call ecx
lea edi, [esp + 0x98]
lea esi, [esp + 8]
call fcn.00462dce
mov eax, dword [esp + 0x98]
cmp dword [esp + 0x9c], 1
je 0x4bb6c4
mov eax, 1
jmp 0x4bb6ca
cmp byte [eax], 0x5f
setne al
test al, al
je 0x4bb707
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x68]
mov ecx, dword [esp + 0xd0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.004bad50
mov eax, dword [esp + 0xd0]
jmp 0x4bb617
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
call fcn.004ba800
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax + 0x14]
add ecx, dword [esp + 0xc]
mov dword [eax + 0x14], ecx
jmp 0x4bb617
mov dword [esp + 0x50], edx
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.004b5d30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004bad50
mov eax, dword [esp + 0x50]
lea edx, [eax + 1]
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x44]
mov ebp, dword [esp + 0xdc]
cmp edx, ecx
jl 0x4bb73f
jmp 0x4bb5b5
mov eax, ebx
mov ecx, ebp
call fcn.004627a0
mov ecx, ebp
mov edx, eax
call fcn.00462780
call fcn.004627a0
call fcn.00462780
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004b5d30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004bad50
mov eax, dword [esp + 0x58]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x48]
cmp ecx, eax
jl 0x4bb7c3
jmp 0x4bb5b5
call fcn.004612b0
jmp fcn.004bad50