Function at 0x4b81c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5a4fc0
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
mov eax, dword [0x6e50b4]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6e50b4]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1a4]
mov esi, dword [esp + 0x1a0]
mov ebx, dword [esi + 0x220]
mov edx, dword [esp + 0x1ac]
mov edi, ecx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1b0]
push ebx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0x2c], eax
call fcn.0052ae30
mov ebp, eax
add esp, 4
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], ebp
call fcn.0042f0f0
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xd4
mov ecx, 0x6f42b0
mov dword [esp + 0x1a4], 0
call fcn.004346c0
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x17c], eax
mov eax, dword [esp + 0x40]
mov dword [esi + 0x180], ecx
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x178], edx
mov edx, dword [esp + 0x3c]
mov dword [esi + 0x184], edx
mov edx, dword [esp + 0x48]
mov dword [esi + 0x18c], ecx
lea ecx, [esp + 0x6c]
mov dword [esi + 0x188], eax
mov dword [esi + 0x190], edx
call fcn.0042f0f0
push 0
lea eax, [esp + 0x70]
push eax
push 0x3f
mov ecx, 0x6f42b0
mov byte [esp + 0x1a4], 1
call fcn.004346c0
push 0x1e1e1e
lea ecx, [esp + 0x70]
push ecx
push 0xffffffffffffffff
push 0x5b1b0b
mov ecx, esi
call fcn.004414e0
lea ecx, [esp + 0x4c]
mov dword [esi + 0x170], 1
call fcn.0042f0f0
push 0
lea edx, [esp + 0x50]
push edx
push 0xd5
mov ecx, 0x6f42b0
mov byte [esp + 0x1a4], 2
call fcn.004346c0
lea eax, [esi + 0x194]
test eax, eax
je 0x4b8334
push eax
mov ecx, esi
call fcn.004414a0
test ebp, 0x800
je 0x4b838c
movzx ecx, bx
xor edx, edx
mov eax, ecx
div dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b8f37
cmp dword [eax], ecx
je 0x4b8364
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b8354
jmp 0x4b8f37
mov eax, dword [eax + 4]
test eax, eax
je 0x4b8f37
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push ecx
push eax
push esi
mov ecx, edi
call fcn.004b4800
jmp 0x4b8f37
test ebp, 0x400
je 0x4b83d9
movzx ecx, bx
xor edx, edx
mov eax, ecx
div dword [edi + 0x40]
mov eax, dword [edi + 0x44]
mov eax, dword [eax + edx*4]
test eax, eax
je 0x4b8f37
lea esp, [esp]
cmp dword [eax], ecx
je 0x4b83c0
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4b83b0
jmp 0x4b8f37
mov eax, dword [eax + 4]
test eax, eax
je 0x4b8f37
push eax
push esi
mov ecx, edi
call fcn.004b05d0
jmp 0x4b8f37
test ebp, 0x200
je 0x4b83fd
push ebx
mov ecx, edi
call fcn.004ac9c0
test eax, eax
je 0x4b8f37
push eax
push esi
call fcn.004afd00
jmp 0x4b8f37
test ebp, 0x3000
jne 0x4b8f24
test ebp, 0x4000
je 0x4b8629
push ebx
mov ecx, edi
call fcn.004ac9c0
mov ebp, eax
test ebp, ebp
je 0x4b8f37
push ebx
call fcn.004acb60
test eax, eax
je 0x4b84f6
lea ecx, [ebp + 2]
push ecx
lea edx, [esp + 0x110]
push 0x5b40b0
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 2
push 0
push 0xffffff
lea eax, [esp + 0x118]
push eax
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
movzx eax, word [ebp + 0x48]
mov ecx, 0x4010
cmp ax, cx
je 0x4b8494
mov edx, 0x401a
cmp ax, dx
jne 0x4b84e1
push 0x94a
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x114]
push str._s__s
push eax
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0x118]
push ecx
mov ecx, esi
call fcn.00441480
mov edx, dword [esp + 0x14]
push 0
push edx
push ebp
push esi
mov ecx, edi
call fcn.004b1100
jmp 0x4b8f37
lea eax, [ebp + 2]
push eax
lea ecx, [esp + 0x110]
push 0x5b40b0
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 2
push 0
push 0xffffff
lea edx, [esp + 0x118]
push edx
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
movzx eax, word [ebp + 0x48]
mov ecx, 0x4000
cmp ax, cx
je 0x4b855f
mov edx, 0x4001
cmp ax, dx
je 0x4b855f
mov ecx, 0x4002
cmp ax, cx
jne 0x4b85ac
push 0x94a
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x114]
push str._s__s
push edx
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0x118]
push eax
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
lea ecx, [esp + 0x50]
push ecx
push 0xffffb0
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push ebx
mov ecx, edi
call fcn.004acb60
test eax, eax
jne 0x4b8618
push eax
push eax
push 0xffc800
push 0x104
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
mov ecx, esi
call fcn.00441480
movzx edx, word [ebp + 0x44]
push 1
push 0xc8d7aa
push edx
jmp 0x4b87b0
test ebp, 0x8000
je 0x4b87d2
push ebx
mov ecx, edi
call fcn.004ac9c0
mov ebp, eax
test ebp, ebp
je 0x4b8f37
lea eax, [ebp + 2]
push eax
lea ecx, [esp + 0x90]
push 0x5b40b0
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 2
push 0
push 0xffffff
lea edx, [esp + 0x98]
push edx
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
movzx eax, word [ebp + 0x48]
mov ecx, 0x8000
cmp ax, cx
je 0x4b86a6
mov edx, 0x8001
cmp ax, dx
jne 0x4b86f3
push 0x94b
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x94]
push str._s__s
push eax
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0x98]
push ecx
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
cmp dword [esp + 0x20], 0x8001
jne 0x4b878c
movzx edx, word [ebp + 0xe0]
push edx
push 0xee
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x94]
push eax
call fcn.00582c5f
mov ecx, dword [0x6f48ac]
mov dx, word [ecx + 0x43c]
add esp, 0xc
push 0
push 0
cmp dx, word [ebp + 0xe0]
jae 0x4b8778
push 0xe61414
lea eax, [esp + 0x98]
push eax
jmp 0x4b8785
push 0xffffff
lea ecx, [esp + 0x98]
push ecx
mov ecx, esi
call fcn.00441480
push 0
lea edx, [esp + 0x50]
push edx
push 0xffffb0
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
movzx eax, word [ebp + 0x44]
push 1
push 0xc8d7aa
push eax
push esi
mov ecx, edi
call fcn.004ac440
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
jmp 0x4b8f37
test ebp, 0x100
je 0x4b8bb7
push ebx
mov ecx, edi
call fcn.004ac9c0
mov ebp, eax
test ebp, ebp
je 0x4b8f37
lea ecx, [ebp + 2]
push ecx
lea edx, [esp + 0x110]
push 0x5b40b0
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, 0x104
add esp, 0xc
mov ecx, 0xffffff
cmp word [ebp + 0x48], ax
jne 0x4b887c
cmp word [ebp + 0x88], 0
je 0x4b887c
movzx eax, word [ebp + 0x8a]
test ax, ax
jne 0x4b8840
mov edx, dword [0x6f48ac]
cmp word [edx + 0x43c], 0x32
ja 0x4b88a0
cmp eax, 1
jne 0x4b885f
mov edx, dword [0x6f48ac]
cmp word [edx + 0x43c], 0x33
jb 0x4b88a0
cmp word [edx + 0x43c], 0x46
ja 0x4b88a0
cmp eax, 2
jne 0x4b88a5
mov eax, dword [0x6f48ac]
movzx eax, word [eax + 0x43c]
cmp eax, 0x47
jb 0x4b88a0
cmp eax, 0x5a
jbe 0x4b88a5
jmp 0x4b88a0
mov edx, dword [0x6f48ac]
movzx eax, word [edx + 0x43c]
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
fld dword [ebp + 0xdc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4b88a5
mov ecx, 0xe61414
push 2
push 0
push ecx
lea ecx, [esp + 0x118]
push ecx
mov ecx, esi
call fcn.00441480
fld dword [ebp + 0xdc]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b8959
fld dword [ebp + 0xdc]
call fcn.00582f70
push eax
push 0xee
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x5b1b0b
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x11c]
push edx
call fcn.00582c5f
mov eax, dword [0x6f48ac]
movzx ecx, word [eax + 0x43c]
mov dword [esp + 0x2c], ecx
add esp, 0x14
push 2
fild dword [esp + 0x1c]
mov ecx, esi
fld dword [ebp + 0xdc]
push 0
fcompp
fnstsw ax
test ah, 0x41
jne 0x4b8947
push 0xe61414
lea edx, [esp + 0x118]
push edx
jmp 0x4b8954
push 0xffffff
lea eax, [esp + 0x118]
push eax
call fcn.00441480
movzx eax, word [esi + 0xc]
mov ecx, eax
mov edx, 0x88
cmp cx, dx
je 0x4b8b55
mov edx, 0x85
cmp cx, dx
je 0x4b8b55
mov ecx, 0x12c
cmp word [ebp + 0x48], cx
je 0x4b8b55
mov edx, 0x83
cmp ax, dx
jne 0x4b89b4
test byte [esi + 0x29e], 1
je 0x4b89b4
push ebp
push esi
mov ecx, edi
call fcn.004ad0d0
push ebp
push esi
mov ecx, edi
call fcn.004aba10
jmp 0x4b8f37
push ebp
push esi
mov ecx, edi
call fcn.004ad0d0
cmp word [ebp + 0xe0], 0xb
jne 0x4b89a6
push 0x2c
call fcn.00582660
add esp, 4
test eax, eax
je 0x4b89dc
mov ecx, eax
call fcn.004aa410
mov eax, dword [0x6e7330]
cmp dword [eax + 0x218], 1
mov edx, dword [esi]
mov ecx, esi
jne 0x4b89f6
mov eax, dword [edx + 0x74]
call eax
push eax
jmp 0x4b89ff
mov eax, dword [edx + 0x78]
call eax
movzx ecx, ax
push ecx
lea ecx, [edi + 0x1ac]
call fcn.004612b0
mov edi, eax
test edi, edi
je 0x4b8f37
cmp dword [ebp + 0x50], 1
push 0
push 0
push 0xffffff
mov ecx, esi
push 0x5b1b0b
jne 0x4b8af3
call fcn.00441480
push 0
lea edx, [esp + 0x50]
push edx
push 0xffffb0
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x2fe
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
mov ecx, esi
call fcn.00441480
push 0x7f
lea eax, [esp + 0x91]
push 0
push eax
mov byte [esp + 0x98], 0
call fcn.005825d0
mov eax, dword [edi + 0x28]
mov ecx, eax
add esp, 0xc
mov edx, eax
shl ecx, 0x14
mov edi, eax
shr ecx, 0x1a
push ecx
shl edx, 0xe
mov ebp, eax
shr edx, 0x1a
push edx
shl edi, 8
shl ebp, 4
shr edi, 0x1a
push edi
shr eax, 0x1c
shr ebp, 0x1c
push ebp
add eax, 0xf
push eax
push 0x2ff
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0xa4]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
push 0
push 0
push 0xffc800
lea edx, [esp + 0x98]
push edx
mov ecx, esi
call fcn.00441480
jmp 0x4b8f37
call fcn.00441480
push 0
lea eax, [esp + 0x50]
push eax
push 0xffffb0
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5a2
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffc800
push 0x5a4
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
mov ecx, esi
call fcn.00441480
jmp 0x4b8f37
test byte [esi + 0x2a4], 1
push ebx
mov ecx, edi
je 0x4b8b85
call fcn.004acb60
test eax, eax
je 0x4b8ba9
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x14]
push ecx
push edx
push ebp
push esi
mov ecx, edi
call fcn.004b1100
jmp 0x4b87b8
call fcn.004acb60
test eax, eax
je 0x4b8ba9
mov eax, dword [esp + 0x1b4]
mov ecx, dword [esp + 0x14]
push eax
push ecx
push ebp
push esi
mov ecx, edi
call fcn.004b1100
jmp 0x4b8f37
push ebp
push esi
mov ecx, edi
call fcn.004ad0d0
jmp 0x4b87b8
mov eax, dword [esp + 0x20]
mov ebp, eax
and ebp, 0x80
jne 0x4b8bec
cmp eax, 0x42
je 0x4b8bec
cmp eax, 0x41
je 0x4b8bec
cmp eax, 0x43
je 0x4b8bec
push ebp
push 0x30a
push str.ItemManager.cpp
call fcn.0052b690
add esp, 0xc
jmp 0x4b8f37
push ebx
mov ecx, edi
call fcn.004ac9c0
mov ebx, eax
test ebx, ebx
je 0x4b8f37
lea edx, [ebx + 2]
push edx
lea eax, [esp + 0x90]
push 0x5b40b0
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 2
push 0
push 0xffffff
lea ecx, [esp + 0x98]
push ecx
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0x968
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x94]
push str._s__s
push edx
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0x98]
push eax
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
lea ecx, [esp + 0x50]
push ecx
push 0xffffb0
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
test ebp, ebp
je 0x4b8df5
movzx eax, word [esi + 0xc]
mov ecx, eax
mov edx, 0x88
cmp cx, dx
je 0x4b8d03
mov ecx, 0x85
cmp ax, cx
je 0x4b8d03
mov edx, dword [esi]
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
mov ebp, eax
jmp 0x4b8d09
mov ebp, dword [esi + 0x2a0]
push ebx
push esi
mov ecx, edi
call fcn.004aa990
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4b8d1d
push eax
jmp 0x4b8d26
test ebp, ebp
je 0x4b8df5
push ebp
mov ecx, 0x719e90
call fcn.00574b10
test eax, eax
je 0x4b8df5
mov ecx, dword [eax + 0xc]
fild dword [eax + 0xc]
test ecx, ecx
jns 0x4b8d48
fadd dword [0x5b1610]
fmul qword [0x5b1638]
fdiv qword [0x5b3398]
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x4b8d7c
fld1
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x4b8d7c
fstp dword [esp + 0x14]
jmp 0x4b8d7e
fstp st(0)
push 0x80
lea edx, [esp + 0x90]
push 0
push edx
call fcn.005825d0
fld dword [esp + 0x20]
fnstcw word [esp + 0x20]
add esp, 0xc
movzx eax, word [esp + 0x14]
or eax, 0xc00
mov dword [esp + 0x18], eax
mov ecx, 0x6f63d0
fldcw word [esp + 0x18]
fistp qword [esp + 0x18]
mov eax, dword [esp + 0x18]
push eax
push 0x5ec
fldcw word [esp + 0x1c]
call fcn.004d54d0
push eax
lea ecx, [esp + 0x94]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x98]
push edx
mov ecx, esi
call fcn.00441480
cmp dword [esp + 0x20], 0x41
jne 0x4b8ee1
movzx eax, word [esi + 0xc]
mov ecx, eax
mov edx, 0x88
cmp cx, dx
je 0x4b8e27
mov ecx, 0x85
cmp ax, cx
je 0x4b8e27
mov edx, dword [esi]
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
mov ebp, eax
jmp 0x4b8e2d
mov ebp, dword [esi + 0x2a0]
push 0x80
lea ecx, [esp + 0x90]
push 0
push ecx
call fcn.005825d0
movzx edx, word [ebx + 0xc8]
add esp, 0xc
push edx
push 0x5ef
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x94]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0
push 0xffffff
lea ecx, [esp + 0x98]
push ecx
mov ecx, esi
call fcn.00441480
test ebp, ebp
je 0x4b8ee1
cmp ebp, dword [0x719ea4]
jne 0x4b8ee1
push 0x80
lea edx, [esp + 0x90]
push 0
push edx
call fcn.005825d0
add esp, 0xc
push 0x5f0
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
push 0
push 0
push 0xffffff
lea ecx, [esp + 0x98]
push ecx
mov ecx, esi
call fcn.00441480
push 0
push 0
push 0xffffff
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
push 0
lea edx, [esp + 0x50]
push edx
push 0xffffb0
push 0x5b1b0b
mov ecx, esi
call fcn.00441480
movzx eax, word [ebx + 0x44]
push 1
push 0xc8d7aa
push eax
push esi
mov ecx, edi
call fcn.004ac440
jmp 0x4b8f37
push ebx
mov ecx, edi
call fcn.004ac9c0
test eax, eax
je 0x4b8f37
push eax
push esi
call fcn.004af8f0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x198], 1
call fcn.0042f100
lea ecx, [esp + 0x6c]
mov byte [esp + 0x198], 0
call fcn.0042f100
lea ecx, [esp + 0x2c]
mov dword [esp + 0x198], 0xffffffff
call fcn.0042f100
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.005825b3
add esp, 0x188
ret 0x18