Function at 0x74f280
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xcc]
cmp eax, dword [ecx + 8]
jbe 0x74fda2
sub esp, 0x14c
mov eax, 0
lea edi, [esp + 0x120]
call fcn.0044ca85
lea edi, [esp + 0x164]
xor eax, eax
call fcn.0044ca8a
lea edi, [esp + 0x108]
call fcn.0044ca8a
mov ecx, dword [esp + 0x158]
mov dword [esp], ecx
mov edx, dword [esp + 0x15c]
mov dword [esp + 4], edx
lea ebx, [0x832f5a]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
call fcn.004c8f30
mov ecx, dword [esp + 0x10]
cmp ecx, 0xffffffff
je 0x74f8dd
lea eax, [ecx + 1]
mov edx, dword [esp + 0x15c]
cmp eax, edx
ja 0x74fd9b
mov dword [esp + 0x30], ecx
sub edx, eax
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0x158]
add eax, edx
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [0x832f57]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 3
call fcn.004c76a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x15c]
cmp edx, ebx
ja 0x74fd94
mov dword [esp + 0x3c], ecx
mov ebp, dword [esp + 0x158]
mov dword [esp + 0x108], ebp
mov dword [esp + 0x10c], edx
cmp eax, 2
je 0x74f6a8
cmp eax, 3
jne 0x74f5ec
mov eax, dword [ecx + 4]
mov edx, dword [ecx]
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], eax
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
lea eax, [ecx + 8]
mov dword [esp + 4], eax
lea eax, [0x7b48a0]
mov dword [esp], eax
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x3c]
add eax, 0x10
mov dword [esp + 4], eax
lea eax, [0x7b48a0]
mov dword [esp], eax
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
lea eax, [0x833bb4]
mov dword [esp], eax
mov dword [esp + 4], 5
lea eax, [esp + 0xd8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b4c20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
lea eax, [0x7b9ec0]
mov dword [esp], eax
mov eax, dword [0xb7fcf8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x110]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040e5b0
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
je 0x74f4e6
lea edi, [esp + 0x164]
lea esi, [esp + 0x108]
call fcn.0044cf64
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], 0
add esp, 0x14c
ret
mov eax, dword [esp + 0x158]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x64], eax
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea ecx, [esp + 0x60]
mov dword [esp + 4], ecx
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ecx
lea eax, [0x7b48a0]
mov dword [esp], eax
lea eax, [esp + 0x110]
mov dword [esp + 4], eax
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], ecx
lea eax, [0x845d3d]
mov dword [esp], eax
mov dword [esp + 4], 0x23
lea eax, [esp + 0x98]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b4cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x5c], ecx
lea edi, [esp + 0x164]
lea esi, [esp + 0x108]
call fcn.0044cf64
mov dword [esp + 0x17c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x180], eax
add esp, 0x14c
ret
mov dword [esp + 0x88], ebp
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea eax, [esp + 0x88]
mov dword [esp + 4], eax
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], eax
lea eax, [0x84b7fc]
mov dword [esp], eax
mov dword [esp + 4], 0x30
lea eax, [esp + 0x90]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b4cd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
lea edi, [esp + 0x164]
lea esi, [esp + 0x108]
call fcn.0044cf64
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x14c
ret
mov eax, dword [ecx + 4]
mov edx, dword [ecx]
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], eax
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
lea eax, [0x7ba640]
mov dword [esp], eax
mov eax, dword [0xb7fcd4]
mov dword [esp + 4], eax
call fcn.0040e910
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [eax + 4]
mov eax, dword [eax]
test cl, cl
je 0x74f7d1
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea ecx, [esp + 0x78]
mov dword [esp + 4], ecx
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], ecx
mov eax, dword [esp + 0x3c]
add eax, 8
mov dword [esp + 4], eax
lea eax, [0x7b48a0]
mov dword [esp], eax
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], ecx
lea eax, [0x833bb4]
mov dword [esp], eax
mov dword [esp + 4], 5
lea eax, [esp + 0xe8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b4c20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
jmp 0x74f47d
mov eax, dword [esp + 0x158]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x84], eax
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea ecx, [esp + 0x80]
mov dword [esp + 4], ecx
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], ecx
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
lea eax, [0x7b48a0]
mov dword [esp], eax
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
lea eax, [0x845d1a]
mov dword [esp], eax
mov dword [esp + 4], 0x23
lea eax, [esp + 0xf8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b4cd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x5c], ecx
lea edi, [esp + 0x164]
lea esi, [esp + 0x108]
call fcn.0044cf64
mov dword [esp + 0x17c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x180], eax
add esp, 0x14c
ret
mov eax, dword [esp + 0x160]
mov dword [esp], eax
call fcn.007241f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
test edx, edx
jne 0x74fd65
mov dword [esp + 0x38], eax
mov ecx, dword [0xb7fcc0]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [eax + 8], edx
mov edx, dword [0xb92b90]
test edx, edx
jne 0x74fd56
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x158]
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0x10c], ecx
lea edx, [0x833af5]
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], 4
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00624f20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
test ecx, ecx
jne 0x74fa2c
mov eax, dword [esp + 0x158]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
lea eax, [0x7b48a0]
mov dword [esp], eax
lea eax, [esp + 0x68]
mov dword [esp + 4], eax
call fcn.004074b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
lea eax, [0x8516be]
mov dword [esp], eax
mov dword [esp + 4], 0x5e
lea eax, [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b4cd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
lea edi, [esp + 0x164]
lea esi, [0x8b5090]
call fcn.0044cf64
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], eax
add esp, 0x14c
ret
test edx, edx
je 0x74f97b
mov dword [esp + 0x44], eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x4c], ebx
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x40], eax
call fcn.0040a6c0
mov eax, dword [esp]
mov dword [esp + 0x58], eax
lea edi, [esp + 0x120]
xor eax, eax
call fcn.0044ca85
lea edi, [esp + 0x120]
call fcn.0044ca85
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x130], eax
lea eax, [esp + 0x120]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.007345e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test ecx, ecx
jne 0x74fd27
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004c8110
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
cmp ecx, 8
jge 0x74fd03
xor eax, eax
test al, al
je 0x74fc65
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov eax, dword [esp + 0x150]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0xd4], ecx
lea edx, [esp + 0xc8]
mov dword [esp], edx
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.004d2e00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x24], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1ed
call fcn.00490d80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x74fc36
lea edi, [esp + 0xb8]
lea esi, [0x8b2470]
call fcn.0044cf78
mov eax, dword [esp + 0x48]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xbc], eax
lea eax, [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.004d2e00
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x118], ecx
mov dword [esp + 0x11c], eax
jmp 0x74f47d
mov dword [esp + 0x54], ecx
lea edi, [esp + 0x164]
lea esi, [0x8b5050]
call fcn.0044cf64
mov dword [esp + 0x17c], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x180], eax
add esp, 0x14c
ret
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov eax, dword [esp + 0x150]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0xb4], ecx
lea edx, [esp + 0xa8]
mov dword [esp], edx
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call fcn.004d2e00
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
jmp 0x74f47d
mov dword [esp], eax
lea eax, [0x836da1]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004021f0
movzx eax, byte [esp + 0xc]
jmp 0x74fb19
mov dword [esp + 0x2c], ecx
lea edi, [esp + 0x164]
lea esi, [0x8b50b0]
call fcn.0044cf64
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], edx
add esp, 0x14c
ret
lea edi, [eax + 4]
mov eax, ecx
call fcn.0044c990
jmp 0x74f923
mov dword [esp + 0x50], ecx
lea edi, [esp + 0x164]
lea esi, [0x8b5070]
call fcn.0044cf64
mov dword [esp + 0x17c], edx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x180], eax
add esp, 0x14c
ret
call fcn.004265e0
ud2
call fcn.004265e0
ud2
call fcn.0044b230
jmp fcn.0074f280