Function at 0x4a6ff0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5d8d34]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x50]
cmp eax, dword [ecx + 8]
jbe 0x4a7ad4
sub esp, 0xd0
mov ebx, dword [esp + 0xe0]
mov ebp, ebx
and ebx, 0x1f
nop
cmp ebx, 0xa
jbe 0x4a7535
cmp ebx, 0xf
jbe 0x4a7226
cmp ebx, 0x11
ja 0x4a7186
cmp ebx, 0x10
je 0x4a7069
nop
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00481870
mov eax, dword [esp + 0xc]
mov dword [esp + 0x4c], eax
xor ecx, ecx
jmp 0x4a7acb
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4a7a67
cmp eax, ecx
ja 0x4a7a62
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xd4]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 8]
mov dword [edx + 0x14], ebp
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov eax, dword [edx + 0x10]
lea ecx, [ebx + 0x10]
cmp eax, ecx
jb 0x4a7a5b
cmp ecx, ebp
jb 0x4a7a54
movsd xmm0, qword [esp + 0x68]
movsd qword [esp + 0x40], xmm0
mov ecx, dword [edx]
mov esi, dword [edx + 4]
mov ecx, dword [ecx + 0x24]
mov edi, dword [edx + 8]
mov dword [esp], esi
sub eax, ebx
add eax, 0xfffffff8
mov ebx, eax
neg eax
sar eax, 0x1f
and ebp, eax
lea eax, [edi + ebp]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebx
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
movsd xmm0, qword [esp + 0x60]
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x40]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.00482240
jmp 0x4a7859
cmp ebx, 0x17
jne 0x4a71a1
nop
mov eax, dword [esp + 0xdc]
mov ecx, dword [eax + 4]
mov dword [esp + 0x48], ecx
xor edx, edx
jmp 0x4a7a4b
cmp ebx, 0x19
jne 0x4a7859
test ebp, 0x200
jne 0x4a71c1
lea eax, [0x516e5c]
mov ecx, dword [esp + 0xd8]
jmp 0x4a71ee
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.00482710
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0xe0]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00481ee0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
xor ecx, ecx
jmp 0x4a78c8
cmp ebx, 0xd
ja 0x4a7373
cmp ebx, 0xb
jne 0x4a72ca
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4a78b8
cmp eax, ecx
ja 0x4a78b3
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004824c0
jmp 0x4a7859
cmp ebx, 0xd
jne 0x4a7859
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4a78ae
cmp eax, ecx
ja 0x4a78a9
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x20]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov dword [esp + 0x80], eax
movss xmm0, dword [esp + 0x80]
cvtss2sd xmm0, xmm0
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.00482310
jmp 0x4a7859
cmp ebx, 0xe
jne 0x4a741a
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4a78a4
cmp eax, ecx
ja 0x4a789f
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xd4]
add dword [edx + 0x14], 8
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
movsd xmm0, qword [esp + 0x78]
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.00482310
jmp 0x4a7859
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4a789a
cmp eax, ecx
ja 0x4a7895
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x20]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
mov edx, dword [ecx + 0x14]
lea ebx, [edx + 4]
mov dword [ecx + 0x14], ebx
mov dword [esp + 0x74], eax
mov eax, dword [ecx + 0x10]
lea ebp, [edx + 8]
cmp eax, ebp
jb 0x4a788c
cmp ebp, ebx
jb 0x4a7883
movss xmm0, dword [esp + 0x74]
cvtss2sd xmm0, xmm0
movsd qword [esp + 0x88], xmm0
mov ebp, dword [ecx]
mov esi, dword [ecx + 4]
mov ebp, dword [ebp + 0x20]
mov edi, dword [ecx + 8]
mov dword [esp], esi
sub eax, edx
add eax, 0xfffffffc
mov edx, eax
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [edi + ebx]
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], edx
call ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov dword [esp + 0x70], eax
movss xmm0, dword [esp + 0x70]
cvtss2sd xmm0, xmm0
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x88]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.00482240
jmp 0x4a7859
cmp ebx, 5
ja 0x4a7689
cmp ebx, 3
ja 0x4a75f3
cmp ebx, 1
jne 0x4a7598
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4a787e
mov ecx, dword [edx + 8]
movzx ecx, byte [ecx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
test cl, cl
setne al
mov byte [esp + 0xc], al
call fcn.00482180
jmp 0x4a7859
cmp ebx, 3
jne 0x4a7859
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
nop
cmp ecx, eax
jbe 0x4a7879
mov ecx, dword [edx + 8]
add ecx, eax
movsx ecx, byte [ecx]
mov ebx, ecx
sar ecx, 0x1f
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.004823d0
jmp 0x4a7859
cmp ebx, 4
jne 0x4a7641
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004a6e60
movsx eax, word [esp + 4]
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
call fcn.004823d0
jmp 0x4a7859
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004a6ee0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
call fcn.004823d0
jmp 0x4a7859
cmp ebx, 8
ja 0x4a7738
cmp ebx, 6
je 0x4a76ef
cmp ebx, 8
jne 0x4a7859
mov edx, dword [esp + 0xd4]
mov ecx, dword [edx + 0xc]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4a7874
mov ecx, dword [edx + 8]
movzx ecx, byte [ecx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
call fcn.004824c0
jmp 0x4a7859
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
call fcn.004a6f60
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xd8]
mov dword [esp], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.004823d0
jmp 0x4a7859
cmp ebx, 9
jne 0x4a77d4
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 2]
cmp edx, ecx
jb 0x4a786f
cmp eax, ecx
ja 0x4a786a
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x1c]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 2
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004824c0
jmp 0x4a7859
mov ebx, dword [esp + 0xd4]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4a7865
cmp eax, ecx
ja 0x4a7860
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x20]
mov esi, dword [ebx + 8]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd4]
add dword [ecx + 0x14], 4
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004824c0
add esp, 0xd0
ret
call fcn.0046cc10
call fcn.0046cbf0
call fcn.0046cc10
call fcn.0046cbf0
call fcn.0046cbb0
call fcn.0046cbb0
call fcn.0046cbb0
mov eax, ebx
mov ecx, ebp
call fcn.0046cc10
mov ecx, ebp
mov edx, eax
call fcn.0046cbf0
call fcn.0046cc10
call fcn.0046cbf0
call fcn.0046cc10
call fcn.0046cbf0
call fcn.0046cc10
call fcn.0046cbf0
call fcn.0046cc10
call fcn.0046cbf0
mov edx, dword [esp + 0x58]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x50]
cmp ecx, eax
jge 0x4a7859
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.00481540
mov eax, dword [esp + 0x18]
mov ecx, eax
and eax, 0x160
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, 0x100
je 0x4a798a
mov dword [esp + 0xcc], edx
mov dword [esp + 0x84], ecx
mov dword [esp + 0xc8], ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x30]
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov ebx, dword [esp + 0x58]
mov dword [esp + 4], ebx
call ecx
lea edi, [esp + 0x94]
lea esi, [esp + 8]
call fcn.0046d21e
cmp dword [esp + 0x98], 1
je 0x4a7964
mov eax, 1
jmp 0x4a7971
mov eax, dword [esp + 0x94]
cmp byte [eax], 0x5f
setne al
test al, al
je 0x4a79b1
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0xc8]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004a6ff0
mov eax, dword [esp + 0xd4]
jmp 0x4a78bd
mov eax, dword [esp + 0xcc]
mov dword [esp], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], eax
call fcn.004a6940
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax + 0x14]
add ecx, dword [esp + 0xc]
mov dword [eax + 0x14], ecx
jmp 0x4a78bd
mov dword [esp + 0x54], edx
mov ecx, dword [esp + 0xd8]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.00481630
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004a6ff0
mov eax, dword [esp + 0x54]
lea edx, [eax + 1]
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x48]
mov ebp, dword [esp + 0xe0]
cmp edx, ecx
jl 0x4a79ec
jmp 0x4a7859
mov eax, ebp
call fcn.0046cc10
mov edx, eax
call fcn.0046cbf0
call fcn.0046cc10
call fcn.0046cbf0
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov edx, dword [esp + 0xdc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xe0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.00481630
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004a6ff0
mov eax, dword [esp + 0x5c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x4c]
cmp ecx, eax
jl 0x4a7a6c
jmp 0x4a7859
call fcn.0046b730
jmp fcn.004a6ff0