Function at 0x48b2a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x555468
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x78
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x3c], esi
mov eax, dword [esi + 0xc8]
shr eax, 2
cmp eax, 2
jl 0x48be7d
mov eax, dword [esi + 0xc8]
test eax, eax
jne 0x48b2e2
xor edi, edi
jmp 0x48b2e8
mov edi, dword [esi + 0xc0]
lea ecx, [esp + 0x20]
push 0
push ecx
mov ecx, dword [edi]
push 0
lea edx, [esp + 0x40]
push 0
lea eax, [esp + 0x64]
push edx
push eax
push 0
push 0
push ecx
mov ecx, esi
mov dword [esp + 0x70], edi
call fcn.00483120
cmp eax, 0xd
jne 0x48be7d
mov ecx, dword [edi + 4]
push 0
push 0
push 0
lea edx, [esp + 0x24]
push 0
lea eax, [esp + 0x68]
push edx
push eax
push 0
push 0
push ecx
mov ecx, esi
call fcn.00483120
cmp eax, 0xd
jne 0x48be7d
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
cmp eax, ecx
jne 0x48be70
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
cmp edx, ecx
jg 0x48be70
mov ecx, dword [eax + 0xcc]
lea edi, [eax + 0xbc]
test ecx, ecx
mov dword [esp + 0x28], eax
jne 0x48b37a
xor ebp, ebp
jmp 0x48b37d
mov ebp, dword [edi + 8]
mov edx, dword [eax + 0x68]
lea ecx, [eax + 0x58]
test edx, edx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x38], ecx
jne 0x48b393
xor ebx, ebx
jmp 0x48b396
mov ebx, dword [ecx + 8]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x98]
push ecx
mov ecx, dword [eax + 0xd0]
push edx
call fcn.004530f0
test eax, eax
mov dword [esp + 0x50], eax
je 0x48be7d
mov ax, word [eax + 0x14]
cmp ax, 1
je 0x48b3ef
cmp ax, 2
je 0x48b3ef
cmp ax, 3
je 0x48b3ef
cmp ax, 4
je 0x48b3ef
cmp ax, 6
je 0x48b3ef
cmp ax, 8
je 0x48b3ef
cmp ax, 0xa
jne 0x48be7d
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x28]
test eax, eax
jle 0x48b41a
mov eax, dword [ebx + eax*4]
mov ecx, esi
add eax, ebp
push eax
call fcn.004d1ff0
cmp eax, 1
je 0x48b41a
mov eax, dword [esp + 0x34]
dec eax
test eax, eax
mov dword [esp + 0x34], eax
jg 0x48b3fb
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x48b441
mov ecx, dword [ebx + eax*4]
add ecx, ebp
push ecx
mov ecx, esi
call fcn.004d1ff0
cmp eax, 1
mov eax, dword [esp + 0x18]
je 0x48b441
dec eax
test eax, eax
mov dword [esp + 0x18], eax
jg 0x48b422
mov edx, dword [esp + 0x34]
mov ecx, dword [ebx + edx*4]
mov dword [esp + 0x1c], ecx
mov eax, dword [ebx + eax*4]
test ecx, ecx
mov dword [esp + 0x14], eax
jle 0x48b463
cmp byte [ecx + ebp - 1], 0x6d
jne 0x48b463
dec ecx
mov dword [esp + 0x1c], ecx
inc eax
mov dword [esp + 0x14], eax
lea ecx, [eax + ebp]
call fcn.004ced60
mov ecx, dword [esp + 0x14]
add ecx, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
mov esi, dword [eax + 0x68]
mov eax, dword [esp + 0x18]
shr esi, 2
inc eax
cmp eax, esi
mov dword [esp + 0x18], eax
jge 0x48b4b2
mov ecx, dword [ebx + eax*4]
add ecx, ebp
push ecx
mov ecx, dword [esp + 0x2c]
call fcn.004d1ff0
cmp eax, 1
je 0x48b4b2
mov eax, dword [esp + 0x18]
inc eax
cmp eax, esi
mov dword [esp + 0x18], eax
jl 0x48b491
mov edx, dword [esp + 0x28]
mov ecx, dword [edx + 0x7c]
lea eax, [edx + 0x6c]
test ecx, ecx
mov dword [esp + 0x40], eax
jne 0x48b4c8
xor ecx, ecx
jmp 0x48b4cb
mov ecx, dword [eax + 8]
mov eax, dword [esp + 0x28]
mov edx, dword [eax + 0x7c]
mov eax, 0x38e38e39
mul edx
shr edx, 1
xor eax, eax
mov dword [esp + 0x5c], edx
cmp edx, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x48], eax
jle 0x48b772
mov ebp, dword [esp + 0x1c]
mov dl, byte [ecx]
mov esi, dword [ecx + 1]
inc ecx
mov byte [esp + 0x2c], dl
mov eax, dword [esp + 0x2c]
add ecx, 4
and eax, 0xff
mov ebx, dword [ecx]
add ecx, 4
dec eax
cmp eax, 3
ja case.default.0x48b516
jmp dword [eax*4 + 0x48be98]
mov eax, dword [esp + 0x14]
cmp ebp, esi
jg 0x48b533
cmp eax, esi
jle 0x48b533
cmp eax, ebx
jle 0x48b5f5
jmp 0x48b537
cmp eax, ebx
jle case.default.0x48b516
cmp ebp, esi
jle case.default.0x48b516
cmp ebp, ebx
jle 0x48b5f5
jmp case.default.0x48b516
mov eax, dword [esp + 0x14]
inc ebx
cmp ebp, esi
jg 0x48b55c
cmp eax, esi
jle 0x48b55c
cmp eax, ebx
jle 0x48b606
jmp 0x48b560
cmp eax, ebx
jle 0x48b56c
cmp ebp, esi
jle 0x48b56c
cmp ebp, ebx
jl 0x48b606
mov eax, dword [esp + 0x24]
test eax, eax
jne case.default.0x48b516
cmp dl, 2
je case.default.0x48b516
cmp ebp, esi
jle case.default.0x48b516
cmp dword [esp + 0x14], ebx
jg case.default.0x48b516
mov dword [esp + 0x24], 1
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x5c]
inc eax
cmp eax, edx
mov dword [esp + 0x48], eax
jl 0x48b4f5
cmp dword [esp + 0x24], 1
jne 0x48b772
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov eax, dword [eax + 0xcc]
lea esi, [ecx + ebp]
cmp eax, edx
jl 0x48b5c6
mov eax, edx
lea ebp, [eax + ecx]
mov dword [esp + 0x24], 0
cmp esi, ebp
jae 0x48b772
mov bl, byte [esi]
cmp bl, 0x6d
mov byte [esp + 0x2c], bl
jne 0x48b64f
mov al, byte [esi]
inc esi
cmp al, 0x6d
mov byte [esp + 0x2c], al
jne 0x48b617
inc dword [esp + 0x24]
jmp 0x48b62a
mov ecx, dword [esp + 0x3c]
push 0x5a6130
add ecx, 0x60
jmp 0x48be78
mov edx, dword [esp + 0x3c]
push 0x5a60f4
lea ecx, [edx + 0x60]
jmp 0x48be78
cmp al, 0x74
jne 0x48b62a
mov eax, dword [esp + 0x24]
dec eax
mov dword [esp + 0x24], eax
je 0x48b76a
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.004d1850
add esp, 4
cmp eax, 1
jne 0x48b645
mov ecx, esi
call fcn.004ced60
add esi, eax
cmp esi, ebp
jae 0x48b772
jmp 0x48b5e4
cmp bl, 0x6b
jne 0x48b69d
mov al, byte [esi]
inc esi
cmp al, 0x6b
mov byte [esp + 0x2c], al
jne 0x48b665
inc dword [esp + 0x24]
jmp 0x48b678
cmp al, 0x72
jne 0x48b678
mov eax, dword [esp + 0x24]
dec eax
mov dword [esp + 0x24], eax
je 0x48b76a
mov edx, dword [esp + 0x2c]
push edx
call fcn.004d1850
add esp, 4
cmp eax, 1
jne 0x48b693
mov ecx, esi
call fcn.004ced60
add esi, eax
cmp esi, ebp
jae 0x48b772
jmp 0x48b654
cmp bl, 0x6c
jne 0x48b6eb
mov al, byte [esi]
inc esi
cmp al, 0x6c
mov byte [esp + 0x2c], al
jne 0x48b6b3
inc dword [esp + 0x24]
jmp 0x48b6c6
cmp al, 0x73
jne 0x48b6c6
mov eax, dword [esp + 0x24]
dec eax
mov dword [esp + 0x24], eax
je 0x48b76a
mov eax, dword [esp + 0x2c]
push eax
call fcn.004d1850
add esp, 4
cmp eax, 1
jne 0x48b6e1
mov ecx, esi
call fcn.004ced60
add esi, eax
cmp esi, ebp
jae 0x48b772
jmp 0x48b6a2
cmp bl, 0x70
jne 0x48b731
mov bl, byte [esi]
inc esi
cmp bl, 0x70
mov byte [esp + 0x2c], bl
jne 0x48b700
inc dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.004d1850
add esp, 4
cmp eax, 1
jne 0x48b71b
mov ecx, esi
call fcn.004ced60
add esi, eax
cmp bl, 0x71
jne 0x48b72b
mov eax, dword [esp + 0x24]
dec eax
mov dword [esp + 0x24], eax
je 0x48b76a
cmp esi, ebp
jae 0x48b772
jmp 0x48b6f0
mov edx, dword [esp + 0x2c]
inc esi
push edx
call fcn.004d1850
add esp, 4
cmp eax, 1
jne 0x48b758
cmp bl, 0x6e
je 0x48b95b
mov ecx, esi
call fcn.004ced60
add esi, eax
jmp 0x48b76a
cmp bl, 0x50
je 0x48b95b
cmp bl, 0x53
je 0x48b95b
cmp esi, ebp
jb 0x48b5d9
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x4c]
push 0
push 1
mov ecx, dword [esi + 0x78]
mov eax, dword [edx]
push 0
push ecx
push eax
mov ecx, esi
call fcn.004aa310
push 1
push 0
push 0
mov ecx, esi
call fcn.004aad40
lea ecx, [esp + 0x60]
call fcn.00477cf0
mov ebp, dword [esp + 0x9c]
mov ecx, dword [esp + 0x98]
mov ebx, dword [esp + 0x28]
push 0
push ebp
lea edx, [esp + 0x68]
push ecx
push edx
mov ecx, ebx
mov dword [esp + 0xa0], 0
call fcn.004d1ea0
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x70]
mov ax, word [eax + 0x14]
cmp ax, 4
je 0x48b7f9
cmp ax, 6
je 0x48b7f9
cmp ax, 8
je 0x48b7f9
cmp ax, 0xa
jne 0x48b96c
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x17]
push 1
push edx
push eax
mov ecx, edi
mov byte [esp + 0x23], 0x70
call fcn.004ef0a0
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x1c]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [esp + 0x20]
push ecx
push esi
inc edx
push eax
push edx
mov ecx, edi
call fcn.004ef0a0
mov ecx, dword [esp + 0x1c]
lea eax, [esi + 1]
push eax
push ecx
mov ecx, ebx
call fcn.004cfde0
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x74]
lea eax, [edx + esi + 1]
mov dword [esp + 0x14], eax
call fcn.00477cf0
mov ecx, dword [esp + 0x98]
inc ebp
push 0
push ebp
lea edx, [esp + 0x7c]
push ecx
push edx
mov ecx, ebx
mov byte [esp + 0xa0], 1
call fcn.004d1ea0
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x84]
push eax
lea ecx, [esp + 0x34]
push 2
push ecx
push edx
mov ecx, edi
mov dword [esp + 0x40], 0x7155
call fcn.004ef0a0
mov eax, dword [esp + 0x84]
mov ebp, dword [esp + 0x7c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
neg eax
sbb eax, eax
push ecx
and eax, ebp
push esi
add edx, 2
push eax
push edx
mov ecx, edi
call fcn.004ef0a0
mov eax, dword [esp + 0x14]
add esi, 2
push esi
push eax
mov ecx, ebx
call fcn.004cfde0
mov edi, dword [esp + 0x14]
push 4
inc edi
mov dword [esp + 0x18], edi
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
lea ecx, [esp + 0x20]
lea eax, [edx*4]
push ecx
push eax
mov ecx, esi
call fcn.00478510
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push 4
push ecx
lea eax, [edx*4 + 4]
mov ecx, esi
push eax
call fcn.00478510
mov esi, dword [esp + 0x40]
push 3
mov ecx, esi
call fcn.00477ff0
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.00478020
mov edx, dword [esp + 0x14]
mov ecx, esi
push edx
call fcn.00478020
mov esi, 0x55f890
mov byte [esp + 0x90], 0
mov dword [esp + 0x74], esi
lea ecx, [esp + 0x74]
jmp 0x48be44
mov eax, dword [esp + 0x3c]
push 0x5a6090
lea ecx, [eax + 0x60]
jmp 0x48be78
mov eax, dword [ebx + 0xcc]
mov ecx, dword [esp + 0x14]
cmp ecx, eax
jge 0x48b997
mov eax, dword [esp + 0x44]
mov cl, byte [ecx + eax]
push ecx
call fcn.004ce110
add esp, 4
cmp eax, 5
mov dword [esp + 0x2c], 0
jne 0x48b99f
mov dword [esp + 0x2c], 1
lea ecx, [esp + 0x74]
call fcn.00477cf0
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x74]
push 0
push edx
mov byte [esp + 0x98], 2
call fcn.004d1e30
mov ebp, dword [esp + 0x84]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x7c]
mov ebx, ebp
mov ax, word [eax + 0x14]
neg ebx
sbb ebx, ebx
and ebx, edx
cmp ax, 1
jne 0x48bb60
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x17]
push 1
push edx
push eax
mov ecx, edi
mov byte [esp + 0x23], 0x6b
call fcn.004ef0a0
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x1c]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [esp + 0x20]
push ecx
push esi
inc edx
push eax
push edx
mov ecx, edi
call fcn.004ef0a0
mov ecx, dword [esp + 0x1c]
lea eax, [esi + 1]
push eax
push ecx
mov ecx, dword [esp + 0x30]
call fcn.004cfde0
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x1c]
push 4
push edx
lea ecx, [eax*4]
push ecx
mov ecx, dword [esp + 0x44]
call fcn.00478510
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
inc eax
mov dword [esp + 0x18], eax
lea eax, [edx + esi + 1]
push ecx
lea edx, [esp + 0x17]
push 1
push edx
push eax
mov ecx, edi
mov dword [esp + 0x24], eax
mov dword [esp + 0x54], 0xffffffff
mov byte [esp + 0x23], 0x50
call fcn.004ef0a0
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
push ecx
inc eax
push ebp
push ebx
push eax
mov ecx, edi
mov dword [esp + 0x6c], eax
call fcn.004ef0a0
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
lea esi, [ebp + 1]
push edx
lea eax, [esp + 0x34]
push 2
lea edx, [esi + ecx]
push eax
push edx
mov ecx, edi
mov dword [esp + 0x40], 0x7251
call fcn.004ef0a0
mov eax, dword [esp + 0x14]
lea ecx, [esi + eax + 1]
add esi, 2
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x2c]
cmp ecx, 1
jne 0x48baf9
mov edx, dword [esp + 0x20]
add eax, esi
push edx
push ebp
push ebx
push eax
mov ecx, edi
mov dword [esp + 0x54], eax
call fcn.004ef0a0
mov eax, dword [esp + 0x14]
add esi, ebp
mov ecx, dword [esp + 0x28]
push esi
push eax
call fcn.004cfde0
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x38]
lea eax, [esp + 0x5c]
push 4
lea edx, [ecx*4]
push eax
push edx
mov ecx, esi
call fcn.00478510
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x44]
inc ecx
cmp eax, 0xffffffff
mov dword [esp + 0x18], ecx
je 0x48bb4a
lea eax, [esp + 0x44]
push 4
lea edx, [ecx*4]
push eax
push edx
mov ecx, esi
call fcn.00478510
mov esi, dword [esp + 0x40]
push 1
mov ecx, esi
call fcn.00477ff0
mov eax, dword [esp + 0x1c]
jmp 0x48be1b
cmp ax, 2
jne 0x48bc91
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0x17]
push 1
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x23], 0x6c
call fcn.004ef0a0
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x68]
neg eax
sbb eax, eax
mov ecx, edi
and eax, edx
mov edx, dword [esp + 0x20]
push edx
push esi
push eax
mov eax, dword [esp + 0x28]
inc eax
push eax
call fcn.004ef0a0
mov edx, dword [esp + 0x1c]
lea ecx, [esi + 1]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
call fcn.004cfde0
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x1c]
push 4
push eax
lea edx, [ecx*4]
mov ecx, dword [esp + 0x40]
push edx
call fcn.00478510
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
inc ecx
lea edx, [esp + 0x30]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x20]
push ecx
lea esi, [eax + esi + 1]
push 2
push edx
push esi
mov ecx, edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x54], 0xffffffff
mov dword [esp + 0x40], 0x7352
call fcn.004ef0a0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x2c]
cmp edx, 1
mov eax, 2
lea esi, [ecx + 1]
jne 0x48bc42
lea eax, [ecx + 2]
mov ecx, dword [esp + 0x20]
push ecx
push ebp
push ebx
push eax
mov ecx, edi
mov dword [esp + 0x54], eax
call fcn.004ef0a0
mov ecx, dword [esp + 0x14]
lea eax, [ebp + 2]
push eax
push ecx
mov ecx, dword [esp + 0x30]
call fcn.004cfde0
cmp dword [esp + 0x44], 0xffffffff
je 0x48bc70
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x44]
push 4
push edx
lea ecx, [eax*4]
push ecx
mov ecx, dword [esp + 0x44]
call fcn.00478510
mov edi, dword [esp + 0x40]
push 2
mov ecx, edi
call fcn.00477ff0
mov edx, dword [esp + 0x1c]
mov ecx, edi
push edx
call fcn.00478020
push esi
mov ecx, edi
jmp 0x48be2a
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x34]
push 2
push ecx
push edx
mov ecx, edi
mov dword [esp + 0x40], 0x6e6d
call fcn.004ef0a0
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x1c]
neg eax
sbb eax, eax
add edx, 2
and eax, ecx
mov ecx, dword [esp + 0x20]
push ecx
push esi
push eax
push edx
mov ecx, edi
call fcn.004ef0a0
mov ecx, dword [esp + 0x1c]
lea eax, [esi + 2]
push eax
push ecx
mov ecx, dword [esp + 0x30]
call fcn.004cfde0
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
inc edx
push 4
mov dword [esp + 0x20], edx
lea edx, [esp + 0x20]
lea ecx, [eax*4]
push edx
push ecx
mov ecx, dword [esp + 0x44]
call fcn.00478510
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
inc eax
mov dword [esp + 0x18], eax
lea eax, [edx + esi + 2]
push ecx
lea edx, [esp + 0x34]
push 2
push edx
push eax
mov ecx, edi
mov dword [esp + 0x24], eax
mov dword [esp + 0x54], 0xffffffff
mov dword [esp + 0x40], 0x6f53
call fcn.004ef0a0
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
push ecx
add eax, 2
push ebp
push ebx
push eax
mov ecx, edi
mov dword [esp + 0x6c], eax
call fcn.004ef0a0
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
lea esi, [ebp + 2]
push edx
lea eax, [esp + 0x34]
push 2
lea edx, [esi + ecx]
push eax
push edx
mov ecx, edi
mov dword [esp + 0x40], 0x7454
call fcn.004ef0a0
mov eax, dword [esp + 0x14]
lea ecx, [esi + eax + 1]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x2c]
add esi, 2
cmp ecx, 1
jne 0x48bdb8
mov edx, dword [esp + 0x20]
add eax, esi
push edx
push ebp
push ebx
push eax
mov ecx, edi
mov dword [esp + 0x54], eax
call fcn.004ef0a0
mov eax, dword [esp + 0x14]
add esi, ebp
mov ecx, dword [esp + 0x28]
push esi
push eax
call fcn.004cfde0
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x38]
lea eax, [esp + 0x5c]
push 4
lea edx, [ecx*4]
push eax
push edx
mov ecx, esi
call fcn.00478510
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x44]
inc ecx
cmp eax, 0xffffffff
mov dword [esp + 0x18], ecx
je 0x48be09
lea eax, [esp + 0x44]
push 4
lea edx, [ecx*4]
push eax
push edx
mov ecx, esi
call fcn.00478510
mov esi, dword [esp + 0x40]
push 4
mov ecx, esi
call fcn.00477ff0
mov eax, dword [esp + 0x1c]
dec eax
push eax
mov ecx, esi
call fcn.00478020
mov ecx, dword [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00478020
mov esi, 0x55f890
mov byte [esp + 0x90], 0
mov dword [esp + 0x74], esi
lea ecx, [esp + 0x74]
call fcn.00477ef0
mov ecx, dword [esp + 0x3c]
push 1
push 0
call fcn.004ae200
lea ecx, [esp + 0x60]
mov dword [esp + 0x90], 0xffffffff
mov dword [esp + 0x60], esi
call fcn.00477ef0
jmp 0x48be7d
push 0x5a6150
lea ecx, [esi + 0x60]
call fcn.00528088
mov ecx, dword [esp + 0x88]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x84
ret 8