Function at 0x4b8840
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x4c]
cmp eax, dword [ecx + 8]
jbe 0x4b9329
sub esp, 0xcc
nop
mov ebx, dword [esp + 0xdc]
mov ebp, ebx
and ebx, 0x1f
cmp ebx, 0xa
jbe 0x4b8d88
cmp ebx, 0xf
jbe 0x4b8a7c
cmp ebx, 0x11
ja 0x4b89dc
cmp ebx, 0x10
je 0x4b88bb
nop
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004b3450
mov eax, dword [esp + 0xc]
mov dword [esp + 0x48], eax
xor ecx, ecx
jmp 0x4b9320
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4b92bc
cmp eax, ecx
ja 0x4b92b7
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 8]
mov dword [edx + 0x14], ebp
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], ecx
movsd xmm0, qword [esp + 0x7c]
mov eax, dword [edx + 0x10]
mov ecx, dword [edx + 8]
lea esi, [ebx + 0x10]
cmp eax, esi
jb 0x4b92ae
cmp esi, ebp
jb 0x4b92a5
movsd qword [esp + 0x6c], xmm0
mov esi, dword [edx]
mov edi, dword [edx + 4]
mov esi, dword [esi + 0x28]
mov dword [esp], edi
sub eax, ebx
add eax, 0xfffffff8
mov ebx, eax
neg eax
sar eax, 0x1f
and ebp, eax
lea eax, [ebp + ecx]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebx
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], ecx
movsd xmm0, qword [esp + 0x74]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movsd xmm1, qword [esp + 0x6c]
movsd qword [esp + 0xc], xmm1
movsd qword [esp + 0x14], xmm0
call fcn.004b4350
jmp 0x4b90b1
cmp ebx, 0x17
jne 0x4b89f7
nop
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax + 4]
mov dword [esp + 0x44], ecx
xor edx, edx
jmp 0x4b929c
cmp ebx, 0x19
jne 0x4b90b1
test ebp, 0x200
jne 0x4b8a17
lea eax, [0x68dc64]
mov ecx, dword [esp + 0xd4]
jmp 0x4b8a44
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004b4b40
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0xdc]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.004b3f20
mov eax, dword [esp + 0xc]
mov dword [esp + 0x4c], eax
xor ecx, ecx
jmp 0x4b9120
cmp ebx, 0xd
ja 0x4b8bc3
cmp ebx, 0xb
jne 0x4b8b20
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4b9110
cmp eax, ecx
ja 0x4b910b
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004b45d0
jmp 0x4b90b1
cmp ebx, 0xd
jne 0x4b90b1
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4b9106
cmp eax, ecx
ja 0x4b9101
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov dword [esp + 0x64], eax
movss xmm0, dword [esp + 0x64]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
cvtss2sd xmm0, xmm0
movsd qword [esp + 0xc], xmm0
call fcn.004b4420
jmp 0x4b90b1
cmp ebx, 0xe
jne 0x4b8c73
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 8]
cmp edx, ecx
jb 0x4b90fc
cmp eax, ecx
ja 0x4b90f7
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x28]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
add dword [edx + 0x14], 8
mov dword [esp + 0x88], eax
mov dword [esp + 0x84], ecx
movsd xmm0, qword [esp + 0x84]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.004b4420
jmp 0x4b90b1
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4b90f2
cmp eax, ecx
ja 0x4b90ed
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
mov edx, dword [ecx + 0x14]
lea ebx, [edx + 4]
mov dword [ecx + 0x14], ebx
mov dword [esp + 0x60], eax
movss xmm0, dword [esp + 0x60]
mov eax, dword [ecx + 0x10]
mov ebp, dword [ecx + 8]
lea esi, [edx + 8]
cmp eax, esi
jb 0x4b90e4
cmp esi, ebx
jb 0x4b90db
movss dword [esp + 0x40], xmm0
mov esi, dword [ecx]
mov edi, dword [ecx + 4]
mov esi, dword [esi + 0x24]
mov dword [esp], edi
sub eax, edx
add eax, 0xfffffffc
mov edx, eax
neg eax
sar eax, 0x1f
and ebx, eax
lea eax, [ebx + ebp]
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], edx
call esi
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov dword [esp + 0x5c], eax
movss xmm0, dword [esp + 0x5c]
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 8], eax
movss xmm1, dword [esp + 0x40]
cvtss2sd xmm1, xmm1
movsd qword [esp + 0xc], xmm1
cvtss2sd xmm0, xmm0
movsd qword [esp + 0x14], xmm0
call fcn.004b4350
jmp 0x4b90b1
cmp ebx, 5
ja 0x4b8ee1
cmp ebx, 3
ja 0x4b8e47
cmp ebx, 1
jne 0x4b8deb
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4b90d6
movzx ecx, byte [ebx + eax]
test cl, cl
setne cl
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov byte [esp + 0xc], cl
call fcn.004b4290
jmp 0x4b90b1
cmp ebx, 3
jne 0x4b90b1
nop
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4b90d1
lea ecx, [ebx + eax]
movsx ecx, byte [ecx]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov eax, ecx
sar ecx, 0x1f
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.004b44e0
jmp 0x4b90b1
cmp ebx, 4
jne 0x4b8e97
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004b86b0
movsx eax, word [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004b44e0
jmp 0x4b90b1
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004b8730
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004b44e0
jmp 0x4b90b1
cmp ebx, 8
ja 0x4b8f90
cmp ebx, 6
je 0x4b8f47
cmp ebx, 8
jne 0x4b90b1
mov edx, dword [esp + 0xd0]
mov ecx, dword [edx + 0xc]
mov ebx, dword [edx + 8]
mov eax, dword [edx + 0x14]
cmp ecx, eax
jbe 0x4b90cc
movzx ecx, byte [ebx + eax]
inc eax
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
call fcn.004b45d0
jmp 0x4b90b1
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004b87b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.004b44e0
jmp 0x4b90b1
cmp ebx, 9
jne 0x4b902c
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 2]
cmp edx, ecx
jb 0x4b90c7
cmp eax, ecx
ja 0x4b90c2
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x20]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
call ecx
movzx eax, word [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 2
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004b45d0
jmp 0x4b90b1
mov ebx, dword [esp + 0xd0]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x14]
lea ecx, [eax + 4]
cmp edx, ecx
jb 0x4b90bd
cmp eax, ecx
ja 0x4b90b8
mov ecx, dword [ebx]
mov ebp, dword [ebx + 4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], ebp
sub edx, eax
mov ebp, edx
neg edx
sar edx, 0x1f
and eax, edx
add eax, esi
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xd0]
add dword [ecx + 0x14], 4
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
call fcn.004b45d0
add esp, 0xcc
ret
call fcn.004625e0
call fcn.004625c0
call fcn.004625e0
call fcn.004625c0
call fcn.00462580
call fcn.00462580
call fcn.00462580
mov eax, ebx
mov ecx, esi
call fcn.004625e0
mov ecx, esi
mov edx, eax
call fcn.004625c0
call fcn.004625e0
call fcn.004625c0
call fcn.004625e0
call fcn.004625c0
call fcn.004625e0
call fcn.004625c0
call fcn.004625e0
call fcn.004625c0
mov edx, dword [esp + 0x54]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x4c]
cmp ecx, eax
jge 0x4b90b1
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004b2b70
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, ecx
and ecx, 0x160
cmp ecx, 0x100
je 0x4b91de
mov dword [esp + 0x68], ebx
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x8c]
mov dword [esp], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 4], ebx
call ecx
lea edi, [esp + 0x98]
lea esi, [esp + 8]
call fcn.00462c2e
mov eax, dword [esp + 0x98]
cmp dword [esp + 0x9c], 1
je 0x4b91c2
mov eax, 1
jmp 0x4b91c8
cmp byte [eax], 0x5f
setne al
test al, al
je 0x4b9205
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x68]
mov ecx, dword [esp + 0xd0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.004b8840
mov eax, dword [esp + 0xd0]
jmp 0x4b9115
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
call fcn.004b82f0
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax + 0x14]
add ecx, dword [esp + 0xc]
mov dword [eax + 0x14], ecx
jmp 0x4b9115
mov dword [esp + 0x50], edx
mov ecx, dword [esp + 0xd4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.004b30b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004b8840
mov eax, dword [esp + 0x50]
lea edx, [eax + 1]
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x44]
mov ebp, dword [esp + 0xdc]
cmp edx, ecx
jl 0x4b923d
jmp 0x4b90b1
mov eax, ebp
mov ecx, esi
call fcn.004625e0
mov ecx, esi
mov edx, eax
call fcn.004625c0
call fcn.004625e0
call fcn.004625c0
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0xd4]
mov dword [esp], eax
mov edx, dword [esp + 0xd8]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004b30b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.004b8840
mov eax, dword [esp + 0x58]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x48]
cmp ecx, eax
jl 0x4b92c1
jmp 0x4b90b1
call fcn.004610f0
jmp fcn.004b8840