Function at 0x4d6e40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x52c152
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2c4
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0xb4], 0x530160
mov word [esp + 0xb8], 0xffff
mov word [esp + 0xba], bx
mov dword [esp + 0x2dc], ebx
mov edi, 0x548aa0
mov esi, 0x548a98
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549448
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa1d0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549604
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x5495fc
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x5495f4
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
mov ecx, dword [0x5540a8]
lea eax, [esp + 0xb4]
push eax
call fcn.004fa550
cmp ax, 0xffff
je 0x4d7ba7
movsx eax, word [esp + 0xb8]
sub eax, ebx
je 0x4d7970
dec eax
je 0x4d76ee
dec eax
jne 0x4d6e95
push 6
push 0x5495f4
lea ecx, [esp + 0xb0]
call fcn.004f58e0
mov cl, byte [esp + 0x13]
mov dword [esp + 0x84], ebx
mov byte [esp + 0x80], cl
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0x44], ebx
mov byte [esp + 0x40], dl
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
push 6
push 0x5495ec
lea ecx, [esp + 0x38]
mov byte [esp + 0x2e4], 0x11
call fcn.004f58e0
push ebx
lea ecx, [esp + 0x24]
mov byte [esp + 0x2e0], 0x12
call fcn.004f5870
mov eax, 0x548a70
mov byte [esp + 0x2dc], 0x13
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], eax
mov eax, 0x548a68
mov dword [esp + 0xc4], 0x548a60
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], eax
mov eax, 0x548a58
mov dword [esp + 0xc8], 0x548a50
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], eax
mov eax, 0x548a48
mov dword [esp + 0xcc], 0x548a40
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov eax, 0x548a38
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov eax, 0x548a30
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov eax, 0x548a28
mov dword [esp + 0xd0], 0x548a20
mov dword [esp + 0xd4], 0x548a18
mov dword [esp + 0xd8], 0x548a10
mov dword [esp + 0xdc], 0x548a08
mov dword [esp + 0xe0], 0x548a00
mov dword [esp + 0xe4], 0x5489f8
mov dword [esp + 0xe8], 0x5489f0
mov dword [esp + 0xec], 0x5489e8
mov dword [esp + 0x100], 0x5489e0
mov dword [esp + 0x104], 0x5489d8
mov dword [esp + 0x108], edi
mov dword [esp + 0x10c], edi
mov dword [esp + 0x110], edi
mov dword [esp + 0x114], edi
mov dword [esp + 0x118], edi
mov dword [esp + 0x11c], edi
mov dword [esp + 0x12c], esi
mov dword [esp + 0x130], esi
mov dword [esp + 0x134], esi
mov dword [esp + 0x138], esi
mov dword [esp + 0x13c], esi
mov dword [esp + 0x140], esi
mov dword [esp + 0x160], 0x5489d0
mov dword [esp + 0x164], 0x5489c8
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], eax
mov eax, 0x5489c0
mov dword [esp + 0x170], 0x5489b8
mov dword [esp + 0x218], eax
mov dword [esp + 0x21c], eax
mov eax, 0x5489b0
mov dword [esp + 0x174], 0x5489a8
mov dword [esp + 0x178], 0x5489a0
mov dword [esp + 0x17c], 0x548998
mov dword [esp + 0x180], 0x548990
mov dword [esp + 0x184], 0x548988
mov dword [esp + 0x188], 0x548980
mov dword [esp + 0x18c], 0x548978
mov dword [esp + 0x190], 0x548970
mov dword [esp + 0x194], 0x548968
mov dword [esp + 0x198], 0x548960
mov dword [esp + 0x19c], 0x548958
mov dword [esp + 0x1a0], 0x548950
mov dword [esp + 0x1a4], 0x548948
mov dword [esp + 0x1a8], 0x548940
mov dword [esp + 0x1ac], 0x548938
mov dword [esp + 0x1b0], 0x548930
mov dword [esp + 0x1b4], 0x548928
mov dword [esp + 0x1b8], 0x548920
mov dword [esp + 0x1bc], 0x548918
mov dword [esp + 0x1c0], 0x548910
mov dword [esp + 0x1c4], 0x548908
mov dword [esp + 0x1c8], 0x548900
mov dword [esp + 0x1cc], 0x5488f8
mov dword [esp + 0x1d0], 0x5488f0
mov dword [esp + 0x1d4], 0x5488e8
mov dword [esp + 0x1d8], 0x5488e0
mov dword [esp + 0x1dc], 0x5488d8
mov dword [esp + 0x1e0], 0x5488d0
mov dword [esp + 0x1e4], 0x5488c8
mov dword [esp + 0x1e8], 0x5488c0
mov dword [esp + 0x1ec], 0x5488b8
mov dword [esp + 0x1f0], 0x5488b0
mov dword [esp + 0x1f4], 0x5488a8
mov dword [esp + 0x1f8], 0x5488a0
mov dword [esp + 0x1fc], 0x548898
mov dword [esp + 0x200], 0x548890
mov dword [esp + 0x204], 0x548888
mov dword [esp + 0x208], 0x548880
mov dword [esp + 0x20c], 0x548878
mov dword [esp + 0x210], 0x548870
mov dword [esp + 0x214], 0x548868
mov dword [esp + 0x220], eax
mov dword [esp + 0x224], eax
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], eax
mov dword [esp + 0x230], 0x548860
mov dword [esp + 0x234], 0x548858
mov dword [esp + 0x238], 0x548850
mov dword [esp + 0x23c], 0x548848
mov dword [esp + 0x240], 0x548840
mov dword [esp + 0x244], 0x548838
mov dword [esp + 0x248], 0x548830
mov dword [esp + 0x24c], 0x548828
mov dword [esp + 0x250], 0x548820
mov dword [esp + 0x254], 0x548818
mov dword [esp + 0x258], 0x54d1c8
mov dword [esp + 0x25c], 0x54d1c0
mov dword [esp + 0x260], 0x54d1b8
mov dword [esp + 0x264], 0x54d1b0
mov dword [esp + 0x268], 0x54d1a8
mov dword [esp + 0x26c], 0x54d1a0
mov dword [esp + 0x270], 0x54d198
mov dword [esp + 0x274], 0x54d190
mov dword [esp + 0x278], 0x54d188
mov dword [esp + 0x27c], 0x54d180
mov dword [esp + 0x280], 0x54d178
mov dword [esp + 0x284], 0x54d170
mov dword [esp + 0x288], 0x54d168
mov dword [esp + 0x28c], 0x54d160
mov dword [esp + 0x290], 0x54d158
mov dword [esp + 0x294], 0x54d150
mov dword [esp + 0x298], 0x54d148
mov dword [esp + 0x29c], 0x54d140
mov dword [esp + 0x2a0], 0x54d138
mov dword [esp + 0x2a4], 0x54d130
mov dword [esp + 0x2a8], 0x54d128
mov dword [esp + 0x2ac], 0x54d120
mov dword [esp + 0x2b0], 0x54d118
mov dword [esp + 0x2b4], 0x54d110
mov dword [esp + 0x2b8], 0x54d108
mov dword [esp + 0x2bc], 0x54d100
mov dword [esp + 0x2c0], 0x54d0f8
mov dword [esp + 0x2c4], 0x54d0f0
mov dword [esp + 0x2c8], 0x54d0e8
mov dword [esp + 0x2cc], 0x54d0e0
mov dword [esp + 0x2d0], 0x54d0d8
mov byte [esp + 0x28], bl
lea ebp, [esp + 0xbc]
mov al, bl
cmp al, 0x45
jb 0x4d7535
cmp al, 0x49
jbe 0x4d759a
cmp al, 0x52
je 0x4d759a
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x30]
push eax
push 5
call fcn.004f5c80
mov edx, dword [esp + 0x88]
lea ecx, [esp + 0x30]
push ecx
push 1
push edx
lea ecx, [esp + 0x8c]
call fcn.00401810
mov eax, dword [ebp]
push 7
push eax
lea ecx, [esp + 0x28]
call fcn.004f5de0
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x20]
call fcn.004d3100
mov eax, dword [esp + 0x48]
lea edx, [esp + 0x20]
push edx
push 1
push eax
lea ecx, [esp + 0x4c]
call fcn.00401810
mov al, byte [esp + 0x28]
inc al
add ebp, 4
cmp al, 0x85
mov byte [esp + 0x28], al
jbe 0x4d752d
push 0x4dd470
lea edx, [esp + 0x44]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.00401130
sub esp, 0x10
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
mov byte [esp + 0x304], 0x14
call fcn.00401130
push ecx
lea edx, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0xd4], esp
push edx
mov byte [esp + 0x308], 0x15
call fcn.004f5850
mov ecx, dword [esp + 0x44]
mov byte [esp + 0x304], 0x13
call fcn.004d7de0
cmp al, bl
mov byte [esp + 0x2dc], 0x12
lea ecx, [esp + 0x20]
je 0x4d7baf
call fcn.004f5980
lea ecx, [esp + 0x30]
mov byte [esp + 0x2dc], 0x11
call fcn.004f5980
mov eax, dword [esp + 0x48]
mov ebp, dword [esp + 0x44]
cmp ebp, eax
mov byte [esp + 0x2dc], 0x10
mov dword [esp + 0x14], eax
je 0x4d7668
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x4d7652
mov ebp, dword [esp + 0x44]
push ebp
call fcn.00514140
mov eax, dword [esp + 0x8c]
mov ebp, dword [esp + 0x88]
add esp, 4
cmp ebp, eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x2dc], 0xf
mov dword [esp + 0x14], eax
je 0x4d76b4
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x4d769b
mov ebp, dword [esp + 0x84]
push ebp
call fcn.00514140
add esp, 4
lea ecx, [esp + 0xa8]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x2dc], bl
call fcn.004f5980
mov ebp, dword [esp + 0x1c]
jmp 0x4d6e95
push 6
push 0x5495fc
lea ecx, [esp + 0xa8]
call fcn.004f58e0
mov al, byte [esp + 0x13]
mov dword [esp + 0x74], ebx
mov byte [esp + 0x70], al
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov cl, byte [esp + 0x13]
mov dword [esp + 0x54], ebx
mov byte [esp + 0x50], cl
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
push 6
push 0x5495e4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2e4], 0xa
call fcn.004f58e0
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2e0], 0xb
call fcn.004f5870
mov byte [esp + 0x2dc], 0xc
mov byte [esp + 0x2c], bl
mov al, byte [esp + 0x2c]
cmp al, bl
jne 0x4d7770
push 6
push 0x548808
jmp 0x4d77dc
cmp al, 1
jne 0x4d777d
push 6
push 0x548800
jmp 0x4d77dc
cmp al, 2
jne 0x4d778a
push 6
push 0x5487f8
jmp 0x4d77dc
jbe 0x4d7799
cmp al, 0x19
ja 0x4d779d
push 6
push 0x5487f0
jmp 0x4d77dc
cmp al, 0x19
jbe 0x4d77aa
cmp al, 0x1d
ja 0x4d77aa
push 6
push 0x5487e8
jmp 0x4d77dc
cmp al, 0x1e
jne 0x4d77b7
push 6
push 0x5487e0
jmp 0x4d77dc
cmp al, 0x1f
jne 0x4d77c4
push 6
push 0x5487d8
jmp 0x4d77dc
cmp al, 0x20
jne 0x4d77d1
push 6
push 0x5487d0
jmp 0x4d77dc
cmp al, 0x21
jne 0x4d77e5
push 6
push 0x5487c8
lea ecx, [esp + 0x20]
call fcn.004f5de0
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x24]
push edx
push 5
call fcn.004f5c80
mov ecx, dword [esp + 0x78]
lea eax, [esp + 0x24]
push eax
push 1
push ecx
lea ecx, [esp + 0x7c]
call fcn.00401810
lea edx, [esp + 0x18]
mov ecx, ebp
push edx
call fcn.004d3100
mov ecx, dword [esp + 0x58]
lea eax, [esp + 0x18]
push eax
push 1
push ecx
lea ecx, [esp + 0x5c]
call fcn.00401810
mov al, byte [esp + 0x2c]
inc al
cmp al, 0x21
mov byte [esp + 0x2c], al
jbe 0x4d775f
push 0x4dcb90
lea edx, [esp + 0x54]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0xc0], esp
push edx
call fcn.00401130
sub esp, 0x10
lea eax, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
mov byte [esp + 0x304], 0xd
call fcn.00401130
push ecx
lea edx, [esp + 0xc8]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
mov byte [esp + 0x308], 0xe
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x304], 0xc
call fcn.004d7de0
cmp al, bl
mov byte [esp + 0x2dc], 0xb
lea ecx, [esp + 0x18]
je 0x4d7c64
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x2dc], 0xa
call fcn.004f5980
mov eax, dword [esp + 0x58]
mov ebp, dword [esp + 0x54]
cmp ebp, eax
mov byte [esp + 0x2dc], 9
mov dword [esp + 0x14], eax
je 0x4d78fc
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x4d78e6
mov ebp, dword [esp + 0x54]
push ebp
call fcn.00514140
mov eax, dword [esp + 0x7c]
mov ebp, dword [esp + 0x78]
add esp, 4
cmp ebp, eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x2dc], 8
mov dword [esp + 0x14], eax
je 0x4d793f
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x4d7929
mov ebp, dword [esp + 0x74]
push ebp
call fcn.00514140
add esp, 4
lea ecx, [esp + 0xa0]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x2dc], bl
call fcn.004f5980
mov ebp, dword [esp + 0x1c]
jmp 0x4d6e95
push 6
push 0x549604
lea ecx, [esp + 0xac]
call fcn.004f58e0
mov al, byte [esp + 0x13]
mov dword [esp + 0x64], ebx
mov byte [esp + 0x60], al
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov cl, byte [esp + 0x13]
mov dword [esp + 0x94], ebx
mov byte [esp + 0x90], cl
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
push 6
push 0x5495dc
lea ecx, [esp + 0x3c]
mov byte [esp + 0x2e4], 3
call fcn.004f58e0
push 6
push 0x5482c0
lea ecx, [esp + 0x40]
mov byte [esp + 0x2e4], 4
call fcn.004f58e0
lea edx, [esp + 0x38]
mov ecx, ebp
push edx
mov byte [esp + 0x2e0], 5
call fcn.004d3100
mov byte [esp + 0x3c], bl
mov al, bl
cmp al, 0x5c
je 0x4d7a55
cmp al, 0x42
je 0x4d7a55
cmp al, 0x45
jb 0x4d7a11
cmp al, 0x48
jbe 0x4d7a55
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x34]
push eax
push 5
call fcn.004f5c80
mov edx, dword [esp + 0x68]
lea ecx, [esp + 0x34]
push ecx
push 1
push edx
lea ecx, [esp + 0x6c]
call fcn.00401810
mov ecx, dword [esp + 0x98]
lea eax, [esp + 0x38]
push eax
push 1
push ecx
lea ecx, [esp + 0x9c]
call fcn.00401810
mov al, byte [esp + 0x3c]
inc al
cmp al, 0x6e
mov byte [esp + 0x3c], al
jbe 0x4d7a01
push 0x4d8740
lea edx, [esp + 0x94]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0xc0], esp
push edx
call fcn.00401130
sub esp, 0x10
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
mov byte [esp + 0x304], 6
call fcn.00401130
push ecx
lea edx, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
mov byte [esp + 0x308], 7
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x304], 5
call fcn.004d7de0
cmp al, bl
mov byte [esp + 0x2dc], 4
lea ecx, [esp + 0x38]
je 0x4d7d07
call fcn.004f5980
lea ecx, [esp + 0x34]
mov byte [esp + 0x2dc], 3
call fcn.004f5980
mov eax, dword [esp + 0x98]
mov ebp, dword [esp + 0x94]
cmp ebp, eax
mov byte [esp + 0x2dc], 2
mov dword [esp + 0x14], eax
je 0x4d7b2a
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x4d7b11
mov ebp, dword [esp + 0x94]
push ebp
call fcn.00514140
mov eax, dword [esp + 0x6c]
mov ebp, dword [esp + 0x68]
add esp, 4
cmp ebp, eax
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x2dc], 1
mov dword [esp + 0x14], eax
je 0x4d7b76
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x4d7b60
mov ebp, dword [esp + 0x64]
push ebp
call fcn.00514140
add esp, 4
lea ecx, [esp + 0xa4]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x2dc], bl
call fcn.004f5980
mov ebp, dword [esp + 0x1c]
jmp 0x4d6e95
xor ax, ax
jmp 0x4d7dc0
call fcn.004f5980
lea ecx, [esp + 0x30]
mov byte [esp + 0x2dc], 0x11
call fcn.004f5980
mov eax, dword [esp + 0x48]
mov esi, dword [esp + 0x44]
cmp esi, eax
mov byte [esp + 0x2dc], 0x10
mov edi, eax
je 0x4d7bed
mov ecx, esi
call fcn.004f5980
add esi, 4
cmp esi, edi
jne 0x4d7bdb
mov esi, dword [esp + 0x44]
push esi
call fcn.00514140
mov eax, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
add esp, 4
cmp esi, eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x2dc], 0xf
mov edi, eax
je 0x4d7c33
mov ecx, esi
call fcn.004f5980
add esi, 4
cmp esi, edi
jne 0x4d7c1e
mov esi, dword [esp + 0x84]
push esi
call fcn.00514140
add esp, 4
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x2dc], bl
lea ecx, [esp + 0xa8]
jmp 0x4d7db7
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x2dc], 0xa
call fcn.004f5980
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x54]
cmp esi, eax
mov byte [esp + 0x2dc], 9
mov edi, eax
je 0x4d7ca2
mov ecx, esi
call fcn.004f5980
add esi, 4
cmp esi, edi
jne 0x4d7c90
mov esi, dword [esp + 0x54]
push esi
call fcn.00514140
mov eax, dword [esp + 0x7c]
mov esi, dword [esp + 0x78]
add esp, 4
cmp esi, eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x2dc], 8
mov edi, eax
je 0x4d7cdf
mov ecx, esi
call fcn.004f5980
add esi, 4
cmp esi, edi
jne 0x4d7ccd
mov esi, dword [esp + 0x74]
push esi
call fcn.00514140
add esp, 4
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x2dc], bl
lea ecx, [esp + 0xa0]
jmp 0x4d7db7
call fcn.004f5980
lea ecx, [esp + 0x34]
mov byte [esp + 0x2dc], 3
call fcn.004f5980
mov eax, dword [esp + 0x98]
mov esi, dword [esp + 0x94]
cmp esi, eax
mov byte [esp + 0x2dc], 2
mov edi, eax
je 0x4d7d4e
mov ecx, esi
call fcn.004f5980
add esi, 4
cmp esi, edi
jne 0x4d7d39
mov esi, dword [esp + 0x94]
push esi
call fcn.00514140
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
add esp, 4
cmp esi, eax
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x2dc], 1
mov edi, eax
je 0x4d7d94
mov ecx, esi
call fcn.004f5980
add esi, 4
cmp esi, edi
jne 0x4d7d82
mov esi, dword [esp + 0x64]
push esi
call fcn.00514140
add esp, 4
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x2dc], bl
lea ecx, [esp + 0xa4]
call fcn.004f5980
or ax, 0xffff
mov ecx, dword [esp + 0x2d4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2d0
ret