Function at 0x4d0970
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x118]
cmp eax, dword [ecx + 8]
jbe 0x4d17d1
sub esp, 0x198
mov ecx, dword [esp + 0x1c4]
mov edx, dword [esp + 0x1ac]
cmp ecx, edx
jl 0x4d1716
mov eax, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x1b0]
cmp ecx, edx
jg 0x4d16e8
test ecx, ecx
jbe 0x4d17c9
mov dword [esp + 0x1b0], ebx
mov ebp, dword [esp + 0x1c0]
mov ebp, dword [ebp]
lea esi, [ebp - 2]
xchg esi, ebx
neg ebx
xchg esi, ebx
dec ebp
mov edi, 1
jmp 0x4d09fb
shl edi, 1
imul ebp, ebp
lea ebx, [ebp + 1]
imul esi, ebx
mov ebx, dword [esp + 0x1b0]
cmp edi, 0x20
jl 0x4d09e9
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x80], esi
nop
nop
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004450a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd4], eax
mov dword [eax], 1
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov ecx, dword [esp + 0x1c4]
shl ecx, 6
mov dword [esp + 0x18], ecx
call fcn.004ceb60
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x78], edx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov ebx, dword [esp + 0xd4]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ecx, dword [esp + 0x1c0]
mov dword [esp + 0x24], ecx
mov ebx, dword [esp + 0x1c4]
mov dword [esp + 0x28], ebx
mov ebp, dword [esp + 0x1c8]
mov dword [esp + 0x2c], ebp
call fcn.004cc900
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x1c4]
cmp ebx, eax
jle 0x4d16d0
mov edx, dword [esp + 0x78]
cmp ebx, edx
jg 0x4d1636
mov ebp, ebx
mov esi, dword [esp + 0xc4]
cmp eax, ebx
jge 0x4d162f
mov dword [esp + 0x48], ebx
mov dword [esp + 0x50], edx
mov dword [esp + 0xac], esi
cmp ecx, esi
je 0x4d0b5d
mov dword [esp], esi
mov dword [esp + 4], ecx
shl eax, 2
mov dword [esp + 8], eax
call fcn.0045e7b0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xac]
mov ebx, eax
mov ebp, edx
mov dword [esp + 0x54], ebx
mov dword [esp + 0xb0], ebp
mov dword [esp + 0x98], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0xcc], edx
lea esi, [0x5dabc0]
mov dword [esp], esi
mov edi, dword [esp + 0x1c4]
mov dword [esp + 4], edi
mov dword [esp + 8], edi
call fcn.004450a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd4], eax
mov dword [eax], 1
lea edi, [esp + 0xd8]
xor eax, eax
call fcn.0045e080
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x1c4]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0xcc]
mov dword [esp + 0x18], edx
mov ebx, dword [esp + 0x90]
mov dword [esp + 0x1c], ebx
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x20], ebp
mov esi, dword [esp + 0x1c0]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], ecx
mov edi, dword [esp + 0x1c8]
mov dword [esp + 0x2c], edi
mov eax, dword [esp + 0x80]
neg eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
call fcn.004c9f00
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], edx
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xec]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1b0]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x1c4]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1c8]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ecx
call fcn.004c9f00
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], edx
mov eax, dword [esp + 0x1c4]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x1c8]
mov ebx, dword [esp + 0x1c0]
mov ebp, 2
jmp 0x4d0e4a
mov dword [esp + 0xa0], esi
mov ebp, dword [esp + esi*4 + 0xcc]
mov ecx, dword [esp + esi*4 + 0xd0]
mov esi, dword [esp + esi*4 + 0xd4]
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0xec]
mov dword [esp], edi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], esi
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x1c4]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1c8]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ecx
call fcn.004c9f00
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0xa0]
mov dword [esp + ebx*4 + 0xd8], eax
mov dword [esp + ebx*4 + 0xdc], ecx
mov dword [esp + ebx*4 + 0xe0], edx
mov eax, dword [esp + 0x8c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x1c4]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x1c8]
mov ebx, dword [esp + 0x1c0]
cmp ebp, 0x10
jge 0x4d0e84
jae 0x4d17bd
mov dword [esp + 0x8c], ebp
lea esi, [ebp + ebp*2]
mov edi, dword [esp + esi*4 + 0xd8]
mov edx, dword [esp + esi*4 + 0xdc]
mov ebx, dword [esp + esi*4 + 0xe0]
dec ebp
cmp ebp, 0x10
jb 0x4d0d57
jmp 0x4d17b1
mov ebp, dword [esp + 0x1a4]
cmp eax, ebp
jg 0x4d1595
mov esi, eax
mov edi, dword [esp + 0x19c]
mov edx, dword [esp + 0xd8]
mov ebx, dword [esp + 0xdc]
cmp eax, ebx
jle 0x4d158e
mov dword [esp + 0x1a4], ebp
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x19c], edi
cmp edi, edx
je 0x4d0ede
mov dword [esp], edi
mov dword [esp + 4], edx
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.0045e7b0
mov edx, dword [esp + 0x1c4]
mov ebx, dword [esp + 0x54]
cmp edx, ebx
jg 0x4d151e
mov eax, edx
mov ecx, dword [esp + 0xb0]
mov esi, dword [esp + 0x1b8]
mov ebp, esi
dec esi
mov dword [esp + 0x88], esi
mov edi, dword [esp + 0x80]
jmp 0x4d12a5
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], edx
mov edi, dword [esp + 0x7c]
shr edi, 0x1c
lea edi, [edi + edi*2]
mov edx, dword [esp + edi*4 + 0xd8]
mov dword [esp + 0xd0], edx
mov edx, dword [esp + edi*4 + 0xdc]
mov edi, dword [esp + edi*4 + 0xe0]
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov ebx, dword [esp + 0x1a4]
mov dword [esp + 0x14], ebx
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], edi
mov edx, dword [esp + 0x1c0]
mov dword [esp + 0x24], edx
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1c8]
mov dword [esp + 0x2c], esi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebp
call fcn.004c9f00
mov eax, dword [esp + 0x84]
add eax, 4
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x7c]
shl ebp, 4
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x80]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x1c4]
mov esi, dword [esp + 0x1a4]
mov dword [esp + 0x1a4], ebx
mov ebx, esi
mov esi, dword [esp + 0xa0]
mov esi, dword [esp + 0x1a0]
mov dword [esp + 0x1a0], edx
mov edx, esi
mov esi, dword [esp + 0xa0]
mov esi, dword [esp + 0x19c]
mov dword [esp + 0x19c], ecx
mov ecx, esi
mov esi, dword [esp + 0xa0]
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0x84]
cmp ebp, 0x20
jge 0x4d129d
mov edi, dword [esp + 0x88]
cmp edi, esi
je 0x4d1277
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x19c]
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x1a0]
mov dword [esp + 0x10], edx
mov ebx, dword [esp + 0x1a4]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ebx
mov ebp, dword [esp + 0x1c0]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], eax
mov esi, dword [esp + 0x1c8]
mov dword [esp + 0x2c], esi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], eax
call fcn.004c9f00
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 0xbc], edx
mov ebx, dword [esp + 0x19c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x1a4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1c8]
mov dword [esp + 0x2c], esi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebp
call fcn.004c9f00
mov eax, dword [esp + 0x40]
mov dword [esp + 0x1a4], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x19c], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x1a0], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1c8]
mov dword [esp + 0x2c], esi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebp
call fcn.004c9f00
mov eax, dword [esp + 0x38]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0x19c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x1a4]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x1c8]
mov dword [esp + 0x2c], esi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebp
call fcn.004c9f00
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0xb8]
jmp 0x4d0f17
test ebp, ebp
jne 0x4d1059
mov eax, dword [esp + 0x19c]
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x1a0]
mov edx, dword [esp + 0x1a4]
jmp 0x4d0f17
dec esi
mov ebp, dword [esp + 0x1b8]
test esi, esi
jl 0x4d12df
cmp esi, ebp
jae 0x4d17a8
mov dword [esp + 0xa0], esi
mov ebp, dword [esp + 0x1b4]
mov ebp, dword [ebp + esi*4]
mov dword [esp + 0xa4], eax
xor eax, eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0xa4]
jmp 0x4d1036
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x19c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1a0]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x1a4]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x1c0]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x1c8]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], eax
call fcn.004c9f00
mov eax, dword [esp + 0x38]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x68], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x1c8]
mov dword [esp + 0x14], esi
call fcn.004c9b70
mov eax, dword [esp + 0x18]
test eax, eax
jge 0x4d13e9
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xb4]
mov ebx, eax
jmp 0x4d13ae
mov eax, ebp
test eax, eax
jle 0x4d13c5
lea ebp, [eax - 1]
cmp ebp, ebx
jae 0x4d179f
mov esi, dword [edx + eax*4 - 4]
test esi, esi
je 0x4d13ac
cmp eax, ecx
ja 0x4d1796
mov dword [esp + 0x1cc], edx
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], ecx
add esp, 0x198
ret
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x1c4]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x1c8]
mov dword [esp + 0x20], edx
call fcn.004c9850
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x74], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x1c8]
mov dword [esp + 0x14], esi
call fcn.004c9b70
mov eax, dword [esp + 0x18]
test eax, eax
jge 0x4d149d
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xc0]
jmp 0x4d13a8
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x1c4]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1c8]
mov dword [esp + 0x2c], eax
call fcn.004cc900
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
jmp 0x4d13a8
cmp edx, 1
jne 0x4d155b
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004450a0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x1c4]
mov ebx, 1
mov edx, 1
jmp 0x4d0efa
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], edx
lea eax, [edx + 4]
mov dword [esp + 0x54], eax
mov dword [esp + 8], eax
call fcn.004450a0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x1c4]
mov ebx, dword [esp + 0x54]
mov edx, eax
jmp 0x4d0efa
mov ebx, eax
jmp 0x4d0eb2
cmp eax, 1
jne 0x4d15e7
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004450a0
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x1c8]
mov ebx, dword [esp + 0x1c0]
mov esi, dword [esp + 0x1c4]
mov eax, 1
mov ebp, 1
jmp 0x4d0e9c
lea ecx, [0x5dabc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [eax + 4]
mov dword [esp + 0x4c], edx
mov dword [esp + 8], edx
call fcn.004450a0
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x1c8]
mov ebx, dword [esp + 0x1c0]
mov esi, dword [esp + 0x1c4]
mov eax, esi
mov ebp, dword [esp + 0x4c]
jmp 0x4d0e9c
mov eax, ebx
jmp 0x4d0b37
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x94], eax
cmp ebx, 1
jne 0x4d168f
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004450a0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x1c4]
mov ebx, 1
mov edx, 1
jmp 0x4d0b2f
lea eax, [0x5dabc0]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea ecx, [ebx + 4]
mov dword [esp + 0x50], ecx
mov dword [esp + 8], ecx
call fcn.004450a0
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x1c4]
mov ebx, ebp
mov edx, dword [esp + 0x50]
jmp 0x4d0b2f
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0xc4]
mov esi, eax
mov eax, edx
mov edx, ecx
mov ecx, esi
jmp 0x4d0b70
lea ebx, [0x5dabc0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.00444f50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c4]
mov edx, ecx
mov ebx, edx
jmp 0x4d09bf
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0x1b0]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1c8]
mov dword [esp + 0x2c], edx
call fcn.004cc900
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x44]
mov ecx, dword [esp + 0x1c4]
jmp 0x4d09b7
mov edx, ecx
mov ecx, eax
call fcn.0045ded0
mov eax, ebp
mov ecx, ebx
call fcn.0045de90
mov eax, esi
mov ecx, ebp
call fcn.0045de90
mov eax, ebp
mov ecx, 0x10
call fcn.0045de90
mov eax, ebp
mov ecx, 0x10
call fcn.0045de90
xor eax, eax
call fcn.0045de90
nop
call fcn.0045c8b0
jmp fcn.004d0970