Function at 0x4b42e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x5c
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x48], 0
mov eax, dword [ebx + 0x34]
cmp eax, 0x2112
je 0x4b4450
cmp eax, 0x2110
je 0x4b4440
mov dword [ebx + 0x10c], 1
mov eax, dword [ebx + 8]
lea edx, [esp + 0x40]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0x4000
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x2112
mov dword [esp + 4], 0x2111
mov dword [esp], ebx
call dword [eax + 0x30]
mov ebp, eax
mov esi, dword [esp + 0x40]
test esi, esi
je 0x4b4430
mov dword [ebx + 0x10c], 0
mov esi, dword [ebx + 0x40]
mov dword [esp + 0x44], esi
cmp eax, 0x22
jle 0x4b4520
xor eax, eax
mov al, byte [esi]
shl eax, 8
xor edx, edx
mov dl, byte [esi + 1]
or eax, edx
mov dword [ebx + 0x110], eax
lea edx, [esi + 2]
mov dword [esp + 0x44], edx
mov edx, dword [ebx + 8]
mov ecx, dword [edx + 0x64]
test byte [ecx + 0x38], 8
jne 0x4b4500
cmp eax, dword [ebx]
setl al
test al, al
je 0x4b4580
mov dword [esp + 0x10], 0x3c0
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x10b
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, dword [ebx + 0x110]
mov edx, eax
sar edx, 8
cmp edx, 3
je 0x4b4780
mov eax, 0x46
mov dword [esp + 8], eax
mov dword [esp + 4], 2
mov dword [esp], ebx
call fcn.00483c50
mov dword [ebx + 0x34], 5
mov ebp, 0xffffffff
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4b4430
mov dword [esp], eax
call fcn.004f1450
mov eax, ebp
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebp
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [ebx + 0x34], 0x2111
jmp 0x4b430c
mov edi, dword [ebx + 0x10c]
test edi, edi
jne 0x4b430c
xor edi, edi
mov edx, dword [ebx + 0x98]
mov eax, dword [edx + 0x144]
test eax, eax
je 0x4b4494
mov edx, dword [edx + 0x148]
mov dword [esp + 4], edx
mov dword [esp], ebx
call eax
test eax, eax
je 0x4b4840
js 0x4b4a63
mov dword [ebx + 0x18], 1
mov dword [esp], ebx
call fcn.0049ed90
mov dword [esp + 8], eax
mov eax, dword [ebx + 0xc0]
mov eax, dword [eax + 0xbc]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0047e7e0
test eax, eax
je 0x4b4897
mov edx, dword [ebx + 0x58]
mov dword [edx + 0x344], eax
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
test byte [eax + 0x38], 2
je 0x4b44e2
test byte [ebx + 0xc8], 1
jne 0x4b4560
mov dword [esp], ebx
call fcn.004803e0
test eax, eax
jne 0x4b4560
mov eax, 0x50
jmp 0x4b43ec
cmp eax, dword [ebx]
jle 0x4b4580
cmp dword [edx], 0x1ffff
setne al
jmp 0x4b439f
mov dword [esp + 0x10], 0x3b2
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0xa0
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x32
jmp 0x4b43ec
cmp dword [ebx], 0x2ff
jg 0x4b47b0
cmp edi, 1
sbb ebp, ebp
add ebp, 2
jmp 0x4b440c
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x20
mov dword [esp], ebx
call fcn.0049e7d0
mov edx, dword [esp + 0x44]
test ah, 0x20
je 0x4b4770
xor eax, eax
mov al, byte [edx + 0x20]
lea eax, [edx + eax + 0x21]
add ebp, esi
cmp eax, ebp
jae 0x4b4820
cmp byte [eax], 0
je 0x4b4830
mov edi, dword [ebx + 0x58]
lea ecx, [edi + 0xc0]
mov eax, dword [edx]
mov dword [edi + 0xc0], eax
mov eax, dword [edx + 0x1c]
mov dword [edi + 0xdc], eax
add edi, 0xc4
and edi, 0xfffffffc
sub ecx, edi
mov esi, edx
sub esi, ecx
add ecx, 0x20
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
lea ecx, [edx + 0x21]
mov dword [esp + 0x44], ecx
movzx edi, byte [edx + 0x20]
mov esi, edi
and esi, 0xff
lea edx, [ecx + esi]
cmp ebp, edx
jb 0x4b4880
mov dword [ebx + 0x6c], 0
mov eax, dword [ebx + 0x28]
test eax, eax
je 0x4b462f
test byte [ebx + 0x102], 1
jne 0x4b465a
mov dword [esp + 0xc], ebp
mov eax, edi
and eax, 0xff
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], ebx
call fcn.004a7050
cmp eax, 1
je 0x4b4800
inc eax
je 0x4b4400
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.004a64e0
test eax, eax
je 0x4b4400
add esi, dword [esp + 0x44]
mov dword [esp + 0x44], esi
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
test byte [eax + 0x38], 8
je 0x4b4890
lea eax, [esi + 1]
cmp eax, ebp
ja 0x4b4990
mov dword [esp + 0x44], eax
xor edx, edx
mov dl, byte [esi]
add eax, edx
cmp ebp, eax
jb 0x4b4a56
mov dword [esp + 0x2c], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x20
mov dword [esp], ebx
call fcn.0049e7d0
test ah, 0x20
mov edx, dword [esp + 0x2c]
je 0x4b46dc
test edx, edx
jne 0x4b4e81
xor edi, edi
mov eax, dword [esp + 0x44]
mov dword [esp + 0x2c], eax
mov esi, eax
add esi, edx
mov dword [esp + 0x44], esi
mov eax, dword [ebx + 8]
cmp dword [eax], 0x1ffff
je 0x4b4cf9
lea esi, [esi]
lea eax, [esi + 2]
cmp eax, ebp
ja 0x4b48cd
xor edx, edx
mov dl, byte [esi]
shl edx, 8
xor ecx, ecx
mov cl, byte [esi + 1]
mov dword [esp + 0x44], eax
mov esi, edx
or esi, ecx
je 0x4b499d
lea ecx, [eax + esi + 1]
cmp ebp, ecx
jae 0x4b48da
mov dword [esp + 0x10], 0x479
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x9f
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x32
jmp 0x4b43ec
add ebp, esi
jmp 0x4b45c9
mov ecx, dword [ebx + 0x8c]
test ecx, ecx
jne 0x4b43e7
mov edx, dword [ebx + 0x90]
test edx, edx
jne 0x4b43e7
mov dword [ebx], eax
mov eax, 0x46
jmp 0x4b43ec
mov dword [esp], ebx
call fcn.0048e340
test eax, eax
jg 0x4b456c
mov dword [esp + 0x10], 0x5b6
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0xe2
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
jmp 0x4b4400
mov eax, dword [ebx + 0xc0]
mov eax, dword [eax]
cmp dword [ebx], eax
jne 0x4b465a
mov dword [ebx + 0x6c], 1
jmp 0x4b4672
mov dword [esp + 0x10], 0x3d9
jmp 0x4b4528
mov eax, 1
jmp 0x4b4432
mov dword [esp + 0x10], 0x576
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x179
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
jmp 0x4b44ee
mov dword [esp + 0x10], 0x3eb
jmp 0x4b4528
xor edi, edi
jmp 0x4b4700
mov dword [esp + 0x10], 0x583
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0xc1
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x28
jmp 0x4b43ec
mov dword [esp + 0x10], 0x46a
jmp 0x4b4528
lea ecx, [esp + 0x48]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0049f210
test eax, eax
je 0x4b4400
add esi, dword [esp + 0x44]
mov dword [esp + 0x44], esi
mov edx, dword [ebx + 0x6c]
test edx, edx
je 0x4b49db
mov eax, dword [ebx + 0xc0]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 8]
xor esi, esi
mov dword [esp + 0x2c], edi
mov edi, eax
jmp 0x4b494a
mov dword [esp + 4], esi
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.004f14b0
cmp dword [eax + 8], edi
je 0x4b49d3
inc esi
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.004f1490
cmp esi, eax
jl 0x4b4930
mov dword [esp + 0x10], 0x4b1
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x2f
jmp 0x4b43ec
mov dword [esp + 0x10], 0x41d
jmp 0x4b4528
mov dword [esp + 0x10], 0x471
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0xb7
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x2f
jmp 0x4b43ec
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x44]
lea eax, [esi + 1]
mov dword [esp + 0x44], eax
xor ecx, ecx
mov cl, byte [esi]
mov edx, ecx
mov dword [esp + 0x30], edx
add ecx, eax
cmp ecx, ebp
ja 0x4b4d71
test edx, edx
je 0x4b4a1c
cmp byte [esi + 1], 0
je 0x4b4a74
xor eax, eax
jmp 0x4b4a17
cmp byte [esi + eax + 1], 0
je 0x4b4a74
inc eax
cmp edx, eax
jne 0x4b4a10
mov dword [esp + 0x44], ecx
mov dword [esp + 0x10], 0x4ca
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0xbb
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x32
jmp 0x4b43ec
mov dword [esp + 0x10], 0x424
jmp 0x4b4528
mov dword [ebx + 0x18], 4
mov eax, 0xffffffff
jmp 0x4b4432
mov dword [esp + 0x44], ecx
cmp dword [ebx], 0x2ff
jle 0x4b4a9c
mov dword [esp + 8], ebp
lea eax, [esp + 0x44]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0048d050
test eax, eax
je 0x4b4f26
mov dword [esp + 0xc], 0x20
mov eax, dword [ebx + 0x58]
add eax, 0xa0
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00488c80
test eax, eax
jle 0x4b44ee
mov eax, dword [ebx + 0x6c]
test eax, eax
jne 0x4b4bbe
cmp dword [ebx], 0x300
jle 0x4b4bbe
mov ecx, dword [ebx + 0x168]
test ecx, ecx
je 0x4b4bbe
mov dword [esp + 0x4c], 0
mov eax, dword [ebx + 0xc0]
mov dword [eax + 0x10], 0x30
mov edx, dword [ebx + 0x16c]
mov dword [esp + 0x14], edx
lea edx, [esp + 0x4c]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0xc], edx
lea edx, [eax + 0x10]
mov dword [esp + 8], edx
add eax, 0x14
mov dword [esp + 4], eax
mov dword [esp], ebx
call ecx
test eax, eax
je 0x4b4bbe
mov dword [ebx + 0x6c], 1
mov ecx, dword [ebx + 0xc0]
mov eax, dword [esp + 0x48]
mov dword [ecx + 0xbc], eax
mov dword [ecx + 0xa0], 0
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4b5121
mov dword [ecx + 0xb4], eax
mov eax, dword [ebx + 0x74]
test eax, eax
je 0x4b4b81
mov dword [esp], eax
call fcn.004f1450
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x4b4b90
mov dword [esp], eax
call fcn.004f1450
mov eax, dword [ebx + 0xc0]
mov eax, dword [eax + 0xbc]
mov dword [esp], eax
call fcn.004f09b0
mov dword [ebx + 0x74], eax
mov eax, dword [ebx + 0xc0]
mov eax, dword [eax + 0xbc]
mov dword [esp], eax
call fcn.004f09b0
mov dword [ebx + 0x78], eax
mov eax, dword [ebx + 0x58]
mov dword [eax + 0x38c], 0
mov ecx, dword [ebx + 0xc0]
mov eax, dword [ecx + 0xb0]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x4b4df9
test byte [ebx + 0x102], 2
jne 0x4b5021
xor eax, eax
xor ebp, ebp
mov dword [esp + 0x34], esi
mov esi, ebx
mov ebx, eax
jmp 0x4b4c26
mov dword [esp + 4], ebx
mov eax, dword [esi + 0xe4]
mov eax, dword [eax + 0x98]
mov dword [esp], eax
call fcn.004f14b0
mov ebp, eax
mov eax, dword [esp + 0x2c]
cmp dword [ebp], eax
je 0x4b4f57
inc ebx
mov eax, dword [esi + 0xe4]
mov eax, dword [eax + 0x98]
mov dword [esp], eax
call fcn.004f1490
cmp ebx, eax
jl 0x4b4bfe
mov ebx, esi
mov esi, dword [esp + 0x34]
mov ecx, dword [ebx + 0x58]
xor eax, eax
cmp dword [ecx + 0x38c], 0
jne 0x4b4c6b
jmp 0x4b50eb
inc eax
cmp dword [esp + 0x30], eax
je 0x4b5057
xor edx, edx
mov dl, byte [esi + eax + 1]
cmp edx, dword [esp + 0x2c]
jne 0x4b4c60
cmp dword [esp + 0x30], eax
jle 0x4b5057
cmp dword [ebx + 0x6c], 0
mov ecx, dword [ebx + 0xc0]
jne 0x4b4d84
test ebp, ebp
je 0x4b50de
mov eax, dword [ebp]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [ecx + 0xb0], eax
mov eax, dword [ecx + 0xbc]
test eax, eax
je 0x4b4cc2
mov dword [esp], eax
call fcn.004f1450
mov ecx, dword [ebx + 0xc0]
mov eax, dword [esp + 0x48]
mov dword [ecx + 0xbc], eax
test eax, eax
je 0x4b508d
mov dword [esp + 0x48], 0
mov dword [esp], ebx
call fcn.0048f880
test eax, eax
jne 0x4b4460
mov dword [esp + 0x10], 0x56d
jmp 0x4b47c8
mov eax, dword [ebx + 0x110]
cmp eax, 0xfefd
jg 0x4b4d13
test byte [ebx + 0x103], 8
je 0x4b5007
mov edx, dword [ebx + 0x98]
test dword [edx + 0x38], 0x30000
jne 0x4b4f09
cmp eax, 0xfeff
jg 0x4b4d3a
test byte [ebx + 0x103], 4
je 0x4b4fe6
mov dword [esp + 0x10], 0x45f
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x10b
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, dword [ebx + 0x110]
jmp 0x4b479c
mov dword [esp + 0x10], 0x4bb
jmp 0x4b4739
mov ecx, dword [ebx + 0xc0]
test byte [ebx + 0x103], 0x40
je 0x4b4f6b
mov eax, dword [ecx + 0xbc]
mov dword [esp + 0x30], eax
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x2c], 0
jmp 0x4b4dd5
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.004f14b0
test byte [eax + 0x14], 0x20
je 0x4b4dc5
mov esi, eax
test byte [eax + 0x20], 2
je 0x4b4dcd
mov ebp, eax
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.004f1490
cmp dword [esp + 0x2c], eax
jl 0x4b4da9
mov eax, dword [ebx + 0x58]
test esi, esi
je 0x4b515a
mov dword [eax + 0x344], esi
jmp 0x4b44c9
cmp dword [ebx + 0x6c], 0
jne 0x4b4d84
test byte [ebx + 0x102], 2
jne 0x4b4ca0
mov eax, dword [ebx + 0xe4]
mov eax, dword [eax + 0x98]
test eax, eax
je 0x4b4ca0
mov dword [esp], eax
call fcn.004f1490
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], edi
mov edi, ebx
mov ebp, dword [esp + 0x30]
mov ecx, dword [esp + 0x3c]
cmp dword [esp + 0x34], ecx
jge 0x4b50c3
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [edi + 0xe4]
mov eax, dword [eax + 0x98]
mov dword [esp], eax
call fcn.004f14b0
mov ebx, dword [eax]
xor edx, edx
xor ecx, ecx
mov cl, byte [esi + edx + 1]
cmp ecx, ebx
je 0x4b4ee3
inc edx
cmp ebp, edx
jne 0x4b4e6c
inc dword [esp + 0x34]
jmp 0x4b4e3e
mov eax, dword [ebx + 0x5c]
add eax, 0x104
mov esi, dword [esp + 0x44]
mov dword [esp + 0x2c], esi
mov edi, eax
mov ecx, edx
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0xe4]
mov ecx, dword [eax + 0x7c]
test ecx, ecx
je 0x4b4f7f
mov dword [esp + 8], edx
mov dword [esp + 0x30], edx
mov eax, dword [ebx + 0x5c]
add eax, 0x104
mov dword [esp + 4], eax
mov dword [esp], ebx
call ecx
test eax, eax
je 0x4b5017
mov eax, dword [esp + 0x44]
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x30]
mov edi, 1
mov esi, dword [esp + 0x2c]
jmp 0x4b46e8
mov ebp, eax
mov ebx, edi
mov edi, dword [esp + 0x38]
mov eax, dword [ebx + 0x58]
mov dword [eax + 0x38c], ebp
cmp dword [ebx + 0x6c], 0
jne 0x4b4d7e
mov ecx, dword [ebx + 0xc0]
jmp 0x4b4c99
mov dword [esp + 0x10], 0x455
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x183
jmp 0x4b4d52
mov dword [esp + 0x10], 0x4d1
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0xe3
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
jmp 0x4b4400
mov ebx, esi
mov esi, dword [esp + 0x34]
mov ecx, dword [ebx + 0x58]
mov dword [ecx + 0x38c], ebp
jmp 0x4b4c47
mov eax, dword [ebx + 0x58]
mov edx, dword [ecx + 0xb4]
mov dword [eax + 0x344], edx
jmp 0x4b44c9
mov dword [esp + 0x30], edx
mov eax, dword [ebx + 0x5c]
mov ecx, dword [eax + 0x204]
mov dword [esp + 8], ecx
lea ecx, [eax + 4]
mov dword [esp + 4], ecx
add eax, 0x104
mov dword [esp], eax
call sub.msvcrt.dll_memcmp
test eax, eax
mov edx, dword [esp + 0x30]
je 0x4b4ed5
mov dword [esp + 0x10], 0x446
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x134
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x28
jmp 0x4b43ec
mov dword [ebx], 0xfeff
call fcn.004bb410
mov dword [ebx + 8], eax
mov eax, dword [ebx + 0xc0]
mov edx, dword [ebx]
mov dword [eax], edx
mov esi, dword [esp + 0x44]
jmp 0x4b4700
mov dword [ebx], 0xfefd
call fcn.004bb420
mov dword [ebx + 8], eax
jmp 0x4b4ff4
mov dword [esp + 0x10], 0x43d
jmp 0x4b4fb8
mov dword [esp + 0x10], 0x51b
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x154
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x50
jmp 0x4b43ec
mov dword [esp + 0x10], 0x533
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x156
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x2f
jmp 0x4b43ec
mov dword [esp + 0x10], 0x568
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x50
jmp 0x4b43ec
mov ebx, edi
mov edi, dword [esp + 0x38]
cmp dword [ebx + 0x6c], 0
jne 0x4b4d7e
mov ecx, dword [ebx + 0xc0]
jmp 0x4b4ca0
mov dword [esp + 0x2c], 0
jmp 0x4b4ca0
mov dword [esp + 0x10], 0x528
mov dword [esp + 0xc], str.s3_srvr.c
mov dword [esp + 8], 0x155
mov dword [esp + 4], 0x8a
mov dword [esp], 0x14
call fcn.004f5490
mov eax, 0x50
jmp 0x4b43ec
mov dword [esp], ebx
call fcn.0049ed90
mov dword [esp + 8], eax
mov eax, dword [ebx + 0xc0]
mov eax, dword [eax + 0xbc]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0047e7e0
mov dword [esp + 0x4c], eax
test eax, eax
jne 0x4b5169
mov dword [esp + 0x10], 0x4fb
jmp 0x4b489f
test ebp, ebp
je 0x4b5174
mov dword [eax + 0x344], ebp
jmp 0x4b44c9
mov ecx, dword [ebx + 0xc0]
jmp 0x4b4b6c
mov edx, dword [ebx + 0xc0]
mov edx, dword [edx + 0xb4]
mov dword [eax + 0x344], edx
jmp 0x4b44c9