Function at 0x4d0d00
Capabilities:
Access peb ldr_data
Get process heap flags
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0x18]
sub esp, 0x24
mov eax, dword [eax + 0x30]
push ebx
push esi
push edi
mov edi, dword [eax + 0xc]
add edi, 0xc
mov esi, dword [edi]
cmp esi, edi
je 0x4d0e2f
mov edx, dword [0x5cb4ec]
mov edi, edi
movzx ecx, word ds:[esi + 0x2c]
mov eax, dword [esi + 0x30]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
cmp ecx, edx
jb 0x4d0d5f
push 1
push 0x5cb4ec
lea eax, [esp + 0x30]
push eax
call sym.ProcessHacker.exe_PhEqualStringRef
test al, al
jne 0x4d0d6a
mov edx, dword [0x5cb4ec]
mov esi, dword [esi]
cmp esi, edi
jne 0x4d0d30
jmp 0x4d0e2f
test esi, esi
je 0x4d0e2f
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov edi, dword [eax + 0xc]
add edi, 0xc
mov esi, dword [edi]
cmp esi, edi
je 0x4d0e2f
mov edx, dword [0x5cb50c]
movzx ecx, word [esi + 0x2c]
mov eax, dword [esi + 0x30]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], edx
cmp ecx, edx
jb 0x4d0dbf
push 1
push 0x5cb50c
lea eax, [esp + 0x28]
push eax
call sym.ProcessHacker.exe_PhEqualStringRef
test al, al
jne 0x4d0dc7
mov edx, dword [0x5cb50c]
mov esi, dword [esi]
cmp esi, edi
jne 0x4d0d91
jmp 0x4d0e2f
test esi, esi
je 0x4d0e2f
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov edi, dword [eax + 0xc]
add edi, 0xc
mov esi, dword [edi]
cmp esi, edi
je 0x4d0e2f
mov edx, dword [0x5cb514]
lea ebx, [ebx]
movzx ecx, word ds:[esi + 0x2c]
mov eax, dword [esi + 0x30]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], edx
cmp ecx, edx
jb 0x4d0e1f
push 1
push 0x5cb514
lea eax, [esp + 0x20]
push eax
call sym.ProcessHacker.exe_PhEqualStringRef
test al, al
jne 0x4d0e27
mov edx, dword [0x5cb514]
mov esi, dword [esi]
cmp esi, edi
jne 0x4d0df0
jmp 0x4d0e2f
test esi, esi
jne 0x4d1a68
xor ebx, ebx
mov dword [esp + 0x18], 0
push ebx
push 0x5cb4f4
push 0xfffffffffffffffd
push 0x20019
lea eax, [esp + 0x20]
mov dword [esp + 0x30], ebx
push eax
call sym.ProcessHacker.exe_PhOpenKey
test eax, eax
js 0x4d109c
push str.KitsRoot10
push dword [esp + 0x14]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov edi, eax
mov dword [esp + 0x28], eax
or esi, 0xffffffff
mov dword [esp + 0x14], edi
test eax, eax
je 0x4d0e7f
cmp dword [eax], ebx
jne 0x4d0eb1
push str.KitsRoot81
push dword [esp + 0x14]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov edi, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], edi
test eax, eax
je 0x4d0ead
mov ecx, esi
lock xadd dword [eax - 4], ecx
dec ecx
jne 0x4d0ead
lea ecx, [eax - 8]
call fcn.004c1f60
test edi, edi
je 0x4d0eb5
cmp dword [edi], ebx
jne 0x4d0ee5
push str.KitsRoot
push dword ds:[esp + 0x14]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov ecx, edi
mov edi, eax
mov dword [esp + 0x14], edi
test ecx, ecx
je 0x4d0ee5
add ecx, 0xfffffff8
mov eax, esi
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4d0ee5
mov edi, edi
call fcn.004c1f60
push dword [esp + 0x10]
call dword [sym.imp.ntdll.dll_NtClose]
test edi, edi
je 0x4d109c
mov esi, dword [edi]
push dword [0x5cd4f8]
add esi, 0x1e
lea eax, [esi + 0xa]
push eax
call sym.ProcessHacker.exe_PhCreateObject
xor edx, edx
mov dword [esp + 0x28], eax
lea ecx, [eax + 8]
mov dword [eax], esi
mov dword [eax + 4], ecx
mov word [ecx + esi], dx
push dword [edi]
push dword [edi + 4]
push dword [eax + 4]
call fcn.00537fe0
mov edi, dword [esp + 0x34]
mov ecx, 7
mov eax, dword [esp + 0x20]
mov esi, str.Debuggersx86_
add esp, 0xc
mov edi, dword [edi + 4]
add edi, dword [eax]
rep movsd dword es:[edi], dword [esi]
lea ecx, [eax - 8]
movsw word es:[edi], word [esi]
or esi, 0xffffffff
mov eax, esi
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4d0f5d
call fcn.004c1f60
mov edi, dword [esp + 0x28]
push 0x5cb4ec
push edi
call sym.ProcessHacker.exe_PhConcatStringRef2
mov dword [esp + 0x14], eax
test eax, eax
je 0x4d0fc5
mov eax, dword [eax + 4]
push 0x800
push 0
push eax
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, eax
mov dword [esp + 0x18], ecx
test ecx, ecx
jne 0x4d0faa
push 0xa00
push eax
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x14]
mov eax, esi
add ecx, 0xfffffff8
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4d0fc5
jmp 0x4d0fc0
call fcn.004c1f60
push 0x5cb50c
push edi
call sym.ProcessHacker.exe_PhConcatStringRef2
mov dword [esp + 0x14], eax
test eax, eax
je 0x4d101e
mov eax, dword [eax + 4]
push 0x800
push 0
push eax
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
test ebx, ebx
jne 0x4d1008
push 0xa00
push eax
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
mov ecx, dword [esp + 0x14]
mov eax, esi
add ecx, 0xfffffff8
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4d101e
call fcn.004c1f60
push 0x5cb514
push edi
call sym.ProcessHacker.exe_PhConcatStringRef2
mov dword [esp + 0x14], eax
test eax, eax
je 0x4d1085
mov eax, dword [eax + 4]
push 0x800
push 0
push eax
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ecx, eax
mov dword [esp + 0x20], ecx
test ecx, ecx
jne 0x4d106a
push 0xa00
push eax
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x14]
mov eax, esi
add ecx, 0xfffffff8
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4d1085
jmp 0x4d1080
call fcn.004c1f60
lea ecx, [edi - 8]
lock xadd dword [ecx + 4], esi
dec esi
jne 0x4d1095
call fcn.004c1f60
cmp dword [esp + 0x18], 0
jne 0x4d10c6
push 0x800
push 0
push str.dbgcore.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test eax, eax
jne 0x4d10c6
push 0xa00
push eax
push str.dbgcore.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test ebx, ebx
jne 0x4d10f7
push 0x800
push ebx
push str.dbghelp.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
test ebx, ebx
jne 0x4d10f7
push 0xa00
push eax
push str.dbghelp.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
cmp dword [esp + 0x20], 0
jne 0x4d1126
push 0x800
push 0
push str.symsrv.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test eax, eax
jne 0x4d1126
push 0xa00
push eax
push str.symsrv.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test ebx, ebx
je 0x4d1a68
movzx eax, word [ebx]
mov esi, 0x5a4d
mov ecx, eax
cmp ax, si
jne 0x4d1190
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4d1190
cmp eax, 0x7fffffff
jae 0x4d1190
cmp dword [eax + ebx], 0x4550
jne 0x4d1190
lea edx, ds:[eax + 0x78]
mov eax, dword [edx + ebx]
add edx, ebx
test eax, eax
je 0x4d1182
cmp dword [edx + 4], 0
je 0x4d1182
push 0
add eax, ebx
mov ecx, ebx
push str.SymInitializeW
push eax
call fcn.004c0900
mov edx, eax
movzx eax, word [ebx]
jmp 0x4d1194
mov dword [0x5cd690], 0
mov eax, ecx
jmp 0x4d11a5
xor edx, edx
mov eax, ecx
movzx eax, ax
mov dword [0x5cd690], edx
cmp ax, si
jne 0x4d11ec
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d11ec
cmp ecx, 0x7fffffff
jae 0x4d11ec
cmp dword [ecx + ebx], 0x4550
jne 0x4d11ec
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d11ec
cmp dword [edx + 4], 0
je 0x4d11ec
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymCleanup
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d11f1
movzx eax, ax
xor ecx, ecx
movzx eax, ax
mov dword [0x5cd698], ecx
mov ecx, eax
cmp ax, si
jne 0x4d12b2
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d1250
cmp ecx, 0x7fffffff
jae 0x4d1250
cmp dword ds:[ecx + ebx], 0x4550
jne 0x4d1250
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d1250
cmp dword [edx + 4], 0
je 0x4d1250
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymEnumSymbolsW
push eax
call fcn.004c0900
movzx eax, word [ebx]
mov ecx, eax
cmp ax, si
jne 0x4d12b2
mov edx, dword [ebx + 0x3c]
movzx ecx, ax
test edx, edx
je 0x4d12b5
movzx ecx, ax
cmp edx, 0x7fffffff
jae 0x4d12b5
cmp dword [edx + ebx], 0x4550
je 0x4d1276
movzx ecx, ax
jmp 0x4d12b5
add edx, 0x78
add edx, ebx
mov ecx, dword [edx]
test ecx, ecx
je 0x4d12a3
cmp dword [edx + 4], 0
je 0x4d12a3
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymFromAddrW
push eax
call fcn.004c0900
mov edx, eax
movzx eax, word [ebx]
jmp 0x4d12ba
mov dword [0x5cd6c0], 0
movzx eax, ax
jmp 0x4d12c8
movzx ecx, cx
xor edx, edx
movzx eax, cx
movzx eax, ax
mov dword [0x5cd6c0], edx
cmp ax, si
jne 0x4d131c
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d131c
cmp ecx, 0x7fffffff
jae 0x4d131c
cmp dword ds:[ecx + ebx], 0x4550
jne 0x4d131c
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d130d
cmp dword [edx + 4], 0
je 0x4d130d
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymFromNameW
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d1321
mov dword [0x5cd6a0], 0
movzx eax, ax
jmp 0x4d132f
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd6a0], ecx
cmp ax, si
jne 0x4d1382
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d1382
cmp ecx, 0x7fffffff
jae 0x4d1382
cmp dword [ecx + ebx], 0x4550
jne 0x4d1382
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d1372
cmp dword [edx + 4], 0
je 0x4d1372
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymGetLineFromAddrW64
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d1387
mov dword [0x5cd69c], 0
movzx eax, ax
jmp 0x4d1395
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd69c], ecx
cmp ax, si
jne 0x4d13eb
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d13eb
lea esp, [esp]
cmp ecx, 0x7fffffff
jae 0x4d13eb
cmp dword [ecx + ebx], 0x4550
jne 0x4d13eb
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d13dc
cmp dword [edx + 4], 0
je 0x4d13dc
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymLoadModuleExW
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d13f0
mov dword [0x5cd6a4], 0
movzx eax, ax
jmp 0x4d13fe
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd6a4], ecx
cmp ax, si
jne 0x4d1452
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d1452
cmp ecx, 0x7fffffff
jae 0x4d1452
cmp dword [ecx + ebx], 0x4550
jne 0x4d1452
lea edx, ds:[ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d1443
cmp dword [edx + 4], 0
je 0x4d1443
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymGetOptions
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d1457
mov dword [0x5cd6cc], 0
movzx eax, ax
jmp 0x4d1465
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd6cc], ecx
cmp ax, si
jne 0x4d14bb
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d14bb
cmp ecx, 0x7fffffff
jae 0x4d14bb
cmp dword [ecx + ebx], 0x4550
jne 0x4d14bb
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d14ac
cmp dword [edx + 4], 0
je 0x4d14ac
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymSetOptions
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d14c0
mov dword [0x5cd6b4], 0
movzx eax, ax
jmp 0x4d14d0
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd6b4], ecx
mov ecx, eax
cmp ax, si
jne 0x4d1533
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d162f
jmp 0x4d14e0
cmp ecx, 0x7fffffff
jae 0x4d162f
cmp dword [ecx + ebx], 0x4550
jne 0x4d162f
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d162f
cmp dword [edx + 4], 0
je 0x4d162f
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymGetSearchPathW
push eax
call fcn.004c0900
movzx eax, word [ebx]
mov ecx, eax
cmp ax, si
je 0x4d1632
movzx ecx, cx
xor edx, edx
movzx eax, cx
movzx eax, ax
mov dword [0x5cd6d0], edx
mov ecx, eax
cmp ax, si
jne 0x4d15b3
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d16a9
jmp 0x4d1560
cmp ecx, 0x7fffffff
jae 0x4d16a9
cmp dword [ecx + ebx], 0x4550
jne 0x4d16a9
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d16a9
cmp dword [edx + 4], 0
je 0x4d16a9
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymUnloadModule64
push eax
call fcn.004c0900
movzx eax, word [ebx]
mov ecx, eax
cmp ax, si
je 0x4d16ac
movzx ecx, cx
xor edx, edx
movzx eax, cx
movzx eax, ax
mov dword [0x5cd6c8], edx
cmp ax, si
jne 0x4d1734
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d1734
jmp 0x4d15e0
cmp ecx, 0x7fffffff
jae 0x4d1734
cmp dword [ecx + ebx], 0x4550
jne 0x4d1734
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d1725
cmp dword [edx + 4], 0
je 0x4d1725
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymGetModuleBase64
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d1739
movzx eax, ax
mov edx, dword ds:[ebx + 0x3c]
movzx ecx, ax
test edx, edx
je 0x4d1536
movzx ecx, ax
cmp edx, 0x7fffffff
jae 0x4d1536
cmp dword ds:[edx + ebx], 0x4550
je 0x4d166a
movzx ecx, ax
jmp 0x4d1536
add edx, 0x78
add edx, ebx
mov ecx, dword [edx]
test ecx, ecx
je 0x4d1697
cmp dword [edx + 4], 0
je 0x4d1697
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymSetSearchPathW
push eax
call fcn.004c0900
mov edx, eax
movzx eax, word [ebx]
jmp 0x4d153b
mov dword [0x5cd6d0], 0
movzx eax, ax
jmp 0x4d154b
movzx eax, ax
mov edx, dword [ebx + 0x3c]
movzx ecx, ax
test edx, edx
je 0x4d15b6
movzx ecx, ax
cmp edx, 0x7fffffff
jae 0x4d15b6
cmp dword [edx + ebx], 0x4550
je 0x4d16dd
movzx ecx, ax
jmp 0x4d15b6
add edx, 0x78
add edx, ebx
mov ecx, dword [edx]
test ecx, ecx
je 0x4d170f
cmp dword [edx + 4], 0
je 0x4d170f
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymFunctionTableAccess64
push eax
call fcn.004c0900
mov edx, eax
movzx eax, word [ebx]
jmp 0x4d15bb
mov dword [0x5cd6c8], 0
movzx eax, ax
jmp 0x4d15cd
mov dword [0x5cd694], 0
movzx eax, ax
jmp 0x4d1747
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd694], ecx
cmp ax, si
jne 0x4d179b
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d179b
cmp ecx, 0x7fffffff
jae 0x4d179b
cmp dword [ecx + ebx], 0x4550
jne 0x4d179b
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d178c
cmp dword [edx + 4], 0
je 0x4d178c
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymRegisterCallbackW64
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d17a0
mov dword [0x5cd6ac], 0
movzx eax, ax
jmp 0x4d17ae
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd6ac], ecx
cmp ax, si
jne 0x4d1802
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d1802
cmp ecx, 0x7fffffff
jae 0x4d1802
cmp dword [ecx + ebx], 0x4550
jne 0x4d1802
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d17f1
cmp dword [edx + 4], 0
je 0x4d17f1
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.StackWalk64
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d1807
mov dword [0x5cd6b0], 0
movzx eax, ax
jmp 0x4d1815
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd6b0], ecx
cmp ax, si
jne 0x4d186b
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d186b
lea esp, [esp]
cmp ecx, 0x7fffffff
jae 0x4d186b
cmp dword [ecx + ebx], 0x4550
jne 0x4d186b
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d185c
cmp dword [edx + 4], 0
je 0x4d185c
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.StackWalkEx
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d1870
mov dword [0x5cd6b8], 0
movzx eax, ax
jmp 0x4d187e
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd6b8], ecx
cmp ax, si
jne 0x4d18d2
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d18d2
cmp ecx, 0x7fffffff
jae 0x4d18d2
cmp dword [ecx + ebx], 0x4550
jne 0x4d18d2
lea edx, ds:[ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d18c3
cmp dword [edx + 4], 0
je 0x4d18c3
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymFromInlineContextW
push eax
call fcn.004c0900
mov ecx, eax
movzx eax, word [ebx]
jmp 0x4d18d7
mov dword [0x5cd6a8], 0
movzx eax, ax
jmp 0x4d18e5
xor ecx, ecx
movzx eax, ax
movzx eax, ax
mov dword [0x5cd6a8], ecx
cmp ax, si
jne 0x4d193b
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x4d193b
cmp ecx, 0x7fffffff
jae 0x4d193b
cmp dword [ecx + ebx], 0x4550
jne 0x4d193b
lea edx, [ecx + 0x78]
mov ecx, dword [edx + ebx]
add edx, ebx
test ecx, ecx
je 0x4d192c
cmp dword [edx + 4], 0
je 0x4d192c
push 0
lea eax, [ecx + ebx]
mov ecx, ebx
push str.SymGetLineFromInlineContextW
push eax
call fcn.004c0900
mov edx, eax
movzx eax, word [ebx]
jmp 0x4d1940
mov dword [0x5cd6c4], 0
movzx ecx, ax
jmp 0x4d194e
xor edx, edx
movzx eax, ax
movzx ecx, ax
mov dword [0x5cd6c4], edx
cmp cx, si
jne 0x4d1999
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4d1999
cmp eax, 0x7fffffff
jae 0x4d1999
cmp dword [eax + ebx], 0x4550
jne 0x4d1999
lea edx, [eax + 0x78]
mov eax, dword [edx + ebx]
add edx, ebx
test eax, eax
je 0x4d198d
cmp dword [edx + 4], 0
je 0x4d198d
push 0
add eax, ebx
mov ecx, ebx
push str.MiniDumpWriteDump
push eax
call fcn.004c0900
movzx ecx, word [ebx]
jmp 0x4d199e
mov dword [0x5cd6bc], 0
jmp 0x4d19ac
xor eax, eax
movzx ecx, cx
mov dword [0x5cd6bc], eax
cmp cx, si
jne 0x4d1a68
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4d19ef
cmp eax, 0x7fffffff
jae 0x4d19ef
cmp dword [eax + ebx], 0x4550
jne 0x4d19ef
lea edx, [eax + 0x78]
mov eax, dword [edx + ebx]
add edx, ebx
test eax, eax
je 0x4d19ef
cmp dword [edx + 4], 0
je 0x4d19ef
push 0
add eax, ebx
mov ecx, ebx
push str.UnDecorateSymbolNameW
push eax
call fcn.004c0900
cmp word [ebx], si
jne 0x4d1a68
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4d1a2e
cmp eax, 0x7fffffff
jae 0x4d1a2e
cmp dword [eax + ebx], 0x4550
jne 0x4d1a2e
lea edx, [eax + 0x78]
mov eax, dword [edx + ebx]
add edx, ebx
test eax, eax
je 0x4d1a2e
cmp dword [edx + 4], 0
je 0x4d1a2e
push 0
add eax, ebx
mov ecx, ebx
push str.SymGetDiaSession
push eax
call fcn.004c0900
cmp word [ebx], si
jne 0x4d1a68
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4d1a68
cmp eax, 0x7fffffff
jae 0x4d1a68
cmp dword [eax + ebx], 0x4550
jne 0x4d1a68
lea edx, [eax + 0x78]
mov eax, dword [edx + ebx]
add edx, ebx
test eax, eax
je 0x4d1a68
cmp dword [edx + 4], 0
je 0x4d1a68
push 0
add eax, ebx
mov ecx, ebx
push str.SymFreeDiaString
push eax
call fcn.004c0900
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret