Function at 0x4cb0a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x59fbb8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa4
push ebx
push ebp
push esi
push edi
mov edi, ecx
push edi
lea ecx, [esp + 0x94]
call fcn.00574340
mov eax, dword [edi]
xor ebx, ebx
mov ecx, edi
mov dword [esp + 0xbc], ebx
call dword [eax + 0x1a0]
mov edx, dword [edi]
mov esi, eax
mov ecx, edi
mov dword [esp + 0x30], esi
call dword [edx + 0x1a4]
mov ecx, edi
mov ebp, eax
call fcn.004caa70
cmp eax, ebx
jne 0x4cb10a
cmp dword [edi + 0x284], ebx
jne 0x4cb10a
xor ecx, ecx
jmp 0x4cb10f
mov ecx, 1
mov eax, dword [edi + 0x24c]
add ebp, esi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x40], esi
mov dword [esp + 0x7c], esi
mov esi, dword [sym.imp.USER32.dll_SetRectEmpty]
lea edx, [eax - 2]
mov dword [esp + 0x84], ebp
cmp ecx, ebx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x34], 2
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], eax
mov ebp, 4
je 0x4cb228
mov eax, dword [edi + 0x270]
cmp eax, ebx
je 0x4cb175
mov ebp, dword [eax + 0x44]
jmp 0x4cb177
xor ebp, ebp
mov ecx, edi
call fcn.004cc3e0
mov esi, eax
mov ecx, edi
mov ebx, esi
sub ebx, ebp
call fcn.004cb020
add eax, esi
mov edx, ebp
push eax
mov eax, dword [esp + 0xc8]
neg edx
lea ecx, [eax + ebp]
lea esi, [edi + 0x1ec]
push ecx
push ebx
push edx
push esi
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 4]
sub eax, ecx
add eax, ebx
push eax
lea eax, [esp + 0x38]
push 0
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 4]
sub eax, ecx
lea ecx, [esp + 0x78]
add eax, ebx
push eax
push 0
push ecx
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [edi + 0x1f8]
mov ebx, dword [esp + 0xc4]
push eax
push ebx
lea esi, [edi + 0x1fc]
push 0
push 0
push esi
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [edi + 0x1f8]
lea edx, [edi + 0x20c]
push eax
push ebx
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [edi + 0x270]
test eax, eax
jne 0x4cb243
push esi
call dword [sym.imp.USER32.dll_SetRectEmpty]
jmp 0x4cb243
lea eax, [edi + 0x1ec]
push eax
call esi
lea eax, [edi + 0x1fc]
push eax
call esi
lea ecx, [edi + 0x20c]
push ecx
call esi
mov eax, 0x5b7d58
xor ebx, ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x6c], ebx
mov ecx, edi
mov byte [esp + 0xbc], 2
mov dword [esp + 0x14], ebx
call fcn.0049fd50
test eax, eax
jle 0x4cb33c
mov edx, dword [esp + 0x14]
mov ecx, edi
push edx
call fcn.0049fd60
mov esi, eax
mov ecx, edi
push esi
call fcn.004cafb0
test eax, eax
je 0x4cb2c0
mov eax, dword [esp + 0x6c]
push 0xffffffffffffffff
mov ebx, eax
inc eax
push eax
lea ecx, [esp + 0x6c]
call fcn.004d6950
mov eax, dword [esp + 0x68]
jmp 0x4cb31f
mov edx, dword [esi]
push ebx
mov ecx, esi
call dword [edx + 0x78]
test eax, eax
je 0x4cb324
cmp dword [esi + 0x154], ebx
jne 0x4cb324
mov eax, dword [esi + 0x80]
cmp eax, 0xf020
jl 0x4cb2e8
cmp eax, 0xf120
jle 0x4cb324
cmp esi, dword [edi + 0x264]
je 0x4cb324
cmp esi, dword [edi + 0x1c0]
je 0x4cb324
cmp esi, dword [edi + 0x1c4]
je 0x4cb324
cmp esi, dword [edi + 0x258]
je 0x4cb324
mov eax, dword [esp + 0x58]
push 0xffffffffffffffff
mov ebx, eax
inc eax
push eax
lea ecx, [esp + 0x58]
call fcn.004d6950
mov eax, dword [esp + 0x54]
mov dword [eax + ebx*4], esi
xor ebx, ebx
mov esi, dword [esp + 0x14]
mov ecx, edi
inc esi
mov dword [esp + 0x14], esi
call fcn.0049fd50
cmp esi, eax
jl 0x4cb28d
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x30]
mov eax, dword [edi + 0x23c]
cmp eax, ebx
lea esi, [ecx + edx - 3]
je 0x4cb37d
cmp dword [edi + 0x238], ebx
je 0x4cb37d
mov eax, dword [esp + 0x84]
lea edx, [edi + 0x21c]
add ecx, eax
push ecx
mov ecx, dword [esp + 0xc8]
push ecx
push eax
push ebx
push edx
call dword [sym.imp.USER32.dll_SetRect]
jmp 0x4cb3a9
mov edx, dword [edi + 0x1f0]
lea ebx, [edi + 0x21c]
lea eax, [edx + ebp]
mov edx, dword [edi + 0x1f4]
lea ecx, [eax + ecx - 3]
add eax, 0xfffffffe
push ecx
push edx
push eax
lea eax, [esi + 3]
push eax
push ebx
call dword [sym.imp.USER32.dll_SetRect]
xor ebx, ebx
mov eax, dword [edi + 0x264]
mov dword [esp + 0x10], 2
cmp eax, ebx
je 0x4cb4d8
mov edx, dword [edi + 0x1f0]
mov ebx, esi
lea ecx, [esi - 1]
lea esi, [edx + ebp - 1]
mov edx, dword [esp + 0x20]
test edx, edx
jne 0x4cb407
mov edx, dword [eax]
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
call dword [edx + 0x94]
mov ebx, dword [eax]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x30]
sub eax, ecx
cdq
sub eax, edx
mov esi, eax
mov eax, dword [esp + 0x38]
sar esi, 1
add esi, eax
jmp 0x4cb45f
mov edx, dword [edi + 0x234]
test edx, edx
jne 0x4cb45f
mov edx, dword [eax]
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
call dword [edx + 0x94]
mov ebx, dword [eax]
mov edx, dword [edi + 0x1f0]
mov ecx, dword [eax + 4]
mov eax, dword [edi + 0x1f8]
sub eax, edx
sub eax, ecx
cdq
sub eax, edx
mov edx, dword [edi + 0x1f0]
mov esi, eax
mov eax, dword [edi + 0x238]
sar esi, 1
add esi, edx
test eax, eax
jne 0x4cb45f
lea edx, [ebx + 0xf]
mov dword [edi + 0x21c], edx
mov eax, dword [esp + 0x20]
add ecx, esi
xor ebp, ebp
mov dword [esp + 0x1c], ecx
test eax, eax
mov dword [esp + 0x10], ebx
jne 0x4cb484
mov eax, dword [edi + 0x234]
test eax, eax
jne 0x4cb484
mov eax, 1
jmp 0x4cb486
xor eax, eax
mov ecx, dword [edi + 0x264]
test eax, eax
mov eax, dword [ecx]
mov edx, dword [ecx + 0xcc]
je 0x4cb49d
or edx, 2
jmp 0x4cb4a0
and edx, 0xfffffffd
push edx
call dword [eax + 0x8c]
sub esp, 0x10
mov ecx, dword [edi + 0x264]
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], ebp
mov dword [edx + 4], esi
mov esi, dword [esp + 0x2c]
mov dword [edx + 8], ebx
mov dword [edx + 0xc], esi
call dword [eax + 0x74]
mov eax, dword [edi + 0x264]
xor ebx, ebx
mov dword [eax + 0x90], 1
mov eax, dword [esp + 0x58]
xor ebp, ebp
cmp eax, ebx
mov dword [esp + 0x14], ebp
jle 0x4cb610
mov eax, dword [esp + 0x54]
mov esi, dword [eax + ebp*4]
mov ecx, esi
call fcn.00493eb0
test al, 1
jne 0x4cb5ff
mov edx, dword [edi + 0x234]
xor eax, eax
cmp edx, ebx
mov edx, dword [esi]
sete al
cmp eax, ebx
mov eax, dword [esi + 0xcc]
je 0x4cb51d
or al, 4
jmp 0x4cb51f
and al, 0xfb
push eax
mov ecx, esi
call dword [edx + 0x8c]
mov edx, dword [esi]
push ebx
mov ecx, esi
call dword [edx + 0x78]
test eax, eax
je 0x4cb5ff
mov eax, dword [esi]
lea ecx, [esp + 0x90]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, esi
call dword [eax + 0x94]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
sub eax, ecx
cdq
sub eax, edx
mov edx, dword [esp + 0x38]
mov ebx, eax
mov eax, dword [esi + 0x94]
sar ebx, 1
add ebx, edx
test eax, eax
je 0x4cb575
add dword [esp + 0x10], 6
mov eax, dword [esp + 0x10]
add ecx, ebx
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [esi]
mov dword [esp + 0xa4], eax
lea ebp, [ecx + eax]
mov eax, dword [esi + 0xcc]
and al, 0xfd
mov ecx, esi
push eax
mov dword [esp + 0x14], ebp
call dword [edx + 0x8c]
mov ecx, dword [esp + 0xa4]
sub esp, 0x10
mov eax, esp
mov edx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], ebx
mov dword [eax + 8], ebp
mov dword [eax + 0xc], ecx
mov ecx, esi
call dword [edx + 0x74]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x40]
mov edx, dword [esp + 0xc8]
lea ebp, [esi + 0xac]
mov eax, 2
add edx, 0xfffffffe
mov dword [ebp], eax
mov dword [esi + 0x90], 0
mov dword [ebp + 4], ecx
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], ebx
mov ebp, dword [esp + 0x14]
xor ebx, ebx
mov eax, dword [esp + 0x58]
inc ebp
cmp ebp, eax
mov dword [esp + 0x14], ebp
jl 0x4cb4ea
mov edx, dword [edi + 0x23c]
mov eax, dword [esp + 0x10]
cmp edx, ebx
mov dword [esp + 0x44], eax
je 0x4cb661
mov ecx, dword [edi + 0x238]
cmp ecx, ebx
jne 0x4cb661
cmp dword [esp + 0x20], ebx
jne 0x4cb661
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2c], 1
add eax, 5
mov dword [esp + 0x10], eax
mov dword [edi + 0x21c], eax
mov eax, dword [esp + 0x38]
mov dword [edi + 0x220], eax
mov eax, dword [esp + 0x40]
mov dword [edi + 0x228], eax
jmp 0x4cb680
mov ecx, dword [edi + 0x238]
mov esi, dword [edi + 0x21c]
mov eax, ecx
mov dword [esp + 0x2c], ebx
neg eax
sbb eax, eax
and eax, 2
add eax, esi
mov dword [esp + 0x10], eax
cmp edx, ebx
je 0x4cb698
cmp ecx, ebx
je 0x4cb698
mov ecx, dword [esp + 0xc4]
add ecx, 0xfffffff1
mov dword [esp + 0x18], ecx
jmp 0x4cb6d1
mov ecx, edi
call fcn.004cd860
test eax, eax
je 0x4cb6b3
mov edx, dword [esp + 0xc4]
add edx, 0xffffff8d
mov dword [esp + 0x18], edx
jmp 0x4cb6d1
mov eax, dword [edi + 0x1f0]
mov edx, dword [edi + 0x1f8]
mov ecx, dword [esp + 0xc4]
sub eax, edx
lea edx, [ecx + eax*2]
add eax, edx
mov dword [esp + 0x18], eax
mov ecx, dword [edi + 0x260]
cmp ecx, ebx
je 0x4cb6ed
mov edx, dword [ecx + 0xcc]
mov eax, dword [ecx]
or edx, 1
push edx
call dword [eax + 0x8c]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1c], ebx
cmp eax, ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x14], ebx
jle 0x4cb92b
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x14]
mov esi, dword [eax + ecx*4]
mov eax, dword [edi + 0x23c]
test eax, eax
jne 0x4cb726
mov eax, dword [esi + 0xcc]
mov edx, dword [esi]
or al, 2
jmp 0x4cb744
cmp esi, dword [edi + 0x260]
je 0x4cb74d
mov eax, dword [esp + 0x1c]
mov edx, dword [esi]
test eax, eax
mov eax, dword [esi + 0xcc]
je 0x4cb742
or al, 2
jmp 0x4cb744
and al, 0xfd
push eax
mov ecx, esi
call dword [edx + 0x8c]
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4cb772
mov eax, dword [edi + 0x234]
test eax, eax
jne 0x4cb772
mov eax, dword [esi + 0xcc]
mov edx, dword [esi]
or al, 2
mov ecx, esi
push eax
call dword [edx + 0x8c]
cmp esi, dword [edi + 0x25c]
jne 0x4cb799
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4cb799
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x4cb799
mov eax, dword [edi + 0x238]
test eax, eax
jne 0x4cb799
add dword [esp + 0x10], 0xc
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x78]
test eax, eax
je 0x4cb916
cmp esi, dword [edi + 0x260]
je 0x4cb7c4
mov eax, dword [edi + 0x25c]
mov dword [esp + 0x48], 0
cmp esi, eax
jne 0x4cb7cc
mov dword [esp + 0x48], 1
mov eax, dword [esi]
lea ecx, [esp + 0x90]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, esi
call dword [eax + 0x94]
mov eax, dword [edi + 0x228]
mov ecx, dword [edi + 0x220]
lea ebp, [edi + 0x21c]
sub eax, ecx
mov ecx, dword [esp + 0x28]
sub eax, ecx
inc eax
cdq
sub eax, edx
mov edx, dword [edi + 0x220]
mov ebx, eax
mov eax, dword [esp + 0x48]
sar ebx, 1
add ebx, edx
test eax, eax
jne 0x4cb87a
mov eax, dword [edi + 0x238]
test eax, eax
jne 0x4cb82a
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x4cb82a
add ebx, 2
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
add edx, eax
mov dword [esp + 0x4c], 1
cmp edx, dword [esp + 0x18]
jle 0x4cb87e
mov ecx, dword [esi + 0xcc]
mov eax, dword [esi]
or ecx, 2
mov dword [esp + 0x1c], 1
push ecx
mov ecx, esi
call dword [eax + 0x8c]
mov ecx, dword [edi + 0x260]
mov eax, dword [ecx + 0xcc]
mov edx, dword [ecx]
and al, 0xfe
push eax
call dword [edx + 0x8c]
jmp 0x4cb916
mov eax, dword [esp + 0x10]
add ecx, ebx
mov dword [esp + 0xa4], eax
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x24]
add ecx, eax
mov eax, dword [esp + 0x2c]
test eax, eax
mov dword [esp + 0x88], ecx
jne 0x4cb8ab
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x4cb8af
mov dword [esp + 0x10], ecx
mov eax, dword [esi + 0xcc]
mov edx, dword [esi]
and al, 0xfd
mov ecx, esi
push eax
call dword [edx + 0x8c]
mov ecx, dword [esp + 0xa4]
sub esp, 0x10
mov eax, esp
mov edx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esp + 0x98]
mov dword [eax + 4], ebx
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x9c]
mov dword [eax + 0xc], ecx
mov ecx, esi
call dword [edx + 0x74]
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
lea ebp, [esi + 0xac]
mov dword [esi + 0x90], 0
mov dword [ebp], eax
mov dword [ebp + 4], ecx
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x6c]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x4cb705
mov eax, dword [edi + 0x238]
test eax, eax
jne 0x4cb93f
mov edx, dword [esp + 0x10]
mov dword [edi + 0x224], edx
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x4cb94f
mov eax, dword [esp + 0x44]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x18], ecx
lea ebx, [edx - 1]
test ebx, ebx
mov dword [esp + 0x14], ebx
jl 0x4cba8d
mov eax, dword [esp + 0x54]
mov esi, dword [eax + ebx*4]
mov ecx, esi
call fcn.00493eb0
test al, 1
je 0x4cba7e
mov edx, dword [edi + 0x234]
xor eax, eax
test edx, edx
mov edx, dword [esi]
sete al
test eax, eax
mov eax, dword [esi + 0xcc]
je 0x4cb9a0
or al, 4
jmp 0x4cb9a2
and al, 0xfb
push eax
mov ecx, esi
call dword [edx + 0x8c]
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x78]
test eax, eax
je 0x4cba7e
mov eax, dword [esi]
lea ecx, [esp + 0x90]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, esi
call dword [eax + 0x94]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
sub eax, ecx
mov ebx, dword [esp + 0x38]
cdq
sub eax, edx
mov edx, dword [esp + 0x24]
mov ebp, eax
mov eax, dword [esp + 0x18]
sar ebp, 1
add ebp, ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xac], eax
mov eax, dword [esi + 0xcc]
add ecx, ebp
sub ebx, edx
mov edx, dword [esi]
and al, 0xfd
mov dword [esp + 0x44], ecx
push eax
mov ecx, esi
mov dword [esp + 0x1c], ebx
call dword [edx + 0x8c]
sub esp, 0x10
mov ecx, dword [esp + 0xbc]
mov eax, esp
mov edx, dword [esi]
mov dword [eax], ebx
mov dword [eax + 4], ebp
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], ecx
mov ecx, esi
call dword [edx + 0x74]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x40]
mov edx, dword [esp + 0xc8]
lea ebp, [esi + 0xac]
mov eax, 2
add edx, 0xfffffffe
mov dword [ebp], eax
mov eax, dword [esi]
push 0
mov dword [esi + 0x90], 1
mov dword [ebp + 4], ecx
mov ecx, esi
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], ebx
call dword [eax + 0x5c]
mov ebx, dword [esp + 0x14]
dec ebx
mov dword [esp + 0x14], ebx
jns 0x4cb96d
mov ecx, dword [esp + 0x18]
mov eax, dword [edi + 0x234]
test eax, eax
jne 0x4cba9f
mov edx, dword [esp + 0x38]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x10]
lea esi, [edx + 6]
cmp esi, ecx
jg 0x4cbacc
test eax, eax
je 0x4cbacc
lea esi, [edi + 0x1cc]
mov eax, dword [esp + 0x40]
mov ebx, esi
inc eax
mov dword [ebx], edx
mov edx, dword [esp + 0x38]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
jmp 0x4cbad9
lea esi, [edi + 0x1cc]
push esi
call dword [sym.imp.USER32.dll_SetRectEmpty]
mov ecx, dword [edi + 0x258]
test ecx, ecx
je 0x4cbb7d
mov ebx, dword [edi + 0x234]
mov edx, dword [ecx + 0xcc]
xor eax, eax
test ebx, ebx
sete al
test eax, eax
mov eax, dword [ecx]
je 0x4cbb05
or edx, 1
jmp 0x4cbb08
and edx, 0xfffffffe
push edx
call dword [eax + 0x8c]
sub esp, 0x10
mov edx, esi
mov ecx, dword [edi + 0x258]
mov ebx, esp
mov ebp, dword [edx]
mov eax, dword [ecx]
mov dword [ebx], ebp
mov ebp, dword [edx + 4]
mov dword [ebx + 4], ebp
mov ebp, dword [edx + 8]
mov dword [ebx + 8], ebp
mov edx, dword [edx + 0xc]
mov dword [ebx + 0xc], edx
call dword [eax + 0x74]
mov eax, dword [edi + 0x258]
test eax, eax
je 0x4cbb49
lea ebx, [eax + 0x180]
jmp 0x4cbb4b
xor ebx, ebx
mov ecx, edi
call fcn.004cc9b0
mov ebp, dword [esi]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], ebp
mov ebp, dword [esi + 4]
mov dword [ecx + 4], ebp
mov ebp, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [ecx + 8], ebp
mov dword [ecx + 0xc], esi
lea ecx, [esp + 0xa0]
push ecx
push ebx
mov ecx, eax
call dword [edx + 0x58]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
sub esp, 0x10
mov edx, esp
mov dword [edx], eax
mov eax, dword [esp + 0x90]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x94]
mov dword [edx + 8], eax
mov dword [edx + 0xc], ecx
lea edx, [esp + 0xa0]
push edx
mov ecx, edi
call fcn.004cc810
mov ecx, edi
call fcn.004cc400
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4cbbc8
mov ecx, edi
call fcn.004cc040
mov esi, 0x5b7d58
mov dword [esp + 0x64], esi
mov eax, dword [esp + 0x68]
mov byte [esp + 0xbc], 3
test eax, eax
je 0x4cbbea
push eax
call fcn.0056bc87
add esp, 4
mov dword [esp + 0x50], esi
mov eax, dword [esp + 0x54]
mov byte [esp + 0xbc], 4
test eax, eax
je 0x4cbc07
push eax
call fcn.0056bc87
add esp, 4
lea ecx, [esp + 0x90]
mov dword [esp + 0xbc], 0xffffffff
call fcn.005743b2
mov ecx, dword [esp + 0xb4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xb0
ret 8