Function at 0x4d99c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x4da9ff
sub esp, 0xa4
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 1
call fcn.004d9520
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
test ebx, ebx
jne 0x4da9c9
mov eax, dword [esp + 0xb8]
cmp eax, 4
jne 0x4da9b6
mov ebx, dword [esp + 0xb4]
cmp dword [ebx], 0x6c616964
jne 0x4da9aa
mov ebp, dword [esp + 0xc8]
test ebp, ebp
je 0x4da968
mov dword [esp + 0x68], ecx
mov dword [esp + 0x38], edx
cmp edx, 4
jne 0x4d9db8
cmp dword [ecx], 0x78696e75
jne 0x4d9db8
cmp edx, 4
nop
jne 0x4d9d4f
cmp dword [ecx], 0x78696e75
jne 0x4d9d4f
lea eax, [0x7cf820]
mov dword [esp], eax
call fcn.00409f80
mov edi, dword [esp + 4]
mov eax, dword [esp + 0xc8]
mov dword [edi + 4], eax
mov eax, dword [0xb91180]
test eax, eax
jne 0x4d9d3e
mov ecx, dword [esp + 0xc4]
mov dword [edi], ecx
mov ecx, dword [esp + 0x38]
mov dword [edi + 0xc], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x4d9d25
mov eax, dword [esp + 0x68]
mov dword [edi + 8], eax
xor eax, eax
xor ecx, ecx
test eax, eax
jne 0x4d9cef
mov dword [esp + 0x88], edi
mov eax, dword [esp + 0xb8]
cmp eax, 4
jne 0x4d9ce1
mov eax, dword [esp + 0xb4]
cmp dword [eax], 0x6c616964
jne 0x4d9cd3
mov eax, dword [esp + 0xcc]
test eax, eax
jne 0x4d9c77
xor ecx, ecx
test cl, cl
je 0x4d9bfa
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0xd0]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x50], ecx
lea edx, [0x7cf580]
mov dword [esp], edx
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1d
mov eax, dword [0xb91180]
test eax, eax
jne 0x4d9bed
lea ecx, [0x820f4e]
mov dword [edi], ecx
mov ecx, dword [esp + 0x50]
mov dword [edi + 0xc], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x4d9bd4
mov eax, dword [esp + 0xa0]
mov dword [edi + 8], eax
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
lea eax, [0x8b3e50]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], edi
add esp, 0xa4
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa0]
call fcn.0044f0d0
mov edi, edx
jmp 0x4d9b98
lea eax, [0x820f4e]
call fcn.0044f0d0
jmp 0x4d9b7d
lea eax, [0x79b7c0]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
lea ecx, [0x8b6e70]
mov dword [eax], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x4d9c62
mov ecx, dword [esp + 0x88]
mov dword [eax + 4], ecx
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], 1
mov dword [esp + 0xdc], 1
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
add esp, 0xa4
ret
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x88]
call fcn.0044f0d0
mov eax, ecx
jmp 0x4d9c28
nop
mov ecx, dword [eax + 0x10]
mov edx, dword [edi + 0xc]
mov dword [esp + 0x34], edx
mov ebx, dword [edi + 8]
mov dword [esp + 0x5c], ebx
mov ebp, dword [esp + 0xd0]
mov dword [esp], ebp
call ecx
mov eax, dword [esp + 0x34]
cmp dword [esp + 8], eax
je 0x4d9cb9
mov eax, 1
mov edi, dword [esp + 0x88]
mov ecx, eax
mov eax, dword [esp + 0xcc]
jmp 0x4d9b28
mov ecx, dword [esp + 0x5c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402010
movzx eax, byte [esp + 0xc]
xor eax, 1
jmp 0x4d9ca4
mov eax, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x4d9b28
mov eax, dword [esp + 0xcc]
xor ecx, ecx
jmp 0x4d9b28
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
add esp, 0xa4
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x68]
call fcn.0044f0d0
mov edi, edx
jmp 0x4d9ae1
mov eax, dword [esp + 0xc4]
call fcn.0044f0d0
jmp 0x4d9ac5
cmp edx, 8
jne 0x4d9d69
cmp dword [ecx], 0x78696e75
jne 0x4d9d69
cmp dword [ecx + 4], 0x6d617267
je 0x4d9a92
cmp edx, 0xa
je 0x4d9d8b
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00407990
mov ecx, dword [esp + 8]
xor edi, edi
lea eax, [0x8b4990]
jmp 0x4d9ae5
mov dword [esp], ecx
lea eax, [0x8163e5]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00402010
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4d9a92
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x38]
jmp 0x4d9d6e
cmp edx, 8
jne 0x4d9dd6
cmp dword [ecx], 0x78696e75
jne 0x4d9dd6
cmp dword [ecx + 4], 0x6d617267
jne 0x4d9dd6
cmp edx, 4
jmp 0x4d9a7f
cmp edx, 0xa
je 0x4da910
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
call fcn.004e7ad0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
test ecx, ecx
je 0x4d9e5d
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ebp
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], edx
add esp, 0xa4
ret
mov esi, dword [esp + 0xb8]
cmp esi, 4
je 0x4da8f7
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4d9e33
mov esi, dword [esp + 0xcc]
test esi, esi
je 0x4d9e33
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x44], ebp
je 0x4da8e3
mov dword [esp + 0x40], eax
mov ecx, dword [esi + 8]
cmp ecx, 0x103a77be
jne 0x4da8d8
lea edx, [0x8b6e30]
cmp edx, esi
jne 0x4da8ce
mov edi, dword [esp + 0xd0]
jne 0x4da793
nop
test edi, edi
je 0x4d9ed4
mov ecx, dword [edi + 8]
mov edx, dword [edi + 4]
mov esi, dword [edi]
test esi, esi
jne 0x4da75f
mov ecx, 1
xor edx, edx
xor esi, esi
mov dword [esp + 0x70], esi
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], edi
mov byte [esp + 0x33], cl
mov dword [esp + 0x54], eax
xor eax, eax
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x54]
jmp 0x4d9f24
mov esi, dword [esp + 0x50]
inc esi
mov edi, dword [esp + 0x64]
mov dword [esp + 0x50], esi
mov dword [esp + 0x3c], edx
mov ebx, eax
mov eax, ebp
mov edx, dword [esp + 0x60]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0x70]
mov esi, dword [esp + 0x50]
cmp esi, ebp
jge 0x4da627
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x6c]
lea ecx, [eax + esi*8]
mov edx, dword [ecx]
mov dword [esp + 0x48], edx
mov ecx, dword [ecx + 4]
mov dword [esp + 0x74], ecx
mov ebx, dword [edx + 0x10]
mov dword [esp], ecx
call ebx
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x9c], ecx
mov edx, dword [esp + 0xcc]
mov ebx, dword [edx + 0x10]
mov ebp, dword [esp + 0xd0]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x4da556
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402010
movzx eax, byte [esp + 0xc]
test al, al
je 0x4da556
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x4da542
mov edx, dword [ecx + 8]
cmp edx, 0x103a77be
jne 0x4da537
lea ebx, [0x8b6e30]
cmp ebx, ecx
jne 0x4da52d
mov eax, dword [esp + 0x74]
jne 0x4da144
mov dword [esp + 0x80], eax
movzx ecx, byte [esp + 0x33]
test cl, cl
je 0x4da0fd
xor edx, edx
test dl, dl
jne 0x4da0ad
xor edx, edx
test dl, dl
je 0x4da019
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
jmp 0x4d9f03
mov edx, dword [esp + 0x3c]
lea ebp, [edx + 1]
mov esi, dword [esp + 0x40]
cmp ebp, esi
ja 0x4da061
mov edi, dword [esp + 0xa0]
lea ecx, [edi + edx*8]
mov dword [ecx], ebx
lea ecx, [edi + edx*8 + 4]
mov edx, dword [0xb91180]
test edx, edx
jne 0x4da054
mov dword [ecx], eax
movzx ecx, byte [esp + 0x33]
mov eax, edi
mov edx, ebp
mov ebp, esi
jmp 0x4d9f03
mov edx, edi
mov edi, ecx
call fcn.0044f0d0
mov edi, edx
jmp 0x4da044
lea eax, [0x7c6540]
mov dword [esp], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043a950
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x80]
movzx ecx, byte [esp + 0x33]
mov edx, dword [esp + 0x3c]
lea ebx, [0x8b6e30]
jmp 0x4da02f
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov ebp, dword [esp + 0x64]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 4]
mov ebp, dword [ebp]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], esi
call fcn.004e34d0
movzx edx, byte [esp + 0x18]
xor edx, 1
mov eax, dword [esp + 0x80]
movzx ecx, byte [esp + 0x33]
lea ebx, [0x8b6e30]
jmp 0x4da001
nop
test eax, eax
je 0x4da10e
mov edx, dword [eax + 8]
mov ebp, dword [eax + 4]
mov esi, dword [eax]
test esi, esi
jne 0x4da11b
mov edx, 1
xor edx, 1
jmp 0x4d9ff7
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.004e1c10
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x80]
movzx ecx, byte [esp + 0x33]
lea ebx, [0x8b6e30]
jmp 0x4da113
cmp edx, 0xd7d15deb
jne 0x4da522
lea ebp, [0x8b6e50]
cmp ebp, ecx
jne 0x4da518
mov eax, dword [esp + 0x74]
jne 0x4da315
mov dword [esp + 0x8c], eax
movzx ecx, byte [esp + 0x33]
test cl, cl
je 0x4da2be
xor edx, edx
test dl, dl
jne 0x4da268
xor edx, edx
test dl, dl
je 0x4da1a0
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
jmp 0x4d9f03
mov edx, dword [esp + 0x3c]
lea esi, [edx + 1]
mov edi, ecx
mov ecx, dword [esp + 0x40]
cmp esi, ecx
ja 0x4da20a
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x98], ebx
lea ebx, [0x8b6e30]
mov dword [esp + 0x40], ecx
mov ebx, dword [esp + 0x98]
lea ecx, [ebx + edx*8]
mov dword [ecx], ebp
mov ecx, dword [0xb91180]
lea edx, [ebx + edx*8 + 4]
test ecx, ecx
jne 0x4da1fd
mov dword [edx], eax
lea ebx, [0x8b6e30]
mov ebp, esi
mov edi, dword [esp + 0x98]
mov esi, dword [esp + 0x40]
jmp 0x4da044
mov ecx, edi
mov edi, edx
call fcn.0044f0d0
mov edi, ecx
jmp 0x4da1e5
lea eax, [0x7c6540]
mov dword [esp], eax
mov ebx, dword [esp + 0xa0]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea esi, [ecx + 1]
lea ebx, [0x8b6e30]
lea ebp, [0x8b6e50]
movzx edi, byte [esp + 0x33]
mov dword [esp + 0x98], eax
mov ecx, edx
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0x3c]
jmp 0x4da1c5
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov ebx, dword [eax + 8]
mov ebp, dword [esp + 0x60]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 4]
mov ebp, dword [ebp]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], esi
call fcn.004e34d0
movzx edx, byte [esp + 0x18]
xor edx, 1
mov eax, dword [esp + 0x8c]
movzx ecx, byte [esp + 0x33]
lea ebx, [0x8b6e30]
lea ebp, [0x8b6e50]
jmp 0x4da188
nop
test eax, eax
je 0x4da311
mov edx, dword [eax + 8]
mov esi, dword [eax + 4]
mov edi, ecx
mov ecx, dword [eax]
test ecx, ecx
jne 0x4da2e2
mov ecx, 1
xor ecx, 1
mov edx, ecx
mov ecx, edi
jmp 0x4da17e
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], edx
call fcn.004e1c10
movzx ecx, byte [esp + 0xc]
mov eax, dword [esp + 0x8c]
lea ebx, [0x8b6e30]
lea ebp, [0x8b6e50]
movzx edi, byte [esp + 0x33]
jmp 0x4da2d6
mov edi, ecx
jmp 0x4da2d1
cmp edx, 0xff2d2c4c
jne 0x4da510
lea edx, [0x8b6df0]
cmp edx, ecx
jne 0x4da506
mov eax, dword [esp + 0x74]
jne 0x4da4f2
mov dword [esp + 0x90], eax
movzx ecx, byte [esp + 0x33]
test cl, cl
je 0x4da495
xor esi, esi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4da439
xor esi, esi
xchg esi, eax
test al, al
xchg esi, eax
je 0x4da375
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x40]
jmp 0x4d9f03
mov esi, dword [esp + 0x3c]
mov edi, ecx
lea ecx, [esi + 1]
mov ebp, dword [esp + 0x40]
cmp ecx, ebp
ja 0x4da3df
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x94], edx
lea edx, [0x8b6df0]
mov dword [esp + 0x3c], ecx
mov ebx, dword [esp + 0x94]
lea ecx, [ebx + esi*8]
mov dword [ecx], edx
lea ecx, [ebx + esi*8 + 4]
mov esi, dword [0xb91180]
test esi, esi
jne 0x4da3d2
mov dword [ecx], eax
lea ebx, [0x8b6e30]
mov edi, dword [esp + 0x94]
mov esi, ebp
mov ebp, dword [esp + 0x3c]
jmp 0x4da044
mov esi, edi
mov edi, ecx
call fcn.0044f0d0
mov edi, esi
jmp 0x4da3ba
lea eax, [0x7c6540]
mov dword [esp], eax
mov edx, dword [esp + 0xa0]
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
inc ecx
lea edx, [0x8b6df0]
lea ebx, [0x8b6e30]
mov esi, dword [esp + 0x3c]
movzx edi, byte [esp + 0x33]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x90]
jmp 0x4da39a
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov ebp, dword [esp + 0x70]
mov esi, dword [ebp]
mov edi, dword [ebp + 8]
mov ebp, dword [ebp + 4]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edi
call fcn.004e34d0
movzx esi, byte [esp + 0x18]
xor esi, 1
mov eax, dword [esp + 0x90]
movzx ecx, byte [esp + 0x33]
lea edx, [0x8b6df0]
lea ebx, [0x8b6e30]
lea ebp, [0x8b6e50]
jmp 0x4da35b
nop
test eax, eax
je 0x4da4ee
mov esi, dword [eax + 8]
mov edi, ecx
mov ecx, dword [eax + 4]
mov ebp, dword [eax]
test ebp, ebp
jne 0x4da4bf
mov ecx, 1
xor ecx, 1
lea ebp, [0x8b6e50]
mov esi, ecx
mov ecx, edi
jmp 0x4da34f
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.004e1c10
movzx ecx, byte [esp + 0xc]
mov eax, dword [esp + 0x90]
lea edx, [0x8b6df0]
lea ebx, [0x8b6e30]
movzx edi, byte [esp + 0x33]
jmp 0x4da4ad
mov edi, ecx
jmp 0x4da4a8
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0xa0]
mov esi, dword [esp + 0x40]
jmp 0x4da044
mov eax, 0
jmp 0x4da333
lea edx, [0x8b6df0]
jmp 0x4da4f2
mov eax, 0
jmp 0x4da162
lea ebp, [0x8b6e50]
jmp 0x4da315
mov eax, 0
jmp 0x4d9fdb
lea ebx, [0x8b6e30]
jmp 0x4da144
lea edx, [0x8b6df0]
lea ebx, [0x8b6e30]
lea ebp, [0x8b6e50]
jmp 0x4da4f2
mov eax, dword [esp + 0xcc]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0xd0]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xa0], ecx
lea edx, [0x7cf580]
mov dword [esp], edx
call fcn.00409f80
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1d
mov eax, dword [0xb91180]
test eax, eax
jne 0x4da61a
lea ecx, [0x820f4e]
mov dword [edi], ecx
mov ecx, dword [esp + 0x50]
mov dword [edi + 0xc], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x4da601
mov eax, dword [esp + 0xa0]
mov dword [edi + 8], eax
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
lea eax, [0x8b3e50]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], edi
add esp, 0xa4
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa0]
call fcn.0044f0d0
mov edi, edx
jmp 0x4da5c5
lea eax, [0x820f4e]
call fcn.0044f0d0
jmp 0x4da5aa
mov ecx, dword [esp + 0x3c]
test ecx, ecx
jne 0x4da72d
mov eax, dword [0xb7d8c0]
mov eax, dword [eax + 0x10]
mov ecx, dword [0xb7d8c4]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xcc]
mov edx, dword [edx + 0x14]
mov ebx, dword [esp + 0xd0]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x9c], ecx
lea edx, [0x7cf580]
mov dword [esp], edx
call fcn.00409f80
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x50]
mov dword [edi + 4], eax
mov eax, dword [0xb91180]
test eax, eax
jne 0x4da71f
mov ecx, dword [esp + 0xa0]
mov dword [edi], ecx
mov ecx, dword [esp + 0x4c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x4da706
mov eax, dword [esp + 0x9c]
mov dword [edi + 8], eax
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
lea eax, [0x8b3e50]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], edi
add esp, 0xa4
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x9c]
call fcn.0044f0d0
mov edi, edx
jmp 0x4da6ca
mov eax, dword [esp + 0xa0]
call fcn.0044f0d0
jmp 0x4da6af
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
add esp, 0xa4
ret
mov dword [esp + 0x84], edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004e1c10
movzx ecx, byte [esp + 0xc]
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x44]
mov edi, dword [esp + 0x84]
jmp 0x4d9ed9
cmp ecx, 0xd7d15deb
jne 0x4da8c3
lea edi, [0x8b6e50]
cmp edi, esi
jne 0x4da8af
mov edx, dword [esp + 0xd0]
mov dword [esp + 0x78], edx
lea edx, [0x8b6e30]
jne 0x4da810
nop
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x4da7d5
mov edi, dword [ecx + 4]
mov edx, dword [ecx + 8]
mov esi, dword [ecx]
test esi, esi
jne 0x4da7e9
mov edx, 1
xor edi, edi
mov ecx, edx
xor esi, esi
mov edx, dword [esp + 0x78]
jmp 0x4d9edd
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], edx
call fcn.004e1c10
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x44]
jmp 0x4da7da
cmp ecx, 0xff2d2c4c
jne 0x4da8a7
lea ecx, [0x8b6df0]
cmp ecx, esi
jne 0x4da896
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x7c], ecx
lea ecx, [0x8b6df0]
jne 0x4da889
nop
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x4da84e
mov edi, dword [ecx + 8]
mov edx, dword [ecx + 4]
mov esi, dword [ecx]
test esi, esi
jne 0x4da862
mov edx, 1
xor edi, edi
mov ecx, edx
mov esi, dword [esp + 0x7c]
xor edx, edx
jmp 0x4d9edd
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edi
call fcn.004e1c10
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x44]
jmp 0x4da853
xor edi, edi
xor edx, edx
xor ecx, ecx
xor esi, esi
jmp 0x4d9edd
mov ecx, 0
mov dword [esp + 0x7c], ecx
lea ecx, [0x8b6df0]
jmp 0x4da837
lea ecx, [0x8b6df0]
jmp 0x4da889
mov edx, 0
mov dword [esp + 0x78], edx
lea edx, [0x8b6e30]
jmp 0x4da7be
lea edi, [0x8b6e50]
jmp 0x4da810
mov edi, 0
jmp 0x4d9eb9
lea edx, [0x8b6e30]
jmp 0x4da793
lea ecx, [0x8b6df0]
lea edx, [0x8b6e30]
lea edi, [0x8b6e50]
jmp 0x4da889
mov edi, dword [esp + 0xb4]
cmp dword [edi], 0x6c616964
xchg esi, ebx
setne bl
xchg esi, ebx
jmp 0x4d9e72
mov dword [esp], ecx
lea eax, [0x8163e5]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00402010
movzx eax, byte [esp + 0xc]
test al, al
je 0x4da954
mov edx, dword [esp + 0x38]
cmp edx, 4
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x68]
mov ebx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xc8]
jmp 0x4d9a7f
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x38]
mov ebp, dword [esp + 0xc8]
jmp 0x4d9ddf
mov eax, dword [0xb7d8a4]
mov ecx, dword [0xb7d8a0]
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], eax
add esp, 0xa4
ret
mov ebp, dword [esp + 0xc8]
jmp 0x4d9a5f
mov ebx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xc8]
jmp 0x4d9a5f
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], eax
add esp, 0xa4
ret
call fcn.0044d880
jmp fcn.004d99c0