Function at 0x4d7e00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x53cb3e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x108
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov byte [esp + 0x1f], 1
mov dword [esp + 0x20], edi
lea eax, [esp + 0x2a]
xor ebp, ebp
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x124], ebp
call fcn.0050e020
lea ecx, [esp + 0x1e]
mov byte [esp + 0x120], 3
push ecx
lea ecx, [esp + 0xc0]
call fcn.0050e020
push eax
push 4
lea ecx, [esp + 0x4c]
mov byte [esp + 0x128], 4
call fcn.004da0e0
lea ecx, [esp + 0xbc]
mov byte [esp + 0x120], 3
call fcn.00418e50
mov ecx, dword [edi + 4]
mov edx, dword [edi]
sub ecx, edx
mov eax, 0x88888889
imul ecx
add edx, ecx
mov esi, dword [esp + 0x128]
sar edx, 5
mov eax, edx
mov dword [esp + 0x10], ebp
shr eax, 0x1f
add edx, eax
je 0x4d8306
jmp 0x4d7ebc
mov esi, dword [esp + 0x128]
mov edi, dword [esp + 0x20]
xor ebp, ebp
lea ecx, [esp + 0x1e]
mov byte [esp + 0x120], 5
push ecx
lea ecx, [esp + 0x58]
call fcn.00474960
lea ecx, [esp + 0x54]
mov byte [esp + 0x120], 7
call fcn.004d7730
cmp eax, 4
jbe 0x4d7f2d
mov edx, dword [esp + 0x5c]
sub esp, 8
mov eax, esp
sub esp, 8
mov dword [eax], edx
mov ecx, dword [esp + 0x70]
mov dword [eax + 4], ecx
mov edx, esp
push 4
lea eax, [esp + 0xec]
push edx
push eax
lea ecx, [esp + 0x70]
call fcn.004da4f0
mov ecx, eax
call fcn.0047acc0
lea ecx, [esp + 0xf0]
push ecx
lea ecx, [esp + 0x68]
call fcn.00478d90
jmp 0x4d7f55
push ebp
lea ecx, [esp + 0x58]
call fcn.004d7730
mov edx, 4
lea ecx, [esp + 0x58]
sub edx, eax
push edx
sub esp, 8
push esp
call fcn.004da510
lea ecx, [esp + 0x64]
call fcn.00478ab0
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov ebx, dword [edi]
lea edx, [esp + 0x94]
mov dword [esp + 0xb4], eax
push edx
lea eax, [esp + 0xd4]
mov dword [esp + 0xbc], ecx
push ebp
push eax
lea ecx, [esp + 0xc0]
call fcn.0047acc0
mov ecx, eax
call fcn.0047aca0
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4]
mov edx, dword [ebx + ecx*4 + 0x20]
mov ebx, dword [esi]
cmp edx, ebx
sete al
test al, al
je 0x4d7fbc
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
or dword [eax], ecx
jmp 0x4d7fce
mov eax, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
not edx
and dword [eax], edx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov ebx, dword [edi]
lea edx, [esp + 0x8c]
mov dword [esp + 0xac], eax
push edx
lea eax, [esp + 0xcc]
mov dword [esp + 0xb4], ecx
push 1
push eax
lea ecx, [esp + 0xb8]
call fcn.0047acc0
mov ecx, eax
call fcn.0047aca0
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4]
mov edx, dword [ebx + ecx*4 + 0x2c]
mov ebx, dword [esi + 0xc]
cmp edx, ebx
sete al
test al, al
je 0x4d8037
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
or dword [eax], ecx
jmp 0x4d8049
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0x90]
not edx
and dword [eax], edx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov ebx, dword [edi]
lea edx, [esp + 0x84]
mov dword [esp + 0xa4], eax
push edx
lea eax, [esp + 0xec]
mov dword [esp + 0xac], ecx
push 2
push eax
lea ecx, [esp + 0xb0]
call fcn.0047acc0
mov ecx, eax
call fcn.0047aca0
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4]
mov edx, dword [ebx + ecx*4 + 0x28]
mov ebx, dword [esi + 8]
cmp edx, ebx
sete al
test al, al
je 0x4d80b2
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
or dword [eax], ecx
jmp 0x4d80c4
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
not edx
and dword [eax], edx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov edi, dword [edi]
lea edx, [esp + 0x14]
mov dword [esp + 0x9c], eax
push edx
lea eax, [esp + 0xf4]
mov dword [esp + 0xa4], ecx
push 3
push eax
lea ecx, [esp + 0xa8]
call fcn.0047acc0
mov ecx, eax
call fcn.0047aca0
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4]
mov edx, dword [edi + ecx*4 + 0x24]
mov edi, dword [esi + 4]
cmp edx, edi
sete al
test al, al
je 0x4d8124
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
or dword [eax], ecx
jmp 0x4d8130
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
not edx
and dword [eax], edx
mov dword [esp + 0x34], ebp
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x7c]
mov dword [esp + 0x78], ecx
push edx
lea ecx, [esp + 0xc0]
push eax
push ecx
lea ecx, [esp + 0x80]
call fcn.0047acc0
mov ecx, eax
call fcn.0047aca0
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
test dword [eax], edx
je 0x4d82a0
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x24]
xor ebx, ebx
mov byte [esp + 0x1f], 0
mov eax, dword [edx + ecx + 4]
lea esi, [edx + ecx]
mov edx, dword [edx + ecx]
sub eax, edx
sar eax, 2
je 0x4d81fe
mov edi, dword [esp + 0x34]
mov ebp, dword [esp + 0x10]
mov ecx, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x2c], ecx
and edi, 1
mov ecx, dword [edx]
mov eax, dword [esp + 0x2c]
test edi, edi
mov eax, dword [eax + ebx*4]
lea eax, [eax + eax*2]
lea edx, [eax + eax*4]
lea eax, [ecx + edx*4]
lea edx, [ebp + ebp*2]
lea edx, [edx + edx*4]
jle 0x4d81db
mov eax, dword [eax + 0x28]
sub eax, dword [ecx + edx*4 + 0x28]
jmp 0x4d81e2
mov eax, dword [eax + 0x2c]
sub eax, dword [ecx + edx*4 + 0x2c]
cmp dword [esp + 0x24], 0xc
jle 0x4d81eb
neg eax
test eax, eax
jg 0x4d81fe
mov eax, dword [esi + 4]
mov edx, dword [esi]
sub eax, edx
inc ebx
sar eax, 2
cmp ebx, eax
jb 0x4d81b7
mov ecx, dword [esi + 4]
mov edi, dword [esi]
sub ecx, edi
sar ecx, 2
cmp ebx, ecx
jb 0x4d822e
mov eax, dword [esi + 4]
mov ecx, dword [esi + 8]
cmp eax, ecx
je 0x4d821d
lea edx, [esp + 0x10]
push edx
jmp 0x4d8247
push 1
lea ecx, [esp + 0x2f]
push 1
lea edx, [esp + 0x18]
push ecx
push edx
push eax
jmp 0x4d8299
mov ebp, dword [esi]
mov eax, dword [esi + 4]
mov ecx, dword [esi + 8]
cmp eax, ecx
lea ebp, [ebp + ebx*4]
je 0x4d828a
cmp ebp, eax
jne 0x4d825b
lea ecx, [esp + 0x10]
push ecx
push eax
call fcn.004dbbb0
mov eax, dword [esi + 4]
add esp, 8
add eax, 4
mov dword [esi + 4], eax
jmp 0x4d82a0
lea edx, [eax - 4]
push edx
push eax
call fcn.004dbbb0
mov ebx, dword [esi + 4]
add ebx, 4
mov dword [esi + 4], ebx
mov esi, ebx
mov ebx, dword [esp + 0x18]
lea eax, [esi - 4]
add esi, 0xfffffff8
push eax
push esi
push ebp
call fcn.00429660
add esp, 0x14
mov dword [ebp], ebx
jmp 0x4d82a0
push 0
lea eax, [esp + 0x37]
push 1
lea ecx, [esp + 0x18]
push eax
push ecx
push ebp
mov ecx, esi
call fcn.00475600
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x34]
add eax, 0xc
inc esi
cmp eax, 0x30
mov dword [esp + 0x34], esi
mov dword [esp + 0x24], eax
jl 0x4d8138
lea ecx, [esp + 0x54]
mov byte [esp + 0x120], 2
call fcn.00418e50
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x10]
inc esi
mov ecx, dword [eax + 4]
mov edx, dword [eax]
sub ecx, edx
mov eax, 0x88888889
imul ecx
add edx, ecx
mov dword [esp + 0x10], esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp esi, edx
jb 0x4d7eaf
mov esi, dword [esp + 0x128]
xor ebp, ebp
lea ecx, [esp + 0x33]
mov byte [esp + 0x120], 8
push ecx
lea ecx, [esp + 0x3c]
call fcn.0050e020
lea edx, [esp + 0xbc]
lea ecx, [esp + 0x38]
push edx
push 4
mov byte [esp + 0x128], 0xa
call fcn.00445a70
fild dword [esi + 4]
mov eax, dword [esp + 0x38]
fmul dword [0x58289c]
fild dword [esi]
fmul dword [0x58289c]
fstp dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
fstp dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x38]
fild dword [esi + 0xc]
fmul dword [0x58289c]
fild dword [esi]
fmul dword [0x58289c]
fstp dword [esp + 0x14]
mov eax, dword [esp + 0x14]
fstp dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x38]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x38]
fild dword [esi + 0xc]
fmul dword [0x58289c]
fild dword [esi + 8]
fmul dword [0x58289c]
fstp dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
fstp dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov dword [edx + 0x10], ecx
mov ecx, dword [esp + 0x38]
mov dword [ecx + 0x14], eax
mov eax, dword [esp + 0x38]
fild dword [esi + 4]
fmul dword [0x58289c]
fild dword [esi + 8]
xor esi, esi
mov dword [esp + 0x24], esi
fmul dword [0x58289c]
fstp dword [esp + 0x14]
mov edx, dword [esp + 0x14]
fstp dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov dword [eax + 0x18], edx
mov edx, dword [esp + 0x38]
mov dword [edx + 0x1c], ecx
mov eax, dword [esp + 0x44]
lea ebp, [esi + esi*2]
xor ebx, ebx
shl ebp, 2
mov ecx, dword [eax + ebp + 4]
mov edi, dword [eax + ebp]
sub ecx, edi
sar ecx, 2
je 0x4d87f7
mov edx, dword [eax + ebp + 4]
mov edi, dword [eax + ebp]
sub edx, edi
lea ecx, [ebx + 1]
sar edx, 2
cmp ecx, edx
mov dword [esp + 0x2c], ecx
jae 0x4d85a1
mov edi, dword [esp + 0x20]
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0xc]
lea esi, [edi + 0xc]
sub eax, edx
sar eax, 5
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x2b]
mov byte [esp + 0x120], 0xb
push ecx
lea ecx, [esp + 0x74]
call fcn.004d9d00
mov eax, dword [esi + 4]
mov ecx, dword [esi + 8]
cmp eax, ecx
mov byte [esp + 0x120], 0xc
je 0x4d8486
lea edx, [esp + 0x54]
push edx
push eax
call fcn.004dbe50
mov eax, dword [esi + 4]
add esp, 8
add eax, 0x20
mov dword [esi + 4], eax
jmp 0x4d849c
push 1
lea ecx, [esp + 0x22]
push 1
lea edx, [esp + 0x5c]
push ecx
push edx
push eax
mov ecx, esi
call fcn.004da550
lea ecx, [esp + 0x70]
mov byte [esp + 0x120], 0xa
call fcn.00474a00
mov eax, dword [esp + 0x10]
mov esi, dword [esi]
shl eax, 5
add eax, esi
mov dword [eax + 0x18], 0xffffffff
mov ecx, dword [esp + 0x44]
mov ecx, dword [ecx + ebp]
mov edx, dword [ecx + ebx*4]
mov dword [eax], edx
mov ecx, dword [esp + 0x44]
mov ecx, dword [ecx + ebp]
mov ecx, dword [ecx + ebx*4 + 4]
mov dword [eax + 0xc], ecx
mov eax, dword [eax]
mov edx, dword [edi]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea esi, [edx + eax*4]
lea eax, [ecx + ecx*2]
mov esi, dword [esi + 0x30]
lea ecx, [eax + eax*4]
mov eax, dword [esi + ebp + 4]
lea ebx, [edx + ecx*4]
mov edx, dword [esi + ebp + 8]
lea ecx, [esi + ebp]
cmp eax, edx
je 0x4d8511
test eax, eax
je 0x4d850b
mov edx, dword [esp + 0x10]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x4d8525
push 1
lea edx, [esp + 0x2e]
push 1
push edx
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00475600
mov eax, dword [ebx + 0x30]
mov ebx, dword [eax + ebp]
mov ecx, dword [eax + ebp + 8]
lea esi, [eax + ebp]
mov eax, dword [eax + ebp + 4]
cmp eax, ecx
je 0x4d858b
cmp ebx, eax
jne 0x4d855a
lea ecx, [esp + 0x10]
push ecx
push eax
call fcn.004dbbb0
mov eax, dword [esi + 4]
add esp, 8
add eax, 4
mov dword [esi + 4], eax
jmp 0x4d87d7
lea edx, [eax - 4]
push edx
push eax
call fcn.004dbbb0
mov edx, dword [esi + 4]
add edx, 4
mov dword [esi + 4], edx
mov esi, edx
mov edi, dword [esp + 0x18]
lea eax, [esi - 4]
add esi, 0xfffffff8
push eax
push esi
push ebx
call fcn.00429660
add esp, 0x14
mov dword [ebx], edi
jmp 0x4d87d7
push 0
lea eax, [esp + 0x54]
push 1
lea ecx, [esp + 0x18]
push eax
push ecx
push ebx
mov ecx, esi
jmp 0x4d87d2
cmp esi, 3
jl 0x4d85aa
xor esi, esi
jmp 0x4d85ab
inc esi
lea edx, [esi + esi*2]
mov edi, dword [eax + edx*4 + 4]
lea ecx, [eax + edx*4]
mov edx, dword [eax + edx*4]
cmp edx, edi
je 0x4d862a
mov eax, dword [eax + ebp]
mov ecx, edx
mov ecx, dword [ecx]
mov edx, dword [eax + ebx*4]
cmp ecx, edx
jne 0x4d862a
mov ebx, dword [eax + ebx*4]
mov edx, dword [esp + 0x20]
push esi
mov ecx, dword [edx]
lea eax, [ebx + ebx*2]
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4 + 4]
lea eax, [ecx + eax*4]
mov dword [esp + 0x1c], edx
mov ecx, dword [eax]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x18]
call fcn.00478d20
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x74]
mov dword [esp + 0x80], ecx
push edx
lea ecx, [esp + 0x80]
mov dword [esp + 0x80], eax
call fcn.0047aca0
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
or dword [eax], ecx
jmp 0x4d87d7
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 0x10]
lea edi, [edx + 0xc]
mov edx, dword [edx + 0xc]
sub eax, edx
sar eax, 5
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x51]
mov byte [esp + 0x120], 0xd
push ecx
lea ecx, [esp + 0x118]
call fcn.004da170
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
cmp eax, ecx
mov byte [esp + 0x120], 0xe
je 0x4d8687
lea edx, [esp + 0xf8]
push edx
push eax
call fcn.004dbe50
mov eax, dword [edi + 4]
add esp, 8
add eax, 0x20
mov dword [edi + 4], eax
jmp 0x4d86a0
push 1
lea ecx, [esp + 0x56]
push 1
lea edx, [esp + 0x100]
push ecx
push edx
push eax
mov ecx, edi
call fcn.004da550
lea ecx, [esp + 0x114]
mov byte [esp + 0x120], 0xa
call fcn.00474a00
mov eax, dword [edi]
mov edi, dword [esp + 0x10]
shl edi, 5
add edi, eax
mov dword [edi + 0x18], 0xffffffff
mov eax, dword [esp + 0x38]
lea eax, [eax + esi*8]
push eax
push ecx
push esp
lea ecx, [edi + 0x1c]
call fcn.00513c50
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [edi + 0x1c]
call fcn.00421aa0
mov ecx, dword [esp + 0x44]
lea edx, [esi + esi*2]
lea eax, [ecx + edx*4]
mov edx, dword [ecx + edx*4]
cmp edx, dword [eax + 4]
jne 0x4d8703
cmp esi, 3
jl 0x4d8700
xor esi, esi
jmp 0x4d86c6
inc esi
jmp 0x4d86c6
mov eax, dword [ecx + ebp]
lea esi, [esi + esi*2]
shl esi, 2
mov eax, dword [eax + ebx*4]
mov edx, dword [esp + 0x20]
mov dword [edi], eax
mov ecx, dword [esp + 0x44]
mov eax, dword [esi + ecx]
mov eax, dword [eax]
mov dword [edi + 0xc], eax
mov edi, dword [edi]
mov ecx, dword [edx]
lea eax, [eax + eax*2]
lea edx, [edi + edi*2]
lea eax, [eax + eax*4]
lea edx, [edx + edx*4]
lea edi, [ecx + eax*4]
lea edx, [ecx + edx*4]
mov edx, dword [edx + 0x30]
mov eax, dword [edx + ebp + 4]
lea ecx, [edx + ebp]
mov edx, dword [edx + ebp + 8]
cmp eax, edx
je 0x4d8759
test eax, eax
je 0x4d8753
mov edx, dword [esp + 0x10]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x4d876d
push 1
lea edx, [esp + 0x57]
push 1
push edx
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00475600
mov eax, dword [edi + 0x30]
mov edi, dword [esi + eax]
mov edx, dword [esi + eax + 8]
lea ecx, [esi + eax]
mov eax, dword [esi + eax + 4]
cmp eax, edx
je 0x4d87c3
cmp edi, eax
jne 0x4d8796
test eax, eax
je 0x4d8790
mov edx, dword [esp + 0x10]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x4d87d7
test eax, eax
je 0x4d879f
mov edx, dword [eax - 4]
mov dword [eax], edx
mov eax, dword [ecx + 4]
add eax, 4
mov dword [ecx + 4], eax
mov ecx, eax
mov esi, dword [esp + 0x10]
lea eax, [ecx - 4]
add ecx, 0xfffffff8
push eax
push ecx
push edi
call fcn.00429660
add esp, 0xc
mov dword [edi], esi
jmp 0x4d87d7
push 0
lea eax, [esp + 0x2d]
push 1
lea edx, [esp + 0x18]
push eax
push edx
push edi
call fcn.00475600
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov ecx, dword [eax + ebp + 4]
mov edi, dword [eax + ebp]
sub ecx, edi
sar ecx, 2
cmp ebx, ecx
jb 0x4d8414
inc esi
cmp esi, 4
mov dword [esp + 0x24], esi
jl 0x4d83fa
mov cl, byte [esp + 0x1f]
test cl, cl
je 0x4d88d3
lea edx, [esp + 0x29]
push 0
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x128], 0xf
call fcn.005124c0
push 0x10
mov byte [esp + 0x124], 0x10
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
mov dword [eax], eax
mov dword [eax + 4], eax
add esp, 4
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x10]
push ecx
push ecx
lea edi, [eax + 0x18]
push esp
mov ecx, edi
mov byte [esp + 0x12c], 0x11
call fcn.00513c50
lea edx, [esp + 0x34]
mov ecx, edi
push edx
call fcn.004da700
lea ecx, [esp + 0x10]
mov byte [esp + 0x120], 0x12
call fcn.00504e50
mov eax, dword [esp + 0x10]
push 1
push eax
lea ecx, [esp + 0x18]
call fcn.004fdfd0
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
cmp esi, eax
mov byte [esp + 0x120], 0xa
je 0x4d8988
mov eax, dword [edi]
push esi
push ecx
push esp
mov eax, dword [eax + 4]
lea ebx, [eax + 8]
mov ecx, ebx
call fcn.00513c50
lea ecx, [esp + 0x34]
push ecx
mov ecx, ebx
call fcn.00421aa0
mov eax, dword [esp + 0x3c]
add esi, 8
cmp esi, eax
jne 0x4d88a6
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x38]
test esi, esi
je 0x4d88e8
push esi
call fcn.005265a0
mov eax, dword [esp + 0x48]
add esp, 4
mov ecx, dword [esp + 0x48]
mov esi, eax
cmp eax, ecx
mov dword [esp + 0x120], 0x13
mov ebx, ecx
mov dword [esp + 0x2c], esi
je 0x4d8960
mov edi, dword [esi]
mov ebp, dword [esi + 4]
push edi
mov byte [esp + 0x124], 0x14
call fcn.00519660
push eax
push ebp
push edi
call fcn.005124b0
add esp, 0x10
mov eax, dword [esi]
mov byte [esp + 0x120], 0x15
test eax, eax
je 0x4d8941
mov edx, dword [esi + 8]
lea ecx, [esi + 8]
sub edx, eax
sar edx, 2
push edx
push eax
call fcn.004fdfd0
lea ecx, [esi + 8]
mov byte [esp + 0x120], 0x13
call fcn.005124b0
add esi, 0xc
cmp esi, ebx
mov dword [esp + 0x2c], esi
jne 0x4d8903
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4d896d
push eax
call fcn.005265a0
add esp, 4
mov ecx, dword [esp + 0x118]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x114
ret 4
mov eax, dword [esp + 0x44]
jmp 0x4d88d7