Function at 0x4d6950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x78]
cmp eax, dword [ecx + 8]
jbe 0x4d78d9
sub esp, 0xf8
xor ebx, ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
xor ebx, ebx
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], ebx
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov ebx, dword [esp + 0x100]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x10c]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x110]
mov dword [esp + 0xc], ebx
call fcn.004d62f0
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xbc], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xc0], ebx
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], eax
cmp eax, 0
je 0x4d6a28
xor ebx, ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], edx
add esp, 0xf8
ret
cmp ecx, 4
jne 0x4d6a9f
mov ebp, dword [esp + 0x104]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov ebp, 0x5f5c99
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 4
call fcn.00452bf0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4d6a9f
mov ebx, dword [esp + 0x118]
cmp ebx, 0
jne 0x4d6a9f
xor ebx, ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov ebx, dword [0x6c84e8]
mov dword [esp + 0x130], ebx
mov ebx, dword [0x6c84ec]
mov dword [esp + 0x134], ebx
add esp, 0xf8
ret
mov edx, dword [esp + 0xbc]
mov dword [esp + 0xa4], edx
mov eax, dword [esp + 0xc0]
cmp eax, 4
jne 0x4d6f5a
mov dword [esp], edx
mov dword [esp + 0xa8], eax
mov dword [esp + 4], eax
mov ebp, 0x5f5d21
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 4
call fcn.00452bf0
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa8]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4d6f5a
mov ebx, dword [esp + 0xbc]
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0x78], ebx
mov ebx, dword [esp + 0x114]
mov dword [esp + 0xcc], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp + 0xd0], ebx
xor ebx, ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov edx, dword [esp + 0x74]
mov dword [esp + 0xa4], edx
mov eax, dword [esp + 0x78]
cmp eax, 4
jne 0x4d6e8c
mov dword [esp], edx
mov dword [esp + 0xa8], eax
mov dword [esp + 4], eax
mov ebp, 0x5f5d21
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 4
call fcn.00452bf0
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa8]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4d6e8c
mov dword [esp], 0x5d0e80
call fcn.0040e920
mov eax, dword [esp + 4]
mov dword [esp + 0x50], eax
mov ebp, dword [esp + 0xd0]
mov dword [eax + 4], ebp
mov ebp, dword [esp + 0xcc]
cmp byte [0x6d9e18], 0
jne 0x4d6e77
mov dword [eax], ebp
mov ebp, dword [esp + 0x78]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x74]
cmp byte [0x6d9e18], 0
jne 0x4d6e5f
mov dword [eax + 8], ebp
xor ecx, ecx
mov edx, ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x84], edx
cmp edx, 0
je 0x4d6c2f
xor ebx, ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], edx
mov dword [esp + 0x134], ecx
add esp, 0xf8
ret
mov ebx, dword [esp + 0x108]
cmp ebx, 4
jne 0x4d6d0a
mov ebp, dword [esp + 0x104]
mov dword [esp], ebp
mov ebp, dword [esp + 0x108]
mov dword [esp + 4], ebp
mov ebp, 0x5f5c99
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 4
call fcn.00452bf0
mov ecx, dword [esp + 0x11c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4d6d0a
cmp ecx, 0
je 0x4d6d0a
mov eax, dword [esp + 0x5c]
xor ebx, ebx
cmp eax, 0
je 0x4d6e58
mov ebp, dword [eax + 8]
mov dword [esp + 0x6c], ebp
mov ebp, dword [eax + 0xc]
mov dword [esp + 0x70], ebp
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov ebx, dword [ecx + 0x14]
call ebx
mov edi, dword [esp + 4]
mov edx, dword [esp + 8]
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x94], esi
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x98], ecx
cmp ecx, edx
jne 0x4d6da8
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 0xa4], edi
mov dword [esp + 8], edi
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
call fcn.00452bf0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4d6da8
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x50], ebx
mov dword [esp], 0x5bd060
call fcn.0040e920
mov edx, dword [esp + 4]
mov ecx, dword [esp + 0x50]
mov eax, 0x6b1d50
mov dword [esp + 0x48], edx
cmp edx, 0
je 0x4d6da4
mov dword [esp + 0x8c], eax
mov dword [edx], eax
mov dword [esp + 0x90], ecx
cmp byte [0x6d9e18], 0
jne 0x4d6d8f
mov dword [edx + 4], ecx
cmp edx, 0
je 0x4d6d8b
mov ecx, 1
mov ebp, 1
mov dword [esp + 0x124], edx
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], ebp
xor ebx, ebx
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], ebx
add esp, 0xf8
ret
mov dword [edx], eax
jmp 0x4d6d55
lea esi, [edx + 4]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.0040f2f0
mov edx, dword [esp + 0x48]
jmp 0x4d6d50
mov dword [edx], eax
jmp 0x4d6d34
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov ebx, dword [esp + 0x11c]
mov ebx, dword [ebx + 0x18]
call ebx
mov ebx, dword [esp + 4]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x98], ebx
mov dword [esp], 0x5d0d60
call fcn.0040e920
mov eax, dword [esp + 4]
mov ebp, 0x5fd28e
mov dword [eax], ebp
mov dword [eax + 4], 0x1d
mov dword [esp + 0x4c], eax
mov ebp, dword [esp + 0x98]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0x94]
cmp byte [0x6d9e18], 0
jne 0x4d6e43
mov dword [eax + 8], ebp
xor ebx, ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], 0x6b0a10
add esp, 0xf8
ret
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f2f0
mov eax, dword [esp + 0x4c]
jmp 0x4d6e13
mov dword [eax], eax
jmp 0x4d6c97
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f2f0
mov eax, dword [esp + 0x50]
jmp 0x4d6be0
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040f2f0
mov eax, dword [esp + 0x50]
jmp 0x4d6bc5
cmp eax, 8
jne 0x4d6ed1
mov dword [esp], edx
mov dword [esp + 0xa8], eax
mov dword [esp + 4], eax
mov ebp, 0x5f68fd
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 8
call fcn.00452bf0
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa8]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
jne 0x4d6b91
mov dword [esp + 0xa8], eax
cmp eax, 0xa
jne 0x4d6f08
mov dword [esp], edx
mov dword [esp + 4], eax
mov ebp, 0x5f7054
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 0xa
call fcn.00452bf0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
jne 0x4d6b91
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xb4], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0xb8], ebx
mov dword [esp], 0x6b1030
lea ebx, [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.0040bad0
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], ecx
jmp 0x4d6be4
cmp eax, 8
jne 0x4d6f9f
mov dword [esp], edx
mov dword [esp + 0xa8], eax
mov dword [esp + 4], eax
mov ebp, 0x5f68fd
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 8
call fcn.00452bf0
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa8]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
jne 0x4d6afd
mov dword [esp + 0xa8], eax
cmp eax, 0xa
jne 0x4d6fd6
mov dword [esp], edx
mov dword [esp + 4], eax
mov ebp, 0x5f7054
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 0xa
call fcn.00452bf0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
jne 0x4d6afd
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov ebx, dword [esp + 0x100]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x114]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp + 0x14], ebx
call fcn.004e2a30
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xec], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xf0], ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0xf4], ebx
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], edx
cmp edx, 0
jne 0x4d7893
cmp ecx, 4
jne 0x4d7893
mov ebp, dword [esp + 0x104]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov ebp, 0x5f5c99
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 4
call fcn.00452bf0
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x11c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4d7893
cmp eax, 0
je 0x4d7893
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x40], 0
mov byte [esp + 0x2f], 0
mov esi, eax
mov edi, dword [esp + 0x120]
mov dword [esp + 0x90], edi
xor ebx, ebx
cmp eax, ebx
jne 0x4d7794
mov ecx, dword [esp + 0xf4]
mov eax, dword [esp + 0xec]
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xd4], eax
mov edx, dword [esp + 0xec]
mov eax, dword [esp + 0xf0]
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0xe8], ebx
xor ecx, ecx
mov dword [esp + 0xe4], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0xe0], edx
mov eax, edx
mov ebp, dword [esp + 0x30]
cmp ecx, ebp
jge 0x4d723d
mov ebx, eax
mov dword [esp + 0x44], eax
cmp eax, 0
je 0x4d778d
mov eax, dword [eax]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ebp
mov dword [esp + 0xc8], ebp
mov dword [esp], ebp
mov dword [esp + 0xc4], eax
mov ebx, dword [eax + 0x14]
call ebx
mov ebx, dword [esp + 4]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x98], ebx
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov ebx, dword [esp + 0x11c]
mov ebx, dword [ebx + 0x14]
call ebx
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp esi, edx
jne 0x4d76dd
mov ebp, dword [esp + 0x94]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0xa4], edi
mov dword [esp + 8], edi
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
call fcn.00452bf0
movzx edi, byte [esp + 0x2f]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4d76dd
mov edx, dword [esp + 0xc4]
mov esi, dword [esp + 0xc8]
mov dword [esp + 0x90], esi
xor ebx, ebx
cmp edx, ebx
jne 0x4d72c2
mov eax, dword [esp + 0x44]
add eax, 8
mov ecx, dword [esp + 0x34]
inc ecx
mov ebp, dword [esp + 0x30]
cmp ecx, ebp
jl 0x4d714b
mov ebx, dword [esp + 0xd8]
cmp ebx, 0
jne 0x4d7281
xor ebx, ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov ebx, dword [0x6c8508]
mov dword [esp + 0x130], ebx
mov ebx, dword [0x6c850c]
mov dword [esp + 0x134], ebx
add esp, 0xf8
ret
mov ebx, dword [esp + 0xd4]
mov dword [esp + 0x124], ebx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x128], ebx
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0x12c], ebx
xor ebx, ebx
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], ebx
add esp, 0xf8
ret
mov ebp, dword [edx + 4]
mov eax, dword [ebp + 8]
cmp eax, 0x103a77be
jne 0x4d741b
mov ebx, edx
mov dword [esp + 0x8c], edx
xor ebp, ebp
cmp edx, ebp
je 0x4d72e5
mov ebx, dword [ebx + 4]
mov ebp, 0x5e3ae0
cmp ebx, ebp
jne 0x4d76d4
mov ebp, esi
mov ecx, 1
cmp cl, 0
je 0x4d741b
xchg edi, eax
cmp al, 0
xchg edi, eax
jne 0x4d7369
mov dword [esp + 0x58], ebp
mov dword [esp], ebp
call fcn.004e98a0
mov ebp, dword [esp + 0x58]
movzx ebx, byte [esp + 4]
cmp bl, 0
jne 0x4d7369
cld
mov ecx, dword [ebp]
mov dword [esp], ecx
mov ecx, dword [ebp + 4]
mov dword [esp + 4], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x3c]
lea edi, [esp + 0xc]
cld
mov ecx, dword [ebx]
mov dword [edi], ecx
mov ecx, dword [ebx + 4]
mov dword [edi + 4], ecx
mov ecx, dword [ebx + 8]
mov dword [edi + 8], ecx
call fcn.004e04f0
mov ebp, dword [esp + 0x58]
movzx ebx, byte [esp + 0x18]
cmp bl, 0
jne 0x4d7369
jmp 0x4d7225
mov dword [esp + 0x90], ebp
mov dword [esp + 0x8c], 0x6b1d10
mov ecx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov eax, ebx
inc ebx
cmp ebx, edx
ja 0x4d73d9
mov dword [esp + 0xd8], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 8
add ebx, ebp
mov ebp, dword [esp + 0x8c]
mov dword [ebx], ebp
mov ebp, dword [esp + 0x90]
cmp byte [0x6d9e18], 0
jne 0x4d73c8
mov dword [ebx + 4], ebp
jmp 0x4d7225
lea esi, [ebx + 4]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f2f0
jmp 0x4d73c3
mov dword [esp], 0x5cd600
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043c390
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, ebx
inc ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], edx
mov dword [esp + 0xd4], ecx
jmp 0x4d739e
cmp eax, 0xd7d15deb
jne 0x4d756e
mov ebx, edx
mov dword [esp + 0x8c], edx
xor ebp, ebp
cmp edx, ebp
je 0x4d7438
mov ebx, dword [ebx + 4]
mov ebp, 0x5e3b80
cmp ebx, ebp
jne 0x4d76cb
mov ebp, esi
mov ecx, 1
cmp cl, 0
je 0x4d756e
xchg edi, eax
cmp al, 0
xchg edi, eax
jne 0x4d74bc
mov dword [esp + 0x60], ebp
mov dword [esp], ebp
call fcn.004eaab0
mov ebp, dword [esp + 0x60]
movzx ebx, byte [esp + 4]
cmp bl, 0
jne 0x4d74bc
cld
mov ecx, dword [ebp]
mov dword [esp], ecx
mov ecx, dword [ebp + 4]
mov dword [esp + 4], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x38]
lea edi, [esp + 0xc]
cld
mov ecx, dword [ebx]
mov dword [edi], ecx
mov ecx, dword [ebx + 4]
mov dword [edi + 4], ecx
mov ecx, dword [ebx + 8]
mov dword [edi + 8], ecx
call fcn.004e04f0
mov ebp, dword [esp + 0x60]
movzx ebx, byte [esp + 0x18]
cmp bl, 0
jne 0x4d74bc
jmp 0x4d7225
mov dword [esp + 0x90], ebp
mov dword [esp + 0x8c], 0x6b1d30
mov ecx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov eax, ebx
inc ebx
cmp ebx, edx
ja 0x4d752c
mov dword [esp + 0xd8], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 8
add ebx, ebp
mov ebp, dword [esp + 0x8c]
mov dword [ebx], ebp
mov ebp, dword [esp + 0x90]
cmp byte [0x6d9e18], 0
jne 0x4d751b
mov dword [ebx + 4], ebp
jmp 0x4d7225
lea esi, [ebx + 4]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f2f0
jmp 0x4d7516
mov dword [esp], 0x5cd600
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043c390
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, ebx
inc ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], edx
mov dword [esp + 0xd4], ecx
jmp 0x4d74f1
cmp eax, 0xff2d2c4c
jne 0x4d7225
mov ebx, edx
mov dword [esp + 0x8c], edx
xor ebp, ebp
cmp edx, ebp
je 0x4d758b
mov ebx, dword [ebx + 4]
mov ebp, 0x5e3a40
cmp ebx, ebp
jne 0x4d76c2
mov ecx, esi
mov eax, 1
cmp al, 0
je 0x4d7225
xchg edi, eax
cmp al, 0
xchg edi, eax
jne 0x4d7610
mov dword [esp + 0x54], ecx
mov dword [esp], ecx
call fcn.004e1500
mov ecx, dword [esp + 0x54]
movzx ebx, byte [esp + 4]
cmp bl, 0
jne 0x4d7610
mov esi, ecx
cld
mov ecx, dword [ecx]
mov dword [esp], ecx
mov ecx, dword [esi + 4]
mov dword [esp + 4], ecx
mov ecx, dword [esi + 8]
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x40]
lea edi, [esp + 0xc]
cld
mov ecx, dword [ebx]
mov dword [edi], ecx
mov ecx, dword [ebx + 4]
mov dword [edi + 4], ecx
mov ecx, dword [ebx + 8]
mov dword [edi + 8], ecx
call fcn.004e04f0
mov ecx, dword [esp + 0x54]
movzx ebx, byte [esp + 0x18]
cmp bl, 0
jne 0x4d7610
jmp 0x4d7225
mov dword [esp + 0x90], ecx
mov dword [esp + 0x8c], 0x6b1cf0
mov ecx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov eax, ebx
inc ebx
cmp ebx, edx
ja 0x4d7680
mov dword [esp + 0xd8], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 8
add ebx, ebp
mov ebp, dword [esp + 0x8c]
mov dword [ebx], ebp
mov ebp, dword [esp + 0x90]
cmp byte [0x6d9e18], 0
jne 0x4d766f
mov dword [ebx + 4], ebp
jmp 0x4d7225
lea esi, [ebx + 4]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f2f0
jmp 0x4d766a
mov dword [esp], 0x5cd600
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043c390
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, ebx
inc ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], edx
mov dword [esp + 0xd4], ecx
jmp 0x4d7645
xor ecx, ecx
xor eax, eax
jmp 0x4d759f
xor ebp, ebp
xor ecx, ecx
jmp 0x4d744c
xor ebp, ebp
xor ecx, ecx
jmp 0x4d72f9
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
mov ebx, dword [esp + 0x11c]
mov ebx, dword [ebx + 0x18]
call ebx
mov ebx, dword [esp + 4]
mov dword [esp + 0xac], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0xb0], ebx
mov dword [esp], 0x5d0d60
call fcn.0040e920
mov eax, dword [esp + 4]
mov ebp, 0x5fd28e
mov dword [eax], ebp
mov dword [eax + 4], 0x1d
mov dword [esp + 0x4c], eax
mov ebp, dword [esp + 0xb0]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0xac]
cmp byte [0x6d9e18], 0
jne 0x4d7778
mov dword [eax + 8], ebp
xor ebx, ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], 0x6b0a10
add esp, 0xf8
ret
lea esi, [eax + 8]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f2f0
mov eax, dword [esp + 0x4c]
jmp 0x4d7748
mov dword [eax], eax
jmp 0x4d715a
mov ebp, dword [eax + 4]
mov eax, dword [ebp + 8]
cmp eax, 0x103a77be
jne 0x4d77e6
mov ebx, esi
mov dword [esp + 0x8c], esi
xor ebp, ebp
cmp esi, ebp
je 0x4d77b3
mov ebx, dword [ebx + 4]
mov ebp, 0x5e3ae0
cmp ebx, ebp
jne 0x4d788a
mov edx, edi
mov ecx, 1
cmp cl, 0
je 0x4d77e6
mov dword [esp + 0x3c], edx
mov dword [esp], edx
call fcn.004e98a0
movzx ebx, byte [esp + 4]
mov byte [esp + 0x2f], bl
jmp 0x4d70e6
cmp eax, 0xd7d15deb
jne 0x4d782e
mov ebx, esi
mov dword [esp + 0x8c], esi
xor ebp, ebp
cmp esi, ebp
je 0x4d77ff
mov ebx, dword [ebx + 4]
mov ebp, 0x5e3b80
cmp ebx, ebp
jne 0x4d7884
mov ecx, edi
mov edx, 1
cmp dl, 0
je 0x4d782e
mov dword [esp + 0x38], ecx
mov dword [esp], ecx
call fcn.004eaab0
movzx ebx, byte [esp + 4]
mov byte [esp + 0x2f], bl
jmp 0x4d70e6
cmp eax, 0xff2d2c4c
jne 0x4d70e6
mov ebx, esi
mov dword [esp + 0x8c], esi
xor ebp, ebp
cmp esi, ebp
je 0x4d784b
mov ebx, dword [ebx + 4]
mov ebp, 0x5e3a40
cmp ebx, ebp
jne 0x4d787e
mov eax, edi
mov ecx, 1
cmp cl, 0
je 0x4d70e6
mov dword [esp + 0x40], eax
mov dword [esp], eax
call fcn.004e1500
movzx ebx, byte [esp + 4]
mov byte [esp + 0x2f], bl
jmp 0x4d70e6
xor eax, eax
xor ecx, ecx
jmp 0x4d785b
xor ecx, ecx
xor edx, edx
jmp 0x4d780f
xor edx, edx
xor ecx, ecx
jmp 0x4d77c7
mov ebx, dword [esp + 0xec]
mov dword [esp + 0x124], ebx
mov ebx, dword [esp + 0xf0]
mov dword [esp + 0x128], ebx
mov ebx, dword [esp + 0xf4]
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x134], ebx
add esp, 0xf8
ret
call fcn.00450ed0
jmp fcn.004d6950