Function at 0x4a9180
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x8c
call 0x4a918f
pop eax
mov esi, ecx
lea ecx, [edx + 0x14]
mov edi, edx
mov dword [esp + 0x24], eax
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x10], ecx
cmp eax, dword [edx + 0x14]
jne 0x4a91b4
push eax
push ecx
call fcn.0040bd70
add esp, 8
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x74], esi
mov byte [ecx + eax], 0x2f
mov eax, dword [edi + 0x1c]
inc eax
mov dword [edi + 0x1c], eax
cmp eax, dword [edi + 0x14]
jne 0x4a91db
push eax
push dword [esp + 0x14]
call fcn.0040bd70
add esp, 8
mov eax, dword [edi + 0x1c]
mov ecx, dword [edi + 0x18]
mov esi, dword [esp + 0xa4]
mov edx, dword [esp + 0xa0]
mov dword [esp], edi
mov ebp, 0x2600
mov dword [esp + 4], 0
mov byte [ecx + eax], 0x2f
mov ebx, esi
mov eax, dword [edi + 0x1c]
inc eax
mov dword [edi + 0x1c], eax
xor edi, edi
mov dword [esp + 0x88], eax
mov dword [esp + 8], edx
nop word cs:[eax + eax]
cmp ebx, edx
je 0x4a935d
movzx eax, byte [ebx]
test al, al
js 0x4a9240
inc ebx
cmp eax, 0xd
jbe 0x4a92c0
jmp 0x4a92e0
movzx ebp, byte [ebx + 1]
mov ecx, eax
and ecx, 0x1f
and ebp, 0x3f
cmp al, 0xdf
jbe 0x4a9292
movzx edx, byte [ebx + 2]
shl ebp, 6
and edx, 0x3f
or edx, ebp
cmp al, 0xf0
jb 0x4a92a8
movzx eax, byte [ebx + 3]
shl edx, 6
and ecx, 7
mov ebp, 0x2600
shl ecx, 0x12
and eax, 0x3f
or eax, edx
mov edx, dword [esp + 8]
or eax, ecx
cmp eax, 0x110000
je 0x4a935d
add ebx, 4
cmp eax, 0xd
jbe 0x4a92c0
jmp 0x4a92e0
shl ecx, 6
add ebx, 2
or ecx, ebp
mov ebp, 0x2600
mov eax, ecx
cmp eax, 0xd
jbe 0x4a92c0
jmp 0x4a92e0
shl ecx, 0xc
add ebx, 3
mov ebp, 0x2600
or edx, ecx
mov eax, edx
mov edx, dword [esp + 8]
cmp eax, 0xd
ja 0x4a92e0
mov ecx, 0x110000
bt ebp, eax
jae 0x4a92e0
cmp ecx, 0x110000
je 0x4a9220
jmp 0x4a92ee
mov ecx, eax
cmp ecx, 0x110000
je 0x4a9220
lea eax, [ecx - 0x23]
cmp eax, 0x1d
ja 0x4a9340
mov eax, dword [eax*4 + 0x4a9f18]
add eax, dword [esp + 0x24]
jmp eax
cmp ecx, 0x5c
jne 0x4a934f
cmp byte [esp + 0xa8], 2
jne 0x4a935d
mov eax, dword [esp + 4]
inc edi
mov dword [esp + 4], eax
jmp 0x4a9212
cmp dword [esp + 4], 0
je 0x4a963c
mov eax, dword [esp + 0x18]
mov ebx, dword [esp]
mov edi, dword [esp + 0x10]
test eax, eax
je 0x4a965a
jle 0x4a9770
mov ecx, eax
mov dword [esp + 0x20], 0
mov ebp, 0x2600
mov dword [esp + 0x1c], 0
mov dword [esp + 0x2c], 0
mov edi, ecx
jmp 0x4a93c8
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x2c], 1
mov byte [ecx + eax], 0x3a
inc dword [ebx + 0x1c]
mov al, 1
mov dword [esp + 0x1c], eax
cmp esi, edx
je 0x4a9efe
mov ebx, esi
mov dword [esp + 0x14], edi
nop word cs:[eax + eax]
movzx eax, byte [ebx]
test al, al
js 0x4a9400
lea esi, [ebx + 1]
cmp eax, 0xd
jbe 0x4a9470
jmp 0x4a9490
movzx edi, byte [ebx + 1]
mov ecx, eax
and ecx, 0x1f
and edi, 0x3f
cmp al, 0xdf
jbe 0x4a9442
movzx edx, byte [ebx + 2]
shl edi, 6
and edx, 0x3f
or edx, edi
cmp al, 0xf0
jb 0x4a9453
movzx eax, byte [ebx + 3]
and ecx, 7
shl edx, 6
lea esi, [ebx + 4]
shl ecx, 0x12
and eax, 0x3f
or eax, edx
or eax, ecx
mov edx, dword [esp + 8]
cmp eax, 0xd
jbe 0x4a9470
jmp 0x4a9490
shl ecx, 6
lea esi, [ebx + 2]
or ecx, edi
mov eax, ecx
cmp eax, 0xd
jbe 0x4a9470
jmp 0x4a9490
shl ecx, 0xc
lea esi, [ebx + 3]
or edx, ecx
mov eax, edx
mov edx, dword [esp + 8]
cmp eax, 0xd
ja 0x4a9490
nop word cs:[eax + eax]
bt ebp, eax
jae 0x4a9490
cmp esi, edx
mov ebx, esi
jne 0x4a93e0
jmp 0x4a9efe
cmp eax, 0x110000
je 0x4a9efe
mov ecx, edx
mov edi, 1
sub ecx, ebx
cmp eax, 0x80
jb 0x4a94c4
mov edi, 2
cmp eax, 0x7ff
jbe 0x4a94c4
cmp eax, 0x10000
mov edi, 4
sbb edi, 0
cmp edi, ecx
jae 0x4a94e0
cmp byte [ebx + edi], 0xbf
jg 0x4a94e6
jmp 0x4a9f02
jne 0x4a9f02
cmp eax, 0x110000
mov dword [esp + 0xc], edi
je 0x4a9efe
mov ecx, dword [esp + 0x14]
cmp eax, 0x3a
lea edi, [ecx - 1]
jne 0x4a9547
cmp dword [esp + 0x2c], 0
jne 0x4a9547
mov ebx, dword [esp]
cmp dword [esp + 0x14], 2
mov ecx, dword [ebx + 0x1c]
jl 0x4a964f
mov eax, dword [esp + 0x10]
mov dword [esp + 0x28], ecx
cmp ecx, dword [eax]
mov eax, ecx
jne 0x4a93b0
push dword [esp + 0x28]
push dword [esp + 0x14]
call fcn.0040bd70
mov edx, dword [esp + 0x10]
add esp, 8
mov eax, dword [ebx + 0x1c]
jmp 0x4a93b0
mov ecx, dword [esp + 0x20]
cmp byte [esp + 0x1c], 0
mov dword [esp + 0x18], edi
mov edi, 1
movzx ecx, cl
cmove ecx, edi
mov edi, edx
mov edx, dword [esp]
mov dword [esp + 0x20], ecx
mov ecx, dword [edx + 8]
mov edx, dword [edx + 0xc]
push esi
push edi
push eax
call fcn.004ac840
add esp, 0xc
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], eax
lea eax, [esp + 0x30]
mov dword [esp + 0x38], 0x531248
push eax
call fcn.004b5910
add esp, 4
test eax, eax
je 0x4a960b
mov edi, dword [esp]
mov ecx, eax
mov ebx, dword [edi + 0x1c]
jmp 0x4a95e4
mov edi, dword [esp]
mov dword [esp + 0x5c], edx
mov eax, dword [edi + 0x18]
add eax, ebx
push edx
push dword [esp + 0x10]
push eax
call fcn.004f5b80
add esp, 0xc
add ebx, dword [esp + 0x5c]
lea eax, [esp + 0x30]
mov dword [edi + 0x1c], ebx
push eax
call fcn.004b5910
add esp, 4
mov ecx, eax
test eax, eax
je 0x4a960b
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
sub eax, ebx
cmp eax, edx
jae 0x4a95b0
push edx
push ebx
push ecx
mov edi, edx
call fcn.00503700
mov edx, edi
add esp, 0xc
mov eax, dword [esp]
mov ebx, dword [eax + 0x1c]
jmp 0x4a95b0
cmp dword [esp + 0x14], 2
mov edx, dword [esp + 8]
mov edi, dword [esp + 0x18]
jge 0x4a93c8
mov ebx, dword [esp]
cmp dword [esp + 0x2c], 0
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov esi, dword [ebx + 0x1c]
jne 0x4a9785
jmp 0x4a9783
mov ebx, dword [esp]
mov dword [esp + 4], esi
mov esi, dword [ebx + 0x1c]
mov dword [esp + 0x28], esi
jmp 0x4a97b8
mov edi, dword [esp + 0x10]
mov esi, ecx
jmp 0x4a9785
mov ecx, dword [esp + 4]
mov eax, 0x2600
jmp 0x4a9682
mov esi, edx
mov edx, dword [esp + 8]
cmp esi, 0x110000
jne 0x4a973e
cmp ecx, edx
je 0x4a9643
movzx edx, byte [ecx]
test dl, dl
js 0x4a96a0
inc ecx
cmp edx, 0xd
jbe 0x4a9720
jmp 0x4a9670
movzx ebp, byte [ecx + 1]
mov esi, edx
and esi, 0x1f
and ebp, 0x3f
cmp dl, 0xdf
jbe 0x4a96e7
movzx ebx, byte [ecx + 2]
shl ebp, 6
and ebx, 0x3f
or ebx, ebp
cmp dl, 0xf0
jb 0x4a96fb
movzx edx, byte [ecx + 3]
and esi, 7
shl ebx, 6
shl esi, 0x12
and edx, 0x3f
or edx, ebx
or edx, esi
cmp edx, 0x110000
je 0x4a9b21
add ecx, 4
jmp 0x4a9705
shl esi, 6
add ecx, 2
or esi, ebp
mov edx, esi
cmp edx, 0xd
jbe 0x4a9720
jmp 0x4a9670
shl esi, 0xc
add ecx, 3
or ebx, esi
mov edx, ebx
mov ebx, dword [esp]
cmp edx, 0xd
ja 0x4a9670
nop word cs:[eax + eax]
nop dword [eax + eax]
mov esi, 0x110000
bt eax, edx
jae 0x4a9670
mov edx, dword [esp + 8]
cmp esi, 0x110000
je 0x4a9682
lea eax, [esi - 0x23]
cmp eax, 0x1c
ja 0x4a9754
mov ecx, 0x10001001
bt ecx, eax
jb 0x4a9be1
cmp byte [esp + 0xa8], 2
je 0x4a9643
cmp esi, 0x5c
je 0x4a9be1
jmp 0x4a9643
mov esi, dword [ebx + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov ecx, esi
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
or al, byte [esp + 0x1c]
test al, 1
je 0x4a97b8
cmp esi, dword [edi]
jne 0x4a97aa
push esi
push edi
call fcn.0040bd70
mov edx, dword [esp + 0x10]
add esp, 8
mov esi, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x18]
mov byte [eax + esi], 0x40
mov esi, dword [ebx + 0x1c]
inc esi
mov dword [ebx + 0x1c], esi
movzx edi, byte [esp + 0xa8]
lea ebp, [esp + 0x30]
push edi
push dword [esp + 8]
push edx
push ebp
call fcn.004a9fa0
add esp, 0x10
movzx eax, byte [esp + 0x30]
cmp al, 3
jne 0x4a97e6
movzx ebx, byte [esp + 0x31]
jmp 0x4a9be3
movzx edx, word [esp + 0x42]
movsd xmm0, qword [esp + 0x3a]
movsd xmm1, qword [esp + 0x32]
mov dword [esp + 0x2c], edi
movzx ecx, byte [esp + 0x31]
mov edi, dword [esp + 0x44]
mov dword [esp + 0x5c], esi
mov word [esp + 0x72], dx
movsd qword [esp + 0x6a], xmm0
movsd qword [esp + 0x62], xmm1
mov byte [esp + 0x60], al
lea eax, [esp + 0x60]
mov edx, ebp
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], 0x531258
mov byte [esp + 0x61], cl
mov dword [esp + 0x3c], 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x84], 0x4addf0
mov dword [esp + 0x78], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 1
lea eax, [esp + 0x78]
push edx
push 0x531700
push eax
call fcn.004d4c80
add esp, 0xc
test al, al
jne 0x4a9efe
movzx edx, byte [esp + 0x60]
mov eax, dword [ebx + 0x1c]
mov ecx, dword [esp + 0x6c]
mov esi, ebp
test dl, dl
mov dword [esp + 0x1c], eax
mov byte [esp + 0x14], dl
mov dword [esp + 8], ecx
jne 0x4a9939
cmp dword [esp + 8], 0
mov esi, ebp
jne 0x4a9939
lea eax, [esp + 0x30]
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebp
push eax
push 1
push 0x531260
call fcn.004a63c0
add esp, 0xc
xor ebx, ebx
cmp byte [esp + 0xa8], 2
jne 0x4a98e8
test al, al
mov esi, ebp
je 0x4a9939
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4a9be3
push 1
push eax
push dword [esp + 0x70]
call fcn.0040dc90
add esp, 0xc
jmp 0x4a9be3
inc esi
cmp eax, 0xd
ja 0x4a99c0
mov edx, 0x2600
mov ecx, 0x110000
bt edx, eax
jae 0x4a99c0
cmp ecx, 0x110000
jne 0x4a99ce
cmp esi, edi
je 0x4a9b13
movzx eax, byte [esi]
test al, al
jns 0x4a9910
movzx ebx, byte [esi + 1]
mov ecx, eax
and ecx, 0x1f
and ebx, 0x3f
cmp al, 0xdf
jbe 0x4a9991
movzx edx, byte [esi + 2]
shl ebx, 6
and edx, 0x3f
or edx, ebx
cmp al, 0xf0
jb 0x4a99a6
movzx eax, byte [esi + 3]
and ecx, 7
shl edx, 6
shl ecx, 0x12
and eax, 0x3f
or eax, edx
or eax, ecx
cmp eax, 0x110000
je 0x4a9b13
add esi, 4
cmp eax, 0xd
jbe 0x4a991a
jmp 0x4a99c0
shl ecx, 6
add esi, 2
or ecx, ebx
mov eax, ecx
cmp eax, 0xd
jbe 0x4a991a
jmp 0x4a99c0
shl ecx, 0xc
add esi, 3
or edx, ecx
mov eax, edx
cmp eax, 0xd
jbe 0x4a991a
nop dword [eax]
mov ecx, eax
cmp ecx, 0x110000
je 0x4a9939
cmp ecx, 0x3a
jne 0x4a9b13
mov eax, dword [esp]
mov ebx, esi
mov dword [esp + 0xc], 0
movzx eax, byte [eax + 0x20]
mov byte [esp + 0x18], al
mov al, 1
mov dword [esp + 4], eax
mov eax, 0x2600
jmp 0x4a9a24
inc ebx
cmp ecx, 0xd
ja 0x4a9ac0
mov ebp, 0x110000
bt eax, ecx
jae 0x4a9ac0
cmp ebp, 0x110000
jne 0x4a9ace
cmp ebx, edi
je 0x4a9b4b
movzx ecx, byte [ebx]
test cl, cl
jns 0x4a9a00
movzx edx, byte [ebx + 1]
mov ebp, ecx
and ebp, 0x1f
and edx, 0x3f
cmp cl, 0xdf
jbe 0x4a9a84
movzx eax, byte [ebx + 2]
shl edx, 6
and eax, 0x3f
or eax, edx
cmp cl, 0xf0
jb 0x4a9a99
movzx ecx, byte [ebx + 3]
and ebp, 7
shl eax, 6
shl ebp, 0x12
and ecx, 0x3f
or ecx, eax
mov eax, 0x2600
or ecx, ebp
cmp ecx, 0x110000
je 0x4a9b4b
add ebx, 4
cmp ecx, 0xd
jbe 0x4a9a0a
jmp 0x4a9ac0
shl ebp, 6
add ebx, 2
or ebp, edx
mov ecx, ebp
cmp ecx, 0xd
jbe 0x4a9a0a
jmp 0x4a9ac0
shl ebp, 0xc
add ebx, 3
or eax, ebp
mov ecx, eax
mov eax, 0x2600
cmp ecx, 0xd
jbe 0x4a9a0a
nop word cs:[eax + eax]
nop dword [eax + eax]
mov ebp, ecx
cmp ebp, 0x110000
je 0x4a9a24
lea eax, [ebp - 0x30]
cmp eax, 0xa
jae 0x4a9b2d
mov ecx, dword [esp + 0xc]
mov esi, ebx
mov dword [esp + 4], 0
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*2]
mov eax, ecx
cmp ecx, 0xffff
mov eax, 0x2600
mov dword [esp + 0xc], ecx
jbe 0x4a9a24
cmp byte [esp + 0x14], 0
mov bl, 2
jne 0x4a9be3
jmp 0x4a98e8
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
jmp 0x4a9b60
mov ebx, dword [esp]
mov edx, dword [esp + 8]
jmp 0x4a9643
cmp byte [esp + 0x18], 0
jne 0x4a9b4b
lea eax, [ebp - 0x23]
cmp eax, 0x1c
ja 0x4a9b46
mov ecx, 0x10001001
bt ecx, eax
jb 0x4a9b4b
cmp ebp, 0x5c
jne 0x4a9b01
test byte [esp + 4], 1
je 0x4a9d93
mov ebp, esi
mov dword [esp + 4], 0
movzx edx, byte [esp + 0x14]
lea ecx, [esp + 0x61]
mov eax, dword [ecx]
mov ecx, dword [ecx + 3]
mov esi, dword [esp + 0x68]
test dl, dl
mov dword [esp + 0x33], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], esi
je 0x4a9ba4
movzx eax, dl
cmp eax, 1
jne 0x4a9c15
mov eax, dword [esp + 0x30]
mov byte [esp + 0x24], 2
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], eax
jmp 0x4a9c3d
cmp dword [esp + 8], 0
mov eax, dword [esp + 0x33]
setne byte [esp + 0x24]
test eax, eax
je 0x4a9bc2
push 1
push eax
push esi
call fcn.0040dc90
add esp, 0xc
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp]
cmp dword [esp + 0x88], eax
je 0x4a9dcf
cmp dword [esp + 8], 0
mov dword [esp + 0x18], eax
jne 0x4a9c53
xor ebx, ebx
mov eax, dword [esp + 0x74]
mov byte [eax + 4], bl
mov dword [eax], 2
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
je 0x4a9d88
push 1
push eax
mov eax, dword [esp + 8]
push dword [eax + 0x18]
call fcn.0040dc90
add esp, 0xc
jmp 0x4a9d88
mov eax, dword [esp + 0x70]
mov esi, dword [esp + 0x30]
movzx edx, word [esp + 0x34]
movzx ecx, byte [esp + 0x36]
mov byte [esp + 0x24], 3
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], esi
mov word [esp + 0x58], dx
mov byte [esp + 0x5a], cl
movzx eax, word [esp + 0x58]
movzx ecx, byte [esp + 0x5a]
mov ebx, dword [esp]
mov word [esp + 0x54], ax
mov byte [esp + 0x56], cl
mov eax, dword [ebx + 0x1c]
mov byte [esp + 0x30], 1
mov dword [esp + 0x10], eax
push ebp
push edi
lea eax, [esp + 0x38]
push eax
mov esi, dword [esp + 0x38]
push esi
push ebx
call fcn.004aaae0
add esp, 0x14
mov edi, ebx
mov ebx, edx
lea edx, [esp + 0x30]
movsd xmm1, qword [edi + 0x10]
mov ecx, dword [edi + 0x20]
movsd xmm0, qword [edi + 0x18]
movsd xmm2, qword [edi]
movsd qword [esp + 0x40], xmm1
movsd xmm1, qword [edi + 8]
mov dword [esp + 0x50], ecx
movsd qword [esp + 0x48], xmm0
movsd qword [esp + 0x30], xmm2
lea ecx, [esp + 0x60]
movsd qword [esp + 0x38], xmm1
push ebx
push eax
mov ebp, dword [esp + 0xb4]
push ebp
push esi
call fcn.004abd30
add esp, 0x10
mov edi, dword [esp + 0x60]
cmp edi, 2
jne 0x4a9cfa
movzx eax, byte [esp + 0x64]
mov ebx, dword [esp + 0x74]
mov byte [ebx + 4], al
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4a9d86
push 1
push eax
push dword [esp + 0x50]
call fcn.0040dc90
add esp, 0xc
jmp 0x4a9d86
mov eax, dword [esp + 0x4c]
mov ebx, dword [esp + 0x74]
movsd xmm0, qword [esp + 0x44]
mov dword [ebx + 0x2c], eax
movzx eax, byte [esp + 0x24]
movsd qword [ebx + 0x24], xmm0
movsd xmm0, qword [esp + 0x68]
mov byte [ebx + 0x34], al
mov eax, dword [esp + 0x20]
mov dword [ebx + 0x35], eax
movzx eax, word [esp + 0x54]
mov word [ebx + 0x39], ax
movzx eax, byte [esp + 0x56]
mov byte [ebx + 0x3b], al
mov eax, dword [esp + 0x14]
mov dword [ebx + 0x3c], eax
mov eax, dword [esp + 8]
mov dword [ebx + 0x40], eax
mov eax, dword [esp + 0x18]
mov byte [ebx + 0x44], al
mov eax, dword [esp + 0x64]
mov dword [ebx + 4], eax
mov eax, dword [esp + 0x28]
movsd qword [ebx + 8], xmm0
mov dword [ebx + 0x10], ebp
mov dword [ebx + 0x14], eax
mov eax, dword [esp + 0x5c]
mov dword [ebx + 0x18], eax
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x20], eax
mov eax, dword [esp + 4]
mov word [ebx + 0x30], ax
mov eax, dword [esp + 0xc]
mov word [ebx + 0x32], ax
mov dword [ebx], edi
add esp, 0x8c
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [esp + 0xac], 0
lea edx, [esp + 0x30]
je 0x4a9e76
mov eax, dword [esp]
mov ebx, dword [eax + 0x18]
mov eax, dword [esp + 0xac]
cmp dword [esp + 0x1c], eax
jbe 0x4a9dd8
cmp byte [ebx + eax], 0xbf
jg 0x4a9dda
push 0x53126c
push eax
push 0
push dword [esp + 0x28]
jmp 0x4a9f0b
mov dword [esp + 0x18], eax
jmp 0x4a9c53
jne 0x4a9dbe
add eax, 0xfffffffe
cmp eax, 3
ja 0x4a9e76
mov ecx, dword [esp + 0x24]
add ecx, dword [eax*4 + 0x4a9f90]
jmp ecx
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], 0x531264
mov dword [esp + 0x3c], 1
mov word [esp + 0x7e], ax
lea eax, [esp + 0x7e]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x84], fcn.004d9110
mov dword [esp + 0x78], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 1
push edx
push 0x531700
lea eax, [esp + 0x80]
push eax
call fcn.004d4c80
add esp, 0xc
test al, al
jne 0x4a9efe
mov ecx, dword [esp + 0x6c]
movzx edx, byte [esp + 0x60]
mov ax, 1
mov ebp, esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
jmp 0x4a9b65
ud2
push 0x531204
push edi
push 0
push ecx
push ebx
call fcn.005062e0
add esp, 0x14
ud2