Function at 0x4497d0
Capabilities:
Capture screenshot
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
cmp byte [ebp + 0x24], 0
push ebx
push esi
mov esi, dword [ebp + 0x20]
push edi
mov edi, ecx
mov dword [esp + 0x6c], edi
jne 0x449803
mov edx, str.Fast
mov ecx, esi
call fcn.004a1f00
mov byte [esp + 0x13], 0
test eax, eax
je 0x449808
mov byte [esp + 0x13], 1
mov edx, 0x4dc154
mov ecx, esi
call fcn.004a1f00
mov ebx, dword [ebp + 0x18]
mov edx, eax
test edx, edx
movzx esi, bl
movzx ecx, bx
mov eax, ebx
setne byte [esp + 0x11]
shl esi, 8
shr ecx, 8
or esi, ecx
shr eax, 0x10
shl esi, 8
movzx eax, al
or esi, eax
test edx, edx
je 0x44984a
mov dword [esp + 0x2c], ebx
mov ebx, esi
mov dword [ebp + 0x18], ebx
jmp 0x44984e
mov dword [esp + 0x2c], esi
cmp byte [ebp + 0x24], 0
mov eax, dword [0x4eaff0]
mov dword [esp + 0x24], eax
je 0x449861
xor esi, esi
jmp 0x44986e
mov cl, 1
cmp cl, byte [edi + 1]
sbb esi, esi
and esi, dword [0x4eaff4]
mov dword [esp + 0x64], esi
test eax, eax
je 0x449885
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, eax
call fcn.004a6070
test esi, esi
je 0x449898
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.004a6070
xorps xmm0, xmm0
lea edx, [esp + 0x58]
push 0
lea ecx, [esp + 0x58]
movlpd qword [esp + 0x58], xmm0
call fcn.004a2f80
mov ebx, dword [ebp + 8]
add esp, 4
mov edx, dword [esp + 0x54]
add ebx, edx
add edx, dword [ebp + 0x10]
mov esi, ebx
mov ecx, dword [ebp + 0xc]
mov eax, edx
add ecx, dword [esp + 0x58]
mov edi, dword [ebp + 0x14]
add edi, dword [esp + 0x58]
cmp ebx, edx
mov dword [esp + 0x44], ebx
cmovle eax, ebx
mov dword [esp + 0x34], ecx
cmovle esi, edx
mov dword [esp + 0x5c], eax
cmp ecx, edi
mov dword [esp + 0x50], edx
mov ebx, ecx
mov eax, edi
cmovle eax, ecx
cmovle ebx, edi
xor ecx, ecx
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0x1c]
test eax, eax
cmovns ecx, eax
mov dword [esp + 0x1c], ecx
cmp ecx, 0xff
jle 0x449919
mov dword [esp + 0x1c], 0xff
jmp 0x44991d
test ecx, ecx
jle 0x449934
mov ecx, dword [ebp + 0x18]
mov eax, ecx
shr eax, 8
mov dword [esp + 0x18], eax
mov eax, ecx
mov byte [esp + 0x10], cl
shr eax, 0x10
jmp 0x449948
mov al, byte [esp + 0x11]
mov byte [esp + 0x10], al
mov al, byte [esp + 0x11]
mov dword [esp + 0x18], eax
mov al, byte [esp + 0x11]
push 0
mov dword [esp + 0x34], eax
call dword [sym.imp.USER32.dll_GetDC]
mov edx, eax
mov dword [esp + 0x20], edx
test edx, edx
je 0x44a25e
cmp byte [esp + 0x13], 0
mov byte [esp + 0x12], 0
je 0x449f6e
sub esi, dword [esp + 0x5c]
xor ecx, ecx
sub ebx, dword [esp + 0x60]
xor eax, eax
push edx
mov dword [esp + 0x44], ecx
inc esi
mov dword [esp + 0x18], ecx
inc ebx
mov dword [esp + 0x50], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x449db5
push ebx
push esi
push dword [esp + 0x28]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [esp + 0x40], eax
test eax, eax
je 0x449db5
push eax
push dword [esp + 0x40]
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x4c], eax
test eax, eax
je 0x449db5
push 0xcc0020
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x2c]
push ebx
mov ebx, dword [esp + 0x50]
push esi
push 0
push 0
push ebx
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x449db5
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0xf]
push 8
push eax
lea eax, [esp + 0x40]
mov edx, ebx
push eax
lea eax, [esp + 0x34]
push eax
call fcn.004495c0
add esp, 0x10
mov dword [esp + 0x14], eax
test eax, eax
je 0x449db5
mov ebx, dword [esp + 0x28]
mov edx, ebx
imul edx, dword [esp + 0x38]
cmp byte [esp + 0xf], 0
mov dword [esp + 0x38], edx
je 0x449ace
xor esi, esi
test edx, edx
jle 0x449ad2
cmp edx, 0x10
jb 0x449ac0
mov eax, edx
and eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jns 0x449a5a
dec eax
or eax, 0xfffffff0
inc eax
movaps xmm2, xmmword [0x4e12a0]
mov ecx, edx
sub ecx, eax
mov eax, dword [esp + 0x14]
add eax, 0x20
nop dword [eax]
movups xmm0, xmmword [eax - 0x20]
lea eax, [eax + 0x40]
add esi, 0x10
movaps xmm1, xmm2
pand xmm1, xmm0
movups xmmword [eax - 0x60], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x50]
pand xmm1, xmm0
movups xmmword [eax - 0x50], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x40]
pand xmm1, xmm0
movups xmmword [eax - 0x40], xmm1
movups xmm0, xmmword [eax - 0x30]
pand xmm0, xmm2
movups xmmword [eax - 0x30], xmm0
cmp esi, ecx
jl 0x449a70
mov eax, dword [esp + 0x14]
cmp esi, edx
jge 0x449ad2
nop dword [eax + eax]
and dword [eax + esi*4], 0xf8f8f8f8
inc esi
cmp esi, edx
jl 0x449ac0
jmp 0x449ad2
mov esi, dword [esp + 0x48]
cmp byte [ebp + 0x24], 0
je 0x449b55
mov edx, dword [eax]
and edx, 0xffffff
cmp byte [esp + 0x11], 0
jne 0x449afd
movzx ecx, dl
movzx eax, dx
shl ecx, 8
shr eax, 8
or ecx, eax
shr edx, 0x10
shl ecx, 8
or edx, ecx
push edx
lea eax, [esp + 0x74]
push str.0x_06X
push eax
call fcn.00405960
mov edi, dword [esp + 0x30]
lea eax, [esp + 0x7c]
add esp, 0xc
mov ecx, edi
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.004a6070
push dword [esp + 0x20]
mov byte [esp + 0x16], 1
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [esp + 0x4c]
push eax
push dword [esp + 0x40]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esp + 0x3c]
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x449e29
cmp dword [esp + 0x1c], 1
jge 0x449c18
cmp byte [esp + 0xf], 0
je 0x449b6f
and dword [esp + 0x2c], 0xf8f8f8f8
xor ecx, ecx
test edx, edx
jle 0x449c07
lea ebx, [edx - 1]
nop dword [eax]
mov eax, dword [esp + 0x44]
cmp eax, dword [esp + 0x50]
jle 0x449bac
cmp dword [esp + 0x34], edi
jle 0x449b94
mov esi, ebx
jmp 0x449bd1
mov eax, ecx
cdq
idiv dword [esp + 0x28]
lea esi, [eax + 1]
imul esi, dword [esp + 0x28]
sub esi, edx
mov edx, dword [esp + 0x38]
dec esi
jmp 0x449bd1
cmp dword [esp + 0x34], edi
jle 0x449bcf
mov eax, ebx
cdq
idiv dword [esp + 0x28]
mov esi, eax
mov eax, ecx
cdq
idiv dword [esp + 0x28]
imul esi, dword [esp + 0x28]
add esi, edx
mov edx, dword [esp + 0x38]
jmp 0x449bd1
mov esi, ecx
mov eax, dword [esp + 0x14]
mov eax, dword [eax + esi*4]
and eax, 0xffffff
cmp eax, dword [esp + 0x2c]
je 0x449bfe
inc ecx
dec ebx
cmp ecx, edx
jl 0x449b80
push dword [esp + 0x20]
mov ebx, dword [esp + 0x2c]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x449df6
mov ebx, dword [esp + 0x28]
mov byte [esp + 0x12], 1
push dword [esp + 0x20]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x449df6
cmp byte [esp + 0xf], 0
mov al, byte [esp + 0x10]
mov ecx, dword [esp + 0x18]
je 0x449c39
and al, 0xf8
and ecx, 0xfffffff8
and byte [esp + 0x30], 0xf8
mov byte [esp + 0x10], al
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x1c]
mov ah, dl
movzx ebx, al
mov byte [esp + 0xf], ah
cmp edx, ebx
jle 0x449c51
mov byte [esp + 0x13], 0
jmp 0x449c57
sub al, ah
mov byte [esp + 0x13], al
movzx edx, cl
mov al, cl
sub al, ah
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x1c]
xor ecx, ecx
cmp edx, dword [esp + 0x2c]
movzx eax, al
cmovle ecx, eax
mov eax, dword [esp + 0x30]
movzx edx, al
sub al, byte [esp + 0xf]
mov dword [esp + 0x68], ecx
xor ecx, ecx
cmp dword [esp + 0x1c], edx
movzx eax, al
cmovle ecx, eax
mov dword [esp + 0x48], ecx
mov ecx, 0xff
mov eax, ecx
sub eax, ebx
mov bl, byte [esp + 0xf]
cmp dword [esp + 0x1c], eax
jle 0x449caa
mov byte [esp + 0x10], cl
jmp 0x449cb4
mov bh, bl
add bh, byte [esp + 0x10]
mov byte [esp + 0x10], bh
mov eax, ecx
sub eax, dword [esp + 0x2c]
cmp dword [esp + 0x1c], eax
jle 0x449cc6
mov byte [esp + 0x11], cl
jmp 0x449cd2
mov eax, dword [esp + 0x18]
mov bh, bl
add bh, al
mov byte [esp + 0x11], bh
sub ecx, edx
cmp dword [esp + 0x1c], ecx
jle 0x449ce1
mov byte [esp + 0xf], 0xff
jmp 0x449ce9
add bl, byte [esp + 0x30]
mov byte [esp + 0xf], bl
mov edx, dword [esp + 0x38]
xor ecx, ecx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x2c], ecx
test edx, edx
jle 0x449dbd
lea eax, [edx - 1]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x44]
cmp edx, dword [esp + 0x50]
jle 0x449d2a
cmp dword [esp + 0x34], edi
jle 0x449d1a
mov esi, eax
jmp 0x449d43
mov eax, ecx
cdq
idiv ebx
lea esi, [eax + 1]
imul esi, ebx
sub esi, edx
dec esi
jmp 0x449d43
cmp dword [esp + 0x34], edi
jle 0x449d41
cdq
idiv ebx
mov esi, eax
mov eax, ecx
cdq
idiv ebx
imul esi, ebx
add esi, edx
jmp 0x449d43
mov esi, ecx
mov eax, dword [esp + 0x14]
mov edx, dword [eax + esi*4]
mov ecx, edx
mov eax, edx
shr ecx, 0x10
shr eax, 8
cmp cl, byte [esp + 0x13]
jb 0x449d78
cmp cl, byte [esp + 0x10]
ja 0x449d78
cmp al, byte [esp + 0x68]
jb 0x449d78
cmp al, byte [esp + 0x11]
ja 0x449d78
cmp dl, byte [esp + 0x48]
jb 0x449d78
cmp dl, byte [esp + 0xf]
jbe 0x449da2
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
inc ecx
dec eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x18], eax
cmp ecx, dword [esp + 0x38]
jl 0x449d06
push dword [esp + 0x20]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x449df6
push dword [esp + 0x20]
mov byte [esp + 0x16], 1
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x449df6
mov esi, dword [esp + 0x48]
mov ebx, dword [esp + 0x28]
push dword [esp + 0x20]
mov edi, dword [esp + 0x50]
push 0
mov dword [esp + 0x54], edi
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp dword [esp + 0x3c], 0
mov byte [esp + 0x12], 0
je 0x449e25
mov eax, dword [esp + 0x40]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x14]
mov byte [esp + 0x12], 0
mov dword [esp + 0x14], eax
test edi, edi
je 0x449e15
mov eax, dword [esp + 0x4c]
mov edi, dword [esp + 0x24]
push eax
push dword [esp + 0x40]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esp + 0x3c]
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x449e29
push dword [esp + 0x3c]
mov edi, dword [esp + 0x28]
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x449e29
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x40]
test eax, eax
je 0x449e38
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x44a25e
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp byte [ebp + 0x24], 0
jne 0x449f41
cmp byte [esp + 0x12], 0
je 0x449f41
test edi, edi
je 0x449ed8
mov eax, esi
cdq
idiv ebx
mov eax, dword [esp + 0x24]
mov edi, edx
sub edi, dword [esp + 0x54]
add edi, dword [esp + 0x5c]
cmp byte [eax + 0x17], 0
jne 0x449e87
mov eax, dword [eax + 0xc]
mov dword [esp + 0x24], eax
mov cl, byte [eax + 0x15]
test cl, 2
je 0x449ea4
and cl, 0x3d
mov byte [eax + 0x15], cl
mov ecx, dword [eax]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov eax, dword [esp + 0x24]
mov cl, byte [eax + 0x15]
mov eax, edi
and cl, 0x9b
mov edi, dword [esp + 0x24]
or cl, 0x18
cdq
mov dword [edi], eax
mov dword [edi + 4], edx
mov byte [edi + 0x15], cl
jge 0x449ec8
mov ecx, edi
call fcn.00401380
and byte [edi + 0x15], 0x8f
jmp 0x449ed8
cmp dword [0x4e9800], 0
je 0x449ed8
mov ecx, edi
call fcn.00401380
mov edi, dword [esp + 0x64]
test edi, edi
je 0x449f41
mov eax, esi
cdq
idiv ebx
mov esi, eax
sub esi, dword [esp + 0x58]
add esi, dword [esp + 0x60]
cmp byte [edi + 0x17], 0
jne 0x449ef8
mov edi, dword [edi + 0xc]
mov cl, byte [edi + 0x15]
test cl, 2
je 0x449f11
and cl, 0x3d
mov byte [edi + 0x15], cl
mov ecx, dword [edi]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov cl, byte [edi + 0x15]
mov eax, esi
and cl, 0x9b
cdq
or cl, 0x18
mov dword [edi], eax
mov dword [edi + 4], edx
mov byte [edi + 0x15], cl
jge 0x449f31
mov ecx, edi
call fcn.00401380
and byte [edi + 0x15], 0x8f
jmp 0x449f41
cmp dword [0x4e9800], 0
je 0x449f41
mov ecx, edi
call fcn.00401380
cmp byte [esp + 0x12], 0
mov ecx, 0x4d4ebc
push 1
push 0
mov eax, 0x4bfc24
cmove eax, ecx
mov ecx, dword [0x4e97d8]
push 0xffffffffffffffff
push eax
call fcn.004a6070
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
mov eax, dword [esp + 0x1c]
test eax, eax
jle 0x44a04e
mov dl, byte [esp + 0x10]
mov dh, al
movzx esi, dl
cmp eax, esi
jle 0x449f8e
mov byte [esp + 0x10], 0
jmp 0x449f96
mov al, dl
sub al, dh
mov byte [esp + 0x10], al
mov ebx, dword [esp + 0x18]
mov al, bl
sub al, dh
movzx ecx, bl
cmp dword [esp + 0x1c], ecx
mov dword [esp + 0x48], ecx
movzx eax, al
mov dword [esp + 0x18], 0
mov ecx, dword [esp + 0x18]
cmovle ecx, eax
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], ecx
movzx ecx, al
sub al, dh
cmp dword [esp + 0x1c], ecx
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x14]
movzx eax, al
cmovle ecx, eax
mov dword [esp + 0x14], ecx
mov ecx, 0xff
mov eax, ecx
sub eax, esi
mov esi, dword [esp + 0x1c]
cmp esi, eax
jle 0x449ffd
mov byte [esp + 0x12], cl
jmp 0x44a005
mov al, dh
add al, dl
mov byte [esp + 0x12], al
mov eax, ecx
sub eax, dword [esp + 0x48]
cmp esi, eax
jle 0x44a015
mov byte [esp + 0xf], cl
jmp 0x44a01d
mov dl, dh
add dl, bl
mov byte [esp + 0xf], dl
sub ecx, dword [esp + 0x68]
cmp esi, ecx
jle 0x44a030
mov edx, dword [esp + 0x20]
mov byte [esp + 0x13], 0xff
jmp 0x44a07e
add dh, byte [esp + 0x30]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov byte [esp + 0x13], dh
mov edx, dword [esp + 0x20]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
jmp 0x44a07e
mov al, byte [esp + 0x11]
mov byte [esp + 0x10], al
mov al, byte [esp + 0x11]
mov dword [esp + 0x18], eax
mov al, byte [esp + 0x11]
mov dword [esp + 0x14], eax
mov al, byte [esp + 0x11]
mov byte [esp + 0x12], al
mov al, byte [esp + 0x11]
mov byte [esp + 0xf], al
mov al, byte [esp + 0x11]
mov byte [esp + 0x13], al
mov eax, dword [esp + 0x44]
mov ebx, eax
mov ecx, dword [esp + 0x50]
cmp eax, ecx
jle 0x44a095
xor eax, eax
cmp ebx, ecx
setge al
jmp 0x44a09c
xor eax, eax
cmp ebx, ecx
setle al
test eax, eax
je 0x44a236
mov eax, dword [esp + 0x34]
mov esi, eax
nop word [eax + eax]
cmp eax, edi
jle 0x44a0bd
xor eax, eax
cmp esi, edi
setge al
jmp 0x44a0c4
xor eax, eax
cmp esi, edi
setle al
test eax, eax
je 0x44a18f
push esi
push ebx
push edx
call dword [sym.imp.GDI32.dll_GetPixel]
cmp dword [esp + 0x1c], 1
jge 0x44a143
cmp eax, dword [ebp + 0x18]
jne 0x44a175
push dword [esp + 0x20]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [esp + 0x24]
test edi, edi
je 0x44a1b9
sub ebx, dword [esp + 0x54]
cmp byte [edi + 0x17], 0
jne 0x44a10a
mov edi, dword [edi + 0xc]
mov cl, byte [edi + 0x15]
test cl, 2
je 0x44a123
and cl, 0x3d
mov byte [edi + 0x15], cl
mov ecx, dword [edi]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov cl, byte [edi + 0x15]
mov eax, ebx
and cl, 0x9b
cdq
or cl, 0x18
mov dword [edi], eax
mov dword [edi + 4], edx
mov byte [edi + 0x15], cl
jge 0x44a1a9
mov ecx, edi
call fcn.00401380
and byte [edi + 0x15], 0x8f
jmp 0x44a1b9
mov ecx, eax
mov edx, eax
shr ecx, 8
shr edx, 0x10
cmp al, byte [esp + 0x10]
jb 0x44a175
cmp al, byte [esp + 0x12]
ja 0x44a175
cmp cl, byte [esp + 0x18]
jb 0x44a175
cmp cl, byte [esp + 0xf]
ja 0x44a175
cmp dl, byte [esp + 0x14]
jb 0x44a175
cmp dl, byte [esp + 0x13]
jbe 0x44a0e5
mov edx, dword [esp + 0x20]
xor eax, eax
cmp dword [esp + 0x34], edi
setle al
lea esi, [esi + eax*2]
mov eax, dword [esp + 0x34]
dec esi
jmp 0x44a0b0
mov ecx, dword [esp + 0x50]
xor eax, eax
cmp dword [esp + 0x44], ecx
setle al
lea ebx, [ebx + eax*2]
mov eax, dword [esp + 0x44]
dec ebx
jmp 0x44a088
cmp dword [0x4e9800], 0
je 0x44a1b9
mov ecx, edi
call fcn.00401380
mov ebx, dword [esp + 0x64]
test ebx, ebx
je 0x44a217
sub esi, dword [esp + 0x58]
cmp byte [ebx + 0x17], 0
jne 0x44a1ce
mov ebx, dword [ebx + 0xc]
mov cl, byte [ebx + 0x15]
test cl, 2
je 0x44a1e7
and cl, 0x3d
mov byte [ebx + 0x15], cl
mov ecx, dword [ebx]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov cl, byte [ebx + 0x15]
mov eax, esi
and cl, 0x9b
cdq
or cl, 0x18
mov dword [ebx], eax
mov dword [ebx + 4], edx
mov byte [ebx + 0x15], cl
jge 0x44a207
mov ecx, ebx
call fcn.00401380
and byte [ebx + 0x15], 0x8f
jmp 0x44a217
cmp dword [0x4e9800], 0
je 0x44a217
mov ecx, ebx
call fcn.00401380
mov ecx, dword [0x4e97d8]
push 1
push 0
push 0xffffffffffffffff
push 0x4bfc24
call fcn.004a6070
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
push edx
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0x4e97d8]
push 1
push 0
push 0xffffffffffffffff
push 0x4d4ebc
call fcn.004a6070
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
cmp byte [ebp + 0x24], 0
mov ecx, 0x4d4ebc
mov eax, 0x4d53f4
cmove ecx, eax
cmp word [ecx], 0x30
jne 0x44a27c
cmp word [ecx + 2], 0
je 0x44a28a
mov eax, dword [0x4e7024]
test byte [eax + 0x100], 1
jne 0x44a2a5
push 1
push 0
push 0xffffffffffffffff
push ecx
mov ecx, dword [0x4e97d8]
call fcn.004a6070
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
push 0x4bfba0
push 0
push ecx
mov ecx, dword [esp + 0x78]
call fcn.0043e4d0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20