Function at 0x4d0820
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4d1899
sub esp, 0x7c
mov eax, dword [esp + 0x80]
mov dword [eax + 0xc], 0
lea ecx, [0x636360]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 8], edx
call fcn.00409310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x4d14a4
mov ecx, dword [esp + 0x88]
test ecx, ecx
je 0x4d1052
mov ecx, dword [ecx + 8]
cmp ecx, 0x5fcadfef
ja 0x4d0c6f
cmp ecx, 0x1ffee651
ja 0x4d0a8d
cmp ecx, 0x10dbf978
ja 0x4d095f
cmp ecx, 0xc66cd3
jne 0x4d0902
mov ecx, dword [esp + 0x88]
lea edx, [0x6252e0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cf160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov dword [ecx], eax
jmp 0x4d15dd
cmp ecx, 0x10dbf978
jne 0x4d0953
mov ecx, dword [esp + 0x88]
lea edx, [0x625260]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cf160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov dword [ecx], eax
jmp 0x4d15dd
mov ecx, dword [esp + 0x88]
jmp 0x4d1059
cmp ecx, 0x1e2f74f8
jne 0x4d09b7
mov ecx, dword [esp + 0x88]
lea edx, [0x625320]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004cf160
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x8c]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4d15dd
cmp ecx, 0x1ffee651
jne 0x4d0a81
mov ecx, dword [esp + 0x88]
lea edx, [0x621ea0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
lea ecx, [0x66207c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 8
lea ecx, [0x661cef]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 7
call fcn.004ce2c0
movzx eax, byte [esp + 0x18]
test al, al
je 0x4d15dd
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004cde80
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004ce250
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004cf540
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov dword [esp + 0xc], 0x20
call fcn.004cfb70
movsd xmm0, qword [esp + 0x10]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0x8c]
movss dword [eax], xmm0
jmp 0x4d15dd
mov ecx, dword [esp + 0x88]
jmp 0x4d1059
cmp ecx, 0x2522ebe7
ja 0x4d0b56
cmp ecx, 0x23a42bd7
jne 0x4d0af9
mov ecx, dword [esp + 0x88]
lea edx, [0x620aa0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x80
call fcn.004cfe10
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
mov eax, dword [esp + 0x8c]
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
jmp 0x4d15dd
cmp ecx, 0x2522ebe7
jne 0x4d0b4a
mov ecx, dword [esp + 0x88]
lea edx, [0x6224a0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004ced20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov dword [ecx], eax
jmp 0x4d15dd
mov ecx, dword [esp + 0x88]
jmp 0x4d1059
cmp ecx, 0x26b80717
jne 0x4d0bae
mov ecx, dword [esp + 0x88]
lea edx, [0x622560]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004ced20
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x8c]
mov dword [edx + 4], eax
mov dword [edx], ecx
jmp 0x4d15dd
cmp ecx, 0x5a175aed
jne 0x4d0c12
mov ecx, dword [esp + 0x88]
lea edx, [0x624be0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.004cff30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0x8c]
mov dword [edi + 4], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4d0c08
mov dword [edi], eax
jmp 0x4d15dd
call fcn.0045e710
jmp 0x4d15dd
cmp ecx, 0x5fcadfef
jne 0x4d0c63
mov ecx, dword [esp + 0x88]
lea edx, [0x6225a0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004ced20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov byte [ecx], al
jmp 0x4d15dd
mov ecx, dword [esp + 0x88]
jmp 0x4d1059
cmp ecx, 0x7ac16a11
ja 0x4d0e29
cmp ecx, 0x6b581726
ja 0x4d0d6b
cmp ecx, 0x69d08ea5
jne 0x4d0d0e
mov ecx, dword [esp + 0x88]
lea edx, [0x6208e0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.004cff30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044ae50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x8c]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4d0d04
mov dword [edi], eax
jmp 0x4d15dd
call fcn.0045e710
jmp 0x4d15dd
cmp ecx, 0x6b581726
jne 0x4d0d5f
mov ecx, dword [esp + 0x88]
lea edx, [0x622520]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004ced20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov dword [ecx], eax
jmp 0x4d15dd
mov ecx, dword [esp + 0x88]
jmp 0x4d1059
cmp ecx, 0x6e0df0d1
jne 0x4d0db5
mov ecx, dword [esp + 0x88]
lea edx, [0x620a20]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.004ce420
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x8c]
mov byte [ecx], al
jmp 0x4d15dd
cmp ecx, 0x7ac16a11
jne 0x4d0e1d
mov ecx, dword [esp + 0x88]
lea edx, [0x620ae0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004cfe10
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0x8c]
movss dword [eax], xmm0
cvtsd2ss xmm0, xmm1
movss dword [eax + 4], xmm0
jmp 0x4d15dd
mov ecx, dword [esp + 0x88]
jmp 0x4d1059
cmp ecx, 0x9ad926a8
ja 0x4d0ee3
cmp ecx, 0x968bc55e
jne 0x4d0e86
mov ecx, dword [esp + 0x88]
lea edx, [0x6253a0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x20
call fcn.004cf160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov dword [ecx], eax
jmp 0x4d15dd
cmp ecx, 0x9ad926a8
jne 0x4d0ed7
mov ecx, dword [esp + 0x88]
lea edx, [0x625360]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.004cf160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov byte [ecx], al
jmp 0x4d15dd
mov ecx, dword [esp + 0x88]
jmp 0x4d1059
cmp ecx, 0xa066c615
jne 0x4d0f35
mov ecx, dword [esp + 0x88]
lea edx, [0x6224e0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004ced20
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov word [ecx], ax
jmp 0x4d15dd
cmp ecx, 0xba56ad13
jne 0x4d0ffb
mov ecx, dword [esp + 0x88]
lea edx, [0x621ee0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
lea ecx, [0x66207c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 8
lea ecx, [0x661cf6]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 7
call fcn.004ce2c0
movzx eax, byte [esp + 0x18]
test al, al
je 0x4d15dd
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004cde80
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004ce250
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004cf540
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.004cfb70
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0x8c]
movsd qword [eax], xmm0
jmp 0x4d15dd
cmp ecx, 0xee92f42e
jne 0x4d1049
mov ecx, dword [esp + 0x88]
lea edx, [0x6252a0]
cmp ecx, edx
jne 0x4d1059
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
call fcn.004cf160
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov word [ecx], ax
jmp 0x4d15dd
mov ecx, dword [esp + 0x88]
jmp 0x4d1059
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x88]
test edx, edx
je 0x4d10d9
nop
movzx ebx, byte [0x8256b8]
test bl, bl
je 0x4d10a3
mov dword [0x8256bc], ecx
mov ecx, dword [0x84c7c0]
test ecx, ecx
jne 0x4d108f
mov eax, dword [esp + 0x8c]
mov dword [0x8256c0], eax
jmp 0x4d10aa
lea edi, [0x8256c0]
mov eax, dword [esp + 0x8c]
call fcn.0045e710
jmp 0x4d10aa
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x4d10d1
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4d10df
or edx, 0x80
jmp 0x4d10df
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4d10df
xor edx, edx
xor ecx, ecx
xor eax, eax
nop
mov ebx, edx
and edx, 0x1f
cmp edx, 0x16
jne 0x4d17bc
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048d800
mov eax, dword [esp + 0x10]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x24], edx
nop
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x4d1255
cmp edx, 1
je 0x4d1211
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x4d11ae
cmp edx, 7
jb 0x4d16d3
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cf160
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
call fcn.0048f430
jmp 0x4d15dd
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004ced20
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
call fcn.0048efe0
jmp 0x4d15dd
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.004ce420
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x64]
mov dword [esp], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 8], ecx
mov byte [esp + 0xc], al
call fcn.0048eb50
jmp 0x4d15dd
cmp edx, 0x10
ja 0x4d1387
cmp edx, 0xe
ja 0x4d1324
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004cde80
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004ce250
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004cf540
mov eax, dword [esp + 4]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x64]
mov dword [esp], edx
mov ebx, dword [esp + 0x68]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004cfb70
movsd xmm0, qword [esp + 0x10]
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
movsd qword [esp + 0xc], xmm0
call fcn.0048ef20
jmp 0x4d15dd
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004cfe10
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
call fcn.0048ee50
jmp 0x4d15dd
cmp edx, 0x17
je 0x4d13e0
cmp edx, 0x18
jne 0x4d16d3
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.004cff30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x64]
mov dword [esp], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0048f530
jmp 0x4d15dd
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], ecx
mov eax, dword [eax + 0x28]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x60], edx
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4d15ea
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.004cff30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x60]
mov dword [esp], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0048fed0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov ebp, dword [esp + 0x68]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x24]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048ea40
xor eax, eax
jmp 0x4d1597
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
lea ecx, [0x6c986c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x14]
test eax, eax
jne 0x4d14e4
add esp, 0x7c
ret
mov ebp, dword [0x8250e4]
cmp dword [0x8250e0], ecx
je 0x4d1534
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], ebx
lea eax, [0x6380c0]
mov dword [esp], eax
lea eax, [esp + 0x74]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00433500
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x34], eax
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
call fcn.00403610
movzx eax, byte [esp + 0xc]
test al, al
je 0x4d1563
mov eax, dword [0x825108]
mov ebx, dword [0x82510c]
jmp 0x4d14f2
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x5c]
jmp 0x4d14f2
mov ebp, dword [esp + 0x4c]
movzx esi, byte [ebp + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
call fcn.0048f430
mov eax, dword [esp + 0x20]
inc eax
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jge 0x4d15dd
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x64]
mov dword [esp], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048da50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x1c]
cmp ebx, ebp
jb 0x4d156d
jmp 0x4d15e1
add esp, 0x7c
ret
mov eax, ebx
mov ecx, ebp
call fcn.0045e790
mov eax, dword [esp + 0x40]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x664e4c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044aa40
mov eax, dword [esp + 0x14]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], ecx
lea edx, [0x638060]
mov dword [esp], edx
call fcn.0040b620
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x28]
mov dword [edi + 4], eax
mov eax, dword [0x84c7c0]
test eax, eax
jne 0x4d16c8
mov eax, dword [esp + 0x50]
mov dword [edi], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
lea eax, [0x6c335c]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], edi
lea eax, [0x6380c0]
mov dword [esp], eax
lea eax, [esp + 0x74]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00433500
mov eax, dword [esp + 0x50]
call fcn.0045e710
jmp 0x4d1680
mov eax, dword [esp + 0x40]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x664e4c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x11
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044aa40
mov eax, dword [esp + 0x14]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x2c], ecx
lea edx, [0x638060]
mov dword [esp], edx
call fcn.0040b620
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x2c]
mov dword [edi + 4], eax
mov eax, dword [0x84c7c0]
test eax, eax
jne 0x4d17b1
mov eax, dword [esp + 0x54]
mov dword [edi], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
lea eax, [0x6c335c]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], edi
lea eax, [0x6380c0]
mov dword [esp], eax
lea eax, [esp + 0x74]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00433500
mov eax, dword [esp + 0x54]
call fcn.0045e710
jmp 0x4d1769
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048f940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x666746]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044aa40
mov eax, dword [esp + 0x14]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30], ecx
lea edx, [0x638060]
mov dword [esp], edx
call fcn.0040b620
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x30]
mov dword [edi + 4], eax
mov eax, dword [0x84c7c0]
test eax, eax
jne 0x4d188e
mov eax, dword [esp + 0x58]
mov dword [edi], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
lea eax, [0x6c335c]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], edi
lea eax, [0x6380c0]
mov dword [esp], eax
lea eax, [esp + 0x74]
mov dword [esp + 4], eax
call fcn.00408cf0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00433500
mov eax, dword [esp + 0x58]
call fcn.0045e710
jmp 0x4d1846
call fcn.0045d2d0
jmp fcn.004d0820