Function at 0x4d74e0
Capabilities:
Authenticate hmac
Encode data using base64
Encode data using xor
Encrypt data using speck
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x15c
mov eax, dword [esp + 0x170]
mov dword [esp + 0x134], ecx
mov esi, dword [ecx]
mov dword [esp + 0xbc], 0
mov dword [esp + 0x13c], edx
mov ebp, dword [edx]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov edi, esi
and edi, 0x800
sete byte [esp + 0x53]
mov edx, edi
shr edx, 0xb
mov dword [esp + 0x9c], edx
mov edx, esi
shr edx, 9
and edx, 1
mov dword [esp + 0xd4], edx
xor edx, 1
mov dword [esp + 0xf4], edx
mov dword [esp + 0x1c], esi
and esi, 1
mov dword [esp + 0xb4], esi
mov ebx, dword [esp + 0x194]
xor edx, edx
test ebx, ebx
setne dl
lea esi, [esp + 0xbc]
cmove esi, ebx
mov dword [esp + 0x138], esi
or edx, 2
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0x190]
lea esi, [edx + 0x88]
mov dword [esp + 0xb8], esi
lea edx, [edx + 0x64]
mov dword [esp + 0xc0], edx
mov dword [esp + 0x28], 0xfffffffe
mov dword [esp + 0x3c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xd8], ebp
mov dword [esp + 0xdc], 0
mov dword [esp + 0x44], 0xfffffffe
mov dword [esp + 0x4c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0xfffffffe
mov dword [esp + 0x14], 0xfffffffe
mov dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x60], edi
jmp 0x4d7650
add ecx, 0xe
mov dword [esp + 4], eax
mov dword [esp + 0x64], ecx
jmp 0x4d7650
mov eax, str._b__w_
jmp 0x4d7630
movzx eax, word [eax]
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x4d7669
test ax, ax
jne 0x4d7669
mov dword [esp + 4], ecx
movzx eax, word [ecx]
xor ecx, ecx
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x190]
mov edx, ecx
test ebx, ebx
je 0x4d7700
mov ecx, dword [edx + 0x10]
mov edx, dword [edx + 0x3c]
lea esi, [ecx + edx*2 - 0xc8]
cmp ebp, esi
ja 0x4dc8c9
mov edx, ebp
mov edi, dword [esp + 0xc4]
cmp edx, edi
cmovb edx, edi
mov ecx, dword [ebx]
mov esi, 0x7fffffeb
sub esi, ecx
mov ebp, edx
sub edx, edi
sar edx, 1
cmp esi, edx
jl 0x4dc95c
add ecx, edx
mov dword [ebx], ecx
mov edi, dword [esp + 0xc]
test edi, edi
je 0x4d7720
mov ecx, edi
sub ecx, dword [esp + 0xd8]
jbe 0x4d772f
mov edx, ebp
sub edx, edi
je 0x4d76ea
mov esi, dword [esp + 0xd8]
nop dword [eax]
movzx ebx, byte [edi]
inc edi
mov byte [esi], bl
inc esi
dec edx
jne 0x4d76e0
sub ebp, ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xc], ecx
jmp 0x4d772f
mov ecx, dword [edx + 0x3c]
add ecx, ecx
add ecx, dword [edx + 0x10]
cmp dword [edx + 0x20], ecx
jbe 0x4d773d
jmp 0x4dc8e9
mov dword [esp + 0xc], 0
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0xc4], ebp
mov ebx, dword [esp + 0x194]
movzx ecx, ax
test cx, cx
je 0x4d777c
cmp ecx, 0x5c
jne 0x4d775b
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x45
je 0x4d7c84
cmp dword [esp + 0x2c], 0
jne 0x4d7aa9
cmp ecx, 0x5c
jne 0x4d777c
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x51
je 0x4d7c98
test byte [esp + 0x1c], 8
je 0x4d78fb
cmp ecx, 0xff
ja 0x4d78fb
mov esi, dword [esp + 4]
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0xc]
lea eax, [esi + 2]
nop word cs:[eax + eax]
test byte [edx + ecx], 1
je 0x4d77d0
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x4d77b0
jmp 0x4d78f0
cmp ecx, 0x23
jne 0x4d78f0
mov dword [esp + 4], eax
mov cx, word [eax]
test cx, cx
je 0x4d79c3
mov dword [esp + 8], ebp
mov ebx, dword [esp + 0x60]
nop word cs:[eax + eax]
mov edx, dword [esp + 0x190]
mov edi, dword [edx + 0x1c]
mov edx, dword [edx + 0x84]
test edx, edx
je 0x4d7850
cmp eax, edi
jae 0x4d78b0
sub esp, 0xc
push dword [esp + 0xa8]
push dword [esp + 0xc8]
push edi
push edx
push eax
call fcn.0052f350
add esp, 0x20
test eax, eax
jne 0x4d7a97
mov edi, dword [esp + 4]
jmp 0x4d78b2
mov edx, dword [esp + 0xb8]
mov edx, dword [edx]
lea ebx, [edx + edx]
sub edi, ebx
cmp eax, edi
jbe 0x4d786a
mov edi, eax
mov ebx, dword [esp + 0x60]
jmp 0x4d78b2
mov edi, dword [esp + 0x190]
cmp cx, word [edi + 0x8c]
mov ebx, dword [esp + 0x60]
jne 0x4d78b0
cmp edx, 1
je 0x4d7cac
movzx ecx, word [eax + 2]
mov edi, dword [esp + 0x190]
cmp cx, word [edi + 0x8e]
mov edi, eax
jne 0x4d78b2
jmp 0x4d7cb1
mov edi, eax
lea eax, [edi + 2]
test ebx, ebx
mov dword [esp + 4], eax
je 0x4d78d9
movzx ecx, word [eax]
mov edx, ecx
and edx, 0xfc00
cmp edx, 0xdc00
jne 0x4d78dc
add edi, 4
mov dword [esp + 4], edi
mov eax, edi
mov cx, word [eax]
test cx, cx
jne 0x4d7800
jmp 0x4d7cb8
add eax, 0xfffffffe
cmp eax, esi
ja 0x4d7650
xor eax, eax
cmp ecx, 0x3e
jg 0x4d79d5
lea edx, [ecx - 0x2a]
cmp edx, 2
jb 0x4d7a33
cmp ecx, 0x28
jne 0x4d7e61
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x3f
jne 0x4d7935
movzx edx, word [eax + 4]
cmp edx, 0x23
je 0x4d8f52
xor eax, eax
cmp dword [esp + 0x64], 0
jne 0x4d7e6c
cmp dword [esp + 0x90], 0
je 0x4d7e6c
test al, al
jne 0x4d7e6c
mov edx, dword [esp + 0xdc]
test edx, edx
lea edx, [edx - 1]
mov dword [esp + 0xdc], edx
mov edx, 0
cmovg edx, dword [esp + 0x90]
jg 0x4d7c78
test ebx, ebx
jne 0x4d7c78
mov edx, dword [esp + 4]
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x18]
shr edx, 1
mov esi, ebp
mov ebp, ebx
mov ebx, esi
mov edi, dword [esp + 0x90]
movzx esi, word [edi + 4]
sub edx, esi
mov word [edi + 6], dx
mov edx, ebx
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x90], 0
jmp 0x4d7e6c
mov ecx, 0x23
cmp eax, esi
ja 0x4d7650
jmp 0x4d78fb
cmp ecx, 0x3f
je 0x4d7a33
cmp ecx, 0x7b
jne 0x4d7e61
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
add edx, 0xffffffd0
movzx esi, dx
xor edx, edx
cmp esi, 9
ja 0x4d7e5c
add eax, 6
nop
movzx edx, word [eax - 2]
lea esi, [edx - 0x30]
movzx esi, si
add eax, 2
cmp esi, 0xa
jb 0x4d7a00
movzx esi, dx
cmp esi, 0x2c
je 0x4d7e1d
mov edx, 1
cmp esi, 0x7d
je 0x4d7e5c
xor edx, edx
jmp 0x4d7e5c
mov al, 1
cmp ecx, 0x7c
ja case.0x4d7a3e.1
jmp dword [ecx*4 + 0x4dccac]
mov eax, dword [esp + 4]
add eax, 2
sub esp, 4
push 6
push 0x545aec
push eax
call fcn.0052f610
add esp, 0x10
test eax, eax
mov ecx, dword [esp + 4]
je 0x4d763d
add ecx, 2
sub esp, 4
push 6
push str._:_:__
push ecx
call fcn.0052f610
add esp, 0x10
test eax, eax
jne 0x4d7f01
mov eax, str._b___w_
mov ecx, dword [esp + 4]
jmp 0x4d7630
mov eax, dword [esp + 0xb8]
mov edx, dword [eax]
mov eax, dword [esp + 4]
jmp 0x4d7cb1
test ebx, ebx
jne 0x4d7ad8
cmp dword [esp + 0x90], 0
je 0x4d7ad8
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x190]
sub eax, dword [edx + 0x18]
shr eax, 1
mov esi, dword [esp + 0x90]
movzx edx, word [esi + 4]
sub eax, edx
mov word [esi + 6], ax
mov dword [esp + 0x90], 0
mov eax, dword [esp + 0x1c]
test ah, 0x40
je case.0x4d7a3e.1
mov eax, dword [esp + 4]
mov dword [ebp], 0xff0076
mov edx, dword [esp + 0x190]
sub eax, dword [edx + 0x18]
shr eax, 1
mov word [ebp + 4], ax
mov word [ebp + 6], 0
mov dword [esp + 0x90], ebp
lea ebp, [ebp + 8]
cmp dword [esp + 0x60], 0
mov word [esp + 0x124], cx
mov eax, 1
je 0x4d7b6a
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x4d7b6a
mov ecx, dword [esp + 4]
movzx edx, word [ecx + 2]
mov esi, edx
and esi, 0xfc00
mov eax, 1
cmp esi, 0xdc00
jne 0x4d7b6a
add ecx, 2
mov dword [esp + 4], ecx
mov word [esp + 0x126], dx
mov eax, 2
mov ecx, dword [esp + 0x190]
mov edx, ecx
mov ecx, dword [edx + 0x20]
sub ecx, dword [edx + 0x10]
sar ecx, 1
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x1c]
and ecx, 1
sete dl
or dl, byte [esp + 0x53]
jne 0x4d7c3d
movzx edx, word [esp + 0x124]
mov esi, edx
and esi, 0xfc00
cmp esi, 0xd800
jne 0x4d7bc9
shl edx, 0xa
and edx, 0xffc00
movzx esi, word [esp + 0x126]
and esi, 0x3ff
lea edx, [edx + esi + 0x10000]
mov esi, edx
sar esi, 0x1f
shr esi, 0x19
add esi, edx
mov edi, esi
and edi, 0x7fffff80
sar esi, 7
movzx esi, byte [esi + 0x5494e0]
shl esi, 7
sub edx, edi
add edx, esi
movzx edx, word [edx + edx + 0x54b6e0]
movzx edx, byte [edx*8 + 0x547e63]
test dx, dx
mov ebx, dword [esp + 0x194]
je 0x4d7c3d
mov dword [ebp], 0x90010
mov word [ebp + 4], dx
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
mov esi, dword [esp + 0x28]
cmove esi, ecx
mov dword [esp + 0x28], esi
cmove edx, ecx
mov dword [esp + 0x14], edx
jmp 0x4db68d
add ecx, 0x1d
mov word [ebp], cx
lea ecx, [ebp + 2]
test eax, eax
je 0x4d7cd5
mov edx, eax
lea esi, [esp + 0x124]
mov edi, ecx
nop word [eax + eax]
movzx ebx, word [esi]
mov word [edi], bx
add edi, 2
add esi, 2
dec edx
jne 0x4d7c60
lea edx, [ebp + eax*2]
lea ecx, [ecx + eax*2]
jmp 0x4d7cd7
mov dword [esp + 0x90], edx
jmp 0x4d7e6c
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 0x2c], 0
jmp 0x4db68d
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 0x2c], 1
jmp 0x4db68d
mov edx, 1
lea eax, [eax + edx*2]
mov dword [esp + 4], eax
mov ecx, 0x23
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
cmp eax, esi
ja 0x4d7650
jmp 0x4d78fb
mov edx, ebp
movzx esi, word [esp + 0x124]
cmp esi, 0xd
je 0x4d7cec
movzx edi, si
cmp edi, 0xa
jne 0x4d7cf7
mov ebx, dword [esp + 0xc0]
or byte [ebx + 1], 8
cmp eax, 1
sete bh
cmp dword [esp + 0xb4], 0
sete bl
or bl, bh
cmp dword [esp + 0x14], 0xfffffffe
jne 0x4d7d5b
test bl, bl
je 0x4d7db1
cmp eax, 1
mov ebx, dword [esp + 0x194]
jne 0x4d7eba
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x34], esi
jmp 0x4db68d
test bl, bl
je 0x4d7deb
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0x68]
or edx, dword [esp + 0xb4]
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x194]
jmp 0x4db68d
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 0xffffffff
mov ebx, dword [esp + 0x194]
jmp 0x4db68d
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov ebx, dword [esp + 0x194]
jmp 0x4db68d
movzx esi, word [eax - 2]
mov edx, 1
cmp esi, 0x7d
je 0x4d7e5c
add esi, 0xffffffd0
movzx esi, si
xor edx, edx
cmp esi, 9
ja 0x4d7e5c
nop dword [eax + eax]
movzx edx, word [eax]
lea esi, [edx - 0x30]
movzx esi, si
add eax, 2
cmp esi, 0xa
jb 0x4d7e40
movzx eax, dx
xor edx, edx
cmp eax, 0x7d
sete dl
test edx, edx
setne al
cmp dword [esp + 0x64], 0
je 0x4d7942
mov edx, dword [esp + 0x1c]
test dh, 0x40
sete dl
cmp dword [esp + 0x64], 0
jne 0x4d7eac
or dl, al
jne 0x4d7eac
mov edx, dword [esp + 4]
mov dword [ebp], 0xff0076
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x18]
shr edx, 1
mov word [ebp + 4], dx
mov word [ebp + 6], 0
mov dword [esp + 0x90], ebp
lea ebp, [ebp + 8]
cmp ecx, 0x7c
jbe switch.0x004d7a3e
jmp case.0x4d7a3e.1
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x68]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x28], 0xffffffff
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], eax
jmp 0x4db68d
mov eax, ebp
mov ebp, dword [esp + 0x190]
mov edi, eax
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 2]
mov edx, eax
add edx, 0xffffffd2
movzx esi, dx
cmp esi, 0xf
ja 0x4d7f9f
mov esi, 0x9001
bt esi, edx
jae 0x4d7f9f
lea edx, [ecx + 4]
jmp 0x4d7f43
add edx, 2
mov ebx, edi
movsx esi, word [edx]
movzx edi, si
cmp esi, 0x5b
jg 0x4d7f60
cmp edi, 0x5b
jne 0x4d7f7e
cmp word [edx + 2], ax
mov edi, ebx
jne 0x4d7f85
jmp 0x4d7f9f
cmp edi, 0x5c
jne 0x4d7f98
movzx edi, word [edx + 2]
and edi, 0xfffe
cmp edi, 0x5c
mov edi, ebx
jne 0x4d7f85
add edx, 2
add edx, 2
jmp 0x4d7f43
test si, si
mov edi, ebx
je 0x4d7f9f
cmp si, ax
jne 0x4d7f40
movzx esi, word [edx + 2]
cmp esi, 0x5d
jne 0x4d7f40
jmp 0x4dc983
cmp edi, 0x5d
mov edi, ebx
jne 0x4d7f85
sar dword [esp + 0x3c], 1
xor ebp, ebp
mov dword [esp + 8], edi
jmp 0x4d7fb8
mov ax, word [edx + 2]
mov ecx, edx
mov ebp, esi
lea edx, [ecx + 2]
mov dword [esp + 4], edx
movzx ebx, ax
cmp ebx, 0x5c
jne 0x4d7fe0
movzx eax, word [ecx + 4]
add ecx, 4
cmp eax, 0x45
jne 0x4d8000
mov dword [esp + 4], ecx
mov edx, ecx
mov esi, ebp
jmp 0x4d7fb0
test ebp, ebp
jne 0x4d8026
mov esi, 1
movzx ecx, ax
cmp ecx, 0x5e
je 0x4d7fb0
jmp 0x4d8026
sub esp, 4
push 3
push 0x545b22
push ecx
call fcn.0052f610
add esp, 0x10
test eax, eax
jne 0x4d8070
mov edx, dword [esp + 4]
add edx, 6
mov dword [esp + 4], edx
mov esi, ebp
jmp 0x4d7fb0
cmp ebx, 0x5d
jne 0x4d80cb
mov eax, dword [esp + 0x190]
test byte [eax + 0x63], 2
je 0x4d8075
test ebp, ebp
mov ax, 0xd
mov cx, 0x9d
cmove ax, cx
mov word [edi], ax
mov dword [esp + 0xc], edi
lea ebp, [edi + 2]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], edx
jmp 0x4d7d9d
mov ebx, 0x5c
lea edi, [edi + 6]
mov dword [esp + 0x38], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov ecx, dword [esp + 0x64]
jmp 0x4d8128
lea edi, [edi + 6]
mov dword [esp + 0x38], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
test ax, ax
mov ecx, dword [esp + 0x64]
je 0x4d9295
mov eax, dword [esp + 0x1c]
mov edx, eax
and edx, 1
mov dword [esp + 0x8c], edx
and eax, 0x800
cmp eax, 1
sbb eax, eax
or eax, 0x10ffff
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0
xor edx, edx
mov dword [esp + 0x58], edi
mov dword [esp + 0x30], ebp
jmp 0x4d8a60
movzx eax, word [edx - 6]
cmp eax, 0x51
jne 0x4d81ee
lea eax, [edx - 4]
mov dword [esp + 4], eax
movzx esi, word [edx - 4]
cmp esi, 0x5c
jne 0x4d81f5
movzx eax, word [edx - 2]
cmp eax, 0x45
jne 0x4d8210
mov dword [esp + 4], edx
movzx esi, word [edx]
add edx, 8
cmp esi, 0x5c
je 0x4d817d
add edx, 0xfffffff8
mov dword [esp + 0x2c], 0
jmp 0x4d8200
mov dl, byte [esp + 0x5c]
jmp 0x4d8227
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1f
mov ecx, 6
mov ebx, dword [esp + 0x194]
xor esi, esi
mov eax, dword [esp + 0x10]
cmp ecx, 0x12
jne 0x4d880c
jmp 0x4d8814
add edx, 0xfffffff8
xor ecx, ecx
jmp 0x4d8218
add edx, 0xfffffffc
mov dword [esp + 0x2c], 1
mov eax, edx
test si, si
jne 0x4d8e5f
jmp 0x4d8e7e
add edx, 0xfffffffc
mov ecx, 1
mov eax, edx
mov dword [esp + 0x2c], ecx
test ecx, ecx
setne dl
mov si, 0x5c
movzx esi, si
cmp dword [esp + 0x60], 0
mov dword [esp + 0x104], esi
je 0x4d827b
mov ecx, esi
and ecx, 0xfc00
mov edi, ebp
cmp ecx, 0xd800
jne 0x4d827d
shl esi, 0xa
and esi, 0xffc00
movzx ecx, word [eax + 2]
add eax, 2
and ecx, 0x3ff
lea esi, [esi + ecx + 0x10000]
mov dword [esp + 0x104], esi
mov dword [esp + 4], eax
test dl, dl
je 0x4d8285
jmp 0x4d87dc
mov edi, ebp
test dl, dl
jne 0x4d87dc
cmp esi, 0x5b
je 0x4d82fb
cmp esi, 0x5c
jne 0x4d87dc
lea ecx, [esp + 4]
lea edx, [esp + 0x104]
push 1
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.004dd7e0
add esp, 0x10
mov ecx, 6
cmp dword [esi], 0
jne 0x4d87f6
cmp eax, 5
mov ebp, edi
mov esi, dword [esp + 0x2c]
je 0x4d87ab
test eax, eax
jne 0x4d87c6
mov edi, ebp
mov esi, dword [esp + 0x104]
cmp esi, ebx
jb 0x4d87e4
jmp 0x4d8560
mov ebp, edi
movzx ecx, word [eax + 2]
mov esi, 0x5b
lea edx, [ecx - 0x2e]
movzx edi, dx
cmp edi, 0xf
ja 0x4d87da
mov edi, 0x9001
bt edi, edx
mov edi, ebp
jae 0x4d87dc
add eax, 4
jmp 0x4d832d
add eax, 2
movsx edx, word [eax]
mov esi, 0x5b
movzx edi, dx
cmp edx, 0x5b
jg 0x4d834f
cmp edi, 0x5b
jne 0x4d836d
cmp word [eax + 2], cx
mov edi, ebp
jne 0x4d8384
jmp 0x4d8553
cmp edi, 0x5c
jne 0x4d8379
movzx esi, word [eax + 2]
and esi, 0xfffe
cmp esi, 0x5c
mov edi, ebp
jne 0x4d8384
add eax, 2
add eax, 2
jmp 0x4d832d
test dx, dx
mov edi, ebp
jne 0x4d8384
jmp 0x4d87dc
cmp edi, 0x5d
mov edi, ebp
je 0x4d87dc
cmp dx, cx
jne 0x4d832a
movzx edx, word [eax + 2]
cmp edx, 0x5d
jne 0x4d832a
mov eax, dword [esp + 0x174]
mov dword [eax], 0x53
jmp 0x4d87f1
test ebx, ebx
js 0x4d8d58
cmp ebx, 3
mov edi, ebx
mov eax, 0
cmovl edi, eax
cmp dword [esp + 0x8c], 0
cmove edi, ebx
test dword [esp + 0x1c], 0x20000000
jne 0x4d881d
shl edi, 2
mov eax, dword [edi + edi*2 + 0x545b98]
mov ebp, dword [esp + 0xa8]
mov ecx, dword [ebp + eax + 0x1c]
mov dword [esp + 0x120], ecx
mov ecx, dword [ebp + eax + 0x18]
mov dword [esp + 0x11c], ecx
mov ecx, dword [ebp + eax + 0x14]
mov dword [esp + 0x118], ecx
mov ecx, dword [ebp + eax + 0x10]
mov dword [esp + 0x114], ecx
mov ecx, dword [ebp + eax + 0xc]
mov dword [esp + 0x110], ecx
mov ecx, dword [ebp + eax + 8]
mov dword [esp + 0x10c], ecx
mov ecx, dword [ebp + eax]
mov eax, dword [ebp + eax + 4]
mov dword [esp + 0x108], eax
mov dword [esp + 0x104], ecx
mov ecx, dword [edi + edi*2 + 0x545b9c]
mov eax, dword [edi + edi*2 + 0x545ba0]
test ecx, ecx
js 0x4d847d
add ebp, ecx
xor ecx, ecx
test eax, eax
js 0x4d8469
movzx edx, byte [ebp + ecx]
or byte [esp + ecx + 0x104], dl
inc ecx
cmp ecx, 0x20
jne 0x4d8455
jmp 0x4d847d
movzx edx, byte [ebp + ecx]
not dl
and byte [esp + ecx + 0x104], dl
inc ecx
cmp ecx, 0x20
jne 0x4d8469
mov edx, dword [esp + 0x98]
mov ecx, eax
neg ecx
cmovl ecx, eax
cmp ecx, 1
mov ebx, dword [esp + 0x194]
je 0x4d88e1
cmp ecx, 2
mov ebp, dword [esp + 8]
jne 0x4d88f3
mov al, 0x7f
mov ecx, 0xb
jmp 0x4d88ec
mov esi, edx
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
sub esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x108]
push dword [esp + 0x178]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.004de2f0
add esp, 0x10
test eax, eax
je 0x4d8889
xor ecx, ecx
cmp ebx, 0x10
sete cl
xor eax, eax
cmp dword [esp + 0x104], ecx
sete al
add eax, 3
mov ecx, dword [esp + 0x38]
mov word [ecx], ax
movzx eax, word [esp + 0xcc]
mov word [ecx + 2], ax
movzx eax, word [esp + 0xc8]
lea edx, [ecx + 6]
mov dword [esp + 0x38], edx
mov word [ecx + 4], ax
mov ecx, 0x12
mov dword [esp + 0xac], 1
jmp 0x4d8894
mov esi, 0x5b
cmp esi, ebx
jb 0x4d87e4
mov ebp, edi
je 0x4d8e82
cmp esi, 0xd
je 0x4d8572
cmp esi, 0xa
jne 0x4d857d
mov eax, dword [esp + 0xc0]
or byte [eax + 1], 8
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push esi
push ebx
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.004de890
add esp, 0x10
add dword [esp + 0x24], eax
mov ecx, 0x12
mov eax, 2
mov esi, dword [esp + 0x2c]
jmp 0x4d8800
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0x40]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x4d85b5
jmp 0x4d8629
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0x40]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x4d85ce
jmp 0x4d864b
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x4d85e5
jmp 0x4d8629
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x4d85fd
jmp 0x4d864b
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0xa0]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x4d8613
mov dword [esp + 0x54], 1
jmp 0x4d864b
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0xa0]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x4d8637
mov dword [esp + 0x10], edi
mov eax, ebx
mov dword [esp + 0x24], eax
jmp case.0x4d8c2d.25
test byte [esp + 0x1c], 0x40
jne 0x4dcb9f
mov eax, dword [esp + 4]
movzx ebx, word [eax]
jmp case.0x4d8c2d.5
mov dword [esp + 0x10], edi
mov esi, dword [0x5472cc]
test esi, esi
je 0x4d8944
lea eax, [esi - 1]
lea ecx, [esp + 0x6c]
mov edi, edx
lea edx, [esp + 0x38]
push eax
push 0
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.004de890
mov edx, edi
add esp, 0x10
cmp esi, 0xffffffff
mov ecx, ebp
jne 0x4d8948
jmp 0x4d8748
mov eax, dword [0x5472cc]
cmp eax, 0xffffffff
je 0x4d88ad
mov dword [esp + 0x2c], edx
mov esi, 0x5472cc
mov ebx, dword [esp + 0x1c]
mov ecx, eax
inc ecx
cmp ecx, dword [esi + 4]
lea esi, [esi + 4]
je 0x4d86d5
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push dword [esi - 4]
push eax
push dword [esp + 0x198]
push ebx
call fcn.004de890
add esp, 0x10
mov eax, dword [esi]
cmp eax, 0xffffffff
jne 0x4d86d3
jmp 0x4d8798
mov dword [esp + 0x10], edi
mov esi, dword [0x54731c]
test esi, esi
je 0x4d8995
lea eax, [esi - 1]
lea ecx, [esp + 0x6c]
mov edi, edx
lea edx, [esp + 0x38]
push eax
push 0
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.004de890
mov edx, edi
add esp, 0x10
cmp esi, 0xffffffff
mov ecx, ebp
jne 0x4d8999
xor esi, esi
jmp 0x4d88b3
mov eax, dword [0x54731c]
cmp eax, 0xffffffff
je 0x4d88ad
mov dword [esp + 0x2c], edx
mov esi, 0x54731c
mov ebx, dword [esp + 0x1c]
mov ecx, eax
inc ecx
cmp ecx, dword [esi + 4]
lea esi, [esi + 4]
je 0x4d876c
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push dword [esi - 4]
push eax
push dword [esp + 0x198]
push ebx
call fcn.004de890
add esp, 0x10
mov eax, dword [esi]
cmp eax, 0xffffffff
jne 0x4d876a
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
xor esi, esi
jmp case.0x4d8c2d.25
mov edi, ebp
mov dword [esp + 0x104], 8
mov esi, 8
cmp esi, ebx
jb 0x4d87e4
jmp 0x4d8560
mov eax, dword [esp + 0x174]
mov dword [eax], 0x53
mov ecx, 6
jmp 0x4d87fc
mov edi, ebp
cmp esi, ebx
jae 0x4d8560
mov eax, dword [esp + 0x174]
mov dword [eax], 8
mov ecx, 6
mov ebp, edi
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x194]
cmp ecx, 0x12
je 0x4d8814
test ecx, ecx
jne 0x4d9c81
mov dword [esp + 0x10], eax
jmp case.0x4d8c2d.25
mov ecx, dword [esp + 0x68]
test ecx, ecx
mov eax, 0xe
cmove eax, ecx
add eax, edi
mov ecx, 0x62bd8af
bt ecx, eax
jb 0x4d88be
lea eax, [edi - 8]
cmp eax, 2
ja 0x4d89f3
add eax, 0xb
mov edx, dword [esp + 0x68]
add edx, 3
mov ecx, dword [esp + 0x38]
mov word [ecx], dx
mov word [ecx + 2], ax
lea eax, [ecx + 6]
mov dword [esp + 0x38], eax
mov word [ecx + 4], 0
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov ecx, 0x12
mov dword [esp + 0xac], 1
jmp 0x4d8d6a
mov ecx, 6
mov eax, esi
mov dword [esp + 0x24], eax
mov ebx, dword [esp + 0x194]
xor esi, esi
mov eax, edi
cmp ecx, 0x12
jne 0x4d880c
jmp 0x4d8814
xor esi, esi
mov dword [esp + 0x10], edi
mov eax, edx
mov dword [esp + 0x24], eax
jmp case.0x4d8c2d.25
mov eax, dword [eax*4 + 0x545b28]
add eax, 0xfffffffe
mov dword [esp + 4], eax
mov ecx, 0x12
mov eax, dword [esp + 0x98]
mov dword [esp + 0x64], eax
jmp 0x4d8d6a
mov al, 0xc3
mov ecx, 1
mov ebp, dword [esp + 8]
and byte [esp + ecx + 0x104], al
cmp dword [esp + 0x68], 0
je 0x4d8912
xor eax, eax
movzx ecx, byte [esp + eax + 0x104]
not cl
or byte [esp + eax + 0x6c], cl
inc eax
cmp eax, 0x20
jne 0x4d88fc
jmp 0x4d8926
xor eax, eax
movzx ecx, byte [esp + eax + 0x104]
or byte [esp + eax + 0x6c], cl
inc eax
cmp eax, 0x20
jne 0x4d8914
mov dword [esp + 4], edx
mov ecx, 0x12
mov dword [esp + 0x10], 2
mov dword [esp + 0x24], 1
jmp 0x4d81da
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x2c], edx
mov ebx, 0x5472d0
jmp 0x4d8958
add ebx, 4
mov esi, eax
mov eax, dword [ebx]
inc esi
cmp eax, esi
je 0x4d8953
mov ebp, ecx
cmp eax, 0xffffffff
mov edi, dword [esp + 0x48]
je 0x4d896d
dec eax
mov edi, eax
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push edi
push esi
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.004de890
add esp, 0x10
mov eax, dword [ebx]
cmp eax, 0xffffffff
mov ecx, ebp
jne 0x4d8953
jmp 0x4d89e4
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x2c], edx
mov ebx, 0x547320
jmp 0x4d89a9
add ebx, 4
mov esi, eax
mov eax, dword [ebx]
inc esi
cmp eax, esi
je 0x4d89a4
mov ebp, ecx
cmp eax, 0xffffffff
mov edi, dword [esp + 0x48]
je 0x4d89be
dec eax
mov edi, eax
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push edi
push esi
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.004de890
add esp, 0x10
mov eax, dword [ebx]
cmp eax, 0xffffffff
mov ecx, ebp
jne 0x4d89a4
xor esi, esi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jmp case.0x4d8c2d.25
cmp dword [esp + 0x68], 0
je 0x4d83d2
cmp dword [esp + 0xc], 0
jne 0x4d8a12
movzx eax, word [esi + 4]
cmp eax, 0x5d
je 0x4d83d2
mov eax, dword [esp + 0x38]
lea ecx, [eax + 2]
mov dword [esp + 0x38], ecx
mov word [eax], 2
sub esp, 8
push ecx
push pe_nt_image_headers32
call fcn.0052f4d0
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
sub esp, 8
push eax
push 0x10ffff
call fcn.0052f4d0
add esp, 0x10
add eax, eax
add dword [esp + 0x38], eax
jmp 0x4d83d2
mov dword [esp + 0x64], ecx
cmp dword [esp + 0x60], 0
je 0x4d8ab1
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4d8ab1
mov eax, dword [esp + 4]
movzx ebx, word [eax]
mov ecx, ebx
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x4d8ab1
shl ebx, 0xa
and ebx, 0xffc00
movzx ecx, word [eax + 2]
add eax, 2
and ecx, 0x3ff
lea ebx, [ebx + ecx + 0x10000]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
cmp eax, edi
mov ecx, 1
cmova edx, ecx
cmp dword [esp + 0x194], 0
je 0x4d8adc
sub eax, edi
jbe 0x4d8adc
sar eax, 1
mov ecx, dword [esp + 0x194]
add dword [ecx], eax
mov dword [esp + 0x38], edi
cmp dword [esp + 0x2c], 0
mov dword [esp + 0xc], edx
je 0x4d8b18
mov ebp, dword [esp + 8]
cmp ebx, 0x5c
jne case.0x4d8c2d.5
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov ebx, 0x5c
cmp ecx, 0x45
jne case.0x4d8c2d.5
add eax, 2
mov dword [esp + 4], eax
xor esi, esi
jmp case.0x4d8c2d.25
mov ebp, dword [esp + 8]
cmp ebx, 0x5c
je 0x4d8beb
cmp ebx, 0x5b
jne case.0x4d8c2d.5
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov ebx, 0x5b
lea edx, [ecx - 0x2e]
movzx esi, dx
cmp esi, 0xf
ja case.0x4d8c2d.5
mov esi, 0x9001
bt esi, edx
jae case.0x4d8c2d.5
lea esi, [eax + 4]
mov dword [esp + 0x5c], esi
jmp 0x4d8b73
add esi, 2
movsx edx, word [esi]
mov ebx, 0x5b
movzx edi, dx
cmp edx, 0x5b
jg 0x4d8ba0
cmp edi, 0x5b
jne 0x4d8bbd
cmp word [esi + 2], cx
mov ebp, dword [esp + 8]
jne 0x4d8bca
jmp 0x4d8d7a
cmp edi, 0x5c
jne 0x4d8bdd
movzx edi, word [esi + 2]
and edi, 0xfffe
cmp edi, 0x5c
mov ebp, dword [esp + 8]
jne 0x4d8bca
add esi, 2
jmp 0x4d8b70
test dx, dx
mov ebp, dword [esp + 8]
je case.0x4d8c2d.5
cmp dx, cx
jne 0x4d8b70
movzx edx, word [esi + 2]
cmp edx, 0x5d
jne 0x4d8b70
jmp 0x4d8cbc
cmp edi, 0x5d
mov ebp, dword [esp + 8]
jne 0x4d8bca
jmp case.0x4d8c2d.5
lea ecx, [esp + 4]
lea edx, [esp + 0xe0]
push 1
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.004dd7e0
add esp, 0x10
cmp dword [esi], 0
jne 0x4dc969
cmp eax, 0x1a
ja case.0x4d8c2d.1
xor esi, esi
mov ebx, 8
jmp dword [eax*4 + 0x4dd35c]
mov ebx, dword [esp + 0xe0]
jmp case.0x4d8c2d.5
mov ebx, eax
lea ecx, [eax - 6]
cmp ecx, 0x1c
mov esi, dword [esp + 0x10]
ja case.0x4d8c64.12
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x24]
inc edx
lea edi, [esi + 2]
jmp dword [ecx*4 + 0x4dd3c8]
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov eax, dword [ebx*4 + 0x545bcc]
add eax, 0xfffffffe
mov dword [esp + 4], eax
xor esi, esi
mov dword [esp + 0x10], edi
jmp case.0x4d8c2d.25
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov esi, 1
cmp ecx, 0x5c
jne case.0x4d8c2d.25
movzx ecx, word [eax + 4]
mov esi, 1
cmp ecx, 0x45
jne case.0x4d8c2d.25
add eax, 4
jmp 0x4d8b0d
movzx ecx, cx
cmp ecx, 0x3a
jne 0x4d81c1
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 8]
mov dword [esp + 0xa8], ecx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 4], ebp
movzx ecx, word [ebp]
xor edx, edx
cmp ecx, 0x5e
jne 0x4d8d02
add eax, 6
mov dword [esp + 4], eax
mov edx, 1
mov ebp, eax
mov dword [esp + 0x54], 1
mov dword [esp + 0x68], edx
lea eax, [esi + 2]
mov dword [esp + 0x98], eax
mov eax, esi
sub eax, ebp
sar eax, 1
mov edx, str.alpha
xor ebx, ebx
mov dword [esp + 0x5c], eax
movzx edi, byte [ebx + 0x545dc3]
cmp eax, edi
jne 0x4d8d4e
sub esp, 4
push eax
push edx
push ebp
mov dword [esp + 0x3c], edx
call fcn.0052f610
mov edx, dword [esp + 0x3c]
add esp, 0x10
test eax, eax
mov eax, dword [esp + 0x5c]
je 0x4d83a4
lea edx, [edx + edi + 1]
inc ebx
cmp ebx, 0xe
jne 0x4d8d21
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1e
mov ecx, 6
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
jmp 0x4d81da
mov ebx, 0x5b
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 2]
cmp eax, 0x5c
jne 0x4d8dd2
mov edx, ecx
add edx, 4
nop word cs:[eax + eax]
mov esi, edx
movzx eax, word [esi]
cmp eax, 0x45
jne 0x4d8ddf
mov dword [esp + 4], esi
movzx eax, word [esi + 2]
lea edx, [esi + 4]
mov dword [esp + 0x2c], 0
cmp eax, 0x5c
mov ecx, esi
je 0x4d8da0
add edx, 0xfffffffc
xor edi, edi
mov ecx, esi
cmp ebx, 0xd
jne 0x4d8df1
jmp 0x4d8df6
mov edi, dword [esp + 0x2c]
mov edx, ecx
cmp ebx, 0xd
jne 0x4d8df1
jmp 0x4d8df6
add esi, 0xfffffffc
mov ax, 0x5c
mov edi, dword [esp + 0x2c]
mov edx, esi
cmp ebx, 0xd
je 0x4d8df6
cmp ebx, 0xa
jne 0x4d8e01
mov esi, dword [esp + 0xc0]
or byte [esi + 1], 8
mov esi, edi
test esi, esi
jne 0x4d8e86
movzx eax, ax
xor esi, esi
cmp eax, 0x2d
jne 0x4d8e86
lea eax, [edx + 4]
mov dword [esp + 4], eax
movzx esi, word [edx + 4]
cmp esi, 0x5c
jne 0x4d8e52
lea eax, [edx + 8]
add edx, 0xc
nop word [eax + eax]
movzx esi, word [eax - 2]
cmp esi, 0x45
jne 0x4d817d
mov dword [esp + 4], eax
movzx esi, word [eax]
add eax, 4
add edx, 4
cmp esi, 0x5c
je 0x4d8e30
add eax, 0xfffffffc
mov dword [esp + 0x2c], 0
test si, si
je 0x4d8e7e
mov edx, dword [esp + 0x2c]
test edx, edx
setne byte [esp + 0x5c]
movzx edi, si
cmp edi, 0x5d
jne 0x4d81bb
test edx, edx
jne 0x4d81bb
mov dword [esp + 4], ecx
mov esi, dword [esp + 0x2c]
xor eax, eax
mov ecx, dword [esp + 0x10]
cmp ecx, 2
setl al
add ecx, eax
mov dword [esp + 0x10], ecx
cmp ecx, 1
jne 0x4d8eb9
mov eax, esi
or eax, dword [esp + 0xac]
jne 0x4d8eb9
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
cmp ecx, 0x5d
je 0x4d94ca
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push ebx
push ebx
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.004de890
add esp, 0x10
add dword [esp + 0x24], eax
mov eax, dword [esp + 4]
lea ecx, [eax + 2]
mov dword [esp + 4], ecx
movzx ebx, word [eax + 2]
test ebx, ebx
je 0x4d8eff
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
jmp 0x4d8f2c
mov ecx, dword [esp + 0x64]
test ecx, ecx
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
je 0x4d92bb
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx ebx, word [ecx + 2]
xor ecx, ecx
test ebx, ebx
je 0x4d92bd
test esi, esi
mov dword [esp + 0x2c], esi
jne 0x4d8a60
cmp ebx, 0x5d
mov dword [esp + 0x2c], esi
jne 0x4d8a60
mov dword [esp + 0x2c], 0
jmp 0x4d92c9
add eax, 4
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
sete dl
cmp ecx, 0x29
setne dh
xor dh, dl
jne 0x4d8f55
test cx, cx
mov dword [esp + 4], eax
jne 0x4db68d
jmp 0x4dca0c
mov eax, dword [esp + 0x1c]
shr eax, 1
and eax, 1
add eax, 0x19
mov word [ebp], ax
jmp 0x4d9625
mov ecx, dword [esp + 4]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx eax, word [ecx + 2]
cmp eax, 0x2a
jne 0x4d955c
mov dword [esp + 8], ebp
movzx eax, word [ecx + 4]
cmp eax, 0x3a
mov ebp, dword [esp + 0x190]
je 0x4d96a9
movzx edx, ax
cmp edx, 0xff
ja 0x4d8fdb
mov edx, dword [ebp + 0xc]
test byte [edx + eax], 2
jne 0x4d96a9
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov ebx, dword [esp + 0x1c]
test bh, 0x10
je 0x4d98f0
jmp 0x4d9915
mov dword [esp + 8], ebp
mov esi, 0xffffffff
jmp 0x4d9064
mov dword [esp + 8], ebp
mov esi, 0xffffffff
mov edi, 1
jmp 0x4d9066
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x10]
sar edx, 1
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x1c]
shr eax, 2
and eax, 1
or eax, 0xc
mov word [ebp], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 2]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x28], ecx
jmp 0x4d98a3
mov dword [esp + 8], ebp
mov esi, 1
xor edi, edi
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x4dc9e8
test edi, edi
mov eax, dword [esp + 0x18]
cmove eax, dword [esp + 0x44]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
cmove eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
cmove eax, dword [esp + 0x40]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x34]
cmove eax, dword [esp + 0x4c]
mov dword [esp + 0x34], eax
cmp esi, edi
setne byte [esp + 0xac]
test bl, 8
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 4]
mov dword [esp + 0x10], edi
je 0x4d90e8
movzx eax, word [ebp + 2]
add ebp, 2
cmp eax, 0xff
mov ebx, dword [esp + 0x194]
jbe 0x4d9f2e
jmp 0x4da02b
mov ebx, dword [esp + 0x194]
jmp 0x4da03a
mov dword [esp + 8], ebp
lea ecx, [esp + 4]
lea edx, [esp + 0xe0]
push 0
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.004dd7e0
add esp, 0x10
cmp dword [esi], 0
jne 0x4dc969
test eax, eax
je 0x4d9635
lea ebp, [eax - 6]
cmp ebp, 0x11
mov edi, eax
mov edx, dword [esp + 0x14]
mov esi, edx
mov ecx, 0xffffffff
cmovb esi, ecx
cmp edx, 0xfffffffe
cmovne esi, edx
mov edx, edi
mov dword [esp + 0x28], esi
cmp edx, 0x1c
mov ebx, dword [esp + 0x194]
je 0x4d9ab3
mov eax, ebp
cmp edx, 0x1b
mov ebp, dword [esp + 8]
jne 0x4d9b06
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x20]
sub ecx, dword [eax + 0x10]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 4]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx edx, word [ecx + 2]
cmp edx, 0x3c
mov esi, 0x27
mov edx, 0x3e
cmove esi, edx
mov dword [esp + 0x30], esi
movzx edx, word [ecx + 4]
cmp edx, 0x2b
je 0x4d91cb
movzx esi, dx
cmp esi, 0x2d
je 0x4d91cb
add edx, 0xffffffd0
movzx edx, dx
cmp edx, 9
ja 0x4dafee
lea edx, [ecx + 4]
add ecx, 6
movzx esi, word [ecx]
lea edi, [esi - 0x30]
movzx edi, di
add ecx, 2
cmp edi, 0xa
jb 0x4d91d1
cmp dword [esp + 0x30], esi
jne 0x4d9e0e
mov dword [esp + 4], edx
mov ecx, 0xa3
mov eax, edx
jmp 0x4d9e20
mov cx, 0x5d
mov eax, dword [esp + 0x190]
test byte [eax + 0x63], 2
je 0x4d9283
jmp 0x4dca49
test byte [esp + 0x1c], 2
jne 0x4d9601
mov word [ebp], 0x1b
jmp 0x4d9625
mov cx, 0x7b
test al, al
je 0x4d9283
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
cmp edx, 9
ja 0x4d98c0
add eax, 4
xor edi, edi
mov ebx, dword [esp + 0x1c]
movzx ecx, cx
lea edx, [edi + edi*4]
lea edi, [ecx + edx*2 - 0x30]
cmp edi, 0xffff
jg 0x4dc9d4
movzx ecx, word [eax]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 9
jbe 0x4d9252
add eax, 0xfffffffe
jmp 0x4d98c9
mov word [esp + 0x124], cx
mov eax, 1
jmp 0x4d7b6a
mov dword [esp + 0x24], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0
xor edx, edx
test ebx, ebx
jne 0x4d92c9
jmp 0x4dc9fa
xor ecx, ecx
mov dword [esp + 0x2c], esi
test ebx, ebx
je 0x4dc9fa
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x38]
mov ebx, edx
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
test ebx, ebx
jne 0x4d92ee
cmp eax, edi
jbe 0x4d9312
mov ecx, dword [esp + 0x1c]
and ecx, 0x20000000
cmp dword [esp + 0x54], 0
je 0x4d9458
mov edx, dword [esp + 0xac]
or edx, ecx
jne 0x4d9458
mov ebx, dword [esp + 0x194]
test ebx, ebx
je 0x4d9346
sub eax, edi
sar eax, 1
add dword [ebx], eax
xor eax, eax
cmp ebp, dword [esp + 0x54]
sete al
mov ecx, 0x6f
sub ecx, eax
mov eax, dword [esp + 8]
mov word [eax], cx
mov dword [esp + 0xc], eax
lea ebp, [eax + 0x22]
jmp 0x4d989b
xor eax, eax
cmp ebp, dword [esp + 0x54]
sete al
mov ecx, 0x6f
sub ecx, eax
mov esi, dword [esp + 8]
lea eax, [esi + 2]
mov word [esi], cx
test ebp, ebp
je 0x4d940c
not byte [esp + 0x6c]
not byte [esp + 0x6d]
not byte [esp + 0x6e]
not byte [esp + 0x6f]
not byte [esp + 0x70]
not byte [esp + 0x71]
not byte [esp + 0x72]
not byte [esp + 0x73]
not byte [esp + 0x74]
not byte [esp + 0x75]
not byte [esp + 0x76]
not byte [esp + 0x77]
not byte [esp + 0x78]
not byte [esp + 0x79]
not byte [esp + 0x7a]
not byte [esp + 0x7b]
not byte [esp + 0x7c]
not byte [esp + 0x7d]
not byte [esp + 0x7e]
not byte [esp + 0x7f]
not byte [esp + 0x80]
not byte [esp + 0x81]
not byte [esp + 0x82]
not byte [esp + 0x83]
not byte [esp + 0x84]
not byte [esp + 0x85]
not byte [esp + 0x86]
not byte [esp + 0x87]
not byte [esp + 0x88]
not byte [esp + 0x89]
not byte [esp + 0x8a]
not byte [esp + 0x8b]
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x84]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [esp + 0xc], esi
lea ebp, [esi + 0x22]
jmp 0x4d989b
test ecx, ecx
mov edx, dword [esp + 0x60]
jne 0x4d970d
test ebp, ebp
mov esi, dword [esp + 8]
jne 0x4d9728
cmp dword [esp + 0x54], 0
je 0x4d9728
lea ecx, [eax + 2]
test edx, edx
mov dword [esp + 0x38], ecx
mov word [eax], 2
je 0x4d9713
sub esp, 8
push ecx
push pe_nt_image_headers32
call fcn.0052f4d0
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
sub esp, 8
push eax
push 0x10ffff
call fcn.0052f4d0
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
jmp 0x4d9728
add eax, 2
mov dword [esp + 4], eax
cmp dword [esp + 0x30], 0
je 0x4d96d9
mov edi, esi
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0x8c]
test esi, esi
sete al
or al, byte [esp + 0x53]
jne 0x4d966f
mov eax, ebx
sar eax, 0x1f
shr eax, 0x19
add eax, ebx
mov ecx, eax
and ecx, 0x7fffff80
sar eax, 7
movzx eax, byte [eax + 0x5494e0]
shl eax, 7
mov edx, ebx
sub edx, ecx
add edx, eax
movzx eax, word [edx + edx + 0x54b6e0]
movzx eax, byte [eax*8 + 0x547e63]
test ax, ax
je 0x4d966f
mov dword [ebp], 0x9000f
mov word [ebp + 4], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
jmp 0x4d9bfa
mov edx, dword [esp + 0x190]
mov esi, dword [edx + 0x20]
sub esi, dword [edx + 0x10]
sar esi, 1
mov dword [esp + 0x3c], esi
movzx eax, ax
cmp eax, 0x3f
mov ebx, dword [esp + 0x1c]
jne 0x4d98e0
lea eax, [ecx + 4]
mov dword [esp + 4], eax
movzx esi, word [ecx + 4]
lea edx, [esi - 0x21]
movzx edx, dx
cmp edx, 0x5b
ja case.0x4d95b3.1
mov dword [esp + 0x10], 1
mov dword [esp + 0x30], 0x29
mov dword [esp + 0x58], 0x27
xor edi, edi
jmp dword [edx*4 + 0x4dcea0]
mov ebx, ebp
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx eax, word [ecx + 6]
cmp eax, 0x29
jne 0x4d95ed
movzx eax, word [ecx + 8]
lea edx, [eax - 0x2a]
movzx edx, dx
cmp edx, 0x15
ja 0x4dc329
mov esi, 0x200003
bt esi, edx
jae 0x4dc329
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
mov edi, 0x7e
jmp 0x4dc11b
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
mov edx, dword [esp + 0x28]
cmove edx, eax
mov dword [esp + 0x28], edx
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov word [ebp], 0x1c
add ebp, 2
mov dword [esp + 0xc], 0
jmp 0x4db68d
cmp dword [esp + 0x60], 0
mov eax, dword [esp + 0xe0]
je 0x4d9bd9
cmp eax, 0xffff
jbe 0x4d9bd9
sub esp, 8
lea ecx, [esp + 0x12c]
push ecx
push eax
call fcn.0052f4d0
add esp, 0x10
mov ebp, dword [esp + 8]
jmp 0x4d7b6a
add esi, 0x1f
cmp dword [esp + 0x60], 0
mov word [ebp], si
je 0x4d9bef
cmp ebx, 0x10000
jb 0x4d9bef
lea esi, [ebp + 2]
sub esp, 8
push esi
push ebx
call fcn.0052f4d0
add esp, 0x10
mov dword [esp + 0xc], ebp
lea ebp, [esi + eax*2]
jmp 0x4d9bfa
lea esi, [ecx + 4]
mov dword [esp + 4], esi
mov edx, dword [ebp + 0xc]
add ecx, 6
movzx edi, ax
test byte [edx + edi], 2
je 0x4d9c03
mov dword [esp + 4], ecx
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0x100
jb 0x4d96b6
jmp case.0x4d9c58.2
cmp dword [esp + 0x60], 0
mov dword [esp + 0x2c], esi
je 0x4d9c96
cmp ebx, 0x10000
jb 0x4d9c96
sub esp, 8
lea eax, [esp + 0x12c]
push eax
push ebx
call fcn.0052f4d0
add esp, 0x10
jmp 0x4d9ca3
mov esi, dword [esp + 8]
jmp 0x4d9728
mov word [eax + 2], pe_nt_image_headers32
lea ecx, [eax + 6]
mov dword [esp + 0x38], ecx
mov word [eax + 4], 0xffff
mov eax, ecx
xor ebx, ebx
test ebp, ebp
setne bl
lea ecx, [eax + 2]
mov dword [esp + 0x38], ecx
mov word [eax], 0
mov word [esi], 0x70
mov edx, ebx
or edx, 4
cmp dword [esp + 0xac], 0
cmove dx, bx
mov word [esi + 4], dx
cmp dword [esp + 0x24], 0
jle 0x4d9884
lea eax, [esi + 6]
or edx, 2
mov word [esi + 4], dx
sub ecx, eax
mov ebx, dword [esp + 0x194]
je 0x4d9781
movzx edx, byte [esi + ecx + 5]
mov byte [esi + ecx + 0x25], dl
dec ecx
jne 0x4d9775
test ebp, ebp
je 0x4d983b
cmp dword [esp + 0xac], 0
jne 0x4d983b
not byte [esp + 0x6c]
not byte [esp + 0x6d]
not byte [esp + 0x6e]
not byte [esp + 0x6f]
not byte [esp + 0x70]
not byte [esp + 0x71]
not byte [esp + 0x72]
not byte [esp + 0x73]
not byte [esp + 0x74]
not byte [esp + 0x75]
not byte [esp + 0x76]
not byte [esp + 0x77]
not byte [esp + 0x78]
not byte [esp + 0x79]
not byte [esp + 0x7a]
not byte [esp + 0x7b]
not byte [esp + 0x7c]
not byte [esp + 0x7d]
not byte [esp + 0x7e]
not byte [esp + 0x7f]
not byte [esp + 0x80]
not byte [esp + 0x81]
not byte [esp + 0x82]
not byte [esp + 0x83]
not byte [esp + 0x84]
not byte [esp + 0x85]
not byte [esp + 0x86]
not byte [esp + 0x87]
not byte [esp + 0x88]
not byte [esp + 0x89]
not byte [esp + 0x8a]
not byte [esp + 0x8b]
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x84]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
add ecx, 0x20
jmp 0x4d988b
mov ebx, dword [esp + 0x194]
mov eax, ecx
sub eax, esi
shr eax, 1
mov word [esi + 2], ax
mov dword [esp + 0xc], esi
mov ebp, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
jmp 0x4db68d
add eax, 2
xor edi, edi
mov ebx, dword [esp + 0x1c]
mov dword [esp + 8], ebp
movzx ecx, cx
cmp ecx, 0x7d
jne 0x4d9bbd
mov esi, edi
jmp 0x4d9df5
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x190]
test bh, 0x10
jne 0x4d9915
mov eax, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x40], eax
mov ecx, dword [esp + 8]
mov word [ecx + 4], ax
mov edi, 0x85
mov dword [esp + 0x10], 0
mov esi, 1
mov ecx, ebx
jmp 0x4d9926
mov edi, 0x83
xor esi, esi
mov ecx, ebx
mov dword [esp + 0x10], 0
mov eax, dword [ebp + 0x58]
lea edx, [eax + 1]
mov dword [ebp + 0x58], edx
cmp eax, 0xfa
jge 0x4dca6d
mov edx, edi
cmp edi, 0x80
mov dword [esp + 0x30], esi
ja 0x4d996d
cmp dword [ebp + 0x80], 0
je 0x4d996d
mov eax, ebp
mov dword [eax + 0x80], 0
mov ebx, eax
mov dword [esp + 0xc], 0
mov eax, dword [esp + 8]
jmp 0x4d9985
mov edi, ebp
mov eax, dword [edi + 0x20]
sub eax, dword [edi + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov ebx, edi
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov edi, edx
mov word [eax], di
mov dword [esp + 0xa0], eax
mov esi, dword [ebx + 0x40]
mov eax, dword [ebx + 0x68]
mov dword [esp + 0x58], eax
mov dword [esp + 0xbc], 0
lea eax, [edi - 0x7f]
xor edx, edx
cmp eax, 2
setb dl
mov ebp, edx
xor eax, eax
cmp edi, 0x87
sete al
add eax, dword [esp + 0x18c]
sub esp, 0xc
lea edx, [esp + 0xac]
push dword [esp + 0x144]
push ebx
push dword [esp + 0x19c]
lea ebx, [esp + 0xe8]
push ebx
lea ebx, [esp + 0x104]
push ebx
lea ebx, [esp + 0x104]
push ebx
lea ebx, [esp + 0x124]
push ebx
push eax
push dword [esp + 0x5c]
push dword [esp + 0x40]
push ebp
push dword [esp + 0x1ac]
lea eax, [esp + 0x40]
push eax
call fcn.004d5d10
add esp, 0x40
test eax, eax
je 0x4dc969
mov eax, dword [esp + 0x190]
dec dword [eax + 0x58]
cmp edi, 0x81
mov ebp, dword [esp + 8]
jne 0x4d9a4c
mov eax, dword [esp + 0x190]
cmp dword [eax + 0x40], esi
ja 0x4d9a4c
mov word [ebp], 0x82
cmp edi, 0x80
mov ebx, dword [esp + 0x194]
ja 0x4d9a65
mov eax, dword [esp + 0x190]
dec dword [eax + 0x5c]
test ebx, ebx
jne 0x4d9ce5
cmp edi, 0x87
jne 0x4d9ce5
mov eax, 0xffffffff
mov ecx, ebp
movzx edx, word [ecx + 2]
movzx esi, word [ecx + edx*2]
lea ecx, [ecx + edx*2]
inc eax
cmp esi, 0x78
jne 0x4d9a80
movzx ecx, word [ebp + 4]
cmp ecx, 0x91
jne 0x4d9cb8
mov edi, 0x91
test eax, eax
jle 0x4d9ce5
jmp 0x4dcb33
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
cmp ecx, 0x27
mov ebp, dword [esp + 8]
je 0x4d9ad5
movzx edx, cx
cmp edx, 0x3c
je 0x4d9ad5
cmp edx, 0x7b
jne 0x4dcac7
add eax, 2
mov dword [esp + 4], eax
movzx ecx, cx
cmp ecx, 0x27
mov edx, 0x7d
cmove edx, ecx
cmp ecx, 0x3c
mov ecx, 0x3e
cmove edx, ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x10], 0
jmp 0x4db012
test edx, edx
js 0x4dacd4
lea ecx, [edx - 0xf]
cmp ecx, 1
ja 0x4dad3c
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
sub esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x108]
push dword [esp + 0x178]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.004de2f0
add esp, 0x10
test eax, eax
je 0x4db383
xor eax, eax
cmp edi, 0x10
sete al
mov ecx, dword [esp + 0x190]
mov edx, dword [ecx + 0x20]
sub edx, dword [ecx + 0x10]
sar edx, 1
mov dword [esp + 0x3c], edx
xor ecx, ecx
cmp dword [esp + 0x104], eax
sete cl
mov eax, 0x10
sub eax, ecx
mov word [ebp], ax
movzx eax, word [esp + 0xcc]
mov word [ebp + 2], ax
movzx eax, word [esp + 0xc8]
mov word [ebp + 4], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
xor ecx, ecx
jmp 0x4db388
lea edx, [eax + 2]
movzx ecx, word [eax + 2]
mov esi, 0xffffffff
cmp ecx, 0x7d
jne 0x4d9d9d
mov eax, edx
jmp 0x4d9df5
mov word [esp + 0x124], ax
mov eax, 1
mov ebp, dword [esp + 8]
jmp 0x4d7b6a
mov word [ebp + 2], bx
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 4]
mov dword [esp + 0x2c], edi
jmp 0x4d7df1
xor ebx, ebx
cmp edi, 0x3a
mov edi, 0
jne 0x4d9c3c
mov ebx, ecx
jmp 0x4d9c16
add ebx, 2
mov ax, word [ebx]
test ax, ax
je 0x4d9c26
movzx edx, ax
cmp edx, 0x29
jne 0x4d9c13
mov dword [esp + 4], ebx
sub ebx, ecx
sar ebx, 1
cmp ebx, 0x10000
mov edi, ecx
jae 0x4dcbb1
movzx eax, ax
cmp eax, 0x29
jne case.0x4d9c58.2
add ecx, 0xfffffffe
sub ecx, esi
sar ecx, 1
cmp ecx, 6
ja case.0x4d9c58.2
jmp dword [ecx*4 + 0x4dd1f0]
sub esp, 4
push 0
push 0x545ccf
push esi
call fcn.0052f610
add esp, 0x10
xor ecx, ecx
test eax, eax
je 0x4dbfdc
jmp case.0x4d9c58.2
mov dword [esp + 0xc], ebp
mov dword [esp + 0x2c], esi
test ecx, ecx
jne 0x4db3b4
jmp 0x4db68d
mov word [esp + 0x124], bx
mov eax, 1
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
jmp 0x4d7b6a
cmp eax, 2
jge 0x4dcb45
mov edi, 0x87
test eax, eax
jne 0x4d9ce5
mov dword [esp + 0xd0], 0xffffffff
mov dword [esp + 0xe4], 0xffffffff
mov edi, 0x87
mov eax, dword [esp + 4]
movzx eax, word [eax]
cmp eax, 0x29
jne 0x4dca7f
test ebx, ebx
je 0x4d9d2d
mov eax, dword [ebx]
mov edx, 0x7fffffeb
sub edx, eax
mov ecx, dword [esp + 0xbc]
add ecx, 0xfffffffc
cmp edx, ecx
jl 0x4dc95c
add ecx, eax
mov dword [ebx], ecx
mov dword [ebp + 2], 0x780002
mov word [ebp + 6], 2
add ebp, 8
jmp 0x4db68d
mov ebp, dword [esp + 0xa0]
cmp edi, 0x91
je 0x4db68d
cmp edi, 0x81
jl 0x4daef5
cmp dword [esp + 0x14], 0xfffffffe
mov ecx, dword [esp + 0xe4]
jne 0x4db437
mov eax, ecx
shr eax, 0x1f
xor eax, 1
mov dword [esp + 0xb0], eax
cmp ecx, 0xfffffffe
mov dword [esp + 0x14], 0xffffffff
mov eax, 0xffffffff
cmovg eax, ecx
mov dword [esp + 8], eax
test ecx, ecx
mov ecx, dword [esp + 0x100]
mov eax, dword [esp + 0x34]
cmovs ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x4db485
mov dword [esp + 0x10], edi
lea esi, [ecx - 0x30]
movzx esi, si
xor edi, edi
cmp esi, 9
ja 0x4d9de3
add eax, 4
xor esi, esi
lea edx, [esi + esi*4]
movzx ecx, cx
lea esi, [ecx + edx*2 - 0x30]
cmp esi, 0xffff
jg 0x4dc9d4
movzx ecx, word [eax]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 9
jbe 0x4d9db3
add eax, 0xfffffffe
mov edx, eax
mov edi, esi
cmp edi, dword [esp + 0x10]
mov esi, edi
jl 0x4dcbc3
mov eax, edx
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x174]
cmp dword [ecx], 0
mov dword [esp + 4], eax
je 0x4d906a
jmp 0x4dc969
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0x39
mov ecx, 6
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
cmp cl, 0x86
je 0x4db007
sar dword [esp + 0x3c], 1
cmp cl, 0xa3
jne 0x4dad2b
mov si, word [eax]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
movzx ecx, si
cmp ecx, 0x2b
jne 0x4d9e8b
lea edx, [eax + 2]
mov dword [esp + 4], edx
movzx esi, word [eax + 2]
mov eax, esi
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 0xa
mov eax, edx
jb 0x4d9eaa
jmp 0x4dcb69
cmp ecx, 0x2d
jne 0x4d9eaa
movzx esi, word [eax + 2]
lea edx, [esi - 0x30]
movzx edx, dx
cmp edx, 9
ja case.0x4d95b3.1
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
lea edx, [esi - 0x30]
movzx edx, dx
cmp edx, 9
ja 0x4dac91
add eax, 2
xor edx, edx
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
cmp edx, 0xccccccc
jge 0x4dca1e
lea edx, [edx + edx*4]
mov dword [esp + 4], eax
movzx esi, si
lea edi, [esi + edx*2 - 0x30]
movzx esi, word [eax]
mov edx, esi
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 0xa
mov edx, edi
jb 0x4d9ed0
jmp 0x4daca1
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
jmp 0x4d9f18
xor eax, eax
jmp 0x4d9f2e
mov eax, 1
lea ecx, [ebp + eax*2]
movzx eax, word [ebp + eax*2]
cmp eax, 0x100
mov ebp, ecx
jae 0x4da02d
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0xc]
add ebp, 2
movzx eax, ax
test byte [ecx + eax], 1
je 0x4d9f57
movzx eax, word [ebp]
add ebp, 2
cmp eax, 0x100
jb 0x4d9f3b
jmp 0x4da028
cmp eax, 0x23
jne 0x4da028
movzx ecx, word [ebp]
xor eax, eax
test cx, cx
je 0x4d9f2e
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x84]
test eax, eax
je 0x4d9fa8
cmp ebp, edx
jae 0x4d9ff3
sub esp, 0xc
push dword [esp + 0xa8]
push dword [esp + 0xc8]
push edx
push eax
push ebp
call fcn.0052f350
add esp, 0x20
test eax, eax
je 0x4d9ff3
jmp 0x4d9f04
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
mov edi, ebp
mov ebp, esi
lea esi, [eax + eax]
sub edx, esi
mov esi, ebp
mov ebp, edi
cmp ebp, edx
ja 0x4d9ff3
mov edx, dword [esp + 0x190]
cmp cx, word [edx + 0x8c]
jne 0x4d9ff3
cmp eax, 1
je 0x4d9f13
movzx ecx, word [ebp + 2]
mov edx, dword [esp + 0x190]
cmp cx, word [edx + 0x8e]
je 0x4d9f18
lea eax, [ebp + 2]
cmp dword [esp + 0x60], 0
je 0x4da00f
movzx ecx, word [ebp + 2]
and ecx, 0xfc00
cmp ecx, 0xdc00
je 0x4da013
mov ebp, eax
jmp 0x4da016
add ebp, 4
movzx ecx, word [ebp]
test cx, cx
jne 0x4d9f6b
jmp 0x4d9f0f
add ebp, 0xfffffffe
mov ecx, ebp
add ecx, 0xfffffffe
mov dword [esp + 4], ecx
mov ebp, ecx
mov ecx, dword [esp + 0xc]
movzx eax, word [ebp + 2]
cmp eax, 0x28
jne 0x4da096
movzx eax, word [ebp + 4]
xor edx, edx
cmp eax, 0x3f
mov edi, dword [esp + 0xd4]
jne 0x4da0c9
movzx eax, word [ebp + 6]
xor edx, edx
cmp eax, 0x23
mov edi, dword [esp + 0xd4]
jne 0x4da0c9
add ebp, 6
movzx eax, word [ebp + 2]
add ebp, 2
test ax, ax
sete cl
cmp eax, 0x29
setne dl
xor dl, cl
jne 0x4da06a
test ax, ax
mov dword [esp + 4], ebp
je 0x4dca0c
mov ax, word [ebp + 2]
mov ecx, dword [esp + 0xc]
add ebp, 2
movzx eax, ax
cmp eax, 0x3f
je 0x4da0bc
xor edx, edx
cmp eax, 0x2b
mov edi, dword [esp + 0xd4]
jne 0x4da0c9
mov dword [esp + 4], ebp
xor edi, edi
mov edx, 1
jmp 0x4da0c9
mov dword [esp + 4], ebp
xor edx, edx
mov edi, dword [esp + 0xf4]
movzx eax, word [ecx]
cmp eax, 0x75
mov dword [esp + 0x24], edx
jne 0x4da151
add dword [esp + 8], 8
test ebx, ebx
mov eax, dword [ecx]
mov dword [ecx + 4], eax
mov dword [ecx], 0x40081
mov dword [ecx + 8], 0x40078
mov dword [esp + 0xbc], 6
mov ebp, ecx
jne 0x4da1cb
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x20]
add ecx, 2
cmp eax, ecx
jb 0x4da1cb
lea edx, [ebp + 2]
movzx ecx, word [eax - 2]
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x14]
mov esi, dword [esp + 0x98]
sar edx, 1
cmp edx, ecx
mov edx, dword [esp + 0x24]
jne 0x4da1cb
add ecx, 2
mov word [eax - 2], cx
mov ax, word [ebp]
mov ebp, dword [esp + 0x60]
lea ecx, [eax - 0x1d]
movzx ecx, cx
cmp ecx, 3
ja 0x4da266
lea ecx, [eax - 0x1e]
movzx edx, cx
mov dword [esp + 0x54], 0
cmp edx, 2
ja 0x4da182
lea ecx, [edx + edx*2]
lea ecx, [edx + ecx*4 + 0xd]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 8]
movzx ecx, word [edx - 2]
test ebp, ebp
je 0x4da40d
mov edx, ecx
and edx, 0xfc00
movzx edx, dx
cmp edx, 0xdc00
jne 0x4da40d
mov eax, dword [esp + 8]
mov eax, dword [eax - 4]
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0xc]
mov ax, word [eax]
mov dword [esp + 0x48], 0x10000002
jmp 0x4da43d
mov eax, dword [esp + 8]
sub eax, ebp
mov dword [esp + 0x54], eax
sar eax, 1
mov dword [esp + 0x48], eax
mov ecx, ebp
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4da2d2
cmp eax, 2
jl 0x4da361
test ebx, ebx
je 0x4da996
mov eax, dword [esp + 0x10]
lea ecx, [eax - 1]
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], ecx
fild dword [esp + 0x14c]
mov dword [esp + 0x148], eax
fimul dword [esp + 0x148]
fld qword [0x545a60]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x4dc95c
imul eax, ecx
mov ecx, dword [ebx]
mov edx, 0x7fffffeb
sub edx, ecx
cmp edx, eax
jl 0x4dc95c
add ecx, eax
mov dword [ebx], ecx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
jmp 0x4da36c
movzx ecx, ax
mov dword [esp + 0x54], 0x34
mov dword [esp + 0x48], ecx
cmp ecx, 0x16
jbe 0x4da441
lea ecx, [eax - 0x6e]
movzx ecx, cx
cmp ecx, 6
ja 0x4da92a
test esi, esi
mov eax, dword [esp + 0xc]
je 0x4da4ab
cmp dword [esp + 0x10], 0
jne 0x4dad02
cmp esi, 0xffffffff
jne 0x4dad02
add edi, 0x62
mov eax, dword [esp + 8]
mov word [eax], di
add eax, 2
mov dword [esp + 8], eax
mov ebp, dword [esp + 0x190]
test edx, edx
jne 0x4db55e
jmp 0x4db661
cmp esi, 1
mov eax, dword [esp + 8]
mov word [eax], 0
jg 0x4da781
sub esp, 4
mov edx, 1
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push dword [esp + 0x198]
push dword [esp + 0xa8]
call fcn.004dd440
mov ecx, dword [esp + 0x1c]
add esp, 0x10
cmp dword [esp + 0x54], 0
je 0x4da331
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [ecx + eax - 1]
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 1], cl
mov ecx, dword [esp + 0xc]
dec eax
jne 0x4da319
add dword [esp + 8], 2
test esi, esi
je 0x4dac0b
lea eax, [edi + 0x92]
mov word [ecx], ax
mov dword [esp + 0xa8], ecx
lea ebp, [ecx + 2]
mov dword [esp + 0x5c], 0
dec esi
mov ecx, ebp
jmp 0x4da7f9
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], 0
test esi, esi
mov eax, 0
cmovg eax, dword [esp + 0x10]
sub esi, eax
mov dword [esp + 0xa8], 0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x58], eax
test esi, esi
js 0x4da810
test ebx, ebx
je 0x4da4bb
test esi, esi
je 0x4da4bb
mov eax, dword [esp + 0xbc]
add eax, 5
mov dword [esp + 0x140], esi
fild dword [esp + 0x140]
mov dword [esp + 0x144], eax
fimul dword [esp + 0x144]
fld qword [0x545a60]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x4dc95c
imul eax, esi
add eax, 0xfffffffc
mov ecx, dword [ebx]
mov edx, 0x7fffffeb
sub edx, ecx
cmp edx, eax
jl 0x4dc95c
add ecx, eax
mov dword [ebx], ecx
jmp 0x4da72b
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x10], 2
jl 0x4da43d
movzx edx, ax
cmp edx, 0x1e
ja 0x4da43d
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0x68]
or edx, dword [esp + 0xb4]
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x24]
add eax, 0xfffffff1
movzx eax, ax
mov ecx, 0xffffffff
cmp eax, 1
mov eax, 0xffffffff
ja 0x4da462
mov eax, dword [esp + 0xc]
movzx ecx, word [eax + 2]
movzx eax, word [eax + 4]
test esi, esi
je 0x4da4a7
mov dword [esp + 0x20], eax
add edi, dword [esp + 0x54]
mov eax, dword [esp + 0x10]
cmp eax, 1
mov dword [esp + 0x18], ecx
je 0x4da856
test eax, eax
mov ebp, eax
jne 0x4da870
cmp esi, 1
je 0x4dac57
cmp esi, 0xffffffff
mov eax, dword [esp + 0xc]
jne 0x4dac6b
add edi, 0x21
jmp 0x4dac5e
mov eax, dword [esp + 0xc]
mov dword [esp + 8], eax
mov ebp, dword [esp + 0x190]
jmp 0x4db661
test esi, esi
jle 0x4da72b
add edi, 0x92
mov dword [esp + 0x68], edi
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x10], eax
mov edi, esi
mov eax, esi
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 8]
mov esi, dword [esp + 0x10]
sub esi, edx
sar esi, 1
mov dword [esp + 0xa8], esi
dec eax
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x68]
mov word [ebx], ax
mov dword [esp + 0x98], edi
je 0x4da540
lea eax, [ebx + 4]
mov word [ebx + 2], 0x83
mov ecx, eax
mov edx, dword [esp + 0x5c]
sub ecx, edx
shr ecx, 1
test edx, edx
mov edx, 0
cmovne dx, cx
mov ecx, dword [esp + 0xc]
mov word [ebx + 4], dx
add ebx, 6
mov dword [esp + 0x5c], eax
jmp 0x4da543
add ebx, 2
sub esp, 4
push dword [esp + 0x58]
push ecx
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x10]
mov edi, dword [eax + 0x20]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0x18], edx
lea eax, [edx + ecx*2]
mov ebp, dword [esp + 0x8c]
mov edx, ebp
mov esi, dword [esp + 0xa8]
sub edx, esi
mov dword [esp + 0x20], edx
lea eax, [eax + edx*2 - 0xc8]
mov dword [esp + 0x10], edi
cmp edi, eax
jbe 0x4da674
mov ebp, dword [esp + 0x60]
mov dword [esp + 8], ebx
lea esi, [ecx + ecx]
cmp esi, 0x32001
jl 0x4da5ac
mov esi, 0x32000
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x4dc9ba
mov edx, esi
sub edx, ecx
cmp edx, 0x64
jl 0x4dc9ba
lea eax, [esi + esi]
sub esp, 0xc
push eax
call dword [0x545970]
add esp, 0x10
test eax, eax
je 0x4dc9b5
mov edi, dword [esp + 0x190]
mov ecx, dword [edi + 0x3c]
add ecx, ecx
sub esp, 4
push ecx
push dword [edi + 0x10]
push eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [edi + 0x10]
mov ebx, dword [edi + 0x20]
sub ebx, eax
add ebx, edx
mov dword [edi + 0x20], ebx
cmp dword [edi + 0x3c], 0x801
jl 0x4da630
sub esp, 0xc
push eax
call dword [0x545974]
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ebx, dword [edi + 0x20]
mov dword [edi + 0x10], edx
mov dword [edi + 0x3c], esi
mov eax, dword [esp + 0x174]
mov dword [eax], 0
mov ecx, dword [edi + 0x3c]
lea eax, [edx + ecx*2]
mov edx, dword [esp + 0x20]
lea eax, [eax + edx*2 - 0xc8]
cmp ebx, eax
mov eax, ebx
mov ebx, dword [esp + 8]
ja 0x4da59c
mov dword [esp + 0x10], eax
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0xa8]
cmp ebp, esi
mov edx, ebp
mov ecx, esi
jge 0x4da6fa
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x98]
mov esi, edx
mov eax, dword [esp + 0x18]
lea ecx, [eax + ecx*2]
xor edx, edx
cmp dword [esp + 0xec], 0
setne dl
mov edi, edx
lea edx, [eax + esi*2]
lea ebx, [eax + esi*2 + 2]
cmp ebx, ecx
cmovbe ebx, ecx
neg eax
add esi, esi
sub eax, esi
mov esi, dword [esp + 0x48]
lea esi, [esi + edi*2 + 1]
lea edi, [ebx + eax - 1]
shr edi, 1
mov eax, dword [esp + 0x10]
movzx ebx, word [edx]
add ebx, esi
mov word [eax], bx
add eax, 2
add edx, 2
cmp edx, ecx
jb 0x4da6c3
mov ecx, dword [esp + 0x10]
lea ecx, [ecx + edi*2 + 2]
mov eax, dword [esp + 0x190]
mov dword [esp + 0x10], ecx
mov dword [eax + 0x20], ecx
mov edx, ebp
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0xa8]
jmp 0x4da701
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x48]
lea ebx, [ebx + eax*2]
cmp edx, 1
mov eax, dword [esp + 0xec]
mov edi, eax
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
jg 0x4da4ea
jmp 0x4da72f
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x4da973
mov eax, ecx
mov edi, ebx
mov ebp, dword [esp + 0x190]
mov ebx, ecx
mov ecx, edi
sub ecx, ebx
shr ecx, 1
inc ecx
movzx edx, word [ebx]
lea esi, [edx + edx]
sub eax, esi
test edx, edx
mov word [edi], 0x78
mov word [edi + 2], cx
lea edi, [edi + 4]
mov word [ebx], cx
cmove eax, edx
test eax, eax
mov ebx, eax
jne 0x4da748
mov dword [esp + 8], edi
mov ebx, dword [esp + 0x194]
jmp 0x4da985
sub esp, 4
mov edx, 3
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push dword [esp + 0x198]
push dword [esp + 0xa8]
call fcn.004dd440
mov ecx, dword [esp + 0x1c]
add esp, 0x10
cmp dword [esp + 0x54], 0
je 0x4da7ce
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [ecx + eax - 1]
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 5], cl
mov ecx, dword [esp + 0xc]
dec eax
jne 0x4da7b6
lea eax, [edi + 0x92]
mov word [ecx], ax
lea eax, [ecx + 4]
mov dword [esp + 0x5c], eax
mov dword [ecx + 2], 0x83
lea ecx, [ecx + 6]
add dword [esp + 8], 6
mov dword [esp + 0xa8], 0
dec esi
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov edx, dword [esp + 0x24]
test esi, esi
jns 0x4da3a5
mov dword [esp + 0x68], edi
mov ecx, dword [esp + 8]
lea edi, [ecx - 4]
movzx eax, word [ecx - 2]
add eax, eax
mov dword [esp + 0xc], edi
sub edi, eax
mov dword [esp + 0x18], eax
neg eax
movzx esi, word [ecx + eax - 4]
cmp esi, 0x81
jne 0x4da8be
test edx, edx
mov ebp, dword [esp + 0x190]
mov ecx, dword [esp + 0x10]
jne 0x4da8df
jmp 0x4dabd6
cmp esi, 1
je 0x4daec3
cmp esi, 0xffffffff
jne 0x4dac73
add edi, 0x23
jmp 0x4dac5a
mov ecx, dword [esp + 0x54]
add ecx, 0x29
mov eax, dword [esp + 0xc]
mov word [eax], cx
mov ecx, eax
mov word [ecx + 2], bp
mov eax, ebp
lea ebp, [ecx + 4]
test esi, esi
js 0x4dac1c
sub esi, eax
je 0x4db4ea
test dword [esp + 0x48], 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x4daf5e
mov eax, dword [esp + 0x48]
mov word [ecx + 4], ax
add ecx, 6
jmp 0x4daf91
test edx, edx
mov ebp, dword [esp + 0x190]
mov ecx, dword [esp + 0x10]
je 0x4dabc4
movzx eax, si
cmp eax, 0x82
jne 0x4dabc4
mov word [edi], 0x83
mov si, 0x83
test ebx, ebx
jne 0x4dad85
mov ebx, edi
sub esp, 4
mov ecx, ebx
mov edx, dword [esp + 0x10]
push 0
push ebp
push dword [esp + 0xa8]
call fcn.004d6f20
add esp, 0x10
test eax, eax
jne 0x4dad70
movzx eax, word [ebx + 2]
movzx ecx, word [ebx + eax*2]
lea ebx, [ebx + eax*2]
cmp ecx, 0x77
je 0x4da8f2
jmp 0x4dad76
lea ecx, [eax - 0x7d]
movzx ecx, cx
cmp ecx, 0xa
ja 0x4dabf1
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0xc]
sub edx, ecx
mov dword [esp + 0x54], edx
sar edx, 1
mov dword [esp + 0x48], edx
movzx eax, ax
cmp eax, 0x87
jne 0x4daead
movzx eax, word [ecx + 4]
cmp eax, 0x91
mov edx, dword [esp + 0x24]
jne 0x4da1dd
jmp 0x4daec3
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0x190]
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x4db55e
jmp 0x4db661
mov dword [esp + 0x68], edi
cmp dword [esp + 0xb0], 0
setne al
mov edx, dword [esp + 0x30]
test edx, edx
sets cl
and cl, al
cmovne edx, dword [esp + 0x14]
mov dword [esp + 0x30], edx
test cl, cl
mov eax, dword [esp + 0x58]
cmovne eax, dword [esp + 0x34]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x18], ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x5c], 1
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
sub eax, dword [esp + 0x18]
mov ebp, eax
sar ebp, 1
sub esp, 4
push dword [esp + 0x58]
push ecx
mov dword [esp + 0x14], edx
push edx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x190]
mov ecx, eax
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x3c]
mov dword [esp + 0x18], edx
lea edx, [edx + ecx*2]
mov edi, esi
sub edi, ebp
mov dword [esp + 0x20], edi
lea edx, [edx + edi*2 - 0xc8]
cmp eax, edx
jbe 0x4dab0f
mov dword [esp + 0x8c], esi
lea edi, [ecx + ecx]
cmp edi, 0x32001
jl 0x4daa58
mov edi, 0x32000
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x4dc9ba
mov edx, edi
sub edx, ecx
cmp edx, 0x64
jl 0x4dc9ba
lea eax, [edi + edi]
sub esp, 0xc
push eax
call dword [0x545970]
add esp, 0x10
test eax, eax
je 0x4dc9b5
mov esi, dword [esp + 0x190]
mov ecx, dword [esi + 0x3c]
add ecx, ecx
sub esp, 4
push ecx
push dword [esi + 0x10]
push eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x20]
sub eax, ecx
add eax, edx
mov dword [esi + 0x20], eax
cmp dword [esi + 0x3c], 0x801
jl 0x4daadc
sub esp, 0xc
push ecx
call dword [0x545974]
mov edx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [esi + 0x20]
mov dword [esi + 0x10], edx
mov dword [esi + 0x3c], edi
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0
mov ecx, dword [esi + 0x3c]
lea edx, [edx + ecx*2]
mov esi, dword [esp + 0x20]
lea edx, [edx + esi*2 - 0xc8]
cmp eax, edx
ja 0x4daa48
mov esi, dword [esp + 0x8c]
cmp esi, ebp
mov ecx, ebp
jge 0x4dab6f
mov ebp, ecx
mov edi, dword [esp + 0x18]
lea ecx, [edi + ecx*2]
mov ebx, esi
lea edx, [edi + ebx*2]
lea esi, [edi + ebx*2 + 2]
cmp esi, ecx
cmovbe esi, ecx
neg edi
add ebx, ebx
sub edi, ebx
lea esi, [esi + edi - 1]
shr esi, 1
mov dword [esp + 0x20], esi
mov edi, eax
mov esi, dword [esp + 0x48]
movzx ebx, word [edx]
add ebx, esi
mov word [edi], bx
add edi, 2
add edx, 2
cmp edx, ecx
jb 0x4dab42
mov ecx, dword [esp + 0x20]
lea eax, [eax + ecx*2 + 2]
mov ecx, dword [esp + 0x190]
mov dword [ecx + 0x20], eax
mov ebx, dword [esp + 0x194]
jmp 0x4dab71
mov ebp, ecx
mov edx, dword [esp + 8]
mov edi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
lea edx, [edx + ecx*2]
inc edi
mov dword [esp + 0x5c], edi
cmp edi, dword [esp + 0x10]
mov esi, ebp
mov ecx, dword [esp + 0xc]
jl 0x4da9f4
mov dword [esp + 0x8c], ebp
mov dword [esp + 8], edx
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x98]
jmp 0x4da36c
lea eax, [esi - 0x81]
movzx eax, ax
cmp eax, 1
ja 0x4da8e8
mov eax, dword [esp + 0x68]
add eax, 0x79
mov ecx, dword [esp + 0xc]
mov word [ecx], ax
test edx, edx
jne 0x4db55e
jmp 0x4db661
movzx eax, ax
cmp eax, 0x9d
mov ebp, dword [esp + 0x190]
je 0x4db661
jmp 0x4dcb57
mov word [ecx], 0xa1
mov ebp, dword [esp + 0x190]
jmp 0x4db661
mov esi, dword [esp + 0x48]
test esi, 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x4daecf
mov word [ecx + 4], si
mov eax, dword [esp + 0x18]
test eax, eax
js 0x4db4db
mov word [ecx + 6], ax
mov eax, dword [esp + 0x20]
mov word [ecx + 8], ax
add ecx, 0xa
jmp 0x4db4de
add edi, 0x25
mov eax, dword [esp + 0xc]
mov word [eax], di
add eax, 2
mov ecx, eax
jmp 0x4db4ec
add edi, 0x27
mov word [eax], di
jmp 0x4dac83
add edi, 0x27
mov eax, dword [esp + 8]
mov word [eax], di
add esi, 0xffff
mov word [eax + 2], si
add eax, 4
mov ecx, eax
jmp 0x4db4ec
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
xor edx, edx
movzx eax, si
cmp dword [esp + 0x30], eax
jne 0x4dcb21
cmp ecx, 0x2d
jne 0x4dae94
test edx, edx
je 0x4dcb8d
mov eax, dword [ebp + 0x40]
sub eax, edx
inc eax
test eax, eax
mov edx, eax
jg 0x4db6d3
jmp 0x4dcad9
neg edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov esi, edx
mov edx, dword [esp + 0x28]
mov eax, edx
mov ebp, dword [esp + 0x190]
jmp 0x4db815
mov eax, edi
mov edi, dword [esp + 8]
cmp dword [esp + 0x10], 1
mov ebp, dword [esp + 0x190]
jne 0x4dafcc
cmp esi, 0xffffffff
jne 0x4dafcc
add eax, 0x64
jmp 0x4dafe3
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
jmp 0x4db398
cmp edx, 5
ja 0x4dbb6d
mov ecx, 0x32
bt ecx, edx
jae 0x4dbb6d
mov ecx, dword [esp + 0x190]
cmp dword [ecx + 0x48], 0
jne 0x4dbb97
mov dword [ecx + 0x48], 1
jmp 0x4dbb97
add esi, 5
mov word [edi], si
mov ebx, dword [esp + 0x194]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
movzx eax, si
cmp eax, 0x87
jne 0x4dada9
movzx eax, word [edi + 2]
movzx eax, word [edi + eax*2]
mov si, 0x87
cmp eax, 0x77
je 0x4dada9
mov word [edi], 0x8c
mov si, 0x8c
test edx, edx
je 0x4dae56
movzx eax, si
cmp eax, 0x8c
je 0x4dadc6
cmp eax, 0x87
jne 0x4dae69
mov dword [esp + 0xc], edi
mov edi, dword [esp + 8]
mov esi, edi
sub esi, dword [esp + 0xc]
shr esi, 1
mov word [edi], 0
sub esp, 4
mov edx, 2
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push ebp
push dword [esp + 0xa8]
call fcn.004dd440
add esp, 0x10
mov eax, edi
mov edi, dword [esp + 0xc]
sub eax, edi
je 0x4dae19
mov ecx, dword [esp + 8]
sub ecx, dword [esp + 0x18]
dec ecx
movzx edx, byte [ecx + eax - 4]
mov byte [ecx + eax], dl
dec eax
jne 0x4dae0e
add esi, 2
movzx eax, word [edi]
cmp eax, 0x87
mov ax, 0x89
mov cx, 0x84
cmove ax, cx
mov word [edi], ax
mov eax, dword [esp + 8]
mov word [eax + 4], 0x7b
mov word [eax + 6], si
add eax, 8
mov dword [esp + 8], eax
mov word [edi + 2], si
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
jmp 0x4dae76
mov eax, dword [esp + 0x68]
add eax, 0x79
mov ecx, dword [esp + 0xc]
mov word [ecx], ax
jmp 0x4db661
inc esi
mov word [edi], si
mov eax, dword [esp + 0xc]
mov word [eax], 0x7b
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x4dae86
mov word [eax], 0x94
cmp ecx, 2
jge 0x4db556
jmp 0x4db661
cmp ecx, 0x2b
jne 0x4db6d3
test edx, edx
je 0x4dcb8d
add edx, dword [ebp + 0x40]
jmp 0x4db6d3
cmp eax, 0x80
ja 0x4dbcae
cmp dword [esp + 0x10], 0
jle 0x4dbca5
mov ebp, dword [esp + 0x190]
jmp 0x4db661
lea esi, [esi + esi]
and esi, 0xe
sub esp, 4
push esi
lea eax, [esp + 0x158]
push eax
push ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
add esp, 0x10
add ebp, esi
jmp 0x4db4e0
cmp edi, 0x7d
sete al
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xe4]
or edx, ecx
setns dl
and dl, al
mov esi, dword [esp + 0x18]
cmove ecx, esi
test dl, dl
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x20]
cmove eax, ebx
mov dword [esp + 0xb0], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x28], edx
mov dword [esp + 0x44], esi
mov edx, dword [esp + 0x34]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
jmp 0x4db68d
mov dword [esp + 0x68], edi
mov edi, esi
mov eax, dword [esp + 0x48]
lea esi, [eax + eax]
and esi, 0xe
sub esp, 4
push esi
lea eax, [esp + 0x158]
push eax
push ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
mov ecx, esi
mov esi, edi
mov edi, dword [esp + 0x78]
add esp, 0x10
add ecx, ebp
mov eax, dword [esp + 0x18]
test eax, eax
js 0x4dafa7
mov word [ecx], ax
mov eax, dword [esp + 0x20]
mov word [ecx + 2], ax
add ecx, 4
cmp esi, 1
jne 0x4dafba
add edi, 0x25
mov word [ecx], di
add ecx, 2
jmp 0x4db4ec
add edi, 0x27
mov word [ecx], di
mov word [ecx + 2], si
add ecx, 4
jmp 0x4db4ec
cmp dword [esp + 0x10], 0
jne 0x4dbb3b
cmp esi, 1
jne 0x4dbb3b
add eax, 0x66
mov word [edi], ax
add edi, 2
jmp 0x4dbb5c
mov dword [esp + 0xa4], 1
mov ecx, 0x86
cmp cl, 0x86
jne 0x4d9e34
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], ebp
lea edi, [eax + 2]
mov dword [esp + 4], edi
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x30]
movzx edx, dx
cmp edx, 9
jbe 0x4dcaa7
movzx edx, cx
cmp edx, 0xff
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
mov edx, ebx
ja 0x4db095
mov ebx, edx
mov edx, dword [ebp + 0xc]
add eax, 4
movzx esi, cx
test byte [edx + esi], 0x10
je 0x4db08e
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x4db073
add eax, 0xfffffffe
mov edx, ebx
jmp 0x4db097
mov eax, edi
sub eax, edi
mov ebx, eax
sar ebx, 1
test edx, edx
mov edx, dword [esp + 0x10]
mov esi, ebx
mov dword [esp + 0xc], esi
je 0x4db16b
test ebx, ebx
je 0x4dcafd
cmp cx, word [esp + 0x30]
jne 0x4dcaeb
cmp eax, 0x41
jge 0x4dcb0f
test edx, edx
jne 0x4db0d2
inc dword [ebp + 0x54]
mov edx, dword [esp + 0x194]
mov eax, dword [edx]
lea ecx, [eax + 9]
mov dword [edx], ecx
cmp dword [ebp + 0x7c], 0
je 0x4db0eb
add eax, 0x11
mov dword [edx], eax
mov eax, dword [ebp + 0x30]
test eax, eax
mov ecx, dword [esp + 0xc]
jle 0x4db1b6
mov esi, dword [ebp + 0x28]
xor ebx, ebx
xor edx, edx
cmp ecx, dword [esi + 4]
jne 0x4db15b
sub esp, 4
push ecx
push dword [esi]
push edi
mov ebp, edi
mov edi, edx
call fcn.0052f5c0
mov ecx, dword [esp + 0x1c]
mov edx, edi
mov edi, ebp
mov ebp, dword [esp + 0x1a0]
add esp, 0x10
test eax, eax
jne 0x4db15b
cmp dword [esp + 0x10], 0
mov edx, dword [esi + 8]
jne 0x4dbbf2
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x4db15b
movzx ecx, word [eax + 4]
cmp edx, ecx
je 0x4db151
mov eax, dword [eax]
test eax, eax
jne 0x4db141
jmp 0x4db157
mov word [eax + 6], 1
mov ecx, dword [esp + 0xc]
inc ebx
add esi, 0xc
mov eax, dword [ebp + 0x30]
cmp ebx, eax
jl 0x4db101
jmp 0x4db6b9
mov esi, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x30]
xor ebx, ebx
test eax, eax
jle 0x4db6a0
lea eax, [esi + 2]
sub esp, 4
push dword [esp + 0x10]
push eax
push edi
call fcn.0052f5c0
add esp, 0x10
test eax, eax
jne 0x4db1a3
mov eax, dword [esp + 0xc]
cmp word [esi + eax*2 + 2], 0
je 0x4db69d
mov eax, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x34]
lea esi, [esi + ecx*2]
inc ebx
cmp ebx, eax
jl 0x4db17b
jmp 0x4db6a0
xor edx, edx
xor ebx, ebx
jmp 0x4db6b9
mov dword [esp + 8], ebp
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
lea ecx, [esp + 0xfc]
jmp 0x4db1f2
or dword [edi], esi
jmp 0x4db1f2
add edx, 2
mov eax, edx
lea ecx, [esp + 0xf8]
mov edx, eax
movzx esi, word [edx]
cmp esi, 0x29
je 0x4db3cf
movzx eax, si
cmp eax, 0x3a
je 0x4db3cf
lea eax, [edx + 2]
mov dword [esp + 4], eax
lea esi, [esi - 0x2d]
movzx ebx, si
cmp ebx, 0x4b
ja case.0x4db229.1
mov esi, 1
mov edi, ecx
jmp dword [ebx*4 + 0x4dd0c0]
or byte [ecx + 2], 8
mov esi, 0x400
mov edi, dword [esp + 0xc0]
jmp case.0x4db229.60
mov esi, 0x200
mov edi, ecx
or dword [edi], esi
jmp 0x4db1f2
mov esi, 0x40
mov edi, ecx
or dword [edi], esi
jmp 0x4db1f2
mov esi, 2
mov edi, ecx
or dword [edi], esi
jmp 0x4db1f2
mov esi, 4
mov edi, ecx
or dword [edi], esi
jmp 0x4db1f2
mov esi, 8
mov edi, ecx
or dword [edi], esi
jmp 0x4db1f2
sub esp, 4
push 1
push 0x545ce3
push esi
call fcn.0052f610
add esp, 0x10
mov ecx, 4
test eax, eax
je 0x4dbfdc
jmp case.0x4d9c58.2
sub esp, 4
push 4
push str.MARK
push esi
call fcn.0052f610
add esp, 0x10
test eax, eax
je 0x4dbc25
sub esp, 4
push 4
push str.FAIL
push esi
call fcn.0052f610
add esp, 0x10
test eax, eax
je 0x4dbf06
sub esp, 4
push 4
push str.SKIP
push esi
call fcn.0052f610
add esp, 0x10
test eax, eax
je 0x4dbfd0
sub esp, 4
push 4
push str.THEN
push esi
call fcn.0052f610
add esp, 0x10
mov ecx, 8
test eax, eax
mov ebp, dword [esp + 0x190]
je 0x4dbfdc
jmp case.0x4d9c58.2
sub esp, 4
push 5
push str.PRUNE
push esi
call fcn.0052f610
add esp, 0x10
mov ecx, 6
test eax, eax
je 0x4dbfdc
jmp case.0x4d9c58.2
sub esp, 4
push 6
push str.ACCEPT
push esi
call fcn.0052f610
add esp, 0x10
test eax, eax
je 0x4dbc2f
sub esp, 4
push 6
push str.COMMIT
push esi
call fcn.0052f610
add esp, 0x10
mov ecx, 3
test eax, eax
je 0x4dbfdc
jmp case.0x4d9c58.2
mov ecx, 6
test ecx, ecx
mov eax, dword [esp + 0x34]
je 0x4db3c2
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
test ecx, ecx
je 0x4db68d
cmp ecx, 4
je 0x4db68d
jmp 0x4dcab9
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
jmp 0x4dbbd9
mov eax, dword [esp + 0xfc]
or eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xf8]
not ecx
and ecx, eax
movzx eax, si
cmp eax, 0x29
jne 0x4dbc12
mov eax, ecx
shr eax, 9
and eax, 1
mov dword [esp + 0xd4], eax
xor eax, 1
mov dword [esp + 0xf4], eax
mov eax, ecx
and eax, 1
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x134]
mov dword [eax], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x1c], ecx
mov ebx, dword [esp + 0x194]
jmp 0x4db689
mov dword [esp + 0xb0], 0
test ecx, ecx
js 0x4db475
mov eax, dword [esp + 0xd0]
test eax, eax
jns 0x4db475
mov eax, dword [esp + 0x100]
mov dword [esp + 0xe8], eax
or ecx, dword [esp + 0x58]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0xd0]
test edx, edx
mov ebx, dword [esp + 0x18]
cmovs edx, ebx
mov esi, dword [esp + 0xe8]
mov ecx, dword [esp + 0x20]
cmovs esi, ecx
mov edi, dword [esp + 0x14]
mov dword [esp + 0x28], edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov ebx, dword [esp + 0x194]
jmp 0x4db68d
add ecx, 6
mov ebp, ecx
add edi, 0x21
mov word [ebp], di
add ebp, 2
mov ecx, ebp
mov ebp, dword [esp + 0x190]
mov edi, dword [esp + 0x48]
test edi, 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x4db512
mov word [ecx], di
add ecx, 2
mov dword [esp + 8], ecx
jmp 0x4db538
add edi, edi
and edi, 0xe
sub esp, 4
push edi
lea eax, [esp + 0x158]
push eax
mov esi, ecx
push esi
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
add esp, 0x10
add esi, edi
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x18]
test ecx, ecx
js 0x4db556
mov eax, dword [esp + 8]
mov word [eax], cx
mov ecx, dword [esp + 0x20]
mov word [eax + 2], cx
add eax, 4
mov dword [esp + 8], eax
test edx, edx
je 0x4db661
mov ebx, dword [esp + 0xa0]
movzx eax, word [ebx]
lea ecx, [eax - 0x1d]
movzx ecx, cx
cmp ecx, 0x53
ja case.0x4db573.4
jmp dword [ecx*4 + 0x4dd20c]
cmp dword [esp + 0x60], 0
movzx eax, byte [eax + 0x547228]
lea ebx, [ebx + eax*2]
mov dword [esp + 0xa0], ebx
je case.0x4db573.4
movzx eax, word [ebx - 2]
and eax, 0xfc00
cmp eax, 0xd800
jne case.0x4db573.4
add ebx, 2
jmp 0x4db5d1
add ebx, 0x22
jmp 0x4db5d1
movzx eax, byte [0x547285]
movzx ecx, word [ebx + 4]
add ecx, 0xfffffff1
movzx ecx, cx
xor edx, edx
cmp ecx, 2
setb dl
lea eax, [eax + edx*2]
jmp 0x4db5ce
movzx eax, word [ebx + 2]
lea ebx, [ebx + eax*2]
mov dword [esp + 0xa0], ebx
mov esi, dword [esp + 8]
sub esi, ebx
test esi, esi
jle 0x4db65a
movzx eax, word [ebx]
cmp eax, 0x75
ja 0x4db5fb
movzx eax, byte [eax + 0x545c58]
test ax, ax
je 0x4db5fb
mov word [ebx], ax
jmp 0x4db65a
mov edi, esi
shr edi, 1
mov eax, dword [esp + 8]
mov word [eax], 0
sub esp, 4
mov edx, 2
mov ecx, ebx
push dword [esp + 0x40]
push ebp
push dword [esp + 0xa8]
call fcn.004dd440
add esp, 0x10
movzx eax, byte [ebx + esi - 1]
mov byte [ebx + esi + 3], al
dec esi
jne 0x4db626
add edi, 2
mov eax, dword [esp + 0xa0]
mov word [eax], 0x81
mov ecx, dword [esp + 8]
mov word [ecx + 4], 0x78
mov word [ecx + 6], di
add ecx, 8
mov dword [esp + 8], ecx
mov word [eax + 2], di
mov ebx, dword [esp + 0x194]
xor eax, eax
mov cl, byte [esp + 0xac]
mov al, cl
add eax, eax
or dword [ebp + 0x68], eax
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov ebp, dword [esp + 8]
mov eax, dword [esp + 4]
add eax, 2
mov dword [esp + 4], eax
jmp 0x4d7650
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x94], esi
cmp ebx, eax
jge 0x4dcad9
mov ecx, dword [esp + 0x94]
movzx edx, word [ecx]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4db7e5
mov dword [esp + 0xa4], ecx
mov ebx, dword [esp + 0x194]
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x3c], eax
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov esi, ebx
test ebx, ebx
je 0x4db73d
mov ebx, ecx
mov edx, dword [esp + 8]
sub ebx, ecx
mov eax, dword [esp + 0x3c]
sub eax, edi
sar eax, 1
mov dword [esp + 0x3c], eax
mov word [edx], 0x75
shr ebx, 1
mov word [edx + 2], bx
mov dword [esp + 0xc], edx
lea ebp, [edx + 4]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0xb0], 0
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, esi
jmp 0x4db68d
mov eax, dword [esp + 8]
mov word [eax], 0
test edx, edx
mov ebx, ecx
mov dword [esp + 0xc], edi
je 0x4db772
sub esp, 4
push edx
push dword [esp + 0xa4]
push ecx
mov edi, edx
mov ebx, ecx
call fcn.004d4440
mov ecx, ebx
mov edx, edi
mov edi, dword [esp + 0x1c]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x4db8b7
cmp dword [esp + 0x18c], 0
jg 0x4db6e8
movzx eax, word [ebx + 2]
test ax, ax
jne 0x4db6e8
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x188], 0
je 0x4dca5b
mov esi, dword [esp + 0x188]
mov ecx, dword [esi + 4]
cmp ecx, ebx
jb 0x4dca5b
sub esp, 4
mov edx, dword [esp + 0xc]
push 0
push ebp
push dword [esp + 0xa8]
call fcn.004d6f20
add esp, 0x10
test eax, eax
je 0x4dbc7f
mov esi, dword [esi]
test esi, esi
jne 0x4db7ae
jmp 0x4dca5b
mov dword [esp + 0x10], edx
mov dword [esp + 0xa4], 0
cmp dword [esp + 0x194], 0
je 0x4db8e5
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x194]
mov esi, dword [esp + 0x10]
cmp eax, 0xfffffffe
mov ecx, eax
mov eax, 0xffffffff
cmove edx, eax
mov dword [esp + 0x28], edx
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x1c]
and eax, 1
add eax, 0x71
mov ecx, dword [esp + 8]
mov word [ecx], ax
mov edx, esi
mov word [ecx + 2], dx
mov eax, 1
mov ecx, edx
shl eax, cl
cmp edx, 0x20
mov ecx, 1
cmovge eax, ecx
or dword [ebp + 0x50], eax
cmp edx, dword [ebp + 0x4c]
jle 0x4db86d
mov dword [ebp + 0x4c], edx
sar dword [esp + 0x3c], 1
mov eax, dword [esp + 8]
lea eax, [eax + 4]
mov ecx, dword [ebp + 0x24]
test ecx, ecx
je 0x4db897
mov edi, dword [esp + 8]
mov esi, edx
movzx edx, word [ecx + 4]
cmp esi, edx
mov edx, esi
je 0x4db8a6
mov ecx, dword [ecx]
test ecx, ecx
jne 0x4db883
jmp 0x4db8ac
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov ebp, eax
jmp 0x4db68d
mov word [ecx + 6], 1
mov dword [esp + 0xc], edi
mov ebp, eax
jmp 0x4db68d
mov dword [esp + 0x28], ecx
cmp edx, dword [ebp + 0x44]
jg 0x4dcad9
mov ecx, dword [ebp + 0x3c]
lea eax, [edi + ecx*2 - 0xc8]
cmp eax, dword [esp + 0x3c]
jbe 0x4dba63
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x3c]
jmp 0x4dbb15
cmp dword [ebp + 0x78], 0
je 0x4dbc02
lea ecx, [ebx + 1]
mov dword [esp + 0xa4], 0
cmp ecx, eax
jge 0x4dbc99
mov ecx, dword [esp + 0x94]
lea eax, [ecx + 2]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x34]
lea edi, [ecx + eax*2]
mov esi, 1
lea eax, [edi + 2]
sub esp, 8
push eax
push dword [esp + 0x18]
call fcn.0052f520
add esp, 0x10
test eax, eax
jne 0x4db945
mov eax, dword [ebp + 0x34]
lea edi, [edi + eax*2]
lea eax, [ebx + esi + 1]
inc esi
cmp eax, dword [ebp + 0x30]
jl 0x4db91e
mov dword [esp + 0xc], edi
mov dword [esp + 0xa4], 0
cmp esi, 2
jl 0x4dbfb5
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x10]
mov eax, dword [esp + 0x1c]
and eax, 1
add eax, 0x73
mov ecx, dword [esp + 8]
mov word [ecx], ax
sar edx, 1
mov dword [esp + 0x3c], edx
mov word [ecx + 2], bx
mov word [ecx + 4], si
lea eax, [ecx + 6]
mov dword [esp + 0x30], eax
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x94], eax
jae 0x4dba4b
mov ebp, dword [esp + 0x190]
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x10], eax
mov esi, dword [ebp + 0x50]
mov eax, dword [ebp + 0x4c]
mov ecx, dword [esp + 0x94]
mov ebp, ecx
movzx ecx, word [ecx]
mov ebx, 1
shl ebx, cl
cmp ecx, 0x20
mov edi, 1
cmovae ebx, edi
cmp eax, ecx
jge 0x4dba04
mov eax, dword [esp + 0x190]
mov dword [eax + 0x4c], ecx
mov eax, ecx
test edx, edx
je 0x4dba1e
mov edi, edx
cmp word [edi + 4], cx
je 0x4dba18
mov edi, dword [edi]
test edi, edi
jne 0x4dba0a
jmp 0x4dba1e
mov word [edi + 6], 1
or esi, ebx
mov ecx, ebp
mov edi, dword [esp + 0x10]
lea ecx, [ecx + edi*2]
cmp ecx, dword [esp + 0xc]
jb 0x4db9dd
mov dword [esp + 0x94], ecx
mov eax, dword [esp + 0x190]
mov dword [eax + 0x50], esi
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov ebp, dword [esp + 0x30]
mov ebx, dword [esp + 0x194]
jmp 0x4db68d
mov dword [esp + 0x10], edx
lea esi, [ecx + ecx]
cmp esi, 0x32001
mov eax, 0x32000
cmovge esi, eax
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x4dc9ba
mov edx, esi
sub edx, ecx
cmp edx, 0x64
jl 0x4dc9ba
lea eax, [esi + esi]
sub esp, 0xc
push eax
call dword [0x545970]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x4dc9b5
mov ebp, dword [esp + 0x190]
mov eax, dword [ebp + 0x3c]
add eax, eax
sub esp, 4
push eax
push dword [ebp + 0x10]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x20]
sub eax, ecx
add eax, ebx
mov dword [ebp + 0x20], eax
cmp dword [ebp + 0x3c], 0x801
jl 0x4dbaf2
sub esp, 0xc
push ecx
call dword [0x545974]
add esp, 0x10
mov eax, dword [ebp + 0x20]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x3c], esi
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0
mov ecx, dword [ebp + 0x14]
mov edi, dword [esp + 0x194]
mov esi, edi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x28]
lea ebx, [edi + edx*2]
mov edi, dword [esp + 8]
lea edx, [edi + 2]
sub edx, ecx
shr edx, 1
mov word [eax], dx
add eax, 2
mov dword [ebp + 0x20], eax
mov edx, edi
mov edi, dword [esp + 0xc]
jmp 0x4db6ec
add eax, 0x68
cmp esi, 0xffffffff
mov word [edi], ax
mov eax, dword [esp + 0x10]
mov word [edi + 2], ax
mov eax, 0
cmovne ax, si
mov word [edi + 4], ax
add edi, 6
mov dword [esp + 8], edi
test edx, edx
jne 0x4db55e
jmp 0x4db661
lea ecx, [edx - 0x1d]
cmp ecx, 5
mov ecx, dword [esp + 0x190]
ja 0x4dbb97
mov eax, dword [esp + 4]
add eax, 2
mov dword [esp + 0x64], eax
mov eax, dword [edx*4 + 0x545bcc]
add eax, 0xfffffffe
mov dword [esp + 4], eax
jmp 0x4dbbcd
cmp eax, 0x11
mov eax, 0
cmovb eax, ebp
mov dword [esp + 0xc], eax
mov eax, dword [ecx + 0x20]
sub eax, dword [ecx + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov eax, edx
xor eax, 0xe
or eax, dword [esp + 0x9c]
mov ax, 0xd
cmove dx, ax
mov word [ebp], dx
add ebp, 2
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
jmp 0x4db68d
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
jmp 0x4db6cc
mov dword [esp + 0xa4], 0
jmp 0x4db802
add edx, 2
mov dword [esp + 4], edx
mov edi, 0x83
xor esi, esi
jmp 0x4dbdbc
mov ecx, 1
jmp 0x4dbfdc
test ebx, ebx
jne 0x4dcb7b
mov eax, dword [esp + 0x190]
mov dword [eax + 0x6c], 1
mov eax, dword [eax + 0x24]
mov ebx, dword [esp + 0x194]
test eax, eax
je 0x4dc0aa
mov esi, dword [esp + 8]
test ebx, ebx
je 0x4dbc64
add dword [ebx], 3
jmp 0x4dbc74
mov word [esi], 0xa0
movzx ecx, word [eax + 4]
mov word [esi + 2], cx
add esi, 4
mov eax, dword [eax]
test eax, eax
jne 0x4dbc5b
jmp 0x4dc0ae
mov edi, dword [esp + 0x194]
mov esi, edi
mov edx, dword [esp + 8]
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x28]
jmp 0x4db6ec
mov ebx, dword [esp + 0x194]
jmp 0x4dbfc3
xor eax, eax
test esi, esi
setne al
mov esi, eax
mov edx, dword [esp + 0x24]
jmp 0x4da1dd
mov dword [esp + 8], ebp
movzx edx, word [ecx + 6]
cmp edx, 0x3f
jne 0x4dbcf6
movzx edx, word [ecx + 8]
cmp edx, 0x43
jne 0x4dbcf6
lea edx, [ecx + 0xa]
movzx esi, word [edx]
lea edi, [esi - 0x30]
movzx edi, di
add edx, 2
cmp edi, 0xa
jb 0x4dbcd0
movzx esi, si
cmp esi, 0x29
cmove eax, edx
movzx edx, word [eax]
cmp edx, 0x28
jne 0x4dcc47
movzx edx, word [eax + 2]
cmp edx, 0x3f
jne 0x4dbf10
movzx edx, word [eax + 4]
cmp edx, 0x21
je 0x4dbd32
movzx edx, dx
cmp edx, 0x3d
je 0x4dbd32
cmp edx, 0x3c
jne 0x4dbf10
movzx eax, word [eax + 6]
cmp eax, 0x3d
je 0x4dbd32
movzx eax, ax
cmp eax, 0x21
jne 0x4dbf10
mov ebp, dword [esp + 0x190]
mov dword [ebp + 0x80], 1
mov edi, 0x87
xor esi, esi
mov ecx, dword [esp + 0x1c]
jmp 0x4d991e
mov ebx, ebp
movzx edx, word [ecx + 6]
cmp edx, 0x21
je 0x4dc105
movzx esi, dx
cmp esi, 0x3d
jne 0x4dc132
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 8
mov dword [esp + 4], ecx
mov edi, 0x7f
jmp 0x4dc11b
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x7d
jmp 0x4d991a
mov dword [esp + 8], ebp
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x81
xor esi, esi
mov ecx, ebx
mov dword [esp + 0x10], 0
mov ebp, dword [esp + 0x190]
jmp 0x4d9926
lea eax, [ebp + 2]
mov dword [esp + 0x10], eax
mov ebx, ebp
mov word [ebp], 0x76
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx edx, word [ecx + 6]
mov esi, edx
add esi, 0xffffffd0
movzx edi, si
xor esi, esi
cmp edi, 9
ja 0x4dbe33
add ecx, 8
xor esi, esi
lea eax, [esi + esi*4]
movzx edx, dx
lea esi, [edx + eax*2]
cmp esi, 0x130
jge 0x4dc2d2
lea esi, [edx + eax*2 - 0x30]
movzx edx, word [ecx]
mov eax, edx
add eax, 0xffffffd0
movzx eax, ax
add ecx, 2
cmp eax, 9
jbe 0x4dbdfe
add ecx, 0xfffffffe
mov dword [esp + 4], ecx
mov eax, ecx
movzx ecx, dx
cmp ecx, 0x29
jne 0x4dc0de
mov edx, ebx
mov word [edx + 2], si
mov ecx, dword [esp + 0x190]
sub eax, dword [ecx + 0x18]
shr eax, 1
inc eax
mov word [edx + 4], ax
mov word [edx + 6], 0
lea eax, [edx + 8]
mov dword [esp + 0x10], eax
xor eax, eax
jmp 0x4dc2e8
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx ecx, word [ecx + 6]
mov edx, ecx
add edx, 0xffffffc3
movzx edx, dx
cmp edx, 2
jae 0x4dc0f0
movzx ecx, cx
xor edx, edx
cmp ecx, 0x3e
sete dl
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], 0x29
jmp case.0x4d95b3.5
mov dword [esp + 8], ebp
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx eax, word [ecx + 6]
xor edx, edx
cmp eax, 0x29
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
je 0x4db6d3
jmp 0x4dcb21
mov eax, dword [esp + 0x190]
mov dword [eax + 0x7c], 1
mov edi, 1
mov dword [esp + 0x10], edi
mov dword [esp + 8], ebp
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x83
xor esi, esi
mov ecx, ebx
mov ebp, dword [esp + 0x190]
jmp 0x4d9926
mov ecx, 5
jmp 0x4dbfd5
lea ebx, [ecx + 6]
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8d
mov dword [esp + 4], ebx
movzx eax, word [ebx]
mov edx, eax
add edx, 0xffffffd9
movzx edx, dx
cmp edx, 0x2b
ja case.0x4dbf35.1
jmp dword [edx*4 + 0x4dd010]
movzx eax, ax
mov dword [esp + 0x58], eax
lea ebx, [ecx + 8]
mov dword [esp + 4], ebx
mov ax, word [ecx + 8]
lea ecx, [eax - 0x30]
movzx ecx, cx
cmp ecx, 9
ja 0x4dc461
add ebx, 2
xor ecx, ecx
cmp ecx, 0xccccccc
jge 0x4dcbf3
movzx eax, ax
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*2 - 0x30]
mov dword [esp + 4], ebx
movzx eax, word [ebx]
mov edx, eax
add edx, 0xffffffd0
movzx edx, dx
add ebx, 2
cmp edx, 0xa
jb 0x4dbf62
add ebx, 0xfffffffe
mov dl, 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x30], 2
mov dword [esp + 0xc], 0xffffffff
mov esi, ebx
xor ebx, ebx
jmp 0x4dc5a9
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0x190]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
jmp 0x4db811
mov ecx, 7
mov ebp, dword [esp + 0x190]
lea eax, [ecx + ecx*2]
test ebx, ebx
je 0x4dc017
mov edx, edi
add ecx, 0xfffffffe
cmp ecx, 3
jbe 0x4dcb7b
mov edi, dword [esp + 0x194]
test edi, edi
mov eax, dword [eax*4 + 0x545d04]
mov esi, dword [esp + 8]
mov word [esi], ax
je 0x4dc03b
add dword [edi], ebx
mov word [esi + 2], 0
add esi, 4
jmp 0x4dc05f
cmp ecx, 1
jbe 0x4dcbe1
movzx eax, word [eax*4 + 0x545d00]
mov esi, dword [esp + 8]
mov word [esi], ax
add esi, 2
mov ebx, dword [esp + 0x194]
jmp 0x4dc06c
mov dword [esp + 0xc], eax
lea eax, [esi + 4]
mov word [esi + 2], bx
lea ecx, [ebx + ebx]
sub esp, 4
push ecx
push edx
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x1c]
add esp, 0x10
lea esi, [esi + ebx*2 + 4]
mov ebx, edi
movzx eax, ax
mov word [esi], 0
add esi, 2
lea ecx, [eax - 0x96]
movzx ecx, cx
cmp ecx, 4
jae 0x4dc083
mov dword [ebp + 0x70], 1
jmp 0x4dc09b
add eax, 0xffffff66
movzx eax, ax
cmp eax, 1
ja 0x4dc09b
mov eax, dword [esp + 0xc0]
or byte [eax + 1], 0x10
mov dword [esp + 0xc], 0
mov ebp, esi
jmp 0x4db68d
mov esi, dword [esp + 8]
xor eax, eax
mov ebp, dword [esp + 0x190]
cmp dword [ebp + 0x5c], 0
setg al
or eax, 0x9e
mov word [esi], ax
add esi, 2
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
jmp 0x4dc06c
mov eax, dword [esp + 0x174]
mov dword [eax], 0x27
jmp 0x4dc2e3
mov dword [esp + 0x58], 0x3e
movzx ecx, cx
cmp ecx, 0x3c
je case.0x4d95b3.6
jmp 0x4dcc23
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 8
mov dword [esp + 4], ecx
mov edi, 0x80
xor esi, esi
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], 0
mov dword [esp + 8], ebx
jmp 0x4d9926
cmp edx, 0xff
mov ebp, ebx
ja 0x4dcc6f
mov esi, dword [esp + 0x190]
mov esi, dword [esi + 0xc]
mov dword [esp + 0x58], 0x3e
test byte [esi + edx], 0x10
je 0x4dcc6f
mov edi, dword [esp + 0x58]
mov dword [esp + 8], ebp
lea ecx, [eax + 2]
mov dword [esp + 0x10], ecx
mov dword [esp + 4], ecx
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x30]
movzx edx, dx
cmp edx, 9
jbe 0x4dcaa7
movzx edx, cx
cmp edx, 0xff
ja 0x4dc1c7
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0xc]
add eax, 4
movzx esi, cx
test byte [edx + esi], 0x10
je 0x4dc1b5
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x4dc19a
add eax, 0xfffffffe
cmp dword [esp + 0x194], 0
jne 0x4dc1d9
jmp 0x4dc44c
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x194], 0
je 0x4dc44c
movzx ecx, cx
cmp edi, ecx
jne 0x4dcaeb
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x30]
cmp ecx, 0x2710
jge 0x4dcc35
sub eax, dword [esp + 0x10]
mov edi, eax
sar edi, 1
mov edx, dword [esp + 0x190]
mov esi, edx
mov edx, dword [esi + 0x40]
mov dword [esp + 0xc], edx
mov ebp, edi
lea edx, [edi + 2]
cmp edx, dword [esi + 0x34]
jle 0x4dc22f
mov esi, dword [esp + 0x190]
mov dword [esi + 0x34], edx
cmp eax, 0x41
jge 0x4dcb0f
inc dword [esp + 0xc]
test ecx, ecx
jle 0x4dc2a7
mov edi, dword [esp + 0x190]
mov esi, dword [edi + 0x28]
add esi, 8
xor ebx, ebx
jmp 0x4dc272
mov eax, dword [esp + 0xc]
cmp dword [esi], eax
je 0x4dc6aa
test dword [esp + 0x1c], 0x80000
je 0x4dcc11
mov edi, dword [esp + 0x190]
mov dword [edi + 0x78], 1
jmp 0x4dc29a
cmp ebp, dword [esi - 4]
jne 0x4dc28e
sub esp, 4
push ebp
push dword [esi - 8]
push dword [esp + 0x1c]
call fcn.0052f5c0
add esp, 0x10
test eax, eax
je 0x4dc248
mov eax, dword [esp + 0xc]
cmp dword [esi], eax
je 0x4dcbcf
inc ebx
mov ecx, dword [edi + 0x30]
add esi, 0xc
cmp ebx, ecx
jl 0x4dc272
jmp 0x4dc2a9
xor ebx, ebx
cmp ebx, ecx
jl 0x4dc44c
mov eax, dword [esp + 0x190]
mov esi, dword [eax + 0x38]
cmp ecx, esi
jge 0x4dc3ba
mov eax, dword [esp + 0x190]
mov ebx, dword [eax + 0x28]
jmp 0x4dc42b
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x174]
mov dword [eax], 0x26
mov eax, 6
test eax, eax
mov ecx, eax
mov edx, 4
cmove ecx, edx
mov edx, dword [esp + 0xc]
cmove edx, eax
mov dword [esp + 0xc], edx
mov dword [esp + 0xdc], 1
mov dword [esp + 0x90], ebx
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x194]
test ecx, ecx
jne 0x4db3b4
jmp 0x4db68d
movzx eax, ax
cmp eax, 0x7b
jne 0x4dc39b
movzx eax, word [ecx + 0xa]
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 9
ja 0x4dc39b
add ecx, 0xe
movzx eax, word [ecx - 2]
lea edx, [eax - 0x30]
movzx edx, dx
add ecx, 2
cmp edx, 0xa
jb 0x4dc343
movzx eax, ax
cmp eax, 0x7d
je 0x4d95ed
cmp eax, 0x2c
jne 0x4dc39b
movzx eax, word [ecx - 2]
cmp eax, 0x7d
je 0x4d95ed
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 9
ja 0x4dc39b
movzx eax, word [ecx]
lea edx, [eax - 0x30]
movzx edx, dx
add ecx, 2
cmp edx, 0xa
jb 0x4dc37e
movzx eax, ax
cmp eax, 0x7d
je 0x4d95ed
mov ebp, ebx
mov word [ebp], 0x9d
add ebp, 2
mov dword [esp + 0xc], 0
mov ebx, dword [esp + 0x194]
jmp 0x4db68d
lea eax, [esi*8]
lea eax, [eax + eax*2]
sub esp, 0xc
push eax
call dword [0x545970]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x4dcc88
add esi, esi
mov eax, dword [esp + 0x190]
mov edi, eax
mov eax, dword [edi + 0x38]
shl eax, 2
lea eax, [eax + eax*2]
sub esp, 4
push eax
push dword [edi + 0x28]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
cmp dword [edi + 0x38], 0x15
jl 0x4dc41b
sub esp, 0xc
mov eax, dword [esp + 0x19c]
push dword [eax + 0x28]
call dword [0x545974]
add esp, 0x10
mov eax, dword [esp + 0x190]
mov dword [eax + 0x28], ebx
mov dword [eax + 0x38], esi
mov ecx, dword [eax + 0x30]
lea eax, [ecx + ecx*2]
mov edx, dword [esp + 0x10]
mov dword [ebx + eax*4], edx
mov dword [ebx + eax*4 + 4], ebp
mov edx, dword [esp + 0xc]
mov dword [ebx + eax*4 + 8], edx
inc ecx
mov eax, dword [esp + 0x190]
mov dword [eax + 0x30], ecx
add dword [esp + 4], 2
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
jmp 0x4d98f0
mov dl, 1
xor ecx, ecx
mov dword [esp + 0x30], 2
mov dword [esp + 0xc], 0xffffffff
mov esi, ebx
mov ebx, 0
mov dword [esp + 0x10], 0
jmp 0x4dc5a9
add ecx, 8
mov dword [esp + 4], ecx
mov dword [esp + 0x10], 0x27
jmp 0x4dc4f2
lea ecx, [eax - 0x30]
movzx ecx, cx
mov dword [esp + 0x58], 0
cmp ecx, 9
mov dword [esp + 0x10], 0
jbe 0x4dbf4e
jmp 0x4dc4f7
add ecx, 8
mov dword [esp + 4], ecx
mov dword [esp + 0x10], 0x3e
jmp 0x4dc4f2
movzx eax, word [ecx + 8]
cmp eax, 0x26
jne 0x4dc699
add ecx, 0xa
mov dword [esp + 4], ecx
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8f
mov dword [esp + 0x10], 0xffffffff
mov ebx, ecx
mov ax, word [ebx]
lea ecx, [eax - 0x30]
movzx ecx, cx
cmp ecx, 9
jbe 0x4dcaa7
movzx ecx, ax
cmp ecx, 0xff
ja 0x4dcc47
movzx eax, ax
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0xc]
test byte [ecx + eax], 0x10
je 0x4dcc47
lea esi, [ebx + 2]
mov dword [esp + 4], esi
movzx eax, word [ebx + 2]
cmp eax, 0xff
ja 0x4dc55e
lea esi, [ebx + 4]
movzx edx, ax
test byte [ecx + edx], 0x10
je 0x4dc55b
mov dword [esp + 4], esi
movzx eax, word [esi]
add esi, 2
cmp eax, 0xff
jbe 0x4dc541
add esi, 0xfffffffe
mov ecx, esi
sub ecx, ebx
sar ecx, 1
mov dword [esp + 0xc], ecx
cmp dword [esp + 0x10], 0
jle 0x4dc592
lea edx, [esi + 2]
mov dword [esp + 4], edx
cmp ax, word [esp + 0x10]
jne 0x4dcc59
mov ax, word [edx]
mov dword [esp + 0x58], 0xffffffff
xor ecx, ecx
mov esi, edx
jmp 0x4dc59c
mov dword [esp + 0x58], 0xffffffff
xor ecx, ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x30], edx
xor edx, edx
lea edi, [esi + 2]
mov dword [esp + 4], edi
movzx eax, ax
cmp eax, 0x29
jne 0x4dcc59
cmp dword [esp + 0x194], 0
je 0x4dc5e7
mov edi, 0x87
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
mov esi, dword [esp + 0x30]
jmp 0x4d9926
test dl, dl
je 0x4dc629
test ecx, ecx
jle 0x4dcc9a
cmp dword [esp + 0x58], 0
je 0x4dc6d3
cmp dword [esp + 0x58], 0x2d
jne 0x4dc6c1
mov eax, 1
sub eax, ecx
mov ecx, dword [esp + 0x190]
add eax, dword [ecx + 0x40]
mov ecx, eax
test ecx, ecx
jg 0x4dc6d3
jmp 0x4dcad9
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x94], ecx
mov eax, dword [eax + 0x30]
xor esi, esi
test eax, eax
jle 0x4dc729
mov edi, dword [esp + 0x94]
lea eax, [edi + 2]
sub esp, 4
push dword [esp + 0x10]
push eax
push ebx
call fcn.0052f5c0
add esp, 0x10
test eax, eax
jne 0x4dc676
mov eax, dword [esp + 0xc]
cmp word [edi + eax*2 + 2], 0
je 0x4dc71f
mov eax, dword [esp + 0x190]
mov ecx, eax
mov eax, dword [ecx + 0x30]
mov ecx, dword [ecx + 0x34]
lea edi, [edi + ecx*2]
mov dword [esp + 0x94], edi
inc esi
cmp esi, eax
jl 0x4dc647
jmp 0x4dc729
mov dword [esp + 0x10], 0
mov ax, 0x52
jmp 0x4dc515
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x30]
cmp ebx, ecx
jge 0x4dc2b1
jmp 0x4dc44c
mov eax, dword [esp + 0x190]
add ecx, dword [eax + 0x40]
test ecx, ecx
jle 0x4dcad9
mov eax, dword [esp + 0x190]
cmp ecx, dword [eax + 0x44]
jg 0x4dcad9
mov eax, dword [esp + 8]
mov word [eax + 6], cx
mov eax, dword [esp + 0x190]
cmp ecx, dword [eax + 0x4c]
jle 0x4dc5c6
mov ebp, dword [esp + 0x190]
mov dword [ebp + 0x4c], ecx
mov edi, 0x87
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x30]
jmp 0x4d9926
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 0x30]
cmp esi, eax
jge 0x4dc7e9
mov ecx, dword [esp + 0x94]
movzx ecx, word [ecx]
mov word [esp + 0x10], cx
movzx ecx, cx
mov edx, dword [esp + 0x190]
cmp dword [edx + 0x4c], ecx
jge 0x4dc759
mov edx, dword [esp + 0x190]
mov dword [edx + 0x4c], ecx
lea ecx, [esi + 1]
cmp ecx, eax
jge 0x4dc84a
mov ebp, 1
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x34]
lea edi, [eax + ecx*2 + 2]
lea eax, [eax + ecx*2]
mov dword [esp + 0x94], eax
sub esp, 4
push dword [esp + 0x10]
push edi
push ebx
call fcn.0052f5c0
add esp, 0x10
test eax, eax
jne 0x4dc7b9
mov eax, dword [esp + 0xc]
cmp word [edi + eax*2], 0
jne 0x4dc7b9
lea eax, [esi + ebp + 1]
inc ebp
mov ecx, dword [esp + 0x190]
cmp eax, dword [ecx + 0x30]
jl 0x4dc769
cmp ebp, 2
jl 0x4dc84a
mov eax, dword [esp + 8]
mov word [eax + 6], si
mov word [eax + 8], bp
mov esi, dword [esp + 0x30]
inc esi
inc word [eax + 4]
mov edi, 0x87
mov dword [esp + 0x10], 0
jmp 0x4dc89e
cmp dword [esp + 0x10], 0
jne 0x4dcad9
movzx eax, word [ebx]
cmp eax, 0x52
jne 0x4dc85c
cmp dword [esp + 0xc], 2
jl 0x4dc8ae
xor eax, eax
mov ecx, 1
movzx edx, word [ebx + ecx*2]
lea esi, [edx - 0x30]
movzx esi, si
cmp esi, 0xa
jae 0x4dcad9
cmp eax, 0xccccccc
jge 0x4dca37
lea eax, [eax + eax*4]
lea eax, [edx + eax*2 - 0x30]
inc ecx
cmp ecx, dword [esp + 0xc]
jl 0x4dc80e
test eax, eax
mov ecx, dword [esp + 8]
mov word [ecx + 4], 0x8f
jne 0x4dc8bc
jmp 0x4dc8b8
mov eax, dword [esp + 8]
movzx ecx, word [esp + 0x10]
mov word [eax + 6], cx
jmp 0x4dc5c6
cmp dword [esp + 0xc], 6
jne 0x4dcad9
sub esp, 4
push 6
push str.DEFINE
push ebx
call fcn.0052f610
add esp, 0x10
test eax, eax
jne 0x4dcad9
mov eax, dword [esp + 8]
mov word [eax + 4], 0x91
mov edi, 0x87
mov dword [esp + 0x10], 0
mov esi, 1
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
jmp 0x4d9926
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8f
mov ax, 0xffff
mov ecx, dword [esp + 8]
mov word [ecx + 6], ax
jmp 0x4dc5c6
lea eax, [ecx + edx*2]
cmp ebp, eax
mov eax, 0x57
mov ecx, 0x34
cmovb ecx, eax
mov eax, dword [esp + 0x174]
mov dword [eax], ecx
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x34
jmp 0x4dc969
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x34]
mov dword [eax], ecx
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x20]
mov dword [eax], ecx
mov eax, dword [esp + 0x184]
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
mov eax, dword [esp + 0x13c]
mov dword [eax], ebp
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x170]
mov dword [ecx], eax
test ebx, ebx
je 0x4dc99f
mov eax, dword [ebx]
mov ecx, 0x7fffffeb
sub ecx, eax
sub ebp, dword [esp + 0xc4]
sar ebp, 1
cmp ecx, ebp
jge 0x4dc99b
mov eax, dword [esp + 0x174]
mov dword [eax], 0x14
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x170]
mov dword [ecx], eax
xor eax, eax
add esp, 0x15c
pop esi
pop edi
pop ebx
pop ebp
ret
movzx eax, ax
cmp eax, 0x3a
mov eax, 0xd
mov ecx, 0x1f
cmove ecx, eax
jmp 0x4dc8db
add eax, ebp
mov dword [ebx], eax
mov eax, 1
jmp 0x4dc978
mov eax, dword [esp + 0x174]
mov dword [eax], 0x47
jmp 0x4dc969
mov eax, 0x15
mov ecx, dword [esp + 0x174]
mov dword [ecx], eax
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3c
jmp 0x4dc969
mov ecx, 5
mov edx, dword [esp + 0x174]
mov dword [edx], ecx
mov dword [esp + 4], eax
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 9
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 6
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x12
jmp 0x4dc969
add eax, 0xfffffffe
movzx ecx, word [eax + 2]
add eax, 2
add ecx, 0xffffffd0
movzx ecx, cx
cmp ecx, 0xa
jb 0x4dca21
mov dword [esp + 4], eax
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3d
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x40
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x28
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x52
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0xe
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0xc
mov dword [esp + 4], edx
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x54
jmp 0x4dc969
cmp ecx, 6
je 0x4dc969
jmp 0x4dc978
mov eax, dword [esp + 0x174]
mov dword [eax], 0x45
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0xf
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x2a
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3e
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x30
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1d
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x36
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1b
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0xb
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3f
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3b
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3a
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 7
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x4b
jmp 0x4dc969
mov ecx, 4
mov eax, edx
jmp 0x4dc9d9
mov eax, dword [esp + 0x174]
mov dword [eax], 0x41
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x42
jmp 0x4dc969
add ebx, 0xfffffffe
movzx eax, word [ebx + 2]
add ebx, 2
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 0xa
jb 0x4dcbf6
mov dword [esp + 4], ebx
jmp 0x4dca37
mov eax, dword [esp + 0x174]
mov dword [eax], 0x2b
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x29
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x31
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1c
jmp 0x4dc969
mov dword [esp + 4], esi
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1a
jmp 0x4dc969
add ecx, 6
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x174]
mov dword [eax], 0x18
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x15
jmp 0x4dc969
mov eax, dword [esp + 0x174]
mov dword [eax], 0x23
jmp 0x4dc969