Function at 0x4d5300
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5885bf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2bc
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x48], ecx
mov eax, dword [ecx + 0x28]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x2d4], ebx
jne 0x4d534f
lea ecx, [esp + 0x2dc]
mov dword [esp + 0x2d4], 0xffffffff
call fcn.004de2f0
jmp 0x4d65f8
mov eax, dword [esp + 0x2e0]
cmp eax, ebx
je 0x4d5333
cmp dword [eax + 0xc], ebx
je 0x4d5333
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
xor edi, edi
mov byte [esp + 0x2d4], 1
xor esi, esi
cmp eax, ebx
je 0x4d53b0
cmp esi, dword [eax + 0xc]
jae 0x4d53b0
push esi
lea ecx, [esp + 0x2e0]
call fcn.004ce9e0
xor ecx, ecx
mov cl, byte [eax + 0x1c]
cmp ecx, edi
jbe 0x4d53a6
push esi
lea ecx, [esp + 0x2e0]
call fcn.004ce9e0
xor edx, edx
mov dl, byte [eax + 0x1c]
mov edi, edx
mov eax, dword [esp + 0x2e0]
inc esi
jmp 0x4d5373
cmp edi, 1
mov ebp, edi
jle 0x4d5424
xor esi, esi
cmp eax, ebx
je 0x4d541e
cmp esi, dword [eax + 0xc]
jae 0x4d541e
push esi
lea ecx, [esp + 0x2e0]
call fcn.004ce9e0
xor ecx, ecx
mov cl, byte [eax + 0x1c]
cmp ecx, ebp
jne 0x4d5414
push esi
lea ecx, [esp + 0x2e0]
call fcn.004ce9e0
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.004de330
cmp dword [esp + 0x30], ebx
je 0x4d5414
sub esp, 0x50
mov ecx, esp
mov dword [esp + 0xac], esp
push edi
call fcn.004cd550
mov ecx, dword [esp + 0x80]
call fcn.004ce7a0
mov eax, dword [esp + 0x2e0]
inc esi
jmp 0x4d53b9
dec ebp
cmp ebp, 1
jg 0x4d53b7
lea ecx, [esp + 0x2dc]
call fcn.004de2f0
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
cmp eax, ebx
mov dword [esp + 0x2e0], eax
mov dword [esp + 0x2dc], edx
je 0x4d544d
inc dword [eax + 4]
sub esp, 8
mov ecx, esp
mov dword [esp + 0x64], esp
call fcn.004e0c90
mov eax, dword [esp + 0x50]
sub esp, 8
mov ecx, esp
mov dword [esp + 0x88], esp
mov edx, dword [eax + 0x28]
mov byte [esp + 0x2e4], 2
add edx, 4
push edx
call fcn.004b15c0
lea ecx, [esp + 0x100]
mov byte [esp + 0x2e4], 1
call fcn.0050b960
lea ecx, [esp + 0xf0]
mov byte [esp + 0x2d4], 3
call fcn.0050c460
xor ebp, ebp
mov eax, dword [esp + 0x2e0]
mov dword [esp + 0x54], ebp
cmp eax, ebx
je 0x4d6401
cmp ebp, dword [eax + 0xc]
jae 0x4d6401
lea eax, [esp + 0xf0]
lea ecx, [esp + 0xa8]
push eax
call fcn.0050bad0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x2d4], 4
call fcn.0050bd90
cmp dword [esp + 0xbc], ebx
jne 0x4d6433
push ebp
lea ecx, [esp + 0x2e0]
call fcn.004ce9e0
push ecx
mov esi, eax
mov ecx, esp
mov dword [esp + 0xc8], esp
push ecx
mov ecx, esi
call fcn.004de2d0
mov ecx, esi
mov byte [esp + 0x2d8], 5
call fcn.004de2a0
push eax
mov ecx, esi
call fcn.004de290
push eax
push ecx
mov edx, esp
mov dword [esp + 0x30], esp
push edx
mov ecx, esi
call fcn.004de2b0
mov ecx, esi
mov byte [esp + 0x2e4], 4
call fcn.004cd960
lea ecx, [esp + 0xd4]
mov dword [esp + 0xd0], ebx
call fcn.004e0c90
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
mov byte [esp + 0xec], bl
mov al, byte [esi + 0x1c]
mov byte [esp + 0x2d4], 6
cmp al, 1
mov edi, 1
jb 0x4d568b
mov ecx, esi
call fcn.004ce5a0
test al, al
je 0x4d641f
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0xa8]
push esi
push eax
call fcn.004d4920
test al, al
je 0x4d568b
lea ecx, [esp + 0x1b4]
push ecx
lea ecx, [esp + 0xac]
call fcn.00489870
lea edx, [esp + 0xd0]
push 0x33
lea ecx, [esp + 0x228]
push edx
push ecx
mov ecx, eax
mov byte [esp + 0x2e0], 7
call fcn.004b3420
mov ecx, eax
mov byte [esp + 0x2d4], 8
call fcn.0046e2d0
cmp eax, 0x3f0
mov eax, dword [esp + 0x228]
sete byte [esp + 0x13]
cmp eax, ebx
mov byte [esp + 0x2d4], 7
je 0x4d5636
push eax
lea ecx, [esp + 0x22c]
call fcn.00411610
lea ecx, [esp + 0x1b4]
mov dword [esp + 0x228], ebx
mov byte [esp + 0x2d4], 6
call fcn.004b1570
cmp byte [esp + 0x13], bl
jne 0x4d568b
lea ecx, [esp + 0xa8]
call fcn.0050bd90
cmp dword [esp + 0xbc], ebx
jne 0x4d568b
mov dl, byte [esi + 0x1c]
inc edi
mov byte [esp + 0xcc], dl
mov eax, dword [esp + 0xcc]
and eax, 0xff
cmp edi, eax
jbe 0x4d559f
mov al, byte [esi + 0x1c]
mov byte [esp + 0xc8], al
mov ecx, dword [esp + 0xc8]
and ecx, 0xff
inc ecx
cmp edi, ecx
jne 0x4d56ab
cmp al, bl
jne 0x4d56d9
lea ecx, [esp + 0xd4]
mov byte [esp + 0x2d4], 4
call fcn.0046f260
lea ecx, [esp + 0xa8]
mov byte [esp + 0x2d4], 3
call fcn.0050ba80
inc ebp
jmp 0x4d54a9
lea edx, [esp + 0x24]
lea ecx, [esp + 0xf0]
push edx
call fcn.00489870
sub esp, 8
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
mov byte [esp + 0x2e0], 9
call fcn.004b15c0
lea ecx, [esp + 0xb0]
call fcn.004de5a0
lea ecx, [esp + 0x1f4]
push ecx
lea ecx, [esp + 0x28]
call fcn.004b17e0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x2d8], 0xa
call fcn.004b1580
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x2d4], 9
call fcn.004b1570
lea ecx, [esp + 0x70]
call fcn.004e0c90
push ecx
mov ecx, esi
mov edx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0x2dc], 0xb
call fcn.004de2d0
mov ecx, esi
mov byte [esp + 0x2d8], 0xc
call fcn.004de2a0
push eax
mov ecx, esi
call fcn.004de290
push eax
push ecx
mov eax, esp
mov dword [esp + 0xd4], esp
push eax
mov ecx, esi
call fcn.004de2b0
mov ecx, esi
mov byte [esp + 0x2e4], 0xb
call fcn.004cd960
lea ecx, [esp + 0x11c]
mov dword [esp + 0x118], ebx
call fcn.004e0c90
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], ebx
mov byte [esp + 0x134], bl
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x19c]
push ecx
push edx
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x2dc], 0xd
call fcn.004ce9e0
mov ecx, eax
call fcn.0046ca10
lea ecx, [esp + 0x118]
lea edx, [esp + 0x190]
push ecx
push edx
mov ecx, eax
mov byte [esp + 0x2dc], 0xe
call fcn.004500d0
mov byte [esp + 0x2d4], 0xf
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x38]
lea ecx, [esp + 0x190]
mov byte [esp + 0x64], al
mov byte [esp + 0x2d4], 0xe
mov dword [esp + 0x190], 0x5968f0
call fcn.00401b60
lea ecx, [esp + 0x19c]
mov byte [esp + 0x2d4], 0xd
call fcn.0044fc50
lea ecx, [esp + 0x11c]
mov byte [esp + 0x2d4], 0xb
call fcn.0046f260
lea ecx, [esp + 0x40]
call fcn.004e0c90
mov byte [esp + 0x13], bl
mov dword [esp + 0x18], ebx
mov al, byte [esi + 0x1c]
mov byte [esp + 0x2d4], 0x11
cmp al, 1
mov ebp, 1
jb 0x4d5d78
mov ecx, esi
call fcn.004ce5a0
test al, al
je 0x4d6470
push esi
lea eax, [esp + 0x28]
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004b15c0
mov ecx, dword [esp + 0x54]
call fcn.004d5190
lea ecx, [esp + 0x6c]
push ecx
mov ecx, esi
call fcn.00444270
mov edi, eax
lea edx, [esp + 0xd0]
push 0x41
lea eax, [esp + 0x1a8]
push edx
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x2e0], 0x12
call fcn.004b3420
lea ecx, [esp + 0x60]
mov byte [esp + 0x2d4], 0x13
push ecx
mov ecx, eax
call fcn.0046e260
push ebx
push edi
mov ecx, eax
mov byte [esp + 0x2dc], 0x14
call fcn.004124b0
xor edx, edx
cmp eax, 3
mov eax, dword [esp + 0x60]
mov byte [esp + 0x2d4], 0x13
sete dl
cmp eax, ebx
mov edi, edx
je 0x4d5947
push eax
lea ecx, [esp + 0x64]
call fcn.00411610
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x60], ebx
cmp eax, ebx
mov byte [esp + 0x2d4], 0x12
je 0x4d596b
push eax
lea ecx, [esp + 0x1ac]
call fcn.00411610
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1a8], ebx
cmp eax, ebx
mov byte [esp + 0x2d4], 0x11
je 0x4d598c
push eax
lea ecx, [esp + 0x70]
call fcn.00411610
cmp edi, ebx
mov dword [esp + 0x6c], ebx
je 0x4d5aa4
lea eax, [esp + 0x178]
lea ecx, [esp + 0x24]
push eax
call fcn.004b17e0
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x2d8], 0x15
call fcn.004b1580
lea ecx, [esp + 0x178]
mov byte [esp + 0x2d4], 0x11
call fcn.004b1570
lea ecx, [esp + 0x58]
push ecx
mov ecx, esi
call fcn.00444270
mov edi, eax
lea edx, [esp + 0xd0]
push 0x41
lea eax, [esp + 0x210]
push edx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x2e0], 0x16
call fcn.004b3420
lea ecx, [esp + 0x50]
mov byte [esp + 0x2d4], 0x17
push ecx
mov ecx, eax
call fcn.0046e260
push ebx
push edi
mov ecx, eax
mov byte [esp + 0x2dc], 0x18
call fcn.004124b0
xor edx, edx
cmp eax, 3
mov eax, dword [esp + 0x50]
mov byte [esp + 0x2d4], 0x17
sete dl
cmp eax, ebx
mov edi, edx
je 0x4d5a49
push eax
lea ecx, [esp + 0x54]
call fcn.00411610
mov eax, dword [esp + 0x210]
mov dword [esp + 0x50], ebx
cmp eax, ebx
mov byte [esp + 0x2d4], 0x16
je 0x4d5a6d
push eax
lea ecx, [esp + 0x214]
call fcn.00411610
mov eax, dword [esp + 0x58]
mov dword [esp + 0x210], ebx
cmp eax, ebx
mov byte [esp + 0x2d4], 0x11
je 0x4d5a8e
push eax
lea ecx, [esp + 0x5c]
call fcn.00411610
cmp edi, ebx
mov dword [esp + 0x58], ebx
je 0x4d5aa4
lea ecx, [esp + 0x70]
call fcn.004b18e0
jmp 0x4d5998
lea eax, [esp + 0x1cc]
lea ecx, [esp + 0x24]
push eax
call fcn.004b17e0
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x2d8], 0x19
call fcn.004b1580
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x2d4], 0x11
call fcn.004b1570
mov ecx, dword [esp + 0x64]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x30], esp
push ecx
push 0x90
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea ecx, [esp + 0x26c]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
call fcn.0043d560
mov edi, eax
lea ecx, [esp + 0x15c]
mov byte [esp + 0x2d4], 0x1a
mov dword [esp + 0x158], ebx
call fcn.004e0c90
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], ebx
mov byte [esp + 0x174], bl
lea edx, [esp + 0x158]
push edi
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2dc], 0x1b
call fcn.004b2670
test al, al
je 0x4d5b7a
cmp byte [esi + 0x30], bl
jne 0x4d5b73
cmp byte [esp + 0x13], bl
sete al
cmp al, bl
je 0x4d5b7a
mov byte [esp + 0x1f], 1
jmp 0x4d5b7e
mov byte [esp + 0x1f], bl
lea ecx, [esp + 0x15c]
mov byte [esp + 0x2d4], 0x1a
call fcn.0046f260
mov eax, dword [esp + 0x264]
mov byte [esp + 0x2d4], 0x11
cmp eax, ebx
je 0x4d5bb2
push eax
lea ecx, [esp + 0x268]
call fcn.00411610
mov al, byte [esp + 0x1f]
mov dword [esp + 0x264], ebx
cmp al, bl
je 0x4d5c9c
cmp byte [esi + 0x30], bl
je 0x4d5bcf
mov byte [esp + 0x13], 1
lea eax, [esp + 0x24]
lea ecx, [esp + 0x40]
push eax
call fcn.004b1580
mov ecx, dword [esp + 0x64]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x30], esp
push ecx
push 0x90
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea ecx, [esp + 0x288]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
call fcn.0043d560
mov edi, eax
lea ecx, [esp + 0x13c]
mov byte [esp + 0x2d4], 0x1c
mov dword [esp + 0x138], ebx
call fcn.004e0c90
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], ebx
mov byte [esp + 0x154], bl
lea edx, [esp + 0x138]
push edi
push edx
lea ecx, [esp + 0x48]
mov byte [esp + 0x2dc], 0x1d
call fcn.004b37b0
lea ecx, [esp + 0x13c]
mov byte [esp + 0x2d4], 0x1c
call fcn.0046f260
mov eax, dword [esp + 0x280]
mov byte [esp + 0x2d4], 0x11
cmp eax, ebx
je 0x4d5c95
push eax
lea ecx, [esp + 0x284]
call fcn.00411610
mov dword [esp + 0x280], ebx
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x4d5cbb
mov eax, dword [eax + 8]
cmp eax, ebx
je 0x4d5cbb
dec eax
cmp eax, ebx
jbe 0x4d5cbb
push 0x20
lea ecx, [esp + 0x1c]
call fcn.004122c0
lea eax, [esp + 0xd0]
push 0x3d
lea ecx, [esp + 0x1c0]
push eax
push ecx
lea ecx, [esp + 0x30]
call fcn.004b3420
lea edx, [esp + 0x4c]
mov ecx, eax
push edx
mov byte [esp + 0x2d8], 0x1e
call fcn.0046e260
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2d8], 0x1f
call fcn.00412320
mov eax, dword [esp + 0x4c]
mov byte [esp + 0x2d4], 0x1e
cmp eax, ebx
je 0x4d5d16
push eax
lea ecx, [esp + 0x50]
call fcn.00411610
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x4c], ebx
cmp eax, ebx
mov byte [esp + 0x2d4], 0x11
je 0x4d5d3a
push eax
lea ecx, [esp + 0x1c4]
call fcn.00411610
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c0], ebx
call fcn.004b18e0
lea eax, [esp + 0x70]
lea ecx, [esp + 0x24]
push eax
call fcn.004b1580
mov cl, byte [esi + 0x1c]
inc ebp
mov byte [esp + 0xc0], cl
mov edx, dword [esp + 0xc0]
and edx, 0xff
cmp ebp, edx
jbe 0x4d58a1
lea eax, [esp + 0x3c]
mov ecx, esi
push eax
call fcn.004de2d0
mov esi, dword [esi + 0x18]
push 0xffff
inc esi
lea ecx, [esp + 0x18]
push esi
push ecx
lea ecx, [esp + 0x48]
mov byte [esp + 0x2e0], 0x20
call fcn.00413050
push 0x20
lea ecx, [esp + 0x18]
mov byte [esp + 0x2d8], 0x21
call fcn.004134e0
push 0x20
lea ecx, [esp + 0x18]
call fcn.004134a0
push ebx
lea edx, [esp + 0x7c]
push ebx
push edx
push 0x3b
lea ecx, [esp + 0x24]
call fcn.00412cd0
cmp al, bl
je 0x4d5df0
mov eax, dword [esp + 0x78]
push 0xffff
and eax, 0xffff
lea ecx, [esp + 0x18]
push eax
call fcn.00412e80
push ebx
lea ecx, [esp + 0x6c]
push ebx
push ecx
push 0x28
lea ecx, [esp + 0x24]
call fcn.00412cd0
mov esi, dword [esp + 0x68]
and esi, 0xffff
cmp al, bl
je 0x4d5e5c
push esi
lea edx, [esp + 0x60]
push ebx
push edx
push 0x29
lea ecx, [esp + 0x24]
call fcn.00412cd0
mov ecx, dword [esp + 0x5c]
and ecx, 0xffff
cmp al, bl
je 0x4d5e5c
inc ecx
push ecx
push esi
lea ecx, [esp + 0x1c]
call fcn.00412e80
push ebx
lea eax, [esp + 0x6c]
push ebx
push eax
push 0x28
lea ecx, [esp + 0x24]
call fcn.00412cd0
mov esi, dword [esp + 0x68]
and esi, 0xffff
cmp al, bl
jne 0x4d5e10
push 0x20
lea ecx, [esp + 0x18]
call fcn.004134e0
push 0x20
lea ecx, [esp + 0x18]
call fcn.004134a0
lea ecx, [esp + 0x34]
call fcn.004e0c90
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x21c]
push ecx
push edx
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x2dc], 0x22
call fcn.004ce9e0
mov ecx, eax
call fcn.0046ca10
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x2d8], 0x23
call fcn.0044fc60
lea ecx, [esp + 0x21c]
mov byte [esp + 0x2d4], 0x22
call fcn.0044fc50
lea ecx, [esp + 0x8c]
mov dword [esp + 0x88], ebx
call fcn.004e0c90
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov byte [esp + 0xa4], bl
mov eax, dword [esp + 0x44]
mov byte [esp + 0x2d4], 0x24
cmp eax, ebx
jne 0x4d5fbb
push ebx
lea ecx, [esp + 0x10c]
call fcn.0041eae0
mov eax, dword [esp + 0x48]
mov byte [esp + 0x2d4], 0x25
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x4d5f38
mov eax, dword [eax + 8]
jmp 0x4d5f3d
mov eax, 0x3e7
mov ecx, dword [esp + 0x64]
lea edx, [esp + 0x2ac]
push ecx
push eax
push edx
call fcn.00478830
push eax
lea ecx, [esp + 0x10c]
mov byte [esp + 0x2d8], 0x26
call fcn.0041ec20
lea ecx, [esp + 0x2ac]
mov byte [esp + 0x2d4], 0x25
call fcn.0041ebf0
lea eax, [esp + 0x108]
lea ecx, [esp + 0x108]
push eax
lea edx, [esp + 0x10c]
push ecx
lea eax, [esp + 0x90]
push edx
push eax
lea ecx, [esp + 0x44]
call fcn.004502f0
lea ecx, [esp + 0x108]
mov byte [esp + 0x2d4], 0x24
call fcn.0041ebf0
jmp 0x4d61d5
lea ecx, [esp + 0x88]
lea edx, [esp + 0x7c]
push ecx
push edx
lea ecx, [esp + 0x48]
call fcn.004b3660
lea eax, [esp + 0x2bc]
lea ecx, [esp + 0x7c]
push eax
mov byte [esp + 0x2d8], 0x27
call fcn.00401da0
mov esi, eax
lea ecx, [esp + 0x29c]
mov byte [esp + 0x2d4], 0x28
push ecx
lea ecx, [esp + 0x80]
call fcn.00401d60
mov edi, eax
lea edx, [esp + 0x28c]
lea ecx, [esp + 0x7c]
push edx
mov byte [esp + 0x2d8], 0x29
call fcn.00401de0
push esi
push edi
push eax
lea eax, [esp + 0x94]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2e4], 0x2a
call fcn.004502f0
lea ecx, [esp + 0x28c]
mov byte [esp + 0x2d4], 0x29
call fcn.0041ebf0
lea ecx, [esp + 0x29c]
mov byte [esp + 0x2d4], 0x28
call fcn.0041ebf0
lea ecx, [esp + 0x2bc]
mov byte [esp + 0x2d4], 0x27
call fcn.0041ebf0
lea ecx, [esp + 0x88]
push 0xa
lea edx, [esp + 0x240]
push ecx
push edx
lea ecx, [esp + 0x4c]
call fcn.004b3420
push eax
lea eax, [esp + 0x8c]
push 0xa
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x2e0], 0x2b
call fcn.00450110
mov eax, dword [esp + 0x240]
mov byte [esp + 0x2d4], 0x27
cmp eax, ebx
je 0x4d60d2
push eax
lea ecx, [esp + 0x244]
call fcn.00411610
lea ecx, [esp + 0x88]
push 0xb
lea edx, [esp + 0x1d8]
push ecx
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x24c], ebx
call fcn.004b3420
push eax
lea eax, [esp + 0x8c]
push 0xb
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x2e0], 0x2c
call fcn.00450110
mov eax, dword [esp + 0x1d8]
mov byte [esp + 0x2d4], 0x27
cmp eax, ebx
je 0x4d6130
push eax
lea ecx, [esp + 0x1dc]
call fcn.00411610
lea ecx, [esp + 0x88]
push 0x2d
lea edx, [esp + 0x1e8]
push ecx
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x1e4], ebx
call fcn.004b3420
push eax
lea eax, [esp + 0x8c]
push 0x2d
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x2e0], 0x2d
call fcn.00450110
mov eax, dword [esp + 0x1e8]
mov byte [esp + 0x2d4], 0x27
cmp eax, ebx
je 0x4d618e
push eax
lea ecx, [esp + 0x1ec]
call fcn.00411610
mov eax, dword [esp + 0x84]
mov dword [esp + 0x1e8], ebx
cmp eax, ebx
mov byte [esp + 0x2d4], 0x24
mov dword [esp + 0x7c], 0x5968f0
je 0x4d61d5
mov ecx, dword [eax + 8]
dec ecx
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x84]
cmp dword [ecx + 8], ebx
jne 0x4d61ce
cmp ecx, ebx
je 0x4d61ce
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov dword [esp + 0x84], ebx
push 0x3f0
lea ecx, [esp + 0x200]
call fcn.0046e1a0
push eax
lea eax, [esp + 0x8c]
push 0x42
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x2e0], 0x2e
call fcn.00450110
mov eax, dword [esp + 0x200]
mov byte [esp + 0x2d4], 0x24
cmp eax, ebx
je 0x4d6222
push eax
lea ecx, [esp + 0x204]
call fcn.00411610
push ecx
mov ecx, dword [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x204], ebx
mov dword [esp + 0x24], esp
mov dword [eax], ecx
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x4d6240
inc dword [eax]
lea ecx, [esp + 0x184]
call fcn.0046e1c0
push eax
lea edx, [esp + 0x8c]
push 0x3d
push edx
lea ecx, [esp + 0x40]
mov byte [esp + 0x2e0], 0x2f
call fcn.00450110
mov eax, dword [esp + 0x184]
mov byte [esp + 0x2d4], 0x24
cmp eax, ebx
je 0x4d6288
push eax
lea ecx, [esp + 0x188]
call fcn.00411610
sub esp, 8
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
mov dword [esp + 0x190], ebx
call fcn.0046f270
lea ecx, [esp + 0x23c]
push ecx
call fcn.004f7400
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x2d8], 0x30
call fcn.004b1580
lea ecx, [esp + 0x234]
mov byte [esp + 0x2d4], 0x24
call fcn.004b1570
sub esp, 8
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.004b15c0
lea eax, [esp + 0x254]
lea ecx, [esp + 0xf8]
push eax
mov byte [esp + 0x2e0], 0x31
call fcn.00489870
mov ecx, eax
mov byte [esp + 0x2dc], 0x33
call fcn.004b1b00
lea ecx, [esp + 0x24c]
mov byte [esp + 0x2d4], 0x24
call fcn.004b1570
lea ecx, [esp + 0x8c]
mov byte [esp + 0x2d4], 0x22
call fcn.0046f260
lea ecx, [esp + 0x34]
mov byte [esp + 0x2d4], 0x21
call fcn.0044fc50
mov eax, dword [esp + 0x14]
mov byte [esp + 0x2d4], 0x20
cmp eax, ebx
je 0x4d6366
push eax
lea ecx, [esp + 0x18]
call fcn.00411610
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14], ebx
cmp eax, ebx
mov byte [esp + 0x2d4], 0x11
je 0x4d6384
push eax
lea ecx, [esp + 0x40]
call fcn.00411610
mov eax, dword [esp + 0x18]
mov dword [esp + 0x3c], ebx
cmp eax, ebx
mov byte [esp + 0x2d4], 0x10
je 0x4d63a2
push eax
lea ecx, [esp + 0x1c]
call fcn.00411610
lea ecx, [esp + 0x40]
mov dword [esp + 0x18], ebx
mov byte [esp + 0x2d4], 0xb
call fcn.004b1570
lea ecx, [esp + 0x70]
mov byte [esp + 0x2d4], 9
call fcn.004b1570
lea ecx, [esp + 0x24]
mov byte [esp + 0x2d4], 6
call fcn.004b1570
lea ecx, [esp + 0xd4]
mov byte [esp + 0x2d4], 4
call fcn.0046f260
lea ecx, [esp + 0xa8]
mov byte [esp + 0x2d4], 3
call fcn.0050ba80
lea ecx, [esp + 0xf0]
call fcn.0050bd90
cmp dword [esp + 0x104], ebx
jne 0x4d6570
jmp 0x4d54a7
lea ecx, [esp + 0xd4]
mov byte [esp + 0x2d4], 4
call fcn.0046f260
lea ecx, [esp + 0xa8]
mov byte [esp + 0x2d4], 3
call fcn.0050ba80
lea ecx, [esp + 0xf0]
mov byte [esp + 0x2d4], 1
call fcn.0050ba80
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2d4], bl
call fcn.004de2f0
jmp 0x4d5333
mov eax, dword [esp + 0x18]
mov byte [esp + 0x2d4], 0x10
cmp eax, ebx
je 0x4d648a
push eax
lea ecx, [esp + 0x1c]
call fcn.00411610
lea ecx, [esp + 0x40]
mov dword [esp + 0x18], ebx
mov byte [esp + 0x2d4], 0xb
call fcn.004b1570
lea ecx, [esp + 0x70]
mov byte [esp + 0x2d4], 9
call fcn.004b1570
lea ecx, [esp + 0x24]
mov byte [esp + 0x2d4], 6
call fcn.004b1570
lea ecx, [esp + 0xd4]
mov byte [esp + 0x2d4], 4
call fcn.0046f260
lea ecx, [esp + 0xa8]
mov byte [esp + 0x2d4], 3
call fcn.0050ba80
lea ecx, [esp + 0xf0]
mov byte [esp + 0x2d4], 1
call fcn.0050ba80
mov eax, dword [esp + 0x30]
mov byte [esp + 0x2d4], bl
cmp eax, ebx
je 0x4d652b
mov ecx, dword [eax + 4]
dec ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
cmp dword [ecx + 4], ebx
jne 0x4d6527
cmp ecx, ebx
je 0x4d6527
push 1
call fcn.004de3c0
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x2e0]
mov dword [esp + 0x2d4], 0xffffffff
cmp eax, ebx
je 0x4d65f8
mov ecx, dword [eax + 4]
dec ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x2e0]
cmp dword [ecx + 4], ebx
jne 0x4d65f8
cmp ecx, ebx
je 0x4d65f8
push 1
call fcn.004de3c0
jmp 0x4d65f8
lea ecx, [esp + 0xf0]
mov byte [esp + 0x2d4], 1
call fcn.0050ba80
mov eax, dword [esp + 0x30]
mov byte [esp + 0x2d4], bl
cmp eax, ebx
je 0x4d65bb
mov ecx, dword [eax + 4]
dec ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
cmp dword [ecx + 4], ebx
jne 0x4d65b7
cmp ecx, ebx
mov esi, ecx
je 0x4d65b7
call fcn.004ce6e0
push esi
call fcn.00564ff4
add esp, 4
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x2e0]
mov dword [esp + 0x2d4], 0xffffffff
cmp eax, ebx
je 0x4d65f8
mov ecx, dword [eax + 4]
dec ecx
mov dword [eax + 4], ecx
mov esi, dword [esp + 0x2e0]
cmp dword [esi + 4], ebx
jne 0x4d65f8
cmp esi, ebx
je 0x4d65f8
mov ecx, esi
call fcn.004ce6e0
push esi
call fcn.00564ff4
add esp, 4
mov ecx, dword [esp + 0x2cc]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2c8
ret 8