Function at 0x4d3620
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x70]
cmp eax, dword [ecx + 8]
jbe 0x4d55bd
sub esp, 0xf0
mov ecx, dword [esp + 0x108]
test ecx, ecx
jle 0x4d36e9
mov edx, dword [esp + 0x100]
test edx, edx
je 0x4d36f0
test edx, 0x60
jne 0x4d36f0
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004bef90
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xf4]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d36ae
mov dword [edx + 0x10], eax
jmp 0x4d36b6
lea edi, [edx + 0x10]
call fcn.00463350
mov dword [esp], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 4], eax
call fcn.004d26c0
movzx eax, byte [esp + 8]
test al, al
jne 0x4d36e2
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x100]
jmp 0x4d36f0
add esp, 0xf0
ret
mov edx, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
mov dword [edi + 0xc], 0
mov ebx, dword [0x9b1930]
test ebx, ebx
jne 0x4d3711
mov dword [edi + 0x10], 0
jmp 0x4d3721
lea ebx, [edi + 0x10]
xor eax, eax
mov ebp, edi
mov edi, ebx
call fcn.00463350
mov edi, ebp
mov dword [edi + 0x1c], edx
mov ebx, dword [0x9b1930]
test ebx, ebx
jne 0x4d3744
mov ebx, dword [esp + 0xf8]
mov dword [edi + 0x14], ebx
mov ebp, dword [esp + 0xfc]
mov dword [edi + 0x18], ebp
jmp 0x4d3771
lea ebx, [edi + 0x14]
mov eax, dword [esp + 0xf8]
mov ebp, edi
mov edi, ebx
call fcn.00463350
lea edi, [ebp + 0x18]
mov ebx, eax
mov eax, dword [esp + 0xfc]
call fcn.00463350
mov ebp, eax
mov edi, dword [esp + 0xf4]
nop
mov esi, edx
and edx, 0x1f
cmp edx, 0x10
jbe 0x4d45e4
cmp edx, 0x15
ja 0x4d3d63
cmp edx, 0x13
ja 0x4d379c
cmp edx, 0x11
je 0x4d3d75
jmp 0x4d4581
cmp edx, 0x14
je 0x4d3ad3
movzx edx, byte [edi + 0x2c]
test dl, dl
je 0x4d3a05
test esi, 0x200
jne 0x4d37c1
lea eax, [0x79fb0c]
jmp 0x4d37db
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov eax, dword [eax + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [eax + edx]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4d3852
mov dword [esp + 0xa0], ebp
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00463d10
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d38a7
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
mov ebx, dword [esp + 0x100]
test ebx, 0x200
jmp 0x4d38cb
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00463350
mov ebx, dword [esp + 0x100]
test ebx, 0x200
mov eax, edx
mov edx, dword [esp + 0xb8]
je 0x4d38d6
mov ebp, dword [esp + 0xfc]
jmp 0x4d3905
test ebx, 0x80
je 0x4d38ea
mov ebp, dword [esp + 0xfc]
mov esi, dword [ebp]
jmp 0x4d38f3
mov ebp, dword [esp + 0xfc]
mov esi, ebp
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4d3980
mov esi, dword [esp + 0x80]
mov ebx, dword [esp + 0x50]
lea ebx, [ebx + esi + 1]
cmp ecx, ebx
jae 0x4d396a
lea ebp, [0x6cd7a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d395a
mov dword [edi], eax
jmp 0x4d395f
call fcn.00463350
mov ebp, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
mov ebx, dword [esp + 0xf8]
jmp 0x4d3a8f
nop
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x50]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4d39d7
mov dword [esp + 0x80], ebx
lea ebp, [0x6cd7a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d39f7
mov dword [edi], edx
jmp 0x4d39fe
mov eax, edx
call fcn.00463350
add esp, 0xf0
ret
nop
mov edx, dword [edi + 4]
mov eax, ecx
lea ecx, [edx + 4]
mov esi, dword [edi + 8]
mov ebp, dword [edi]
cmp esi, ecx
jae 0x4d3a68
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.0044baf0
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0xf8]
mov edi, dword [esp + 0xf4]
mov dword [ebp + edx], 0x5b70616d
mov dword [edi + 4], ecx
mov dword [edi + 8], esi
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d3a84
mov dword [edi], ebp
jmp 0x4d3a8f
mov ecx, eax
mov eax, ebp
call fcn.00463350
mov eax, ecx
mov dword [esp], ebx
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004cc330
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
je 0x4d5254
mov dword [esp + 0x80], ecx
mov dword [esp + 0x90], eax
xor ebx, ebx
jmp 0x4d534a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004be6e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test ecx, ecx
jne 0x4d3d2c
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4d3ca9
mov eax, dword [esp + 0x100]
test eax, 0x200
jne 0x4d3b27
lea eax, [0x79fb0c]
mov ecx, dword [esp + 0xf8]
jmp 0x4d3b4d
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x80]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [eax + edx]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4d3bc4
mov dword [esp + 0x98], ebp
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00463d10
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x9b1930]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x48]
lea ebx, [ebp + ebx + 5]
test edx, edx
jne 0x4d3c1b
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4d3c32
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00463350
mov eax, edx
mov edx, dword [esp + 0xb8]
nop
cmp ecx, ebx
jae 0x4d3c7a
mov dword [esp + 0x80], ebx
lea ebp, [0x6cd7a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d3c9d
mov dword [edi], edx
jmp 0x4d4926
mov eax, edx
call fcn.00463350
jmp 0x4d4926
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4d3cfc
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], edx
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d3d20
mov dword [edi], ebp
jmp 0x4d4926
mov eax, ebp
call fcn.00463350
jmp 0x4d4926
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x14], eax
call fcn.004d3620
jmp 0x4d4926
cmp edx, 0x17
ja 0x4d43d2
cmp edx, 0x16
je 0x4d425e
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x104]
cmp eax, 0x71
jg 0x4d3d94
cmp eax, 0x58
je 0x4d3da2
cmp eax, 0x71
je 0x4d3da2
jmp 0x4d3f87
cmp eax, 0x73
je 0x4d3da2
cmp eax, 0x78
jne 0x4d3f87
test esi, 0x200
jne 0x4d3dbd
mov dword [esp + 0x84], eax
lea eax, [0x79fb0c]
mov dword [esp + 0x3c], eax
jmp 0x4d3ddb
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ebx, ecx
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x28]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x4d3f59
mov eax, dword [esp + 0x74]
cmp eax, 0x17
je 0x4d3f07
mov eax, dword [esp + 0x100]
test eax, 0x100
jne 0x4d3e72
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bf180
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
lea ecx, [0x6cd7a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0044b8f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb4], eax
xor ecx, ecx
jmp 0x4d5140
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bf180
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.004c0720
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
cmp dword [0x9892e4], edx
jne 0x4d3ee6
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
jmp 0x4d50be
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004bbc60
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x4d50be
mov eax, dword [esp + 0xf8]
cmp dword [0x9892e4], eax
jne 0x4d3f2a
mov eax, dword [esp + 0xfc]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
jmp 0x4d50be
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004bbc60
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
jmp 0x4d50be
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4d41dc
test esi, 0x200
jne 0x4d3fa3
lea ecx, [0x79fb0c]
jmp 0x4d3fbf
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
mov dword [esp + 0x80], edx
lea ebx, [edx + eax]
mov dword [esp + 0x7c], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4d4036
mov dword [esp + 0x94], ebp
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x94]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00463d10
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d407e
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4d4095
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00463350
mov eax, edx
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x74]
cmp ebx, 0x17
jne 0x4d4147
mov ebp, dword [esp + 0xfc]
mov esi, dword [ebp]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4d414e
nop
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x44]
lea ebx, [ebp + ebx + 5]
cmp ecx, ebx
jae 0x4d4119
mov dword [esp + 0x80], ebx
lea ebp, [0x6cd7a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov edx, edi
mov ecx, esi
mov edi, dword [esp + 0xf4]
mov dword [edx + eax], 0x6c696e28
mov byte [edx + eax + 4], 0x29
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d4139
mov dword [edi], edx
jmp 0x4d4140
mov eax, edx
call fcn.00463350
add esp, 0xf0
ret
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x80]
mov ebp, dword [esp + 0x44]
lea ebp, [ebp + esi + 1]
cmp ecx, ebp
jae 0x4d41b0
lea ebx, [0x6cd7a0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d41a3
mov dword [edi], eax
jmp 0x4d41a8
call fcn.00463350
mov ebx, dword [esp + 0x74]
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7b
cmp ebx, 0x17
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov eax, 0
jmp 0x4d4f6c
mov ecx, dword [edi + 4]
lea eax, [ecx + 1]
mov esi, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, eax
jae 0x4d423f
lea edx, [0x6cd7a0]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d422d
mov dword [edi], eax
jmp 0x4d4232
call fcn.00463350
mov edx, dword [esp + 0x74]
mov ebp, dword [esp + 0xfc]
mov esi, eax
lea eax, [ecx + 1]
mov dword [edi + 4], eax
mov byte [esi + ecx], 0x5b
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xf8]
xor ebx, ebx
jmp 0x4d4da1
test ecx, ecx
je 0x4d4266
xor eax, eax
jmp 0x4d42a2
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004bfd00
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
test al, al
je 0x4d4581
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004be6e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x15
ja 0x4d42df
cmp edx, 0x11
je 0x4d42ed
cmp edx, 0x15
je 0x4d42ed
jmp 0x4d43b1
cmp edx, 0x17
je 0x4d42ed
cmp edx, 0x19
jne 0x4d43b1
mov dword [esp + 0x74], ebx
nop
mov edx, dword [esp + 0xf4]
mov ebp, dword [edx + 4]
lea esi, [ebp + 1]
mov edi, dword [edx]
mov ebx, dword [edx + 8]
cmp ebx, esi
jae 0x4d4371
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d4358
mov dword [edi], eax
jmp 0x4d435d
call fcn.00463350
mov edx, edi
mov ebp, ecx
mov edi, eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
lea ebx, [ebp + 1]
mov dword [edx + 4], ebx
mov byte [edi + ebp], 0x26
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x14], eax
call fcn.004d3620
add esp, 0xf0
ret
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov edi, dword [esp + 0xf4]
jmp 0x4d4581
cmp edx, 0x18
je 0x4d45be
cmp edx, 0x19
jne 0x4d457c
movzx eax, byte [edi + 0x2c]
test al, al
je 0x4d4501
test esi, 0x200
jne 0x4d4400
lea eax, [0x79fb0c]
jmp 0x4d441a
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, ecx
mov eax, dword [eax + 0x80]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xf4]
mov edx, dword [ecx + 4]
lea ebx, [edx + eax]
mov dword [esp + 0x80], ebx
mov ebp, dword [esp + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp esi, ebx
jae 0x4d448e
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x4c], eax
mov dword [esp + 0x7c], edx
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x9c]
mov dword [esp + 0x7c], esi
mov dword [esp + 0xb8], edi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00463d10
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x9b1930]
test eax, eax
jne 0x4d44d9
mov eax, dword [esp + 0xb8]
mov dword [edi], eax
jmp 0x4d44e5
mov eax, dword [esp + 0xb8]
call fcn.00463350
mov ecx, dword [esp + 0x108]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov eax, dword [edi + 4]
lea edx, [eax + 1]
mov ecx, dword [edi]
mov esi, dword [edi + 8]
cmp esi, edx
jae 0x4d456b
lea ebx, [0x6cd7a0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d4552
mov dword [edi], eax
jmp 0x4d4557
call fcn.00463350
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov edx, eax
mov eax, ecx
mov ecx, edx
lea edx, [eax + 1]
mov dword [edi + 4], edx
mov byte [ecx + eax], 0x7b
xor eax, eax
jmp 0x4d49a9
cmp edx, 0x1a
jne 0x4d45a5
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004d1dd0
jmp 0x4d4926
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.004d06f0
jmp 0x4d4926
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x104]
mov dword [esp + 0xc], eax
call fcn.004d1580
jmp 0x4d4926
cmp edx, 0xc
ja 0x4d4854
cmp edx, 1
ja 0x4d4777
test edx, edx
jne 0x4d4757
test ecx, ecx
jne 0x4d46b3
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 0x17]
mov dword [esp + 0x80], ecx
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp edx, ecx
jae 0x4d464b
mov dword [esp + 0x7c], eax
lea ebp, [0x6cd7a0]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0044baf0
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x7c], edx
mov dword [esp + 0xb8], ebx
add eax, ebx
mov dword [esp], eax
lea eax, [0x7219a1]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x17
call fcn.00463d10
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x9b1930]
test eax, eax
jne 0x4d46a2
mov eax, dword [esp + 0xb8]
mov dword [edi], eax
jmp 0x4d4926
mov eax, dword [esp + 0xb8]
call fcn.00463350
jmp 0x4d4926
mov ecx, dword [esp + 0x104]
cmp ecx, 0x76
jne 0x4d4746
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 5]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4d4716
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov dword [ebp + ecx], 0x6c696e3c
mov byte [ebp + ecx + 4], 0x3e
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d473a
mov dword [edi], ebp
jmp 0x4d4926
mov eax, ebp
call fcn.00463350
jmp 0x4d4926
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.004d0960
jmp 0x4d4926
movzx eax, byte [ebp]
mov dword [esp], edi
mov byte [esp + 4], al
mov eax, dword [esp + 0x104]
mov dword [esp + 8], eax
call fcn.004d0e50
jmp 0x4d4926
cmp edx, 6
ja 0x4d47eb
cmp edx, 3
ja 0x4d479b
cmp edx, 2
jne 0x4d4790
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4d47c6
movsx eax, byte [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4d47c6
cmp edx, 4
jne 0x4d47ab
movsx eax, word [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4d47c6
cmp edx, 5
jne 0x4d47ba
mov eax, dword [ebp]
mov ecx, eax
sar eax, 0x1f
jmp 0x4d47c6
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov byte [esp + 0xc], 1
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004d0f40
jmp 0x4d4926
cmp edx, 9
ja 0x4d4811
cmp edx, 7
jne 0x4d47fc
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4d482f
cmp edx, 8
jne 0x4d4809
movzx eax, byte [ebp]
xor ecx, ecx
jmp 0x4d482f
movzx eax, word [ebp]
xor ecx, ecx
jmp 0x4d482f
cmp edx, 0xa
jne 0x4d481d
mov eax, dword [ebp]
xor ecx, ecx
jmp 0x4d482f
cmp edx, 0xb
jne 0x4d482a
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
jmp 0x4d482f
mov eax, dword [ebp]
xor ecx, ecx
mov dword [esp], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov byte [esp + 0xc], 0
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004d0f40
jmp 0x4d4926
cmp edx, 0xe
ja 0x4d48b5
cmp edx, 0xd
jne 0x4d488d
movss xmm0, dword [ebp]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x20
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004d1260
jmp 0x4d4926
movsd xmm0, qword [ebp]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], 0x40
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
call fcn.004d1260
jmp 0x4d4926
cmp edx, 0xf
jne 0x4d48f5
movss xmm0, dword [ebp]
movss xmm1, dword [ebp + 4]
mov dword [esp], edi
cvtss2sd xmm0, xmm0
movsd qword [esp + 4], xmm0
cvtss2sd xmm0, xmm1
movsd qword [esp + 0xc], xmm0
mov dword [esp + 0x14], 0x40
mov eax, dword [esp + 0x104]
mov dword [esp + 0x18], eax
call fcn.004d13c0
jmp 0x4d4926
movsd xmm0, qword [ebp]
movsd xmm1, qword [ebp + 8]
mov dword [esp], edi
movsd qword [esp + 4], xmm0
movsd qword [esp + 0xc], xmm1
mov dword [esp + 0x14], pe_nt_image_headers32
mov eax, dword [esp + 0x104]
mov dword [esp + 0x18], eax
call fcn.004d13c0
add esp, 0xf0
ret
mov ecx, dword [esp + 0xf8]
mov dword [esp], ecx
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004d0650
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004d3620
mov eax, dword [esp + 0x64]
inc eax
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xfc]
mov dword [esp + 0x64], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x100]
mov dword [esp + 8], ecx
call fcn.004bfc50
mov eax, dword [esp + 0x64]
cmp dword [esp + 0xc], eax
jle 0x4d4ca7
test eax, eax
jle 0x4d4ad0
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4d4a68
nop
mov ecx, dword [edi + 4]
lea edx, [ecx + 2]
mov ebx, dword [edi + 8]
mov ebp, dword [edi]
cmp ebx, edx
jae 0x4d4a40
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], ecx
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov word [ebp + ecx], 0x202c
mov dword [edi + 4], edx
mov dword [edi + 8], ebx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d4a5b
mov dword [edi], ebp
jmp 0x4d4ad7
mov ecx, eax
mov eax, ebp
call fcn.00463350
mov eax, ecx
jmp 0x4d4ad7
mov ecx, dword [edi + 4]
lea edx, [ecx + 1]
mov ebx, dword [edi]
mov ebp, dword [edi + 8]
cmp ebp, edx
jae 0x4d4ac4
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d4ab9
mov dword [edi], eax
jmp 0x4d4abe
call fcn.00463350
mov ebx, eax
mov eax, dword [esp + 0x64]
lea edx, [ecx + 1]
mov dword [edi + 4], edx
mov byte [ebx + ecx], 0x20
jmp 0x4d4ad7
mov edi, dword [esp + 0xf4]
movzx ecx, byte [edi + 0x2b]
test cl, cl
jne 0x4d4aeb
movzx ecx, byte [edi + 0x2c]
test cl, cl
je 0x4d492d
mov ecx, dword [esp + 0x100]
test ecx, 0x200
jne 0x4d4b09
lea edx, [0x79fb0c]
mov ebx, dword [esp + 0xf8]
jmp 0x4d4b37
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004c0c60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0x64]
mov ecx, dword [edx + 0x2c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call ecx
lea edi, [esp + 0xbc]
lea esi, [esp + 8]
call fcn.00463aae
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
test eax, eax
je 0x4d4c97
mov dword [esp + 0x54], eax
nop
mov edx, dword [esp + 0xf4]
mov ebx, dword [edx + 4]
mov dword [esp + 0x80], ebx
lea ebp, [eax + ebx]
mov dword [esp + 0x7c], ebp
mov esi, dword [edx + 8]
mov edi, dword [edx]
cmp esi, ebp
jae 0x4d4bce
mov dword [esp + 0xa4], ecx
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044baf0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x78], esi
mov dword [esp + 0xb8], edi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463d10
mov eax, dword [esp + 0x7c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x78]
mov dword [edi + 8], ecx
mov edx, dword [0x9b1930]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x54]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4d4c25
mov edx, dword [esp + 0xb8]
mov dword [edi], edx
jmp 0x4d4c3c
mov edx, eax
mov eax, dword [esp + 0xb8]
call fcn.00463350
mov eax, edx
mov edx, dword [esp + 0xb8]
cmp ecx, ebx
jae 0x4d4c8b
lea ebp, [0x6cd7a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d4c82
mov dword [edi], eax
jmp 0x4d4c87
call fcn.00463350
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
jmp 0x4d4c9e
mov edi, dword [esp + 0xf4]
mov eax, dword [esp + 0x64]
jmp 0x4d492d
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4d4d08
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d4cff
mov dword [edi], eax
jmp 0x4d4d04
call fcn.00463350
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4d4926
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
call fcn.004bede0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004d3620
mov eax, dword [esp + 0x58]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
mov eax, edx
mov ecx, esi
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x58], ebx
cmp edx, 0x17
jne 0x4d4daf
mov esi, dword [ebp + 4]
jmp 0x4d4de7
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.004bf180
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xf8]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0xfc]
mov edi, dword [esp + 0xf4]
cmp esi, ebx
jle 0x4d4e79
test ebx, ebx
jle 0x4d4d17
mov esi, dword [edi + 4]
lea edx, [esi + 1]
mov ebx, dword [edi]
mov eax, dword [edi + 8]
cmp eax, edx
jae 0x4d4e5f
lea ecx, [0x6cd7a0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d4e48
mov dword [edi], eax
jmp 0x4d4e4d
call fcn.00463350
mov ebp, dword [esp + 0xfc]
mov esi, ecx
mov ebx, eax
mov ecx, dword [esp + 0xf8]
lea eax, [esi + 1]
mov dword [edi + 4], eax
mov byte [ebx + esi], 0x20
mov eax, dword [esp + 0x100]
mov ebx, dword [esp + 0x58]
jmp 0x4d4d17
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 1]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, ecx
jae 0x4d4ed4
lea ebp, [0x6cd7a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d4ecb
mov dword [edi], eax
jmp 0x4d4ed0
call fcn.00463350
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x5d
jmp 0x4d4926
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004bede0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xf4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x108]
lea edx, [ecx + 1]
mov dword [esp + 0x14], edx
call fcn.004d3620
mov eax, dword [esp + 0x5c]
inc eax
mov ebx, dword [esp + 0x74]
cmp ebx, 0x17
mov ecx, dword [esp + 0xf4]
mov edx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
mov ecx, edx
mov edx, ebp
mov ebp, esi
mov edi, dword [esp + 0xf4]
mov dword [esp + 0x5c], eax
jne 0x4d4f77
mov esi, dword [edx + 4]
jmp 0x4d4faf
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004bf180
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0xf8]
mov edi, dword [esp + 0xf4]
cmp esi, eax
jle 0x4d5054
test eax, eax
jle 0x4d4ee3
mov esi, dword [edi + 4]
lea ebx, [esi + 2]
mov ecx, dword [edi + 8]
mov edx, dword [edi]
cmp ecx, ebx
jae 0x4d501c
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.0044baf0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0xf4]
mov word [edx + esi], 0x202c
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x4d5036
mov dword [edi], edx
jmp 0x4d5041
mov ecx, eax
mov eax, edx
call fcn.00463350
mov eax, ecx
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0xfc]
jmp 0x4d4ee3
nop
mov eax, dword [edi + 4]
lea ecx, [eax + 1]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
cmp ebx, ecx
jae 0x4d50af
lea ebp, [0x6cd7a0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d50a6
mov dword [edi], eax
jmp 0x4d50ab
call fcn.00463350
mov edx, eax
mov eax, ecx
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x7d
jmp 0x4d4926
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], edx
mov dword [esp + 0xa8], ecx
mov ebx, dword [esp + 0x3c]
mov ebx, dword [ebx + 0x80]
mov ebp, dword [esp + 0x8c]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xf4]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x104]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
call fcn.004d1720
add esp, 0xf0
ret
mov ebx, dword [esp + 0xb4]
mov byte [ebx + eax], dl
lea edx, [eax + 1]
mov eax, ebx
mov ecx, edx
mov edx, dword [esp + 0x40]
cmp ecx, edx
jge 0x4d5207
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x100]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004bede0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
and eax, 0x1f
mov dword [esp + 0x74], eax
cmp eax, 9
ja 0x4d51c8
cmp eax, 7
jne 0x4d51a0
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4d51ff
cmp eax, 8
jne 0x4d51b4
movzx edx, byte [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4d51ff
cmp eax, 9
jne 0x4d521a
movzx edx, word [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4d51ff
cmp eax, 0xa
jne 0x4d51db
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4d51ff
cmp eax, 0xb
jne 0x4d51ee
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x4d51ff
cmp eax, 0xc
jne 0x4d521a
mov edx, dword [ecx]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jb 0x4d512f
jmp 0x4d5215
mov eax, edx
mov ecx, dword [esp + 0xb4]
jmp 0x4d50be
call fcn.004633d0
lea eax, [0x6e3260]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x71ecf0]
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
lea ecx, [0x6d7140]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00437060
mov eax, dword [esp + 0xf4]
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x4d52cd
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4d52be
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d52b5
mov dword [edi], eax
jmp 0x4d52ba
call fcn.00463350
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x7d
jmp 0x4d4926
nop
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4d5328
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d531f
mov dword [edi], eax
jmp 0x4d5324
call fcn.00463350
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x5d
jmp 0x4d4926
mov ebp, dword [esp + 0xac]
lea edx, [ebp + 0xc]
mov ebx, eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xac], edx
mov dword [esp + 0x68], ebx
mov ebp, dword [edx + 4]
mov esi, dword [edx + 8]
mov edi, edx
mov edx, dword [edx]
test ebx, ebx
jle 0x4d54ad
mov dword [esp + 0x74], esi
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb0], edx
mov ecx, dword [esp + 0xf4]
movzx ebx, byte [ecx + 0x2c]
test bl, bl
je 0x4d541a
nop
mov ebx, dword [ecx + 4]
lea esi, [ebx + 2]
mov ebp, dword [ecx + 8]
mov edx, dword [ecx]
cmp ebp, esi
jae 0x4d53e7
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], esi
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0044baf0
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x7c]
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0xac]
mov word [edx + ebx], 0x202c
mov dword [ecx + 4], esi
mov dword [ecx + 8], ebp
mov ebx, dword [0x9b1930]
test ebx, ebx
jne 0x4d5404
mov dword [ecx], edx
jmp 0x4d549b
mov ebx, edi
mov edi, ecx
mov ebp, eax
mov eax, edx
call fcn.00463350
mov eax, ebp
mov edi, ebx
jmp 0x4d549b
nop
mov ebx, dword [ecx + 4]
lea edi, [ebx + 1]
mov eax, dword [ecx]
mov esi, dword [ecx + 8]
cmp esi, edi
jae 0x4d5483
lea ecx, [0x6cd7a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d546c
mov dword [edi], eax
jmp 0x4d5471
call fcn.00463350
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov ebx, ecx
mov ecx, edi
lea esi, [ebx + 1]
mov dword [ecx + 4], esi
mov byte [eax + ebx], 0x20
mov eax, dword [esp + 0x90]
mov edi, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x108]
lea ebx, [edx + 1]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x14], ebx
call fcn.004d3620
nop
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp ebp, edx
jae 0x4d5547
lea eax, [0x6cd7a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0xf4]
mov dword [edi + 8], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x4d553e
mov dword [edi], eax
jmp 0x4d5543
call fcn.00463350
mov ebx, eax
mov eax, edi
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x3a
mov edx, dword [esp + 0x90]
mov ebx, dword [edx + 0xc]
mov ecx, dword [edx + 0x10]
mov ebp, dword [esp + 0x68]
cmp ebp, ecx
jae 0x4d55b5
lea ecx, [ebp + ebp*2]
mov edx, dword [ebx + ecx*4]
mov esi, dword [ebx + ecx*4 + 4]
mov ecx, dword [ebx + ecx*4 + 8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x14], edx
call fcn.004d3620
mov eax, dword [esp + 0x68]
inc eax
mov ecx, dword [esp + 0x80]
cmp ecx, eax
jg 0x4d5337
jmp 0x4d5254
mov eax, ebp
call fcn.004633d0
nop
call fcn.00461f40
jmp fcn.004d3620