Function at 0x4d0ee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x2f0
mov dword [esp + 0x48], ecx
mov ecx, dword [edx + 0x10]
mov esi, dword [edx + 0x14]
call 0x4d0efe
pop eax
mov dword [esp + 0x4c], eax
mov dword [esp + 8], ecx
cmp esi, ecx
mov ecx, dword [edx + 0xc]
jae 0x4d2c99
mov dword [esp + 0x1c], edx
lea eax, [edx + 0xc]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xb0], eax
mov eax, 0x800013
nop dword [eax]
movzx edi, byte [ecx + esi]
lea ebx, [edi - 9]
cmp ebx, 0x17
ja 0x4d0f56
bt eax, ebx
jae 0x4d0f56
inc esi
cmp dword [esp + 8], esi
mov dword [edx + 0x14], esi
jne 0x4d0f30
mov eax, dword [esp + 8]
mov esi, eax
jmp 0x4d2c9d
cmp edi, 0x5b
jne 0x4d2d29
mov edx, dword [esp + 0x1c]
lea eax, [esi + 1]
dec byte [edx + 0x1c]
je 0x4d2d4b
mov dword [edx + 0x14], eax
mov edx, dword [esp + 8]
mov bl, 1
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 4
mov dword [esp + 0xf0], 0
mov ecx, dword [esp + 0xb0]
cmp eax, edx
mov ecx, dword [ecx]
jae 0x4d2c7b
mov dword [esp + 0x14], ebx
mov dword [esp + 8], edx
nop word cs:[eax + eax]
nop dword [eax]
movzx ebx, byte [ecx + eax]
movzx esi, bl
lea edi, [esi - 9]
cmp edi, 0x23
ja 0x4d1000
mov edx, dword [edi*4 + 0x4d3000]
add edx, dword [esp + 0x4c]
jmp edx
cmp esi, 0x5d
je 0x4d2be0
cmp byte [esp + 0x14], 0
je 0x4d2ee1
mov edi, dword [esp + 0x1c]
mov esi, eax
mov edx, dword [esp + 8]
cmp bl, 0x5d
je 0x4d2ebf
mov eax, esi
cmp eax, edx
mov ebx, 0x800013
jb 0x4d1060
jmp 0x4d2c37
movzx esi, byte [ecx + eax]
lea edx, [esi - 9]
cmp edx, 0x17
ja 0x4d1090
bt ebx, edx
jae 0x4d1090
mov edx, dword [esp + 8]
inc eax
mov dword [edi + 0x14], eax
cmp edx, eax
jne 0x4d1060
jmp 0x4d2c35
cmp esi, 0x5b
je 0x4d1530
cmp esi, 0x7b
jne 0x4d2f29
dec byte [edi + 0x1c]
je 0x4d2f4a
inc eax
mov dword [edi + 0x14], eax
xor edi, edi
cmp eax, dword [esp + 8]
jae 0x4d1b2b
xor ebx, ebx
mov dl, 2
mov dh, 3
mov dword [esp + 0x28], 3
mov dword [esp + 0x3c], 0x80000001
mov byte [esp + 0x1b], 3
mov dword [esp + 0xc0], 0
mov ecx, dword [esp + 0xb0]
lea edi, [eax + 1]
mov dword [esp + 0xc], ebx
mov byte [esp + 0x14], dh
mov byte [esp + 0x2c], dl
mov ecx, dword [ecx]
nop dword [eax]
movzx ebx, byte [ecx + eax]
movzx esi, bl
lea edx, [esi - 9]
cmp edx, 0x23
ja 0x4d1130
mov edx, dword [edx*4 + 0x4d3090]
add edx, dword [esp + 0x4c]
jmp edx
cmp esi, 0x7d
je 0x4d163b
test byte [esp + 0xc], 1
jne 0x4d2a28
mov edi, dword [esp + 0x1c]
cmp bl, 0x22
jne 0x4d2375
mov edx, dword [esp + 0xb0]
inc eax
lea ecx, [esp + 0x54]
mov dword [edi + 0x14], eax
mov dword [edi + 8], 0
push edi
call fcn.00487d80
add esp, 4
mov edx, dword [esp + 0x58]
cmp dword [esp + 0x54], 2
je 0x4d1b97
lea ecx, [esp + 0x110]
push dword [esp + 0x5c]
call fcn.00564480
add esp, 4
cmp byte [esp + 0x110], 0
jne 0x4d1e61
movzx eax, byte [esp + 0x111]
mov ebx, dword [esp + 0x34]
cmp eax, 5
ja 0x4d12c3
mov eax, dword [eax*4 + 0x4d3120]
add eax, dword [esp + 0x4c]
jmp eax
mov ecx, edi
call fcn.00406bb0
test eax, eax
mov byte [esp + 0xc], 1
jne 0x4d22a6
mov ecx, edi
call fcn.00402320
test eax, eax
je 0x4d14c0
jmp 0x4d22a6
movzx edx, byte [esp + 0x2c]
mov dh, byte [esp + 0x14]
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 0x14]
mov bl, 1
cmp eax, ecx
mov dword [esp + 8], ecx
jb 0x4d10e1
jmp 0x4d2819
dec byte [edi + 0x1c]
je 0x4d2f8d
inc eax
lea ecx, [esp + 0x54]
lea edx, [esp + 0x100]
mov dword [esp + 0x100], edi
mov byte [esp + 0x104], 1
mov dword [edi + 0x14], eax
call fcn.0040cb70
mov eax, dword [esp + 0x54]
cmp eax, 0x80000002
je 0x4d1629
cmp eax, 0x80000001
je 0x4d1e6d
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x10], eax
movq xmm0, qword [esp + 0x58]
mov eax, dword [ecx + 0xc]
mov esi, dword [ecx + 0x10]
mov dword [esp + 8], ecx
mov ecx, dword [ecx + 0x14]
movdqa xmmword [esp + 0x120], xmm0
cmp ecx, esi
mov dword [esp + 0xc], eax
jae 0x4d15e3
lea eax, [ecx + 1]
nop dword [eax + eax]
mov edx, dword [esp + 0xc]
movzx ebx, byte [edx + ecx]
movzx edi, bl
lea edx, [edi - 9]
cmp edx, 0x23
ja 0x4d18a0
mov edx, dword [edx*4 + 0x4d3138]
add edx, dword [esp + 0x4c]
jmp edx
inc ecx
mov dword [esp + 0x54], 2
cmp esi, ecx
cmovb ecx, esi
test ecx, ecx
je 0x4d1f10
mov eax, dword [esp + 0xc]
xor esi, esi
mov edx, 1
xor edi, edi
nop word cs:[eax + eax]
inc esi
xor ebx, ebx
cmp byte [eax], 0xa
lea eax, [eax + 1]
sete bl
cmove esi, edi
add edx, ebx
dec ecx
jne 0x4d1610
jmp 0x4d1f17
mov esi, dword [esp + 0x58]
mov dword [esp + 8], eax
mov ebx, 3
jmp 0x4d2486
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x138]
movzx edx, byte [esp + 0x1b]
mov dh, byte [esp + 0x14]
mov eax, 0x80000000
cmp esi, 0x80000001
cmovne edi, dword [esp + 0xf4]
cmovne ecx, dword [esp + 0x134]
cmove esi, eax
sete bl
cmp dl, 3
mov al, 2
sete bh
je 0x4d16bd
movzx eax, word [esp + 0xbc]
movq xmm0, qword [esp + 0x100]
movsd xmm1, qword [esp + 0x108]
mov word [esp + 0x44], ax
movzx eax, byte [esp + 0xbe]
movsd qword [esp + 0x118], xmm1
movq qword [esp + 0x110], xmm0
mov byte [esp + 0x46], al
mov eax, edx
mov byte [esp + 0x43], al
mov eax, dword [esp + 0x28]
mov dword [esp + 0x138], ecx
cmp eax, 3
sete dl
jne 0x4d1767
mov eax, 2
cmp dh, 3
jne 0x4d178e
mov byte [esp + 0xc], dl
mov ecx, 0x586f19
mov edx, 4
mov byte [esp + 0x14], bh
mov byte [esp + 8], bl
call fcn.0053c7d0
mov edx, eax
jmp 0x4d1f76
movq xmm0, qword [esp + 0x144]
movsd xmm1, qword [esp + 0x14c]
cmp dh, 3
movsd qword [esp + 0x5c], xmm1
movq qword [esp + 0x54], xmm0
je 0x4d1f4e
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc0]
mov ebx, dword [esp + 0x24]
and byte [esp + 0x2c], 1
movsd xmm0, qword [esp + 0x110]
movsd xmm1, qword [esp + 0x118]
movzx edx, byte [esp + 0x46]
mov dword [esp + 0x30], edi
test eax, eax
movsd qword [esp + 0x178], xmm1
movsd qword [esp + 0x170], xmm0
movq xmm0, qword [esp + 0x54]
movsd xmm1, qword [esp + 0x5c]
mov byte [esp + 0xba], dl
cmove ebx, eax
mov dword [esp + 0x24], ebx
movzx ebx, word [esp + 0x44]
movq qword [esp + 0x180], xmm0
movsd qword [esp + 0x188], xmm1
mov word [esp + 0xb8], bx
mov ebx, edi
mov edi, ecx
mov ecx, dword [esp + 0x1c]
jmp 0x4d1cca
mov edx, 1
xor eax, eax
jmp 0x4d1b24
cmp edi, 0x5d
je 0x4d2285
cmp byte [esp + 0x104], 0
je 0x4d1fc0
mov byte [esp + 0x104], 0
cmp bl, 0x5d
je 0x4d1efa
mov esi, dword [esp + 8]
lea ecx, [esp + 0x54]
mov edx, esi
call fcn.0050b000
movzx eax, byte [esp + 0x6c]
mov edx, dword [esp + 0x54]
mov ebx, 0
cmp al, 3
jne 0x4d1902
mov edi, dword [esp + 0x10]
test edi, 0x7fffffff
mov dword [esp + 0x34], edx
je 0x4d2477
jmp 0x4d2254
lea ecx, [esp + 0x6d]
mov byte [esp + 0x1b], al
mov eax, dword [ecx - 0xd]
movq xmm0, qword [ecx - 0x15]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x64]
movq qword [esp + 0x144], xmm0
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
movzx eax, word [ecx]
mov word [esp + 0x44], ax
movzx eax, byte [ecx + 2]
mov byte [esp + 0x46], al
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
mov esi, dword [esi + 0x14]
cmp esi, ecx
jae 0x4d19a3
mov dword [esp + 0x34], edx
lea ebx, [esi + 2]
lea edx, [esi + 1]
mov dword [esp + 0x20], eax
nop dword [eax]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x20]
mov eax, ecx
movzx edx, byte [edx + esi]
lea edi, [edx - 9]
cmp edi, 0x23
ja 0x4d2009
mov edx, dword [edi*4 + 0x4d31c8]
add edx, dword [esp + 0x4c]
jmp edx
inc esi
mov dword [esp + 0x54], 2
cmp ecx, esi
cmovb esi, ecx
test esi, esi
jne 0x4d1f21
mov edx, 1
xor edi, edi
jmp 0x4d1f44
lea ecx, [esp + 0x54]
push eax
jmp 0x4d1b89
mov byte [esp + 0x1b], 3
mov dword [esp + 0x28], 3
mov dword [esp + 0x3c], 0x80000001
mov dword [esp + 0xc0], 0
mov edx, dword [esp + 8]
inc eax
mov esi, 0
mov dword [esp + 0x54], 3
cmp edx, eax
cmovb eax, edx
mov edx, 1
test eax, eax
je 0x4d1b84
xor edi, edi
nop dword [eax]
inc edi
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove edi, esi
add edx, ebx
dec eax
jne 0x4d1b70
lea ecx, [esp + 0x54]
push edi
call fcn.00486e00
add esp, 4
mov edi, dword [esp + 0x1c]
mov edx, eax
mov byte [esp + 0xc], 1
mov byte [esp + 0x14], 1
mov byte [esp + 8], 1
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x34]
cmp dword [esp + 0xc0], 0
je 0x4d1be8
cmp dword [esp + 0x24], 0
je 0x4d1be8
test ebx, ebx
je 0x4d1be8
push dword [esp + 0x24]
push 0
push dword [0x5970d8]
mov esi, eax
mov edi, edx
mov ebx, ecx
call sub.KERNEL32.dll_HeapFree
mov edx, edi
mov edi, dword [esp + 0x1c]
mov ecx, ebx
mov eax, esi
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x28]
add edx, 0xfffffffc
cmp edx, 0xfffffffd
mov edx, dword [esp + 0x120]
ja 0x4d1c2e
cmp byte [esp + 0xc], 0
je 0x4d1c2e
test edx, edx
je 0x4d1c2e
cmp dword [esp + 0xf8], 0
je 0x4d1c2e
push edx
push 0
push dword [0x5970d8]
mov ebx, edi
mov esi, eax
mov edi, ecx
call sub.KERNEL32.dll_HeapFree
mov ecx, edi
mov edi, ebx
mov eax, esi
mov dword [esp + 0x30], eax
movzx eax, byte [esp + 0x1b]
add al, 0xfc
cmp al, 0xfe
setb al
test byte [esp + 0x14], al
mov eax, dword [esp + 0x38]
je 0x4d1c5e
test eax, eax
je 0x4d1c5e
test ecx, ecx
je 0x4d1c5e
push eax
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
cmp byte [esp + 8], 0
je 0x4d1c70
mov eax, dword [esp + 0x3c]
cmp eax, 0x80000002
jge 0x4d1c91
mov ecx, edi
mov esi, dword [esp + 0xe4]
mov ebx, dword [esp + 0xe0]
mov edi, dword [esp + 0xdc]
mov dword [esp + 0xc], 3
jmp 0x4d1cca
test eax, eax
mov dword [esp + 0xc], 3
je 0x4d1cb1
push dword [esp + 0xf4]
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0xe4]
mov ebx, dword [esp + 0xe0]
mov edi, dword [esp + 0xdc]
mov ecx, dword [esp + 0x1c]
inc byte [ecx + 0x1c]
call fcn.00407900
mov edx, dword [esp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
movsd xmm0, qword [esp + 0x180]
movsd xmm1, qword [esp + 0x188]
lea ecx, [esp + 0x6d]
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xdc], edi
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], eax
lea eax, [esp + 0x5c]
cmp edx, 3
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
mov eax, dword [esp + 0x120]
movq xmm0, qword [esp + 0x170]
movsd xmm1, qword [esp + 0x178]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], edi
movsd qword [ecx + 0x1f], xmm1
movq qword [ecx + 0x17], xmm0
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x98], eax
movzx eax, byte [esp + 0x43]
mov byte [esp + 0x9c], al
movzx eax, word [esp + 0xb8]
mov word [ecx + 0x30], ax
movzx eax, byte [esp + 0xba]
mov byte [ecx + 0x32], al
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xa4], eax
movzx eax, byte [esp + 0x2c]
mov ah, byte [esp + 0x14]
mov byte [esp + 0xa8], al
mov byte [esp + 0xa9], ah
mov dword [esp + 0xac], ecx
jne 0x4d1e07
mov esi, 3
test ecx, ecx
je 0x4d1e48
call fcn.0040a630
mov eax, dword [esp + 0x20]
lea ebx, [esp + 0x1a4]
cmp esi, 3
jne 0x4d25f0
jmp 0x4d2eb6
test ecx, ecx
je 0x4d1e32
mov edi, ecx
lea ecx, [esp + 0x54]
call fcn.0040a6b0
mov esi, 3
mov eax, edi
lea ebx, [esp + 0x1a4]
cmp esi, 3
jne 0x4d25f0
jmp 0x4d2eb6
mov ecx, 0x14
lea edi, [esp + 0x24c]
lea esi, [esp + 0x5c]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
lea ebx, [esp + 0x1a4]
cmp esi, 3
jne 0x4d25f0
jmp 0x4d2eb6
mov edx, dword [esp + 0x114]
jmp 0x4d1b97
xor ecx, ecx
mov edx, 0x574450
push 0x5742d4
call fcn.0053c820
add esp, 4
mov esi, eax
jmp 0x4d162d
inc ecx
mov dword [esp + 0x54], 0x12
cmp esi, ecx
cmovb ecx, esi
test ecx, ecx
jne 0x4d2027
mov edx, 1
xor esi, esi
lea ecx, [esp + 0x54]
push esi
jmp 0x4d2459
xor edi, edi
mov edx, 1
nop dword [eax + eax]
inc edi
xor ecx, ecx
cmp byte [eax], 0xa
lea eax, [eax + 1]
sete cl
cmove edi, ebx
add edx, ecx
dec esi
jne 0x4d1f30
lea ecx, [esp + 0x54]
push edi
jmp 0x4d21f9
mov byte [esp + 0xc], dl
mov ecx, 0x586f19
mov edx, 4
mov byte [esp + 0x14], bh
mov byte [esp + 8], bl
mov ebx, eax
call fcn.0053c7d0
mov edx, eax
cmp ebx, 2
jne 0x4d2161
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x34]
cmp byte [esp + 0x43], 2
je 0x4d1fad
cmp dword [esp + 0x38], 0
je 0x4d1fad
test ecx, ecx
je 0x4d1fad
push dword [esp + 0x38]
push 0
push dword [0x5970d8]
mov ebx, edx
call sub.KERNEL32.dll_HeapFree
mov edx, ebx
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x34]
test esi, 0x7fffffff
jne 0x4d2059
mov eax, edi
jmp 0x4d2963
inc ecx
mov dword [esp + 0x54], 7
cmp esi, ecx
cmovb ecx, esi
test ecx, ecx
je 0x4d2417
cmp esi, eax
mov edx, 1
cmovb eax, esi
mov esi, dword [esp + 0xc]
xor edi, edi
xor ebx, ebx
nop dword [eax + eax]
inc edi
xor ecx, ecx
cmp byte [esi], 0xa
lea esi, [esi + 1]
sete cl
cmove edi, ebx
add edx, ecx
dec eax
jne 0x4d1ff0
jmp 0x4d2454
cmp edx, 0x5d
jne 0x4d2076
mov ecx, 2
mov edx, 0x574450
push 0x5742d4
call fcn.0053c820
jmp 0x4d21fe
mov eax, dword [esp + 0xc]
xor esi, esi
mov edx, 1
xor edi, edi
nop word cs:[eax + eax]
nop
inc esi
xor ebx, ebx
cmp byte [eax], 0xa
lea eax, [eax + 1]
sete bl
cmove esi, edi
add edx, ebx
dec ecx
jne 0x4d2040
jmp 0x4d1f17
push edi
push 0
push dword [0x5970d8]
mov esi, edx
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp + 0x10]
mov edx, esi
mov eax, edi
jmp 0x4d2963
inc esi
mov dword [esp + 0x54], 7
cmp eax, esi
cmovb esi, eax
test esi, esi
je 0x4d21bf
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
mov edx, 1
cmp eax, edi
cmovb edi, eax
xor esi, esi
xor eax, eax
nop word cs:[eax + eax]
nop dword [eax]
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove esi, eax
add edx, ebx
dec edi
jne 0x4d20b0
jmp 0x4d21f4
cmp dword [esp + 0x120], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xf8]
mov ebx, dword [esp + 0x34]
je 0x4d1f7e
test eax, eax
je 0x4d1f7e
push dword [esp + 0x120]
push 0
push dword [0x5970d8]
mov ebx, edx
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp + 0x10]
mov edx, ebx
jmp 0x4d1f7a
mov edx, 1
xor esi, esi
jmp 0x4d21f4
lea ecx, [esp + 0x54]
push esi
call fcn.00486e00
add esp, 4
mov ecx, eax
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
cmp byte [esp + 0x1b], 2
je 0x4d2242
test eax, eax
je 0x4d2242
test edx, edx
je 0x4d2242
push eax
push 0
push dword [0x5970d8]
mov esi, ecx
call sub.KERNEL32.dll_HeapFree
mov edx, esi
test edi, 0x7fffffff
mov dword [esp + 0x34], edx
je 0x4d2477
jmp 0x4d2254
mov edx, ecx
test edi, 0x7fffffff
mov dword [esp + 0x34], edx
je 0x4d2477
mov eax, dword [0x5970d8]
sub esp, 0xc
movaps xmm0, xmmword [esp + 0x12c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov esi, edx
movss dword [esp + 8], xmm0
call sub.KERNEL32.dll_HeapFree
mov dword [esp + 8], eax
jmp 0x4d247d
mov ecx, 1
mov edx, 0x574450
push 0x5742d4
call fcn.0053c820
jmp 0x4d245e
mov edx, eax
jmp 0x4d2aed
movzx edx, bl
cmp edx, 0x7d
jne 0x4d26bf
mov edx, dword [esp + 8]
inc eax
mov dword [esp + 0x54], 0x12
cmp edx, eax
cmovb eax, edx
test eax, eax
je 0x4d26d9
xor esi, esi
mov edx, 1
nop word cs:[eax + eax]
nop dword [eax]
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
mov edi, 0
lea ecx, [ecx + 1]
sete bl
cmove esi, edi
add edx, ebx
dec eax
jne 0x4d23b0
jmp 0x4d2939
mov edx, 1
xor edi, edi
jmp 0x4d2454
lea ecx, [esp + 0x54]
push edi
call fcn.00486e00
add esp, 4
mov edi, dword [esp + 0x10]
mov edx, eax
test edi, 0x7fffffff
mov dword [esp + 0x34], edx
jne 0x4d2254
mov dword [esp + 8], eax
mov esi, edx
mov edi, dword [esp + 0x1c]
mov ebx, 3
inc byte [edi + 0x1c]
mov ecx, edi
call fcn.00408250
movsd xmm0, qword [esp + 0x160]
movsd xmm1, qword [esp + 0x168]
mov edi, eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], esi
lea ecx, [esp + 0x6d]
cmp ebx, 3
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
mov eax, dword [esp + 0x3c]
movaps xmm0, xmmword [esp + 0xc0]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x13c]
movlps qword [esp + 0x70], xmm0
movaps xmm0, xmmword [esp + 0x190]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x34]
movlps qword [esp + 0x7c], xmm0
movq xmm0, qword [esp + 0x154]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x15c]
movq qword [ecx + 0x1b], xmm0
mov dword [ecx + 0x23], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x98], eax
movzx eax, byte [esp + 0x1b]
mov byte [esp + 0x9c], al
movzx eax, word [esp + 0xb4]
mov word [ecx + 0x30], ax
movzx eax, byte [esp + 0xb6]
mov byte [ecx + 0x32], al
mov eax, dword [esp + 0x38]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 8]
mov byte [esp + 0xa8], al
movzx eax, byte [esp + 0x14]
mov byte [esp + 0xa9], al
mov eax, esi
mov dword [esp + 0xac], edi
jne 0x4d25a6
test edi, edi
lea ebx, [esp + 0x1a4]
je 0x4d2597
mov ecx, edi
mov esi, eax
call fcn.0040a630
mov eax, esi
mov esi, 3
cmp esi, 3
jne 0x4d25f0
jmp 0x4d2eb6
mov dword [esp + 0xc], ebx
test edi, edi
lea ebx, [esp + 0x1a4]
je 0x4d25cf
lea ecx, [esp + 0x54]
call fcn.0040a6b0
mov esi, 3
mov eax, edi
cmp esi, 3
jne 0x4d25f0
jmp 0x4d2eb6
mov ecx, 0x14
lea edi, [esp + 0x24c]
lea esi, [esp + 0x5c]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0xc]
cmp esi, 3
je 0x4d2eb6
nop
mov edx, eax
lea eax, [esp + 0x29c]
mov dword [esp + 0xc], esi
mov ecx, 0x14
lea esi, [esp + 0x24c]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x14
mov edi, ebx
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0xc]
cmp eax, 4
je 0x4d2e05
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x1f8], edx
mov ecx, 0x14
lea edi, [esp + 0x1fc]
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0xf0]
cmp edx, dword [esp + 0xe8]
jne 0x4d266a
lea ecx, [esp + 0xe8]
call fcn.004b6d90
mov edx, dword [esp + 0xf0]
mov eax, dword [esp + 0xec]
mov esi, dword [esp + 0xc]
imul ecx, edx, 0x58
inc edx
xor ebx, ebx
mov dword [eax + ecx], esi
mov esi, dword [esp + 0x20]
lea edi, [eax + ecx + 8]
mov dword [eax + ecx + 4], esi
mov ecx, 0x14
lea esi, [esp + 0x1a4]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xf0], edx
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0xb0]
cmp eax, edx
mov ecx, dword [ecx]
jb 0x4d0faa
jmp 0x4d2c7b
mov edx, dword [esp + 8]
inc eax
mov dword [esp + 0x54], 0x10
cmp edx, eax
cmovb eax, edx
test eax, eax
jne 0x4d2918
mov edx, 1
xor esi, esi
jmp 0x4d2939
mov ecx, dword [esp + 0xb0]
xor edi, edi
mov ecx, dword [ecx]
jmp 0x4d1b4b
xor esi, esi
mov edx, 1
nop
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
mov edi, 0
lea ecx, [ecx + 1]
sete bl
cmove esi, edi
add edx, ebx
dec eax
jne 0x4d2920
lea ecx, [esp + 0x54]
push esi
call fcn.00486e00
add esp, 4
mov edx, eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x34]
mov byte [esp + 0xc], 1
mov byte [esp + 0x14], 1
mov byte [esp + 8], 1
mov edi, dword [esp + 0x1c]
jmp 0x4d1bb2
mov edx, dword [esp + 8]
inc eax
mov dword [esp + 0x54], 8
cmp edx, eax
cmovb eax, edx
test eax, eax
je 0x4d1894
cmp edx, edi
cmovb edi, edx
xor eax, eax
mov edx, 1
xor esi, esi
inc eax
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove eax, esi
add edx, ebx
dec edi
jne 0x4d2a50
jmp 0x4d1b24
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x14], 1
mov byte [esp + 8], 1
jmp 0x4d1bb2
mov eax, dword [esp + 0x20]
mov dword [esp + 0x1f4], 3
lea esi, [esp + 0x1a4]
mov ecx, 0x14
lea edi, [esp + 0x1fc]
mov dword [esp + 0x1f8], eax
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x1f4]
call fcn.00561a20
mov eax, dword [esp + 0xec]
mov ebx, dword [esp + 0xe8]
mov edi, dword [esp + 0xf0]
mov dword [esp + 0x20], eax
jmp 0x4d2e37
mov eax, edx
inc eax
mov dword [esp + 0x54], 5
cmp edx, eax
cmovb eax, edx
test eax, eax
je 0x4d2c8d
xor edi, edi
mov edx, 1
xor esi, esi
nop word cs:[eax + eax]
nop dword [eax]
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove esi, edi
add edx, ebx
dec eax
jne 0x4d2c60
jmp 0x4d2df4
inc eax
mov dword [esp + 0x54], 2
cmp edx, eax
cmovb eax, edx
test eax, eax
jne 0x4d2d03
mov edx, 1
xor esi, esi
jmp 0x4d2df4
mov eax, dword [esp + 8]
inc esi
mov dword [esp + 0x54], 5
cmp eax, esi
cmovb esi, eax
test esi, esi
jne 0x4d2cb8
mov edx, 1
xor eax, eax
jmp 0x4d2ce4
xor edi, edi
mov edx, 1
xor eax, eax
nop word cs:[eax + eax]
nop dword [eax + eax]
inc eax
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove eax, edi
add edx, ebx
dec esi
jne 0x4d2cd0
lea ecx, [esp + 0x54]
push eax
call fcn.00486e00
add esp, 4
mov ecx, dword [esp + 0x48]
mov dword [ecx + 4], eax
mov dword [ecx], 0x80000000
jmp 0x4d2e61
xor edi, edi
mov edx, 1
xor esi, esi
nop dword [eax]
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove esi, edi
add edx, ebx
dec eax
jne 0x4d2d10
jmp 0x4d2df4
mov ebx, dword [esp + 0x1c]
lea edx, [esp + 0x53]
mov ecx, ebx
push 0x5747cc
call fcn.00405c80
add esp, 4
mov edi, dword [esp + 0x48]
mov esi, eax
jmp 0x4d2ea2
mov edx, dword [esp + 8]
inc esi
mov dword [esp + 0x54], 0x15
cmp edx, esi
cmovb esi, edx
test esi, esi
jne 0x4d2d87
mov edx, 1
xor esi, esi
jmp 0x4d2db4
xor esi, esi
mov edx, 1
jmp 0x4d2df4
cmp edx, eax
cmovb eax, edx
xor edi, edi
mov edx, 1
xor esi, esi
nop word cs:[eax + eax]
nop
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove esi, edi
add edx, ebx
dec eax
jne 0x4d2da0
lea ecx, [esp + 0x54]
push esi
jmp 0x4d2ce9
lea ecx, [esp + 0x54]
push esi
call fcn.00486e00
add esp, 4
mov dword [esp + 0x20], eax
mov esi, dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
mov ecx, esi
call fcn.004e5ab0
cmp dword [esp + 0xe8], 0
je 0x4d2e32
push esi
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
mov ebx, 0x80000000
mov ecx, dword [esp + 0x1c]
inc byte [ecx + 0x1c]
call fcn.00408250
mov esi, eax
cmp ebx, 0x80000000
je 0x4d2e69
test esi, esi
jne 0x4d2e7a
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x20]
mov dword [eax], ebx
mov dword [eax + 4], ecx
mov dword [eax + 8], edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
test esi, esi
je 0x4d2e74
mov ecx, esi
call fcn.0040a630
mov esi, dword [esp + 0x20]
jmp 0x4d2e9a
mov ecx, dword [esp + 0x20]
mov edx, edi
call fcn.004e5ab0
test ebx, ebx
je 0x4d2e9a
push dword [esp + 0x20]
push 0
push dword [0x5970d8]
call sub.KERNEL32.dll_HeapFree
mov edi, dword [esp + 0x48]
mov ebx, dword [esp + 0x1c]
mov ecx, esi
mov edx, ebx
call fcn.0053b930
mov dword [edi + 4], eax
mov dword [edi], 0x80000000
jmp 0x4d2e61
mov edi, dword [esp + 0x1c]
jmp 0x4d2f3c
inc esi
mov dword [esp + 0x54], 0x12
cmp edx, esi
cmovb esi, edx
test esi, esi
jne 0x4d2fd0
mov edx, 1
xor eax, eax
jmp 0x4d2ff4
mov esi, dword [esp + 8]
inc eax
mov dword [esp + 0x54], 7
mov edx, eax
cmp esi, eax
cmovb edx, esi
test edx, edx
je 0x4d2d7e
cmp esi, eax
mov edx, 1
cmovb eax, esi
xor edi, edi
xor esi, esi
nop dword [eax + eax]
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove esi, edi
add edx, ebx
dec eax
jne 0x4d2f10
jmp 0x4d2df4
lea edx, [esp + 0x53]
mov ecx, edi
push 0x57490c
call fcn.00405c80
add esp, 4
mov ecx, eax
mov edx, edi
call fcn.0053b930
jmp 0x4d2e01
mov esi, dword [esp + 8]
inc eax
mov dword [esp + 0x54], 0x15
mov edx, eax
cmp esi, eax
cmovb edx, esi
test edx, edx
je 0x4d2d7e
cmp esi, eax
mov edx, 1
cmovb eax, esi
xor edi, edi
xor esi, esi
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove esi, edi
add edx, ebx
dec eax
jne 0x4d2f74
jmp 0x4d2df4
mov esi, dword [esp + 8]
inc eax
mov dword [esp + 0x54], 0x15
mov edx, eax
cmp esi, eax
cmovb edx, esi
test edx, edx
je 0x4d2d7e
cmp esi, eax
mov edx, 1
cmovb eax, esi
xor edi, edi
xor esi, esi
inc esi
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove esi, edi
add edx, ebx
dec eax
jne 0x4d2fb7
jmp 0x4d2df4
xor edi, edi
mov edx, 1
xor eax, eax
nop dword [eax]
inc eax
xor ebx, ebx
cmp byte [ecx], 0xa
lea ecx, [ecx + 1]
sete bl
cmove eax, edi
add edx, ebx
dec esi
jne 0x4d2fe0
lea ecx, [esp + 0x54]
push eax
jmp 0x4d2df9