Function at 0x490da0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x94
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x48], edx
push edi
mov dword [esp + 0x88], esi
cmp dword [esi + 0x34], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x18], 0
jne 0x490dde
lea edx, [esp + 0x34]
call fcn.00494580
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
jmp 0x490de8
mov eax, dword [esi + 0x20]
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0x24]
mov ebx, dword [esi + 0x28]
mov dword [esp + 0x1c], eax
cmp ebx, 2
jb 0x49212e
mov ecx, dword [esi]
mov eax, 0x111
cmp ebx, eax
cmova ebx, eax
mov eax, dword [esi + 0xc]
call eax
xor ecx, ecx
xor ebp, ebp
mov dword [esp + 0x3c], ecx
lea edx, [eax - 1]
mov al, byte [edx]
mov dword [esp + 0x20], edx
mov byte [esp + 0x12], al
nop
mov eax, dword [esi + ebp*4 + 0x38]
mov edi, edx
sub edi, eax
mov dword [esp + ebp*4 + 0x6c], eax
mov al, byte [esp + 0x12]
cmp al, byte [edi]
jne 0x490e88
mov al, byte [edx + 1]
cmp al, byte [edi + 1]
jne 0x490e88
mov edx, 2
cmp ebx, edx
jbe 0x490e61
mov eax, dword [esp + 0x20]
sub edi, eax
lea ecx, [eax + 2]
nop
mov al, byte [ecx]
cmp al, byte [edi + ecx]
jne 0x490e5d
inc edx
inc ecx
cmp edx, ebx
jb 0x490e50
mov ecx, dword [esp + 0x3c]
mov dword [esp + ebp*4 + 0x94], edx
mov eax, ebp
cmp edx, dword [esp + ecx*4 + 0x94]
cmovbe eax, ecx
mov ecx, eax
cmp edx, 0x111
je 0x490e99
mov edx, dword [esp + 0x20]
mov dword [esp + 0x3c], ecx
jmp 0x490e93
mov dword [esp + ebp*4 + 0x94], 0
inc ebp
cmp ebp, 4
jb 0x490e20
mov edi, dword [esp + ecx*4 + 0x94]
mov eax, dword [esi + 0x30]
cmp edi, eax
jb 0x490eca
mov dword [esi + 0x90], ecx
lea edx, [edi - 1]
lea ecx, [edi - 1]
add dword [esi + 0x34], ecx
mov ecx, dword [esi]
mov esi, dword [esi + 0x14]
call esi
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x94
ret
mov ebp, dword [esp + 0x28]
cmp ebp, eax
jb 0x490f03
mov eax, dword [esp + 0x1c]
lea edx, [ebp - 1]
mov ecx, dword [esi]
mov eax, dword [esi + eax*4 + 0x95c]
add eax, 4
mov dword [esi + 0x90], eax
lea eax, [ebp - 1]
add dword [esi + 0x34], eax
mov eax, dword [esi + 0x14]
call eax
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0x94
ret
mov ecx, dword [esp + 0x20]
mov eax, ecx
mov ebx, dword [esp + 0x6c]
sub eax, ebx
mov dword [esp + 0x58], ebx
cmp edi, ebp
mov ebx, ebp
mov dl, byte [ecx]
cmova ebx, edi
mov al, byte [eax]
mov byte [esp + 0x12], dl
mov byte [esp + 0x13], al
mov dword [esp + 0x18], ebx
cmp ebx, 2
jae 0x490f37
cmp dl, al
jne 0x49212e
mov ax, word [esi + 0x2c]
mov word [esi + 0xbcbc], ax
mov ebp, dword [esi + 0x4c]
mov eax, dword [esp + 0x4c]
and ebp, eax
movzx edx, byte [ecx - 1]
mov ecx, dword [esi + 0x94]
mov edi, dword [esi + 0x2c]
shl eax, 8
add edx, eax
mov dword [esp + 0x30], ebp
and edx, dword [esi + 0x48]
mov eax, dword [esi + 0x50]
shl edx, cl
lea ecx, [edx + edx*2]
movzx edx, byte [esp + 0x12]
lea ecx, [eax + ecx*2]
lea eax, [esi + 0x760]
push eax
cmp edi, 7
jb 0x490f8d
movzx eax, byte [esp + 0x17]
push eax
call fcn.00492910
jmp 0x490f92
call fcn.004928d0
mov ecx, eax
mov eax, edi
shl eax, 4
add eax, ebp
movzx eax, word [esi + eax*2 + 0x1eb0]
shr eax, 4
mov edx, dword [esi + eax*4 + 0x760]
xor eax, eax
add edx, ecx
mov word [esi + 0xbcde], ax
mov ecx, edi
mov dword [esi + 0xbcd8], edx
shl ecx, 4
add ecx, ebp
mov dword [esi + 0xbce4], 0xffffffff
movzx eax, word [esi + ecx*2 + 0x1eb0]
xor eax, 0x7f0
shr eax, 4
mov eax, dword [esi + eax*4 + 0x760]
mov dword [esp + 0x3c], eax
movzx eax, word [esi + edi*2 + 0x1e50]
xor eax, 0x7f0
shr eax, 4
mov ebp, dword [esi + eax*4 + 0x760]
add ebp, dword [esp + 0x3c]
mov al, byte [esp + 0x12]
mov dword [esp + 0x34], ebp
cmp byte [esp + 0x13], al
jne 0x491077
cmp dword [esp + 0x94], 0
jne 0x491077
movzx ecx, word [esi + ecx*2 + 0x2030]
movzx eax, word [esi + edi*2 + 0x1e68]
shr ecx, 4
shr eax, 4
mov ecx, dword [esi + ecx*4 + 0x760]
add ecx, dword [esi + eax*4 + 0x760]
or eax, 0xffffffff
add ecx, ebp
cmp ecx, edx
jae 0x49105c
mov dword [esi + 0xbcd8], ecx
xor eax, eax
mov dword [esi + 0xbce4], 0
cmp ebx, 2
jae 0x491077
pop edi
mov dword [esi + 0x90], eax
mov eax, 1
pop esi
pop ebp
pop ebx
add esp, 0x94
ret
mov eax, dword [esp + 0x70]
xor ebp, ebp
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0x30]
mov dword [esi + 0xbce0], 1
mov dword [esi + 0xbcc8], ecx
mov dword [esi + 0xbccc], eax
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x74]
mov dword [esi + 0xbcd0], eax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x78]
mov dword [esi + 0xbcd4], eax
nop word [eax + eax]
mov edx, dword [esp + ebp*4 + 0x94]
cmp edx, 2
jb 0x4911ba
mov eax, dword [esi + 0x2c]
movzx ecx, word [esi + eax*2 + 0x1e68]
test ebp, ebp
jne 0x491107
shl eax, 4
add eax, ebx
shr ecx, 4
movzx eax, word [esi + eax*2 + 0x2030]
xor eax, 0x7f0
shr eax, 4
mov eax, dword [esi + eax*4 + 0x760]
add eax, dword [esi + ecx*4 + 0x760]
jmp 0x49116f
movzx edi, word [esi + eax*2 + 0x1e80]
xor ecx, 0x7f0
shr ecx, 4
mov ecx, dword [esi + ecx*4 + 0x760]
mov dword [esp + 0x20], ecx
cmp ebp, 1
jne 0x491136
shr edi, 4
mov eax, ecx
add eax, dword [esi + edi*4 + 0x760]
jmp 0x49116f
movzx ecx, word [esi + eax*2 + 0x1e98]
xor edi, 0x7f0
mov eax, 2
shr ecx, 4
sub eax, ebp
shr edi, 4
shr eax, 4
and eax, 0x7f
xor ecx, eax
mov eax, dword [esi + ecx*4 + 0x760]
add eax, dword [esi + edi*4 + 0x760]
add dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
add eax, dword [esp + 0x34]
lea ecx, [esi + 0xbcc4]
imul edi, ebx, 0x110
mov dword [esp + 0x40], eax
mov eax, edx
shl eax, 5
add ecx, eax
add edi, 0x1e2c
add edi, edx
lea edi, [esi + edi*4]
mov eax, dword [edi]
add eax, dword [esp + 0x40]
cmp eax, dword [ecx - 0xc]
jae 0x4911ae
mov dword [ecx - 0xc], eax
xor eax, eax
mov dword [ecx - 4], edx
mov dword [ecx], ebp
mov word [ecx - 6], ax
dec edx
sub edi, 4
sub ecx, 0x20
cmp edx, 2
jae 0x491195
inc ebp
cmp ebp, 4
jb 0x4910c0
mov edi, dword [esp + 0x94]
mov ebx, dword [esp + 0x18]
inc edi
cmp edi, dword [esp + 0x28]
ja 0x491336
mov eax, dword [esi + 0x2c]
xor ecx, ecx
mov dword [esp + 0x20], ecx
movzx eax, word [esi + eax*2 + 0x1e50]
shr eax, 4
mov eax, dword [esi + eax*4 + 0x760]
add eax, dword [esp + 0x3c]
mov dword [esp + 0x40], eax
cmp edi, 2
jae 0x491207
lea edi, [ecx + 2]
jmp 0x491220
cmp edi, dword [esi + 0x960]
jbe 0x491220
nop
add ecx, 2
cmp edi, dword [esi + ecx*4 + 0x960]
ja 0x491210
mov dword [esp + 0x20], ecx
mov eax, edi
lea ebp, [esi + 0xbcc4]
shl eax, 7
mov edx, 0xffff4542
add eax, 0x48c
mov dword [esp + 0x34], eax
mov eax, edi
mov ebx, dword [esp + 0x34]
shl eax, 5
add ebp, eax
imul eax, dword [esp + 0x30], 0x110
add eax, 0xd2b
add eax, edi
sub edx, esi
mov dword [esp + 0x44], edx
lea eax, [esi + eax*4]
mov edx, dword [esi + ecx*4 + 0x964]
mov dword [esp + 0x38], eax
mov eax, dword [eax]
add eax, dword [esp + 0x40]
mov dword [esp + 0x48], edx
mov dword [esp + 0x34], eax
cmp edi, 5
jae 0x49128a
mov eax, dword [esp + 0x44]
add eax, ebp
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x30], eax
jmp 0x49129a
mov dword [esp + 0x3c], 0x70c
mov dword [esp + 0x30], 0x2a6
cmp edx, 0x80
jae 0x4912b0
mov eax, edx
and eax, 0x7f
add eax, dword [esp + 0x3c]
mov eax, dword [esi + eax*4]
jmp 0x4912ea
mov eax, dword [esp + 0x48]
cmp edx, 0x20000
sbb edx, edx
and edx, 0xfffffff6
add edx, 0x10
mov ecx, edx
shr eax, cl
movzx ecx, byte [eax + esi + 0x2cb0]
mov eax, dword [esp + 0x30]
add eax, edx
mov edx, dword [esp + 0x48]
lea eax, [ecx + eax*2]
mov ecx, edx
mov eax, dword [esi + eax*4]
and ecx, 0xf
add eax, dword [esi + ecx*4 + 0x11f0]
add eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x20]
cmp eax, dword [ebp - 0xc]
jae 0x491309
mov dword [ebp - 0xc], eax
lea eax, [edx + 4]
mov dword [ebp], eax
xor eax, eax
mov dword [ebp - 4], edi
mov word [ebp - 6], ax
cmp edi, dword [esi + ecx*4 + 0x960]
jne 0x49131f
add ecx, 2
mov dword [esp + 0x20], ecx
cmp ecx, dword [esp + 0x1c]
je 0x491332
mov eax, dword [esp + 0x38]
inc edi
add eax, 4
sub ebx, 0xffffff80
add ebp, 0x20
jmp 0x49125c
mov ebx, dword [esp + 0x18]
mov ebp, 1
mov dword [esp + 0x24], ebp
cmp ebx, ebp
je 0x492059
mov dword [esp + 0x18], ebx
nop dword [eax + eax]
cmp ebp, 0x7c0
jae 0x492008
lea edx, [esp + 0x3c]
mov ecx, esi
call fcn.00494580
mov ecx, eax
mov dword [esp + 0x68], ecx
cmp ecx, dword [esi + 0x30]
jae 0x491ffc
inc dword [esp + 0x4c]
mov edi, ebp
shl edi, 5
mov edx, ebp
add edi, esi
mov dword [esp + 0x50], edi
mov eax, dword [edi + 0xbcc0]
sub edx, eax
cmp eax, 1
jne 0x4913c8
cmp dword [edi + 0xbcc4], 0
mov eax, 0x4c14f8
mov ebp, dword [esp + 0x58]
mov ecx, 0x4c14d4
cmove ecx, eax
shl edx, 5
movzx eax, word [edx + esi + 0xbcbc]
mov edx, dword [esp + 0x60]
movzx ecx, byte [ecx + eax]
mov dword [esp + 0x2c], ecx
jmp 0x4914d7
movzx ebp, word [edi + 0xbcbe]
mov ecx, dword [edi + 0xbcc4]
test bp, bp
je 0x49141c
sub edx, ebp
mov dword [esp + 0x2c], 8
cmp ebp, 1
jne 0x4913f7
cmp ecx, 4
sbb eax, eax
neg eax
add eax, 7
mov dword [esp + 0x2c], eax
shl edx, 5
lea eax, [edx + 0xbcb8]
mov edx, dword [eax + esi + 0x14]
add eax, esi
mov dword [esp + 0x60], edx
mov ebp, dword [eax + 0x10]
mov dword [esp + 0x54], ebp
cmp ecx, 4
jae 0x4914b1
jmp 0x49144f
mov eax, edx
shl edx, 5
shl eax, 5
movzx eax, word [eax + esi + 0xbcbc]
cmp ecx, 4
jae 0x49148f
movzx eax, byte [eax + 0x4c14ec]
mov dword [esp + 0x2c], eax
lea eax, [edx + 0xbcb8]
mov edx, dword [eax + esi + 0x14]
add eax, esi
mov ebp, dword [eax + 0x10]
mov dword [esp + 0x54], ebp
test ecx, ecx
jne 0x491461
mov ecx, edx
mov edx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x60], edx
jmp 0x4914bb
mov dword [esp + 0x70], ebp
mov ebp, edx
mov dword [esp + 0x58], ebp
cmp ecx, 1
jne 0x49147c
mov edx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x60], edx
jmp 0x4914c7
mov edx, ebp
mov ebp, dword [eax + ecx*4 + 0x10]
xor ecx, 1
mov dword [esp + 0x60], edx
mov eax, dword [eax + ecx*4 + 0x10]
jmp 0x4914c3
movzx eax, byte [eax + str._a_a_a_a_a_a_a_n_n_n_n_n_b_b_b_b_b_b_b_v_v_v_v_v_t_t_t_t_t_t_t_v_v_v_v_v]
mov dword [esp + 0x2c], eax
lea eax, [edx + 0xbcb8]
mov edx, dword [eax + esi + 0x10]
add eax, esi
mov dword [esp + 0x54], edx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x60], edx
mov eax, dword [eax + 0x18]
lea ebp, [ecx - 3]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x58], ebp
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], edx
mov dword [esp + 0x6c], ebp
mov eax, dword [esp + 0x54]
mov word [edi + 0xbcbc], cx
mov dword [edi + 0xbcc8], ebp
mov dword [edi + 0xbccc], eax
mov eax, dword [esp + 0x78]
mov dword [edi + 0xbcd0], edx
mov dword [edi + 0xbcd4], eax
mov ecx, dword [esi]
mov eax, dword [esi + 0xc]
call eax
mov ecx, dword [esi + 0x4c]
and ecx, dword [esp + 0x4c]
mov edx, dword [edi + 0xbcb8]
lea ebp, [eax - 1]
mov dword [esp + 0x34], ecx
mov al, byte [ebp]
mov byte [esp + 0x12], al
mov eax, ebp
sub eax, dword [esp + 0x58]
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], ebp
mov al, byte [eax]
mov byte [esp + 0x13], al
mov eax, dword [esp + 0x2c]
shl eax, 4
add eax, ecx
mov dword [esp + 0x64], eax
movzx ecx, word [esi + eax*2 + 0x1eb0]
mov eax, ecx
shr ecx, 4
xor eax, 0x7f0
shr eax, 4
mov eax, dword [esi + eax*4 + 0x760]
add eax, edx
mov dword [esp + 0x40], eax
mov eax, dword [esi + ecx*4 + 0x760]
add eax, edx
xor edx, edx
mov dword [esp + 0x1c], edx
mov edx, dword [edi + 0xbcd8]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], edx
cmp edx, 0x40000000
jae 0x491592
mov cl, byte [esp + 0x12]
cmp byte [esp + 0x13], cl
je 0x491596
cmp eax, edx
jbe 0x4915a1
xor ebp, ebp
mov dword [esp + 0x28], ebp
jmp 0x49165b
mov eax, dword [esp + 0x4c]
movzx edx, byte [ebp - 1]
mov ecx, dword [esi + 0x94]
shl eax, 8
add edx, eax
mov eax, dword [esi + 0x50]
and edx, dword [esi + 0x48]
shl edx, cl
cmp dword [esp + 0x2c], 7
lea ecx, [edx + edx*2]
movzx edx, byte [esp + 0x12]
lea ecx, [eax + ecx*2]
mov dword [esp + 0x44], ecx
jb 0x4915e8
lea eax, [esi + 0x760]
push eax
movzx eax, byte [esp + 0x17]
push eax
call fcn.00492910
mov ebp, eax
jmp 0x49161c
mov edi, dword [esp + 0x44]
xor ebp, ebp
or edx, 0x100
mov ecx, edx
shr edx, 1
and ecx, 1
neg ecx
shr ecx, 4
movzx eax, word [edi + edx*2]
and ecx, 0x7f
shr eax, 4
xor eax, ecx
add ebp, dword [esi + eax*4 + 0x760]
cmp edx, 2
jae 0x4915f4
mov edi, dword [esp + 0x50]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x30]
add ecx, ebp
mov dword [esp + 0x28], ecx
cmp ecx, edx
jae 0x49165b
xor eax, eax
mov dword [edi + 0xbcd8], ecx
mov dword [edi + 0xbce0], 1
mov edx, ecx
mov dword [edi + 0xbce4], 0xffffffff
mov word [edi + 0xbcde], ax
mov dword [esp + 0x1c], 1
mov ecx, dword [esp + 0x2c]
mov ebp, 0x7ff
sub ebp, dword [esp + 0x24]
lea eax, [ecx + 0xf28]
lea eax, [esi + eax*2]
mov dword [esp + 0x84], eax
movzx eax, word [eax]
xor eax, 0x7f0
shr eax, 4
mov eax, dword [esi + eax*4 + 0x760]
add eax, dword [esp + 0x40]
cmp dword [esi + 0x28], ebp
mov dword [esp + 0x5c], eax
cmovbe ebp, dword [esi + 0x28]
cmp ecx, 7
mov al, byte [esp + 0x13]
mov cl, byte [esp + 0x12]
mov dword [esp + 0x20], ebp
jae 0x491739
cmp al, cl
jne 0x491739
cmp dword [esp + 0x5c], edx
jae 0x491739
cmp dword [edi + 0xbce0], 2
jb 0x4916ce
cmp dword [edi + 0xbce4], 0
je 0x491739
mov eax, dword [esp + 0x64]
movzx ecx, word [esi + eax*2 + 0x2030]
mov eax, dword [esp + 0x2c]
shr ecx, 4
movzx eax, word [esi + eax*2 + 0x1e68]
mov ecx, dword [esi + ecx*4 + 0x760]
shr eax, 4
add ecx, dword [esi + eax*4 + 0x760]
add ecx, dword [esp + 0x5c]
cmp ecx, edx
jae 0x491731
xor eax, eax
mov dword [edi + 0xbcd8], ecx
mov cl, byte [esp + 0x12]
xor edx, edx
mov word [edi + 0xbcde], ax
mov al, byte [esp + 0x13]
mov dword [edi + 0xbce0], 1
mov dword [edi + 0xbce4], 0
jmp 0x49173d
mov al, byte [esp + 0x13]
mov cl, byte [esp + 0x12]
mov edx, dword [esp + 0x1c]
cmp dword [esp + 0x20], 2
jb 0x491fe9
mov edi, dword [esi + 0x30]
mov ebp, edi
cmp dword [esp + 0x20], edi
cmovbe ebp, dword [esp + 0x20]
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x28]
test edx, edx
jne 0x4918b0
test ebp, ebp
je 0x4918b0
mov edx, dword [esp + 0x14]
cmp al, cl
je 0x4918b4
mov ecx, dword [esp + 0x20]
cmp ecx, 2
jbe 0x4918b4
mov ebp, dword [esp + 0x38]
mov al, byte [edx + 1]
cmp al, byte [ebp + 1]
jne 0x4918b4
mov al, byte [edx + 2]
cmp al, byte [ebp + 2]
jne 0x4918b4
inc edi
mov edx, 3
cmp edi, ecx
cmova edi, ecx
cmp edi, edx
jbe 0x4917cd
mov ebx, dword [esp + 0x14]
lea ecx, [ebp + 3]
sub ebx, ebp
nop dword [eax + eax]
mov al, byte [ebx + ecx]
cmp al, byte [ecx]
jne 0x4917cd
inc edx
inc ecx
cmp edx, edi
jb 0x4917c0
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x24]
inc ebx
and ebx, dword [esi + 0x4c]
add ebp, edx
movzx edi, byte [eax + 0x4c14d4]
mov eax, ebp
cmp dword [esp + 0x18], ebp
cmovae eax, dword [esp + 0x18]
dec edx
movzx ecx, word [esi + edi*2 + 0x1e50]
mov dword [esp + 0x50], edx
xor ecx, 0x7f0
mov dword [esp + 0x18], eax
mov edx, edi
shl edx, 4
add edx, ebx
shr ecx, 4
shl ebp, 5
movzx eax, word [esi + edx*2 + 0x2030]
mov ecx, dword [esi + ecx*4 + 0x760]
xor eax, 0x7f0
shr eax, 4
add ecx, dword [esi + eax*4 + 0x760]
movzx eax, word [esi + edx*2 + 0x1eb0]
mov edx, ecx
xor eax, 0x7f0
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x50]
shr eax, 4
add edx, dword [esi + eax*4 + 0x760]
movzx eax, word [esi + edi*2 + 0x1e68]
shr eax, 4
add edx, dword [esi + eax*4 + 0x760]
imul eax, ebx, 0x110
mov ebx, dword [esp + 0x18]
add eax, ecx
add edx, dword [esi + eax*4 + 0x78b0]
add edx, dword [esp + 0x28]
cmp edx, dword [esi + ebp + 0xbcb8]
jae 0x4918b0
mov eax, 1
mov dword [esi + ebp + 0xbcb8], edx
mov dword [esi + ebp + 0xbcc0], ecx
mov dword [esi + ebp + 0xbcc4], 0
mov word [esi + ebp + 0xbcbe], ax
mov dword [esp + 0x18], ebx
mov edx, dword [esp + 0x14]
xor ecx, ecx
mov dword [esp + 0x30], 2
mov dword [esp + 0x1c], ecx
mov ebp, dword [esp + ecx*4 + 0x6c]
mov edi, edx
mov al, byte [edx]
sub edi, ebp
mov dword [esp + 0x90], ebp
mov dword [esp + 0x50], edi
cmp al, byte [edi]
jne 0x491c25
mov al, byte [edx + 1]
cmp al, byte [edi + 1]
jne 0x491c25
mov edx, 2
mov dword [esp + 0x28], edx
cmp dword [esp + 0x48], edx
jbe 0x491919
mov esi, dword [esp + 0x48]
lea ecx, [edi + 2]
mov al, byte [ecx + ebp]
cmp al, byte [ecx]
jne 0x49190e
inc edx
inc ecx
cmp edx, esi
jb 0x491901
mov esi, dword [esp + 0x88]
mov dword [esp + 0x28], edx
mov ecx, dword [esp + 0x24]
mov edi, edx
add ecx, edx
cmp ebx, ecx
mov dword [esp + 0x7c], ecx
mov eax, ecx
cmovae eax, ebx
mov ecx, eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x44], ecx
movzx ecx, word [esi + eax*2 + 0x1e68]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x491971
mov eax, dword [esp + 0x64]
shr ecx, 4
movzx eax, word [esi + eax*2 + 0x2030]
xor eax, 0x7f0
shr eax, 4
mov ebp, dword [esi + eax*4 + 0x760]
add ebp, dword [esi + ecx*4 + 0x760]
jmp 0x4919d3
xor ecx, 0x7f0
shr ecx, 4
mov ebp, dword [esi + ecx*4 + 0x760]
mov ecx, dword [esp + 0x2c]
movzx ebx, word [esi + ecx*2 + 0x1e80]
cmp eax, 1
jne 0x49199e
shr ebx, 4
add ebp, dword [esi + ebx*4 + 0x760]
jmp 0x4919d3
movzx ecx, word [esi + ecx*2 + 0x1e98]
mov eax, 2
sub eax, dword [esp + 0x1c]
xor ebx, 0x7f0
shr eax, 4
and eax, 0x7f
shr ecx, 4
xor ecx, eax
shr ebx, 4
mov eax, dword [esi + ecx*4 + 0x760]
add eax, dword [esi + ebx*4 + 0x760]
add ebp, eax
imul eax, dword [esp + 0x34], 0x110
add ebp, dword [esp + 0x5c]
mov dword [esp + 0x38], ebp
add eax, 0x1e2c
add eax, edx
mov edx, dword [esp + 0x1c]
lea eax, [esi + eax*4]
mov dword [esp + 0x80], eax
mov ebx, eax
mov eax, dword [esp + 0x7c]
shl eax, 5
add eax, 0xbcc4
add eax, esi
mov ecx, dword [ebx]
add ecx, ebp
cmp ecx, dword [eax - 0xc]
jae 0x491a1f
mov dword [eax - 0xc], ecx
xor ecx, ecx
mov dword [eax - 4], edi
mov dword [eax], edx
mov word [eax - 6], cx
dec edi
sub ebx, 4
sub eax, 0x20
cmp edi, 2
jae 0x491a08
test edx, edx
mov edx, dword [esp + 0x28]
jne 0x491a3e
lea eax, [edx + 1]
mov dword [esp + 0x30], eax
mov ebp, eax
jmp 0x491a41
lea ebp, [edx + 1]
mov eax, dword [esi + 0x30]
add eax, ebp
cmp eax, dword [esp + 0x20]
cmova eax, dword [esp + 0x20]
add ebp, 2
mov dword [esp + 0x7c], eax
cmp ebp, eax
ja 0x491c19
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x14]
add ecx, ebp
mov edi, dword [esp + 0x44]
mov ebx, edi
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x18], ebx
mov al, byte [eax + ebp - 2]
cmp al, byte [ecx - 2]
jne 0x491c1d
mov eax, dword [esp + 0x14]
mov dword [esp + 0x18], ebx
mov al, byte [eax + ebp - 1]
cmp al, byte [ecx - 1]
jne 0x491c1d
mov ecx, dword [esp + 0x4c]
lea eax, [esi + 0x760]
mov ebx, dword [esp + 0x14]
add ecx, edx
push eax
mov eax, dword [esp + 0x54]
mov edi, ecx
and edi, dword [esi + 0x4c]
shl ecx, 8
movzx eax, byte [edx + eax]
push eax
mov eax, dword [esp + 0x1c]
movzx edx, byte [edx + eax]
mov eax, dword [esp + 0x30]
movzx eax, byte [eax + ebx - 1]
add eax, ecx
mov ecx, dword [esi + 0x94]
and eax, dword [esi + 0x48]
shl eax, cl
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x50]
lea ecx, [eax + ecx*2]
call fcn.00492910
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x38]
movzx ecx, byte [ecx + 0x4c14ec]
shl ecx, 4
add ecx, edi
movzx ecx, word [esi + ecx*2 + 0x1eb0]
shr ecx, 4
add eax, dword [esi + ecx*4 + 0x760]
mov ecx, dword [esp + 0x80]
add eax, dword [ecx]
add edx, eax
lea eax, [edi + 1]
and eax, dword [esi + 0x4c]
mov dword [esp + 0x80], eax
movzx ecx, word [esi + eax*2 + 0x20d0]
movzx eax, word [esi + eax*2 + 0x1f50]
xor ecx, 0x7f0
xor eax, 0x7f0
shr ecx, 4
shr eax, 4
mov ecx, dword [esi + ecx*4 + 0x760]
add ecx, dword [esi + eax*4 + 0x760]
movzx eax, word [esi + 0x1e5a]
xor eax, 0x7f0
shr eax, 4
add ecx, dword [esi + eax*4 + 0x760]
movzx eax, word [esi + 0x1e72]
shr eax, 4
add ecx, dword [esi + eax*4 + 0x760]
add edx, ecx
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x7c]
cmp ebp, edx
jae 0x491bad
mov ecx, dword [esp + 0x8c]
mov edi, dword [esp + 0x90]
nop dword [eax]
mov al, byte [ecx + edi]
cmp al, byte [ecx]
jne 0x491bad
inc ebp
inc ecx
cmp ebp, edx
jb 0x491ba0
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
add ebx, ebp
mov ecx, ebx
cmp dword [esp + 0x44], ecx
cmovae ebx, dword [esp + 0x44]
or eax, 0xffffffff
sub eax, edx
shl ecx, 5
add ebp, eax
mov dword [esp + 0x18], ebx
imul eax, dword [esp + 0x80], 0x110
lea edi, [ecx + esi]
mov ecx, dword [esp + 0x1c]
add eax, ebp
mov eax, dword [esi + eax*4 + 0x78b0]
add eax, dword [esp + 0x38]
cmp eax, dword [edi + 0xbcb8]
jae 0x491c21
mov dword [edi + 0xbcb8], eax
lea eax, [edx + 1]
mov dword [edi + 0xbcc0], ebp
mov word [edi + 0xbcbe], ax
mov dword [edi + 0xbcc4], ecx
mov dword [esp + 0x18], ebx
jmp 0x491c21
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
inc ecx
mov dword [esp + 0x1c], ecx
cmp ecx, 4
jb 0x4918c2
mov edx, dword [esp + 0x48]
mov edi, dword [esp + 0x68]
cmp edi, edx
jbe 0x491c6c
xor eax, eax
xor ecx, ecx
mov edi, edx
cmp edx, dword [esi + 0x960]
jbe 0x491c5e
nop dword [eax]
add eax, 2
mov ecx, eax
cmp edx, dword [esi + eax*4 + 0x960]
ja 0x491c50
mov dword [esi + eax*4 + 0x960], edx
lea eax, [ecx + 2]
mov dword [esp + 0x3c], eax
mov ebp, dword [esp + 0x30]
cmp edi, ebp
jb 0x491fe9
mov eax, dword [esp + 0x84]
movzx eax, word [eax]
shr eax, 4
mov eax, dword [esi + eax*4 + 0x760]
add eax, dword [esp + 0x40]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x24]
add eax, edi
cmp ebx, eax
cmovae eax, ebx
xor edi, edi
mov ebx, eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x18], ebx
cmp ebp, dword [esi + 0x960]
jbe 0x491cd0
nop word [eax + eax]
add edi, 2
cmp ebp, dword [esi + edi*4 + 0x960]
ja 0x491cc0
mov dword [esp + 0x48], edi
lea eax, [edi*4]
mov edi, dword [esp + 0x30]
mov edx, dword [eax + esi + 0x964]
cmp edx, 0x20000
mov dword [esp + 0x40], eax
mov eax, edx
sbb ecx, ecx
mov dword [esp + 0x50], edx
and ecx, 0xfffffff6
add ecx, 0x10
shr eax, cl
movzx eax, byte [eax + esi + 0x2cb0]
lea eax, [eax + ecx*2]
imul ecx, dword [esp + 0x34], 0x110
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x4c]
add eax, ebp
add ebp, 3
shl eax, 8
add ecx, 0xd2b
mov dword [esp + 0x38], eax
add ecx, edi
add edi, dword [esp + 0x24]
shl edi, 5
add edi, 0xbcc4
add edi, esi
lea ecx, [esi + ecx*4]
mov eax, dword [ecx]
add eax, dword [esp + 0x84]
mov dword [esp + 0x30], ecx
mov ecx, 3
mov dword [esp + 0x68], eax
lea eax, [ebp - 5]
cmp eax, ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x5c], ebp
cmovb ecx, eax
mov eax, edx
cmp edx, 0x80
jae 0x491d7e
shl ecx, 7
and eax, 0x7f
add ecx, eax
mov ecx, dword [esi + ecx*4 + 0x1630]
jmp 0x491d96
shl ecx, 6
and eax, 0xf
add ecx, dword [esp + 0x64]
mov ecx, dword [esi + ecx*4 + 0x1230]
add ecx, dword [esi + eax*4 + 0x11f0]
mov eax, dword [esp + 0x68]
add eax, ecx
mov dword [esp + 0x68], eax
cmp eax, dword [edi - 0xc]
jae 0x491db9
mov dword [edi - 0xc], eax
lea eax, [ebp - 3]
mov dword [edi - 4], eax
lea eax, [edx + 4]
mov dword [edi], eax
xor eax, eax
mov word [edi - 6], ax
mov eax, dword [esp + 0x40]
lea ecx, [ebp - 3]
mov dword [esp + 0x44], ecx
cmp ecx, dword [eax + esi + 0x960]
jne 0x491fd1
mov ecx, dword [esp + 0x14]
lea edi, [ebp - 2]
add edi, dword [esi + 0x30]
sub ecx, edx
dec ecx
mov edx, ebp
cmp edi, dword [esp + 0x20]
mov dword [esp + 0x34], ecx
cmova edi, dword [esp + 0x20]
mov dword [esp + 0x40], edx
cmp ebp, edi
ja 0x491f85
mov eax, dword [esp + 0x14]
mov al, byte [eax + ebp - 2]
cmp al, byte [ecx + ebp - 2]
jne 0x491f85
mov eax, dword [esp + 0x14]
mov al, byte [eax + ebp - 1]
cmp al, byte [ecx + ebp - 1]
jne 0x491f85
cmp ebp, edi
jae 0x491e45
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x34]
sub ebx, eax
lea ecx, [eax + ebp]
nop
mov al, byte [ecx]
cmp al, byte [ebx + ecx]
jne 0x491e3d
inc edx
inc ecx
cmp edx, edi
jb 0x491e30
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x40], edx
mov edi, dword [esp + 0x4c]
lea eax, [esi + 0x760]
push eax
movzx eax, byte [ecx + ebp - 3]
add edi, 0xfffffffd
mov ecx, dword [esi + 0x94]
add edi, ebp
and edi, dword [esi + 0x4c]
push eax
mov eax, dword [esp + 0x1c]
movzx edx, byte [eax + ebp - 3]
movzx eax, byte [eax + ebp - 4]
add eax, dword [esp + 0x40]
and eax, dword [esi + 0x48]
shl eax, cl
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x50]
lea ecx, [eax + ecx*2]
call fcn.00492910
mov ebp, eax
mov ebx, dword [esp + 0x40]
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
add edx, ebx
movzx ecx, byte [eax + str._a_a_a_a_a_a_a_n_n_n_n_n_b_b_b_b_b_b_b_v_v_v_v_v_t_t_t_t_t_t_t_v_v_v_v_v]
mov eax, edx
shl ecx, 4
add ecx, edi
inc edi
and edi, dword [esi + 0x4c]
movzx ecx, word [esi + ecx*2 + 0x1eb0]
shr ecx, 4
add ebp, dword [esi + ecx*4 + 0x760]
add ebp, dword [esp + 0x68]
cmp dword [esp + 0x18], edx
movzx ecx, word [esi + edi*2 + 0x20b0]
cmovae eax, dword [esp + 0x18]
xor ecx, 0x7f0
mov dword [esp + 0x18], eax
or eax, 0xffffffff
sub eax, dword [esp + 0x44]
add ebx, eax
shr ecx, 4
movzx eax, word [esi + edi*2 + 0x1f30]
xor eax, 0x7f0
shl edx, 5
shr eax, 4
mov ecx, dword [esi + ecx*4 + 0x760]
add ecx, dword [esi + eax*4 + 0x760]
movzx eax, word [esi + 0x1e58]
xor eax, 0x7f0
shr eax, 4
add ecx, dword [esi + eax*4 + 0x760]
movzx eax, word [esi + 0x1e70]
shr eax, 4
add ecx, dword [esi + eax*4 + 0x760]
imul eax, edi, 0x110
add eax, ebx
add ecx, dword [esi + eax*4 + 0x78b0]
add ecx, ebp
mov ebp, dword [esp + 0x5c]
cmp ecx, dword [edx + esi + 0xbcb8]
jae 0x491f81
mov eax, dword [esp + 0x44]
inc eax
mov dword [edx + esi + 0xbcc0], ebx
mov ebx, dword [esp + 0x18]
mov word [edx + esi + 0xbcbe], ax
mov eax, dword [esp + 0x50]
add eax, 4
mov dword [edx + esi + 0xbcb8], ecx
mov dword [edx + esi + 0xbcc4], eax
mov dword [esp + 0x18], ebx
jmp 0x491f85
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x48]
add edi, 2
mov dword [esp + 0x48], edi
cmp edi, dword [esp + 0x3c]
je 0x491fe9
lea eax, [edi*4]
mov edi, dword [esp + 0x28]
mov edx, dword [eax + esi + 0x964]
cmp edx, 0x20000
mov dword [esp + 0x40], eax
mov eax, edx
sbb ecx, ecx
mov dword [esp + 0x50], edx
and ecx, 0xfffffff6
add ecx, 0x10
shr eax, cl
movzx eax, byte [eax + esi + 0x2cb0]
lea eax, [eax + ecx*2]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x30]
add edi, 0x20
add dword [esp + 0x38], 0x100
add ecx, 4
inc ebp
jmp 0x491d3d
mov ebp, dword [esp + 0x24]
inc ebp
mov dword [esp + 0x24], ebp
cmp ebp, ebx
jne 0x491350
jmp 0x492059
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x24], eax
mov dword [esi + 0x20], ecx
jmp 0x492059
mov eax, ebp
shl eax, 5
mov edi, dword [eax + esi + 0xbcb8]
mov eax, dword [esp + 0x24]
lea edx, [eax + 1]
cmp edx, ebx
ja 0x492045
nop
mov eax, edx
shl eax, 5
mov ecx, dword [eax + esi + 0xbcb8]
cmp edi, ecx
mov eax, edx
cmovb eax, ebp
inc edx
cmp edi, ecx
mov ebp, eax
cmovb ecx, edi
mov edi, ecx
cmp edx, ebx
jbe 0x492020
mov eax, dword [esp + 0x24]
mov edx, ebp
sub edx, eax
je 0x492055
mov ecx, dword [esi]
mov eax, dword [esi + 0x14]
add dword [esi + 0x34], edx
call eax
mov dword [esp + 0x24], ebp
mov eax, ebx
shl eax, 5
add eax, 0xbcb8
add eax, esi
nop word [eax + eax]
mov dword [eax], 0x40000000
lea eax, [eax - 0x20]
sub ebx, 1
jne 0x492070
lea ebx, [ebp + 1]
lea edi, [ebx + 0x5e6]
mov dword [esi + 0x1c], ebx
shl edi, 5
lea edx, [esi + 0xbcc4]
mov eax, ebx
add edi, esi
shl eax, 5
add edx, eax
nop dword [eax]
mov eax, dword [esp + 0x24]
mov ecx, ebp
add eax, 0x5e6
shl ecx, 5
shl eax, 5
mov ebp, dword [ecx + esi + 0xbcc4]
mov eax, dword [eax + esi]
movzx ecx, word [ecx + esi + 0xbcbe]
sub dword [esp + 0x24], eax
test ecx, ecx
je 0x492102
sub dword [esp + 0x24], ecx
sub edi, 0x20
dec ebx
sub edx, 0x20
mov dword [edi], eax
mov eax, ecx
cmp ecx, 1
jne 0x4920e6
mov dword [edx], ebp
or ebp, 0xffffffff
jmp 0x492102
mov dword [edx], 0
lea eax, [ecx - 1]
sub edx, 0x20
dec ebx
sub edi, 0x20
mov dword [edx], 0xffffffff
mov dword [edi], 1
cmp dword [esp + 0x24], 0
je 0x49211a
sub edx, 0x20
dec ebx
sub edi, 0x20
mov dword [edx], ebp
mov dword [edi], eax
mov ebp, dword [esp + 0x24]
jmp 0x4920a0
pop edi
mov dword [esi + 0x90], ebp
mov dword [esi + 0x18], ebx
pop esi
pop ebp
pop ebx
add esp, 0x94
ret
pop edi
mov dword [esi + 0x90], 0xffffffff
mov eax, 1
pop esi
pop ebp
pop ebx
add esp, 0x94
ret