Function at 0x4c5cd0
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x318
mov eax, dword [0x4d700c]
xor eax, esp
mov dword [esp + 0x314], eax
push esi
mov cl, 0x4d
mov dword [esp + 0xd0], 0x104
mov al, 0x7c
mov byte [esp + 4], cl
xor al, cl
mov byte [esp + 6], 0
push edi
sub esp, 0x18
mov byte [esp + 0x21], al
mov edx, esp
mov byte [esp + 0x22], 0
xorps xmm0, xmm0
lea ecx, [esp + 0x21]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c5d30
sub ecx, esi
lea eax, [esp + 0x21]
push ecx
push eax
mov ecx, edx
call fcn.004b5700
lea ecx, [esp + 0x3c]
call fcn.004bece0
mov edi, eax
add esp, 0x18
cmp dword [edi + 0x14], 8
jb 0x4c5d5c
mov edi, dword [edi]
mov cl, 7
mov byte [esp + 0xa], 0
mov al, 0x5b
mov byte [esp + 8], cl
xor al, cl
mov byte [esp + 0xa], 0
sub esp, 0x18
mov byte [esp + 0x21], al
mov edx, esp
lea ecx, [esp + 0x21]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c5d94
sub ecx, esi
lea eax, [esp + 0x21]
push ecx
push eax
mov ecx, edx
call fcn.004b5700
lea ecx, [esp + 0x6c]
call fcn.004bece0
mov esi, eax
add esp, 0x18
cmp dword [esi + 0x14], 8
jb 0x4c5dc0
mov esi, dword [esi]
mov byte [esp + 0x10], 0x40
mov al, 0x13
xor al, byte [esp + 0x10]
mov cl, 0x2f
xor cl, byte [esp + 0x10]
mov dl, 0x26
mov byte [esp + 0x11], al
mov ah, 0x34
mov byte [esp + 0x12], cl
mov ch, 0x37
mov cl, byte [esp + 0x10]
mov dh, 0x21
mov byte [esp + 0x23], 0x32
xor dl, cl
mov al, byte [esp + 0x23]
xor ah, cl
xor al, cl
mov byte [esp + 0xe], 0x25
mov byte [esp + 0x17], al
xor dh, cl
mov al, byte [esp + 0xe]
xor ch, cl
xor al, cl
mov byte [esp + 0xf], 0x1c
mov byte [esp + 0x18], al
xorps xmm0, xmm0
mov al, byte [esp + 0xf]
xor al, cl
mov byte [esp + 0x13], dl
sub esp, 0x18
mov byte [esp + 0x2e], dh
mov edx, esp
mov byte [esp + 0x2d], ch
lea ecx, [esp + 0x29]
mov byte [esp + 0x2c], ah
mov byte [esp + 0x31], al
lea eax, [ecx + 1]
mov byte [esp + 0x32], 0
movups xmmword [edx], xmm0
mov byte [esp + 0x32], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [esp + 0x20], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c5e58
sub ecx, dword [esp + 0x20]
lea eax, [esp + 0x29]
push ecx
push eax
mov ecx, edx
call fcn.004b5700
lea ecx, [esp + 0x54]
call fcn.004bece0
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4c5e86
mov edx, dword [edx]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [esp + 8], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c5e90
sub ecx, dword [esp + 8]
mov eax, 0x7ffffffe
sub eax, dword [0x4d70f0]
sar ecx, 1
cmp eax, ecx
jb 0x4c6ae7
push dword [0x4d70f0]
cmp dword [0x4d70f4], 8
mov eax, 0x4d70e0
cmovae eax, dword [0x4d70e0]
push eax
push ecx
push edx
push ecx
push dword [esp + 0x30]
lea ecx, [esp + 0xf0]
call fcn.004c4750
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c5ee6
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [esp + 0xe0]
call fcn.004c4370
mov dword [esp + 0x80], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x70], xmm0
xor ecx, ecx
mov dword [esp + 0x84], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x80], xmm0
mov word [eax], cx
lea ecx, [esp + 0x70]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov eax, 0x4d70e0
cmp dword [0x4d70f4], 8
push dword [0x4d70f0]
cmovae eax, dword [0x4d70e0]
push eax
call fcn.004c4370
mov dword [esp + 0x100], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0xf0], xmm0
xor ecx, ecx
mov dword [esp + 0x104], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xf0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x100], xmm0
mov word [eax], cx
mov ecx, edi
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c5fc0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [esp + 0xf8]
call fcn.004c4370
mov dword [esp + 0xa0], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x90], xmm0
xor ecx, ecx
mov dword [esp + 0xa4], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x90], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0xa0], xmm0
mov word [eax], cx
lea ecx, [esp + 0xf0]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
call fcn.004b4ab0
lea ecx, [esp + 0x70]
call fcn.004b4ab0
lea ecx, [esp + 0xd8]
call fcn.004b4ab0
lea ecx, [esp + 0x3c]
call fcn.004b4ab0
lea ecx, [esp + 0x54]
call fcn.004b4ab0
lea ecx, [esp + 0x24]
call fcn.004b4ab0
mov edx, dword [0x4d7878]
xorps xmm0, xmm0
movaps xmmword [esp + 0xb0], xmm0
xor edi, edi
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0xf
mov eax, dword [edx + 0x3c]
mov byte [esp + 0xb0], 0
mov eax, dword [eax + edx + 0x78]
add eax, edx
mov dword [esp + 8], eax
mov esi, dword [eax + 0x20]
add esi, edx
nop dword [eax]
mov ecx, dword [esi]
add ecx, edx
mov edx, 0x4e1c5fec
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c60dd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c60c0
cmp edx, 0x96fb646d
je 0x4c60e9
mov edx, dword [0x4d7878]
inc edi
add esi, 4
jmp 0x4c60b0
mov esi, dword [esp + 8]
mov edx, dword [0x4d7878]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + edx]
lea eax, [esp + 0x90]
add ecx, edx
cmp dword [esp + 0xa4], 8
lea edx, [esp + 0x6c]
cmovae eax, dword [esp + 0x90]
push edx
push 0x101
push 0
push eax
push 0x80000001
call ecx
test eax, eax
jne 0x4c6a89
mov cl, 0x54
mov byte [esp + 0xa], 0
mov al, 0x65
mov byte [esp + 8], cl
xor al, cl
mov byte [esp + 0xa], 0
sub esp, 0x18
mov byte [esp + 0x21], al
mov edx, esp
lea ecx, [esp + 0x21]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c6173
sub ecx, esi
lea eax, [esp + 0x21]
push ecx
push eax
mov ecx, edx
call fcn.004b5700
lea ecx, [esp + 0x3c]
call fcn.004bece0
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4c619f
mov edx, dword [edx]
mov esi, dword [0x4d70f0]
mov ecx, edx
lea edi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c61b0
sub ecx, edi
mov eax, 0x7ffffffe
sar ecx, 1
sub eax, esi
cmp eax, ecx
jb 0x4c6aec
cmp dword [0x4d70f4], 8
mov eax, 0x4d70e0
push ecx
cmovae eax, dword [0x4d70e0]
push edx
push esi
push eax
push ecx
push dword [esp + 0x30]
lea ecx, [esp + 0x88]
call fcn.004c4750
lea ecx, [esp + 0x90]
call fcn.004b4ab0
movaps xmm0, xmmword [esp + 0x70]
lea ecx, [esp + 0x70]
movaps xmmword [esp + 0x90], xmm0
xor eax, eax
movq xmm0, qword [esp + 0x80]
movq qword [esp + 0xa0], xmm0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 7
mov word [esp + 0x70], ax
call fcn.004b4ab0
lea ecx, [esp + 0x24]
call fcn.004b4ab0
mov edx, dword [0x4d7878]
xor edi, edi
mov eax, dword [edx + 0x3c]
mov eax, dword [eax + edx + 0x78]
add eax, edx
mov dword [esp + 8], eax
mov esi, dword [eax + 0x20]
add esi, edx
nop word [eax + eax]
mov ecx, dword [esi]
add ecx, edx
mov edx, 0x7ad1c071
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c629d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c6280
cmp edx, 0xe800d6e2
je 0x4c62a9
mov edx, dword [0x4d7878]
inc edi
add esi, 4
jmp 0x4c6270
mov esi, dword [esp + 8]
mov edx, dword [0x4d7878]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + edx]
lea eax, [esp + 0x90]
add ecx, edx
cmp dword [esp + 0xa4], 8
lea edx, [esp + 0xd4]
cmovae eax, dword [esp + 0x90]
push edx
lea edx, [esp + 0x114]
push edx
push 0
push 0
push eax
push dword [esp + 0x80]
call ecx
test eax, eax
jne 0x4c6a89
xor esi, esi
nop word [eax + eax]
movzx eax, byte [esp + esi*2 + 0x110]
lea ecx, [esp + 0xb0]
push eax
call fcn.004b4b30
inc esi
cmp esi, 0x208
jb 0x4c6310
sub esp, 0x18
lea eax, [esp + 0xc8]
mov ecx, esp
push eax
call fcn.004b4700
call fcn.004c58b0
add esp, 0x18
cmp eax, 1
jl 0x4c638c
sub esp, 0x1c
lea eax, [esp + 0xcc]
mov ecx, esp
push eax
call fcn.004b4700
mov edx, 1
lea ecx, [esp + 0x40]
call fcn.004c5790
add esp, 0x18
mov ecx, eax
call fcn.004c4860
add esp, 4
lea ecx, [esp + 0x24]
test eax, eax
setne byte [0x4d7019]
call fcn.004b4ab0
sub esp, 0x18
lea eax, [esp + 0xc8]
mov ecx, esp
push eax
call fcn.004b4700
call fcn.004c58b0
add esp, 0x18
cmp eax, 2
jl 0x4c63ea
sub esp, 0x1c
lea eax, [esp + 0xcc]
mov ecx, esp
push eax
call fcn.004b4700
mov edx, 2
lea ecx, [esp + 0x40]
call fcn.004c5790
add esp, 0x18
mov ecx, eax
call fcn.004c4860
add esp, 4
lea ecx, [esp + 0x24]
test eax, eax
setne byte [0x4d7018]
call fcn.004b4ab0
sub esp, 0x18
lea eax, [esp + 0xc8]
mov ecx, esp
push eax
call fcn.004b4700
call fcn.004c58b0
add esp, 0x18
cmp eax, 3
jl 0x4c6448
sub esp, 0x1c
lea eax, [esp + 0xcc]
mov ecx, esp
push eax
call fcn.004b4700
mov edx, 3
lea ecx, [esp + 0x40]
call fcn.004c5790
add esp, 0x18
mov ecx, eax
call fcn.004c4860
add esp, 4
lea ecx, [esp + 0x24]
test eax, eax
setne byte [0x4d77c6]
call fcn.004b4ab0
push 0
push 0x4c9469
lea ecx, [esp + 0xb8]
call fcn.004b4cc0
mov cl, 0x6c
mov byte [esp + 0xa], 0
mov al, 0x5e
mov byte [esp + 8], cl
xor al, cl
mov byte [esp + 0xa], 0
sub esp, 0x18
mov byte [esp + 0x21], al
mov edx, esp
lea ecx, [esp + 0x21]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c6493
sub ecx, esi
lea eax, [esp + 0x21]
push ecx
push eax
mov ecx, edx
call fcn.004b5700
lea ecx, [esp + 0x3c]
call fcn.004bece0
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4c64bf
mov edx, dword [edx]
mov esi, dword [0x4d70f0]
mov ecx, edx
lea edi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c64d0
sub ecx, edi
mov eax, 0x7ffffffe
sar ecx, 1
sub eax, esi
cmp eax, ecx
jb 0x4c6af1
cmp dword [0x4d70f4], 8
mov eax, 0x4d70e0
push ecx
cmovae eax, dword [0x4d70e0]
push edx
push esi
push eax
push ecx
push dword [esp + 0x30]
lea ecx, [esp + 0x88]
call fcn.004c4750
lea ecx, [esp + 0x90]
call fcn.004b4ab0
movaps xmm0, xmmword [esp + 0x70]
lea ecx, [esp + 0x70]
movaps xmmword [esp + 0x90], xmm0
xor eax, eax
movq xmm0, qword [esp + 0x80]
movq qword [esp + 0xa0], xmm0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 7
mov word [esp + 0x70], ax
call fcn.004b4ab0
lea ecx, [esp + 0x24]
call fcn.004b4ab0
cmp byte [0x4d7018], 0
jne 0x4c65f8
mov edi, dword [0x4d7878]
xor ecx, ecx
mov dword [esp + 8], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x8e15a0a4
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c65c4
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c65a7
cmp edx, 0xf99910c9
je 0x4c65cd
inc dword [esp + 8]
add esi, 4
jmp 0x4c6597
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 8]
push dword [esp + 0x6c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
test eax, eax
jne 0x4c6a89
mov edi, dword [0x4d7878]
xor ecx, ecx
mov dword [esp + 8], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x73a37513
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c6643
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c6626
cmp edx, 0x28754b98
je 0x4c664c
inc dword [esp + 8]
add esi, 4
jmp 0x4c6616
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea edx, [esp + 0xd4]
push edx
lea edx, [esp + 0x114]
push edx
lea eax, [eax + ecx*4]
mov ecx, dword [eax + edi]
lea eax, [esp + 0x98]
add ecx, edi
cmp dword [esp + 0xac], 8
push 0
cmovae eax, dword [esp + 0x9c]
push 0
push eax
push dword [esp + 0x80]
call ecx
test eax, eax
jne 0x4c6a89
xor esi, esi
nop dword [eax + eax]
movzx eax, byte [esp + esi*2 + 0x110]
lea ecx, [esp + 0xb0]
push eax
call fcn.004b4b30
inc esi
cmp esi, 0x208
jb 0x4c66b0
sub esp, 0x18
lea eax, [esp + 0xc8]
mov ecx, esp
push eax
call fcn.004b4700
call fcn.004c58b0
add esp, 0x18
cmp eax, 1
jl 0x4c6918
sub esp, 0x18
lea eax, [esp + 0xc8]
mov ecx, esp
push eax
call fcn.004b4700
mov edx, 1
lea ecx, [esp + 0xf0]
call fcn.004c5790
mov byte [esp + 0x28], 0xc
mov cl, 0x40
xor cl, byte [esp + 0x28]
mov al, 0x3e
xor al, byte [esp + 0x28]
mov dl, 0x45
mov byte [esp + 0x29], al
mov ch, 0x42
mov byte [esp + 0x2a], cl
mov dh, 0x4f
mov cl, byte [esp + 0x28]
mov ah, 0x56
mov byte [esp + 0x27], 0x78
xor ch, cl
mov al, byte [esp + 0x27]
xor dh, cl
xor al, cl
mov byte [esp + 0x26], dl
xor dl, cl
mov byte [esp + 0x2f], al
mov al, byte [esp + 0x26]
xor ah, cl
add esp, 0x18
mov byte [esp + 0x15], ch
xor al, cl
mov byte [esp + 0x19], 0
xorps xmm0, xmm0
mov byte [esp + 0x13], dl
lea ecx, [esp + 0x11]
mov byte [esp + 0x16], dh
mov byte [esp + 0x14], ah
lea edx, [ecx + 1]
mov byte [esp + 0x18], al
mov byte [esp + 0x19], 0
movaps xmmword [esp + 0x70], xmm0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c67a0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0x78]
call fcn.004b5700
mov byte [esp + 0x10], 0x30
mov al, 0x79
xor al, byte [esp + 0x10]
mov cl, 0x51
xor cl, byte [esp + 0x10]
mov ah, 0x54
mov byte [esp + 0x11], al
mov ch, 0x53
mov byte [esp + 0x12], cl
mov dl, 0x42
mov cl, byte [esp + 0x10]
mov dh, 0x5d
mov byte [esp + 0xf], 0x73
xor ah, cl
mov al, byte [esp + 0xf]
xor ch, cl
xor al, cl
mov byte [esp + 0xe], 0x6a
mov byte [esp + 0x17], al
xor dl, cl
mov al, byte [esp + 0xe]
xor dh, cl
xor al, cl
mov byte [esp + 0x14], ah
mov byte [esp + 0x18], al
lea eax, [esp + 0x11]
mov byte [esp + 0x15], ch
lea ecx, [esp + 0x70]
mov byte [esp + 0x19], 0
push eax
mov byte [esp + 0x17], dl
mov byte [esp + 0x1a], dh
mov byte [esp + 0x1d], 0
call fcn.004b44f0
mov ecx, dword [esp + 0x84]
cmp ecx, 0x10
jb 0x4c6866
mov edx, dword [esp + 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c685c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4c685c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c718d
add esp, 8
cmp dword [esp + 0xec], 8
lea ecx, [esp + 0xd8]
mov eax, dword [esp + 0xe8]
cmovae ecx, dword [esp + 0xd8]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0xd8]
cmovae ecx, dword [esp + 0xd8]
push ecx
push eax
push ecx
lea ecx, [esp + 0xfc]
call fcn.004b5310
cmp dword [esp + 0x104], 0x10
lea eax, [esp + 0xf0]
push dword [esp + 0x100]
cmovae eax, dword [esp + 0xf4]
mov ecx, 0x4d7098
push eax
call fcn.004b4cc0
mov ecx, dword [esp + 0x104]
cmp ecx, 0x10
jb 0x4c690c
mov edx, dword [esp + 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c6902
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4c6902
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c718d
add esp, 8
lea ecx, [esp + 0xd8]
call fcn.004b4ab0
sub esp, 0x18
lea eax, [esp + 0xc8]
mov ecx, esp
push eax
call fcn.004b4700
call fcn.004c58b0
add esp, 0x18
cmp eax, 2
jl 0x4c6a0f
sub esp, 0x18
lea eax, [esp + 0xc8]
mov ecx, esp
push eax
call fcn.004b4700
mov edx, 2
lea ecx, [esp + 0x88]
call fcn.004c5790
cmp dword [esp + 0x9c], 8
lea ecx, [esp + 0x88]
mov eax, dword [esp + 0x98]
cmovae ecx, dword [esp + 0x88]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x88]
cmovae ecx, dword [esp + 0x88]
add esp, 0x14
push eax
push ecx
lea ecx, [esp + 0xe4]
call fcn.004b5310
cmp dword [esp + 0xec], 0x10
lea eax, [esp + 0xd8]
push dword [esp + 0xe8]
cmovae eax, dword [esp + 0xdc]
mov ecx, 0x4d70c8
push eax
call fcn.004b4cc0
mov ecx, dword [esp + 0xec]
cmp ecx, 0x10
jb 0x4c6a06
mov edx, dword [esp + 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c69fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4c69fc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c718d
add esp, 8
lea ecx, [esp + 0x70]
call fcn.004b4ab0
mov edi, dword [0x4d7878]
xor ecx, ecx
mov dword [esp + 8], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x1c], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop dword [eax]
mov ecx, dword [esi]
mov edx, 0x34e99b39
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c6a5d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c6a40
cmp edx, 0x42b60e56
je 0x4c6a66
inc dword [esp + 8]
add esi, 4
jmp 0x4c6a30
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 8]
push dword [esp + 0x6c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov ecx, dword [esp + 0xc4]
cmp ecx, 0x10
jb 0x4c6ac7
mov edx, dword [esp + 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c6abd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4c6abd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c718d
add esp, 8
lea ecx, [esp + 0x90]
call fcn.004b4ab0
mov ecx, dword [esp + 0x31c]
pop edi
pop esi
xor ecx, esp
call fcn.004c6ef9
mov esp, ebp
pop ebp
ret
call fcn.004a86d0
call fcn.004a86d0
call fcn.004a86d0
int3