Function at 0x4ca0c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x338
mov eax, dword [0x4dc00c]
xor eax, esp
mov dword [esp + 0x334], eax
push esi
mov cl, 0x35
mov dword [esp + 0x108], 0x104
mov al, 4
mov byte [esp + 0x28], cl
xor al, cl
mov byte [esp + 0x2a], 0
push edi
sub esp, 0x18
mov byte [esp + 0x45], al
mov edx, esp
mov byte [esp + 0x46], 0
xorps xmm0, xmm0
lea ecx, [esp + 0x45]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ca120
sub ecx, esi
lea eax, [esp + 0x45]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x4c]
call fcn.004c2240
mov edi, eax
add esp, 0x18
cmp dword [edi + 0x14], 8
jb 0x4ca14c
mov edi, dword [edi]
mov cl, 0xc
mov byte [esp + 0x2e], 0
mov al, 0x50
mov byte [esp + 0x2c], cl
xor al, cl
mov byte [esp + 0x2e], 0
sub esp, 0x18
mov byte [esp + 0x45], al
mov edx, esp
lea ecx, [esp + 0x45]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ca184
sub ecx, esi
lea eax, [esp + 0x45]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x7c]
call fcn.004c2240
mov esi, eax
add esp, 0x18
cmp dword [esi + 0x14], 8
jb 0x4ca1b0
mov esi, dword [esi]
mov byte [esp + 0x18], 0x33
mov al, 0x60
xor al, byte [esp + 0x18]
mov cl, 0x5c
xor cl, byte [esp + 0x18]
mov dl, 0x55
mov byte [esp + 0x19], al
mov ah, 0x47
mov byte [esp + 0x1a], cl
mov ch, 0x44
mov cl, byte [esp + 0x18]
mov dh, 0x52
mov byte [esp + 0x33], 0x41
xor dl, cl
mov al, byte [esp + 0x33]
xor ah, cl
xor al, cl
mov byte [esp + 0x32], 0x56
mov byte [esp + 0x1f], al
xor dh, cl
mov al, byte [esp + 0x32]
xor ch, cl
xor al, cl
mov byte [esp + 0x17], 0x6f
mov byte [esp + 0x20], al
xorps xmm0, xmm0
mov al, byte [esp + 0x17]
xor al, cl
mov byte [esp + 0x1b], dl
sub esp, 0x18
mov byte [esp + 0x36], dh
mov edx, esp
mov byte [esp + 0x35], ch
lea ecx, [esp + 0x31]
mov byte [esp + 0x34], ah
mov byte [esp + 0x39], al
lea eax, [ecx + 1]
mov byte [esp + 0x3a], 0
movups xmmword [edx], xmm0
mov byte [esp + 0x3a], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [esp + 0x44], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ca248
sub ecx, dword [esp + 0x44]
lea eax, [esp + 0x31]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x64]
call fcn.004c2240
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4ca276
mov edx, dword [edx]
mov ecx, edx
lea eax, [ecx + 2]
mov dword [esp + 0x2c], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4ca280
sub ecx, dword [esp + 0x2c]
mov eax, 0x7ffffffe
sub eax, dword [0x4dc0f0]
sar ecx, 1
cmp eax, ecx
jb 0x4cb9b7
push dword [0x4dc0f0]
cmp dword [0x4dc0f4], 8
mov eax, 0x4dc0e0
cmovae eax, dword [0x4dc0e0]
push eax
push ecx
push edx
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x128]
call fcn.004c8500
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4ca2d6
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [esp + 0x118]
call fcn.004c8120
mov dword [esp + 0xb0], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0xa0], xmm0
xor ecx, ecx
mov dword [esp + 0xb4], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0xb0], xmm0
mov word [eax], cx
lea ecx, [esp + 0xa0]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov eax, 0x4dc0e0
cmp dword [0x4dc0f4], 8
push dword [0x4dc0f0]
cmovae eax, dword [0x4dc0e0]
push eax
call fcn.004c8120
mov dword [esp + 0x90], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x80], xmm0
xor ecx, ecx
mov dword [esp + 0x94], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x80], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x90], xmm0
mov word [eax], cx
mov ecx, edi
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4ca3c0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [esp + 0x88]
call fcn.004c8120
mov dword [esp + 0xd0], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0xc0], xmm0
xor ecx, ecx
mov dword [esp + 0xd4], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xc0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0xd0], xmm0
mov word [eax], cx
lea ecx, [esp + 0x80]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
call fcn.004b7bf0
lea ecx, [esp + 0xa0]
call fcn.004b7bf0
lea ecx, [esp + 0x110]
call fcn.004b7bf0
lea ecx, [esp + 0x4c]
call fcn.004b7bf0
lea ecx, [esp + 0x64]
call fcn.004b7bf0
lea ecx, [esp + 0x34]
call fcn.004b7bf0
mov edx, dword [0x4dc878]
xorps xmm0, xmm0
movaps xmmword [esp + 0xe0], xmm0
xor edi, edi
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0xf
mov eax, dword [edx + 0x3c]
mov byte [esp + 0xe0], 0
mov eax, dword [eax + edx + 0x78]
add eax, edx
mov dword [esp + 0x2c], eax
mov esi, dword [eax + 0x20]
add esi, edx
nop dword [eax]
mov ecx, dword [esi]
add ecx, edx
mov edx, 0x80d60222
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ca4dd
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ca4c0
cmp edx, 0xced8d56f
je 0x4ca4e9
mov edx, dword [0x4dc878]
inc edi
add esi, 4
jmp 0x4ca4b0
mov esi, dword [esp + 0x2c]
mov edx, dword [0x4dc878]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + edx]
lea eax, [esp + 0xc0]
add ecx, edx
cmp dword [esp + 0xd4], 8
lea edx, [esp + 0x7c]
cmovae eax, dword [esp + 0xc0]
push edx
push 0x101
push 0
push eax
push 0x80000001
call ecx
test eax, eax
jne 0x4cb959
mov cl, 0x60
mov byte [esp + 0x2e], 0
mov al, 0x51
mov byte [esp + 0x2c], cl
xor al, cl
mov byte [esp + 0x2e], 0
sub esp, 0x18
mov byte [esp + 0x45], al
mov edx, esp
lea ecx, [esp + 0x45]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ca573
sub ecx, esi
lea eax, [esp + 0x45]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x4c]
call fcn.004c2240
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4ca59f
mov edx, dword [edx]
mov esi, dword [0x4dc0f0]
mov ecx, edx
lea edi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4ca5b0
sub ecx, edi
mov eax, 0x7ffffffe
sar ecx, 1
sub eax, esi
cmp eax, ecx
jb 0x4cb9bc
cmp dword [0x4dc0f4], 8
mov eax, 0x4dc0e0
push ecx
cmovae eax, dword [0x4dc0e0]
push edx
push esi
push eax
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x98]
call fcn.004c8500
lea ecx, [esp + 0xc0]
call fcn.004b7bf0
movaps xmm0, xmmword [esp + 0x80]
lea ecx, [esp + 0x80]
movaps xmmword [esp + 0xc0], xmm0
xor eax, eax
movq xmm0, qword [esp + 0x90]
movq qword [esp + 0xd0], xmm0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 7
mov word [esp + 0x80], ax
call fcn.004b7bf0
lea ecx, [esp + 0x34]
call fcn.004b7bf0
mov edx, dword [0x4dc878]
xor edi, edi
mov eax, dword [edx + 0x3c]
mov eax, dword [eax + edx + 0x78]
add eax, edx
mov dword [esp + 0x2c], eax
mov esi, dword [eax + 0x20]
add esi, edx
mov ecx, dword [esi]
add ecx, edx
mov edx, 0x6d46f3af
mov al, byte [ecx]
inc ecx
test al, al
je 0x4ca6a0
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4ca683
cmp edx, 0xfd4c89f4
je 0x4ca6ac
mov edx, dword [0x4dc878]
inc edi
add esi, 4
jmp 0x4ca673
mov esi, dword [esp + 0x2c]
mov edx, dword [0x4dc878]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + edx]
lea eax, [esp + 0xc0]
add ecx, edx
cmp dword [esp + 0xd4], 8
lea edx, [esp + 0x10c]
cmovae eax, dword [esp + 0xc0]
push edx
lea edx, [esp + 0x134]
push edx
push 0
push 0
push eax
push dword [esp + 0x90]
call ecx
test eax, eax
jne 0x4cb959
xor esi, esi
nop word [eax + eax]
movzx eax, byte [esp + esi*2 + 0x130]
lea ecx, [esp + 0xe0]
push eax
call fcn.004b7c70
inc esi
cmp esi, 0x208
jb 0x4ca710
sub esp, 0x18
lea eax, [esp + 0xf8]
mov ecx, esp
push eax
call fcn.004b7840
call fcn.004c9d00
add esp, 0x18
cmp eax, 1
jl 0x4ca78c
sub esp, 0x20
lea eax, [esp + 0x100]
mov ecx, esp
push eax
call fcn.004b7840
mov edx, 1
lea ecx, [esp + 0x54]
call fcn.004c98b0
add esp, 0x1c
mov ecx, eax
call fcn.004c8610
add esp, 4
lea ecx, [esp + 0x34]
test eax, eax
setne byte [0x4dc019]
call fcn.004b7bf0
mov byte [esp + 0x18], 0x4a
mov al, 0x23
xor al, byte [esp + 0x18]
mov cl, 0x3b
mov byte [esp + 0x19], al
mov dl, 3
mov al, byte [esp + 0x18]
mov ch, 7
mov dh, 0x78
mov byte [esp + 0x17], 0x7a
xor cl, al
mov byte [esp + 0x20], 0
xor dl, al
mov byte [esp + 0x1a], cl
xor ch, al
mov byte [esp + 0x1b], dl
xor dh, al
mov byte [esp + 0x1d], ch
mov ah, 6
mov byte [esp + 0x1e], dh
xor ah, al
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x17]
lea ecx, [esp + 0x19]
xor al, byte [esp + 0x18]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [esp + 0x1c], ah
mov byte [esp + 0x1f], al
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ca810
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.004b8860
mov byte [esp + 0x18], 0x11
mov al, 0x68
xor al, byte [esp + 0x18]
mov cl, 0x56
xor cl, byte [esp + 0x18]
mov ah, 0x79
mov byte [esp + 0x19], al
mov ch, 0x6b
mov byte [esp + 0x1a], cl
mov dl, 0x48
mov cl, byte [esp + 0x18]
mov dh, 0x7b
mov byte [esp + 0x17], 0x76
xor ah, cl
mov al, byte [esp + 0x17]
xor ch, cl
xor al, cl
mov byte [esp + 0x32], 0x58
mov byte [esp + 0x1f], al
xor dl, cl
mov al, byte [esp + 0x32]
xor dh, cl
xor al, cl
mov byte [esp + 0x1c], ah
mov byte [esp + 0x20], al
lea eax, [esp + 0x19]
mov byte [esp + 0x1d], ch
lea ecx, [esp + 0x80]
mov byte [esp + 0x21], 0
push eax
mov byte [esp + 0x1f], dl
mov byte [esp + 0x22], dh
mov byte [esp + 0x25], 0
call fcn.004b7600
mov ecx, dword [esp + 0x94]
cmp ecx, 0x10
jb 0x4ca8df
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ca8d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4ca8d5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
sub esp, 0x18
lea eax, [esp + 0xf8]
mov ecx, esp
push eax
call fcn.004b7840
call fcn.004c9d00
add esp, 0x18
cmp eax, 2
jl 0x4ca93d
sub esp, 0x20
lea eax, [esp + 0x100]
mov ecx, esp
push eax
call fcn.004b7840
mov edx, 2
lea ecx, [esp + 0x54]
call fcn.004c98b0
add esp, 0x1c
mov ecx, eax
call fcn.004c8610
add esp, 4
lea ecx, [esp + 0x34]
test eax, eax
setne byte [0x4dc018]
call fcn.004b7bf0
mov byte [esp + 0x18], 0xa
mov cl, 0x3c
xor cl, byte [esp + 0x18]
mov al, 0x32
xor al, byte [esp + 0x18]
mov ch, 0x43
mov byte [esp + 0x19], al
mov dl, 0x50
mov byte [esp + 0x1a], cl
mov dh, 0x5a
mov cl, byte [esp + 0x18]
mov ah, 0x48
mov byte [esp + 0x17], 0x6f
xor dl, cl
mov al, byte [esp + 0x17]
xor ch, cl
xor al, cl
mov byte [esp + 0x32], 0x62
xor dh, cl
mov byte [esp + 0x1f], al
mov al, byte [esp + 0x32]
xor ah, cl
xor al, cl
mov byte [esp + 0x1d], ch
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x19]
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1e], dh
lea edx, [ecx + 1]
mov byte [esp + 0x1c], ah
mov byte [esp + 0x20], al
mov byte [esp + 0x21], 0
movaps xmmword [esp + 0x110], xmm0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ca9d0
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0x118]
call fcn.004b8860
mov byte [esp + 0x18], 0x25
mov al, 0x52
xor al, byte [esp + 0x18]
mov cl, 0x41
mov byte [esp + 0x19], al
mov dl, 0x6a
mov al, byte [esp + 0x18]
mov ch, 0x16
mov dh, 0x12
mov byte [esp + 0x17], 0x7f
xor cl, al
mov byte [esp + 0x20], 0
xor dl, al
mov byte [esp + 0x1a], cl
xor ch, al
mov byte [esp + 0x1b], dl
xor dh, al
mov byte [esp + 0x1d], ch
mov ah, 0x73
mov byte [esp + 0x1e], dh
xor ah, al
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x17]
lea ecx, [esp + 0x19]
xor al, byte [esp + 0x18]
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov byte [esp + 0x1c], ah
mov byte [esp + 0x1f], al
movaps xmmword [esp + 0xa0], xmm0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4caa70
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0xa8]
call fcn.004b8860
mov byte [esp + 0x18], 0x72
mov al, 0x1b
xor al, byte [esp + 0x18]
xor ch, ch
mov cl, 0x39
mov byte [esp + 0x19], al
mov al, byte [esp + 0x18]
mov dl, 8
mov ah, 0x28
mov byte [esp + 0x1f], 0
mov dh, 6
xor cl, al
xor dl, al
mov byte [esp + 0x1a], cl
xor ch, al
mov byte [esp + 0x1b], dl
xor ah, al
mov byte [esp + 0x1d], ch
xor dh, al
mov byte [esp + 0x1c], ah
mov byte [esp + 0x1e], dh
lea edx, [esp + 0x19]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x4caad2
mov edi, dword [esp + 0xb4]
lea eax, [esp + 0x19]
mov esi, dword [esp + 0xa0]
sub edx, ecx
push edx
mov edx, dword [esp + 0xb4]
lea ecx, [esp + 0xa4]
cmp edi, 0x10
push eax
cmovae ecx, esi
call fcn.004b8ef0
add esp, 8
test al, al
je 0x4cabc9
mov cl, 0x60
mov byte [esp + 0x18], 0x14
mov dh, cl
mov byte [esp + 0x17], 0x67
xor cl, byte [esp + 0x18]
mov al, 0x59
xor al, byte [esp + 0x18]
mov ch, 0x6e
mov byte [esp + 0x19], al
mov dl, 0x2c
mov al, byte [esp + 0x17]
mov ah, 0x24
mov byte [esp + 0x1a], cl
mov cl, byte [esp + 0x18]
xor al, cl
mov byte [esp + 0x32], 0x41
mov byte [esp + 0x1f], al
xor dl, cl
mov al, byte [esp + 0x32]
xor ch, cl
xor al, cl
mov byte [esp + 0x33], 0x57
mov byte [esp + 0x20], al
xor dh, cl
mov al, byte [esp + 0x33]
xor ah, cl
xor al, cl
mov byte [esp + 0x2b], 0x62
mov byte [esp + 0x21], al
mov al, byte [esp + 0x2b]
xor al, cl
mov byte [esp + 0x1d], ch
lea ecx, [esp + 0x19]
mov byte [esp + 0x23], 0
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1e], dh
lea edx, [ecx + 1]
mov byte [esp + 0x1c], ah
mov byte [esp + 0x22], al
mov byte [esp + 0x23], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4caba0
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0xa8]
call fcn.004b7e00
mov edi, dword [esp + 0xb4]
mov esi, dword [esp + 0xa0]
cmp edi, 0x10
jb 0x4cabf9
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x4cabef
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cb987
push ecx
push esi
call fcn.004cc05d
add esp, 8
mov ecx, dword [esp + 0x124]
cmp ecx, 0x10
jb 0x4cac35
mov edx, dword [esp + 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cac2b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cb987
push ecx
push edx
call fcn.004cc05d
add esp, 8
sub esp, 0x18
lea eax, [esp + 0xf8]
mov ecx, esp
push eax
call fcn.004b7840
call fcn.004c9d00
add esp, 0x18
cmp eax, 3
jl 0x4cac93
sub esp, 0x20
lea eax, [esp + 0x100]
mov ecx, esp
push eax
call fcn.004b7840
mov edx, 3
lea ecx, [esp + 0x54]
call fcn.004c98b0
add esp, 0x1c
mov ecx, eax
call fcn.004c8610
add esp, 4
lea ecx, [esp + 0x34]
test eax, eax
setne byte [0x4dc7c6]
call fcn.004b7bf0
push 0
push 0x4ce469
lea ecx, [esp + 0xe8]
call fcn.004b7e00
mov cl, 0x7e
mov byte [esp + 0x2e], 0
mov al, 0x4c
mov byte [esp + 0x2c], cl
xor al, cl
mov byte [esp + 0x2e], 0
sub esp, 0x18
mov byte [esp + 0x45], al
mov edx, esp
lea ecx, [esp + 0x45]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cace0
sub ecx, esi
lea eax, [esp + 0x45]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x4c]
call fcn.004c2240
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4cad0c
mov edx, dword [edx]
mov esi, dword [0x4dc0f0]
mov ecx, edx
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4cad17
sub ecx, edi
mov eax, 0x7ffffffe
sar ecx, 1
sub eax, esi
cmp eax, ecx
jb 0x4cb9c1
cmp dword [0x4dc0f4], 8
mov eax, 0x4dc0e0
push ecx
cmovae eax, dword [0x4dc0e0]
push edx
push esi
push eax
push ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x98]
call fcn.004c8500
lea ecx, [esp + 0xc0]
call fcn.004b7bf0
movaps xmm0, xmmword [esp + 0x80]
lea ecx, [esp + 0x80]
movaps xmmword [esp + 0xc0], xmm0
xor eax, eax
movq xmm0, qword [esp + 0x90]
movq qword [esp + 0xd0], xmm0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 7
mov word [esp + 0x80], ax
call fcn.004b7bf0
lea ecx, [esp + 0x34]
call fcn.004b7bf0
mov byte [esp + 0x18], 9
mov cl, 0x43
xor cl, byte [esp + 0x18]
mov al, 0x5c
xor al, byte [esp + 0x18]
mov ch, 0x6e
mov byte [esp + 0x19], al
mov dl, 0x3a
mov byte [esp + 0x1a], cl
mov dh, 0x79
mov cl, byte [esp + 0x18]
mov ah, 0x50
mov byte [esp + 0x2b], 0x68
xor dl, cl
mov al, byte [esp + 0x2b]
xor ch, cl
xor al, cl
mov byte [esp + 0x17], 0x68
xor dh, cl
mov byte [esp + 0x1f], al
mov al, byte [esp + 0x17]
xor ah, cl
xor al, cl
mov byte [esp + 0x1d], ch
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x19]
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1e], dh
lea edx, [ecx + 1]
mov byte [esp + 0x1c], ah
mov byte [esp + 0x20], al
mov byte [esp + 0x21], 0
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cae50
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.004b8860
mov byte [esp + 0x18], 8
mov cl, 0x45
xor cl, byte [esp + 0x18]
mov al, 0x41
xor al, byte [esp + 0x18]
mov ch, 0x7d
mov byte [esp + 0x19], al
mov dl, 0x64
mov byte [esp + 0x1a], cl
mov dh, 0x31
mov cl, byte [esp + 0x18]
mov ah, 0x44
mov byte [esp + 0x2b], 0x61
xor dl, cl
mov al, byte [esp + 0x2b]
xor dh, cl
xor al, cl
mov byte [esp + 0x17], ch
xor ch, cl
mov byte [esp + 0x1f], al
mov al, byte [esp + 0x17]
xor ah, cl
xor al, cl
mov byte [esp + 0x1d], ch
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x19]
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1e], dh
lea edx, [ecx + 1]
mov byte [esp + 0x1c], ah
mov byte [esp + 0x20], al
mov byte [esp + 0x21], 0
movaps xmmword [esp + 0xa0], xmm0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4caef7
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0xa8]
call fcn.004b8860
mov byte [esp + 0x18], 0x5f
mov al, 0x17
xor al, byte [esp + 0x18]
mov cl, 0x2b
xor cl, byte [esp + 0x18]
mov ah, 0x6d
mov byte [esp + 0x19], al
mov ch, 0xd
mov byte [esp + 0x1a], cl
mov dl, 0x1c
mov cl, byte [esp + 0x18]
mov dh, 0x14
mov byte [esp + 0x2b], 0x6f
xor ah, cl
mov al, byte [esp + 0x2b]
xor ch, cl
xor al, cl
mov byte [esp + 0x17], 0x1a
mov byte [esp + 0x1f], al
xor dl, cl
mov al, byte [esp + 0x17]
xor dh, cl
xor al, cl
mov byte [esp + 0x32], 0x3a
mov byte [esp + 0x20], al
mov al, byte [esp + 0x32]
xor al, cl
mov byte [esp + 0x1c], ah
mov byte [esp + 0x21], al
lea eax, [esp + 0x19]
mov byte [esp + 0x1d], ch
lea ecx, [esp + 0xa0]
mov byte [esp + 0x22], 0
push eax
mov byte [esp + 0x1f], dl
mov byte [esp + 0x22], dh
mov byte [esp + 0x26], 0
call fcn.004b7600
mov cl, 0x3b
mov dword [esp + 0x18], 0x4e7d7a3b
mov dword [esp + 0x1c], 0x5d59095d
xor eax, eax
mov dword [esp + 0x20], 0xe767e62
mov byte [esp + 0x24], 0
xor byte [esp + eax + 0x19], cl
inc eax
cmp eax, 0xb
jae 0x4cafc8
mov cl, byte [esp + 0x18]
jmp 0x4cafb8
lea edx, [esp + 0xa0]
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x19]
call fcn.004b8560
test al, al
je 0x4cb05b
mov byte [esp + 0x18], 0x62
mov al, 0x12
xor al, byte [esp + 0x18]
mov cl, 7
mov byte [esp + 0x19], al
mov dl, 0x11
mov al, byte [esp + 0x18]
mov ch, 9
mov dh, 0xf
mov byte [esp + 0x2b], 0x24
xor cl, al
mov byte [esp + 0x20], 0
xor dl, al
mov byte [esp + 0x1a], cl
xor ch, al
mov byte [esp + 0x1b], dl
xor dh, al
mov byte [esp + 0x1d], ch
mov ah, 0xb
mov byte [esp + 0x1e], dh
xor ah, al
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x2b]
lea ecx, [esp + 0x19]
xor al, byte [esp + 0x18]
lea edx, [ecx + 1]
mov byte [esp + 0x1c], ah
mov byte [esp + 0x1f], al
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cb040
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.004b7e00
mov ecx, dword [esp + 0xb4]
cmp ecx, 0x10
jb 0x4cb093
mov edx, dword [esp + 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cb089
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cb0df
push ecx
push edx
call fcn.004cc05d
add esp, 8
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0xf
mov byte [esp + 0xa0], 0
cmp ecx, 0x10
jb 0x4cb0ef
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cb0e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4cb0e5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
cmp byte [0x4dc018], 0
jne 0x4cb177
mov edi, dword [0x4dc878]
xor ecx, ecx
mov dword [esp + 0x2c], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x2602b046
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4cb143
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4cb126
cmp edx, 0x99d64eb7
je 0x4cb14c
inc dword [esp + 0x2c]
add esi, 4
jmp 0x4cb116
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
push dword [esp + 0x7c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
test eax, eax
jne 0x4cb959
mov edi, dword [0x4dc878]
xor ecx, ecx
mov dword [esp + 0x2c], ecx
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x218c3e79
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4cb1c2
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4cb1a5
cmp edx, 0x401b9b9a
je 0x4cb1cb
inc dword [esp + 0x2c]
add esi, 4
jmp 0x4cb195
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea edx, [esp + 0x10c]
push edx
lea edx, [esp + 0x134]
push edx
lea eax, [eax + ecx*4]
mov ecx, dword [eax + edi]
lea eax, [esp + 0xc8]
add ecx, edi
cmp dword [esp + 0xdc], 8
push 0
cmovae eax, dword [esp + 0xcc]
push 0
push eax
push dword [esp + 0x90]
call ecx
test eax, eax
jne 0x4cb959
xor esi, esi
nop word [eax + eax]
movzx eax, byte [esp + esi*2 + 0x130]
lea ecx, [esp + 0xe0]
push eax
call fcn.004b7c70
inc esi
cmp esi, 0x208
jb 0x4cb230
sub esp, 0x18
lea eax, [esp + 0xf8]
mov ecx, esp
push eax
call fcn.004b7840
call fcn.004c9d00
add esp, 0x18
cmp eax, 1
jl 0x4cb348
sub esp, 0x18
lea eax, [esp + 0xf8]
mov ecx, esp
push eax
call fcn.004b7840
mov edx, 1
lea ecx, [esp + 0xb8]
call fcn.004c98b0
cmp dword [esp + 0xcc], 8
lea ecx, [esp + 0xb8]
mov eax, dword [esp + 0xc8]
cmovae ecx, dword [esp + 0xb8]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0xb8]
cmovae ecx, dword [esp + 0xb8]
add esp, 0x14
push eax
push ecx
lea ecx, [esp + 0x8c]
call fcn.004b8460
cmp dword [esp + 0x94], 0x10
lea eax, [esp + 0x80]
push dword [esp + 0x90]
cmovae eax, dword [esp + 0x84]
mov ecx, 0x4dc098
push eax
call fcn.004b7e00
mov ecx, dword [esp + 0x94]
cmp ecx, 0x10
jb 0x4cb33c
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cb332
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4cb332
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
lea ecx, [esp + 0xa0]
call fcn.004b7bf0
sub esp, 0x18
lea eax, [esp + 0xf8]
mov ecx, esp
push eax
call fcn.004b7840
call fcn.004c9d00
add esp, 0x18
cmp eax, 2
jl 0x4cb551
sub esp, 0x18
lea eax, [esp + 0xf8]
mov ecx, esp
push eax
call fcn.004b7840
mov edx, 2
lea ecx, [esp + 0x128]
call fcn.004c98b0
add esp, 0x18
mov dword [esp + 0x18], 0x6908413b
mov cl, 0x3b
mov dword [esp + 0x1c], 0x79717456
mov dword [esp + 0x20], 0x6a757f43
xor eax, eax
mov byte [esp + 0x24], 0
xor byte [esp + eax + 0x19], cl
inc eax
cmp eax, 0xb
jae 0x4cb3c2
mov cl, byte [esp + 0x18]
jmp 0x4cb3b2
xorps xmm0, xmm0
mov byte [esp + 0x24], 0
lea ecx, [esp + 0x19]
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
lea edx, [ecx + 1]
mov dword [esp + 0x94], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cb3f0
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.004b8860
mov byte [esp + 0x18], 0x29
mov al, 0x1b
xor al, byte [esp + 0x18]
mov ah, 0x78
mov byte [esp + 0x19], al
mov cl, 0x6f
mov al, byte [esp + 0x18]
mov dl, 0x66
xor ah, al
mov byte [esp + 0x1f], 0
mov ch, 0x41
mov byte [esp + 0x1c], ah
mov dh, 0x60
mov byte [esp + 0x1f], 0
xor cl, al
xor ch, al
xor dl, al
mov byte [esp + 0x1a], cl
xor dh, al
mov byte [esp + 0x1d], ch
lea eax, [esp + 0x19]
mov byte [esp + 0x1b], dl
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0x22], dh
call fcn.004b7600
mov ecx, dword [esp + 0x94]
cmp ecx, 0x10
jb 0x4cb49f
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cb495
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4cb495
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
cmp dword [esp + 0x124], 8
lea ecx, [esp + 0x110]
mov eax, dword [esp + 0x120]
cmovae ecx, dword [esp + 0x110]
lea eax, [ecx + eax*2]
lea ecx, [esp + 0x110]
cmovae ecx, dword [esp + 0x110]
push ecx
push eax
push ecx
lea ecx, [esp + 0xac]
call fcn.004b8460
cmp dword [esp + 0xb4], 0x10
lea eax, [esp + 0xa0]
push dword [esp + 0xb0]
cmovae eax, dword [esp + 0xa4]
mov ecx, 0x4dc0c8
push eax
call fcn.004b7e00
mov ecx, dword [esp + 0xb4]
cmp ecx, 0x10
jb 0x4cb545
mov edx, dword [esp + 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cb53b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4cb53b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
lea ecx, [esp + 0x110]
call fcn.004b7bf0
mov cl, 0x24
mov byte [esp + 0x18], 0x65
mov byte [esp + 0x2b], cl
mov al, 0x53
xor al, byte [esp + 0x18]
mov ch, 0x1d
mov byte [esp + 0x17], cl
mov dl, 0x20
xor cl, byte [esp + 0x18]
mov dh, 0x11
mov byte [esp + 0x19], al
mov ah, 0x22
mov al, byte [esp + 0x2b]
xorps xmm0, xmm0
mov byte [esp + 0x1a], cl
mov cl, byte [esp + 0x18]
xor al, cl
mov byte [esp + 0x21], 0
xor dl, cl
mov byte [esp + 0x1f], al
mov al, byte [esp + 0x17]
xor ch, cl
xor dh, cl
mov byte [esp + 0x1d], ch
xor ah, cl
mov byte [esp + 0x1b], dl
xor al, cl
mov byte [esp + 0x1e], dh
lea ecx, [esp + 0x19]
mov byte [esp + 0x1c], ah
mov byte [esp + 0x20], al
lea edx, [ecx + 1]
mov byte [esp + 0x21], 0
movaps xmmword [esp + 0x80], xmm0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cb5e0
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.004b8860
mov byte [esp + 0x18], 0x5c
mov cl, 0x1d
xor cl, byte [esp + 0x18]
mov al, 0x3f
xor al, byte [esp + 0x18]
mov ch, 0x2f
mov byte [esp + 0x19], al
mov dl, 0x39
mov byte [esp + 0x1a], cl
mov dh, 0x19
mov cl, byte [esp + 0x18]
mov ah, 0x2c
mov byte [esp + 0x2b], 0x12
xor dl, cl
mov al, byte [esp + 0x2b]
xor ch, cl
xor al, cl
mov byte [esp + 0x17], 0x2b
xor dh, cl
mov byte [esp + 0x1f], al
mov al, byte [esp + 0x17]
xor ah, cl
xor al, cl
mov byte [esp + 0x1d], ch
xorps xmm0, xmm0
mov byte [esp + 0x21], 0
lea ecx, [esp + 0x19]
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1e], dh
lea edx, [ecx + 1]
mov byte [esp + 0x1c], ah
mov byte [esp + 0x20], al
mov byte [esp + 0x21], 0
movaps xmmword [esp + 0xa0], xmm0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cb688
sub ecx, edx
lea eax, [esp + 0x19]
push ecx
push eax
lea ecx, [esp + 0xa8]
call fcn.004b8860
mov al, 2
mov byte [esp + 0x18], 0x4f
mov byte [esp + 0x17], al
mov cl, 0x1a
xor al, byte [esp + 0x18]
mov ah, 0x7d
xor cl, byte [esp + 0x18]
mov ch, 0x7e
mov byte [esp + 0x19], al
mov dl, 0x29
mov byte [esp + 0x1a], cl
mov dh, 0x22
mov cl, byte [esp + 0x18]
mov byte [esp + 0x2b], 4
xor ah, cl
mov al, byte [esp + 0x2b]
xor ch, cl
xor al, cl
mov byte [esp + 0x1c], ah
mov byte [esp + 0x1f], al
xor dl, cl
mov al, byte [esp + 0x17]
xor dh, cl
xor al, cl
mov byte [esp + 0x1d], ch
mov byte [esp + 0x20], al
lea ecx, [esp + 0xa0]
lea eax, [esp + 0x19]
mov byte [esp + 0x21], 0
push eax
mov byte [esp + 0x1f], dl
mov byte [esp + 0x22], dh
mov byte [esp + 0x25], 0
call fcn.004b7600
mov byte [esp + 0x18], 0x32
mov cl, 2
xor cl, byte [esp + 0x18]
mov al, 0x46
xor al, byte [esp + 0x18]
mov dl, 0x74
mov byte [esp + 0x19], al
mov dh, 0x75
mov byte [esp + 0x1a], cl
mov ch, 0x45
mov cl, byte [esp + 0x18]
mov ah, 0x58
mov byte [esp + 0x2b], 0x4a
xor dl, cl
mov al, byte [esp + 0x2b]
xor dh, cl
xor al, cl
mov byte [esp + 0x17], 0x54
mov byte [esp + 0x1f], al
xor ah, cl
mov al, byte [esp + 0x17]
xor ch, cl
mov byte [esp + 0x1b], dl
xor al, cl
mov byte [esp + 0x1e], dh
lea edx, [esp + 0x19]
mov byte [esp + 0x21], 0
mov byte [esp + 0x1d], ch
lea ecx, [edx + 1]
mov byte [esp + 0x1c], ah
mov byte [esp + 0x20], al
mov byte [esp + 0x21], 0
mov al, byte [edx]
inc edx
test al, al
jne 0x4cb784
mov edi, dword [esp + 0xb4]
lea eax, [esp + 0x19]
mov esi, dword [esp + 0xa0]
sub edx, ecx
push edx
mov edx, dword [esp + 0xb4]
lea ecx, [esp + 0xa4]
cmp edi, 0x10
push eax
cmovae ecx, esi
call fcn.004b8ef0
add esp, 8
test al, al
je 0x4cb836
mov byte [esp + 0x18], 0x76
mov al, 0x27
xor al, byte [esp + 0x18]
mov cl, 0x37
mov byte [esp + 0x19], al
mov dl, 0xf
mov al, byte [esp + 0x18]
mov ah, 0x11
xor cl, al
mov byte [esp + 0x2b], 7
xor dl, al
mov byte [esp + 0x1a], cl
xor ah, al
mov byte [esp + 0x20], 0
mov ch, 0x26
mov byte [esp + 0x1c], ah
xor ch, al
mov byte [esp + 0x1b], dl
mov dh, 0x24
mov byte [esp + 0x1d], ch
xor dh, al
mov byte [esp + 0x20], 0
mov al, byte [esp + 0x2b]
lea ecx, [esp + 0x80]
xor al, byte [esp + 0x18]
mov byte [esp + 0x1f], al
lea eax, [esp + 0x19]
push eax
mov byte [esp + 0x22], dh
call fcn.004b7600
mov edi, dword [esp + 0xb4]
mov esi, dword [esp + 0xa0]
cmp edi, 0x10
jb 0x4cb862
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x4cb858
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4cb8ae
push ecx
push esi
call fcn.004cc05d
add esp, 8
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0xf
mov byte [esp + 0xa0], 0
cmp ecx, 0x10
jb 0x4cb8be
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cb8b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4cb8b4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
mov edi, dword [0x4dc878]
xor ecx, ecx
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0xf
mov byte [esp + 0x80], 0
mov eax, dword [edi + 0x3c]
mov dword [esp + 0x2c], ecx
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [esp + 0x18], eax
mov esi, dword [eax + 0x20]
add esi, edi
nop word [eax + eax]
mov ecx, dword [esi]
mov edx, 0xcd368f6d
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4cb92d
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4cb910
cmp edx, 0x7bbe9382
je 0x4cb936
inc dword [esp + 0x2c]
add esi, 4
jmp 0x4cb900
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
push dword [esp + 0x7c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov ecx, dword [esp + 0xf4]
cmp ecx, 0x10
jb 0x4cb997
mov edx, dword [esp + 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cb98d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4cb98d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
lea ecx, [esp + 0xc0]
call fcn.004b7bf0
mov ecx, dword [esp + 0x33c]
pop edi
pop esi
xor ecx, esp
call fcn.004cbdc9
mov esp, ebp
pop ebp
ret
call fcn.004a86d0
call fcn.004a86d0
call fcn.004a86d0
int3