Function at 0x4b7230
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2f4
push ebx
mov ebx, dword [0x4f8e38]
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
push esi
push edi
test ebx, ebx
jne 0x4b7301
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0x10], ecx
nop word [eax + eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 8], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b72e8
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 8]
imul eax, eax, 0x1000193
mov dword [ebp - 8], eax
cmp edi, ebx
jne 0x4b72b0
cmp eax, 0x87a77597
je 0x4b766c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp eax, edx
je 0x4b72f9
cmp dword [ecx + 0x18], 0
jne 0x4b7290
xor ebx, ebx
mov dword [0x4f8e38], ebx
mov eax, dword [0x4f8e34]
test eax, eax
jne 0x4b739e
test ebx, ebx
je 0x4b7397
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x1c], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x4b7397
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [eax + 0x18], ecx
je 0x4b7397
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 4], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b7385
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b7350
cmp edi, 0xeeff1fd2
je 0x4b7677
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b7340
xor eax, eax
mov dword [0x4f8e34], eax
push 0
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xd0]
push ecx
call eax
test eax, eax
js 0x4b8631
mov ebx, dword [0x4f07ac]
test ebx, ebx
jne 0x4b7451
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 0x10], ecx
nop
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 4], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b7438
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 4]
imul eax, eax, 0x1000193
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x4b7400
cmp eax, 0xc0323159
je 0x4b7695
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp eax, edx
je 0x4b7449
cmp dword [ecx + 0x18], 0
jne 0x4b73e0
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov eax, dword [0x4f8e00]
test eax, eax
jne 0x4b74ee
test ebx, ebx
je 0x4b74e7
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x1c], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x4b74e7
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [eax + 0x18], ecx
je 0x4b74e7
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 4], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b74d5
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b74a0
cmp edi, 0x5bb57373
je 0x4b76a0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b7490
xor eax, eax
mov dword [0x4f8e00], eax
push 0
call eax
mov ebx, dword [0x4f07ac]
mov dword [ebp - 0x1c], eax
test ebx, ebx
jne 0x4b7591
mov ecx, dword fs:[0x30]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 0x10], ecx
nop dword [eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 4], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b7578
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 4]
imul eax, eax, 0x1000193
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x4b7540
cmp eax, 0xc0323159
je 0x4b76be
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp eax, edx
je 0x4b7589
cmp dword [ecx + 0x18], 0
jne 0x4b7520
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov eax, dword [0x4f8e00]
test eax, eax
jne 0x4b7632
test ebx, ebx
je 0x4b762b
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x14], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x4b762b
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [eax + 0x18], ecx
je 0x4b762b
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 4], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b7619
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b75e4
cmp edi, 0x5bb57373
je 0x4b76c9
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b75d4
xor eax, eax
mov dword [0x4f8e00], eax
push 1
call eax
mov ebx, dword [ebp - 0x1c]
mov esi, eax
test ebx, ebx
je 0x4b8631
test esi, esi
je 0x4b8631
mov ecx, 0x10
call fcn.00416600
test eax, eax
je 0x4b76e7
push ecx
push esi
push ebx
mov ecx, eax
call fcn.0041aec0
jmp 0x4b76e9
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x18]
jmp 0x4b72fb
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4b7399
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x18]
jmp 0x4b744b
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4b74e9
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x18]
jmp 0x4b758b
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4b762d
xor eax, eax
mov dword [ebp - 0x70], eax
lea ecx, [ebp - 0xbc]
push esi
lea eax, [ebp - 0x70]
push ebx
mov dword [ebp - 0xbc], eax
call fcn.0041b6e0
test al, al
je 0x4b8631
mov ecx, 0x20a
call fcn.004baba0
mov ebx, dword [0x4f081c]
mov dword [ebp - 0x10], eax
test ebx, ebx
jne 0x4b77b1
mov ecx, dword fs:[0x30]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x14], eax
mov edx, eax
mov dword [ebp - 8], ecx
nop
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 4], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b7798
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 4]
imul eax, eax, 0x1000193
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x4b7760
cmp eax, 0xa3e6f6c3
je 0x4b7d91
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4b77a9
cmp dword [ecx + 0x18], 0
jne 0x4b7740
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f8dd8]
test eax, eax
jne 0x4b784e
test ebx, ebx
je 0x4b7847
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4b7847
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x4b7847
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x14], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b7835
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b7800
cmp edi, 0x8c266e07
je 0x4b7d9c
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0x14], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b77f0
xor eax, eax
mov dword [0x4f8dd8], eax
lea ecx, [ebp - 0x2f0]
push ecx
push 0x104
call eax
mov ebx, dword [0x4f081c]
test ebx, ebx
jne 0x4b78f1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x14], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b78d8
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
mov dword [ebp - 0x14], eax
cmp edi, ebx
jne 0x4b78a0
cmp eax, 0xa3e6f6c3
je 0x4b7dba
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4b78e9
cmp dword [ecx + 0x18], 0
jne 0x4b7882
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f8da0]
test eax, eax
jne 0x4b798e
test ebx, ebx
je 0x4b7987
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4b7987
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x4b7987
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x14], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b7975
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b7940
cmp edi, 0x309167b9
je 0x4b7dc5
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0x14], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b7930
xor eax, eax
mov dword [0x4f8da0], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2f0]
push 0
push 0
push ecx
call eax
mov eax, 0x31
mov word [ebp - 0x8c], ax
mov eax, 0x7f
mov word [ebp - 0x8a], ax
mov eax, 0x3a
mov word [ebp - 0x88], ax
mov eax, 0x6e
mov word [ebp - 0x86], ax
mov eax, 0x79
mov word [ebp - 0x84], ax
mov eax, 0x7c
mov word [ebp - 0x82], ax
mov eax, 0xc
mov word [ebp - 0x80], ax
movzx eax, word [0x404772]
add eax, 0xc
mov word [ebp - 0x7e], ax
movzx eax, word [0x404774]
add eax, 0xc
mov word [ebp - 0x7c], ax
movzx eax, word [0x404776]
add eax, 0xc
mov word [ebp - 0x7a], ax
movzx eax, word [0x404778]
add eax, 0xc
mov word [ebp - 0x78], ax
movzx eax, word [0x40477a]
add eax, 0xc
mov word [ebp - 0x76], ax
movzx eax, word [0x40477c]
add eax, 0xc
mov word [ebp - 0x74], ax
xor eax, eax
mov word [ebp - 0x72], ax
xor ecx, ecx
mov ax, word [ebp - 0x8c]
mov ax, word [ebp + ecx*2 - 0x8c]
movzx eax, ax
add eax, 0xfffffff4
mov word [ebp + ecx*2 - 0x8c], ax
inc ecx
cmp ecx, 0xd
jb 0x4b7a52
mov ebx, dword [0x4f07ac]
test ebx, ebx
jne 0x4b7b03
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x14], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b7aea
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
mov dword [ebp - 0x14], eax
cmp edi, ebx
jne 0x4b7ab2
cmp eax, 0xc0323159
je 0x4b7de3
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4b7afb
cmp dword [ecx + 0x18], 0
jne 0x4b7a94
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov eax, dword [0x4f07b8]
test eax, eax
jne 0x4b7ba1
test ebx, ebx
je 0x4b7b9a
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4b7b9a
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x4b7b9a
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x14], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b7b88
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b7b53
cmp edi, 0xaeb3c6d5
je 0x4b7dee
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0x14], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b7b43
xor eax, eax
mov dword [0x4f07b8], eax
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x8c]
push ecx
push edx
push ecx
call eax
mov dword [ebp - 0xb8], 0x4f
mov eax, 0x26
mov word [ebp - 0xb4], ax
mov ecx, 0x22
mov word [ebp - 0xb2], cx
mov eax, 0x2e
mov word [ebp - 0xb0], ax
add esp, 0xc
mov eax, 0x28
mov word [ebp - 0xae], ax
mov eax, 0x2a
mov word [ebp - 0xac], ax
mov eax, 0x60
mov word [ebp - 0xaa], ax
mov eax, 0x2d
mov word [ebp - 0xa8], ax
mov eax, 0x3f
mov word [ebp - 0xa6], cx
mov word [ebp - 0xa4], ax
mov eax, 0x4f
mov word [ebp - 0xa2], ax
movzx eax, word [0x404788]
xor eax, 0x4f
mov word [ebp - 0xa0], ax
movzx eax, word [0x40478a]
xor eax, 0x4f
mov word [ebp - 0x9e], ax
movzx eax, word [0x40478c]
xor eax, 0x4f
mov word [ebp - 0x9c], ax
movzx eax, word [0x40478e]
xor eax, 0x4f
mov word [ebp - 0x9a], ax
movzx eax, word [0x404790]
xor eax, 0x4f
mov word [ebp - 0x98], ax
movzx eax, word [0x404792]
xor eax, 0x4f
mov word [ebp - 0x96], ax
movzx eax, word [0x404794]
xor eax, 0x4f
mov word [ebp - 0x94], ax
movzx eax, word [0x404796]
xor eax, 0x4f
mov word [ebp - 0x92], ax
movzx eax, word [0x404798]
xor eax, 0x4f
mov word [ebp - 0x90], ax
xor eax, eax
mov word [ebp - 0x8e], ax
xor edx, edx
mov ax, word [ebp - 0xb4]
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0xb4]
movzx ecx, ax
movzx eax, word [ebp - 0xb8]
xor ecx, eax
mov word [ebp + edx*2 - 0xb4], cx
inc edx
cmp edx, 0x13
jb 0x4b7ce0
xor eax, eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x3c]
mov word [ebp - 0x8e], ax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0xc], eax
call fcn.0041b060
mov ecx, dword [ebp - 0xc]
test ecx, ecx
je 0x4b7e39
call fcn.004baba0
mov ebx, eax
test ebx, ebx
je 0x4b7e39
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x3c]
push ebx
call fcn.0041b1e0
xor esi, esi
add esp, 4
cmp dword [ebp - 0x3c], esi
jbe 0x4b7e32
lea edi, [ebx + 0x30]
mov eax, dword [edi]
lea ecx, [ebp - 0xb4]
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b7e0c
test dx, dx
je 0x4b7d8a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b7e0c
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b7d60
xor eax, eax
jmp 0x4b7e11
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x4b77ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4b7849
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x4b78eb
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4b7989
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x4b7afd
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4b7b9c
sbb eax, eax
or eax, 1
test eax, eax
je 0x4b7e24
inc esi
add edi, 0x4c
cmp esi, dword [ebp - 0x3c]
jb 0x4b7d53
jmp 0x4b7e32
imul eax, esi, 0x4c
movups xmm0, xmmword [eax + ebx]
movups xmmword [ebp - 0xe0], xmm0
mov ecx, ebx
call fcn.004bb000
push ecx
mov ecx, dword [ebp - 0x70]
lea eax, [ebp - 0xe0]
push eax
push dword [ebp - 0x10]
call fcn.0041aa10
test eax, eax
js 0x4b8629
mov dword [ebp - 0x68], 0x6e
xor edx, edx
mov byte [ebp - 0x64], 0x39
mov byte [ebp - 0x63], 0xf
mov byte [ebp - 0x62], 2
mov byte [ebp - 0x61], 2
mov byte [ebp - 0x60], 0x1e
mov byte [ebp - 0x5f], 0xf
mov byte [ebp - 0x5e], 0x1e
mov byte [ebp - 0x5d], 0xb
mov byte [ebp - 0x5c], 0x1c
mov byte [ebp - 0x5b], 0x3d
mov byte [ebp - 0x5a], 0x1a
mov byte [ebp - 0x59], 0x17
mov byte [ebp - 0x58], 2
mov byte [ebp - 0x57], 0xb
mov al, byte [ebp - 0x64]
mov byte [ebp - 0x56], 0
nop dword [eax]
mov al, byte [ebp + edx - 0x64]
movsx ecx, byte [ebp - 0x68]
movsx eax, al
xor eax, ecx
mov byte [ebp + edx - 0x64], al
inc edx
cmp edx, 0xe
jb 0x4b7ea0
mov byte [ebp - 0x56], 0
xor ecx, ecx
mov byte [ebp - 0x36], 0x57
mov byte [ebp - 0x35], 0x6c
mov byte [ebp - 0x34], 0x6f
mov byte [ebp - 0x33], 0x68
mov byte [ebp - 0x32], 0x5a
mov byte [ebp - 0x31], 0x64
mov byte [ebp - 0x30], 0x6f
mov byte [ebp - 0x2f], 0x6f
mov byte [ebp - 0x2e], 0x73
mov byte [ebp - 0x2d], 0x64
mov byte [ebp - 0x2c], 0x73
mov byte [ebp - 0x2b], 0x68
mov byte [ebp - 0x2a], 0x75
mov byte [ebp - 0x29], 0
mov al, byte [ebp - 0x36]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x36]
movsx eax, al
sub eax, 3
mov byte [ebp + ecx - 0x36], al
inc ecx
cmp ecx, 0xd
jb 0x4b7f00
mov byte [ebp - 0x52], 0x45
xor ecx, ecx
mov byte [ebp - 0x51], 0x71
mov byte [ebp - 0x50], 0x70
mov byte [ebp - 0x4f], 0x76
mov byte [ebp - 0x4e], 0x74
mov byte [ebp - 0x4d], 0x71
mov byte [ebp - 0x4c], 0x6e
mov byte [ebp - 0x4b], 0x22
mov byte [ebp - 0x4a], 0x52
mov byte [ebp - 0x49], 0x63
mov byte [ebp - 0x48], 0x70
mov byte [ebp - 0x47], 0x67
mov byte [ebp - 0x46], 0x6e
mov byte [ebp - 0x45], 0x5e
mov byte [ebp - 0x44], 0x46
mov byte [ebp - 0x43], 0x67
mov byte [ebp - 0x42], 0x75
mov byte [ebp - 0x41], 0x6d
mov byte [ebp - 0x40], 0x76
mov byte [ebp - 0x3f], 0x71
mov byte [ebp - 0x3e], 0x72
mov byte [ebp - 0x3d], 0
mov al, byte [ebp - 0x52]
mov al, byte [ebp + ecx - 0x52]
movsx eax, al
sub eax, 2
mov byte [ebp + ecx - 0x52], al
inc ecx
cmp ecx, 0x15
jb 0x4b7f71
mov ebx, dword [0x4f083c]
test ebx, ebx
jne 0x4b8021
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
nop dword [eax + eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x14], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b8008
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
mov dword [ebp - 0x14], eax
cmp edi, ebx
jne 0x4b7fd0
cmp eax, 0x39794115
je 0x4b863d
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x4b8019
cmp dword [ecx + 0x18], 0
jne 0x4b7fb0
xor ebx, ebx
mov dword [0x4f083c], ebx
mov eax, dword [0x4f8e28]
test eax, eax
jne 0x4b80bf
test ebx, ebx
je 0x4b80b8
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4b80b8
xor ecx, ecx
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x4b80b8
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x14], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b80a6
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b8071
mov ecx, dword [ebp - 0xc]
cmp edi, 0x40097de3
je 0x4b8648
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b8061
xor eax, eax
mov dword [0x4f8e28], eax
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x52]
push ecx
push 0x80000001
call eax
test eax, eax
jne 0x4b8705
mov word [ebp - 0x24], 0x32
nop dword [eax]
inc eax
cmp byte [ebp + eax - 0x24], 0
jne 0x4b80e0
mov ebx, dword [0x4f083c]
mov dword [ebp - 8], eax
test ebx, ebx
jne 0x4b8181
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x14], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b8168
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
mov dword [ebp - 0x14], eax
cmp edi, ebx
jne 0x4b8130
cmp eax, 0x39794115
je 0x4b8665
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x4b8179
cmp dword [ecx + 0x18], 0
jne 0x4b8111
xor ebx, ebx
mov dword [0x4f083c], ebx
mov ecx, dword [0x4f8c88]
test ecx, ecx
jne 0x4b8221
test ebx, ebx
je 0x4b8219
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
xor ecx, ecx
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4b821b
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x4b8219
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x14], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b8207
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b81d2
mov ecx, dword [ebp - 0xc]
cmp edi, 0x25b2bbbc
je 0x4b8670
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b81c2
xor ecx, ecx
mov dword [0x4f8c88], ecx
mov eax, dword [ebp - 8]
inc eax
push eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x6c]
call ecx
test eax, eax
jne 0x4b8705
mov word [ebp - 0x28], 0x30
inc eax
cmp byte [ebp + eax - 0x28], 0
jne 0x4b8245
mov ebx, dword [0x4f083c]
mov dword [ebp - 8], eax
test ebx, ebx
jne 0x4b82e5
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x14], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b82cc
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
mov dword [ebp - 0x14], eax
cmp edi, ebx
jne 0x4b8294
cmp eax, 0x39794115
je 0x4b868d
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x4b82dd
cmp dword [ecx + 0x18], 0
jne 0x4b8276
xor ebx, ebx
mov dword [0x4f083c], ebx
mov ecx, dword [0x4f8c88]
test ecx, ecx
jne 0x4b8385
test ebx, ebx
je 0x4b837d
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
xor ecx, ecx
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4b837f
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x4b837d
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x14], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b836b
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b8336
mov ecx, dword [ebp - 0xc]
cmp edi, 0x25b2bbbc
je 0x4b8698
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b8326
xor ecx, ecx
mov dword [0x4f8c88], ecx
mov eax, dword [ebp - 8]
inc eax
push eax
lea eax, [ebp - 0x28]
push eax
push 1
push 0
lea eax, [ebp - 0x36]
push eax
push dword [ebp - 0x6c]
call ecx
test eax, eax
jne 0x4b8705
mov ebx, dword [0x4f083c]
test ebx, ebx
jne 0x4b8441
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
nop dword [eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x14], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b8428
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
mov dword [ebp - 0x14], eax
cmp edi, ebx
jne 0x4b83f0
cmp eax, 0x39794115
je 0x4b86b5
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x4b8439
cmp dword [ecx + 0x18], 0
jne 0x4b83d0
xor ebx, ebx
mov dword [0x4f083c], ebx
mov eax, dword [0x4f8bf0]
test eax, eax
jne 0x4b84de
test ebx, ebx
je 0x4b84d7
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4b84d7
xor ecx, ecx
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x4b84d7
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x14], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b84c5
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b8490
mov ecx, dword [ebp - 0xc]
cmp edi, 0x6b36a56a
je 0x4b86c0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b8480
xor eax, eax
mov dword [0x4f8bf0], eax
push dword [ebp - 0x6c]
call eax
mov ebx, dword [0x4f07ac]
test ebx, ebx
jne 0x4b8581
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
nop dword [eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x14], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4b8568
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
mov dword [ebp - 0x14], eax
cmp edi, ebx
jne 0x4b8530
cmp eax, 0xc0323159
je 0x4b86dd
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x4b8579
cmp dword [ecx + 0x18], 0
jne 0x4b8510
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov eax, dword [0x4f8e5c]
test eax, eax
jne 0x4b861e
test ebx, ebx
je 0x4b8617
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4b8617
xor ecx, ecx
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x4b8617
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x14], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4b8605
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4b85d0
mov ecx, dword [ebp - 0xc]
cmp edi, 0x1f1d4b81
je 0x4b86e8
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], eax
cmp ecx, dword [edx + 0x18]
jne 0x4b85c0
xor eax, eax
mov dword [0x4f8e5c], eax
push 3
push dword [ebp - 0x10]
push 0
push 0x14
call eax
mov ecx, dword [ebp - 0x10]
call fcn.004bb000
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x4b801b
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x4b80ba
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x4b817b
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + ebx]
add ecx, ebx
jmp 0x4b821b
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x4b82df
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + ebx]
add ecx, ebx
jmp 0x4b837f
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x4b843b
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x4b84d9
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x4b857b
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x4b8619
mov ecx, dword [ebp - 0x10]
call fcn.004bb000
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret