Function at 0x4c8680
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x124
mov eax, dword [0x4dc00c]
xor eax, esp
mov dword [esp + 0x11c], eax
push ebx
push ebp
push esi
mov dword [esp + 0x2c], ecx
mov al, 0x72
mov cl, 0x43
mov byte [esp + 0x26], 0
xor al, cl
mov byte [esp + 0x24], cl
push edi
sub esp, 0x18
mov byte [esp + 0x41], al
mov edx, esp
mov byte [esp + 0x42], 0
xorps xmm0, xmm0
lea ecx, [esp + 0x41]
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c86d4
sub ecx, esi
lea eax, [esp + 0x41]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x80]
call fcn.004c2240
mov edi, eax
add esp, 0x18
cmp dword [edi + 0x14], 8
jb 0x4c8703
mov edi, dword [edi]
mov cl, 0x1d
mov byte [esp + 0x2a], 0
mov al, 0x41
mov byte [esp + 0x28], cl
xor al, cl
mov byte [esp + 0x2a], 0
sub esp, 0x18
mov byte [esp + 0x41], al
mov edx, esp
lea ecx, [esp + 0x41]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c8740
sub ecx, esi
lea eax, [esp + 0x41]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x98]
call fcn.004c2240
mov esi, eax
add esp, 0x18
cmp dword [esi + 0x14], 8
jb 0x4c876f
mov esi, dword [esi]
mov byte [esp + 0x10], 0x3e
mov al, 0x6d
xor al, byte [esp + 0x10]
mov cl, 0x51
mov byte [esp + 0x11], al
mov dl, 0x58
mov al, byte [esp + 0x10]
mov bl, 0x4a
xor cl, al
mov byte [esp + 0x26], 0x62
xor dl, al
mov byte [esp + 0x12], cl
xor bl, al
mov byte [esp + 0x13], dl
mov ch, 0x5f
mov byte [esp + 0x1a], 0
xor ch, al
mov byte [esp + 0x14], bl
mov dh, 0x4c
mov byte [esp + 0x16], ch
xor dh, al
mov byte [esp + 0x1a], 0
mov bh, 0x5b
mov byte [esp + 0x17], dh
xor bh, al
lea ecx, [esp + 0x11]
mov ah, 0x49
mov byte [esp + 0x18], bh
xor ah, al
lea ebx, [ecx + 1]
mov al, byte [esp + 0x26]
xorps xmm0, xmm0
xor al, byte [esp + 0x10]
sub esp, 0x18
mov edx, esp
mov byte [esp + 0x2d], ah
mov byte [esp + 0x31], al
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c87f5
sub ecx, ebx
lea eax, [esp + 0x29]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x50]
call fcn.004c2240
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4c8821
mov edx, dword [edx]
mov ecx, edx
lea ebx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c8826
sub ecx, ebx
mov eax, 0x7ffffffe
mov ebx, dword [0x4dc0f0]
sub eax, ebx
sar ecx, 1
cmp eax, ecx
jb 0x4c989b
cmp dword [0x4dc0f4], 8
mov eax, 0x4dc0e0
push ebx
cmovae eax, dword [0x4dc0e0]
push eax
push ecx
push edx
push ecx
push dword [esp + 0x44]
lea ecx, [esp + 0x68]
call fcn.004c8500
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c8874
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [esp + 0x58]
call fcn.004c8120
mov dword [esp + 0xf4], 0
xorps xmm0, xmm0
movups xmmword [esp + 0xe4], xmm0
mov dword [esp + 0xf8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xe4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0xf4], xmm0
mov word [eax], cx
lea ecx, [esp + 0xe4]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov eax, 0x4dc0e0
cmp dword [0x4dc0f4], 8
push dword [0x4dc0f0]
cmovae eax, dword [0x4dc0e0]
push eax
call fcn.004c8120
mov dword [esp + 0xdc], 0
xorps xmm0, xmm0
movups xmmword [esp + 0xcc], xmm0
mov dword [esp + 0xe0], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xcc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0xdc], xmm0
mov word [eax], cx
mov ecx, edi
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c8953
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [esp + 0xd4]
call fcn.004c8120
mov dword [esp + 0x10c], 0
xorps xmm0, xmm0
movups xmmword [esp + 0xfc], xmm0
mov dword [esp + 0x110], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xfc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x10c], xmm0
mov word [eax], cx
lea ecx, [esp + 0xcc]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
call fcn.004b7bf0
lea ecx, [esp + 0xe4]
call fcn.004b7bf0
lea ecx, [esp + 0x50]
call fcn.004b7bf0
lea ecx, [esp + 0x38]
call fcn.004b7bf0
lea ecx, [esp + 0x80]
call fcn.004b7bf0
lea ecx, [esp + 0x68]
call fcn.004b7bf0
cmp dword [esp + 0x110], 8
lea eax, [esp + 0xfc]
mov bh, 0x2f
mov byte [esp + 0x18], 0
cmovae eax, dword [esp + 0xfc]
mov bl, 0x6a
mov dword [esp + 0x28], eax
mov ch, bl
mov cl, 0x6d
mov byte [esp + 0x10], bh
mov dl, 0x6e
mov byte [esp + 0x18], 0
xor cl, bh
mov dword [esp + 0xdc], 0
xor ch, bh
mov byte [esp + 0x12], cl
mov al, 0x49
mov byte [esp + 0x16], ch
mov ah, 0x60
mov dword [esp + 0xe0], 0
mov dh, 0x40
lea ecx, [esp + 0x11]
xor dl, bh
xor al, bh
xor bl, bh
mov byte [esp + 0x13], dl
xor ah, bh
mov byte [esp + 0x11], al
xor dh, bh
mov byte [esp + 0x14], bl
xorps xmm0, xmm0
mov byte [esp + 0x17], dh
mov byte [esp + 0x15], ah
lea edx, [ecx + 1]
movups xmmword [esp + 0xcc], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c8a87
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0xd4]
call fcn.004b8860
mov bh, 0x28
mov byte [esp + 0x18], 0
mov al, 0x58
mov byte [esp + 0x10], bh
mov ah, 0x6a
mov byte [esp + 0x18], 0
xor al, bh
xor ah, bh
mov cl, 0x67
mov byte [esp + 0x11], al
mov bl, 0x6b
mov byte [esp + 0x15], ah
mov ch, 0x45
lea eax, [esp + 0x11]
mov dh, bl
xor cl, bh
xor ch, bh
mov byte [esp + 0x12], cl
mov dl, 0x50
mov byte [esp + 0x16], ch
xor dl, bh
lea ecx, [esp + 0xcc]
xor dh, bh
mov byte [esp + 0x13], dl
xor bl, bh
mov byte [esp + 0x17], dh
push eax
mov byte [esp + 0x18], bl
call fcn.004b7600
mov byte [esp + 0x10], 0x35
mov al, 0x7d
xor al, byte [esp + 0x10]
mov ah, 0x6c
mov byte [esp + 0x11], al
mov cl, 0x72
mov al, byte [esp + 0x10]
mov dl, 0xd
xor ah, al
mov byte [esp + 0x19], 0
mov ch, 0x4c
mov byte [esp + 0x15], ah
mov dh, 0x43
mov byte [esp + 0x19], 0
xor cl, al
xor ch, al
mov bl, 0x54
mov byte [esp + 0x12], cl
mov bh, 0x42
mov byte [esp + 0x16], ch
xor dl, al
lea ecx, [esp + 0xcc]
xor bl, al
mov byte [esp + 0x13], dl
xor dh, al
mov byte [esp + 0x14], bl
xor bh, al
mov byte [esp + 0x17], dh
lea eax, [esp + 0x11]
mov byte [esp + 0x18], bh
push eax
call fcn.004b7600
mov ecx, dword [esp + 0xe0]
cmp ecx, 0x10
jb 0x4c8b9f
mov edx, dword [esp + 0xcc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c8b95
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4c8b95
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
mov edi, dword [0x4dc878]
xor ebx, ebx
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0xf
mov byte [esp + 0xcc], 0
mov eax, dword [edi + 0x3c]
mov ebp, dword [eax + edi + 0x78]
mov esi, dword [ebp + edi + 0x20]
add esi, edi
mov ecx, dword [esi]
mov edx, 0x573acb8e
add ecx, edi
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c8bff
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c8be2
cmp edx, 0xdf899f77
je 0x4c8c05
inc ebx
add esi, 4
jmp 0x4c8bd2
mov eax, dword [ebp + edi + 0x24]
push 0
lea eax, [eax + ebx*2]
movzx ecx, word [eax + edi]
mov eax, dword [ebp + edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
lea ecx, [esp + 0xcc]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push dword [esp + 0x44]
add eax, edi
push 0x80000001
call eax
test eax, eax
jne 0x4c9876
xorps xmm0, xmm0
mov dword [esp + 0x124], eax
movups xmmword [esp + 0x114], xmm0
mov word [esp + 0x114], ax
mov cl, 0x65
mov al, 0x54
mov dword [esp + 0x128], 7
xor al, cl
mov byte [esp + 0x28], cl
sub esp, 0x18
mov byte [esp + 0x42], 0
mov edx, esp
mov byte [esp + 0x41], al
lea ecx, [esp + 0x41]
mov byte [esp + 0x42], 0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c8ca0
sub ecx, esi
lea eax, [esp + 0x41]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x50]
call fcn.004c2240
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4c8ccc
mov edx, dword [edx]
mov esi, dword [0x4dc0f0]
mov ecx, edx
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c8cd7
mov ebp, 0x7ffffffe
sub ecx, edi
mov eax, ebp
sar ecx, 1
sub eax, esi
cmp eax, ecx
jb 0x4c98a0
cmp dword [0x4dc0f4], 8
mov eax, 0x4dc0e0
push ecx
cmovae eax, dword [0x4dc0e0]
push edx
push esi
push eax
push ecx
push dword [esp + 0x44]
lea ecx, [esp + 0xfc]
call fcn.004c8500
lea ecx, [esp + 0xfc]
call fcn.004b7bf0
movups xmm0, xmmword [esp + 0xe4]
xor eax, eax
lea ecx, [esp + 0xe4]
mov word [esp + 0xe4], ax
movups xmmword [esp + 0xfc], xmm0
movq xmm0, qword [esp + 0xf4]
movq qword [esp + 0x10c], xmm0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 7
call fcn.004b7bf0
lea ecx, [esp + 0x38]
call fcn.004b7bf0
mov bh, 0x6f
mov byte [esp + 0x18], 0
mov cl, 0x3f
mov byte [esp + 0x10], bh
mov ch, 0x1b
mov byte [esp + 0x18], 0
mov dl, 0x3d
mov dword [esp + 0xf4], 0
xor cl, bh
mov dword [esp + 0xf8], 0
xor ch, bh
mov byte [esp + 0x12], cl
mov al, 0xc
mov byte [esp + 0x16], ch
mov bl, 0x2e
lea ecx, [esp + 0x11]
mov ah, 0x1c
mov dh, 0x5c
xor dl, bh
xor al, bh
xor bl, bh
mov byte [esp + 0x13], dl
xor ah, bh
mov byte [esp + 0x11], al
xor dh, bh
mov byte [esp + 0x14], bl
xorps xmm0, xmm0
mov byte [esp + 0x17], dh
mov byte [esp + 0x15], ah
lea edx, [ecx + 1]
movups xmmword [esp + 0xe4], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c8df2
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0xec]
call fcn.004b8860
mov byte [esp + 0x10], 0x52
mov al, 0x28
xor al, byte [esp + 0x10]
mov cl, 0x26
mov ch, 0x23
mov byte [esp + 0x11], al
mov al, byte [esp + 0x10]
mov dl, 7
xor cl, al
mov byte [esp + 0x19], 0
xor ch, al
mov byte [esp + 0x12], cl
mov dh, 0x14
mov byte [esp + 0x16], ch
mov bl, 0x20
mov byte [esp + 0x19], 0
mov ah, 0x3b
mov dword [esp + 0xdc], 0
xor dl, al
mov dword [esp + 0xe0], 0
xor dh, al
mov byte [esp + 0x13], dl
mov bh, 0x1a
mov byte [esp + 0x17], dh
xor bl, al
lea ecx, [esp + 0x11]
xor ah, al
mov byte [esp + 0x14], bl
xor bh, al
mov byte [esp + 0x15], ah
xorps xmm0, xmm0
mov byte [esp + 0x18], bh
movups xmmword [esp + 0xcc], xmm0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c8e90
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0xd4]
call fcn.004b8860
mov byte [esp + 0x10], 0x15
mov al, 0x47
xor al, byte [esp + 0x10]
mov cl, 0x73
xor cl, byte [esp + 0x10]
mov ah, 0x20
mov byte [esp + 0x11], al
mov ch, 0x45
mov byte [esp + 0x12], cl
mov dl, 0x7c
mov cl, byte [esp + 0x10]
mov dh, 0x67
mov byte [esp + 0x26], 0x76
xor ah, cl
mov al, byte [esp + 0x26]
xor ch, cl
xor al, cl
mov byte [esp + 0x27], 0x50
mov byte [esp + 0x19], al
mov bl, 0x5b
mov al, byte [esp + 0x27]
mov bh, 0x4c
xor al, cl
mov byte [esp + 0x15], ah
mov byte [esp + 0x1a], al
xor dl, cl
xor bl, cl
mov byte [esp + 0x16], ch
xor dh, cl
mov byte [esp + 0x1b], 0
xor bh, cl
mov byte [esp + 0x13], dl
lea eax, [esp + 0x11]
mov byte [esp + 0x14], bl
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0x1b], dh
mov byte [esp + 0x1c], bh
mov byte [esp + 0x1f], 0
call fcn.004b7600
mov byte [esp + 0x10], 0x5c
mov al, 0x10
xor al, byte [esp + 0x10]
mov dl, 0x11
mov byte [esp + 0x11], al
mov bl, dl
mov al, byte [esp + 0x10]
mov cl, 4
mov ch, 0x6f
mov byte [esp + 0x27], 0xd
mov dh, 0x30
mov byte [esp + 0x1a], 0
xor cl, al
mov byte [esp + 0x1a], 0
xor dl, al
mov byte [esp + 0x12], cl
xor ch, al
mov byte [esp + 0x13], dl
xor dh, al
mov byte [esp + 0x16], ch
mov ah, 0x24
mov byte [esp + 0x17], dh
mov bh, 0x31
lea edx, [esp + 0x11]
xor bl, al
lea ecx, [edx + 1]
xor ah, al
mov byte [esp + 0x14], bl
xor bh, al
mov byte [esp + 0x15], ah
mov al, byte [esp + 0x27]
xor al, byte [esp + 0x10]
mov byte [esp + 0x18], bh
mov byte [esp + 0x19], al
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x4c8fa0
mov edi, dword [esp + 0xe0]
lea eax, [esp + 0x11]
mov esi, dword [esp + 0xcc]
sub edx, ecx
push edx
mov edx, dword [esp + 0xe0]
lea ecx, [esp + 0xd0]
cmp edi, 0x10
push eax
cmovae ecx, esi
call fcn.004b8ef0
add esp, 8
test al, al
je 0x4c9051
mov byte [esp + 0x10], 0x7a
mov al, 0x11
xor al, byte [esp + 0x10]
mov ah, 0x1b
mov byte [esp + 0x11], al
mov cl, 0x12
mov al, byte [esp + 0x10]
mov dl, 0x17
xor ah, al
mov byte [esp + 0x19], 0
mov ch, 0x32
mov byte [esp + 0x15], ah
mov dh, 0x4b
mov byte [esp + 0x19], 0
xor cl, al
xor ch, al
mov bl, 0x3d
mov byte [esp + 0x12], cl
mov bh, 0x2f
mov byte [esp + 0x16], ch
xor dl, al
lea ecx, [esp + 0xe4]
xor bl, al
mov byte [esp + 0x13], dl
xor dh, al
mov byte [esp + 0x14], bl
xor bh, al
mov byte [esp + 0x17], dh
lea eax, [esp + 0x11]
mov byte [esp + 0x18], bh
push eax
call fcn.004b7600
mov edi, dword [esp + 0xe0]
mov esi, dword [esp + 0xcc]
cmp edi, 0x10
jb 0x4c907d
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x4c9073
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c90c9
push ecx
push esi
call fcn.004cc05d
add esp, 8
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0xf
mov byte [esp + 0xcc], 0
cmp ecx, 0x10
jb 0x4c90d9
mov edx, dword [esp + 0xe4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c90cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4c90cf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
movzx edx, byte [0x4dc7c6]
lea ecx, [esp + 0x38]
call fcn.004c1b00
movzx edx, byte [0x4dc018]
lea ecx, [esp + 0x80]
call fcn.004c1b00
movzx edx, byte [0x4dc019]
lea ecx, [esp + 0x68]
call fcn.004c1b00
push 1
push 0x4ce5a4
lea ecx, [esp + 0x70]
call fcn.004c8120
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x50], xmm0
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [esp + 0xb0]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x54]
movq qword [esp + 0x64], xmm0
push eax
push dword [esp + 0x38]
call fcn.004c1ce0
push 1
push 0x4ce5a4
lea ecx, [esp + 0xb8]
call fcn.004c8120
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xcc], xmm0
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [esp + 0x98]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0xd0]
movq qword [esp + 0xe0], xmm0
push eax
push dword [esp + 0x38]
call fcn.004c1ce0
push 1
push 0x4ce5a4
lea ecx, [esp + 0xa0]
call fcn.004c8120
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x10], xmm0
movups xmmword [esp + 0xe4], xmm0
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [esp + 0x114]
movq qword [esp + 0x28], xmm0
movq qword [esp + 0xf4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
call fcn.004b7bf0
movups xmm0, xmmword [esp + 0x10]
xor eax, eax
mov dword [esp + 0xf4], 0
lea ecx, [esp + 0xe4]
mov dword [esp + 0xf8], 7
movups xmmword [esp + 0x114], xmm0
mov word [esp + 0xe4], ax
movq xmm0, qword [esp + 0x28]
movq qword [esp + 0x124], xmm0
call fcn.004b7bf0
lea ecx, [esp + 0x98]
call fcn.004b7bf0
lea ecx, [esp + 0xcc]
call fcn.004b7bf0
lea ecx, [esp + 0xb0]
call fcn.004b7bf0
lea ecx, [esp + 0x50]
call fcn.004b7bf0
lea ecx, [esp + 0x68]
call fcn.004b7bf0
lea ecx, [esp + 0x80]
call fcn.004b7bf0
lea ecx, [esp + 0x38]
call fcn.004b7bf0
mov ebx, dword [0x4dc878]
xor edi, edi
mov eax, dword [ebx + 0x3c]
mov eax, dword [eax + ebx + 0x78]
add eax, ebx
mov dword [esp + 0x28], eax
mov esi, dword [eax + 0x20]
add esi, ebx
nop
mov ecx, dword [esi]
mov edx, 0x6d94d514
add ecx, ebx
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c92ed
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c92d0
cmp edx, 0x6110abbf
je 0x4c92f3
inc edi
add esi, 4
jmp 0x4c92c0
mov edx, dword [esp + 0x28]
push 0xfa
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov edx, dword [eax + ebx]
lea ecx, [esp + 0x118]
add edx, ebx
lea eax, [esp + 0x100]
cmp dword [esp + 0x12c], 8
cmovae ecx, dword [esp + 0x118]
cmp dword [esp + 0x114], 8
push ecx
cmovae eax, dword [esp + 0x104]
push 1
push 0
push eax
push dword [esp + 0xdc]
call edx
test eax, eax
jne 0x4c986a
cmp dword [esp + 0x30], 1
jne 0x4c9802
mov cl, 0x77
mov byte [esp + 0x2a], 0
mov al, 0x45
mov byte [esp + 0x28], cl
xor al, cl
mov byte [esp + 0x2a], 0
sub esp, 0x18
mov byte [esp + 0x41], al
mov edx, esp
lea ecx, [esp + 0x41]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c93a0
sub ecx, esi
lea eax, [esp + 0x41]
push ecx
push eax
mov ecx, edx
call fcn.004b8860
lea ecx, [esp + 0x50]
call fcn.004c2240
mov edx, eax
add esp, 0x18
cmp dword [edx + 0x14], 8
jb 0x4c93cc
mov edx, dword [edx]
mov esi, dword [0x4dc0f0]
mov ecx, edx
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c93d7
sub ecx, edi
sub ebp, esi
sar ecx, 1
cmp ebp, ecx
jb 0x4c98a5
cmp dword [0x4dc0f4], 8
mov eax, 0x4dc0e0
push ecx
cmovae eax, dword [0x4dc0e0]
push edx
push esi
push eax
push ecx
push dword [esp + 0x44]
lea ecx, [esp + 0xfc]
call fcn.004c8500
lea ecx, [esp + 0xfc]
call fcn.004b7bf0
movups xmm0, xmmword [esp + 0xe4]
xor eax, eax
lea ecx, [esp + 0xe4]
mov word [esp + 0xe4], ax
movups xmmword [esp + 0xfc], xmm0
movq xmm0, qword [esp + 0xf4]
movq qword [esp + 0x10c], xmm0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 7
call fcn.004b7bf0
lea ecx, [esp + 0x38]
call fcn.004b7bf0
mov bh, 0xb
mov byte [esp + 0x18], 0
mov cl, 0x4e
mov byte [esp + 0x10], bh
mov dl, cl
mov byte [esp + 0x18], 0
mov ch, 0x7f
mov dword [esp + 0xdc], 0
xor cl, bh
mov dword [esp + 0xe0], 0
xor ch, bh
mov byte [esp + 0x12], cl
mov al, 0x64
mov byte [esp + 0x16], ch
mov bl, 0x67
lea ecx, [esp + 0x11]
mov ah, 0x48
mov dh, 0x4d
xor dl, bh
xor al, bh
xor bl, bh
mov byte [esp + 0x13], dl
xor ah, bh
mov byte [esp + 0x11], al
xor dh, bh
mov byte [esp + 0x14], bl
xorps xmm0, xmm0
mov byte [esp + 0x17], dh
mov byte [esp + 0x15], ah
lea edx, [ecx + 1]
movups xmmword [esp + 0xcc], xmm0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c94f0
sub ecx, edx
lea eax, [esp + 0x11]
push ecx
push eax
lea ecx, [esp + 0xd4]
call fcn.004b8860
mov dh, 0x48
mov byte [esp + 0x37], 0
mov al, 0x23
mov byte [esp + 0x30], dh
mov dl, al
mov byte [esp + 0x37], 0
mov ah, 0x2d
xor al, dh
xor ah, dh
mov byte [esp + 0x31], al
mov cl, 0x70
mov byte [esp + 0x35], ah
mov ch, 0x20
lea eax, [esp + 0x31]
xor cl, dh
xor ch, dh
mov bl, 0x3b
mov byte [esp + 0x32], cl
xor dl, dh
mov byte [esp + 0x36], ch
xor bl, dh
mov byte [esp + 0x33], dl
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0x38], bl
call fcn.004b7600
mov dh, 0x50
xor cl, cl
mov al, 1
mov byte [esp + 0x37], cl
mov ah, 0x13
mov byte [esp + 0x30], dh
mov dl, 4
mov byte [esp + 0x37], 0
xor al, dh
xor ah, dh
mov ch, 0x3c
mov byte [esp + 0x31], al
mov bl, dl
mov byte [esp + 0x35], ah
xor cl, dh
lea eax, [esp + 0x31]
xor ch, dh
mov byte [esp + 0x32], cl
xor dl, dh
mov byte [esp + 0x36], ch
xor bl, dh
mov byte [esp + 0x33], dl
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0x38], bl
call fcn.004b7600
mov ecx, dword [esp + 0xe0]
cmp ecx, 0x10
jb 0x4c95ea
mov edx, dword [esp + 0xcc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4c95e0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4c95e0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004cc05d
add esp, 8
cmp dword [0x4dc0dc], 0x10
mov ecx, 0x4dc0c8
mov eax, dword [0x4dc0d8]
jb 0x4c9607
mov ecx, dword [0x4dc0c8]
add eax, ecx
jmp 0x4c960e
add eax, ecx
mov ecx, 0x4dc0c8
push ecx
push eax
push ecx
lea ecx, [esp + 0x74]
call fcn.004b8570
cmp dword [0x4dc0ac], 0x10
mov esi, eax
mov ecx, 0x4dc098
jb 0x4c963a
mov ecx, dword [0x4dc0a8]
mov edx, dword [0x4dc098]
add ecx, edx
jmp 0x4c9645
add ecx, dword [0x4dc0a8]
mov edx, 0x4dc098
push ecx
push ecx
push edx
lea ecx, [esp + 0x8c]
call fcn.004b8570
push 1
push 0x4ce5a4
mov ecx, eax
call fcn.004c8120
xor ecx, ecx
push esi
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x54], xmm0
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [esp + 0x3c]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
lea eax, [esp + 0x54]
push eax
push dword [esp + 0x38]
movq qword [esp + 0x6c], xmm0
call fcn.004c1ce0
push 1
push 0x4ce5a4
lea ecx, [esp + 0x40]
call fcn.004c8120
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x10], xmm0
movups xmmword [esp + 0xe4], xmm0
movq xmm0, qword [eax + 0x10]
mov word [eax], cx
lea ecx, [esp + 0x114]
movq qword [esp + 0x30], xmm0
movq qword [esp + 0xf4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
call fcn.004b7bf0
movups xmm0, xmmword [esp + 0x10]
xor eax, eax
mov dword [esp + 0xf4], 0
lea ecx, [esp + 0xe4]
mov dword [esp + 0xf8], 7
movups xmmword [esp + 0x114], xmm0
mov word [esp + 0xe4], ax
movq xmm0, qword [esp + 0x30]
movq qword [esp + 0x124], xmm0
call fcn.004b7bf0
lea ecx, [esp + 0x38]
call fcn.004b7bf0
lea ecx, [esp + 0x50]
call fcn.004b7bf0
lea ecx, [esp + 0x80]
call fcn.004b7bf0
lea ecx, [esp + 0x68]
call fcn.004b7bf0
mov ebx, dword [0x4dc878]
xor edi, edi
mov eax, dword [ebx + 0x3c]
mov ebp, dword [eax + ebx + 0x78]
mov esi, dword [ebp + ebx + 0x20]
add esi, ebx
mov ecx, dword [esi]
mov edx, 0xd203e7c4
add ecx, ebx
mov al, byte [ecx]
inc ecx
test al, al
je 0x4c979f
movsx eax, al
lea ecx, [ecx + 1]
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [ecx - 1]
test al, al
jne 0x4c9782
cmp edx, 0x15e9008f
je 0x4c97a5
inc edi
add esi, 4
jmp 0x4c9772
mov eax, dword [ebp + ebx + 0x24]
push 0xfa
lea eax, [eax + edi*2]
movzx ecx, word [eax + ebx]
mov eax, dword [ebp + ebx + 0x1c]
lea eax, [eax + ecx*4]
mov edx, dword [eax + ebx]
lea ecx, [esp + 0x118]
add edx, ebx
lea eax, [esp + 0x100]
cmp dword [esp + 0x12c], 8
cmovae ecx, dword [esp + 0x118]
cmp dword [esp + 0x114], 8
push ecx
cmovae eax, dword [esp + 0x104]
push 1
push 0
push eax
push dword [esp + 0xdc]
call edx
test eax, eax
jne 0x4c986a
mov edi, dword [0x4dc878]
xor ebx, ebx
mov eax, dword [edi + 0x3c]
mov ebp, dword [eax + edi + 0x78]
mov esi, dword [ebp + edi + 0x20]
add esi, edi
mov eax, dword [esi]
mov edx, 0x3325a93c
add eax, edi
mov cl, byte [eax]
inc eax
test cl, cl
je 0x4c9844
movsx ecx, cl
lea eax, [eax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [eax - 1]
test cl, cl
jne 0x4c9827
cmp edx, 0xadea3b31
je 0x4c984a
inc ebx
add esi, 4
jmp 0x4c9817
mov eax, dword [ebp + edi + 0x24]
push dword [esp + 0xc8]
lea eax, [eax + ebx*2]
movzx ecx, word [eax + edi]
mov eax, dword [ebp + edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
lea ecx, [esp + 0x114]
call fcn.004b7bf0
lea ecx, [esp + 0xfc]
call fcn.004b7bf0
mov ecx, dword [esp + 0x12c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004cbdc9
add esp, 0x124
ret
call fcn.004a86d0
call fcn.004a86d0
call fcn.004a86d0
int3