Function at 0x496c80
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x138
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x24], 0
or ebx, 0xffffffff
mov esi, edi
or edx, ebx
mov dword [esp + 0x10], ebx
or ecx, ebx
mov dword [esp + 0x14], edx
cmp dword [edi + 0xe910], 0
lea eax, [edi + 0xe92c]
mov dword [esp + 0x2c], ecx
jbe 0x494e3d
nop dword [eax]
mov al, byte [esi + 0xf7]
mov dword [esp + 0x3c], ecx
mov cl, byte [esi + 0xf9]
movzx edx, cl
mov byte [esp + 0x33], cl
movzx ecx, byte [esi + 0xfa]
movzx ebp, al
mov dword [esp + 0x20], ecx
cmp dword [esp + 0x20], 4
mov cl, byte [esi + 0xfb]
mov byte [esp + 0x32], al
movzx eax, byte [esi + 0xf8]
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x40], eax
mov dword [esp + 0x34], edx
movzx ebx, cl
je 0x49473d
cmp dword [esp + 0x20], 6
je 0x49473d
mov byte [esp + 0x1b], 0
cmp eax, 0xb
jne 0x494742
mov byte [esp + 0x1b], 1
and dword [esi + 0x24], 0xfeffffff
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], 0
cmp eax, 0x13
je 0x494763
cmp eax, 0x14
jne 0x494881
test cl, cl
jne 0x494779
test byte [edi + 0xe920], 0x22
je 0x494779
movzx ebx, byte [esi + 0xe9]
jmp 0x49477f
mov byte [esi + 0xe9], cl
mov eax, ebx
and eax, 0xf0
cmp eax, 0xd0
jne 0x49479b
mov eax, ebx
and eax, 0xf
mov dword [esp + 0x28], eax
jmp 0x494885
cmp dword [edi + 0xe92c], 0
jne 0x494881
cmp eax, 0x60
jne 0x4947b9
cmp dword [esp + 0x20], 0x13
je 0x4947cf
jmp 0x494881
cmp eax, 0xb0
jne 0x49486f
cmp dword [esp + 0x20], 0x14
jne 0x494881
mov eax, ebx
and eax, 0xf
mov dword [esp + 0x2c], eax
je 0x49484d
mov al, byte [esi + 0xf5]
test al, al
je 0x4947f0
sub al, 1
mov byte [esi + 0xf5], al
jne 0x494821
jmp 0x494859
mov ebp, dword [edi + 0xe910]
xor ecx, ecx
mov eax, edi
test ebp, ebp
je 0x494817
nop
cmp eax, esi
je 0x49480d
cmp byte [eax + 0xf5], 0
jne 0x494839
inc ecx
add eax, 0x100
cmp ecx, ebp
jb 0x494800
mov eax, dword [esp + 0x2c]
mov byte [esi + 0xf5], al
movzx eax, byte [esi + 0xf4]
mov ebp, dword [esp + 0x1c]
test eax, eax
cmovs eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
jmp 0x494881
mov ebp, dword [esp + 0x1c]
or eax, 0xffffffff
test eax, eax
cmovs eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
jmp 0x494881
mov al, byte [edi + 0xe948]
mov byte [esi + 0xf4], al
mov ebp, dword [esp + 0x1c]
mov eax, 0xffffffff
test eax, eax
cmovs eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
jmp 0x494881
cmp eax, 0xe0
jne 0x494881
mov eax, ebx
and eax, 0xf
mov dword [edi + 0xe934], eax
mov eax, dword [esp + 0x28]
cmp dword [edi + 0xe92c], eax
jne 0x494b7b
movzx ecx, byte [esi + 0xf6]
mov dword [esp + 0x3c], ecx
test ebp, ebp
je 0x4948aa
mov al, byte [esp + 0x32]
mov byte [esi + 0xd7], al
test dword [edi + 0xe920], 0x100005
je 0x4948e1
cmp ecx, 0xff
jne 0x4948e1
mov eax, dword [esi + 0x8c]
test eax, eax
je 0x4948ce
test byte [eax + 4], 1
jne 0x4948e1
or dword [esi + 0x24], 0x1000000
mov dword [esi + 0x74], 0
jmp 0x494b2b
mov eax, dword [esp + 0x1c]
mov ebp, ecx
mov edx, eax
test ecx, ecx
jne 0x4949a2
mov dword [esp + 0x1c], eax
mov dword [esp + 0x3c], ecx
test edx, edx
je 0x4949a2
cmp dword [edi + 0xe928], ecx
je 0x494971
mov eax, dword [esi + 0x90]
test eax, eax
je 0x49491a
movzx eax, word [eax + 0x1e]
mov dword [esi + 0x74], eax
test dword [edi + 0xe920], 0x100004
je 0x494989
mov eax, dword [esi + 0x24]
and eax, 0xfffffbff
mov dword [esi + 0x94], 0
or eax, 0x1000000
mov dword [esi + 0x98], 0
mov dword [esi + 0x9c], 0
mov dword [esi + 0xbc], 0
mov dword [esi + 0xc0], 0
mov dword [esi + 0x24], eax
mov dword [esi + 0x7c], 0x10000
jmp 0x494989
cmp edx, 0xf0
jae 0x494989
mov eax, edx
shl eax, 6
movzx eax, word [eax + edi + 0x821e]
mov dword [esi + 0x74], eax
test byte [edi + 0xe920], 0x20
mov eax, edx
mov ecx, ebp
mov dword [esp + 0x1c], eax
mov dword [esp + 0x3c], ecx
je 0x494b27
cmp eax, 0xf0
mov ebp, ecx
mov dword [esp + 0x44], ebp
sbb eax, eax
and eax, dword [esp + 0x1c]
cmp ecx, 0xfe
sbb edx, edx
and edx, eax
mov dword [esp + 0x1c], edx
mov eax, edx
mov dword [esp + 0x38], eax
test ecx, ecx
je 0x494a04
cmp ecx, 0x80
ja 0x4949fe
mov byte [esi + 0xd6], cl
mov cl, byte [esp + 0x1b]
mov dword [esp + 0x1c], edx
test cl, cl
jne 0x494a0c
push 0
push ebp
push eax
push dword [esp + 0x30]
mov ecx, edi
call fcn.00491e70
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], edx
jmp 0x494a08
mov dword [esp + 0x1c], eax
jmp 0x494a08
mov ebp, dword [esp + 0x3c]
mov cl, byte [esp + 0x1b]
test edx, edx
je 0x494a62
mov eax, dword [esi + 0x90]
push 1
push 1
mov dword [esp + 0x40], eax
movzx eax, cl
mov ecx, edi
push eax
push edx
push esi
call fcn.00493b70
mov byte [esi + 0xd7], 0
test byte [edi + 0xe920], 0x22
je 0x494a5e
mov eax, dword [esp + 0x38]
cmp eax, dword [esi + 0x90]
je 0x494a5e
test ebp, ebp
je 0x494b27
cmp ebp, 0x80
jae 0x494aab
mov byte [esp + 0x1b], 0
jmp 0x494aab
mov edx, dword [esp + 0x1c]
test ebp, ebp
je 0x494b27
test edx, edx
jne 0x494aab
mov cl, byte [esi + 0xd7]
test cl, cl
je 0x494aab
cmp ebp, 0x80
jae 0x494aab
mov eax, dword [edi + 0xe920]
and eax, 0x100004
neg eax
sbb eax, eax
inc eax
push eax
movzx eax, byte [esp + 0x1f]
push edx
push eax
movzx eax, cl
mov ecx, edi
push eax
push esi
call fcn.00493b70
mov byte [esi + 0xd7], 0
mov eax, dword [edi + 0xe920]
mov ecx, edi
and eax, 0x100004
neg eax
sbb eax, eax
inc eax
push eax
movzx eax, byte [esp + 0x1f]
push eax
push ebp
push dword [esp + 0x30]
call fcn.00493fc0
cmp byte [esp + 0x1b], 0
je 0x494b27
test dword [edi + 0xe920], 0x100004
je 0x494b27
cmp dword [esp + 0x1c], 0
mov edx, dword [esp + 0x34]
je 0x494b2b
or dword [esi + 0x24], 0x1000000
mov dword [esi + 0x94], 0
mov dword [esi + 0x98], 0
mov dword [esi + 0x9c], 0
mov dword [esi + 0xbc], 0
mov dword [esi + 0xc0], 0
jmp 0x494b2b
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x40]
cmp eax, 1
jne 0x494b55
cmp edx, 0x40
mov eax, 0x40
cmova edx, eax
or dword [esi + 0x24], 0x1000000
lea eax, [edx*4]
mov dword [esi + 0x74], eax
jmp case.0x494bf2.11
cmp eax, 2
jne 0x494b82
cmp edx, 0x40
mov eax, 0x40
cmova edx, eax
or dword [esi + 0x24], 0x1000000
lea eax, [edx*4]
mov dword [esi + 0x78], eax
jmp case.0x494bf2.11
mov eax, dword [esp + 0x40]
cmp eax, 2
jbe case.0x494bf2.11
mov ebp, dword [esp + 0x28]
cmp dword [edi + 0xe92c], ebp
jb case.0x494bf2.11
cmp eax, 0xb
jne 0x494bcf
test byte [edi + 0xe920], 0x20
je 0x494bbe
and edx, 0xf
mov ecx, edi
movzx edx, byte [edx + 0x5bed50]
push edx
push esi
call fcn.00495f90
jmp case.0x494bf2.11
shl edx, 4
mov ecx, edi
push edx
push esi
call fcn.00495f90
jmp case.0x494bf2.11
test edx, edx
je 0x494bdf
mov cl, byte [esp + 0x33]
mov byte [esi + 0xea], cl
jmp 0x494be6
movzx edx, byte [esi + 0xea]
add eax, 0xfffffffd
cmp eax, 0xa
ja case.0x494bf2.11
jmp dword [eax*4 + 0x495830]
shl edx, 4
push edx
push esi
mov ecx, edi
call fcn.004960c0
jmp case.0x494bf2.11
test byte [edi + 0xe920], 0x20
je 0x494c33
cmp dword [edi + 0xe92c], ebp
jne case.0x494bf2.11
shl edx, 4
mov ecx, edi
or edx, 0xf
push edx
push esi
call fcn.004960c0
jmp case.0x494bf2.11
test edx, edx
je 0x494c3f
mov byte [esi + 0xdb], dl
jmp 0x494c46
movzx edx, byte [esi + 0xdb]
test dword [edi + 0xe90c], 0x1000
je case.0x494bf2.11
mov eax, dword [esi + 0x74]
mov ecx, 0x100
lea eax, [eax + edx*4]
cmp eax, 0x100
cmovg eax, ecx
mov dword [esi + 0x74], eax
test byte [edi + 0xe920], 1
je case.0x494bf2.11
or dword [esi + 0x24], 0x1000000
jmp case.0x494bf2.11
test byte [edi + 0xe920], 0x20
je 0x494cae
cmp dword [edi + 0xe92c], ebp
jne case.0x494bf2.11
or edx, 0xf0
mov ecx, edi
push edx
push esi
call fcn.004960c0
jmp case.0x494bf2.11
test edx, edx
je 0x494cba
mov byte [esi + 0xdb], dl
jmp 0x494cc1
movzx edx, byte [esi + 0xdb]
test dword [edi + 0xe90c], 0x1000
je case.0x494bf2.11
mov ecx, dword [esi + 0x74]
lea eax, [edx*4]
sub ecx, eax
mov eax, 0
cmovs ecx, eax
mov dword [esi + 0x74], ecx
test byte [edi + 0xe920], 1
je case.0x494bf2.11
or dword [esi + 0x24], 0x1000000
jmp case.0x494bf2.11
mov eax, edx
shl eax, 4
test al, 0xf0
je 0x494d0c
and dl, 0xf
mov byte [esi + 0xe1], dl
or dword [esi + 0x24], 0x10000
jmp case.0x494bf2.11
test dl, 0xf
je 0x494d27
mov al, dl
and al, 0xf
shl al, 2
mov byte [esi + 0xe2], al
test dl, 0xf0
je 0x494d35
shr edx, 4
mov byte [esi + 0xe1], dl
or dword [esi + 0x24], 0x10000
jmp case.0x494bf2.11
shl edx, 4
push edx
push esi
mov ecx, edi
call fcn.004944a0
jmp case.0x494bf2.11
lea eax, [edx*4]
mov ecx, edi
push eax
push esi
call fcn.00494610
jmp case.0x494bf2.11
lea eax, [edx*4]
mov ecx, edi
push eax
push esi
call fcn.00494580
mov eax, dword [esp + 0x20]
test eax, eax
je case.0x4953bf.17
dec eax
cmp eax, 0x1e
ja case.0x4953bf.17
jmp dword [eax*4 + 0x49585c]
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
cmp ebx, 0x40
jae 0x494dae
shl ebx, 2
or dword [esi + 0x24], 0x1000000
mov dword [esi + 0x74], ebx
jmp 0x494e16
or dword [esi + 0x24], 0x1000000
mov ebx, 0x100
mov dword [esi + 0x74], ebx
jmp 0x494e16
test ebx, ebx
jne 0x494dcc
test byte [edi + 0xe920], 1
jne case.0x4953bf.17
push ebx
push esi
mov ecx, edi
call fcn.00494610
jmp case.0x4953bf.17
test ebx, ebx
jne 0x494de4
test byte [edi + 0xe920], 1
jne case.0x4953bf.17
push ebx
push esi
mov ecx, edi
call fcn.00494580
jmp case.0x4953bf.17
test ebx, ebx
jne 0x494dfc
cmp dword [edi + 0xe920], 1
je case.0x4953bf.17
push ebx
push esi
mov ecx, edi
call fcn.004960c0
jmp case.0x4953bf.17
push ebx
push esi
mov ecx, edi
call fcn.00495f90
lea eax, [edi + 0xe92c]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
add esi, 0x100
inc ecx
cmp ecx, dword [edi + 0xe910]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x2c]
jb 0x4946e0
cmp dword [eax], 0
jne 0x49581f
test ecx, ecx
js 0x4955f8
cmp dword [edi + 0xe934], 0
mov eax, dword [edi + 0xe950]
mov dword [edi + 0xe954], eax
mov dword [edi + 0xe944], ecx
je 0x49581f
lea eax, [ecx + 1]
mov dword [edi + 0xe944], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
test ebx, ebx
jne 0x494e93
cmp dword [edi + 0xe920], 1
je 0x494e9c
push ebx
push esi
mov ecx, edi
call fcn.004960c0
push 0
jmp 0x494e08
test bl, 0xf
je 0x494eb5
mov al, bl
and al, 0xf
shl al, 2
mov byte [esi + 0xe2], al
test bl, 0xf0
je 0x494ec3
shr ebx, 4
mov byte [esi + 0xe1], bl
or dword [esi + 0x24], 0x10000
jmp case.0x4953bf.17
test ebx, ebx
jne 0x494edc
cmp dword [edi + 0xe920], 1
je 0x494ec3
push ebx
push esi
mov ecx, edi
call fcn.004960c0
or dword [esi + 0x24], 0x10000
jmp case.0x4953bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
push ebx
mov ecx, edi
call fcn.00495e30
jmp case.0x4953bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
test byte [edi + 0xe920], 0x22
je 0x494f40
test ebx, ebx
je 0x494f39
mov byte [esi + 0xeb], bl
jmp 0x494f40
movzx ebx, byte [esi + 0xeb]
cmp ebx, 0x20
jae 0x494fb0
mov ecx, dword [edi + 0xe940]
mov eax, ebx
mov edx, dword [esp + 0x14]
and eax, 0xf
and bl, 0xf0
add eax, eax
cmp bl, 0x10
mov ebx, dword [esp + 0x10]
jne 0x494f8a
add eax, ecx
mov dword [edi + 0xe940], eax
cmp eax, 0xff
lea eax, [edi + 0xe92c]
jbe 0x494e1e
mov dword [edi + 0xe940], 0xff
jmp 0x494e1e
sub ecx, eax
lea eax, [edi + 0xe92c]
mov dword [edi + 0xe940], ecx
cmp ecx, 0x20
jge 0x494e1e
mov dword [edi + 0xe940], 0x20
jmp 0x494e1e
mov dword [edi + 0xe940], ebx
jmp 0x494e16
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
test ebx, ebx
je 0x494fda
mov byte [esi + 0xec], bl
jmp 0x494fe1
movzx ebx, byte [esi + 0xec]
movzx ecx, byte [esi + 0xed]
mov al, byte [esi + 0xf6]
shl ecx, 8
or ecx, ebx
shl ecx, 8
test al, al
je 0x495053
cmp al, 0x80
jae 0x495053
cmp byte [esp + 0x1b], 0
jne 0x495008
add ecx, dword [esi + 4]
mov edx, dword [esi + 0x20]
mov dword [esi + 4], ecx
cmp ecx, edx
jb case.0x4953bf.17
test dword [edi + 0xe920], 0x100004
jne case.0x4953bf.17
mov eax, dword [esi + 0x28]
mov dword [esi + 4], eax
test byte [edi + 0xe90c], 4
je case.0x4953bf.17
mov ebx, dword [esp + 0x10]
cmp edx, 4
jbe 0x495048
lea eax, [edx - 2]
mov dword [esi + 4], eax
lea eax, [edi + 0xe92c]
jmp 0x494e1a
cmp ecx, dword [esi + 0x20]
jae case.0x4953bf.17
test dword [edi + 0xe920], 0x20010
lea eax, [edi + 0xe92c]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
je 0x494e1e
mov dword [esi + 4], ecx
jmp 0x494e1e
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
cmp dword [esi + 0x80], 0
je 0x494e16
cmp byte [esi + 0xd4], 0
je 0x494e16
test ebx, ebx
jne 0x4950c0
test byte [edi + 0xe920], 0x22
je 0x494e16
mov edx, dword [esp + 0x14]
mov byte [esi + 0xd8], 1
test ebx, ebx
je 0x4950d5
mov byte [esi + 0xd9], bl
mov ebx, dword [esp + 0x10]
jmp 0x494e1e
test dword [edi + 0xe920], 0x100004
je 0x495114
test bl, 0xf0
jne 0x4950fd
movzx eax, byte [esi + 0xf1]
and eax, 0xf0
or ebx, eax
test bl, 0xf
jne 0x49510e
movzx eax, byte [esi + 0xf1]
and eax, 0xf
or ebx, eax
or ebx, 0x100
test ebx, ebx
je 0x49512f
push ebx
push dword [esp + 0x28]
mov ecx, edi
mov byte [esi + 0xf1], bl
call fcn.00495c40
jmp case.0x4953bf.17
movzx ebx, byte [esi + 0xf1]
mov ecx, edi
push ebx
push dword [esp + 0x28]
call fcn.00495c40
jmp case.0x4953bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
mov edx, dword [esp + 0x14]
mov byte [esi + 0xd8], 0x12
test ebx, ebx
je 0x4950d5
mov byte [esi + 0xf3], bl
mov ebx, dword [esp + 0x10]
jmp 0x494e1e
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
cmp dword [edi + 0xe920], 0x20
je 0x49519a
add ebx, ebx
cmp ebx, 0x80
mov eax, pe_nt_image_headers32
cmova ebx, eax
lea eax, [ebx + ebx]
mov dword [edi + 0xe960], eax
jmp case.0x4953bf.17
xor edx, edx
test ebx, ebx
je 0x4951c4
mov dword [edi + 0xe970], ebx
jmp 0x4951ca
mov ebx, dword [edi + 0xe970]
mov ebp, ebx
mov eax, ebx
and ebp, 0xf
and eax, 0xf0
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0xe90c]
setne cl
cmp ebp, 0xf
mov dword [esp + 0x20], eax
sete al
test al, cl
je 0x495202
test dword [esp + 0x20], 0x1000
je 0x49522a
mov edx, ebx
shr edx, 4
jmp 0x495228
and dword [esp + 0x20], 0x1000
cmp dword [esp + 0x40], 0xf0
sete cl
test ebp, ebp
setne al
test al, cl
je 0x495271
cmp dword [esp + 0x20], edx
je 0x49522a
mov edx, ebp
neg edx
add edx, edx
mov ebx, dword [esp + 0x10]
test edx, edx
je 0x495048
cmp dword [edi + 0xe920], 0x20
lea ecx, [edx + edx]
mov eax, dword [edi + 0xe960]
cmove ecx, edx
add eax, ecx
xor ecx, ecx
test eax, eax
cmovns ecx, eax
mov eax, 0x100
cmp ecx, 0x100
cmovg ecx, eax
lea eax, [edi + 0xe92c]
mov dword [edi + 0xe960], ecx
jmp 0x494e1a
cmp dword [esp + 0x20], edx
jne 0x49522a
cmp dword [esp + 0x40], edx
je 0x495224
mov edx, ebx
shr edx, 4
and edx, 0xf
jmp 0x495228
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
test dword [edi + 0xe90c], 0x4000
jne 0x4952ad
and dword [esi + 0x24], 0xfffff7ff
test dword [edi + 0xe920], 0x100024
mov ecx, dword [esi + 0x24]
je 0x4952cd
or ecx, 0x1000000
mov dword [esi + 0x78], ebx
mov dword [esi + 0x24], ecx
jmp 0x494e16
cmp ebx, 0x80
ja 0x4952ef
lea eax, [ebx + ebx]
or ecx, 0x1000000
mov dword [esi + 0x78], eax
lea eax, [edi + 0xe92c]
mov dword [esi + 0x24], ecx
jmp 0x494e16
cmp ebx, 0xa4
jne 0x495304
mov dword [esi + 0x78], pe_nt_image_headers32
or ecx, 0x800
or ecx, 0x1000000
mov dword [esi + 0x24], ecx
jmp 0x494e16
push ebx
push esi
mov ecx, edi
call fcn.004944a0
jmp case.0x4953bf.17
test bl, 0xf
je 0x495332
mov al, bl
and al, 0xf
shl al, 2
mov byte [esi + 0xe5], al
test bl, 0xf0
je 0x495340
shr ebx, 4
mov byte [esi + 0xe4], bl
or dword [esi + 0x24], 0x20000
jmp case.0x4953bf.17
test bl, 0xf
je 0x494eb5
mov al, bl
and al, 0xf
jmp 0x494eaf
push ebx
push dword [esp + 0x28]
mov ecx, edi
call fcn.00492390
jmp case.0x4953bf.17
push ebx
push dword [esp + 0x28]
mov ecx, edi
call fcn.00492630
jmp case.0x4953bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
push dword [esp + 0x24]
mov ecx, edi
call fcn.00493ee0
jmp case.0x4953bf.17
mov eax, ebx
and eax, 0xf0
add eax, 0xfffffff0
cmp eax, 0x90
ja case.0x4953bf.17
movzx eax, byte [eax + 0x4958e8]
jmp dword [eax*4 + 0x4958d8]
and ebx, 0xf
mov ecx, edi
push ebx
push esi
call fcn.00492bb0
jmp case.0x4953bf.17
and ebx, 0xf
mov ecx, edi
push ebx
push esi
call fcn.00492b20
jmp case.0x4953bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
mov edx, dword [esp + 0x14]
jne 0x4950d5
cmp ebx, 0x40
ja 0x4950d5
or dword [esi + 0x24], 0x1000000
mov dword [esi + 0xa8], ebx
mov ebx, dword [esp + 0x10]
jmp 0x494e1e
test ebx, ebx
je 0x49542a
mov byte [esi + 0xdf], bl
jmp 0x495431
movzx ebx, byte [esi + 0xdf]
mov ebp, dword [edi + 0xe90c]
mov edx, ebx
and edx, 0xf
mov eax, ebx
and eax, 0xf0
mov dword [esp + 0x38], eax
setne cl
cmp edx, 0xf
sete al
test al, cl
je 0x495498
test ebp, 0x1000
je case.0x4953bf.17
shr ebx, 4
mov edx, dword [esp + 0x14]
test ebx, ebx
je 0x495489
mov eax, dword [esi + 0xa8]
xor ecx, ecx
add eax, ebx
cmovns ecx, eax
mov eax, 0x40
cmp ecx, 0x40
cmovg ecx, eax
mov dword [esi + 0xa8], ecx
mov ebx, dword [esp + 0x10]
lea eax, [edi + 0xe92c]
jmp 0x494e1e
and ebp, 0x1000
cmp dword [esp + 0x38], 0xf0
sete cl
test edx, edx
setne al
test al, cl
je 0x4954c0
test ebp, ebp
je case.0x4953bf.17
mov ebx, edx
neg ebx
jmp 0x495463
test ebp, ebp
jne case.0x4953bf.17
test edx, edx
je 0x495460
mov ebx, edx
neg ebx
jmp 0x495463
test bl, 0xf
je 0x4954e1
mov al, bl
and al, 0xf
mov byte [esi + 0xe8], al
test bl, 0xf0
je 0x4954ef
shr ebx, 4
mov byte [esi + 0xe7], bl
or dword [esi + 0x24], 0x40000
jmp case.0x4953bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
mov edx, dword [esi + 0x8c]
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], ebx
test edx, edx
je 0x494e16
mov ecx, dword [esi + 0x24]
test ecx, 0x400000
je 0x494e16
mov al, byte [edx + 0x22d]
test al, al
je case.0x4953bf.17
movzx eax, al
movzx eax, word [edx + eax*2 + 0x4a]
mov edx, dword [esp + 0x14]
cmp ebx, eax
mov ebx, dword [esp + 0x10]
lea eax, [edi + 0xe92c]
jbe 0x494e1e
and ecx, 0xffbfffff
mov dword [esi + 0x24], ecx
jmp 0x494e1e
mov edx, ebx
lea eax, [edi + 0xe92c]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x14], edx
jmp 0x494e1e
mov dword [esp + 0x10], ebx
lea eax, [edi + 0xe92c]
jmp 0x494e1a
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x494e16
mov ecx, edi
cmp ebx, 0x80
jae 0x4955d9
movzx eax, byte [esi + 0xfe]
add eax, 0x694
shl eax, 5
push ebx
add eax, edi
push eax
push dword [esp + 0x2c]
call fcn.00495980
jmp case.0x4953bf.17
and ebx, 0x7f
add ebx, 0x6a4
shl ebx, 5
push 0
add ebx, edi
push ebx
push dword [esp + 0x2c]
call fcn.00495980
jmp case.0x4953bf.17
test ebx, ebx
jns 0x495610
test edx, edx
jns 0x49561f
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x138
ret
test edx, edx
jns 0x49561f
mov edx, dword [edi + 0xe950]
inc edx
mov dword [esp + 0x14], edx
mov esi, dword [edi + 0xe950]
xor eax, eax
test ebx, ebx
cmovs ebx, eax
mov dword [esp + 0x10], ebx
cmp edx, esi
jl 0x495646
jne 0x4957a5
cmp ebx, dword [edi + 0xe948]
jg 0x4957a5
mov ecx, dword [edi + 0xe948]
mov eax, edx
cmp edx, 0xf0
jae 0x495668
cmp byte [edi + eax + 0xd060], 0xfe
jne 0x495668
inc eax
cmp eax, 0xf0
jb 0x495656
cmp esi, 0xf0
jae 0x495792
cmp eax, 0xf0
jae 0x495792
cmp eax, esi
ja 0x4957a5
jb 0x495792
movzx ebp, word [edi + esi*2 + 0xce80]
cmp ebx, ebp
jae 0x495792
cmp dword [edi + esi*4 + 0xcac0], 0
je 0x495792
cmp ecx, 0x100
jae 0x495792
cmp ebx, 0x100
jae 0x495792
push 0x100
lea eax, [esp + 0x4c]
push 0
push eax
call fcn.00465b30
add esp, 0xc
mov eax, 0x100
cmp ebp, 0x100
cmova ebp, eax
mov eax, dword [edi + 0xe948]
mov dword [esp + 0x38], ebp
mov byte [esp + eax + 0x48], 1
cmp byte [esp + ebx + 0x48], 0
jne 0x495792
cmp ebx, ebp
jae 0x4957a5
mov eax, dword [edi + 0xe910]
xor edx, edx
imul eax, ebx
or ebp, 0xffffffff
mov byte [esp + ebx + 0x48], 1
inc ebx
mov dword [esp + 0x2c], 0
lea ecx, [eax + eax*2]
mov eax, dword [edi + esi*4 + 0xcac0]
cmp dword [edi + 0xe910], edx
jbe 0x49577e
lea eax, [eax + ecx*2]
add eax, 5
nop dword [eax + eax]
mov cl, byte [eax - 2]
cmp cl, 0xc
jne 0x49575c
movzx ecx, byte [eax]
cmp ecx, esi
jb 0x495792
ja 0x4957a5
mov ecx, 1
mov dword [esp + 0x2c], ecx
jmp 0x495768
cmp cl, 0xe
mov ecx, dword [esp + 0x2c]
jne 0x495768
movzx ebp, byte [eax]
inc edx
add eax, 6
cmp edx, dword [edi + 0xe910]
jb 0x495740
test ebp, ebp
js 0x49577e
test ecx, ecx
je 0x4957a5
mov ebx, ebp
mov ebp, dword [esp + 0x38]
cmp ebx, ebp
jae 0x4957a5
cmp ebx, 0x100
jb 0x4956f4
mov eax, dword [edi + 0xe97c]
test eax, eax
je 0x495813
jle 0x4957a5
dec eax
mov dword [edi + 0xe97c], eax
mov edx, dword [esp + 0x14]
cmp edx, 0x100
jge 0x49581f
cmp edx, esi
jne 0x4957d1
mov eax, dword [esp + 0x10]
cmp eax, dword [edi + 0xe948]
jne 0x4957f7
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x138
ret
xor eax, eax
cmp dword [edi + 0xe910], eax
jbe 0x4957f3
lea ecx, [edi + 0xf5]
mov byte [ecx], 0
lea ecx, [ecx + 0x100]
inc eax
cmp eax, dword [edi + 0xe910]
jb 0x4957e1
mov eax, dword [esp + 0x10]
mov dword [edi + 0xe944], eax
mov eax, 1
mov dword [edi + 0xe954], edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
mov eax, dword [edi + 0xe980]
mov dword [edi + 0xe97c], eax
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x138
ret
push ecx
mov eax, dword [ecx + 0xe934]
mov edx, dword [ecx + 0xe92c]
inc eax
imul eax, dword [ecx + 0xe93c]
inc edx
push ebx
push ebp
push esi
push edi
add eax, dword [ecx + 0xe938]
mov dword [ecx + 0xe92c], edx
cmp edx, eax
jb 0x496ed6
mov esi, dword [ecx + 0xe950]
mov eax, dword [ecx + 0xe954]
mov ebp, dword [ecx + 0xe944]
mov dword [ecx + 0xe934], 0
mov dword [ecx + 0xe938], 0
mov dword [ecx + 0xe92c], 0
mov dword [ecx + 0xe948], ebp
cmp esi, eax
je 0x496cf0
mov dword [ecx + 0xe950], eax
mov esi, eax
mov eax, dword [ecx + 0xe90c]
and eax, 0x20
mov dword [esp + 0x10], eax
jne 0x496dca
cmp esi, 0x100
jae 0x496d47
movzx eax, byte [esi + ecx + 0xd060]
mov dword [ecx + 0xe94c], eax
mov edi, eax
cmp eax, 0xf0
jae 0x496d3d
cmp dword [ecx + eax*4 + 0xcac0], 0
jne 0x496d3d
mov dword [ecx + 0xe94c], 0xfe
mov edi, 0xfe
jmp 0x496d56
cmp edi, 0xf0
jb 0x496dc4
jmp 0x496d56
mov dword [ecx + 0xe94c], 0xff
mov edi, 0xff
mov edx, esi
nop dword [eax + eax]
cmp edi, 0xff
je 0x496f58
cmp edx, 0x100
jae 0x496f58
lea esi, [edx + 1]
mov dword [ecx + 0xe950], esi
cmp esi, 0x100
jae 0x496f4e
movzx eax, byte [esi + ecx + 0xd060]
mov edx, esi
mov dword [ecx + 0xe94c], eax
mov edi, eax
cmp eax, 0xf0
jae 0x496dbc
cmp dword [ecx + eax*4 + 0xcac0], 0
jne 0x496dbc
mov dword [ecx + 0xe94c], 0xfe
jmp 0x496d6c
cmp edi, 0xf0
jae 0x496d60
mov dword [ecx + 0xe954], esi
mov eax, dword [ecx + 0xe94c]
cmp eax, 0xf0
jae 0x496f58
cmp dword [ecx + eax*4 + 0xcac0], 0
lea ebx, [ecx + eax*4]
je 0x496f58
lea edi, [ecx + eax*2]
movzx eax, word [edi + 0xce80]
cmp ebp, eax
jb 0x496e06
mov dword [ecx + 0xe948], 0
xor ebp, ebp
lea edx, [ebp + 1]
mov dword [ecx + 0xe944], edx
movzx eax, word [edi + 0xce80]
cmp edx, eax
jb 0x496e34
cmp dword [esp + 0x10], 0
jne 0x496e2a
lea eax, [esi + 1]
mov dword [ecx + 0xe954], eax
mov dword [ecx + 0xe944], 0
mov esi, dword [ecx + 0xe910]
mov eax, esi
imul eax, ebp
lea edx, [eax + eax*2]
mov eax, dword [ebx + 0xcac0]
xor ebx, ebx
lea edi, [eax + edx*2]
test esi, esi
je 0x496ed6
lea edx, [ecx + 0xf7]
nop dword [eax + eax]
movzx eax, byte [edi]
lea edx, [edx + 0x100]
mov byte [edx - 0x101], al
lea edi, [edi + 6]
movzx eax, byte [edi - 5]
inc ebx
mov byte [edx - 0x100], al
movzx eax, byte [edi - 4]
mov byte [edx - 0xff], al
movzx eax, byte [edi - 2]
mov byte [edx - 0xfe], al
movzx eax, byte [edi - 3]
mov byte [edx - 0xfd], al
movzx eax, byte [edi - 1]
and dword [edx - 0x1d3], 0xfff0ffff
mov byte [edx - 0xfc], al
mov eax, dword [edx - 0x18f]
mov dword [edx - 0x1e3], eax
mov eax, dword [edx - 0x193]
mov dword [edx - 0x1e7], eax
mov byte [edx - 0x11f], 0
cmp ebx, dword [ecx + 0xe910]
jb 0x496e60
mov edi, dword [ecx + 0xe93c]
test edi, edi
jne 0x496eef
mov dword [ecx + 0xe93c], 1
mov edi, 1
mov esi, dword [ecx + 0xe90c]
mov eax, dword [ecx + 0xe92c]
or esi, 0x1000
mov dword [ecx + 0xe90c], esi
test eax, eax
je 0x496f42
and esi, 0xffffefff
test byte [ecx + 0xe920], 4
mov dword [ecx + 0xe90c], esi
jne 0x496f42
mov edx, dword [ecx + 0xe934]
inc edx
imul edx, edi
cmp eax, edx
jae 0x496f42
xor edx, edx
div edi
test edx, edx
jne 0x496f42
or esi, 0x1000
mov dword [ecx + 0xe90c], esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 4
jmp 0x4946a0
mov dword [ecx + 0xe94c], 0xff
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret