Function at 0x493889
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push 0xffffffffffffffff
push 0x689ff0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
mov eax, dword [esp + 0x40]
mov dword [esp], ecx
mov ecx, dword [ecx + 4]
push ebx
push ebp
push esi
mov ebp, dword [ecx + 0x14]
mov esi, dword [eax + 0x19]
mov eax, dword [esp + 0x40]
push edi
mov edi, dword [esp + 0x48]
mov edx, dword [ebp]
push edi
push eax
mov ecx, ebp
mov dword [esp + 0x58], esi
mov dword [esp + 0x30], ebp
call dword [edx + 0x1d8]
mov ebx, eax
mov ecx, ebx
mov dword [esp + 0x20], ebx
mov ax, word [ebx + 2]
and eax, 0xfff
mov dword [esp + 0x24], eax
call fcn.004a3d60
mov cl, byte [eax + 0x18]
mov byte [esp + 0x1c], cl
mov eax, dword [esp + 0x1c]
and eax, 0xff
sub eax, 0x12
je 0x494549
sub eax, 3
je 0x494a96
sub eax, 2
je 0x494235
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x10]
push edx
lea eax, [esp + 0x30]
push ebx
push eax
call fcn.00490594
mov esi, dword [esp + 0x54]
xor ebx, ebx
mov dword [esp + 0x3c], 1
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x44]
and eax, 7
shl eax, 3
mov ecx, dword [eax + 0x7c8370]
mov eax, dword [eax + 0x7c8374]
add eax, edi
add ecx, edx
mov edx, dword [ebp]
push eax
mov dword [esp + 0x1c], ecx
push ecx
mov ecx, ebp
mov dword [esp + 0x24], eax
call dword [edx + 0x1d8]
test byte [eax + 9], 0x20
mov dword [esp + 0x20], eax
jne 0x49399d
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx]
push edx
call dword [eax + 0xdc]
test eax, eax
je 0x494213
mov ecx, dword [esp + 0x20]
xor eax, eax
mov al, byte [ecx + 0xa]
mov edx, dword [eax*4 + 0x6b8a88]
test dword [edx + 0x17b], 0x10000
jne 0x4939da
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
push eax
push ecx
lea ecx, [edx + 0x326]
call fcn.00491ea5
test eax, eax
je 0x494213
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
push edx
lea ecx, [eax + 0x326]
mov eax, dword [esp + 0x1c]
push eax
mov dword [esp + 0x28], ecx
call fcn.00491f80
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x30], eax
mov edx, dword [ebp]
mov dword [esp + 0x28], ebx
lea eax, [ecx - 2]
and eax, 7
mov ecx, dword [eax*8 + 0x7c8374]
mov eax, dword [eax*8 + 0x7c8370]
add ecx, edi
push ecx
mov ecx, dword [esp + 0x48]
add eax, ecx
mov ecx, ebp
push eax
call dword [edx + 0x1d8]
mov cx, word [eax + 2]
and ecx, 0xfff
cmp cx, word [esp + 0x24]
jne 0x493aea
mov edx, dword [esp + 0x14]
mov ecx, edi
lea eax, [edx - 1]
mov edx, dword [ebp]
and eax, 7
mov dword [esp + 0x54], eax
add ecx, dword [eax*8 + 0x7c8374]
push ecx
mov ecx, dword [esp + 0x48]
add ecx, dword [eax*8 + 0x7c8370]
push ecx
mov ecx, ebp
call dword [edx + 0x208]
test eax, eax
jne 0x493a9f
mov eax, dword [esp + 0x54]
mov edx, edi
mov ecx, dword [eax*8 + 0x7c8374]
add edx, ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [eax*8 + 0x7c8370]
add ecx, edx
push ecx
mov ecx, dword [esp + 0x28]
call fcn.00491ea5
test eax, eax
je 0x493aea
mov eax, dword [esp + 0x54]
mov ecx, edi
mov edx, dword [ebp]
add ecx, dword [eax*8 + 0x7c8374]
push ecx
mov ecx, dword [esp + 0x48]
add ecx, dword [eax*8 + 0x7c8370]
push ecx
mov ecx, ebp
call dword [edx + 0x1d8]
xor edx, edx
mov dl, byte [eax + 0xa]
mov ecx, dword [edx*4 + 0x6b8a88]
test dword [ecx + 0x17b], 0x10000
jne 0x493ae2
test byte [eax + 0xb], 1
je 0x493aea
mov dword [esp + 0x28], 1
mov edx, dword [esp + 0x14]
mov dword [esp + 0x20], ebx
lea eax, [edx + 1]
mov edx, dword [ebp]
mov dword [esp + 0x54], eax
inc eax
and eax, 7
mov ecx, dword [eax*8 + 0x7c8374]
mov eax, dword [eax*8 + 0x7c8370]
add ecx, edi
push ecx
mov ecx, dword [esp + 0x48]
add eax, ecx
mov ecx, ebp
push eax
call dword [edx + 0x1d8]
mov cx, word [eax + 2]
and ecx, 0xfff
cmp cx, word [esp + 0x24]
jne 0x493be3
mov eax, dword [esp + 0x54]
mov ecx, edi
and eax, 7
mov edx, dword [ebp]
mov dword [esp + 0x54], eax
add ecx, dword [eax*8 + 0x7c8374]
push ecx
mov ecx, dword [esp + 0x48]
add ecx, dword [eax*8 + 0x7c8370]
push ecx
mov ecx, ebp
call dword [edx + 0x208]
test eax, eax
jne 0x493b96
mov eax, dword [esp + 0x54]
mov edx, edi
mov ecx, dword [eax*8 + 0x7c8374]
add edx, ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [eax*8 + 0x7c8370]
add ecx, edx
mov edx, dword [esp + 0x14]
push ecx
lea ecx, [edx + 0x326]
call fcn.00491ea5
test eax, eax
je 0x493be3
mov eax, dword [esp + 0x54]
mov edx, dword [ebp]
mov ecx, dword [eax*8 + 0x7c8374]
add edi, ecx
mov ecx, dword [esp + 0x44]
push edi
mov edi, dword [eax*8 + 0x7c8370]
add ecx, edi
push ecx
mov ecx, ebp
call dword [edx + 0x1d8]
xor edx, edx
mov dl, byte [eax + 0xa]
mov ecx, dword [edx*4 + 0x6b8a88]
test dword [ecx + 0x17b], 0x10000
jne 0x493bdb
test byte [eax + 0xb], 1
je 0x493be3
mov dword [esp + 0x20], 1
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp]
push eax
push ecx
mov ecx, ebp
mov dword [esp + 0x5c], ebx
call dword [edx + 0x6c]
mov edx, dword [esp + 0x30]
mov edi, eax
test byte [edx + 1], 0x20
jne 0x493c30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax + 0x10]
jl 0x493c38
cmp ecx, dword [eax + 0x18]
jge 0x493c38
mov ecx, dword [esp + 0x1c]
mov edx, dword [eax + 0x14]
cmp ecx, edx
jl 0x493c38
cmp ecx, dword [eax + 0x1c]
jge 0x493c38
test byte [edi + 0x17b], 8
je 0x493c38
mov dword [esp + 0x54], 1
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x493f83
cmp dword [esp + 0x20], ebx
je 0x493e49
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov eax, dword [ebp]
push ecx
push edx
mov ecx, ebp
call dword [eax + 0x1d8]
mov ecx, eax
call fcn.004a3d60
mov ecx, dword [eax + 0x92]
xor edx, edx
cmp ecx, ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], edx
jl 0x493ca0
test byte [esp + 0x4c], 1
jne 0x493c98
mov edx, dword [esp + 0x44]
mov dword [esp + 0x20], 1
add edx, ecx
test dl, 1
je 0x493c9c
mov dword [esp + 0x20], ebx
mov edx, dword [esp + 0x28]
mov eax, dword [eax + 0x96]
cmp eax, ebx
jl 0x493ccc
mov ecx, dword [esp + 0x4c]
and ecx, 1
cmp cl, 1
jne 0x493cca
mov edx, dword [esp + 0x48]
add edx, eax
and edx, 1
cmp dl, cl
jne 0x493cca
mov edx, 1
jmp 0x493ccc
xor edx, edx
cmp dword [esp + 0x20], ebx
jne 0x493d7d
cmp edx, ebx
jne 0x493d7d
mov eax, dword [esi + 0x2e8]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*2]
mov ecx, dword [esp + 0x50]
lea eax, [esi + edx*2 + 0x1b4]
mov edx, dword [ecx + 0x18d]
mov ecx, dword [esp + 0x4c]
and ecx, 3
mov dword [eax], edx
mov dword [eax + 4], ecx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov eax, dword [esi + 0x2e8]
mov ecx, dword [esp + 0x2c]
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
mov dword [esi + eax*2 + 0x1c5], ecx
mov eax, dword [edi + 0x17b]
test eax, 0x20000000
je 0x493e19
mov dx, word [edi + 0x1bb]
mov eax, dword [esi + 0x2e8]
mov cx, word [edi + 0x1bd]
mov word [esp + 0x30], dx
mov dx, word [edi + 0x1b9]
lea edi, [eax + eax*4]
lea eax, [eax + edi*2]
lea eax, [esi + eax*2 + 0x1bc]
mov byte [eax], dl
mov dl, byte [esp + 0x30]
jmp 0x493e13
mov eax, dword [esi + 0x2e8]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*2]
mov ecx, dword [esp + 0x50]
lea eax, [esi + edx*2 + 0x1b4]
mov edx, dword [ecx + 0x1a8]
mov ecx, dword [esp + 0x4c]
and ecx, 3
mov dword [eax], edx
mov dword [eax + 4], ecx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov eax, dword [esi + 0x2e8]
mov ecx, dword [esp + 0x2c]
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
mov dword [esi + eax*2 + 0x1c5], ecx
mov eax, dword [edi + 0x17b]
test eax, 0x20000000
je 0x493e19
mov dx, word [edi + 0x1bb]
mov eax, dword [esi + 0x2e8]
mov cx, word [edi + 0x1bd]
mov word [esp + 0x30], dx
mov dx, word [edi + 0x1b9]
lea edi, [eax + eax*4]
lea eax, [eax + edi*2]
lea eax, [esi + eax*2 + 0x1bc]
mov byte [eax], dl
mov dl, byte [esp + 0x30]
mov byte [eax + 1], dl
mov byte [eax + 2], cl
cmp dword [esp + 0x54], ebx
je 0x493e3e
mov eax, dword [esi + 0x2e8]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*2]
mov cl, byte [esi + edx*2 + 0x1c9]
or cl, 1
lea eax, [esi + edx*2 + 0x1c9]
mov byte [eax], cl
inc dword [esi + 0x2e8]
jmp 0x49420f
cmp eax, ebx
je 0x493f83
mov eax, dword [esi + 0x1b0]
mov edx, dword [esp + 0x50]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*8]
add eax, ecx
mov ecx, dword [edx + 0x172]
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
and ecx, 3
mov dword [eax + 4], ecx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov dword [eax + 0x16], ecx
mov byte [eax + 0x1a], bl
test dword [edi + 0x17b], 0x20000000
je 0x493edc
mov ax, word [edi + 0x1bb]
mov dx, word [edi + 0x1bd]
mov word [esp + 0x30], ax
mov eax, dword [esi + 0x1b0]
mov word [esp + 0x28], dx
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
lea eax, [eax + edx + 8]
mov dx, word [edi + 0x1b9]
mov byte [eax], dl
mov dl, byte [esp + 0x30]
mov byte [eax + 1], dl
mov dl, byte [esp + 0x28]
mov byte [eax + 2], dl
cmp dword [esp + 0x54], ebx
je 0x493ef5
mov eax, dword [esi + 0x1b0]
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
lea eax, [eax + edx + 0x1a]
or byte [eax], 1
mov eax, dword [esi + 0x1b0]
inc eax
mov dword [esi + 0x1b0], eax
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
add eax, edx
mov edx, dword [esp + 0x50]
mov edx, dword [edx + 0x157]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax], edx
inc ecx
mov byte [eax + 8], bl
and ecx, 3
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov dword [eax + 0x16], ecx
mov byte [eax + 0x1a], bl
mov eax, dword [edi + 0x17b]
test eax, 0x20000000
je 0x4940be
mov eax, dword [esi + 0x1b0]
mov dx, word [edi + 0x1bb]
mov cx, word [edi + 0x1bd]
mov word [esp + 0x30], dx
mov dx, word [edi + 0x1b9]
lea eax, [eax + eax*2]
lea edi, [esi + eax*8]
lea eax, [eax + edi + 8]
mov byte [eax], dl
mov dl, byte [esp + 0x30]
jmp 0x4940b8
mov eax, dword [esp + 0x20]
cmp eax, ebx
mov eax, dword [esi + 0x1b0]
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
je 0x4940cd
mov ecx, dword [esp + 0x50]
add eax, edx
mov edx, dword [ecx + 0x13c]
mov ecx, dword [esp + 0x4c]
and ecx, 3
mov dword [eax], edx
mov dword [eax + 4], ecx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov dword [eax + 0x16], ecx
mov byte [eax + 0x1a], bl
test dword [edi + 0x17b], 0x20000000
je 0x49401a
mov ax, word [edi + 0x1bd]
mov dx, word [edi + 0x1bb]
mov word [esp + 0x28], ax
mov eax, dword [esi + 0x1b0]
mov word [esp + 0x30], dx
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
lea eax, [eax + edx + 8]
mov dx, word [edi + 0x1b9]
mov byte [eax], dl
mov dl, byte [esp + 0x30]
mov byte [eax + 1], dl
mov dl, byte [esp + 0x28]
mov byte [eax + 2], dl
cmp dword [esp + 0x54], ebx
je 0x494033
mov eax, dword [esi + 0x1b0]
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
lea eax, [eax + edx + 0x1a]
or byte [eax], 1
mov eax, dword [esi + 0x1b0]
inc eax
mov dword [esi + 0x1b0], eax
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
add eax, edx
mov edx, dword [esp + 0x50]
mov edx, dword [edx + 0x172]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax], edx
inc ecx
mov byte [eax + 8], bl
and ecx, 3
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov dword [eax + 0x16], ecx
mov byte [eax + 0x1a], bl
mov eax, dword [edi + 0x17b]
test eax, 0x20000000
je 0x4940be
mov eax, dword [esi + 0x1b0]
mov dx, word [edi + 0x1bb]
mov cx, word [edi + 0x1bd]
mov word [esp + 0x30], dx
mov dx, word [edi + 0x1b9]
lea eax, [eax + eax*2]
lea edi, [esi + eax*8]
lea eax, [eax + edi + 8]
mov byte [eax], dl
mov dl, byte [esp + 0x30]
mov byte [eax + 1], dl
mov byte [eax + 2], cl
cmp dword [esp + 0x54], ebx
je 0x494209
jmp 0x4941f6
mov ecx, dword [esp + 0x50]
add eax, edx
mov edx, dword [ecx + 0x13c]
mov ecx, dword [esp + 0x4c]
and ecx, 3
mov dword [eax], edx
mov dword [eax + 4], ecx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov dword [eax + 0x16], ecx
mov byte [eax + 0x1a], bl
test dword [edi + 0x17b], 0x20000000
je 0x49414c
mov ax, word [edi + 0x1bd]
mov dx, word [edi + 0x1bb]
mov word [esp + 0x28], ax
mov eax, dword [esi + 0x1b0]
mov word [esp + 0x30], dx
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
lea eax, [eax + edx + 8]
mov dx, word [edi + 0x1b9]
mov byte [eax], dl
mov dl, byte [esp + 0x30]
mov byte [eax + 1], dl
mov dl, byte [esp + 0x28]
mov byte [eax + 2], dl
cmp dword [esp + 0x54], ebx
je 0x494165
mov eax, dword [esi + 0x1b0]
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
lea eax, [eax + edx + 0x1a]
or byte [eax], 1
mov eax, dword [esi + 0x1b0]
inc eax
mov dword [esi + 0x1b0], eax
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
add eax, edx
mov edx, dword [esp + 0x50]
mov edx, dword [edx + 0x157]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax], edx
inc ecx
mov byte [eax + 8], bl
and ecx, 3
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov dword [eax + 0x16], ecx
mov byte [eax + 0x1a], bl
mov eax, dword [edi + 0x17b]
test eax, 0x20000000
je 0x4941f0
mov eax, dword [esi + 0x1b0]
mov dx, word [edi + 0x1bb]
mov cx, word [edi + 0x1bd]
mov word [esp + 0x30], dx
mov dx, word [edi + 0x1b9]
lea eax, [eax + eax*2]
lea edi, [esi + eax*8]
lea eax, [eax + edi + 8]
mov byte [eax], dl
mov dl, byte [esp + 0x30]
mov byte [eax + 1], dl
mov byte [eax + 2], cl
cmp dword [esp + 0x54], ebx
je 0x494209
mov eax, dword [esi + 0x1b0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*8]
lea eax, [eax + ecx + 0x1a]
or byte [eax], 1
inc dword [esi + 0x1b0]
mov edi, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
inc eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x14]
add eax, 2
cmp eax, 8
mov dword [esp + 0x14], eax
jb 0x493942
jmp 0x494a96
mov ecx, ebx
call fcn.004a3d60
mov esi, dword [eax + 0x9b]
cmp esi, 8
je 0x494a96
mov edx, dword [ebp]
push 0x17
mov ecx, ebp
call dword [edx + 0x98]
mov dword [esp + 0x24], eax
mov eax, dword [ebp]
push 0x25
mov ecx, ebp
call dword [eax + 0x70]
push eax
lea ecx, [esp + 0x20]
push ebx
push ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
call fcn.00490594
lea eax, [esi - 2]
mov esi, dword [esp + 0x54]
xor ebx, ebx
and eax, 3
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x50], ebx
jmp 0x4942a0
mov eax, dword [esp + 0x30]
mov ebp, dword [esp + 0x28]
cmp dword [esp + 0x4c], eax
je 0x4943fb
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
and eax, 7
shl eax, 3
mov edi, dword [eax + 0x7c8370]
mov eax, dword [eax + 0x7c8374]
add eax, edx
mov edx, dword [ebp]
add edi, ecx
push eax
push edi
mov ecx, ebp
mov dword [esp + 0x5c], eax
call dword [edx + 0x1d8]
mov ebp, eax
mov ax, word [ebp + 2]
test eax, 0xfff
je 0x4942fd
mov ecx, dword [esp + 0x20]
xor ax, word [ecx + 2]
test eax, 0xfff
je 0x494527
test byte [ebp + 9], 0x20
jne 0x49431d
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x54]
push eax
push edi
mov edx, dword [ecx]
call dword [edx + 0xdc]
test eax, eax
je 0x494527
xor ecx, ecx
mov cl, byte [ebp + 0xa]
mov edx, dword [ecx*4 + 0x6b8a88]
test dword [edx + 0x17b], 0x10000
jne 0x494352
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x10]
push eax
push edi
add ecx, 0x326
call fcn.00491ea5
test eax, eax
je 0x494527
mov eax, dword [esi + 0x2e8]
mov ecx, dword [esp + 0x24]
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
mov edx, dword [ecx + 0x172]
mov ecx, dword [esp + 0x4c]
dec ecx
lea eax, [esi + eax*2 + 0x1b4]
and ecx, 3
mov dword [eax], edx
mov dword [eax + 4], ecx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov eax, dword [esi + 0x2e8]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
mov dword [esi + eax*2 + 0x1c5], ecx
mov eax, dword [esp + 0x18]
test dword [eax + 0x17b], 0x20000000
je 0x494521
mov dx, word [eax + 0x1bb]
mov cx, word [eax + 0x1bd]
mov word [esp + 0x54], dx
mov dx, word [eax + 0x1b9]
mov eax, dword [esi + 0x2e8]
lea edi, [eax + eax*4]
lea eax, [eax + edi*2]
lea eax, [esi + eax*2 + 0x1bc]
mov byte [eax], dl
mov dl, byte [esp + 0x54]
mov byte [eax + 1], dl
mov byte [eax + 2], cl
jmp 0x494521
mov ecx, dword [esp + 0x20]
xor eax, eax
mov edx, dword [esp + 0x44]
mov al, byte [ecx + 0xc]
mov ecx, dword [esp + 0x48]
mov edi, eax
mov eax, dword [esp + 0x50]
and eax, 7
shl eax, 3
shr edi, 4
mov ebp, dword [eax + 0x7c8370]
mov eax, dword [eax + 0x7c8374]
add eax, ecx
mov ecx, dword [esp + 0x28]
add ebp, edx
push eax
mov edx, dword [ecx]
push ebp
mov dword [esp + 0x5c], eax
call dword [edx + 0x1d8]
mov cx, word [eax + 2]
test ecx, 0xfff
je 0x49445d
mov edx, dword [esp + 0x20]
xor cx, word [edx + 2]
test ecx, 0xfff
je 0x494527
test byte [eax + 9], 0x20
jne 0x49447d
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x54]
push edx
push ebp
mov eax, dword [ecx]
call dword [eax + 0xdc]
test eax, eax
je 0x494527
mov eax, dword [esi + 0x2e8]
lea edi, [edi + edi*2]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*2]
mov ecx, dword [esp + 0x24]
lea eax, [esi + edx*2 + 0x1b4]
lea edx, [ecx + edi*8]
mov ecx, dword [edi + edx + 0x7f]
mov edx, dword [esp + 0x4c]
dec edx
mov dword [eax], ecx
and edx, 3
mov dword [eax + 4], edx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov eax, dword [esi + 0x2e8]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*2]
mov eax, dword [esp + 0x1c]
mov dword [esi + edx*2 + 0x1c5], eax
mov eax, dword [esp + 0x18]
test dword [eax + 0x17b], 0x20000000
je 0x494521
mov cx, word [eax + 0x1bb]
mov dx, word [eax + 0x1bd]
mov word [esp + 0x54], cx
mov ecx, dword [esi + 0x2e8]
mov ax, word [eax + 0x1b9]
lea edi, [ecx + ecx*4]
lea ecx, [ecx + edi*2]
lea ecx, [esi + ecx*2 + 0x1bc]
mov byte [ecx], al
mov al, byte [esp + 0x54]
mov byte [ecx + 1], al
mov byte [ecx + 2], dl
inc dword [esi + 0x2e8]
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x4c]
add eax, 2
inc edi
cmp eax, 8
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], eax
jb 0x494298
jmp 0x494a96
mov ecx, ebx
call fcn.004a3d60
xor ecx, ecx
xor ebx, ebx
mov cl, byte [eax + 0x2d]
mov edx, ecx
mov ecx, dword [esp + 0x44]
sub ecx, edx
xor edx, edx
mov dl, byte [eax + 0x2e]
sub edi, edx
cmp ecx, ebx
jne 0x49471e
mov eax, dword [esp + 0x54]
mov ebp, dword [esp + 0x4c]
cmp edi, ebx
jne 0x494605
mov ecx, dword [eax + 0x2e8]
lea edx, [ecx + ecx*4]
lea ecx, [ecx + edx*2]
mov edx, dword [esi + 0x172]
lea ecx, [eax + ecx*2 + 0x1b4]
mov dword [ecx], edx
mov dword [ecx + 4], ebx
mov byte [ecx + 8], bl
mov byte [ecx + 9], bl
mov byte [ecx + 0xa], bl
mov dword [ecx + 0xc], ebx
mov byte [ecx + 0x10], 0xff
mov dword [ecx + 0x11], ebx
mov byte [ecx + 0x15], bl
mov ecx, dword [ebp + 0x17b]
test ecx, 0x20000000
je 0x494696
mov cx, word [ebp + 0x1bb]
mov dx, word [ebp + 0x1bd]
mov word [esp + 0x48], cx
mov cx, word [ebp + 0x1b9]
mov word [esp + 0x44], cx
mov ecx, dword [eax + 0x2e8]
lea edi, [ecx + ecx*4]
lea ecx, [ecx + edi*2]
lea edi, [eax + ecx*2 + 0x1bc]
mov cl, byte [esp + 0x44]
mov byte [edi], cl
mov cl, byte [esp + 0x48]
jmp 0x494690
cmp edi, 4
jne 0x49469c
mov ecx, dword [eax + 0x2e8]
lea edx, [ecx + ecx*4]
lea ecx, [ecx + edx*2]
mov edx, dword [esi + 0x121]
lea ecx, [eax + ecx*2 + 0x1b4]
mov dword [ecx], edx
mov dword [ecx + 4], 2
mov byte [ecx + 8], bl
mov byte [ecx + 9], bl
mov byte [ecx + 0xa], bl
mov dword [ecx + 0xc], ebx
mov byte [ecx + 0x10], 0xff
mov dword [ecx + 0x11], ebx
mov byte [ecx + 0x15], bl
mov ecx, dword [ebp + 0x17b]
test ecx, 0x20000000
je 0x494696
mov cx, word [ebp + 0x1bb]
mov dx, word [ebp + 0x1bd]
mov word [esp + 0x48], cx
mov cx, word [ebp + 0x1b9]
mov word [esp + 0x44], cx
mov ecx, dword [eax + 0x2e8]
lea edi, [ecx + ecx*4]
lea ecx, [ecx + edi*2]
lea edi, [eax + ecx*2 + 0x1bc]
mov cl, byte [esp + 0x44]
mov byte [edi], cl
mov cl, byte [esp + 0x48]
mov byte [edi + 1], cl
mov byte [edi + 2], dl
inc dword [eax + 0x2e8]
mov ecx, dword [eax + 0x2e8]
lea edx, [ecx + ecx*4]
lea ecx, [ecx + edx*2]
mov edx, dword [esi + 0x172]
lea ecx, [eax + ecx*2 + 0x1b4]
mov dword [ecx], edx
mov dword [ecx + 4], 3
mov byte [ecx + 8], bl
mov byte [ecx + 9], bl
mov byte [ecx + 0xa], bl
mov dword [ecx + 0xc], ebx
mov byte [ecx + 0x10], 0xff
mov dword [ecx + 0x11], ebx
mov byte [ecx + 0x15], bl
mov ecx, dword [ebp + 0x17b]
test ecx, 0x20000000
je 0x4948d4
mov cx, word [ebp + 0x1bb]
mov bx, word [ebp + 0x1b9]
mov word [esp + 0x44], cx
mov ecx, dword [eax + 0x2e8]
mov dx, word [ebp + 0x1bd]
lea esi, [ecx + ecx*4]
lea ecx, [ecx + esi*2]
lea ecx, [eax + ecx*2 + 0x1bc]
mov byte [ecx], bl
mov bl, byte [esp + 0x44]
jmp 0x4948ce
cmp ecx, 2
jne 0x4948df
mov eax, dword [esp + 0x54]
mov ebp, dword [esp + 0x4c]
cmp edi, ebx
jne 0x4947be
mov ecx, dword [eax + 0x2e8]
lea edx, [ecx + ecx*4]
lea ecx, [ecx + edx*2]
mov edx, dword [esi + 0x172]
lea ecx, [eax + ecx*2 + 0x1b4]
mov dword [ecx], edx
mov dword [ecx + 4], ebx
mov byte [ecx + 8], bl
mov byte [ecx + 9], bl
mov byte [ecx + 0xa], bl
mov dword [ecx + 0xc], ebx
mov byte [ecx + 0x10], 0xff
mov dword [ecx + 0x11], ebx
mov byte [ecx + 0x15], bl
mov ecx, dword [ebp + 0x17b]
test ecx, 0x20000000
je 0x49484f
mov cx, word [ebp + 0x1bb]
mov dx, word [ebp + 0x1bd]
mov word [esp + 0x48], cx
mov cx, word [ebp + 0x1b9]
mov word [esp + 0x44], cx
mov ecx, dword [eax + 0x2e8]
lea edi, [ecx + ecx*4]
lea ecx, [ecx + edi*2]
lea edi, [eax + ecx*2 + 0x1bc]
mov cl, byte [esp + 0x44]
mov byte [edi], cl
mov cl, byte [esp + 0x48]
jmp 0x494849
cmp edi, 4
jne 0x494855
mov ecx, dword [eax + 0x2e8]
lea edx, [ecx + ecx*4]
lea ecx, [ecx + edx*2]
mov edx, dword [esi + 0x18d]
lea ecx, [eax + ecx*2 + 0x1b4]
mov dword [ecx], edx
mov dword [ecx + 4], 2
mov byte [ecx + 8], bl
mov byte [ecx + 9], bl
mov byte [ecx + 0xa], bl
mov dword [ecx + 0xc], ebx
mov byte [ecx + 0x10], 0xff
mov dword [ecx + 0x11], ebx
mov byte [ecx + 0x15], bl
mov ecx, dword [ebp + 0x17b]
test ecx, 0x20000000
je 0x49484f
mov cx, word [ebp + 0x1bb]
mov dx, word [ebp + 0x1bd]
mov word [esp + 0x48], cx
mov cx, word [ebp + 0x1b9]
mov word [esp + 0x44], cx
mov ecx, dword [eax + 0x2e8]
lea edi, [ecx + ecx*4]
lea ecx, [ecx + edi*2]
lea edi, [eax + ecx*2 + 0x1bc]
mov cl, byte [esp + 0x44]
mov byte [edi], cl
mov cl, byte [esp + 0x48]
mov byte [edi + 1], cl
mov byte [edi + 2], dl
inc dword [eax + 0x2e8]
mov ecx, dword [eax + 0x2e8]
lea edx, [ecx + ecx*4]
lea ecx, [ecx + edx*2]
mov edx, dword [esi + 0x172]
lea ecx, [eax + ecx*2 + 0x1b4]
mov dword [ecx], edx
mov dword [ecx + 4], 1
mov byte [ecx + 8], bl
mov byte [ecx + 9], bl
mov byte [ecx + 0xa], bl
mov dword [ecx + 0xc], ebx
mov byte [ecx + 0x10], 0xff
mov dword [ecx + 0x11], ebx
mov byte [ecx + 0x15], bl
mov ecx, dword [ebp + 0x17b]
test ecx, 0x20000000
je 0x4948d4
mov cx, word [ebp + 0x1bb]
mov bx, word [ebp + 0x1b9]
mov word [esp + 0x44], cx
mov ecx, dword [eax + 0x2e8]
mov dx, word [ebp + 0x1bd]
lea esi, [ecx + ecx*4]
lea ecx, [ecx + esi*2]
lea ecx, [eax + ecx*2 + 0x1bc]
mov byte [ecx], bl
mov bl, byte [esp + 0x44]
mov byte [ecx + 1], bl
mov byte [ecx + 2], dl
inc dword [eax + 0x2e8]
jmp 0x494a96
cmp ecx, 1
jne 0x494a96
cmp edi, ebx
jne 0x494974
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0x2e8]
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
mov edx, dword [esi + 0x13c]
lea eax, [ecx + eax*2 + 0x1b4]
mov dword [eax], edx
mov dword [eax + 4], ebx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov eax, dword [esp + 0x4c]
test dword [eax + 0x17b], 0x20000000
je 0x494a90
mov dx, word [eax + 0x1bd]
mov si, word [eax + 0x1bb]
mov bx, word [eax + 0x1b9]
mov eax, dword [ecx + 0x2e8]
mov word [esp + 0x44], si
lea esi, [eax + eax*4]
lea eax, [eax + esi*2]
lea eax, [ecx + eax*2 + 0x1bc]
mov byte [eax], bl
mov bl, byte [esp + 0x44]
jmp 0x494a8a
cmp edi, 5
jne 0x494a96
mov ecx, dword [esp + 0x54]
mov edi, dword [esp + 0x4c]
mov eax, dword [ecx + 0x2e8]
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
mov edx, dword [esi + 0x157]
lea eax, [ecx + eax*2 + 0x1b4]
mov dword [eax], edx
mov dword [eax + 4], ebx
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov eax, dword [edi + 0x17b]
test eax, 0x20000000
je 0x494a09
mov ax, word [edi + 0x1bb]
mov dx, word [edi + 0x1bd]
mov word [esp + 0x48], ax
mov ax, word [edi + 0x1b9]
mov word [esp + 0x44], ax
mov eax, dword [ecx + 0x2e8]
lea ebp, [eax + eax*4]
lea eax, [eax + ebp*2]
lea ebp, [ecx + eax*2 + 0x1bc]
mov al, byte [esp + 0x44]
mov byte [ebp], al
mov al, byte [esp + 0x48]
mov byte [ebp + 1], al
mov byte [ebp + 2], dl
mov edx, dword [ecx + 0x2e8]
inc edx
mov eax, edx
mov dword [ecx + 0x2e8], edx
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
mov edx, dword [esi + 0x157]
lea eax, [ecx + eax*2 + 0x1b4]
mov dword [eax], edx
mov dword [eax + 4], 2
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], 0xff
mov dword [eax + 0x11], ebx
mov byte [eax + 0x15], bl
mov eax, dword [edi + 0x17b]
test eax, 0x20000000
je 0x494a90
mov ax, word [edi + 0x1bb]
mov bx, word [edi + 0x1b9]
mov word [esp + 0x44], ax
mov eax, dword [ecx + 0x2e8]
mov dx, word [edi + 0x1bd]
lea esi, [eax + eax*4]
lea eax, [eax + esi*2]
lea eax, [ecx + eax*2 + 0x1bc]
mov byte [eax], bl
mov bl, byte [esp + 0x44]
mov byte [eax + 1], bl
mov byte [eax + 2], dl
inc dword [ecx + 0x2e8]
mov ecx, dword [esp + 0x34]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x30
ret 0x14