Function at 0x4965b0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using base64
Get number of processors
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f0ac8
mov eax, dword fs:[0]
push eax
sub esp, 0x284
mov eax, dword [0x11811f8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x18c], esi
xor eax, eax
push 0x3e81c
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x170], eax
call fcn.004e094b
add esp, 4
mov dword [ebp - 0x1b0], eax
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.00429eb0
mov edx, eax
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x30], edx
lea ecx, [esi + 0xc]
cmp dword [esi + 0x20], 0x10
jb 0x49662c
mov ecx, dword [esi + 0xc]
push 0xbb8
push 1
push ecx
push dword [esi + 0x2c]
mov ecx, edx
call fcn.00429f00
mov edi, eax
lea eax, [esi + 0xc]
push eax
lea eax, [ebp - 0x198]
push eax
call dword [0x4f82c8]
mov esi, eax
push 0x1c
push 0x114d1f0
mov dword [ebp - 4], 1
call dword [0x4f8504]
mov dword [ebp - 0x16c], eax
add esp, 0xc
mov byte [ebp - 0x160], 0x20
mov ecx, esp
mov byte [ebp - 4], 2
push dword [ebp - 0x160]
call dword [0x4f839c]
push 0
push esi
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x16c]
call dword [0x4f8394]
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 0x160], 0x20
push dword [ebp - 0x160]
mov byte [ebp - 4], 3
call dword [0x4f839c]
mov eax, dword [ebp - 0x18c]
mov ecx, esi
push 0xa
push 0
push dword [eax + 0x2c]
lea eax, [ebp - 0x1e8]
push eax
call dword [0x4f82d8]
lea ecx, [ebp - 0x19c]
call dword [0x4f85cc]
lea ecx, [ebp - 0x16c]
call dword [0x4f85cc]
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 7
call dword [0x4f85cc]
lea eax, [ebp - 0x160]
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
call dword [0x4f85e4]
mov ecx, eax
call dword [0x4f85e0]
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 8
push ecx
mov ecx, eax
call dword [0x4f83e0]
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 7
call dword [0x4f8570]
test edi, edi
je 0x49678a
push 0xffffffffffffffff
push 0
push 0x114cd90
lea eax, [ebp - 0x164]
mov ecx, 0x1181160
push eax
call dword [0x4f84f0]
lea eax, [ebp - 0x1e8]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x164]
push eax
push 0
call dword [0x4f8f64]
add esp, 0xc
lea ecx, [ebp - 0x164]
jmp 0x49887b
mov esi, dword [ebp - 0x18c]
mov ecx, esi
call fcn.004de0e0
push 0x114d210
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
call dword [0x4f85e4]
mov edi, dword [0x4f83a8]
push eax
call edi
add esp, 8
lea ecx, [ebp - 0xf4]
push dword [esi + 0x44]
push dword [esi + 0x3c]
push 0x114d234
push 0
push 0
push 0
call dword [0x4f85e4]
push eax
call edi
mov eax, dword [esi + 0x3c]
add esp, 0x10
mov dword [ebp - 0x240], eax
mov ecx, esi
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x23c], eax
push 5
call fcn.004de0b0
mov ecx, dword [esi + 0x30]
lea eax, [ebp - 0x240]
push eax
push 8
push 0x320
call fcn.00429ff0
mov ecx, dword [esi + 0x30]
push 0x320
call fcn.00429f30
test eax, eax
jne 0x49683c
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 0x18]
mov dword [esi + 0x48], eax
lea eax, [esi + 0x50]
movups xmm0, xmmword [ecx + 0x1c]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ecx + 0x2c]
movups xmmword [eax + 0x10], xmm0
jmp 0x49685d
push eax
push 0x114d25c
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
call dword [0x4f85e4]
push eax
call edi
add esp, 0xc
lea eax, [esi + 0x50]
push 0x1e00000
mov dword [ebp - 0x17c], eax
call fcn.004e0c1b
add esp, 4
mov dword [ebp - 0x170], eax
test eax, eax
je 0x498881
push dword [esi + 0x48]
lea ecx, [ebp - 0xf4]
push 0x114d28c
push 0
push 0
push 0
call dword [0x4f85e4]
push eax
call edi
mov eax, dword [ebp - 0x17c]
add esp, 0xc
xor esi, esi
mov dword [ebp - 0x164], eax
nop dword [eax]
push dword [eax]
lea ecx, [ebp - 0xf4]
push esi
push 0x114d2bc
push 0
push 0
push 0
call dword [0x4f85e4]
push eax
call edi
mov eax, dword [ebp - 0x164]
inc esi
add eax, 4
add esp, 0x10
mov dword [ebp - 0x164], eax
cmp esi, 8
jl 0x4968b0
mov esi, dword [ebp - 0x18c]
mov ecx, esi
push 0xa
call fcn.004de0b0
push 0x114d2f4
mov dword [ebp - 0x164], 0xa
call dword [0x4f83b0]
xor ecx, ecx
mov dword [ebp - 0x1c4], eax
add esp, 4
mov dword [ebp - 0x180], ecx
cmp dword [esi + 0x4c], ecx
jle 0x496e88
mov dword [ebp - 0x188], ecx
lea eax, [esi + 0x50]
xor edx, edx
nop
cmp dword [eax], 1
jne 0x496e63
mov eax, dword [ebp - 0x164]
mov ecx, esi
add eax, 5
push eax
mov dword [ebp - 0x164], eax
call fcn.004de0b0
mov eax, dword [ebp - 0x170]
xor edi, edi
mov dword [ebp - 0x184], 0
mov dword [eax], 0
mov eax, dword [esi + 0x3c]
add eax, dword [ebp - 0x188]
mov ecx, dword [esi + 0x30]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x160]
push eax
push 4
push 0x321
call fcn.00429ff0
mov ecx, dword [esi + 0x30]
push 0x321
call fcn.00429f30
lea ecx, [ebp - 0xf4]
test eax, eax
jne 0x4969be
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
push eax
mov dword [ebp - 0x184], eax
push 0x114d2fc
jmp 0x4969c4
push eax
push 0x114d25c
push 0
push 0
push 0
call dword [0x4f85e4]
push eax
mov eax, dword [0x4f83a8]
call eax
mov eax, dword [ebp - 0x184]
xor ecx, ecx
add esp, 0xc
mov dword [ebp - 0x174], ecx
test eax, eax
jle 0x496a72
mov eax, dword [esi + 0x30]
mov edx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], ecx
lea ecx, [ebp - 0x1b4]
push ecx
push 8
push 0x322
mov ecx, eax
mov dword [ebp - 0x1b4], edx
call fcn.00429ff0
mov ecx, dword [esi + 0x30]
push 0x322
call fcn.00429f30
test eax, eax
jne 0x496f2b
mov eax, dword [esi + 0x30]
push dword [eax + 0x3e818]
add eax, 0x18
push eax
mov eax, dword [ebp - 0x170]
add eax, edi
push eax
call fcn.004e1d00
mov eax, dword [esi + 0x30]
add esp, 0xc
mov ecx, dword [ebp - 0x174]
inc ecx
mov dword [ebp - 0x174], ecx
add edi, dword [eax + 0x3e818]
cmp dword [ebp - 0x184], edi
jg 0x4969f4
mov eax, dword [ebp - 0x184]
cmp eax, edi
jne 0x496e2d
push 0x64
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.004e1d0c
lea edi, [esi + 0x70]
push edi
lea eax, [ebp - 0x74]
push 0x1143f2c
push eax
call fcn.00429e70
add esp, 0x18
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x496aa0
push dword [ebp - 0x1ac]
sub edi, ecx
lea eax, [ebp - 0x74]
add eax, edi
push 0x114d350
push eax
call fcn.00429e70
add esp, 0xc
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0xf4]
push eax
push 0x114d358
push 0
push 0
push 0
call dword [0x4f85e4]
mov edi, dword [0x4f83a8]
push eax
call edi
lea ecx, [ebp - 0x74]
mov dword [ebp - 0xe8], 0
add esp, 0xc
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x496b10
sub ecx, edx
lea eax, [ebp - 0x74]
push ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00418e90
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [esi + 0x24]
call dword [0x4f84e4]
push 1
push 0x113b0dc
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00496280
or dword [ebp - 0x190], 2
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.00494420
add esp, 0xc
mov edx, dword [ebp - 0xcc]
mov byte [ebp - 4], 0xe
cmp edx, 0x10
jb 0x496bf1
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x496be7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4974be
push edx
push ecx
call fcn.004e097b
add esp, 8
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov edx, dword [ebp - 0x12c]
mov byte [ebp - 4], 0xf
cmp edx, 0x10
jb 0x496c4a
mov ecx, dword [ebp - 0x140]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x496c40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4974be
push edx
push ecx
call fcn.004e097b
add esp, 8
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
mov edx, dword [ebp - 0xe4]
mov byte [ebp - 4], 0x10
cmp edx, 0x10
jb 0x496ca3
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x496c99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4974be
push edx
push ecx
call fcn.004e097b
add esp, 8
cmp dword [ebp - 0x144], 0x10
lea edx, [ebp - 0x158]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
jb 0x496cdc
mov edx, dword [ebp - 0x158]
test edx, edx
jne 0x496cdc
or ecx, 0xffffffff
jmp 0x496cf4
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x178], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x496ce7
sub ecx, dword [ebp - 0x178]
push ecx
push edx
call dword [0x4f8504]
add esp, 8
mov dword [ebp - 0x194], eax
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1c0]
mov byte [ebp - 4], 0x11
push eax
call dword [0x4f8310]
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [0x4f8398]
mov edx, eax
mov dword [ebp - 0x118], 0
mov ecx, edx
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x178], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x496d57
sub ecx, dword [ebp - 0x178]
push ecx
push edx
lea ecx, [ebp - 0x128]
call fcn.00418e90
lea ecx, [ebp - 0x1c0]
call dword [0x4f85dc]
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x15
call dword [0x4f85cc]
cmp dword [ebp - 0x114], 0x10
lea eax, [ebp - 0x128]
push 0x114d374
cmovae eax, dword [ebp - 0x128]
push eax
call dword [0x4f9414]
add esp, 8
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0xf4]
test eax, eax
je 0x496f52
push 0x114d3a4
push 0
push 0
push 0
call dword [0x4f85e4]
push eax
call edi
push 0
push 0
push dword [ebp - 0x174]
call dword [0x4f9410]
push dword [ebp - 0x174]
push 1
push dword [ebp - 0x184]
push dword [ebp - 0x170]
call dword [0x4f93e0]
push dword [ebp - 0x174]
call dword [0x4f93ec]
add esp, 0x28
lea ecx, [ebp - 0x128]
call fcn.00404370
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 7
call fcn.00404370
jmp 0x496e51
push edi
push 0x114d3c4
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
call dword [0x4f85e4]
mov edi, dword [0x4f83a8]
push eax
call edi
add esp, 0xc
mov edx, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x17c]
inc ecx
add eax, 4
add edx, 0x15180
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x188], edx
cmp ecx, dword [esi + 0x4c]
jl 0x496930
push dword [ebp - 0x170]
call fcn.004e0989
add esp, 4
mov ecx, esi
push 0x3c
call fcn.004de0b0
mov ecx, dword [esi + 0x30]
call fcn.00429f10
push 0x114d3fc
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
call dword [0x4f85e4]
push eax
call edi
push 0x3567e00
call fcn.004e0c1b
add esp, 0xc
mov dword [esi + 0x8c], eax
mov ecx, esi
push 0x3567e0
push eax
push dword [esi + 0x4c]
push dword [esi + 0x3c]
call fcn.00495080
push eax
push 0x114d424
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
mov dword [esi + 0x84], eax
call dword [0x4f85e4]
push eax
call edi
mov edx, dword [esi + 0x84]
xor ecx, ecx
add esp, 0xc
mov dword [ebp - 0x164], ecx
test edx, edx
jle 0x496fec
xor edx, edx
mov dword [ebp - 0x174], edx
jmp 0x496fa6
push eax
push 0x114d31c
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
call dword [0x4f85e4]
push eax
call dword [0x4f83a8]
add esp, 0xc
jmp 0x498881
lea eax, [ebp - 0x74]
push eax
push 0x114d378
push 0
push 0
push 0
call dword [0x4f85e4]
push eax
call edi
push dword [ebp - 0x170]
call fcn.004e0989
add esp, 0x10
lea ecx, [ebp - 0x128]
call fcn.00404370
lea ecx, [ebp - 0x158]
call fcn.00404370
jmp 0x498881
mov edx, dword [ebp - 0x174]
mov eax, dword [esi + 0x8c]
push dword [eax + edx + 4]
push ecx
push 0x114d444
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
call dword [0x4f85e4]
push eax
call edi
mov ecx, dword [ebp - 0x164]
add esp, 0x10
add dword [ebp - 0x174], 0x10
inc ecx
mov edx, dword [esi + 0x84]
mov dword [ebp - 0x164], ecx
cmp ecx, edx
jl 0x496fa0
mov eax, dword [esi + 0x34]
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x1fc], ecx
test edx, edx
jle 0x49701c
mov ecx, dword [esi + 0x8c]
add ecx, 4
nop dword [eax]
cmp dword [ecx], eax
jge 0x49701c
inc edi
add ecx, 0x10
cmp edi, edx
jl 0x497010
lea ecx, [ebp - 0x1e4]
call dword [0x4f85d4]
push dword [esi + 0x34]
mov edi, dword [0x4f829c]
lea eax, [ebp - 0x21c]
push eax
mov byte [ebp - 4], 0x16
call edi
push 0x10
push 0x114d46c
mov byte [ebp - 4], 0x17
call dword [0x4f8504]
add esp, 0x10
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x21c]
call dword [0x4f832c]
push eax
lea ecx, [ebp - 0x1e4]
call dword [0x4f8404]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
lea ecx, [ebp - 0x16c]
call dword [0x4f85cc]
lea ecx, [ebp - 0x1e0]
call dword [0x4f85d4]
push dword [esi + 0x38]
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x19
push eax
call edi
mov edi, dword [0x4f8504]
push 0x10
push 0x114d46c
mov byte [ebp - 4], 0x1a
call edi
add esp, 0x10
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x218]
call dword [0x4f832c]
push eax
lea ecx, [ebp - 0x1e0]
call dword [0x4f8404]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x1a
call dword [0x4f85cc]
push 0xa
push dword [esi + 0x40]
lea eax, [ebp - 0x214]
push eax
call dword [0x4f84ec]
add esp, 0xc
push 0x46
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.004de0b0
add esi, 0x70
je 0x497151
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x497146
sub ecx, edx
jmp 0x497154
or ecx, 0xffffffff
push ecx
push esi
call edi
add esp, 8
mov dword [ebp - 0x210], eax
mov esi, dword [0x4f827c]
lea eax, [ebp - 0x198]
push 0xa
push eax
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x1d
call esi
mov dword [ebp - 0x178], eax
push 0xa
lea eax, [ebp - 0x19c]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x1e4]
call esi
mov edi, eax
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x194]
call dword [0x4f85d0]
mov esi, eax
mov eax, dword [ebp - 0x190]
or eax, 4
push 0xffffffffffffffff
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x160]
push 0x114d488
push eax
call dword [0x4f85bc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x21
call dword [0x4f85c4]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
push esi
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x22
call dword [0x4f85d0]
mov esi, eax
lea ecx, [ebp - 0x1ac]
mov eax, dword [ebp - 0x190]
or eax, 8
push edi
mov dword [ebp - 0x170], eax
call dword [0x4f85c4]
push esi
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x23
call dword [0x4f85d0]
mov edi, dword [ebp - 0x17c]
mov esi, eax
push 0xffffffffffffffff
mov ecx, edi
lea eax, [ebp - 0x160]
or ecx, 0x18
push 0x114d488
push eax
mov dword [ebp - 0x170], ecx
call dword [0x4f85bc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x24
call dword [0x4f85c4]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
push esi
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x25
call dword [0x4f85d0]
push dword [ebp - 0x178]
mov ecx, edi
mov esi, eax
or ecx, 0x38
mov dword [ebp - 0x170], ecx
lea ecx, [ebp - 0x174]
call dword [0x4f85c4]
push esi
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x26
call dword [0x4f85d0]
push 0xffffffffffffffff
mov esi, eax
mov ecx, edi
lea eax, [ebp - 0x160]
or ecx, 0x78
push 0x114d488
push eax
mov dword [ebp - 0x170], ecx
call dword [0x4f85bc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x27
call dword [0x4f85c4]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
push esi
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x28
call dword [0x4f85d0]
mov ecx, edi
mov esi, eax
or ecx, 0xf8
lea eax, [ebp - 0x214]
mov dword [ebp - 0x170], ecx
lea ecx, [ebp - 0x16c]
push eax
call dword [0x4f85c4]
push 0x114d480
lea eax, [ebp - 0x1dc]
push esi
push eax
call fcn.004044c0
add esp, 0xc
lea ecx, [ebp - 0x16c]
call dword [0x4f85cc]
lea ecx, [ebp - 0x164]
call dword [0x4f85cc]
lea ecx, [ebp - 0x174]
call dword [0x4f85cc]
lea ecx, [ebp - 0x180]
call dword [0x4f85cc]
lea ecx, [ebp - 0x1ac]
call dword [0x4f85cc]
and edi, 0xffffff03
mov dword [ebp - 0x17c], edi
lea ecx, [ebp - 0x194]
call dword [0x4f85cc]
lea ecx, [ebp - 0x19c]
call dword [0x4f85cc]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x198]
call dword [0x4f85cc]
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x1dc]
call dword [0x4f84e4]
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x32
jb 0x4973e4
mov edx, dword [edx]
test edx, edx
je 0x4973fb
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4973f0
sub ecx, esi
jmp 0x4973fe
or ecx, 0xffffffff
mov edi, dword [0x4f8504]
push ecx
push edx
call edi
add esp, 8
mov dword [ebp - 0x1c8], eax
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x33
push eax
call dword [0x4f8310]
mov ecx, eax
mov byte [ebp - 4], 0x34
call dword [0x4f8398]
mov edx, eax
mov dword [ebp - 0x100], 0
mov ecx, edx
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x497460
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x110]
call fcn.00418e90
lea ecx, [ebp - 0x160]
call dword [0x4f85dc]
lea ecx, [ebp - 0x1c8]
call dword [0x4f85cc]
mov edx, dword [ebp - 0xcc]
mov byte [ebp - 4], 0x38
cmp edx, 0x10
jb 0x4974ce
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4974c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4974c4
call dword [0x4f939c]
push edx
push ecx
call fcn.004e097b
add esp, 8
cmp dword [ebp - 0xfc], 0x10
lea edx, [ebp - 0x110]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
jb 0x497507
mov edx, dword [ebp - 0x110]
test edx, edx
jne 0x497507
or ecx, 0xffffffff
jmp 0x497519
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x497510
sub ecx, esi
push ecx
push edx
call edi
add esp, 8
mov dword [ebp - 0x16c], eax
push 0
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x1a8]
call dword [0x4f9278]
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x3b
call dword [0x4f85cc]
lea ecx, [ebp - 0x168]
call dword [0x4f9280]
push 2
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x3c
call dword [0x4f863c]
push eax
lea ecx, [ebp - 0x168]
call dword [0x4f925c]
push 0xf
push 0x113cee4
call edi
add esp, 8
mov dword [ebp - 0x16c], eax
push 0
push 0x32
push 0xd
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0x238]
call dword [0x4f862c]
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x3f
call dword [0x4f85cc]
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x168]
call dword [0x4f9260]
xor eax, eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1ec], eax
push 2
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x40
call dword [0x4f927c]
mov edi, dword [ebp - 0x18c]
lea eax, [ebp - 0x160]
lea ecx, [ebp - 0x159]
push eax
cmp byte [edi + 0x28], 0
je 0x497abc
mov byte [ebp - 0x159], 0
call fcn.004949a0
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x41
call dword [0x4f821c]
mov esi, dword [0x4f9270]
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x1bc]
mov byte [ebp - 4], 0x42
push eax
push 1
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x159]
call fcn.00494d70
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x43
call dword [0x4f821c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x1bc]
push eax
push 2
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x159]
call fcn.00494cd0
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x45
call dword [0x4f821c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x46
push eax
lea eax, [ebp - 0x1bc]
push eax
push 3
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x159]
call fcn.00494c30
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x47
call dword [0x4f821c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x1bc]
push eax
push 4
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x40
call dword [0x4f85cc]
movsd xmm0, qword [0x114d758]
lea ecx, [ebp - 0x1a8]
mov esi, dword [0x4f926c]
sub esp, 8
movsd qword [esp], xmm0
push 1
call esi
movsd xmm0, qword [0x113b498]
lea ecx, [ebp - 0x1a8]
sub esp, 8
movsd qword [esp], xmm0
push 2
call esi
movsd xmm0, qword [0x113b498]
lea ecx, [ebp - 0x1a8]
sub esp, 8
movsd qword [esp], xmm0
push 3
call esi
movsd xmm0, qword [0x11418d0]
lea ecx, [ebp - 0x1a8]
sub esp, 8
movsd qword [esp], xmm0
push 4
call esi
push 0x114d48c
lea eax, [edi + 0x24]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.004044c0
add esp, 0xc
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x180]
call dword [0x4f84e4]
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x4a
jb 0x49782e
mov edx, dword [edx]
test edx, edx
je 0x497842
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x497837
sub ecx, esi
jmp 0x497845
or ecx, 0xffffffff
push ecx
push edx
call dword [0x4f8504]
add esp, 8
mov dword [ebp - 0x164], eax
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x4b
push eax
call dword [0x4f8310]
mov ecx, eax
mov byte [ebp - 4], 0x4c
call dword [0x4f8398]
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x497885
sub edx, esi
lea ecx, [ebp - 0x110]
push edx
push eax
call fcn.00418e90
lea ecx, [ebp - 0x160]
call dword [0x4f85dc]
lea ecx, [ebp - 0x164]
call dword [0x4f85cc]
mov edx, dword [ebp - 0xcc]
mov byte [ebp - 4], 0x49
cmp edx, 0x10
jb 0x4978f3
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4978e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4978e9
call dword [0x4f939c]
push edx
push ecx
call fcn.004e097b
add esp, 8
push 1
push 0x40
push 1
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0xc8]
call fcn.004946a0
mov eax, dword [ebp - 0xc8]
mov byte [ebp - 4], 0x4d
mov eax, dword [eax + 4]
mov eax, dword [ebp + eax - 0xbc]
test al, 6
jne 0x497a9c
test al, 1
jne 0x497a73
mov edi, dword [ebp - 0x1f0]
xor esi, esi
nop word [eax + eax]
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0xc8]
call dword [0x4f80d4]
mov ecx, eax
call dword [0x4f80d4]
mov ecx, eax
call dword [0x4f80d4]
mov ecx, eax
call dword [0x4f80d4]
mov ecx, eax
call dword [0x4f80d0]
mov ecx, eax
call dword [0x4f80d0]
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0xbc], 1
jne 0x497a61
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0xcc], eax
cmp esi, edi
je 0x497a23
movups xmm0, xmmword [ebp - 0xe0]
movups xmmword [edi], xmm0
movq xmm0, qword [ebp - 0xd0]
movq qword [edi + 0x10], xmm0
add edi, 0x18
mov dword [ebp - 0x1f0], edi
jmp 0x497a4a
lea eax, [ebp - 0xe0]
push eax
push edi
lea ecx, [ebp - 0x1f4]
call fcn.004944a0
mov eax, dword [ebp - 0x1ec]
mov esi, eax
mov edi, dword [ebp - 0x1f0]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0xbc], 1
je 0x497940
mov eax, dword [ebp - 0x1f4]
mov edi, dword [ebp - 0x18c]
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0xb8]
call fcn.00406910
test eax, eax
jne 0x497a9c
push eax
mov eax, dword [ebp - 0xc8]
lea ecx, [ebp - 0xc8]
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [0x4f8158]
lea ecx, [ebp - 0xc8]
call fcn.00493650
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x40
call dword [0x4f85cc]
jmp 0x497d71
call fcn.00494f30
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x4e
call dword [0x4f821c]
mov esi, dword [0x4f9270]
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x1bc]
mov byte [ebp - 4], 0x4f
push eax
push 1
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x160]
call dword [0x4f85cc]
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x159]
call fcn.00494ea0
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x50
call dword [0x4f821c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x51
push eax
lea eax, [ebp - 0x1bc]
push eax
push 2
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x178]
call dword [0x4f85cc]
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x159]
call fcn.00494e10
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x52
call dword [0x4f821c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x1bc]
push eax
push 3
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x19c]
call dword [0x4f85cc]
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x159]
call fcn.00494b90
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x54
call dword [0x4f821c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x1bc]
push eax
push 4
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x198]
call dword [0x4f85cc]
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x159]
call fcn.00494af0
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x56
call dword [0x4f821c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x1bc]
push eax
push 5
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x1c0]
call dword [0x4f85cc]
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x159]
call fcn.00494a30
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x58
call dword [0x4f821c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x59
push eax
lea eax, [ebp - 0x1bc]
push eax
push 6
push 1
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1bc]
call dword [0x4f8488]
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x40
call dword [0x4f85cc]
movsd xmm0, qword [0x114d758]
lea ecx, [ebp - 0x1a8]
mov esi, dword [0x4f926c]
sub esp, 8
movsd qword [esp], xmm0
push 1
call esi
movsd xmm0, qword [0x114d750]
lea ecx, [ebp - 0x1a8]
sub esp, 8
movsd qword [esp], xmm0
push 2
call esi
movsd xmm0, qword [0x114d750]
lea ecx, [ebp - 0x1a8]
sub esp, 8
movsd qword [esp], xmm0
push 3
call esi
movsd xmm0, qword [0x114d750]
lea ecx, [ebp - 0x1a8]
sub esp, 8
movsd qword [esp], xmm0
push 4
call esi
movsd xmm0, qword [0x114d750]
lea ecx, [ebp - 0x1a8]
sub esp, 8
movsd qword [esp], xmm0
push 5
call esi
movsd xmm0, qword [0x11418d0]
lea ecx, [ebp - 0x1a8]
sub esp, 8
movsd qword [esp], xmm0
push 6
call esi
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x1dc]
call dword [0x4f84e4]
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x5a
jb 0x497d90
mov eax, dword [eax]
push eax
push 0x114d49c
push 0
push 0
push 0
lea ecx, [ebp - 0xf4]
call dword [0x4f85e4]
push eax
call dword [0x4f83a8]
mov edx, dword [ebp - 0xcc]
add esp, 0xc
mov byte [ebp - 4], 0x40
cmp edx, 0x10
jb 0x497df2
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x497de8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x497de8
call dword [0x4f939c]
push edx
push ecx
call fcn.004e097b
add esp, 8
push 0x50
mov ecx, edi
mov dword [ebp - 0x190], 2
call fcn.004de0b0
mov esi, dword [ebp - 0x184]
cmp esi, dword [edi + 0x38]
jge 0x4985cd
lea eax, [ebp - 0x224]
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0xdc]
call dword [0x4f85e4]
mov ecx, eax
call dword [0x4f85e0]
push esi
push 0x114d4b4
mov ecx, eax
mov byte [ebp - 4], 0x5b
call dword [0x4f856c]
mov ecx, eax
call dword [0x4f84d0]
lea ecx, [ebp - 0x224]
call dword [0x4f8570]
mov esi, dword [edi + 0x40]
add esi, dword [ebp - 0x184]
mov eax, dword [ebp - 0x1fc]
mov edx, eax
mov dword [ebp - 0x198], esi
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x164], 0
cmp eax, dword [edi + 0x84]
jge 0x497f3b
shl eax, 4
add eax, 4
add eax, dword [edi + 0x8c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x184]
jl 0x497f23
cmp ecx, esi
jge 0x497f35
cmp dword [eax + 4], 3
ja case.default.0x497edd
mov edi, dword [eax + 4]
jmp dword [edi*4 + 0x4988a8]
inc dword [ebp - 0x1d0]
jmp case.default.0x497edd
inc dword [ebp - 0x1d4]
jmp case.default.0x497edd
inc dword [ebp - 0x1d8]
jmp case.default.0x497edd
inc dword [ebp - 0x1c8]
mov esi, dword [ebp - 0x194]
add esi, dword [eax + 8]
mov edi, dword [ebp - 0x18c]
inc dword [ebp - 0x164]
mov dword [ebp - 0x194], esi
mov esi, dword [ebp - 0x198]
cmp ecx, esi
jge 0x497f35
inc edx
add eax, 0x10
cmp edx, dword [edi + 0x84]
jl 0x497ec6
jmp 0x497f3b
mov dword [ebp - 0x1fc], edx
lea ecx, [ebp - 0x180]
call dword [0x4f85d4]
mov eax, dword [ebp - 0x184]
sub eax, dword [edi + 0x88]
push eax
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x5c
push eax
call dword [0x4f829c]
push 0x10
push 0x114d46c
mov byte [ebp - 4], 0x5d
call dword [0x4f8504]
add esp, 0x10
mov dword [ebp - 0x200], eax
lea eax, [ebp - 0x200]
mov byte [ebp - 4], 0x5e
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x160]
call dword [0x4f832c]
push eax
lea ecx, [ebp - 0x180]
call dword [0x4f8404]
lea ecx, [ebp - 0x228]
call dword [0x4f85cc]
lea ecx, [ebp - 0x200]
call dword [0x4f85cc]
lea ecx, [ebp - 0x1c4]
call dword [0x4f85d4]
mov eax, esi
mov byte [ebp - 4], 0x5f
sub eax, dword [edi + 0x88]
push eax
lea eax, [ebp - 0x178]
push eax
call dword [0x4f829c]
push 0x10
push 0x114d46c
mov byte [ebp - 4], 0x60
call dword [0x4f8504]
add esp, 0x10
mov dword [ebp - 0x204], eax
lea eax, [ebp - 0x204]
mov byte [ebp - 4], 0x61
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x178]
call dword [0x4f832c]
push eax
lea ecx, [ebp - 0x1c4]
call dword [0x4f8404]
lea ecx, [ebp - 0x22c]
call dword [0x4f85cc]
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0x60
call dword [0x4f85cc]
push 5
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x1c4]
call dword [0x4f8220]
lea ecx, [ebp - 0x1ac]
call dword [0x4f85d4]
cmp dword [edi + 0x40], 0x15180
je 0x49813b
lea eax, [ebp - 0x180]
mov byte [ebp - 4], 0x64
push eax
lea ecx, [ebp - 0x1f8]
call dword [0x4f85d0]
mov esi, eax
mov eax, dword [ebp - 0x17c]
or eax, 0x400
push 0xffffffffffffffff
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x230]
push 0x114d4c0
push eax
call dword [0x4f85bc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x65
call dword [0x4f85c4]
lea ecx, [ebp - 0x230]
call dword [0x4f85cc]
push esi
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x66
call dword [0x4f85d0]
mov ecx, dword [ebp - 0x17c]
mov esi, eax
or ecx, 0xc00
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x170], ecx
lea ecx, [ebp - 0x208]
push eax
call dword [0x4f85c4]
push esi
lea ecx, [ebp - 0x1ac]
call dword [0x4f85c8]
lea ecx, [ebp - 0x208]
call dword [0x4f85cc]
and dword [ebp - 0x17c], 0xfffff3ff
lea ecx, [ebp - 0x1f8]
jmp 0x4981fa
lea eax, [ebp - 0x180]
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0x1c0]
call dword [0x4f85d0]
mov esi, eax
mov eax, dword [ebp - 0x17c]
or eax, 0x1000
push 0xffffffffffffffff
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x220]
push 0x114d4c0
push eax
call dword [0x4f85bc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x68
call dword [0x4f85c4]
lea ecx, [ebp - 0x220]
call dword [0x4f85cc]
push esi
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x69
call dword [0x4f85d0]
mov ecx, dword [ebp - 0x17c]
mov esi, eax
or ecx, 0x3000
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x170], ecx
lea ecx, [ebp - 0x1cc]
push eax
call dword [0x4f85c4]
push esi
lea ecx, [ebp - 0x1ac]
call dword [0x4f85c8]
lea ecx, [ebp - 0x1cc]
call dword [0x4f85cc]
and dword [ebp - 0x17c], 0xffffcfff
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x63
call dword [0x4f85cc]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x188], 0
test ecx, ecx
je 0x498227
mov eax, dword [ebp - 0x194]
cdq
idiv ecx
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x250]
call dword [0x4f821c]
mov esi, dword [ebp - 0x190]
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0x6a
push eax
push 1
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x63
call dword [0x4f8488]
cmp byte [edi + 0x28], 0
je 0x4983c8
mov ecx, dword [ebp - 0x1f0]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x174]
xor esi, esi
imul ecx
mov dword [ebp - 0x164], 0
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x170], eax
je 0x4982eb
mov edx, dword [ebp - 0x174]
mov edi, esi
mov ecx, dword [ebp - 0x198]
nop word [eax + eax]
mov eax, dword [edx]
cmp eax, ecx
jg 0x4982df
cmp eax, dword [ebp - 0x184]
jle 0x4982d3
cmp eax, ecx
jge 0x4982d3
inc edi
inc esi
add edx, 0x18
cmp esi, dword [ebp - 0x170]
jb 0x4982c0
mov dword [ebp - 0x164], edi
mov edi, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x260]
add eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0x1d4]
add eax, dword [ebp - 0x1d0]
push eax
call dword [0x4f835c]
mov esi, dword [ebp - 0x190]
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0x6b
push eax
push 2
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x63
call dword [0x4f8488]
push dword [ebp - 0x164]
lea ecx, [ebp - 0x270]
call dword [0x4f835c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x6c
push eax
lea eax, [ebp - 0x270]
push eax
push 3
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x63
call dword [0x4f8488]
push dword [ebp - 0x188]
lea ecx, [ebp - 0x280]
call dword [0x4f835c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x6d
push eax
lea eax, [ebp - 0x280]
push eax
push 4
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0x280]
jmp 0x49850d
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x290]
call dword [0x4f835c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x6e
push eax
lea eax, [ebp - 0x290]
push eax
push 2
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x63
call dword [0x4f8488]
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x150]
call dword [0x4f835c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x6f
push eax
lea eax, [ebp - 0x150]
push eax
push 3
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x63
call dword [0x4f8488]
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x138]
call dword [0x4f835c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x70
push eax
lea eax, [ebp - 0x138]
push eax
push 4
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x63
call dword [0x4f8488]
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x120]
call dword [0x4f835c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x71
push eax
lea eax, [ebp - 0x120]
push eax
push 5
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x63
call dword [0x4f8488]
push dword [ebp - 0x188]
lea ecx, [ebp - 0xf0]
call dword [0x4f835c]
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x72
push eax
lea eax, [ebp - 0xf0]
push eax
push 6
push esi
lea ecx, [ebp - 0x1a8]
call dword [0x4f9270]
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x63
call dword [0x4f8488]
lea eax, [ebp - 0x1b0]
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0xdc]
call dword [0x4f85e4]
mov ecx, eax
call dword [0x4f85e0]
push dword [ebp - 0x194]
mov ecx, eax
mov byte [ebp - 4], 0x73
push 0x114d4c4
call dword [0x4f856c]
mov ecx, eax
call dword [0x4f84d0]
lea ecx, [ebp - 0x1b0]
call dword [0x4f8570]
mov esi, dword [ebp - 0x184]
lea ecx, [ebp - 0x1ac]
add esi, dword [edi + 0x40]
inc dword [ebp - 0x190]
mov dword [ebp - 0x184], esi
call dword [0x4f85cc]
lea ecx, [ebp - 0x19c]
call dword [0x4f85cc]
lea ecx, [ebp - 0x178]
call dword [0x4f85ac]
lea ecx, [ebp - 0x1c4]
call dword [0x4f85cc]
lea ecx, [ebp - 0x160]
call dword [0x4f85ac]
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x40
call dword [0x4f85cc]
cmp esi, dword [edi + 0x38]
jl 0x497e14
push 0x5a
mov ecx, edi
call fcn.004de0b0
movsd xmm0, qword [0x113b498]
lea ecx, [ebp - 0x1a8]
mov eax, dword [ebp - 0x190]
sub esp, 8
dec eax
movsd qword [esp], xmm0
push eax
push 1
call dword [0x4f9268]
lea eax, [edi + 0x24]
mov byte [ebp - 4], 0x74
push eax
lea ecx, [ebp - 0x160]
call dword [0x4f85d0]
mov esi, eax
mov eax, dword [ebp - 0x17c]
or eax, 0x4000
push 0xffffffffffffffff
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x1b0]
push 0x113b0dc
push eax
call dword [0x4f85bc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x75
call dword [0x4f85c4]
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x74
call dword [0x4f85cc]
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x20c]
push esi
push eax
call fcn.00405e20
add esp, 0xc
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x77
call dword [0x4f85cc]
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x20c]
call dword [0x4f84e4]
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x78
jb 0x4986a3
mov edx, dword [edx]
test edx, edx
je 0x4986bb
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4986b0
sub ecx, esi
jmp 0x4986be
or ecx, 0xffffffff
push ecx
push edx
call dword [0x4f8504]
add esp, 8
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x79
push eax
lea ecx, [ebp - 0x1a8]
call dword [0x4f9264]
lea ecx, [ebp - 0x178]
call dword [0x4f85cc]
mov edx, dword [ebp - 0xcc]
mov byte [ebp - 4], 0x77
cmp edx, 0x10
jb 0x498732
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x498728
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x498728
call dword [0x4f939c]
push edx
push ecx
call fcn.004e097b
add esp, 8
push 0x10
push dword [edi + 0x8c]
call fcn.004e097b
add esp, 8
mov dword [edi + 0x8c], 0
mov ecx, edi
push 0x64
call fcn.004de0b0
lea ecx, [ebp - 0x20c]
call dword [0x4f85cc]
mov esi, dword [ebp - 0x174]
test esi, esi
je 0x4987b4
mov ecx, dword [ebp - 0x16c]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x4987aa
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4987aa
call dword [0x4f939c]
push ecx
push esi
call fcn.004e097b
add esp, 8
lea ecx, [ebp - 0x238]
call dword [0x4f8630]
lea ecx, [ebp - 0x168]
call dword [0x4f9258]
lea ecx, [ebp - 0x1a8]
call dword [0x4f9274]
mov edx, dword [ebp - 0xfc]
cmp edx, 0x10
jb 0x498814
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x49880a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x49880a
call dword [0x4f939c]
push edx
push ecx
call fcn.004e097b
add esp, 8
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
call dword [0x4f85cc]
lea ecx, [ebp - 0x210]
call dword [0x4f85cc]
lea ecx, [ebp - 0x214]
call dword [0x4f85cc]
mov esi, dword [0x4f85ac]
lea ecx, [ebp - 0x218]
call esi
lea ecx, [ebp - 0x1e0]
call dword [0x4f85cc]
lea ecx, [ebp - 0x21c]
call esi
lea ecx, [ebp - 0x1e4]
call dword [0x4f85cc]
lea ecx, [ebp - 0x1e8]
call dword [0x4f85cc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e0917
mov esp, ebp
pop ebp
ret