Function at 0x4a62f0
Capabilities:
Access peb ldr_data
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
mov dword [ebp - 0x34], 0x49
mov eax, dword [ebp - 0x34]
xor eax, 0x6e
mov dword [ebp - 0xc], ecx
mov byte [ebp - 0x30], al
mov eax, dword [ebp - 0x34]
inc al
xor eax, 0x65
mov byte [ebp - 0x2f], al
mov eax, dword [ebp - 0x34]
add al, 2
xor eax, 0x74
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 0x34]
add al, 3
xor eax, 0x61
mov byte [ebp - 0x2d], al
mov eax, dword [ebp - 0x34]
add al, 4
xor eax, 0x70
mov byte [ebp - 0x2c], al
mov eax, dword [ebp - 0x34]
add al, 5
xor eax, 0x69
mov byte [ebp - 0x2b], al
mov eax, dword [ebp - 0x34]
add al, 6
xor eax, 0x33
mov byte [ebp - 0x2a], al
mov eax, dword [ebp - 0x34]
add al, 7
xor eax, 0x32
mov byte [ebp - 0x29], al
mov eax, dword [ebp - 0x34]
add al, 8
xor eax, 0x2e
mov byte [ebp - 0x28], al
mov eax, dword [ebp - 0x34]
add al, 9
xor eax, 0x64
mov byte [ebp - 0x27], al
mov eax, dword [ebp - 0x34]
add al, 0xa
xor eax, 0x6c
mov byte [ebp - 0x26], al
mov eax, dword [ebp - 0x34]
add al, 0xb
mov byte [ebp - 0x24], 0
push ebx
xor eax, 0x6c
xor edx, edx
push esi
mov byte [ebp - 0x25], al
mov al, byte [ebp - 0x30]
push edi
mov al, byte [ebp + edx - 0x30]
mov ecx, dword [ebp - 0x34]
add cl, dl
movsx eax, al
xor ecx, eax
mov byte [ebp + edx - 0x30], cl
inc edx
cmp edx, 0xc
jb 0x4a6391
mov ebx, dword [0x4f081c]
mov byte [ebp - 0x24], 0
test ebx, ebx
jne 0x4a6442
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0x14], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x18], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a6429
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x18]
imul eax, eax, 0x1000193
mov dword [ebp - 0x18], eax
cmp edi, ebx
jne 0x4a63f1
cmp eax, 0xa3e6f6c3
je 0x4a6dee
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x14], ecx
cmp eax, edx
je 0x4a643a
cmp dword [ecx + 0x18], 0
jne 0x4a63d3
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f8c5c]
test eax, eax
jne 0x4a64e2
test ebx, ebx
je 0x4a64db
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xcc], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4a64db
xor ecx, ecx
mov dword [ebp - 0x14], ecx
cmp dword [eax + 0x18], ecx
je 0x4a64db
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a64c9
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4a6494
cmp edi, 0xbd28aabc
je 0x4a6df9
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a6484
xor eax, eax
mov dword [0x4f8c5c], eax
lea ecx, [ebp - 0x30]
push ecx
call eax
mov dword [ebp - 0x48], 2
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 8], eax
xor ecx, 0x4e
mov byte [ebp - 0x44], cl
mov ecx, dword [ebp - 0x48]
inc cl
xor ecx, 0x65
mov byte [ebp - 0x43], cl
mov ecx, dword [ebp - 0x48]
add cl, 2
xor ecx, 0x74
mov byte [ebp - 0x42], cl
mov eax, dword [ebp - 0x48]
add al, 3
xor eax, 0x53
mov byte [ebp - 0x41], al
mov eax, dword [ebp - 0x48]
add al, 4
xor eax, 0x68
mov byte [ebp - 0x40], al
mov eax, dword [ebp - 0x48]
add al, 5
xor eax, 0x61
mov byte [ebp - 0x3f], al
mov eax, dword [ebp - 0x48]
add al, 6
xor eax, 0x72
mov byte [ebp - 0x3e], al
mov eax, dword [ebp - 0x48]
add al, 7
xor eax, 0x65
mov byte [ebp - 0x3d], al
mov eax, dword [ebp - 0x48]
add al, 8
xor eax, 0x45
mov byte [ebp - 0x3c], al
mov eax, dword [ebp - 0x48]
add al, 9
xor eax, 0x6e
mov byte [ebp - 0x3b], al
mov eax, dword [ebp - 0x48]
add al, 0xa
xor eax, 0x75
mov byte [ebp - 0x3a], al
mov eax, dword [ebp - 0x48]
add al, 0xb
mov byte [ebp - 0x38], 0
xor eax, 0x6d
xor edx, edx
mov byte [ebp - 0x39], al
mov al, byte [ebp - 0x44]
nop
mov al, byte [ebp + edx - 0x44]
mov ecx, dword [ebp - 0x48]
add cl, dl
movsx eax, al
xor ecx, eax
mov byte [ebp + edx - 0x44], cl
inc edx
cmp edx, 0xc
jb 0x4a6580
mov ebx, dword [0x4f081c]
mov byte [ebp - 0x38], 0
test ebx, ebx
jne 0x4a6631
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0x14], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x18], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a6618
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x18]
imul eax, eax, 0x1000193
mov dword [ebp - 0x18], eax
cmp edi, ebx
jne 0x4a65e0
cmp eax, 0xa3e6f6c3
je 0x4a6e17
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x14], ecx
cmp eax, edx
je 0x4a6629
cmp dword [ecx + 0x18], 0
jne 0x4a65c2
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f07c0]
test eax, eax
jne 0x4a66d1
test ebx, ebx
je 0x4a66ca
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xcc], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4a66ca
xor ecx, ecx
mov dword [ebp - 0x14], ecx
cmp dword [eax + 0x18], ecx
je 0x4a66ca
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a66b8
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4a6683
cmp edi, 0xb8e4e945
je 0x4a6e22
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a6673
xor eax, eax
mov dword [0x4f07c0], eax
lea ecx, [ebp - 0x44]
push ecx
push dword [ebp - 8]
call eax
mov dword [ebp - 0x98], 0x64
xor edx, edx
mov byte [ebp - 0x94], 0x2a
mov byte [ebp - 0x93], 1
mov byte [ebp - 0x92], 0x10
mov byte [ebp - 0x91], 0x25
mov byte [ebp - 0x90], 0x14
mov byte [ebp - 0x8f], 0xd
mov byte [ebp - 0x8e], 0x26
mov byte [ebp - 0x8d], 0x11
mov byte [ebp - 0x8c], 2
mov byte [ebp - 0x8b], 2
mov byte [ebp - 0x8a], 1
mov byte [ebp - 0x89], 0x16
mov byte [ebp - 0x88], 0x22
mov byte [ebp - 0x87], 0x16
mov byte [ebp - 0x86], 1
mov dword [ebp - 0xac], eax
mov byte [ebp - 0x85], 1
mov al, byte [ebp - 0x94]
mov byte [ebp - 0x84], 0
nop dword [eax]
mov al, byte [ebp + edx - 0x94]
movsx ecx, byte [ebp - 0x98]
movsx eax, al
xor eax, ecx
mov byte [ebp + edx - 0x94], al
inc edx
cmp edx, 0x10
jb 0x4a6770
mov ebx, dword [0x4f081c]
mov byte [ebp - 0x84], 0
test ebx, ebx
jne 0x4a6831
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0x14], ecx
nop dword [eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x18], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a6818
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x18]
imul eax, eax, 0x1000193
mov dword [ebp - 0x18], eax
cmp edi, ebx
jne 0x4a67e0
cmp eax, 0xa3e6f6c3
je 0x4a6e40
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x14], ecx
cmp eax, edx
je 0x4a6829
cmp dword [ecx + 0x18], 0
jne 0x4a67c0
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f07c0]
test eax, eax
jne 0x4a68d1
test ebx, ebx
je 0x4a68ca
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xcc], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4a68ca
xor ecx, ecx
mov dword [ebp - 0x14], ecx
cmp dword [eax + 0x18], ecx
je 0x4a68ca
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a68b8
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4a6883
cmp edi, 0xb8e4e945
je 0x4a6e4b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a6873
xor eax, eax
mov dword [0x4f07c0], eax
lea ecx, [ebp - 0x94]
push ecx
push dword [ebp - 8]
call eax
cmp dword [ebp - 0xac], 0
mov dword [ebp - 0xcc], eax
je 0x4a7a25
test eax, eax
je 0x4a7a25
mov ecx, 0x100
call fcn.004baba0
mov ebx, eax
mov ecx, 0x40
mov dword [ebp - 0x14], ebx
call fcn.004baba0
mov dword [ebp - 0x18], eax
mov ecx, ebx
xor eax, eax
mov dword [ebp - 0xa8], 0
test ebx, ebx
je 0x4a693a
cmp word [ebx], ax
je 0x4a693a
nop dword [eax + eax]
lea ecx, [ecx + 2]
inc eax
cmp word [ecx], 0
jne 0x4a6930
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0xc]
push ebx
call fcn.0040d7a0
mov dword [ebp - 0x50], 0x53
add esp, 0xc
mov byte [ebp - 0x4c], 0x76
xor edx, edx
mov byte [ebp - 0x4b], 0
mov al, byte [ebp - 0x4c]
mov byte [ebp - 0x4a], 0
nop word [eax + eax]
mov al, byte [ebp + edx - 0x4c]
movsx ecx, byte [ebp - 0x50]
movsx eax, al
xor eax, ecx
mov byte [ebp + edx - 0x4c], al
inc edx
cmp edx, 2
jb 0x4a6970
mov ebx, dword [0x4f07ac]
mov byte [ebp - 0x4a], 0
test ebx, ebx
jne 0x4a6a21
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 0x10], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 4], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a6a08
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 4]
imul eax, eax, 0x1000193
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x4a69d0
cmp eax, 0xc0323159
je 0x4a6e69
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp eax, edx
je 0x4a6a19
cmp dword [ecx + 0x18], 0
jne 0x4a69b1
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov eax, dword [0x4f07a4]
test eax, eax
jne 0x4a6abe
test ebx, ebx
je 0x4a6ab7
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x54], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x4a6ab7
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [eax + 0x18], ecx
je 0x4a6ab7
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 4], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a6aa5
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4a6a70
cmp edi, 0x98b3a433
je 0x4a6e74
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a6a60
xor eax, eax
mov dword [0x4f07a4], eax
push dword [ebp - 0xc]
lea ecx, [ebp - 0x4c]
push ecx
push dword [ebp - 0x18]
call eax
mov edi, dword [0x4f8ce0]
add esp, 0xc
test edi, edi
jne 0x4a6b62
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0x10], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a6b49
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4a6b11
cmp eax, 0xf730d303
je 0x4a6e92
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp eax, edx
je 0x4a6b5a
cmp dword [ecx + 0x18], 0
jne 0x4a6af3
xor edi, edi
mov dword [0x4f8ce0], edi
mov eax, dword [0x4f8cd4]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x4a6c0d
test edi, edi
je 0x4a6bfb
mov eax, dword [edi + 0x3c]
mov ecx, dword [eax + edi + 0x78]
mov eax, dword [eax + edi + 0x7c]
mov dword [ebp - 0x54], eax
lea eax, [ecx + edi]
mov dword [ebp - 4], eax
cmp eax, edi
je 0x4a6bfb
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [eax + 0x18], ecx
je 0x4a6bfb
mov eax, dword [eax + 0x20]
add eax, edi
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov ebx, 0x811c9dc5
add esi, edi
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a6be9
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, ebx
imul ebx, eax, 0x1000193
test dl, dl
jne 0x4a6bb4
cmp ebx, 0xcc4cbcf3
je 0x4a6e9d
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a6ba4
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [0x4f8cd4], eax
test eax, eax
je 0x4a7223
test edi, edi
jne 0x4a6ca9
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0x10], ecx
nop dword [eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a6c88
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4a6c50
cmp eax, 0xf730d303
je 0x4a6ebb
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp eax, edx
je 0x4a6c99
cmp dword [ecx + 0x18], 0
jne 0x4a6c30
xor edi, edi
mov eax, dword [0x4f8cd4]
mov dword [0x4f8ce0], edi
mov dword [ebp - 0x10], eax
mov eax, dword [0x4f8cc4]
test eax, eax
jne 0x4a6d56
test edi, edi
je 0x4a6d47
mov eax, dword [edi + 0x3c]
mov ecx, dword [eax + edi + 0x78]
mov eax, dword [eax + edi + 0x7c]
mov dword [ebp - 0x54], eax
lea eax, [ecx + edi]
mov dword [ebp - 4], eax
cmp eax, edi
je 0x4a6d47
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x4a6d47
mov eax, dword [eax + 0x20]
add eax, edi
mov dword [ebp - 0xc], eax
nop dword [eax + eax]
mov esi, dword [eax]
mov ebx, 0x811c9dc5
add esi, edi
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a6d35
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, ebx
imul ebx, eax, 0x1000193
test dl, dl
jne 0x4a6d00
cmp ebx, 0xe8e269a3
je 0x4a6ec6
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a6cf0
xor eax, eax
mov dword [0x4f8cc4], eax
test eax, eax
je 0x4a7223
test edi, edi
jne 0x4a6ef6
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a6dcc
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4a6d94
cmp eax, 0xf730d303
je 0x4a6ee4
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4a6ddd
cmp dword [ecx + 0x18], 0
jne 0x4a6d76
xor eax, eax
mov dword [0x4f8ce0], eax
mov eax, dword [0x4f8cd4]
jmp 0x4a6ef9
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax + 0x18]
jmp 0x4a643c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4a64dd
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax + 0x18]
jmp 0x4a662b
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4a66cc
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax + 0x18]
jmp 0x4a682b
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4a68cc
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x18]
jmp 0x4a6a1b
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4a6ab9
mov edi, dword [ebp - 0x10]
mov edi, dword [edi + 0x18]
jmp 0x4a6b5c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, edi
jmp 0x4a6bfd
mov edi, dword [ebp - 0x10]
mov edi, dword [edi + 0x18]
jmp 0x4a6c9b
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, edi
jmp 0x4a6d49
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x18]
mov dword [0x4f8ce0], eax
mov eax, dword [0x4f8cd4]
jmp 0x4a6ef9
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x18]
call eax
mov dword [ebp - 0xa8], eax
cmp eax, 0xffffffff
je 0x4a7223
mov ebx, dword [0x4f8ce0]
test ebx, ebx
jne 0x4a6fa2
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a6f89
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4a6f51
cmp eax, 0xf730d303
je 0x4a795c
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4a6f9a
cmp dword [ecx + 0x18], 0
jne 0x4a6f33
xor ebx, ebx
mov dword [0x4f8ce0], ebx
mov eax, dword [0x4f8cc4]
test eax, eax
jne 0x4a703f
test ebx, ebx
je 0x4a7038
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x54], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4a7038
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x4a7038
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a7026
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4a6ff1
cmp edi, 0xe8e269a3
je 0x4a7967
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a6fe1
xor eax, eax
mov dword [0x4f8cc4], eax
push 2
push 4
lea ecx, [ebp - 0xa8]
push ecx
call eax
mov dword [ebp - 0x20], eax
test eax, eax
je 0x4a7223
push 0x100
push 0
push dword [ebp - 0x14]
call fcn.0040d020
mov eax, 0x2d
add esp, 0xc
mov word [ebp - 0xa4], ax
mov eax, 0x5b
mov word [ebp - 0xa2], ax
mov eax, 8
mov word [ebp - 0xa0], ax
movzx eax, word [0x403742]
add eax, 8
mov word [ebp - 0x9e], ax
movzx eax, word [0x403744]
add eax, 8
mov word [ebp - 0x9c], ax
xor eax, eax
mov word [ebp - 0x9a], ax
xor ecx, ecx
mov ax, word [ebp - 0xa4]
mov ax, word [ebp + ecx*2 - 0xa4]
movzx eax, ax
add eax, 0xfffffff8
mov word [ebp + ecx*2 - 0xa4], ax
inc ecx
cmp ecx, 5
jb 0x4a70c1
mov ebx, dword [0x4f07ac]
test ebx, ebx
jne 0x4a7172
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a7159
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4a7121
cmp eax, 0xc0323159
je 0x4a7985
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4a716a
cmp dword [ecx + 0x18], 0
jne 0x4a7103
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov eax, dword [0x4f07b8]
test eax, eax
jne 0x4a720f
test ebx, ebx
je 0x4a7208
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x54], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4a7208
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x4a7208
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a71f6
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4a71c1
cmp edi, 0xaeb3c6d5
je 0x4a7990
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a71b1
xor eax, eax
mov dword [0x4f07b8], eax
mov ecx, dword [ebp - 0x20]
push dword [ecx]
lea ecx, [ebp - 0xa4]
push ecx
push dword [ebp - 0x14]
call eax
add esp, 0xc
mov ebx, 0x77
mov dword [ebp - 0x1c], 0
lea edi, [ebx - 0x69]
mov ecx, 0x20a
mov dword [ebp - 0x80], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
call fcn.004baba0
mov dword [ebp - 0x10], eax
mov eax, 0x78
mov dword [ebp - 0xc8], 0x2b
mov word [ebp - 0xc4], bx
mov word [ebp - 0xc2], bx
mov word [ebp - 0xc0], di
mov word [ebp - 0xbe], ax
mov eax, 0x2b
mov word [ebp - 0xbc], ax
movzx eax, word [0x40374e]
xor eax, 0x2b
mov word [ebp - 0xba], ax
movzx eax, word [0x403750]
xor eax, 0x2b
mov word [ebp - 0xb8], ax
movzx eax, word [0x403752]
xor eax, 0x2b
mov word [ebp - 0xb6], ax
movzx eax, word [0x403754]
xor eax, 0x2b
mov word [ebp - 0xb4], ax
xor eax, eax
mov word [ebp - 0xb2], ax
xor edx, edx
mov ax, word [ebp - 0xc4]
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0xc4]
movzx ecx, ax
movzx eax, word [ebp - 0xc8]
xor ecx, eax
mov word [ebp + edx*2 - 0xc4], cx
inc edx
cmp edx, 9
jb 0x4a72f0
mov ebx, dword [0x4f07ac]
xor eax, eax
mov word [ebp - 0xb2], ax
test ebx, ebx
jne 0x4a73b1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a7398
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4a7360
cmp eax, 0xc0323159
je 0x4a79ae
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4a73a9
cmp dword [ecx + 0x18], 0
jne 0x4a7341
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov eax, dword [0x4f07b8]
test eax, eax
jne 0x4a7452
test ebx, ebx
je 0x4a744b
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x54], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4a744b
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x4a744b
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a7439
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4a7404
cmp edi, 0xaeb3c6d5
je 0x4a79b9
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a73f4
xor eax, eax
mov dword [0x4f07b8], eax
push dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
lea ecx, [ebp - 0xc4]
push ecx
push ebx
call eax
mov dword [ebp - 0xf0], ebx
add esp, 0xc
mov ebx, dword [0x4f8b90]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xe8], 0
test ebx, ebx
jne 0x4a7521
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
nop
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a7508
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4a74d0
cmp eax, 0x39ebe634
je 0x4a79d7
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4a7519
cmp dword [ecx + 0x18], 0
jne 0x4a74b0
xor ebx, ebx
mov dword [0x4f8b90], ebx
mov eax, dword [0x4f8ccc]
test eax, eax
jne 0x4a75c2
test ebx, ebx
je 0x4a75bb
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x54], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4a75bb
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x4a75bb
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4a75a9
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4a7574
cmp edi, 0x48c6c84b
je 0x4a79e2
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a7564
xor eax, eax
mov dword [0x4f8ccc], eax
push 0
push 0
push 0
lea ecx, [ebp - 0x104]
push ecx
call eax
mov ecx, dword [ebp - 0x10]
call fcn.004bb000
mov esi, dword [ebp - 0x14]
nop dword [eax]
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x80]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0xb0]
push eax
push 1
push esi
call dword [ebp - 0xac]
mov ebx, eax
mov dword [ebp - 0x54], ebx
test ebx, ebx
je 0x4a7619
cmp ebx, 0xea
jne 0x4a791a
mov eax, dword [ebp - 0x80]
mov edx, 1
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x20], edx
cmp eax, edx
jb 0x4a7907
cmp dword [ecx + 4], 0
jne 0x4a78ec
mov ecx, 0x410
call fcn.004baba0
mov dword [ebp - 0x7c], 0x3e
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0xdc], eax
xor ecx, 0x5c
mov word [ebp - 0x78], cx
mov ecx, dword [ebp - 0x7c]
inc ecx
xor ecx, 0x5c
mov word [ebp - 0x76], cx
mov eax, dword [ebp - 0x7c]
add eax, 2
xor eax, 0x25
mov word [ebp - 0x74], ax
mov eax, dword [ebp - 0x7c]
add eax, 3
xor eax, 0x73
mov word [ebp - 0x72], ax
mov eax, dword [ebp - 0x7c]
add eax, 4
xor eax, 0x5c
mov word [ebp - 0x70], ax
mov eax, dword [ebp - 0x7c]
add eax, 5
xor eax, 0x25
mov word [ebp - 0x6e], ax
mov eax, dword [ebp - 0x7c]
add eax, 6
xor eax, 0x73
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x7c]
add eax, 7
mov word [ebp - 0x6a], ax
mov eax, dword [ebp - 0x7c]
movzx ecx, word [0x403760]
add eax, 8
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x68], cx
mov eax, dword [ebp - 0x7c]
movzx ecx, word [0x403762]
add eax, 9
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x66], cx
mov eax, dword [ebp - 0x7c]
movzx ecx, word [0x403764]
add eax, 0xa
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x64], cx
mov eax, dword [ebp - 0x7c]
movzx ecx, word [0x403766]
add eax, 0xb
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x62], cx
mov eax, dword [ebp - 0x7c]
movzx ecx, word [0x403768]
add eax, 0xc
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x60], cx
mov eax, dword [ebp - 0x7c]
movzx ecx, word [0x40376a]
add eax, 0xd
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x5e], cx
mov eax, dword [ebp - 0x7c]
movzx ecx, word [0x40376c]
add eax, 0xe
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x5c], cx
xor edx, edx
mov word [ebp - 0x5a], ax
mov ax, word [ebp - 0x78]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0x78]
mov ecx, dword [ebp - 0x7c]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x78], cx
inc edx
cmp edx, 0xf
jb 0x4a7760
mov ebx, dword [0x4f07ac]
xor eax, eax
mov word [ebp - 0x5a], ax
test ebx, ebx
jne 0x4a7818
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x10], eax
mov edx, eax
mov dword [ebp - 8], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4a77fc
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4a77c4
cmp eax, 0xc0323159
je 0x4a7a00
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x4a780d
cmp dword [ecx + 0x18], 0
jne 0x4a77a6
xor ebx, ebx
mov esi, dword [ebp - 0x14]
mov dword [0x4f07ac], ebx
mov eax, dword [0x4f07b8]
test eax, eax
jne 0x4a78c0
test ebx, ebx
je 0x4a78b6
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x4a78b6
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [eax + 0x18], ecx
je 0x4a78b6
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 8]
add eax, ebx
mov dword [ebp - 0xc], eax
nop dword [eax + eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
mov al, byte [esi + ebx]
add esi, ebx
inc esi
test al, al
je 0x4a78a4
movsx edx, al
lea esi, [esi + 1]
sub al, 0x41
mov ecx, edx
or ecx, 0x20
cmp al, 0x19
mov al, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test al, al
jne 0x4a7871
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
cmp edi, 0xaeb3c6d5
je 0x4a7a0b
mov eax, dword [ebp - 0xc]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4a7860
xor eax, eax
mov esi, dword [ebp - 0x14]
mov dword [0x4f07b8], eax
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 0xdc]
push dword [ecx]
lea ecx, [ebp - 0x78]
push esi
push ecx
push ebx
call eax
add esp, 0x10
push ebx
call fcn.0045c960
mov ecx, ebx
call fcn.004bb000
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x20]
inc edx
add ecx, 0xc
mov dword [ebp - 4], ecx
mov dword [ebp - 0x20], edx
cmp edx, eax
jbe 0x4a7635
mov ecx, dword [ebp - 0xb0]
mov ebx, dword [ebp - 0x54]
push ecx
call dword [ebp - 0xcc]
cmp ebx, 0xea
je 0x4a75e0
cmp ebx, 5
jne 0x4a7941
cmp dword [ebp - 0x1c], 0
jne 0x4a7941
mov dword [ebp - 0x1c], 1
call fcn.004c3120
mov ebx, 0x77
lea edi, [ebx - 0x69]
test eax, eax
jne 0x4a7232
mov ecx, esi
call fcn.004bb000
mov ecx, dword [ebp - 0x18]
call fcn.004bb000
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x4a6f9c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4a703a
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x4a716c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4a720a
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x4a73ab
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4a744d
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x4a751b
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4a75bd
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x4a780f
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x4a78b8
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret