Function at 0x49cc80
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x138
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x24], 0
or ebx, 0xffffffff
mov esi, edi
or edx, ebx
mov dword [esp + 0x10], ebx
or ecx, ebx
mov dword [esp + 0x14], edx
cmp dword [edi + 0xe910], 0
lea eax, [edi + 0xe92c]
mov dword [esp + 0x2c], ecx
jbe 0x49ae3d
nop dword [eax]
mov al, byte [esi + 0xf7]
mov dword [esp + 0x3c], ecx
mov cl, byte [esi + 0xf9]
movzx edx, cl
mov byte [esp + 0x33], cl
movzx ecx, byte [esi + 0xfa]
movzx ebp, al
mov dword [esp + 0x20], ecx
cmp dword [esp + 0x20], 4
mov cl, byte [esi + 0xfb]
mov byte [esp + 0x32], al
movzx eax, byte [esi + 0xf8]
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x40], eax
mov dword [esp + 0x34], edx
movzx ebx, cl
je 0x49a73d
cmp dword [esp + 0x20], 6
je 0x49a73d
mov byte [esp + 0x1b], 0
cmp eax, 0xb
jne 0x49a742
mov byte [esp + 0x1b], 1
and dword [esi + 0x24], 0xfeffffff
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], 0
cmp eax, 0x13
je 0x49a763
cmp eax, 0x14
jne 0x49a881
test cl, cl
jne 0x49a779
test byte [edi + 0xe920], 0x22
je 0x49a779
movzx ebx, byte [esi + 0xe9]
jmp 0x49a77f
mov byte [esi + 0xe9], cl
mov eax, ebx
and eax, 0xf0
cmp eax, 0xd0
jne 0x49a79b
mov eax, ebx
and eax, 0xf
mov dword [esp + 0x28], eax
jmp 0x49a885
cmp dword [edi + 0xe92c], 0
jne 0x49a881
cmp eax, 0x60
jne 0x49a7b9
cmp dword [esp + 0x20], 0x13
je 0x49a7cf
jmp 0x49a881
cmp eax, 0xb0
jne 0x49a86f
cmp dword [esp + 0x20], 0x14
jne 0x49a881
mov eax, ebx
and eax, 0xf
mov dword [esp + 0x2c], eax
je 0x49a84d
mov al, byte [esi + 0xf5]
test al, al
je 0x49a7f0
sub al, 1
mov byte [esi + 0xf5], al
jne 0x49a821
jmp 0x49a859
mov ebp, dword [edi + 0xe910]
xor ecx, ecx
mov eax, edi
test ebp, ebp
je 0x49a817
nop
cmp eax, esi
je 0x49a80d
cmp byte [eax + 0xf5], 0
jne 0x49a839
inc ecx
add eax, 0x100
cmp ecx, ebp
jb 0x49a800
mov eax, dword [esp + 0x2c]
mov byte [esi + 0xf5], al
movzx eax, byte [esi + 0xf4]
mov ebp, dword [esp + 0x1c]
test eax, eax
cmovs eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
jmp 0x49a881
mov ebp, dword [esp + 0x1c]
or eax, 0xffffffff
test eax, eax
cmovs eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
jmp 0x49a881
mov al, byte [edi + 0xe948]
mov byte [esi + 0xf4], al
mov ebp, dword [esp + 0x1c]
mov eax, 0xffffffff
test eax, eax
cmovs eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
jmp 0x49a881
cmp eax, 0xe0
jne 0x49a881
mov eax, ebx
and eax, 0xf
mov dword [edi + 0xe934], eax
mov eax, dword [esp + 0x28]
cmp dword [edi + 0xe92c], eax
jne 0x49ab7b
movzx ecx, byte [esi + 0xf6]
mov dword [esp + 0x3c], ecx
test ebp, ebp
je 0x49a8aa
mov al, byte [esp + 0x32]
mov byte [esi + 0xd7], al
test dword [edi + 0xe920], 0x100005
je 0x49a8e1
cmp ecx, 0xff
jne 0x49a8e1
mov eax, dword [esi + 0x8c]
test eax, eax
je 0x49a8ce
test byte [eax + 4], 1
jne 0x49a8e1
or dword [esi + 0x24], 0x1000000
mov dword [esi + 0x74], 0
jmp 0x49ab2b
mov eax, dword [esp + 0x1c]
mov ebp, ecx
mov edx, eax
test ecx, ecx
jne 0x49a9a2
mov dword [esp + 0x1c], eax
mov dword [esp + 0x3c], ecx
test edx, edx
je 0x49a9a2
cmp dword [edi + 0xe928], ecx
je 0x49a971
mov eax, dword [esi + 0x90]
test eax, eax
je 0x49a91a
movzx eax, word [eax + 0x1e]
mov dword [esi + 0x74], eax
test dword [edi + 0xe920], 0x100004
je 0x49a989
mov eax, dword [esi + 0x24]
and eax, 0xfffffbff
mov dword [esi + 0x94], 0
or eax, 0x1000000
mov dword [esi + 0x98], 0
mov dword [esi + 0x9c], 0
mov dword [esi + 0xbc], 0
mov dword [esi + 0xc0], 0
mov dword [esi + 0x24], eax
mov dword [esi + 0x7c], 0x10000
jmp 0x49a989
cmp edx, 0xf0
jae 0x49a989
mov eax, edx
shl eax, 6
movzx eax, word [eax + edi + 0x821e]
mov dword [esi + 0x74], eax
test byte [edi + 0xe920], 0x20
mov eax, edx
mov ecx, ebp
mov dword [esp + 0x1c], eax
mov dword [esp + 0x3c], ecx
je 0x49ab27
cmp eax, 0xf0
mov ebp, ecx
mov dword [esp + 0x44], ebp
sbb eax, eax
and eax, dword [esp + 0x1c]
cmp ecx, 0xfe
sbb edx, edx
and edx, eax
mov dword [esp + 0x1c], edx
mov eax, edx
mov dword [esp + 0x38], eax
test ecx, ecx
je 0x49aa04
cmp ecx, 0x80
ja 0x49a9fe
mov byte [esi + 0xd6], cl
mov cl, byte [esp + 0x1b]
mov dword [esp + 0x1c], edx
test cl, cl
jne 0x49aa0c
push 0
push ebp
push eax
push dword [esp + 0x30]
mov ecx, edi
call fcn.00497e70
mov edx, dword [esp + 0x38]
mov dword [esp + 0x1c], edx
jmp 0x49aa08
mov dword [esp + 0x1c], eax
jmp 0x49aa08
mov ebp, dword [esp + 0x3c]
mov cl, byte [esp + 0x1b]
test edx, edx
je 0x49aa62
mov eax, dword [esi + 0x90]
push 1
push 1
mov dword [esp + 0x40], eax
movzx eax, cl
mov ecx, edi
push eax
push edx
push esi
call fcn.00499b70
mov byte [esi + 0xd7], 0
test byte [edi + 0xe920], 0x22
je 0x49aa5e
mov eax, dword [esp + 0x38]
cmp eax, dword [esi + 0x90]
je 0x49aa5e
test ebp, ebp
je 0x49ab27
cmp ebp, 0x80
jae 0x49aaab
mov byte [esp + 0x1b], 0
jmp 0x49aaab
mov edx, dword [esp + 0x1c]
test ebp, ebp
je 0x49ab27
test edx, edx
jne 0x49aaab
mov cl, byte [esi + 0xd7]
test cl, cl
je 0x49aaab
cmp ebp, 0x80
jae 0x49aaab
mov eax, dword [edi + 0xe920]
and eax, 0x100004
neg eax
sbb eax, eax
inc eax
push eax
movzx eax, byte [esp + 0x1f]
push edx
push eax
movzx eax, cl
mov ecx, edi
push eax
push esi
call fcn.00499b70
mov byte [esi + 0xd7], 0
mov eax, dword [edi + 0xe920]
mov ecx, edi
and eax, 0x100004
neg eax
sbb eax, eax
inc eax
push eax
movzx eax, byte [esp + 0x1f]
push eax
push ebp
push dword [esp + 0x30]
call fcn.00499fc0
cmp byte [esp + 0x1b], 0
je 0x49ab27
test dword [edi + 0xe920], 0x100004
je 0x49ab27
cmp dword [esp + 0x1c], 0
mov edx, dword [esp + 0x34]
je 0x49ab2b
or dword [esi + 0x24], 0x1000000
mov dword [esi + 0x94], 0
mov dword [esi + 0x98], 0
mov dword [esi + 0x9c], 0
mov dword [esi + 0xbc], 0
mov dword [esi + 0xc0], 0
jmp 0x49ab2b
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x40]
cmp eax, 1
jne 0x49ab55
cmp edx, 0x40
mov eax, 0x40
cmova edx, eax
or dword [esi + 0x24], 0x1000000
lea eax, [edx*4]
mov dword [esi + 0x74], eax
jmp case.0x49abf2.11
cmp eax, 2
jne 0x49ab82
cmp edx, 0x40
mov eax, 0x40
cmova edx, eax
or dword [esi + 0x24], 0x1000000
lea eax, [edx*4]
mov dword [esi + 0x78], eax
jmp case.0x49abf2.11
mov eax, dword [esp + 0x40]
cmp eax, 2
jbe case.0x49abf2.11
mov ebp, dword [esp + 0x28]
cmp dword [edi + 0xe92c], ebp
jb case.0x49abf2.11
cmp eax, 0xb
jne 0x49abcf
test byte [edi + 0xe920], 0x20
je 0x49abbe
and edx, 0xf
mov ecx, edi
movzx edx, byte [edx + 0x5c4d50]
push edx
push esi
call fcn.0049bf90
jmp case.0x49abf2.11
shl edx, 4
mov ecx, edi
push edx
push esi
call fcn.0049bf90
jmp case.0x49abf2.11
test edx, edx
je 0x49abdf
mov cl, byte [esp + 0x33]
mov byte [esi + 0xea], cl
jmp 0x49abe6
movzx edx, byte [esi + 0xea]
add eax, 0xfffffffd
cmp eax, 0xa
ja case.0x49abf2.11
jmp dword [eax*4 + 0x49b830]
shl edx, 4
push edx
push esi
mov ecx, edi
call fcn.0049c0c0
jmp case.0x49abf2.11
test byte [edi + 0xe920], 0x20
je 0x49ac33
cmp dword [edi + 0xe92c], ebp
jne case.0x49abf2.11
shl edx, 4
mov ecx, edi
or edx, 0xf
push edx
push esi
call fcn.0049c0c0
jmp case.0x49abf2.11
test edx, edx
je 0x49ac3f
mov byte [esi + 0xdb], dl
jmp 0x49ac46
movzx edx, byte [esi + 0xdb]
test dword [edi + 0xe90c], 0x1000
je case.0x49abf2.11
mov eax, dword [esi + 0x74]
mov ecx, 0x100
lea eax, [eax + edx*4]
cmp eax, 0x100
cmovg eax, ecx
mov dword [esi + 0x74], eax
test byte [edi + 0xe920], 1
je case.0x49abf2.11
or dword [esi + 0x24], 0x1000000
jmp case.0x49abf2.11
test byte [edi + 0xe920], 0x20
je 0x49acae
cmp dword [edi + 0xe92c], ebp
jne case.0x49abf2.11
or edx, 0xf0
mov ecx, edi
push edx
push esi
call fcn.0049c0c0
jmp case.0x49abf2.11
test edx, edx
je 0x49acba
mov byte [esi + 0xdb], dl
jmp 0x49acc1
movzx edx, byte [esi + 0xdb]
test dword [edi + 0xe90c], 0x1000
je case.0x49abf2.11
mov ecx, dword [esi + 0x74]
lea eax, [edx*4]
sub ecx, eax
mov eax, 0
cmovs ecx, eax
mov dword [esi + 0x74], ecx
test byte [edi + 0xe920], 1
je case.0x49abf2.11
or dword [esi + 0x24], 0x1000000
jmp case.0x49abf2.11
mov eax, edx
shl eax, 4
test al, 0xf0
je 0x49ad0c
and dl, 0xf
mov byte [esi + 0xe1], dl
or dword [esi + 0x24], 0x10000
jmp case.0x49abf2.11
test dl, 0xf
je 0x49ad27
mov al, dl
and al, 0xf
shl al, 2
mov byte [esi + 0xe2], al
test dl, 0xf0
je 0x49ad35
shr edx, 4
mov byte [esi + 0xe1], dl
or dword [esi + 0x24], 0x10000
jmp case.0x49abf2.11
shl edx, 4
push edx
push esi
mov ecx, edi
call fcn.0049a4a0
jmp case.0x49abf2.11
lea eax, [edx*4]
mov ecx, edi
push eax
push esi
call fcn.0049a610
jmp case.0x49abf2.11
lea eax, [edx*4]
mov ecx, edi
push eax
push esi
call fcn.0049a580
mov eax, dword [esp + 0x20]
test eax, eax
je case.0x49b3bf.17
dec eax
cmp eax, 0x1e
ja case.0x49b3bf.17
jmp dword [eax*4 + 0x49b85c]
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
cmp ebx, 0x40
jae 0x49adae
shl ebx, 2
or dword [esi + 0x24], 0x1000000
mov dword [esi + 0x74], ebx
jmp 0x49ae16
or dword [esi + 0x24], 0x1000000
mov ebx, 0x100
mov dword [esi + 0x74], ebx
jmp 0x49ae16
test ebx, ebx
jne 0x49adcc
test byte [edi + 0xe920], 1
jne case.0x49b3bf.17
push ebx
push esi
mov ecx, edi
call fcn.0049a610
jmp case.0x49b3bf.17
test ebx, ebx
jne 0x49ade4
test byte [edi + 0xe920], 1
jne case.0x49b3bf.17
push ebx
push esi
mov ecx, edi
call fcn.0049a580
jmp case.0x49b3bf.17
test ebx, ebx
jne 0x49adfc
cmp dword [edi + 0xe920], 1
je case.0x49b3bf.17
push ebx
push esi
mov ecx, edi
call fcn.0049c0c0
jmp case.0x49b3bf.17
push ebx
push esi
mov ecx, edi
call fcn.0049bf90
lea eax, [edi + 0xe92c]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
add esi, 0x100
inc ecx
cmp ecx, dword [edi + 0xe910]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x2c]
jb 0x49a6e0
cmp dword [eax], 0
jne 0x49b81f
test ecx, ecx
js 0x49b5f8
cmp dword [edi + 0xe934], 0
mov eax, dword [edi + 0xe950]
mov dword [edi + 0xe954], eax
mov dword [edi + 0xe944], ecx
je 0x49b81f
lea eax, [ecx + 1]
mov dword [edi + 0xe944], eax
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
test ebx, ebx
jne 0x49ae93
cmp dword [edi + 0xe920], 1
je 0x49ae9c
push ebx
push esi
mov ecx, edi
call fcn.0049c0c0
push 0
jmp 0x49ae08
test bl, 0xf
je 0x49aeb5
mov al, bl
and al, 0xf
shl al, 2
mov byte [esi + 0xe2], al
test bl, 0xf0
je 0x49aec3
shr ebx, 4
mov byte [esi + 0xe1], bl
or dword [esi + 0x24], 0x10000
jmp case.0x49b3bf.17
test ebx, ebx
jne 0x49aedc
cmp dword [edi + 0xe920], 1
je 0x49aec3
push ebx
push esi
mov ecx, edi
call fcn.0049c0c0
or dword [esi + 0x24], 0x10000
jmp case.0x49b3bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
push ebx
mov ecx, edi
call fcn.0049be30
jmp case.0x49b3bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
test byte [edi + 0xe920], 0x22
je 0x49af40
test ebx, ebx
je 0x49af39
mov byte [esi + 0xeb], bl
jmp 0x49af40
movzx ebx, byte [esi + 0xeb]
cmp ebx, 0x20
jae 0x49afb0
mov ecx, dword [edi + 0xe940]
mov eax, ebx
mov edx, dword [esp + 0x14]
and eax, 0xf
and bl, 0xf0
add eax, eax
cmp bl, 0x10
mov ebx, dword [esp + 0x10]
jne 0x49af8a
add eax, ecx
mov dword [edi + 0xe940], eax
cmp eax, 0xff
lea eax, [edi + 0xe92c]
jbe 0x49ae1e
mov dword [edi + 0xe940], 0xff
jmp 0x49ae1e
sub ecx, eax
lea eax, [edi + 0xe92c]
mov dword [edi + 0xe940], ecx
cmp ecx, 0x20
jge 0x49ae1e
mov dword [edi + 0xe940], 0x20
jmp 0x49ae1e
mov dword [edi + 0xe940], ebx
jmp 0x49ae16
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
test ebx, ebx
je 0x49afda
mov byte [esi + 0xec], bl
jmp 0x49afe1
movzx ebx, byte [esi + 0xec]
movzx ecx, byte [esi + 0xed]
mov al, byte [esi + 0xf6]
shl ecx, 8
or ecx, ebx
shl ecx, 8
test al, al
je 0x49b053
cmp al, 0x80
jae 0x49b053
cmp byte [esp + 0x1b], 0
jne 0x49b008
add ecx, dword [esi + 4]
mov edx, dword [esi + 0x20]
mov dword [esi + 4], ecx
cmp ecx, edx
jb case.0x49b3bf.17
test dword [edi + 0xe920], 0x100004
jne case.0x49b3bf.17
mov eax, dword [esi + 0x28]
mov dword [esi + 4], eax
test byte [edi + 0xe90c], 4
je case.0x49b3bf.17
mov ebx, dword [esp + 0x10]
cmp edx, 4
jbe 0x49b048
lea eax, [edx - 2]
mov dword [esi + 4], eax
lea eax, [edi + 0xe92c]
jmp 0x49ae1a
cmp ecx, dword [esi + 0x20]
jae case.0x49b3bf.17
test dword [edi + 0xe920], 0x20010
lea eax, [edi + 0xe92c]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
je 0x49ae1e
mov dword [esi + 4], ecx
jmp 0x49ae1e
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
cmp dword [esi + 0x80], 0
je 0x49ae16
cmp byte [esi + 0xd4], 0
je 0x49ae16
test ebx, ebx
jne 0x49b0c0
test byte [edi + 0xe920], 0x22
je 0x49ae16
mov edx, dword [esp + 0x14]
mov byte [esi + 0xd8], 1
test ebx, ebx
je 0x49b0d5
mov byte [esi + 0xd9], bl
mov ebx, dword [esp + 0x10]
jmp 0x49ae1e
test dword [edi + 0xe920], 0x100004
je 0x49b114
test bl, 0xf0
jne 0x49b0fd
movzx eax, byte [esi + 0xf1]
and eax, 0xf0
or ebx, eax
test bl, 0xf
jne 0x49b10e
movzx eax, byte [esi + 0xf1]
and eax, 0xf
or ebx, eax
or ebx, 0x100
test ebx, ebx
je 0x49b12f
push ebx
push dword [esp + 0x28]
mov ecx, edi
mov byte [esi + 0xf1], bl
call fcn.0049bc40
jmp case.0x49b3bf.17
movzx ebx, byte [esi + 0xf1]
mov ecx, edi
push ebx
push dword [esp + 0x28]
call fcn.0049bc40
jmp case.0x49b3bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
mov edx, dword [esp + 0x14]
mov byte [esi + 0xd8], 0x12
test ebx, ebx
je 0x49b0d5
mov byte [esi + 0xf3], bl
mov ebx, dword [esp + 0x10]
jmp 0x49ae1e
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
cmp dword [edi + 0xe920], 0x20
je 0x49b19a
add ebx, ebx
cmp ebx, 0x80
mov eax, pe_nt_image_headers32
cmova ebx, eax
lea eax, [ebx + ebx]
mov dword [edi + 0xe960], eax
jmp case.0x49b3bf.17
xor edx, edx
test ebx, ebx
je 0x49b1c4
mov dword [edi + 0xe970], ebx
jmp 0x49b1ca
mov ebx, dword [edi + 0xe970]
mov ebp, ebx
mov eax, ebx
and ebp, 0xf
and eax, 0xf0
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0xe90c]
setne cl
cmp ebp, 0xf
mov dword [esp + 0x20], eax
sete al
test al, cl
je 0x49b202
test dword [esp + 0x20], 0x1000
je 0x49b22a
mov edx, ebx
shr edx, 4
jmp 0x49b228
and dword [esp + 0x20], 0x1000
cmp dword [esp + 0x40], 0xf0
sete cl
test ebp, ebp
setne al
test al, cl
je 0x49b271
cmp dword [esp + 0x20], edx
je 0x49b22a
mov edx, ebp
neg edx
add edx, edx
mov ebx, dword [esp + 0x10]
test edx, edx
je 0x49b048
cmp dword [edi + 0xe920], 0x20
lea ecx, [edx + edx]
mov eax, dword [edi + 0xe960]
cmove ecx, edx
add eax, ecx
xor ecx, ecx
test eax, eax
cmovns ecx, eax
mov eax, 0x100
cmp ecx, 0x100
cmovg ecx, eax
lea eax, [edi + 0xe92c]
mov dword [edi + 0xe960], ecx
jmp 0x49ae1a
cmp dword [esp + 0x20], edx
jne 0x49b22a
cmp dword [esp + 0x40], edx
je 0x49b224
mov edx, ebx
shr edx, 4
and edx, 0xf
jmp 0x49b228
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
test dword [edi + 0xe90c], 0x4000
jne 0x49b2ad
and dword [esi + 0x24], 0xfffff7ff
test dword [edi + 0xe920], 0x100024
mov ecx, dword [esi + 0x24]
je 0x49b2cd
or ecx, 0x1000000
mov dword [esi + 0x78], ebx
mov dword [esi + 0x24], ecx
jmp 0x49ae16
cmp ebx, 0x80
ja 0x49b2ef
lea eax, [ebx + ebx]
or ecx, 0x1000000
mov dword [esi + 0x78], eax
lea eax, [edi + 0xe92c]
mov dword [esi + 0x24], ecx
jmp 0x49ae16
cmp ebx, 0xa4
jne 0x49b304
mov dword [esi + 0x78], pe_nt_image_headers32
or ecx, 0x800
or ecx, 0x1000000
mov dword [esi + 0x24], ecx
jmp 0x49ae16
push ebx
push esi
mov ecx, edi
call fcn.0049a4a0
jmp case.0x49b3bf.17
test bl, 0xf
je 0x49b332
mov al, bl
and al, 0xf
shl al, 2
mov byte [esi + 0xe5], al
test bl, 0xf0
je 0x49b340
shr ebx, 4
mov byte [esi + 0xe4], bl
or dword [esi + 0x24], 0x20000
jmp case.0x49b3bf.17
test bl, 0xf
je 0x49aeb5
mov al, bl
and al, 0xf
jmp 0x49aeaf
push ebx
push dword [esp + 0x28]
mov ecx, edi
call fcn.00498390
jmp case.0x49b3bf.17
push ebx
push dword [esp + 0x28]
mov ecx, edi
call fcn.00498630
jmp case.0x49b3bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
push dword [esp + 0x24]
mov ecx, edi
call fcn.00499ee0
jmp case.0x49b3bf.17
mov eax, ebx
and eax, 0xf0
add eax, 0xfffffff0
cmp eax, 0x90
ja case.0x49b3bf.17
movzx eax, byte [eax + 0x49b8e8]
jmp dword [eax*4 + 0x49b8d8]
and ebx, 0xf
mov ecx, edi
push ebx
push esi
call fcn.00498bb0
jmp case.0x49b3bf.17
and ebx, 0xf
mov ecx, edi
push ebx
push esi
call fcn.00498b20
jmp case.0x49b3bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
mov edx, dword [esp + 0x14]
jne 0x49b0d5
cmp ebx, 0x40
ja 0x49b0d5
or dword [esi + 0x24], 0x1000000
mov dword [esi + 0xa8], ebx
mov ebx, dword [esp + 0x10]
jmp 0x49ae1e
test ebx, ebx
je 0x49b42a
mov byte [esi + 0xdf], bl
jmp 0x49b431
movzx ebx, byte [esi + 0xdf]
mov ebp, dword [edi + 0xe90c]
mov edx, ebx
and edx, 0xf
mov eax, ebx
and eax, 0xf0
mov dword [esp + 0x38], eax
setne cl
cmp edx, 0xf
sete al
test al, cl
je 0x49b498
test ebp, 0x1000
je case.0x49b3bf.17
shr ebx, 4
mov edx, dword [esp + 0x14]
test ebx, ebx
je 0x49b489
mov eax, dword [esi + 0xa8]
xor ecx, ecx
add eax, ebx
cmovns ecx, eax
mov eax, 0x40
cmp ecx, 0x40
cmovg ecx, eax
mov dword [esi + 0xa8], ecx
mov ebx, dword [esp + 0x10]
lea eax, [edi + 0xe92c]
jmp 0x49ae1e
and ebp, 0x1000
cmp dword [esp + 0x38], 0xf0
sete cl
test edx, edx
setne al
test al, cl
je 0x49b4c0
test ebp, ebp
je case.0x49b3bf.17
mov ebx, edx
neg ebx
jmp 0x49b463
test ebp, ebp
jne case.0x49b3bf.17
test edx, edx
je 0x49b460
mov ebx, edx
neg ebx
jmp 0x49b463
test bl, 0xf
je 0x49b4e1
mov al, bl
and al, 0xf
mov byte [esi + 0xe8], al
test bl, 0xf0
je 0x49b4ef
shr ebx, 4
mov byte [esi + 0xe7], bl
or dword [esi + 0x24], 0x40000
jmp case.0x49b3bf.17
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
mov edx, dword [esi + 0x8c]
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], ebx
test edx, edx
je 0x49ae16
mov ecx, dword [esi + 0x24]
test ecx, 0x400000
je 0x49ae16
mov al, byte [edx + 0x22d]
test al, al
je case.0x49b3bf.17
movzx eax, al
movzx eax, word [edx + eax*2 + 0x4a]
mov edx, dword [esp + 0x14]
cmp ebx, eax
mov ebx, dword [esp + 0x10]
lea eax, [edi + 0xe92c]
jbe 0x49ae1e
and ecx, 0xffbfffff
mov dword [esi + 0x24], ecx
jmp 0x49ae1e
mov edx, ebx
lea eax, [edi + 0xe92c]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x14], edx
jmp 0x49ae1e
mov dword [esp + 0x10], ebx
lea eax, [edi + 0xe92c]
jmp 0x49ae1a
cmp dword [edi + 0xe92c], 0
lea eax, [edi + 0xe92c]
jne 0x49ae16
mov ecx, edi
cmp ebx, 0x80
jae 0x49b5d9
movzx eax, byte [esi + 0xfe]
add eax, 0x694
shl eax, 5
push ebx
add eax, edi
push eax
push dword [esp + 0x2c]
call fcn.0049b980
jmp case.0x49b3bf.17
and ebx, 0x7f
add ebx, 0x6a4
shl ebx, 5
push 0
add ebx, edi
push ebx
push dword [esp + 0x2c]
call fcn.0049b980
jmp case.0x49b3bf.17
test ebx, ebx
jns 0x49b610
test edx, edx
jns 0x49b61f
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x138
ret
test edx, edx
jns 0x49b61f
mov edx, dword [edi + 0xe950]
inc edx
mov dword [esp + 0x14], edx
mov esi, dword [edi + 0xe950]
xor eax, eax
test ebx, ebx
cmovs ebx, eax
mov dword [esp + 0x10], ebx
cmp edx, esi
jl 0x49b646
jne 0x49b7a5
cmp ebx, dword [edi + 0xe948]
jg 0x49b7a5
mov ecx, dword [edi + 0xe948]
mov eax, edx
cmp edx, 0xf0
jae 0x49b668
cmp byte [edi + eax + 0xd060], 0xfe
jne 0x49b668
inc eax
cmp eax, 0xf0
jb 0x49b656
cmp esi, 0xf0
jae 0x49b792
cmp eax, 0xf0
jae 0x49b792
cmp eax, esi
ja 0x49b7a5
jb 0x49b792
movzx ebp, word [edi + esi*2 + 0xce80]
cmp ebx, ebp
jae 0x49b792
cmp dword [edi + esi*4 + 0xcac0], 0
je 0x49b792
cmp ecx, 0x100
jae 0x49b792
cmp ebx, 0x100
jae 0x49b792
push 0x100
lea eax, [esp + 0x4c]
push 0
push eax
call fcn.0046bb30
add esp, 0xc
mov eax, 0x100
cmp ebp, 0x100
cmova ebp, eax
mov eax, dword [edi + 0xe948]
mov dword [esp + 0x38], ebp
mov byte [esp + eax + 0x48], 1
cmp byte [esp + ebx + 0x48], 0
jne 0x49b792
cmp ebx, ebp
jae 0x49b7a5
mov eax, dword [edi + 0xe910]
xor edx, edx
imul eax, ebx
or ebp, 0xffffffff
mov byte [esp + ebx + 0x48], 1
inc ebx
mov dword [esp + 0x2c], 0
lea ecx, [eax + eax*2]
mov eax, dword [edi + esi*4 + 0xcac0]
cmp dword [edi + 0xe910], edx
jbe 0x49b77e
lea eax, [eax + ecx*2]
add eax, 5
nop dword [eax + eax]
mov cl, byte [eax - 2]
cmp cl, 0xc
jne 0x49b75c
movzx ecx, byte [eax]
cmp ecx, esi
jb 0x49b792
ja 0x49b7a5
mov ecx, 1
mov dword [esp + 0x2c], ecx
jmp 0x49b768
cmp cl, 0xe
mov ecx, dword [esp + 0x2c]
jne 0x49b768
movzx ebp, byte [eax]
inc edx
add eax, 6
cmp edx, dword [edi + 0xe910]
jb 0x49b740
test ebp, ebp
js 0x49b77e
test ecx, ecx
je 0x49b7a5
mov ebx, ebp
mov ebp, dword [esp + 0x38]
cmp ebx, ebp
jae 0x49b7a5
cmp ebx, 0x100
jb 0x49b6f4
mov eax, dword [edi + 0xe97c]
test eax, eax
je 0x49b813
jle 0x49b7a5
dec eax
mov dword [edi + 0xe97c], eax
mov edx, dword [esp + 0x14]
cmp edx, 0x100
jge 0x49b81f
cmp edx, esi
jne 0x49b7d1
mov eax, dword [esp + 0x10]
cmp eax, dword [edi + 0xe948]
jne 0x49b7f7
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x138
ret
xor eax, eax
cmp dword [edi + 0xe910], eax
jbe 0x49b7f3
lea ecx, [edi + 0xf5]
mov byte [ecx], 0
lea ecx, [ecx + 0x100]
inc eax
cmp eax, dword [edi + 0xe910]
jb 0x49b7e1
mov eax, dword [esp + 0x10]
mov dword [edi + 0xe944], eax
mov eax, 1
mov dword [edi + 0xe954], edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x138
ret
mov eax, dword [edi + 0xe980]
mov dword [edi + 0xe97c], eax
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x138
ret
push ecx
mov eax, dword [ecx + 0xe934]
mov edx, dword [ecx + 0xe92c]
inc eax
imul eax, dword [ecx + 0xe93c]
inc edx
push ebx
push ebp
push esi
push edi
add eax, dword [ecx + 0xe938]
mov dword [ecx + 0xe92c], edx
cmp edx, eax
jb 0x49ced6
mov esi, dword [ecx + 0xe950]
mov eax, dword [ecx + 0xe954]
mov ebp, dword [ecx + 0xe944]
mov dword [ecx + 0xe934], 0
mov dword [ecx + 0xe938], 0
mov dword [ecx + 0xe92c], 0
mov dword [ecx + 0xe948], ebp
cmp esi, eax
je 0x49ccf0
mov dword [ecx + 0xe950], eax
mov esi, eax
mov eax, dword [ecx + 0xe90c]
and eax, 0x20
mov dword [esp + 0x10], eax
jne 0x49cdca
cmp esi, 0x100
jae 0x49cd47
movzx eax, byte [esi + ecx + 0xd060]
mov dword [ecx + 0xe94c], eax
mov edi, eax
cmp eax, 0xf0
jae 0x49cd3d
cmp dword [ecx + eax*4 + 0xcac0], 0
jne 0x49cd3d
mov dword [ecx + 0xe94c], 0xfe
mov edi, 0xfe
jmp 0x49cd56
cmp edi, 0xf0
jb 0x49cdc4
jmp 0x49cd56
mov dword [ecx + 0xe94c], 0xff
mov edi, 0xff
mov edx, esi
nop dword [eax + eax]
cmp edi, 0xff
je 0x49cf58
cmp edx, 0x100
jae 0x49cf58
lea esi, [edx + 1]
mov dword [ecx + 0xe950], esi
cmp esi, 0x100
jae 0x49cf4e
movzx eax, byte [esi + ecx + 0xd060]
mov edx, esi
mov dword [ecx + 0xe94c], eax
mov edi, eax
cmp eax, 0xf0
jae 0x49cdbc
cmp dword [ecx + eax*4 + 0xcac0], 0
jne 0x49cdbc
mov dword [ecx + 0xe94c], 0xfe
jmp 0x49cd6c
cmp edi, 0xf0
jae 0x49cd60
mov dword [ecx + 0xe954], esi
mov eax, dword [ecx + 0xe94c]
cmp eax, 0xf0
jae 0x49cf58
cmp dword [ecx + eax*4 + 0xcac0], 0
lea ebx, [ecx + eax*4]
je 0x49cf58
lea edi, [ecx + eax*2]
movzx eax, word [edi + 0xce80]
cmp ebp, eax
jb 0x49ce06
mov dword [ecx + 0xe948], 0
xor ebp, ebp
lea edx, [ebp + 1]
mov dword [ecx + 0xe944], edx
movzx eax, word [edi + 0xce80]
cmp edx, eax
jb 0x49ce34
cmp dword [esp + 0x10], 0
jne 0x49ce2a
lea eax, [esi + 1]
mov dword [ecx + 0xe954], eax
mov dword [ecx + 0xe944], 0
mov esi, dword [ecx + 0xe910]
mov eax, esi
imul eax, ebp
lea edx, [eax + eax*2]
mov eax, dword [ebx + 0xcac0]
xor ebx, ebx
lea edi, [eax + edx*2]
test esi, esi
je 0x49ced6
lea edx, [ecx + 0xf7]
nop dword [eax + eax]
movzx eax, byte [edi]
lea edx, [edx + 0x100]
mov byte [edx - 0x101], al
lea edi, [edi + 6]
movzx eax, byte [edi - 5]
inc ebx
mov byte [edx - 0x100], al
movzx eax, byte [edi - 4]
mov byte [edx - 0xff], al
movzx eax, byte [edi - 2]
mov byte [edx - 0xfe], al
movzx eax, byte [edi - 3]
mov byte [edx - 0xfd], al
movzx eax, byte [edi - 1]
and dword [edx - 0x1d3], 0xfff0ffff
mov byte [edx - 0xfc], al
mov eax, dword [edx - 0x18f]
mov dword [edx - 0x1e3], eax
mov eax, dword [edx - 0x193]
mov dword [edx - 0x1e7], eax
mov byte [edx - 0x11f], 0
cmp ebx, dword [ecx + 0xe910]
jb 0x49ce60
mov edi, dword [ecx + 0xe93c]
test edi, edi
jne 0x49ceef
mov dword [ecx + 0xe93c], 1
mov edi, 1
mov esi, dword [ecx + 0xe90c]
mov eax, dword [ecx + 0xe92c]
or esi, 0x1000
mov dword [ecx + 0xe90c], esi
test eax, eax
je 0x49cf42
and esi, 0xffffefff
test byte [ecx + 0xe920], 4
mov dword [ecx + 0xe90c], esi
jne 0x49cf42
mov edx, dword [ecx + 0xe934]
inc edx
imul edx, edi
cmp eax, edx
jae 0x49cf42
xor edx, edx
div edi
test edx, edx
jne 0x49cf42
or esi, 0x1000
mov dword [ecx + 0xe90c], esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 4
jmp 0x49a6a0
mov dword [ecx + 0xe94c], 0xff
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret