Function at 0x499660
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x484
push ebx
push esi
push edi
push 0x128
lea eax, [ebp - 0x170]
push 0
push eax
call fcn.0040d020
mov ebx, dword [0x4f081c]
add esp, 0xc
mov dword [ebp - 0x170], 0x128
test ebx, ebx
jne 0x499721
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x499708
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4996d0
cmp eax, 0xa3e6f6c3
je 0x49a0c2
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x499719
cmp dword [ecx + 0x18], 0
jne 0x4996b2
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f8c54]
test eax, eax
jne 0x4997be
test ebx, ebx
je 0x4997b7
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x4997b7
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x4997b7
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4997a5
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x499770
cmp edi, 0x7f8fe695
je 0x49a0cd
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x499760
xor eax, eax
mov dword [0x4f8c54], eax
push 0
push 2
call eax
mov dword [ebp - 0x14], eax
cmp eax, 0xffffffff
je 0x49a0bb
mov ebx, dword [0x4f081c]
test ebx, ebx
jne 0x499866
mov ecx, dword fs:[0x30]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49984d
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x499815
cmp eax, 0xa3e6f6c3
je 0x49a0eb
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x49985e
cmp dword [ecx + 0x18], 0
jne 0x4997f7
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f8c38]
test eax, eax
jne 0x499903
test ebx, ebx
je 0x4998fc
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x4998fc
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x4998fc
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x4998ea
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x4998b5
cmp edi, 0x4767c60f
je 0x49a0f6
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4998a5
xor eax, eax
mov dword [0x4f8c38], eax
lea ecx, [ebp - 0x170]
push ecx
push dword [ebp - 0x14]
call eax
test eax, eax
je 0x49a0bb
nop word [eax + eax]
mov ebx, dword [0x4f081c]
test ebx, ebx
jne 0x4999b5
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x49999c
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x499964
cmp eax, 0xa3e6f6c3
je 0x49a114
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x4999ad
cmp dword [ecx + 0x18], 0
jne 0x499946
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f0774]
test eax, eax
jne 0x499a52
test ebx, ebx
je 0x499a4b
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x499a4b
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x499a4b
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x499a39
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x499a04
cmp edi, 0x89eabb08
je 0x49a11f
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x4999f4
xor eax, eax
mov dword [0x4f0774], eax
push 1
call eax
xor eax, eax
cmp byte [ebp - 0x14c], al
je 0x499a6b
inc eax
cmp byte [ebp + eax - 0x14c], 0
jne 0x499a60
inc eax
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0040d7a0
mov ebx, dword [0x4f0780]
add esp, 0xc
test ebx, ebx
jne 0x499b21
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
nop dword [eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x499b08
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x499ad0
cmp eax, 0x8ec4c73b
je 0x49a13d
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x499b19
cmp dword [ecx + 0x18], 0
jne 0x499ab0
xor ebx, ebx
mov dword [0x4f0780], ebx
mov eax, dword [0x4f8c60]
test eax, eax
jne 0x499bbe
test ebx, ebx
je 0x499bb7
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x499bb7
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x499bb7
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x499ba5
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x499b70
cmp edi, 0x6c78b1e6
je 0x49a148
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x499b60
xor eax, eax
mov dword [0x4f8c60], eax
lea ecx, [ebp - 0x278]
push ecx
call eax
mov eax, dword [0x4f8a68]
mov dword [ebp - 0xc], 0
cmp dword [eax], 0
je 0x499f5e
nop dword [eax]
mov esi, dword [0x4f081c]
test esi, esi
jne 0x499c75
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x10], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 8], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x499c5c
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 8]
imul eax, eax, 0x1000193
mov dword [ebp - 8], eax
cmp edi, ebx
jne 0x499c24
cmp eax, 0xa3e6f6c3
je 0x49a166
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x499c6d
cmp dword [ecx + 0x18], 0
jne 0x499c06
xor esi, esi
mov dword [0x4f081c], esi
mov eax, dword [0x4f8c3c]
test eax, eax
jne 0x499d12
test esi, esi
je 0x499d0b
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + esi]
mov dword [ebp - 8], eax
cmp eax, esi
je 0x499d0b
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x499d0b
mov eax, dword [eax + 0x20]
add eax, esi
mov dword [ebp - 0x10], eax
mov edx, dword [eax]
mov edi, 0x811c9dc5
add edx, esi
mov bl, byte [edx]
inc edx
test bl, bl
je 0x499cf9
movsx ecx, bl
lea edx, [edx + 1]
sub bl, 0x41
mov eax, ecx
or eax, 0x20
cmp bl, 0x19
mov bl, byte [edx - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test bl, bl
jne 0x499cc4
cmp edi, 0xa5c59c8c
je 0x49a171
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x499cb4
xor eax, eax
mov dword [0x4f8c3c], eax
mov edx, dword [ebp - 0xc]
mov ecx, dword [0x4f8a68]
shl edx, 2
mov dword [ebp - 0x18], edx
push dword [edx + ecx]
lea ecx, [ebp - 0x278]
push ecx
call eax
test eax, eax
jne 0x499f48
mov ecx, dword [ebp - 0x168]
call fcn.0049df70
test eax, eax
je 0x499f48
mov dword [ebp - 0x40], 0x17
xor edx, edx
mov byte [ebp - 0x3c], 0x5c
mov byte [ebp - 0x3b], 0x7e
mov byte [ebp - 0x3a], 0x7b
mov byte [ebp - 0x39], 0x7b
mov byte [ebp - 0x38], 0x72
mov byte [ebp - 0x37], 0x73
mov byte [ebp - 0x36], 0x37
mov byte [ebp - 0x35], 0x67
mov byte [ebp - 0x34], 0x65
mov byte [ebp - 0x33], 0x78
mov byte [ebp - 0x32], 0x74
mov byte [ebp - 0x31], 0x72
mov byte [ebp - 0x30], 0x64
mov byte [ebp - 0x2f], 0x64
mov byte [ebp - 0x2e], 0x2d
mov byte [ebp - 0x2d], 0x37
mov byte [ebp - 0x2c], 0x32
mov byte [ebp - 0x2b], 0x64
mov byte [ebp - 0x2a], 0x37
mov byte [ebp - 0x29], 0x4c
mov byte [ebp - 0x28], 0x67
mov byte [ebp - 0x27], 0x7e
mov byte [ebp - 0x26], 0x73
mov byte [ebp - 0x25], 0x2d
mov byte [ebp - 0x24], 0x37
mov byte [ebp - 0x23], 0x32
mov byte [ebp - 0x22], 0x7b
mov byte [ebp - 0x21], 0x73
mov byte [ebp - 0x20], 0x4a
mov al, byte [ebp - 0x3c]
mov byte [ebp - 0x1f], 0
nop dword [eax]
mov al, byte [ebp + edx - 0x3c]
movsx ecx, byte [ebp - 0x40]
movsx eax, al
xor eax, ecx
mov byte [ebp + edx - 0x3c], al
inc edx
cmp edx, 0x1d
jb 0x499dd0
mov esi, dword [0x4f07ac]
mov byte [ebp - 0x1f], 0
test esi, esi
jne 0x499e81
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x499e68
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x499e30
cmp eax, 0xc0323159
je 0x49a18f
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x499e79
cmp dword [ecx + 0x18], 0
jne 0x499e11
xor esi, esi
mov dword [0x4f07ac], esi
mov eax, dword [0x4f07a4]
test eax, eax
jne 0x499f1e
test esi, esi
je 0x499f17
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
lea eax, [ecx + esi]
mov dword [ebp - 4], eax
cmp eax, esi
je 0x499f17
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x499f17
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 4]
add eax, esi
mov dword [ebp - 0x10], eax
mov eax, dword [eax]
mov edi, 0x811c9dc5
add eax, esi
mov bl, byte [eax]
inc eax
test bl, bl
je 0x499f05
movsx edx, bl
lea eax, [eax + 1]
sub bl, 0x41
mov ecx, edx
or ecx, 0x20
cmp bl, 0x19
mov bl, byte [eax - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test bl, bl
jne 0x499ed0
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
cmp edi, 0x98b3a433
je 0x49a19a
mov eax, dword [ebp - 0x10]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x499ec0
xor eax, eax
mov dword [0x4f07a4], eax
push dword [ebp - 0x168]
lea ecx, [ebp - 0x14c]
push ecx
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x480]
push ecx
call eax
add esp, 0x10
lea ecx, [ebp - 0x480]
xor edx, edx
call fcn.004e09d0
mov eax, dword [0x4f8a68]
mov ecx, dword [ebp - 0x18]
inc dword [ebp - 0xc]
cmp dword [ecx + eax + 4], 0
jne 0x499be0
mov ebx, dword [0x4f081c]
test ebx, ebx
jne 0x499ff3
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 0xc], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x499fda
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x499fa2
cmp eax, 0xa3e6f6c3
je 0x49a1b4
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, edx
je 0x499feb
cmp dword [ecx + 0x18], 0
jne 0x499f84
xor ebx, ebx
mov dword [0x4f081c], ebx
mov eax, dword [0x4f8c04]
test eax, eax
jne 0x49a09e
test ebx, ebx
je 0x49a097
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x49a097
xor ecx, ecx
mov dword [ebp - 0xc], ecx
cmp dword [eax + 0x18], ecx
je 0x49a097
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x10], eax
nop word [eax + eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x49a085
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x49a050
mov ecx, dword [ebp - 0xc]
cmp edi, 0xdab098f2
je 0x49a1bf
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x49a040
xor eax, eax
mov dword [0x4f8c04], eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x170]
push ecx
push ebx
call eax
test eax, eax
jne 0x499920
push ebx
call fcn.00411310
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x49971b
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4997b9
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x499860
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x4998fe
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x4999af
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x499a4d
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x499b1b
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x499bb9
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x18]
jmp 0x499c6f
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, esi
jmp 0x499d0d
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x18]
jmp 0x499e7b
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
jmp 0x499f19
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x18]
jmp 0x499fed
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x49a099