Function at 0x498fd7
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xad4
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x30], 0
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0xc]
cmp ecx, 1
jne 0x49900a
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x30], 1
mov word [ebp - 0xa9c], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0xaa0], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0xa58], eax
jmp 0x49905d
mov cx, word [ebp - 0xa9c]
add cx, 1
mov word [ebp - 0xa9c], cx
mov edx, dword [ebp - 0xaa0]
add edx, 0x20
mov dword [ebp - 0xaa0], edx
mov eax, dword [ebp - 0xa58]
add eax, 0x20
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0xa9c]
and ecx, 0xffff
mov edx, dword [ebp + 8]
cmp ecx, dword [edx + 0x38]
jge 0x49a080
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x20]
mov edx, dword [ebp - 0xa9c]
and edx, 0xffff
imul edx, edx, 0x11c
mov eax, dword [ecx + 0x10]
add eax, edx
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov dl, byte [ecx + 8]
test edx, edx
jne 0x4990ab
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x30], 1
mov ecx, dword [ebp - 0x34]
movzx dx, byte [ecx + 5]
mov eax, dword [ebp - 0xaa0]
mov word [eax + 0x14], dx
mov ecx, dword [ebp - 0xaa0]
xor edx, edx
mov dx, word [ecx + 0x14]
imul edx, edx, 0x38
push edx
call fcn.0048b840
add esp, 4
mov ecx, dword [ebp - 0xaa0]
mov dword [ecx + 0x18], eax
mov edx, dword [ebp - 0xaa0]
cmp dword [edx + 0x18], 0
jne 0x4990f2
or eax, 0xffffffff
jmp 0x49a115
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp - 0xa58]
mov eax, dword [edx + 4]
lea eax, [ecx + eax - 1]
mov ecx, dword [ebp - 0xa58]
xor edx, edx
div dword [ecx + 4]
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0xa58]
mov edx, dword [ecx]
lea eax, [eax + edx - 1]
mov ecx, dword [ebp - 0xa58]
xor edx, edx
div dword [ecx]
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0xa58]
mov edx, dword [ecx + 4]
lea eax, [eax + edx - 1]
mov ecx, dword [ebp - 0xa58]
xor edx, edx
div dword [ecx + 4]
push eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0xa58]
mov edx, dword [ecx]
lea eax, [eax + edx - 1]
mov ecx, dword [ebp - 0xa58]
xor edx, edx
div dword [ecx]
push eax
call fcn.0048e690
add esp, 0x10
mov edx, dword [ebp - 0xaa0]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0xaa0]
cmp dword [eax + 0x10], 0
jne 0x49918f
or eax, 0xffffffff
jmp 0x49a115
mov ecx, dword [ebp - 0xaa0]
xor edx, edx
mov dx, word [ecx + 0x14]
sub edx, 1
push edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov cl, byte [eax + 8]
push ecx
call fcn.004a2379
add esp, 8
mov edx, dword [ebp - 0xaa0]
mov dword [edx + 0x1c], eax
mov eax, dword [ebp - 0xaa0]
cmp dword [eax + 0x1c], 0
jne 0x4991cd
or eax, 0xffffffff
jmp 0x49a115
lea ecx, [ebp - 0xa4c]
push ecx
mov edx, dword [ebp - 0xaa0]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0xaa0]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0xaa0]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0xaa0]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0xaa0]
mov eax, dword [edx + 0x1c]
push eax
call fcn.004a1994
add esp, 0x18
mov dword [ebp - 0xa80], 0
mov ecx, dword [ebp - 0xaa0]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0xa64], edx
jmp 0x499253
mov eax, dword [ebp - 0xa80]
add eax, 1
mov dword [ebp - 0xa80], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 0x38
mov dword [ebp - 0xa64], ecx
mov edx, dword [ebp - 0xaa0]
xor eax, eax
mov ax, word [edx + 0x14]
cmp dword [ebp - 0xa80], eax
jge 0x49a07b
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 4], 0
mov edx, dword [ebp - 0xaa0]
xor eax, eax
mov ax, word [edx + 0x14]
mov ecx, eax
sub ecx, 1
sub ecx, dword [ebp - 0xa80]
mov edx, 1
shl edx, cl
mov eax, dword [ebp - 0xaa0]
mov ecx, dword [eax]
lea edx, [ecx + edx - 1]
mov eax, dword [ebp - 0xaa0]
xor ecx, ecx
mov cx, word [eax + 0x14]
sub ecx, 1
sub ecx, dword [ebp - 0xa80]
shr edx, cl
mov eax, dword [ebp - 0xa64]
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0xaa0]
xor edx, edx
mov dx, word [ecx + 0x14]
mov ecx, edx
sub ecx, 1
sub ecx, dword [ebp - 0xa80]
mov eax, 1
shl eax, cl
mov ecx, dword [ebp - 0xaa0]
mov edx, dword [ecx + 4]
lea eax, [edx + eax - 1]
mov ecx, dword [ebp - 0xaa0]
xor edx, edx
mov dx, word [ecx + 0x14]
mov ecx, edx
sub ecx, 1
sub ecx, dword [ebp - 0xa80]
shr eax, cl
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0xaa0]
xor eax, eax
mov ax, word [edx + 0x14]
mov ecx, eax
sub ecx, 1
sub ecx, dword [ebp - 0xa80]
mov edx, 1
shl edx, cl
mov eax, dword [ebp - 0xaa0]
mov ecx, dword [eax + 8]
lea edx, [ecx + edx - 1]
mov eax, dword [ebp - 0xaa0]
xor ecx, ecx
mov cx, word [eax + 0x14]
sub ecx, 1
sub ecx, dword [ebp - 0xa80]
shr edx, cl
mov eax, dword [ebp - 0xa64]
mov dword [eax + 0x10], edx
mov ecx, dword [ebp - 0xaa0]
xor edx, edx
mov dx, word [ecx + 0x14]
mov ecx, edx
sub ecx, 1
sub ecx, dword [ebp - 0xa80]
mov eax, 1
shl eax, cl
mov ecx, dword [ebp - 0xaa0]
mov edx, dword [ecx + 0xc]
lea eax, [edx + eax - 1]
mov ecx, dword [ebp - 0xaa0]
xor edx, edx
mov dx, word [ecx + 0x14]
mov ecx, edx
sub ecx, 1
sub ecx, dword [ebp - 0xa80]
shr eax, cl
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 0x14], eax
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0xa80]
xor eax, eax
mov al, byte [edx + 0xd7]
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 0x18], eax
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0xa80]
xor eax, eax
mov al, byte [edx + 0xf8]
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 0x1c], eax
mov edx, dword [ebp - 0xa64]
mov eax, dword [ebp - 0xa64]
mov edx, dword [edx + 8]
mov ecx, dword [eax + 0x18]
shr edx, cl
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x18]
shl edx, cl
mov dword [ebp - 0xa54], edx
mov ecx, dword [ebp - 0xa64]
mov edx, dword [ebp - 0xa64]
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + 0x1c]
shr eax, cl
mov ecx, dword [ebp - 0xa64]
mov ecx, dword [ecx + 0x1c]
shl eax, cl
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0xa64]
mov eax, 1
mov ecx, dword [edx + 0x18]
shl eax, cl
mov ecx, dword [ebp - 0xa64]
mov edx, dword [ecx + 0x10]
lea eax, [edx + eax - 1]
mov ecx, dword [ebp - 0xa64]
mov ecx, dword [ecx + 0x18]
shr eax, cl
mov edx, dword [ebp - 0xa64]
mov ecx, dword [edx + 0x18]
shl eax, cl
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0xa64]
mov edx, 1
mov ecx, dword [eax + 0x1c]
shl edx, cl
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x14]
lea edx, [ecx + edx - 1]
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x1c]
shr edx, cl
mov ecx, dword [ebp - 0xa64]
mov ecx, dword [ecx + 0x1c]
shl edx, cl
mov dword [ebp - 0xa90], edx
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0xa54]
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x18]
shr edx, cl
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 0x20], edx
mov edx, dword [ebp - 0xa90]
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x1c]
shr edx, cl
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 0x24], edx
mov edx, dword [ebp - 0xa64]
mov eax, dword [ebp - 0xa64]
mov ecx, dword [edx + 0x20]
imul ecx, dword [eax + 0x24]
mov edx, dword [ebp - 0xa64]
mov dword [edx + 0x28], ecx
mov eax, dword [ebp - 0xa64]
mov ecx, dword [ebp - 0xa64]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 0x10]
jae 0x499515
mov eax, dword [ebp - 0xa64]
mov ecx, dword [ebp - 0xa64]
mov edx, dword [eax + 0xc]
cmp edx, dword [ecx + 0x14]
jb 0x49954e
mov eax, dword [ebp - 0xa64]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 0x28], 0
mov edx, dword [ebp - 0xa64]
mov dword [edx + 0x20], 0
mov eax, dword [ebp - 0xa64]
mov dword [eax + 0x24], 0
jmp 0x499235
cmp dword [ebp - 0xa80], 0
jne 0x4995a1
mov ecx, dword [ebp - 0xa54]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xa90]
mov dword [ebp - 0xa70], ecx
mov edx, dword [ebp - 0xa64]
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x18]
mov dword [edx + 0x2c], ecx
mov edx, dword [ebp - 0xa64]
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x1c]
mov dword [edx + 0x30], ecx
jmp 0x499603
mov edx, dword [ebp - 0xa54]
add edx, 1
shr edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x30]
add eax, 1
shr eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xa5c]
add ecx, 1
shr ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xa90]
add edx, 1
shr edx, 1
mov dword [ebp - 0xa70], edx
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x18]
sub ecx, 1
mov edx, dword [ebp - 0xa64]
mov dword [edx + 0x2c], ecx
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 0x1c]
sub ecx, 1
mov edx, dword [ebp - 0xa64]
mov dword [edx + 0x30], ecx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov cl, byte [eax + 6]
mov edx, dword [ebp - 0xa64]
cmp ecx, dword [edx + 0x2c]
jge 0x499626
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov cl, byte [eax + 6]
mov dword [ebp - 0xaa8], ecx
jmp 0x499635
mov edx, dword [ebp - 0xa64]
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0xaa8], eax
mov ecx, dword [ebp - 0xa64]
mov dx, word [ebp - 0xaa8]
mov word [ecx + 0x34], dx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov cl, byte [eax + 7]
mov edx, dword [ebp - 0xa64]
cmp ecx, dword [edx + 0x30]
jge 0x499669
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov cl, byte [eax + 7]
mov dword [ebp - 0xaac], ecx
jmp 0x499678
mov edx, dword [ebp - 0xa64]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xaac], eax
mov ecx, dword [ebp - 0xa64]
mov dx, word [ebp - 0xaac]
mov word [ecx + 0x36], dx
mov eax, dword [ebp - 0xa80]
neg eax
sbb eax, eax
and eax, 2
add eax, 1
mov ecx, dword [ebp - 0xa64]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa64]
mov eax, dword [edx]
shl eax, 5
push eax
call fcn.0048b840
add esp, 4
mov ecx, dword [ebp - 0xa64]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa64]
cmp dword [edx + 4], 0
jne 0x4996d2
or eax, 0xffffffff
jmp 0x49a115
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0xa64]
mov ecx, dword [eax + 4]
mov dword [ebp - 0xa60], ecx
jmp 0x499702
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0xa60]
add eax, 0x20
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0xa64]
mov edx, dword [ebp - 0x38]
cmp edx, dword [ecx]
jge 0x49a076
cmp dword [ebp - 0xa80], 0
jne 0x499728
mov dword [ebp - 0xab0], 0
jmp 0x499741
mov eax, dword [ebp - 0xa80]
sub eax, 1
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
lea edx, [eax + ecx + 1]
mov dword [ebp - 0xab0], edx
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0xaa4], eax
mov ecx, dword [ebp - 0xaa4]
imul ecx, ecx, 0x28
lea edx, [ebp + ecx - 0xa4c]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0xa60]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x10]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0xaa4]
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov dx, word [ecx + eax*2 + 0xc]
mov eax, dword [ebp - 0xa60]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0xa60]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0xa80]
push eax
mov ecx, dword [ebp - 0xaa0]
xor edx, edx
mov dx, word [ecx + 0x14]
sub edx, 1
push edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov cl, byte [eax + 8]
push ecx
call fcn.0049f891
add esp, 0x10
mov edx, dword [ebp - 0xa60]
mov dword [edx + 0x18], eax
mov eax, dword [ebp - 0xa58]
xor ecx, ecx
mov cx, word [eax + 0x10]
mov edx, dword [ebp - 0xa60]
add ecx, dword [edx + 0x18]
push ecx
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.0049be38
add esp, 8
mov edx, dword [ebp - 0xa60]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov cl, byte [eax + 0xd4]
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 0xc]
sar eax, 0xb
lea ecx, [ecx + eax - 1]
mov edx, dword [ebp - 0xa60]
mov dword [edx + 0x14], ecx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov cl, byte [eax + 0xd5]
mov edx, dword [ebp - 0xa60]
add ecx, dword [edx + 0x14]
cmp ecx, 0x20
jl 0x499847
mov eax, dword [ebp - 0xa60]
mov ecx, 0x1f
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xab4], ecx
jmp 0x499858
mov edx, dword [ebp - 0x34]
xor eax, eax
mov al, byte [edx + 0xd5]
mov dword [ebp - 0xab4], eax
mov ecx, dword [ebp - 0xa60]
mov edx, dword [ebp - 0xab4]
mov dword [ecx + 0x1c], edx
mov eax, dword [ebp - 0xa60]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0xa60]
mov dword [ecx], 0
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [edx]
cmp ecx, dword [eax + 8]
je 0x49989b
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [edx + 4]
cmp ecx, dword [eax + 0xc]
jne 0x4998a0
jmp 0x4996ea
push 0
push 0
push 0
push 0
call fcn.0048e690
add esp, 0x10
mov edx, dword [ebp - 0xa60]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xa60]
cmp dword [eax + 4], 0
jne 0x4998cd
or eax, 0xffffffff
jmp 0x49a115
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x20]
push edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
push ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx + 0x18]
push eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ebp - 0xaa0]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
push eax
call fcn.0048e9d5
add esp, 0x18
mov ecx, dword [ebp - 0xa60]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 4]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
mov ecx, dword [ecx + 4]
add ecx, dword [eax + 0x18]
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebp - 0xa60]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax + 4]
mov edx, dword [edx + 8]
add edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax + 4]
mov dword [ecx + 0x10], edx
mov edx, dword [ebp - 0xa64]
mov eax, dword [edx + 0x28]
imul eax, eax, 0x28
push eax
call fcn.0048b840
add esp, 4
mov ecx, dword [ebp - 0xa60]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa60]
cmp dword [edx], 0
jne 0x4999a0
or eax, 0xffffffff
jmp 0x49a115
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xa64]
mov eax, dword [edx + 0x28]
mov dword [ebp - 0xa74], eax
mov ecx, dword [ebp - 0xa60]
mov edx, dword [ecx]
mov dword [ebp - 0xa6c], edx
jmp 0x4999e9
mov eax, dword [ebp - 0xa74]
sub eax, 1
mov dword [ebp - 0xa74], eax
mov ecx, dword [ebp - 0xa6c]
add ecx, 0x28
mov dword [ebp - 0xa6c], ecx
cmp dword [ebp - 0xa74], 0
jle 0x49a071
mov edx, dword [ebp - 0xa64]
mov eax, 1
mov ecx, dword [edx + 0x2c]
shl eax, cl
mov ecx, dword [ebp - 0xc]
add ecx, eax
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0xa64]
mov eax, 1
mov ecx, dword [edx + 0x30]
shl eax, cl
mov ecx, dword [ebp - 4]
add ecx, eax
mov dword [ebp - 0xa50], ecx
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [eax + 4]
jbe 0x499a45
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0xab8], edx
jmp 0x499a57
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
mov dword [ebp - 0xab8], edx
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [ebp - 0xab8]
mov dword [eax], ecx
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 4]
cmp ecx, dword [eax + 8]
jbe 0x499a81
mov edx, dword [ebp - 4]
mov dword [ebp - 0xabc], edx
jmp 0x499a93
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xabc], edx
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [ebp - 0xabc]
mov dword [eax + 4], ecx
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [eax + 0xc]
jae 0x499abe
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xac0], edx
jmp 0x499ad0
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xac0], edx
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [ebp - 0xac0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0xa50]
cmp ecx, dword [eax + 0x10]
jae 0x499b01
mov edx, dword [ebp - 0xa50]
mov dword [ebp - 0xac4], edx
jmp 0x499b13
mov eax, dword [ebp - 0xa60]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0xac4], edx
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [ebp - 0xac4]
mov dword [eax + 0xc], ecx
mov edx, dword [ebp - 0xa6c]
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [edx + 8]
cmp ecx, dword [eax]
jbe 0x49a007
mov edx, dword [ebp - 0xa6c]
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [edx + 0xc]
cmp ecx, dword [eax + 4]
jbe 0x49a007
mov edx, dword [ebp - 0xa64]
xor eax, eax
mov ax, word [edx + 0x34]
mov ecx, eax
mov edx, dword [ebp - 0xa6c]
mov eax, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0xa64]
xor edx, edx
mov dx, word [ecx + 0x34]
mov ecx, edx
shl eax, cl
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0xa64]
xor ecx, ecx
mov cx, word [eax + 0x36]
mov edx, dword [ebp - 0xa6c]
mov eax, dword [edx + 4]
shr eax, cl
mov ecx, dword [ebp - 0xa64]
xor edx, edx
mov dx, word [ecx + 0x36]
mov ecx, edx
shl eax, cl
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0xa64]
xor ecx, ecx
mov cx, word [eax + 0x34]
mov edx, 1
shl edx, cl
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [eax + 8]
lea edx, [ecx + edx - 1]
mov eax, dword [ebp - 0xa64]
xor ecx, ecx
mov cx, word [eax + 0x34]
shr edx, cl
mov ecx, dword [ebp - 0xa64]
xor eax, eax
mov ax, word [ecx + 0x34]
mov ecx, eax
shl edx, cl
mov dword [ebp - 0xa8c], edx
mov ecx, dword [ebp - 0xa64]
xor edx, edx
mov dx, word [ecx + 0x36]
mov ecx, edx
mov eax, 1
shl eax, cl
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ecx + 0xc]
lea eax, [edx + eax - 1]
mov ecx, dword [ebp - 0xa64]
xor edx, edx
mov dx, word [ecx + 0x36]
mov ecx, edx
shr eax, cl
mov ecx, dword [ebp - 0xa64]
xor edx, edx
mov dx, word [ecx + 0x36]
mov ecx, edx
shl eax, cl
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0xa8c]
sub eax, dword [ebp - 0xa68]
mov ecx, dword [ebp - 0xa64]
xor edx, edx
mov dx, word [ecx + 0x34]
mov ecx, edx
shr eax, cl
mov ecx, dword [ebp - 0xa6c]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0xa98]
sub edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xa64]
xor ecx, ecx
mov cx, word [eax + 0x36]
shr edx, cl
mov ecx, dword [ebp - 0xa6c]
mov dword [ecx + 0x14], edx
mov edx, dword [ebp - 0xa6c]
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [edx + 0x10]
imul ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0xa6c]
mov dword [edx + 0x18], ecx
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0xa6c]
mov eax, dword [edx + 0x10]
push eax
call fcn.004ac4c0
add esp, 8
mov ecx, dword [ebp - 0xa6c]
mov dword [ecx + 0x20], eax
mov edx, dword [ebp - 0xa6c]
cmp dword [edx + 0x20], 0
jne 0x499ccf
or eax, 0xffffffff
jmp 0x49a115
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0xa6c]
mov eax, dword [edx + 0x10]
push eax
call fcn.004ac4c0
add esp, 8
mov ecx, dword [ebp - 0xa6c]
mov dword [ecx + 0x24], eax
mov edx, dword [ebp - 0xa6c]
cmp dword [edx + 0x24], 0
jne 0x499d08
or eax, 0xffffffff
jmp 0x49a115
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [eax + 0x18]
imul ecx, ecx, 0x2c
push ecx
call fcn.0048b840
add esp, 4
mov edx, dword [ebp - 0xa6c]
mov dword [edx + 0x1c], eax
mov eax, dword [ebp - 0xa6c]
cmp dword [eax + 0x1c], 0
jne 0x499d3a
or eax, 0xffffffff
jmp 0x49a115
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0xa94], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0xa88], edx
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xa6c]
mov eax, dword [edx + 0x1c]
mov dword [ebp - 0xa7c], eax
cmp dword [ebp - 0x14], 0
jle 0x49a005
mov ecx, dword [ebp - 0xa64]
xor edx, edx
mov dx, word [ecx + 0x34]
mov ecx, edx
mov eax, 1
shl eax, cl
mov ecx, dword [ebp - 0xa94]
add ecx, eax
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0xa64]
xor eax, eax
mov ax, word [edx + 0x36]
mov ecx, eax
mov edx, 1
shl edx, cl
mov eax, dword [ebp - 0xa88]
add eax, edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ebp - 0xa94]
cmp edx, dword [ecx]
jbe 0x499dcf
mov eax, dword [ebp - 0xa94]
mov dword [ebp - 0xac8], eax
jmp 0x499ddd
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ecx]
mov dword [ebp - 0xac8], edx
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ebp - 0xa88]
cmp edx, dword [ecx + 4]
jbe 0x499e05
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0xacc], eax
jmp 0x499e14
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ecx + 4]
mov dword [ebp - 0xacc], edx
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ebp - 0x20]
cmp edx, dword [ecx + 8]
jae 0x499e36
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xad0], eax
jmp 0x499e45
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ecx + 8]
mov dword [ebp - 0xad0], edx
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0xa78], eax
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ebp - 0x28]
cmp edx, dword [ecx + 0xc]
jae 0x499e6a
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xad4], eax
jmp 0x499e79
mov ecx, dword [ebp - 0xa6c]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xad4], edx
mov eax, dword [ebp - 0xad4]
mov dword [ebp - 0xa84], eax
mov ecx, dword [ebp - 0xa78]
cmp ecx, dword [ebp - 0x48]
jbe 0x499fa8
mov edx, dword [ebp - 0xa84]
cmp edx, dword [ebp - 0x40]
jbe 0x499fa8
mov eax, dword [ebp - 0xa7c]
mov dword [eax + 0x18], 0xffffffff
mov ecx, dword [ebp - 0xa7c]
mov dword [ecx + 0x1c], 0
mov edx, dword [ebp - 0xa7c]
mov dword [edx + 0x20], 0
mov eax, dword [ebp - 0xa7c]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 0xa7c]
mov dword [ecx], 0
mov edx, dword [ebp - 0xa7c]
mov dword [edx + 4], 0
mov eax, dword [ebp - 0xa7c]
mov dword [eax + 8], 0
mov ecx, dword [ebp - 0xa7c]
mov dword [ecx + 0xc], 0
mov edx, dword [ebp - 0xa7c]
mov dword [edx + 0x10], 0
mov eax, dword [ebp - 0xa7c]
mov dword [eax + 0x14], 3
mov ecx, dword [ebp - 0xa7c]
mov dword [ecx + 0x24], 0
push 0
push 0
push 0
push 0
call fcn.0048e690
add esp, 0x10
mov edx, dword [ebp - 0xa7c]
mov dword [edx + 0x28], eax
mov eax, dword [ebp - 0xa7c]
cmp dword [eax + 0x28], 0
jne 0x499f5e
or eax, 0xffffffff
jmp 0x49a115
mov ecx, dword [ebp - 0xa84]
push ecx
mov edx, dword [ebp - 0xa78]
push edx
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0xa60]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ecx + 0x28]
push edx
call fcn.0048e9d5
add esp, 0x18
mov eax, dword [ebp - 0xa7c]
add eax, 0x2c
mov dword [ebp - 0xa7c], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xa64]
xor eax, eax
mov ax, word [edx + 0x34]
mov ecx, eax
mov edx, 1
shl edx, cl
mov eax, dword [ebp - 0xa94]
add eax, edx
mov dword [ebp - 0xa94], eax
mov ecx, dword [ebp - 0xa94]
cmp ecx, dword [ebp - 0x2c]
jb 0x49a000
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0xa94], edx
mov eax, dword [ebp - 0xa64]
xor ecx, ecx
mov cx, word [eax + 0x36]
mov edx, 1
shl edx, cl
mov eax, dword [ebp - 0xa88]
add eax, edx
mov dword [ebp - 0xa88], eax
jmp 0x499d67
jmp 0x49a02e
mov ecx, dword [ebp - 0xa6c]
mov dword [ecx + 0x1c], 0
mov edx, dword [ebp - 0xa6c]
mov dword [edx + 0x20], 0
mov eax, dword [ebp - 0xa6c]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 0xa64]
mov edx, 1
mov ecx, dword [ecx + 0x2c]
shl edx, cl
mov eax, dword [ebp - 0xc]
add eax, edx
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 8]
jb 0x49a06c
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xa64]
mov edx, 1
mov ecx, dword [eax + 0x30]
shl edx, cl
mov eax, dword [ebp - 4]
add eax, edx
mov dword [ebp - 4], eax
jmp 0x4999cb
jmp 0x4996ea
jmp 0x499235
jmp 0x49902d
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004b1251
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x34], eax
mov edx, dword [ebp + 0xc]
cmp dword [edx + 0x34], 0
jne 0x49a0a4
or eax, 0xffffffff
jmp 0x49a115
mov dword [ebp - 0x4c], 0
jmp 0x49a0b6
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx + 4]
push eax
call fcn.004ac3d4
add esp, 4
cmp dword [ebp - 0x4c], eax
jge 0x49a104
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x20]
mov ecx, dword [eax + 4]
push ecx
call fcn.004ac3c3
add esp, 8
push eax
call fcn.004ac298
add esp, 4
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x34]
push ecx
call fcn.004ac11c
add esp, 8
jmp 0x49a0ad
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
push eax
call fcn.004ac3de
add esp, 4
xor eax, eax
mov esp, ebp
pop ebp
ret