Function at 0x4ffc3b
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x605974
call fcn.005f870c
sub esp, 0x20
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebx + 8]
cmp dword [eax], 0x6a6728
push esi
je 0x4ffca4
push eax
lea ecx, [ebp - 0x14]
call fcn.00404920
and dword [ebp - 4], 0
push 0x641978
lea ecx, [ebp - 0x10]
call fcn.004046e0
lea eax, [ebp - 0x10]
push eax
mov esi, edi
mov byte [ebp - 4], 1
call fcn.005025f4
mov ecx, dword [edi + 0xc]
push dword [ebp - 0x14]
lea ecx, [ecx + eax*8 + 4]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0xc]
cmp dword [esi], 0
jbe 0x4ffd01
push 0x64cf70
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x18]
mov dword [ebp - 4], 2
call fcn.0045b143
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 3
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x10]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x18]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
mov ecx, 0xff
cmp dword [ebx + 0x1c], ecx
je 0x4ffd5e
mov eax, dword [ebx + 0x1c]
cmp eax, ecx
je 0x4ffd1d
mov dword [ebp - 0x14], 0x641fd0
test eax, eax
jne 0x4ffd24
mov dword [ebp - 0x14], 0x641fc0
push 0x64cf84
lea ecx, [ebp - 0x10]
call fcn.004046e0
lea eax, [ebp - 0x10]
push eax
mov esi, edi
mov dword [ebp - 4], 4
call fcn.005025f4
mov ecx, dword [edi + 0xc]
push dword [ebp - 0x14]
lea ecx, [ecx + eax*8 + 4]
call fcn.00405b5d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.0040479b
lea esi, [ebx + 0x20]
cmp dword [esi], 0x80000000
je 0x4ffdbe
push 0x64cf9c
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 5
call fcn.004478a8
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 6
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x24]
cmp dword [esi], 0
jbe 0x4ffe1b
push 0x64cfb4
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 7
call fcn.0045b143
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 8
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x34]
cmp dword [esi], 0x80000000
je 0x4ffe7d
push 0x64cfcc
lea ecx, [ebp - 0x14]
call fcn.004046e0
lea eax, [ebp - 0x10]
push eax
mov ecx, esi
mov dword [ebp - 4], 9
call fcn.00446fa2
pop ecx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0xa
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x38]
cmp dword [esi], 0x80000000
je 0x4ffedd
push 0x64cfec
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0xb
call fcn.00447194
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0xc
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x3c]
cmp dword [esi], 0xff000000
je 0x4fff3d
push 0x64d004
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov ecx, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0xd
call fcn.00459be1
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0xe
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x1b8]
cmp dword [esi], 0
je 0x4fff9f
push 0x64d010
lea ecx, [ebp - 0x14]
call fcn.004046e0
lea eax, [ebp - 0x10]
push eax
mov eax, esi
mov dword [ebp - 4], 0xf
call fcn.00459b92
pop ecx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x10
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x40]
cmp dword [esi], 0
je 0x4ffffe
push 0x64d030
lea ecx, [ebp - 0x14]
call fcn.004046e0
lea eax, [ebp - 0x10]
push eax
mov eax, esi
mov dword [ebp - 4], 0x11
call fcn.00459b92
pop ecx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x12
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x60]
cmp dword [esi], 0xff
je 0x50005e
push 0x64d048
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0x13
call fcn.004464a9
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x14
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x44]
cmp dword [esi], 0
jbe 0x5000bb
push 0x64d05c
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0x15
call fcn.0045b143
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x16
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
cmp dword [ebx + 0x54], 0xffffffff
je 0x500139
push 0x64d074
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov dword [ebp - 4], 0x17
mov ecx, dword [ebx + 0x54]
mov eax, ecx
inc eax
neg eax
sbb eax, eax
and eax, ecx
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
test eax, eax
jge 0x5000f1
fadd qword [0x650158]
push ecx
push ecx
lea eax, [ebp - 0x10]
fstp qword [esp]
push eax
call fcn.00459c19
add esp, 0xc
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x18
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x5c]
cmp dword [esi], 0x80000000
je 0x500199
push 0x64d098
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0x19
call fcn.004462a1
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x1a
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x58]
cmp dword [esi], 0xff
je 0x5001f9
push 0x64d0b8
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0x1b
call fcn.00446e19
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x1c
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x64]
cmp dword [esi], 0xff000000
je 0x500259
push 0x64d0e0
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov ecx, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0x1d
call fcn.00459be1
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x1e
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x74]
cmp dword [esi], 0
jne 0x500267
cmp dword [esi + 4], 0xffffffff
jne 0x5002bc
push 0x64d104
lea ecx, [ebp - 0x14]
call fcn.004046e0
push esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0x1f
call fcn.004fd428
pop ecx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x20
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x7c]
cmp dword [esi], 0x80000000
je 0x50031c
push 0x64d128
lea ecx, [ebp - 0x14]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x10]
mov dword [ebp - 4], 0x21
call fcn.00446d4e
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x22
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea esi, [ebx + 0x80]
cmp dword [esi], 0x80000000
je 0x500381
push 0x64d154
lea ecx, [ebp - 0x14]
call fcn.004046e0
lea eax, [ebp - 0x10]
push esi
push eax
mov dword [ebp - 4], 0x23
call fcn.004457f9
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x24
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x10]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
lea eax, [ebx + 0x84]
xor ecx, ecx
mov dword [ebp - 0x18], eax
cmp dword [eax], ecx
jbe 0x50045e
lea esi, [ebx + 0x94]
cmp dword [esi], ecx
jbe 0x50045e
push ecx
push 0x639c34
lea ecx, [ebp - 0x10]
call fcn.004048b5
push 0x64d178
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0x25
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
call fcn.0045b143
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x18]
lea esi, [ebp - 0x28]
call fcn.0045b143
lea ecx, [ebp - 0x24]
push ecx
lea ebx, [ebp - 0x10]
mov esi, eax
mov byte [ebp - 4], 0x28
call fcn.00404b83
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x29
mov ebx, dword [ebp - 0x1c]
push ecx
mov esi, eax
call fcn.00404b83
mov ebx, eax
lea eax, [ebp - 0x14]
push eax
mov esi, edi
mov byte [ebp - 4], 0x2a
call fcn.005025f4
mov ecx, dword [edi + 0xc]
push dword [ebx]
lea ecx, [ecx + eax*8 + 4]
call fcn.00404a39
lea ecx, [ebp - 0x20]
call fcn.0040479b
lea ecx, [ebp - 0x24]
call fcn.0040479b
lea ecx, [ebp - 0x28]
call fcn.0040479b
lea ecx, [ebp - 0x2c]
call fcn.0040479b
lea ecx, [ebp - 0x14]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.0040479b
mov ebx, dword [ebp + 8]
lea esi, [ebx + 0xa4]
cmp dword [esi], 0
jbe 0x5004be
push 0x64d1a0
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x2b
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x2c
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xb4]
cmp dword [esi], 0
jbe 0x50051e
push 0x64d1c4
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x2d
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x2e
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xc4]
cmp dword [esi], 0
jbe 0x50057e
push 0x64d1e8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x2f
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x30
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xd4]
cmp dword [esi], 0
jbe 0x5005de
push 0x64d210
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x31
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x32
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xe4]
cmp dword [esi], 0xff000000
je 0x500641
push 0x64d238
lea ecx, [ebp + 8]
call fcn.004046e0
mov ecx, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x33
call fcn.00459be1
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x34
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xe8]
cmp dword [esi], 0xff000000
je 0x5006a4
push 0x64d25c
lea ecx, [ebp + 8]
call fcn.004046e0
mov ecx, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x35
call fcn.00459be1
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x36
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xec]
cmp dword [esi], 0xff000000
je 0x500707
push 0x64d280
lea ecx, [ebp + 8]
call fcn.004046e0
mov ecx, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x37
call fcn.00459be1
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x38
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xf0]
cmp dword [esi], 0xff000000
je 0x50076a
push 0x64d2a8
lea ecx, [ebp + 8]
call fcn.004046e0
mov ecx, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x39
call fcn.00459be1
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x3a
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xf4]
cmp dword [esi], 0x80000000
je 0x5007cd
push 0x64d2d0
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x3b
call fcn.00444516
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x3c
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xf8]
cmp dword [esi], 0x80000000
je 0x500830
push 0x64d2f4
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x3d
call fcn.00444516
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x3e
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0xfc]
cmp dword [esi], 0x80000000
je 0x500893
push 0x64d318
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x3f
call fcn.00444516
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x40
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x100]
cmp dword [esi], 0x80000000
je 0x5008f6
push 0x64d340
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x41
call fcn.00444516
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x42
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x104]
cmp dword [esi], 0
jbe 0x500956
push 0x64d368
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x43
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x44
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x114]
cmp dword [esi], 0
jbe 0x5009b6
push 0x64d384
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x45
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x46
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x124]
cmp dword [esi], 0
jbe 0x500a16
push 0x64d39c
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x47
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x48
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x134]
cmp dword [esi], 0
jbe 0x500a76
push 0x64d3b8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x49
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x4a
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x144]
cmp dword [esi], 0
jbe 0x500ad6
push 0x64d3d8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x4b
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x4c
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x154]
cmp dword [esi], 0
jbe 0x500b36
push 0x64d3f0
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x4d
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x4e
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x164]
cmp dword [esi], 0
jbe 0x500b96
push 0x64d408
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x4f
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x50
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x174]
cmp dword [esi], 0
jbe 0x500bf6
push 0x64d424
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x51
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x52
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x184]
cmp dword [esi], 0
jbe 0x500c56
push 0x6416f8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x53
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x54
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x194]
cmp dword [esi], 0
jbe 0x500cb6
push 0x641704
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x55
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x56
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x1a4]
cmp dword [esi], 0
jbe 0x500d16
push 0x64d440
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x28]
mov dword [ebp - 4], 0x57
call fcn.0045b143
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x58
call fcn.005025f4
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x2c]
push dword [eax]
call fcn.00404a39
lea ecx, [ebp - 0x28]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
add ebx, 0x1b4
cmp dword [ebx], 0x80000000
je 0x500d71
push 0x646d78
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, ebx
lea esi, [ebp - 0x1c]
mov dword [ebp - 4], 0x59
call fcn.00446c36
mov ebx, eax
lea eax, [ebp + 8]
push eax
mov esi, edi
mov byte [ebp - 4], 0x5a
call fcn.005025f4
mov ecx, dword [edi + 0xc]
push dword [ebx]
lea ecx, [ecx + eax*8 + 4]
call fcn.00404a39
lea ecx, [ebp - 0x1c]
call fcn.0040479b
lea ecx, [ebp + 8]
call fcn.0040479b
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4