Function at 0x55921f
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x103aa259
mov eax, dword fs:[0]
push eax
sub esp, 0x40
push ebx
push ebp
push esi
push edi
mov eax, dword [0x105623f8]
xor eax, esp
push eax
lea eax, [esp + 0x54]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
xor ebp, ebp
mov dword [esp + 0x30], ebp
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x5c], ebp
call fcn.0057fe9f
mov eax, 1
add dword [esp + 0x68], eax
add dword [esp + 0x6c], eax
add esi, 0x5c
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov dword [esp + 0x5c], ebp
sar eax, 2
test eax, eax
jbe 0x5595ae
mov ebx, dword [esp + 0x14]
add ebx, 0x58
push ebp
mov ecx, ebx
xor edi, edi
call fcn.00536bdf
mov ecx, dword [eax + 0x18]
sub ecx, dword [eax + 0x14]
sar ecx, 2
test ecx, ecx
jbe 0x55959c
jmp 0x5592af
push ebp
mov ecx, ebx
call fcn.00536bdf
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov edx, dword [eax + 8]
push ebp
mov ecx, ebx
mov dword [esp + 0x2c], edx
call fcn.00536bdf
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov ecx, dword [esp + 0x28]
cmp dword [esp + 0x68], ecx
mov eax, dword [eax + 0x10]
mov dword [esp + 0x18], eax
jg 0x559381
mov edx, eax
cmp dword [esp + 0x6c], edx
jl 0x559484
push ebp
mov ecx, ebx
call fcn.00536bdf
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x55931d
xor eax, eax
jmp 0x559329
mov edx, dword [esp + 0x64]
mov eax, dword [edx + 0x14]
sub eax, ecx
sar eax, 2
mov edx, dword [esp + 0x64]
mov edx, dword [edx + 0x10]
mov dword [esp + 0x1c], edx
sub edx, ecx
sar edx, 2
cmp edx, eax
jae 0x559356
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x64]
mov dword [eax], ecx
add eax, 4
mov dword [edx + 0x10], eax
jmp 0x559484
cmp ecx, dword [esp + 0x1c]
jbe 0x559361
call fcn.00776e71
mov ecx, dword [esp + 0x64]
mov eax, dword [ecx]
lea edx, [esp + 0x20]
push edx
mov edx, dword [esp + 0x20]
push edx
push eax
lea eax, [esp + 0x40]
push eax
call fcn.0047928f
jmp 0x559484
mov ecx, dword [esp + 0x68]
cmp ecx, dword [esp + 0x18]
jg 0x559484
mov ecx, esi
call fcn.0058411f
mov ecx, dword [eax]
call fcn.0054414f
push ebp
mov ecx, ebx
call fcn.00536bdf
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov ecx, esi
mov dword [esp + 0x20], eax
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
mov edx, dword [esp + 0x20]
push edx
mov ecx, eax
call fcn.0066ebaf
mov eax, dword [esp + 0x68]
mov ecx, esi
mov dword [esp + 0x20], eax
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [esp + 0x20]
push ecx
mov ecx, eax
call fcn.0066cf9f
mov edx, dword [esp + 0x68]
dec edx
push ebp
mov ecx, ebx
mov dword [esp + 0x24], edx
call fcn.00536bdf
lea ecx, [esp + 0x20]
push ecx
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov ecx, eax
call fcn.0060575f
mov ecx, esi
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
mov edx, dword [esp + 0x68]
cmp edx, dword [eax + 8]
jg 0x55947b
mov ecx, esi
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
mov ecx, dword [esp + 0x6c]
cmp ecx, dword [eax + 0x10]
jl 0x55947b
mov ecx, esi
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov edx, dword [eax]
mov ecx, dword [esp + 0x64]
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x24], edx
call fcn.0065557f
mov ecx, dword [esp + 0x68]
dec ecx
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x6c]
cmp eax, dword [esp + 0x28]
jl 0x559582
cmp eax, dword [esp + 0x18]
jge 0x559582
mov ecx, esi
call fcn.0058411f
mov ecx, dword [eax]
call fcn.0054414f
push ebp
mov ecx, ebx
call fcn.00536bdf
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov ecx, esi
mov dword [esp + 0x28], eax
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
mov edx, dword [esp + 0x28]
push edx
mov ecx, eax
call fcn.0066ebaf
mov eax, dword [esp + 0x6c]
inc eax
mov ecx, esi
mov dword [esp + 0x28], eax
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
call fcn.0066cf9f
mov edx, dword [esp + 0x6c]
push ebp
mov ecx, ebx
mov dword [esp + 0x2c], edx
call fcn.00536bdf
lea ecx, [esp + 0x28]
push ecx
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov ecx, eax
call fcn.0060575f
push ebp
mov ecx, ebx
call fcn.00536bdf
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov edx, dword [esp + 0x68]
cmp edx, dword [eax + 8]
jg 0x559582
push ebp
mov ecx, ebx
call fcn.00536bdf
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov ecx, dword [esp + 0x6c]
cmp ecx, dword [eax + 0x10]
jl 0x559582
push ebp
mov ecx, ebx
call fcn.00536bdf
push edi
lea ecx, [eax + 4]
call fcn.0053624f
mov ecx, dword [esp + 0x64]
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x2c], eax
call fcn.0065557f
push ebp
mov ecx, ebx
inc edi
call fcn.00536bdf
mov ecx, dword [eax + 0x18]
sub ecx, dword [eax + 0x14]
sar ecx, 2
cmp edi, ecx
jb 0x5592af
mov edx, dword [esi + 0x10]
sub edx, dword [esi + 0xc]
inc ebp
sar edx, 2
cmp ebp, edx
jb 0x55928f
mov ebx, dword [esp + 0x64]
mov edi, dword [ebx + 0x10]
mov eax, dword [ebx + 0xc]
mov ecx, edi
sub ecx, eax
test ecx, 0xfffffffc
je 0x559bae
cmp eax, edi
jbe 0x5595d1
call fcn.00776e71
mov ebp, dword [ebx]
mov ebx, dword [ebx + 0xc]
mov edx, dword [esp + 0x64]
cmp ebx, dword [edx + 0x10]
jbe 0x5595e4
call fcn.00776e71
mov eax, dword [esp + 0x64]
mov eax, dword [eax]
test ebp, ebp
je 0x5595f2
cmp ebp, eax
je 0x5595f7
call fcn.00776e71
mov ecx, edi
sub ecx, ebx
push 0x1011dd30
sar ecx, 2
push ecx
push edi
push ebx
call fcn.0052cd2f
xor ebx, ebx
push 4
mov dword [esp + 0x30], ebx
call fcn.00776c63
add esp, 0x14
cmp eax, ebx
je 0x559627
lea edx, [esp + 0x3c]
mov dword [eax], edx
jmp 0x559629
xor eax, eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov ebp, dword [esp + 0x64]
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x5c], 2
cmp edi, dword [ebp + 0x10]
jbe 0x559652
call fcn.00776e71
mov eax, dword [ebp]
cmp eax, ebx
jne 0x559729
call fcn.00776e71
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x55966e
call fcn.00776e71
mov eax, dword [edi]
mov edi, dword [esp + 0x68]
cmp dword [eax + 8], edi
jle 0x55976d
mov ecx, esi
call fcn.0058411f
mov ecx, dword [eax]
call fcn.0054414f
mov ecx, esi
mov dword [esp + 0x28], edi
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
call fcn.0066cf9f
mov edi, dword [ebp + 0xc]
cmp edi, dword [ebp + 0x10]
jbe 0x5596bb
call fcn.00776e71
mov eax, dword [ebp]
cmp eax, ebx
jne 0x559730
call fcn.00776e71
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x5596d3
call fcn.00776e71
mov edx, dword [edi]
mov eax, dword [edx + 8]
dec eax
mov ecx, esi
mov dword [esp + 0x28], eax
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
call fcn.0060575f
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x54]
cmp eax, ebx
je 0x559734
cmp byte [eax + 0x18], 0
je 0x559734
mov ecx, dword [ecx + 0x200]
call fcn.004f8b4f
mov ecx, eax
call fcn.004d8ecf
mov dword [esp + 0x28], eax
fild dword [esp + 0x28]
jmp 0x55973a
mov eax, dword [eax]
jmp 0x559664
mov eax, dword [eax]
jmp 0x5596c9
fld qword [0x10474e40]
mov ecx, esi
fstp qword [esp + 0x28]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
fld qword [esp + 0x28]
mov eax, dword [eax]
mov ecx, esi
fstp qword [eax + 0x18]
mov byte [eax + 0x20], 1
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov ebx, dword [ebp + 0x10]
cmp dword [ebp + 0xc], ebx
jbe 0x55977a
call fcn.00776e71
mov edx, dword [esp + 0x64]
mov edi, dword [edx]
mov ebp, edi
mov dword [esp + 0x38], ebx
test edi, edi
jne 0x5597a1
call fcn.00776e71
xor eax, eax
lea ecx, [ebx - 4]
cmp ecx, dword [eax + 0x10]
ja 0x5597ac
test edi, edi
je 0x5597a5
mov edi, dword [edi]
jmp 0x5597a7
mov eax, dword [edi]
jmp 0x559791
xor edi, edi
cmp ecx, dword [edi + 0xc]
jae 0x5597b1
call fcn.00776e71
lea edi, [ebx - 4]
test ebp, ebp
jne 0x55986c
call fcn.00776e71
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x5597cd
call fcn.00776e71
mov eax, dword [edi]
mov edi, dword [esp + 0x6c]
cmp dword [eax + 0x10], edi
jge 0x5598b3
mov ecx, esi
call fcn.0058411f
mov ecx, dword [eax]
call fcn.0054414f
mov ecx, dword [esp + 0x64]
call fcn.0058411f
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
inc ecx
mov dword [esp + 0x6c], ecx
mov ecx, esi
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea edx, [esp + 0x6c]
push edx
mov ecx, eax
call fcn.0066cf9f
mov ecx, esi
mov dword [esp + 0x6c], edi
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [esp + 0x6c]
push ecx
mov ecx, eax
call fcn.0060575f
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x559874
cmp byte [eax + 0x18], 0
je 0x559874
mov ecx, dword [ecx + 0x200]
call fcn.004f8b4f
mov ecx, eax
call fcn.004d8ecf
mov dword [esp + 0x6c], eax
fild dword [esp + 0x6c]
jmp 0x55987a
mov eax, dword [ebp]
jmp 0x5597c3
fld qword [0x10474e40]
mov ecx, esi
fstp qword [esp + 0x28]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
fld qword [esp + 0x28]
mov eax, dword [eax]
mov ecx, esi
fstp qword [eax + 0x18]
mov byte [eax + 0x20], 1
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov edx, dword [eax]
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0x64]
mov ebp, dword [esp + 0x68]
mov edi, dword [eax + 0xc]
dec ebp
cmp edi, dword [eax + 0x10]
jbe 0x5598c9
call fcn.00776e71
mov eax, dword [esp + 0x64]
mov ebx, dword [eax]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], edi
jmp 0x5598df
mov eax, dword [esp + 0x64]
mov edi, dword [eax + 0x10]
cmp dword [eax + 0xc], edi
jbe 0x5598f0
call fcn.00776e71
mov ecx, dword [esp + 0x64]
mov eax, dword [ecx]
test ebx, ebx
je 0x5598fe
cmp ebx, eax
je 0x559903
call fcn.00776e71
cmp dword [esp + 0x2c], edi
je 0x559ae6
test ebx, ebx
jne 0x5599ec
call fcn.00776e71
xor eax, eax
mov edx, dword [esp + 0x2c]
cmp edx, dword [eax + 0x10]
jb 0x55992a
call fcn.00776e71
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
mov ecx, dword [eax]
mov ebx, dword [ecx + 8]
test edi, edi
jne 0x5599f3
call fcn.00776e71
xor eax, eax
mov edx, dword [esp + 0x2c]
cmp edx, dword [eax + 0x10]
jb 0x559954
call fcn.00776e71
test ebx, ebx
jle 0x559a95
lea edi, [ebp + 1]
lea eax, [ebx - 1]
cmp eax, edi
jl 0x559a91
mov ecx, esi
call fcn.0058411f
mov ecx, dword [eax]
call fcn.0054414f
mov ecx, esi
mov dword [esp + 0x68], edi
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [esp + 0x68]
push ecx
mov ecx, eax
call fcn.0066cf9f
dec ebx
mov ecx, esi
mov dword [esp + 0x68], ebx
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea edx, [esp + 0x68]
push edx
mov ecx, eax
call fcn.0060575f
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x5599fa
cmp byte [eax + 0x18], 0
je 0x5599fa
mov ecx, dword [ecx + 0x200]
call fcn.004f8b4f
mov ecx, eax
call fcn.004d8ecf
mov dword [esp + 0x68], eax
fild dword [esp + 0x68]
jmp 0x559a00
mov eax, dword [ebx]
jmp 0x55991c
mov eax, dword [edi]
jmp 0x559946
fld qword [0x10474e40]
mov ecx, esi
fstp qword [esp + 0x20]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
fld qword [esp + 0x20]
mov eax, dword [eax]
fstp qword [eax + 0x18]
add eax, 0x18
mov ecx, esi
mov byte [eax + 8], 1
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov ecx, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0x68], eax
test ecx, ecx
jne 0x559a48
xor edi, edi
jmp 0x559a51
mov edi, dword [esp + 0x50]
sub edi, ecx
sar edi, 2
mov edx, dword [esp + 0x4c]
mov ebx, edx
sub ebx, ecx
sar ebx, 2
cmp ebx, edi
jae 0x559a6d
mov ecx, edx
add ecx, 4
mov dword [edx], eax
mov dword [esp + 0x4c], ecx
jmp 0x559a91
mov edi, edx
cmp ecx, edx
jbe 0x559a78
call fcn.00776e71
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x68]
push ecx
push edi
push eax
lea edx, [esp + 0x40]
push edx
lea ecx, [esp + 0x4c]
call fcn.0047928f
mov edi, dword [esp + 0x28]
test edi, edi
jne 0x559ade
call fcn.00776e71
xor eax, eax
mov ecx, dword [esp + 0x2c]
cmp ecx, dword [eax + 0x10]
jb 0x559aae
call fcn.00776e71
mov edx, dword [esp + 0x2c]
mov eax, dword [edx]
mov ebp, dword [eax + 0x10]
test edi, edi
jne 0x559ae2
call fcn.00776e71
xor eax, eax
mov ecx, dword [esp + 0x2c]
cmp ecx, dword [eax + 0x10]
jb 0x559ad0
call fcn.00776e71
add dword [esp + 0x2c], 4
mov ebx, dword [esp + 0x28]
jmp 0x5598df
mov eax, dword [edi]
jmp 0x559aa0
mov eax, dword [edi]
jmp 0x559ac2
mov edi, dword [esp + 0x4c]
cmp dword [esp + 0x48], edi
jbe 0x559af5
call fcn.00776e71
mov esi, dword [esp + 0x48]
cmp esi, dword [esp + 0x4c]
jbe 0x559b04
call fcn.00776e71
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x64]
mov ebx, dword [esp + 0x64]
mov byte [esp + 0x68], 0
mov edx, dword [esp + 0x68]
push edx
push eax
push ecx
push ebx
push edi
lea edx, [esp + 0x7c]
push esi
push edx
call fcn.0053571f
mov edx, dword [esp + 0x38]
xor edi, edi
add esp, 0x1c
cmp edx, edi
je 0x559b7f
mov ecx, dword [ebx + 0xc]
cmp ecx, edi
jne 0x559b41
xor eax, eax
jmp 0x559b49
mov eax, dword [ebx + 0x14]
sub eax, ecx
sar eax, 2
mov esi, dword [ebx + 0x10]
mov ebp, esi
sub ebp, ecx
sar ebp, 2
cmp ebp, eax
jae 0x559b61
mov dword [esi], edx
add esi, 4
mov dword [ebx + 0x10], esi
jmp 0x559b7f
cmp ecx, esi
jbe 0x559b6a
call fcn.00776e71
mov eax, dword [ebx]
lea ecx, [esp + 0x1c]
push ecx
push esi
push eax
lea edx, [esp + 0x40]
push edx
mov ecx, ebx
call fcn.0047928f
mov eax, dword [esp + 0x48]
cmp eax, edi
je 0x559b90
push eax
call fcn.00776c58
add esp, 4
mov eax, dword [esp + 0x3c]
push eax
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
call fcn.00776c58
add esp, 4
jmp 0x559cd5
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov edi, dword [esp + 0x14]
test ecx, 0xfffffffc
jne 0x559bc8
lea ecx, [edi + 4]
call fcn.005444ef
mov ecx, esi
call fcn.0058411f
mov ecx, dword [eax]
call fcn.0054414f
mov edx, dword [esp + 0x68]
mov ecx, esi
mov dword [esp + 0x68], edx
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [esp + 0x68]
push ecx
mov ecx, eax
call fcn.0066cf9f
mov edx, dword [esp + 0x6c]
mov ecx, esi
mov dword [esp + 0x68], edx
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [esp + 0x68]
push ecx
mov ecx, eax
call fcn.0060575f
mov eax, dword [edi + 0x54]
test eax, eax
je 0x559c4d
cmp byte [eax + 0x18], 0
je 0x559c4d
mov ecx, dword [edi + 0x200]
call fcn.004f8b4f
mov ecx, eax
call fcn.004d8ecf
mov dword [esp + 0x68], eax
fild dword [esp + 0x68]
jmp 0x559c53
fld qword [0x10474e40]
mov ecx, esi
fstp qword [esp + 0x28]
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
fld qword [esp + 0x28]
mov eax, dword [eax]
mov ecx, esi
fstp qword [eax + 0x18]
mov byte [eax + 0x20], 1
call fcn.0058411f
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0058411f
mov edx, dword [eax]
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x68], edx
test eax, eax
jne 0x559c97
xor ecx, ecx
jmp 0x559c9f
mov ecx, dword [ebx + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [ebx + 0x10]
mov edi, esi
sub edi, eax
sar edi, 2
cmp edi, ecx
jae 0x559cb7
mov dword [esi], edx
add esi, 4
mov dword [ebx + 0x10], esi
jmp 0x559cd5
cmp eax, esi
jbe 0x559cc0
call fcn.00776e71
mov eax, dword [ebx]
lea edx, [esp + 0x68]
push edx
push esi
push eax
lea eax, [esp + 0x40]
push eax
mov ecx, ebx
call fcn.0047928f
mov eax, ebx
mov ecx, dword [esp + 0x54]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret 0xc