Function at 0x483aaf
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x1039b568
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push ebx
push ebp
push esi
push edi
mov eax, dword [0x105623f8]
xor eax, esp
push eax
lea eax, [esp + 0x64]
mov dword fs:[0], eax
mov esi, ecx
cmp word [esi + 0x26], 0x10
je 0x483baf
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x484ada
mov dword [esp + 0x14], ebp
nop
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebp, ecx
jb 0x483b37
call fcn.00776e71
mov edi, dword [esi + 0x38c]
add edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x74]
mov dx, word [edi + 0x14]
sub dx, word [edi + 0x10]
movzx eax, word [edi]
movzx ebx, dx
push ebx
push eax
call fcn.004ac95f
test bx, bx
jbe 0x483b7d
mov ecx, dword [edi + 0x14]
sub ecx, dword [edi + 0x10]
jne 0x483b6c
call fcn.00776e71
mov eax, dword [edi + 0x10]
mov ecx, dword [esp + 0x74]
movzx edx, bx
push edx
push eax
call fcn.004aafaf
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
add dword [esp + 0x14], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc ebp
add ecx, edx
cmp ebp, ecx
jb 0x483b0f
jmp 0x484ada
mov ebx, dword [esp + 0x74]
push ebx
lea ecx, [esi + 0x24]
call fcn.0040685f
cmp byte [esi + 0x40514], 0
je 0x483bdf
push 2
push 0x5e
mov ecx, ebx
call fcn.004ac95f
movzx edx, word [esi + 0x40516]
push edx
mov ecx, ebx
call fcn.004aad6f
push ebx
lea ecx, [esi + 0x34]
call fcn.004688ff
push 2
push 0xd
mov ecx, ebx
call fcn.004ac95f
movzx eax, word [esi + 0x5c]
push eax
mov ecx, ebx
call fcn.004aad6f
push 2
push 0xc
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x5e]
push ecx
mov ecx, ebx
call fcn.004aad6f
push 2
push 0xf
mov ecx, ebx
call fcn.004ac95f
movzx edx, word [esi + 0x60]
push edx
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x11
mov ecx, ebx
call fcn.004ac95f
movzx eax, word [esi + 0x62]
push eax
mov ecx, ebx
call fcn.004aad6f
push 8
push 0x10
mov ecx, ebx
call fcn.004ac95f
fld qword [esi + 0x68]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.004aad7f
push 2
push 0x5f
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x70]
push ecx
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x2a
mov ecx, ebx
call fcn.004ac95f
movzx edx, word [esi + 0x72]
push edx
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x2b
mov ecx, ebx
call fcn.004ac95f
movzx eax, word [esi + 0x74]
push eax
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x82
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x76]
push ecx
mov ecx, ebx
call fcn.004aad6f
push ebx
lea ecx, [esi + 0x78]
call fcn.004688af
push 4
push 0x225
mov ecx, ebx
call fcn.004ac95f
movzx edx, word [esi + 0x80]
push edx
mov ecx, ebx
call fcn.004aad6f
movzx eax, word [esi + 0x82]
push eax
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x81
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x84]
push ecx
mov ecx, ebx
call fcn.004aad6f
mov edx, dword [esi + 0x1b0]
sub edx, dword [esi + 0x1ac]
lea ecx, [esi + 0x1a0]
test edx, 0xfffffff8
je 0x483d30
push ebx
call fcn.0041b5df
mov eax, dword [esi + 0x198]
sub eax, dword [esi + 0x194]
lea ecx, [esi + 0x188]
test eax, 0xfffffff8
je 0x483d4f
push ebx
call fcn.0042196f
push ebx
lea ecx, [esi + 0x88]
call fcn.00429d1f
cmp byte [esi + 0x1d4], 0
lea ecx, [esi + 0x1b8]
jne 0x483d70
push ebx
call fcn.0042ee0f
push ebx
lea ecx, [esi + 0x130]
call fcn.0042a1ff
push 2
push 0x55
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x13c]
push ecx
mov ecx, ebx
call fcn.004aad6f
mov edi, dword [esi + 0x3a8]
cmp dword [esi + 0x3a4], edi
jbe 0x483da9
call fcn.00776e71
mov ebp, dword [esi + 0x3a4]
mov eax, dword [esi + 0x398]
mov dword [esp + 0x18], eax
cmp ebp, dword [esi + 0x3a8]
jbe 0x483dca
call fcn.00776e71
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 0x398]
test eax, eax
je 0x483dd8
cmp eax, ecx
je 0x483ddd
call fcn.00776e71
mov ecx, edi
sub ecx, ebp
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push edi
push ebp
call fcn.0047142f
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add esp, 0xc
xor edi, edi
add ecx, edx
je 0x483e76
xor ebp, ebp
nop
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x483e44
call fcn.00776e71
mov ecx, dword [esi + 0x3a4]
push ebx
add ecx, ebp
call fcn.0040ba8f
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
inc edi
add ecx, edx
add ebp, 0xc
cmp edi, ecx
jb 0x483e1f
or eax, 0xffffffff
lea edi, [esi + 0x40d38]
mov ecx, 0x101
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x483f9e
mov dword [esp + 0x74], edi
nop
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x483ed4
call fcn.00776e71
mov edx, dword [esi + 0x3a4]
mov eax, dword [esp + 0x74]
movzx ebp, word [edx + eax]
lea ecx, [esi + ebp*4 + 0x40d38]
mov dword [esp + 0x14], ecx
mov edi, edi
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x483f14
call fcn.00776e71
mov ecx, dword [esi + 0x3a4]
mov edx, dword [esp + 0x74]
movzx eax, word [ecx + edx + 2]
cmp ebp, eax
jg 0x483f74
cmp ebp, 0x100
jg 0x483f69
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x483f54
call fcn.00776e71
mov edx, dword [esi + 0x3a4]
mov eax, dword [esp + 0x74]
movzx ecx, word [edx + eax + 6]
mov edx, dword [esp + 0x14]
mov dword [edx], ecx
inc ebp
add dword [esp + 0x14], 4
jmp 0x483eef
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
add dword [esp + 0x74], 0xc
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
cmp edi, eax
jb 0x483eaf
cmp byte [esi + 0x1f8], 0
jne 0x483ff2
mov cx, word [esi + 0x1f0]
sub cx, word [esi + 0x1ec]
movzx edx, word [esi + 0x1dc]
movzx edi, cx
push edi
push edx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x483ff2
mov eax, dword [esi + 0x1f0]
sub eax, dword [esi + 0x1ec]
jne 0x483fe0
call fcn.00776e71
mov edx, dword [esi + 0x1ec]
movzx ecx, di
push ecx
push edx
mov ecx, ebx
call fcn.004aafaf
cmp byte [esi + 0x218], 0
jne 0x484046
mov ax, word [esi + 0x210]
sub ax, word [esi + 0x20c]
movzx ecx, word [esi + 0x1fc]
movzx edi, ax
push edi
push ecx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x484046
mov edx, dword [esi + 0x210]
sub edx, dword [esi + 0x20c]
jne 0x484034
call fcn.00776e71
mov ecx, dword [esi + 0x20c]
movzx eax, di
push eax
push ecx
mov ecx, ebx
call fcn.004aafaf
cmp byte [esi + 0x238], 0
jne 0x48409a
mov dx, word [esi + 0x230]
sub dx, word [esi + 0x22c]
movzx eax, word [esi + 0x21c]
movzx edi, dx
push edi
push eax
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x48409a
mov ecx, dword [esi + 0x230]
sub ecx, dword [esi + 0x22c]
jne 0x484088
call fcn.00776e71
mov eax, dword [esi + 0x22c]
movzx edx, di
push edx
push eax
mov ecx, ebx
call fcn.004aafaf
mov ecx, esi
call fcn.00469a8f
push ebx
lea ecx, [esi + 0x140]
call fcn.0040c74f
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x78]
push edx
lea ecx, [esp + 0x4c]
call fcn.004da27f
mov eax, dword [esi + 0x300]
sub eax, dword [esi + 0x2fc]
lea edi, [esi + 0x2f0]
xor ebp, ebp
sar eax, 4
mov dword [esp + 0x6c], ebp
test eax, eax
jbe 0x48412a
mov dword [esp + 0x74], ebp
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
sar ecx, 4
cmp ebp, ecx
jb 0x4840f5
call fcn.00776e71
mov edx, dword [edi + 0xc]
mov eax, dword [esp + 0x74]
movzx ecx, word [edx + eax]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], ecx
push eax
lea ecx, [esp + 0x4c]
call fcn.00473d9f
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
add dword [esp + 0x74], 0x10
inc ebp
sar ecx, 4
cmp ebp, ecx
jb 0x4840e3
lea ecx, [esp + 0x34]
call fcn.0041f4af
xor eax, eax
mov dword [esp + 0x74], eax
lea ebx, [ebx]
movzx eax, ax
push eax
lea ecx, [esi + 0x4f8]
call fcn.004a07ef
test al, al
je 0x4841c2
mov edx, dword [esp + 0x74]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x1c], edx
call fcn.0046b51f
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
xor ebp, ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
test eax, eax
je 0x484189
cmp eax, dword [esp + 0x2c]
je 0x48418e
call fcn.00776e71
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x30]
je 0x4841a8
lea ecx, [esp + 0x18]
inc ebp
call fcn.00468daf
mov eax, dword [esp + 0x18]
jmp 0x48417f
test ebp, ebp
jne 0x4841c2
movzx eax, word [esp + 0x74]
lea ecx, [esp + 0x34]
push ecx
mov ecx, edi
mov word [esp + 0x38], ax
call fcn.0047909f
mov eax, dword [esp + 0x74]
inc eax
mov dword [esp + 0x74], eax
cmp eax, 0x10000
jb 0x48413f
mov edx, dword [edi + 0x10]
sub edx, dword [edi + 0xc]
xor ebp, ebp
sar edx, 4
test edx, edx
jbe 0x4842cd
mov dword [esp + 0x74], ebp
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
sar eax, 4
cmp ebp, eax
jb 0x4841ff
call fcn.00776e71
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, dword [edi + 0xc]
add eax, dword [esp + 0x74]
sar ecx, 4
mov dword [esp + 0x14], eax
cmp ebp, ecx
jb 0x48421c
call fcn.00776e71
mov eax, dword [edi + 0xc]
add eax, dword [esp + 0x74]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x18], eax
movzx eax, word [edx]
push eax
lea ecx, [esi + 0x4f8]
call fcn.004a080f
mov ecx, dword [esp + 0x18]
mov word [ecx + 2], ax
mov edx, dword [edi + 0x10]
sub edx, dword [edi + 0xc]
sar edx, 4
cmp ebp, edx
jb 0x484254
call fcn.00776e71
mov eax, dword [edi + 0xc]
add eax, dword [esp + 0x74]
mov dword [esp + 0x18], eax
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
sar eax, 4
cmp ebp, eax
jb 0x484271
call fcn.00776e71
mov ecx, dword [esp + 0x18]
movzx edx, word [ecx]
mov eax, dword [edi + 0xc]
add eax, dword [esp + 0x74]
push edx
lea ecx, [esi + 0x4f8]
mov dword [esp + 0x18], eax
call fcn.004a083f
mov ecx, dword [esp + 0x14]
mov word [ecx + 4], ax
mov edx, dword [edi + 0x10]
sub edx, dword [edi + 0xc]
sar edx, 4
cmp ebp, edx
jb 0x4842a9
call fcn.00776e71
mov ecx, dword [edi + 0xc]
add ecx, dword [esp + 0x74]
push ebx
call fcn.0041f42f
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
add dword [esp + 0x74], 0x10
inc ebp
sar eax, 4
cmp ebp, eax
jb 0x4841ed
xor edi, edi
mov dword [esp + 0x74], edi
movzx eax, di
push eax
lea ecx, [esi + 0x4f8]
call fcn.004a07ef
test al, al
je 0x4844df
xor ebp, ebp
lea ecx, [ecx]
movzx eax, di
push ebp
push eax
lea ecx, [esi + 0x4f8]
call fcn.004a09df
mov eax, dword [eax]
test al, 1
je 0x4844ce
mov ecx, eax
shr ecx, 1
and ecx, 7
dec ecx
cmp ecx, 6
ja 0x4844ce
jmp dword [ecx*4 + 0x10080e84]
mov edi, dword [esp + 0x74]
inc ebp
cmp ebp, 0x100
jb 0x4842ef
inc edi
mov dword [esp + 0x74], edi
cmp edi, 0x10000
jb 0x4842d3
cmp byte [esi + 0x258], 0
jne 0x484544
mov cx, word [esi + 0x250]
sub cx, word [esi + 0x24c]
movzx edx, word [esi + 0x23c]
movzx edi, cx
push edi
push edx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x484544
mov eax, dword [esi + 0x250]
sub eax, dword [esi + 0x24c]
jne 0x484532
call fcn.00776e71
mov edx, dword [esi + 0x24c]
movzx ecx, di
push ecx
push edx
mov ecx, ebx
call fcn.004aafaf
push ebx
lea ecx, [esi + 0x474]
call fcn.004bd8ef
mov ecx, dword [esi + 0x4e4]
sub ecx, dword [esi + 0x4e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x4845cc
xor ebp, ebp
mov ecx, dword [esi + 0x4e4]
sub ecx, dword [esi + 0x4e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x484599
call fcn.00776e71
mov ecx, dword [esi + 0x4e0]
push ebx
add ecx, ebp
call fcn.0041d57f
mov ecx, dword [esi + 0x4e4]
sub ecx, dword [esi + 0x4e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x30
cmp edi, eax
jb 0x484573
cmp byte [esi + 0x278], 0
jne 0x484620
mov cx, word [esi + 0x270]
sub cx, word [esi + 0x26c]
movzx edx, word [esi + 0x25c]
movzx edi, cx
push edi
push edx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x484620
mov eax, dword [esi + 0x270]
sub eax, dword [esi + 0x26c]
jne 0x48460e
call fcn.00776e71
mov edx, dword [esi + 0x26c]
movzx ecx, di
push ecx
push edx
mov ecx, ebx
call fcn.004aafaf
push ebx
lea ecx, [esi + 0x150]
call fcn.00421c8f
cmp byte [esi + 0x298], 0
jne 0x484680
mov ax, word [esi + 0x290]
sub ax, word [esi + 0x28c]
movzx ecx, word [esi + 0x27c]
movzx edi, ax
push edi
push ecx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x484680
mov edx, dword [esi + 0x290]
sub edx, dword [esi + 0x28c]
jne 0x48466e
call fcn.00776e71
mov ecx, dword [esi + 0x28c]
movzx eax, di
push eax
push ecx
mov ecx, ebx
call fcn.004aafaf
lea edi, [esi + 0x184]
mov ecx, edi
call fcn.0041fdef
cmp eax, 0x64
je 0x48469a
push ebx
mov ecx, edi
call fcn.0041fd8f
push ebx
lea ecx, [esi + 0x4ec]
call fcn.0041e80f
mov ecx, dword [esi + 0x3f0]
sub ecx, dword [esi + 0x3ec]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x484728
xor ebp, ebp
lea ebx, [ebx]
mov ecx, dword [esi + 0x3f0]
sub ecx, dword [esi + 0x3ec]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x4846f5
call fcn.00776e71
mov ecx, dword [esi + 0x3ec]
push ebx
add ecx, ebp
call fcn.0041febf
mov ecx, dword [esi + 0x3f0]
sub ecx, dword [esi + 0x3ec]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x24
cmp edi, eax
jb 0x4846cf
push ebx
lea ecx, [esi + 0x29c]
call fcn.0040c9df
mov ecx, dword [esi + 0x3c0]
sub ecx, dword [esi + 0x3bc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
xor edi, edi
add ecx, edx
je 0x4847bc
xor ebp, ebp
lea ebx, [ebx]
mov ecx, dword [esi + 0x3c0]
sub ecx, dword [esi + 0x3bc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x484787
call fcn.00776e71
mov ecx, dword [esi + 0x3bc]
push ebx
add ecx, ebp
call fcn.0041c8af
mov ecx, dword [esi + 0x3c0]
sub ecx, dword [esi + 0x3bc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc edi
add ecx, edx
add ebp, 0x1c
cmp edi, ecx
jb 0x48475f
push ebx
lea ecx, [esi + 0x164]
call fcn.0041e9ff
mov ecx, dword [esi + 0x438]
sub ecx, dword [esi + 0x434]
mov eax, 0x60606061
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x48484b
xor ebp, ebp
lea esp, [esp]
mov ecx, dword [esi + 0x438]
sub ecx, dword [esi + 0x434]
mov eax, 0x60606061
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x484815
call fcn.00776e71
mov ecx, dword [esi + 0x434]
push ebx
add ecx, ebp
call fcn.0041aeaf
mov ecx, dword [esi + 0x438]
sub ecx, dword [esi + 0x434]
mov eax, 0x60606061
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x154
cmp edi, eax
jb 0x4847ef
cmp byte [esi + 0x2bc], 0
jne 0x48489f
mov cx, word [esi + 0x2b4]
sub cx, word [esi + 0x2b0]
movzx edx, word [esi + 0x2a0]
movzx edi, cx
push edi
push edx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x48489f
mov eax, dword [esi + 0x2b4]
sub eax, dword [esi + 0x2b0]
jne 0x48488d
call fcn.00776e71
mov edx, dword [esi + 0x2b0]
movzx ecx, di
push ecx
push edx
mov ecx, ebx
call fcn.004aafaf
push ebx
lea ecx, [esi + 0x2c0]
call fcn.00420c4f
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x4849b4
mov dword [esp + 0x74], ebp
jmp 0x4848df
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebp, ecx
jb 0x484907
call fcn.00776e71
mov edx, dword [esi + 0x38c]
mov eax, dword [esp + 0x74]
cmp word [eax + edx], 0x4d
je 0x484987
mov ecx, dword [esi + 0x390]
sub ecx, edx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebp, ecx
jb 0x48493c
call fcn.00776e71
mov edi, dword [esi + 0x38c]
add edi, dword [esp + 0x74]
mov ecx, ebx
mov dx, word [edi + 0x14]
sub dx, word [edi + 0x10]
movzx eax, dx
push eax
mov dword [esp + 0x18], eax
movzx eax, word [edi]
push eax
call fcn.004ac95f
cmp word [esp + 0x14], 0
jbe 0x484987
mov ecx, dword [edi + 0x14]
sub ecx, dword [edi + 0x10]
jne 0x484976
call fcn.00776e71
movzx edx, word [esp + 0x14]
mov eax, dword [edi + 0x10]
push edx
push eax
mov ecx, ebx
call fcn.004aafaf
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
add dword [esp + 0x74], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc ebp
add ecx, edx
cmp ebp, ecx
jb 0x4848df
mov ecx, dword [esi + 0x468]
sub ecx, dword [esi + 0x464]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x484a38
xor ebp, ebp
jmp 0x4849df
mov ecx, dword [esi + 0x468]
sub ecx, dword [esi + 0x464]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x484a05
call fcn.00776e71
mov ecx, dword [esi + 0x464]
push ebx
add ecx, ebp
call fcn.00427cef
mov ecx, dword [esi + 0x468]
sub ecx, dword [esi + 0x464]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x44
cmp edi, eax
jb 0x4849df
mov ecx, dword [esi + 0x450]
sub ecx, dword [esi + 0x44c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
xor edi, edi
add ecx, edx
je 0x484abc
xor ebp, ebp
mov edi, edi
mov ecx, dword [esi + 0x450]
sub ecx, dword [esi + 0x44c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x484a87
call fcn.00776e71
mov ecx, dword [esi + 0x44c]
push ebx
add ecx, ebp
call fcn.00424dff
mov ecx, dword [esi + 0x450]
sub ecx, dword [esi + 0x44c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
inc edi
add ecx, edx
add ebp, 0x38
cmp edi, ecx
jb 0x484a5f
push 0
push 0
push 0xa
mov ecx, ebx
call fcn.004ac99f
lea ecx, [esp + 0x44]
mov dword [esp + 0x6c], 0xffffffff
call fcn.004dae0f
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret 4