Function at 0x4fcc00
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x12e0
call fcn.0061d060
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x50d290
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
call fcn.00406c70
cmp eax, 8
jg 0x4fce6b
mov eax, dword [ebp + 8]
cmp dword [eax + 0x10], 3
jb 0x4fce6b
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x12d8], 7
mov dword [ebp - 0x12dc], 0
mov word [ebp - 0x12ec], 0
sub esp, 0xc
mov al, byte [ebp - 0x2ec]
lea ecx, [ebp - 0x12ec]
mov byte [esp + 4], al
mov dword [esp + 8], str.bEnableJunctionPointCheck
mov dword [esp], 0x19
call fcn.00405590
mov dword [ebp - 0x2d8], 7
mov dword [ebp - 0x2dc], 0
mov word [ebp - 0x2ec], 0
mov dword [ebp - 0x10], 2
sub esp, 0xc
mov al, byte [ebp - 0x4c]
lea ecx, [ebp - 0x2ec]
mov byte [esp + 4], al
mov dword [esp + 8], str.SoftwarePoliciesAdobeAcrobat_ReaderDCFeatureLockDown
mov dword [esp], 0x39
call fcn.00405590
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x10], 3
push eax
lea eax, [ebp - 0x12ec]
push eax
lea eax, [ebp - 0x2ec]
push eax
push 0x80000002
call fcn.004114c0
add esp, 0x10
mov ecx, dword [ebp - 0x2d8]
mov ebx, eax
cmp ecx, 8
jb 0x4fcd51
mov eax, dword [ebp - 0x2ec]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fcd47
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd7c0
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [ebp - 0x12d8]
cmp ecx, 8
jb 0x4fcd92
mov eax, dword [ebp - 0x12ec]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fcd88
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd7cc
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
cmp dword [ebp - 0x9c], 0
setne al
test bl, al
je 0x4fce6b
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x12d8], 7
mov dword [ebp - 0x12dc], 0
mov word [ebp - 0x12ec], 0
mov dword [ebp - 0x10], 0xa
sub esp, 0xc
mov al, byte [ebp - 0x2ec]
lea ecx, [ebp - 0x12ec]
mov byte [esp + 4], al
mov dword [esp + 8], str..0AFACED1_E828_11D1_9187_B532F1E9575D
mov dword [esp], 0x27
mov dword [ebp - 0x2c], ecx
call fcn.00405590
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x50]
je 0x4fce85
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov esi, dword [ebp + 8]
movsd xmm0, qword [ebp - 0x12dc]
movsd qword [eax + 0x10], xmm0
movsd xmm0, qword [ebp - 0x12ec]
movsd xmm1, qword [ebp - 0x12e4]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
add eax, 0x18
mov dword [ebp - 0x12dc], 0
mov dword [ebp - 0x12d8], 7
mov word [ebp - 0x12ec], 0
mov dword [ebp - 0x54], eax
jmp 0x4fcee0
xor ebx, ebx
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, ebx
add esp, 0x12e0
pop esi
pop edi
pop ebx
pop ebp
ret 8
lea edx, [ebp - 0x12ec]
mov dword [ebp - 0x10], 0xf
lea ecx, [ebp - 0x58]
push edx
push eax
call fcn.005d3a60
mov ecx, dword [ebp - 0x12d8]
mov esi, dword [ebp + 8]
cmp ecx, 8
jb 0x4fcee0
mov eax, dword [ebp - 0x12ec]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fced6
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd7e9
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x12dc], 0
mov dword [ebp - 0x12d8], 0
mov ecx, esi
mov eax, dword [esi + 0x14]
mov edi, dword [esi]
mov edx, dword [esi + 0x10]
cmp eax, 7
cmova ecx, edi
cmp edx, 8
jae 0x4fcf43
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
lea ecx, [ebp - 0x12ec]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x24], ecx
movsd qword [ebp - 0x12e4], xmm1
movsd qword [ebp - 0x12ec], xmm0
mov dword [ebp - 0x12dc], edx
mov dword [ebp - 0x12d8], 7
jmp 0x4fcfe5
mov eax, edx
mov dword [ebp - 0x20], ecx
mov ecx, 0x7ffffffe
mov dword [ebp - 0x28], edx
or eax, 7
cmp eax, 0x7ffffffe
mov dword [ebp - 0x24], eax
cmovb ecx, eax
lea eax, [ecx + ecx]
cmp ecx, 0x7ff
jb 0x4fcf95
cmp ecx, 0x7fffffee
mov dword [ebp - 0x10], 0xa
jae 0x4fd7d8
add eax, 0x25
push eax
call fcn.005d0220
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4fcfa8
add eax, 2
mov dword [ebp - 0x10], 0xa
push eax
call fcn.005d0220
add esp, 4
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x12ec], eax
lea ecx, [esi + esi + 2]
push ecx
push dword [ebp - 0x20]
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x12dc], esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x12d8], eax
mov eax, dword [ebp - 0x12ec]
mov edi, dword [esi]
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [esi + 0x14]
cmp eax, 7
cmovbe edi, esi
test edx, edx
je 0x4fd029
add edx, edx
xor eax, eax
mov dword [ebp - 0x10], 0xe
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x20], eax
movzx eax, word [edi + eax]
push eax
call fcn.0062c86c
add esp, 4
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x30]
mov word [ecx + edx], ax
mov ecx, dword [ebp - 0x28]
mov eax, edx
add eax, 2
cmp ecx, eax
jne 0x4fd000
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
cmp ecx, eax
mov dword [ebp - 0x24], eax
je 0x4fd11c
mov edx, dword [ebp - 0x12d8]
mov eax, dword [ebp - 0x12dc]
cmp edx, 7
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x5c], edx
jbe 0x4fd05a
mov eax, dword [ebp - 0x12ec]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add eax, 2
mov dword [ebp - 0x60], eax
jmp 0x4fd08c
sub esi, dword [ebp - 0x2c]
cmp esi, 0xfffffffe
jne 0x4fd12f
nop word cs:[eax + eax]
nop dword [eax + eax]
add ecx, 0x18
cmp ecx, dword [ebp - 0x24]
je 0x4fd118
mov eax, dword [ecx + 0x10]
cmp dword [ecx + 0x14], 7
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], eax
jbe 0x4fd0a0
mov eax, dword [ecx]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x20]
jb 0x4fd080
cmp dword [ebp - 0x20], 0
je 0x4fd12f
mov eax, dword [ebp - 0x60]
lea edi, [eax + edx*2]
mov dword [ebp - 0x64], edi
sub edi, dword [ebp - 0x2c]
je 0x4fd080
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x2c]
movzx edx, word [eax]
sar edi, 1
nop dword [eax + eax]
cmp word [esi], dx
je 0x4fd0e0
add esi, 2
dec edi
jne 0x4fd0d0
jmp 0x4fd080
mov edi, 1
nop word cs:[eax + eax]
nop
cmp dword [ebp - 0x20], edi
je 0x4fd065
movzx eax, word [esi + edi*2]
mov ebx, dword [ebp - 0x28]
cmp ax, word [ebx + edi*2]
lea edi, [edi + 1]
je 0x4fd0f0
mov edi, dword [ebp - 0x64]
add esi, 2
sub edi, esi
jne 0x4fd0c9
jmp 0x4fd080
mov bl, 1
jmp 0x4fd131
mov edx, dword [ebp - 0x12d8]
mov bl, 1
cmp edx, 8
jae 0x4fd139
test bl, bl
jne 0x4fd173
jmp 0x4fd189
xor ebx, ebx
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x4fd129
mov eax, dword [ebp - 0x12ec]
lea ecx, [edx + edx + 2]
cmp ecx, 0x1000
jb 0x4fd165
mov ecx, eax
mov eax, dword [eax - 4]
add ecx, 0xfffffffc
sub ecx, eax
cmp ecx, 0x20
jae 0x4fd7dd
add edx, edx
add edx, 0x25
mov ecx, edx
push ecx
push eax
call fcn.005d319e
add esp, 8
test bl, bl
je 0x4fd189
mov dword [ebp - 0x10], 0xa
push dword [ebp + 8]
call fcn.00429c50
add esp, 4
test al, al
je 0x4fd198
lea ecx, [ebp - 0x58]
call fcn.005d38f0
mov bl, 1
jmp 0x4fce6d
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
cmp dword [edx + 0x14], 7
mov eax, edx
jbe 0x4fd1a8
mov eax, dword [edx]
push 0
push 0
push 1
push 0
push eax
call fcn.004b8620
mov bl, 1
test al, al
je 0x4fd464
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x14], 7
mov eax, ecx
jbe 0x4fd1cd
mov eax, dword [ecx]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4fd455
and eax, 0x14
je 0x4fd455
mov edx, dword [ebp + 8]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov esi, dword [edx + 0x10]
cmp dword [edx + 0x14], 7
jbe 0x4fd202
mov edx, dword [edx]
cmp esi, 8
jae 0x4fd236
movsd xmm0, qword [edx]
movsd xmm1, qword [edx + 8]
lea ecx, [ebp - 0x4c]
mov edi, 7
xor eax, eax
mov dword [ebp - 0x20], ecx
movsd qword [ebp - 0x44], xmm1
movsd qword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], 7
jmp 0x4fd2b9
mov edi, esi
mov ecx, 0x7ffffffe
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x28], esi
or edi, 7
cmp edi, 0x7ffffffe
mov dword [ebp - 0x24], edi
cmovb ecx, edi
lea eax, [ecx + ecx]
cmp ecx, 0x7ff
jb 0x4fd282
cmp ecx, 0x7fffffee
jae 0x4fd7f5
add eax, 0x25
push eax
call fcn.005d0220
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4fd28e
add eax, 2
push eax
call fcn.005d0220
add esp, 4
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x4c], eax
lea ecx, [esi + esi + 2]
push ecx
push dword [ebp - 0x20]
push eax
call fcn.0061e340
add esp, 0xc
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], edi
lea eax, [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x20], eax
mov al, 1
cmp word [ecx + esi*2 - 2], 0x5c
jne 0x4fd2c9
lea eax, [ebp - 0x2ec]
jmp 0x4fd329
cmp esi, edi
jae 0x4fd2f2
test al, al
mov eax, dword [ebp - 0x20]
lea ecx, [esi + 1]
mov dword [ebp - 0x3c], ecx
je 0x4fd2dd
mov eax, dword [ebp - 0x4c]
mov word [eax + esi*2], 0x5c
mov word [eax + esi*2 + 2], 0
lea eax, [ebp - 0x2ec]
jmp 0x4fd323
mov dword [ebp - 0x10], 0xb
sub esp, 0xc
mov al, byte [ebp - 0x12ec]
lea ecx, [ebp - 0x4c]
mov byte [esp + 4], al
mov dword [esp + 8], 0x5c
mov dword [esp], 1
call fcn.0040a570
lea eax, [ebp - 0x2ec]
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x38]
push 0x250
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
mov eax, edi
sub eax, esi
cmp eax, 0xb
jae 0x4fd37d
mov dword [ebp - 0x10], 0xb
sub esp, 0x10
mov al, byte [ebp - 0x12ec]
lea ecx, [ebp - 0x4c]
mov byte [esp + 4], al
mov dword [esp + 0xc], 0xb
mov dword [esp + 8], str.desktop.ini
mov dword [esp], 0xb
call fcn.0040b010
lea ecx, [ebp - 0x2ec]
jmp 0x4fd3cb
lea eax, [esi + 0xb]
cmp edi, 7
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
jbe 0x4fd38e
mov eax, dword [ebp - 0x4c]
movsd xmm0, qword [0x676952]
movsd xmm1, qword [str.desktop.ini]
movsd xmm2, qword [0x67694c]
lea ecx, [ebp - 0x2ec]
movsd qword [eax + esi*2 + 0xe], xmm0
movsd qword [eax + esi*2 + 8], xmm2
movsd qword [eax + esi*2], xmm1
mov word [eax + esi*2 + 0x16], 0
mov dword [ebp - 0x10], 0xb
cmp dword [ebp - 0x38], 7
mov eax, dword [ebp - 0x20]
jbe 0x4fd3d7
mov eax, dword [ebp - 0x4c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x4fd40a
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x2d0], 0
jne 0x4fd401
mov eax, dword [ebp - 0x2cc]
cmp eax, 0x200000
jbe 0x4fd471
mov al, 1
mov dword [ebp - 0x24], eax
xor ebx, ebx
jmp 0x4fd413
xor ebx, ebx
mov dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0x38]
cmp ecx, 8
jb 0x4fd44e
mov eax, dword [ebp - 0x4c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fd444
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd7fa
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
test bl, bl
mov ebx, dword [ebp - 0x24]
je 0x4fd464
lea ecx, [ebp - 0x58]
call fcn.005d38f0
xor ebx, ebx
jmp 0x4fce6d
lea ecx, [ebp - 0x58]
call fcn.005d38f0
jmp 0x4fce6d
mov ecx, dword [ebp - 0x58]
cmp eax, dword [ecx + 0x10]
jbe 0x4fd7b4
cmp dword [ebp - 0x38], 7
mov al, 1
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x24], eax
jbe 0x4fd495
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x34]
push 0x67695c
push dword [ebp - 0x20]
push eax
call fcn.005db7a6
add esp, 0xc
test eax, eax
jne 0x4fd406
cmp dword [ebp - 0x34], 0
je 0x4fd406
lea eax, [ebp - 0x12ec]
push 0x1000
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x88], 0
mov word [ebp - 0x98], 0
mov esi, dword [eax + 0x10]
test esi, esi
je 0x4fd806
cmp dword [eax + 0x14], 7
lea ecx, [esi - 1]
jbe 0x4fd507
mov eax, dword [eax]
add eax, 2
cmp ecx, 7
jbe 0x4fd52d
sub esp, 0xc
mov dl, byte [ebp - 0x80]
mov byte [esp + 4], dl
mov dword [esp], ecx
lea ecx, [ebp - 0x98]
mov dword [esp + 8], eax
call fcn.00405590
jmp 0x4fd550
mov dword [ebp - 0x88], ecx
add ecx, ecx
lea edx, [ebp - 0x98]
push ecx
push eax
push edx
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x9a], 0
lea esi, [ebp - 0x12ec]
jmp 0x4fd572
add edx, edx
mov edi, eax
add edx, 0x25
mov ecx, edx
push ecx
push edi
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x10], 0xc
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xc
push eax
push 0xfff
push esi
call fcn.005dc1bc
add esp, 0xc
test eax, eax
je 0x4fd718
lea edi, [ebp - 0x12ec]
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], 0
push edi
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x4fd5d8
sub esp, 0xc
mov al, byte [ebp - 0x68]
lea ecx, [ebp - 0x80]
mov byte [esp + 4], al
mov dword [esp + 8], edi
mov dword [esp], esi
call fcn.00405590
jmp 0x4fd5f4
mov eax, esi
mov dword [ebp - 0x70], esi
add eax, esi
push eax
push edi
lea eax, [ebp - 0x80]
push eax
call fcn.0061e340
add esp, 0xc
mov word [ebp + esi*2 - 0x80], 0
mov edx, dword [ebp - 0x6c]
mov edi, dword [ebp - 0x80]
mov eax, dword [ebp - 0x70]
lea ecx, [ebp - 0x80]
cmp edx, 7
cmova ecx, edi
test eax, eax
je 0x4fd63f
lea eax, [ecx + eax*2]
mov dword [ebp - 0x28], eax
movzx eax, word [ecx]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x10], 0xd
push eax
call fcn.0062c86c
add esp, 4
mov ecx, dword [ebp - 0x20]
mov word [ecx], ax
add ecx, 2
cmp ecx, dword [ebp - 0x28]
jne 0x4fd610
mov edi, dword [ebp - 0x80]
mov esi, dword [ebp - 0x70]
mov edx, dword [ebp - 0x6c]
jmp 0x4fd641
xor esi, esi
mov ecx, dword [ebp - 0x88]
cmp dword [ebp - 0x84], 7
lea eax, [ebp - 0x98]
mov dword [ebp - 0x20], eax
jbe 0x4fd662
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x20], eax
cmp edx, 7
lea eax, [ebp - 0x80]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x30], edi
cmova eax, edi
sub esi, ecx
jb 0x4fd6d6
test ecx, ecx
je 0x4fd727
lea edx, [eax + esi*2 + 2]
mov dword [ebp - 0x64], edx
sub edx, eax
je 0x4fd6d6
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
movzx esi, word [edi]
mov edi, dword [ebp - 0x2c]
sar edx, 1
cmp word [edi], si
je 0x4fd6a3
add edi, 2
dec edx
jne 0x4fd696
jmp 0x4fd6d6
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x60], ecx
mov edx, ecx
mov ecx, edi
dec edx
je 0x4fd6ce
add ecx, 2
movzx ebx, word [ecx]
cmp bx, word [eax + 2]
lea eax, [eax + 2]
je 0x4fd6ad
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x60]
add edi, 2
sub edx, edi
jne 0x4fd694
jmp 0x4fd6d6
sub edi, dword [ebp - 0x2c]
cmp edi, 0xfffffffe
jne 0x4fd727
mov edx, dword [ebp - 0x28]
lea esi, [ebp - 0x12ec]
cmp edx, 8
jb 0x4fd56b
mov edi, dword [ebp - 0x30]
lea ecx, [edx + edx + 2]
cmp ecx, 0x1000
jb 0x4fd561
mov eax, dword [edi - 4]
add edi, 0xfffffffc
sub edi, eax
cmp edi, 0x20
jb 0x4fd558
mov dword [ebp - 0x10], 7
call fcn.006207e0
push dword [ebp - 0x34]
call fcn.005dcccf
add esp, 4
mov bl, 1
jmp 0x4fd76f
push dword [ebp - 0x34]
call fcn.005dcccf
add esp, 4
mov ecx, dword [ebp - 0x6c]
cmp ecx, 8
jb 0x4fd76d
mov eax, dword [ebp - 0x80]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fd763
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd817
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
xor ebx, ebx
mov ecx, dword [ebp - 0x84]
cmp ecx, 8
jb 0x4fd7ac
mov eax, dword [ebp - 0x98]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fd7a2
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd80b
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
test bl, bl
je 0x4fd406
mov al, 1
mov bl, 1
mov dword [ebp - 0x24], eax
jmp 0x4fd413
mov dword [ebp - 0x10], 0
call fcn.006207e0
mov dword [ebp - 0x10], 1
call fcn.006207e0
call fcn.005e8c60
mov dword [ebp - 0x10], 5
call fcn.006207e0
mov dword [ebp - 0x10], 4
call fcn.006207e0
call fcn.005e8c60
mov dword [ebp - 0x10], 9
call fcn.006207e0
call fcn.005e9a00
mov dword [ebp - 0x10], 8
call fcn.006207e0
mov dword [ebp - 0x10], 6
call fcn.006207e0
nop word cs:[eax + eax]
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
mov ecx, dword [ebp - 0x12d8]
cmp ecx, 8
jb 0x4fd8f4
mov eax, dword [ebp - 0x12ec]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fd8ea
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd916
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x12dc], 0
mov dword [ebp - 0x12d8], 7
mov word [ebp - 0x12ec], 0
add esp, 0x14
pop ebp
ret
call fcn.006207e0
nop dword [eax + eax]
push ebp
sub esp, 0x14
add ebp, 0xc
mov ecx, dword [ebp - 0x6c]
cmp ecx, 8
jb 0x4fd95e
mov eax, dword [ebp - 0x80]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fd954
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd977
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], 0
add esp, 0x14
pop ebp
ret
call fcn.006207e0
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
mov ecx, dword [ebp - 0x84]
cmp ecx, 8
jb 0x4fd9c4
mov eax, dword [ebp - 0x98]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fd9ba
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fd9e6
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], 0
add esp, 0x14
pop ebp
ret
call fcn.006207e0
nop dword [eax + eax]
push ebp
sub esp, 0x14
add ebp, 0xc
mov ecx, dword [ebp - 0x38]
cmp ecx, 8
jb 0x4fda2e
mov eax, dword [ebp - 0x4c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fda24
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fda47
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], 0
add esp, 0x14
pop ebp
ret
call fcn.006207e0
nop dword [eax]
push ebp
sub esp, 0x14
add ebp, 0xc
mov ecx, dword [ebp - 0x2d8]
cmp ecx, 8
jb 0x4fda94
mov eax, dword [ebp - 0x2ec]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fda8a
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fdab6
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 7
mov word [ebp - 0x2ec], 0
add esp, 0x14
pop ebp
ret
call fcn.006207e0
nop dword [eax + eax]
push ebp
sub esp, 0x14
add ebp, 0xc
mov ecx, dword [ebp - 0x12d8]
cmp ecx, 8
jb 0x4fdb04
mov eax, dword [ebp - 0x12ec]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fdafa
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fdb09
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
add esp, 0x14
pop ebp
ret
call fcn.006207e0
nop
push ebp
sub esp, 0x14
add ebp, 0xc
mov ecx, dword [ebp - 0x12d8]
cmp ecx, 8
jb 0x4fdb54
mov eax, dword [ebp - 0x12ec]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x4fdb4a
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x4fdb76
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov dword [ebp - 0x12dc], 0
mov dword [ebp - 0x12d8], 7
mov word [ebp - 0x12ec], 0
add esp, 0x14
pop ebp
ret
call fcn.006207e0
nop dword [eax + eax]
push ebp
sub esp, 0x14
add ebp, 0xc
lea ecx, [ebp - 0x58]
call fcn.005d38f0
add esp, 0x14
pop ebp
ret