Function at 0x500d81
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x605692
call fcn.005f870c
sub esp, 0x48
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x14], edi
mov ebx, dword [ebp + 8]
lea esi, [ebx + 8]
cmp dword [esi], 0x6a6728
je 0x500de9
push 0x641978
lea ecx, [ebp - 0x18]
call fcn.004046e0
push esi
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], edi
call fcn.00404920
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 1
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
lea ecx, [ebp - 0x1c]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0040479b
lea esi, [ebx + 0xc]
cmp dword [esi], edi
jbe 0x500e3f
push 0x64cf70
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x44]
mov dword [ebp - 4], 2
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 3
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 2
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0040479b
cmp dword [ebx + 0x1c], 0xff
je 0x500eec
mov eax, dword [ebx + 0x1c]
push 4
pop edi
cmp eax, 0xff
je 0x500e78
test eax, eax
je 0x500e78
push 0x641fc0
lea esi, [ebp - 0x54]
call fcn.0040b09e
mov esi, eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x14], 1
jmp 0x500e95
push 0x641fd0
lea esi, [ebp - 0x44]
call fcn.0040b09e
mov esi, eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x14], 2
push 0x64cf84
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 4], 6
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
lea ecx, [ebp - 0x18]
call fcn.0040479b
mov dword [ebp - 4], edi
test byte [ebp - 0x14], 2
je 0x500eda
and dword [ebp - 0x14], 0xfffffffd
lea ecx, [ebp - 0x44]
call fcn.00407363
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x14], 1
je 0x500eec
lea ecx, [ebp - 0x54]
call fcn.00407363
mov esi, 0x80000000
cmp dword [ebx + 0x20], esi
je 0x500f3b
push 0x64cf9c
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov dword [ebp - 4], 7
mov ecx, dword [ebx + 0x20]
mov eax, ecx
sub eax, esi
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043805d
mov ecx, eax
call fcn.00441141
or edi, 0xffffffff
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
jmp 0x500f3e
or edi, 0xffffffff
cmp dword [ebx + 0x24], 0
jbe 0x500f9c
push 0x64cfb4
lea ecx, [ebp - 0x18]
call fcn.004046e0
lea eax, [ebx + 0x24]
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 8
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 9
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0040479b
or edi, 0xffffffff
mov esi, 0x80000000
cmp dword [ebx + 0x34], esi
je 0x500fed
push 0x64cfcc
lea ecx, [ebp - 0x18]
call fcn.004046e0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebx + 0x34]
mov dword [ebp - 4], 0xa
call fcn.00446fa2
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0xb
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
lea ecx, [ebp - 0x1c]
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
cmp dword [ebx + 0x38], esi
je 0x50103b
push 0x64cfec
lea ecx, [ebp - 0x18]
call fcn.004046e0
lea eax, [ebx + 0x38]
lea esi, [ebp - 0x1c]
mov dword [ebp - 4], 0xc
call fcn.00447194
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0xd
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x3c]
cmp dword [esi], 0xff000000
je 0x501095
push 0x64d004
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov eax, esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0xe
call fcn.00447cac
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0xf
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe
call fcn.00407363
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x1b8]
cmp dword [esi], 0
je 0x5010eb
push 0x64d010
lea ecx, [ebp - 0x18]
call fcn.004046e0
lea eax, [ebp - 0x1c]
push eax
mov eax, esi
mov dword [ebp - 4], 0x10
call fcn.00459b92
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x11
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
lea ecx, [ebp - 0x1c]
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x40]
cmp dword [esi], 0
je 0x50113e
push 0x64d030
lea ecx, [ebp - 0x18]
call fcn.004046e0
lea eax, [ebp - 0x1c]
push eax
mov eax, esi
mov dword [ebp - 4], 0x12
call fcn.00459b92
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x13
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
lea ecx, [ebp - 0x1c]
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x60]
cmp dword [esi], 0xff
je 0x501191
push 0x64d048
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x1c]
mov dword [ebp - 4], 0x14
call fcn.004464a9
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x15
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x44]
cmp dword [esi], 0
jbe 0x5011e1
push 0x64d05c
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x1c]
mov dword [ebp - 4], 0x16
call fcn.0045b143
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x17
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
cmp dword [ebx + 0x54], edi
je 0x501252
push 0x64d074
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov dword [ebp - 4], 0x18
mov ecx, dword [ebx + 0x54]
mov eax, ecx
inc eax
neg eax
sbb eax, eax
and eax, ecx
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
test eax, eax
jge 0x501216
fadd qword [0x650158]
push ecx
push ecx
lea eax, [ebp - 0x1c]
fstp qword [esp]
push eax
call fcn.00459c19
add esp, 0xc
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x19
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
lea ecx, [ebp - 0x1c]
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x5c]
cmp dword [esi], 0x80000000
je 0x5012a5
push 0x64d098
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x1c]
mov dword [ebp - 4], 0x1a
call fcn.004462a1
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x58]
cmp dword [esi], 0xff
je 0x5012f8
push 0x64d0b8
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x1c]
mov dword [ebp - 4], 0x1c
call fcn.00446e19
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x1d
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x64]
cmp dword [esi], 0xff000000
je 0x501352
push 0x64d0e0
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov eax, esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x1e
call fcn.00447cac
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x1f
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x1e
call fcn.00407363
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x74]
cmp dword [esi], 0
jne 0x50135f
cmp dword [esi + 4], edi
jne 0x5013a7
push 0x64d104
lea ecx, [ebp - 0x18]
call fcn.004046e0
push esi
lea esi, [ebp - 0x1c]
mov dword [ebp - 4], 0x20
call fcn.004fd428
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x21
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x7c]
cmp dword [esi], 0x80000000
je 0x5013fa
push 0x64d128
lea ecx, [ebp - 0x18]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x1c]
mov dword [ebp - 4], 0x22
call fcn.00446d4e
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x23
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x80]
cmp dword [esi], 0x80000000
je 0x501453
push 0x64d154
lea ecx, [ebp - 0x18]
call fcn.004046e0
lea eax, [ebp - 0x1c]
push esi
push eax
mov dword [ebp - 4], 0x24
call fcn.004457f9
pop ecx
pop ecx
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x25
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
lea ecx, [ebp - 0x1c]
call fcn.0040479b
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], edi
call fcn.0040479b
lea eax, [ebx + 0x84]
cmp dword [eax], 0
mov dword [ebp - 0x1c], eax
jbe 0x50152b
lea esi, [ebx + 0x94]
cmp dword [esi], 0
jbe 0x50152b
push 0
push 0x639c34
lea ecx, [ebp - 0x14]
call fcn.004048b5
push 0x64d178
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x26
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
call fcn.0045b143
mov edi, eax
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x1c]
lea esi, [ebp - 0x28]
call fcn.0045b143
lea ecx, [ebp - 0x24]
push ecx
lea ebx, [ebp - 0x14]
mov esi, eax
mov byte [ebp - 4], 0x29
call fcn.00404b83
lea ecx, [ebp - 0x20]
push ecx
mov ebx, edi
mov esi, eax
mov byte [ebp - 4], 0x2a
call fcn.00404b83
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x2b
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
lea ecx, [ebp - 0x20]
call fcn.0040479b
lea ecx, [ebp - 0x24]
call fcn.0040479b
lea ecx, [ebp - 0x28]
call fcn.0040479b
lea ecx, [ebp - 0x2c]
call fcn.0040479b
lea ecx, [ebp - 0x18]
call fcn.0040479b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040479b
mov ebx, dword [ebp + 8]
or edi, 0xffffffff
lea esi, [ebx + 0xa4]
cmp dword [esi], 0
jbe 0x501588
push 0x64d1a0
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x2c
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x2d
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x2c
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
or edi, 0xffffffff
lea esi, [ebx + 0xb4]
cmp dword [esi], 0
jbe 0x5015e5
push 0x64d1c4
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x2e
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x2f
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x2e
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
or edi, 0xffffffff
lea esi, [ebx + 0xc4]
cmp dword [esi], 0
jbe 0x501642
push 0x64d1e8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x30
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x31
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x30
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
or edi, 0xffffffff
lea esi, [ebx + 0xd4]
cmp dword [esi], 0
jbe 0x50169f
push 0x64d210
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x32
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x33
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x32
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
or edi, 0xffffffff
lea esi, [ebx + 0xe4]
cmp dword [esi], 0xff000000
je 0x5016fc
push 0x64d238
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x34
call fcn.00447cac
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x35
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x34
call fcn.00407363
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0xe8]
cmp dword [esi], 0xff000000
je 0x501759
push 0x64d25c
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x36
call fcn.00447cac
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x37
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x36
call fcn.00407363
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0xec]
cmp dword [esi], 0xff000000
je 0x5017b6
push 0x64d280
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x38
call fcn.00447cac
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x39
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x38
call fcn.00407363
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0xf0]
cmp dword [esi], 0xff000000
je 0x501813
push 0x64d2a8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x3a
call fcn.00447cac
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x3b
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x3a
call fcn.00407363
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0xf4]
cmp dword [esi], 0x80000000
je 0x501869
push 0x64d2d0
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x2c]
mov dword [ebp - 4], 0x3c
call fcn.00444516
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x3d
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0xf8]
cmp dword [esi], 0x80000000
je 0x5018bf
push 0x64d2f4
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x2c]
mov dword [ebp - 4], 0x3e
call fcn.00444516
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x3f
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0xfc]
cmp dword [esi], 0x80000000
je 0x501915
push 0x64d318
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x2c]
mov dword [ebp - 4], 0x40
call fcn.00444516
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x41
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x100]
cmp dword [esi], 0x80000000
je 0x50196b
push 0x64d340
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea esi, [ebp - 0x2c]
mov dword [ebp - 4], 0x42
call fcn.00444516
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x43
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
call fcn.0040479b
lea esi, [ebx + 0x104]
cmp dword [esi], 0
jbe 0x5019c5
push 0x64d368
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x44
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x45
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x44
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x114]
cmp dword [esi], 0
jbe 0x501a1f
push 0x64d384
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x46
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x47
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x46
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x124]
cmp dword [esi], 0
jbe 0x501a79
push 0x64d39c
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x48
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x49
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x48
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x134]
cmp dword [esi], 0
jbe 0x501ad3
push 0x64d3b8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x4a
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x4b
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x4a
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x144]
cmp dword [esi], 0
jbe 0x501b2d
push 0x64d3d8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x4c
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x4d
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x4c
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x154]
cmp dword [esi], 0
jbe 0x501b87
push 0x64d3f0
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x4e
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x4f
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x4e
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x164]
cmp dword [esi], 0
jbe 0x501be1
push 0x64d408
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x50
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x51
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x50
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x174]
cmp dword [esi], 0
jbe 0x501c3b
push 0x64d424
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x52
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x53
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x52
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x184]
cmp dword [esi], 0
jbe 0x501c95
push 0x6416f8
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x54
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x55
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x54
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x194]
cmp dword [esi], 0
jbe 0x501cef
push 0x641704
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x56
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x57
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x56
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
lea esi, [ebx + 0x1a4]
cmp dword [esi], 0
jbe 0x501d49
push 0x64d440
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, esi
lea edi, [ebp - 0x54]
mov dword [ebp - 4], 0x58
call fcn.00445e92
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x59
call fcn.0043805d
push esi
mov ecx, eax
call fcn.004072d5
mov ecx, edi
mov byte [ebp - 4], 0x58
call fcn.00407363
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040479b
add ebx, 0x1b4
cmp dword [ebx], 0x80000000
je 0x501d9c
push 0x646d78
lea ecx, [ebp + 8]
call fcn.004046e0
mov eax, ebx
lea esi, [ebp - 0x30]
mov dword [ebp - 4], 0x5a
call fcn.00446c36
mov ecx, dword [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
mov byte [ebp - 4], 0x5b
call fcn.0043805d
mov ecx, eax
call fcn.0042c705
mov ecx, esi
call fcn.0040479b
lea ecx, [ebp + 8]
call fcn.0040479b
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 8