Function at 0x48181f
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x1039b568
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push ebx
push ebp
push esi
push edi
mov eax, dword [0x105623f8]
xor eax, esp
push eax
lea eax, [esp + 0x64]
mov dword fs:[0], eax
mov esi, ecx
cmp word [esi + 0x26], 0x10
je 0x48191f
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x48284a
mov dword [esp + 0x14], ebp
nop
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebp, ecx
jb 0x4818a7
call fcn.00776e71
mov edi, dword [esi + 0x38c]
add edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x74]
mov dx, word [edi + 0x14]
sub dx, word [edi + 0x10]
movzx eax, word [edi]
movzx ebx, dx
push ebx
push eax
call fcn.004ac95f
test bx, bx
jbe 0x4818ed
mov ecx, dword [edi + 0x14]
sub ecx, dword [edi + 0x10]
jne 0x4818dc
call fcn.00776e71
mov eax, dword [edi + 0x10]
mov ecx, dword [esp + 0x74]
movzx edx, bx
push edx
push eax
call fcn.004aafaf
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
add dword [esp + 0x14], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc ebp
add ecx, edx
cmp ebp, ecx
jb 0x48187f
jmp 0x48284a
mov ebx, dword [esp + 0x74]
push ebx
lea ecx, [esi + 0x24]
call fcn.0040685f
cmp byte [esi + 0x40514], 0
je 0x48194f
push 2
push 0x5e
mov ecx, ebx
call fcn.004ac95f
movzx edx, word [esi + 0x40516]
push edx
mov ecx, ebx
call fcn.004aad6f
push ebx
lea ecx, [esi + 0x34]
call fcn.004688ff
push 2
push 0xd
mov ecx, ebx
call fcn.004ac95f
movzx eax, word [esi + 0x5c]
push eax
mov ecx, ebx
call fcn.004aad6f
push 2
push 0xc
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x5e]
push ecx
mov ecx, ebx
call fcn.004aad6f
push 2
push 0xf
mov ecx, ebx
call fcn.004ac95f
movzx edx, word [esi + 0x60]
push edx
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x11
mov ecx, ebx
call fcn.004ac95f
movzx eax, word [esi + 0x62]
push eax
mov ecx, ebx
call fcn.004aad6f
push 8
push 0x10
mov ecx, ebx
call fcn.004ac95f
fld qword [esi + 0x68]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.004aad7f
push 2
push 0x5f
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x70]
push ecx
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x2a
mov ecx, ebx
call fcn.004ac95f
movzx edx, word [esi + 0x72]
push edx
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x2b
mov ecx, ebx
call fcn.004ac95f
movzx eax, word [esi + 0x74]
push eax
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x82
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x76]
push ecx
mov ecx, ebx
call fcn.004aad6f
push ebx
lea ecx, [esi + 0x78]
call fcn.004688af
push 4
push 0x225
mov ecx, ebx
call fcn.004ac95f
movzx edx, word [esi + 0x80]
push edx
mov ecx, ebx
call fcn.004aad6f
movzx eax, word [esi + 0x82]
push eax
mov ecx, ebx
call fcn.004aad6f
push 2
push 0x81
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x84]
push ecx
mov ecx, ebx
call fcn.004aad6f
mov edx, dword [esi + 0x1b0]
sub edx, dword [esi + 0x1ac]
lea ecx, [esi + 0x1a0]
test edx, 0xfffffff8
je 0x481aa0
push ebx
call fcn.0041b5df
mov eax, dword [esi + 0x198]
sub eax, dword [esi + 0x194]
lea ecx, [esi + 0x188]
test eax, 0xfffffff8
je 0x481abf
push ebx
call fcn.0042196f
push ebx
lea ecx, [esi + 0x88]
call fcn.00429d1f
cmp byte [esi + 0x1d4], 0
lea ecx, [esi + 0x1b8]
jne 0x481ae0
push ebx
call fcn.0042ee0f
push ebx
lea ecx, [esi + 0x130]
call fcn.0042a1ff
push 2
push 0x55
mov ecx, ebx
call fcn.004ac95f
movzx ecx, word [esi + 0x13c]
push ecx
mov ecx, ebx
call fcn.004aad6f
mov edi, dword [esi + 0x3a8]
cmp dword [esi + 0x3a4], edi
jbe 0x481b19
call fcn.00776e71
mov ebp, dword [esi + 0x3a4]
mov eax, dword [esi + 0x398]
mov dword [esp + 0x18], eax
cmp ebp, dword [esi + 0x3a8]
jbe 0x481b3a
call fcn.00776e71
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 0x398]
test eax, eax
je 0x481b48
cmp eax, ecx
je 0x481b4d
call fcn.00776e71
mov ecx, edi
sub ecx, ebp
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push edi
push ebp
call fcn.0047142f
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add esp, 0xc
xor edi, edi
add ecx, edx
je 0x481be6
xor ebp, ebp
nop
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x481bb4
call fcn.00776e71
mov ecx, dword [esi + 0x3a4]
push ebx
add ecx, ebp
call fcn.0040ba8f
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
inc edi
add ecx, edx
add ebp, 0xc
cmp edi, ecx
jb 0x481b8f
or eax, 0xffffffff
lea edi, [esi + 0x40950]
mov ecx, 0x101
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x481d0e
mov dword [esp + 0x74], edi
nop
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x481c44
call fcn.00776e71
mov edx, dword [esi + 0x3a4]
mov eax, dword [esp + 0x74]
movzx ebp, word [edx + eax]
lea ecx, [esi + ebp*4 + 0x40950]
mov dword [esp + 0x14], ecx
mov edi, edi
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x481c84
call fcn.00776e71
mov ecx, dword [esi + 0x3a4]
mov edx, dword [esp + 0x74]
movzx eax, word [ecx + edx + 2]
cmp ebp, eax
jg 0x481ce4
cmp ebp, 0x100
jg 0x481cd9
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x481cc4
call fcn.00776e71
mov edx, dword [esi + 0x3a4]
mov eax, dword [esp + 0x74]
movzx ecx, word [edx + eax + 6]
mov edx, dword [esp + 0x14]
mov dword [edx], ecx
inc ebp
add dword [esp + 0x14], 4
jmp 0x481c5f
mov ecx, dword [esi + 0x3a8]
sub ecx, dword [esi + 0x3a4]
add dword [esp + 0x74], 0xc
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
cmp edi, eax
jb 0x481c1f
cmp byte [esi + 0x1f8], 0
jne 0x481d62
mov cx, word [esi + 0x1f0]
sub cx, word [esi + 0x1ec]
movzx edx, word [esi + 0x1dc]
movzx edi, cx
push edi
push edx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x481d62
mov eax, dword [esi + 0x1f0]
sub eax, dword [esi + 0x1ec]
jne 0x481d50
call fcn.00776e71
mov edx, dword [esi + 0x1ec]
movzx ecx, di
push ecx
push edx
mov ecx, ebx
call fcn.004aafaf
cmp byte [esi + 0x218], 0
jne 0x481db6
mov ax, word [esi + 0x210]
sub ax, word [esi + 0x20c]
movzx ecx, word [esi + 0x1fc]
movzx edi, ax
push edi
push ecx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x481db6
mov edx, dword [esi + 0x210]
sub edx, dword [esi + 0x20c]
jne 0x481da4
call fcn.00776e71
mov ecx, dword [esi + 0x20c]
movzx eax, di
push eax
push ecx
mov ecx, ebx
call fcn.004aafaf
cmp byte [esi + 0x238], 0
jne 0x481e0a
mov dx, word [esi + 0x230]
sub dx, word [esi + 0x22c]
movzx eax, word [esi + 0x21c]
movzx edi, dx
push edi
push eax
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x481e0a
mov ecx, dword [esi + 0x230]
sub ecx, dword [esi + 0x22c]
jne 0x481df8
call fcn.00776e71
mov eax, dword [esi + 0x22c]
movzx edx, di
push edx
push eax
mov ecx, ebx
call fcn.004aafaf
mov ecx, esi
call fcn.00469a8f
push ebx
lea ecx, [esi + 0x140]
call fcn.0040c74f
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x78]
push edx
lea ecx, [esp + 0x4c]
call fcn.004da27f
mov eax, dword [esi + 0x300]
sub eax, dword [esi + 0x2fc]
lea edi, [esi + 0x2f0]
xor ebp, ebp
sar eax, 4
mov dword [esp + 0x6c], ebp
test eax, eax
jbe 0x481e9a
mov dword [esp + 0x74], ebp
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
sar ecx, 4
cmp ebp, ecx
jb 0x481e65
call fcn.00776e71
mov edx, dword [edi + 0xc]
mov eax, dword [esp + 0x74]
movzx ecx, word [edx + eax]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], ecx
push eax
lea ecx, [esp + 0x4c]
call fcn.00473d9f
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
add dword [esp + 0x74], 0x10
inc ebp
sar ecx, 4
cmp ebp, ecx
jb 0x481e53
lea ecx, [esp + 0x34]
call fcn.0041f4af
xor eax, eax
mov dword [esp + 0x74], eax
lea ebx, [ebx]
movzx eax, ax
push eax
lea ecx, [esi + 0x4f8]
call fcn.004a07ef
test al, al
je 0x481f32
mov edx, dword [esp + 0x74]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x1c], edx
call fcn.0046b51f
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
xor ebp, ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
test eax, eax
je 0x481ef9
cmp eax, dword [esp + 0x2c]
je 0x481efe
call fcn.00776e71
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x30]
je 0x481f18
lea ecx, [esp + 0x18]
inc ebp
call fcn.00468daf
mov eax, dword [esp + 0x18]
jmp 0x481eef
test ebp, ebp
jne 0x481f32
movzx eax, word [esp + 0x74]
lea ecx, [esp + 0x34]
push ecx
mov ecx, edi
mov word [esp + 0x38], ax
call fcn.0047909f
mov eax, dword [esp + 0x74]
inc eax
mov dword [esp + 0x74], eax
cmp eax, 0x10000
jb 0x481eaf
mov edx, dword [edi + 0x10]
sub edx, dword [edi + 0xc]
xor ebp, ebp
sar edx, 4
test edx, edx
jbe 0x48203d
mov dword [esp + 0x74], ebp
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
sar eax, 4
cmp ebp, eax
jb 0x481f6f
call fcn.00776e71
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, dword [edi + 0xc]
add eax, dword [esp + 0x74]
sar ecx, 4
mov dword [esp + 0x14], eax
cmp ebp, ecx
jb 0x481f8c
call fcn.00776e71
mov eax, dword [edi + 0xc]
add eax, dword [esp + 0x74]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x18], eax
movzx eax, word [edx]
push eax
lea ecx, [esi + 0x4f8]
call fcn.004a080f
mov ecx, dword [esp + 0x18]
mov word [ecx + 2], ax
mov edx, dword [edi + 0x10]
sub edx, dword [edi + 0xc]
sar edx, 4
cmp ebp, edx
jb 0x481fc4
call fcn.00776e71
mov eax, dword [edi + 0xc]
add eax, dword [esp + 0x74]
mov dword [esp + 0x18], eax
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
sar eax, 4
cmp ebp, eax
jb 0x481fe1
call fcn.00776e71
mov ecx, dword [esp + 0x18]
movzx edx, word [ecx]
mov eax, dword [edi + 0xc]
add eax, dword [esp + 0x74]
push edx
lea ecx, [esi + 0x4f8]
mov dword [esp + 0x18], eax
call fcn.004a083f
mov ecx, dword [esp + 0x14]
mov word [ecx + 4], ax
mov edx, dword [edi + 0x10]
sub edx, dword [edi + 0xc]
sar edx, 4
cmp ebp, edx
jb 0x482019
call fcn.00776e71
mov ecx, dword [edi + 0xc]
add ecx, dword [esp + 0x74]
push ebx
call fcn.0041f42f
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
add dword [esp + 0x74], 0x10
inc ebp
sar eax, 4
cmp ebp, eax
jb 0x481f5d
xor edi, edi
mov dword [esp + 0x74], edi
movzx eax, di
push eax
lea ecx, [esi + 0x4f8]
call fcn.004a07ef
test al, al
je 0x48224f
xor ebp, ebp
lea ecx, [ecx]
movzx eax, di
push ebp
push eax
lea ecx, [esi + 0x4f8]
call fcn.004a09df
mov eax, dword [eax]
test al, 1
je 0x48223e
mov ecx, eax
shr ecx, 1
and ecx, 7
dec ecx
cmp ecx, 6
ja 0x48223e
jmp dword [ecx*4 + 0x1007ebf4]
mov edi, dword [esp + 0x74]
inc ebp
cmp ebp, 0x100
jb 0x48205f
inc edi
mov dword [esp + 0x74], edi
cmp edi, 0x10000
jb 0x482043
cmp byte [esi + 0x258], 0
jne 0x4822b4
mov cx, word [esi + 0x250]
sub cx, word [esi + 0x24c]
movzx edx, word [esi + 0x23c]
movzx edi, cx
push edi
push edx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x4822b4
mov eax, dword [esi + 0x250]
sub eax, dword [esi + 0x24c]
jne 0x4822a2
call fcn.00776e71
mov edx, dword [esi + 0x24c]
movzx ecx, di
push ecx
push edx
mov ecx, ebx
call fcn.004aafaf
push ebx
lea ecx, [esi + 0x474]
call fcn.004bd8ef
mov ecx, dword [esi + 0x4e4]
sub ecx, dword [esi + 0x4e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x48233c
xor ebp, ebp
mov ecx, dword [esi + 0x4e4]
sub ecx, dword [esi + 0x4e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x482309
call fcn.00776e71
mov ecx, dword [esi + 0x4e0]
push ebx
add ecx, ebp
call fcn.0041d57f
mov ecx, dword [esi + 0x4e4]
sub ecx, dword [esi + 0x4e0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x30
cmp edi, eax
jb 0x4822e3
cmp byte [esi + 0x278], 0
jne 0x482390
mov cx, word [esi + 0x270]
sub cx, word [esi + 0x26c]
movzx edx, word [esi + 0x25c]
movzx edi, cx
push edi
push edx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x482390
mov eax, dword [esi + 0x270]
sub eax, dword [esi + 0x26c]
jne 0x48237e
call fcn.00776e71
mov edx, dword [esi + 0x26c]
movzx ecx, di
push ecx
push edx
mov ecx, ebx
call fcn.004aafaf
push ebx
lea ecx, [esi + 0x150]
call fcn.00421c8f
cmp byte [esi + 0x298], 0
jne 0x4823f0
mov ax, word [esi + 0x290]
sub ax, word [esi + 0x28c]
movzx ecx, word [esi + 0x27c]
movzx edi, ax
push edi
push ecx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x4823f0
mov edx, dword [esi + 0x290]
sub edx, dword [esi + 0x28c]
jne 0x4823de
call fcn.00776e71
mov ecx, dword [esi + 0x28c]
movzx eax, di
push eax
push ecx
mov ecx, ebx
call fcn.004aafaf
lea edi, [esi + 0x184]
mov ecx, edi
call fcn.0041fdef
cmp eax, 0x64
je 0x48240a
push ebx
mov ecx, edi
call fcn.0041fd8f
push ebx
lea ecx, [esi + 0x4ec]
call fcn.0041e80f
mov ecx, dword [esi + 0x3f0]
sub ecx, dword [esi + 0x3ec]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x482498
xor ebp, ebp
lea ebx, [ebx]
mov ecx, dword [esi + 0x3f0]
sub ecx, dword [esi + 0x3ec]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x482465
call fcn.00776e71
mov ecx, dword [esi + 0x3ec]
push ebx
add ecx, ebp
call fcn.0041febf
mov ecx, dword [esi + 0x3f0]
sub ecx, dword [esi + 0x3ec]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x24
cmp edi, eax
jb 0x48243f
push ebx
lea ecx, [esi + 0x29c]
call fcn.0040c9df
mov ecx, dword [esi + 0x3c0]
sub ecx, dword [esi + 0x3bc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
xor edi, edi
add ecx, edx
je 0x48252c
xor ebp, ebp
lea ebx, [ebx]
mov ecx, dword [esi + 0x3c0]
sub ecx, dword [esi + 0x3bc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4824f7
call fcn.00776e71
mov ecx, dword [esi + 0x3bc]
push ebx
add ecx, ebp
call fcn.0041c8af
mov ecx, dword [esi + 0x3c0]
sub ecx, dword [esi + 0x3bc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc edi
add ecx, edx
add ebp, 0x1c
cmp edi, ecx
jb 0x4824cf
push ebx
lea ecx, [esi + 0x164]
call fcn.0041e9ff
mov ecx, dword [esi + 0x438]
sub ecx, dword [esi + 0x434]
mov eax, 0x60606061
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x4825bb
xor ebp, ebp
lea esp, [esp]
mov ecx, dword [esi + 0x438]
sub ecx, dword [esi + 0x434]
mov eax, 0x60606061
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x482585
call fcn.00776e71
mov ecx, dword [esi + 0x434]
push ebx
add ecx, ebp
call fcn.0041aeaf
mov ecx, dword [esi + 0x438]
sub ecx, dword [esi + 0x434]
mov eax, 0x60606061
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x154
cmp edi, eax
jb 0x48255f
cmp byte [esi + 0x2bc], 0
jne 0x48260f
mov cx, word [esi + 0x2b4]
sub cx, word [esi + 0x2b0]
movzx edx, word [esi + 0x2a0]
movzx edi, cx
push edi
push edx
mov ecx, ebx
call fcn.004ac95f
test di, di
jbe 0x48260f
mov eax, dword [esi + 0x2b4]
sub eax, dword [esi + 0x2b0]
jne 0x4825fd
call fcn.00776e71
mov edx, dword [esi + 0x2b0]
movzx ecx, di
push ecx
push edx
mov ecx, ebx
call fcn.004aafaf
push ebx
lea ecx, [esi + 0x2c0]
call fcn.00420c4f
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x482724
mov dword [esp + 0x74], ebp
jmp 0x48264f
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebp, ecx
jb 0x482677
call fcn.00776e71
mov edx, dword [esi + 0x38c]
mov eax, dword [esp + 0x74]
cmp word [eax + edx], 0x4d
je 0x4826f7
mov ecx, dword [esi + 0x390]
sub ecx, edx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebp, ecx
jb 0x4826ac
call fcn.00776e71
mov edi, dword [esi + 0x38c]
add edi, dword [esp + 0x74]
mov ecx, ebx
mov dx, word [edi + 0x14]
sub dx, word [edi + 0x10]
movzx eax, dx
push eax
mov dword [esp + 0x18], eax
movzx eax, word [edi]
push eax
call fcn.004ac95f
cmp word [esp + 0x14], 0
jbe 0x4826f7
mov ecx, dword [edi + 0x14]
sub ecx, dword [edi + 0x10]
jne 0x4826e6
call fcn.00776e71
movzx edx, word [esp + 0x14]
mov eax, dword [edi + 0x10]
push edx
push eax
mov ecx, ebx
call fcn.004aafaf
mov ecx, dword [esi + 0x390]
sub ecx, dword [esi + 0x38c]
add dword [esp + 0x74], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc ebp
add ecx, edx
cmp ebp, ecx
jb 0x48264f
mov ecx, dword [esi + 0x468]
sub ecx, dword [esi + 0x464]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x4827a8
xor ebp, ebp
jmp 0x48274f
mov ecx, dword [esi + 0x468]
sub ecx, dword [esi + 0x464]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x482775
call fcn.00776e71
mov ecx, dword [esi + 0x464]
push ebx
add ecx, ebp
call fcn.00427cef
mov ecx, dword [esi + 0x468]
sub ecx, dword [esi + 0x464]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x44
cmp edi, eax
jb 0x48274f
mov ecx, dword [esi + 0x450]
sub ecx, dword [esi + 0x44c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
xor edi, edi
add ecx, edx
je 0x48282c
xor ebp, ebp
mov edi, edi
mov ecx, dword [esi + 0x450]
sub ecx, dword [esi + 0x44c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4827f7
call fcn.00776e71
mov ecx, dword [esi + 0x44c]
push ebx
add ecx, ebp
call fcn.00424dff
mov ecx, dword [esi + 0x450]
sub ecx, dword [esi + 0x44c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
inc edi
add ecx, edx
add ebp, 0x38
cmp edi, ecx
jb 0x4827cf
push 0
push 0
push 0xa
mov ecx, ebx
call fcn.004ac99f
lea ecx, [esp + 0x44]
mov dword [esp + 0x6c], 0xffffffff
call fcn.004dae0f
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret 4