Function at 0x477910
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x60
push ebx
push ebp
push esi
push edi
mov edi, eax
mov eax, dword [esp + 0x74]
mov esi, dword [eax + 0x134]
xor ebx, ebx
cmp esi, ebx
je 0x479397
mov ebp, dword [eax + 0x270]
cmp ebp, ebx
je 0x479397
cmp edi, ebx
je 0x479397
cmp dword [esp + 0x94], ebx
je 0x479397
add ebp, 0x7c
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00469660
push edi
push 0x54ced4
lea edi, [esp + 0x38]
call fcn.004892f0
add esp, 8
test eax, eax
je 0x477983
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x84]
mov dword [ecx], eax
xor eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov eax, ebp
mov dword [esp + 0x94], ebx
call fcn.00488e80
test eax, eax
jle 0x4781a4
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x4779bb
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x94], eax
jb 0x4779c0
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov esi, dword [esp + 0x94]
mov eax, dword [edx + esi*4]
mov ecx, dword [esp + 0x74]
mov ebx, dword [eax]
push ecx
call fcn.00476960
mov ecx, dword [ebp + 4]
test ecx, ecx
mov dword [esp + 0x18], eax
je 0x4779f0
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x4779f5
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov esi, dword [ecx + esi*4]
test esi, esi
je 0x478184
movzx eax, byte [esi]
and eax, 1
xor edx, edx
test eax, eax
sete dl
mov eax, edx
test eax, eax
je 0x478184
mov edx, dword [esp + 0x74]
mov edx, dword [edx + 0x270]
xor eax, eax
cmp dword [edx + 0x90], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], eax
je 0x477ada
cmp ecx, eax
je 0x477a4f
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x94], eax
jb 0x477a54
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ebx, dword [esp + 0x94]
mov edx, dword [esp + 0x74]
mov ecx, dword [eax + ebx*4]
mov esi, dword [edx + 0x134]
mov edi, dword [ecx + 8]
call fcn.00469660
mov ecx, dword [esp + 0x18]
push ecx
push edi
lea edi, [esp + 0x38]
call fcn.004892f0
mov ecx, dword [ebp + 4]
add esp, 8
test ecx, ecx
je 0x477a98
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477a9d
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + ebx*4]
mov ecx, dword [esp + 0x7c]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x80]
mov edx, dword [edx]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
add eax, 0xc
mov dword [eax], ecx
mov dword [eax + 4], edx
add ecx, esi
add edx, edi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], edi
jmp 0x477b23
cmp ecx, eax
je 0x477aef
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x94], eax
jb 0x477af4
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [esp + 0x94]
mov eax, dword [ecx + edx*4]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov edx, dword [edx]
mov ecx, dword [ecx]
mov ebx, dword [esp + 0x94]
add eax, 0xc
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov esi, dword [esp + 0x74]
mov dword [eax], ecx
mov eax, dword [esi + 0x270]
cmp dword [eax + 0x30], 2
jne 0x477cc9
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x477b4c
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477b51
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + ebx*4]
add eax, 0x3c
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov eax, dword [esi + 0x134]
mov ecx, dword [eax + 0x58]
mov eax, dword [ecx + 0x3c]
test eax, eax
mov dword [esp + 0x20], eax
je 0x477cc9
mov edi, ebx
mov esi, ebp
call fcn.00472050
mov edx, dword [eax]
cmp dword [edx + 0x38], 0
je 0x477cc9
call fcn.00472050
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov edi, dword [esp + 0x20]
call fcn.00497160
mov esi, eax
test esi, esi
je 0x477cc9
mov edx, dword [esi]
xor eax, eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov edx, dword [esi]
mov dword [esp + 0x20], eax
mov eax, dword [edx + 4]
mov ecx, esi
call eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x74]
mov esi, dword [edx + 0x134]
mov edi, eax
push ecx
push edi
call fcn.00468840
mov ecx, dword [esp + 0x8c]
add eax, dword [ecx]
lea esi, [esp + 0x68]
push eax
push edi
call fcn.0046e4e0
add esp, 0x10
test eax, eax
je 0x477cc9
mov edx, dword [esp + 0x7c]
mov ecx, dword [edx]
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0x6c]
xor eax, eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
lea eax, [ecx + 3]
mov dword [esp + 0x40], eax
mov eax, dword [edx]
mov edx, dword [esp + 0x84]
mov edx, dword [edx]
sub ecx, dword [esp + 0x60]
lea esi, [edx + eax*2]
mov eax, esi
sub eax, edi
add eax, dword [esp + 0x64]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x68]
lea ecx, [ecx + eax + 3]
mov eax, esi
sub eax, dword [esp + 0x64]
mov dword [esp + 0x48], ecx
add eax, edi
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x4c], eax
mov eax, ecx
sub eax, dword [esp + 0x40]
je 0x477cc9
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x44]
je 0x477cc9
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x7c]
add edx, 3
mov dword [ecx], edx
mov edx, dword [esp + 0x14]
lea eax, [edx + eax + 6]
mov edi, ebx
mov esi, ebp
mov dword [esp + 0x14], eax
call fcn.00472050
mov eax, dword [eax]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
add eax, 0x3c
mov dword [eax], ecx
mov ecx, dword [esp + 0x48]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x477cdc
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477ce1
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
test byte [eax], 8
je 0x477d41
test ecx, ecx
je 0x477cfc
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477d01
call fcn.00500ad0
mov esi, dword [ebp + 4]
test esi, esi
je 0x477d14
mov eax, dword [ebp + 8]
sub eax, esi
sar eax, 2
cmp ebx, eax
jb 0x477d19
call fcn.00500ad0
mov edx, dword [esp + 0x84]
mov eax, dword [edx]
mov edx, dword [ebp + 4]
mov ecx, dword [esi + ebx*4]
push eax
mov eax, dword [edx + ebx*4]
mov eax, dword [eax + 4]
lea edx, [esp + 0x34]
push edx
mov edx, dword [ecx]
mov ecx, dword [esp + 0x7c]
call fcn.004774a0
jmp 0x477d80
test ecx, ecx
je 0x477d51
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477d56
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov edx, dword [esp + 0x74]
mov ecx, dword [eax + ebx*4]
mov esi, dword [edx + 0x134]
mov edi, dword [ecx + 4]
call fcn.00469660
mov ecx, dword [esp + 0x18]
push ecx
push edi
lea edi, [esp + 0x38]
call fcn.004892f0
add esp, 8
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x477d93
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477d98
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + ebx*4]
mov ecx, dword [esp + 0x7c]
mov ecx, dword [ecx]
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
mov edx, dword [edx]
add dword [esp + 0x14], esi
add eax, 0x1c
mov dword [eax], ecx
add ecx, esi
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], edx
add edx, ecx
mov dword [eax + 0xc], edx
mov eax, dword [ebp + 4]
test eax, eax
je 0x477dde
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x477de3
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + ebx*4]
test dword [edx], 0x2000
je 0x477e03
mov eax, dword [esp + 0x74]
add eax, 0x2ec
mov dword [esp + 0x18], eax
jmp 0x477e97
test ecx, ecx
je 0x477e13
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477e18
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + ebx*4]
test dword [edx], 0x40000
je 0x477e35
mov eax, dword [esp + 0x74]
add eax, 0x32c
mov dword [esp + 0x18], eax
jmp 0x477e97
mov edi, ebx
mov esi, ebp
call fcn.00472050
mov eax, dword [eax]
test dword [eax], 0x1000000
jne 0x477e89
call fcn.00472050
mov eax, dword [eax]
test dword [eax], 0x2000000
jne 0x477e89
call fcn.00472050
mov eax, dword [eax]
test dword [eax], 0x400000
jne 0x477e79
call fcn.00472050
mov eax, dword [eax]
test dword [eax], 0x100
je 0x4780d7
mov ecx, dword [esp + 0x74]
add ecx, 0x36c
mov dword [esp + 0x18], ecx
jmp 0x477e97
mov edx, dword [esp + 0x74]
add edx, 0x3ec
mov dword [esp + 0x18], edx
cmp dword [esp + 0x18], 0
je 0x4780d7
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x477eb5
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477eba
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov edx, dword [eax + 0x1c]
add eax, 0x1c
test ecx, ecx
mov dword [esp + 0x50], edx
mov edx, dword [eax + 4]
mov dword [esp + 0x54], edx
mov edx, dword [eax + 8]
mov dword [esp + 0x58], edx
mov eax, dword [eax + 0xc]
mov dword [esp + 0x5c], eax
je 0x477eef
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477ef4
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + ebx*4]
test byte [edx], 8
je 0x477f6b
mov edi, ebx
mov esi, ebp
call fcn.00472050
mov eax, dword [eax]
add eax, 4
mov eax, dword [eax]
mov dword [esp + 0x24], eax
call fcn.00472050
mov dword [esp + 0x20], eax
call fcn.00472050
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov ecx, dword [edx]
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [eax]
mov eax, dword [esp + 0x78]
push edx
add ecx, 0x1c
lea edx, [esp + 0x58]
call fcn.00477850
test eax, eax
jne 0x477f6b
call fcn.00472050
mov eax, dword [eax]
mov ecx, dword [eax + 0x1c]
add eax, 0x1c
mov dword [esp + 0x50], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x54], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x58], ecx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x5c], edx
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x477f7e
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477f83
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea eax, [ecx + ebx*4]
mov dword [esp + 0x24], eax
je 0x477f9d
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477fa2
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov esi, dword [esp + 0x58]
sub esi, dword [esp + 0x50]
test eax, eax
lea ecx, [eax + ebx*4]
mov dword [esp + 0x20], ecx
je 0x477fc4
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x477fc9
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea edx, [ecx + ebx*4]
mov dword [esp + 0x28], edx
je 0x477fe3
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x477fe8
call fcn.00500ad0
mov eax, dword [esp + 0x58]
sub eax, dword [esp + 0x50]
mov edi, dword [ebp + 4]
test edi, edi
mov dword [esp + 0x2c], eax
je 0x478007
mov eax, dword [ebp + 8]
sub eax, edi
sar eax, 2
cmp ebx, eax
jb 0x47800c
call fcn.00500ad0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x20]
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov edi, dword [edi + ebx*4]
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov edi, dword [edi + 0x1c]
add edi, dword [esp + 0x2c]
add ecx, esi
mov esi, dword [eax + 0x20]
mov eax, dword [ebp + 4]
mov eax, dword [eax + ebx*4]
add eax, 0x4c
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x18]
mov dword [eax], edi
mov dword [eax + 4], esi
mov dword [eax + 0xc], edx
xor eax, eax
cmp dword [ecx + 0x10], eax
mov dword [esp + 0x3c], eax
je 0x4780c2
mov ecx, dword [ecx + 0x10]
mov eax, dword [ecx + 0xc]
test eax, eax
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
jle 0x4780c2
test ecx, ecx
jle 0x4780c2
mov edi, ebx
mov esi, ebp
call fcn.00472050
mov eax, dword [eax]
add dword [eax + 0x4c], 1
call fcn.00472050
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
add eax, dword [esp + 0x38]
mov dword [esp + 0x2c], eax
call fcn.00472050
mov edx, dword [eax]
mov eax, dword [esp + 0x2c]
mov dword [edx + 0x54], eax
call fcn.00472050
mov ecx, dword [eax]
mov eax, dword [ecx + 0x50]
add eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
call fcn.00472050
mov edx, dword [eax]
mov eax, dword [esp + 0x2c]
mov dword [edx + 0x58], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
lea edx, [ecx + eax + 1]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x7c]
add dword [eax], ecx
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0x88]
mov eax, dword [ecx]
mov edx, dword [esp + 0x14]
cmp eax, edx
jg 0x4780ea
mov eax, edx
mov dword [ecx], eax
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x4780ff
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478104
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + ebx*4]
mov edi, dword [esp + 0x74]
mov dword [eax + 0x2c], 1
mov esi, dword [edi + 0x134]
call fcn.004698f0
test eax, eax
jne 0x47814d
mov esi, dword [edi + 0x134]
call fcn.004687f0
mov edx, dword [esp + 0x90]
mov ecx, eax
add ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x7c]
add dword [eax], ecx
mov eax, dword [esp + 0x80]
mov dword [eax], edx
jmp 0x478184
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
cmp edi, eax
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x7c]
mov dword [edx], ecx
jg 0x478168
mov edi, eax
mov eax, dword [esp + 0x74]
mov esi, dword [eax + 0x134]
call fcn.00468840
mov ecx, eax
mov eax, dword [esp + 0x80]
add ecx, edi
add dword [eax], ecx
mov esi, dword [esp + 0x94]
add esi, 1
mov eax, ebp
mov dword [esp + 0x94], esi
call fcn.00488e80
cmp esi, eax
jl 0x4779a3
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x74]
mov esi, dword [ebx + 0x134]
xor eax, eax
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x84], eax
call fcn.004698f0
test eax, eax
jne 0x478584
xor edi, edi
mov eax, dword [ebx + 0x270]
mov ecx, dword [eax + 0x80]
add eax, 0x7c
test ecx, ecx
jne 0x4781f7
xor eax, eax
jmp 0x4781ff
mov eax, dword [eax + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jge 0x478584
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x47821a
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x47821f
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x478578
movzx ecx, byte [ecx]
and ecx, 1
xor edx, edx
test ecx, ecx
sete dl
mov ecx, edx
test ecx, ecx
je 0x478578
cmp dword [esp + 0x84], 0
mov ecx, dword [ebx + 0x270]
jne 0x47838b
cmp dword [ecx + 0x90], 0
mov dword [esp + 0x84], 1
je 0x4782c8
test eax, eax
je 0x47827c
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp edi, ecx
jb 0x478281
call fcn.00500ad0
mov esi, dword [ebp + 4]
test esi, esi
je 0x478294
mov eax, dword [ebp + 8]
sub eax, esi
sar eax, 2
cmp edi, eax
jb 0x478299
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov ecx, dword [esi + edi*4]
mov eax, dword [edx + edi*4]
mov edx, dword [ecx + 0x10]
cmp edx, dword [eax + 0x20]
mov esi, ebp
jge 0x4782bf
call fcn.00472050
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x80], ecx
jmp 0x4782ed
call fcn.00472050
mov edx, dword [eax]
jmp 0x4782e3
test eax, eax
je 0x4782d8
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp edi, ecx
jb 0x4782dd
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + edi*4]
mov eax, dword [edx + 0x20]
mov dword [esp + 0x80], eax
mov ecx, dword [ebx + 0x270]
cmp dword [ecx + 0x90], 0
mov ecx, dword [ebp + 4]
je 0x47835d
test ecx, ecx
je 0x47830f
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x478314
call fcn.00500ad0
mov esi, dword [ebp + 4]
test esi, esi
je 0x478327
mov eax, dword [ebp + 8]
sub eax, esi
sar eax, 2
cmp edi, eax
jb 0x47832c
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov ecx, dword [esi + edi*4]
mov eax, dword [edx + edi*4]
mov edx, dword [ecx + 0x18]
cmp edx, dword [eax + 0x28]
mov esi, ebp
jle 0x47856a
call fcn.00472050
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x7c], ecx
add edi, 1
jmp 0x4781e0
test ecx, ecx
je 0x47836d
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x478372
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + edi*4]
mov eax, dword [edx + 0x28]
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x7c], eax
add edi, 1
jmp 0x4781e0
cmp dword [ecx + 0x90], 0
je 0x4783ec
test eax, eax
je 0x4783a4
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp edi, ecx
jb 0x4783a9
call fcn.00500ad0
mov esi, dword [ebp + 4]
test esi, esi
je 0x4783bc
mov eax, dword [ebp + 8]
sub eax, esi
sar eax, 2
cmp edi, eax
jb 0x4783c1
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov ecx, dword [esi + edi*4]
mov eax, dword [edx + edi*4]
mov edx, dword [ecx + 0x10]
cmp edx, dword [eax + 0x20]
mov esi, ebp
jge 0x4783e0
call fcn.00472050
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
jmp 0x47840a
call fcn.00472050
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
jmp 0x47840a
test eax, eax
je 0x4783fc
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp edi, ecx
jb 0x478401
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + edi*4]
mov eax, dword [eax + 0x20]
cmp dword [esp + 0x80], eax
jl 0x478477
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x270]
cmp dword [edx + 0x90], 0
mov esi, ebp
je 0x478466
call fcn.00472050
mov ebx, dword [eax]
add ebx, 0x20
call fcn.00472050
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
cmp ecx, dword [ebx]
jge 0x478453
call fcn.00472050
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
mov dword [esp + 0x80], eax
jmp 0x478477
call fcn.00472050
mov ecx, dword [eax]
mov edx, dword [ecx + 0x20]
mov dword [esp + 0x80], edx
jmp 0x478477
call fcn.00472050
mov eax, dword [eax]
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x74]
mov eax, dword [edx + 0x270]
cmp dword [eax + 0x90], 0
mov ecx, dword [ebp + 4]
je 0x4784e5
test ecx, ecx
je 0x47849d
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x4784a2
call fcn.00500ad0
mov esi, dword [ebp + 4]
test esi, esi
je 0x4784b5
mov eax, dword [ebp + 8]
sub eax, esi
sar eax, 2
cmp edi, eax
jb 0x4784ba
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [esi + edi*4]
mov edx, dword [ecx + edi*4]
mov ecx, dword [eax + 0x18]
cmp ecx, dword [edx + 0x28]
mov esi, ebp
jle 0x4784d9
call fcn.00472050
mov edx, dword [eax]
mov eax, dword [edx + 0x18]
jmp 0x478503
call fcn.00472050
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
jmp 0x478503
test ecx, ecx
je 0x4784f5
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x4784fa
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + edi*4]
mov eax, dword [edx + 0x28]
cmp dword [esp + 0x7c], eax
jg 0x478578
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x270]
cmp dword [ecx + 0x90], 0
mov esi, ebp
je 0x47856a
call fcn.00472050
mov ebx, dword [eax]
add ebx, 0x28
call fcn.00472050
mov edx, dword [eax]
mov eax, dword [edx + 0x18]
cmp eax, dword [ebx]
jle 0x478550
call fcn.00472050
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x7c], edx
add edi, 1
jmp 0x4781e0
call fcn.00472050
mov eax, dword [eax]
mov ecx, dword [eax + 0x28]
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x7c], ecx
add edi, 1
jmp 0x4781e0
call fcn.00472050
mov edx, dword [eax]
mov eax, dword [edx + 0x28]
mov dword [esp + 0x7c], eax
mov ebx, dword [esp + 0x74]
add edi, 1
jmp 0x4781e0
xor ebx, ebx
mov eax, ebp
mov dword [esp + 0x94], ebx
mov dword [esp + 0x84], ebx
call fcn.00488e80
test eax, eax
jle 0x479169
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x4785b6
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4785bb
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
test ecx, ecx
je 0x479157
movzx esi, byte [ecx]
and esi, 1
xor ecx, ecx
test esi, esi
sete cl
test ecx, ecx
je 0x479157
mov edi, dword [esp + 0x74]
mov ecx, dword [edi + 0x270]
cmp dword [ecx + 0x90], 0
je 0x478671
test eax, eax
je 0x478605
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x47860a
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov esi, dword [eax + 0x18]
sub esi, dword [eax + 0x10]
add eax, 0xc
test ecx, ecx
je 0x478629
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x47862e
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov edx, dword [eax + 0x28]
sub edx, dword [eax + 0x20]
add eax, 0x1c
cmp esi, edx
jle 0x478661
test ecx, ecx
je 0x478651
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478656
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
add ecx, 0xc
jmp 0x47868f
test ecx, ecx
je 0x478681
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jmp 0x47867f
test eax, eax
je 0x478681
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478686
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
add ecx, 0x1c
mov esi, dword [ecx + 0xc]
sub esi, dword [ecx + 4]
mov ecx, dword [edi + 0x270]
cmp dword [ecx + 0x90], 0
je 0x4786fc
test eax, eax
je 0x4786b4
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x4786b9
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov edi, dword [eax + 0x18]
sub edi, dword [eax + 0x10]
add eax, 0xc
test ecx, ecx
je 0x4786d8
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4786dd
call fcn.00500ad0
mov eax, esi
sub eax, edi
add eax, 1
cdq
sub eax, edx
mov edx, dword [ebp + 4]
sar eax, 1
push eax
mov eax, dword [edx + ebx*4]
push 0
add eax, 0xc
push eax
call dword [0x5313ec]
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x47870f
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478714
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov edi, dword [eax + 0x28]
sub edi, dword [eax + 0x20]
add eax, 0x1c
test ecx, ecx
je 0x478733
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478738
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, esi
sub eax, edi
add eax, 1
cdq
sub eax, edx
mov edx, dword [ecx + ebx*4]
sar eax, 1
push eax
push 0
add edx, 0x1c
push edx
call dword [0x5313ec]
mov eax, dword [ebp + 4]
test eax, eax
je 0x47876a
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x47876f
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
test dword [eax], 0x3442100
je 0x478824
test ecx, ecx
je 0x478791
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478796
call fcn.00500ad0
mov esi, dword [ebp + 4]
test esi, esi
je 0x4787a9
mov eax, dword [ebp + 8]
sub eax, esi
sar eax, 2
cmp ebx, eax
jb 0x4787ae
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [esi + ebx*4]
mov edx, dword [ecx + ebx*4]
mov eax, dword [eax + 0x20]
mov dword [edx + 0x50], eax
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x4787d0
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4787d5
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea edi, [ecx + ebx*4]
je 0x4787eb
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4787f0
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov esi, dword [eax + 0x58]
sub esi, dword [eax + 0x50]
add eax, 0x4c
test ecx, ecx
je 0x47880f
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478814
call fcn.00500ad0
mov ecx, dword [edi]
mov edx, dword [ecx + 0x50]
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
add edx, esi
mov dword [ecx + 0x58], edx
mov edx, dword [esp + 0x74]
mov esi, dword [edx + 0x134]
mov eax, dword [esi + 0x58]
test eax, eax
mov edi, 2
je 0x478848
mov eax, dword [eax + 8]
test eax, eax
je 0x478848
push eax
call dword [0x531328]
mov eax, dword [esi + 0x58]
test eax, eax
je 0x478863
mov edi, dword [eax + 0xb4]
mov eax, dword [eax + 8]
test eax, eax
je 0x478863
push eax
call dword [0x531324]
test edi, edi
jne 0x478a09
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x270]
cmp dword [ecx + 0x90], edi
je 0x4788f6
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x478894
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478899
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea edi, [ecx + ebx*4]
je 0x4788af
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4788b4
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov esi, dword [eax + 0x18]
sub esi, dword [eax + 0x10]
add eax, 0xc
test ecx, ecx
je 0x4788d3
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4788d8
call fcn.00500ad0
mov edx, dword [edi]
mov eax, dword [esp + 0x7c]
sub eax, dword [edx + 0x10]
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + ebx*4]
sub eax, esi
push eax
push 0
add edx, 0xc
push edx
call dword [0x5313ec]
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x478909
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x47890e
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
test byte [eax], 8
je 0x478997
test ecx, ecx
je 0x47892d
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478932
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea edi, [ecx + ebx*4]
je 0x478948
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x47894d
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov esi, dword [eax + 0x28]
sub esi, dword [eax + 0x20]
add eax, 0x1c
test ecx, ecx
je 0x47896c
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478971
call fcn.00500ad0
mov eax, dword [esp + 0x7c]
mov ecx, dword [edi]
sub eax, esi
add eax, dword [esp + 0x80]
cdq
sub eax, edx
mov edx, dword [ebp + 4]
sar eax, 1
sub eax, dword [ecx + 0x20]
push eax
mov eax, dword [edx + ebx*4]
push 0
add eax, 0x1c
push eax
jmp 0x478a03
test ecx, ecx
je 0x4789a7
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4789ac
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea edi, [ecx + ebx*4]
je 0x4789c2
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4789c7
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + ebx*4]
mov esi, dword [eax + 0x28]
sub esi, dword [eax + 0x20]
add eax, 0x1c
test ecx, ecx
je 0x4789e6
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4789eb
call fcn.00500ad0
mov ecx, dword [edi]
mov edx, dword [esp + 0x7c]
sub edx, dword [ecx + 0x20]
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
sub edx, esi
push edx
push 0
add ecx, 0x1c
push ecx
call dword [0x5313ec]
cmp dword [esp + 0x84], 0
jne 0x478baa
mov edx, dword [esp + 0x74]
mov eax, dword [edx + 0x270]
cmp dword [eax + 0x90], 0
mov ecx, dword [ebp + 4]
mov dword [esp + 0x84], 1
je 0x478abc
test ecx, ecx
je 0x478a4c
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478a51
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea esi, [ecx + ebx*4]
je 0x478a67
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478a6c
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [esi]
mov edx, dword [ecx + ebx*4]
mov eax, dword [eax + 0x10]
cmp eax, dword [edx + 0x20]
jge 0x478a9c
test ecx, ecx
je 0x478a8c
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478a91
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx + 0x10]
jmp 0x478ada
test ecx, ecx
je 0x478aac
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478ab1
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov edx, dword [eax + ebx*4]
mov ecx, dword [edx + 0x20]
jmp 0x478ada
test ecx, ecx
je 0x478acc
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478ad1
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx + 0x20]
mov edi, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov dword [edi + 4], ecx
mov ecx, dword [edx + 0x270]
cmp dword [ecx + 0x90], 0
je 0x478b84
test eax, eax
je 0x478b08
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478b0d
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea esi, [ecx + ebx*4]
je 0x478b23
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478b28
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [esi]
mov edx, dword [ecx + ebx*4]
mov eax, dword [eax + 0x18]
cmp eax, dword [edx + 0x28]
jle 0x478b5e
test ecx, ecx
je 0x478b48
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478b4d
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + ebx*4]
mov eax, dword [edx + 0x18]
mov dword [edi + 0xc], eax
jmp 0x478ea8
test ecx, ecx
je 0x478b6e
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478b73
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov eax, dword [ecx + 0x28]
mov dword [edi + 0xc], eax
jmp 0x478ea8
test eax, eax
je 0x478b94
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478b99
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + ebx*4]
mov eax, dword [eax + 0x28]
mov dword [edi + 0xc], eax
jmp 0x478ea8
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x270]
cmp dword [edx + 0x90], 0
mov ecx, dword [ebp + 4]
je 0x478c44
test ecx, ecx
je 0x478bd4
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478bd9
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea esi, [ecx + ebx*4]
je 0x478bef
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478bf4
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [esi]
mov eax, dword [ecx + ebx*4]
mov edx, dword [edx + 0x10]
cmp edx, dword [eax + 0x20]
jge 0x478c24
test ecx, ecx
je 0x478c14
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478c19
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov edx, dword [ecx + 0x10]
jmp 0x478c62
test ecx, ecx
je 0x478c34
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478c39
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov edx, dword [eax + ebx*4]
mov edx, dword [edx + 0x20]
jmp 0x478c62
test ecx, ecx
je 0x478c54
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478c59
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov edx, dword [ecx + 0x20]
mov ecx, dword [esp + 0x78]
mov ecx, dword [ecx + 4]
cmp ecx, edx
mov edi, dword [esp + 0x74]
jl 0x478d26
mov edx, dword [edi + 0x270]
cmp dword [edx + 0x90], 0
je 0x478d08
test eax, eax
je 0x478c98
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478c9d
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea esi, [ecx + ebx*4]
je 0x478cb3
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478cb8
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [esi]
mov eax, dword [ecx + ebx*4]
mov edx, dword [edx + 0x10]
cmp edx, dword [eax + 0x20]
jge 0x478ce8
test ecx, ecx
je 0x478cd8
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478cdd
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx + 0x10]
jmp 0x478d26
test ecx, ecx
je 0x478cf8
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478cfd
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov edx, dword [eax + ebx*4]
mov ecx, dword [edx + 0x20]
jmp 0x478d26
test eax, eax
je 0x478d18
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478d1d
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx + 0x20]
mov edx, dword [esp + 0x78]
mov dword [edx + 4], ecx
mov ecx, dword [edi + 0x270]
cmp dword [ecx + 0x90], 0
je 0x478dc0
test eax, eax
je 0x478d50
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478d55
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea esi, [ecx + ebx*4]
je 0x478d6b
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478d70
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [esi]
mov edx, dword [ecx + ebx*4]
mov eax, dword [eax + 0x18]
cmp eax, dword [edx + 0x28]
jle 0x478da0
test ecx, ecx
je 0x478d90
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478d95
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx + 0x18]
jmp 0x478dde
test ecx, ecx
je 0x478db0
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478db5
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov edx, dword [eax + ebx*4]
mov ecx, dword [edx + 0x28]
jmp 0x478dde
test eax, eax
je 0x478dd0
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478dd5
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx + 0x28]
mov edx, dword [esp + 0x78]
mov edx, dword [edx + 0xc]
cmp edx, ecx
jle 0x478df0
mov eax, edx
jmp 0x478ea1
mov ecx, dword [edi + 0x270]
cmp dword [ecx + 0x90], 0
je 0x478e83
test eax, eax
je 0x478e13
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478e18
call fcn.00500ad0
mov ecx, dword [ebp + 4]
test ecx, ecx
lea esi, [ecx + ebx*4]
je 0x478e2e
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478e33
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov eax, dword [esi]
mov edx, dword [ecx + ebx*4]
mov eax, dword [eax + 0x18]
cmp eax, dword [edx + 0x28]
jle 0x478e63
test ecx, ecx
je 0x478e53
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478e58
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + ebx*4]
mov eax, dword [edx + 0x18]
jmp 0x478ea1
test ecx, ecx
je 0x478e73
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478e78
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov eax, dword [ecx + 0x28]
jmp 0x478ea1
test eax, eax
je 0x478e93
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478e98
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + ebx*4]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0xc], eax
mov edx, dword [esp + 0x74]
mov esi, dword [edx + 0x134]
mov eax, dword [esi + 0x58]
test eax, eax
mov edi, 2
je 0x478ecc
mov eax, dword [eax + 8]
test eax, eax
je 0x478ecc
push eax
call dword [0x531328]
mov eax, dword [esi + 0x58]
test eax, eax
je 0x478ee7
mov edi, dword [eax + 0xb4]
mov eax, dword [eax + 8]
test eax, eax
je 0x478ee7
push eax
call dword [0x531324]
test edi, edi
jne 0x479141
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x478f02
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x478f07
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
test ecx, ecx
je 0x479157
movzx esi, byte [ecx]
and esi, 1
xor ecx, ecx
test esi, esi
sete cl
test ecx, ecx
je 0x479157
cmp dword [esp + 0x94], 0
jne 0x479011
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x270]
cmp dword [edx + 0x90], 0
mov dword [esp + 0x94], 1
je 0x478f76
test eax, eax
je 0x478f66
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478f6b
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx + 0xc]
jmp 0x478f94
test eax, eax
je 0x478f86
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478f8b
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov edx, dword [eax + ebx*4]
mov ecx, dword [edx + 0x1c]
test eax, eax
mov edx, dword [esp + 0x78]
mov dword [edx], ecx
je 0x478faa
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478faf
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
test dword [ecx], 0x3442100
je 0x478fe7
test eax, eax
je 0x478fcd
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478fd2
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
mov eax, dword [ecx + 0x54]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 8], eax
jmp 0x479157
test eax, eax
je 0x478ff7
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x478ffc
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + ebx*4]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 8], eax
jmp 0x479157
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x270]
cmp dword [ecx + 0x90], 0
je 0x479044
test eax, eax
je 0x479034
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x479039
call fcn.00500ad0
mov edx, dword [ebp + 4]
mov eax, dword [edx + ebx*4]
mov ecx, dword [eax + 0xc]
jmp 0x479062
test eax, eax
je 0x479054
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x479059
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + ebx*4]
mov ecx, dword [edx + 0x1c]
mov eax, dword [esp + 0x78]
mov eax, dword [eax]
cmp eax, ecx
jl 0x479099
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x270]
cmp dword [edx + 0x90], 0
mov edi, ebx
mov esi, ebp
je 0x47908f
call fcn.00472050
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
jmp 0x479099
call fcn.00472050
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
mov ecx, dword [ebp + 4]
test ecx, ecx
mov edx, dword [esp + 0x78]
mov dword [edx], eax
je 0x4790b2
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x4790b7
call fcn.00500ad0
mov eax, dword [ebp + 4]
mov ecx, dword [eax + ebx*4]
test dword [ecx], 0x3442100
je 0x479103
test eax, eax
je 0x4790d5
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x4790da
call fcn.00500ad0
mov eax, dword [esp + 0x78]
mov ecx, dword [ebp + 4]
mov eax, dword [eax + 8]
mov edx, dword [ecx + ebx*4]
cmp eax, dword [edx + 0x54]
jg 0x479138
mov edi, ebx
mov esi, ebp
call fcn.00472050
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 8], eax
jmp 0x479157
test eax, eax
je 0x479113
mov ecx, dword [ebp + 8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x479118
call fcn.00500ad0
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + 8]
mov edx, dword [ebp + 4]
mov ecx, dword [edx + ebx*4]
cmp eax, dword [ecx + 0x24]
jg 0x479138
mov edi, ebx
mov esi, ebp
call fcn.00472050
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 8], eax
jmp 0x479157
test ebx, ebx
jne 0x479157
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x78]
mov ecx, dword [edx]
mov dword [eax], ebx
mov dword [eax + 8], ecx
mov eax, ebp
add ebx, 1
call fcn.00488e80
cmp ebx, eax
jl 0x4785a3
mov edi, dword [esp + 0x74]
mov esi, dword [edi + 0x134]
mov eax, dword [esi + 0x58]
test eax, eax
mov ebx, 2
je 0x47918d
mov eax, dword [eax + 8]
test eax, eax
je 0x47918d
push eax
call dword [0x531328]
mov eax, dword [esi + 0x58]
test eax, eax
je 0x4791a8
mov ebx, dword [eax + 0xb4]
mov eax, dword [eax + 8]
test eax, eax
je 0x4791a8
push eax
call dword [0x531324]
cmp ebx, 1
jne 0x479397
cmp dword [edi + 0x2bc], 0
je 0x479397
mov eax, dword [edi + 0x2bc]
mov ecx, dword [eax + 0xc]
test ecx, ecx
mov eax, dword [eax + 0x10]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], eax
jle 0x479397
test eax, eax
jle 0x479397
xor esi, esi
mov eax, ebp
mov dword [esp + 0x7c], esi
call fcn.00488e80
test eax, eax
jle 0x479397
jmp 0x479204
mov esi, dword [esp + 0x7c]
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x479217
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x47921c
call fcn.00500ad0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + esi*4]
test dword [edx], 0x800
je 0x47937d
test ecx, ecx
je 0x479240
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x7c], eax
jb 0x479245
call fcn.00500ad0
mov ecx, dword [esp + 0x7c]
mov eax, dword [ebp + 4]
mov eax, dword [eax + ecx*4]
mov esi, dword [eax + 0x28]
mov edx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x20]
mov edi, dword [eax + 0x24]
add eax, 0x1c
xor eax, eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x134]
mov eax, dword [ecx + 0x58]
mov dword [esp + 0x6c], esi
sub esi, ebx
test eax, eax
mov dword [esp + 0x60], edx
mov dword [esp + 0x50], 0
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], 5
je 0x4792b6
mov eax, dword [eax + 8]
test eax, eax
je 0x4792b6
push eax
call dword [0x531328]
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx + 0x4c]
test eax, eax
je 0x4792ca
mov edx, dword [eax + 0x3b8]
mov dword [esp + 0x80], edx
mov ecx, dword [ecx + 0x58]
test ecx, ecx
je 0x4792df
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x4792df
push ecx
call dword [0x531324]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x80]
push eax
mov eax, dword [esp + 0x3c]
push eax
add ecx, esi
push ecx
push eax
lea esi, [esp + 0x60]
call fcn.0046e4e0
add esp, 0x10
test eax, eax
je 0x47937d
mov eax, dword [esp + 0x6c]
sub eax, dword [esp + 0x5c]
lea esi, [edi + 0xa]
sub edi, dword [esp + 0x50]
add eax, ebx
add eax, dword [esp + 0x54]
cdq
sub eax, edx
mov edx, dword [esp + 0x58]
mov ecx, eax
mov eax, dword [esp + 0x6c]
sub eax, dword [esp + 0x54]
lea edi, [edi + edx + 0xa]
add eax, ebx
add eax, dword [esp + 0x5c]
sar ecx, 1
cdq
sub eax, edx
mov edx, edi
sar eax, 1
sub edx, esi
je 0x47937d
mov edx, eax
sub edx, ecx
je 0x47937d
mov edx, dword [esp + 0x74]
mov dword [edx + 0x2dc], 1
mov dword [edx + 0x2b0], ecx
mov ecx, dword [esp + 0x78]
mov dword [edx + 0x2b8], eax
mov eax, dword [ecx + 8]
cmp eax, edi
mov dword [edx + 0x2ac], esi
mov dword [edx + 0x2b4], edi
jg 0x47937a
mov eax, edi
mov dword [ecx + 8], eax
mov esi, dword [esp + 0x7c]
add esi, 1
mov eax, ebp
mov dword [esp + 0x7c], esi
call fcn.00488e80
cmp esi, eax
jl 0x479200
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x24