Function at 0x46bc60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x553bdf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
push edi
mov edi, ecx
push esi
mov dword [esp + 0x6c], edi
call fcn.004ce6a0
add esp, 4
test eax, eax
jne 0x46cde5
mov ebp, dword [esi + 1]
inc esi
push ebp
call fcn.004d7320
add esp, 4
cmp eax, 0x5000000
jne 0x46cdd5
cmp ebp, 0x500fffe
je 0x46cdd5
lea eax, [edi + 0xc0]
add esi, 4
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xc8], esi
call fcn.0040d6b0
mov dword [esp + 0x1c], 0x55fab8
xor esi, esi
push ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0x94], esi
call fcn.004d7300
mov ebx, eax
mov eax, dword [esp + 0xc4]
add esp, 4
cmp ebx, esi
je 0x46bd92
cmp ebx, 0x10000000
je 0x46bd33
cmp ebx, 0x20000000
jne 0x46bf22
cmp eax, esi
je 0x46bf22
lea esi, [eax + 0x18]
mov edi, 1
jmp 0x46bda1
cmp eax, esi
je 0x46bf22
mov edx, dword [eax + 0xc]
lea ecx, [esp + 0x94]
push esi
push ecx
push edx
lea ecx, [edi + 0x2cc]
call fcn.004d7c30
test eax, eax
je 0x46bf22
mov ecx, dword [esp + 0x94]
cmp dword [ecx + 0x44], esi
je 0x46bd88
lea eax, [esp + 0x1c]
push esi
push eax
call fcn.004d36b0
lea esi, [esp + 0x1c]
mov dword [esp + 0x90], 1
mov edi, 3
jmp 0x46bda1
lea esi, [ecx + 0xc]
mov edi, 3
jmp 0x46bda1
mov ecx, dword [esp + 0x68]
mov edi, 4
lea esi, [ecx + 0x290]
lea edx, [esp + 0x14]
mov ecx, esi
push edx
push 0
push ebp
call fcn.004d74c0
test eax, eax
mov dword [esp + 0x3c], eax
jne 0x46bdff
cmp ebx, 0x20000000
jne 0x46bde6
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x14]
push ecx
push 0
lea esi, [eax + 0x38]
push ebp
mov ecx, esi
call fcn.004d74c0
test eax, eax
mov dword [esp + 0x3c], eax
mov edi, 2
jne 0x46bdff
mov edx, dword [esp + 0x68]
push 0x5a3138
lea ecx, [edx + 0x968]
call fcn.00528088
jmp 0x46bf22
lea ecx, [esp + 0x40]
call fcn.00477cf0
mov eax, dword [esp + 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
mov byte [esp + 0xb0], 1
je 0x46bf3b
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x68]
push 0
lea eax, [esp + 0x14]
mov edx, dword [ebp + 0x4ac]
push 4
add ecx, 8
push eax
push ecx
push edx
call ebx
test eax, eax
je 0x46bf09
mov eax, dword [esp + 0x10]
test eax, eax
je 0x46bf09
mov edx, dword [0x5b16bc]
push 0
lea ecx, [esp + 0x14]
push 4
push ecx
push eax
push edx
call ebx
test eax, eax
je 0x46bf09
mov eax, dword [esp + 0x10]
test eax, eax
je 0x46bf09
mov ecx, eax
mov eax, dword [esp + 0x14]
add ecx, 4
xor ebx, ebx
test eax, eax
mov dword [esp + 0x10], ecx
jle 0x46bedd
push 0
push ebx
mov ecx, esi
call fcn.004d73d0
mov edi, eax
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x14]
push eax
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x46bed4
mov eax, dword [edi]
test eax, eax
jne 0x46bec0
mov eax, 0x80000301
add edi, 6
lea ecx, [ebp + 0xc0]
push edi
push eax
call fcn.00412680
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x46be94
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004ce440
add esp, 4
mov ecx, ebp
push eax
call fcn.0046bb50
jmp 0x46bf70
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], 0x55f890
call fcn.00477ef0
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], 0xffffffff
call fcn.00401e70
jmp 0x46cde5
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x40]
push eax
mov eax, dword [esp + 0xc0]
push ecx
mov ecx, dword [esp + 0xc8]
push edx
mov edx, dword [esp + 0xc4]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x80]
push edx
push edi
call fcn.0046b990
lea ecx, [esp + 0x54]
mov dword [esp + 0x10], eax
call fcn.00477cf0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
call fcn.00477cf0
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xb0], 3
cmp ecx, eax
mov eax, dword [esp + 0x50]
je 0x46c524
mov edx, dword [esp + 0xc4]
mov bl, byte [edx]
cmp bl, 0x37
je 0x46c524
mov ebp, dword [esp + 0x68]
xor edi, edi
push edi
lea eax, [esp + 0x14]
push 4
push eax
mov esi, ecx
push ecx
mov ecx, dword [ebp + 0x4ac]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x46cd57
cmp dword [esp + 0x10], edi
je 0x46cd57
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edx
push eax
mov dword [esp + 0x40], eax
call fcn.004ce440
add esp, 4
cmp bl, 0x39
jne 0x46c28f
cmp eax, edi
jne 0x46c5e2
mov edx, dword [esp + 0x18]
push edx
call fcn.004e5810
mov esi, eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004e49d0
add esp, 8
cmp esi, 2
mov edi, eax
jne 0x46c04d
cmp edi, 1
je 0x46c04d
cmp edi, 3
je 0x46c04d
mov esi, 1
mov ecx, dword [esp + 0xc4]
cmp esi, 2
mov ebx, dword [ecx + 1]
jne 0x46c1b2
push 1
lea edx, [esp + 0x1c]
push 1
push edx
lea ecx, [ebp + 0xc0]
call fcn.0044c0b0
cmp edi, 1
push 0
jne 0x46c0a7
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x274]
call fcn.004d7c30
test eax, eax
je 0x46c64e
mov edx, dword [esp + 0x94]
lea edi, [edx + 0xc]
jmp 0x46c0fa
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x9c]
push eax
push ecx
lea ecx, [ebp + 0x2cc]
call fcn.004d7c30
test eax, eax
je 0x46c64e
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], 0
call fcn.00477ef0
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x1c]
push 0
push edx
call fcn.004d36b0
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x1c]
add eax, 4
mov dword [esp + 0x10], eax
test edi, edi
je 0x46c64e
lea eax, [esp + 0x14]
mov ecx, edi
push eax
push 0
push ebx
call fcn.004d74c0
mov ecx, dword [esp + 0x14]
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x3c], eax
jle 0x46c16c
push 0
push ebx
mov ecx, edi
call fcn.004d73d0
mov edx, dword [edi]
mov esi, eax
push esi
mov ecx, edi
call dword [edx + 0x14]
push eax
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x46c15f
mov eax, dword [esi]
test eax, eax
jne 0x46c14b
mov eax, 0x80000301
add esi, 6
lea ecx, [ebp + 0xc0]
push esi
push eax
call fcn.00412680
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x46c11f
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004ce440
add esp, 4
mov ecx, ebp
push eax
call fcn.0046bb50
mov ecx, eax
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x46c51c
cmp esi, 3
jne 0x46c78a
mov eax, dword [esp + 0x18]
xor edi, edi
push edi
push eax
lea ecx, [ebp + 0xc0]
call fcn.004543c0
cmp eax, edi
je 0x46c72e
cmp dword [eax + 0x30], edi
jle 0x46c72e
test dword [eax + 0x14], 0x800000
jne 0x46c72e
mov esi, dword [eax + 0x34]
lea edx, [ebx - 1]
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 0x30]
cmp edx, ecx
jge 0x46c6c2
mov ecx, dword [esp + 0x10]
cmp edx, edi
jl 0x46c275
mov eax, dword [esi]
mov ebx, eax
shr ebx, 0x10
jne 0x46c223
mov ebx, dword [esp + 0x18]
and eax, 0xffff
shr ebx, 0x10
shl ebx, 0x10
or eax, ebx
cmp edi, edx
jne 0x46c24f
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [esi + 4]
push ecx
push eax
call fcn.004ce440
add esp, 4
mov ecx, ebp
push eax
call fcn.0046bb50
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x46c26c
mov ecx, dword [esi + 4]
push ecx
push eax
lea ecx, [ebp + 0xc0]
call fcn.00412680
mov ecx, dword [esp + 0x10]
add ecx, eax
add esi, 0x1c
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x14]
inc edi
cmp edi, edx
jle 0x46c209
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x46c51c
cmp bl, 0x3a
jne 0x46ccfe
cmp eax, edi
jne 0x46c2d9
cmp dword [esp + 0x18], 0x80000005
jne 0x46c7ee
lea edx, [esp + 0x40]
mov ecx, ebp
push edx
push esi
call fcn.0046bbb0
test eax, eax
je 0x46c85a
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
neg eax
sbb eax, eax
mov dword [esp + 0x18], 0x80000101
and eax, ecx
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc4]
xor eax, eax
mov dword [esp + 0x64], eax
cmp byte [ecx], 0x3a
jne 0x46c413
mov edi, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
mov ebx, ecx
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x21
je 0x46c36c
cmp al, 0x38
je 0x46c32f
cmp al, 0x3b
jne 0x46c8b6
mov edx, dword [ebx + 1]
lea ecx, [esp + 0x54]
push edx
call fcn.00478020
add ebx, 5
mov dword [esp + 0xc4], ebx
jmp 0x46c400
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00477ef0
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x6c]
push eax
push ebx
push edi
push ecx
push esi
mov ecx, ebp
call fcn.0046ce10
test eax, eax
je 0x46c91a
push ebx
call fcn.004ce460
add esp, 4
jmp 0x46c3a6
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00477ef0
mov eax, dword [esp + 0xbc]
lea edx, [esp + 0x6c]
inc ebx
push edx
push ebx
push edi
push eax
push esi
mov ecx, ebp
call fcn.0046b480
test eax, eax
je 0x46c97e
mov ecx, ebx
call fcn.004ced60
add ebx, eax
mov eax, dword [esp + 0x6c]
test eax, eax
mov dword [esp + 0xc4], ebx
jne 0x46c9e2
mov ecx, dword [esp + 0x78]
push ecx
call fcn.004d7370
add esp, 4
test eax, eax
je 0x46c9e2
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0xa0]
lea eax, [esp + 0x70]
push edx
push eax
push 0x80000301
push ecx
call fcn.004e6d20
mov edx, dword [esp + 0xb0]
add esp, 0x10
lea ecx, [esp + 0x54]
push edx
call fcn.00478020
cmp byte [ebx], 0x3a
je 0x46c2ff
mov eax, dword [esp + 0x64]
xor ebx, ebx
cmp eax, ebx
jne 0x46c419
xor ebx, ebx
xor edx, edx
jmp 0x46c41d
mov edx, dword [esp + 0x5c]
shr eax, 2
mov edi, eax
je 0x46cc8e
cmp edi, 0x7f
jge 0x46cc8e
cmp edi, 1
je 0x46c4a2
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov al, byte [ecx]
cmp edi, eax
jne 0x46ca56
cmp edi, 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x90], 1
jl 0x46c4eb
lea ebx, [edi - 1]
lea esi, [ecx + 5]
mov eax, dword [edx]
add edx, 4
dec eax
mov dword [esp + 0x9c], edx
test eax, eax
jle 0x46c4ca
cmp eax, dword [esi - 4]
mov ecx, esi
jge 0x46cba6
test ebx, ebx
jle 0x46c49c
mov edx, ebx
mov ebp, dword [ecx]
add ecx, 4
imul eax, ebp
dec edx
jne 0x46c486
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x68]
add dword [esp + 0x14], eax
jmp 0x46c4d0
mov edx, dword [edx]
dec edx
mov dword [esp + 0x14], edx
js 0x46cac6
mov eax, dword [esp + 0x3c]
push eax
call fcn.004ce400
mov ecx, dword [esp + 0x18]
add esp, 4
cmp ecx, eax
jge 0x46cb36
jmp 0x46c4eb
jl 0x46cc1a
mov eax, dword [esp + 0x90]
add esi, 4
inc eax
dec ebx
cmp eax, edi
mov dword [esp + 0x90], eax
jle 0x46c464
mov edx, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
push edx
call fcn.004126b0
imul eax, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
xor ecx, ecx
mov cl, byte [edx]
mov edx, dword [esp + 0x10]
add eax, edx
lea ecx, [eax + ecx*4 + 4]
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x50], eax
test ecx, ecx
jne 0x46bfb0
mov edx, dword [esp + 0xc8]
test edx, edx
je 0x46c535
mov esi, dword [esp + 0x18]
mov dword [edx], esi
mov esi, dword [esp + 0xcc]
test esi, esi
je 0x46c559
mov edi, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edi
push eax
call fcn.004ce440
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [esi], eax
mov edi, ecx
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0x19
mov dword [esp + 0x20], 0
call fcn.00477ef0
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00477ef0
mov eax, edi
jmp 0x46cde7
push 0x5a3128
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 5
jmp 0x46cdae
push 0x5a3108
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 7
mov dword [esp + 0x20], 0
jmp 0x46cdb2
push 0x5a3128
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 9
jmp 0x46cdae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xa
jmp 0x46cdae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xb
mov dword [esp + 0x20], 0
jmp 0x46cdb2
push 0x5a30f4
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xc
jmp 0x46cdae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xd
jmp 0x46cdae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x10
mov dword [esp + 0x20], 0
jmp 0x46cdb2
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xe
mov dword [esp + 0x20], 0
jmp 0x46cdb2
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0x20], 0
jmp 0x46cdb2
push 0x5a30d0
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x11
mov dword [esp + 0x20], 0
jmp 0x46cdb2
push 0x5a30b0
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x13
mov dword [esp + 0x20], ebx
jmp 0x46cdb2
push 0x5a3090
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x14
mov dword [esp + 0x20], ebx
jmp 0x46cdb2
push 0x5a3078
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x15
mov dword [esp + 0x20], ebx
jmp 0x46cdb2
push 0x5a3078
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x16
mov dword [esp + 0x20], 0
jmp 0x46cdb2
push 0x5a3090
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x17
mov dword [esp + 0x20], 0
jmp 0x46cdb2
push 0x5a3068
lea ecx, [ebp + 0x968]
call fcn.00528088
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x12
mov dword [esp + 0x20], ebx
jmp 0x46cdb2
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 0x18
jmp 0x46cdae
mov esi, 0x55f890
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00477ef0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00477ef0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00477ef0
mov dword [esp + 0x1c], 0x55f894
mov dword [esp + 0xb0], 4
mov dword [esp + 0x20], edi
lea ecx, [esp + 0x24]
call fcn.00477ef0
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00477ef0
jmp 0x46cde5
push 0x5a3054
lea ecx, [edi + 0x968]
call fcn.00528088
xor eax, eax
mov ecx, dword [esp + 0xa8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa4
ret 0x18