Function at 0x479900
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x6c8
mov qword [rsp + 0x5a0], 0xfffffffffffffffe
mov rdi, r9
mov rbp, rdx
mov rsi, rcx
mov r15, qword [rsp + 0x738]
mov rax, qword [r15 + 0x18]
mov r12d, 1
xor r13d, r13d
cmp rax, r13
cmove rax, r12
mov qword [rsp + 0x328], rax
mov qword [rsp + 0x90], r13
mov rbx, qword [rsp + 0x730]
mov rax, qword [rbx]
lea r8, [rsp + 0x90]
lea rdx, [0x004abfb8]
mov rcx, rbx
call qword [rax]
mov qword [rsp + 0xa0], r13
mov rax, qword [rbx]
lea r8, [rsp + 0xa0]
lea rdx, [0x004abf18]
mov rcx, rbx
call qword [rax]
mov qword [rsp + 0x98], r13
mov qword [rsp + 0xd0], r13
mov rax, qword [rdi]
lea r8, [rsp + 0xd0]
lea rdx, [0x004abe88]
mov rcx, rdi
call qword [rax]
cmp qword [rsp + 0xd0], r13
jne 0x479a1c
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x4799eb
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r13
je 0x4799ff
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r13
je 0x479a12
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004001
jmp 0x47ee54
cmp rbp, r13
je 0x479a30
cmp byte [r15 + 0x2a], r13b
jne 0x479a30
mov rbx, qword [rbp + 0x168]
jmp 0x479a33
mov rbx, r13
mov rax, qword [rdi]
lea r8, [rsp + 0x98]
lea rdx, [0x004abee8]
mov rcx, rdi
call qword [rax]
cmp qword [rsp + 0x98], r13
je 0x479b78
mov qword [rsp + 0x110], r13
mov rcx, qword [rsp + 0xd0]
mov rax, qword [rcx]
lea r9, [rsp + 0x110]
mov r8d, r12d
xor edx, edx
call qword [rax + 0x20]
mov edi, eax
cmp eax, r13d
je 0x479ad8
mov rcx, qword [rsp + 0xd0]
cmp rcx, r13
je 0x479a96
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x479aaa
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r13
je 0x479abe
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r13
je 0x479ad1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x47ee54
mov r10, qword [rsp + 0x110]
add r10, rbx
mov rcx, qword [rsp + 0x98]
mov r11, qword [rcx]
mov rax, qword [rsp + 0xd0]
mov rdx, rax
lea r9, [r10 + 0x20]
neg rdx
sbb r8, r8
and r8, r9
neg rax
sbb rdx, rdx
and rdx, r10
call qword [r11 + 0x18]
mov edi, eax
cmp eax, r13d
je 0x479b70
mov rcx, qword [rsp + 0xd0]
cmp rcx, r13
je 0x479b2e
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x479b42
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r13
je 0x479b56
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r13
je 0x479b69
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x47ee54
mov rdi, qword [rsp + 0x728]
mov rcx, qword [rsp + 0xd0]
cmp rcx, r13
je 0x479b96
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, r13
mov qword [rsp + 0xd0], r13
cmp rbx, r13
je 0x479c16
mov qword [rsp + 0x20], r13
mov r9, rbx
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.00478534
mov ebx, eax
cmp eax, r13d
je 0x479c0e
mov rcx, qword [rsp + 0xd0]
cmp rcx, r13
je 0x479bcc
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x479be0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r13
je 0x479bf4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r13
je 0x479c07
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x47ee54
mov rcx, qword [rsp + 0xd0]
cmp rcx, r13
je 0x479c21
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rsi, r13
mov qword [rsp + 0xd0], r13
mov r11, r13
mov qword [rsp + 0x138], r13
mov rdi, r13
mov qword [rsp + 0x168], r13
mov byte [rsp + 0xac], r13b
mov r14, r13
mov qword [rsp + 0x140], r13
mov dword [rsp + 0x148], r13d
mov dword [rsp + 0x14c], r13d
mov r12, r13
mov qword [rsp + 0xb0], r13
mov dword [rsp + 0xb8], r13d
xor r9d, r9d
mov dword [rsp + 0xbc], r9d
mov bl, r9b
mov byte [rsp + 0xa8], r9b
mov al, byte [r15 + 0x10]
mov byte [rsp + 0xa9], al
mov r10d, 0x303011b
cmp al, r9b
je 0x479d47
mov rax, qword [r15]
mov r8d, r9d
mov r9d, dword [rax + 8]
xor ecx, ecx
cmp r9d, ecx
jbe 0x479d44
mov rdx, qword [rax]
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov eax, 0xffffffff
cmp rcx, rax
ja 0x479d24
cmp ecx, r10d
ja 0x479cfc
cmp ecx, r10d
je 0x479d32
sub ecx, 3
je 0x479d32
sub ecx, 7
je 0x479d32
sub ecx, 0x202f8
je 0x479d32
sub ecx, 2
je 0x479d32
cmp ecx, 0x300fdff
je 0x479d32
jmp 0x479d24
cmp ecx, 0x3030205
je 0x479d32
cmp ecx, 0x3030401
je 0x479d32
cmp ecx, 0x3030501
je 0x479d32
cmp ecx, 0x3030701
je 0x479d32
cmp ecx, 0x3030805
je 0x479d32
inc r8d
add rdx, 8
cmp r8d, r9d
jae 0x479d3f
jmp 0x479cc0
xor r9d, r9d
mov byte [rsp + 0xa9], r9b
jmp 0x479d47
xor r9d, r9d
jmp 0x479d47
xor r9d, r9d
cmp rbp, r9
je 0x47a357
mov ebx, dword [rbp + 0x90]
xor ecx, ecx
call fcn.004024f4
xor ecx, ecx
mov qword [rsp + 0xd0], rcx
mov rcx, rbx
shl rcx, 2
call fcn.004024bc
mov rsi, rax
mov qword [rsp + 0xd0], rax
xor r9d, r9d
mov ecx, r9d
cmp dword [rbp + 0x90], r9d
jbe 0x479da8
lea r11d, [r9 + 1]
mov dword [rax], 0xffffffff
add ecx, r11d
add rax, 4
cmp ecx, dword [rbp + 0x90]
jb 0x479d91
jmp 0x479dae
mov r11d, 1
mov edx, r9d
mov r10, qword [rsp + 0x720]
cmp dword [r10 + 8], r9d
jbe 0x479de0
mov r8, r9
mov rax, qword [r10]
mov rcx, qword [r8 + rax]
cmp dword [rcx], 0xffffffff
je 0x479dd3
mov eax, dword [rcx]
mov dword [rsi + rax*4], edx
add edx, r11d
add r8, 8
cmp edx, dword [r10 + 8]
jb 0x479dc2
mov r15d, r9d
mov dword [rsp + 0xd8], r9d
mov rbp, r9
mov rcx, qword [rsp + 0x718]
cmp dword [rcx + 4], r9d
jbe 0x47a347
mov r10d, r9d
mov ebx, r9d
mov rax, qword [rcx + 0x30]
mov edi, dword [rax + rbp*4]
mov r14, r9
mov rax, qword [rcx + 0x198]
movsxd r8, dword [rax + rbp*4]
mov rax, r8
cmp edi, r9d
jbe 0x47a237
mov rdx, r8
shl rdx, 4
lea r9, [rsi + r8*4]
xor r12d, r12d
cmp r8d, dword [rcx + 0x90]
jae 0x47a28b
mov r11, qword [rcx + 0x88]
cmp byte [rdx + r11 + 0xc], r12b
je 0x479e92
mov eax, 1
add r10d, eax
cmp dword [r9], r12d
jl 0x479e92
mov ecx, dword [r9]
mov rax, qword [rsp + 0x720]
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
cmp byte [rcx + 0x3c], r12b
jne 0x479e8a
mov eax, 1
add ebx, eax
add r14, qword [rdx + r11]
mov rcx, qword [rsp + 0x718]
jmp 0x479e92
mov rcx, qword [rsp + 0x718]
mov r11d, 1
add r8d, r11d
add rdx, 0x10
add r9, 4
cmp r10d, edi
jb 0x479e35
xor r9d, r9d
cmp ebx, r9d
je 0x47a237
mov dword [rsp + 0x110], r15d
mov dword [rsp + 0x114], ebx
mov qword [rsp + 0x170], r9
mov dword [rsp + 0x178], r9d
mov qword [rsp + 0x180], r9
mov dword [rsp + 0x188], r9d
mov qword [rsp + 0x190], r9
mov dword [rsp + 0x198], r9d
lea r8, [rsp + 0x170]
mov edx, r15d
call fcn.00471c94
mov r10, qword [rsp + 0x718]
mov r11, qword [r10 + 0x50]
movzx r10d, byte [r11 + rbp]
mov dword [rsp + 0x1a0], r10d
xor r11d, r11d
mov ecx, r11d
mov r9, qword [rsp + 0x170]
mov edx, dword [rsp + 0x178]
cmp edx, r11d
jbe 0x479f58
mov rax, r9
lea r8d, [r11 + 1]
cmp qword [rax], 0x6f10701
je 0x479f53
add ecx, r8d
add rax, 0x20
cmp ecx, edx
jb 0x479f3d
jmp 0x479f5e
mov r12b, r8b
jmp 0x479f61
mov r8d, 1
mov r12b, r11b
cmp ebx, edi
sete dil
mov byte [rsp + 0xc8], dil
cmp byte [rsp + 0xa9], r11b
jne 0x479f81
cmp dil, r11b
jne 0x479f81
mov r8b, r11b
mov dword [rsp + 0x1a8], r11d
mov dword [rsp + 0x1ac], r11d
mov dword [rsp + 0x1b0], r11d
mov ecx, r11d
cmp edx, r11d
jbe 0x479fc2
mov rax, r9
cmp qword [rax], 0x6f10701
je 0x479fb9
inc ecx
add rax, 0x20
cmp ecx, edx
jb 0x479fa4
jmp 0x479fc2
mov edx, 1
mov al, dl
jmp 0x479fca
mov al, r11b
mov edx, 1
mov byte [rsp + 0x1b4], al
cmp r8b, r11b
je 0x47a091
mov rbx, r10
shl rbx, 5
add rbx, r9
mov rax, qword [rbx]
cmp rax, 3
jne 0x47a014
cmp qword [rbx + 0x10], rdx
jne 0x47a091
mov rax, qword [rbx + 8]
movzx ecx, byte [rax]
add ecx, edx
mov dword [rsp + 0x1ac], ecx
mov dword [rsp + 0x1a8], 3
jmp 0x47a091
sub rax, 0xa
je 0x47a050
sub rax, 0x30300f9
je 0x47a050
sub rax, 0x18
je 0x47a050
sub rax, 0xea
je 0x47a050
sub rax, 0x1fc
je 0x47a050
sub rax, 0x100
je 0x47a050
sub rax, 0x200
je 0x47a050
cmp rax, 0x104
jne 0x47a091
mov eax, dword [rbx]
mov ecx, 0x3030103
cmp eax, 0x303011b
cmove eax, ecx
mov dword [rsp + 0x1a8], eax
lea rcx, [rsp + 0x1a8]
call fcn.00476854
cmp dword [rsp + 0x1a8], 0xa
jne 0x47a091
cmp qword [rbx + 0x10], 4
jne 0x47a091
mov rax, qword [rbx + 8]
mov ecx, dword [rax]
mov dword [rsp + 0x1b0], ecx
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x140]
call fcn.00478998
mov ebx, eax
cmp eax, r13d
jb 0x47a129
xor edi, edi
lea r15d, [rdi + 1]
lea rcx, [rsp + 0xb0]
call fcn.00444ea8
mov ecx, 0x20
call fcn.004024bc
mov r11, rax
cmp rax, rdi
je 0x47a0e7
mov qword [rax], rdi
mov dword [rax + 8], edi
mov dword [rax + 0xc], edi
mov qword [rax + 0x10], rdi
mov dword [rax + 0x18], edi
mov dword [rax + 0x1c], edi
jmp 0x47a0ea
mov r11, rdi
mov r13d, dword [rsp + 0xb8]
mov rax, r13
add r13d, r15d
mov dword [rsp + 0xb8], r13d
mov rsi, qword [rsp + 0xb0]
mov qword [rsi + rax*8], r11
cmp ebx, r13d
jae 0x47a0b3
mov rsi, qword [rsp + 0xd0]
mov dil, byte [rsp + 0xc8]
mov r15d, dword [rsp + 0xd8]
mov rcx, qword [rsp + 0xb0]
mov rbx, qword [rcx + rbx*8]
add rbx, 0x10
mov rcx, rbx
call fcn.00444ea8
mov ecx, dword [rbx + 8]
lea eax, [rcx + 1]
mov dword [rbx + 8], eax
mov rdx, rcx
mov rcx, qword [rbx]
mov rax, qword [rsp + 0x110]
mov qword [rcx + rdx*8], rax
xor ecx, ecx
cmp dil, cl
je 0x47a18c
mov rax, qword [rsp + 0x718]
mov r8, qword [rax + 8]
mov rcx, qword [rax + 0x48]
mov eax, dword [rcx + rbp*4]
mov ecx, dword [rcx + rbp*4 + 4]
mov rdx, qword [r8 + rcx*8]
sub rdx, qword [r8 + rax*8]
add qword [rsp + 0x138], rdx
jmp 0x47a1ce
mov edx, 1
mov byte [rsp + 0xa8], dl
add qword [rsp + 0x138], r14
mov rax, qword [rsp + 0x168]
cmp rax, r14
cmovb rax, r14
mov qword [rsp + 0x168], rax
mov eax, dword [rsp + 0xac]
movzx eax, al
cmp r12b, cl
cmovne eax, edx
mov dword [rsp + 0xac], eax
mov rcx, qword [rsp + 0x190]
call fcn.004024f4
mov rcx, qword [rsp + 0x180]
call fcn.004024f4
mov rcx, qword [rsp + 0x170]
xor r9d, r9d
cmp rcx, r9
je 0x47a229
lea rbx, [rcx - 8]
lea r9, [fcn.00417e10]
mov r8d, dword [rbx]
mov edx, 0x20
call fcn.0049d9c0
mov rcx, rbx
call fcn.004024f4
mov rcx, qword [rsp + 0x718]
xor r9d, r9d
lea r11d, [r9 + 1]
jmp 0x47a237
mov rcx, qword [rsp + 0x718]
mov r11d, 1
add r15d, r11d
mov dword [rsp + 0xd8], r15d
add rbp, r11
cmp r15d, dword [rcx + 4]
jb 0x479e00
mov r14, qword [rsp + 0x140]
mov rdi, qword [rsp + 0x168]
mov r12, qword [rsp + 0xb0]
mov bl, byte [rsp + 0xa8]
mov r15, qword [rsp + 0x738]
mov r10, qword [rsp + 0x720]
mov r11, qword [rsp + 0x138]
jmp 0x47a35f
movsxd rax, r13d
xor ebp, ebp
cmp r13d, ebp
je 0x47a2da
mov r12, qword [rsp + 0xb0]
lea rdi, [r12 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, rbp
je 0x47a2d3
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, ebp
jne 0x47a2a6
jmp 0x47a2e2
mov r12, qword [rsp + 0xb0]
mov rcx, r12
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x140]
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x47a316
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbp
je 0x47a32a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rbp
je 0x47a33d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x47ee54
mov bl, bpl
mov r15, qword [rsp + 0x738]
mov r11, rbp
jmp 0x47a35f
mov r10, qword [rsp + 0x720]
mov rax, r9
mov qword [rsp + 0x268], r9
mov ecx, 1
cmp qword [rsp + 0x328], rcx
jbe 0x47a382
cmp qword [r15 + 0x20], r9
je 0x47a382
mov r9b, cl
xor ebp, ebp
mov r8d, ebp
cmp dword [r10 + 8], ebp
jbe 0x47a3e1
mov rdx, qword [r10]
mov rsi, rcx
mov rcx, qword [rdx]
cmp byte [rcx + 0x3c], bpl
je 0x47a3c4
mov rcx, qword [rcx + 0x20]
add r11, rcx
cmp r9b, bpl
je 0x47a3b5
add rax, rcx
mov qword [rsp + 0x268], rax
jmp 0x47a3c4
cmp rax, rcx
cmovb rax, rcx
mov qword [rsp + 0x268], rax
add r8d, esi
add rdx, 8
cmp r8d, dword [r10 + 8]
jb 0x47a393
mov qword [rsp + 0x138], r11
mov rsi, qword [rsp + 0xd0]
cmp rax, rdi
cmovb rax, rdi
mov qword [rsp + 0x268], rax
mov rdi, qword [rsp + 0x730]
mov rax, qword [rdi]
mov rdx, r11
mov rcx, rdi
call qword [rax + 0x18]
mov ebp, eax
xor ecx, ecx
cmp eax, ecx
je 0x47a4b3
movsxd rax, r13d
xor r15d, r15d
cmp r13d, r15d
je 0x47a456
lea rdi, [r12 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x47a451
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x47a424
mov rcx, r12
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47a485
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47a499
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47a4ac
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov ecx, 0x38
call fcn.004024bc
mov qword [rsp + 0x1d8], rax
xor ebp, ebp
cmp rax, rbp
je 0x47a4e1
mov rcx, rax
call fcn.00414064
mov r12, rax
mov qword [rsp + 0x1d0], rax
jmp 0x47a4ec
mov r12, rbp
mov qword [rsp + 0x1d0], rbp
mov qword [rsp + 0x590], r12
cmp r12, rbp
je 0x47a504
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
nop
mov r8b, 1
mov rdx, rdi
mov rcx, r12
call fcn.00413f58
mov qword [rsp + 0xe0], rbp
mov qword [rsp + 0xe8], rbp
mov dl, byte [r15 + 0x2b]
lea rcx, [rsp + 0x490]
call fcn.00478b68
nop
xor ecx, ecx
cmp byte [r15 + 0x2b], cl
je 0x47a657
cmp bl, cl
je 0x47a657
lea rcx, [rsp + 0x490]
call fcn.00414a90
xor ecx, ecx
cmp eax, ecx
je 0x47a657
movzx ebx, ax
or ebx, 0x80070000
cmp eax, ecx
cmovle ebx, eax
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
xor r15d, r15d
cmp r12, r15
je 0x47a5a9
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x47a5f5
mov rcx, qword [rsp + 0xb0]
lea rbp, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rbp, 8
mov rdi, qword [rbp]
cmp rdi, r15
je 0x47a5f0
mov rcx, qword [rdi + 0x10]
call fcn.004024f4
mov rcx, qword [rdi]
call fcn.004024f4
mov rcx, rdi
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x47a5c2
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47a629
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47a63d
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47a650
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebx
jmp 0x47ee54
mov rbx, rcx
mov qword [rsp + 0x170], rcx
mov rbp, rcx
mov qword [rsp + 0x178], rcx
mov qword [rsp + 0x180], rcx
mov byte [rsp + 0x188], cl
mov byte [rsp + 0x189], cl
mov byte [rsp + 0x18a], cl
mov byte [rsp + 0x18b], cl
mov byte [rsp + 0x18c], cl
mov edi, dword [r15 + 0x14]
mov eax, 5
cmp edi, ecx
cmovl edi, eax
cmp edi, ecx
je 0x47a709
mov rbx, qword [rsp + 0x90]
cmp rbx, rcx
je 0x47a6c5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
xor ecx, ecx
lea eax, [rcx + 5]
mov qword [rsp + 0x170], rbx
mov edx, 1
mov byte [rsp + 0x188], dl
cmp edi, eax
jl 0x47a70e
mov byte [rsp + 0x189], dl
mov byte [rsp + 0x18a], dl
cmp edi, 7
jl 0x47a70e
mov byte [rsp + 0x18b], dl
movzx eax, cl
cmp edi, 9
cmovge eax, edx
mov byte [rsp + 0x18c], al
jmp 0x47a70e
mov edx, 1
mov r15, qword [r15]
mov qword [rsp + 0x280], r15
mov edi, ecx
mov rax, qword [rsp + 0x720]
cmp dword [rax + 8], ecx
jbe 0x47a9be
mov r14, rcx
mov rax, qword [rax]
mov r8, qword [r14 + rax]
cmp byte [r8 + 0x3c], cl
je 0x47a87b
cmp byte [r8 + 0x3f], cl
jne 0x47a87b
cmp byte [r8 + 0x3e], cl
jne 0x47a87b
cmp qword [r8 + 0x20], rcx
je 0x47a87b
mov dword [rsp + 0x1a8], ecx
mov dword [rsp + 0x1ac], ecx
mov dword [rsp + 0x1b0], ecx
mov byte [rsp + 0x1b4], cl
cmp byte [rsp + 0xa9], cl
je 0x47a7a6
lea r9, [rsp + 0x1a8]
mov edx, edi
lea rcx, [rsp + 0x170]
call fcn.004776f0
mov ebp, eax
xor ecx, ecx
cmp eax, ecx
jne 0x47a8af
mov al, byte [r15 + 0x39]
mov byte [rsp + 0x1b4], al
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x140]
call fcn.00478998
mov ebx, eax
cmp eax, r13d
jb 0x47a853
xor r12d, r12d
lea r15d, [r12 + 1]
lea rcx, [rsp + 0xb0]
call fcn.00444ea8
mov ecx, 0x20
call fcn.004024bc
mov r11, rax
cmp rax, r12
je 0x47a811
mov qword [rax], r12
mov dword [rax + 8], r12d
mov dword [rax + 0xc], r12d
mov qword [rax + 0x10], r12
mov dword [rax + 0x18], r12d
mov dword [rax + 0x1c], r12d
jmp 0x47a814
mov r11, r12
mov r13d, dword [rsp + 0xb8]
mov rax, r13
add r13d, r15d
mov dword [rsp + 0xb8], r13d
mov rsi, qword [rsp + 0xb0]
mov qword [rsi + rax*8], r11
cmp ebx, r13d
jae 0x47a7d9
mov rsi, qword [rsp + 0xd0]
mov r12, qword [rsp + 0x1d0]
mov r15, qword [rsp + 0x280]
mov rcx, qword [rsp + 0xb0]
mov rbx, qword [rcx + rbx*8]
mov rcx, rbx
call fcn.0045b3fc
mov ecx, dword [rbx + 8]
lea eax, [rcx + 1]
mov dword [rbx + 8], eax
mov rax, qword [rbx]
mov dword [rax + rcx*4], edi
xor ecx, ecx
lea edx, [rcx + 1]
add edi, edx
add r14, 8
mov rax, qword [rsp + 0x720]
cmp edi, dword [rax + 8]
jb 0x47a72f
mov r14, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x178]
mov rbx, qword [rsp + 0x170]
jmp 0x47a9be
mov rcx, qword [rsp + 0x178]
call fcn.004024f4
mov rcx, qword [rsp + 0x170]
xor r14d, r14d
cmp rcx, r14
je 0x47a8d3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
cmp r12, r14
je 0x47a90c
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r14d
je 0x47a957
mov rcx, qword [rsp + 0xb0]
lea rdi, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x47a952
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x47a925
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x140]
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x47a990
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x47a9a4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r14
je 0x47a9b7
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rcx, rbp
call fcn.004024f4
xor r15d, r15d
cmp rbx, r15
je 0x47a9d7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov qword [rsp + 0x320], r15
mov rbx, r15
mov qword [rsp + 0x1f0], r15
cmp byte [rsp + 0xac], r15b
je 0x47ad47
mov ecx, 0x20
call fcn.004024bc
mov rdi, rax
mov qword [rsp + 0x320], rax
mov qword [rsp + 0x1d8], rax
cmp rax, r15
je 0x47aa33
mov dword [rax + 8], r15d
lea rax, [0x004af748]
mov qword [rdi], rax
lea rcx, [rdi + 0x10]
call fcn.00403678
jmp 0x47aa3e
mov rdi, r15
mov qword [rsp + 0x320], r15
cmp rdi, r15
je 0x47aa4c
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rbx, rdi
mov qword [rsp + 0x1f0], rdi
cmp rdi, r15
je 0x47aa65
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0x580]
cmp rcx, r15
je 0x47aa78
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x580], rdi
mov rax, qword [rsp + 0x738]
mov rdx, qword [rax]
cmp byte [rdx + 0x39], r15b
je 0x47aaa3
add rdx, 0x40
lea rcx, [rdi + 0x10]
call fcn.004038c4
jmp 0x47ad47
mov qword [rsp + 0x108], r15
mov rcx, qword [rsp + 0x730]
mov rax, qword [rcx]
lea r8, [rsp + 0x108]
lea rdx, [0x004ac018]
call qword [rax]
mov rcx, qword [rsp + 0x108]
cmp rcx, r15
jne 0x47abd0
cmp rdi, r15
je 0x47aae7
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
cmp r12, r15
je 0x47ab20
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x47ab6b
mov rcx, qword [rsp + 0xb0]
lea rdi, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x47ab66
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x47ab39
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47ab9f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47abb3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47abc6
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004001
jmp 0x47ee54
mov qword [rsp + 0x118], r15
mov rax, qword [rcx]
lea rdx, [rsp + 0x118]
call qword [rax + 0x18]
mov ebp, eax
cmp eax, r15d
je 0x47ad09
mov rcx, qword [rsp + 0x118]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x108]
cmp rcx, r15
je 0x47ac14
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
cmp rdi, r15
je 0x47ac23
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
cmp r12, r15
je 0x47ac5c
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x47aca7
mov rcx, qword [rsp + 0xb0]
lea rdi, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x47aca2
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x47ac75
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47acdb
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47acef
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47ad02
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rax, qword [rsp + 0x118]
cmp rax, r15
je 0x47ad2a
lea rcx, [rdi + 0x10]
mov rdx, rax
call fcn.0040385c
mov rax, qword [rsp + 0x118]
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x108]
cmp rcx, r15
je 0x47ad47
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x2b8], r15
mov qword [rsp + 0x2c0], r15
mov qword [rsp + 0x2c8], r15
mov dword [rsp + 0x2d0], r15d
mov qword [rsp + 0x2e0], r15
mov qword [rsp + 0x2f0], r15
mov qword [rsp + 0x308], r15
mov qword [rsp + 0x310], r15
mov edx, 0x10000
lea rcx, [rsp + 0x2c8]
call fcn.00413f00
nop
lea rcx, [rsp + 0x340]
call fcn.00478f68
nop
mov rdx, qword [rsp + 0x728]
lea rcx, [rsp + 0x2a0]
call fcn.00474cec
mov ebp, eax
cmp eax, r15d
je 0x47af01
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
mov rcx, qword [rsp + 0x310]
cmp rcx, r15
je 0x47adea
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x308]
cmp rcx, r15
je 0x47adfe
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c8]
call fcn.00413db0
nop
cmp rbx, r15
je 0x47ae1b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
cmp r12, r15
je 0x47ae54
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x47ae9f
mov rcx, qword [rsp + 0xb0]
lea rdi, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x47ae9a
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x47ae6d
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47aed3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47aee7
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47aefa
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rbp, r15
mov qword [rsp + 0x150], r15
mov edi, r15d
mov dword [rsp + 0x158], r15d
mov dword [rsp + 0x15c], r15d
mov rdx, qword [rsp + 0x720]
xor r8d, r8d
cmp dword [rdx + 8], r8d
jbe 0x47afda
mov r14, r8
mov rsi, qword [rsp + 0x718]
lea r12d, [r8 + 1]
mov rax, qword [rdx]
mov rcx, qword [r14 + rax]
cmp byte [rcx + 0x3c], r8b
je 0x47af64
cmp byte [rcx + 0x3f], r8b
jne 0x47af7c
cmp byte [rcx + 0x3e], r8b
jne 0x47af7c
cmp qword [rcx + 0x20], r8
jne 0x47afb5
jmp 0x47af7c
cmp dword [rcx], 0xffffffff
je 0x47af7c
mov ecx, dword [rcx]
add rcx, rcx
mov rax, qword [rsi + 0x88]
cmp byte [rax + rcx*8 + 0xc], r8b
jne 0x47afb5
lea rcx, [rsp + 0x150]
call fcn.0045b3fc
mov edi, dword [rsp + 0x158]
mov rax, rdi
add edi, r12d
mov dword [rsp + 0x158], edi
mov rbp, qword [rsp + 0x150]
mov dword [rbp + rax*4], r15d
mov rdx, qword [rsp + 0x720]
xor r8d, r8d
add r15d, r12d
add r14, 8
cmp r15d, dword [rdx + 8]
jb 0x47af43
mov rsi, qword [rsp + 0xd0]
mov r12, qword [rsp + 0x1d0]
mov r14, qword [rsp + 0x140]
mov r8, rdx
lea rdx, [0x0047870c]
lea rcx, [rsp + 0x150]
call fcn.00444550
xor r15d, r15d
cmp edi, r15d
jbe 0x47b102
mov r15, rbp
mov r14d, edi
mov rbx, qword [rsp + 0x718]
mov rsi, qword [rsp + 0x720]
xor r13d, r13d
lea r12d, [r13 + 1]
mov ecx, dword [r15]
mov rax, qword [rsi]
mov rdi, qword [rax + rcx*8]
lea rcx, [rsp + 0x250]
call fcn.00403678
nop
cmp byte [rdi + 0x3d], r13b
je 0x47b06b
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x288]
mov rcx, rdi
call fcn.00476e78
mov byte [rsp + 0x296], r13b
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x250]
call fcn.004038c4
jmp 0x47b097
lea r9, [rsp + 0x170]
lea r8, [rsp + 0x288]
mov edx, dword [rdi]
mov rcx, rbx
call fcn.00477fe0
lea r8, [rsp + 0x250]
mov edx, dword [rdi]
mov rcx, rbx
call fcn.004711e4
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x340]
call fcn.00475878
nop
mov rcx, qword [rsp + 0x250]
call fcn.004024f4
add r15, 4
sub r14, r12
jne 0x47b01a
mov rbx, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0xd0]
mov r12, qword [rsp + 0x1d0]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x140]
xor r15d, r15d
mov rcx, rbp
call fcn.004024f4
mov qword [r12 + 0x20], r15
mov eax, r15d
mov edi, dword [rsp + 0x148]
cmp edi, r15d
jbe 0x47b133
lea rcx, [r14 + 0x10]
mov edx, 1
mov dword [rcx], eax
add eax, edx
add rcx, 0x14
cmp eax, edi
jb 0x47b127
lea rcx, [rsp + 0x140]
call fcn.004781e0
mov dword [rsp + 0x260], r15d
mov rax, r15
mov qword [rsp + 0x280], r15
cmp edi, r15d
jbe 0x47e8db
lea rax, [rax + rax*4]
lea rdi, [r14 + rax*4]
mov rbp, qword [rsp + 0x738]
mov rdx, qword [rbp]
lea rcx, [rsp + 0x200]
call fcn.00479814
nop
cmp byte [rbp + 0x11], r15b
je 0x47b18f
cmp byte [rbp + 0x2b], r15b
je 0x47b18f
mov r8b, 1
jmp 0x47b192
mov r8b, r15b
mov rdx, rdi
lea rcx, [rsp + 0x200]
call fcn.004795ec
mov ebp, eax
cmp eax, r15d
jne 0x47c8be
cmp byte [rdi + 0xc], r15b
je 0x47b1e9
cmp byte [rsp + 0x239], r15b
jne 0x47b205
mov rax, qword [rsp + 0x320]
cmp rax, r15
je 0x47b1db
lea rdx, [rax + 0x10]
lea rcx, [rsp + 0x240]
call fcn.004038c4
mov eax, 1
mov byte [rsp + 0x239], al
jmp 0x47b205
mov byte [rsp + 0x239], r15b
mov dword [rsp + 0x248], r15d
mov rax, qword [rsp + 0x240]
mov word [rax], r15w
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x5b0]
call fcn.0046a5d4
nop
mov eax, dword [rdi + 0x10]
mov r15, qword [rsp + 0xb0]
mov rax, qword [r15 + rax*8]
mov qword [rsp + 0x270], rax
xor r15d, r15d
mov dword [rsp + 0xd8], r15d
mov rdx, r15
mov qword [rsp + 0x1c0], r15
cmp dword [rax + 0x18], r15d
jbe 0x47c013
mov r11, qword [rsp + 0x718]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1d8], rcx
mov r8d, dword [rcx + rdx*8]
mov dword [rsp + 0xac], r8d
mov rax, qword [r11 + 0x30]
mov r15, r8
mov qword [rsp + 0x118], r8
mov edi, dword [rax + r8*4]
mov dword [rsp + 0xcc], edi
cmp dword [rcx + rdx*8 + 4], edi
jne 0x47b577
mov rcx, qword [rsp + 0x90]
xor edi, edi
cmp rcx, rdi
je 0x47b34a
mov rax, qword [rcx]
lea edx, [rdi + 2]
lea r9d, [rdi + 3]
call qword [rax + 0x20]
mov ebp, eax
cmp eax, edi
jne 0x47ca44
mov ecx, edi
mov r11, qword [rsp + 0x718]
mov rax, qword [r11 + 0x198]
movsxd rbp, dword [rax + r15*4]
mov rdi, rbp
xor edx, edx
cmp dword [rsp + 0xcc], edx
jbe 0x47b34a
shl rdi, 4
mov rax, qword [r11 + 0x88]
cmp byte [rdi + rax + 0xc], dl
je 0x47b333
mov edx, 1
add ecx, edx
mov dword [rsp + 0xdc], ecx
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea r9d, [rdx + 2]
mov r8d, ebp
call qword [rax + 0x20]
mov r15d, eax
xor edx, edx
cmp eax, edx
jne 0x47cbe1
mov ecx, dword [rsp + 0xdc]
mov r11, qword [rsp + 0x718]
inc ebp
add rdi, 0x10
cmp ecx, dword [rsp + 0xcc]
jb 0x47b2e7
mov r15, qword [rsp + 0x118]
mov r8, qword [r11 + 8]
mov rdx, qword [r11 + 0x48]
mov eax, dword [rsp + 0xac]
inc eax
mov qword [rsp + 0x160], rax
mov ecx, dword [rdx + rax*4]
mov eax, dword [rdx + r15*4]
mov rdi, qword [r8 + rcx*8]
sub rdi, qword [r8 + rax*8]
mov eax, dword [rdx + r15*4]
mov r8, qword [r8 + rax*8]
add r8, qword [r11 + 0x178]
mov qword [rsp + 0x20], r12
mov r9, rdi
mov rdx, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x710]
call fcn.00478534
mov ebp, eax
xor r15d, r15d
cmp eax, r15d
jne 0x47cd77
add qword [r12 + 0x20], rdi
mov edi, dword [rsp + 0x3b8]
lea rcx, [rsp + 0x3b0]
call fcn.00444ea8
lea ecx, [r15 + 0x30]
call fcn.004024bc
mov r15, rax
xor r8d, r8d
cmp rax, r8
je 0x47b3f2
mov qword [rax], r8
mov dword [rax + 8], r8d
mov qword [rax + 0x10], r8
mov dword [rax + 0x18], r8d
mov qword [rax + 0x20], r8
mov dword [rax + 0x28], r8d
jmp 0x47b3f5
mov r15, r8
mov eax, dword [rsp + 0x3b8]
mov rcx, rax
mov r10d, 1
add eax, r10d
mov dword [rsp + 0x3b8], eax
mov rax, qword [rsp + 0x3b0]
mov qword [rax + rcx*8], r15
mov ebp, dword [rsp + 0xac]
mov rdx, qword [rsp + 0x718]
cmp ebp, dword [rdx + 0x18]
jae 0x47b454
mov rax, qword [rdx + 0x10]
cmp byte [rbp + rax], r8b
je 0x47b454
mov rax, qword [rdx + 0x20]
mov r9d, dword [rax + rbp*4]
mov r8b, r10b
mov edx, edi
lea rcx, [rsp + 0x340]
call fcn.00475770
mov r8, r15
mov edx, ebp
mov rdi, qword [rsp + 0x718]
mov rcx, rdi
call fcn.00471c94
mov r11, qword [rdi + 0x48]
xor edx, edx
movsxd rcx, dword [r11 + rbp*4]
cmp dword [r15 + 0x28], edx
jbe 0x47b4f1
shl rcx, 3
mov r14d, edx
mov rsi, rdi
lea ebx, [rdx + 1]
mov rax, qword [rsi + 8]
lea rbp, [rcx + 8]
mov rdi, qword [rax + rbp]
sub rdi, qword [rax + rcx]
lea rcx, [rsp + 0x380]
call fcn.00444ea8
mov r11d, dword [rsp + 0x388]
mov rcx, r11
add r11d, ebx
mov dword [rsp + 0x388], r11d
mov rax, qword [rsp + 0x380]
mov qword [rax + rcx*8], rdi
add r14d, ebx
mov rcx, rbp
cmp r14d, dword [r15 + 0x28]
jb 0x47b486
mov rbx, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0xd0]
mov r14, qword [rsp + 0x140]
mov rdi, qword [rsp + 0x718]
mov rax, qword [rdi + 0x40]
mov rdx, qword [rsp + 0x118]
mov ebp, dword [rax + rdx*4]
mov rcx, qword [rsp + 0x160]
mov r15d, dword [rax + rcx*4]
cmp rbp, r15
jae 0x47bda7
mov r14, qword [rsp + 0x718]
mov r12d, 1
mov rax, qword [r14 + 0x38]
mov rdi, qword [rax + rbp*8]
lea rcx, [rsp + 0x370]
call fcn.00444ea8
mov r11d, dword [rsp + 0x378]
mov rcx, r11
add r11d, r12d
mov dword [rsp + 0x378], r11d
mov rax, qword [rsp + 0x370]
mov qword [rax + rcx*8], rdi
add rbp, r12
cmp rbp, r15
jb 0x47b523
mov r12, qword [rsp + 0x1d0]
mov r14, qword [rsp + 0x140]
jmp 0x47bda7
xor ebp, ebp
mov qword [rsp + 0x128], rbp
mov dword [rsp + 0x130], ebp
mov dword [rsp + 0x134], ebp
mov edx, ebp
mov dword [rsp + 0xc0], ebp
mov rcx, qword [rsp + 0x90]
cmp rcx, rbp
je 0x47b5ca
mov rax, qword [rcx]
lea edx, [rbp + 2]
lea r9d, [rbp + 4]
call qword [rax + 0x20]
mov ebp, eax
xor ecx, ecx
cmp eax, ecx
jne 0x47cf0b
mov edx, ecx
mov r11, qword [rsp + 0x718]
xor ebp, ebp
mov qword [rsp + 0x108], rbp
mov rax, qword [r11 + 0x198]
movsxd rcx, dword [rax + r15*4]
cmp edi, ebp
jbe 0x47b6d3
mov rdi, rcx
shl rdi, 4
lea r15, [rsi + rcx*4]
mov ebx, dword [rsp + 0xcc]
mov r14, qword [rsp + 0x720]
xor r13d, r13d
lea esi, [r13 + 1]
mov bpl, r13b
mov rax, qword [r11 + 0x88]
mov qword [rsp + 0x160], rax
cmp byte [rdi + rax + 0xc], r13b
je 0x47b642
add edx, esi
mov dword [rsp + 0xc0], edx
cmp dword [r15], r13d
jl 0x47b642
mov ecx, dword [r15]
mov rax, qword [r14]
mov rdx, qword [rax + rcx*8]
movzx ebp, r13b
cmp byte [rdx + 0x3c], r13b
cmove ebp, esi
lea rcx, [rsp + 0x128]
call fcn.0041e648
mov r11d, dword [rsp + 0x130]
mov rcx, r11
add r11d, esi
mov dword [rsp + 0x130], r11d
mov rax, qword [rsp + 0x128]
mov byte [rcx + rax], bpl
cmp bpl, r13b
je 0x47b692
mov rax, qword [rsp + 0x160]
mov r8, qword [rsp + 0x108]
add r8, qword [rdi + rax]
mov qword [rsp + 0x108], r8
add rdi, 0x10
add r15, 4
mov edx, dword [rsp + 0xc0]
cmp edx, ebx
mov r11, qword [rsp + 0x718]
jb 0x47b606
mov rbx, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0xd0]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x140]
xor ebp, ebp
mov eax, dword [rsp + 0x388]
mov dword [rsp + 0xdc], eax
mov qword [rsp + 0xc0], rbp
mov qword [rsp + 0x1c8], rbp
mov ecx, 0x40
call fcn.004024bc
mov rdi, rax
cmp rax, rbp
je 0x47b721
mov dword [rax + 0x10], ebp
lea rax, [0x004af7a8]
mov qword [rdi], rax
lea rax, [0x004af788]
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbp
jmp 0x47b724
mov rdi, rbp
mov qword [rsp + 0x160], rdi
cmp rdi, rbp
je 0x47b73b
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
nop
mov rax, qword [rsp + 0x738]
cmp byte [rax + 0x2b], bpl
je 0x47b85e
mov rax, qword [rsp + 0x558]
lea rcx, [rax + 8]
neg rax
sbb rax, rax
and rax, rcx
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x278], rbp
lea r8, [rsp + 0x278]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xe0]
call fcn.0041433c
lea rcx, [rsp + 0xe0]
call fcn.004140d4
mov ebp, eax
xor r15d, r15d
cmp eax, r15d
jne 0x47d0b8
mov r15, qword [rsp + 0x558]
mov rbp, qword [rsp + 0x278]
xor eax, eax
cmp rbp, rax
je 0x47b7cd
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
xor eax, eax
mov rcx, qword [r15 + 0x48]
cmp rcx, rax
je 0x47b7dc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r15 + 0x48], rbp
mov rbp, qword [rsp + 0x710]
xor r15d, r15d
cmp rbp, r15
je 0x47b7fa
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0x550]
cmp rcx, r15
je 0x47b80d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x550], rbp
mov rcx, qword [rsp + 0x718]
mov rax, qword [rcx + 0x178]
mov qword [rsp + 0x568], rax
mov qword [rsp + 0x570], rcx
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0x578], eax
mov rcx, qword [rsp + 0x278]
cmp rcx, r15
je 0x47ba16
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x47ba16
mov ecx, 0x60
call fcn.004024bc
mov r15, rax
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x110], rax
cmp rax, rbp
je 0x47b8ad
mov qword [rax + 0x30], rbp
mov qword [rax + 0x38], rbp
mov dword [rax + 0x40], ebp
lea rax, [0x004af7e8]
mov qword [r15], rax
mov qword [r15 + 0x50], rbp
mov dword [r15 + 0x58], ebp
mov ecx, 0x10000
call fcn.004024bc
mov qword [r15 + 0x48], rax
jmp 0x47b8b8
mov r15, rbp
mov qword [rsp + 0x1c8], rbp
mov dword [r15 + 0x58], ebp
mov rax, qword [r15]
mov rcx, r15
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0xc0]
cmp rcx, rbp
je 0x47b8d8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0xc0], r15
lea rdx, [r15 + 8]
mov qword [rsp + 0x120], rdx
mov byte [rsp + 0xc8], bpl
mov byte [rsp + 0x728], bpl
lea rcx, [rsp + 0x288]
call fcn.00403678
nop
mov qword [rsp + 0x168], rbp
mov byte [rsp + 0xa9], bpl
mov qword [rsp + 0x80], rbp
mov eax, 1
mov dword [rsp + 0x78], eax
mov byte [rsp + 0x70], bpl
lea rax, [rsp + 0x288]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x728]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0xa9]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x168]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rbp
mov eax, dword [rsp + 0xac]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x718]
mov r9, rax
mov r8, qword [rax + 0x178]
mov rdx, qword [rsp + 0x710]
lea rcx, [rsp + 0x4b8]
call fcn.00466260
mov ebp, eax
xor eax, eax
cmp ebp, eax
jne 0x47d291
mov rbp, qword [rsp + 0x168]
cmp rbp, rax
je 0x47d3c4
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rcx, qword [r15 + 0x50]
xor eax, eax
cmp rcx, rax
je 0x47b9f1
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
mov qword [r15 + 0x50], rbp
mov rcx, qword [rsp + 0x168]
cmp rcx, rax
je 0x47ba09
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x288]
call fcn.004024f4
mov r15, qword [rsp + 0x120]
mov rax, qword [rsp + 0x718]
mov qword [r15 + 0x20], rax
mov rbp, qword [rsp + 0x90]
xor eax, eax
cmp rbp, rax
je 0x47ba45
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
xor eax, eax
mov rcx, qword [r15 + 0x28]
cmp rcx, rax
je 0x47ba56
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
mov qword [r15 + 0x28], rbp
mov rbp, qword [rsp + 0xa0]
cmp rbp, rax
je 0x47ba73
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
xor eax, eax
mov rcx, qword [r15 + 0x30]
cmp rcx, rax
je 0x47ba82
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, r15
mov qword [r15 + 0x30], rbp
mov rax, qword [rsp + 0x718]
mov rax, qword [rax + 0x198]
mov rdx, qword [rsp + 0x118]
mov r15d, dword [rax + rdx*4]
mov dword [rcx + 0x18], r15d
lea rax, [rsp + 0x128]
mov qword [rcx + 0x10], rax
xor eax, eax
mov dword [rcx + 0x1c], eax
mov byte [rcx + 1], al
call fcn.00477b1c
mov ebp, eax
xor eax, eax
cmp ebp, eax
jne 0x47d4e5
mov rax, qword [rsp + 0x718]
mov qword [rdi + 0x38], rax
mov rbp, qword [rsp + 0xc0]
mov dword [rdi + 0x30], r15d
lea rax, [rsp + 0x128]
mov qword [rdi + 0x28], rax
xor r15d, r15d
mov qword [rdi + 0x20], r15
cmp rbp, r15
je 0x47bb07
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rcx, qword [rdi + 0x18]
cmp rcx, r15
je 0x47bb16
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x18], rbp
mov rbp, qword [rsp + 0x738]
cmp byte [rbp + 0x2b], r15b
je 0x47bb3e
lea rcx, [rsp + 0x490]
call fcn.00414af0
cmp eax, r15d
jne 0x47d5f6
lea rcx, [rsp + 0x3b0]
call fcn.00475a14
mov qword [rsp + 0x38], r12
lea rcx, [rsp + 0x380]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x310]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x108]
lea r8, [rsp + 0x268]
mov rdx, rdi
lea rcx, [rsp + 0x5b0]
call fcn.00469be8
mov r15d, eax
cmp eax, 0x20000002
je 0x47d70e
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0x110], rax
xor r9d, r9d
cmp r15d, r9d
jne 0x47bbcc
lea r8, [rsp + 0x370]
mov rdx, rax
lea rcx, [rsp + 0x5b0]
call fcn.00468974
xor r9d, r9d
cmp byte [rbp + 0x2b], r9b
je 0x47bcc1
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor ebp, ebp
mov rdi, rbp
mov qword [rsp + 0x160], rbp
mov rcx, qword [rsp + 0xc0]
cmp rcx, rbp
je 0x47bc07
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0xc0], rbp
mov rcx, qword [rsp + 0x4a0]
call fcn.00495220
xor r9d, r9d
cmp eax, r9d
jne 0x47d81c
mov ebp, dword [rsp + 0x54c]
lea r11d, [r9 + 1]
cmp ebp, r11d
je 0x47bc3a
cmp byte [rsp + 0x548], r9b
je 0x47bc97
mov rcx, qword [rsp + 0xa0]
cmp rcx, r9
je 0x47bc8e
mov rax, qword [rsp + 0x718]
mov rdx, qword [rax + 0x198]
mov r10, qword [rcx]
mov eax, ebp
neg eax
sbb r9d, r9d
and r9d, 0xfffffffc
add r9d, 6
mov rax, qword [rsp + 0x118]
mov r8d, dword [rdx + rax*4]
mov edx, r11d
call qword [r10 + 0x18]
mov dword [rsp + 0xac], eax
xor r9d, r9d
cmp eax, r9d
jne 0x47d92c
cmp ebp, r9d
jne 0x47da32
cmp ebp, r9d
jne 0x47db36
cmp r15d, r9d
jne 0x47df8f
mov r8, qword [rsp + 0x108]
cmp qword [rsp + 0x100], r8
jne 0x47c8b3
jmp 0x47bcf3
mov rax, qword [rsp + 0x1c8]
mov ebp, dword [rax + 0x58]
mov eax, 1
cmp ebp, eax
je 0x47dc37
cmp ebp, r9d
jne 0x47de84
cmp r15d, r9d
jne 0x47df8f
mov r8, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x120]
mov rax, qword [rdx + 0x10]
mov ecx, dword [rdx + 0x1c]
sub ecx, dword [rax + 8]
neg ecx
sbb ebp, ebp
mov r15d, 0x80004005
and ebp, r15d
jne 0x47e0a2
mov rbp, qword [rsp + 0x110]
cmp rbp, r8
jne 0x47e1b4
cmp rdi, r9
je 0x47bd3a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x47bd4d
mov rax, qword [rcx]
call qword [rax + 0x10]
movsxd r8, dword [rsp + 0xdc]
mov rdx, r8
cmp r8d, dword [rsp + 0x388]
jae 0x47bd95
shl rdx, 3
mov esi, 1
mov rax, qword [rsp + 0x380]
mov rcx, qword [rdx + rax]
add qword [r12 + 0x30], rcx
add r8d, esi
add rdx, 8
cmp r8d, dword [rsp + 0x388]
jb 0x47bd6b
mov rsi, qword [rsp + 0xd0]
add qword [r12 + 0x28], rbp
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
mov rax, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1c0]
mov edi, dword [rax + rcx*8 + 4]
lea rcx, [rsp + 0x360]
call fcn.0045b3fc
mov r11d, dword [rsp + 0x368]
mov rcx, r11
mov r10d, 1
add r11d, r10d
mov dword [rsp + 0x368], r11d
mov rax, qword [rsp + 0x360]
mov dword [rax + rcx*4], edi
xor r9d, r9d
mov r8d, r9d
mov r11, qword [rsp + 0x718]
mov rax, qword [r11 + 0x198]
mov rcx, qword [rsp + 0x118]
movsxd r15, dword [rax + rcx*4]
cmp dword [rsp + 0xcc], r9d
jbe 0x47bfd8
mov rbp, r15
shl rbp, 4
lea rdx, [rsi + r15*4]
mov qword [rsp + 0x110], rdx
mov r14d, dword [rsp + 0xcc]
mov rbx, qword [rsp + 0x720]
mov rax, qword [r11 + 0x88]
cmp byte [rax + rbp + 0xc], r9b
je 0x47bfa4
add r8d, r10d
mov dword [rsp + 0xdc], r8d
cmp dword [rdx], r9d
jl 0x47bfa4
mov ecx, dword [rdx]
mov rax, qword [rbx]
mov rdi, qword [rax + rcx*8]
cmp byte [rdi + 0x3c], r9b
jne 0x47bfa4
lea rcx, [rsp + 0x330]
call fcn.00403678
nop
lea r9, [rsp + 0x170]
lea r8, [rsp + 0x1a8]
mov edx, r15d
mov rcx, qword [rsp + 0x718]
call fcn.00477fe0
xor r13d, r13d
cmp byte [rdi + 0x3d], r13b
je 0x47bf3a
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x190], eax
mov al, byte [rdi + 0x40]
mov byte [rsp + 0x198], al
mov rax, qword [rdi + 8]
mov qword [rsp + 0x170], rax
mov al, byte [rdi + 0x41]
mov byte [rsp + 0x194], al
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x178], rax
mov al, byte [rdi + 0x42]
mov byte [rsp + 0x195], al
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0x180], rax
mov al, byte [rdi + 0x43]
mov byte [rsp + 0x196], al
mov al, byte [rdi + 0x3e]
mov byte [rsp + 0x199], al
mov byte [rsp + 0x197], r13b
mov al, byte [rdi + 0x3f]
mov byte [rsp + 0x1b5], al
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x330]
call fcn.004038c4
jmp 0x47bf52
lea r8, [rsp + 0x330]
mov edx, r15d
mov rcx, qword [rsp + 0x718]
call fcn.004711e4
lea r9, [rsp + 0x330]
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x340]
call fcn.00475878
nop
mov rcx, qword [rsp + 0x330]
call fcn.004024f4
mov rdx, qword [rsp + 0x110]
mov r8d, dword [rsp + 0xdc]
mov r11, qword [rsp + 0x718]
xor r9d, r9d
lea r10d, [r9 + 1]
add r15d, r10d
add rbp, 0x10
add rdx, 4
mov qword [rsp + 0x110], rdx
cmp r8d, r14d
jb 0x47be41
mov rbx, qword [rsp + 0x1f0]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x140]
mov r9d, dword [rsp + 0xd8]
add r9d, r10d
mov dword [rsp + 0xd8], r9d
mov rdx, qword [rsp + 0x1c0]
add rdx, r10
mov qword [rsp + 0x1c0], rdx
mov rax, qword [rsp + 0x270]
cmp r9d, dword [rax + 0x18]
jb 0x47b25a
xor r15d, r15d
mov edi, dword [rax + 8]
mov dword [rsp + 0xc0], edi
cmp edi, r15d
jne 0x47c042
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
jmp 0x47c879
mov qword [rsp + 0x1e0], r15
mov dword [rsp + 0x1e8], r15d
mov dword [rsp + 0x1ec], r15d
mov edx, edi
lea rcx, [rsp + 0x1e0]
call fcn.00478904
mov rax, qword [rsp + 0x738]
mov r15b, byte [rax + 0x29]
xor eax, eax
cmp edi, eax
jbe 0x47c111
mov rbp, rax
mov rdi, qword [rsp + 0x1e0]
mov r14d, dword [rsp + 0xc0]
mov rsi, qword [rsp + 0x270]
mov r12, qword [rsp + 0x720]
lea r13d, [rax + 1]
mov rdx, qword [rsi]
mov ecx, dword [rdx + rbp]
mov rax, qword [r12]
mov r9b, r15b
mov r8, qword [rax + rcx*8]
mov edx, dword [rdx + rbp]
lea rcx, [rsp + 0x170]
call fcn.00476c0c
mov rcx, qword [rax]
mov qword [rdi], rcx
mov rcx, qword [rax + 8]
mov qword [rdi + 8], rcx
mov rax, qword [rax + 0x10]
mov qword [rdi + 0x10], rax
add rbp, 4
add rdi, 0x18
sub r14, r13
jne 0x47c0a6
mov rsi, qword [rsp + 0xd0]
mov r12, qword [rsp + 0x1d0]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x140]
mov edi, dword [rsp + 0xc0]
mov byte [rsp + 0xa8], r15b
lea r8, [rsp + 0xa8]
lea rdx, [0x00477564]
lea rcx, [rsp + 0x1e0]
call fcn.00478274
mov ebp, edi
xor r9d, r9d
mov rdi, r9
mov qword [rsp + 0x270], r9
cmp rbp, r9
je 0x47c164
mov rcx, rbp
shl rcx, 2
call fcn.004024bc
mov rdi, rax
mov qword [rsp + 0x270], rax
xor r9d, r9d
mov r15d, dword [rsp + 0xc0]
cmp r15d, r9d
jbe 0x47c199
mov rcx, rdi
mov rdx, qword [rsp + 0x1e0]
add rdx, 8
mov r10d, 1
mov eax, dword [rdx]
mov dword [rcx], eax
add rdx, 0x18
add rcx, 4
sub rbp, r10
jne 0x47c186
jmp 0x47c19f
mov r10d, 1
mov eax, r9d
mov dword [rsp + 0xac], r9d
mov r8, r9
mov qword [rsp + 0x108], r9
cmp r15d, r9d
jbe 0x47c844
jmp 0x47c1c6
mov r10d, 1
mov rdx, r9
mov qword [rsp + 0x120], r9
mov ebp, r9d
mov dword [rsp + 0xcc], r9d
mov qword [rsp + 0x118], r9
cmp eax, r15d
jae 0x47c314
lea r14, [rdi + r8*4]
mov rsi, r9
mov ebx, dword [rsp + 0xac]
mov r12, qword [rsp + 0x738]
mov rdi, qword [rsp + 0x720]
mov r13, qword [rsp + 0x328]
mov eax, ebp
cmp rax, r13
jae 0x47c2df
mov ecx, dword [r14]
mov rax, qword [rdi]
mov r15, qword [rax + rcx*8]
add rdx, qword [r15 + 0x20]
mov qword [rsp + 0x120], rdx
cmp rdx, qword [r12 + 0x20]
ja 0x47c2df
cmp byte [r12 + 0x28], r9b
je 0x47c2b0
lea rcx, [r15 + 0x28]
call fcn.00403c54
mov ebp, eax
mov dx, 0x2e
lea rcx, [r15 + 0x28]
call fcn.00403c20
cmp eax, ebp
jg 0x47c268
mov eax, dword [r15 + 0x30]
jmp 0x47c26a
inc eax
mov ecx, eax
mov rax, qword [r15 + 0x28]
lea rcx, [rax + rcx*2]
mov ebp, dword [rsp + 0xcc]
xor r9d, r9d
cmp ebp, r9d
jne 0x47c294
mov rsi, rcx
mov rdx, qword [rsp + 0x120]
lea r10d, [r9 + 1]
jmp 0x47c2b0
mov rdx, rsi
call fcn.00402a54
xor r9d, r9d
cmp al, r9b
je 0x47c2d9
mov rdx, qword [rsp + 0x120]
lea r10d, [r9 + 1]
add ebp, r10d
mov dword [rsp + 0xcc], ebp
add qword [rsp + 0x118], r10
add r14, 4
lea eax, [rbp + rbx]
cmp eax, dword [rsp + 0xc0]
jb 0x47c213
jmp 0x47c2df
mov r10d, 1
cmp ebp, r10d
mov rbx, qword [rsp + 0x1f0]
mov rdi, qword [rsp + 0x270]
mov rsi, qword [rsp + 0xd0]
mov r12, qword [rsp + 0x1d0]
mov r13d, dword [rsp + 0xb8]
mov r14, qword [rsp + 0x140]
jae 0x47c329
mov r15d, r10d
mov dword [rsp + 0xcc], r10d
mov qword [rsp + 0x118], r10
jmp 0x47c331
mov r15d, dword [rsp + 0xcc]
mov rcx, r12
call fcn.00413f4c
mov ebp, eax
xor eax, eax
cmp ebp, eax
jne 0x47e2c7
mov ecx, 0xf8
call fcn.004024bc
xor ecx, ecx
cmp rax, rcx
je 0x47c365
mov rcx, rax
call fcn.004772a0
mov rbp, rax
xor ecx, ecx
jmp 0x47c368
mov rbp, rcx
mov qword [rsp + 0x598], rbp
cmp rbp, rcx
je 0x47c380
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
nop
mov rcx, qword [rsp + 0x738]
mov al, byte [rcx + 0x2c]
mov byte [rbp + 0x71], al
mov al, byte [rcx + 0x2d]
mov byte [rbp + 0x72], al
mov al, byte [rcx + 0x2e]
mov byte [rbp + 0x70], al
mov al, byte [rcx + 0x2f]
mov byte [rbp + 0x73], al
mov eax, dword [rsp + 0xac]
lea r8, [rdi + rax*4]
mov r9d, r15d
mov rdx, qword [rsp + 0x730]
mov rcx, rbp
call fcn.0046bc5c
mov r11d, dword [rsp + 0x388]
mov dword [rsp + 0xd8], r11d
lea rcx, [rsp + 0x3b0]
call fcn.00475a14
mov qword [rsp + 0x38], r12
lea rcx, [rsp + 0x380]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x310]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x120]
lea r8, [rsp + 0x268]
mov rdx, rbp
lea rcx, [rsp + 0x5b0]
call fcn.00469be8
mov r15d, eax
xor eax, eax
cmp r15d, eax
jne 0x47e3bd
mov eax, dword [rbp + 0x80]
cmp eax, dword [rbp + 0x5c]
jne 0x47e4bf
mov rax, qword [rbp + 0x20]
mov qword [rsp + 0x1d8], rax
lea r8, [rsp + 0x370]
mov rdx, rax
lea rcx, [rsp + 0x5b0]
call fcn.00468974
xor r9d, r9d
mov r11, r9
movsxd r8, dword [rsp + 0xd8]
mov ecx, dword [rsp + 0x388]
cmp r8d, ecx
jae 0x47c49b
mov rax, qword [rsp + 0x380]
lea rdx, [rax + r8*8]
sub ecx, r8d
mov eax, ecx
lea ecx, [r9 + 1]
add r11, qword [rdx]
add rdx, 8
sub rax, rcx
jne 0x47c48f
add qword [r12 + 0x30], r11
mov dword [rsp + 0xd8], r9d
mov qword [rsp + 0x110], r9
mov rax, r9
mov qword [rsp + 0x120], r9
mov dword [rsp + 0xdc], r9d
mov r15d, dword [rsp + 0xcc]
cmp r15d, r9d
jbe 0x47c771
mov qword [rsp + 0x1c8], r9
mov qword [rsp + 0x1c0], r9
mov rax, qword [rsp + 0x108]
lea rcx, [rdi + rax*4]
mov qword [rsp + 0x160], rcx
mov ecx, dword [rcx]
mov rax, qword [rsp + 0x720]
mov rax, qword [rax]
mov r15, qword [rax + rcx*8]
lea rcx, [rsp + 0x250]
call fcn.00403678
nop
xor eax, eax
cmp byte [r15 + 0x3d], al
je 0x47c54a
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x150]
mov rcx, r15
call fcn.00476e78
lea rdx, [r15 + 0x28]
lea rcx, [rsp + 0x250]
call fcn.004038c4
jmp 0x47c582
lea r9, [rsp + 0x170]
lea r8, [rsp + 0x150]
mov edx, dword [r15]
mov rcx, qword [rsp + 0x718]
call fcn.00477fe0
lea r8, [rsp + 0x250]
mov edx, dword [r15]
mov rcx, qword [rsp + 0x718]
call fcn.004711e4
xor r9d, r9d
cmp byte [rsp + 0x199], r9b
jne 0x47e5c3
cmp byte [rsp + 0x15d], r9b
jne 0x47e5c3
mov edx, dword [rsp + 0xdc]
mov rax, qword [rbp + 0x78]
cmp byte [rdx + rax], r9b
jne 0x47c5e0
mov rax, qword [rsp + 0x110]
add rax, qword [r15 + 0x20]
mov qword [rsp + 0x110], rax
mov rcx, qword [rsp + 0x250]
call fcn.004024f4
mov r15, qword [rsp + 0x1c0]
jmp 0x47c71f
mov rax, qword [rbp + 0x98]
mov r8, qword [rsp + 0x1c8]
mov ecx, dword [r8 + rax]
mov dword [rsp + 0x158], ecx
mov rax, qword [rbp + 0x88]
mov r15, qword [rsp + 0x1c0]
mov rcx, qword [r15 + rax]
mov qword [rsp + 0x150], rcx
add qword [rsp + 0x120], rcx
cmp rcx, r9
je 0x47c642
mov r10d, 1
mov byte [rsp + 0x15e], r10b
mov byte [rsp + 0x15c], r10b
add dword [rsp + 0xd8], r10d
jmp 0x47c658
mov byte [rsp + 0x15e], r9b
mov byte [rsp + 0x15c], r9b
mov r10d, 1
mov rax, qword [rbp + 0xb8]
cmp byte [rdx + rax], r9b
je 0x47c6ec
cmp byte [rbp + 0x71], r9b
je 0x47c68a
mov byte [rsp + 0x194], r10b
mov rax, qword [rbp + 0xd8]
mov rcx, qword [r15 + rax]
mov qword [rsp + 0x170], rcx
cmp byte [rbp + 0x72], r9b
je 0x47c6ab
mov byte [rsp + 0x195], r10b
mov rax, qword [rbp + 0xe8]
mov rcx, qword [r15 + rax]
mov qword [rsp + 0x178], rcx
cmp byte [rbp + 0x70], r9b
je 0x47c6cc
mov byte [rsp + 0x196], r10b
mov rax, qword [rbp + 0xc8]
mov rcx, qword [r15 + rax]
mov qword [rsp + 0x180], rcx
cmp byte [rbp + 0x73], r9b
je 0x47c6ec
mov byte [rsp + 0x198], r10b
mov rax, qword [rbp + 0xa8]
mov ecx, dword [r8 + rax]
mov dword [rsp + 0x190], ecx
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x340]
call fcn.00475878
nop
mov rcx, qword [rsp + 0x250]
call fcn.004024f4
mov eax, dword [rsp + 0xdc]
inc eax
mov dword [rsp + 0xdc], eax
add r15, 8
mov qword [rsp + 0x1c0], r15
add qword [rsp + 0x1c8], 4
mov rcx, qword [rsp + 0x160]
add rcx, 4
mov qword [rsp + 0x160], rcx
mov r15d, dword [rsp + 0xcc]
cmp eax, r15d
jb 0x47c4f8
mov rax, qword [rsp + 0x120]
cmp rax, qword [rsp + 0x1d8]
jne 0x47e6d5
add qword [r12 + 0x28], rax
lea rcx, [rsp + 0x360]
call fcn.0045b3fc
mov r11d, dword [rsp + 0x368]
mov rcx, r11
inc r11d
mov dword [rsp + 0x368], r11d
mov rax, qword [rsp + 0x360]
mov edx, dword [rsp + 0xd8]
mov dword [rax + rcx*4], edx
add dword [rsp + 0xac], r15d
mov rcx, qword [rsp + 0x118]
add qword [rsp + 0x108], rcx
mov rax, qword [rsp + 0x110]
xor ecx, ecx
cmp rax, rcx
je 0x47c814
mov rdx, qword [rsp + 0x138]
cmp rdx, rax
jb 0x47c814
sub rdx, rax
mov qword [rsp + 0x138], rdx
mov rcx, qword [rsp + 0x730]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov r15d, eax
xor eax, eax
cmp r15d, eax
jne 0x47e7d9
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
mov r15d, dword [rsp + 0xc0]
mov eax, dword [rsp + 0xac]
cmp eax, r15d
mov r8, qword [rsp + 0x108]
mov r9d, 0
jb 0x47c1c0
mov rcx, rdi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x1e0]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
xor r15d, r15d
mov ebp, dword [rsp + 0x260]
mov ecx, 1
add ebp, ecx
mov dword [rsp + 0x260], ebp
mov rax, qword [rsp + 0x280]
add rax, rcx
mov qword [rsp + 0x280], rax
cmp ebp, dword [rsp + 0x148]
jae 0x47e8db
jmp 0x47b15c
mov r15d, 0x80004005
jmp 0x47df8f
mov rcx, qword [rsp + 0x240]
cmp rcx, r15
je 0x47c8f0
mov r8d, dword [rsp + 0x24c]
inc r8d
add r8, r8
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x248], r15d
mov rcx, qword [rsp + 0x240]
call fcn.004024f4
mov rcx, qword [rsp + 0x210]
call fcn.004024f4
lea rcx, [rsp + 0x200]
call fcn.0046921c
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
mov rcx, qword [rsp + 0x310]
cmp rcx, r15
je 0x47c932
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x308]
cmp rcx, r15
je 0x47c946
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c8]
call fcn.00413db0
nop
cmp rbx, r15
je 0x47c963
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x47c9e2
mov rcx, qword [rsp + 0xb0]
lea rdi, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x47c9dd
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x47c9b0
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47ca16
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47ca2a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47ca3d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
mov rcx, qword [rsp + 0x240]
cmp rcx, rdi
je 0x47ca83
mov r8d, dword [rsp + 0x24c]
inc r8d
add r8, r8
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x248], edi
mov rcx, qword [rsp + 0x240]
call fcn.004024f4
mov rcx, qword [rsp + 0x210]
call fcn.004024f4
lea rcx, [rsp + 0x200]
call fcn.0046921c
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
mov rcx, qword [rsp + 0x310]
cmp rcx, rdi
je 0x47cac5
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x308]
cmp rcx, rdi
je 0x47cad9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c8]
call fcn.00413db0
nop
cmp rbx, rdi
je 0x47caf6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, edi
je 0x47cb7c
mov r15, qword [rsp + 0xb0]
lea rdi, [r15 + rax*8]
xor r12d, r12d
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x47cb73
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x47cb46
xor edi, edi
jmp 0x47cb84
mov r15, qword [rsp + 0xb0]
mov rcx, r15
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47cbb3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47cbc7
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47cbda
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
mov rcx, qword [rsp + 0x240]
xor ebp, ebp
cmp rcx, rbp
je 0x47cc22
mov r8d, dword [rsp + 0x24c]
inc r8d
add r8, r8
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x248], ebp
mov rcx, qword [rsp + 0x240]
call fcn.004024f4
mov rcx, qword [rsp + 0x210]
call fcn.004024f4
lea rcx, [rsp + 0x200]
call fcn.0046921c
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
mov rcx, qword [rsp + 0x310]
cmp rcx, rbp
je 0x47cc64
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x308]
cmp rcx, rbp
je 0x47cc78
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c8]
call fcn.00413db0
nop
cmp rbx, rbp
je 0x47cc95
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, ebp
je 0x47cd14
mov rcx, qword [rsp + 0xb0]
lea rdi, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, rbp
je 0x47cd0f
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, ebp
jne 0x47cce2
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x47cd48
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbp
je 0x47cd5c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rbp
je 0x47cd6f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x47ee54
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
mov rcx, qword [rsp + 0x240]
cmp rcx, r15
je 0x47cdb7
mov r8d, dword [rsp + 0x24c]
inc r8d
add r8, r8
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x248], r15d
mov rcx, qword [rsp + 0x240]
call fcn.004024f4
mov rcx, qword [rsp + 0x210]
call fcn.004024f4
lea rcx, [rsp + 0x200]
call fcn.0046921c
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
mov rcx, qword [rsp + 0x310]
cmp rcx, r15
je 0x47cdf9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x308]
cmp rcx, r15
je 0x47ce0d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c8]
call fcn.00413db0
nop
cmp rbx, r15
je 0x47ce2a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x47cea9
mov rcx, qword [rsp + 0xb0]
lea rdi, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x47cea4
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x47ce77
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47cedd
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47cef1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47cf04
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
mov rcx, qword [rsp + 0x240]
xor edi, edi
cmp rcx, rdi
je 0x47cf5a
mov r8d, dword [rsp + 0x24c]
inc r8d
add r8, r8
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x248], edi
mov rcx, qword [rsp + 0x240]
call fcn.004024f4
mov rcx, qword [rsp + 0x210]
call fcn.004024f4
lea rcx, [rsp + 0x200]
call fcn.0046921c
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
mov rcx, qword [rsp + 0x310]
cmp rcx, rdi
je 0x47cf9c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x308]
cmp rcx, rdi
je 0x47cfb0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c8]
call fcn.00413db0
nop
cmp rbx, rdi
je 0x47cfcd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, edi
je 0x47d053
mov r15, qword [rsp + 0xb0]
lea rdi, [r15 + rax*8]
xor r12d, r12d
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x47d04a
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x47d01d
xor edi, edi
jmp 0x47d05b
mov r15, qword [rsp + 0xb0]
mov rcx, r15
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47d08a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47d09e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47d0b1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rcx, qword [rsp + 0x278]
cmp rcx, r15
je 0x47d0cc
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
cmp rdi, r15
je 0x47d0db
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r15
je 0x47d0ef
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
mov rcx, qword [rsp + 0x240]
cmp rcx, r15
je 0x47d13d
mov r8d, dword [rsp + 0x24c]
inc r8d
add r8, r8
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x248], r15d
mov rcx, qword [rsp + 0x240]
call fcn.004024f4
mov rcx, qword [rsp + 0x210]
call fcn.004024f4
lea rcx, [rsp + 0x200]
call fcn.0046921c
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
mov rcx, qword [rsp + 0x310]
cmp rcx, r15
je 0x47d17f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x308]
cmp rcx, r15
je 0x47d193
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c8]
call fcn.00413db0
nop
cmp rbx, r15
je 0x47d1b0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x47d22f
mov rcx, qword [rsp + 0xb0]
lea rdi, [rcx + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x47d22a
mov rcx, qword [rbx + 0x10]
call fcn.004024f4
mov rcx, qword [rbx]
call fcn.004024f4
mov rcx, rbx
call fcn.004024f4
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x47d1fd
mov rcx, qword [rsp + 0xb0]
call fcn.004024f4
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47d263
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47d277
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47d28a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rcx, qword [rsp + 0x168]
xor r13d, r13d
cmp rcx, r13
je 0x47d2a8
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x288]
call fcn.004024f4
nop
cmp rdi, r13
je 0x47d2c5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r13
je 0x47d2d9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r13
je 0x47d32e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x47d396
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r13
je 0x47d3aa
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r13
je 0x47d3bd
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rcx, qword [rsp + 0x288]
call fcn.004024f4
nop
xor ebp, ebp
cmp rdi, rbp
je 0x47d3e3
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, rbp
je 0x47d3f7
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, rbp
je 0x47d44c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x47d4b4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbp
je 0x47d4c8
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rbp
je 0x47d4db
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x47ee54
xor r13d, r13d
cmp rdi, r13
je 0x47d4f7
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r13
je 0x47d50b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r13
je 0x47d560
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x47d5c8
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r13
je 0x47d5dc
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r13
je 0x47d5ef
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
movzx ebp, ax
or ebp, 0x80070000
cmp eax, r15d
cmovle ebp, eax
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r15
je 0x47d623
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r15
je 0x47d678
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47d6e0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47d6f4
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47d707
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
xor edi, edi
cmp rcx, rdi
je 0x47d72e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, rdi
je 0x47d783
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47d7eb
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47d7ff
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47d812
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x47ee54
movzx edi, ax
or edi, 0x80070000
cmp eax, r9d
cmovle edi, eax
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x47d83f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor ebp, ebp
cmp rbx, rbp
je 0x47d896
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x47d8fe
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rbp
je 0x47d912
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rbp
je 0x47d925
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, edi
jmp 0x47ee54
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x47d940
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47d997
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47d9ff
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47da13
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47da26
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [rsp + 0xac]
jmp 0x47ee54
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x47da46
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47da9d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47db05
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47db19
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47db2c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x47ee54
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x47db4a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47dba1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47dc09
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47dc1d
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47dc30
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rcx, qword [rsp + 0xa0]
cmp rcx, r9
je 0x47dd75
mov rax, qword [rcx]
mov edx, 2
mov r9d, edx
mov r8d, dword [rsp + 0xac]
call qword [rax + 0x18]
mov ebp, eax
xor r13d, r13d
cmp eax, r13d
je 0x47dd78
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r13
je 0x47dc8a
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r13
je 0x47dcdf
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x47dd47
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r13
je 0x47dd5b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r13
je 0x47dd6e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
xor r13d, r13d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r13
je 0x47dd96
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r13
je 0x47ddeb
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x47de53
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r13
je 0x47de67
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r13
je 0x47de7a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x47ee54
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
xor edi, edi
cmp rcx, rdi
je 0x47dea4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, rdi
je 0x47def9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47df61
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47df75
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47df88
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x47ee54
cmp rdi, r9
je 0x47dfa0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x47dfb4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e00b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e073
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e087
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e09a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x47ee54
cmp rdi, r9
je 0x47e0b3
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x47e0c7
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e11e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e186
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e19a
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e1ad
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x47ee54
cmp rdi, r9
je 0x47e1c5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x47e1d9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x128]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e230
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e298
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e2ac
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e2bf
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x47ee54
mov rcx, rdi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x1e0]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e327
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e38f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e3a3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e3b6
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x47ee54
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x1e0]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e428
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e490
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e4a4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e4b7
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x47ee54
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x1e0]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e52a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e592
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e5a6
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e5b9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x47ee54
mov rcx, qword [rsp + 0x250]
call fcn.004024f4
nop
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x1e0]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e63c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e6a4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e6b8
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e6cb
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x47ee54
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x1e0]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e740
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e7a8
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e7bc
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e7cf
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x47ee54
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x1e0]
call fcn.004024f4
nop
lea rcx, [rsp + 0x5b0]
call fcn.00469300
nop
lea rcx, [rsp + 0x200]
call fcn.004692b4
nop
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
xor edi, edi
cmp rbx, rdi
je 0x47e844
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47e8ac
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47e8c0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rdi
je 0x47e8d3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x47ee54
mov rcx, r12
call fcn.00413f4c
mov edi, eax
cmp eax, r15d
je 0x47e9af
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r15
je 0x47e919
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47e981
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47e995
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47e9a8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x47ee54
mov edx, dword [rsp + 0x3b8]
cmp dword [rsp + 0x368], edx
jne 0x47ed95
mov eax, dword [rsp + 0x348]
cmp eax, edx
ja 0x47ed95
cmp eax, r15d
je 0x47e9f0
cmp eax, edx
jae 0x47e9f0
dec edx
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x340]
call fcn.00475770
mov rcx, qword [rsp + 0x720]
call fcn.00478ecc
lea rcx, [rsp + 0x340]
call fcn.0047833c
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47eafb
mov rax, qword [rcx]
mov r9d, 7
mov r8d, 0xffffffff
xor edx, edx
call qword [rax + 0x20]
mov edi, eax
cmp eax, r15d
je 0x47eafb
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r15
je 0x47ea65
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47eacd
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47eae1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47eaf4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x47ee54
mov rax, qword [rsp + 0x738]
lea r9, [rax + 0x30]
mov r8, qword [rax + 8]
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x2a0]
call fcn.00475cf8
mov edi, eax
cmp eax, r15d
je 0x47ebec
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r15
je 0x47eb56
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47ebbe
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47ebd2
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47ebe5
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x47ee54
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47ecd4
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x18]
mov edi, eax
cmp eax, r15d
je 0x47ecd4
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r15
je 0x47ec3e
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47eca6
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47ecba
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47eccd
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x47ee54
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r15
je 0x47ecff
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47ed67
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47ed7b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47ed8e
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
jmp 0x47ee54
lea rcx, [rsp + 0x340]
call fcn.004790b4
nop
lea rcx, [rsp + 0x2a0]
call fcn.00478154
nop
cmp rbx, r15
je 0x47edc0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x490]
call fcn.00478d08
nop
lea rcx, [rsp + 0xe8]
call fcn.004951d0
lea rcx, [rsp + 0xe0]
call fcn.004951d0
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xb0]
call fcn.00456548
nop
mov rcx, r14
call fcn.004024f4
nop
mov rcx, rsi
call fcn.004024f4
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x47ee28
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x47ee3c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, r15
je 0x47ee4f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
add rsp, 0x6c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret