Function at 0x467ac0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x54295f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
push edi
mov edi, ecx
push esi
mov dword [esp + 0x6c], edi
call fcn.004c9a90
add esp, 4
test eax, eax
jne 0x468c45
mov ebp, dword [esi + 1]
inc esi
push ebp
call fcn.004d21a0
add esp, 4
cmp eax, 0x5000000
jne 0x468c35
cmp ebp, 0x500fffe
je 0x468c35
lea eax, [edi + 0xc0]
add esi, 4
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xc8], esi
call fcn.0040bdb0
mov dword [esp + 0x1c], 0x54d958
xor esi, esi
push ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0x94], esi
call fcn.004d2180
mov ebx, eax
mov eax, dword [esp + 0xc4]
add esp, 4
cmp ebx, esi
je 0x467bf2
cmp ebx, 0x10000000
je 0x467b93
cmp ebx, 0x20000000
jne 0x467d82
cmp eax, esi
je 0x467d82
lea esi, [eax + 0x14]
mov edi, 1
jmp 0x467c01
cmp eax, esi
je 0x467d82
mov edx, dword [eax + 8]
lea ecx, [esp + 0x94]
push esi
push ecx
push edx
lea ecx, [edi + 0x2cc]
call fcn.004d2a60
test eax, eax
je 0x467d82
mov ecx, dword [esp + 0x94]
cmp dword [ecx + 0x44], esi
je 0x467be8
lea eax, [esp + 0x1c]
push esi
push eax
call fcn.004ce540
lea esi, [esp + 0x1c]
mov dword [esp + 0x90], 1
mov edi, 3
jmp 0x467c01
lea esi, [ecx + 0xc]
mov edi, 3
jmp 0x467c01
mov ecx, dword [esp + 0x68]
mov edi, 4
lea esi, [ecx + 0x290]
lea edx, [esp + 0x14]
mov ecx, esi
push edx
push 0
push ebp
call fcn.004d2340
test eax, eax
mov dword [esp + 0x3c], eax
jne 0x467c5f
cmp ebx, 0x20000000
jne 0x467c46
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x14]
push ecx
push 0
lea esi, [eax + 0x34]
push ebp
mov ecx, esi
call fcn.004d2340
test eax, eax
mov dword [esp + 0x3c], eax
mov edi, 2
jne 0x467c5f
mov edx, dword [esp + 0x68]
push 0x58c530
lea ecx, [edx + 0x964]
call fcn.00519753
jmp 0x467d82
lea ecx, [esp + 0x40]
call fcn.00473110
mov eax, dword [esp + 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
mov byte [esp + 0xb0], 1
je 0x467d9b
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x68]
push 0
lea eax, [esp + 0x14]
mov edx, dword [ebp + 0x4ac]
push 4
add ecx, 8
push eax
push ecx
push edx
call ebx
test eax, eax
je 0x467d69
mov eax, dword [esp + 0x10]
test eax, eax
je 0x467d69
mov edx, dword [0x599ef4]
push 0
lea ecx, [esp + 0x14]
push 4
push ecx
push eax
push edx
call ebx
test eax, eax
je 0x467d69
mov eax, dword [esp + 0x10]
test eax, eax
je 0x467d69
mov ecx, eax
mov eax, dword [esp + 0x14]
add ecx, 4
xor ebx, ebx
test eax, eax
mov dword [esp + 0x10], ecx
jle 0x467d3d
push 0
push ebx
mov ecx, esi
call fcn.004d2250
mov edi, eax
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x14]
push eax
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x467d34
mov eax, dword [edi]
test eax, eax
jne 0x467d20
mov eax, 0x80000301
add edi, 6
lea ecx, [ebp + 0xc0]
push edi
push eax
call fcn.00410620
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x467cf4
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004c9830
add esp, 4
mov ecx, ebp
push eax
call fcn.004679b0
jmp 0x467dd0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], 0x54d7d0
call fcn.00473310
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], 0xffffffff
call fcn.00401e70
jmp 0x468c45
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x40]
push eax
mov eax, dword [esp + 0xc0]
push ecx
mov ecx, dword [esp + 0xc8]
push edx
mov edx, dword [esp + 0xc4]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x80]
push edx
push edi
call fcn.004677f0
lea ecx, [esp + 0x54]
mov dword [esp + 0x10], eax
call fcn.00473110
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
call fcn.00473110
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xb0], 3
cmp ecx, eax
mov eax, dword [esp + 0x50]
je 0x468384
mov edx, dword [esp + 0xc4]
mov bl, byte [edx]
cmp bl, 0x37
je 0x468384
mov ebp, dword [esp + 0x68]
xor edi, edi
push edi
lea eax, [esp + 0x14]
push 4
push eax
mov esi, ecx
push ecx
mov ecx, dword [ebp + 0x4ac]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x468bb7
cmp dword [esp + 0x10], edi
je 0x468bb7
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edx
push eax
mov dword [esp + 0x40], eax
call fcn.004c9830
add esp, 4
cmp bl, 0x39
jne 0x4680ef
cmp eax, edi
jne 0x468442
mov edx, dword [esp + 0x18]
push edx
call fcn.004de8e0
mov esi, eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004ddaa0
add esp, 8
cmp esi, 2
mov edi, eax
jne 0x467ead
cmp edi, 1
je 0x467ead
cmp edi, 3
je 0x467ead
mov esi, 1
mov ecx, dword [esp + 0xc4]
cmp esi, 2
mov ebx, dword [ecx + 1]
jne 0x468012
push 1
lea edx, [esp + 0x1c]
push 1
push edx
lea ecx, [ebp + 0xc0]
call fcn.00448500
cmp edi, 1
push 0
jne 0x467f07
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x274]
call fcn.004d2a60
test eax, eax
je 0x4684ae
mov edx, dword [esp + 0x94]
lea edi, [edx + 0xc]
jmp 0x467f5a
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x9c]
push eax
push ecx
lea ecx, [ebp + 0x2cc]
call fcn.004d2a60
test eax, eax
je 0x4684ae
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], 0
call fcn.00473310
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x1c]
push 0
push edx
call fcn.004ce540
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x1c]
add eax, 4
mov dword [esp + 0x10], eax
test edi, edi
je 0x4684ae
lea eax, [esp + 0x14]
mov ecx, edi
push eax
push 0
push ebx
call fcn.004d2340
mov ecx, dword [esp + 0x14]
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x3c], eax
jle 0x467fcc
push 0
push ebx
mov ecx, edi
call fcn.004d2250
mov edx, dword [edi]
mov esi, eax
push esi
mov ecx, edi
call dword [edx + 0x14]
push eax
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x467fbf
mov eax, dword [esi]
test eax, eax
jne 0x467fab
mov eax, 0x80000301
add esi, 6
lea ecx, [ebp + 0xc0]
push esi
push eax
call fcn.00410620
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x467f7f
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004c9830
add esp, 4
mov ecx, ebp
push eax
call fcn.004679b0
mov ecx, eax
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x46837c
cmp esi, 3
jne 0x4685ea
mov eax, dword [esp + 0x18]
xor edi, edi
push edi
push eax
lea ecx, [ebp + 0xc0]
call fcn.00450780
cmp eax, edi
je 0x46858e
cmp dword [eax + 0x30], edi
jle 0x46858e
test dword [eax + 0x14], 0x800000
jne 0x46858e
mov esi, dword [eax + 0x34]
lea edx, [ebx - 1]
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 0x30]
cmp edx, ecx
jge 0x468522
mov ecx, dword [esp + 0x10]
cmp edx, edi
jl 0x4680d5
mov eax, dword [esi]
mov ebx, eax
shr ebx, 0x10
jne 0x468083
mov ebx, dword [esp + 0x18]
and eax, 0xffff
shr ebx, 0x10
shl ebx, 0x10
or eax, ebx
cmp edi, edx
jne 0x4680af
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [esi + 4]
push ecx
push eax
call fcn.004c9830
add esp, 4
mov ecx, ebp
push eax
call fcn.004679b0
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x4680cc
mov ecx, dword [esi + 4]
push ecx
push eax
lea ecx, [ebp + 0xc0]
call fcn.00410620
mov ecx, dword [esp + 0x10]
add ecx, eax
add esi, 0x1c
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x14]
inc edi
cmp edi, edx
jle 0x468069
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x46837c
cmp bl, 0x3a
jne 0x468b5e
cmp eax, edi
jne 0x468139
cmp dword [esp + 0x18], 0x80000005
jne 0x46864e
lea edx, [esp + 0x40]
mov ecx, ebp
push edx
push esi
call fcn.00467a10
test eax, eax
je 0x4686ba
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
neg eax
sbb eax, eax
mov dword [esp + 0x18], 0x80000101
and eax, ecx
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc4]
xor eax, eax
mov dword [esp + 0x64], eax
cmp byte [ecx], 0x3a
jne 0x468273
mov edi, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
mov ebx, ecx
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x21
je 0x4681cc
cmp al, 0x38
je 0x46818f
cmp al, 0x3b
jne 0x468716
mov edx, dword [ebx + 1]
lea ecx, [esp + 0x54]
push edx
call fcn.004733d0
add ebx, 5
mov dword [esp + 0xc4], ebx
jmp 0x468260
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00473310
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x6c]
push eax
push ebx
push edi
push ecx
push esi
mov ecx, ebp
call fcn.00468c70
test eax, eax
je 0x46877a
push ebx
call fcn.004c9850
add esp, 4
jmp 0x468206
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00473310
mov eax, dword [esp + 0xbc]
lea edx, [esp + 0x6c]
inc ebx
push edx
push ebx
push edi
push eax
push esi
mov ecx, ebp
call fcn.004672e0
test eax, eax
je 0x4687de
mov ecx, ebx
call fcn.004ca150
add ebx, eax
mov eax, dword [esp + 0x6c]
test eax, eax
mov dword [esp + 0xc4], ebx
jne 0x468842
mov ecx, dword [esp + 0x78]
push ecx
call fcn.004d21f0
add esp, 4
test eax, eax
je 0x468842
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0xa0]
lea eax, [esp + 0x70]
push edx
push eax
push 0x80000301
push ecx
call fcn.004dfdf0
mov edx, dword [esp + 0xb0]
add esp, 0x10
lea ecx, [esp + 0x54]
push edx
call fcn.004733d0
cmp byte [ebx], 0x3a
je 0x46815f
mov eax, dword [esp + 0x64]
xor ebx, ebx
cmp eax, ebx
jne 0x468279
xor ebx, ebx
xor edx, edx
jmp 0x46827d
mov edx, dword [esp + 0x5c]
shr eax, 2
mov edi, eax
je 0x468aee
cmp edi, 0x7f
jge 0x468aee
cmp edi, 1
je 0x468302
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov al, byte [ecx]
cmp edi, eax
jne 0x4688b6
cmp edi, 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x90], 1
jl 0x46834b
lea ebx, [edi - 1]
lea esi, [ecx + 5]
mov eax, dword [edx]
add edx, 4
dec eax
mov dword [esp + 0x9c], edx
test eax, eax
jle 0x46832a
cmp eax, dword [esi - 4]
mov ecx, esi
jge 0x468a06
test ebx, ebx
jle 0x4682fc
mov edx, ebx
mov ebp, dword [ecx]
add ecx, 4
imul eax, ebp
dec edx
jne 0x4682e6
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x68]
add dword [esp + 0x14], eax
jmp 0x468330
mov edx, dword [edx]
dec edx
mov dword [esp + 0x14], edx
js 0x468926
mov eax, dword [esp + 0x3c]
push eax
call fcn.004c97f0
mov ecx, dword [esp + 0x18]
add esp, 4
cmp ecx, eax
jge 0x468996
jmp 0x46834b
jl 0x468a7a
mov eax, dword [esp + 0x90]
add esi, 4
inc eax
dec ebx
cmp eax, edi
mov dword [esp + 0x90], eax
jle 0x4682c4
mov edx, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
push edx
call fcn.00410650
imul eax, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
xor ecx, ecx
mov cl, byte [edx]
mov edx, dword [esp + 0x10]
add eax, edx
lea ecx, [eax + ecx*4 + 4]
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x50], eax
test ecx, ecx
jne 0x467e10
mov edx, dword [esp + 0xc8]
test edx, edx
je 0x468395
mov esi, dword [esp + 0x18]
mov dword [edx], esi
mov esi, dword [esp + 0xcc]
test esi, esi
je 0x4683b9
mov edi, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edi
push eax
call fcn.004c9830
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [esi], eax
mov edi, ecx
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0x19
mov dword [esp + 0x20], 0
call fcn.00473310
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00473310
mov eax, edi
jmp 0x468c47
push 0x58c520
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 5
jmp 0x468c0e
push 0x58c500
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 7
mov dword [esp + 0x20], 0
jmp 0x468c12
push 0x58c520
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 9
jmp 0x468c0e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xa
jmp 0x468c0e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xb
mov dword [esp + 0x20], 0
jmp 0x468c12
push 0x58c4ec
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xc
jmp 0x468c0e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xd
jmp 0x468c0e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x10
mov dword [esp + 0x20], 0
jmp 0x468c12
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xe
mov dword [esp + 0x20], 0
jmp 0x468c12
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0x20], 0
jmp 0x468c12
push 0x58c4c8
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x11
mov dword [esp + 0x20], 0
jmp 0x468c12
push 0x58c4a8
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x13
mov dword [esp + 0x20], ebx
jmp 0x468c12
push 0x58c488
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x14
mov dword [esp + 0x20], ebx
jmp 0x468c12
push 0x58c470
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x15
mov dword [esp + 0x20], ebx
jmp 0x468c12
push 0x58c470
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x16
mov dword [esp + 0x20], 0
jmp 0x468c12
push 0x58c488
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x17
mov dword [esp + 0x20], 0
jmp 0x468c12
push 0x58c460
lea ecx, [ebp + 0x964]
call fcn.00519753
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x12
mov dword [esp + 0x20], ebx
jmp 0x468c12
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 0x18
jmp 0x468c0e
mov esi, 0x54d7d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00473310
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00473310
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00473310
mov dword [esp + 0x1c], 0x54d7d4
mov dword [esp + 0xb0], 4
mov dword [esp + 0x20], edi
lea ecx, [esp + 0x24]
call fcn.00473310
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00473310
jmp 0x468c45
push 0x58c44c
lea ecx, [edi + 0x964]
call fcn.00519753
xor eax, eax
mov ecx, dword [esp + 0xa8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa4
ret 0x18