Function at 0x46c110
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5bf65f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x30], esi
call fcn.005a67ef
xor ebx, ebx
mov dword [esp + 0x48], ebx
mov dword [esi + 0xbc], 0x5e1ef8
mov dword [esi + 0xc0], 0x5dafd8
mov dword [esi + 0xc4], ebx
or eax, 0xffffffff
mov dword [esi + 0xc8], 0x5e1ef0
mov dword [esi + 0xcc], ebx
mov dword [esi + 0xd4], eax
mov dword [esi + 0xe4], eax
mov dword [esi + 0xf4], eax
mov dword [esi + 0x104], eax
lea edi, [esi + 0x110]
mov byte [esp + 0x48], 5
mov ecx, edi
call fcn.0058d91e
mov dword [edi], 0x5e1ee4
mov eax, dword [0x639698]
mov dword [esi + 0x128], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x12c], ecx
mov dword [esi + 0x124], ebx
mov edx, dword [0x639698]
mov dword [esi + 0x134], edx
mov eax, dword [0x639698]
mov dword [esi + 0x138], eax
mov dword [esi + 0x130], ebx
mov ecx, dword [0x639698]
mov dword [esi + 0x140], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x144], edx
mov dword [esi + 0x13c], ebx
mov eax, dword [0x639698]
mov dword [esi + 0x14c], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x150], ecx
mov dword [esi + 0x148], ebx
lea ecx, [esi + 0x158]
mov byte [esp + 0x48], 0xa
call fcn.004d7630
lea edi, [esi + 0x81e4]
push 0x62f678
mov byte [esp + 0x4c], 0xb
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f66c
mov byte [esp + 0x4c], 0xc
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0xd
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x81f0]
push 0x62f678
mov byte [esp + 0x4c], 0xe
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f664
mov byte [esp + 0x4c], 0xf
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x10
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x81fc]
push 0x62f678
mov byte [esp + 0x4c], 0x11
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f65c
mov byte [esp + 0x4c], 0x12
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x13
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8208]
push 0x62f678
mov byte [esp + 0x4c], 0x14
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f654
mov byte [esp + 0x4c], 0x15
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x58
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x16
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8214]
push 0x62f678
mov byte [esp + 0x4c], 0x17
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
mov byte [esp + 0x48], 0x18
lea ecx, [edi + 8]
push 0x62f64c
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x19
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8220]
push 0x62f678
mov byte [esp + 0x4c], 0x1a
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f644
mov byte [esp + 0x4c], 0x1b
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x1c
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x822c]
push 0x62f678
mov byte [esp + 0x4c], 0x1d
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62ccc4
mov byte [esp + 0x4c], 0x1e
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x2580
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x1f
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8238]
push 0x62f678
mov byte [esp + 0x4c], 0x20
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f638
mov byte [esp + 0x4c], 0x21
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 8
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x22
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8244]
push 0x62f678
mov byte [esp + 0x4c], 0x23
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f630
mov byte [esp + 0x4c], 0x24
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x25
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8250]
push 0x62f678
mov byte [esp + 0x4c], 0x26
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f624
mov byte [esp + 0x4c], 0x27
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x28
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x825c]
push 0x62f678
mov byte [esp + 0x4c], 0x29
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f620
mov byte [esp + 0x4c], 0x2a
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x2b
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8268]
push 0x62f678
mov byte [esp + 0x4c], 0x2c
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f61c
mov byte [esp + 0x4c], 0x2d
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x2e
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8274]
push 0x62f678
mov byte [esp + 0x4c], 0x2f
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f610
mov byte [esp + 0x4c], 0x30
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x31
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8280]
push 0x62f678
mov byte [esp + 0x4c], 0x32
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f5f8
mov byte [esp + 0x4c], 0x33
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 1
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x34
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x828c]
push 0x62f678
mov byte [esp + 0x4c], 0x35
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f5e0
mov byte [esp + 0x4c], 0x36
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x1f4
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x37
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8298]
mov edx, dword [0x639698]
mov dword [esp + 0x2c], edi
mov dword [edi], edx
push 0x62f678
lea ecx, [edi + 4]
mov byte [esp + 0x4c], 0x39
call fcn.00593749
push 0x62f5d0
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x3a
call fcn.00593749
push 0x63f7e8
mov ecx, edi
mov byte [esp + 0x4c], 0x3b
call fcn.004294f0
mov eax, dword [0x639698]
lea edi, [esi + 0x82a4]
mov dword [esp + 0x2c], edi
mov dword [edi], eax
push 0x62f678
lea ecx, [edi + 4]
mov byte [esp + 0x4c], 0x3d
call fcn.00593749
push 0x62f5c0
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x3e
call fcn.00593749
push 0x625ad8
mov ecx, edi
mov byte [esp + 0x4c], 0x3f
call fcn.004294f0
mov ecx, dword [0x639698]
lea edi, [esi + 0x82b0]
mov dword [esp + 0x2c], edi
mov dword [edi], ecx
push 0x62f678
lea ecx, [edi + 4]
mov byte [esp + 0x4c], 0x41
call fcn.00593749
push 0x62f5b0
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x42
call fcn.00593749
push 0x62f5a8
mov ecx, edi
mov byte [esp + 0x4c], 0x43
call fcn.004294f0
mov edx, dword [0x639698]
lea edi, [esi + 0x82bc]
mov dword [esp + 0x2c], edi
mov dword [edi], edx
push 0x62f678
lea ecx, [edi + 4]
mov byte [esp + 0x4c], 0x45
call fcn.00593749
push 0x62f598
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x46
call fcn.00593749
push 0x62de50
mov ecx, edi
mov byte [esp + 0x4c], 0x47
call fcn.004294f0
mov byte [esp + 0x48], 0x48
lea edi, [esi + 0x82c8]
lea ebp, [edi + 4]
push 0x62f678
mov ecx, ebp
mov dword [esp + 0x30], edi
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f590
mov byte [esp + 0x4c], 0x49
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x4a
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x82d4]
push 0x62f678
mov byte [esp + 0x4c], 0x4b
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f588
mov byte [esp + 0x4c], 0x4c
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x4d
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x82e0]
push 0x62f678
mov byte [esp + 0x4c], 0x4e
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f57c
mov byte [esp + 0x4c], 0x4f
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x50
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x82ec]
push 0x62f678
mov byte [esp + 0x4c], 0x51
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f570
mov byte [esp + 0x4c], 0x52
call fcn.00593749
mov byte [esp + 0x48], 0x53
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x82f8]
push 0x62f678
mov byte [esp + 0x4c], 0x54
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f568
mov byte [esp + 0x4c], 0x55
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x56
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8304]
push 0x62f678
mov byte [esp + 0x4c], 0x57
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f560
mov byte [esp + 0x4c], 0x58
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x59
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8310]
push 0x62f678
mov byte [esp + 0x4c], 0x5a
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f554
mov byte [esp + 0x4c], 0x5b
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x5c
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x831c]
mov byte [esp + 0x48], 0x5d
mov dword [esp + 0x2c], edi
lea ebp, [edi + 4]
push 0x62f678
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f544
mov byte [esp + 0x4c], 0x5e
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x5f
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8334]
push 0x62f53c
mov byte [esp + 0x4c], 0x60
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f664
mov byte [esp + 0x4c], 0x61
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x62
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8350]
push 0x62f678
mov byte [esp + 0x4c], 0x63
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f52c
mov byte [esp + 0x4c], 0x64
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x65
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x835c]
push 0x62f678
mov byte [esp + 0x4c], 0x66
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f518
mov byte [esp + 0x4c], 0x67
call fcn.00593749
mov eax, dword [edi + 8]
mov byte [esp + 0x48], 0x68
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x836c]
push 0x62f678
mov byte [esp + 0x4c], 0x69
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f510
mov byte [esp + 0x4c], 0x6a
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x6b
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8378]
push 0x62f678
mov byte [esp + 0x4c], 0x6c
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f508
mov byte [esp + 0x4c], 0x6d
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x6e
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8384]
push 0x62f678
mov byte [esp + 0x4c], 0x6f
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f500
mov byte [esp + 0x4c], 0x70
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x71
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8390]
mov byte [esp + 0x48], 0x72
mov dword [esp + 0x2c], edi
lea ebp, [edi + 4]
push 0x62f678
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f4f4
mov byte [esp + 0x4c], 0x73
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x32
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x74
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x839c]
push 0x62f678
mov byte [esp + 0x4c], 0x75
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f4e8
mov byte [esp + 0x4c], 0x76
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x1e
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x77
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x83a8]
push 0x62f678
mov byte [esp + 0x4c], 0x78
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f4dc
mov byte [esp + 0x4c], 0x79
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x7a
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x83b4]
push 0x62f678
mov byte [esp + 0x4c], 0x7b
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f4d0
mov byte [esp + 0x4c], 0x7c
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
mov byte [esp + 0x48], 0x7d
push 1
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x83c0]
push 0x62f678
mov byte [esp + 0x4c], 0x7e
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f4c4
mov byte [esp + 0x4c], 0x7f
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x80
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x83cc]
push 0x62f678
mov byte [esp + 0x4c], 0x81
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f4b0
mov byte [esp + 0x4c], 0x82
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 1
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x83
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x83d8]
push 0x62f678
mov byte [esp + 0x4c], 0x84
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f498
mov byte [esp + 0x4c], 0x85
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x86
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x83e4]
mov byte [esp + 0x48], 0x87
mov dword [esp + 0x2c], edi
push 0x62f678
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f480
mov byte [esp + 0x4c], 0x88
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 1
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x89
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x83f0]
push 0x62f678
mov byte [esp + 0x4c], 0x8a
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f470
mov byte [esp + 0x4c], 0x8b
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x320
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x8c
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x83fc]
push 0x62f678
mov byte [esp + 0x4c], 0x8d
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f460
mov byte [esp + 0x4c], 0x8e
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x8a2
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x8f
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8408]
push 0x62f678
mov byte [esp + 0x4c], 0x90
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f454
mov byte [esp + 0x4c], 0x91
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
mov byte [esp + 0x48], 0x92
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8414]
push 0x62f678
mov byte [esp + 0x4c], 0x93
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f444
mov byte [esp + 0x4c], 0x94
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x95
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8420]
push 0x62f678
mov byte [esp + 0x4c], 0x96
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f434
mov byte [esp + 0x4c], 0x97
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 1
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x98
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x842c]
push 0x62f678
mov byte [esp + 0x4c], 0x99
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f42c
mov byte [esp + 0x4c], 0x9a
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x9b
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8438]
mov byte [esp + 0x48], 0x9c
mov dword [esp + 0x2c], edi
push 0x62f678
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f424
mov byte [esp + 0x4c], 0x9d
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0x9e
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8444]
push 0x62f678
mov byte [esp + 0x4c], 0x9f
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f41c
mov byte [esp + 0x4c], 0xa0
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0xa1
call fcn.004ed500
mov dword [edi], eax
mov eax, dword [0x639698]
mov dword [esi + 0x8454], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x8458], ecx
mov dword [esi + 0x8450], ebx
lea edi, [esi + 0x8460]
push 0x62da90
mov byte [esp + 0x4c], 0xa3
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f414
mov byte [esp + 0x4c], 0xa4
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x14
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0xa5
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x846c]
push 0x62da90
mov byte [esp + 0x4c], 0xa6
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f40c
mov byte [esp + 0x4c], 0xa7
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x320
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0xa8
call fcn.004ed500
mov dword [edi], eax
mov edx, dword [0x639698]
lea edi, [esi + 0x8478]
mov dword [esp + 0x2c], edi
mov dword [edi], edx
push 0x62f678
lea ecx, [edi + 4]
mov byte [esp + 0x4c], 0xaa
call fcn.00593749
push 0x62f404
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0xab
call fcn.00593749
push 0x63f7e8
mov ecx, edi
mov byte [esp + 0x4c], 0xac
call fcn.004294f0
lea edi, [esi + 0x8484]
push 0x62da90
mov byte [esp + 0x4c], 0xad
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f3f4
mov byte [esp + 0x4c], 0xae
call fcn.00593749
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
mov byte [esp + 0x54], 0xaf
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8490]
push 0x62da90
mov byte [esp + 0x4c], 0xb0
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f3f0
mov byte [esp + 0x4c], 0xb1
call fcn.00593749
mov byte [esp + 0x48], 0xb2
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x849c]
mov byte [esp + 0x48], 0xb3
mov dword [esp + 0x2c], edi
lea ebp, [edi + 4]
push 0x62da90
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f3e8
mov byte [esp + 0x4c], 0xb4
call fcn.00593749
mov byte [esp + 0x48], 0xb5
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x84a8]
push 0x62da90
mov byte [esp + 0x4c], 0xb6
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f3dc
mov byte [esp + 0x4c], 0xb7
call fcn.00593749
mov byte [esp + 0x48], 0xb8
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 1
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x84bc]
push 0x62f678
mov byte [esp + 0x4c], 0xb9
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f3c8
mov byte [esp + 0x4c], 0xba
call fcn.00593749
mov byte [esp + 0x48], 0xbb
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x84c8]
push 0x62f678
mov byte [esp + 0x4c], 0xbc
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f3b8
mov byte [esp + 0x4c], 0xbd
call fcn.00593749
mov byte [esp + 0x48], 0xbe
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x378
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x84d4]
push 0x62f678
mov byte [esp + 0x4c], 0xbf
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f3ac
mov byte [esp + 0x4c], 0xc0
call fcn.00593749
mov byte [esp + 0x48], 0xc1
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x84f0]
push 0x625fe8
mov byte [esp + 0x4c], 0xc2
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f3a0
mov byte [esp + 0x4c], 0xc3
call fcn.00593749
mov byte [esp + 0x48], 0xc4
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0xa
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x84fc]
push 0x625fe8
mov byte [esp + 0x4c], 0xc5
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f38c
mov byte [esp + 0x4c], 0xc6
call fcn.00593749
mov byte [esp + 0x48], 0xc7
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 1
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
mov eax, dword [0x639698]
mov dword [esi + 0x8508], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x8514], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x8518], edx
lea ecx, [esi + 0x851c]
mov byte [esp + 0x48], 0xcb
call fcn.0058d50f
mov eax, dword [0x639698]
mov dword [esi + 0x8530], eax
lea edi, [esi + 0x8538]
push 0x62de88
mov ecx, edi
mov byte [esp + 0x4c], 0xcd
mov dword [esp + 0x30], edi
call fcn.00593749
push 0x62f384
lea ecx, [edi + 4]
mov byte [esp + 0x4c], 0xce
call fcn.00593749
mov ecx, dword [0x639698]
mov dword [edi + 8], ecx
push 0x403e8000
push ebx
mov ecx, edi
mov byte [esp + 0x50], 0xd0
call fcn.004c7cc0
lea edi, [esi + 0x8550]
push 0x62de88
mov ecx, edi
mov byte [esp + 0x4c], 0xd1
mov dword [esp + 0x30], edi
call fcn.00593749
push 0x62f380
lea ecx, [edi + 4]
mov byte [esp + 0x4c], 0xd2
call fcn.00593749
mov edx, dword [0x639698]
mov dword [edi + 8], edx
push 0x40492666
push 0x66666666
mov ecx, edi
mov byte [esp + 0x50], 0xd4
call fcn.004c7cc0
lea edi, [esi + 0x856c]
push 0x625fe8
mov byte [esp + 0x4c], 0xd5
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f370
mov byte [esp + 0x4c], 0xd6
call fcn.00593749
mov byte [esp + 0x48], 0xd7
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 4
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x8578]
mov byte [esp + 0x48], 0xd8
mov dword [esp + 0x2c], edi
push 0x625fe8
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f360
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0xd9
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0xda
call fcn.00410c40
lea edi, [esi + 0x8584]
push 0x625fe8
mov byte [esp + 0x4c], 0xdb
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f350
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0xdc
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0xdd
call fcn.00410c40
lea ecx, [esi + 0x8594]
mov byte [esp + 0x48], 0xde
call fcn.0059beb0
lea ecx, [esi + 0x8658]
mov byte [esp + 0x48], 0xdf
call fcn.0059beb0
lea ecx, [esi + 0x871c]
mov byte [esp + 0x48], 0xe0
call fcn.0059beb0
lea edi, [esi + 0x87e0]
push 0x62f344
mov byte [esp + 0x4c], 0xe1
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f334
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0xe2
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0xe3
call fcn.00410c40
mov eax, dword [0x639698]
mov dword [esi + 0x87f0], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x87f4], ecx
mov dword [esi + 0x87ec], ebx
push fcn.0050bd60
push fcn.0050bc50
push 0xc
lea edx, [esi + 0x88bc]
push 0x1c
push edx
mov byte [esp + 0x5c], 0xe5
call fcn.00573af2
push fcn.0050bd60
push fcn.0050bc50
push 0xc
lea eax, [esi + 0x8a0c]
push 0x1c
push eax
mov byte [esp + 0x5c], 0xe6
call fcn.00573af2
push fcn.0050bd60
push fcn.0050bc50
push 0xc
lea ecx, [esi + 0x8b5c]
push 0x1c
push ecx
mov byte [esp + 0x5c], 0xe7
call fcn.00573af2
push fcn.0050bd60
push fcn.0050bc50
push 0xc
lea edx, [esi + 0x8cac]
push 0x1c
push edx
mov byte [esp + 0x5c], 0xe8
call fcn.00573af2
lea ecx, [esi + 0x8dfc]
mov byte [esp + 0x48], 0xe9
call fcn.0050bc50
lea ecx, [esi + 0x8e18]
mov byte [esp + 0x48], 0xea
call fcn.0058d50f
lea ecx, [esi + 0x8e2c]
mov byte [esp + 0x48], 0xeb
call fcn.0058d50f
lea ecx, [esi + 0x8e40]
mov byte [esp + 0x48], 0xec
call fcn.0058d50f
lea ecx, [esi + 0x8e54]
mov byte [esp + 0x48], 0xed
call fcn.0058d50f
lea ecx, [esi + 0x8e68]
mov byte [esp + 0x48], 0xee
call fcn.0058d50f
mov eax, dword [0x639698]
lea edi, [esi + 0x8e7c]
mov dword [esp + 0x2c], edi
mov dword [edi], eax
push 0x62f32c
lea ecx, [edi + 4]
mov byte [esp + 0x4c], 0xf0
call fcn.00593749
push 0x62f310
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0xf1
call fcn.00593749
push 0x62f300
mov ecx, edi
mov byte [esp + 0x4c], 0xf2
call fcn.004294f0
mov dword [esi + 0x8e88], 0x5e1ed8
mov dword [esi + 0x8e8c], ebx
mov dword [esi + 0x8e98], ebx
mov dword [esi + 0x8e94], ebx
mov dword [esi + 0x8e90], ebx
mov dword [esi + 0x8ea0], 0x5e1ed8
mov dword [esi + 0x8ea4], ebx
mov dword [esi + 0x8eb0], ebx
mov dword [esi + 0x8eac], ebx
mov dword [esi + 0x8ea8], ebx
mov dword [esi + 0x8eb4], 0x5e1ed8
mov dword [esi + 0x8eb8], ebx
mov dword [esi + 0x8ec4], ebx
mov dword [esi + 0x8ec0], ebx
mov dword [esi + 0x8ebc], ebx
lea edi, [esi + 0x8ecc]
push 0x625fe8
mov byte [esp + 0x4c], 0xf6
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f2f0
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0xf7
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0xf8
call fcn.00410c40
lea edi, [esi + 0x8edc]
mov byte [esp + 0x48], 0xf9
mov ecx, edi
call fcn.00475690
mov dword [edi], 0x5e1ecc
lea ecx, [esi + 0x8ef4]
mov byte [esp + 0x48], 0xfa
call fcn.0058d50f
lea ecx, [esi + 0x8f08]
mov byte [esp + 0x48], 0xfb
call fcn.0058d50f
lea ecx, [esi + 0x8f1c]
mov byte [esp + 0x48], 0xfc
call fcn.0058d50f
mov ecx, dword [0x639698]
mov dword [esi + 0x8f30], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x8f34], edx
mov eax, dword [0x639698]
mov dword [esi + 0x8f38], eax
lea ecx, [esi + 0x8f40]
mov dword [esp + 0x48], 0x100
call fcn.00500050
lea ecx, [esi + 0x8fe0]
mov byte [esp + 0x48], 1
call fcn.00500050
lea ecx, [esi + 0x9080]
mov byte [esp + 0x48], 2
call fcn.00500050
push fcn.00500180
push fcn.00500050
push 3
lea ecx, [esi + 0x9120]
push 0xa0
push ecx
mov byte [esp + 0x5c], 3
call fcn.00573af2
mov edx, dword [0x639698]
mov dword [esi + 0x9344], edx
mov eax, dword [0x639698]
mov dword [esi + 0x9348], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x934c], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x9354], edx
mov eax, dword [0x639698]
mov dword [esi + 0x9358], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x935c], ecx
mov dword [esi + 0x9360], ebx
mov dword [esi + 0x9364], ebx
mov dword [esi + 0x9368], ebx
mov dword [esi + 0x936c], ebx
mov dword [esi + 0x9370], ebx
mov dword [esi + 0x9374], ebx
mov edx, dword [0x639698]
mov dword [esi + 0x9384], edx
lea edi, [esi + 0x9390]
push 0x625fe8
mov byte [esp + 0x4c], 0xb
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f2e0
mov byte [esp + 0x4c], 0xc
call fcn.00593749
mov byte [esp + 0x48], 0xd
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
mov eax, dword [0x639698]
mov dword [esi + 0x939c], eax
lea edi, [esi + 0x9418]
push 0x62f344
mov byte [esp + 0x4c], 0xf
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f664
mov byte [esp + 0x4c], 0x10
call fcn.00593749
mov byte [esp + 0x48], 0x11
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 1
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x9424]
push 0x62f344
mov byte [esp + 0x4c], 0x12
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f2d8
mov byte [esp + 0x4c], 0x13
call fcn.00593749
mov byte [esp + 0x48], 0x14
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push ebx
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x9430]
push 0x62f344
mov byte [esp + 0x4c], 0x15
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f2cc
mov byte [esp + 0x4c], 0x16
call fcn.00593749
mov byte [esp + 0x48], 0x17
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x50
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x943c]
push 0x62f344
mov byte [esp + 0x4c], 0x18
mov dword [esp + 0x30], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00593749
lea ecx, [edi + 8]
push 0x62f2c4
mov byte [esp + 0x4c], 0x19
call fcn.00593749
mov byte [esp + 0x48], 0x1a
mov eax, dword [edi + 8]
mov ebp, dword [ebp]
push 0x4080ff
push eax
push ebp
mov ecx, 0x6646a8
call fcn.004ed500
mov dword [edi], eax
lea edi, [esi + 0x9448]
push 0x62f344
mov byte [esp + 0x4c], 0x1b
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f2b8
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x1c
call fcn.00593749
push 0xffff00
mov ecx, edi
mov byte [esp + 0x4c], 0x1d
call fcn.00410c40
lea edi, [esi + 0x9454]
push 0x62f344
mov byte [esp + 0x4c], 0x1e
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f2ac
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x1f
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x20
call fcn.00410c40
lea edi, [esi + 0x9460]
push 0x62f344
mov byte [esp + 0x4c], 0x21
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62cdac
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x22
call fcn.00593749
mov ebp, 1
mov ecx, edi
push ebp
mov byte [esp + 0x4c], 0x23
call fcn.00410c40
lea edi, [esi + 0x946c]
push 0x62f344
mov byte [esp + 0x4c], 0x24
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f29c
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x25
call fcn.00593749
push ebp
mov ecx, edi
mov byte [esp + 0x4c], 0x26
call fcn.00410c40
lea edi, [esi + 0x9478]
push 0x62f344
mov byte [esp + 0x4c], 0x27
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f28c
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x28
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x29
call fcn.00410c40
lea edi, [esi + 0x9484]
push 0x62f344
mov byte [esp + 0x4c], 0x2a
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f280
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x2b
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x2c
call fcn.00410c40
lea edi, [esi + 0x9490]
push 0x62f344
mov byte [esp + 0x4c], 0x2d
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f274
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x2e
call fcn.00593749
push 0xffffff
mov ecx, edi
mov byte [esp + 0x4c], 0x2f
call fcn.00410c40
lea edi, [esi + 0x949c]
push 0x62f344
mov byte [esp + 0x4c], 0x30
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f268
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x31
call fcn.00593749
push 0x808080
mov ecx, edi
mov byte [esp + 0x4c], 0x32
call fcn.00410c40
lea edi, [esi + 0x94a8]
push 0x62f344
mov byte [esp + 0x4c], 0x33
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f25c
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x34
call fcn.00593749
push 2
mov ecx, edi
mov byte [esp + 0x4c], 0x35
call fcn.00410c40
lea edi, [esi + 0x94b4]
push 0x62f344
mov byte [esp + 0x4c], 0x36
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f254
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x37
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x38
call fcn.00410c40
lea ecx, [esi + 0x94c0]
mov byte [esp + 0x48], 0x39
call fcn.004e10e0
lea ecx, [esi + 0x9540]
mov byte [esp + 0x48], 0x3a
call fcn.005ab0c0
lea ecx, [esi + 0x95dc]
mov byte [esp + 0x48], 0x3b
call fcn.005ab0c0
lea ecx, [esi + 0x967c]
mov byte [esp + 0x48], 0x3c
call fcn.005067a0
push ebx
lea ecx, [esi + 0x9b94]
mov byte [esp + 0x4c], 0x3d
call fcn.004915b0
lea ecx, [esi + 0x9e5c]
mov byte [esp + 0x48], 0x3e
call fcn.0049bff0
lea edi, [esi + 0x9e78]
push 0x625fe8
mov byte [esp + 0x4c], 0x3f
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f240
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x40
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x41
call fcn.00410c40
lea edi, [esi + 0x9e84]
push 0x625fe8
mov byte [esp + 0x4c], 0x42
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f230
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x43
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x44
call fcn.00410c40
lea edi, [esi + 0x9e90]
push 0x625fe8
mov byte [esp + 0x4c], 0x45
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f224
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x46
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x47
call fcn.00410c40
lea edi, [esi + 0x9e9c]
push 0x625fe8
mov byte [esp + 0x4c], 0x48
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f21c
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x49
call fcn.00593749
push ebp
mov ecx, edi
mov byte [esp + 0x4c], 0x4a
call fcn.00410c40
lea edi, [esi + 0x9eb0]
push 0x625fe8
mov byte [esp + 0x4c], 0x4b
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f214
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x4c
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x4d
call fcn.00410c40
push 0x8000
mov byte [esp + 0x4c], 0x4e
call fcn.0058ecf8
mov dword [esi + 0x9ebc], eax
mov dword [esi + 0x9ec4], eax
mov dword [esi + 0x9ec0], eax
mov ecx, dword [esi + 0x9ebc]
add ecx, 0x8000
xor eax, eax
mov dword [esi + 0x9ec8], ecx
mov edi, dword [esi + 0x9ebc]
mov ecx, 0x2000
rep stosd dword es:[edi], eax
push 0x4000
mov byte [esp + 0x50], 0x4f
call fcn.0058ecf8
mov dword [esi + 0x9ecc], eax
mov dword [esi + 0x9ed4], eax
mov dword [esi + 0x9ed0], eax
mov edx, dword [esi + 0x9ecc]
add edx, 0x4000
mov dword [esi + 0x9ed8], edx
push 0x4000
mov byte [esp + 0x54], 0x50
call fcn.0058ecf8
mov dword [esi + 0x9edc], eax
mov dword [esi + 0x9ee4], eax
mov dword [esi + 0x9ee0], eax
mov eax, dword [esi + 0x9edc]
add eax, 0x4000
mov dword [esi + 0x9ee8], eax
push 0x8000
mov byte [esp + 0x58], 0x51
call fcn.0058ecf8
mov dword [esi + 0x9eec], eax
mov dword [esi + 0x9ef4], eax
mov dword [esi + 0x9ef0], eax
mov ecx, dword [esi + 0x9eec]
add ecx, 0x8000
xor eax, eax
mov dword [esi + 0x9ef8], ecx
mov edi, dword [esi + 0x9eec]
mov ecx, 0x2000
add esp, 0x10
rep stosd dword es:[edi], eax
mov edx, dword [0x639698]
mov dword [esi + 0x9efc], edx
mov eax, dword [0x639698]
mov dword [esi + 0x9f00], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x9f04], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x9f08], edx
mov eax, dword [0x639698]
mov dword [esi + 0x9f0c], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x9f10], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x9f14], edx
mov eax, dword [0x639698]
mov dword [esi + 0x9f18], eax
lea edi, [esi + 0x9f20]
push 0x625fe8
mov byte [esp + 0x4c], 0x56
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f204
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x57
call fcn.00593749
push ebp
mov ecx, edi
mov byte [esp + 0x4c], 0x58
call fcn.00410c40
lea edi, [esi + 0x9f2c]
push 0x625fe8
mov byte [esp + 0x4c], 0x59
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f1f0
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x5a
call fcn.00593749
push ebx
mov ecx, edi
mov byte [esp + 0x4c], 0x5b
call fcn.00410c40
lea edi, [esi + 0x9f38]
push 0x625fe8
mov byte [esp + 0x4c], 0x5c
mov dword [esp + 0x30], edi
lea ecx, [edi + 4]
call fcn.00593749
push 0x62f1e4
lea ecx, [edi + 8]
mov byte [esp + 0x4c], 0x5d
call fcn.00593749
push 0x168
mov ecx, edi
mov byte [esp + 0x4c], 0x5e
call fcn.00410c40
lea ecx, [esi + 0x9f44]
mov byte [esp + 0x48], 0x5f
call fcn.004295f0
lea ecx, [esi + 0x9f50]
mov byte [esp + 0x48], 0x60
call fcn.004295f0
lea ecx, [esi + 0x9f5c]
mov byte [esp + 0x48], 0x61
call fcn.004295f0
lea ecx, [esi + 0x9f68]
mov byte [esp + 0x48], 0x62
call fcn.004295f0
lea ecx, [esi + 0x9f74]
mov byte [esp + 0x48], 0x63
call fcn.004295f0
lea ecx, [esi + 0x9f80]
mov byte [esp + 0x48], 0x64
call fcn.004295f0
lea ecx, [esi + 0x9f8c]
mov byte [esp + 0x48], 0x65
call fcn.004295f0
lea ecx, [esi + 0x9f98]
mov byte [esp + 0x48], 0x66
call fcn.004295f0
lea ecx, [esi + 0x9fa4]
mov byte [esp + 0x48], 0x67
call fcn.004063b0
mov byte [esp + 0x48], 0x68
push 0x63f7e8
push 0x62f1d4
push 0x62f1cc
lea ecx, [esi + 0x9fd4]
call fcn.0046fb70
push ebp
push 0x62f1bc
push 0x62f1cc
lea ecx, [esi + 0x9fe0]
mov byte [esp + 0x54], 0x69
call fcn.00410b40
push ebp
push 0x62f1b0
push 0x62f1cc
lea ecx, [esi + 0x9fec]
mov byte [esp + 0x54], 0x6a
call fcn.00410b40
lea ecx, [esi + 0x9ffc]
mov byte [esp + 0x48], 0x6b
call fcn.004063b0
push ebp
push 0x62f19c
push 0x62f190
lea ecx, [esi + 0xa008]
mov byte [esp + 0x54], 0x6c
call fcn.00410b40
lea ecx, [esi + 0xa020]
mov byte [esp + 0x48], 0x6d
call fcn.004063b0
lea ecx, [esi + 0xa024]
mov byte [esp + 0x48], 0x6e
call fcn.004063b0
lea ecx, [esi + 0xa028]
mov byte [esp + 0x48], 0x6f
call fcn.004063b0
lea ecx, [esi + 0xa030]
mov byte [esp + 0x48], 0x70
call fcn.004063b0
lea ecx, [esi + 0xa034]
mov byte [esp + 0x48], 0x71
call fcn.004063b0
push 0x7388
push 0x62f184
push 0x625b84
lea ecx, [esi + 0xa054]
mov byte [esp + 0x54], 0x72
call fcn.00410b40
push 0x63f7e8
push 0x62f174
push 0x625b84
lea ecx, [esi + 0xa060]
mov byte [esp + 0x54], 0x73
call fcn.0046fb70
push ebx
push 0x62f168
push 0x625b84
lea ecx, [esi + 0xa06c]
mov byte [esp + 0x54], 0x74
call fcn.00410b40
lea ecx, [esi + 0xa080]
mov byte [esp + 0x48], 0x75
call fcn.00500050
lea ecx, [esi + 0xa120]
mov byte [esp + 0x48], 0x76
call fcn.00500050
mov byte [esp + 0x48], 0x77
push 0x63f7e8
push 0x62f158
push 0x62f190
lea ecx, [esi + 0xa1c4]
call fcn.0046fb70
push 0x62f150
push 0x62f140
push 0x62f190
lea ecx, [esi + 0xa1d0]
mov byte [esp + 0x54], 0x78
call fcn.0046fb70
push ebx
push 0x62f130
push 0x62f190
lea ecx, [esi + 0xa1dc]
mov byte [esp + 0x54], 0x79
call fcn.00410b40
push ebp
push 0x62f12c
push 0x625fe8
lea ecx, [esi + 0xa1ec]
mov byte [esp + 0x54], 0x7a
call fcn.00410b40
push ebx
push 0x62f120
push 0x62f118
lea ecx, [esi + 0xa1f8]
mov byte [esp + 0x54], 0x7b
call fcn.00410b40
push ebx
push 0x62f108
push 0x625fe8
lea ecx, [esi + 0xa204]
mov byte [esp + 0x54], 0x7c
call fcn.00410b40
push ebx
push 0x62f0fc
push 0x625fe8
lea ecx, [esi + 0xa210]
mov byte [esp + 0x54], 0x7d
call fcn.00410b40
lea ecx, [esi + 0xa220]
mov byte [esp + 0x48], 0x7e
call fcn.004063b0
push ebx
push 0x62f0ec
push 0x625fe8
lea ecx, [esi + 0xa224]
mov byte [esp + 0x54], 0x7f
call fcn.00410b40
push ebx
push 0x62f0e0
push 0x625fe8
lea ecx, [esi + 0xa230]
mov byte [esp + 0x54], 0x80
call fcn.00410b40
push ebp
push 0x62f0d4
push 0x625fe8
lea ecx, [esi + 0xa23c]
mov byte [esp + 0x54], 0x81
call fcn.00410b40
push ebx
push 0x62f0c8
push 0x625fe8
lea ecx, [esi + 0xa248]
mov byte [esp + 0x54], 0x82
call fcn.00410b40
mov byte [esp + 0x48], 0x83
push ebx
push 0x62f0b8
push 0x625fe8
lea ecx, [esi + 0xa254]
call fcn.00410b40
push ebp
push 0x62f0a8
push 0x625fe8
lea ecx, [esi + 0xa260]
mov byte [esp + 0x54], 0x84
call fcn.00410b40
push ebp
lea ecx, [esi + 0xa270]
mov byte [esp + 0x4c], 0x85
call fcn.005854b2
push ebx
push 0x62f09c
push 0x625fe8
lea ecx, [esi + 0xa2c8]
mov byte [esp + 0x54], 0x86
call fcn.00410b40
push 0x62def0
push 0x62f090
push 0x625fe8
lea ecx, [esi + 0xa2d4]
mov byte [esp + 0x54], 0x87
call fcn.0046fb70
push 0x63f7e8
push 0x62f088
push 0x625fe8
lea ecx, [esi + 0xa2e0]
mov byte [esp + 0x54], 0x88
call fcn.0046fb70
push 0x7f
push 0x62f078
mov byte [esp + 0x50], 0x89
push 0x62f068
lea ecx, [esi + 0xa2f4]
mov dword [esi + 0xa2ec], ebx
call fcn.00410b40
push 0x7f
push 0x62f058
push 0x62f068
lea ecx, [esi + 0xa300]
mov byte [esp + 0x54], 0x8a
call fcn.00410b40
push 0x7f
push 0x62f04c
push 0x62f068
lea ecx, [esi + 0xa30c]
mov byte [esp + 0x54], 0x8b
call fcn.00410b40
push 0x7f
push 0x62f03c
push 0x62f068
lea ecx, [esi + 0xa318]
mov byte [esp + 0x54], 0x8c
call fcn.00410b40
push ebp
push 0x62f034
push 0x62f068
lea ecx, [esi + 0xa324]
mov byte [esp + 0x54], 0x8d
call fcn.00410b40
push ebp
push 0x62f024
push 0x62f068
lea ecx, [esi + 0xa330]
mov byte [esp + 0x54], 0x8e
call fcn.00410b40
push ebx
push 0x62f018
push 0x62f068
lea ecx, [esi + 0xa33c]
mov byte [esp + 0x54], 0x8f
call fcn.00410b40
push ebx
push 0x62f004
push 0x62f118
lea ecx, [esi + 0xa350]
mov byte [esp + 0x54], 0x90
call fcn.00410b40
push ebx
push 0x62eff4
push 0x625fe8
lea ecx, [esi + 0xa35c]
mov byte [esp + 0x54], 0x91
call fcn.00410b40
push ebx
push 0x62efe8
push 0x62efe0
lea ecx, [esi + 0xa368]
mov byte [esp + 0x54], 0x92
call fcn.00410b40
push 0x3e8
push 0x62efd4
push 0x62efe0
lea ecx, [esi + 0xa374]
mov byte [esp + 0x54], 0x93
call fcn.00410b40
push 0x64
push 0x62efc0
push 0x62efe0
lea ecx, [esi + 0xa380]
mov byte [esp + 0x54], 0x94
call fcn.00410b40
push ebp
push 0x62efb8
push 0x62efb0
lea ecx, [esi + 0xa38c]
mov byte [esp + 0x54], 0x95
call fcn.00410b40
push 3
push 0x62efa8
push 0x62efb0
lea ecx, [esi + 0xa398]
mov byte [esp + 0x54], 0x96
call fcn.00410b40
push 0x27e
push 0x62cdac
push 0x62efb0
lea ecx, [esi + 0xa3a4]
mov byte [esp + 0x54], 0x97
call fcn.00410b40
push 0x1c0
push 0x62cdb4
push 0x62efb0
lea ecx, [esi + 0xa3b0]
mov byte [esp + 0x54], 0x98
call fcn.00410b40
push 0x79
push 0x62ef98
push 0x62efb0
lea ecx, [esi + 0xa3bc]
mov byte [esp + 0x54], 0x99
call fcn.00410b40
push 0x28
mov byte [esp + 0x4c], 0x9a
push 0x62ef88
push 0x62efb0
lea ecx, [esi + 0xa3c8]
call fcn.00410b40
push ebx
push 0x62ef7c
push 0x62efb0
lea ecx, [esi + 0xa3d4]
mov byte [esp + 0x54], 0x9b
call fcn.00410b40
push ebx
push 0x62ef70
push 0x62efb0
lea ecx, [esi + 0xa3e0]
mov byte [esp + 0x54], 0x9c
call fcn.00410b40
lea edi, [esi + 0xa3ec]
push 0x63f7e8
push 0x62de90
push 0x62de88
mov ecx, edi
mov byte [esp + 0x54], 0x9d
call fcn.0046fb70
push 0x63f7e8
push 0x62e32c
push 0x62de88
lea ecx, [esi + 0xa3f8]
mov byte [esp + 0x54], 0x9e
call fcn.0046fb70
push 0x63f7e8
push 0x62ef64
push 0x62de88
lea ecx, [esi + 0xa404]
mov byte [esp + 0x54], 0x9f
call fcn.0046fb70
push 0x63f7e8
push 0x62ef58
push 0x62de88
lea ecx, [esi + 0xa410]
mov byte [esp + 0x54], 0xa0
call fcn.0046fb70
push 0x63f7e8
push 0x62ef50
push 0x62de88
lea ecx, [esi + 0xa41c]
mov byte [esp + 0x54], 0xa1
call fcn.0046fb70
push 0x63f7e8
push 0x623700
push 0x62de88
lea ecx, [esi + 0xa428]
mov byte [esp + 0x54], 0xa2
call fcn.0046fb70
push 0x63f7e8
push 0x62ef48
push 0x62de88
lea ecx, [esi + 0xa434]
mov byte [esp + 0x54], 0xa3
call fcn.0046fb70
push 0x63f7e8
push 0x62ef40
push 0x62de88
lea ecx, [esi + 0xa440]
mov byte [esp + 0x54], 0xa4
call fcn.0046fb70
push 0x63f7e8
push 0x62ef38
push 0x62de88
lea ecx, [esi + 0xa44c]
mov byte [esp + 0x54], 0xa5
call fcn.0046fb70
push 0x63f7e8
push 0x62f64c
push 0x62de88
lea ecx, [esi + 0xa458]
mov byte [esp + 0x54], 0xa6
call fcn.0046fb70
lea ecx, [esi + 0xa464]
mov byte [esp + 0x48], 0xa7
call fcn.0058d50f
push fcn.005936db
push fcn.004063b0
push 0xa
lea ecx, [esi + 0xa47c]
push 4
push ecx
mov byte [esp + 0x5c], 0xa8
call fcn.00573af2
push fcn.005936db
push fcn.004063b0
push 0xa
lea edx, [esi + 0xa4a4]
push 4
push edx
mov byte [esp + 0x5c], 0xa9
call fcn.00573af2
push fcn.005936db
push fcn.004063b0
push 0xa
lea eax, [esi + 0xa4f4]
push 4
push eax
mov byte [esp + 0x5c], 0xaa
call fcn.00573af2
push 0x62e19c
lea ecx, [esp + 0x30]
mov byte [esp + 0x4c], 0xab
call fcn.00593749
push edi
lea ecx, [esp + 0x1c]
push eax
push ecx
mov byte [esp + 0x54], 0xac
call fcn.0059390a
push 0x62ef34
lea edx, [esp + 0x20]
push eax
push edx
mov byte [esp + 0x54], 0xad
call fcn.00593970
mov ecx, eax
mov byte [esp + 0x48], 0xae
call fcn.004302b0
push eax
push 0x62ef2c
push 0x62de88
lea ecx, [esi + 0xa5cc]
call fcn.0046fb70
lea ecx, [esp + 0x1c]
mov byte [esp + 0x48], 0xb2
call fcn.005936db
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 0xb1
call fcn.005936db
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], 0xb0
call fcn.005936db
push ebx
push 0x62ef24
push 0x62de88
lea ecx, [esi + 0xa5d8]
call fcn.00410b40
push ebp
push 0x62ef18
push 0x62de88
lea ecx, [esi + 0xa5e4]
mov byte [esp + 0x54], 0xb3
call fcn.00410b40
push ebp
push 0x62ef08
push 0x625fe8
lea ecx, [esi + 0xa5f0]
mov byte [esp + 0x54], 0xb4
call fcn.00410b40
push ebp
push 0x62eefc
push 0x625fe8
lea ecx, [esi + 0xa604]
mov byte [esp + 0x54], 0xb5
call fcn.00410b40
push 0xa
push 0x62eef0
push 0x625fe8
lea ecx, [esi + 0xa610]
mov byte [esp + 0x54], 0xb6
call fcn.00410b40
push ebp
push 0x62eee0
push 0x625fe8
lea ecx, [esi + 0xa61c]
mov byte [esp + 0x54], 0xb7
call fcn.00410b40
push ebp
push 0x62eed4
push 0x625fe8
lea ecx, [esi + 0xa628]
mov byte [esp + 0x54], 0xb8
call fcn.00410b40
push 0xffffffffffffffff
push 0x62eebc
push 0x62eeb4
lea ecx, [esi + 0xa794]
mov byte [esp + 0x54], 0xb9
call fcn.00410b40
push fcn.005936db
push fcn.004063b0
push 0xa
lea eax, [esi + 0xa7ac]
push 4
push eax
mov byte [esp + 0x5c], 0xba
call fcn.00573af2
push fcn.005936db
push fcn.004063b0
push 0xa
lea ecx, [esi + 0xa7d4]
push 4
push ecx
mov byte [esp + 0x5c], 0xbb
call fcn.00573af2
push fcn.005936db
push fcn.004063b0
push 0xa
lea edx, [esi + 0xa7fc]
push 4
push edx
mov byte [esp + 0x5c], 0xbc
call fcn.00573af2
mov byte [esp + 0x48], 0xbd
lea ecx, [esi + 0xa850]
call fcn.004063b0
lea ecx, [esi + 0xa854]
mov byte [esp + 0x48], 0xbe
call fcn.004063b0
lea ecx, [esi + 0xa858]
mov byte [esp + 0x48], 0xbf
call fcn.004063b0
push ebx
push 0x62ee9c
push 0x625fe8
lea ecx, [esi + 0xa874]
mov byte [esp + 0x54], 0xc0
call fcn.00410b40
lea ecx, [esi + 0xa880]
mov byte [esp + 0x48], 0xc1
call fcn.00429410
push ebx
push 0x62ee84
push 0x62ee78
lea ecx, [esi + 0xa8a8]
mov byte [esp + 0x54], 0xc2
call fcn.00410b40
push 0x63f7e8
push 0x62ee68
push 0x62ee78
lea ecx, [esi + 0xa8b8]
mov byte [esp + 0x54], 0xc3
call fcn.0046fb70
push ebx
push 0x62ee58
push 0x62ee78
lea ecx, [esi + 0xa8c4]
mov byte [esp + 0x54], 0xc4
call fcn.00410b40
lea ecx, [esi + 0xa8d4]
mov byte [esp + 0x48], 0xc5
call fcn.004063b0
lea ecx, [esi + 0xa8dc]
mov byte [esp + 0x48], 0xc6
call fcn.004063b0
lea ecx, [esi + 0xa8e0]
mov byte [esp + 0x48], 0xc7
call fcn.004063b0
lea ecx, [esi + 0xa8e4]
mov byte [esp + 0x48], 0xc8
call fcn.004063b0
lea ecx, [esi + 0xa8e8]
mov byte [esp + 0x48], 0xc9
call fcn.004063b0
lea ecx, [esi + 0xa8ec]
mov byte [esp + 0x48], 0xca
call fcn.004063b0
lea ecx, [esi + 0xa8f0]
mov byte [esp + 0x48], 0xcb
call fcn.004063b0
lea ecx, [esi + 0xa8f4]
mov byte [esp + 0x48], 0xcc
call fcn.004063b0
lea ecx, [esi + 0xa8f8]
mov byte [esp + 0x48], 0xcd
call fcn.004063b0
mov byte [esp + 0x48], 0xce
lea ecx, [esi + 0xa8fc]
call fcn.004063b0
lea ecx, [esi + 0xa900]
mov byte [esp + 0x48], 0xcf
call fcn.004063b0
lea ecx, [esi + 0xa904]
mov byte [esp + 0x48], 0xd0
call fcn.004063b0
lea ecx, [esi + 0xa908]
mov byte [esp + 0x48], 0xd1
call fcn.004063b0
lea ecx, [esi + 0xa90c]
mov byte [esp + 0x48], 0xd2
call fcn.004063b0
lea ecx, [esi + 0xa910]
mov byte [esp + 0x48], 0xd3
call fcn.004063b0
lea ecx, [esi + 0xa914]
mov byte [esp + 0x48], 0xd4
call fcn.004063b0
lea ecx, [esi + 0xa918]
mov byte [esp + 0x48], 0xd5
call fcn.004063b0
lea ecx, [esi + 0xa91c]
mov byte [esp + 0x48], 0xd6
call fcn.004063b0
lea ecx, [esi + 0xa920]
mov byte [esp + 0x48], 0xd7
call fcn.004063b0
lea ecx, [esi + 0xa924]
mov byte [esp + 0x48], 0xd8
call fcn.004063b0
lea ecx, [esi + 0xa928]
mov byte [esp + 0x48], 0xd9
call fcn.004063b0
lea ecx, [esi + 0xa92c]
mov byte [esp + 0x48], 0xda
call fcn.004063b0
lea ecx, [esi + 0xa930]
mov byte [esp + 0x48], 0xdb
call fcn.004063b0
lea ecx, [esi + 0xa934]
mov byte [esp + 0x48], 0xdc
call fcn.004063b0
lea ecx, [esi + 0xa938]
mov byte [esp + 0x48], 0xdd
call fcn.004063b0
lea ecx, [esi + 0xa93c]
mov byte [esp + 0x48], 0xde
call fcn.004063b0
lea ecx, [esi + 0xa940]
mov byte [esp + 0x48], 0xdf
call fcn.004063b0
lea ecx, [esi + 0xa944]
mov byte [esp + 0x48], 0xe0
call fcn.004063b0
lea ecx, [esi + 0xa948]
mov byte [esp + 0x48], 0xe1
call fcn.004063b0
lea ecx, [esi + 0xa94c]
mov byte [esp + 0x48], 0xe2
call fcn.004063b0
lea ecx, [esi + 0xa950]
mov byte [esp + 0x48], 0xe3
call fcn.004063b0
lea ecx, [esi + 0xa954]
mov byte [esp + 0x48], 0xe4
call fcn.004063b0
lea ecx, [esi + 0xa958]
mov byte [esp + 0x48], 0xe5
call fcn.004063b0
lea ecx, [esi + 0xa95c]
mov byte [esp + 0x48], 0xe6
call fcn.004063b0
lea ecx, [esi + 0xa960]
mov byte [esp + 0x48], 0xe7
call fcn.004063b0
push ebx
push 0x62ee48
push 0x62f678
lea ecx, [esi + 0xa980]
mov byte [esp + 0x54], 0xe8
call fcn.00410b40
push ebx
push 0x62ee38
push 0x62f678
lea ecx, [esi + 0xa98c]
mov byte [esp + 0x54], 0xe9
call fcn.00410b40
push 0x416ad61e
push ebx
push 0x62ee2c
push 0x62f678
lea ecx, [esi + 0xa998]
mov byte [esp + 0x58], 0xea
call fcn.0046fc70
lea ecx, [esi + 0xa9e0]
mov byte [esp + 0x48], 0xeb
call fcn.00595172
lea ecx, [esi + 0xa9f8]
mov byte [esp + 0x48], 0xec
call fcn.00475bc0
lea ecx, [esi + 0xaa14]
mov byte [esp + 0x48], 0xed
call fcn.004295f0
mov byte [esp + 0x48], 0xee
mov dword [esi], 0x5e1dd8
mov dword [esi + 0xbc], 0x5e1dcc
mov dword [esi + 0xc0], 0x5e1dc0
lea ecx, [esi + 0xa998]
mov dword [esi + 0xc8], 0x5e1db8
call fcn.00468370
fstp qword [esi + 0xa9b0]
mov dword [esi + 0xa650], ebx
mov dword [esi + 0x9300], ebx
mov dword [esi + 0x8ed8], ebp
mov dword [esi + 0x84b8], ebx
lea eax, [esi + 0xa21c]
mov dword [esi + 0xa34c], ebx
mov dword [esi + 0xa348], ebx
push 0x62ee20
mov dword [eax], ebx
push 0x62ee18
mov dword [esi + 0xa9c0], ebx
push 0x625fe8
lea ecx, [esi + 0x9f04]
mov dword [esi + 0xa9c4], ebx
call fcn.0046fc40
push 0x62de98
push 0x62ee10
push 0x625fe8
lea ecx, [esi + 0x9f10]
call fcn.0046fc40
push 0x62ee04
mov ecx, esi
call fcn.00475210
lea ecx, [esi + 0xa3ec]
push ecx
mov ecx, 0x66469c
call fcn.00593814
push 0x62edfc
lea ecx, [esi + 0x8538]
call fcn.0046fce0
push 0x62edfc
lea ecx, [esi + 0x8550]
call fcn.0046fce0
lea ecx, [esi + 0xa35c]
mov dword [esi + 0xa9f4], ebx
call fcn.004302b0
mov dword [0x66440c], eax
lea ecx, [esi + 0x8208]
mov dword [esi + 0x84e0], ebx
call fcn.004302b0
lea edx, [esp + 0x14]
mov byte [0x6311a8], al
push edx
call fcn.005047d0
add esp, 4
push ebx
push 0x63f7e8
push 0x62619c
lea ecx, [esp + 0x20]
mov byte [esp + 0x54], 0xef
call fcn.004302b0
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.004eb820
add esp, 0x14
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x4c], 0xf0
call fcn.00593814
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], 0xef
call fcn.005936db
push ebx
push 0x63f7e8
push 0x623640
lea ecx, [esp + 0x20]
call fcn.004302b0
lea ecx, [esp + 0x38]
push eax
push ecx
call fcn.004eb820
add esp, 0x14
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x4c], 0xf1
call fcn.00593814
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], 0xef
call fcn.005936db
lea ecx, [esp + 0x14]
call fcn.004302b0
push eax
push 0x62edf4
push 0x62e12c
mov ecx, 0x6646a8
call fcn.004ed2d0
push 0x63f7e8
push 0x62edec
lea edx, [esp + 0x2c]
push 0x62e12c
push edx
mov ecx, 0x6646a8
call fcn.004ed430
mov byte [esp + 0x48], 0xf2
lea eax, [esp + 0x2c]
push ebx
push eax
call fcn.0050e490
add esp, 8
lea ecx, [esp + 0x24]
push eax
push ecx
mov byte [esp + 0x50], 0xf3
call fcn.0046fda0
test al, al
je 0x46ef40
lea ecx, [esp + 0x24]
call fcn.0046fd90
test eax, eax
sete al
cmp al, bl
je 0x46ef40
mov eax, ebp
jmp 0x46ef42
xor eax, eax
mov dword [esi + 0xa1e8], eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], 0xf2
call fcn.005936db
lea edx, [esp + 0x2c]
push ebx
push edx
call fcn.0050e490
add esp, 8
mov ecx, eax
mov byte [esp + 0x48], 0xf4
call fcn.004302b0
push eax
push 0x62edec
push 0x62e12c
mov ecx, 0x6646a8
call fcn.004ed2d0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], 0xf2
call fcn.005936db
push 0x63f7e8
push 0x62ede4
lea eax, [esp + 0x30]
push 0x62e12c
push eax
mov ecx, 0x6646a8
call fcn.004ed430
lea ecx, [esp + 0x28]
mov byte [esp + 0x48], 0xf5
call fcn.004302b0
push eax
mov ecx, 0x6dbea8
call fcn.005006b0
lea ecx, [esp + 0x2c]
push ecx
mov ecx, 0x6dbea8
call fcn.005005b0
mov ecx, eax
mov byte [esp + 0x48], 0xf6
call fcn.004302b0
push eax
push 0x62ede4
push 0x62e12c
mov ecx, 0x6646a8
call fcn.004ed2d0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], 0xf5
call fcn.005936db
push ebp
push 0x62ede0
push 0x625fe8
lea ecx, [esi + 0x124]
call fcn.0046fcf0
push ebp
push 0x62edd4
push 0x625fe8
lea ecx, [esi + 0x130]
call fcn.0046fcf0
lea edi, [esi + 0x13c]
push 0x20
push 0x62e6e4
push 0x62edc8
mov ecx, edi
call fcn.0046fcf0
push ebx
push 0x62edbc
lea ecx, [esi + 0x148]
push 0x62edc8
call fcn.0046fcf0
mov ecx, edi
call fcn.004302b0
push eax
call dword [0x5da4c0]
push eax
call dword [0x5da4bc]
lea ecx, [esi + 0x148]
call fcn.004302b0
push eax
call dword [0x5da46c]
push eax
call dword [0x5da468]
mov dword [esi + 0x8368], ebx
mov dword [esi + 0xa8b4], ebx
mov dword [esi + 0xa8d0], ebx
mov dword [esi + 0xa8d8], ebx
mov dword [esi + 0xa964], ebx
mov dword [esi + 0xa968], ebx
mov dword [esi + 0xa96c], ebx
mov ecx, esi
mov dword [esi + 0xa970], ebx
call fcn.0045f370
push 0x780
call fcn.0058ecf8
add esp, 4
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov byte [esp + 0x48], 0xf7
je 0x46f0eb
mov ecx, eax
call fcn.00516610
jmp 0x46f0ed
xor eax, eax
mov byte [esp + 0x48], 0xf5
push 0x10
mov dword [esi + 0x154], eax
call fcn.0058ecf8
add esp, 4
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov byte [esp + 0x48], 0xf8
je 0x46f118
mov ecx, eax
call fcn.004e2e20
jmp 0x46f11a
xor eax, eax
mov byte [esp + 0x48], 0xf5
lea ecx, [esi + 0x124]
mov dword [esi + 0xa63c], eax
call fcn.004302b0
mov ecx, dword [esi + 0xa63c]
neg eax
sbb eax, eax
neg eax
push eax
call fcn.004e5970
mov ecx, dword [esi + 0xa63c]
push 0x62e8a4
call fcn.004e3100
mov ecx, dword [esi + 0xa63c]
push 0x62e89c
call fcn.004e3100
mov ecx, dword [esi + 0xa63c]
push 0x62edb0
call fcn.004e2e80
lea ecx, [esi + 0x8538]
call fcn.00468370
sub esp, 8
lea ecx, [esi + 0x8550]
fstp qword [esp]
call fcn.00468370
sub esp, 8
fstp qword [esp]
mov ecx, dword [esi + 0xa63c]
call fcn.0046fe00
mov ecx, esi
call fcn.00457800
push 0x62e058
lea ecx, [esi + 0x9358]
mov dword [esi + 0x933c], ebx
call fcn.00593864
push 0x63f7e8
lea ecx, [esi + 0x9344]
call fcn.00593864
push 0x62e144
lea ecx, [esi + 0x9348]
call fcn.00593864
push 0x62edac
lea ecx, [esi + 0x934c]
mov dword [esi + 0x9350], ebx
call fcn.00593864
mov dword [esi + 0x9308], ebp
mov dword [esi + 0x930c], ebx
mov dword [esi + 0x9310], ebx
mov dword [esi + 0x9314], ebx
mov dword [esi + 0x9318], ebx
mov dword [esi + 0x931c], ebx
mov dword [esi + 0x9320], ebx
mov dword [esi + 0x9328], ebx
mov dword [esi + 0x9330], ebx
mov dword [esi + 0x932c], ebx
mov dword [esi + 0x9338], ebx
lea edx, [esp + 0x34]
mov dword [esi + 0x9334], ebx
mov dword [esi + 0x9324], ebx
push edx
mov dword [esi + 0x9340], ebx
lea edi, [esi + 0x9360]
call fcn.0056af0d
push eax
mov ecx, edi
call fcn.004754f0
push edi
lea ecx, [esi + 0x936c]
call fcn.004754f0
mov dword [esi + 0xa648], ebx
mov dword [esi + 0xa64c], ebx
mov dword [esi + 0xa7a4], ebx
mov dword [esi + 0xa7a0], ebx
mov dword [esi + 0xa7a8], 0xffffffff
mov dword [esi + 0x8330], ebx
mov dword [esi + 0x832c], ebx
mov dword [esi + 0xa84c], ebx
mov ecx, esi
mov dword [esi + 0xa85c], ebx
call fcn.0048dbf0
mov dword [esi + 0x9fcc], ebx
mov dword [esi + 0x9fd0], ebx
mov dword [esi + 0x9fc0], ebx
mov dword [esi + 0x9fc8], ebx
mov dword [esi + 0x9fc4], ebx
mov dword [esi + 0xa014], ebx
mov dword [esi + 0x9ff8], ebx
mov dword [esi + 0xa000], ebx
mov dword [esi + 0xa018], ebx
mov dword [esi + 0xa01c], ebx
mov dword [esi + 0xa1c0], ebx
mov dword [esi + 0xa004], ebx
mov dword [esi + 0xa26c], ebx
mov dword [esi + 0x84b4], ebx
mov dword [esi + 0xa5c4], ebx
mov dword [esi + 0xa5c8], ebx
mov dword [esi + 0x84ec], ebx
lea ecx, [esi + 0xa2e0]
mov dword [esi + 0x8510], ebx
call fcn.0046fd90
test eax, eax
jne 0x46f350
push 0x14
call fcn.0046fd40
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov byte [esp + 0x48], 0xf9
je 0x46f343
mov ecx, eax
call fcn.00470080
jmp 0x46f345
xor eax, eax
mov byte [esp + 0x48], 0xf5
mov dword [esi + 0xa2ec], eax
cmp dword [esi + 0xa2ec], ebx
je 0x46f389
lea ecx, [esi + 0xa2e0]
call fcn.004302b0
mov ecx, dword [esi + 0xa2ec]
push eax
call fcn.004ccfc0
test eax, eax
jne 0x46f389
mov ecx, dword [esi + 0xa2ec]
cmp ecx, ebx
je 0x46f383
mov eax, dword [ecx]
push ebp
call dword [eax + 4]
mov dword [esi + 0xa2ec], ebx
mov dword [esi + 0x8348], ebx
mov dword [esi + 0x834c], ebx
mov dword [esi + 0x8328], ebx
mov dword [esi + 0x8340], ebx
mov dword [esi + 0xa634], ebx
mov dword [0x63fd4c], esi
mov edi, 0x14
mov dword [esi + 0x8568], ebx
mov dword [esi + 0x8590], edi
mov dword [esi + 0xa5fc], ebx
mov dword [esi + 0x9378], ebx
mov dword [esi + 0x937c], ebx
push ebx
mov dword [esi + 0x9388], ebx
push ebx
lea ecx, [esi + 0x8f40]
mov dword [esi + 0x938c], ebx
call fcn.0046fd50
push 0x150
call fcn.0046fd40
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov byte [esp + 0x48], 0xfa
je 0x46f409
mov ecx, eax
call fcn.0050a430
jmp 0x46f40b
xor eax, eax
mov byte [esp + 0x48], 0xf5
push 0x1a0
mov dword [esi + 0x9eac], eax
call fcn.0046fd40
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov byte [esp + 0x48], 0xfb
je 0x46f436
mov ecx, eax
call fcn.00513920
jmp 0x46f438
xor eax, eax
mov byte [esp + 0x48], 0xf5
push 0xe0
mov dword [esi + 0x9ea8], eax
call fcn.0046fd40
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov byte [esp + 0x48], 0xfc
je 0x46f463
mov ecx, eax
call fcn.004700a0
jmp 0x46f465
xor eax, eax
mov byte [esp + 0x48], 0xf5
mov dword [esi + 0x9678], eax
mov dword [esi + 0x93a0], ebx
mov dword [esi + 0x93a4], ebx
mov dword [esi + 0xa600], ebx
mov dword [esi + 0x93ac], ebx
lea ecx, [esp + 0x20]
mov dword [0x63fd40], edi
call fcn.004063b0
mov byte [esp + 0x48], 0xfd
mov dword [esp + 0x1c], ebx
mov edi, 0x93c8
lea ecx, [esp + 0x18]
call fcn.004063b0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x18]
push ecx
push 0x625a90
push edx
mov byte [esp + 0x54], 0xfe
call fcn.0058aded
add esp, 0xc
lea ecx, [esp + 0x18]
push 0x62d714
call fcn.004302b0
push eax
lea eax, [esp + 0x34]
push 0x62eda4
push eax
mov ecx, 0x6646a8
call fcn.004ed430
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x4c], 0xff
call fcn.00593814
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], 0xfe
call fcn.005936db
push 0x6236fc
push 4
call fcn.00573347
add esp, 8
lea ecx, [esp + 0x20]
call fcn.004302b0
push eax
call fcn.005739bd
fstp dword [edi + esi]
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 0xfd
call fcn.005936db
mov edx, dword [esp + 0x1c]
add edi, 4
inc edx
cmp edi, 0x93dc
mov dword [esp + 0x1c], edx
jl 0x46f4a5
mov ecx, esi
mov dword [esi + 0x8ec8], ebp
call fcn.00477380
mov ecx, esi
call fcn.00461aa0
lea ecx, [esi + 0xa2c8]
call fcn.004302b0
cmp eax, ebp
jne 0x46f647
mov ecx, dword [0x5f7fb0]
lea edi, [esi + 0xa2d4]
push ecx
push 0xa
mov ecx, edi
call fcn.004302b0
push eax
lea ecx, [esi + 0xa270]
call fcn.0058565b
mov edx, dword [esi + 0xa270]
mov eax, dword [edx + 4]
lea ecx, [eax + esi + 0xa270]
call fcn.00410ae0
test eax, eax
jne 0x46f647
lea ecx, [esp + 0x1c]
push 0xc993
push ecx
call fcn.004ec350
add esp, 8
push edi
lea edx, [esp + 0x30]
push eax
push edx
mov dword [esp + 0x54], 0x200
call fcn.0059390a
push 0x30
push ebx
mov ecx, eax
mov byte [esp + 0x50], 1
call fcn.004302b0
push eax
mov ecx, esi
call fcn.005913a9
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.005936db
lea ecx, [esp + 0x1c]
mov dword [esp + 0x48], 0x1fd
call fcn.005936db
push ebx
lea ecx, [esi + 0xa2c8]
call fcn.0046fd30
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x63f7e8
call fcn.00593749
lea eax, [esp + 0x30]
mov ecx, edi
push eax
call fcn.00429580
lea ecx, [esp + 0x2c]
call fcn.005936db
mov ecx, esi
call fcn.00469e80
mov ecx, esi
call fcn.00490790
mov ecx, esi
call fcn.0045e510
mov ecx, esi
call fcn.0045e620
push 0xb8
call fcn.0058ecf8
add esp, 4
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov dword [esp + 0x48], 0x202
je 0x46f689
mov ecx, eax
call fcn.0050fa30
jmp 0x46f68b
xor eax, eax
push 0x63f7e8
mov dword [esp + 0x4c], 0x1fd
push ebx
mov dword [esi + 0xa640], eax
call fcn.00573347
push 0xf4
call fcn.0058ecf8
add esp, 0xc
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov dword [esp + 0x48], 0x203
je 0x46f6e2
push fcn.00410bc0
push fcn.004295f0
lea edi, [eax + 4]
push 0x14
push 0xc
push edi
mov dword [eax], 0x14
call fcn.00573af2
mov eax, edi
jmp 0x46f6e4
xor eax, eax
push 0x808000
push 0x62ed9c
mov dword [esp + 0x50], 0x1fd
push 0x62dd9c
mov ecx, eax
mov dword [esi + 0x9414], eax
call fcn.0046fcf0
mov edi, dword [0x5da7d4]
push 8
call edi
mov ecx, dword [esi + 0x9414]
push eax
push 0x62ed94
push 0x62dd9c
add ecx, 0xc
call fcn.0046fcf0
push 8
call edi
mov ecx, dword [esi + 0x9414]
push eax
push 0x62ed7c
push 0x62dd9c
add ecx, 0x24
call fcn.0046fcf0
push 5
call edi
mov ecx, dword [esi + 0x9414]
push eax
push 0x62ed60
push 0x62dd9c
add ecx, 0x30
call fcn.0046fcf0
push 5
call edi
mov ecx, dword [esi + 0x9414]
push eax
push 0x62f2ac
push 0x62dd9c
add ecx, 0x18
call fcn.0046fcf0
push 8
call edi
mov ecx, dword [esi + 0x9414]
push eax
push 0x62ed50
push 0x62dd9c
add ecx, 0x3c
call fcn.0046fcf0
push 5
call edi
mov ecx, dword [esi + 0x9414]
push eax
push 0x62ed38
push 0x62dd9c
add ecx, 0x48
call fcn.0046fcf0
mov ecx, dword [esi + 0x9414]
push 0xc5fcf9
push 0x62ed24
push 0x62dd9c
add ecx, 0x54
call fcn.0046fcf0
mov ecx, dword [esi + 0x9414]
push 0x800040
push 0x62ed14
push 0x62dd9c
add ecx, 0x60
call fcn.0046fcf0
mov ecx, dword [esi + 0x9414]
push 0xffff80
push 0x62ed00
push 0x62dd9c
add ecx, 0x6c
call fcn.0046fcf0
mov ecx, dword [esi + 0x9414]
push 0x80
push 0x62ecf4
push 0x62dd9c
add ecx, 0x78
call fcn.0046fcf0
push 0x808000
mov ecx, dword [esi + 0x9414]
push 0x62ece8
push 0x62dd9c
add ecx, 0x84
call fcn.0046fcf0
mov ecx, dword [esi + 0x9414]
push 0x8000
push 0x62ecd8
push 0x62dd9c
add ecx, 0x90
call fcn.0046fcf0
mov ecx, dword [esi + 0x9414]
push 0x8080
push 0x62ecd0
push 0x62dd9c
add ecx, 0x9c
call fcn.0046fcf0
mov ecx, dword [esi + 0x9414]
push 0x800080
push 0x62ecc8
push 0x62dd9c
add ecx, 0xa8
call fcn.0046fcf0
mov ecx, dword [esi + 0x9414]
push ebx
push 0x62ecbc
push 0x62dd9c
add ecx, 0xb4
call fcn.0046fcf0
push ebx
push 0x62ecb0
push 0x62eca8
lea ecx, [esi + 0x9f44]
call fcn.0046fcf0
push ebp
push 0x62ec94
push 0x625fe8
lea ecx, [esi + 0x9f50]
call fcn.0046fcf0
push ebx
push 0x62ec80
push 0x625fe8
lea ecx, [esi + 0x9f5c]
call fcn.0046fcf0
push ebx
push 0x62ec6c
push 0x625fe8
lea ecx, [esi + 0x9f74]
call fcn.0046fcf0
push ebx
push 0x62ec54
push 0x625fe8
lea ecx, [esi + 0x9f68]
call fcn.0046fcf0
lea edi, [esi + 0x9f80]
push 5
push 0x62ec44
push 0x625fe8
mov ecx, edi
call fcn.0046fcf0
push 8
push 0x62ec38
push 0x625fe8
lea ecx, [esi + 0x9f8c]
call fcn.0046fcf0
push ebx
push 0x62ec2c
push 0x625fe8
lea ecx, [esi + 0x9f98]
call fcn.0046fcf0
push ebx
push 0x62ec1c
push 0x625fe8
lea ecx, [esi + 0x8450]
call fcn.0046fcf0
mov ecx, edi
call fcn.004302b0
push 0x14
mov dword [0x6344a4], eax
call fcn.0046fd40
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov dword [esp + 0x48], 0x204
je 0x46f9c2
mov ecx, eax
call fcn.004700e0
jmp 0x46f9c4
xor eax, eax
mov ecx, eax
mov dword [esp + 0x48], 0x1fd
cmp ecx, ebx
mov dword [esi + 0xa644], eax
je 0x46f9e2
push 0x62ec10
call fcn.00514df0
push 0x6236fc
push 4
call fcn.00573347
add esp, 8
lea ecx, [esi + 0x8550]
call fcn.00468370
sub esp, 8
fstp qword [esp]
mov ecx, dword [esi + 0x154]
push 0x62de14
add ecx, 0x48
push ecx
call fcn.0058aded
mov ecx, dword [esi + 0x154]
add esp, 0x10
add ecx, 0x48
call fcn.00516540
lea ecx, [esi + 0x8538]
call fcn.00468370
sub esp, 8
fstp qword [esp]
mov edx, dword [esi + 0x154]
push 0x62de14
add edx, 0x60
push edx
call fcn.0058aded
mov ecx, dword [esi + 0x154]
add esp, 0x10
add ecx, 0x60
call fcn.00516540
push 0x63f7e8
push 4
call fcn.00573347
mov dword [esi + 0xa974], ebx
mov dword [esi + 0xa978], ebx
mov dword [esi + 0xa97c], ebx
mov dword [esi + 0xa9d0], ebx
mov dword [esi + 0xa9d4], ebx
mov dword [esi + 0xa9c8], ebx
mov dword [esi + 0xa9cc], ebx
mov dword [esi + 0xa9d8], ebx
add esp, 8
mov dword [esi + 0xa9dc], ebx
mov ecx, esi
mov dword [esi + 0x93a8], ebx
call fcn.005b1ebe
push 0x62ec08
call dword [0x5da424]
push ebx
push 0x62ec00
push 0x625fe8
lea ecx, [esi + 0xaa14]
mov dword [esi + 0xaa20], eax
call fcn.0046fcf0
lea eax, [esi + 0xa03c]
mov dword [esi + 0xaa0c], ebx
mov dword [esi + 0xaa10], ebx
push eax
mov dword [esi + 0x850c], ebx
call dword [0x5da42c]
or eax, 0xffffffff
mov dword [esi + 0xa038], ebx
mov dword [esi + 0xa864], eax
mov dword [esi + 0xa868], eax
mov dword [esi + 0xa86c], ebp
mov dword [esi + 0xa870], eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x48], 0xf5
call fcn.005936db
lea ecx, [esp + 0x28]
mov byte [esp + 0x48], 0xf2
call fcn.005936db
lea ecx, [esp + 0x24]
mov byte [esp + 0x48], 0xef
call fcn.005936db
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0xee
call fcn.005936db
mov ecx, dword [esp + 0x40]
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret