Function at 0x479230
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x516f00
mov eax, dword fs:[0]
push eax
sub esp, 0x58
push ebx
push esi
push edi
mov eax, dword [0x574be0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], 0
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2c], eax
mov eax, 0x554ba8
mov byte [ebp - 4], 1
test eax, 0xffff0000
jne 0x4792a1
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x4792ae
push esi
push eax
lea ecx, [ebp - 0x2c]
call fcn.00420bb0
jmp 0x4792ae
push 0x554ba8
lea ecx, [ebp - 0x2c]
call fcn.00420650
push 0x551410
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 2
call fcn.004204a0
mov byte [ebp - 4], 3
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x40], esi
lea eax, [ebp - 0x2c]
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.00421890
add esp, 4
lea ecx, [ebp + 8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 5
call fcn.00421890
add esp, 4
mov byte [ebp - 4], 6
cmp dword [ebx + 0x80], 0
je 0x47931e
push 0
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebx + 0x7c]
push eax
call fcn.004219a0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x479341
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479361
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47937e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47939e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4793be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 7
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 8
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 9
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x3c], ebx
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp + 8]
mov ecx, dword [esi + 0xb8]
lea edx, [eax - 0x10]
sub ecx, 0x10
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x28], ecx
cmp edx, ecx
je 0x47948e
cmp dword [ecx + 0xc], 0
lea edx, [ecx + 0xc]
mov dword [ebp - 0x30], edx
jl 0x47947c
mov edx, dword [eax - 0x10]
cmp edx, dword [ecx]
jne 0x47947c
mov ecx, dword [ebp - 0x40]
call fcn.00420750
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x479471
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x40]
add eax, 0x10
mov dword [esi + 0xb8], eax
jmp 0x47948b
push dword [eax - 0xc]
lea ecx, [esi + 0xb8]
push eax
call fcn.00420c80
mov eax, dword [ebp + 8]
mov dword [ebp - 0x44], 0
cmp dword [eax - 0xc], 0
jge 0x4794a0
or ecx, 0xffffffff
jmp 0x4794c0
push 0x554d10
push eax
call fcn.004ebb6d
mov ecx, eax
mov eax, dword [ebp + 8]
add esp, 8
test ecx, ecx
jne 0x4794bc
or ecx, 0xffffffff
jmp 0x4794c0
sub ecx, eax
sar ecx, 1
test ecx, ecx
sets cl
test cl, cl
je 0x4795de
push 0
lea eax, [ebp - 0x44]
push eax
call dword [0x51b508]
test eax, eax
jne 0x4795db
mov eax, dword [0x57c194]
cmp eax, 3
je 0x47b775
cmp eax, 4
je 0x47b775
cmp dword [esi + 0xdc], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
jne 0x479575
call fcn.00477360
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 0x30
push ecx
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0x554d1c
call fcn.004204a0
push ecx
mov ecx, esp
push 0x554be0
mov byte [ebp - 4], 0xc
call fcn.004204a0
mov eax, dword [esi + 0x5c]
lea ecx, [esi + 0x5c]
mov byte [ebp - 4], 0xb
call dword [eax + 0x18]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x54]
push eax
push dword [eax]
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x54]
call fcn.00476f00
push dword [ebp - 0x54]
call fcn.004ea3bd
add esp, 4
jmp 0x47b775
call fcn.00477360
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 0x30
push ecx
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0x554d1c
call fcn.004204a0
push ecx
mov ecx, esp
push 0x554c78
mov byte [ebp - 4], 0xe
call fcn.004204a0
mov eax, dword [esi + 0x5c]
lea ecx, [esi + 0x5c]
mov byte [ebp - 4], 0xd
call dword [eax + 0x18]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x54]
push eax
push dword [eax]
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x54]
call fcn.00476f00
push dword [ebp - 0x54]
call fcn.004ea3bd
add esp, 4
jmp 0x47b775
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x10]
lea esi, [eax - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
mov ecx, eax
mov edi, 1
jl 0x479607
cmp ecx, dword [esi]
jne 0x479607
mov ebx, esi
mov eax, edi
lock xadd dword [edx], eax
jmp 0x479644
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ebx, eax
test ebx, ebx
jne 0x47961b
call fcn.004208f0
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov ecx, dword [esi + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [esi + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebx + 0x10]
push eax
call fcn.004eb47f
add esp, 0x10
add ebx, 0x10
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 0xf
mov esi, dword [ebx - 0xc]
test esi, esi
jns 0x47965f
push 0x80070057
call fcn.0041fba0
mov eax, dword [ebx - 8]
mov ecx, edi
sub ecx, dword [ebx - 4]
sub eax, esi
or eax, ecx
jge 0x479679
push esi
lea ecx, [ebp - 0x24]
call fcn.004206e0
mov ebx, dword [ebp - 0x24]
lea eax, [esi + 1]
push eax
push ebx
call fcn.004ee372
add esp, 8
cmp esi, dword [ebx - 8]
jg 0x479655
mov dword [ebx - 0xc], esi
xor eax, eax
mov word [ebx + esi*2], ax
mov eax, dword [0x57c2b8]
mov ebx, 0x554e80
cmp dword [eax - 0xc], 0
je 0x479849
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x10
test ebx, 0xffff0000
jne 0x4796e1
movzx esi, bx
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x4796f0
push esi
push eax
lea ecx, [ebp - 0x28]
call fcn.00420bb0
jmp 0x4796f0
push 4
push 0x554e80
lea ecx, [ebp - 0x28]
call fcn.00420c80
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.0042b440
add esp, 4
mov edi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x12
mov edx, dword [eax]
mov esi, dword [edi + 0xb0]
lea ecx, [edi + 0xb0]
lea ebx, [edx - 0x10]
sub esi, 0x10
cmp ebx, esi
je 0x47976d
cmp dword [esi + 0xc], 0
jl 0x479764
mov eax, dword [ebx]
cmp eax, dword [esi]
jne 0x479764
mov ecx, ebx
call fcn.00420750
or ebx, 0xffffffff
mov dword [ebp - 0x40], eax
mov ecx, ebx
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x479757
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x40]
lea esi, [edi + 0xb0]
add eax, 0x10
mov dword [esi], eax
jmp 0x479776
push dword [edx - 0xc]
push edx
call fcn.00420c80
lea esi, [edi + 0xb0]
or ebx, 0xffffffff
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479796
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4797b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x47984f
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov eax, 0x554e8c
mov byte [ebp - 4], 0x13
test eax, 0xffff0000
jne 0x479805
movzx ecx, ax
call fcn.0041fcd0
test eax, eax
je 0x479814
mov edx, 0x554e8c
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00420bb0
jmp 0x479814
push 3
push 0x554e8c
lea ecx, [ebp - 0x28]
call fcn.00420c80
push esi
lea edx, [ebp - 0x28]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x14
call fcn.0042b2c0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
add esp, 4
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47984f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x47984f
mov edi, dword [ebp - 0x1c]
or ebx, 0xffffffff
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
mov byte [ebp - 0x11], 0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov eax, 0x554e80
mov byte [ebp - 4], 0x15
test eax, 0xffff0000
jne 0x479890
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x47989f
push esi
push eax
lea ecx, [ebp - 0x28]
call fcn.00420bb0
jmp 0x47989f
push 4
push 0x554e80
lea ecx, [ebp - 0x28]
call fcn.00420c80
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x16
call fcn.0042b440
add esp, 4
mov byte [ebp - 4], 0x17
mov edx, dword [eax]
mov esi, dword [edi + 0xe4]
lea ecx, [edi + 0xe4]
lea eax, [edx - 0x10]
sub esi, 0x10
mov dword [ebp - 0x40], eax
cmp eax, esi
je 0x47991a
cmp dword [esi + 0xc], 0
jl 0x479911
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x479911
mov ecx, dword [ebp - 0x40]
call fcn.00420750
mov dword [ebp - 0x40], eax
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479901
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x40]
lea esi, [edi + 0xe4]
add eax, 0x10
mov dword [esi], eax
jmp 0x479920
push dword [edx - 0xc]
push edx
call fcn.00420c80
lea esi, [edi + 0xe4]
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479940
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479960
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x479a12
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov eax, 0x554e8c
mov byte [ebp - 4], 0x18
test eax, 0xffff0000
jne 0x4799af
movzx ecx, ax
call fcn.0041fcd0
test eax, eax
je 0x4799be
mov edx, 0x554e8c
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00420bb0
jmp 0x4799be
push 3
push 0x554e8c
lea ecx, [ebp - 0x28]
call fcn.00420c80
push esi
lea edx, [ebp - 0x28]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x19
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x28]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4799f7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x479a12
push 0x83
push 0x554d60
mov ecx, esi
call fcn.00420c80
mov byte [ebp - 0x11], 1
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
cmp byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x1a
mov esi, 0x551410
jne 0x479e57
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x554e68
mov byte [ebp - 4], 0x1b
test eax, 0xffff0000
jne 0x479abc
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x479a73
push esi
push eax
lea ecx, [ebp - 0x18]
call fcn.00420bb0
mov esi, 0x551410
mov byte [ebp - 4], 0x1c
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, 0x551410
shr eax, 0x10
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x4c], eax
test eax, eax
jne 0x479acb
movzx esi, si
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x479ada
push esi
push eax
lea ecx, [ebp - 0x20]
call fcn.00420bb0
jmp 0x479ada
push 0x554e68
lea ecx, [ebp - 0x18]
call fcn.00420650
jmp 0x479a78
push 4
push 0x551410
lea ecx, [ebp - 0x20]
call fcn.00420c80
mov byte [ebp - 4], 0x1e
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x40], esi
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x1f
call fcn.00421890
add esp, 4
lea ecx, [edi + 0xe4]
push ecx
mov edx, eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.00421890
add esp, 4
mov byte [ebp - 4], 0x21
cmp dword [edi + 0x80], 0
je 0x479b3c
push 0
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [edi + 0x7c]
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479b5c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479b7c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x1e
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479b99
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479bb9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479bd9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebp - 0x28]
lea ecx, [edi + 0xe4]
call fcn.0042bd90
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0x554ec8
mov byte [ebp - 4], 0x22
test eax, 0xffff0000
jne 0x479c24
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x479c31
push esi
push eax
lea ecx, [ebp - 0x30]
call fcn.00420bb0
jmp 0x479c31
push 0x554ec8
lea ecx, [ebp - 0x30]
call fcn.00420650
mov byte [ebp - 4], 0x23
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x554ed8
mov byte [ebp - 4], 0x24
test eax, 0xffff0000
jne 0x479c72
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x479c7f
push esi
push eax
lea ecx, [ebp - 0x18]
call fcn.00420bb0
jmp 0x479c7f
push 0x554ed8
lea ecx, [ebp - 0x18]
call fcn.00420650
mov byte [ebp - 4], 0x25
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x4c], 0
jne 0x479cbf
mov eax, 0x551410
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x479cce
push esi
push eax
lea ecx, [ebp - 0x20]
call fcn.00420bb0
jmp 0x479cce
push 4
push 0x551410
lea ecx, [ebp - 0x20]
call fcn.00420c80
mov byte [ebp - 4], 0x27
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x4c], esi
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x28
call fcn.00421890
add esp, 4
lea ecx, [edi + 0xe4]
push ecx
mov edx, eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x29
call fcn.00421890
add esp, 4
lea ecx, [ebp - 0x30]
push ecx
mov edx, eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2a
call fcn.00421890
add esp, 4
lea ecx, [ebp - 0x28]
push ecx
mov edx, eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2b
call fcn.00421890
add esp, 4
mov byte [ebp - 4], 0x2c
cmp dword [edi + 0x80], 0
je 0x479d5a
push 0
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [edi + 0x7c]
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479d7a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479d9a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479dba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479dda
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x27
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479df7
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479e17
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479e37
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479e57
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [0x57c194], 3
jne 0x47a29e
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0x554e94
mov byte [ebp - 4], 0x2d
test eax, 0xffff0000
jne 0x479ea1
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x479eb0
push esi
push eax
lea ecx, [ebp - 0x30]
call fcn.00420bb0
jmp 0x479eb0
push 0xc
push 0x554e94
lea ecx, [ebp - 0x30]
call fcn.00420c80
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x2e
call fcn.0042b440
add esp, 4
mov byte [ebp - 4], 0x2f
mov edx, dword [eax]
mov esi, dword [edi + 0xe8]
lea eax, [edx - 0x10]
sub esi, 0x10
mov dword [ebp - 0x5c], eax
cmp eax, esi
je 0x479f2f
cmp dword [esi + 0xc], 0
jl 0x479f1c
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x479f1c
mov ecx, dword [ebp - 0x5c]
call fcn.00420750
mov dword [ebp - 0x5c], eax
mov ecx, ebx
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x479f0f
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x5c]
lea esi, [edi + 0xe8]
add eax, 0x10
mov dword [esi], eax
jmp 0x479f35
push dword [edx - 0xc]
lea esi, [edi + 0xe8]
push edx
mov ecx, esi
call fcn.00420c80
jmp 0x479f35
lea esi, [edi + 0xe8]
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479f55
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x479f75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x47a023
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0x554eb0
mov byte [ebp - 4], 0x30
test eax, 0xffff0000
jne 0x479fc4
movzx ecx, ax
call fcn.0041fcd0
test eax, eax
je 0x479fd3
mov edx, 0x554eb0
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00420bb0
jmp 0x479fd3
push 0xb
push 0x554eb0
lea ecx, [ebp - 0x30]
call fcn.00420c80
push esi
lea edx, [ebp - 0x30]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x31
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a00c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47a023
push 0x84
push 0x554f08
mov ecx, esi
call fcn.00420c80
lea edx, [ebp - 0x28]
mov ecx, esi
call fcn.0042bd90
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x554ec8
mov byte [ebp - 4], 0x32
test eax, 0xffff0000
jne 0x47a06a
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x47a077
push esi
push eax
lea ecx, [ebp - 0x18]
call fcn.00420bb0
jmp 0x47a077
push 0x554ec8
lea ecx, [ebp - 0x18]
call fcn.00420650
mov byte [ebp - 4], 0x33
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, 0x555014
mov byte [ebp - 4], 0x34
test eax, 0xffff0000
jne 0x47a0b8
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x47a0c5
push esi
push eax
lea ecx, [ebp - 0x20]
call fcn.00420bb0
jmp 0x47a0c5
push 0x555014
lea ecx, [ebp - 0x20]
call fcn.00420650
mov byte [ebp - 4], 0x35
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov eax, 0x551410
mov byte [ebp - 4], 0x36
test eax, 0xffff0000
jne 0x47a106
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x47a115
push esi
push eax
lea ecx, [ebp - 0x30]
call fcn.00420bb0
jmp 0x47a115
push 4
push 0x551410
lea ecx, [ebp - 0x30]
call fcn.00420c80
mov byte [ebp - 4], 0x37
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x38
call fcn.00421890
add esp, 4
lea ecx, [edi + 0xe8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x39
call fcn.00421890
add esp, 4
lea ecx, [ebp - 0x18]
push ecx
mov edx, eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3a
call fcn.00421890
add esp, 4
lea ecx, [ebp - 0x28]
push ecx
mov edx, eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x3b
call fcn.00421890
add esp, 4
mov byte [ebp - 4], 0x3c
cmp dword [edi + 0x80], 0
je 0x47a1a1
push 0
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [edi + 0x7c]
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a1c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a1e1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a201
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a221
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x37
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a23e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a25e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a27e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a29e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x2f
push dword [edi + 0xe4]
call fcn.004ee5e0
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x47a30d
sub ecx, dword [edi + 0xe4]
sar ecx, 1
cmp ecx, 0xffffffff
je 0x47a30d
mov eax, dword [edi + 0xe4]
push dword [eax - 0xc]
lea eax, [ecx + 1]
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [edi + 0xe4]
call fcn.00424690
lea ecx, [edi + 0xec]
push eax
mov byte [ebp - 4], 0x3d
call fcn.004222b0
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a30d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x554ef0
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x3e
call fcn.0042b440
add esp, 4
lea esi, [edi + 0xb4]
mov byte [ebp - 4], 0x3f
push eax
mov ecx, esi
mov dword [ebp - 0x48], esi
call fcn.004222b0
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a365
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a385
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x47a3e7
push 0x554efc
lea ecx, [ebp - 0x30]
call fcn.004204a0
push esi
lea edx, [ebp - 0x30]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x40
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a3d3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47a3e7
push 0x38
push 0x555160
mov ecx, esi
call fcn.00420c80
push 0x5551d4
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x41
call fcn.0042b440
add esp, 4
push eax
mov ecx, 0x57c288
mov byte [ebp - 4], 0x42
call fcn.004222b0
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a439
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a459
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x57c288]
cmp dword [eax - 0xc], 0
jne 0x47a4c8
push 0x555034
lea ecx, [ebp - 0x30]
call fcn.004204a0
push 0x57c288
lea edx, [ebp - 0x30]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x43
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a4ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47a4c8
push 0x88
push 0x555048
mov ecx, 0x57c288
call fcn.00420c80
push 0x555318
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x44
call fcn.0042b440
add esp, 4
push eax
mov ecx, 0x57c280
mov byte [ebp - 4], 0x45
call fcn.004222b0
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a51a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a53a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x57c280]
cmp dword [eax - 0xc], 0
jne 0x47a5a9
push 0x55532c
lea ecx, [ebp - 0x30]
call fcn.004204a0
push 0x57c288
lea edx, [ebp - 0x30]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x46
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a58f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47a5a9
push 0x88
push 0x5551e8
mov ecx, 0x57c280
call fcn.00420c80
push 0x5552fc
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x47
call fcn.0042b440
add esp, 4
push eax
mov ecx, 0x57c284
mov byte [ebp - 4], 0x48
call fcn.004222b0
mov byte [ebp - 4], 0x47
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a5fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a61b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x57c284]
cmp dword [eax - 0xc], 0
jne 0x47a687
push 0x555354
lea ecx, [ebp - 0x30]
call fcn.004204a0
push 0x57c284
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x49
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a670
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47a687
push 0x2d
push 0x555370
mov ecx, 0x57c284
call fcn.00420c80
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x555340
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4a
call fcn.004204a0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x4b
call fcn.0042b440
add esp, 4
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4c
call fcn.004222b0
mov byte [ebp - 4], 0x4b
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a6ee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a70e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x18]
cmp dword [esi - 0xc], 0
jne 0x47a778
push 0x55534c
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x4d
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a760
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47a775
push 0x20
push 0x555420
lea ecx, [ebp - 0x18]
call fcn.00420c80
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x38]
call fcn.004222b0
mov edx, dword [esi - 0xc]
xor ecx, ecx
test edx, edx
jns 0x47a797
push 0x80070057
call fcn.0041fba0
cmp word [esi], 0x2d
mov eax, 1
cmove ecx, eax
cmp ecx, edx
jg 0x479655
cmp word [esi + ecx*2], 0x30
jb 0x47a7c1
cmp ecx, edx
jg 0x479655
cmp word [esi + ecx*2], 0x39
jbe 0x47a7d3
push 2
push 0x5560c8
lea ecx, [ebp - 0x18]
call fcn.00420c80
mov esi, dword [ebp - 0x18]
push esi
call fcn.004ee686
add esp, 4
lea ecx, [ebp - 0x30]
push 0x555464
mov dword [edi + 0x90], eax
call fcn.004204a0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x4e
call fcn.0042b440
add esp, 4
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4f
call fcn.004222b0
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a832
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a852
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x18]
cmp dword [esi - 0xc], 0
jne 0x47a8bc
push 0x5553cc
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x50
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a8a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47a8b9
push 0x21
push 0x5553d8
lea ecx, [ebp - 0x18]
call fcn.00420c80
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x34]
call fcn.004222b0
mov edx, dword [esi - 0xc]
xor ecx, ecx
test edx, edx
jns 0x47a8db
push 0x80070057
call fcn.0041fba0
cmp word [esi], 0x2d
mov eax, 1
cmove ecx, eax
cmp ecx, edx
jg 0x479655
cmp word [esi + ecx*2], 0x30
jb 0x47a905
cmp ecx, edx
jg 0x479655
cmp word [esi + ecx*2], 0x39
jbe 0x47a917
push 2
push 0x5560c8
lea ecx, [ebp - 0x18]
call fcn.00420c80
mov esi, dword [ebp - 0x18]
push esi
call fcn.004ee686
lea ecx, [edi + 0x8c]
add esp, 4
mov dword [ebp - 0x60], ecx
mov dword [ecx], eax
cmp eax, 0xffffffff
je 0x47a939
cmp dword [edi + 0x90], 0xffffffff
jne 0x47a940
mov byte [edi + 0xa4], 1
push 0x5554c8
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x51
call fcn.0042b440
add esp, 4
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x52
call fcn.004222b0
mov byte [ebp - 4], 0x51
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a990
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47a9b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x18]
cmp dword [esi - 0xc], 0
jne 0x47aa1a
push 0x5554d8
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x53
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47aa02
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47aa17
push 0x23
push 0x555470
lea ecx, [ebp - 0x18]
call fcn.00420c80
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004222b0
mov edx, dword [esi - 0xc]
xor ecx, ecx
test edx, edx
jns 0x47aa39
push 0x80070057
call fcn.0041fba0
cmp word [esi], 0x2d
mov eax, 1
cmove ecx, eax
cmp ecx, edx
jg 0x479655
cmp word [esi + ecx*2], 0x30
jb 0x47aa63
cmp ecx, edx
jg 0x479655
cmp word [esi + ecx*2], 0x39
jbe 0x47aa75
push 2
push 0x5560c8
lea ecx, [ebp - 0x18]
call fcn.00420c80
mov esi, dword [ebp - 0x18]
push esi
call fcn.004ee686
mov ecx, eax
add esp, 4
cmp ecx, 0xffffffff
mov eax, 0x1f4
cmove ecx, eax
cmp byte [edi + 0xa4], 0
mov dword [ebp - 0x40], ecx
jne 0x47aaa5
mov eax, dword [edi + 0x90]
add eax, ecx
mov dword [edi + 0x98], eax
push 0x5554b8
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x54
call fcn.0042b440
add esp, 4
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x55
call fcn.004222b0
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47aaf5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ab15
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
jne 0x47ab7c
push 0x555504
lea ecx, [ebp - 0x30]
call fcn.004204a0
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x56
call fcn.0042b2c0
add esp, 4
test al, al
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x30]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ab67
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47ab7c
push 0x22
push 0x555510
lea ecx, [ebp - 0x18]
call fcn.00420c80
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004222b0
lea eax, [ebp - 0x18]
push eax
call fcn.00480590
mov edi, dword [ebp - 0x18]
push edi
call fcn.004ee686
mov esi, dword [ebp - 0x1c]
mov ecx, eax
add esp, 4
mov eax, 0x258
cmp ecx, 0xffffffff
cmove ecx, eax
cmp byte [esi + 0xa4], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x4c], ecx
mov dword [esi + 0x114], eax
mov dword [esi + 0x110], ecx
jne 0x47abd6
mov eax, dword [esi + 0x8c]
add eax, ecx
mov dword [esi + 0x94], eax
mov eax, dword [esi + 0xb8]
lea ebx, [esi + 0xb8]
cmp dword [eax - 0xc], 0
jl 0x47ac03
push 0x5554e8
push eax
call fcn.004ebb6d
add esp, 8
test eax, eax
je 0x47ac03
sub eax, dword [ebx]
sar eax, 1
cmp eax, 0xffffffff
jne 0x47ac66
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jl 0x47ac23
push 0x5554f8
push eax
call fcn.004ebb6d
add esp, 8
test eax, eax
je 0x47ac23
sub eax, dword [ebx]
sar eax, 1
je 0x47ac66
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jl 0x47ac46
push 0x5556b4
push eax
call fcn.004ebb6d
add esp, 8
test eax, eax
je 0x47ac46
sub eax, dword [ebx]
sar eax, 1
cmp eax, 0xffffffff
jne 0x47ac66
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jl 0x47ac6d
push 0x5556c4
push eax
call fcn.004ebb6d
add esp, 8
test eax, eax
je 0x47ac6d
sub eax, dword [ebx]
sar eax, 1
jne 0x47ac6d
mov byte [esi + 0xd8], 1
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x57
push dword [esi + 0xa8]
mov ebx, dword [ebp - 0x3c]
push ebx
push dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [esi + 0xb4]
push dword [esi + 0xb0]
push 0x555558
push eax
call fcn.00421610
add esp, 0x24
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x58
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x59
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x5a
cmp dword [eax + 0x80], 0
je 0x47ad10
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x59
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ad31
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x58
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ad51
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ad71
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x555628
lea eax, [ebp - 0x20]
push 0x555780
push eax
call fcn.00421610
add esp, 0xc
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x5b
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x5c
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x5d
cmp dword [eax + 0x80], 0
je 0x47ade3
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ae04
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x5b
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ae24
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ae44
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5557c0
lea eax, [ebp - 0x20]
push 0x5556d0
push eax
call fcn.00421610
add esp, 0xc
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x5e
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x5f
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x60
cmp dword [eax + 0x80], 0
je 0x47aeb6
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x5f
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47aed7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x5e
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47aef7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47af17
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5556f8
lea eax, [ebp - 0x20]
push 0x555878
push eax
call fcn.00421610
add esp, 0xc
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x61
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x62
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x63
cmp dword [eax + 0x80], 0
je 0x47af89
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x62
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47afaa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x61
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47afca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47afea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x555370
lea eax, [ebp - 0x20]
push 0x555898
push eax
call fcn.00421610
add esp, 0xc
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x64
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x65
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x66
cmp dword [eax + 0x80], 0
je 0x47b05c
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x65
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b07d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x64
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b09d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b0bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x555048
lea eax, [ebp - 0x20]
push 0x555844
push eax
call fcn.00421610
add esp, 0xc
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x67
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x68
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x69
cmp dword [eax + 0x80], 0
je 0x47b12f
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b150
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x67
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b170
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b190
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x5551e8
lea eax, [ebp - 0x20]
push 0x555860
push eax
call fcn.00421610
add esp, 0xc
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x6a
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x6b
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x6c
cmp dword [eax + 0x80], 0
je 0x47b202
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x6b
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b223
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x6a
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b243
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b263
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x554f08
lea eax, [ebp - 0x20]
push 0x555904
push eax
call fcn.00421610
add esp, 0xc
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x6d
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x6e
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x6f
cmp dword [eax + 0x80], 0
je 0x47b2d5
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x6e
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b2f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x6d
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b316
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b336
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x552218
lea eax, [ebp - 0x20]
push 0x555924
push eax
call fcn.00421610
add esp, 0xc
lea ecx, [ebp - 0x30]
push 0x551410
call fcn.004204a0
mov byte [ebp - 4], 0x70
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x5c], esi
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x71
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x72
cmp dword [eax + 0x80], 0
je 0x47b3a8
push 1
push ecx
lea ecx, [ebp - 0x30]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x71
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b3c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x70
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b3e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b409
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xa4], 0
je 0x47b422
push dword [ebp - 0x40]
mov ecx, eax
push dword [ebp - 0x4c]
call fcn.00480490
push 0x54c764
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x5c], 0
mov byte [ebp - 0x58], 0
call fcn.004204a0
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x12]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x73
mov ecx, dword [ecx + 0xc8]
push eax
push dword [ebp - 0x48]
push dword [ebp - 0x60]
call fcn.0044f7c0
test al, al
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x40]
sete byte [ebp - 0x12]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b484
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x12], 0
je 0x47b585
push 0x5558b8
lea ecx, [ebp - 0x30]
call fcn.00420550
push 0x551410
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x74
call fcn.004204a0
mov byte [ebp - 4], 0x75
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x60], esi
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x76
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x77
cmp dword [eax + 0x80], 0
je 0x47b4fb
push 2
push ecx
lea ecx, [ebp - 0x40]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x76
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b51c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x75
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b53c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x74
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b55c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b6f5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x47b6f5
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xc8]
cmp byte [ecx + 0x45], 0
jne 0x47b598
xor ecx, ecx
jmp 0x47b5a2
call fcn.00450080
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x88], ecx
test ecx, ecx
jne 0x47b6d9
push 0x5558dc
lea ecx, [ebp - 0x30]
call fcn.00420550
push 0x551410
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x78
call fcn.004204a0
mov byte [ebp - 4], 0x79
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x60], esi
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x7a
call fcn.00421890
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x7b
cmp dword [eax + 0x80], 0
je 0x47b61d
push 2
push ecx
lea ecx, [ebp - 0x40]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x7a
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b63e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x79
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b65e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x78
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b67e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b69e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x54d3b4
lea ecx, [ebp - 0x40]
call fcn.004204a0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x7c
call fcn.00422ac0
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b6f5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x47b6f5
push 0
add eax, 0xf0
push eax
push 0
push 0x30
call dword [0x51b470]
mov eax, dword [ebp - 0x1c]
mov byte [eax + 0xa5], 1
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b715
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0x1a
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b732
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b752
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b772
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x2c]
push 0x555998
lea ecx, [ebp - 0x30]
call fcn.00420550
push 0x551410
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x7d
call fcn.004204a0
mov byte [ebp - 4], 0x7e
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x60], esi
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x7f
call fcn.00421890
add esp, 4
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x80
movzx ecx, byte [ecx + 0xa5]
push ecx
mov edx, eax
lea ecx, [ebp - 0x5c]
call fcn.00421800
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x81
cmp dword [eax + 0x80], 0
je 0x47b7fe
push 0
push ecx
lea ecx, [ebp - 0x40]
push ecx
add eax, 0x7c
push eax
call fcn.004219a0
mov byte [ebp - 4], 0x80
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b81f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7f
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b840
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x7e
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b860
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x7d
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b880
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x30]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b8a0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x1c]
add ebx, 0xfffffff0
mov al, byte [eax + 0xa5]
mov byte [ebp - 0x12], al
mov byte [ebp - 4], 9
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b8c9
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 8
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b8e6
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x34]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b906
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47b926
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edi, dword [ebp + 8]
add edi, 0xfffffff0
lea eax, [edi + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x47b947
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov al, byte [ebp - 0x12]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4