Function at 0x465520
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x45a3d0
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x46f1b0]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x46f1b0]
xor eax, esp
push eax
lea eax, [esp + 0x1cc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1dc]
push 4
mov esi, ecx
push 0x45f9b4
push 0xbda
mov dword [esp + 0x4c], esi
mov dword [esp + 0x74], eax
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x9c]
call fcn.0044f430
mov dword [esp + 0x1d4], 0
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0x1d4], 1
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x6c], eax
push 0x11
push 0x45ebe4
mov byte [esp + 0x1dc], 2
inc dword [esi + 0x84]
push 0x3564
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x90]
call fcn.0044f430
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x58]
push edx
mov byte [esp + 0x1dc], 3
call fcn.00475d35
add esp, 8
mov byte [esp + 0x1d4], 5
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465645
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x54]
cmp dword [ecx - 0xc], 0
je 0x467436
lea edx, [esp + 0x34]
xor ebp, ebp
push edx
mov dword [esp + 0x2c], ebp
call fcn.0047678d
lea eax, [esp + 0x2c]
add esp, 4
push eax
lea eax, [esp + 0x38]
call fcn.00480204
add esp, 4
test al, al
jne 0x46567f
xor esi, esi
jmp 0x465683
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4656a3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, ebp
je 0x465703
lea ecx, [esp + 0x30]
push ecx
mov dword [esp + 0x2c], ebp
call fcn.0047678d
lea edx, [esp + 0x2c]
add esp, 4
push edx
lea eax, [esp + 0x34]
call fcn.00480204
add esp, 4
test al, al
jne 0x4656d1
xor esi, esi
jmp 0x4656d5
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4656f5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test esi, 0x100
je 0x467436
xor ebp, ebp
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x3c], eax
mov byte [esp + 0x1d4], 6
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0x1d4], 7
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x1d4], 8
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0xcc], eax
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0x1d8], 9
call fcn.00475eba
add esp, 4
push eax
lea edx, [esp + 0x2c]
push edx
mov byte [esp + 0x1dc], 0xa
call fcn.00474221
mov esi, eax
lea eax, [esp + 0x58]
push eax
mov byte [esp + 0x1e0], 0xb
call fcn.00475f5a
add esp, 0xc
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x1dc], 0xc
call fcn.00474221
mov edi, eax
lea edx, [esp + 0x2c]
push edx
mov byte [esp + 0x1e0], 0xd
call fcn.00476f52
add esp, 0xc
push eax
lea eax, [esp + 0x1c]
mov bl, 0xe
push eax
mov byte [esp + 0x1dc], bl
call fcn.00474221
add esp, 8
mov byte [esp + 0x1d4], 0xf
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
push edx
mov edx, dword [esi]
push ecx
mov ecx, dword [edi]
push edx
push ecx
mov edx, dword [eax]
mov eax, dword [esp + 0xa8]
push edx
push eax
push 0x94
push 0x45f9c0
push 0x140a
call fcn.0047ecf9
add esp, 0xc
push eax
lea edi, [esp + 0x60]
call fcn.004522f0
mov byte [esp + 0x1f0], bl
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
add esp, 0x1c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465870
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0xd
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465898
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0xc
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4658c0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0xb
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4658e8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0xa
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465910
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 9
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465938
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x40]
call fcn.0044f980
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0x1d4], 0x10
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x1d4], 0x11
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
lea ecx, [esp + 0x7c]
push ecx
mov byte [esp + 0x1d8], 0x12
call fcn.00476f99
add esp, 4
push 2
push 0x45eda8
push 0x568
mov byte [esp + 0x1e0], 0x13
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x3c]
call fcn.0044f430
push 7
push 0x45ea68
push 0x162d
mov byte [esp + 0x1e0], 0x14
call fcn.0047ecf9
lea edx, [esp + 0xbc]
add esp, 0xc
push edx
lea ecx, [esp + 0x3c]
mov edx, eax
call fcn.0045b180
add esp, 4
mov esi, eax
push 0xa
push 0x45ea70
push 0x2937
mov byte [esp + 0x1e0], 0x15
call fcn.0047ecf9
add esp, 0xc
push eax
lea eax, [esp + 0xe8]
push eax
mov ecx, esi
call fcn.00456c60
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0xb4]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x16
call fcn.00456ba0
mov esi, eax
push 6
mov byte [esp + 0x1e8], 0x17
push 0x45fa64
push 0x1579
call fcn.0047ecf9
add esp, 0x1c
push eax
lea eax, [esp + 0xcc]
push eax
mov ecx, esi
call fcn.00456c60
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0xe8]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x18
call fcn.00456ba0
mov esi, eax
push 0xa
push 0x45ea7c
push 0x34d6
mov byte [esp + 0x1f0], 0x19
call fcn.0047ecf9
add esp, 0x1c
push eax
lea eax, [esp + 0xd8]
push eax
mov ecx, esi
call fcn.00456c60
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0xd0]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x1a
call fcn.00456ba0
mov esi, eax
push 4
push 0x45eaa0
push 0x1a34
mov byte [esp + 0x1f0], 0x1b
call fcn.0047ecf9
add esp, 0x1c
push eax
lea eax, [esp + 0xc0]
push eax
mov ecx, esi
call fcn.00456c60
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0xa8]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x1c
call fcn.00456ba0
mov esi, eax
push 5
push 0x45fa5c
push 0x23aa
mov byte [esp + 0x1f0], 0x1d
call fcn.0047ecf9
add esp, 0x1c
push eax
lea eax, [esp + 0xbc]
push eax
mov ecx, esi
call fcn.00456c60
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0xc0]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x1e
call fcn.00456ba0
mov esi, eax
push 3
push 0x45fa58
push 0x34a3
mov byte [esp + 0x1f0], 0x1f
call fcn.0047ecf9
add esp, 0x1c
push eax
lea eax, [esp + 0x94]
push eax
mov ecx, esi
call fcn.00456c60
add esp, 8
mov byte [esp + 0x1d4], 0x21
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465bd6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x22
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465c01
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x23
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465c2c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x24
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465c57
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x25
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465c82
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x26
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465cad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x27
mov eax, dword [esp + 0xdc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465cd8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x28
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465d03
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x29
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465d2e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x2a
mov eax, dword [esp + 0xe4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465d59
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x2b
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465d84
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0x1d4], 0x2c
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x5c], eax
mov byte [esp + 0x1d4], 0x2d
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
push 2
push 0x45edac
mov bl, 0x2e
push 0xe25
mov byte [esp + 0x1e0], bl
call fcn.0047ecf9
add esp, 0xc
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x5c]
mov esi, eax
call fcn.0044f980
mov edx, dword [esp + 0x58]
cmp dword [edx - 0xc], ebp
jne 0x465e34
cmp esi, ebp
jne 0x465e17
xor eax, eax
jmp 0x465e29
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x465e20
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x60]
call fcn.0044f760
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x98]
call fcn.00456ba0
add esp, 8
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x1d8], 0x2f
call fcn.0044f980
mov byte [esp + 0x1d4], bl
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x465e8c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x60], ebp
mov byte [esp + 0x1d4], 0x30
cmp dword [esp + 0x84], 0
setge al
test al, al
je 0x465ff9
jmp 0x465eb0
mov edx, dword [esp + 0x7c]
lea ecx, [esp + 0x84]
push ecx
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x8c]
push ecx
call fcn.004569c0
mov byte [esp + 0x1d4], 0x31
mov eax, dword [eax]
mov ebx, dword [esp + 0x88]
lea esi, [eax - 0x10]
add ebx, 0xfffffff0
cmp esi, ebx
je 0x465f86
cmp dword [ebx + 0xc], 0
lea ebp, [ebx + 0xc]
jl 0x465f75
mov ecx, dword [esi]
cmp ecx, dword [ebx]
jne 0x465f75
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x465f1e
cmp eax, dword [esi]
jne 0x465f1e
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x465f52
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x466718
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
inc eax
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call 0x48be54
add esp, 0x10
or edx, 0xffffffff
lock xadd dword [ebp], edx
dec edx
test edx, edx
jg 0x465f69
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
add edi, 0x10
mov dword [esp + 0x88], edi
jmp 0x465f86
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x90]
call fcn.0044f760
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465fae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x4621d4
lea eax, [esp + 0x8c]
call fcn.0046c130
mov ebx, eax
mov eax, 0x4621d4
call fcn.00474d10
mov ecx, dword [esp + 0x84]
test ecx, ecx
setg al
test al, al
je 0x465fec
mov edx, dword [esp + 0x88]
cmp dword [edx - 0xc], 0
jg 0x466456
test ecx, ecx
setge al
test al, al
jne 0x465eb0
push 0xa
push 0x45ea7c
push 0x34d6
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
call fcn.0044f430
push 0xa
push 0x45ea70
push 0x2937
mov byte [esp + 0x1e0], 0x39
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
call fcn.0044f430
push 7
push 0x45ea68
push 0x162d
mov byte [esp + 0x1e0], 0x3a
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x30]
call fcn.0044f430
push 4
push 0x45eaa0
push 0x1a34
mov byte [esp + 0x1e0], 0x3b
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
call fcn.0044f430
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x1d8], 0x3c
call fcn.004766c4
add esp, 4
push eax
lea eax, [esp + 0x50]
push eax
mov byte [esp + 0x1dc], 0x3d
call fcn.00474221
mov esi, eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0x1e4], 0x3e
call fcn.00475d35
push eax
lea eax, [esp + 0xc0]
push eax
mov byte [esp + 0x1ec], 0x3f
call fcn.00474221
mov edi, eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0xc0]
push edx
mov byte [esp + 0x1f4], 0x40
call fcn.00475d35
push eax
lea eax, [esp + 0xc4]
push eax
mov byte [esp + 0x1fc], 0x41
call fcn.00474221
mov ebx, eax
mov byte [esp + 0x1fc], 0x42
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x104]
push edx
call fcn.00475d35
push eax
lea eax, [esp + 0xf4]
push eax
mov byte [esp + 0x20c], 0x43
call fcn.00474221
mov ebp, eax
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0x11c]
push edx
mov byte [esp + 0x214], 0x44
call fcn.00475d35
add esp, 0x40
push eax
lea eax, [esp + 0x7c]
push eax
mov byte [esp + 0x1dc], 0x45
call fcn.00474221
add esp, 8
mov byte [esp + 0x1d4], 0x46
mov ecx, dword [esp + 0x28]
mov edx, dword [esi]
push ecx
mov ecx, dword [edi]
push edx
mov edx, dword [ebx]
push ecx
mov ecx, dword [ebp]
push edx
mov edx, dword [eax]
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [eax + 0x20]
push edx
push ecx
push 0xc2
push 0x45fa80
push 0x1af8
call fcn.0047ecf9
add esp, 0xc
push eax
lea edi, [esp + 0x64]
call fcn.004522f0
mov byte [esp + 0x1f4], 0x45
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
add esp, 0x20
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4661f0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x44
mov eax, dword [esp + 0xe0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46621b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x43
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466246
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x42
mov eax, dword [esp + 0xd8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466271
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x41
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46629c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x40
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4662c7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3f
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4662f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3e
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46631a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3d
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466342
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3c
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46636a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3b
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466392
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3a
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4663ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x39
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4663e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46640a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x44]
call fcn.0044f640
mov ebp, dword [esp + 0x40]
lea esi, [ebp + 0x7c]
mov ecx, esi
call fcn.0044f700
push 0x86
push 0x45fb48
push 0x2e37
call fcn.0047ecf9
add esp, 0xc
lea edi, [ebp + 0x80]
test eax, eax
jne 0x46671d
xor edx, edx
jmp 0x46672b
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x80]
call fcn.004809a4
mov byte [esp + 0x1d4], 0x32
mov ecx, dword [eax]
mov esi, dword [esp + 0x48]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
je 0x4664c6
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x4664b8
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x4664b8
push eax
call fcn.0044fc10
mov ebx, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x4664af
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebx, 0x10
mov dword [esp + 0x48], ebx
jmp 0x4664c6
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x50]
call fcn.0044f760
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4664ee
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1f], 0
mov dword [esp + 0x60], 0
mov edx, dword [esp + 0x58]
lea ecx, [esp + 0x60]
push ecx
push edx
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x68]
push ecx
call fcn.004569c0
mov byte [esp + 0x1d4], 0x33
mov eax, dword [eax]
mov ebx, dword [esp + 0x64]
lea esi, [eax - 0x10]
add ebx, 0xfffffff0
cmp esi, ebx
je 0x4665c2
cmp dword [ebx + 0xc], 0
lea ebp, [ebx + 0xc]
jl 0x4665b4
mov ecx, dword [esi]
cmp ecx, dword [ebx]
jne 0x4665b4
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x466560
cmp eax, dword [esi]
jne 0x466560
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x466594
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x466718
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
inc eax
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call 0x48be54
add esp, 0x10
or edx, 0xffffffff
lock xadd dword [ebp], edx
dec edx
test edx, edx
jg 0x4665ab
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
add edi, 0x10
mov dword [esp + 0x64], edi
jmp 0x4665c2
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x6c]
call fcn.0044f760
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4665ea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x4621d4
lea eax, [esp + 0x68]
call fcn.0046c130
mov ebx, eax
mov eax, 0x4621d4
call fcn.00474d10
cmp dword [esp + 0x60], 0
setg al
test al, al
je 0x466633
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x48]
push ecx
push edx
call 0x48b82d
add esp, 8
test eax, eax
sete al
mov byte [esp + 0x1f], al
test al, al
je 0x4664fb
cmp byte [esp + 0x1f], 0
mov dword [esp + 0x60], 0
jne 0x465e98
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x54]
push ecx
call fcn.00475d35
add esp, 8
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d8], 0x37
call fcn.0044f980
mov bl, 0x30
mov byte [esp + 0x1d4], bl
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x466693
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x7c]
push edx
call fcn.00474221
add esp, 8
mov byte [esp + 0x1d4], 0x38
mov ecx, dword [esp + 0x48]
mov eax, dword [eax]
push ecx
push eax
push ecx
push 0xe
push 0x45fa6c
push 0xb1d
call fcn.0047ecf9
add esp, 0xc
push eax
lea edi, [esp + 0x54]
call fcn.004522f0
mov byte [esp + 0x1e4], bl
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466701
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.0044f640
jmp 0x465e98
call fcn.0044fdc0
mov edx, eax
lea ebx, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x466722
sub edx, ebx
push edx
push eax
mov ecx, edi
call fcn.0044f760
push 0
push 1
lea ecx, [ebp + 0x48]
push ecx
push ebp
mov ebx, 0x4186f0
call fcn.00467580
push 0x11
push 0x45fbe4
push 0x445
call fcn.0047ecf9
lea edx, [esp + 0x58]
add esp, 0xc
push edx
mov ecx, esi
mov edx, eax
call fcn.0045b180
add esp, 4
mov esi, eax
push 0x12
push 0x45fbd0
mov bl, 0x47
push 0xc1d
mov byte [esp + 0x1e0], bl
call fcn.0047ecf9
add esp, 0xc
push eax
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00456c60
add esp, 8
mov byte [esp + 0x1d4], 0x48
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x44]
call fcn.0044f640
mov byte [esp + 0x1d4], bl
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4667da
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466802
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x1f
push 0x45fbf8
push 0x2f09
call fcn.0047ecf9
add esp, 0xc
test eax, eax
jne 0x46681e
xor ecx, ecx
jmp 0x46682c
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x466823
sub ecx, esi
push ecx
push eax
lea ecx, [esp + 0x44]
call fcn.0044f640
lea ecx, [esp + 0x20]
push ecx
call fcn.0047678d
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
add esp, 4
cmp dword [edx - 0xc], 0
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46686d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x466a0e
push 0x45e59a
lea ecx, [esp + 0x1c]
call fcn.0044f430
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xec]
push edx
mov byte [esp + 0x1dc], 0x49
call fcn.00473cb1
mov byte [esp + 0x1d4], 0x4b
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4668c5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0xec]
push edx
call fcn.0047466c
test al, al
jne 0x4668e7
lea esi, [esp + 0xe8]
call fcn.00473d6e
push 0
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0xf0]
call fcn.00473ff9
push 0x1d
push 0x45fc18
push 0x1914
mov byte [esp + 0x1e0], 0x4c
call fcn.0047ecf9
lea ecx, [esp + 0x58]
add esp, 0xc
push ecx
lea ecx, [esp + 0x30]
mov edx, eax
call fcn.0045b180
add esp, 4
mov esi, eax
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x1d8], 0x4d
call fcn.0047678d
mov eax, dword [eax]
add esp, 4
cmp dword [eax - 0xc], 0
mov eax, dword [esp + 0x20]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466969
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x4669aa
lea ecx, [esp + 0x24]
push 0x45ef3c
push ecx
mov ecx, esi
call fcn.00456c60
add esp, 8
lea eax, [esp + 0x24]
call 0x483452
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4669aa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x4c
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4669d2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x4b
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4669fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0xe8]
mov byte [esp + 0x1d4], 0x30
call fcn.00473d2c
push 0x41
push 0x45f938
push 0x3797
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
call fcn.0044f430
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x40]
push edx
mov byte [esp + 0x1dc], 0x4e
call 0x48ac92
mov byte [esp + 0x1dc], 0x30
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466a6e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 8
push 0x45fc38
push 0xf9e
call fcn.0047ecf9
lea ecx, [esp + 0xa0]
add esp, 0xc
push ecx
lea ecx, [esp + 0x40]
mov edx, eax
call fcn.0045b180
add esp, 4
lea edx, [esp + 0x94]
push edx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x11c]
push ecx
mov byte [esp + 0x1e0], 0x4f
call 0x487090
mov byte [esp + 0x1d4], 0x50
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0x1d4], 0x51
lea eax, [esp + 0x18]
mov ebx, 5
lea ecx, [esp + 0x114]
mov dword [esp + 0x18], 0
call 0x4877d0
mov byte [esp + 0x1f], al
test al, al
je 0x467506
mov eax, dword [esp + 0x18]
test eax, eax
jbe 0x466bae
push eax
push 0x2d
push 0x45fc44
push 0x3667
call fcn.0047ecf9
add esp, 0xc
push eax
lea edi, [esp + 0x48]
call fcn.004522f0
lea ecx, [esp + 0x28]
push ecx
call fcn.0047678d
mov edx, dword [eax]
mov eax, dword [esp + 0x2c]
add esp, 0xc
cmp dword [edx - 0xc], 0
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466b6b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x466bae
lea ecx, [esp + 0x18]
push 0x45ef3c
push ecx
lea ecx, [esp + 0x48]
call fcn.00456c60
add esp, 8
lea eax, [esp + 0x18]
call 0x483452
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x466bae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x70], eax
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x118]
mov byte [esp + 0x1d8], 0x52
call 0x487852
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x1d8], 0x53
call fcn.0044f980
mov byte [esp + 0x1d4], 0x52
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x466c18
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x30]
cmp dword [ecx - 0xc], 0
jne 0x466d6f
inc dword [ebp + 0x90]
push 0x2d
push 0x45fc74
push 0x29f5
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
call fcn.0044f430
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x1d8], 0x54
call fcn.0047678d
mov eax, dword [eax]
add esp, 4
cmp dword [eax - 0xc], 0
mov eax, dword [esp + 0x20]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466c88
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x466ccb
lea ecx, [esp + 0x18]
push 0x45ef3c
push ecx
lea ecx, [esp + 0x2c]
call fcn.00456c60
add esp, 8
lea eax, [esp + 0x18]
call 0x483452
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x466ccb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x52
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466cf3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0xf
push 0x45fca4
push 0x1a3
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
call fcn.0044f430
mov edi, dword [esp + 0x68]
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x1d8], 0x55
mov eax, dword [ebp + 0x88]
mov ecx, dword [ebp + 0x84]
lea edx, [esp + 0x58]
push edx
push eax
push ecx
call fcn.00478b2e
mov byte [esp + 0x1e4], 0x52
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x466d65
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1f], 0
jmp 0x467138
push 0x41
push 0x45f938
push 0x3797
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
call fcn.0044f430
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x34]
push edx
mov byte [esp + 0x1dc], 0x56
call 0x48ad5b
mov byte [esp + 0x1dc], 0x52
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466dcf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x1c
push 0x45fcb4
push 0xe65
call fcn.0047ecf9
lea ecx, [esp + 0x58]
add esp, 0xc
push ecx
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.0045b180
add esp, 4
mov esi, eax
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x1d8], 0x57
call fcn.0047678d
mov eax, dword [eax]
add esp, 4
cmp dword [eax - 0xc], 0
mov eax, dword [esp + 0x20]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466e36
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x466e77
lea ecx, [esp + 0x18]
push 0x45ef3c
push ecx
mov ecx, esi
call fcn.00456c60
add esp, 8
lea eax, [esp + 0x18]
call 0x483452
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x466e77
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x52
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466e9f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x45e59a
lea ecx, [esp + 0x1c]
call fcn.0044f430
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xec]
push edx
mov byte [esp + 0x1dc], 0x58
call fcn.00473cb1
mov bl, 0x5a
mov byte [esp + 0x1d4], bl
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466ef0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0xec]
push edx
call fcn.0047466c
test al, al
jne 0x466f12
lea esi, [esp + 0xe8]
call fcn.00473d6e
mov eax, dword [esp + 0x10c]
cmp dword [eax - 0xc], 0
jg 0x466fa4
inc dword [ebp + 0x90]
push 0xf
push 0x45fcd4
push 0x1f3f
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
call fcn.0044f430
mov edi, dword [esp + 0x68]
lea ecx, [esp + 0x24]
push ecx
mov byte [esp + 0x1d8], 0x5b
mov eax, dword [ebp + 0x88]
mov ecx, dword [ebp + 0x84]
lea edx, [esp + 0x58]
push edx
push eax
push ecx
call fcn.00478b2e
mov byte [esp + 0x1e4], bl
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x466f9a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1f], 0
jmp 0x467117
push 7
push 0x45fce4
push 0x21d7
call fcn.0047ecf9
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0044f430
lea ecx, [esp + 0xec]
call fcn.00473e86
test eax, eax
je 0x46700a
mov ecx, dword [eax + 0x24]
cmp dword [ecx - 0xc], 0
jle 0x46700a
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00474b94
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x1d8], 0x5c
call fcn.0044f500
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d4], bl
call fcn.0044f4e0
push 0xb
push 0x45fcec
push 0x9ee
call fcn.0047ecf9
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0044f430
lea ecx, [esp + 0xec]
call fcn.00473e86
test eax, eax
je 0x467070
mov ecx, dword [eax + 0x24]
cmp dword [ecx - 0xc], 0
jle 0x467070
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00474b94
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x1d8], 0x5d
call fcn.0044f500
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d4], bl
call fcn.0044f4e0
push 0x13
push 0x45ebd0
push 0x37e5
call fcn.0047ecf9
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.0044f430
lea ecx, [esp + 0xec]
call fcn.00473e86
test eax, eax
je 0x467117
mov ecx, dword [eax + 0x24]
cmp dword [ecx - 0xc], 0
jle 0x467117
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00474b94
lea esi, [ebp + 0x94]
push eax
mov ecx, esi
mov byte [esp + 0x1d8], 0x5e
call fcn.0044f500
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d4], bl
call fcn.0044f4e0
push 0x13
push 0x45ebd0
push 0x37e5
call fcn.0047ecf9
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
call fcn.0044f430
lea eax, [esp + 0x24]
push esi
push eax
mov byte [esp + 0x1dc], 0x5f
call fcn.0047576c
add esp, 8
lea ecx, [esp + 0x24]
call fcn.0044f4e0
lea ecx, [esp + 0xe8]
mov byte [esp + 0x1d4], 0x52
call fcn.00473d2c
cmp byte [esp + 0x1f], 0
je 0x467138
inc dword [ebp + 0x8c]
mov byte [esp + 0x1d4], 0x51
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467160
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [esp + 0x1f], 0
je 0x46718b
mov eax, dword [ebp + 0x88]
mov edi, dword [esp + 0x68]
lea ecx, [esp + 0x6c]
push ecx
mov ecx, dword [ebp + 0x84]
lea edx, [esp + 0x78]
push edx
push eax
push ecx
call fcn.004789e8
add esp, 0x10
mov byte [esp + 0x1d4], 0x50
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4671b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x114]
mov byte [esp + 0x1d4], 0x4f
call 0x487140
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4671f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x2b
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46721a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46723a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46725a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x14
mov eax, dword [esp + 0x90]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467285
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x13
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4672ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x12
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4672d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4672fb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x7c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46731b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x11
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467343
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x10
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46736b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 9
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467393
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 8
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4673be
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 7
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4673e6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 6
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46740e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 5
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467436
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 2
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46745e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 1
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467486
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4674ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x1d4], 0xffffffff
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4674dc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1cc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call 0x48b430
add esp, 0x1c4
ret 4
inc dword [ebp + 0x90]
lea esi, [esp + 0x20]
lea eax, [esp + 0x114]
call fcn.004628e0
mov edi, dword [esp + 0x68]
push eax
mov byte [esp + 0x1d8], 0x60
mov edx, dword [ebp + 0x88]
mov eax, dword [ebp + 0x84]
lea ecx, [esp + 0x58]
push ecx
push edx
push eax
call fcn.00478b2e
mov byte [esp + 0x1e4], 0x51
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46718b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x46718b