Function at 0x470290
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5c1487
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x18], esi
mov dword [esi], 0x5e1dd8
mov dword [esi + 0xbc], 0x5e1dcc
mov dword [esi + 0xc0], 0x5e1dc0
mov dword [esi + 0xc8], 0x5e1db8
mov eax, dword [esi + 0x118]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x28], 0x128
je 0x470317
mov eax, dword [esi + 0x114]
mov eax, dword [eax]
push eax
call fcn.0058ed21
add esp, 4
lea ecx, [esi + 0x110]
push 1
push ebx
call fcn.0058d4d8
cmp dword [esi + 0x118], ebx
jne 0x4702f0
call fcn.00504ab0
lea ecx, [esi + 0xa03c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov edx, dword [esi + 0xa078]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edx
call edi
mov eax, dword [esi + 0xa07c]
push eax
call edi
mov ecx, esi
call fcn.0045f310
mov ecx, dword [0x66440c]
mov dword [esi + 0xa35c], ecx
mov ecx, dword [esi + 0x8368]
cmp ecx, ebx
je 0x470365
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov edi, dword [esi + 0x154]
cmp edi, ebx
je 0x47037f
mov ecx, edi
call fcn.00516f90
push edi
call fcn.0058ed21
add esp, 4
mov ecx, dword [esi + 0xa644]
push str.Events.dat
call fcn.00514fe0
mov ecx, dword [esi + 0xa644]
cmp ecx, ebx
je 0x4703a0
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov eax, dword [esi + 0x9414]
cmp eax, ebx
je 0x4703c7
mov ecx, dword [eax - 4]
lea edi, [eax - 4]
push fcn.00410bc0
push ecx
push 0xc
push eax
call fcn.00573a14
push edi
call fcn.0058ed21
add esp, 4
mov ecx, esi
call fcn.00477d90
mov ecx, esi
call fcn.00461af0
mov ecx, esi
call fcn.0045e720
mov ecx, dword [esi + 0x9fc0]
cmp ecx, ebx
je 0x4703eb
mov edx, dword [ecx]
call dword [edx + 0x58]
mov ecx, dword [esi + 0x9fc8]
cmp ecx, ebx
je 0x4703fa
mov eax, dword [ecx]
call dword [eax + 0x58]
mov ecx, dword [esi + 0x9eac]
cmp ecx, ebx
je 0x47040b
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov ecx, dword [esi + 0x9ea8]
cmp ecx, ebx
je 0x47041c
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0x9678]
cmp ecx, ebx
je 0x47042d
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov eax, dword [esi + 0x84b4]
cmp eax, ebx
je 0x47043f
push eax
mov ecx, esi
call fcn.00452f80
mov ecx, dword [esi + 0xa2ec]
mov dword [esi + 0x84b4], ebx
cmp ecx, ebx
je 0x470456
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0x8328]
cmp ecx, ebx
je 0x470466
mov edx, dword [ecx]
push 1
call dword [edx]
mov ecx, dword [esi + 0x8340]
cmp ecx, ebx
je 0x470476
mov eax, dword [ecx]
push 1
call dword [eax]
mov ecx, dword [esi + 0x93dc]
cmp ecx, ebx
je 0x47049c
call fcn.005975ec
mov ecx, dword [esi + 0x93dc]
cmp ecx, ebx
je 0x470496
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov dword [esi + 0x93dc], ebx
mov ecx, dword [esi + 0x9404]
cmp ecx, ebx
je 0x4704c2
call fcn.005975ec
mov ecx, dword [esi + 0x9404]
cmp ecx, ebx
je 0x4704bc
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [esi + 0x9404], ebx
mov ecx, dword [esi + 0x940c]
cmp ecx, ebx
je 0x4704e8
call fcn.005975ec
mov ecx, dword [esi + 0x940c]
cmp ecx, ebx
je 0x4704e2
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov dword [esi + 0x940c], ebx
mov ecx, dword [esi + 0x9410]
cmp ecx, ebx
je 0x47050e
call fcn.005975ec
mov ecx, dword [esi + 0x9410]
cmp ecx, ebx
je 0x470508
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [esi + 0x9410], ebx
mov ecx, dword [esi + 0x9408]
cmp ecx, ebx
je 0x470534
call fcn.005975ec
mov ecx, dword [esi + 0x9408]
cmp ecx, ebx
je 0x47052e
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov dword [esi + 0x9408], ebx
cmp dword [esi + 0x8220], ebx
je 0x470547
lea ecx, [esi + 0x158]
call fcn.004d7a70
mov ecx, esi
call fcn.00474f80
lea ecx, [esi + 0xa270]
call fcn.00585bef
xor edi, edi
lea ebp, [esi + 0x93c8]
mov eax, dword [0x639698]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
push edi
lea eax, [esp + 0x18]
push 0x625a90
push eax
mov byte [esp + 0x34], 0x2a
call fcn.0058aded
fld dword [ebp]
add esp, 4
lea ecx, [esp + 0x18]
fstp qword [esp]
push str._0.2f
push ecx
call fcn.0058aded
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
add esp, 0x10
mov ecx, 0x6646a8
push edx
push eax
push 0x62eda4
call fcn.004ed2d0
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], 0x29
call fcn.005936db
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0x28
call fcn.005936db
inc edi
add ebp, 4
cmp edi, 5
jl 0x470561
mov edi, dword [esi + 0xa63c]
cmp edi, ebx
je 0x4705f6
mov ecx, edi
call fcn.004e2e30
push edi
call fcn.0058ed21
add esp, 4
mov edi, dword [esi + 0xa640]
cmp edi, ebx
je 0x470610
mov ecx, edi
call fcn.0050fb90
push edi
call fcn.0058ed21
add esp, 4
mov ecx, esi
call fcn.0046a0c0
mov ecx, esi
call fcn.00490910
mov eax, dword [esi + 0xaa20]
cmp eax, ebx
je 0x47062f
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push str.PostEndMixW
mov ecx, esi
call fcn.004781b0
lea edi, [esi + 0xaa14]
mov dword [esp + 0x1c], edi
mov byte [esp + 0x28], 0x2c
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470669
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470669
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x2b
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x27
call fcn.005936db
mov eax, dword [esi + 0xa9fc]
mov dword [esi + 0xa9f8], 0x5e2024
cmp eax, ebx
je 0x4706a0
push eax
call fcn.0058ed21
add esp, 4
lea ecx, [esi + 0xa9e0]
mov byte [esp + 0x28], 0x25
call fcn.005951a4
lea edi, [esi + 0xa998]
mov dword [esp + 0x1c], edi
mov byte [esp + 0x28], 0x2f
mov eax, dword [edi]
cmp dword [eax - 8], ebx
je 0x4706d5
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x4706d5
mov ecx, edi
call fcn.004c7bb0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x2e
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x2d
call fcn.005936db
mov ecx, edi
mov byte [esp + 0x28], 0x24
call fcn.005936db
lea edi, [esi + 0xa98c]
mov dword [esp + 0x1c], edi
mov byte [esp + 0x28], 0x31
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470729
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470729
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x30
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x23
call fcn.005936db
lea edi, [esi + 0xa980]
mov dword [esp + 0x1c], edi
mov byte [esp + 0x28], 0x33
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470771
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470771
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x32
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x22
call fcn.005936db
lea ecx, [esi + 0xa960]
mov byte [esp + 0x28], 0x21
call fcn.005936db
lea ecx, [esi + 0xa95c]
mov byte [esp + 0x28], 0x20
call fcn.005936db
lea ecx, [esi + 0xa958]
mov byte [esp + 0x28], 0x1f
call fcn.005936db
lea ecx, [esi + 0xa954]
mov byte [esp + 0x28], 0x1e
call fcn.005936db
lea ecx, [esi + 0xa950]
mov byte [esp + 0x28], 0x1d
call fcn.005936db
lea ecx, [esi + 0xa94c]
mov byte [esp + 0x28], 0x1c
call fcn.005936db
lea ecx, [esi + 0xa948]
mov byte [esp + 0x28], 0x1b
call fcn.005936db
lea ecx, [esi + 0xa944]
mov byte [esp + 0x28], 0x1a
call fcn.005936db
lea ecx, [esi + 0xa940]
mov byte [esp + 0x28], 0x19
call fcn.005936db
lea ecx, [esi + 0xa93c]
mov byte [esp + 0x28], 0x18
call fcn.005936db
lea ecx, [esi + 0xa938]
mov byte [esp + 0x28], 0x17
call fcn.005936db
lea ecx, [esi + 0xa934]
mov byte [esp + 0x28], 0x16
call fcn.005936db
lea ecx, [esi + 0xa930]
mov byte [esp + 0x28], 0x15
call fcn.005936db
lea ecx, [esi + 0xa92c]
mov byte [esp + 0x28], 0x14
call fcn.005936db
lea ecx, [esi + 0xa928]
mov byte [esp + 0x28], 0x13
call fcn.005936db
lea ecx, [esi + 0xa924]
mov byte [esp + 0x28], 0x12
call fcn.005936db
lea ecx, [esi + 0xa920]
mov byte [esp + 0x28], 0x11
call fcn.005936db
lea ecx, [esi + 0xa91c]
mov byte [esp + 0x28], 0x10
call fcn.005936db
lea ecx, [esi + 0xa918]
mov byte [esp + 0x28], 0xf
call fcn.005936db
lea ecx, [esi + 0xa914]
mov byte [esp + 0x28], 0xe
call fcn.005936db
lea ecx, [esi + 0xa910]
mov byte [esp + 0x28], 0xd
call fcn.005936db
lea ecx, [esi + 0xa90c]
mov byte [esp + 0x28], 0xc
call fcn.005936db
lea ecx, [esi + 0xa908]
mov byte [esp + 0x28], 0xb
call fcn.005936db
lea ecx, [esi + 0xa904]
mov byte [esp + 0x28], 0xa
call fcn.005936db
lea ecx, [esi + 0xa900]
mov byte [esp + 0x28], 9
call fcn.005936db
lea ecx, [esi + 0xa8fc]
mov byte [esp + 0x28], 8
call fcn.005936db
lea ecx, [esi + 0xa8f8]
mov byte [esp + 0x28], 7
call fcn.005936db
lea ecx, [esi + 0xa8f4]
mov byte [esp + 0x28], 6
call fcn.005936db
lea ecx, [esi + 0xa8f0]
mov byte [esp + 0x28], 5
call fcn.005936db
lea ecx, [esi + 0xa8ec]
mov byte [esp + 0x28], 4
call fcn.005936db
lea ecx, [esi + 0xa8e8]
mov byte [esp + 0x28], 3
call fcn.005936db
lea ecx, [esi + 0xa8e4]
mov byte [esp + 0x28], 2
call fcn.005936db
lea ecx, [esi + 0xa8e0]
mov byte [esp + 0x28], 1
call fcn.005936db
lea ecx, [esi + 0xa8dc]
mov byte [esp + 0x28], 0
call fcn.005936db
lea ecx, [esi + 0xa8d4]
mov dword [esp + 0x28], 0xff
call fcn.005936db
lea edi, [esi + 0xa8c4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x135
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x4709ef
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x4709ef
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x34
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xfe
call fcn.005936db
lea edi, [esi + 0xa8b8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x138
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470a35
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470a35
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x37
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x36
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xfd
call fcn.005936db
lea edi, [esi + 0xa8a8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x13a
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470a8f
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470a8f
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x39
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xfc
call fcn.005936db
lea edi, [esi + 0xa880]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x13d
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470ad5
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470ad5
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x3c
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x3b
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xfb
call fcn.005936db
lea edi, [esi + 0xa874]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x13f
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470b2f
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470b2f
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x3e
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xfa
call fcn.005936db
lea ecx, [esi + 0xa858]
mov byte [esp + 0x28], 0xf9
call fcn.005936db
lea ecx, [esi + 0xa854]
mov byte [esp + 0x28], 0xf8
call fcn.005936db
lea ecx, [esi + 0xa850]
mov byte [esp + 0x28], 0xf7
call fcn.005936db
push fcn.005936db
push 0xa
lea eax, [esi + 0xa7fc]
push 4
push eax
mov byte [esp + 0x38], 0xf6
call fcn.00573a14
push fcn.005936db
push 0xa
lea ecx, [esi + 0xa7d4]
push 4
push ecx
mov byte [esp + 0x38], 0xf5
call fcn.00573a14
push fcn.005936db
push 0xa
lea edx, [esi + 0xa7ac]
push 4
push edx
mov byte [esp + 0x38], 0xf4
call fcn.00573a14
lea edi, [esi + 0xa794]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x141
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470bfb
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470bfb
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x40
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xf3
call fcn.005936db
lea edi, [esi + 0xa628]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x143
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470c49
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470c49
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x42
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xf2
call fcn.005936db
lea edi, [esi + 0xa61c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x145
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470c97
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470c97
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x44
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xf1
call fcn.005936db
lea edi, [esi + 0xa610]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x147
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470ce5
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470ce5
mov edx, dword [edi]
push edx
push ecx
push eax
mov ecx, 0x6646a8
call fcn.004ed3b0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x46
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xf0
call fcn.005936db
lea edi, [esi + 0xa604]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x149
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470d2b
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470d2b
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x48
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xef
call fcn.005936db
lea edi, [esi + 0xa5f0]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x14b
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x470d71
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x470d71
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x4a
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xee
call fcn.005936db
lea edi, [esi + 0xa5e4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x14d
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x470db7
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x470db7
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x4c
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xed
call fcn.005936db
lea edi, [esi + 0xa5d8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x14f
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470dfd
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470dfd
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x4e
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xec
call fcn.005936db
lea edi, [esi + 0xa5cc]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x152
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x470e43
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x470e43
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x51
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x50
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xeb
call fcn.005936db
push fcn.005936db
push 0xa
lea ecx, [esi + 0xa4f4]
push 4
push ecx
mov byte [esp + 0x38], 0xea
call fcn.00573a14
push fcn.005936db
push 0xa
lea edx, [esi + 0xa4a4]
push 4
push edx
mov byte [esp + 0x38], 0xe9
call fcn.00573a14
push fcn.005936db
push 0xa
lea eax, [esi + 0xa47c]
push 4
push eax
mov byte [esp + 0x38], 0xe8
call fcn.00573a14
lea ecx, [esi + 0xa464]
mov byte [esp + 0x28], 0xe7
call fcn.0058d542
lea edi, [esi + 0xa458]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x155
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x470ef3
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x470ef3
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x54
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x53
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xe6
call fcn.005936db
lea edi, [esi + 0xa44c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x158
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x470f45
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x470f45
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x57
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x56
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xe5
call fcn.005936db
lea edi, [esi + 0xa440]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x15b
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x470f97
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x470f97
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x5a
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x59
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xe4
call fcn.005936db
lea edi, [esi + 0xa434]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x15e
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x470fe9
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x470fe9
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x5d
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x5c
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xe3
call fcn.005936db
lea edi, [esi + 0xa428]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x161
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x47103b
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x47103b
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x60
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x5f
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xe2
call fcn.005936db
lea edi, [esi + 0xa41c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x164
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x47108d
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x47108d
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x63
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x62
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xe1
call fcn.005936db
lea edi, [esi + 0xa410]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x167
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x4710df
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x4710df
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x66
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x65
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xe0
call fcn.005936db
lea edi, [esi + 0xa404]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x16a
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x471131
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x471131
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x69
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x68
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xdf
call fcn.005936db
lea edi, [esi + 0xa3f8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x16d
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x471183
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x471183
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x6c
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x6b
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xde
call fcn.005936db
lea edi, [esi + 0xa3ec]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x170
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x4711d5
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x4711d5
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x6f
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x6e
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xdd
call fcn.005936db
lea edi, [esi + 0xa3e0]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x172
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x471227
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x471227
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x71
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xdc
call fcn.005936db
lea edi, [esi + 0xa3d4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x174
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x47126d
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x47126d
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x73
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xdb
call fcn.005936db
lea edi, [esi + 0xa3c8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x176
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x4712b3
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x4712b3
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x75
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xda
call fcn.005936db
lea edi, [esi + 0xa3bc]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x178
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x4712f9
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x4712f9
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x77
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd9
call fcn.005936db
lea edi, [esi + 0xa3b0]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x17a
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x47133f
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x47133f
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x79
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd8
call fcn.005936db
lea edi, [esi + 0xa3a4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x17c
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x471385
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x471385
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x7b
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd7
call fcn.005936db
lea edi, [esi + 0xa398]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x17e
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x4713cb
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x4713cb
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x7d
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd6
call fcn.005936db
lea edi, [esi + 0xa38c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x180
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x471411
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x471411
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x7f
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd5
call fcn.005936db
lea edi, [esi + 0xa380]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x182
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x471457
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x471457
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x81
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd4
call fcn.005936db
lea edi, [esi + 0xa374]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x184
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x47149d
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x47149d
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x83
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd3
call fcn.005936db
lea edi, [esi + 0xa368]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x186
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x4714e3
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x4714e3
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x85
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd2
call fcn.005936db
lea edi, [esi + 0xa35c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x188
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x471529
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x471529
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x87
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd1
call fcn.005936db
lea edi, [esi + 0xa350]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x18a
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x47156f
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x47156f
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x89
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xd0
call fcn.005936db
lea edi, [esi + 0xa33c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x18c
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x4715b5
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x4715b5
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x8b
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xcf
call fcn.005936db
lea edi, [esi + 0xa330]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x18e
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x4715fb
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x4715fb
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x8d
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xce
call fcn.005936db
lea edi, [esi + 0xa324]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x190
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x471641
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x471641
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x8f
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xcd
call fcn.005936db
lea edi, [esi + 0xa318]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x192
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x471687
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x471687
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x91
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xcc
call fcn.005936db
lea edi, [esi + 0xa30c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x194
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x4716cd
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x4716cd
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x93
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xcb
call fcn.005936db
lea edi, [esi + 0xa300]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x196
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x471713
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x471713
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x95
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xca
call fcn.005936db
lea edi, [esi + 0xa2f4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x198
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x471759
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x471759
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x97
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xc9
call fcn.005936db
lea edi, [esi + 0xa2e0]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x19b
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x47179f
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x47179f
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x9a
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x99
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xc8
call fcn.005936db
lea edi, [esi + 0xa2d4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x19e
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x4717f1
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x4717f1
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x9d
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0x9c
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xc7
call fcn.005936db
lea edi, [esi + 0xa2c8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1a0
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x471843
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x471843
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x9f
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xc6
call fcn.005936db
lea edi, [esi + 0xa278]
mov byte [esp + 0x28], 0xc5
mov ecx, edi
call fcn.0058561a
mov ecx, edi
call fcn.00586163
lea edi, [esi + 0xa260]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1a2
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x4718a2
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x4718a2
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xa1
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xc4
call fcn.005936db
lea edi, [esi + 0xa254]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1a4
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x4718e8
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x4718e8
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xa3
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xc3
call fcn.005936db
lea edi, [esi + 0xa248]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1a6
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x47192e
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x47192e
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xa5
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xc2
call fcn.005936db
lea edi, [esi + 0xa23c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1a8
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x471974
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x471974
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xa7
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xc1
call fcn.005936db
lea edi, [esi + 0xa230]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1aa
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x4719ba
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x4719ba
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xa9
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xc0
call fcn.005936db
lea edi, [esi + 0xa224]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1ac
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x471a00
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x471a00
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xab
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xbf
call fcn.005936db
lea ecx, [esi + 0xa220]
mov byte [esp + 0x28], 0xbe
call fcn.005936db
lea edi, [esi + 0xa210]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1ae
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x471a56
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x471a56
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xad
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xbd
call fcn.005936db
lea edi, [esi + 0xa204]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1b0
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x471a9c
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x471a9c
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xaf
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xbc
call fcn.005936db
lea edi, [esi + 0xa1f8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1b2
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x471ae2
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x471ae2
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xb1
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xbb
call fcn.005936db
lea edi, [esi + 0xa1ec]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1b4
mov ecx, dword [edi + 4]
cmp dword [ecx - 8], ebx
je 0x471b28
mov edx, dword [edi + 8]
cmp dword [edx - 8], ebx
je 0x471b28
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xb3
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xba
call fcn.005936db
lea edi, [esi + 0xa1dc]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1b6
mov eax, dword [edi + 4]
cmp dword [eax - 8], ebx
je 0x471b6e
mov ecx, dword [edi + 8]
cmp dword [ecx - 8], ebx
je 0x471b6e
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xb5
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xb9
call fcn.005936db
lea edi, [esi + 0xa1d0]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1b9
mov edx, dword [edi + 4]
cmp dword [edx - 8], ebx
je 0x471bb4
mov eax, dword [edi + 8]
cmp dword [eax - 8], ebx
je 0x471bb4
mov ecx, edi
call fcn.004734f0
mov ebx, 0xb8
lea ecx, [edi + 8]
mov byte [esp + 0x28], bl
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0xb7
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], ebx
call fcn.005936db
lea edi, [esi + 0xa1c4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1bc
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x471c0a
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x471c0a
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xbb
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0xba
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xb7
call fcn.005936db
lea ecx, [esi + 0xa120]
mov byte [esp + 0x28], 0xb6
call fcn.00500180
lea ecx, [esi + 0xa080]
mov byte [esp + 0x28], 0xb5
call fcn.00500180
lea edi, [esi + 0xa06c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1be
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x471c80
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x471c80
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xbd
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xb4
call fcn.005936db
lea edi, [esi + 0xa060]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1c1
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x471cca
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x471cca
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xc0
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0xbf
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xb3
call fcn.005936db
lea edi, [esi + 0xa054]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1c3
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x471d20
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x471d20
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xc2
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xb2
call fcn.005936db
lea ecx, [esi + 0xa034]
mov byte [esp + 0x28], 0xb1
call fcn.005936db
lea ecx, [esi + 0xa030]
mov byte [esp + 0x28], 0xb0
call fcn.005936db
lea ecx, [esi + 0xa028]
mov byte [esp + 0x28], 0xaf
call fcn.005936db
lea ecx, [esi + 0xa024]
mov byte [esp + 0x28], 0xae
call fcn.005936db
lea ecx, [esi + 0xa020]
mov byte [esp + 0x28], 0xad
call fcn.005936db
lea edi, [esi + 0xa008]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1c5
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x471dba
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x471dba
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xc4
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xac
call fcn.005936db
lea ecx, [esi + 0x9ffc]
mov byte [esp + 0x28], 0xab
call fcn.005936db
lea edi, [esi + 0x9fec]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1c7
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x471e14
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x471e14
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xc6
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xaa
call fcn.005936db
lea edi, [esi + 0x9fe0]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1c9
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x471e5e
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x471e5e
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xc8
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xa9
call fcn.005936db
lea edi, [esi + 0x9fd4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1cc
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x471ea8
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x471ea8
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xcb
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0xca
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0xa8
call fcn.005936db
lea ecx, [esi + 0x9fa4]
mov byte [esp + 0x28], 0xa7
call fcn.005936db
lea edi, [esi + 0x9f98]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1ce
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x471f0e
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x471f0e
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xcd
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xa6
call fcn.005936db
lea edi, [esi + 0x9f8c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1d0
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x471f58
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x471f58
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xcf
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xa5
call fcn.005936db
lea edi, [esi + 0x9f80]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1d2
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x471fa2
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x471fa2
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xd1
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xa4
call fcn.005936db
lea edi, [esi + 0x9f74]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1d4
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x471fec
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x471fec
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xd3
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xa3
call fcn.005936db
lea edi, [esi + 0x9f68]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1d6
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472036
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x472036
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xd5
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xa2
call fcn.005936db
lea edi, [esi + 0x9f5c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1d8
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x472080
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472080
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xd7
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xa1
call fcn.005936db
lea edi, [esi + 0x9f50]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1da
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x4720ca
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4720ca
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xd9
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0xa0
call fcn.005936db
lea edi, [esi + 0x9f44]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1dc
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472114
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x472114
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xdb
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x9f
call fcn.005936db
lea edi, [esi + 0x9f38]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1de
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x47215e
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x47215e
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xdd
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x9e
call fcn.005936db
lea edi, [esi + 0x9f2c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1e0
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x4721a8
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4721a8
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xdf
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x9d
call fcn.005936db
lea edi, [esi + 0x9f20]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1e2
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x4721f2
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x4721f2
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xe1
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x9c
call fcn.005936db
lea edi, [esi + 0x9f10]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1e5
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x47223c
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x47223c
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xe4
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0xe3
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0x9b
call fcn.005936db
lea edi, [esi + 0x9f04]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1e8
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x472292
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x472292
mov ecx, edi
call fcn.004734f0
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xe7
call fcn.005936db
lea ecx, [edi + 4]
mov byte [esp + 0x28], 0xe6
call fcn.005936db
mov ecx, edi
mov dword [esp + 0x28], 0x9a
call fcn.005936db
lea ecx, [esi + 0x9f00]
mov byte [esp + 0x28], 0x99
call fcn.005936db
lea ecx, [esi + 0x9efc]
mov byte [esp + 0x28], 0x98
call fcn.005936db
mov eax, dword [esi + 0x9eec]
push eax
call fcn.0058ed21
mov eax, dword [esi + 0x9edc]
push eax
call fcn.0058ed21
mov eax, dword [esi + 0x9ecc]
push eax
call fcn.0058ed21
mov eax, dword [esi + 0x9ebc]
push eax
call fcn.0058ed21
lea edi, [esi + 0x9eb0]
add esp, 0x10
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1ea
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x47233b
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x47233b
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xe9
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x93
call fcn.005936db
lea edi, [esi + 0x9e9c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1ec
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x472385
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472385
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xeb
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x92
call fcn.005936db
lea edi, [esi + 0x9e90]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1ee
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x4723cf
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4723cf
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xed
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x91
call fcn.005936db
lea edi, [esi + 0x9e84]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1f0
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472419
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x472419
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xef
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x90
call fcn.005936db
lea edi, [esi + 0x9e78]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x1f2
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x472463
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472463
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xf1
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x8f
call fcn.005936db
lea ecx, [esi + 0x9e5c]
mov byte [esp + 0x28], 0x8e
call fcn.0049c0a0
lea ecx, [esi + 0x9b94]
mov byte [esp + 0x28], 0x8d
call fcn.00491870
lea edi, [esi + 0x967c]
mov dword [esp + 0x1c], edi
lea ecx, [edi + 0x4e4]
mov dword [esp + 0x28], 0x200
call fcn.00410bc0
lea ecx, [edi + 0x4d8]
mov dword [esp + 0x28], 0x1ff
call fcn.00410bc0
lea ecx, [edi + 0x47c]
mov byte [esp + 0x28], 0xfe
call fcn.00509930
lea ecx, [edi + 0x420]
mov byte [esp + 0x28], 0xfd
call fcn.00509930
lea ecx, [edi + 0x3c4]
mov byte [esp + 0x28], 0xfc
call fcn.00509930
lea ecx, [edi + 0x368]
mov byte [esp + 0x28], 0xfb
call fcn.00509930
lea ecx, [edi + 0x30c]
mov byte [esp + 0x28], 0xfa
call fcn.00509930
lea ecx, [edi + 0x2b0]
mov byte [esp + 0x28], 0xf9
call fcn.00509930
lea ecx, [edi + 0x254]
mov byte [esp + 0x28], 0xf8
call fcn.00509930
lea ecx, [edi + 0x1f8]
mov byte [esp + 0x28], 0xf7
call fcn.00509930
lea ecx, [edi + 0x19c]
mov byte [esp + 0x28], 0xf6
call fcn.00509930
lea ecx, [edi + 0x140]
mov byte [esp + 0x28], 0xf5
call fcn.00509930
lea ecx, [edi + 0xe4]
mov byte [esp + 0x28], 0xf4
call fcn.00509930
lea ecx, [edi + 0x88]
mov byte [esp + 0x28], 0xf3
call fcn.00509930
mov ecx, edi
mov dword [esp + 0x28], 0x8c
call fcn.005a0344
lea ecx, [esi + 0x95dc]
mov byte [esp + 0x28], 0x8b
call fcn.005ab13d
lea ecx, [esi + 0x9540]
mov byte [esp + 0x28], 0x8a
call fcn.005ab13d
mov byte [esp + 0x28], 0x89
lea ecx, [esi + 0x94c0]
call fcn.004e1120
lea edi, [esi + 0x94b4]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x202
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x4725fc
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4725fc
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 1
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x88
call fcn.005936db
lea edi, [esi + 0x94a8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x204
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472646
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x472646
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 3
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x87
call fcn.005936db
lea edi, [esi + 0x949c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x206
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x472690
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472690
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 5
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x86
call fcn.005936db
lea edi, [esi + 0x9490]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x208
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x4726da
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4726da
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 7
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x85
call fcn.005936db
lea edi, [esi + 0x9484]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x20a
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472724
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x472724
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 9
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x84
call fcn.005936db
lea edi, [esi + 0x9478]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x20c
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x47276e
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x47276e
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xb
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x83
call fcn.005936db
lea edi, [esi + 0x946c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x20e
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x4727b8
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4727b8
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xd
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x82
call fcn.005936db
lea edi, [esi + 0x9460]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x210
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x472802
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x472802
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0xf
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x81
call fcn.005936db
lea edi, [esi + 0x9454]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x212
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x47284c
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x47284c
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x11
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x80
call fcn.005936db
lea edi, [esi + 0x9448]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x214
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x472896
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x472896
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x13
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x7f
call fcn.005936db
lea edi, [esi + 0x943c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x216
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x4728e0
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x4728e0
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x15
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x7e
call fcn.005936db
lea edi, [esi + 0x9430]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x218
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x47292a
mov ecx, dword [edi + 8]
mov eax, dword [ecx - 8]
test eax, eax
je 0x47292a
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x17
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x7d
call fcn.005936db
lea edi, [esi + 0x9424]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x21a
mov edx, dword [edi + 4]
mov eax, dword [edx - 8]
test eax, eax
je 0x472974
mov eax, dword [edi + 8]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x472974
mov ecx, edi
call fcn.00411e20
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x19
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x7c
call fcn.005936db
lea edi, [esi + 0x9418]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x21c
mov ecx, dword [edi + 4]
mov eax, dword [ecx - 8]
test eax, eax
je 0x4729be
mov edx, dword [edi + 8]
mov eax, dword [edx - 8]
test eax, eax
je 0x4729be
lea ecx, [edi + 8]
mov byte [esp + 0x28], 0x1b
call fcn.005936db
lea ecx, [edi + 4]
mov dword [esp + 0x28], 0x7b
call fcn.005936db
lea ecx, [esi + 0x939c]
mov byte [esp + 0x28], 0x7a
call fcn.005936db
lea edi, [esi + 0x9390]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], 0x21e
mov eax, dword [edi + 4]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x472a18