Function at 0x4317f0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48f2ee
mov eax, dword fs:[0]
push eax
sub esp, 0x154
mov eax, dword [0x4ae650]
xor eax, esp
mov dword [esp + 0x14c], eax
push esi
push edi
mov eax, dword [0x4ae650]
xor eax, esp
push eax
lea eax, [esp + 0x160]
mov dword fs:[0], eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
call fcn.00406160
push 0x139
call fcn.00434010
mov edi, dword [ebx + 0x78]
lea esi, [ebx + 0x78]
add esp, 8
mov ecx, 0x2968
mov dword [ebx + 0x74], eax
call fcn.00439be0
push eax
mov eax, dword [edi + 0x160]
mov ecx, esi
call eax
mov ecx, dword [ebx + 0x184]
lea edi, [ebx + 0x184]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
mov ecx, edi
call eax
mov ecx, dword [ebx + 0x290]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x290]
call eax
mov ecx, dword [ebx + 0x39c]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x39c]
call eax
mov ecx, dword [ebx + 0x4a8]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x4a8]
call eax
mov ecx, dword [ebx + 0x5b4]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x5b4]
call eax
mov ecx, dword [ebx + 0x6c0]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x6c0]
call eax
mov ecx, dword [ebx + 0x7cc]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x7cc]
call eax
mov ecx, dword [ebx + 0x8d8]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x8d8]
call eax
mov ecx, dword [ebx + 0x9e4]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x9e4]
call eax
mov ecx, dword [ebx + 0xaf0]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0xaf0]
call eax
mov ecx, dword [ebx + 0xbfc]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0xbfc]
call eax
mov ecx, dword [ebx + 0xd08]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0xd08]
call eax
mov ecx, dword [ebx + 0xe14]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0xe14]
call eax
mov ecx, dword [ebx + 0xf20]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0xf20]
call eax
mov ecx, dword [ebx + 0x102c]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x102c]
call eax
mov ecx, dword [ebx + 0x1138]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x1138]
call eax
mov ecx, dword [ebx + 0x1244]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x1244]
call eax
mov ecx, dword [ebx + 0x1350]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x1350]
call eax
mov ecx, dword [ebx + 0x145c]
mov dword [esp + 0x10], ecx
mov ecx, 0x2968
call fcn.00439be0
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [edx + 0x160]
lea ecx, [ebx + 0x145c]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x1005
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 0
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x14c]
mov ecx, esi
call eax
or esi, 0xffffffff
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431ba7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x1006
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 1
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x14c]
mov ecx, edi
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431bf9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x1007
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 2
mov edx, dword [ebx + 0x290]
lea ecx, [ebx + 0x290]
push eax
mov eax, dword [edx + 0x14c]
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431c53
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x1008
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 3
mov edx, dword [ebx + 0x39c]
lea ecx, [ebx + 0x39c]
push eax
mov eax, dword [edx + 0x14c]
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431cad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x1009
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 4
mov edx, dword [ebx + 0x4a8]
lea ecx, [ebx + 0x4a8]
push eax
mov eax, dword [edx + 0x14c]
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431d07
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x100a
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 5
mov edx, dword [ebx + 0x5b4]
lea ecx, [ebx + 0x5b4]
push eax
mov eax, dword [edx + 0x14c]
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431d61
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x100b
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 6
mov edx, dword [ebx + 0x6c0]
lea ecx, [ebx + 0x6c0]
push eax
mov eax, dword [edx + 0x14c]
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431dbb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x100c
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 7
mov edx, dword [ebx + 0x7cc]
lea ecx, [ebx + 0x7cc]
push eax
mov eax, dword [edx + 0x14c]
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431e15
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x100d
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 8
mov edx, dword [ebx + 0x8d8]
lea ecx, [ebx + 0x8d8]
push eax
mov eax, dword [edx + 0x14c]
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431e6f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, 0x100e
call fcn.00439ca0
add esp, 8
mov dword [esp + 0x168], 9
mov edx, dword [ebx + 0x9e4]
lea ecx, [ebx + 0x9e4]
push eax
mov eax, dword [edx + 0x14c]
call eax
mov dword [esp + 0x168], esi
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
lock xadd dword [ecx], esi
dec esi
test esi, esi
jg 0x431ec7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x94]
push 0x2819
push ecx
call fcn.00439910
lea edx, [esp + 0x3c]
mov esi, eax
push 0x2819
mov ecx, 0x17
lea edi, [esp + 0x100]
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.00439910
mov edx, dword [ebx + 0x78]
mov esi, eax
mov ecx, 0x17
lea edi, [esp + 0xa4]
rep movsd dword es:[edi], dword [esi]
sub esp, 0x4c
lea eax, [ebx + 0x78]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x184]
sub esp, 0x5c
lea eax, [ebx + 0x184]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x290]
sub esp, 0x5c
lea eax, [ebx + 0x290]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x39c]
sub esp, 0x5c
lea eax, [ebx + 0x39c]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x4a8]
sub esp, 0x5c
lea eax, [ebx + 0x4a8]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x5b4]
sub esp, 0x5c
lea eax, [ebx + 0x5b4]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x6c0]
lea eax, [ebx + 0x6c0]
sub esp, 0x5c
mov ecx, 0x17
lea esi, [esp + 0x150]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x7cc]
sub esp, 0x5c
lea eax, [ebx + 0x7cc]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x8d8]
sub esp, 0x5c
lea eax, [ebx + 0x8d8]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x9e4]
sub esp, 0x5c
lea eax, [ebx + 0x9e4]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0xaf0]
sub esp, 0x5c
lea eax, [ebx + 0xaf0]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0xbfc]
sub esp, 0x5c
lea eax, [ebx + 0xbfc]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0xd08]
sub esp, 0x5c
lea eax, [ebx + 0xd08]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0xe14]
sub esp, 0x5c
lea eax, [ebx + 0xe14]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0xf20]
lea eax, [ebx + 0xf20]
sub esp, 0x5c
mov ecx, 0x17
lea esi, [esp + 0xf0]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x102c]
sub esp, 0x5c
lea eax, [ebx + 0x102c]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x1138]
sub esp, 0x5c
lea eax, [ebx + 0x1138]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x1244]
sub esp, 0x5c
lea eax, [ebx + 0x1244]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x1350]
sub esp, 0x5c
lea eax, [ebx + 0x1350]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0x145c]
sub esp, 0x5c
lea eax, [ebx + 0x145c]
mov edi, esp
mov ecx, 0x17
lea esi, [esp + 0xf0]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [edx + 0x190]
call eax
mov edx, dword [ebx + 0xaf0]
mov edx, dword [edx + 0x14c]
lea edi, [ebx + 0xaf0]
lea eax, [ebx + 0x1828]
push eax
mov ecx, edi
call edx
mov eax, dword [ebx + 0xbfc]
mov eax, dword [eax + 0x14c]
lea ecx, [ebx + 0xbfc]
lea edx, [ebx + 0x182c]
push edx
call eax
mov edx, dword [ebx + 0xd08]
mov edx, dword [edx + 0x14c]
lea ecx, [ebx + 0xd08]
lea eax, [ebx + 0x1830]
push eax
call edx
mov eax, dword [ebx + 0xe14]
mov eax, dword [eax + 0x14c]
lea ecx, [ebx + 0xe14]
lea edx, [ebx + 0x1834]
push edx
call eax
mov edx, dword [ebx + 0xf20]
lea ecx, [ebx + 0xf20]
mov edx, dword [edx + 0x14c]
lea eax, [ebx + 0x1838]
push eax
call edx
mov eax, dword [ebx + 0x102c]
mov eax, dword [eax + 0x14c]
lea ecx, [ebx + 0x102c]
lea edx, [ebx + 0x183c]
push edx
call eax
mov edx, dword [ebx + 0x1138]
mov edx, dword [edx + 0x14c]
lea ecx, [ebx + 0x1138]
lea eax, [ebx + 0x1840]
push eax
call edx
mov eax, dword [ebx + 0x1244]
mov eax, dword [eax + 0x14c]
lea ecx, [ebx + 0x1244]
lea edx, [ebx + 0x1844]
push edx
call eax
mov edx, dword [ebx + 0x1350]
mov edx, dword [edx + 0x14c]
lea ecx, [ebx + 0x1350]
lea eax, [ebx + 0x1848]
push eax
call edx
mov eax, dword [ebx + 0x145c]
mov eax, dword [eax + 0x14c]
lea ecx, [ebx + 0x145c]
lea edx, [ebx + 0x184c]
push edx
call eax
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
call fcn.00406160
push 0x155
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16c8], eax
call fcn.00406160
push 0x156
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16cc], eax
call fcn.00406160
push 0x157
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16d0], eax
call fcn.00406160
push 0x158
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16d4], eax
call fcn.00406160
push 0x159
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16d8], eax
call fcn.00406160
push 0x15a
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16dc], eax
call fcn.00406160
push 0x150
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16e0], eax
call fcn.00406160
push 0x151
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16e4], eax
call fcn.00406160
push 0x152
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16e8], eax
call fcn.00406160
push 0x153
call fcn.00434010
add esp, 4
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x499dd0
mov dword [ebx + 0x16ec], eax
call fcn.00406160
push 0x154
call fcn.00434010
add esp, 8
push 0x413
mov ecx, ebx
mov dword [ebx + 0x16f0], eax
call fcn.0045bed4
mov edx, dword [eax + 0x20]
mov esi, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x1568], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x156c], edx
mov dword [ebx + 0x1570], eax
mov dword [ebx + 0x1574], ecx
push 0x414
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x1578], edx
mov dword [ebx + 0x157c], eax
mov dword [ebx + 0x1580], ecx
mov edx, dword [esp + 0x20]
push 0x415
mov ecx, ebx
mov dword [ebx + 0x1584], edx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x1588], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x158c], edx
mov dword [ebx + 0x1590], eax
mov dword [ebx + 0x1594], ecx
push 0x41d
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x1598], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x159c], eax
mov dword [ebx + 0x15a0], ecx
push 0x417
mov ecx, ebx
mov dword [ebx + 0x15a4], edx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x15a8], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x15ac], edx
mov dword [ebx + 0x15b0], eax
mov dword [ebx + 0x15b4], ecx
push 0x418
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x15b8], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x15bc], eax
mov dword [ebx + 0x15c0], ecx
push 0x419
mov ecx, ebx
mov dword [ebx + 0x15c4], edx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x15c8], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x15cc], edx
mov dword [ebx + 0x15d0], eax
mov dword [ebx + 0x15d4], ecx
push 0x41a
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x15d8], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x15dc], eax
mov dword [ebx + 0x15e0], ecx
push 0x424
mov ecx, ebx
mov dword [ebx + 0x15e4], edx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x15e8], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x15ec], edx
mov dword [ebx + 0x15f0], eax
mov dword [ebx + 0x15f4], ecx
push 0x425
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x15f8], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x15fc], eax
mov dword [ebx + 0x1600], ecx
mov dword [ebx + 0x1604], edx
push 0x41b
mov ecx, ebx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x1608], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x160c], edx
mov dword [ebx + 0x1610], eax
mov dword [ebx + 0x1614], ecx
push 0x41e
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x1618], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x161c], eax
mov dword [ebx + 0x1620], ecx
push 0x416
mov ecx, ebx
mov dword [ebx + 0x1624], edx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x1628], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x162c], edx
mov dword [ebx + 0x1630], eax
mov dword [ebx + 0x1634], ecx
push 0x41c
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x1638], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x163c], eax
mov dword [ebx + 0x1640], ecx
mov dword [ebx + 0x1644], edx
push 0x41f
mov ecx, ebx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x1648], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x164c], edx
mov dword [ebx + 0x1650], eax
mov dword [ebx + 0x1654], ecx
push 0x421
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x1658], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x165c], eax
mov dword [ebx + 0x1660], ecx
push 0x420
mov ecx, ebx
mov dword [ebx + 0x1664], edx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x1668], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x166c], edx
mov dword [ebx + 0x1670], eax
mov dword [ebx + 0x1674], ecx
push 0x422
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x1678], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x167c], eax
mov dword [ebx + 0x1680], ecx
mov dword [ebx + 0x1684], edx
push 0x428
mov ecx, ebx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x1688], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x168c], edx
mov dword [ebx + 0x1690], eax
mov dword [ebx + 0x1694], ecx
push 0x429
mov ecx, ebx
call fcn.0045bed4
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x14]
push edx
push eax
call esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00454820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x1698], edx
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x169c], eax
mov dword [ebx + 0x16a0], ecx
push 0x423
mov ecx, ebx
mov dword [ebx + 0x16a4], edx
call fcn.0045bed4
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x14]
push ecx
push edx
call esi
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call fcn.00454820
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x16a8], ecx
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x16ac], edx
mov edx, dword [ebx + 0x1568]
mov dword [ebx + 0x16b0], eax
mov dword [ebx + 0x16b4], ecx
mov ecx, dword [ebx + 0x156c]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [ebx + 0x1570]
mov dword [eax + 4], ecx
mov ecx, dword [ebx + 0x1574]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov ecx, 0xfa1
lea esi, [esp + 0x24]
call fcn.00434410
mov edx, dword [eax]
mov dword [ebx + 0x1568], edx
mov ecx, dword [eax + 4]
mov dword [ebx + 0x156c], ecx
mov edx, dword [eax + 8]
mov ecx, dword [ebx + 0x1578]
mov dword [ebx + 0x1570], edx
mov eax, dword [eax + 0xc]
mov dword [ebx + 0x1574], eax
mov eax, esp
mov edx, dword [ebx + 0x157c]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1580]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1584]
mov dword [eax + 8], ecx
mov ecx, 0xfa2
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1578], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x157c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1580], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1588]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1590]
mov dword [ebx + 0x1584], edx
mov edx, dword [ebx + 0x158c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1594]
mov dword [eax + 8], ecx
mov ecx, 0xfa3
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1588], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x158c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1590], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1598]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x15a0]
mov dword [ebx + 0x1594], edx
mov edx, dword [ebx + 0x159c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x15a4]
mov dword [eax + 8], ecx
mov ecx, 0xfa4
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1598], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x159c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x15a0], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x15a8]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x15b0]
mov dword [ebx + 0x15a4], edx
mov edx, dword [ebx + 0x15ac]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x15b4]
mov dword [eax + 8], ecx
mov ecx, 0xfa5
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x15a8], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x15ac], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x15b0], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x15b8]
mov eax, esp
mov dword [ebx + 0x15b4], edx
mov dword [eax], ecx
mov edx, dword [ebx + 0x15bc]
mov ecx, dword [ebx + 0x15c0]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x15c4]
mov dword [eax + 8], ecx
mov ecx, 0xfa6
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x15b8], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x15bc], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x15c0], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x15c8]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x15d0]
mov dword [ebx + 0x15c4], edx
mov edx, dword [ebx + 0x15cc]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x15d4]
mov dword [eax + 8], ecx
mov ecx, 0xfa7
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x15c8], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x15cc], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x15d0], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x15d8]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x15e0]
mov dword [ebx + 0x15d4], edx
mov edx, dword [ebx + 0x15dc]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x15e4]
mov dword [eax + 8], ecx
mov ecx, 0xfa8
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x15d8], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x15dc], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x15e0], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x15e8]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x15f0]
mov dword [ebx + 0x15e4], edx
mov edx, dword [ebx + 0x15ec]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x15f4]
mov dword [eax + 8], ecx
mov ecx, 0xfb2
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x15e8], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x15ec], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x15f0], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x15f8]
mov eax, esp
mov dword [ebx + 0x15f4], edx
mov edx, dword [ebx + 0x15fc]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1600]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1604]
mov dword [eax + 8], ecx
mov ecx, 0xfb3
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x15f8], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x15fc], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1600], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1608]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1610]
mov dword [ebx + 0x1604], edx
mov edx, dword [ebx + 0x160c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1614]
mov dword [eax + 8], ecx
mov ecx, 0xfa9
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1608], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x160c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1610], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1618]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1620]
mov dword [ebx + 0x1614], edx
mov edx, dword [ebx + 0x161c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1624]
mov dword [eax + 8], ecx
mov ecx, 0xfaa
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1618], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x161c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1620], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1628]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1630]
mov dword [ebx + 0x1624], edx
mov edx, dword [ebx + 0x162c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1634]
mov dword [eax + 8], ecx
mov ecx, 0xfab
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1628], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x162c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1630], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1638]
mov eax, esp
mov dword [ebx + 0x1634], edx
mov edx, dword [ebx + 0x163c]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0x1640]
mov edx, dword [ebx + 0x1644]
mov dword [eax + 8], ecx
mov ecx, 0xfac
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1638], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x163c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1640], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1648]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1650]
mov dword [ebx + 0x1644], edx
mov edx, dword [ebx + 0x164c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1654]
mov dword [eax + 8], ecx
mov ecx, 0xfad
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1648], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x164c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1650], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1658]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1660]
mov dword [ebx + 0x1654], edx
mov edx, dword [ebx + 0x165c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1664]
mov dword [eax + 8], ecx
mov ecx, 0xfae
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1658], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x165c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1660], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1668]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1670]
mov dword [ebx + 0x1664], edx
mov edx, dword [ebx + 0x166c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1674]
mov dword [eax + 8], ecx
mov ecx, 0xfaf
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1668], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x166c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1670], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1678]
mov eax, esp
mov dword [ebx + 0x1674], edx
mov edx, dword [ebx + 0x167c]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1680]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1684]
mov dword [eax + 8], ecx
mov ecx, 0xfb0
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1678], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x167c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1680], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1688]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x1690]
mov dword [ebx + 0x1684], edx
mov edx, dword [ebx + 0x168c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x1694]
mov dword [eax + 8], ecx
mov ecx, 0xfb4
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1688], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x168c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x1690], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x1698]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x16a0]
mov dword [ebx + 0x1694], edx
mov edx, dword [ebx + 0x169c]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x16a4]
mov dword [eax + 8], ecx
mov ecx, 0xfb5
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x1698], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x169c], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x16a0], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [ebx + 0x16a8]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 0x16b0]
mov dword [ebx + 0x16a4], edx
mov edx, dword [ebx + 0x16ac]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0x16b4]
mov dword [eax + 8], ecx
mov ecx, 0xfb1
lea esi, [esp + 0x24]
mov dword [eax + 0xc], edx
call fcn.00434410
mov ecx, dword [eax]
mov dword [ebx + 0x16a8], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x16ac], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x16b0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebx + 0x16b4], edx
mov eax, dword [ebx + 0x156c]
mov edx, dword [ebx + 0x1574]
mov ecx, dword [ebx + 0x1568]
add esp, 0x10
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1570]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x78]
call fcn.0045c075
mov eax, dword [ebx + 0x157c]
mov edx, dword [ebx + 0x1584]
mov ecx, dword [ebx + 0x1578]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1580]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x184]
call fcn.0045c075
mov eax, dword [ebx + 0x158c]
mov edx, dword [ebx + 0x1594]
mov ecx, dword [ebx + 0x1588]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1590]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x290]
call fcn.0045c075
mov eax, dword [ebx + 0x159c]
mov edx, dword [ebx + 0x15a4]
mov ecx, dword [ebx + 0x1598]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x15a0]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x39c]
call fcn.0045c075
mov eax, dword [ebx + 0x15ac]
mov edx, dword [ebx + 0x15b4]
mov ecx, dword [ebx + 0x15a8]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x15b0]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x4a8]
call fcn.0045c075
mov eax, dword [ebx + 0x15bc]
mov edx, dword [ebx + 0x15c4]
mov ecx, dword [ebx + 0x15b8]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x15c0]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x5b4]
call fcn.0045c075
mov eax, dword [ebx + 0x15cc]
mov edx, dword [ebx + 0x15d4]
mov ecx, dword [ebx + 0x15c8]
sub edx, eax
push 1
push edx
mov edx, dword [ebx + 0x15d0]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x6c0]
call fcn.0045c075
mov eax, dword [ebx + 0x15dc]
mov edx, dword [ebx + 0x15e4]
mov ecx, dword [ebx + 0x15d8]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x15e0]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x7cc]
call fcn.0045c075
mov eax, dword [ebx + 0x15ec]
mov edx, dword [ebx + 0x15f4]
mov ecx, dword [ebx + 0x15e8]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x15f0]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x8d8]
call fcn.0045c075
mov eax, dword [ebx + 0x15fc]
mov edx, dword [ebx + 0x1604]
mov ecx, dword [ebx + 0x15f8]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1600]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x9e4]
call fcn.0045c075
mov eax, dword [ebx + 0x160c]
mov edx, dword [ebx + 0x1614]
mov ecx, dword [ebx + 0x1608]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1610]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, edi
call fcn.0045c075
mov eax, dword [ebx + 0x161c]
mov edx, dword [ebx + 0x1624]
mov ecx, dword [ebx + 0x1618]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1620]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0xbfc]
call fcn.0045c075
mov eax, dword [ebx + 0x162c]
mov edx, dword [ebx + 0x1634]
mov ecx, dword [ebx + 0x1628]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1630]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0xd08]
call fcn.0045c075
mov eax, dword [ebx + 0x163c]
mov edx, dword [ebx + 0x1644]
mov ecx, dword [ebx + 0x1638]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1640]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0xe14]
call fcn.0045c075
mov eax, dword [ebx + 0x164c]
mov edx, dword [ebx + 0x1654]
mov ecx, dword [ebx + 0x1648]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1650]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0xf20]
call fcn.0045c075
mov eax, dword [ebx + 0x165c]
mov edx, dword [ebx + 0x1664]
mov ecx, dword [ebx + 0x1658]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1660]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x102c]
call fcn.0045c075
mov eax, dword [ebx + 0x166c]
mov edx, dword [ebx + 0x1674]
mov ecx, dword [ebx + 0x1668]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1670]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x1138]
call fcn.0045c075
mov eax, dword [ebx + 0x167c]
mov edx, dword [ebx + 0x1684]
mov ecx, dword [ebx + 0x1678]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1680]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x1244]
call fcn.0045c075
mov eax, dword [ebx + 0x168c]
mov edx, dword [ebx + 0x1694]
mov ecx, dword [ebx + 0x1688]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x1690]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x1350]
call fcn.0045c075
mov eax, dword [ebx + 0x169c]
mov ecx, dword [ebx + 0x1698]
mov edx, dword [ebx + 0x16a4]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x16a0]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x145c]
call fcn.0045c075
mov eax, dword [ebx + 0x16ac]
mov edx, dword [ebx + 0x16b4]
mov ecx, dword [ebx + 0x16a8]
push 1
sub edx, eax
push edx
mov edx, dword [ebx + 0x16b0]
sub edx, ecx
push edx
push eax
push ecx
lea ecx, [ebx + 0x16fc]
call fcn.0045c075
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov ecx, 0xfb1
lea esi, [esp + 0x34]
mov dword [eax + 0xc], edx
call fcn.00434410
mov esi, dword [eax + 8]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 0xc]
add esp, 0x10
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], eax
mov dword [ebx + 0x16f4], ecx
mov dword [ebx + 0x16f8], edx
mov ecx, dword [esp + 0x160]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x14c]
xor ecx, esp
call fcn.00471ad7
mov esp, ebp
pop ebp
ret