Function at 0x4649e0
Capabilities:
Encode data using base64
Parse pe header

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x70
push 0xffffffffffffffff
push 0x4acb34
mov eax, dword fs:[0]
push eax
sub esp, 0xb6c
mov eax, dword [0x4cd4a4]
xor eax, ebp
mov dword [ebp + 0x6c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0x7c]
xor edi, edi
mov dword [ebp + 0x40], ecx
mov dword [ebp - 0x18], eax
mov dword [ebp + 0x24], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x694], edi
mov dword [ebp - 0x6bc], edi
mov dword [ebp - 0x898], edi
fldz
fst dword [ebp + 8]
mov byte [ebp - 0x25], 0
fst dword [ebp - 0x4c]
mov dword [ebp - 0x24], edi
fst dword [ebp - 0x88]
fst dword [ebp - 0x80]
fst dword [ebp - 0x9c]
fstp dword [ebp - 0x2c]
mov dword [ebp + 0x2c], edi
mov dword [ebp - 0x90], edi
push str.done
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 6
call fcn.004027a0
mov esi, eax
cmp dword [ebp + 0x78], edi
mov byte [ebp - 4], 7
jne 0x464a8c
push 0x80004003
call fcn.0049fa80
lea ecx, [ebp - 0x164]
push ecx
mov ecx, dword [ebp + 0x78]
call fcn.00444cf0
push esi
mov ecx, eax
call fcn.00403430
mov bl, al
mov eax, dword [ebp - 0x164]
cmp eax, edi
je 0x464af0
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
cmp eax, edi
jne 0x464aea
cmp esi, edi
je 0x464aea
cmp dword [esi], edi
je 0x464ad0
mov edx, dword [esi]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [esi + 4], edi
je 0x464ae1
mov eax, dword [esi + 4]
push eax
call sub.MFC80U.DLL_Ordinal_266
add esp, 4
push esi
call sub.MFC80U.DLL_Ordinal_764
add esp, 4
mov dword [ebp - 0x164], edi
mov esi, dword [ebp - 0x154]
cmp esi, edi
mov byte [ebp - 4], 6
je 0x464b3d
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
cmp eax, edi
jne 0x464b37
cmp esi, edi
je 0x464b37
cmp dword [esi], edi
je 0x464b1d
mov ecx, dword [esi]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [esi + 4], edi
je 0x464b2e
mov eax, dword [esi + 4]
push eax
call sub.MFC80U.DLL_Ordinal_266
add esp, 4
push esi
call sub.MFC80U.DLL_Ordinal_764
add esp, 4
mov dword [ebp - 0x154], edi
test bl, bl
je 0x464b79
cmp dword [ebp + 0x78], edi
mov dword [ebp - 4], 0xffffffff
je 0x464b58
mov eax, dword [ebp + 0x78]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x6c]
xor ecx, ebp
call fcn.0049ec62
add ebp, 0x70
mov esp, ebp
pop ebp
ret 8
cmp dword [ebp + 0x78], edi
jne 0x464b88
push 0x80004003
call fcn.0049fa80
mov esi, dword [ebp + 0x78]
mov ecx, dword [esi]
mov edx, dword [ecx + 0x48]
push esi
call edx
cmp eax, edi
jge 0x464ba3
push 0x4b481c
push esi
push eax
call fcn.0049fa90
mov ebx, dword [ebp + 0x40]
cmp dword [ebx + 0x114], edi
jne 0x464bb8
push 0x80004003
call fcn.0049fa80
mov ecx, dword [ebx + 0x114]
lea eax, [ebp - 0x29c]
push eax
call fcn.004034e0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 8
jne 0x464bde
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea ecx, [ebp - 0x3a8]
push ecx
mov ecx, esi
call fcn.00403e10
mov eax, dword [eax]
cmp eax, edi
je 0x464bff
mov edx, dword [eax]
mov dword [ebp - 0x24], eax
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x3a8]
cmp eax, edi
je 0x464c11
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x29c]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x464c27
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov word [ebp - 0x8c0], 3
mov dword [ebp - 0x8b8], 1
cmp dword [ebx + 0x114], edi
mov byte [ebp - 4], 9
jne 0x464c50
push 0x80004003
call fcn.0049fa80
mov ecx, dword [ebx + 0x114]
lea eax, [ebp - 0x2bc]
push eax
call fcn.004034e0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0xa
jne 0x464c76
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x13c]
lea edx, [ebp - 0x8c0]
push edx
push esi
call eax
cmp eax, edi
jge 0x464c9a
push 0x4b3b08
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x2bc]
cmp eax, edi
mov byte [ebp - 4], 9
je 0x464cb0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x8c0]
push eax
mov byte [ebp - 4], 6
call ebx
mov ecx, dword [ebp + 0x40]
cmp dword [ecx + 0x114], edi
jne 0x464cd8
push 0x80004003
call fcn.0049fa80
mov edx, dword [ebp + 0x40]
mov ecx, dword [edx + 0x114]
lea eax, [ebp - 0x57c]
push eax
call fcn.004034e0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0xb
jne 0x464d01
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
push 3
lea edx, [ebp - 0x8d0]
push edx
call fcn.004018a0
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.0040ad40
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x8d0]
push eax
call ebx
mov eax, dword [ebp - 0x57c]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x464d3e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [ebp + 0x78]
lea eax, [ebp - 0x690]
push eax
call fcn.0045abd0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0xd
jne 0x464d61
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
lea edx, [ebp - 0x58c]
push edx
call fcn.0045aa90
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0xe
jne 0x464d83
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
push 1
lea eax, [ebp - 0x584]
push eax
mov ecx, esi
call fcn.0040b070
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0xf
jne 0x464da9
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov ecx, dword [esi]
mov edx, dword [ecx + 0x70]
push esi
call edx
cmp eax, edi
jge 0x464dc3
push 0x4b3c70
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x584]
cmp eax, edi
mov byte [ebp - 4], 0xe
je 0x464dd9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x58c]
cmp eax, edi
mov byte [ebp - 4], 0xd
je 0x464def
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x690]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x464e05
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov esi, dword [ebp + 0x40]
mov ecx, esi
call fcn.00404420
fld1
fstp dword [ebp - 0x6f8]
mov word [ebp - 0x700], 4
cmp dword [esi + 0x114], edi
mov byte [ebp - 4], 0x10
jne 0x464e36
push 0x80004003
call fcn.0049fa80
mov eax, dword [ebp + 0x40]
mov ecx, dword [eax + 0x114]
lea edx, [ebp - 0x450]
push edx
call fcn.004034e0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x11
jne 0x464e5f
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov eax, dword [esi]
mov edx, dword [eax + 0x13c]
lea ecx, [ebp - 0x700]
push ecx
push esi
call edx
cmp eax, edi
jge 0x464e83
push 0x4b3b08
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x450]
cmp eax, edi
mov byte [ebp - 4], 0x10
je 0x464e99
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [ebp - 0x700]
push eax
mov byte [ebp - 4], 6
call ebx
mov ecx, dword [ebp + 0x40]
cmp dword [ecx + 0x114], edi
jne 0x464ebb
push 0x80004003
call fcn.0049fa80
mov edx, dword [ebp + 0x40]
mov ecx, dword [edx + 0x114]
lea eax, [ebp - 0x1a8]
push eax
call fcn.004034e0
mov esi, eax
cmp dword [esi], edi
mov bl, 0x12
mov byte [ebp - 4], bl
jne 0x464ee5
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea ecx, [ebp - 0x560]
push ecx
mov ecx, esi
call fcn.0040b3e0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x13
jne 0x464f09
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov edx, dword [esi]
mov ecx, dword [edx + 0x34]
lea eax, [ebp - 0x1a0]
push eax
push esi
call ecx
cmp eax, edi
jge 0x464f2a
push 0x4b3c60
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x560]
cmp eax, edi
mov edx, dword [ebp - 0x1a0]
mov dword [ebp + 0x28], edx
mov byte [ebp - 4], bl
je 0x464f48
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x1a8]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x464f5e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x40]
cmp dword [eax + 0x114], edi
jne 0x464f73
push 0x80004003
call fcn.0049fa80
mov ecx, dword [ebp + 0x40]
mov ecx, dword [ecx + 0x114]
lea edx, [ebp - 0x1b0]
push edx
call fcn.004034e0
mov esi, eax
cmp dword [esi], edi
mov bl, 0x14
mov byte [ebp - 4], bl
jne 0x464f9d
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea eax, [ebp - 0x488]
push eax
mov ecx, esi
call fcn.0040b3e0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x15
jne 0x464fc1
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov ecx, dword [esi]
mov edx, dword [ecx + 0x38]
push edi
push esi
call edx
cmp eax, edi
jge 0x464fdc
push 0x4b3c60
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x488]
cmp eax, edi
mov byte [ebp - 4], bl
je 0x464ff1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x1b0]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x465007
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [ebp + 0x78]
lea eax, [ebp - 0x568]
push eax
call fcn.0045abd0
mov esi, eax
cmp dword [esi], edi
mov bl, 0x16
mov byte [ebp - 4], bl
jne 0x46502b
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
lea edx, [ebp - 0x1c0]
push edx
call fcn.0045aa90
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x17
jne 0x46504d
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
push 1
lea eax, [ebp - 0x490]
push eax
mov ecx, esi
call fcn.0040b070
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x18
jne 0x465073
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea ecx, [ebp - 0x1b8]
push ecx
mov ecx, esi
call fcn.0045ad60
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x19
jne 0x465097
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov edx, dword [esi]
mov ecx, dword [edx + 0x15c]
lea eax, [ebp - 0x5f0]
push eax
push esi
call ecx
cmp eax, edi
jge 0x4650bb
push 0x4b3a68
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x1b8]
cmp eax, edi
mov edx, dword [ebp - 0x5f0]
mov dword [ebp - 0x74], edx
mov byte [ebp - 4], 0x18
je 0x4650da
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x490]
cmp eax, edi
mov byte [ebp - 4], 0x17
je 0x4650f0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x1c0]
cmp eax, edi
mov byte [ebp - 4], bl
je 0x465105
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x568]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x46511b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [ebp + 0x78]
lea eax, [ebp - 0x644]
push eax
call fcn.0045abd0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x1a
jne 0x46513e
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
lea edx, [ebp - 0x1d0]
push edx
call fcn.0045aa90
mov esi, eax
cmp dword [esi], edi
mov bl, 0x1b
mov byte [ebp - 4], bl
jne 0x465161
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
push 1
lea eax, [ebp - 0x498]
push eax
mov ecx, esi
call fcn.0040b070
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x1c
jne 0x465187
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea ecx, [ebp - 0x1c8]
push ecx
mov ecx, esi
call fcn.0045ad60
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x1d
jne 0x4651ab
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov edx, dword [esi]
mov eax, dword [edx + 0x160]
push edi
push esi
call eax
cmp eax, edi
jge 0x4651c9
push 0x4b3a68
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x1c8]
cmp eax, edi
mov byte [ebp - 4], 0x1c
je 0x4651df
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x498]
cmp eax, edi
mov byte [ebp - 4], bl
je 0x4651f4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x1d0]
cmp eax, edi
mov byte [ebp - 4], 0x1a
je 0x46520a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x644]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x465220
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ebx, dword [ebp + 0x78]
lea eax, [ebp - 0x570]
push eax
mov ecx, ebx
call fcn.0045abd0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x1e
jne 0x465245
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
lea edx, [ebp - 0x1e0]
push edx
call fcn.0045aa90
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x1f
jne 0x465267
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
push 1
lea eax, [ebp - 0x4a0]
push eax
mov ecx, esi
call fcn.0040b070
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x20
jne 0x46528d
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x4c]
lea edx, [ebp - 0x1d8]
push edx
push esi
call eax
cmp eax, edi
jge 0x4652ae
push 0x4b3c70
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x4a0]
cmp eax, edi
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + 0x14], ecx
mov byte [ebp - 4], 0x1f
je 0x4652cd
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x1e0]
cmp eax, edi
mov byte [ebp - 4], 0x1e
je 0x4652e3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x570]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x4652f9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [ebp - 0x1f0]
push eax
mov ecx, ebx
call fcn.0045abd0
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x21
jne 0x46531b
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
lea edx, [ebp - 0x4a8]
push edx
call fcn.0045aa90
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x22
jne 0x46533d
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
push 1
lea eax, [ebp - 0x1e8]
push eax
mov ecx, esi
call fcn.0040b070
mov esi, eax
cmp dword [esi], edi
mov byte [ebp - 4], 0x23
jne 0x465363
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov ecx, dword [esi]
mov edx, dword [ecx + 0x50]
push edi
push esi
call edx
cmp eax, edi
jge 0x46537e
push 0x4b3c70
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x1e8]
cmp eax, edi
mov byte [ebp - 4], 0x22
je 0x465394
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x4a8]
cmp eax, edi
mov byte [ebp - 4], 0x21
je 0x4653aa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x1f0]
cmp eax, edi
mov byte [ebp - 4], 6
je 0x4653c0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x40]
cmp dword [eax + 0x114], edi
jne 0x4653d5
push 0x80004003
call fcn.0049fa80
mov edi, dword [ebp + 0x40]
mov ecx, dword [edi + 0x114]
lea edx, [ebp - 0x5fc]
push edx
call fcn.004034e0
add edi, 0x118
push eax
mov ecx, edi
call fcn.00403eb0
mov eax, dword [ebp - 0x5fc]
test eax, eax
je 0x46540a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [edi], 0
jne 0x465419
push 0x80004003
call fcn.0049fa80
mov ecx, dword [edi]
push 5
lea eax, [ebp - 0xa70]
push eax
call fcn.004018a0
mov ebx, eax
cmp dword [edi], 0
mov byte [ebp - 4], 0x24
jne 0x46543e
push 0x80004003
call fcn.0049fa80
mov ecx, dword [edi]
lea edx, [ebp - 0x200]
push edx
call fcn.0040b3e0
mov esi, eax
mov eax, dword [ebp + 0x78]
mov ecx, dword [eax]
lea edx, [ebp - 0x1f8]
push edx
push eax
mov eax, dword [ecx + 0xb4]
mov byte [ebp - 4], 0x25
call eax
test eax, eax
jge 0x46547a
mov ecx, dword [ebp + 0x78]
push 0x4b481c
push ecx
push eax
call fcn.0049fa90
cmp dword [esi], 0
fld dword [ebp - 0x1f8]
fstp dword [ebp - 0x48]
jne 0x465492
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov edx, dword [esi]
mov ecx, dword [edx + 0x64]
lea eax, [ebp - 0x4b0]
push eax
push esi
call ecx
test eax, eax
jge 0x4654b3
push 0x4b3c60
push esi
push eax
call fcn.0049fa90
fld dword [ebp - 0x4b0]
mov ecx, ebx
fstp dword [ebp - 0x40]
call fcn.0040ad40
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp + 0x40]
fstp dword [esp]
call fcn.0046e220
fsub dword [ebp - 0x48]
mov eax, dword [ebp - 0x200]
test eax, eax
mov byte [ebp - 4], 0x24
fsub dword [ebp - 0x40]
fstp dword [ebp - 0x2c]
je 0x4654f4
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
lea ecx, [ebp - 0xa70]
push ecx
mov byte [ebp - 4], 6
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [edi], 0
jne 0x465514
push 0x80004003
call fcn.0049fa80
mov ecx, dword [edi]
lea edx, [ebp - 0x208]
push edx
call fcn.0040b3e0
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x26
jne 0x465537
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov eax, dword [esi]
mov edx, dword [eax + 0x6c]
lea ecx, [ebp - 0x578]
push ecx
push esi
call edx
test eax, eax
jge 0x465558
push 0x4b3c60
push esi
push eax
call fcn.0049fa90
fld dword [ebp - 0x2c]
mov eax, dword [ebp - 0x208]
test eax, eax
fsub dword [ebp - 0x578]
mov byte [ebp - 4], 6
fstp dword [ebp - 0x2c]
je 0x46557a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
fldz
fstp dword [ebp - 0xa8]
cmp dword [edi], 0
jne 0x465591
push 0x80004003
call fcn.0049fa80
mov ecx, dword [edi]
lea eax, [ebp - 0x4c0]
push eax
call fcn.0040b340
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x27
jne 0x4655b4
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
push 1
lea ecx, [ebp - 0x218]
push ecx
mov ecx, esi
call fcn.004039b0
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x28
jne 0x4655db
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea edx, [ebp - 0x680]
push edx
mov ecx, esi
call fcn.00403a00
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x29
jne 0x465600
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea eax, [ebp - 0x210]
push eax
mov ecx, esi
call fcn.0040f920
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x2a
jne 0x465625
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x20]
lea edx, [ebp - 0x4b8]
push edx
push esi
call eax
test eax, eax
jge 0x465646
push 0x4b3d88
push esi
push eax
call fcn.0049fa90
cmp dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x210]
setne bl
test eax, eax
mov byte [ebp - 4], 0x29
je 0x465666
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x680]
test eax, eax
mov byte [ebp - 4], 0x28
je 0x46567c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x218]
test eax, eax
mov byte [ebp - 4], 0x27
je 0x465692
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x4c0]
test eax, eax
mov byte [ebp - 4], 6
je 0x4656a8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test bl, bl
je 0x465719
cmp dword [edi], 0
push 1
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x2c]
push ecx
jne 0x4656c8
push 0x80004003
call fcn.0049fa80
mov ecx, dword [edi]
lea edx, [ebp - 0x220]
push edx
call fcn.0040b340
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x2b
jne 0x4656eb
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
push ecx
mov eax, esp
mov dword [ebp + 0x34], esp
push 1
push eax
call fcn.004039b0
mov ecx, dword [ebp + 0x40]
call fcn.0043ec60
mov eax, dword [ebp - 0x220]
test eax, eax
mov byte [ebp - 4], 6
je 0x465719
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp + 0x40]
cmp dword [eax + 0x114], 0
jne 0x46572f
push 0x80004003
call fcn.0049fa80
mov ecx, dword [ebp + 0x40]
mov ecx, dword [ecx + 0x114]
lea edx, [ebp - 0x228]
push edx
call fcn.004034e0
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x2c
jne 0x465759
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea eax, [ebp - 0x580]
push eax
mov ecx, esi
call fcn.0040b3e0
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x2d
jne 0x46577e
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov edx, dword [ebp + 0x28]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x38]
push edx
push esi
call eax
test eax, eax
jge 0x46579c
push 0x4b3c60
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x580]
test eax, eax
mov byte [ebp - 4], 0x2c
je 0x4657b2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x228]
test eax, eax
mov byte [ebp - 4], 6
je 0x4657c8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov edi, dword [ebp + 0x78]
lea eax, [ebp - 0x238]
push eax
mov ecx, edi
call fcn.0045abd0
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x2e
jne 0x4657ee
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
lea edx, [ebp - 0x608]
push edx
call fcn.0045aa90
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x2f
jne 0x465811
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
push 1
lea eax, [ebp - 0x230]
push eax
mov ecx, esi
call fcn.0040b070
mov esi, eax
cmp dword [esi], 0
mov bl, 0x30
mov byte [ebp - 4], bl
jne 0x465839
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
lea ecx, [ebp - 0x4c8]
push ecx
mov ecx, esi
call fcn.0045ad60
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x31
jne 0x46585e
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov eax, dword [ebp - 0x74]
mov edx, dword [esi]
mov ecx, dword [edx + 0x160]
push eax
push esi
call ecx
test eax, eax
jge 0x46587f
push 0x4b3a68
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x4c8]
test eax, eax
mov byte [ebp - 4], bl
je 0x465894
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x230]
test eax, eax
mov byte [ebp - 4], 0x2f
je 0x4658aa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x608]
test eax, eax
mov byte [ebp - 4], 0x2e
je 0x4658c0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x238]
test eax, eax
mov byte [ebp - 4], 6
je 0x4658d6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [ebp - 0x588]
push eax
mov ecx, edi
call fcn.0045abd0
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x32
jne 0x4658f9
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
lea edx, [ebp - 0x240]
push edx
call fcn.0045aa90
mov esi, eax
cmp dword [esi], 0
mov bl, 0x33
mov byte [ebp - 4], bl
jne 0x46591d
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
push 1
lea eax, [ebp - 0x4d0]
push eax
mov ecx, esi
call fcn.0040b070
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x34
jne 0x465944
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov edx, dword [ebp + 0x14]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x50]
push edx
push esi
call eax
test eax, eax
jge 0x465962
push 0x4b3c70
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x4d0]
test eax, eax
mov byte [ebp - 4], bl
je 0x465977
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x240]
test eax, eax
mov byte [ebp - 4], 0x32
je 0x46598d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x588]
test eax, eax
mov byte [ebp - 4], 6
je 0x4659a3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov esi, dword [ebp - 0x24]
test esi, esi
jne 0x4659b4
push 0x80004003
call fcn.0049fa80
lea eax, [ebp - 0x4d8]
push eax
mov ecx, esi
call fcn.0045aa90
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x35
jne 0x4659d7
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x20]
lea edx, [ebp - 0x248]
push edx
push esi
call eax
test eax, eax
jge 0x4659f8
push 0x4b3ca0
push esi
push eax
call fcn.0049fa90
mov eax, dword [ebp - 0x4d8]
test eax, eax
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x78], ecx
mov byte [ebp - 4], 6
je 0x465a17
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov edi, 1
cmp edi, dword [ebp - 0x78]
jge 0x465bb6
cmp edi, 1
jne 0x465ac4
mov esi, dword [ebp - 0x24]
test esi, esi
jne 0x465a3f
push 0x80004003
call fcn.0049fa80
lea ecx, [ebp - 0x650]
push ecx
mov ecx, esi
call fcn.0045aa90
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x36
jne 0x465a62
push 0x80004003
call fcn.0049fa80
mov ecx, dword [esi]
push 1
lea edx, [ebp - 0x250]
push edx
call fcn.0040b070
mov eax, dword [eax]
mov ebx, dword [ebp + 0x2c]
cmp ebx, eax
je 0x465a9a
test eax, eax
mov esi, ebx
mov ebx, eax
mov dword [ebp + 0x2c], ebx
je 0x465a8e
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
test esi, esi
je 0x465a9a
mov eax, dword [ebp - 0x250]
test eax, eax
je 0x465aac
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x650]
test eax, eax
mov byte [ebp - 4], 6
je 0x465b1a
mov ebx, dword [ebp + 0x2c]
test ebx, ebx
jne 0x465ad5
push 0x80004003
call fcn.0049fa80
lea eax, [ebp - 0x258]
push eax
mov ecx, ebx
call fcn.0045adb0
mov eax, dword [eax]
cmp ebx, eax
je 0x465b08
test eax, eax
mov esi, ebx
mov ebx, eax
mov dword [ebp + 0x2c], ebx
je 0x465afc
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
test esi, esi
je 0x465b08
mov eax, dword [esi]
mov ecx, dword [eax + 8]
push esi
call ecx
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x465b1a
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
test ebx, ebx
jne 0x465b28
push 0x80004003
call fcn.0049fa80
lea ecx, [ebp - 0x260]
push ecx
mov ecx, ebx
call fcn.0045adb0
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x37
jne 0x465b4b
jne 0x465c54
cmp dword [ebp - 0x24], 0
jne 0x465bcc
push 0x80004003
call fcn.0049fa80
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x268]
push eax
call fcn.0045aa90
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x38
jne 0x465bf0
push 0x80004003
call fcn.0049fa80
mov edx, dword [ebp - 0x78]
mov ecx, dword [esi]
push edx
lea eax, [ebp - 0x590]
push eax
call fcn.0040b070
mov eax, dword [eax]
mov esi, dword [ebp - 0x90]
cmp esi, eax
je 0x465c2c
test eax, eax
mov dword [ebp - 0x90], eax
je 0x465c20
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
test esi, esi
je 0x465c2c
mov eax, dword [ebp - 0x590]
test eax, eax
je 0x465c3e
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x268]
test eax, eax
mov byte [ebp - 4], 6
je 0x465c54
mov esi, dword [ebp - 0x90]
test esi, esi
jne 0x465c68
push 0x80004003
call fcn.0049fa80
mov eax, dword [esi]
mov ecx, dword [eax + 0x70]
push esi
call ecx
test eax, eax
jge 0x465c80
push 0x4b3c70
push esi
push eax
call fcn.0049fa90
mov word [ebp - 0x800], 3
mov dword [ebp - 0x7f8], 0
mov edi, dword [ebp + 0x40]
cmp dword [edi + 0x114], 0
mov bl, 0x39
mov byte [ebp - 4], bl
jne 0x465cae
push 0x80004003
call fcn.0049fa80
mov ecx, dword [edi + 0x114]
lea edx, [ebp - 0x4e8]
push edx
call fcn.004034e0
mov esi, eax
cmp dword [esi], 0
mov byte [ebp - 4], 0x3a
jne 0x465cd5
push 0x80004003
call fcn.0049fa80
mov esi, dword [esi]
mov eax, dword [esi]
mov edx, dword [eax + 0x13c]
lea ecx, [ebp - 0x800]
push ecx
push esi
call edx
test eax, eax
jge 0x465cf9