Function at 0x463b70
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x493fba
call fcn.00493440
sub esp, 0x278
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x18], 0x3ae35568
mov dword [ebp - 0x18], 0xffffffe6
xor ebx, ebx
xor edi, edi
inc edi
cmp dword [ebp - 0x18], 0xffffffef
jge 0x463c6d
mov dword [ebp - 0x2c], 0x905d
mov dword [ebp - 0x34], 0x5f3d
cmp dword [ebp - 0x34], 0x618b
jle 0x463c0c
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x44], ebx
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00401a98
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x463be1
mov eax, dword [eax]
push eax
call fcn.0047c13a
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1e0]
call fcn.0041c762
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp eax, 0x215f
jl 0x463bc7
inc esi
cmp esi, 0x523f
jl 0x463bc2
mov byte [ebp - 0x11], bl
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x34], 0x5eea
jge 0x463c26
push 0xa928f8
call fcn.0047c13a
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x463c4f
cmp byte [ebp - 0x11], 0
je 0x463c60
push 0xb0f
call dword [0xaa1094]
cmp dword [ebp - 0x2c], ebx
jne 0x463c6d
inc dword [ebp - 0x18]
jmp 0x463b9f
push 2
lea ecx, [ebp - 0x80]
call fcn.0041c40c
mov dword [ebp - 0x1c], 0x1c29000d
mov dword [ebp - 0x18], ebx
jmp 0x463c93
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov dword [eax + ecx*4], 0x13b91020
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x463c83
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], ebx
jl 0x463eb3
mov dword [ebp - 0x24], 0x62751c76
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], ebx
jl 0x463eab
mov dword [ebp - 0x20], 0xb61bab59
mov dword [ebp - 0x20], ebx
jmp 0x463d28
mov dword [ebp - 0x44], 6
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setge dl
imul edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x44], ecx
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
mov eax, dword [ebp - 0x80]
cmp dword [eax + esi*4], edx
setne cl
mov dword [ebp - 0x18], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x463ccb
mov dword [ebp - 0x44], 0x1117
cmp dword [ebp - 0x44], 0x134e
jle 0x463dc6
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, esi
sar eax, cl
mov dword [ebp - 0x2c], eax
or eax, dword [ebp - 0x30]
or eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00401a98
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x463d74
mov eax, dword [eax]
push eax
call fcn.0047c13a
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1f8]
call fcn.0041c762
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x56b3
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
jl 0x463d57
inc esi
cmp esi, 0x3309
mov eax, dword [ebp - 0x28]
jl 0x463d4d
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x2d83
jl 0x463d4b
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x797f
jl 0x463d46
push ebx
call dword [0xaa1110]
mov dword [ebp - 0x18], ebx
jmp 0x463e56
mov dword [ebp - 0x20], ebx
jmp 0x463e3e
mov dword [ebp - 0x28], 0x95e0e2bf
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov dword [ebp - 0x28], ebx
jmp 0x463e36
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x80]
cmp dword [eax + ecx*4], 0xffffffff
jne 0x463e0b
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x80]
cmp dword [eax + ecx*4], ebx
je 0x463e0e
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x80]
cmp dword [eax + ecx*4], 0x618d
setg dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, dword [ebp - 0x80]
mov dword [eax + esi*4], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jle 0x463dee
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x463dd3
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x463e53
push ebx
call dword [0xaa1288]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x463dce
mov dword [ebp - 4], 2
cmp dword [ebp - 0x44], 0xd4b
jge 0x463e7a
push 0xa92918
call fcn.0047c13a
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x463ea3
dec dword [ebp - 0x24]
jmp 0x463cb6
dec dword [ebp - 0x1c]
jmp 0x463c9c
lea ecx, [ebp - 0x80]
call fcn.0041c810
mov eax, dword [0xa9fb24]
test al, 1
jne 0x463f3f
or eax, edi
mov dword [0xa9fb24], eax
mov dword [0xa9fb30], ebx
mov dword [0xa9fb34], ebx
push ebx
push ebx
call fcn.004423f3
mov dword [0xa9fb30], eax
mov dword [0xa9fb38], ebx
mov dword [0xa9fb40], ebx
mov dword [0xa9fb4c], 0x3f800000
mov dword [ebp - 0xc8], eax
mov dword [0xa9fb3c], ebx
lea eax, [ebp - 0xc8]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x134]
push eax
mov ecx, 0xa9fb38
call fcn.00442198
mov dword [0xa9fb44], 7
mov dword [0xa9fb48], 8
push 0x494721
call fcn.0047c110
pop ecx
mov dword [ebp - 0x18], 0x3df603fa
mov dword [ebp - 0x1c], 0x33037736
mov dword [ebp - 0x4c], 0x9918c6a8
mov dword [ebp - 0x38], 0xb42b8ff
mov dword [ebp - 0x28], 0xce570888
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x48], 0x75c2
mov dword [ebp - 0x20], ebx
jmp 0x463f83
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x54], 0x68c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x463f75
mov dword [ebp - 0x20], ebx
jmp 0x463f9c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x58], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x463f8e
mov dword [ebp - 0x20], ebx
jmp 0x463fb3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1a0], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x463fa6
mov dword [ebp - 0x20], ebx
jmp 0x463fcf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe8], 0x821d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x463fbe
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x54]
xor edx, edx
cmp ecx, eax
sete dl
mov eax, dword [ebp - 0x50]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x54]
jle 0x46400c
cmp dword [ebp - 0x1c], ebx
mov ecx, edi
jne 0x46400e
mov ecx, ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setle dl
mov eax, dword [ebp - 0x50]
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
cmp ecx, 4
setge dl
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
setg cl
cmp ecx, 0xfffd
jae 0x46405a
mov dword [ebp - 0x1c], ebx
jmp 0x46404f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x54], 0xfff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x464041
jmp 0x46415a
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x34], 0x6f76
cmp dword [ebp - 0x34], 0x7245
jle 0x4640fd
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x2c], ebx
cdq
idiv esi
mov eax, ecx
mov ecx, edx
shl eax, cl
mov dword [ebp - 0x40], eax
mov esi, ebx
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x210]
call fcn.00401a98
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4640ad
mov eax, dword [eax]
push eax
call fcn.0047c13a
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x210]
call fcn.0041c762
inc esi
cmp esi, 0x2d0f
mov eax, dword [ebp - 0x40]
jl 0x464091
mov esi, dword [ebp - 0x44]
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x5924
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
jl 0x464080
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x3ec6
jl 0x46407b
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x300b
jl 0x464076
cmp byte [ebp - 0x11], 0
je 0x464116
push ebx
push ebx
push 0x84e
push 0x169c
push ebx
call dword [0xaa13d4]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x34], 0x6f6b
jge 0x464131
push 0xa92980
call fcn.0047c13a
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x46415a
mov eax, dword [ebp - 0xe8]
dec eax
add eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
neg eax
mov ecx, dword [ebp - 0xe8]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x58]
add ecx, eax
mov eax, dword [ebp - 0x58]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
imul ecx, eax
test ecx, ecx
je 0x46418e
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1a0]
inc dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1c]
sub eax, 0x3a25c5db
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x54]
jl 0x464332
push edi
lea ecx, [ebp - 0xa8]
call fcn.0041c40c
mov dword [ebp - 0x18], ebx
jmp 0x4641fb
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 0xfffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4641e8
mov dword [ebp - 0x28], 0x3d3b
cmp dword [ebp - 0x28], 0x3fbb
jle 0x46426a
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x44], 0x4e02
mov esi, ebx
mov edi, ebx
mov ebx, eax
and ebx, esi
mov eax, ebx
or eax, edi
cdq
push edx
push eax
mov ecx, 0xa9e7e8
call fcn.0041c2f7
inc edi
cmp edi, 0x41a8
jl 0x464227
inc esi
cmp esi, 0x596f
push 0
pop ebx
mov eax, dword [ebp - 0x30]
jl 0x464221
dec eax
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x44]
jne 0x46421f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x6bcc
jl 0x464215
xor edi, edi
inc edi
mov ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
neg ecx
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx]
add eax, ecx
jne 0x464293
cmp dword [ebp - 0xe4], ebx
mov edx, dword [ebp - 0xa8]
jne 0x464293
cmp dword [edx], ebx
mov eax, ebx
je 0x464295
mov eax, edi
xor ecx, ecx
cmp dword [edx], eax
setg cl
xor eax, eax
cmp ecx, 6
setne al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp eax, 0x55b5
setl dl
mov eax, dword [ebp - 0xa8]
mov esi, dword [eax]
mov eax, dword [ebp - 0x24]
sub edx, eax
xor ecx, ecx
test edx, edx
setle cl
mov eax, esi
sub eax, ecx
xor ecx, ecx
cmp eax, 0xffffffff
setge cl
imul ecx, esi
add ecx, dword [ebp - 0x50]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 4], 6
cmp dword [ebp - 0x28], 0x3a8a
jge 0x4642fc
mov edx, 0xa929c0
mov ecx, 0xa9e7e8
call fcn.0041dd76
or dword [ebp - 4], 0xffffffff
jmp 0x464325
lea ecx, [ebp - 0xa8]
call fcn.0041c810
jmp 0x464399
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x30], 0xc06be8e6
imul eax, dword [ebp - 0x24], 6
test eax, eax
je 0x464377
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0x8e06
setne cl
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x50]
sub ecx, eax
mov eax, dword [ebp - 0x28]
imul eax, ecx
sub eax, 0xfffffff7
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
setne dl
neg edx
jne 0x46438f
cmp dword [ebp - 0x30], ebx
mov ecx, ebx
je 0x464391
mov ecx, edi
mov eax, dword [ebp - 0x58]
add eax, ecx
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x64], 0x2710
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x18], 0x1824a8c6
mov dword [ebp - 0x38], 0x6ccb0362
mov dword [ebp - 0x2c], 0xe4b28306
mov dword [ebp - 0x38], 0x9d01078
push 4
lea ecx, [ebp - 0x14c]
call fcn.0041c40c
push 3
pop esi
push esi
lea ecx, [ebp - 0xfc]
call fcn.0041c40c
mov dword [ebp - 0x1c], ebx
jmp 0x4643f9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0x2b000cd9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x4643e6
mov dword [ebp - 0x1c], ebx
jmp 0x464417
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x464404
mov dword [ebp - 0x18], ebx
jmp 0x464498
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x38], 0x327439cb
push 2
lea ecx, [ebp - 0x190]
call fcn.0041c40c
mov dword [ebp - 0x38], 0x3700
mov dword [ebp - 0x24], ebx
jmp 0x46445b
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0xdb85613
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x464448
mov dword [ebp - 0x24], 0xffffffe7
jmp 0x46447c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x464479
call dword [0xaa1240]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff0
jne 0x46446a
mov eax, dword [ebp - 0xfc]
dec dword [eax]
lea ecx, [ebp - 0x190]
call fcn.0041c810
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jne 0x464421
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0xfc]
call fcn.0041c810
lea ecx, [ebp - 0x14c]
call fcn.0041c810
lea eax, [ebp - 0x90]
push eax
call fcn.004657fc
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], 0x7ddc85f7
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 4
je 0x464582
mov eax, 0x9b546158
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb8], ebx
cmp dword [ebp - 0xb8], 0xd
jge 0x464575
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0xfffffff5
jmp 0x464544
cmp byte [ebp - 0x11], 0
je 0x464541
push 0x221e
push 0x1e9d
push 0x1a6d
push 0x2282
push 0x22f6
push 0x1eec
call dword [0xaa1054]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 8
mov byte [ebp - 0x11], bl
jl 0x464517
cmp byte [ebp - 0x11], 0
je 0x464561
push 0xcbe
push ebx
push ebx
push ebx
call dword [0xaa1274]
inc dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 0xd
jl 0x46450b
mov eax, 0x9b546158
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jne 0x4644e4
cmp dword [ebp - 0x44], 0
je 0x4645c9
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x4645b5
mov dword [ebp - 0x24], 0x53aa9ac7
mov dword [ebp - 0x24], 0xe
jmp 0x4645ac
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff5
jl 0x4645a3
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe2
jl 0x464593
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xc4], eax
jmp 0x465715
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], ebx
jmp 0x4645e2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x284], 0x9b55
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x4645d1
mov dword [ebp - 0x28], ebx
jmp 0x464624
mov dword [ebp - 0x24], 0x252604
mov dword [ebp - 0x24], ebx
jmp 0x46461c
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], ebx
jmp 0x464614
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x464611
push ebx
call dword [0xaa106c]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x464601
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x4645f9
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x4645ed
mov eax, dword [0xa9fb24]
test al, 2
jne 0x4646ae
or eax, 2
mov dword [0xa9fb24], eax
mov dword [0xa9fb50], ebx
mov dword [0xa9fb54], ebx
push ebx
push ebx
call fcn.004423f3
mov dword [0xa9fb50], eax
mov dword [0xa9fb58], ebx
mov dword [0xa9fb60], ebx
mov dword [0xa9fb6c], 0x3f800000
mov dword [ebp - 0xcc], eax
mov dword [0xa9fb5c], ebx
lea eax, [ebp - 0xcc]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x124]
push eax
mov ecx, 0xa9fb58
call fcn.00442198
mov dword [0xa9fb64], 7
mov dword [0xa9fb68], 8
push 0x49471c
call fcn.0047c110
pop ecx
push edi
lea ecx, [ebp - 0x108]
call fcn.0041c40c
mov dword [ebp - 0x1c], ebx
jmp 0x4646cf
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x108]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x4646bf
mov dword [ebp - 0x1c], ebx
jmp 0x4646ea
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x88], 0x7c7ce53d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x4646d9
mov dword [ebp - 0x88], ebx
cmp dword [ebp - 0x88], ebx
jl 0x464710
mov dword [ebp - 0x34], 0x4c8d3c89
dec dword [ebp - 0x34]
dec dword [ebp - 0x88]
jns 0x4646fe
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
lea ecx, [ebp - 0x108]
call fcn.0041c810
mov dword [ebp - 0x18], 0x78b3
cmp dword [ebp - 0x18], 0x7bd3
jle 0x4647a4
push 0x1a32
call dword [0xaa1348]
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x4c], 0x1f3a
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov ebx, esi
mov esi, 0x65d
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xa9e7e8
call fcn.0041c2f7
dec ebx
dec esi
jne 0x46475c
mov esi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x4432
jl 0x464755
mov eax, dword [ebp - 0x30]
add edi, eax
dec dword [ebp - 0x4c]
push 0
pop ebx
jne 0x464750
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x2898
jl 0x464747
push ebx
call dword [0xaa12ec]
xor edi, edi
inc edi
xorps xmm0, xmm0
movdqu xmmword [ebp - 0xdc], xmm0
mov dword [ebp - 4], 8
cmp dword [ebp - 0x18], 0x77a9
jge 0x4647ce
mov edx, 0xa92a10
mov ecx, 0xa9e7e8
call fcn.0041dd76
or dword [ebp - 4], 0xffffffff
jmp 0x4647f7
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x464810
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x60], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x464806
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
mov eax, dword [ebp - 0x60]
xor edx, edx
cmp ecx, eax
sete dl
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0xee61
setne cl
xor eax, eax
test ecx, ecx
sets al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x24]
sub eax, 8
xor edx, edx
cmp eax, dword [ebp - 0x2c]
setg dl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, 0xab3cf813
cmp eax, ecx
sbb edx, edx
neg edx
sub edx, 9
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x24], ecx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x46489a
push ebx
push 0xba8
push 0x1b01
call dword [0xaa10a8]
lea eax, [ebp - 0x64]
push eax
call fcn.0046585e
mov esi, dword [eax]
mov dword [ebp - 0x24], esi
push 2
lea ecx, [ebp - 0x174]
call fcn.0041c40c
mov dword [ebp - 0x18], 0x490c4d8e
mov dword [ebp - 0x18], ebx
jmp 0x4648d4
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 0xd3df
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x4648c1
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x4648f7
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4648f2
push ebx
call dword [0xaa125c]
dec dword [ebp - 0x18]
jns 0x4648e2
lea ecx, [ebp - 0x174]
call fcn.0041c810
mov al, byte [ebp + 0xc]
test al, al
jne 0x464911
test esi, esi
jne 0x464b80
lea ecx, [ebp - 0x274]
push ecx
mov dl, al
mov ecx, dword [ebp - 0x64]
call fcn.0045638c
pop ecx
mov esi, eax
lea edi, [ebp - 0xdc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
inc edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x40], 0x9a164e6
mov dword [ebp - 0x48], 0x92657cf7
mov dword [ebp - 0x28], edi
jmp 0x464b54
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x2c], 0x76881957
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x1c], ebx
jmp 0x464975
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x184], 0xc0e2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x464964
mov dword [ebp - 0x1c], ebx
jmp 0x464991
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x154], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x464980
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4649bd
push ebx
push 0x678
push 0xec4
push ebx
push 0x20c1
push 0x1128
push ebx
call dword [0xaa1260]
mov dword [ebp - 0x4c], 0x1e12
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edi
setg cl
mov eax, dword [ebp - 0x180]
sub ecx, eax
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, ecx
setge dl
mov eax, dword [ebp - 0x184]
xor ecx, ecx
cmp edx, eax
setl cl
cmp dword [ebp - 0x1c], ecx
jl 0x464b3b
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x18], 0x1904e20e
mov dword [ebp - 0x1c], ebx
push 3
pop esi
jmp 0x464b10
push esi
lea ecx, [ebp - 0x120]
call fcn.0041c40c
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x38], 0xe816884a
mov dword [ebp - 0x2c], 0xf116e8cf
mov dword [ebp - 0x20], ebx
jmp 0x464a5c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0x467bb1a8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x464a49
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x48]
mov ecx, 0x89188b9a
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x154], eax
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x38], edx
mov ecx, dword [ebp - 0x30]
add ecx, eax
imul ecx, dword [edx + 8]
mov eax, dword [ebp - 0x4c]
xor edx, edx
cmp eax, ecx
setge dl
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setge cl
cmp dword [ebp - 0x20], ecx
je 0x464ab5
cmp dword [ebp - 0x40], ebx
je 0x464ab5
cmp dword [ebp - 0x18], ebx
mov eax, edi
jne 0x464ab7
mov eax, ebx
inc dword [ebp - 0x34]
xor ecx, ecx
cmp eax, 0x5d0c9ad5
setl cl
neg ecx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x48]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, edx
setle cl
imul ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp dword [eax + 8], ecx
setle dl
mov eax, dword [ebp - 0x28]
add eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x2c]
lea ecx, [ebp - 0x120]
call fcn.0041c810
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x464a23
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x464b51
push 0x2665
push 0x1f47
push edi
push ebx
push 0xc6d
call dword [0xaa13a4]
jmp 0x464b51
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x464b51
push 0x660
push ebx
push ebx
call dword [0xaa1244]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 7
jge 0x464952
cmp byte [ebp + 0xc], 0
je 0x464b80
mov ecx, dword [ebp - 0xd4]
test ecx, ecx
je 0x464b80
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x28], ebx
jmp 0x464b9d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1c8], 0x7be9fb1c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x464b8c
mov dword [ebp - 0x40], 0x6a48
cmp dword [ebp - 0x40], 0x6d6c
jle 0x464c24
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x34]
add eax, esi
add eax, edi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xa9e7e8
call fcn.0041c2f7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x248
jl 0x464bc2
inc esi
cmp esi, 0xe8e
push 0
pop ebx
jl 0x464bba
inc edi
cmp edi, 0x342a
jl 0x464bb8
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x6351
jl 0x464bb6
push ebx
push 0x2517
push 0x24d3
push 0xeb6
push 0x1a37
call dword [0xaa13e0]
xor edi, edi
inc edi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x464c38
push 0x7b9
call dword [0xaa1064]
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x40], 0x6670
jge 0x464c57
mov edx, 0xa92a6c
mov ecx, 0xa9e7e8
call fcn.0041dd76
or dword [ebp - 4], 0xffffffff
jmp 0x464c80
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setge dl
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x1c4], ecx
test esi, esi
jne 0x4654f5
cmp dword [ebp - 0xdc], esi
jle 0x4654f5
push 2
lea ecx, [ebp - 0x9c]
call fcn.0041c40c
mov dword [ebp - 0x2c], 0x56e9
cmp dword [ebp - 0x2c], 0x5840
jle 0x464d1d
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov eax, ebx
xor eax, esi
or eax, edi
cdq
push edx
push eax
mov ecx, 0xa9e7e8
call fcn.0041c2f7
inc ebx
cmp ebx, 0x27f0
jl 0x464ce9
inc esi
cmp esi, 0x2368
push 0
pop ebx
jl 0x464ce6
inc edi
cmp edi, 0x69a8
jl 0x464ce4
xor edi, edi
inc edi
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x2c], 0x565b
jge 0x464d43
mov edx, 0xa92b00
mov ecx, 0xa9e7e8
call fcn.0041dd76
or dword [ebp - 4], 0xffffffff
jmp 0x464d6c
mov dword [ebp - 0x34], 0xca955a63
mov dword [ebp - 0x28], 0x2426f379
mov dword [ebp - 0x18], ebx
jmp 0x464d92
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0x57fd5464
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x464d7f
mov dword [ebp - 0x20], ebx
jmp 0x464e6a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
imul eax, eax, 0xffff
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
je 0x464dd0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x9c]
cmp dword [eax + ecx*4], ebx
je 0x464dd0
cmp dword [ebp - 0x34], ebx
mov esi, edi
jne 0x464dd2
mov esi, ebx
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x9c]
cmp esi, dword [ecx + eax*4]
setle dl
cmp edx, dword [ecx]
jge 0x464dee
cmp dword [ebp - 0x20], ebx
mov eax, edi
jne 0x464df0
mov eax, ebx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x9c]
cmp dword [ecx + eax*4], edi
setg dl
imul edx, dword [ecx + esi*4]
test edx, edx
je 0x464e49
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x464e39
push 0x685
push ebx
push 0xd77
push 0x17dd
push 0x41e
call dword [0xaa10b0]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x9c]
cmp dword [eax + ecx*4], ebx
jne 0x464e73
jmp 0x464e67
mov dword [ebp - 0x28], ebx
jmp 0x464e61
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0x5ee6d54e
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x464e4e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x464da0
lea ecx, [ebp - 0x9c]
call fcn.0041c810
mov dword [ebp - 0x28], 0xe1757117
mov dword [ebp - 0x38], 0x1dbeccce
mov dword [ebp - 0x38], 0x7ad4351c
push edi
lea ecx, [ebp - 0x160]
call fcn.0041c40c
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x464eb6
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x464ea7
mov dword [ebp - 0x28], 0xffffffe4
push 0xfffffffffffffff6
pop esi
jmp 0x464f23
mov dword [ebp - 0x38], 0x9e92
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x38], 0x7e71
mov dword [ebp - 0x18], ebx
jmp 0x464efc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x21c], 0xb3895196
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x464eeb
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x464f1d
push ebx
push ebx
push 0xa63
push 0x1ae8
call dword [0xaa13d0]
inc dword [ebp - 0x2c]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jg 0x464ec7
lea ecx, [ebp - 0x160]
call fcn.0041c810
mov dword [ebp - 0x18], 0x7d45db34
mov dword [ebp - 0x38], 0x45ccb972
mov dword [ebp - 0x2c], 0x87a5eafb
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x20], ebx
jmp 0x464f61
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x168], 0x64a11600
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x464f50
mov dword [ebp - 0x20], ebx
jmp 0x464f7d
mov dword [ebp - 0x28], 0xdb3ae355
mov dword [ebp - 0x28], 6
jmp 0x465578
push 2
lea ecx, [ebp - 0x140]
call fcn.0041c40c
mov dword [ebp - 0x18], 0x83111738
mov dword [ebp - 0x18], ebx
jmp 0x46552d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x46551e
mov dword [ebp - 0x18], ebx
jmp 0x465550
cmp byte [ebp - 0x11], 0
je 0x46554a
push ebx
push 0x1033
call dword [0xaa109c]
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
mov byte [ebp - 0x11], bl
jle 0x465538
cmp byte [ebp - 0x11], 0
je 0x46556a
push ebx
push 0x23d1
call dword [0xaa12a4]
lea ecx, [ebp - 0x140]
call fcn.0041c810
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff5
je 0x465505
lea ecx, [ebp - 0xdc]
call fcn.004603ca
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x30], 0xffffffe5
cmp dword [ebp - 0x30], 0xfffffff7
jl 0x46567d
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4655b3
push ebx
push ebx
push ebx
call dword [0xaa126c]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x465675
mov dword [ebp - 0x48], 0x2e23
cmp dword [ebp - 0x48], 0x31ab
jle 0x465620
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x40], 0x590
cdq
push edx
push eax
lea ecx, [ebp - 0x24c]
call fcn.00401a98
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4655f6
mov eax, dword [eax]
push eax
call fcn.0047c13a
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x24c]
call fcn.0041c762
mov eax, dword [ebp - 0x2c]
add eax, esi
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x40]
jne 0x4655de
inc esi
cmp esi, 0xc1f
jl 0x4655d2
push 0xfc5
push ebx
push ebx
push ebx
call dword [0xaa1084]
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x48], 0x2a52
jge 0x465649
push 0xa92c7c
call fcn.0047c13a
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x465672
mov esi, dword [ebp - 0x24]
inc dword [ebp - 0x30]
jmp 0x465597
cmp dword [ebp - 0x44], 0
jne 0x465715
test esi, esi
je 0x465715
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x24], ebx
jmp 0x4656ac
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1b8], 0x7be9fb1c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x46569b
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4656c6
push 0x7b9
call dword [0xaa1064]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setge dl
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x1b4], ecx
push dword [ebp - 0x5c]
push esi
call fcn.0041c1c8
pop ecx
pop ecx
mov esi, eax
mov dword [ebp - 0xc4], esi
lea eax, [ebp - 0x90]
push eax
call fcn.004657fc
mov dword [eax], esi
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret