Function at 0x46c614
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4d8
mov qword [rsp + 0x3c8], 0xfffffffffffffffe
mov r14, rdx
mov rdi, rcx
mov r12, qword [rsp + 0x558]
mov rax, qword [r12 + 0x20]
mov ecx, 1
xor esi, esi
cmp rax, rsi
cmove rax, rcx
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x88], rsi
mov rbx, qword [rsp + 0x550]
mov rax, qword [rbx]
lea r8, [rsp + 0x88]
lea rdx, [0x004d4060]
mov rcx, rbx
call qword [rax]
mov qword [rsp + 0x98], rsi
mov rax, qword [rbx]
lea r8, [rsp + 0x98]
lea rdx, [0x004d40f0]
mov rcx, rbx
call qword [rax]
xor r11d, r11d
cmp r14, r11
je 0x46c6c7
mov r9, qword [r14 + 0x168]
jmp 0x46c6ca
mov r9, r11
cmp r9, r11
jbe 0x46c728
cmp byte [r12 + 0x32], r11b
jne 0x46c728
mov qword [rsp + 0x20], r11
xor r8d, r8d
mov rdx, qword [rsp + 0x548]
mov rcx, rdi
call fcn.0046b560
mov ebx, eax
xor r11d, r11d
cmp eax, r11d
je 0x46c728
mov rcx, qword [rsp + 0x98]
cmp rcx, r11
je 0x46c70e
mov rdx, qword [rcx]
call qword [rdx + 0x10]
xor r11d, r11d
mov rcx, qword [rsp + 0x88]
cmp rcx, r11
je 0x46c721
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x470d76
mov rsi, r11
mov qword [rsp + 0x110], r11
mov r10, r11
mov qword [rsp + 0x1b0], r11
mov rdi, r11
mov qword [rsp + 0x1c8], r11
mov byte [rsp + 0xa0], r11b
mov rbp, r11
mov qword [rsp + 0x148], r11
mov dword [rsp + 0x150], r11d
mov dword [rsp + 0x154], r11d
mov r15, r11
mov qword [rsp + 0xc0], r11
mov r13d, r11d
mov dword [rsp + 0xc8], r11d
mov dword [rsp + 0xcc], r11d
mov bl, r11b
mov byte [rsp + 0x81], r11b
mov al, byte [r12 + 0x10]
mov byte [rsp + 0x80], al
cmp al, r11b
je 0x46c832
mov rax, qword [r12]
mov r8d, r11d
mov r9d, dword [rax + 8]
cmp r9d, r11d
jbe 0x46c832
mov rdx, qword [rax]
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov eax, 0xffffffff
cmp rcx, rax
ja 0x46c81c
mov eax, 0x3030205
cmp ecx, eax
ja 0x46c7fc
cmp ecx, eax
je 0x46c82a
sub ecx, 3
je 0x46c82a
sub ecx, 0x202ff
je 0x46c82a
sub ecx, 2
je 0x46c82a
sub ecx, 0x300fdff
je 0x46c82a
cmp ecx, 0x18
je 0x46c82a
jmp 0x46c81c
cmp ecx, 0x3030401
je 0x46c82a
cmp ecx, 0x3030501
je 0x46c82a
cmp ecx, 0x3030701
je 0x46c82a
cmp ecx, 0x3030805
je 0x46c82a
inc r8d
add rdx, 8
cmp r8d, r9d
jae 0x46c832
jmp 0x46c7bd
mov byte [rsp + 0x80], r11b
cmp r14, r11
je 0x46cd1d
mov ebx, dword [r14 + 0x90]
xor ecx, ecx
call fcn.00402358
xor eax, eax
mov qword [rsp + 0x110], rax
mov rcx, rbx
shl rcx, 2
call fcn.0040232c
mov rsi, rax
mov qword [rsp + 0x110], rax
xor r11d, r11d
mov ecx, r11d
cmp dword [r14 + 0x90], r11d
jbe 0x46c892
lea edx, [r11 + 1]
mov dword [rax], 0xffffffff
add ecx, edx
add rax, 4
cmp ecx, dword [r14 + 0x90]
jb 0x46c87d
mov edx, r11d
mov r9, qword [rsp + 0x530]
cmp dword [r9 + 8], r11d
jbe 0x46c8ca
mov r8, r11
mov rax, qword [r9]
mov rcx, qword [r8 + rax]
cmp dword [rcx], 0xffffffff
je 0x46c8b7
mov eax, dword [rcx]
mov dword [rsi + rax*4], edx
mov ecx, 1
add edx, ecx
add r8, 8
cmp edx, dword [r9 + 8]
jb 0x46c8a6
jmp 0x46c8cf
mov ecx, 1
mov r10d, r11d
mov dword [rsp + 0x90], r11d
mov r12, r11
cmp dword [r14 + 4], r11d
jbe 0x46cd0c
mov r9d, r11d
mov ebx, r11d
mov rax, qword [r14 + 0x30]
mov edi, dword [rax + r12*4]
mov r14, r11
mov rbp, qword [rsp + 0x528]
mov rax, qword [rbp + 0x198]
movsxd rdx, dword [rax + r12*4]
cmp edi, r11d
jbe 0x46ccc3
lea r8, [rsi + rdx*4]
shl rdx, 4
add rdx, qword [rbp + 0x88]
mov rsi, qword [rsp + 0x530]
cmp byte [rdx + 0xc], r11b
je 0x46c95a
add r9d, ecx
cmp dword [r8], r11d
jl 0x46c95a
mov ecx, dword [r8]
mov rax, qword [rsi]
mov rcx, qword [rax + rcx*8]
cmp byte [rcx + 0x3c], r11b
jne 0x46c955
mov ecx, 1
add ebx, ecx
add r14, qword [rdx]
jmp 0x46c95a
mov ecx, 1
add rdx, 0x10
add r8, 4
cmp r9d, edi
jb 0x46c92b
cmp ebx, r11d
mov rsi, qword [rsp + 0x110]
je 0x46ccc3
mov dword [rsp + 0x118], r10d
mov dword [rsp + 0x11c], ebx
mov qword [rsp + 0x1e8], r11
mov dword [rsp + 0x1f0], r11d
mov qword [rsp + 0x1f8], r11
mov dword [rsp + 0x200], r11d
mov qword [rsp + 0x208], r11
mov dword [rsp + 0x210], r11d
lea r8, [rsp + 0x1e8]
mov edx, r10d
mov rcx, rbp
call fcn.004656e0
mov r11, qword [rbp + 0x50]
movzx r10d, byte [r11 + r12]
mov dword [rsp + 0x218], r10d
xor r11d, r11d
mov ecx, r11d
mov r9, qword [rsp + 0x1e8]
mov edx, dword [rsp + 0x1f0]
cmp edx, r11d
jbe 0x46ca17
mov rax, r9
lea r8d, [r11 + 1]
cmp qword [rax], 0x6f10701
je 0x46ca12
add ecx, r8d
add rax, 0x20
cmp ecx, edx
jb 0x46c9fc
jmp 0x46ca17
mov bpl, r8b
jmp 0x46ca1a
mov bpl, r11b
cmp ebx, edi
sete dil
cmp byte [rsp + 0x80], r11b
jne 0x46ca39
cmp dil, r11b
jne 0x46ca39
mov r8b, r11b
mov ebx, 1
jmp 0x46ca41
mov ebx, 1
mov r8b, bl
mov dword [rsp + 0x138], r11d
mov dword [rsp + 0x13c], r11d
mov ecx, r11d
cmp edx, r11d
jbe 0x46ca75
mov rax, r9
cmp qword [rax], 0x6f10701
je 0x46ca71
add ecx, ebx
add rax, 0x20
cmp ecx, edx
jb 0x46ca5c
jmp 0x46ca75
mov al, bl
jmp 0x46ca78
mov al, r11b
mov byte [rsp + 0x140], al
cmp r8b, r11b
je 0x46cb61
mov rcx, r10
shl rcx, 5
add rcx, r9
mov rax, qword [rcx]
cmp rax, 3
jne 0x46cac5
cmp qword [rcx + 0x10], rbx
jne 0x46cb61
mov rax, qword [rcx + 8]
movzx ecx, byte [rax]
add ecx, ebx
mov dword [rsp + 0x13c], ecx
mov dword [rsp + 0x138], 3
jmp 0x46cb61
mov edx, 0x3030103
sub rax, rdx
je 0x46cafd
sub rax, 0x18
je 0x46cafd
sub rax, 0xea
je 0x46cafd
sub rax, 0x1fc
je 0x46cafd
sub rax, 0x100
je 0x46cafd
sub rax, 0x200
je 0x46cafd
cmp rax, 0x104
jne 0x46cb61
mov ecx, dword [rcx]
cmp ecx, 0x303011b
cmove ecx, edx
mov dword [rsp + 0x138], ecx
cmp ecx, 0x3030401
jne 0x46cb24
mov dword [rsp + 0x13c], 0x10
jmp 0x46cb61
cmp ecx, 0x3030501
je 0x46cb56
cmp ecx, 0x3030205
je 0x46cb56
cmp ecx, 0x3030805
je 0x46cb56
mov eax, r11d
cmp ecx, 0x3030701
mov ecx, 2
cmove eax, ecx
mov dword [rsp + 0x13c], eax
jmp 0x46cb61
mov dword [rsp + 0x13c], 4
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x148]
call fcn.0046ba54
mov ebx, eax
cmp eax, r13d
jb 0x46cbd3
xor esi, esi
mov ecx, 0x20
call fcn.0040232c
cmp rax, rsi
je 0x46cba3
mov qword [rax], rsi
mov dword [rax + 8], esi
mov dword [rax + 0xc], esi
mov qword [rax + 0x10], rsi
mov dword [rax + 0x18], esi
mov dword [rax + 0x1c], esi
jmp 0x46cba6
mov rax, rsi
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.0041ba5c
mov r13d, dword [rsp + 0xc8]
cmp ebx, r13d
jae 0x46cb7f
mov rsi, qword [rsp + 0x110]
mov r15, qword [rsp + 0xc0]
mov rcx, qword [r15 + rbx*8]
add rcx, 0x10
mov rdx, qword [rsp + 0x118]
call fcn.0047544c
xor ecx, ecx
cmp dil, cl
je 0x46cc1a
mov rax, qword [rsp + 0x528]
mov r8, qword [rax + 8]
mov rcx, qword [rax + 0x48]
mov eax, dword [rcx + r12*4]
mov ecx, dword [rcx + r12*4 + 4]
mov rdx, qword [r8 + rcx*8]
sub rdx, qword [r8 + rax*8]
add qword [rsp + 0x1b0], rdx
jmp 0x46cc5c
mov edx, 1
mov byte [rsp + 0x81], dl
add qword [rsp + 0x1b0], r14
mov rax, qword [rsp + 0x1c8]
cmp rax, r14
cmovb rax, r14
mov qword [rsp + 0x1c8], rax
mov eax, dword [rsp + 0xa0]
movzx eax, al
cmp bpl, cl
cmovne eax, edx
mov dword [rsp + 0xa0], eax
mov rcx, qword [rsp + 0x208]
call fcn.00402358
mov rcx, qword [rsp + 0x1f8]
call fcn.00402358
mov rcx, qword [rsp + 0x1e8]
xor r11d, r11d
cmp rcx, r11
je 0x46ccb6
lea rbx, [rcx - 8]
lea r9, [fcn.004592cc]
mov r8d, dword [rbx]
lea edx, [r11 + 0x20]
call fcn.004c9500
mov rcx, rbx
call fcn.00402358
mov r10d, dword [rsp + 0x90]
xor r11d, r11d
lea ecx, [r11 + 1]
jmp 0x46ccc3
mov r10d, dword [rsp + 0x90]
mov ecx, 1
add r10d, ecx
mov dword [rsp + 0x90], r10d
add r12, rcx
mov r14, qword [rsp + 0x528]
cmp r10d, dword [r14 + 4]
jb 0x46c8e7
mov rbp, qword [rsp + 0x148]
mov rdi, qword [rsp + 0x1c8]
mov bl, byte [rsp + 0x81]
mov r9, qword [rsp + 0x530]
mov r10, qword [rsp + 0x1b0]
jmp 0x46cd25
mov bl, byte [rsp + 0x81]
mov r10, qword [rsp + 0x1b0]
jmp 0x46cd25
mov r9, qword [rsp + 0x530]
mov rax, r11
mov qword [rsp + 0x230], r11
mov r8d, r11d
cmp dword [r9 + 8], r11d
jbe 0x46cd9b
mov rdx, qword [r9]
mov r11, qword [rsp + 0x268]
xor r14d, r14d
lea esi, [r14 + 1]
mov rcx, qword [rdx]
cmp byte [rcx + 0x3c], r14b
je 0x46cd7c
mov rcx, qword [rcx + 0x20]
add r10, rcx
cmp r11, rsi
je 0x46cd6d
add rax, rcx
mov qword [rsp + 0x230], rax
jmp 0x46cd7c
cmp rax, rcx
cmovb rax, rcx
mov qword [rsp + 0x230], rax
add r8d, esi
add rdx, 8
cmp r8d, dword [r9 + 8]
jb 0x46cd4b
mov qword [rsp + 0x1b0], r10
mov rsi, qword [rsp + 0x110]
jmp 0x46cd9e
xor r14d, r14d
cmp rax, rdi
cmovb rax, rdi
mov qword [rsp + 0x230], rax
mov rdi, qword [rsp + 0x550]
mov rax, qword [rdi]
mov rdx, r10
mov rcx, rdi
call qword [rax + 0x18]
mov r12d, eax
cmp eax, r14d
je 0x46ce5a
movsxd rax, r13d
cmp r13d, r14d
je 0x46ce10
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46ce0b
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46cdde
mov rcx, r15
call fcn.00402358
nop
mov rcx, rbp
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46ce3f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46ce52
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
mov ecx, 0x48
call fcn.0040232c
mov qword [rsp + 0x228], rax
cmp rax, r14
je 0x46ce86
mov rcx, rax
call fcn.00410f64
mov r14, rax
mov qword [rsp + 0x220], rax
jmp 0x46ce8e
mov qword [rsp + 0x220], r14
mov qword [rsp + 0x3c0], r14
xor r12d, r12d
cmp r14, r12
je 0x46cea8
mov rax, qword [r14]
mov rcx, r14
call qword [rax + VariantCopy]
nop
mov r8b, 1
mov rdx, rdi
mov rcx, r14
call fcn.00410e58
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0xe0], r12
mov qword [rsp + 0xe8], r12
mov rdi, qword [rsp + 0x558]
cmp byte [rdi + 0x33], r12b
je 0x46cfc4
lea rcx, [rsp + 0xd8]
call fcn.00411064
mov r12d, eax
xor eax, eax
cmp r12d, eax
je 0x46cfc4
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
xor eax, eax
cmp r14, rax
je 0x46cf34
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46cf7a
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46cf75
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46cf48
mov rcx, r15
call fcn.00402358
nop
mov rcx, rbp
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46cfa9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46cfbc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
mov dl, byte [rdi + 0x33]
lea rcx, [rsp + 0x2b0]
call fcn.0046bb98
nop
xor edx, edx
cmp byte [rdi + 0x33], dl
je 0x46d0d9
cmp bl, dl
je 0x46d0d9
lea rcx, [rsp + 0x2b0]
call fcn.00411ae8
mov r12d, eax
xor edx, edx
cmp eax, edx
je 0x46d0d9
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
xor eax, eax
cmp r14, rax
je 0x46d049
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46d08f
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46d08a
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46d05d
mov rcx, r15
call fcn.00402358
nop
mov rcx, rbp
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46d0be
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46d0d1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
mov rbx, rdx
mov qword [rsp + 0x1e8], rdx
mov r12, rdx
mov qword [rsp + 0x1f0], rdx
mov qword [rsp + 0x1f8], rdx
mov r8d, 1
mov byte [rsp + 0x200], r8b
mov byte [rsp + 0x201], dl
mov byte [rsp + 0x202], dl
cmp dword [rdi + 0x14], edx
jne 0x46d12f
mov byte [rsp + 0x200], dl
mov byte [rsp + 0x201], dl
mov byte [rsp + 0x202], dl
jmp 0x46d180
mov rbx, qword [rsp + 0x88]
cmp rbx, rdx
je 0x46d14b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
xor edx, edx
lea r8d, [rdx + 1]
mov qword [rsp + 0x1e8], rbx
mov ecx, dword [rdi + 0x14]
cmp ecx, edx
jle 0x46d180
mov byte [rsp + 0x200], r8b
cmp ecx, 7
jl 0x46d180
mov byte [rsp + 0x201], r8b
movzx eax, dl
cmp ecx, 9
cmovge eax, r8d
mov byte [rsp + 0x202], al
mov rax, qword [rdi]
mov qword [rsp + 0x248], rax
mov edi, edx
mov rax, qword [rsp + 0x530]
cmp dword [rax + 8], edx
jbe 0x46d3d0
mov r12, rdx
mov rax, qword [rax]
mov r8, qword [r12 + rax]
cmp byte [r8 + 0x3c], dl
je 0x46d2a2
cmp byte [r8 + 0x3f], dl
jne 0x46d2a2
cmp byte [r8 + 0x3e], dl
jne 0x46d2a2
cmp qword [r8 + 0x20], rdx
je 0x46d2a2
mov dword [rsp + 0x1b8], edx
mov dword [rsp + 0x1bc], edx
mov byte [rsp + 0x1c0], dl
cmp byte [rsp + 0x80], dl
je 0x46d211
lea r9, [rsp + 0x1b8]
mov edx, edi
lea rcx, [rsp + 0x1e8]
call fcn.0046a77c
mov ebp, eax
xor eax, eax
cmp ebp, eax
jne 0x46d2d6
mov rax, qword [rsp + 0x248]
mov al, byte [rax + 0x29]
mov byte [rsp + 0x1c0], al
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x148]
call fcn.0046ba54
mov ebx, eax
cmp eax, r13d
jb 0x46d295
xor esi, esi
mov ecx, 0x20
call fcn.0040232c
cmp rax, rsi
je 0x46d265
mov qword [rax], rsi
mov dword [rax + 8], esi
mov dword [rax + 0xc], esi
mov qword [rax + 0x10], rsi
mov dword [rax + 0x18], esi
mov dword [rax + 0x1c], esi
jmp 0x46d268
mov rax, rsi
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.0041ba5c
mov r13d, dword [rsp + 0xc8]
cmp ebx, r13d
jae 0x46d241
mov rsi, qword [rsp + 0x110]
mov r15, qword [rsp + 0xc0]
mov edx, edi
mov rcx, qword [r15 + rbx*8]
call fcn.00458b6c
xor edx, edx
inc edi
add r12, 8
mov rax, qword [rsp + 0x530]
cmp edi, dword [rax + 8]
jb 0x46d1a1
mov r12, qword [rsp + 0x1f0]
mov rbx, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x148]
jmp 0x46d3d0
mov rcx, qword [rsp + 0x1f0]
call fcn.00402358
mov rcx, qword [rsp + 0x1e8]
xor r12d, r12d
cmp rcx, r12
je 0x46d2fa
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
cmp r14, r12
je 0x46d33f
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x46d382
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x46d37d
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x46d350
mov rcx, r15
call fcn.00402358
nop
mov rcx, qword [rsp + 0x148]
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x46d3b6
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r12
je 0x46d3c9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
mov rcx, r12
call fcn.00402358
xor r12d, r12d
cmp rbx, r12
je 0x46d3e9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov qword [rsp + 0x270], r12
mov rbx, r12
mov qword [rsp + 0x1e0], r12
cmp byte [rsp + 0xa0], r12b
je 0x46d6eb
mov ecx, 0x20
call fcn.0040232c
mov rdi, rax
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x228], rax
cmp rax, r12
je 0x46d445
mov dword [rax + 8], r12d
lea rax, [0x004d6048]
mov qword [rdi], rax
lea rcx, [rdi + 0x10]
call fcn.00403464
jmp 0x46d450
mov rdi, r12
mov qword [rsp + 0x270], r12
cmp rdi, r12
je 0x46d45e
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rbx, rdi
mov qword [rsp + 0x1e0], rdi
cmp rdi, r12
je 0x46d477
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0x3a8]
cmp rcx, r12
je 0x46d48a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x3a8], rdi
mov rcx, qword [rsp + 0x558]
mov rdx, qword [rcx]
cmp byte [rdx + 0x29], r12b
je 0x46d4b5
add rdx, 0x30
lea rcx, [rdi + 0x10]
call fcn.00403660
jmp 0x46d6eb
mov rcx, qword [rsp + 0x560]
cmp rcx, r12
jne 0x46d5a9
cmp rdi, r12
je 0x46d4d5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
cmp r14, r12
je 0x46d51a
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x46d55d
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x46d558
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x46d52b
mov rcx, r15
call fcn.00402358
nop
mov rcx, rbp
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x46d58c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r12
je 0x46d59f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004001
jmp 0x470d76
mov qword [rsp + 0xa8], r12
mov rax, qword [rcx]
lea rdx, [rsp + 0xa8]
call qword [rax + 0x18]
mov r12d, eax
xor ecx, ecx
cmp eax, ecx
je 0x46d6c1
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
xor ebx, ebx
cmp rdi, rbx
je 0x46d5ec
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
cmp r14, rbx
je 0x46d631
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46d677
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46d672
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46d645
mov rcx, r15
call fcn.00402358
nop
mov rcx, rbp
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46d6a6
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46d6b9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
mov rax, qword [rsp + 0xa8]
cmp rax, rcx
je 0x46d6e2
lea rcx, [rdi + 0x10]
mov rdx, rax
call fcn.004035f8
mov rax, qword [rsp + 0xa8]
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor r8d, r8d
mov rdx, qword [rsp + 0x548]
mov rdi, qword [rsp + 0x538]
mov rcx, rdi
call fcn.004685bc
mov r12d, eax
xor eax, eax
cmp r12d, eax
je 0x46d7fa
cmp rbx, rax
je 0x46d723
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
xor eax, eax
cmp r14, rax
je 0x46d76a
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46d7b0
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46d7ab
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46d77e
mov rcx, r15
call fcn.00402358
nop
mov rcx, rbp
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46d7df
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46d7f2
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
mov rcx, rdi
call fcn.00468140
mov r12d, eax
xor r8d, r8d
cmp eax, r8d
je 0x46d8f7
cmp rbx, r8
je 0x46d820
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
xor eax, eax
cmp r14, rax
je 0x46d867
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46d8ad
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46d8a8
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46d87b
mov rcx, r15
call fcn.00402358
nop
mov rcx, rbp
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46d8dc
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46d8ef
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
mov rbp, r8
mov qword [rsp + 0x1d0], r8
mov edi, r8d
mov dword [rsp + 0x1d8], r8d
mov dword [rsp + 0x1dc], r8d
mov r12d, r8d
mov rdx, qword [rsp + 0x530]
cmp dword [rdx + 8], r8d
jbe 0x46d9b2
mov rdi, r8
mov rbp, qword [rsp + 0x528]
mov esi, 1
mov rax, qword [rdx]
mov rcx, qword [rdi + rax]
cmp byte [rcx + 0x3c], r8b
je 0x46d95b
cmp byte [rcx + 0x3f], r8b
jne 0x46d973
cmp byte [rcx + 0x3e], r8b
jne 0x46d973
cmp qword [rcx + 0x20], r8
jne 0x46d98e
jmp 0x46d973
cmp dword [rcx], 0xffffffff
je 0x46d973
mov ecx, dword [rcx]
add rcx, rcx
mov rax, qword [rbp + 0x88]
cmp byte [rax + rcx*8 + 0xc], r8b
jne 0x46d98e
mov edx, r12d
lea rcx, [rsp + 0x1d0]
call fcn.00458b6c
mov rdx, qword [rsp + 0x530]
xor r8d, r8d
add r12d, esi
add rdi, 8
cmp r12d, dword [rdx + 8]
jb 0x46d93a
mov edi, dword [rsp + 0x1d8]
mov rbp, qword [rsp + 0x1d0]
mov rsi, qword [rsp + 0x110]
mov r8, rdx
lea rdx, [0x0046b738]
lea rcx, [rsp + 0x1d0]
call fcn.004432c8
xor eax, eax
cmp edi, eax
jbe 0x46dae1
mov r12, rbp
mov r15d, edi
mov rbx, qword [rsp + 0x540]
mov rsi, qword [rsp + 0x528]
mov r13, qword [rsp + 0x530]
xor r14d, r14d
lea ebp, [rax + 1]
mov ecx, dword [r12]
mov rax, qword [r13]
mov rdi, qword [rax + rcx*8]
lea rcx, [rsp + 0x1b8]
call fcn.00403464
nop
cmp byte [rdi + 0x3d], r14b
je 0x46da4a
lea r8, [rsp + 0x1e8]
lea rdx, [rsp + 0x250]
mov rcx, rdi
call fcn.0046a1ec
mov byte [rsp + 0x25e], r14b
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x1b8]
call fcn.00403660
jmp 0x46da76
lea r9, [rsp + 0x1e8]
lea r8, [rsp + 0x250]
mov edx, dword [rdi]
mov rcx, rsi
call fcn.0046b03c
lea r8, [rsp + 0x1b8]
mov edx, dword [rdi]
mov rcx, rsi
call fcn.00464c4c
lea r9, [rsp + 0x1b8]
lea r8, [rsp + 0x1e8]
lea rdx, [rsp + 0x250]
mov rcx, rbx
call fcn.00468fec
nop
mov rcx, qword [rsp + 0x1b8]
call fcn.00402358
add r12, 4
sub r15, rbp
jne 0x46d9f7
mov rbx, qword [rsp + 0x1e0]
mov rsi, qword [rsp + 0x110]
mov r13d, dword [rsp + 0xc8]
mov r14, qword [rsp + 0x220]
mov r15, qword [rsp + 0xc0]
mov rbp, qword [rsp + 0x1d0]
mov rcx, rbp
call fcn.00402358
xor ebp, ebp
mov qword [r14 + 0x28], rbp
mov eax, ebp
mov edi, dword [rsp + 0x150]
cmp edi, ebp
jbe 0x46db1a
mov r12, qword [rsp + 0x148]
lea rcx, [r12 + 0xc]
lea edx, [rbp + 1]
mov dword [rcx], eax
add eax, edx
add rcx, 0x10
cmp eax, edi
jb 0x46db0c
jmp 0x46db22
mov r12, qword [rsp + 0x148]
lea rcx, [rsp + 0x148]
call fcn.0046b1b0
mov dword [rsp + 0x238], ebp
mov rax, rbp
mov qword [rsp + 0x248], rbp
cmp edi, ebp
jbe 0x470b56
mov rdi, rax
shl rdi, 4
add rdi, r12
mov rbp, qword [rsp + 0x558]
mov rdx, qword [rbp]
lea rcx, [rsp + 0x160]
call fcn.0046c538
nop
xor eax, eax
cmp byte [rbp + 0x11], al
je 0x46db7e
cmp byte [rbp + 0x33], al
je 0x46db7e
mov r8b, 1
jmp 0x46db81
mov r8b, al
mov rdx, rdi
lea rcx, [rsp + 0x160]
call fcn.0046c2e4
mov ebp, eax
xor eax, eax
cmp ebp, eax
jne 0x46f222
xor ebp, ebp
cmp byte [rdi + 8], bpl
je 0x46dbdb
cmp byte [rsp + 0x189], bpl
jne 0x46dbf5
mov rax, qword [rsp + 0x270]
cmp rax, rbp
je 0x46dbcd
lea rdx, [rax + 0x10]
lea rcx, [rsp + 0x190]
call fcn.00403660
mov eax, 1
mov byte [rsp + 0x189], al
jmp 0x46dbf5
mov byte [rsp + 0x189], bpl
mov dword [rsp + 0x198], ebp
mov rax, qword [rsp + 0x190]
mov word [rax], bp
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x3d0]
call fcn.0045e11c
nop
mov eax, dword [rdi + 0xc]
mov rax, qword [r15 + rax*8]
mov qword [rsp + 0x240], rax
mov dword [rsp + 0xd0], ebp
mov rdx, rbp
mov qword [rsp + 0x118], rbp
cmp dword [rax + 0x18], ebp
jbe 0x46e9fb
mov r11, qword [rsp + 0x528]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x228], rcx
mov r8d, dword [rcx + rdx*8]
mov dword [rsp + 0xa0], r8d
mov rax, qword [r11 + 0x30]
mov rdi, r8
mov qword [rsp + 0x128], r8
mov eax, dword [rax + r8*4]
mov dword [rsp + 0xa4], eax
cmp dword [rcx + rdx*8 + 4], eax
jne 0x46def1
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x46dd3b
mov rax, qword [rcx]
mov edx, 2
lea r9d, [rdx + 1]
call qword [rax + 0x20]
mov ebp, eax
xor edx, edx
cmp eax, edx
jne 0x46f32a
mov ecx, edx
mov r11, qword [rsp + 0x528]
mov rax, qword [r11 + 0x198]
movsxd rbp, dword [rax + rdi*4]
mov rdi, rbp
cmp dword [rsp + 0xa4], edx
jbe 0x46dd33
shl rdi, 4
mov rax, qword [r11 + 0x88]
cmp byte [rax + rdi + 0xc], dl
je 0x46dd1a
mov edx, 1
add ecx, edx
mov dword [rsp + 0xb8], ecx
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea r9d, [rdx + 2]
mov r8d, ebp
call qword [rax + 0x20]
mov dword [rsp + 0x90], eax
xor edx, edx
cmp eax, edx
jne 0x46f440
mov ecx, dword [rsp + 0xb8]
mov r11, qword [rsp + 0x528]
inc ebp
add rdi, 0x10
cmp ecx, dword [rsp + 0xa4]
jb 0x46dcca
mov rdi, qword [rsp + 0x128]
jmp 0x46dd3b
mov rdi, qword [rsp + 0x128]
mov r8, qword [r11 + 8]
mov rdx, qword [r11 + 0x48]
mov r10d, dword [rsp + 0xa0]
lea ecx, [r10 + 1]
mov qword [rsp + 0xa8], rcx
mov eax, dword [rdx + rdi*4]
mov ecx, dword [rdx + rcx*4]
mov rdi, qword [r8 + rcx*8]
sub rdi, qword [r8 + rax*8]
mov eax, dword [rdx + r10*4]
mov r8, qword [r8 + rax*8]
add r8, qword [r11 + 0x178]
mov qword [rsp + 0x20], r14
mov r9, rdi
mov rax, qword [rsp + 0x538]
mov rdx, qword [rax + 0x80]
mov rcx, qword [rsp + 0x520]
call fcn.0046b560
mov ebp, eax
xor eax, eax
cmp ebp, eax
jne 0x46f558
add qword [r14 + 0x28], rdi
lea ecx, [rax + 0x30]
call fcn.0040232c
mov rbp, rax
xor eax, eax
cmp rbp, rax
je 0x46ddd1
mov qword [rbp], rax
mov dword [rbp + 8], eax
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x18], eax
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x28], eax
jmp 0x46ddd4
mov rbp, rax
mov rdi, qword [rsp + 0x540]
lea rcx, [rdi + 0x70]
mov rdx, rbp
call fcn.0041ba5c
mov r8, rbp
mov edx, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0x528]
call fcn.004656e0
mov rax, qword [rsp + 0x528]
mov r11, qword [rax + 0x48]
xor edx, edx
mov rax, qword [rsp + 0x128]
movsxd rcx, dword [r11 + rax*4]
cmp dword [rbp + 0x28], edx
jbe 0x46de79
lea rsi, [rdi + 0x40]
shl rcx, 3
mov r15d, edx
mov r14, qword [rsp + 0x528]
lea r13d, [rdx + 1]
mov rax, qword [r14 + 8]
lea rdi, [rcx + 8]
mov rdx, qword [rax + rdi]
sub rdx, qword [rax + rcx]
mov rcx, rsi
call fcn.0041ba5c
add r15d, r13d
mov rcx, rdi
cmp r15d, dword [rbp + 0x28]
jb 0x46de35
mov rsi, qword [rsp + 0x110]
mov r13d, dword [rsp + 0xc8]
mov r14, qword [rsp + 0x220]
mov r15, qword [rsp + 0xc0]
mov rax, qword [rsp + 0x528]
mov rax, qword [rax + 0x40]
mov rdx, qword [rsp + 0x128]
mov edi, dword [rax + rdx*4]
mov rcx, qword [rsp + 0xa8]
mov ebp, dword [rax + rcx*4]
cmp rdi, rbp
jae 0x46e791
mov r15, qword [rsp + 0x540]
mov r14, qword [rsp + 0x528]
mov ebx, 1
mov rdx, qword [r14 + 0x38]
mov rdx, qword [rdx + rdi*8]
lea rcx, [r15 + 0x30]
call fcn.0041ba5c
add rdi, rbx
cmp rdi, rbp
jb 0x46deb9
mov rbx, qword [rsp + 0x1e0]
mov r14, qword [rsp + 0x220]
mov r15, qword [rsp + 0xc0]
xor ebp, ebp
jmp 0x46e793
mov qword [rsp + 0x1a0], rbp
mov dword [rsp + 0x1a8], ebp
mov dword [rsp + 0x1ac], ebp
mov edx, ebp
mov dword [rsp + 0x90], ebp
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x46df49
mov rax, qword [rcx]
mov edx, 2
lea r9d, [rdx + 2]
call qword [rax + 0x20]
mov ebp, eax
xor eax, eax
cmp ebp, eax
jne 0x46f66e
mov edx, dword [rsp + 0x90]
mov r11, qword [rsp + 0x528]
xor ebp, ebp
mov qword [rsp + 0xa8], rbp
mov rax, qword [r11 + 0x198]
movsxd rcx, dword [rax + rdi*4]
cmp dword [rsp + 0xa4], ebp
jbe 0x46e043
mov rdi, rcx
shl rdi, 4
lea r12, [rsi + rcx*4]
mov ebx, dword [rsp + 0xa4]
mov r13, qword [rsp + 0x530]
xor r15d, r15d
lea esi, [r15 + 1]
mov bpl, r15b
mov rax, qword [r11 + 0x88]
mov qword [rsp + 0x130], rax
cmp byte [rdi + rax + 0xc], r15b
je 0x46dfc9
add edx, esi
mov dword [rsp + 0x90], edx
cmp dword [r12], r15d
jl 0x46dfc9
mov ecx, dword [r12]
mov rax, qword [r13]
mov rdx, qword [rax + rcx*8]
movzx ebp, r15b
cmp byte [rdx + 0x3c], r15b
cmove ebp, esi
mov dl, bpl
lea rcx, [rsp + 0x1a0]
call fcn.0041b9f0
cmp bpl, r15b
je 0x46dffa
mov rax, qword [rsp + 0x130]
mov r8, qword [rsp + 0xa8]
add r8, qword [rdi + rax]
mov qword [rsp + 0xa8], r8
add rdi, 0x10
add r12, 4
mov edx, dword [rsp + 0x90]
cmp edx, ebx
mov r11, qword [rsp + 0x528]
jb 0x46df8a
mov rbx, qword [rsp + 0x1e0]
mov rsi, qword [rsp + 0x110]
mov r13d, dword [rsp + 0xc8]
mov r12, qword [rsp + 0x148]
mov r15, qword [rsp + 0xc0]
xor ebp, ebp
mov rax, qword [rsp + 0x540]
mov eax, dword [rax + 0x48]
mov dword [rsp + 0x90], eax
mov qword [rsp + 0xb0], rbp
mov qword [rsp + 0x130], rbp
mov ecx, 0x38
call fcn.0040232c
mov rdi, rax
cmp rax, rbp
je 0x46e095
mov dword [rax + 0x10], ebp
lea rax, [0x004d6088]
mov qword [rdi], rax
lea rax, [0x004d6068]
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbp
jmp 0x46e098
mov rdi, rbp
mov qword [rsp + 0x298], rdi
cmp rdi, rbp
je 0x46e0af
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
nop
mov rax, qword [rsp + 0x558]
cmp byte [rax + 0x33], bpl
je 0x46e1db
mov rax, qword [rsp + 0x380]
lea rcx, [rax + 8]
neg rax
sbb rax, rax
and rax, rcx
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x260], rbp
lea r8, [rsp + 0x260]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xd8]
call fcn.00411360
lea rcx, [rsp + 0xd8]
call fcn.00411098
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0xb8], rax
mov rbp, qword [rsp + 0x260]
test rbp, rbp
je 0x46e13f
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rax + 0x48]
test rcx, rcx
je 0x46e156
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsp + 0xb8]
mov qword [rax + 0x48], rbp
mov rbp, qword [rsp + 0x520]
xor eax, eax
cmp rbp, rax
je 0x46e175
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
xor eax, eax
mov rcx, qword [rsp + 0x378]
cmp rcx, rax
je 0x46e188
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x378], rbp
mov rcx, qword [rsp + 0x528]
mov rax, qword [rcx + 0x178]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x398], rcx
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x3a0], eax
mov rcx, qword [rsp + 0x260]
xor eax, eax
cmp rcx, rax
je 0x46e39f
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x46e39f
mov ecx, 0x60
call fcn.0040232c
mov rbp, rax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x120], rax
xor ecx, ecx
cmp rax, rcx
je 0x46e22e
mov qword [rax + 0x30], rcx
mov qword [rax + 0x38], rcx
mov dword [rax + 0x40], ecx
lea rax, [0x004d6108]
mov qword [rbp], rax
mov qword [rbp + 0x50], rcx
mov dword [rbp + 0x58], ecx
mov ecx, 0x10000
call fcn.0040232c
mov qword [rbp + 0x48], rax
xor ecx, ecx
jmp 0x46e239
mov rbp, rcx
mov qword [rsp + 0x130], rcx
mov dword [rbp + 0x58], ecx
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0xb0]
xor eax, eax
cmp rcx, rax
je 0x46e25b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0xb0], rbp
lea rax, [rbp + 8]
mov qword [rsp + 0x120], rax
xor ebp, ebp
mov byte [rsp + 0x81], bpl
mov byte [rsp + 0x80], bpl
lea rcx, [rsp + 0x250]
call fcn.00403464
nop
mov qword [rsp + 0x1c8], rbp
mov byte [rsp + 0x108], bpl
lea eax, [rbp + 1]
mov dword [rsp + 0x78], eax
mov byte [rsp + 0x70], bpl
lea rax, [rsp + 0x250]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x81]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x108]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x1c8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rbp
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x528]
mov r9, rax
mov r8, qword [rax + 0x178]
mov rdx, qword [rsp + 0x520]
lea rcx, [rsp + 0x2d8]
call fcn.00459cb0
mov ebp, eax
xor eax, eax
cmp ebp, eax
jne 0x46f792
mov rbp, qword [rsp + 0x1c8]
cmp rbp, rax
je 0x46f8fd
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rax, qword [rsp + 0x130]
mov rcx, qword [rax + 0x50]
test rcx, rcx
je 0x46e378
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x130]
mov qword [rax + 0x50], rbp
mov rcx, qword [rsp + 0x1c8]
xor eax, eax
cmp rcx, rax
je 0x46e392
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x250]
call fcn.00402358
mov rax, qword [rsp + 0x120]
mov rbp, qword [rsp + 0x528]
mov qword [rax + 0x20], rbp
mov rbp, qword [rsp + 0x88]
test rbp, rbp
je 0x46e3d2
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rax, qword [rsp + 0x120]
mov rcx, qword [rax + 0x28]
test rcx, rcx
je 0x46e3e9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x120]
mov qword [rax + 0x28], rbp
mov rbp, qword [rsp + 0x98]
test rbp, rbp
je 0x46e40c
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rax, qword [rsp + 0x120]
mov rcx, qword [rax + 0x30]
xor eax, eax
cmp rcx, rax
je 0x46e41d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x120]
mov qword [rcx + 0x30], rbp
mov rax, qword [rsp + 0x528]
mov rax, qword [rax + 0x198]
mov rdx, qword [rsp + 0x128]
mov eax, dword [rax + rdx*4]
mov dword [rsp + 0xb8], eax
mov dword [rcx + 0x18], eax
lea rax, [rsp + 0x1a0]
mov qword [rcx + 0x10], rax
xor eax, eax
mov dword [rcx + 0x1c], eax
mov byte [rcx + 1], al
call fcn.0046abd4
mov ebp, eax
xor ecx, ecx
cmp eax, ecx
jne 0x46fa52
mov rax, qword [rsp + 0x528]
mov qword [rdi + 0x30], rax
mov rbp, qword [rsp + 0xb0]
mov eax, dword [rsp + 0xb8]
mov dword [rdi + 0x28], eax
lea rax, [rsp + 0x1a0]
mov qword [rdi + 0x20], rax
cmp rbp, rcx
je 0x46e4ab
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + VariantCopy]
mov rcx, qword [rdi + 0x18]
xor eax, eax
cmp rcx, rax
je 0x46e4bc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x18], rbp
mov rax, qword [rsp + 0x558]
cmp byte [rax + 0x33], 0
je 0x46e4db
lea rcx, [rsp + 0x2b0]
call fcn.00411b58
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x538]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0xb8], rax
mov ecx, 0x30
call fcn.0040232c
mov rbp, rax
xor eax, eax
cmp rbp, rax
je 0x46e52d
mov qword [rbp], rax
mov dword [rbp + 8], eax
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x18], eax
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x28], eax
jmp 0x46e530
mov rbp, rax
mov rcx, qword [rsp + 0x540]
add rcx, 0x70
mov rdx, rbp
call fcn.0041ba5c
mov rax, qword [rsp + 0x540]
lea rcx, [rax + 0x40]
add rax, 0x30
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x278]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, rbp
lea r8, [rsp + 0x230]
mov rdx, rdi
lea rcx, [rsp + 0x3d0]
call fcn.0045d118
mov dword [rsp + 0xb8], eax
cmp eax, 0x20000002
je 0x46fb99
mov rcx, qword [rsp + 0x558]
xor r9d, r9d
cmp byte [rcx + 0x33], r9b
je 0x46e6af
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
xor ebp, ebp
mov rdi, rbp
mov qword [rsp + 0x298], rbp
mov rcx, qword [rsp + 0xb0]
cmp rcx, rbp
je 0x46e5f0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0xb0], rbp
mov rcx, qword [rsp + 0x2c0]
call fcn.004c3430
mov ebp, dword [rsp + 0x374]
mov r11d, 1
cmp ebp, r11d
je 0x46e61e
xor r9d, r9d
cmp byte [rsp + 0x370], r9b
je 0x46e67e
jmp 0x46e621
xor r9d, r9d
mov rcx, qword [rsp + 0x98]
cmp rcx, r9
je 0x46e675
mov rax, qword [rsp + 0x528]
mov rdx, qword [rax + 0x198]
mov r10, qword [rcx]
mov eax, ebp
neg eax
sbb r9d, r9d
and r9d, 0xfffffffc
add r9d, 6
mov rax, qword [rsp + 0x128]
mov r8d, dword [rdx + rax*4]
mov edx, r11d
call qword [r10 + 0x28]
mov dword [rsp + 0xa0], eax
xor r9d, r9d
cmp eax, r9d
jne 0x46fcdb
cmp ebp, r9d
jne 0x46fe15
cmp ebp, r9d
jne 0x46ff0f
mov ebp, dword [rsp + 0xb8]
cmp ebp, r9d
jne 0x470342
mov r8, qword [rsp + 0xa8]
cmp qword [rsp + 0x100], r8
jne 0x46f218
jmp 0x46e6e1
mov rcx, qword [rsp + 0x130]
mov ebp, dword [rcx + 0x58]
mov ecx, 1
cmp ebp, ecx
je 0x470006
cmp ebp, r9d
jne 0x47023f
cmp eax, r9d
jne 0x470340
mov r8, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x120]
mov rax, qword [rdx + 0x10]
mov ecx, dword [rdx + 0x1c]
sub ecx, dword [rax + 8]
neg ecx
sbb ebp, ebp
and ebp, 0x80004005
jne 0x47044a
cmp qword [rsp + 0x278], r8
jne 0x470552
cmp rdi, rbp
je 0x46e720
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xb0]
cmp rcx, rbp
je 0x46e733
mov rax, qword [rcx]
call qword [rax + 0x10]
movsxd r8, dword [rsp + 0x90]
mov rdx, r8
mov r9, qword [rsp + 0x540]
cmp r8d, dword [r9 + 0x48]
jae 0x46e776
shl rdx, 3
mov esi, 1
mov rax, qword [r9 + 0x40]
mov rcx, qword [rax + rdx]
add qword [r14 + 0x38], rcx
add r8d, esi
add rdx, 8
cmp r8d, dword [r9 + 0x48]
jb 0x46e755
mov rsi, qword [rsp + 0x110]
mov rax, qword [rsp + 0x278]
add qword [r14 + 0x30], rax
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
jmp 0x46e793
xor ebp, ebp
mov rcx, qword [rsp + 0x540]
add rcx, 0x20
mov rax, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x118]
mov edx, dword [rax + rdx*8 + 4]
call fcn.00458b6c
mov r9d, ebp
mov r11, qword [rsp + 0x528]
mov rax, qword [r11 + 0x198]
mov rcx, qword [rsp + 0x128]
movsxd rdx, dword [rax + rcx*4]
mov dword [rsp + 0x90], edx
cmp dword [rsp + 0xa4], ebp
jbe 0x46e9bd
mov rbp, rdx
shl rbp, 4
lea r8, [rsi + rdx*4]
mov qword [rsp + 0xa8], r8
mov r15d, dword [rsp + 0xa4]
mov r12, qword [rsp + 0x540]
mov r13, qword [rsp + 0x530]
xor r10d, r10d
mov rax, qword [r11 + 0x88]
cmp byte [rax + rbp + 0xc], r10b
je 0x46e979
inc r9d
mov dword [rsp + 0xb8], r9d
cmp dword [r8], r10d
jl 0x46e979
mov ecx, dword [r8]
mov rax, qword [r13]
mov rdi, qword [rax + rcx*8]
cmp byte [rdi + 0x3c], r10b
jne 0x46e979
lea rcx, [rsp + 0x288]
call fcn.00403464
nop
lea r9, [rsp + 0x1e8]
lea r8, [rsp + 0x2a0]
mov edx, dword [rsp + 0x90]
mov rcx, qword [rsp + 0x528]
call fcn.0046b03c
xor ebx, ebx
cmp byte [rdi + 0x3d], bl
je 0x46e914
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x208], eax
mov al, byte [rdi + 0x40]
mov byte [rsp + 0x210], al
mov rax, qword [rdi + 8]
mov qword [rsp + 0x1e8], rax
mov al, byte [rdi + 0x41]
mov byte [rsp + 0x20c], al
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x1f0], rax
mov al, byte [rdi + 0x42]
mov byte [rsp + 0x20d], al
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0x1f8], rax
mov al, byte [rdi + 0x43]
mov byte [rsp + 0x20e], al
mov al, byte [rdi + 0x3e]
mov byte [rsp + 0x211], al
mov byte [rsp + 0x20f], bl
mov al, byte [rdi + 0x3f]
mov byte [rsp + 0x2ad], al
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x288]
call fcn.00403660
jmp 0x46e929
lea r8, [rsp + 0x288]
mov rcx, qword [rsp + 0x528]
call fcn.00464c4c
lea r9, [rsp + 0x288]
lea r8, [rsp + 0x1e8]
lea rdx, [rsp + 0x2a0]
mov rcx, r12
call fcn.00468fec
nop
mov rcx, qword [rsp + 0x288]
call fcn.00402358
mov edx, dword [rsp + 0x90]
mov r8, qword [rsp + 0xa8]
mov r9d, dword [rsp + 0xb8]
mov r11, qword [rsp + 0x528]
xor r10d, r10d
inc edx
mov dword [rsp + 0x90], edx
add rbp, 0x10
add r8, 4
mov qword [rsp + 0xa8], r8
cmp r9d, r15d
jb 0x46e818
mov rbx, qword [rsp + 0x1e0]
mov r13d, dword [rsp + 0xc8]
mov r12, qword [rsp + 0x148]
mov r15, qword [rsp + 0xc0]
xor ebp, ebp
mov r9d, dword [rsp + 0xd0]
mov r8d, 1
add r9d, r8d
mov dword [rsp + 0xd0], r9d
mov rdx, qword [rsp + 0x118]
add rdx, r8
mov qword [rsp + 0x118], rdx
mov rax, qword [rsp + 0x240]
cmp r9d, dword [rax + 0x18]
jb 0x46dc3d
mov edi, dword [rax + 8]
mov dword [rsp + 0xa4], edi
cmp edi, ebp
jne 0x46ea43
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
jmp 0x46f1de
mov qword [rsp + 0x138], rbp
mov dword [rsp + 0x140], ebp
mov dword [rsp + 0x144], ebp
mov edx, edi
lea rcx, [rsp + 0x138]
call fcn.0046b97c
mov rax, qword [rsp + 0x558]
cmp byte [rax + 0x31], bpl
je 0x46ea88
mov eax, 1
cmp qword [rsp + 0x268], rax
jbe 0x46ea88
mov bpl, al
xor eax, eax
cmp edi, eax
jbe 0x46eb2e
mov r12, rax
mov rdi, qword [rsp + 0x138]
mov r15d, dword [rsp + 0xa4]
mov rsi, qword [rsp + 0x240]
mov r13, qword [rsp + 0x530]
lea r14d, [rax + 1]
mov rdx, qword [rsi]
mov ecx, dword [r12 + rdx]
mov rax, qword [r13]
mov r9b, bpl
mov r8, qword [rax + rcx*8]
mov edx, dword [r12 + rdx]
lea rcx, [rsp + 0x1e8]
call fcn.0046a064
mov rcx, qword [rax]
mov qword [rdi], rcx
mov rcx, qword [rax + 8]
mov qword [rdi + 8], rcx
mov rax, qword [rax + 0x10]
mov qword [rdi + 0x10], rax
add r12, 4
add rdi, 0x18
sub r15, r14
jne 0x46eab9
mov rsi, qword [rsp + 0x110]
mov r13d, dword [rsp + 0xc8]
mov r14, qword [rsp + 0x220]
mov r12, qword [rsp + 0x148]
mov r15, qword [rsp + 0xc0]
mov edi, dword [rsp + 0xa4]
mov byte [rsp + 0x109], bpl
lea r8, [rsp + 0x109]
lea rdx, [0x0046a5f0]
lea rcx, [rsp + 0x138]
call fcn.0046b220
mov ebp, edi
xor r10d, r10d
mov rdi, r10
mov qword [rsp + 0x240], r10
cmp rbp, r10
je 0x46eb81
mov rcx, rbp
shl rcx, 2
call fcn.0040232c
mov rdi, rax
mov qword [rsp + 0x240], rax
xor r10d, r10d
mov eax, dword [rsp + 0xa4]
cmp eax, r10d
jbe 0x46ebbc
mov rcx, rdi
mov rdx, qword [rsp + 0x138]
add rdx, 8
mov r11d, 1
mov eax, dword [rdx]
mov dword [rcx], eax
add rdx, 0x18
add rcx, 4
sub rbp, r11
jne 0x46eba2
mov eax, dword [rsp + 0xa4]
jmp 0x46ebc2
mov r11d, 1
mov ecx, r10d
mov dword [rsp + 0xa0], r10d
mov r9, r10
mov qword [rsp + 0x128], r10
cmp eax, r10d
jbe 0x46f192
jmp 0x46ebea
xor r10d, r10d
lea r11d, [r10 + 1]
mov rdx, r10
mov qword [rsp + 0xa8], r10
mov r15d, r10d
mov qword [rsp + 0x130], r10
cmp ecx, eax
jae 0x46ed23
lea rsi, [rdi + r9*4]
mov rbx, r10
mov r14d, dword [rsp + 0xa0]
mov rdi, qword [rsp + 0x558]
mov r13, qword [rsp + 0x530]
mov eax, r15d
cmp rax, qword [rsp + 0x268]
jae 0x46ecee
mov ecx, dword [rsi]
mov rax, qword [r13]
mov r12, qword [rax + rcx*8]
add rdx, qword [r12 + 0x20]
mov qword [rsp + 0xa8], rdx
cmp rdx, qword [rdi + 0x28]
ja 0x46ecee
cmp byte [rdi + 0x30], r10b
je 0x46ecc6
lea rcx, [r12 + 0x28]
call fcn.004039c8
mov ebp, eax
mov dx, 0x2e
lea rcx, [r12 + 0x28]
call fcn.00403990
cmp eax, ebp
jg 0x46ec84
mov eax, dword [r12 + 0x30]
jmp 0x46ec86
inc eax
mov ecx, eax
mov rax, qword [r12 + 0x28]
lea rcx, [rax + rcx*2]
xor r10d, r10d
cmp r15d, r10d
jne 0x46ecaa
mov rbx, rcx
mov rdx, qword [rsp + 0xa8]
lea r11d, [r10 + 1]
jmp 0x46ecc6
mov rdx, rbx
call fcn.004027f4
xor r10d, r10d
cmp al, r10b
je 0x46ece8
mov rdx, qword [rsp + 0xa8]
lea r11d, [r10 + 1]
add r15d, r11d
add qword [rsp + 0x130], r11
add rsi, 4
lea eax, [r15 + r14]
cmp eax, dword [rsp + 0xa4]
jb 0x46ec27
jmp 0x46ecee
mov r11d, 1
mov dword [rsp + 0x90], r15d
cmp r15d, r11d
mov rbx, qword [rsp + 0x1e0]
mov rdi, qword [rsp + 0x240]
mov rsi, qword [rsp + 0x110]
mov r13d, dword [rsp + 0xc8]
mov r14, qword [rsp + 0x220]
jae 0x46ed38
mov ebp, r11d
mov dword [rsp + 0x90], r11d
mov qword [rsp + 0x130], r11
jmp 0x46ed3b
mov ebp, r15d
mov rcx, r14
call fcn.00410e40
mov r12d, eax
xor r15d, r15d
cmp eax, r15d
jne 0x47065d
mov ecx, 0x80
call fcn.0040232c
mov r15, rax
xor ecx, ecx
cmp rax, rcx
je 0x46edac
mov dword [rax + 0x10], ecx
lea rax, [0x004d60c8]
mov qword [r15], rax
lea rax, [0x004d60a8]
mov qword [r15 + 8], rax
mov qword [r15 + 0x18], rcx
mov qword [r15 + 0x48], rcx
mov qword [r15 + 0x50], rcx
mov dword [r15 + 0x58], ecx
mov dword [r15 + 0x5c], ecx
mov qword [r15 + 0x60], rcx
mov dword [r15 + 0x68], ecx
mov dword [r15 + 0x6c], ecx
mov qword [r15 + 0x70], rcx
mov dword [r15 + 0x78], ecx
mov dword [r15 + 0x7c], ecx
jmp 0x46edaf
mov r15, rcx
mov qword [rsp + 0x228], r15
cmp r15, rcx
je 0x46edc6
mov rax, qword [r15]
mov rcx, r15
call qword [rax + VariantCopy]
nop
mov eax, dword [rsp + 0xa0]
lea r8, [rdi + rax*4]
mov r9d, ebp
mov rdx, qword [rsp + 0x550]
mov rcx, r15
call fcn.0045f4b4
mov rdx, qword [rsp + 0x540]
mov eax, dword [rdx + 0x48]
mov dword [rsp + 0xd0], eax
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0x280], rcx
mov rax, qword [rsp + 0x538]
mov rbp, qword [rax + 0x80]
lea rax, [rdx + 0x40]
mov qword [rsp + 0x118], rax
lea r12, [rdx + 0x30]
lea rcx, [rdx + 0x70]
call fcn.00469128
mov r9, rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbp
lea rax, [rsp + 0x280]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0x230]
mov rdx, r15
lea rcx, [rsp + 0x3d0]
call fcn.0045d118
mov r12d, eax
xor r10d, r10d
cmp eax, r10d
jne 0x47074d
mov eax, dword [r15 + 0x40]
cmp dword [r15 + 0x44], eax
jne 0x47084e
movsxd rdx, dword [rsp + 0xd0]
mov r8, rdx
mov r9, qword [rsp + 0x540]
cmp edx, dword [r9 + 0x48]
jae 0x46eedf
shl r8, 3
mov rsi, qword [rsp + 0x118]
lea ebx, [r10 + 1]
mov rax, qword [rsi]
mov rcx, qword [rax + r8]
add qword [r14 + 0x38], rcx
add edx, ebx
add r8, 8
cmp edx, dword [r9 + 0x48]
jb 0x46eeb8
mov rbx, qword [rsp + 0x1e0]
mov rsi, qword [rsp + 0x110]
mov rax, qword [rsp + 0x280]
add qword [r14 + 0x30], rax
mov edx, r10d
mov dword [rsp + 0xd0], r10d
mov rbp, r10
mov qword [rsp + 0x120], r10
mov dword [rsp + 0xb8], r10d
mov r12d, dword [rsp + 0x90]
cmp r12d, r10d
jbe 0x46f0ff
mov qword [rsp + 0xa8], r10
mov qword [rsp + 0x118], r10
mov rax, qword [rsp + 0x128]
lea rcx, [rdi + rax*4]
mov qword [rsp + 0xb0], rcx
mov ecx, dword [rcx]
mov rax, qword [rsp + 0x530]
mov rax, qword [rax]
mov rbp, qword [rax + rcx*8]
lea rcx, [rsp + 0x1b8]
call fcn.00403464
nop
xor eax, eax
cmp byte [rbp + 0x3d], al
je 0x46ef8f
lea r8, [rsp + 0x1e8]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.0046a1ec
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x1b8]
call fcn.00403660
jmp 0x46efc7
lea r9, [rsp + 0x1e8]
lea r8, [rsp + 0x1d0]
mov edx, dword [rbp]
mov rcx, qword [rsp + 0x528]
call fcn.0046b03c
lea r8, [rsp + 0x1b8]
mov edx, dword [rbp]
mov rcx, qword [rsp + 0x528]
call fcn.00464c4c
xor edx, edx
cmp byte [rsp + 0x211], dl
jne 0x47094c
cmp byte [rsp + 0x1dd], dl
jne 0x47094c
mov ecx, dword [rsp + 0xb8]
mov rax, qword [r15 + 0x50]
cmp byte [rcx + rax], dl
jne 0x46f019
mov rax, qword [rsp + 0x120]
add rax, qword [rbp + 0x20]
mov qword [rsp + 0x120], rax
mov rcx, qword [rsp + 0x1b8]
call fcn.00402358
jmp 0x46f0a9
mov rax, qword [r15 + 0x60]
mov rcx, qword [rsp + 0x118]
mov ecx, dword [rcx + rax]
mov dword [rsp + 0x1d8], ecx
mov rax, qword [r15 + 0x70]
mov rcx, qword [rsp + 0xa8]
mov rcx, qword [rcx + rax]
mov qword [rsp + 0x1d0], rcx
cmp rcx, rdx
je 0x46f068
mov eax, 1
mov byte [rsp + 0x1de], al
mov byte [rsp + 0x1dc], al
add dword [rsp + 0xd0], eax
jmp 0x46f076
mov byte [rsp + 0x1de], dl
mov byte [rsp + 0x1dc], dl
lea r9, [rsp + 0x1b8]
lea r8, [rsp + 0x1e8]
lea rdx, [rsp + 0x1d0]
mov rcx, qword [rsp + 0x540]
call fcn.00468fec
nop
mov rcx, qword [rsp + 0x1b8]
call fcn.00402358
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
add qword [rsp + 0x118], 4
mov rcx, qword [rsp + 0xb0]
add rcx, 4
mov qword [rsp + 0xb0], rcx
add qword [rsp + 0xa8], 8
cmp eax, r12d
jb 0x46ef3e
mov rbp, qword [rsp + 0x120]
mov edx, dword [rsp + 0xd0]
mov r9, qword [rsp + 0x540]
lea rcx, [r9 + 0x20]
call fcn.00458b6c
add dword [rsp + 0xa0], r12d
mov r8, qword [rsp + 0x130]
add qword [rsp + 0x128], r8
xor eax, eax
cmp rbp, rax
je 0x46f15b
mov rdx, qword [rsp + 0x1b0]
cmp rdx, rbp
jb 0x46f15b
sub rdx, rbp
mov qword [rsp + 0x1b0], rdx
mov rcx, qword [rsp + 0x550]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x470a58
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
mov eax, dword [rsp + 0xa4]
mov ecx, dword [rsp + 0xa0]
cmp ecx, eax
mov r9, qword [rsp + 0x128]
jb 0x46ebe3
mov r12, qword [rsp + 0x148]
mov r15, qword [rsp + 0xc0]
mov rcx, rdi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x138]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
mov ebp, dword [rsp + 0x238]
mov ecx, 1
add ebp, ecx
mov dword [rsp + 0x238], ebp
mov rax, qword [rsp + 0x248]
add rax, rcx
mov qword [rsp + 0x248], rax
cmp ebp, dword [rsp + 0x150]
jae 0x470b54
jmp 0x46db49
mov ebp, 0x80004005
jmp 0x470342
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor eax, eax
cmp rbx, rax
je 0x46f25b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46f2e1
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46f2dc
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46f2af
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46f310
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46f323
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor eax, eax
cmp rbx, rax
je 0x46f371
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46f3f7
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46f3f2
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46f3c5
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46f426
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46f439
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor ebp, ebp
cmp rbx, rbp
je 0x46f487
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, ebp
je 0x46f50a
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, rbp
je 0x46f505
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, ebp
jne 0x46f4d8
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x46f539
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x46f54c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [rsp + 0x90]
jmp 0x470d76
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor eax, eax
cmp rbx, rax
je 0x46f59f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46f625
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46f620
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46f5f3
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46f654
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46f667
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor eax, eax
cmp rbx, rax
je 0x46f6c3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46f749
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46f744
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46f717
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46f778
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46f78b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
mov rcx, qword [rsp + 0x1c8]
cmp rcx, rax
je 0x46f7a6
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x250]
call fcn.00402358
nop
xor eax, eax
cmp rdi, rax
je 0x46f7c5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xb0]
xor edi, edi
cmp rcx, rdi
je 0x46f7db
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
cmp rbx, rdi
je 0x46f82e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46f8b4
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46f8af
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46f882
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46f8e3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46f8f6
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
mov rcx, qword [rsp + 0x250]
call fcn.00402358
nop
xor ebp, ebp
cmp rdi, rbp
je 0x46f91c
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xb0]
cmp rcx, rbp
je 0x46f930
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
cmp rbx, rbp
je 0x46f983
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, ebp
je 0x46fa06
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, rbp
je 0x46fa01
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, ebp
jne 0x46f9d4
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x46fa35
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x46fa48
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, 0x80004005
jmp 0x470d76
cmp rdi, rcx
je 0x46fa61
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xb0]
xor edi, edi
cmp rcx, rdi
je 0x46fa77
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
cmp rbx, rdi
je 0x46faca
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46fb50
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46fb4b
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46fb1e
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46fb7f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r14
je 0x46fb92
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xb0]
xor ebp, ebp
cmp rcx, rbp
je 0x46fbb9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
cmp rbx, rbp
je 0x46fc0c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, ebp
je 0x46fc8f
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, rbp
je 0x46fc8a
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, ebp
jne 0x46fc5d
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x46fcbe
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x46fcd1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x470d76
mov rcx, qword [rsp + 0xb0]
cmp rcx, r9
je 0x46fcef
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor ebp, ebp
cmp rbx, rbp
je 0x46fd44
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, ebp
je 0x46fdc7
lea rdi, [r15 + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, rbp
je 0x46fdc2
mov rcx, qword [rbx + 0x10]
call fcn.00402358
mov rcx, qword [rbx]
call fcn.00402358
mov rcx, rbx
call fcn.00402358
mov eax, 0xffffffff
cmp r13d, ebp
jne 0x46fd95
mov rcx, r15
call fcn.00402358
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x46fdf6
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x46fe09
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [rsp + 0xa0]
jmp 0x470d76
mov rcx, qword [rsp + 0xb0]
cmp rcx, r9
je 0x46fe29
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x46fe7e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x46fef2
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x46ff05
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x470d76
mov rcx, qword [rsp + 0xb0]
cmp rcx, r9
je 0x46ff23
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x46ff78
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x46ffec
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x46ffff
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x470d76
mov rcx, qword [rsp + 0x98]
cmp rcx, r9
je 0x47013a
mov rax, qword [rcx]
mov edx, 2
mov r9d, edx
mov r8d, dword [rsp + 0xa0]
call qword [rax + 0x28]
mov ebp, eax
xor r13d, r13d
cmp eax, r13d
je 0x47013d
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xb0]
cmp rcx, r13
je 0x470059
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
cmp rbx, r13
je 0x4700ac
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x470120
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r13
je 0x470133
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
xor r13d, r13d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xb0]
cmp rcx, r13
je 0x47015b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
cmp rbx, r13
je 0x4701ae
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r13
je 0x470222
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r13
je 0x470235
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x470d76
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xb0]
xor edi, edi
cmp rcx, rdi
je 0x47025f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
cmp rbx, rdi
je 0x4702b2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x470326
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x470339
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x470d76
mov ebp, eax
cmp rdi, r9
je 0x470353
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xb0]
cmp rcx, r9
je 0x470367
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x4703bc
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x470430
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x470443
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x470d76
cmp rdi, r9
je 0x47045b
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xb0]
cmp rcx, r9
je 0x47046f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x4704c4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x470538
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x47054b
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebp
jmp 0x470d76
cmp rdi, r9
je 0x470563
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xb0]
cmp rcx, r9
je 0x470577
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1a0]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x4705cc
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x470640
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x470653
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x470d76
mov rcx, rdi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x138]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
cmp rbx, r15
je 0x4706b9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, qword [rsp + 0x148]
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x470732
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, r15
je 0x470745
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
cmp r15, r10
je 0x47075c
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x138]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x4707ba
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, qword [rsp + 0x148]
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x470833
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x470846
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x138]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x4708b6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, qword [rsp + 0x148]
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47092f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x470942
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x470d76
mov rcx, qword [rsp + 0x1b8]
call fcn.00402358
nop
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x138]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x4709c2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, qword [rsp + 0x148]
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x470a3b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x470a4e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x470d76
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x138]
call fcn.00402358
nop
lea rcx, [rsp + 0x3d0]
call fcn.0045e078
nop
mov rcx, qword [rsp + 0x190]
call fcn.00402358
mov rcx, qword [rsp + 0x170]
call fcn.00402358
lea rcx, [rsp + 0x160]
call fcn.0045d080
nop
xor edi, edi
cmp rbx, rdi
je 0x470ac0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, qword [rsp + 0x148]
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x470b39
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rdi
je 0x470b4c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x470d76
xor ebp, ebp
mov rcx, r14
call fcn.00410e40
mov edi, eax
cmp eax, ebp
je 0x470c05
cmp rbx, rbp
je 0x470b77
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x470beb
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x470bfe
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x470d76
mov rcx, qword [rsp + 0x540]
call fcn.0046b368
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x470cde
mov rax, qword [rcx]
mov r9d, 7
mov r8d, 0xffffffff
xor edx, edx
call qword [rax + 0x20]
mov edi, eax
cmp eax, ebp
je 0x470cde
cmp rbx, rbp
je 0x470c50
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x470cc4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x470cd7
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x470d76
cmp rbx, rbp
je 0x470ced
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2b0]
call fcn.0046bd38
nop
lea rcx, [rsp + 0xe8]
call fcn.004c33e0
lea rcx, [rsp + 0xe0]
call fcn.004c33e0
lea rcx, [rsp + 0xd8]
call fcn.004c33e0
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xc0]
call fcn.00437bb0
nop
mov rcx, r12
call fcn.00402358
nop
mov rcx, rsi
call fcn.00402358
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rbp
je 0x470d61
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x88]
cmp rcx, rbp
je 0x470d74
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
add rsp, 0x4d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret