Function at 0x46dad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4e8
mov qword [rsp + 0x3d8], 0xfffffffffffffffe
mov r15, rdx
mov rdi, rcx
mov r14, qword [rsp + 0x568]
mov rax, qword [r14 + 0x20]
mov ecx, 1
xor esi, esi
cmp rax, rsi
cmove rax, rcx
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x98], rsi
mov rbx, qword [rsp + 0x560]
mov rax, qword [rbx]
lea r8, [rsp + 0x98]
lea rdx, [0x004d92a0]
mov rcx, rbx
call qword [rax]
mov qword [rsp + 0xa0], rsi
mov rax, qword [rbx]
lea r8, [rsp + 0xa0]
lea rdx, [0x004d9330]
mov rcx, rbx
call qword [rax]
xor edx, edx
cmp r15, rdx
je 0x46db81
mov r9, qword [r15 + 0x168]
jmp 0x46db84
mov r9, rdx
cmp r9, rdx
jbe 0x46dbde
cmp byte [r14 + 0x32], dl
jne 0x46dbde
mov qword [rsp + 0x20], rdx
xor r8d, r8d
mov rdx, qword [rsp + 0x558]
mov rcx, rdi
call fcn.0046ca00
mov ebx, eax
xor edx, edx
cmp eax, edx
je 0x46dbde
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdx
je 0x46dbc4
mov rdx, qword [rcx]
call qword [rdx + 0x10]
xor edx, edx
mov rcx, qword [rsp + 0x98]
cmp rcx, rdx
je 0x46dbd7
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x472388
mov rsi, rdx
mov qword [rsp + 0x120], rdx
mov r11, rdx
mov qword [rsp + 0x1c0], rdx
mov rdi, rdx
mov qword [rsp + 0x1d8], rdx
mov byte [rsp + 0xac], dl
mov r12, rdx
mov qword [rsp + 0x158], rdx
mov dword [rsp + 0x160], edx
mov dword [rsp + 0x164], edx
mov rbp, rdx
mov qword [rsp + 0xd0], rdx
mov r13d, edx
mov dword [rsp + 0xd8], edx
mov dword [rsp + 0xdc], edx
mov bl, dl
mov byte [rsp + 0x91], dl
mov al, byte [r14 + 0x10]
mov byte [rsp + 0x90], al
mov r10d, 0x3030205
cmp al, dl
je 0x46dcf4
mov rax, qword [r14]
mov r8d, edx
mov r9d, dword [rax + 8]
cmp r9d, edx
jbe 0x46dcfb
mov rdx, qword [rax]
mov rax, qword [rdx]
mov rcx, qword [rax + 0x10]
mov eax, 0xffffffff
cmp rcx, rax
ja 0x46dccf
cmp ecx, r10d
ja 0x46dcaf
cmp ecx, r10d
je 0x46dce2
sub ecx, 3
je 0x46dce2
sub ecx, 0x202ff
je 0x46dce2
sub ecx, 2
je 0x46dce2
sub ecx, 0x300fdff
je 0x46dce2
cmp ecx, 0x18
je 0x46dce2
jmp 0x46dccf
cmp ecx, 0x3030401
je 0x46dce2
cmp ecx, 0x3030501
je 0x46dce2
cmp ecx, 0x3030701
je 0x46dce2
cmp ecx, 0x3030805
je 0x46dce2
mov ecx, 1
add r8d, ecx
add rdx, 8
cmp r8d, r9d
jae 0x46dcf0
jmp 0x46dc73
xor edx, edx
mov byte [rsp + 0x90], dl
lea ecx, [rdx + 1]
jmp 0x46dd00
xor edx, edx
jmp 0x46dd00
mov ecx, 1
jmp 0x46dd00
mov ecx, 1
cmp r15, rdx
je 0x46e2ab
mov ebx, dword [r15 + 0x90]
xor ecx, ecx
call sub.msvcrt.dll_free
xor r14d, r14d
mov qword [rsp + 0x120], r14
mov rcx, rbx
shl rcx, 2
call fcn.00402388
mov rsi, rax
mov qword [rsp + 0x120], rax
mov ecx, r14d
cmp dword [r15 + 0x90], r14d
jbe 0x46dd5e
lea edx, [r14 + 1]
mov dword [rax], 0xffffffff
add ecx, edx
add rax, 4
cmp ecx, dword [r15 + 0x90]
jb 0x46dd49
mov edx, r14d
mov r10, qword [rsp + 0x540]
cmp dword [r10 + 8], r14d
jbe 0x46dd96
mov r8, r14
mov rax, qword [r10]
mov rcx, qword [r8 + rax]
cmp dword [rcx], 0xffffffff
je 0x46dd83
mov eax, dword [rcx]
mov dword [rsi + rax*4], edx
mov ecx, 1
add edx, ecx
add r8, 8
cmp edx, dword [r10 + 8]
jb 0x46dd72
jmp 0x46dd9b
mov ecx, 1
xor edx, edx
mov dword [rsp + 0xa8], edx
cmp dword [r15 + 4], edx
jbe 0x46e292
mov r12d, edx
mov r10d, edx
mov ebx, edx
mov rax, qword [r15 + 0x30]
mov edi, dword [rax + r14*4]
mov r15, rdx
mov rcx, qword [rsp + 0x538]
mov rax, qword [rcx + 0x198]
movsxd r8, dword [rax + r14*4]
cmp edi, edx
jbe 0x46e1a1
mov rdx, r8
shl rdx, 4
lea r9, [rsi + r8*4]
cmp r8d, dword [rcx + 0x90]
jae 0x46e1fa
mov r11, qword [rcx + 0x88]
xor eax, eax
cmp byte [rdx + r11 + 0xc], al
je 0x46de3d
inc r10d
cmp dword [r9], eax
jl 0x46de3d
mov ecx, dword [r9]
mov rax, qword [rsp + 0x540]
mov rax, qword [rax]
mov rcx, qword [rax + rcx*8]
xor eax, eax
cmp byte [rcx + 0x3c], al
jne 0x46de35
inc ebx
add r15, qword [rdx + r11]
mov rcx, qword [rsp + 0x538]
jmp 0x46de3d
mov rcx, qword [rsp + 0x538]
mov eax, 1
add r8d, eax
add rdx, 0x10
add r9, 4
cmp r10d, edi
jb 0x46dde7
xor edx, edx
cmp ebx, edx
je 0x46e1a1
mov dword [rsp + 0x128], r12d
mov dword [rsp + 0x12c], ebx
mov qword [rsp + 0x1f8], rdx
mov dword [rsp + 0x200], edx
mov qword [rsp + 0x208], rdx
mov dword [rsp + 0x210], edx
mov qword [rsp + 0x218], rdx
mov dword [rsp + 0x220], edx
lea r8, [rsp + 0x1f8]
mov edx, r12d
call fcn.00466acc
mov r12, qword [rsp + 0x538]
mov r11, qword [r12 + 0x50]
movzx r10d, byte [r11 + r14]
mov dword [rsp + 0x228], r10d
xor r11d, r11d
mov ecx, r11d
mov r9, qword [rsp + 0x1f8]
mov edx, dword [rsp + 0x200]
cmp edx, r11d
jbe 0x46defe
mov rax, r9
lea r8d, [r11 + 1]
cmp qword [rax], 0x6f10701
je 0x46def9
add ecx, r8d
add rax, 0x20
cmp ecx, edx
jb 0x46dee3
jmp 0x46defe
mov r12b, r8b
jmp 0x46df01
mov r12b, r11b
cmp ebx, edi
sete dil
cmp byte [rsp + 0x90], r11b
jne 0x46df20
cmp dil, r11b
jne 0x46df20
mov r8b, r11b
mov ebx, 1
jmp 0x46df28
mov ebx, 1
mov r8b, bl
mov dword [rsp + 0x148], r11d
mov dword [rsp + 0x14c], r11d
mov ecx, r11d
cmp edx, r11d
jbe 0x46df5c
mov rax, r9
cmp qword [rax], 0x6f10701
je 0x46df58
add ecx, ebx
add rax, 0x20
cmp ecx, edx
jb 0x46df43
jmp 0x46df5c
mov al, bl
jmp 0x46df5f
mov al, r11b
mov byte [rsp + 0x150], al
cmp r8b, r11b
je 0x46e048
mov rcx, r10
shl rcx, 5
add rcx, r9
mov rax, qword [rcx]
cmp rax, 3
jne 0x46dfac
cmp qword [rcx + 0x10], rbx
jne 0x46e048
mov rax, qword [rcx + 8]
movzx ecx, byte [rax]
add ecx, ebx
mov dword [rsp + 0x14c], ecx
mov dword [rsp + 0x148], 3
jmp 0x46e048
mov edx, 0x3030103
sub rax, rdx
je 0x46dfe4
sub rax, 0x18
je 0x46dfe4
sub rax, 0xea
je 0x46dfe4
sub rax, 0x1fc
je 0x46dfe4
sub rax, 0x100
je 0x46dfe4
sub rax, 0x200
je 0x46dfe4
cmp rax, 0x104
jne 0x46e048
mov ecx, dword [rcx]
cmp ecx, 0x303011b
cmove ecx, edx
mov dword [rsp + 0x148], ecx
cmp ecx, 0x3030401
jne 0x46e00b
mov dword [rsp + 0x14c], 0x10
jmp 0x46e048
cmp ecx, 0x3030501
je 0x46e03d
cmp ecx, 0x3030205
je 0x46e03d
cmp ecx, 0x3030805
je 0x46e03d
mov eax, r11d
cmp ecx, 0x3030701
mov ecx, 2
cmove eax, ecx
mov dword [rsp + 0x14c], eax
jmp 0x46e048
mov dword [rsp + 0x14c], 4
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x158]
call fcn.0046cef4
mov ebx, eax
cmp eax, r13d
jb 0x46e0ba
xor esi, esi
mov ecx, 0x20
call fcn.00402388
cmp rax, rsi
je 0x46e08a
mov qword [rax], rsi
mov dword [rax + 8], esi
mov dword [rax + 0xc], esi
mov qword [rax + 0x10], rsi
mov dword [rax + 0x18], esi
mov dword [rax + 0x1c], esi
jmp 0x46e08d
mov rax, rsi
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.004010c0
mov r13d, dword [rsp + 0xd8]
cmp ebx, r13d
jae 0x46e066
mov rsi, qword [rsp + 0x120]
mov rbp, qword [rsp + 0xd0]
mov rcx, qword [rbp + rbx*8]
add rcx, 0x10
mov rdx, qword [rsp + 0x128]
call fcn.0045cf3c
xor ecx, ecx
cmp dil, cl
je 0x46e102
mov rax, qword [rsp + 0x538]
mov r8, qword [rax + 8]
mov rcx, qword [rax + 0x48]
mov eax, dword [rcx + r14*4]
mov ecx, dword [rcx + r14*4 + 4]
mov rdx, qword [r8 + rcx*8]
sub rdx, qword [r8 + rax*8]
add qword [rsp + 0x1c0], rdx
jmp 0x46e144
mov edx, 1
mov byte [rsp + 0x91], dl
add qword [rsp + 0x1c0], r15
mov rax, qword [rsp + 0x1d8]
cmp rax, r15
cmovb rax, r15
mov qword [rsp + 0x1d8], rax
mov eax, dword [rsp + 0xac]
movzx eax, al
cmp r12b, cl
cmovne eax, edx
mov dword [rsp + 0xac], eax
mov rcx, qword [rsp + 0x218]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x208]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x1f8]
xor edx, edx
cmp rcx, rdx
je 0x46e199
lea rbx, [rcx - 8]
lea r9, [fcn.0047fed4]
mov r8d, dword [rbx]
mov edx, 0x20
call fcn.004cd4c0
mov rcx, rbx
call sub.msvcrt.dll_free
mov r12d, dword [rsp + 0xa8]
xor edx, edx
jmp 0x46e1a1
mov r12d, dword [rsp + 0xa8]
mov ecx, 1
add r12d, ecx
mov dword [rsp + 0xa8], r12d
add r14, rcx
mov r15, qword [rsp + 0x538]
cmp r12d, dword [r15 + 4]
jb 0x46ddb1
mov r12, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x1d8]
mov bl, byte [rsp + 0x91]
mov r14, qword [rsp + 0x568]
mov r10, qword [rsp + 0x540]
mov r11, qword [rsp + 0x1c0]
jmp 0x46e2b3
movsxd rax, r13d
xor r12d, r12d
cmp r13d, r12d
je 0x46e241
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x46e23c
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x46e20f
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x158]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x46e275
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x46e288
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x472388
mov bl, byte [rsp + 0x91]
mov r14, qword [rsp + 0x568]
mov r11, qword [rsp + 0x1c0]
jmp 0x46e2b3
mov r10, qword [rsp + 0x540]
mov rax, rdx
mov qword [rsp + 0x250], rdx
cmp qword [rsp + 0x290], rcx
jbe 0x46e2d3
cmp qword [r14 + 0x28], rdx
je 0x46e2d3
mov r9b, cl
jmp 0x46e2d6
mov r9b, dl
mov r8d, edx
cmp dword [r10 + 8], edx
jbe 0x46e339
mov rdx, qword [r10]
xor r15d, r15d
lea esi, [r15 + 1]
mov rcx, qword [rdx]
cmp byte [rcx + 0x3c], r15b
je 0x46e31a
mov rcx, qword [rcx + 0x20]
add r11, rcx
cmp r9b, r15b
je 0x46e30b
add rax, rcx
mov qword [rsp + 0x250], rax
jmp 0x46e31a
cmp rax, rcx
cmovb rax, rcx
mov qword [rsp + 0x250], rax
add r8d, esi
add rdx, 8
cmp r8d, dword [r10 + 8]
jb 0x46e2e9
mov qword [rsp + 0x1c0], r11
mov rsi, qword [rsp + 0x120]
jmp 0x46e33c
xor r15d, r15d
cmp rax, rdi
cmovb rax, rdi
mov qword [rsp + 0x250], rax
mov rdi, qword [rsp + 0x560]
mov rax, qword [rdi]
mov rdx, r11
mov rcx, rdi
call qword [rax + 0x18]
mov r14d, eax
cmp eax, r15d
je 0x46e3f9
movsxd rax, r13d
cmp r13d, r15d
je 0x46e3af
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x46e3aa
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x46e37d
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r12
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x46e3de
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x46e3f1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r14d
jmp 0x472388
mov ecx, 0x48
call fcn.00402388
mov qword [rsp + 0x238], rax
cmp rax, r15
je 0x46e425
mov rcx, rax
call fcn.004112d0
mov r14, rax
mov qword [rsp + 0x230], rax
jmp 0x46e430
mov r14, r15
mov qword [rsp + 0x230], r15
mov qword [rsp + 0x3d0], r14
cmp r14, r15
je 0x46e447
mov rax, qword [r14]
mov rcx, r14
call qword [rax + VariantCopy]
nop
mov r8b, 1
mov rdx, rdi
mov rcx, r14
call fcn.004111c4
mov qword [rsp + 0xe8], r15
mov qword [rsp + 0xf0], r15
mov qword [rsp + 0xf8], r15
mov rdi, qword [rsp + 0x568]
cmp byte [rdi + 0x33], r15b
je 0x46e564
lea rcx, [rsp + 0xe8]
call fcn.004113d0
mov r15d, eax
xor eax, eax
cmp r15d, eax
je 0x46e564
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
xor eax, eax
cmp r14, rax
je 0x46e4d3
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46e51a
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46e515
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46e4e8
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r12
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x46e549
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46e55c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x472388
mov dl, byte [rdi + 0x33]
lea rcx, [rsp + 0x2c0]
call fcn.0046d038
nop
xor edx, edx
cmp byte [rdi + 0x33], dl
je 0x46e67a
cmp bl, dl
je 0x46e67a
lea rcx, [rsp + 0x2c0]
call fcn.00411e68
mov r15d, eax
xor edx, edx
cmp eax, edx
je 0x46e67a
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
xor eax, eax
cmp r14, rax
je 0x46e5e9
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46e630
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46e62b
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46e5fe
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r12
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x46e65f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46e672
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x472388
mov rbx, rdx
mov qword [rsp + 0x1f8], rdx
mov r15, rdx
mov qword [rsp + 0x200], rdx
mov qword [rsp + 0x208], rdx
mov r8d, 1
mov byte [rsp + 0x210], r8b
mov byte [rsp + 0x211], dl
mov byte [rsp + 0x212], dl
cmp dword [rdi + 0x14], edx
jne 0x46e6d0
mov byte [rsp + 0x210], dl
mov byte [rsp + 0x211], dl
mov byte [rsp + 0x212], dl
jmp 0x46e721
mov rbx, qword [rsp + 0x98]
cmp rbx, rdx
je 0x46e6ec
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
xor edx, edx
lea r8d, [rdx + 1]
mov qword [rsp + 0x1f8], rbx
mov ecx, dword [rdi + 0x14]
cmp ecx, edx
jle 0x46e721
mov byte [rsp + 0x210], r8b
cmp ecx, 7
jl 0x46e721
mov byte [rsp + 0x211], r8b
movzx eax, dl
cmp ecx, 9
cmovge eax, r8d
mov byte [rsp + 0x212], al
mov rax, qword [rdi]
mov qword [rsp + 0x258], rax
mov edi, edx
mov rax, qword [rsp + 0x540]
cmp dword [rax + 8], edx
jbe 0x46e976
mov r15, rdx
mov rax, qword [rax]
mov r8, qword [r15 + rax]
cmp byte [r8 + 0x3c], dl
je 0x46e846
cmp byte [r8 + 0x3f], dl
jne 0x46e846
cmp byte [r8 + 0x3e], dl
jne 0x46e846
cmp qword [r8 + 0x20], rdx
je 0x46e846
mov dword [rsp + 0x1e0], edx
mov dword [rsp + 0x1e4], edx
mov byte [rsp + 0x1e8], dl
cmp byte [rsp + 0x90], dl
je 0x46e7b4
lea r9, [rsp + 0x1e0]
mov edx, edi
lea rcx, [rsp + 0x1f8]
call fcn.0046bb70
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x46e87a
mov rax, qword [rsp + 0x258]
mov al, byte [rax + 0x29]
mov byte [rsp + 0x1e8], al
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x158]
call fcn.0046cef4
mov ebx, eax
cmp eax, r13d
jb 0x46e838
xor esi, esi
mov ecx, 0x20
call fcn.00402388
cmp rax, rsi
je 0x46e808
mov qword [rax], rsi
mov dword [rax + 8], esi
mov dword [rax + 0xc], esi
mov qword [rax + 0x10], rsi
mov dword [rax + 0x18], esi
mov dword [rax + 0x1c], esi
jmp 0x46e80b
mov rax, rsi
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.004010c0
mov r13d, dword [rsp + 0xd8]
cmp ebx, r13d
jae 0x46e7e4
mov rsi, qword [rsp + 0x120]
mov rbp, qword [rsp + 0xd0]
mov edx, edi
mov rcx, qword [rbp + rbx*8]
call fcn.00459ce8
xor edx, edx
inc edi
add r15, 8
mov rax, qword [rsp + 0x540]
cmp edi, dword [rax + 8]
jb 0x46e742
mov r15, qword [rsp + 0x200]
mov rbx, qword [rsp + 0x1f8]
mov r12, qword [rsp + 0x158]
jmp 0x46e976
mov rcx, qword [rsp + 0x200]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x1f8]
xor r15d, r15d
cmp rcx, r15
je 0x46e89e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
cmp r14, r15
je 0x46e8e3
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x46e927
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x46e922
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x46e8f5
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x158]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x46e95b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x46e96e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x472388
mov rcx, r15
call sub.msvcrt.dll_free
xor r15d, r15d
cmp rbx, r15
je 0x46e98f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov qword [rsp + 0x270], r15
mov rbx, r15
mov qword [rsp + 0x1f0], r15
cmp byte [rsp + 0xac], r15b
je 0x46ec93
mov ecx, 0x20
call fcn.00402388
mov rdi, rax
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x238], rax
cmp rax, r15
je 0x46e9eb
mov dword [rax + 8], r15d
lea rax, [0x004db168]
mov qword [rdi], rax
lea rcx, [rdi + 0x10]
call fcn.0040365c
jmp 0x46e9f6
mov rdi, r15
mov qword [rsp + 0x270], r15
cmp rdi, r15
je 0x46ea04
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rbx, rdi
mov qword [rsp + 0x1f0], rdi
cmp rdi, r15
je 0x46ea1d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0x3b8]
cmp rcx, r15
je 0x46ea30
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x3b8], rdi
mov rcx, qword [rsp + 0x568]
mov rdx, qword [rcx]
cmp byte [rdx + 0x29], r15b
je 0x46ea5b
add rdx, 0x30
lea rcx, [rdi + 0x10]
call fcn.00403858
jmp 0x46ec93
mov rcx, qword [rsp + 0x570]
cmp rcx, r15
jne 0x46eb50
cmp rdi, r15
je 0x46ea7b
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
cmp r14, r15
je 0x46eac0
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r15d
je 0x46eb04
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r15
je 0x46eaff
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r15d
jne 0x46ead2
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r12
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x46eb33
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x46eb46
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004001
jmp 0x472388
mov qword [rsp + 0xb8], r15
mov rax, qword [rcx]
lea rdx, [rsp + 0xb8]
call qword [rax + 0x18]
mov r15d, eax
xor ecx, ecx
cmp eax, ecx
je 0x46ec69
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
xor ebx, ebx
cmp rdi, rbx
je 0x46eb93
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
cmp r14, rbx
je 0x46ebd8
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46ec1f
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46ec1a
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46ebed
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r12
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x46ec4e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46ec61
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x472388
mov rax, qword [rsp + 0xb8]
cmp rax, rcx
je 0x46ec8a
lea rcx, [rdi + 0x10]
mov rdx, rax
call fcn.004037f0
mov rax, qword [rsp + 0xb8]
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
xor r8d, r8d
mov rdx, qword [rsp + 0x558]
mov rdi, qword [rsp + 0x548]
mov rcx, rdi
call fcn.004699a8
mov r15d, eax
xor eax, eax
cmp r15d, eax
je 0x46eda3
cmp rbx, rax
je 0x46eccb
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
xor eax, eax
cmp r14, rax
je 0x46ed12
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46ed59
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46ed54
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46ed27
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r12
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x46ed88
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46ed9b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x472388
mov rcx, rdi
call fcn.0046952c
mov r15d, eax
xor r8d, r8d
cmp eax, r8d
je 0x46eea1
cmp rbx, r8
je 0x46edc9
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
xor eax, eax
cmp r14, rax
je 0x46ee10
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x46ee57
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x46ee52
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x46ee25
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r12
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x46ee86
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x46ee99
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r15d
jmp 0x472388
mov r12, r8
mov qword [rsp + 0x1c8], r8
mov edi, r8d
mov dword [rsp + 0x1d0], r8d
mov dword [rsp + 0x1d4], r8d
mov r15d, r8d
mov rdx, qword [rsp + 0x540]
cmp dword [rdx + 8], r8d
jbe 0x46ef5d
mov rdi, r8
mov r12, qword [rsp + 0x538]
mov esi, 1
mov rax, qword [rdx]
mov rcx, qword [rdi + rax]
cmp byte [rcx + 0x3c], r8b
je 0x46ef05
cmp byte [rcx + 0x3f], r8b
jne 0x46ef1e
cmp byte [rcx + 0x3e], r8b
jne 0x46ef1e
cmp qword [rcx + 0x20], r8
jne 0x46ef39
jmp 0x46ef1e
cmp dword [rcx], 0xffffffff
je 0x46ef1e
mov ecx, dword [rcx]
add rcx, rcx
mov rax, qword [r12 + 0x88]
cmp byte [rax + rcx*8 + 0xc], r8b
jne 0x46ef39
mov edx, r15d
lea rcx, [rsp + 0x1c8]
call fcn.00459ce8
mov rdx, qword [rsp + 0x540]
xor r8d, r8d
add r15d, esi
add rdi, 8
cmp r15d, dword [rdx + 8]
jb 0x46eee4
mov edi, dword [rsp + 0x1d0]
mov r12, qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x120]
mov r8, rdx
lea rdx, [0x0046cbd8]
lea rcx, [rsp + 0x1c8]
call fcn.00443dbc
xor eax, eax
cmp edi, eax
jbe 0x46f08b
mov r15, r12
mov ebp, edi
mov rbx, qword [rsp + 0x550]
mov rsi, qword [rsp + 0x538]
mov r13, qword [rsp + 0x540]
xor r14d, r14d
lea r12d, [rax + 1]
mov ecx, dword [r15]
mov rax, qword [r13]
mov rdi, qword [rax + rcx*8]
lea rcx, [rsp + 0x1e0]
call fcn.0040365c
nop
cmp byte [rdi + 0x3d], r14b
je 0x46eff4
lea r8, [rsp + 0x1f8]
lea rdx, [rsp + 0x260]
mov rcx, rdi
call fcn.0046b5d8
mov byte [rsp + 0x26e], r14b
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x1e0]
call fcn.00403858
jmp 0x46f020
lea r9, [rsp + 0x1f8]
lea r8, [rsp + 0x260]
mov edx, dword [rdi]
mov rcx, rsi
call fcn.0046c440
lea r8, [rsp + 0x1e0]
mov edx, dword [rdi]
mov rcx, rsi
call fcn.00466020
lea r9, [rsp + 0x1e0]
lea r8, [rsp + 0x1f8]
lea rdx, [rsp + 0x260]
mov rcx, rbx
call fcn.0046a3d8
nop
mov rcx, qword [rsp + 0x1e0]
call sub.msvcrt.dll_free
add r15, 4
sub rbp, r12
jne 0x46efa2
mov rbx, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x120]
mov r13d, dword [rsp + 0xd8]
mov r14, qword [rsp + 0x230]
mov rbp, qword [rsp + 0xd0]
mov r12, qword [rsp + 0x1c8]
mov rcx, r12
call sub.msvcrt.dll_free
xor r12d, r12d
mov qword [r14 + 0x28], r12
mov eax, r12d
mov edi, dword [rsp + 0x160]
cmp edi, r12d
jbe 0x46f0c8
mov r15, qword [rsp + 0x158]
lea rcx, [r15 + 0xc]
lea edx, [r12 + 1]
mov dword [rcx], eax
add eax, edx
add rcx, 0x10
cmp eax, edi
jb 0x46f0ba
jmp 0x46f0d0
mov r15, qword [rsp + 0x158]
lea rcx, [rsp + 0x158]
call fcn.0046c650
mov dword [rsp + 0x248], r12d
mov rax, r12
mov qword [rsp + 0x258], r12
cmp edi, r12d
jbe 0x472166
mov rdi, rax
shl rdi, 4
add rdi, r15
mov r12, qword [rsp + 0x568]
mov rdx, qword [r12]
lea rcx, [rsp + 0x170]
call fcn.0046d9f4
nop
xor eax, eax
cmp byte [r12 + 0x11], al
je 0x46f132
cmp byte [r12 + 0x33], al
je 0x46f132
mov r8b, 1
jmp 0x46f135
mov r8b, al
mov rdx, rdi
lea rcx, [rsp + 0x170]
call fcn.0046d794
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x47081b
xor r12d, r12d
cmp byte [rdi + 8], r12b
je 0x46f192
cmp byte [rsp + 0x199], r12b
jne 0x46f1ae
mov rax, qword [rsp + 0x270]
cmp rax, r12
je 0x46f184
lea rdx, [rax + 0x10]
lea rcx, [rsp + 0x1a0]
call fcn.00403858
mov eax, 1
mov byte [rsp + 0x199], al
jmp 0x46f1ae
mov byte [rsp + 0x199], r12b
mov dword [rsp + 0x1a8], r12d
mov rax, qword [rsp + 0x1a0]
mov word [rax], r12w
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x3e0]
call fcn.0045f460
nop
mov eax, dword [rdi + 0xc]
mov rax, qword [rbp + rax*8]
mov qword [rsp + 0x240], rax
mov dword [rsp + 0xe0], r12d
mov rdx, r12
mov qword [rsp + 0x128], r12
cmp dword [rax + 0x18], r12d
jbe 0x46fffd
mov r11, qword [rsp + 0x538]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x238], rcx
mov r8d, dword [rcx + rdx*8]
mov dword [rsp + 0xa8], r8d
mov rax, qword [r11 + 0x30]
mov rdi, r8
mov qword [rsp + 0x130], r8
mov eax, dword [rax + r8*4]
mov dword [rsp + 0xac], eax
cmp dword [rcx + rdx*8 + 4], eax
jne 0x46f4bd
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x46f2f9
mov rax, qword [rcx]
mov edx, 2
lea r9d, [rdx + 1]
call qword [rax + 0x20]
mov r12d, eax
xor edx, edx
cmp eax, edx
jne 0x470925
mov ecx, edx
mov r11, qword [rsp + 0x538]
mov rax, qword [r11 + 0x198]
movsxd r12, dword [rax + rdi*4]
mov rdi, r12
cmp dword [rsp + 0xac], edx
jbe 0x46f2f1
shl rdi, 4
mov rax, qword [r11 + 0x88]
cmp byte [rdi + rax + 0xc], dl
je 0x46f2d7
mov edx, 1
add ecx, edx
mov dword [rsp + 0xc8], ecx
mov rcx, qword [rsp + 0x98]
mov rax, qword [rcx]
lea r9d, [rdx + 2]
mov r8d, r12d
call qword [rax + 0x20]
mov dword [rsp + 0xb0], eax
xor edx, edx
cmp eax, edx
jne 0x470a3d
mov ecx, dword [rsp + 0xc8]
mov r11, qword [rsp + 0x538]
inc r12d
add rdi, 0x10
cmp ecx, dword [rsp + 0xac]
jb 0x46f287
mov rdi, qword [rsp + 0x130]
jmp 0x46f2f9
mov rdi, qword [rsp + 0x130]
mov r8, qword [r11 + 8]
mov rdx, qword [r11 + 0x48]
mov r10d, dword [rsp + 0xa8]
lea eax, [r10 + 1]
mov qword [rsp + 0xb8], rax
mov ecx, dword [rdx + rax*4]
mov eax, dword [rdx + rdi*4]
mov rdi, qword [r8 + rcx*8]
sub rdi, qword [r8 + rax*8]
mov eax, dword [rdx + r10*4]
mov r8, qword [r8 + rax*8]
add r8, qword [r11 + 0x178]
mov qword [rsp + 0x20], r14
mov r9, rdi
mov rax, qword [rsp + 0x548]
mov rdx, qword [rax + 0x80]
mov rcx, qword [rsp + 0x530]
call fcn.0046ca00
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x470b57
add qword [r14 + 0x28], rdi
lea ecx, [rax + 0x30]
call fcn.00402388
mov r12, rax
xor eax, eax
cmp r12, rax
je 0x46f399
mov qword [r12], rax
mov dword [r12 + 8], eax
mov qword [r12 + 0x10], rax
mov dword [r12 + 0x18], eax
mov qword [r12 + 0x20], rax
mov dword [r12 + 0x28], eax
jmp 0x46f39c
mov r12, rax
mov rdi, qword [rsp + 0x550]
lea rcx, [rdi + 0x70]
mov rdx, r12
call fcn.004010c0
mov r8, r12
mov edx, dword [rsp + 0xa8]
mov rcx, qword [rsp + 0x538]
call fcn.00466acc
mov rax, qword [rsp + 0x538]
mov r11, qword [rax + 0x48]
xor edx, edx
mov rax, qword [rsp + 0x130]
movsxd rcx, dword [r11 + rax*4]
cmp dword [r12 + 0x28], edx
jbe 0x46f443
lea rsi, [rdi + 0x40]
shl rcx, 3
mov ebp, edx
mov r14, qword [rsp + 0x538]
lea r13d, [rdx + 1]
mov rax, qword [r14 + 8]
lea rdi, [rcx + 8]
mov rdx, qword [rax + rdi]
sub rdx, qword [rax + rcx]
mov rcx, rsi
call fcn.004010c0
add ebp, r13d
mov rcx, rdi
cmp ebp, dword [r12 + 0x28]
jb 0x46f3fe
mov rsi, qword [rsp + 0x120]
mov r13d, dword [rsp + 0xd8]
mov r14, qword [rsp + 0x230]
mov rbp, qword [rsp + 0xd0]
mov rax, qword [rsp + 0x538]
mov rax, qword [rax + 0x40]
mov rdx, qword [rsp + 0x130]
mov edi, dword [rax + rdx*4]
mov rcx, qword [rsp + 0xb8]
mov r12d, dword [rax + rcx*4]
cmp rdi, r12
jae 0x46fd89
mov rbp, qword [rsp + 0x550]
mov r14, qword [rsp + 0x538]
mov ebx, 1
mov rdx, qword [r14 + 0x38]
mov rdx, qword [rdx + rdi*8]
lea rcx, [rbp + 0x30]
call fcn.004010c0
add rdi, rbx
cmp rdi, r12
jb 0x46f484
mov rbx, qword [rsp + 0x1f0]
mov r14, qword [rsp + 0x230]
mov rbp, qword [rsp + 0xd0]
xor r12d, r12d
jmp 0x46fd8c
mov qword [rsp + 0x1b0], r12
mov dword [rsp + 0x1b8], r12d
mov dword [rsp + 0x1bc], r12d
mov edx, r12d
mov dword [rsp + 0xb0], r12d
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x46f51c
mov rax, qword [rcx]
mov edx, 2
lea r9d, [rdx + 2]
call qword [rax + 0x20]
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x470c6f
mov edx, dword [rsp + 0xb0]
mov r11, qword [rsp + 0x538]
xor r12d, r12d
mov qword [rsp + 0xb8], r12
mov rax, qword [r11 + 0x198]
movsxd rcx, dword [rax + rdi*4]
cmp dword [rsp + 0xac], r12d
jbe 0x46f615
mov rdi, rcx
shl rdi, 4
lea r15, [rsi + rcx*4]
mov ebx, dword [rsp + 0xac]
mov r13, qword [rsp + 0x540]
xor ebp, ebp
lea esi, [rbp + 1]
mov r12b, bpl
mov rax, qword [r11 + 0x88]
mov qword [rsp + 0x138], rax
cmp byte [rdi + rax + 0xc], bpl
je 0x46f59a
add edx, esi
mov dword [rsp + 0xb0], edx
cmp dword [r15], ebp
jl 0x46f59a
mov ecx, dword [r15]
mov rax, qword [r13]
mov rdx, qword [rax + rcx*8]
movzx r12d, bpl
cmp byte [rdx + 0x3c], bpl
cmove r12d, esi
mov dl, r12b
lea rcx, [rsp + 0x1b0]
call fcn.00484b80
cmp r12b, bpl
je 0x46f5cb
mov rax, qword [rsp + 0x138]
mov r8, qword [rsp + 0xb8]
add r8, qword [rdi + rax]
mov qword [rsp + 0xb8], r8
add rdi, 0x10
add r15, 4
mov edx, dword [rsp + 0xb0]
cmp edx, ebx
mov r11, qword [rsp + 0x538]
jb 0x46f55c
mov rbx, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x120]
mov r13d, dword [rsp + 0xd8]
mov rbp, qword [rsp + 0xd0]
mov r15, qword [rsp + 0x158]
xor r12d, r12d
mov rax, qword [rsp + 0x550]
mov eax, dword [rax + 0x48]
mov dword [rsp + 0xb0], eax
mov qword [rsp + 0xc0], r12
mov qword [rsp + 0x138], r12
mov ecx, 0x38
call fcn.00402388
mov rdi, rax
cmp rax, r12
je 0x46f668
mov dword [rax + 0x10], r12d
lea rax, [0x004db1a8]
mov qword [rdi], rax
lea rax, [0x004db188]
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], r12
jmp 0x46f66b
mov rdi, r12
mov qword [rsp + 0x2a8], rdi
cmp rdi, r12
je 0x46f682
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
nop
mov rax, qword [rsp + 0x568]
cmp byte [rax + 0x33], r12b
je 0x46f7ae
mov rax, qword [rsp + 0x390]
lea rcx, [rax + 8]
neg rax
sbb rax, rax
and rax, rcx
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x280], r12
lea r8, [rsp + 0x280]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xe8]
call fcn.004116cc
lea rcx, [rsp + 0xe8]
call fcn.00411404
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0xc8], rax
mov r12, qword [rsp + 0x280]
test r12, r12
je 0x46f712
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax + 0x48]
test rcx, rcx
je 0x46f729
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsp + 0xc8]
mov qword [rax + 0x48], r12
mov r12, qword [rsp + 0x530]
xor eax, eax
cmp r12, rax
je 0x46f748
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
xor eax, eax
mov rcx, qword [rsp + 0x388]
cmp rcx, rax
je 0x46f75b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x388], r12
mov rcx, qword [rsp + 0x538]
mov rax, qword [rcx + 0x178]
mov qword [rsp + 0x3a0], rax
mov qword [rsp + 0x3a8], rcx
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x3b0], eax
mov rcx, qword [rsp + 0x280]
xor eax, eax
cmp rcx, rax
je 0x46f986
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x46f986
mov ecx, 0x60
call fcn.00402388
mov r12, rax
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rax
xor ecx, ecx
cmp rax, rcx
je 0x46f805
mov qword [rax + 0x30], rcx
mov qword [rax + 0x38], rcx
mov dword [rax + 0x40], ecx
lea rax, [0x004db228]
mov qword [r12], rax
mov qword [r12 + 0x50], rcx
mov dword [r12 + 0x58], ecx
mov ecx, 0x10000
call fcn.00402388
mov qword [r12 + 0x48], rax
xor ecx, ecx
jmp 0x46f810
mov r12, rcx
mov qword [rsp + 0x138], rcx
mov dword [r12 + 0x58], ecx
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
mov rcx, qword [rsp + 0xc0]
xor eax, eax
cmp rcx, rax
je 0x46f834
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0xc0], r12
lea rax, [r12 + 8]
mov qword [rsp + 0x140], rax
xor r12d, r12d
mov byte [rsp + 0x119], r12b
mov byte [rsp + 0x91], r12b
lea rcx, [rsp + 0x260]
call fcn.0040365c
nop
mov qword [rsp + 0x1d8], r12
mov byte [rsp + 0x11a], r12b
mov qword [rsp + 0x80], r12
lea eax, [r12 + 1]
mov dword [rsp + 0x78], eax
mov byte [rsp + 0x70], r12b
lea rax, [rsp + 0x260]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x91]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x119]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x11a]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x1d8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x538]
mov r9, rax
mov r8, qword [rax + 0x178]
mov rdx, qword [rsp + 0x530]
lea rcx, [rsp + 0x2e8]
call fcn.0045ae2c
mov r12d, eax
xor eax, eax
cmp r12d, eax
jne 0x470d95
mov r12, qword [rsp + 0x1d8]
cmp r12, rax
je 0x470f02
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
mov rax, qword [rsp + 0x138]
mov rcx, qword [rax + 0x50]
test rcx, rcx
je 0x46f95f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x138]
mov qword [rax + 0x50], r12
mov rcx, qword [rsp + 0x1d8]
xor eax, eax
cmp rcx, rax
je 0x46f979
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x260]
call sub.msvcrt.dll_free
mov rax, qword [rsp + 0x140]
mov r12, qword [rsp + 0x538]
mov qword [rax + 0x20], r12
mov r12, qword [rsp + 0x98]
test r12, r12
je 0x46f9b9
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
mov rax, qword [rsp + 0x140]
mov rcx, qword [rax + 0x28]
test rcx, rcx
je 0x46f9d0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x140]
mov qword [rax + 0x28], r12
mov r12, qword [rsp + 0xa0]
test r12, r12
je 0x46f9f3
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
mov rax, qword [rsp + 0x140]
mov rcx, qword [rax + 0x30]
xor eax, eax
cmp rcx, rax
je 0x46fa04
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x140]
mov qword [rcx + 0x30], r12
mov rax, qword [rsp + 0x538]
mov rax, qword [rax + 0x198]
mov rdx, qword [rsp + 0x130]
mov eax, dword [rax + rdx*4]
mov dword [rsp + 0xc8], eax
mov dword [rcx + 0x18], eax
lea rax, [rsp + 0x1b0]
mov qword [rcx + 0x10], rax
xor eax, eax
mov dword [rcx + 0x1c], eax
mov byte [rcx + 1], al
call fcn.0046bfc8
mov r12d, eax
xor ecx, ecx
cmp eax, ecx
jne 0x471059
mov rax, qword [rsp + 0x538]
mov qword [rdi + 0x30], rax
mov r12, qword [rsp + 0xc0]
mov eax, dword [rsp + 0xc8]
mov dword [rdi + 0x28], eax
lea rax, [rsp + 0x1b0]
mov qword [rdi + 0x20], rax
cmp r12, rcx
je 0x46fa93
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
mov rcx, qword [rdi + 0x18]
xor eax, eax
cmp rcx, rax
je 0x46faa4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x18], r12
mov rax, qword [rsp + 0x568]
cmp byte [rax + 0x33], 0
je 0x46fac3
lea rcx, [rsp + 0x2c0]
call fcn.00411ed8
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x548]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0xc8], rax
mov ecx, 0x30
call fcn.00402388
mov r12, rax
xor eax, eax
cmp r12, rax
je 0x46fb1d
mov qword [r12], rax
mov dword [r12 + 8], eax
mov qword [r12 + 0x10], rax
mov dword [r12 + 0x18], eax
mov qword [r12 + 0x20], rax
mov dword [r12 + 0x28], eax
jmp 0x46fb20
mov r12, rax
mov rcx, qword [rsp + 0x550]
add rcx, 0x70
mov rdx, r12
call fcn.004010c0
mov rax, qword [rsp + 0x550]
lea rcx, [rax + 0x40]
add rax, 0x30
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x278]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, r12
lea r8, [rsp + 0x250]
mov rdx, rdi
lea rcx, [rsp + 0x3e0]
call fcn.0045e528
mov dword [rsp + 0xc8], eax
cmp eax, 0x20000002
je 0x4711a2
mov rcx, qword [rsp + 0x568]
xor r9d, r9d
cmp byte [rcx + 0x33], r9b
je 0x46fca3
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
xor r12d, r12d
mov rdi, r12
mov qword [rsp + 0x2a8], r12
mov rcx, qword [rsp + 0xc0]
cmp rcx, r12
je 0x46fbe1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0xc0], r12
mov rcx, qword [rsp + 0x2d0]
call fcn.004c50c0
mov r12d, dword [rsp + 0x384]
mov r11d, 1
cmp r12d, r11d
je 0x46fc10
xor r9d, r9d
cmp byte [rsp + 0x380], r9b
je 0x46fc71
jmp 0x46fc13
xor r9d, r9d
mov rcx, qword [rsp + 0xa0]
cmp rcx, r9
je 0x46fc68
mov rax, qword [rsp + 0x538]
mov rdx, qword [rax + 0x198]
mov r10, qword [rcx]
mov eax, r12d
neg eax
sbb r9d, r9d
and r9d, 0xfffffffc
add r9d, 6
mov rax, qword [rsp + 0x130]
mov r8d, dword [rdx + rax*4]
mov edx, r11d
call qword [r10 + 0x28]
mov dword [rsp + 0xa8], eax
xor r9d, r9d
cmp eax, r9d
jne 0x4712e6
cmp r12d, r9d
jne 0x471422
cmp r12d, r9d
jne 0x47151c
mov r12d, dword [rsp + 0xc8]
cmp r12d, r9d
jne 0x471952
mov r8, qword [rsp + 0xb8]
cmp qword [rsp + 0x110], r8
jne 0x470810
jmp 0x46fcd7
mov rcx, qword [rsp + 0x138]
mov r12d, dword [rcx + 0x58]
mov ecx, 1
cmp r12d, ecx
je 0x471614
cmp r12d, r9d
jne 0x47184d
cmp eax, r9d
jne 0x47194f
mov r8, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x140]
mov rax, qword [rdx + 0x10]
mov ecx, dword [rdx + 0x1c]
sub ecx, dword [rax + 8]
neg ecx
sbb r12d, r12d
and r12d, 0x80004005
jne 0x471a5b
cmp qword [rsp + 0x278], r8
jne 0x471b64
cmp rdi, r12
je 0x46fd18
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r12
je 0x46fd2b
mov rax, qword [rcx]
call qword [rax + 0x10]
movsxd r8, dword [rsp + 0xb0]
mov rdx, r8
mov r9, qword [rsp + 0x550]
cmp r8d, dword [r9 + 0x48]
jae 0x46fd6e
shl rdx, 3
mov esi, 1
mov rax, qword [r9 + 0x40]
mov rcx, qword [rax + rdx]
add qword [r14 + 0x38], rcx
add r8d, esi
add rdx, 8
cmp r8d, dword [r9 + 0x48]
jb 0x46fd4d
mov rsi, qword [rsp + 0x120]
mov rax, qword [rsp + 0x278]
add qword [r14 + 0x30], rax
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
jmp 0x46fd8c
xor r12d, r12d
mov rcx, qword [rsp + 0x550]
add rcx, 0x20
mov rax, qword [rsp + 0x238]
mov rdx, qword [rsp + 0x128]
mov edx, dword [rax + rdx*8 + 4]
call fcn.00459ce8
mov r9d, r12d
mov r11, qword [rsp + 0x538]
mov rax, qword [r11 + 0x198]
mov rcx, qword [rsp + 0x130]
movsxd rdx, dword [rax + rcx*4]
mov dword [rsp + 0xb0], edx
cmp dword [rsp + 0xac], r12d
jbe 0x46ffbf
mov r12, rdx
shl r12, 4
lea r8, [rsi + rdx*4]
mov qword [rsp + 0xb8], r8
mov ebp, dword [rsp + 0xac]
mov r15, qword [rsp + 0x550]
mov r13, qword [rsp + 0x540]
xor r10d, r10d
lea ebx, [r10 + 1]
mov rax, qword [r11 + 0x88]
cmp byte [r12 + rax + 0xc], r10b
je 0x46ff7a
add r9d, ebx
mov dword [rsp + 0xc8], r9d
cmp dword [r8], r10d
jl 0x46ff7a
mov ecx, dword [r8]
mov rax, qword [r13]
mov rdi, qword [rax + rcx*8]
cmp byte [rdi + 0x3c], r10b
jne 0x46ff7a
lea rcx, [rsp + 0x298]
call fcn.0040365c
nop
lea r9, [rsp + 0x1f8]
lea r8, [rsp + 0x2b0]
mov edx, dword [rsp + 0xb0]
mov rcx, qword [rsp + 0x538]
call fcn.0046c440
xor ebx, ebx
cmp byte [rdi + 0x3d], bl
je 0x46ff11
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x218], eax
mov al, byte [rdi + 0x40]
mov byte [rsp + 0x220], al
mov rax, qword [rdi + 8]
mov qword [rsp + 0x1f8], rax
mov al, byte [rdi + 0x41]
mov byte [rsp + 0x21c], al
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0x200], rax
mov al, byte [rdi + 0x42]
mov byte [rsp + 0x21d], al
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0x208], rax
mov al, byte [rdi + 0x43]
mov byte [rsp + 0x21e], al
mov al, byte [rdi + 0x3e]
mov byte [rsp + 0x221], al
mov byte [rsp + 0x21f], bl
mov al, byte [rdi + 0x3f]
mov byte [rsp + 0x2bd], al
lea rdx, [rdi + 0x28]
lea rcx, [rsp + 0x298]
call fcn.00403858
jmp 0x46ff26
lea r8, [rsp + 0x298]
mov rcx, qword [rsp + 0x538]
call fcn.00466020
lea r9, [rsp + 0x298]
lea r8, [rsp + 0x1f8]
lea rdx, [rsp + 0x2b0]
mov rcx, r15
call fcn.0046a3d8
nop
mov rcx, qword [rsp + 0x298]
call sub.msvcrt.dll_free
mov edx, dword [rsp + 0xb0]
mov r8, qword [rsp + 0xb8]
mov r9d, dword [rsp + 0xc8]
mov r11, qword [rsp + 0x538]
xor r10d, r10d
lea ebx, [r10 + 1]
add edx, ebx
mov dword [rsp + 0xb0], edx
add r12, 0x10
add r8, 4
mov qword [rsp + 0xb8], r8
cmp r9d, ebp
jb 0x46fe15
mov rbx, qword [rsp + 0x1f0]
mov r13d, dword [rsp + 0xd8]
mov rbp, qword [rsp + 0xd0]
mov r15, qword [rsp + 0x158]
xor r12d, r12d
mov r9d, dword [rsp + 0xe0]
mov r8d, 1
add r9d, r8d
mov dword [rsp + 0xe0], r9d
mov rdx, qword [rsp + 0x128]
add rdx, r8
mov qword [rsp + 0x128], rdx
mov rax, qword [rsp + 0x240]
cmp r9d, dword [rax + 0x18]
jb 0x46f1f9
mov edi, dword [rax + 8]
mov dword [rsp + 0xac], edi
cmp edi, r12d
jne 0x470046
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
jmp 0x4707d2
mov qword [rsp + 0x148], r12
mov dword [rsp + 0x150], r12d
mov dword [rsp + 0x154], r12d
mov edx, edi
lea rcx, [rsp + 0x148]
call fcn.0046ce1c
mov rax, qword [rsp + 0x568]
mov r11b, byte [rax + 0x31]
mov byte [rsp + 0x90], r11b
cmp edi, r12d
jbe 0x47012f
mov rdi, qword [rsp + 0x148]
mov ebp, dword [rsp + 0xac]
mov r15b, r11b
mov rsi, qword [rsp + 0x240]
mov r13, qword [rsp + 0x540]
mov r14d, 1
mov rdx, qword [rsi]
mov ecx, dword [r12 + rdx]
mov rax, qword [r13]
mov r9b, r15b
mov r8, qword [rax + rcx*8]
mov edx, dword [r12 + rdx]
lea rcx, [rsp + 0x1f8]
call fcn.0046b450
mov rcx, qword [rax]
mov qword [rdi], rcx
mov rcx, qword [rax + 8]
mov qword [rdi + 8], rcx
mov rax, qword [rax + 0x10]
mov qword [rdi + 0x10], rax
add r12, 4
add rdi, 0x18
sub rbp, r14
jne 0x4700b2
mov rsi, qword [rsp + 0x120]
mov r13d, dword [rsp + 0xd8]
mov r14, qword [rsp + 0x230]
mov rbp, qword [rsp + 0xd0]
mov r15, qword [rsp + 0x158]
mov r11b, byte [rsp + 0x90]
mov edi, dword [rsp + 0xac]
mov byte [rsp + 0x118], r11b
lea r8, [rsp + 0x118]
lea rdx, [0x0046b9e4]
lea rcx, [rsp + 0x148]
call fcn.0046c6c0
mov r12d, edi
xor r10d, r10d
mov rdi, r10
mov qword [rsp + 0x240], r10
cmp r12, r10
je 0x470183
mov rcx, r12
shl rcx, 2
call fcn.00402388
mov rdi, rax
mov qword [rsp + 0x240], rax
xor r10d, r10d
mov eax, dword [rsp + 0xac]
cmp eax, r10d
jbe 0x4701be
mov rcx, rdi
mov rdx, qword [rsp + 0x148]
add rdx, 8
mov r11d, 1
mov eax, dword [rdx]
mov dword [rcx], eax
add rdx, 0x18
add rcx, 4
sub r12, r11
jne 0x4701a4
mov eax, dword [rsp + 0xac]
jmp 0x4701c4
mov r11d, 1
mov ecx, r10d
mov dword [rsp + 0xa8], r10d
mov r9, r10
mov qword [rsp + 0x130], r10
cmp eax, r10d
jbe 0x470786
jmp 0x4701ec
xor r10d, r10d
lea r11d, [r10 + 1]
mov rdx, r10
mov qword [rsp + 0xb8], r10
mov r12d, r10d
mov qword [rsp + 0x138], r10
cmp ecx, eax
jae 0x470320
lea rsi, [rdi + r9*4]
mov rbx, r10
mov r14d, dword [rsp + 0xa8]
mov rdi, qword [rsp + 0x568]
mov r13, qword [rsp + 0x540]
mov eax, r12d
cmp rax, qword [rsp + 0x290]
jae 0x4702eb
mov ecx, dword [rsi]
mov rax, qword [r13]
mov r15, qword [rax + rcx*8]
add rdx, qword [r15 + 0x20]
mov qword [rsp + 0xb8], rdx
cmp rdx, qword [rdi + 0x28]
ja 0x4702eb
cmp byte [rdi + 0x30], r10b
je 0x4702c3
lea rcx, [r15 + 0x28]
call fcn.00403bc0
mov ebp, eax
mov dx, 0x2e
lea rcx, [r15 + 0x28]
call fcn.00403b88
cmp eax, ebp
jg 0x470282
mov eax, dword [r15 + 0x30]
jmp 0x470284
inc eax
mov ecx, eax
mov rax, qword [r15 + 0x28]
lea rcx, [rax + rcx*2]
xor r10d, r10d
cmp r12d, r10d
jne 0x4702a7
mov rbx, rcx
mov rdx, qword [rsp + 0xb8]
lea r11d, [r10 + 1]
jmp 0x4702c3
mov rdx, rbx
call fcn.004029c0
xor r10d, r10d
cmp al, r10b
je 0x4702e5
mov rdx, qword [rsp + 0xb8]
lea r11d, [r10 + 1]
add r12d, r11d
add qword [rsp + 0x138], r11
add rsi, 4
lea eax, [r12 + r14]
cmp eax, dword [rsp + 0xac]
jb 0x470229
jmp 0x4702eb
mov r11d, 1
mov dword [rsp + 0xb0], r12d
cmp r12d, r11d
mov rbx, qword [rsp + 0x1f0]
mov rdi, qword [rsp + 0x240]
mov rsi, qword [rsp + 0x120]
mov r13d, dword [rsp + 0xd8]
mov r14, qword [rsp + 0x230]
jae 0x470333
mov r12d, r11d
mov dword [rsp + 0xb0], r11d
mov qword [rsp + 0x138], r11
mov rcx, r14
call fcn.004111b8
mov ebp, eax
xor r15d, r15d
cmp eax, r15d
jne 0x471c6f
mov ecx, 0x80
call fcn.00402388
mov r15, rax
xor ecx, ecx
cmp rax, rcx
je 0x4703a3
mov dword [rax + 0x10], ecx
lea rax, [0x004db1e8]
mov qword [r15], rax
lea rax, [0x004db1c8]
mov qword [r15 + 8], rax
mov qword [r15 + 0x18], rcx
mov qword [r15 + 0x48], rcx
mov qword [r15 + 0x50], rcx
mov dword [r15 + 0x58], ecx
mov dword [r15 + 0x5c], ecx
mov qword [r15 + 0x60], rcx
mov dword [r15 + 0x68], ecx
mov dword [r15 + 0x6c], ecx
mov qword [r15 + 0x70], rcx
mov dword [r15 + 0x78], ecx
mov dword [r15 + 0x7c], ecx
jmp 0x4703a6
mov r15, rcx
mov qword [rsp + 0x238], r15
cmp r15, rcx
je 0x4703bd
mov rax, qword [r15]
mov rcx, r15
call qword [rax + VariantCopy]
nop
mov eax, dword [rsp + 0xa8]
lea r8, [rdi + rax*4]
mov r9d, r12d
mov rdx, qword [rsp + 0x560]
mov rcx, r15
call fcn.00460824
mov rdx, qword [rsp + 0x550]
mov eax, dword [rdx + 0x48]
mov dword [rsp + 0xe0], eax
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x288], rcx
mov rax, qword [rsp + 0x548]
mov rbp, qword [rax + 0x80]
lea rax, [rdx + 0x40]
mov qword [rsp + 0x128], rax
lea r12, [rdx + 0x30]
lea rcx, [rdx + 0x70]
call fcn.0046a514
mov r9, rax
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbp
lea rax, [rsp + 0x288]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0x250]
mov rdx, r15
lea rcx, [rsp + 0x3e0]
call fcn.0045e528
mov ebp, eax
xor r10d, r10d
cmp eax, r10d
jne 0x471d5e
mov eax, dword [r15 + 0x40]
cmp dword [r15 + 0x44], eax
jne 0x471e5e
movsxd rdx, dword [rsp + 0xe0]
mov r8, rdx
mov r9, qword [rsp + 0x550]
cmp edx, dword [r9 + 0x48]
jae 0x4704d5
shl r8, 3
mov rsi, qword [rsp + 0x128]
lea ebx, [r10 + 1]
mov rax, qword [rsi]
mov rcx, qword [r8 + rax]
add qword [r14 + 0x38], rcx
add edx, ebx
add r8, 8
cmp edx, dword [r9 + 0x48]
jb 0x4704ae
mov rbx, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x120]
mov rax, qword [rsp + 0x288]
add qword [r14 + 0x30], rax
mov edx, r10d
mov dword [rsp + 0xe0], r10d
mov rbp, r10
mov qword [rsp + 0x140], r10
mov dword [rsp + 0xc8], r10d
mov r12d, dword [rsp + 0xb0]
cmp r12d, r10d
jbe 0x4706f5
mov qword [rsp + 0xb8], r10
mov qword [rsp + 0x128], r10
mov rax, qword [rsp + 0x130]
lea rcx, [rdi + rax*4]
mov qword [rsp + 0xc0], rcx
mov ecx, dword [rcx]
mov rax, qword [rsp + 0x540]
mov rax, qword [rax]
mov rbp, qword [rax + rcx*8]
lea rcx, [rsp + 0x1e0]
call fcn.0040365c
nop
xor eax, eax
cmp byte [rbp + 0x3d], al
je 0x470585
lea r8, [rsp + 0x1f8]
lea rdx, [rsp + 0x1c8]
mov rcx, rbp
call fcn.0046b5d8
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x1e0]
call fcn.00403858
jmp 0x4705bd
lea r9, [rsp + 0x1f8]
lea r8, [rsp + 0x1c8]
mov edx, dword [rbp]
mov rcx, qword [rsp + 0x538]
call fcn.0046c440
lea r8, [rsp + 0x1e0]
mov edx, dword [rbp]
mov rcx, qword [rsp + 0x538]
call fcn.00466020
xor edx, edx
cmp byte [rsp + 0x221], dl
jne 0x471f5c
cmp byte [rsp + 0x1d5], dl
jne 0x471f5c
mov ecx, dword [rsp + 0xc8]
mov rax, qword [r15 + 0x50]
cmp byte [rcx + rax], dl
jne 0x47060f
mov rax, qword [rsp + 0x140]
add rax, qword [rbp + 0x20]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x1e0]
call sub.msvcrt.dll_free
jmp 0x47069f
mov rax, qword [r15 + 0x60]
mov rcx, qword [rsp + 0x128]
mov ecx, dword [rcx + rax]
mov dword [rsp + 0x1d0], ecx
mov rax, qword [r15 + 0x70]
mov rcx, qword [rsp + 0xb8]
mov rcx, qword [rcx + rax]
mov qword [rsp + 0x1c8], rcx
cmp rcx, rdx
je 0x47065e
mov eax, 1
mov byte [rsp + 0x1d6], al
mov byte [rsp + 0x1d4], al
add dword [rsp + 0xe0], eax
jmp 0x47066c
mov byte [rsp + 0x1d6], dl
mov byte [rsp + 0x1d4], dl
lea r9, [rsp + 0x1e0]
lea r8, [rsp + 0x1f8]
lea rdx, [rsp + 0x1c8]
mov rcx, qword [rsp + 0x550]
call fcn.0046a3d8
nop
mov rcx, qword [rsp + 0x1e0]
call sub.msvcrt.dll_free
mov eax, dword [rsp + 0xc8]
inc eax
mov dword [rsp + 0xc8], eax
add qword [rsp + 0x128], 4
mov rcx, qword [rsp + 0xc0]
add rcx, 4
mov qword [rsp + 0xc0], rcx
add qword [rsp + 0xb8], 8
cmp eax, r12d
jb 0x470534
mov rbp, qword [rsp + 0x140]
mov edx, dword [rsp + 0xe0]
mov r9, qword [rsp + 0x550]
lea rcx, [r9 + 0x20]
call fcn.00459ce8
add dword [rsp + 0xa8], r12d
mov r8, qword [rsp + 0x138]
add qword [rsp + 0x130], r8
xor r12d, r12d
cmp rbp, r12
je 0x47074f
mov rdx, qword [rsp + 0x1c0]
cmp rdx, rbp
jb 0x47074f
sub rdx, rbp
mov qword [rsp + 0x1c0], rdx
mov rcx, qword [rsp + 0x560]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ebp, eax
cmp eax, r12d
jne 0x472068
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
mov eax, dword [rsp + 0xac]
mov ecx, dword [rsp + 0xa8]
cmp ecx, eax
mov r9, qword [rsp + 0x130]
jb 0x4701e5
mov rbp, qword [rsp + 0xd0]
mov r15, qword [rsp + 0x158]
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x148]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
mov r12d, dword [rsp + 0x248]
mov ecx, 1
add r12d, ecx
mov dword [rsp + 0x248], r12d
mov rax, qword [rsp + 0x258]
add rax, rcx
mov qword [rsp + 0x258], rax
cmp r12d, dword [rsp + 0x160]
jae 0x472163
jmp 0x46f0f9
mov r12d, 0x80004005
jmp 0x471952
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor eax, eax
cmp rbx, rax
je 0x470854
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x4708db
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x4708d6
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x4708a9
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x47090a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x47091d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x472388
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor eax, eax
cmp rbx, rax
je 0x47096c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x4709f3
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x4709ee
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x4709c1
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x470a22
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x470a35
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x472388
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor r12d, r12d
cmp rbx, r12
je 0x470a85
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x470b09
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x470b04
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x470ad7
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x470b38
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x470b4b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [rsp + 0xb0]
jmp 0x472388
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor eax, eax
cmp rbx, rax
je 0x470b9e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x470c25
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x470c20
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x470bf3
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x470c54
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x470c67
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x472388
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor eax, eax
cmp rbx, rax
je 0x470cc4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x470d4b
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x470d46
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x470d19
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x470d7a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x470d8d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x472388
mov rcx, qword [rsp + 0x1d8]
cmp rcx, rax
je 0x470da9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x260]
call sub.msvcrt.dll_free
nop
xor eax, eax
cmp rdi, rax
je 0x470dc8
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
xor edi, edi
cmp rcx, rdi
je 0x470dde
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
cmp rbx, rdi
je 0x470e31
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x470eb8
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x470eb3
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x470e86
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x470ee7
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x470efa
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x472388
mov rcx, qword [rsp + 0x260]
call sub.msvcrt.dll_free
nop
xor r12d, r12d
cmp rdi, r12
je 0x470f22
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r12
je 0x470f36
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
cmp rbx, r12
je 0x470f89
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x47100d
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x471008
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x470fdb
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x47103c
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x47104f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x472388
cmp rdi, rcx
je 0x471068
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
xor edi, edi
cmp rcx, rdi
je 0x47107e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
cmp rbx, rdi
je 0x4710d1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
xor r14d, r14d
cmp r13d, r14d
je 0x471158
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r14
je 0x471153
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r14d
jne 0x471126
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r14
je 0x471187
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r14
je 0x47119a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x472388
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
xor r12d, r12d
cmp rcx, r12
je 0x4711c3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
cmp rbx, r12
je 0x471216
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x47129a
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x471295
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x471268
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x4712c9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x4712dc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x472388
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x4712fa
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor r12d, r12d
cmp rbx, r12
je 0x471350
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
movsxd rax, r13d
cmp r13d, r12d
je 0x4713d4
lea rdi, [rbp + rax*8]
mov eax, 0xffffffff
add r13d, eax
sub rdi, 8
mov rbx, qword [rdi]
cmp rbx, r12
je 0x4713cf
mov rcx, qword [rbx + 0x10]
call sub.msvcrt.dll_free
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov rcx, rbx
call sub.msvcrt.dll_free
mov eax, 0xffffffff
cmp r13d, r12d
jne 0x4713a2
mov rcx, rbp
call sub.msvcrt.dll_free
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x471403
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x471416
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, dword [rsp + 0xa8]
jmp 0x472388
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x471436
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x47148b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x4714ff
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x471512
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x472388
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x471530
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x471585
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x4715f9
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47160c
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, r12d
jmp 0x472388
mov rcx, qword [rsp + 0xa0]
cmp rcx, r9
je 0x471748
mov rax, qword [rcx]
mov edx, 2
mov r9d, edx
mov r8d, dword [rsp + 0xa8]
call qword [rax + 0x28]
mov ebp, eax
xor r12d, r12d
cmp eax, r12d
je 0x47174b
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r12
je 0x471667
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
cmp rbx, r12
je 0x4716ba
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x47172e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x471741
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x472388
xor r12d, r12d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
cmp rcx, r12
je 0x471769
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
cmp rbx, r12
je 0x4717bc
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x471830
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x471843
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x472388
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xc0]
xor edi, edi
cmp rcx, rdi
je 0x47186d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
cmp rbx, rdi
je 0x4718c0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x471934
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x471947
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, r12d
jmp 0x472388
mov r12d, eax
cmp rdi, r9
je 0x471963
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x471977
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x4719cc
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x471a40
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x471a53
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, r12d
jmp 0x472388
cmp rdi, r9
je 0x471a6c
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x471a80
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x471ad5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x471b49
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x471b5c
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, r12d
jmp 0x472388
cmp rdi, r9
je 0x471b75
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
xor r9d, r9d
mov rcx, qword [rsp + 0xc0]
cmp rcx, r9
je 0x471b89
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x1b0]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x471bde
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x471c52
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x471c65
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x472388
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x148]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
cmp rbx, r15
je 0x471ccb
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, qword [rsp + 0x158]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r15
je 0x471d44
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r15
je 0x471d57
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x472388
cmp r15, r10
je 0x471d6d
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x148]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x471dcb
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, qword [rsp + 0x158]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x471e44
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x471e57
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x472388
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x148]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x471ec6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, qword [rsp + 0x158]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x471f3f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x471f52
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x472388
mov rcx, qword [rsp + 0x1e0]
call sub.msvcrt.dll_free
nop
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x148]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x471fd2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, qword [rsp + 0x158]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x47204b
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47205e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, 0x80004005
jmp 0x472388
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x10]
nop
mov rcx, rdi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x148]
call sub.msvcrt.dll_free
nop
lea rcx, [rsp + 0x3e0]
call fcn.0045e484
nop
mov rcx, qword [rsp + 0x1a0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x180]
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x170]
call fcn.0045dda8
nop
xor edi, edi
cmp rbx, rdi
je 0x4720d0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, qword [rsp + 0x158]
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, rdi
je 0x472149
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, rdi
je 0x47215c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebp
jmp 0x472388
xor r12d, r12d
mov rcx, r14
call fcn.004111b8
mov edi, eax
cmp eax, r12d
je 0x472216
cmp rbx, r12
je 0x472188
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x4721fc
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x47220f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x472388
mov rcx, qword [rsp + 0x550]
call fcn.0046c808
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x4722f0
mov rax, qword [rcx]
mov r9d, 7
mov r8d, 0xffffffff
xor edx, edx
call qword [rax + 0x20]
mov edi, eax
cmp eax, r12d
je 0x4722f0
cmp rbx, r12
je 0x472262
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x4722d6
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x4722e9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, edi
jmp 0x472388
cmp rbx, r12
je 0x4722ff
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0x2c0]
call fcn.0046d1d8
nop
lea rcx, [rsp + 0xf8]
call fcn.004c5070
lea rcx, [rsp + 0xf0]
call fcn.004c5070
lea rcx, [rsp + 0xe8]
call fcn.004c5070
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x10]
nop
lea rcx, [rsp + 0xd0]
call fcn.0043877c
nop
mov rcx, r15
call sub.msvcrt.dll_free
nop
mov rcx, rsi
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
je 0x472373
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
cmp rcx, r12
je 0x472386
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
add rsp, 0x4e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret