Function at 0x467489
Capabilities:
Access peb ldr_data
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push 0x2cc
mov eax, 0x49d72e
call fcn.0046c7ed
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x210], eax
xor ebx, ebx
movaps xmm0, xmmword [0x4b6ac0]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x114], eax
movups xmmword [ebp - 0x158], xmm0
mov word [ebp - 0x148], 0x100
call fcn.00413cbf
sub esp, 0x18
lea eax, [ebp - 0x158]
mov ecx, esp
push eax
call fcn.0041437c
lea eax, [ebp - 0x23c]
mov ecx, 0x4c7b50
push eax
call fcn.00465c44
mov dword [ebp - 4], ebx
mov eax, dword [0x4cad88]
mov dword [ebp - 0x200], eax
test eax, eax
jne 0x4675cf
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov ebx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
add ebx, esi
mov dword [ebp - 0x204], ecx
cmp ebx, esi
je 0x4675aa
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x4675aa
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x1fc], ecx
mov edx, dword [ecx]
mov ecx, 0x4c27f866
add edx, esi
mov dword [ebp - 0x1f4], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x1ed], cl
test cl, cl
mov ecx, dword [ebp - 0x1fc]
je 0x4675a6
mov cl, byte [ebp - 0x1ed]
mov esi, dword [ebp - 0x1f4]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x467579
mov dword [ebp - 0x1f4], esi
cmp dword [ebp - 0x1f4], 0xe304b9db
mov esi, dword [eax + 0x18]
je 0x4675b1
mov ecx, dword [ebp - 0x1fc]
test edi, edi
jne 0x467541
mov eax, dword [eax]
jmp 0x467518
mov eax, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x1c]
add eax, esi
add ecx, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
mov dword [ebp - 0x200], eax
mov dword [0x4cad88], eax
mov ebx, dword [0x4cad90]
test ebx, ebx
jne 0x46769b
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov ebx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
add ebx, esi
mov dword [ebp - 0x204], ecx
cmp ebx, esi
je 0x46767b
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x46767b
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x1fc], ecx
mov edx, dword [ecx]
mov ecx, 0x92890ddb
add edx, esi
mov dword [ebp - 0x1f4], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x1ed], cl
test cl, cl
mov ecx, dword [ebp - 0x1fc]
je 0x467677
mov cl, byte [ebp - 0x1ed]
mov esi, dword [ebp - 0x1f4]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x46764a
mov dword [ebp - 0x1f4], esi
cmp dword [ebp - 0x1f4], 0x8f90ec5
mov esi, dword [eax + 0x18]
je 0x467682
mov ecx, dword [ebp - 0x1fc]
test edi, edi
jne 0x467612
mov eax, dword [eax]
jmp 0x4675e9
mov eax, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x1c]
add eax, esi
add ecx, esi
movzx eax, word [eax + edi*2]
mov ebx, dword [ecx + eax*4]
add ebx, esi
mov dword [0x4cad90], ebx
lea eax, [ebp - 0x144]
mov esi, 0x4c7b50
push eax
mov ecx, esi
call fcn.004183a3
mov edi, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1f4]
mov word [ebp - 0x1f4], 0xe9
mov byte [ebp - 0x1f2], 1
call fcn.004134d0
lea ecx, [ebp - 0x1f8]
mov word [ebp - 0x1f8], 0xe9
mov byte [ebp - 0x1f6], 1
call fcn.004134d0
lea eax, [ebp - 0x1ec]
mov ecx, esi
push eax
call fcn.004183a3
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 2
push ecx
mov edx, eax
lea ecx, [ebp - 0x1d4]
call fcn.00415f77
mov esi, eax
sub esp, 0x14
mov byte [ebp - 4], 3
mov ecx, esp
push dword [ebp - 0x23c]
call fcn.004143db
push 0
push esi
lea eax, [ebp - 0x1bc]
mov ecx, 0x4c7b50
push eax
call fcn.00465f81
mov esi, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x128], 0xa0b4a39a
mov dword [ebp - 0x124], 0xb3b295fe
mov dword [ebp - 0x120], 0xfae3acb9
mov word [ebp - 0x11c], 0x100
call fcn.00412954
push esi
lea edx, [ebp - 0x128]
lea ecx, [ebp - 0x1a4]
call fcn.0041b639
pop ecx
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x18c]
call fcn.00415f77
pop ecx
push edi
push eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x174]
push dword [ebp - 0x210]
call fcn.0041becc
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 7
call fcn.00414242
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push eax
call ebx
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x218], ecx
mov dword [ebp - 0x214], eax
lea ecx, [ebp - 0x174]
call fcn.004151f6
lea ecx, [ebp - 0x18c]
call fcn.004151f6
lea ecx, [ebp - 0x1a4]
call fcn.004151f6
lea ecx, [ebp - 0x1bc]
call fcn.004151f6
lea ecx, [ebp - 0x1d4]
call fcn.004151f6
lea ecx, [ebp - 0x1ec]
call fcn.004151f6
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0xf
call fcn.004151f6
cmp dword [ebp - 0x214], 0
jne 0x46794c
mov ecx, 0x4c7b58
call fcn.00414142
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
mov dword [ebp - 0x1fc], edi
cmp edi, edx
je 0x4678dc
mov esi, dword [edi + 0x18]
test esi, esi
je 0x4678dc
mov eax, dword [edi + 0x20]
lea ebx, [eax + esi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov eax, 0xde7dffed
mov ecx, dword [ebx]
dec esi
add ecx, edx
mov dword [ebp - 0x1f0], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x4678d2
mov edi, dword [ebp - 0x1f0]
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4678a8
mov dword [ebp - 0x1f0], edi
cmp dword [ebp - 0x1f0], 0xaee8004d
mov edi, dword [ebp - 0x1fc]
je 0x467935
test esi, esi
jne 0x467888
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x200], eax
cmp eax, dword [ebp - 0x204]
je 0x4678f8
cmp dword [ecx + 0x18], 0
jne 0x467863
xor eax, eax
push 0
call eax
pop ecx
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0xbeb8b1a9
mov dword [ebp - 0x114], 0x100b0b6
call fcn.00413d30
mov ecx, dword [ebp - 0x20c]
lea eax, [ebp - 0x118]
push eax
call fcn.0041437c
jmp 0x4689ec
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x4678fa
mov ebx, dword [0x4cad6c]
test ebx, ebx
jne 0x467a18
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov ebx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
add ebx, esi
mov dword [ebp - 0x204], ecx
cmp ebx, esi
je 0x4679f8
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x4679f8
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x200], ecx
mov edx, dword [ecx]
mov ecx, 0x1d2e0a85
add edx, esi
mov dword [ebp - 0x1fc], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x1ed], cl
test cl, cl
mov ecx, dword [ebp - 0x200]
je 0x4679f4
mov cl, byte [ebp - 0x1ed]
mov esi, dword [ebp - 0x1fc]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4679c7
mov dword [ebp - 0x1fc], esi
cmp dword [ebp - 0x1fc], 0xe4fda226
mov esi, dword [eax + 0x18]
je 0x4679ff
mov ecx, dword [ebp - 0x200]
test edi, edi
jne 0x46798f
mov eax, dword [eax]
jmp 0x467966
mov eax, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x1c]
add eax, esi
add ecx, esi
movzx eax, word [eax + edi*2]
mov ebx, dword [ecx + eax*4]
add ebx, esi
mov dword [0x4cad6c], ebx
mov eax, dword [0x4cad54]
test eax, eax
jne 0x467aef
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x204], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x204], ecx
cmp ecx, esi
je 0x467aca
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x467aca
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x200], ecx
mov edx, dword [ecx]
mov ecx, 0x202bd0a7
add edx, esi
mov dword [ebp - 0x1fc], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x1ed], cl
test cl, cl
mov ecx, dword [ebp - 0x200]
je 0x467ac6
mov cl, byte [ebp - 0x1ed]
mov esi, dword [ebp - 0x1fc]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x467a99
mov dword [ebp - 0x1fc], esi
cmp dword [ebp - 0x1fc], 0x6eaed526
mov esi, dword [eax + 0x18]
je 0x467ad1
mov ecx, dword [ebp - 0x200]
test edi, edi
jne 0x467a61
mov eax, dword [eax]
jmp 0x467a31
mov eax, dword [ebp - 0x204]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
mov dword [0x4cad54], eax
xor ecx, ecx
push ecx
push 0x4400000
push ecx
push ecx
push dword [ebp - 0x114]
push dword [ebp - 0x214]
call eax
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], eax
mov byte [ebp - 4], 0x10
test eax, eax
jne 0x467c2e
mov ecx, 0x4c7b58
call fcn.00414142
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
mov dword [ebp - 0x114], edi
cmp edi, edx
je 0x467bbe
mov esi, dword [edi + 0x18]
test esi, esi
je 0x467bbe
mov eax, dword [edi + 0x20]
lea ebx, [eax + esi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov eax, 0x850f98a0
mov ecx, dword [ebx]
dec esi
add ecx, edx
mov dword [ebp - 0x1fc], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x467bb4
mov edi, dword [ebp - 0x1fc]
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x467b8a
mov dword [ebp - 0x1fc], edi
cmp dword [ebp - 0x1fc], 0x25c0f870
mov edi, dword [ebp - 0x114]
je 0x467c17
test esi, esi
jne 0x467b6a
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x200], eax
cmp eax, dword [ebp - 0x204]
je 0x467bda
cmp dword [ecx + 0x18], 0
jne 0x467b45
xor eax, eax
push 0
call eax
pop ecx
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0xbeb8b1a9
mov dword [ebp - 0x114], 0x100b0b6
call fcn.00413d30
mov ecx, dword [ebp - 0x20c]
lea eax, [ebp - 0x118]
push eax
call fcn.0041437c
jmp 0x4689e1
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x467bdc
lea ecx, [ebp - 0x1f0]
mov word [ebp - 0x1f0], 0x100
call fcn.004129e4
mov ebx, dword [0x4c7b50]
lea eax, [ebp - 0x1ed]
push eax
push dword [ebp - 0x210]
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x204], ebx
call fcn.00463dc2
push ebx
lea ecx, [ebp - 0x230]
call fcn.0046a12e
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2d8]
and dword [ebp - 0x224], 0
push 1
call fcn.00413a5b
mov esi, 0x100
mov byte [ebp - 4], 0x12
push esi
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.0046e020
mov eax, dword [0x4cad64]
add esp, 0xc
mov dword [ebp - 0x210], esi
test eax, eax
jne 0x467d75
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov ebx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
add ebx, esi
mov dword [ebp - 0x114], ecx
cmp ebx, esi
je 0x467d56
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x467d56
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x200], ecx
mov edx, dword [ecx]
mov ecx, 0x1df5be0e
add edx, esi
mov dword [ebp - 0x1fc], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x1ed], cl
test cl, cl
mov ecx, dword [ebp - 0x200]
je 0x467d52
mov cl, byte [ebp - 0x1ed]
mov esi, dword [ebp - 0x1fc]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x467d25
mov dword [ebp - 0x1fc], esi
cmp dword [ebp - 0x1fc], 0xe19fa229
mov esi, dword [eax + 0x18]
je 0x467d5d
mov ecx, dword [ebp - 0x200]
test edi, edi
jne 0x467ced
mov eax, dword [eax]
jmp 0x467cc4
mov eax, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x1c]
add eax, esi
add ecx, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
mov dword [0x4cad64], eax
push 0
lea ecx, [ebp - 0x210]
push ecx
lea ecx, [ebp - 0x110]
push ecx
push 0x13
push dword [ebp - 0x21c]
call eax
test eax, eax
jne 0x467ebc
mov ecx, 0x4c7b58
call fcn.00414142
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
mov dword [ebp - 0x114], edi
cmp edi, edx
je 0x467e36
mov esi, dword [edi + 0x18]
test esi, esi
je 0x467e36
mov eax, dword [edi + 0x20]
lea ebx, [eax + esi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov eax, 0x69bf7d1e
mov ecx, dword [ebx]
dec esi
add ecx, edx
mov dword [ebp - 0x1fc], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x467e2c
mov edi, dword [ebp - 0x1fc]
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x467e02
mov dword [ebp - 0x1fc], edi
cmp dword [ebp - 0x1fc], 0x600ab5a6
mov edi, dword [ebp - 0x114]
je 0x467ea5
test esi, esi
jne 0x467de2
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x200], eax
cmp eax, dword [ebp - 0x204]
je 0x467e52
cmp dword [ecx + 0x18], 0
jne 0x467dbd
xor eax, eax
push 0
call eax
pop ecx
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0xbeb8b1a9
mov dword [ebp - 0x114], 0x100b0b6
call fcn.00413d30
mov ecx, dword [ebp - 0x20c]
lea eax, [ebp - 0x118]
push eax
call fcn.0041437c
lea ecx, [ebp - 0x288]
call fcn.00413a18
lea ecx, [ebp - 0x288]
call fcn.0041409d
jmp 0x4689d6
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x467e54
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x174]
call fcn.0041437c
mov byte [ebp - 4], 0x13
lea edi, [ebp - 0x140]
mov dl, byte [ebp - 0x1ed]
xor eax, eax
mov dword [ebp - 0x144], 0x4b54552e
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
mov esi, dword [0x4cad28]
mov edi, dword [0x4cad2c]
xor ecx, ecx
mov dword [ebp - 0x1f8], ecx
cmp ecx, 0x19
jae 0x4688a5
mov bl, byte [ebp + ecx - 0x144]
movzx eax, bl
mov dword [ebp - 0x1f0], eax
mov bh, bl
cmp esi, ecx
ja 0x46889d
lea eax, [edi + 0x41]
cmp esi, eax
jae 0x467f4b
lea edx, [ecx + 0x5e20e1db]
mov eax, edx
and eax, dword [ebp - 0x1f0]
add eax, eax
sub edx, eax
add edx, dword [ebp - 0x1f0]
add dl, 3
jmp 0x467f75
lea eax, [edi + 1]
cmp esi, eax
je 0x468838
inc eax
cmp esi, eax
je 0x4687ba
lea eax, [edi + 3]
cmp esi, eax
je 0x468783
lea eax, [edi + 4]
cmp esi, eax
je 0x46873b
cmp edi, ecx
ja 0x468895
lea eax, [edi + 0x5a]
cmp esi, eax
jae 0x467fa0
lea edx, [ecx + 0x467ed4df]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub cl, 0x19
jmp 0x468156
lea eax, [edi + 1]
cmp esi, eax
je 0x468729
inc eax
cmp esi, eax
je 0x468711
lea eax, [edi + 3]
cmp esi, eax
je 0x4686cf
lea eax, [edi + 5]
cmp esi, eax
je 0x4686b8
lea eax, [edi + 7]
cmp esi, eax
je 0x4686a3
lea eax, [edi + esi]
cmp eax, ecx
jbe 0x468424
lea eax, [edi + 0xa]
cmp esi, eax
je 0x46840f
lea eax, [edi + 0x64]
cmp esi, eax
je 0x4683ec
lea eax, [edi + 0x2a]
cmp esi, eax
je 0x4683c9
lea eax, [edi + 6]
cmp esi, eax
je 0x4683ad
lea eax, [edi + 0x80]
cmp esi, eax
je 0x468393
lea eax, [edi + 0x7a]
cmp esi, eax
je 0x468376
lea eax, [edi + 3]
cmp esi, eax
je 0x46835a
lea eax, [edi + 0x40]
cmp esi, eax
je 0x468330
lea eax, [edi + 0x400]
cmp esi, eax
je 0x468313
lea esi, [edi + 8]
lea edi, [esi + 0x10]
lea eax, [edi + 0x40]
cmp esi, eax
jb 0x46887e
lea eax, [edi + 0x400]
cmp esi, eax
jb 0x468867
lea eax, [edi + 4]
cmp esi, eax
jb 0x468187
lea eax, [edi + 0x10]
cmp esi, eax
jb 0x468163
lea eax, [edi + 0x1000]
cmp esi, eax
jb 0x46813f
lea eax, [edi + 1]
cmp esi, eax
jb 0x4682f7
lea eax, [edi + 8]
cmp esi, eax
jb 0x4682db
lea eax, [edi + 0x200]
cmp esi, eax
jb 0x4682bf
lea eax, [edi + 0x41]
cmp esi, eax
jb 0x468294
lea eax, [edi + 9]
cmp esi, eax
jb 0x467fe0
lea esi, [edi + 0x20]
lea edi, [esi + 0x42]
lea eax, [edi + 0x200]
cmp esi, eax
ja 0x468276
lea eax, [edi + 2]
cmp esi, eax
ja 0x46825b
lea eax, [edi + 9]
cmp esi, eax
ja 0x46823e
lea eax, [edi + 0x42]
cmp esi, eax
ja 0x468224
lea eax, [edi + 0x5a]
cmp esi, eax
ja 0x46820a
lea eax, [edi + 5]
cmp esi, eax
ja 0x4681ef
lea edx, [edi + 0x64]
cmp esi, edx
ja 0x4681cd
lea eax, [edi + 0x61]
cmp esi, eax
ja 0x4681ab
lea eax, [edi + 0x28]
cmp esi, eax
ja 0x467fe0
mov esi, edx
lea edi, [esi + 0x3e8]
jmp 0x467fe0
lea edx, [ecx + 0x54a921dd]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub cl, 0xb
add dl, cl
mov ecx, dword [ebp - 0x1f8]
jmp 0x467fd5
lea edx, [ecx - 0xf60433d]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub cl, 0x55
add dl, cl
mov ecx, dword [ebp - 0x1f8]
jmp 0x467f75
lea edx, [ecx - 0x7369a857]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
add cl, 0x61
add dl, cl
mov ecx, dword [ebp - 0x1f8]
jmp 0x467f1d
add ecx, 0x9b27f6bc
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub bl, al
sub bl, 0x24
add bl, cl
mov dword [ebp - 0x1f4], ebx
jmp 0x468770
add ecx, 0x371e91a2
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub bl, al
sub bl, 0x6e
add bl, cl
mov dword [ebp - 0x1f4], ebx
jmp 0x468771
lea edx, [ecx - 0x2cead378]
mov cl, 0x24
mov al, dl
and al, byte [ebp - 0x1f0]
sub cl, al
add cl, cl
add cl, bl
jmp 0x4686df
add ecx, 0x6f0bc76e
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub bl, al
sub bl, 2
jmp 0x468791
add ecx, 0xb026254
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub bl, al
sub bl, 0x4c
jmp 0x4686c6
lea edx, [ecx - 0x590702c6]
mov cl, 0x35
mov al, dl
and al, byte [ebp - 0x1f0]
sub cl, al
add cl, cl
add cl, bl
add cl, dl
jmp 0x4687d3
lea edx, [ecx + 0x42ef9820]
mov cl, 0x10
mov al, dl
and al, byte [ebp - 0x1f0]
sub cl, al
add cl, cl
add cl, bl
jmp 0x468347
add ecx, 0xdee63306
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub bl, al
sub cl, 0x2a
add bl, cl
mov dl, bl
jmp 0x46884f
add ecx, 0xe4ceb645
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub bl, al
add bl, 0x1d
add bl, cl
mov dl, bl
mov ecx, dword [ebp - 0x1f8]
mov byte [ebp + ecx - 0x144], dl
jmp 0x468861
lea edx, [ecx - 0x7f3aaed5]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub dl, 0x2d
jmp 0x46849c
lea edx, [ecx + 0x1cbbec11]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub dl, 0x77
jmp 0x468470
lea edx, [ecx - 0x474d7909]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
add cl, 0x3f
jmp 0x46843f
lea edx, [ecx - 0x3593ef4c]
mov cl, 0xa
mov al, dl
and al, byte [ebp - 0x1f0]
sub cl, al
add cl, cl
add cl, bl
add dl, cl
jmp 0x46884f
lea edx, [ecx + 0x6662ab9a]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub dl, 0x36
add cl, dl
mov edx, dword [ebp - 0x1f8]
mov byte [ebp - 0x1f4], cl
jmp 0x468804
lea edx, [ecx + 0x2594680]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub cl, 0x80
jmp 0x468254
lea edx, [ecx - 0x61b01e9a]
mov cl, 0x1b
mov al, dl
and al, byte [ebp - 0x1f0]
sub cl, al
add cl, cl
add cl, bl
add dl, cl
jmp 0x4687a1
add ecx, 0x3a467c4c
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub bl, al
sub bl, 0x14
jmp 0x468791
lea edx, [ecx - 0x29c2e8ce]
mov cl, bl
mov al, dl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub cl, 0x5e
jmp 0x4686df
lea edx, [ecx + 0x7233b218]
mov cl, 0x2c
mov al, dl
and al, byte [ebp - 0x1f0]
sub cl, al
add cl, cl
add cl, bl
add cl, dl
mov byte [ebp - 0x1f4], cl
jmp 0x468771
lea edx, [ecx + 0xe2a4cfe]
mov cl, 7
mov al, dl
and al, byte [ebp - 0x1f0]
sub cl, al
add cl, cl
add cl, bl
add cl, dl
mov byte [ebp - 0x1f4], cl
jmp 0x468770
lea edx, [ecx - 0x1c]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
sub cl, 0x3c
jmp 0x46874b
lea eax, [edi + 0x61]
cmp esi, eax
jae 0x4684c5
lea edx, [ecx - 0x73]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
add cl, 0x25
add dl, cl
mov ecx, dword [ebp - 0x1f8]
lea eax, [edi + esi]
cmp eax, 0x400
je 0x468691
lea eax, [edi + 0x7a]
cmp esi, eax
jbe 0x468531
lea edx, [ecx - 0x19]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
sub dl, 0x51
add dl, cl
cmp esi, 0x41
jae 0x468671
lea ecx, [edi + 1]
cmp esi, ecx
jbe 0x4685b9
mov dl, byte [ebp - 0x1f8]
mov al, bl
add dl, 0x78
mov cl, bl
and al, dl
add al, al
sub cl, al
sub dl, 0x48
add dl, cl
cmp edi, 2
jb 0x4682ad
mov dl, byte [ebp - 0x1f8]
mov al, bl
add dl, 0x7c
mov cl, 0xe
and al, dl
sub cl, al
add cl, cl
add cl, bl
add cl, dl
add cl, cl
jmp 0x46874d
lea eax, [edi + 1]
cmp esi, eax
jne 0x4684df
add cl, 0x70
mov al, bl
and al, cl
add al, al
sub bl, al
sub cl, 0x10
jmp 0x46828b
inc eax
cmp esi, eax
jne 0x4684f9
lea edx, [ecx - 0x5c]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
sub cl, 0x7c
jmp 0x468254
lea eax, [edi + 3]
cmp esi, eax
jne 0x468513
mov al, bl
sub cl, 0x42
and al, cl
add al, al
sub bl, al
sub bl, 0x32
jmp 0x4686c6
lea eax, [edi + 4]
cmp esi, eax
jne 0x468447
mov al, bl
add cl, 0xc
and al, cl
add al, al
sub bl, al
sub bl, 0x54
jmp 0x46871f
lea eax, [edi + 1]
cmp esi, eax
jne 0x46854d
lea edx, [ecx + 1]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
sub cl, 7
jmp 0x46874b
lea eax, [edi + 3]
cmp esi, eax
jne 0x468567
mov al, bl
add cl, 0x35
and al, cl
add al, al
sub bl, al
sub bl, 0x73
jmp 0x46871f
lea eax, [edi + 2]
cmp esi, eax
jne 0x468581
mov al, bl
add cl, 0x69
and al, cl
add al, al
sub bl, al
add bl, 0x21
jmp 0x468791
lea eax, [edi + 5]
cmp esi, eax
jne 0x46859b
mov al, bl
sub cl, 0x7d
and al, cl
add al, al
sub bl, al
add bl, 0x6b
jmp 0x4686c6
lea eax, [edi + 9]
cmp esi, eax
jne 0x468472
sub cl, 0x2f
mov al, bl
and al, cl
add al, al
sub bl, al
add cl, 0x49
jmp 0x46828b
jne 0x4685cf
mov dl, byte [ebp - 0x1f8]
mov al, bl
sub dl, 0x6e
mov cl, 1
and al, dl
jmp 0x468323
lea eax, [edi + 3]
cmp esi, eax
jne 0x4685f1
mov dl, byte [ebp - 0x1f8]
mov al, bl
sub dl, 0x3a
mov cl, bl
and al, dl
add al, al
sub cl, al
sub cl, 0x6a
jmp 0x468254
lea eax, [ecx + 1]
cmp esi, eax
jne 0x468611
mov cl, byte [ebp - 0x1f8]
mov al, bl
sub cl, 0x20
and al, cl
add al, al
sub bl, al
sub bl, 0x20
jmp 0x4686c6
lea eax, [edi + 6]
cmp esi, eax
jne 0x468631
mov cl, byte [ebp - 0x1f8]
mov al, bl
add cl, 0x2e
and al, cl
add al, al
sub bl, al
sub bl, 0x42
jmp 0x46871f
lea eax, [edi + 5]
cmp esi, eax
jne 0x46864c
mov dl, byte [ebp - 0x1f8]
mov al, bl
add dl, 0x48
mov cl, 4
and al, dl
jmp 0x4683fc
lea eax, [edi + 8]
cmp esi, eax
jne 0x46849e
mov dl, byte [ebp - 0x1f8]
mov al, bl
add dl, 0x62
mov cl, 0x29
and al, dl
sub cl, al
add cl, cl
add cl, bl
jmp 0x46874b
mov ecx, dword [ebp - 0x1f8]
mov al, bl
lea edx, [ecx - 0x6a]
mov cl, byte [ebp + ecx - 0x144]
and al, dl
add al, al
sub cl, al
sub cl, 0x1a
jmp 0x468203
lea edx, [ecx - 0x50]
mov al, bl
and al, dl
mov cl, 0x18
sub cl, al
add cl, cl
jmp 0x468254
lea edx, [ecx - 0x6b]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
sub cl, 0x13
jmp 0x468254
mov al, bl
add cl, 0x7b
and al, cl
add al, al
sub bl, al
sub bl, 0x5d
add bl, cl
mov dl, bl
jmp 0x4687a1
lea edx, [ecx + 0x47]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
add cl, 0xf
add cl, dl
mov byte [ebp - 0x1f4], cl
mov edx, dword [ebp - 0x1f8]
lea ecx, [edx + 0x23]
mov al, cl
and al, bl
add al, al
sub cl, al
add cl, bl
mov ebx, dword [ebp - 0x1f4]
add cl, 0xb
add cl, bl
mov byte [ebp + edx - 0x144], cl
jmp 0x468799
mov al, bl
add cl, 0x2d
and al, cl
add al, al
sub bl, al
sub bl, 0x3b
add bl, cl
mov byte [ebp - 0x1f4], bl
jmp 0x468771
lea edx, [ecx - 7]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
add cl, 0x31
jmp 0x46874b
lea edx, [ecx - 0x3b]
mov al, bl
and al, dl
mov cl, bl
add al, al
sub cl, al
sub cl, 0x63
add cl, dl
mov byte [ebp - 0x1f4], cl
mov edx, dword [ebp - 0x1f8]
lea ecx, [edx + 9]
mov al, cl
and al, bl
add al, al
sub cl, al
sub cl, 0x3f
add cl, bl
mov byte [ebp + edx - 0x144], cl
inc edi
mov ecx, dword [ebp - 0x1f8]
mov edx, dword [ebp - 0x1f4]
dec ecx
jmp 0x468861
mov al, bl
add cl, 0x5d
and al, cl
add al, al
sub bl, al
add bl, 0x75
add bl, cl
mov byte [ebp - 0x1f4], bl
mov edx, dword [ebp - 0x1f4]
add esi, edi
or ecx, 0xffffffff
movzx eax, dl
sub ecx, eax
add dword [ebp - 0x1f8], ecx
mov ecx, dword [ebp - 0x1f8]
jmp 0x468861
add ecx, 0x8a3d1129
mov bl, bh
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
sub cl, 0x1f
add cl, bh
mov byte [ebp - 0x1f4], cl
mov edx, dword [ebp - 0x1f8]
lea ecx, [edx + 0x3d]
mov al, cl
and al, bl
add al, al
sub cl, al
add cl, 0x55
add cl, bl
inc edi
movzx eax, cl
add eax, edi
mov byte [ebp + edx - 0x144], cl
sub edx, eax
mov dword [ebp - 0x1f8], edx
sub dl, 0x36
mov cl, 0x3d
mov al, dl
and al, bl
sub cl, al
mov eax, dword [ebp - 0x1f8]
add cl, cl
add cl, dl
mov edx, dword [ebp - 0x1f4]
add cl, bl
inc esi
mov byte [ebp + eax - 0x144], cl
or eax, 0xffffffff
mov ecx, dword [ebp - 0x1f8]
sub eax, esi
add ecx, eax
jmp 0x468855
add ecx, 0xc22a46f5
mov al, cl
and al, byte [ebp - 0x1f0]
add al, al
sub cl, al
add cl, bh
lea edx, [ecx + 0x4d]
mov ecx, dword [ebp - 0x1f8]
movzx eax, byte [ebp + ecx - 0x144]
add eax, edi
add ecx, eax
inc ecx
jmp 0x467efe
mov al, bl
sub cl, 0x71
and al, cl
add al, al
sub bl, al
add bl, 0x17
add bl, cl
mov dl, bl
jmp 0x467efc
mov al, bl
add cl, 0x75
and al, cl
add al, al
sub bl, al
sub bl, 0x33
add bl, cl
mov dl, bl
jmp 0x467ef0
mov edi, dword [ebp + 0x14424c6]
jmp 0x4688ab
mov edi, dword [ebp + 0xc8d753]
jmp 0x4688ab
mov edi, dword [ebp - 0x144]
push 0xa
xor edx, edx
lea ecx, [ebp - 0x174]
call fcn.00402319
pop ecx
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x12
mov esi, eax
call fcn.004151f6
cmp esi, edi
je 0x468a10
mov ecx, 0x4c7b58
call fcn.00414142
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
mov dword [ebp - 0x114], edi
cmp edi, edx
je 0x468977
mov esi, dword [edi + 0x18]
test esi, esi
je 0x468977
mov eax, dword [edi + 0x20]
lea ebx, [eax + esi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov eax, 0x5556180d
mov ecx, dword [ebx]
dec esi
add ecx, edx
mov dword [ebp - 0x1fc], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x46896d
mov edi, dword [ebp - 0x1fc]
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46893f
mov dword [ebp - 0x1fc], edi
cmp dword [ebp - 0x1fc], 0x8d96886d
mov edi, dword [ebp - 0x114]
je 0x468cb0
test esi, esi
jne 0x46891f
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x200], eax
cmp eax, dword [ebp - 0x204]
je 0x468993
cmp dword [ecx + 0x18], 0
jne 0x4688fa
xor eax, eax
push 0
call eax
pop ecx
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0xbeb8b1a9
mov dword [ebp - 0x114], 0x100b0b6
call fcn.00413d30
mov ecx, dword [ebp - 0x20c]
lea eax, [ebp - 0x118]
push eax
call fcn.0041437c
lea ecx, [ebp - 0x2d8]
call fcn.00403e14
lea ecx, [ebp - 0x230]
call fcn.00415138
lea ecx, [ebp - 0x220]
call fcn.00468f5b
lea ecx, [ebp - 0x218]
call fcn.00468f5b
lea ecx, [ebp - 0x23c]
call fcn.0041515b
mov eax, dword [ebp - 0x20c]
call fcn.0046c79c
ret 8
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x114], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x114], ecx
cmp ecx, esi
je 0x468a97
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x468a97
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea ebx, [ebx - 4]
mov ecx, 0xa78f6375
mov edx, dword [ebx]
dec edi
add edx, esi
mov dword [ebp - 0x1fc], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x468a93
mov esi, dword [ebp - 0x1fc]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x468a6c
mov dword [ebp - 0x1fc], esi
cmp dword [ebp - 0x1fc], 0x682a6a36
mov esi, dword [eax + 0x18]
je 0x468a9b
test edi, edi
jne 0x468a4c
mov eax, dword [eax]
jmp 0x468a1c
mov eax, dword [ebp - 0x114]
mov ebx, dword [ebp - 0x204]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x224]
push ecx
push ebx
push dword [ebp - 0x230]
add eax, esi
push dword [ebp - 0x21c]
call eax
test eax, eax
je 0x468b3f
mov edi, dword [ebp - 0x224]
test edi, edi
je 0x468b9c
push dword [ebp - 0x210]
mov esi, dword [ebp - 0x230]
lea ecx, [ebp - 0x15c]
call fcn.00416509
push edi
push esi
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x14
call fcn.00416597
lea edx, [ebp - 0x15c]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2d8]
call fcn.00415f99
push fcn.0046a076
mov ecx, eax
call fcn.00468fee
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x12
call fcn.004151f6
jmp 0x468a10
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x468bec
mov esi, dword [0x4c7b50]
lea eax, [ebp - 0x1ed]
push eax
push dword [ebp - 0x210]
lea ecx, [ebp - 0x128]
add esi, ebx
call fcn.00463dc2
push esi
lea ecx, [ebp - 0x128]
call fcn.0046a12e
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x230]
call fcn.00469118
lea ecx, [ebp - 0x128]
call fcn.00415138
jmp 0x468a10
mov esi, dword [ebp - 0x20c]
lea ecx, [ebp - 0x2d4]
push esi
call fcn.00414ea4
lea ecx, [ebp - 0x2d8]
call fcn.00403e14
lea ecx, [ebp - 0x230]
call fcn.00415138
lea ecx, [ebp - 0x220]
call fcn.00468f5b
lea ecx, [ebp - 0x218]
call fcn.00468f5b
lea ecx, [ebp - 0x23c]
call fcn.0041515b
mov eax, esi
jmp 0x468a08
mov ecx, 0x4c7b58
call fcn.00414142
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
mov dword [ebp - 0x114], edi
cmp edi, edx
je 0x468c8b
mov esi, dword [edi + 0x18]
test esi, esi
je 0x468c8b
mov eax, dword [edi + 0x20]
lea ebx, [eax + esi*4]
add ebx, edx
lea ebx, [ebx - 4]
mov eax, 0x6f499bd4
mov ecx, dword [ebx]
dec esi
add ecx, edx
mov dword [ebp - 0x1fc], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x468c81
mov edi, dword [ebp - 0x1fc]
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x468c57
mov dword [ebp - 0x1fc], edi
cmp dword [ebp - 0x1fc], 0x33d87fe4
mov edi, dword [ebp - 0x114]
je 0x468cb0
test esi, esi
jne 0x468c37
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x200], eax
cmp eax, dword [ebp - 0x204]
je 0x468993
cmp dword [ecx + 0x18], 0
jne 0x468c12
jmp 0x468993
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x468995