Function at 0x465610
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x53d53f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
push edi
mov edi, ecx
push esi
mov dword [esp + 0x6c], edi
call fcn.004c7500
add esp, 4
test eax, eax
jne 0x466795
mov ebp, dword [esi + 1]
inc esi
push ebp
call fcn.004cfba0
add esp, 4
cmp eax, 0x5000000
jne 0x466785
cmp ebp, 0x500fffe
je 0x466785
lea eax, [edi + 0xc0]
add esi, 4
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xc8], esi
call fcn.004374c0
mov dword [esp + 0x1c], 0x547f50
xor esi, esi
push ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0x94], esi
call fcn.004cfb80
mov ebx, eax
mov eax, dword [esp + 0xc4]
add esp, 4
cmp ebx, esi
je 0x465742
cmp ebx, 0x10000000
je 0x4656e3
cmp ebx, 0x20000000
jne 0x4658d2
cmp eax, esi
je 0x4658d2
lea esi, [eax + 0x14]
mov edi, 1
jmp 0x465751
cmp eax, esi
je 0x4658d2
mov edx, dword [eax + 8]
lea ecx, [esp + 0x94]
push esi
push ecx
push edx
lea ecx, [edi + 0x2cc]
call fcn.004d0460
test eax, eax
je 0x4658d2
mov ecx, dword [esp + 0x94]
cmp dword [ecx + 0x44], esi
je 0x465738
lea eax, [esp + 0x1c]
push esi
push eax
call fcn.004cbf40
lea esi, [esp + 0x1c]
mov dword [esp + 0x90], 1
mov edi, 3
jmp 0x465751
lea esi, [ecx + 0xc]
mov edi, 3
jmp 0x465751
mov ecx, dword [esp + 0x68]
mov edi, 4
lea esi, [ecx + 0x290]
lea edx, [esp + 0x14]
mov ecx, esi
push edx
push 0
push ebp
call fcn.004cfd40
test eax, eax
mov dword [esp + 0x3c], eax
jne 0x4657af
cmp ebx, 0x20000000
jne 0x465796
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x14]
push ecx
push 0
lea esi, [eax + 0x34]
push ebp
mov ecx, esi
call fcn.004cfd40
test eax, eax
mov dword [esp + 0x3c], eax
mov edi, 2
jne 0x4657af
mov edx, dword [esp + 0x68]
push 0x585248
lea ecx, [edx + 0x964]
call fcn.00514473
jmp 0x4658d2
lea ecx, [esp + 0x40]
call fcn.00470b30
mov eax, dword [esp + 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
mov byte [esp + 0xb0], 1
je 0x4658eb
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x68]
push 0
lea eax, [esp + 0x14]
mov edx, dword [ebp + 0x4ac]
push 4
add ecx, 8
push eax
push ecx
push edx
call ebx
test eax, eax
je 0x4658b9
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4658b9
mov edx, dword [0x5923bc]
push 0
lea ecx, [esp + 0x14]
push 4
push ecx
push eax
push edx
call ebx
test eax, eax
je 0x4658b9
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4658b9
mov ecx, eax
mov eax, dword [esp + 0x14]
add ecx, 4
xor ebx, ebx
test eax, eax
mov dword [esp + 0x10], ecx
jle 0x46588d
push 0
push ebx
mov ecx, esi
call fcn.004cfc50
mov edi, eax
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x14]
push eax
call fcn.00471980
add esp, 4
test eax, eax
jne 0x465884
mov eax, dword [edi]
test eax, eax
jne 0x465870
mov eax, 0x80000301
add edi, 6
lea ecx, [ebp + 0xc0]
push edi
push eax
call fcn.0040e120
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x465844
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004c72a0
add esp, 4
mov ecx, ebp
push eax
call fcn.00465500
jmp 0x465920
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], 0x5477b0
call fcn.00470d30
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], 0xffffffff
call fcn.00401e70
jmp 0x466795
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x40]
push eax
mov eax, dword [esp + 0xc0]
push ecx
mov ecx, dword [esp + 0xc8]
push edx
mov edx, dword [esp + 0xc4]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x80]
push edx
push edi
call fcn.00465340
lea ecx, [esp + 0x54]
mov dword [esp + 0x10], eax
call fcn.00470b30
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
call fcn.00470b30
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xb0], 3
cmp ecx, eax
mov eax, dword [esp + 0x50]
je 0x465ed4
mov edx, dword [esp + 0xc4]
mov bl, byte [edx]
cmp bl, 0x37
je 0x465ed4
mov ebp, dword [esp + 0x68]
xor edi, edi
push edi
lea eax, [esp + 0x14]
push 4
push eax
mov esi, ecx
push ecx
mov ecx, dword [ebp + 0x4ac]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x466707
cmp dword [esp + 0x10], edi
je 0x466707
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edx
push eax
mov dword [esp + 0x40], eax
call fcn.004c72a0
add esp, 4
cmp bl, 0x39
jne 0x465c3f
cmp eax, edi
jne 0x465f92
mov edx, dword [esp + 0x18]
push edx
call fcn.004dc2d0
mov esi, eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004db4a0
add esp, 8
cmp esi, 2
mov edi, eax
jne 0x4659fd
cmp edi, 1
je 0x4659fd
cmp edi, 3
je 0x4659fd
mov esi, 1
mov ecx, dword [esp + 0xc4]
cmp esi, 2
mov ebx, dword [ecx + 1]
jne 0x465b62
push 1
lea edx, [esp + 0x1c]
push 1
push edx
lea ecx, [ebp + 0xc0]
call fcn.004465f0
cmp edi, 1
push 0
jne 0x465a57
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x274]
call fcn.004d0460
test eax, eax
je 0x465ffe
mov edx, dword [esp + 0x94]
lea edi, [edx + 0xc]
jmp 0x465aaa
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x9c]
push eax
push ecx
lea ecx, [ebp + 0x2cc]
call fcn.004d0460
test eax, eax
je 0x465ffe
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], 0
call fcn.00470d30
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x1c]
push 0
push edx
call fcn.004cbf40
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x1c]
add eax, 4
mov dword [esp + 0x10], eax
test edi, edi
je 0x465ffe
lea eax, [esp + 0x14]
mov ecx, edi
push eax
push 0
push ebx
call fcn.004cfd40
mov ecx, dword [esp + 0x14]
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x3c], eax
jle 0x465b1c
push 0
push ebx
mov ecx, edi
call fcn.004cfc50
mov edx, dword [edi]
mov esi, eax
push esi
mov ecx, edi
call dword [edx + 0x14]
push eax
call fcn.00471980
add esp, 4
test eax, eax
jne 0x465b0f
mov eax, dword [esi]
test eax, eax
jne 0x465afb
mov eax, 0x80000301
add esi, 6
lea ecx, [ebp + 0xc0]
push esi
push eax
call fcn.0040e120
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x465acf
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004c72a0
add esp, 4
mov ecx, ebp
push eax
call fcn.00465500
mov ecx, eax
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x465ecc
cmp esi, 3
jne 0x46613a
mov eax, dword [esp + 0x18]
xor edi, edi
push edi
push eax
lea ecx, [ebp + 0xc0]
call fcn.0044e840
cmp eax, edi
je 0x4660de
cmp dword [eax + 0x30], edi
jle 0x4660de
test dword [eax + 0x14], 0x800000
jne 0x4660de
mov esi, dword [eax + 0x34]
lea edx, [ebx - 1]
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 0x30]
cmp edx, ecx
jge 0x466072
mov ecx, dword [esp + 0x10]
cmp edx, edi
jl 0x465c25
mov eax, dword [esi]
mov ebx, eax
shr ebx, 0x10
jne 0x465bd3
mov ebx, dword [esp + 0x18]
and eax, 0xffff
shr ebx, 0x10
shl ebx, 0x10
or eax, ebx
cmp edi, edx
jne 0x465bff
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [esi + 4]
push ecx
push eax
call fcn.004c72a0
add esp, 4
mov ecx, ebp
push eax
call fcn.00465500
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x465c1c
mov ecx, dword [esi + 4]
push ecx
push eax
lea ecx, [ebp + 0xc0]
call fcn.0040e120
mov ecx, dword [esp + 0x10]
add ecx, eax
add esi, 0x1c
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x14]
inc edi
cmp edi, edx
jle 0x465bb9
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x465ecc
cmp bl, 0x3a
jne 0x4666ae
cmp eax, edi
jne 0x465c89
cmp dword [esp + 0x18], 0x80000005
jne 0x46619e
lea edx, [esp + 0x40]
mov ecx, ebp
push edx
push esi
call fcn.00465560
test eax, eax
je 0x46620a
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
neg eax
sbb eax, eax
mov dword [esp + 0x18], 0x80000101
and eax, ecx
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc4]
xor eax, eax
mov dword [esp + 0x64], eax
cmp byte [ecx], 0x3a
jne 0x465dc3
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
mov ebx, ecx
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x21
je 0x465d1c
cmp al, 0x38
je 0x465cdf
cmp al, 0x3b
jne 0x466266
mov edx, dword [ebx + 1]
lea ecx, [esp + 0x54]
push edx
call fcn.00470df0
add ebx, 5
mov dword [esp + 0xc4], ebx
jmp 0x465db0
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00470d30
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x6c]
push eax
push ebx
push edi
push ecx
push esi
mov ecx, ebp
call fcn.004667c0
test eax, eax
je 0x4662ca
push ebx
call fcn.004c72c0
add esp, 4
jmp 0x465d56
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00470d30
mov eax, dword [esp + 0xbc]
lea edx, [esp + 0x6c]
inc ebx
push edx
push ebx
push edi
push eax
push esi
mov ecx, ebp
call fcn.00464e30
test eax, eax
je 0x46632e
mov ecx, ebx
call fcn.004c7bc0
add ebx, eax
mov eax, dword [esp + 0x6c]
test eax, eax
mov dword [esp + 0xc4], ebx
jne 0x466392
mov ecx, dword [esp + 0x78]
push ecx
call fcn.004cfbf0
add esp, 4
test eax, eax
je 0x466392
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0xa0]
lea eax, [esp + 0x70]
push edx
push eax
push 0x80000301
push ecx
call fcn.004dd7e0
mov edx, dword [esp + 0xb0]
add esp, 0x10
lea ecx, [esp + 0x54]
push edx
call fcn.00470df0
cmp byte [ebx], 0x3a
je 0x465caf
mov eax, dword [esp + 0x64]
xor ebx, ebx
cmp eax, ebx
jne 0x465dc9
xor ebx, ebx
xor edx, edx
jmp 0x465dcd
mov edx, dword [esp + 0x5c]
shr eax, 2
mov edi, eax
je 0x46663e
cmp edi, 0x7f
jge 0x46663e
cmp edi, 1
je 0x465e52
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov al, byte [ecx]
cmp edi, eax
jne 0x466406
cmp edi, 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x90], 1
jl 0x465e9b
lea ebx, [edi - 1]
lea esi, [ecx + 5]
mov eax, dword [edx]
add edx, 4
dec eax
mov dword [esp + 0x9c], edx
test eax, eax
jle 0x465e7a
cmp eax, dword [esi - 4]
mov ecx, esi
jge 0x466556
test ebx, ebx
jle 0x465e4c
mov edx, ebx
mov ebp, dword [ecx]
add ecx, 4
imul eax, ebp
dec edx
jne 0x465e36
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x68]
add dword [esp + 0x14], eax
jmp 0x465e80
mov edx, dword [edx]
dec edx
mov dword [esp + 0x14], edx
js 0x466476
mov eax, dword [esp + 0x3c]
push eax
call fcn.004c7260
mov ecx, dword [esp + 0x18]
add esp, 4
cmp ecx, eax
jge 0x4664e6
jmp 0x465e9b
jl 0x4665ca
mov eax, dword [esp + 0x90]
add esi, 4
inc eax
dec ebx
cmp eax, edi
mov dword [esp + 0x90], eax
jle 0x465e14
mov edx, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
push edx
call fcn.0040e150
imul eax, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
xor ecx, ecx
mov cl, byte [edx]
mov edx, dword [esp + 0x10]
add eax, edx
lea ecx, [eax + ecx*4 + 4]
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x50], eax
test ecx, ecx
jne 0x465960
mov edx, dword [esp + 0xc8]
test edx, edx
je 0x465ee5
mov esi, dword [esp + 0x18]
mov dword [edx], esi
mov esi, dword [esp + 0xcc]
test esi, esi
je 0x465f09
mov edi, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edi
push eax
call fcn.004c72a0
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [esi], eax
mov edi, ecx
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0x19
mov dword [esp + 0x20], 0
call fcn.00470d30
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00470d30
mov eax, edi
jmp 0x466797
push 0x585238
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 5
jmp 0x46675e
push 0x585218
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 7
mov dword [esp + 0x20], 0
jmp 0x466762
push 0x585238
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 9
jmp 0x46675e
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0xa
jmp 0x46675e
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0xb
mov dword [esp + 0x20], 0
jmp 0x466762
push 0x585204
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0xc
jmp 0x46675e
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0xd
jmp 0x46675e
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x10
mov dword [esp + 0x20], 0
jmp 0x466762
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0xe
mov dword [esp + 0x20], 0
jmp 0x466762
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0x20], 0
jmp 0x466762
push 0x5851e0
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x11
mov dword [esp + 0x20], 0
jmp 0x466762
push 0x5851c0
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x13
mov dword [esp + 0x20], ebx
jmp 0x466762
push 0x5851a0
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x14
mov dword [esp + 0x20], ebx
jmp 0x466762
push 0x585188
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x15
mov dword [esp + 0x20], ebx
jmp 0x466762
push 0x585188
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x16
mov dword [esp + 0x20], 0
jmp 0x466762
push 0x5851a0
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x17
mov dword [esp + 0x20], 0
jmp 0x466762
push 0x585178
lea ecx, [ebp + 0x964]
call fcn.00514473
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x12
mov dword [esp + 0x20], ebx
jmp 0x466762
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 0x18
jmp 0x46675e
mov esi, 0x5477b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00470d30
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00470d30
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00470d30
mov dword [esp + 0x1c], 0x5477b4
mov dword [esp + 0xb0], 4
mov dword [esp + 0x20], edi
lea ecx, [esp + 0x24]
call fcn.00470d30
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00470d30
jmp 0x466795
push 0x585164
lea ecx, [edi + 0x964]
call fcn.00514473
xor eax, eax
mov ecx, dword [esp + 0xa8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa4
ret 0x18